DarkBlizz

QuoteNow I'm no brainiac at this stuff, & what I'm saying may becompletely wrong... But what if the file you are tinkering with isn'tthe correct file? I played WOTLK before it was released, on a privateserver it was way to easy. I think they may try to make this oneharder. Now you say that it keeps connecting to there server even afteryou put yours in. What if they hid the actual file somewhere else thatconnects to the server and the one that you guys are messing with isjust a decoy? Again I may be completely off but just trying to help outanyway possible!! Hope all is going well!!

we do not "tinkering" with any files, but just trying to understand the language of 'em

QuoteBad server means the you use US client, but send EU auth data, I'm currently downloading EU client to test it...

are you sure ?? I just replicating the data that the real server sends which mean that i would get a "bad server" respond even when i connect to real-bnet, and thats not the case.

//Auth C->S
// 52 bytes + username in plain text username: er@er.er
// protocolID 0x40?
0x40, 0x00, 0x00, 0x0a, 0x66, 0x02, 0x0a, 0xed,
0x2d, 0x66, 0xad, 0xca, 0xaa, 0x0b, 0x01, 0x00,
0x29, 0x99, 0x46, 0xb0, 0xb6, 0xb2, 0x01, 0x00,
0x1b, 0x21, 0x01, 0x00, 0x29, 0x99, 0x00, 0x2b,
0xb4, 0xb7, 0x00, 0x00, 0x1b, 0x21, 0x43, 0x37,
0x32, 0xba, 0x00, 0x2b, 0xb4, 0xb7, 0x00, 0x00,
//
//                    l---------l different depending of usernamelength ( format? )   
//                    l         l        e     r       @       e
0x21, 0xf9, 0x02, 0x05, 0x65, 0x72, 0x40, 0x65,
//  r         .       e       r
0x72, 0x2e, 0x65, 0x72

//Auth S->C
//protocolID 0x42?
//                   a         u       t         h                 U
0x42, 0x10, 0x61, 0x75, 0x74, 0x68, 0x00, 0x55,
//S         B
0x53, 0x42, 0x8f, 0x52, 0x90, 0x6a, 0x2c, 0x85,
// session key?? password?? crap??
0xb4, 0x16, 0xa5, 0x95, 0x70, 0x22, 0x51, 0x57,
0x0f, 0x96, 0xd3, 0x52, 0x2f, 0x39, 0x23, 0x76,
.....and so on....( 919 byte )

C-> Bad server..
This is as far as i know...
How can the client determine that my program is a bad server?? it sends exactly the same data as i captured in wireshark.

MADCATX, are you reading the package header/information or just sending what you captured with wireshark without knowing what it means? Can you please post what you know about the protocol here.