Source [Release] NosTale PacketLogger — Qt/PolyHook Base with TCP Server

[byte_corvus]

Anyone still digging into NosTale knows the struggle with old, broken loggers that don't save filters or crash when things get spicy. I found a solid build that actually holds up, built on the Qt framework and PolyHook 2.0.

This isn't just a basic logger—it includes a TCP server feature that essentially acts as a proxy, allowing you to hook up external scripts in Python, AutoIt, or whatever language you prefer to manipulate game traffic in real-time.

Core Features

1. Full Send/Recv packet logging with mouse-over inspection.
2. Persistent filtering—no more re-entering your ignore list every time you restart.
3. Integrated TCP Server: Communicate with the client from external apps.
4. Pattern-based hooks for better stability across different game versions (including Vendetta).

Technical Breakdown for Developers
The TCP Proxy Logic
Small TCP server running inside the logger allows you to connect as many clients as you want. All packets follow the standard NosTale space-splitted format. The first byte defines the direction: 0 for receive, 1 for send.

// Logical structure for external handling
packet = receiveFromPacketLogger();
splitted = split(packet, ' ');
type = splitted[0]; // 0 = Recv, 1 = Send
header = splitted[1];

// Sending back to manipulate traffic
sendPacket = "1 walk 22 33 1";
sendToPacketLogger(sendPacket);

Spoiler: Python Snippet - Port Finder

If you're automating your setup, use this to grab the active logger ports from the process:

from typing import List
from psutil import process_iter, AccessDenied, Process

def get_nostale_packet_logger_ports() -> List[int]:
    processes = [p for p in process_iter() if "NostaleClientX.exe" in p.name()]
    ports = []
    for process in processes:
        for connection in process.connections():
            if connection.laddr and connection.laddr.ip == "127.0.0.1":
                ports.append(connection.laddr.port)
    return ports

Setup & Deployment

1. Drop all files from the PacketLogger archive directly into your NosTale directory.
2. Inject PacketLogger.dll using your preferred method.
3. If you hit injection errors, make sure your VC Redists are updated and Secure Boot is handled if your injector requires it.

Reversing & Source Notes
Found the build repository on GitLab -

You cant view this link please login.

It utilizes PolyHook 2.0 for the internal detours and Qt for the UI. If you plan to compile this yourself, you'll need the Qt environment set up correctly—don't expect a hand-holding guide for that, just use Google.

Spoiler: Version History

- Fixed pattern of recv function and encoding issues.
- Added TCP Server for cross-process communication.
- Updated patterns for private server compatibility (Vendetta).
- Fixed pointers and UI marking for selected packets.

Note: Since this relies on internal hooks, always test on a burner account first. While it's more stable than older pastes, any DLL injection carries a risk depending on the current state of the AC.

Anyone got a working structure dump for the latest packets?