DDO Connections from WITHIN dndclient.exe :: see for yourself using NetLimiter

[Duskslayer]

http://i61.tinypic.com/3wqc7.jpg



Greets.

In the forums discussions yesterday, someone mentioned Netlimiter software to "see behind the curtains" and to mute the Akamai connections.

So I installed it, and after denying access to the Akamai "optional" software, I was surprised to see some strange IP connections made from WITHIN the DDO client dndclient.exe itself (shown above).

You can WhoIs the IP's to see where the DDO client is sending our info all the time without our knowledge.

I would recommend buying Netlimiter ( http://www.netlimiter.com ), and discovering by yourself where all your daily usage software is beaming its data to.

Hope this helps.

[Firepants]

Ooh! Block them all and then file a ticket with support!

[rimble]

Wait a minute...download and install a third party networking tool to monitor a third party networking tool?! I can't...I don...gah...*HEAD EXPLODES*

Kidding, that looks great, will play with it some.

[Duskslayer]

Ooh! Block them all and then file a ticket with support!

The Devs themselves are sending those packets - filing a ticket wont help. Blocking any of those coeections (I have tried) leads to disconnect from server after 5 minutes of latency error.


Wait a minute...download and install a third party networking tool to monitor a third party networking tool?! I can't...I don...gah...*HEAD EXPLODES*

Kidding, that looks great, will play with it some.

If you WhoIS the IP's, you will see some of the IP's belong to:
Turbine
Google
Akamai
Fuze ??
etc. They keep changing over time.

So even if we disable/block Akamai client externally - DDO still sends out the data to Akamai and other spy companies.

Even Big Brother has access to all our chat logs and "money laundering" trades as well.

[Nestroy]

The Devs themselves are sending those packets - filing a ticket wont help. Blocking any of those coeections (I have tried) leads to disconnect from server after 5 minutes of latency error.



If you WhoIS the IP's, you will see some of the IP's belong to:
Turbine
Google
Akamai
Fuze ??
etc. They keep changing over time.

So even if we disable/block Akamai client externally - DDO still sends out the data to Akamai and other spy companies.

Even Big Brother has access to all our chat logs and "money laundering" trades as well.


So you basically tell us that Turbine already sold out our internet souls ^^. How nice.

[Banaticus]

So I installed it, and after denying access to the Akamai "optional" software, I was surprised to see some strange IP connections made from WITHIN the DDO client dndclient.exe itself (shown above)..
So it's not just a matter of waiting for the next update to be able to log back into DDO after a few years away (and having the bad luck to try to resume DDO about a week after this Akamai thing was added), I basically shouldn't play DDO ever. Geeze, Turbine. You're making it really difficult for me to justify giving you any money.

[Flavilandile]

Some ( most ) of them looks normal for me :

- the 74.201.0.0/16 range is Turbine.

I know from my ( old ) wireshark trace that ddo talks to the following people :

- Akamai ( various servers in two different ranges for me in the 90.84.55./24 and in the 2.16.121.0/24 remember Akamai is regionalized, so it might change with your location )
- Playspan ( 4.53.19.0/24 )
- Google ( 173.194.0.0/16 )
- fuzeqna ( 66.150.167.0/24 )

I could give you the detail of what is exchanged, but it would break the TOS. ( I'm already bending the TOS quite a bit with the above )

Edit : Please note that my trace is more than a year old, so no akamai netsession was involved ( that's to stop all the conspiracy theories )... the transmissions towards the akamai servers are fully legit. ( see above as to why I don't post the packet content )

[Banaticus]

Please note that my trace is more than a year old, so no akamai netsession was involved ( that's to stop all the conspiracy theories )... the transmissions towards the akamai servers are fully legit. ( see above as to why I don't post the packet content )
Why would it in any way be legit for the launcher itself (independent of any akamai netsession) to be sending info to the akamai servers?

[Flavilandile]

Why would it in any way be legit for the launcher itself (independent of any akamai netsession) to be sending info to the akamai servers?

You didn't parse this whole thread correctly, so I'm going to put it in plain English :

What I was talking about is for the dndclient.exe as shown in the screenshots linked in the opening post. It absolutely does not concern the game launcher.
Well the game launcher at that time did contact an Akamai server... to get the Launcher Alerts. ( it's a highly dangerous kind of traffic )

I can certify that all the traffic from the dndclient.exe toward Akamai at that time is fully legit.... No I won't give details, for the simple reason that it's against the TOS.
( and I've already bent them into pretzels by playing with wireshark )

To help you understand what I mean by legit you need to have a clue about what Akamai offer in term of services to companies like Turbine... So I suggest you go to www.akamai.com and read a few of their brochures.

Edit : Oh and I didn't say that it sent info towards those sites... I said that it contacted them.