EA Data Logging - Ambitions & Patch
markjs:
I monitored a while and the addresse I found was only:
174.143.100.241
It sends and receive data from the ports 4077 and 5077;
Also, if you look at ARIN, NET-174-143-100-240-1 is registered to Electronic Arts (RSPC-1243881732254714).
Seems that the connection to port 4077 needs some specific parameters to return a file.
While port 5077 returns the following command line: "MessageId=951&MissingParam=MessageId", which is probably because I have not sent anything through TCP.
The connections happen when you start the game, and when you close it.
Though, while playing, it may collect other data, and send to another IP/port.
If anyone really want to find out exactly what is being sent/received it would need to check the game binary onto these addresses, hack into the server and take a look at the index at htdocs;
It may be they are sending more data than just what's on Sims3Logs.
Orlando:
Interesting research. I was going to ask if that address could be added to peerblock but I don't run peerblock when I play.
I took all connectivity options away for anything that appears EA in my firewall.
I used to close my firewall to free up ram and cpu but I won't to that anymore.
Could the tracking and sending be traced back to a service that I could disable in Vista?
If anyone does find the contents of one of these transmissions, pls do share the findings with us.
IAmTheRad:
A snippit of what it sends? Sure.
<Sims3Telemetry count="71">
<Event moduleId="1" groupId="19" eventStr="15"/>
<Event moduleId="1" groupId="1" eventStr="Windows 7 6.1~"/>
<Event moduleId="1" groupId="1" eventStr="~.7600 "/>
<Event moduleId="1" groupId="16" eventStr="AuthenticAMD A~"/>
<Event moduleId="1" groupId="16" eventStr="~MD Athlon(tm)~"/>
<Event moduleId="1" groupId="16" eventStr="~ 64 Processor~"/>
<Event moduleId="1" groupId="16" eventStr="~ 3500+"/>
<Event moduleId="1" groupId="17" eventStr="NVIDIA GeForce~"/>
<Event moduleId="1" groupId="17" eventStr="~ 7600 GS Vend~"/>
<Event moduleId="1" groupId="17" eventStr="~or: 10de, Dev~"/>
<Event moduleId="1" groupId="17" eventStr="~ice: 02e1, Bo~"/>
<Event moduleId="1" groupId="17" eventStr="~ard: a5423842~"/>
<Event moduleId="1" groupId="17" eventStr="~, Chipset: 00~"/>
<Event moduleId="1" groupId="17" eventStr="~a2"/>
<Event moduleId="1" groupId="18" eventStr="0.RL-2.0.104"/>
<Event moduleId="0" groupId="0" eventStr="Twinbrook - Ca~"/>
<Event moduleId="4" groupId="12" eventStr="T:00:29:22.367~"/>
<Event moduleId="4" groupId="12" eventStr="~0000"/>
<Event moduleId="4" groupId="12" eventStr="H:00:05:35.617~"/>
<Event moduleId="4" groupId="12" eventStr="~0000"/>
<Event moduleId="4" groupId="13" eventStr="I:7"/>
<Event moduleId="4" groupId="13" eventStr="D:0"/>
<Event moduleId="4" groupId="8" eventStr="B:0"/>
<Event moduleId="4" groupId="8" eventStr="D:0"/>
<Event moduleId="4" groupId="8" eventStr="M:0"/>
<Event moduleId="4" groupId="8" eventStr="S:0"/>
<Event moduleId="4" groupId="8" eventStr="W:4780"/>
<Event moduleId="4" groupId="8" eventStr="P:0"/>
<Event moduleId="4" groupId="8" eventStr="S:0"/>
<Event moduleId="4" groupId="9" eventStr="L:GhostHunter:3"/>
<Event moduleId="4" groupId="11" eventStr="L:Logic:3"/>
<Event moduleId="4" groupId="11" eventStr="L:Handiness:1"/>
<Event moduleId="4" groupId="10" eventStr="B:FreshClothin~"/>
<Event moduleId="4" groupId="10" eventStr="~g:7"/>
<Event moduleId="4" groupId="10" eventStr="B:Smelly:2"/>
<Event moduleId="4" groupId="10" eventStr="B:DirtySurroun~"/>
<Event moduleId="4" groupId="10" eventStr="~dings:7"/>
<Event moduleId="4" groupId="10" eventStr="B:UnevenCookin~"/>
<Event moduleId="4" groupId="10" eventStr="~g:1"/>
<Event moduleId="4" groupId="10" eventStr="B:NicelyDecora~"/>
<Event moduleId="4" groupId="10" eventStr="~ted:4"/>
<Event moduleId="4" groupId="10" eventStr="B:Lonely:1"/>
<Event moduleId="4" groupId="10" eventStr="B:Fulfilled:1"/>
<Event moduleId="4" groupId="10" eventStr="B:PowerStudy:1~"/>
<Event moduleId="4" groupId="10" eventStr="~85"/>
<Event moduleId="4" groupId="10" eventStr="B:BeautifullyD~"/>
<Event moduleId="4" groupId="10" eventStr="~ecorated:2"/>
<Event moduleId="4" groupId="10" eventStr="B:CleanSheets:2"/>
<Event moduleId="4" groupId="10" eventStr="B:SqueakyClean~"/>
<Event moduleId="4" groupId="10" eventStr="~:1"/>
<Event moduleId="4" groupId="10" eventStr="B:Disgusted:58"/>
<Event moduleId="4" groupId="10" eventStr="B:Sleepy:2"/>
<Event moduleId="4" groupId="10" eventStr="B:WellRested:2"/>
<Event moduleId="4" groupId="10" eventStr="B:Hungry:4"/>
<Event moduleId="4" groupId="10" eventStr="B:Desolate:1"/>
<Event moduleId="4" groupId="10" eventStr="B:EnjoyingMusi~"/>
<Event moduleId="4" groupId="10" eventStr="~c:4"/>
<Event moduleId="4" groupId="10" eventStr="B:HasToPee:1"/>
<Event moduleId="4" groupId="10" eventStr="B:FilthySurrou~"/>
<Event moduleId="4" groupId="10" eventStr="~ndings:2"/>
<Event moduleId="4" groupId="10" eventStr="B:Comfy:6"/>
<Event moduleId="4" groupId="10" eventStr="B:Tired:1"/>
<Event moduleId="4" groupId="10" eventStr="B:Meal:1"/>
<Event moduleId="4" groupId="10" eventStr="B:Amused:2"/>
<Event moduleId="4" groupId="10" eventStr="B:Grungy:3"/>
<Event moduleId="4" groupId="10" eventStr="B:Decorated:2"/>
<Event moduleId="4" groupId="10" eventStr="B:VeryHungry:1"/>
<Event moduleId="4" groupId="10" eventStr="S:NewspaperDel~"/>
<Event moduleId="4" groupId="10" eventStr="~ivery:2"/>
<Event moduleId="4" groupId="10" eventStr="R:Hospital:1"/>
<Event moduleId="4" groupId="10" eventStr="R:Restaurant:1"/></Sims3Telemetry>
bowrain:
I'm using Windows Firewall (Win7) and I've just blocked outbound connection for TS3.exe, TS3EP01.exe, TS3SP01.exe, and TS3EP02.exe. Is it enough? Do I have to block the launcher and/or inbound connections too?
Orlando:
@bowrain: it can't hurt to block them, just remember what you blocked if you ever need to use the launcher for any reason. It is possible that current or future features require a connect of sorts to validate processes, I'd even say it's likely.
@IAmTheRad: thanks for the snippet--I actually don't mind what info I can decypher from those strings, the problem is that, like you, I believe they may be sending other stuff and sharing with partners. This ad thing means they intend to collect and build marketing databases to push sales for the various demographic targets. In short, I smell a rat.
Navigation
[0] Message Index
[#] Next page
[*] Previous page