RunUO Community

This is a sample guest message. Register a free account today to become a member! Once signed in, you'll be able to participate on this site by adding your own topics and posts, as well as connect with other members through your own private inbox!

Packets I don't recognise (0xBC)

Sleepy Char

Sorceror
Hi folks,

I've been watching the packets of a RunUO connection using Wireshark and I am noticing a lot of packets of length ~15 all starting with 0xBC (e.g. bcad96bae3ba18feeeadbeac5f1a68). I looked this up in the packet guide and I think it's way too big to be a season update and also it occurs way too frequently. SpyUO doesn't seem to pick them up, but I can see them in Razor's packet log and each of them looks something like this:
22:15:52.6052: Server -> Client 0x77 (Length: 17)
0 1 2 3 4 5 6 7 8 9 A B C D E F
-- -- -- -- -- -- -- -- -- -- -- -- -- -- -- --
0000 77 00 0A 98 A5 00 06 05 D4 06 5A 0A 07 09 01 00 w.........Z.....
0010 03

0x77 is MobileMoving, which would make sense given how frequently I see the 0xBC packets but I've picked the RunUO code apart and I can't find anything that indicates the MobileMoving packet would be compressed, encoded, or otherwise messed with so that it starts with 0xBC and not 0x77.

Does anybody know if the packets I'm seeing are the MobileMoving packet and if so why they are being mangled? I've observed these packets on a fresh RunUO install as well as two popular RunUO free shards.

I'm using RunUO v2.3, client version 7.0.51.1 and Razor 1.4.0.3 if that helps.
 

Kevorki

Traveler
Every packet in the communication between server/client is compressed (using Huffman coding). Using Wireshark you're going to see the compressed version, while Razor shows you the decompressed one.
 

Sleepy Char

Sorceror
Thanks for the tip! I was confused because the initial packets were not encoded or anything. I made the false assumption that NetState.CompressionEnabled would only be true for the CharacterList packet, not for all packets sent after it.

That makes a lot of sense, I'll decode the packets before trying to interpret them :)
 

Sleepy Char

Sorceror
That was a big help, thanks again. I'm able to make sense of the compressed packets now.


Code:
Logged in. Account has 7 character slots and the following characters available:
0) Neo
1)
2)
3)
4)
5)
6)
Got the following starting locations:
0) New Haven (New Haven Bank) [3667, 2625, 0]
1) Yew (The Empath Abbey) [633, 858, 0]
2) Minoc (The Barnacle) [2476, 413, 15]
3) Britain (The Wayfarer's Inn) [1602, 1591, 20]
4) Moonglow (The Scholars Inn) [4408, 1168, 0]
5) Trinsic (The Traveler's Inn) [1845, 2745, 0]
6) Jhelom (The Mercenary Inn) [1374, 3826, 0]
7) Skara Brae (The Falconer's Inn) [618, 2234, 0]
8) Vesper (The Ironwood Inn) [2771, 976, 131072]
 
Top