Sleepy Char
Sorceror
Hi folks,
I've been watching the packets of a RunUO connection using Wireshark and I am noticing a lot of packets of length ~15 all starting with 0xBC (e.g. bcad96bae3ba18feeeadbeac5f1a68). I looked this up in the packet guide and I think it's way too big to be a season update and also it occurs way too frequently. SpyUO doesn't seem to pick them up, but I can see them in Razor's packet log and each of them looks something like this:
22:15:52.6052: Server -> Client 0x77 (Length: 17)
0 1 2 3 4 5 6 7 8 9 A B C D E F
-- -- -- -- -- -- -- -- -- -- -- -- -- -- -- --
0000 77 00 0A 98 A5 00 06 05 D4 06 5A 0A 07 09 01 00 w.........Z.....
0010 03
0x77 is MobileMoving, which would make sense given how frequently I see the 0xBC packets but I've picked the RunUO code apart and I can't find anything that indicates the MobileMoving packet would be compressed, encoded, or otherwise messed with so that it starts with 0xBC and not 0x77.
Does anybody know if the packets I'm seeing are the MobileMoving packet and if so why they are being mangled? I've observed these packets on a fresh RunUO install as well as two popular RunUO free shards.
I'm using RunUO v2.3, client version 7.0.51.1 and Razor 1.4.0.3 if that helps.
I've been watching the packets of a RunUO connection using Wireshark and I am noticing a lot of packets of length ~15 all starting with 0xBC (e.g. bcad96bae3ba18feeeadbeac5f1a68). I looked this up in the packet guide and I think it's way too big to be a season update and also it occurs way too frequently. SpyUO doesn't seem to pick them up, but I can see them in Razor's packet log and each of them looks something like this:
22:15:52.6052: Server -> Client 0x77 (Length: 17)
0 1 2 3 4 5 6 7 8 9 A B C D E F
-- -- -- -- -- -- -- -- -- -- -- -- -- -- -- --
0000 77 00 0A 98 A5 00 06 05 D4 06 5A 0A 07 09 01 00 w.........Z.....
0010 03
0x77 is MobileMoving, which would make sense given how frequently I see the 0xBC packets but I've picked the RunUO code apart and I can't find anything that indicates the MobileMoving packet would be compressed, encoded, or otherwise messed with so that it starts with 0xBC and not 0x77.
Does anybody know if the packets I'm seeing are the MobileMoving packet and if so why they are being mangled? I've observed these packets on a fresh RunUO install as well as two popular RunUO free shards.
I'm using RunUO v2.3, client version 7.0.51.1 and Razor 1.4.0.3 if that helps.