Lego Universe - Possibilities, Packets and Encryption

cueball61 · Sep 4, 2010

Those of you in the know will know that http://en.wikipedia.org/wiki/Lego_Universe is currently sitting in closed beta, which I was fortunate enough to get into. Unlike the current franchise milking heaps of crap that Lego are dishing out, which are all the same game engine with a different disguise each time (Star Wars, Indie, Batman, etc...) Lego Universe is very much a homage to the original, good Lego games, I could pretty much call it a mixture between Lego Island and Lego Creator with a pinch of World of Warcraft for the MMO stuff.

Of course, after waking up today (I had a lay in) I suddenly had the temptation to try taking the game client apart and get a nice packet list. Of course, this was easier said than done since the packets are all encrypted, so I thought I'd come here so we could pick at each other's brains and perhaps get those packets decrypted. The sooner this thing gets a private server, the better (I'm not saying "Hey guys, help me so I can make this!" because I'm not prepared to shoot that high right now, I'm merely trying to give the whole thing a kick in the right direction).

First thing's first, after disassembling the thing, I've found that the client runs on the Raknet Network Engine which of course makes things fun, since we have the entire network engine available to us (thank you for not using an in-house system, NetDevil).

Here's a dump of me trying to login, albeit getting a "Your account is locked, try again later" message because I tried to login with a bad password to grab some packets too many times.

Code:

No.     Time     Source                Destination           Protocol Info
      1 13:45:31 10.0.1.4              171.20.35.10          UDP      Source port: 60813  Destination port: 1001

Frame 1: 44 bytes on wire (352 bits), 44 bytes captured (352 bits)
Ethernet II, Src: Giga-Byt_1d:56:de (00:24:1d:1d:56:de), Dst: EdimaxTe_b3:d1:5f (00:50:fc:b3:d1:5f)
Internet Protocol, Src: 10.0.1.4 (10.0.1.4), Dst: 171.20.35.10 (171.20.35.10)
User Datagram Protocol, Src Port: 60813 (60813), Dst Port: 1001 (1001)
Data (2 bytes)

0000  09 00                                             ..

No.     Time     Source                Destination           Protocol Info
      2 13:45:32 171.20.35.10          10.0.1.4              UDP      Source port: 1001  Destination port: 60813

Frame 2: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: EdimaxTe_b3:d1:5f (00:50:fc:b3:d1:5f), Dst: Giga-Byt_1d:56:de (00:24:1d:1d:56:de)
Internet Protocol, Src: 171.20.35.10 (171.20.35.10), Dst: 10.0.1.4 (10.0.1.4)
User Datagram Protocol, Src Port: 1001 (1001), Dst Port: 60813 (60813)
Data (2 bytes)

0000  0a 00                                             ..

No.     Time     Source                Destination           Protocol Info
      3 13:45:32 10.0.1.4              171.20.35.10          UDP      Source port: 60813  Destination port: 1001

Frame 3: 66 bytes on wire (528 bits), 66 bytes captured (528 bits)
Ethernet II, Src: Giga-Byt_1d:56:de (00:24:1d:1d:56:de), Dst: EdimaxTe_b3:d1:5f (00:50:fc:b3:d1:5f)
Internet Protocol, Src: 10.0.1.4 (10.0.1.4), Dst: 171.20.35.10 (171.20.35.10)
User Datagram Protocol, Src Port: 60813 (60813), Dst Port: 1001 (1001)
Data (24 bytes)

0000  72 17 40 00 00 00 00 00 18 00 00 00 00 12 40 04   r.@...........@.
0010  33 2e 32 35 20 4e 44 31                           3.25 ND1

No.     Time     Source                Destination           Protocol Info
      4 13:45:32 171.20.35.10          10.0.1.4              UDP      Source port: 1001  Destination port: 60813

Frame 4: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: EdimaxTe_b3:d1:5f (00:50:fc:b3:d1:5f), Dst: Giga-Byt_1d:56:de (00:24:1d:1d:56:de)
Internet Protocol, Src: 171.20.35.10 (171.20.35.10), Dst: 10.0.1.4 (10.0.1.4)
User Datagram Protocol, Src Port: 1001 (1001), Dst Port: 60813 (60813)
Data (10 bytes)

0000  e4 2e 80 00 63 00 00 00 00 00                     ....c.....

No.     Time     Source                Destination           Protocol Info
      5 13:45:32 171.20.35.10          10.0.1.4              UDP      Source port: 1001  Destination port: 60813

Frame 5: 110 bytes on wire (880 bits), 110 bytes captured (880 bits)
Ethernet II, Src: EdimaxTe_b3:d1:5f (00:50:fc:b3:d1:5f), Dst: Giga-Byt_1d:56:de (00:24:1d:1d:56:de)
Internet Protocol, Src: 171.20.35.10 (171.20.35.10), Dst: 10.0.1.4 (10.0.1.4)
User Datagram Protocol, Src Port: 1001 (1001), Dst Port: 60813 (60813)
Data (68 bytes)

0000  6d 8e f5 01 80 00 00 00 11 90 02 05 9a b5 0c 98   m...............
0010  9d 04 3b e4 ba 66 d8 d9 f6 1b f3 f3 7a b2 4d 08   ..;..f......z.M.
0020  01 00 01 00 f9 be b9 48 af 74 c3 10 f2 f7 d2 1f   .......H.t......
0030  af a0 39 23 f3 30 14 b2 c6 45 65 36 4f 91 89 e0   ..9#.0...Ee6O...
0040  10 ce 13 6d                                       ...m

No.     Time     Source                Destination           Protocol Info
      6 13:45:32 10.0.1.4              171.20.35.10          UDP      Source port: 60813  Destination port: 1001

Frame 6: 52 bytes on wire (416 bits), 52 bytes captured (416 bits)
Ethernet II, Src: Giga-Byt_1d:56:de (00:24:1d:1d:56:de), Dst: EdimaxTe_b3:d1:5f (00:50:fc:b3:d1:5f)
Internet Protocol, Src: 10.0.1.4 (10.0.1.4), Dst: 171.20.35.10 (171.20.35.10)
User Datagram Protocol, Src Port: 60813 (60813), Dst Port: 1001 (1001)
Data (10 bytes)

0000  db 1d ea 03 63 00 00 00 00 00                     ....c.....

No.     Time     Source                Destination           Protocol Info
      7 13:45:32 10.0.1.4              171.20.35.10          UDP      Source port: 60813  Destination port: 1001

Frame 7: 106 bytes on wire (848 bits), 106 bytes captured (848 bits)
Ethernet II, Src: Giga-Byt_1d:56:de (00:24:1d:1d:56:de), Dst: EdimaxTe_b3:d1:5f (00:50:fc:b3:d1:5f)
Internet Protocol, Src: 10.0.1.4 (10.0.1.4), Dst: 171.20.35.10 (171.20.35.10)
User Datagram Protocol, Src Port: 60813 (60813), Dst Port: 1001 (1001)
Data (64 bytes)

0000  5e d7 80 00 00 40 00 00 11 50 02 06 9a b5 0c 98   ^....@...P......
0010  9d 04 3b e4 ba 66 d8 d9 f6 1b f3 f3 7a b2 4d 08   ..;..f......z.M.
0020  c3 3e ff a3 0e 4a 6b 4f 3e fe c7 55 66 97 55 1e   .>...JkO>..Uf.U.
0030  08 a9 92 3f e8 90 4a b9 bb bf 08 46 9a 24 de 29   ...?..J....F.$.)

No.     Time     Source                Destination           Protocol Info
      8 13:45:32 171.20.35.10          10.0.1.4              UDP      Source port: 1001  Destination port: 60813

Frame 8: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: EdimaxTe_b3:d1:5f (00:50:fc:b3:d1:5f), Dst: Giga-Byt_1d:56:de (00:24:1d:1d:56:de)
Internet Protocol, Src: 171.20.35.10 (171.20.35.10), Dst: 10.0.1.4 (10.0.1.4)
User Datagram Protocol, Src Port: 1001 (1001), Dst Port: 60813 (60813)
Data (10 bytes)

0000  bd af 00 00 63 01 00 00 00 00                     ....c.....

No.     Time     Source                Destination           Protocol Info
      9 13:45:32 171.20.35.10          10.0.1.4              UDP      Source port: 1001  Destination port: 60813

Frame 9: 72 bytes on wire (576 bits), 72 bytes captured (576 bits)
Ethernet II, Src: EdimaxTe_b3:d1:5f (00:50:fc:b3:d1:5f), Dst: Giga-Byt_1d:56:de (00:24:1d:1d:56:de)
Internet Protocol, Src: 171.20.35.10 (171.20.35.10), Dst: 10.0.1.4 (10.0.1.4)
User Datagram Protocol, Src Port: 1001 (1001), Dst Port: 60813 (60813)
Data (30 bytes)

0000  5b 0f 35 01 80 40 00 00 18 00 00 00 00 13 c0 0e   [.5..@..........
0010  56 00 ff cf aa f1 00 00 ac 18 08 89 e9 03         V.............

No.     Time     Source                Destination           Protocol Info
     10 13:45:32 10.0.1.4              171.20.35.10          UDP      Source port: 60813  Destination port: 1001

Frame 10: 52 bytes on wire (416 bits), 52 bytes captured (416 bits)
Ethernet II, Src: Giga-Byt_1d:56:de (00:24:1d:1d:56:de), Dst: EdimaxTe_b3:d1:5f (00:50:fc:b3:d1:5f)
Internet Protocol, Src: 10.0.1.4 (10.0.1.4), Dst: 171.20.35.10 (171.20.35.10)
User Datagram Protocol, Src Port: 60813 (60813), Dst Port: 1001 (1001)
Data (10 bytes)

0000  b6 1e 6a 03 63 01 00 00 00 00                     ..j.c.....

No.     Time     Source                Destination           Protocol Info
     11 13:45:32 10.0.1.4              171.20.35.10          UDP      Source port: 60813  Destination port: 1001

Frame 11: 154 bytes on wire (1232 bits), 154 bytes captured (1232 bits)
Ethernet II, Src: Giga-Byt_1d:56:de (00:24:1d:1d:56:de), Dst: EdimaxTe_b3:d1:5f (00:50:fc:b3:d1:5f)
Internet Protocol, Src: 10.0.1.4 (10.0.1.4), Dst: 171.20.35.10 (171.20.35.10)
User Datagram Protocol, Src Port: 60813 (60813), Dst Port: 1001 (1001)
Data (112 bytes)

0000  96 11 85 93 63 86 a1 d2 57 01 27 ff 2c 29 57 0f   ....c...W.'.,)W.
0010  5d dc 84 84 87 13 fc 54 f1 dc 84 21 04 54 c7 79   ]......T...!.T.y
0020  d2 3e 77 9f 93 ad 95 11 9f 48 34 c1 09 7b 98 86   .>w......H4..{..
0030  bb 1b d3 bb 1b d6 5b 8d c5 cb c9 b5 75 fc 88 07   ......[.....u...
0040  e8 f9 12 4f af 47 45 51 80 44 05 75 02 9a 85 78   ...O.GEQ.D.u...x
0050  9d a1 98 10 40 d6 37 75 53 19 af 5d 63 4b e4 db   ....@.7uS..]cK..
0060  59 7c f1 0a 27 41 4e 46 27 31 72 65 51 92 96 50   Y|..'ANF'1reQ..P

No.     Time     Source                Destination           Protocol Info
     12 13:45:32 10.0.1.4              171.20.35.10          UDP      Source port: 60813  Destination port: 1001

Frame 12: 74 bytes on wire (592 bits), 74 bytes captured (592 bits)
Ethernet II, Src: Giga-Byt_1d:56:de (00:24:1d:1d:56:de), Dst: EdimaxTe_b3:d1:5f (00:50:fc:b3:d1:5f)
Internet Protocol, Src: 10.0.1.4 (10.0.1.4), Dst: 171.20.35.10 (171.20.35.10)
User Datagram Protocol, Src Port: 60813 (60813), Dst Port: 1001 (1001)
Data (32 bytes)

0000  cf 82 39 6e 12 82 31 1f ac 0c a7 52 53 e5 6e f1   ..9n..1....RS.n.
0010  e1 a3 dc 57 6e 22 f2 b3 ef 5d 19 d7 76 c5 d2 21   ...Wn"...]..v..!

No.     Time     Source                Destination           Protocol Info
     13 13:45:32 171.20.35.10          10.0.1.4              UDP      Source port: 1001  Destination port: 60813

Frame 13: 74 bytes on wire (592 bits), 74 bytes captured (592 bits)
Ethernet II, Src: EdimaxTe_b3:d1:5f (00:50:fc:b3:d1:5f), Dst: Giga-Byt_1d:56:de (00:24:1d:1d:56:de)
Internet Protocol, Src: 171.20.35.10 (171.20.35.10), Dst: 10.0.1.4 (10.0.1.4)
User Datagram Protocol, Src Port: 1001 (1001), Dst Port: 60813 (60813)
Data (32 bytes)

0000  62 c5 88 c0 ff 38 f9 d2 11 9e 08 fb dd 8e 53 d5   b....8........S.
0010  b4 63 2b 88 79 c8 4b 15 b4 dd 6f 7f 92 25 a0 e6   .c+.y.K...o..%..

No.     Time     Source                Destination           Protocol Info
     14 13:45:32 171.20.35.10          10.0.1.4              UDP      Source port: 1001  Destination port: 60813

Frame 14: 154 bytes on wire (1232 bits), 154 bytes captured (1232 bits)
Ethernet II, Src: EdimaxTe_b3:d1:5f (00:50:fc:b3:d1:5f), Dst: Giga-Byt_1d:56:de (00:24:1d:1d:56:de)
Internet Protocol, Src: 171.20.35.10 (171.20.35.10), Dst: 10.0.1.4 (10.0.1.4)
User Datagram Protocol, Src Port: 1001 (1001), Dst Port: 60813 (60813)
Data (112 bytes)

0000  b6 80 95 b4 d2 27 e6 1c 4a d5 c0 23 5b a7 9f 3b   .....'..J..#[..;
0010  11 88 ea 06 07 5b 3d 69 c5 97 e0 97 9e 3c 67 be   .....[=i.....<g.
0020  fe 85 ad 78 f2 0f 7f 89 9b 7a 32 35 16 e1 f0 0f   ...x.....z25....
0030  83 65 9f 18 4b ae f4 ff 8c 08 c7 20 06 29 b3 d5   .e..K...... .)..
0040  18 26 04 f9 25 80 b3 5c ed fa d7 8e 41 2e 0a a6   .&..%..\....A...
0050  90 d7 c7 61 c6 27 f0 d1 ad 23 53 62 c0 3d ad 56   ...a.'...#Sb.=.V
0060  72 44 3f f4 9c 3d f0 9b 1b 83 1c b5 22 d3 6d 85   rD?..=......".m.

No.     Time     Source                Destination           Protocol Info
     15 13:45:32 10.0.1.4              171.20.35.10          UDP      Source port: 60813  Destination port: 1001

Frame 15: 74 bytes on wire (592 bits), 74 bytes captured (592 bits)
Ethernet II, Src: Giga-Byt_1d:56:de (00:24:1d:1d:56:de), Dst: EdimaxTe_b3:d1:5f (00:50:fc:b3:d1:5f)
Internet Protocol, Src: 10.0.1.4 (10.0.1.4), Dst: 171.20.35.10 (171.20.35.10)
User Datagram Protocol, Src Port: 60813 (60813), Dst Port: 1001 (1001)
Data (32 bytes)

0000  8d 42 09 cc 97 54 11 38 23 27 b1 ad fc 69 32 c7   .B...T.8#'...i2.
0010  58 ce 51 c2 c4 43 78 e2 b7 62 07 3a ff 25 66 d0   X.Q..Cx..b.:.%f.

No.     Time     Source                Destination           Protocol Info
     16 13:45:32 10.0.1.4              171.20.35.10          UDP      Source port: 60813  Destination port: 1001

Frame 16: 218 bytes on wire (1744 bits), 218 bytes captured (1744 bits)
Ethernet II, Src: Giga-Byt_1d:56:de (00:24:1d:1d:56:de), Dst: EdimaxTe_b3:d1:5f (00:50:fc:b3:d1:5f)
Internet Protocol, Src: 10.0.1.4 (10.0.1.4), Dst: 171.20.35.10 (171.20.35.10)
User Datagram Protocol, Src Port: 60813 (60813), Dst Port: 1001 (1001)
Data (176 bytes)

0000  22 20 46 ea 70 ad e2 d6 ec 95 95 1c 62 69 fd 7d   " F.p.......bi.}
0010  d1 b4 90 92 64 ab 91 96 85 c7 93 c3 15 e9 13 39   ....d..........9
0020  d3 41 f5 58 8a 68 29 b2 d9 c9 c8 2b c5 10 4b 8c   .A.X.h)....+..K.
0030  4d 29 d7 05 ff e8 2c d5 6c d3 77 88 47 12 67 6f   M)....,.l.w.G.go
0040  2e 59 32 c1 1d 70 55 c7 25 0a 41 40 07 e9 33 41   .Y2..pU.%.A@..3A
0050  80 58 85 b1 c2 6b 88 cb e7 ae 91 4f b7 00 8e db   .X...k.....O....
0060  84 e4 43 a3 7a b5 b2 77 6e fe 7d 80 70 01 fe 02   ..C.z..wn.}.p...
0070  df ee 2b aa fb 7a 30 cd c8 fb 68 e3 19 af c2 71   ..+..z0...h....q
0080  e2 f4 ae c2 e9 ba f1 54 b1 3c bd 75 e1 e1 87 b1   .......T.<.u....
0090  f8 96 1f 68 f8 79 7e e7 6c 83 1e 0a 84 48 5c 4e   ...h.y~.l....H\N
00a0  82 c1 64 ea 27 f3 d6 99 cc fd 6e 12 bc 18 89 c9   ..d.'.....n.....

No.     Time     Source                Destination           Protocol Info
     17 13:45:32 171.20.35.10          10.0.1.4              UDP      Source port: 1001  Destination port: 60813

Frame 17: 74 bytes on wire (592 bits), 74 bytes captured (592 bits)
Ethernet II, Src: EdimaxTe_b3:d1:5f (00:50:fc:b3:d1:5f), Dst: Giga-Byt_1d:56:de (00:24:1d:1d:56:de)
Internet Protocol, Src: 171.20.35.10 (171.20.35.10), Dst: 10.0.1.4 (10.0.1.4)
User Datagram Protocol, Src Port: 1001 (1001), Dst Port: 60813 (60813)
Data (32 bytes)

0000  01 9a 6a c0 78 24 56 ba 2d 2e 42 2b b3 21 65 df   ..j.x$V.-.B+.!e.
0010  84 0d 67 73 52 6d c2 16 eb f3 bb 0a 3c 56 4d 0c   ..gsRm......<VM.

No.     Time     Source                Destination           Protocol Info
     18 13:45:32 171.20.35.10          10.0.1.4              UDP      Source port: 1001  Destination port: 60813

Frame 18: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: EdimaxTe_b3:d1:5f (00:50:fc:b3:d1:5f), Dst: Giga-Byt_1d:56:de (00:24:1d:1d:56:de)
Internet Protocol, Src: 171.20.35.10 (171.20.35.10), Dst: 10.0.1.4 (10.0.1.4)
User Datagram Protocol, Src Port: 1001 (1001), Dst Port: 60813 (60813)
Data (16 bytes)

0000  5c 5c 55 71 8d 59 bd a3 d7 1c 87 8d 13 62 52 3d   \\Uq.Y.......bR=

No.     Time     Source                Destination           Protocol Info
     19 13:45:32 171.20.35.10          10.0.1.4              UDP      Source port: 1001  Destination port: 60813

Frame 19: 74 bytes on wire (592 bits), 74 bytes captured (592 bits)
Ethernet II, Src: EdimaxTe_b3:d1:5f (00:50:fc:b3:d1:5f), Dst: Giga-Byt_1d:56:de (00:24:1d:1d:56:de)
Internet Protocol, Src: 171.20.35.10 (171.20.35.10), Dst: 10.0.1.4 (10.0.1.4)
User Datagram Protocol, Src Port: 1001 (1001), Dst Port: 60813 (60813)
Data (32 bytes)

0000  a1 4a 29 ce 69 17 0e 9a f9 f8 81 d4 6f 5e 9b e6   .J).i.......o^..
0010  0b 4c eb 78 7c 82 5c e5 00 03 fc d8 c4 e4 6b 37   .L.x|.\.......k7

No.     Time     Source                Destination           Protocol Info
     20 13:45:32 10.0.1.4              171.20.35.10          UDP      Source port: 60813  Destination port: 1001

Frame 20: 90 bytes on wire (720 bits), 90 bytes captured (720 bits)
Ethernet II, Src: Giga-Byt_1d:56:de (00:24:1d:1d:56:de), Dst: EdimaxTe_b3:d1:5f (00:50:fc:b3:d1:5f)
Internet Protocol, Src: 10.0.1.4 (10.0.1.4), Dst: 171.20.35.10 (171.20.35.10)
User Datagram Protocol, Src Port: 60813 (60813), Dst Port: 1001 (1001)
Data (48 bytes)

0000  df 7d 8d b4 bd ee c8 62 24 b5 f0 65 35 6c 29 6f   .}.....b$..e5l)o
0010  3e 4c 64 31 5b 62 56 1f 92 5a 07 fa d6 09 7f 10   >Ld1[bV..Z......
0020  2c 1b 23 09 47 36 21 d7 9f ee d1 bb 36 5c d2 ba   ,.#.G6!.....6\..

No.     Time     Source                Destination           Protocol Info
     21 13:45:32 171.20.35.10          10.0.1.4              UDP      Source port: 1001  Destination port: 60813

Frame 21: 74 bytes on wire (592 bits), 74 bytes captured (592 bits)
Ethernet II, Src: EdimaxTe_b3:d1:5f (00:50:fc:b3:d1:5f), Dst: Giga-Byt_1d:56:de (00:24:1d:1d:56:de)
Internet Protocol, Src: 171.20.35.10 (171.20.35.10), Dst: 10.0.1.4 (10.0.1.4)
User Datagram Protocol, Src Port: 1001 (1001), Dst Port: 60813 (60813)
Data (32 bytes)

0000  5d 6d 63 3e 7b e5 4d 5c d1 19 3e de e2 53 85 16   ]mc>{.M\..>..S..
0010  95 66 35 54 c5 2a e1 cf 81 18 ef 12 10 ce dd d4   .f5T.*..........

No.     Time     Source                Destination           Protocol Info
     22 13:45:32 171.20.35.10          10.0.1.4              UDP      Source port: 1001  Destination port: 60813

Frame 22: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: EdimaxTe_b3:d1:5f (00:50:fc:b3:d1:5f), Dst: Giga-Byt_1d:56:de (00:24:1d:1d:56:de)
Internet Protocol, Src: 171.20.35.10 (171.20.35.10), Dst: 10.0.1.4 (10.0.1.4)
User Datagram Protocol, Src Port: 1001 (1001), Dst Port: 60813 (60813)
Data (16 bytes)

0000  b6 d1 5d c7 13 33 7b 42 55 e4 ff f0 93 e8 7b 88   ..]..3{BU.....{.

No.     Time     Source                Destination           Protocol Info
     23 13:45:32 171.20.35.10          10.0.1.4              UDP      Source port: 1001  Destination port: 60813

Frame 23: 346 bytes on wire (2768 bits), 346 bytes captured (2768 bits)
Ethernet II, Src: EdimaxTe_b3:d1:5f (00:50:fc:b3:d1:5f), Dst: Giga-Byt_1d:56:de (00:24:1d:1d:56:de)
Internet Protocol, Src: 171.20.35.10 (171.20.35.10), Dst: 10.0.1.4 (10.0.1.4)
User Datagram Protocol, Src Port: 1001 (1001), Dst Port: 60813 (60813)
Data (304 bytes)

0000  a9 7e ae 59 6a 53 59 e4 90 71 32 59 d4 5d ec 74   .~.YjSY..q2Y.].t
0010  d7 83 d4 e9 b7 57 f1 7e 5a ba fe 8c f7 d8 b0 9e   .....W.~Z.......
0020  c9 92 6a d4 64 ab a3 ca 40 61 d6 bc 7d 3d 3d e2   ..j.d...@a..}==.
0030  50 a6 00 9a 53 22 1f a5 67 0b 0c 54 a8 cf 77 db   P...S"..g..T..w.
0040  cd b7 8f c6 62 c2 d5 0a 24 21 68 d9 7b 7b 55 0c   ....b...$!h.{{U.
0050  ca b3 61 55 c8 e2 2e c7 48 a7 b2 93 7e 73 1e 42   ..aU....H...~s.B
0060  7d 17 43 4c 06 e5 24 c3 8b c9 62 b6 05 7d c5 fa   }.CL..$...b..}..
0070  f3 55 f5 34 a4 30 7f 5c c9 e1 06 41 13 a0 a3 c9   .U.4.0.\...A....
0080  1c b9 c5 88 ba 9a 0f 32 cc 5c 88 87 ce 60 42 6c   .......2.\...`Bl
0090  45 57 4a e1 3a ee fb a6 78 ea ac 2e 6c f1 81 65   EWJ.:...x...l..e
00a0  61 8c be 6b 9b ac 62 19 08 e9 5a 01 eb 2c c6 6f   a..k..b...Z..,.o
00b0  b0 f3 46 7f 7d bd c7 1b fb f6 8f 50 1f 2b 52 3e   ..F.}......P.+R>
00c0  da 26 46 c4 c4 7d f5 39 0a 82 95 5d 27 f5 49 80   .&F..}.9...]'.I.
00d0  2b df 4d f9 26 48 3a 49 00 f9 b6 0b 68 ea d7 94   +.M.&H:I....h...
00e0  77 4a 1e 08 01 fb 3d 9d e9 d2 a0 8b 33 2c d0 77   wJ....=.....3,.w
00f0  b1 0f bd bb d6 c5 da 4a ea 5e f6 90 60 4e fc f7   .......J.^..`N..
0100  4e dc 7a f2 03 35 4e c9 f0 8c 3e 40 23 99 7d 29   N.z..5N...>@#.})
0110  7b 07 ff 7a 39 d8 b8 96 b4 c8 10 03 2f 6d af ba   {..z9......./m..
0120  56 34 30 ad 5a 32 14 c8 e3 be e4 ea 3a f0 cf 1e   V40.Z2......:...

No.     Time     Source                Destination           Protocol Info
     24 13:45:32 10.0.1.4              171.20.35.10          UDP      Source port: 60813  Destination port: 1001

Frame 24: 58 bytes on wire (464 bits), 58 bytes captured (464 bits)
Ethernet II, Src: Giga-Byt_1d:56:de (00:24:1d:1d:56:de), Dst: EdimaxTe_b3:d1:5f (00:50:fc:b3:d1:5f)
Internet Protocol, Src: 10.0.1.4 (10.0.1.4), Dst: 171.20.35.10 (171.20.35.10)
User Datagram Protocol, Src Port: 60813 (60813), Dst Port: 1001 (1001)
Data (16 bytes)

0000  95 ec 7a 60 70 34 6e fa 48 5a 20 30 2e 05 61 f5   ..z`p4n.HZ 0..a.

No.     Time     Source                Destination           Protocol Info
     25 13:45:32 10.0.1.4              171.20.35.10          UDP      Source port: 60813  Destination port: 1001

Frame 25: 74 bytes on wire (592 bits), 74 bytes captured (592 bits)
Ethernet II, Src: Giga-Byt_1d:56:de (00:24:1d:1d:56:de), Dst: EdimaxTe_b3:d1:5f (00:50:fc:b3:d1:5f)
Internet Protocol, Src: 10.0.1.4 (10.0.1.4), Dst: 171.20.35.10 (171.20.35.10)
User Datagram Protocol, Src Port: 60813 (60813), Dst Port: 1001 (1001)
Data (32 bytes)

0000  b8 65 19 75 6f 61 bd 79 be 8f ba 04 35 9f 95 46   .e.uoa.y....5..F
0010  bb 16 ea 6c a3 31 ba a4 dd a8 42 5a df 55 46 86   ...l.1....BZ.UF.

No.     Time     Source                Destination           Protocol Info
     26 13:45:33 171.20.35.10          10.0.1.4              UDP      Source port: 1001  Destination port: 60813

Frame 26: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: EdimaxTe_b3:d1:5f (00:50:fc:b3:d1:5f), Dst: Giga-Byt_1d:56:de (00:24:1d:1d:56:de)
Internet Protocol, Src: 171.20.35.10 (171.20.35.10), Dst: 10.0.1.4 (10.0.1.4)
User Datagram Protocol, Src Port: 1001 (1001), Dst Port: 60813 (60813)
Data (16 bytes)

0000  5a 8c b3 5c f3 be b9 43 77 eb db e4 c3 1f 2e 0a   Z..\...Cw.......

No.     Time     Source                Destination           Protocol Info
     27 13:45:33 10.0.1.4              195.245.127.129       TCP      5838 > http [FIN, ACK] Seq=1 Ack=1 Win=16352 Len=0

Frame 27: 54 bytes on wire (432 bits), 54 bytes captured (432 bits)
Ethernet II, Src: Giga-Byt_1d:56:de (00:24:1d:1d:56:de), Dst: EdimaxTe_b3:d1:5f (00:50:fc:b3:d1:5f)
Internet Protocol, Src: 10.0.1.4 (10.0.1.4), Dst: 195.245.127.129 (195.245.127.129)
Transmission Control Protocol, Src Port: 5838 (5838), Dst Port: http (80), Seq: 1, Ack: 1, Len: 0

No.     Time     Source                Destination           Protocol Info
     28 13:45:33 195.245.127.129       10.0.1.4              TCP      http > 5838 [FIN, ACK] Seq=1 Ack=2 Win=216 Len=0

Frame 28: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: EdimaxTe_b3:d1:5f (00:50:fc:b3:d1:5f), Dst: Giga-Byt_1d:56:de (00:24:1d:1d:56:de)
Internet Protocol, Src: 195.245.127.129 (195.245.127.129), Dst: 10.0.1.4 (10.0.1.4)
Transmission Control Protocol, Src Port: http (80), Dst Port: 5838 (5838), Seq: 1, Ack: 2, Len: 0

No.     Time     Source                Destination           Protocol Info
     29 13:45:33 10.0.1.4              195.245.127.129       TCP      5838 > http [ACK] Seq=2 Ack=2 Win=16352 Len=0

Frame 29: 54 bytes on wire (432 bits), 54 bytes captured (432 bits)
Ethernet II, Src: Giga-Byt_1d:56:de (00:24:1d:1d:56:de), Dst: EdimaxTe_b3:d1:5f (00:50:fc:b3:d1:5f)
Internet Protocol, Src: 10.0.1.4 (10.0.1.4), Dst: 195.245.127.129 (195.245.127.129)
Transmission Control Protocol, Src Port: 5838 (5838), Dst Port: http (80), Seq: 2, Ack: 2, Len: 0

As I said, not exactly anything you can read humanly, any sort of identification as to anything recognisable would be nice, I'm not the best Wireshark user ever, so I don't have much experience in understanding these, but hopefully someone will be able to pick something significant out.

NOTE: Lego will probably send the big black van round to my house for even posting this information, since it's an NDA'd Closed Beta, but who the hell keeps to those things?

Raffa50 · Sep 4, 2010

i' m in lego universe too and i want to make a server!

written in C++, mysql database!

Contact me!

cueball61 · Sep 4, 2010

More findings: It would seem Raknet uses 'Huffman Encoding' to encode strings, so now trying to decode of the packets to see what happens.

Raffa50 · Sep 5, 2010

What Packet Logger did you used?

__ edit __

i can write the mysql db... for now

cueball61 · Sep 5, 2010

I used Wireshark.

Don't bother with any sort of DB till you actually know what you're dealing with, God knows what information needs to be sent/received right now. =P

Raffa50 · Sep 6, 2010

too late... i writed the lego site cms!

https://sourceforge.net/projects/luniserver/

Raffa50 · Sep 11, 2010

God knows what information needs to be sent/received right now. =P

we need to decode it, hard thing! no one can hel us?

enevil · Sep 16, 2010

Good proyect. Good luck with creating the server. I want test this in the future ;D

mydream · Sep 18, 2010

I saw the game files and there is a folder call "pack". And all the files inside are .pk files. How can I open them? I tried to use notepad, and I found that each .pk file have a "ndpk" word in the front.

Raffa50 · Sep 21, 2010

maybe that files are coded, we need to decode the client first!

mydream · Sep 24, 2010

How about using this software? Huffman Encoder/Decoder | Download Huffman Encoder/Decoder software for free at SourceForge.net
It said it can decode 'Huffman Encoding".

---------- Post added at 04:56 PM ---------- Previous post was at 04:51 PM ----------

Or using this website to decode?

Huffman Encoding/Decoding

Reloader90 · Oct 17, 2010

now you have to pay for playing you can't make a server!
no way!
i really like the game but i don't have money, good bye lego universe!

leo222 · Dec 11, 2010

i have one month free account if u have a sniffer?

Omnija · Dec 11, 2010

is this game buy to play or pay to play

caldeireiro · Dec 11, 2010

Pay to Play

Martan · Jan 4, 2011

A Lego Universe Private server would be awesome! :w00t: I hate that it's a pay to play game and that it has a word filter so that you can't type what ever you want to

smartguy · Feb 1, 2011

Don't let this topic died!!!!!! I want to make a Lego UNiverse Server too!!!! I already unpacked all the games files!! We just need someone to decode the packets!!!!! Or maybe we can make a offline server! Just have a try!

Martan · Mar 6, 2011

Yea, don't let this die!!!

enevil · Mar 7, 2011

Yes, please don't let this die!!!!

smartguy · Mar 9, 2011

Any one can open these .lvl files? This may help us to remake the game.

Welcome!

Lego Universe - Possibilities, Packets and Encryption

Newbie Spellweaver

Newbie Spellweaver

Newbie Spellweaver

Newbie Spellweaver

Newbie Spellweaver

Newbie Spellweaver

Newbie Spellweaver

Newbie Spellweaver

Initiate Mage

Newbie Spellweaver

Initiate Mage

Newbie Spellweaver

Experienced Elementalist

凸(ಠ益ಠ)凸

Initiate Mage

Newbie Spellweaver

Initiate Mage

Newbie Spellweaver

Newbie Spellweaver

Initiate Mage

Attachments

About Us

Online statistics

Forum statistics

RaGEZONE Sponsor