TLDR;

DEVS: Gimme your ICO-Client-Server-Protocol

REBELLION Users:

Use Wireshark, login to your ICO Online Account post me the Hexdump of the Server-Client-Conversation here.

Packets have one of these Ips: 74.204.71.137 or 74.204.71.200

Hi, i try to build a programm which can access the ICO Chat server without the game opened, so u can maybe access the chat for different chat versions at once and maybe implement kind of a matchmaking.

I dont have Rebellion myself, so I need someone with Rebellion to post:

out of their user.settings for Rebellion in directory: [<path to user>\AppData\Local\Ironclad Games\Sins of a Solar Empire\Setting]

(or whatever it is for Rebellion)

 -IcoServerAddress

 -IcoServerPort

I suspect IcoServerAddress to be ico.stardock.com[74.204.71.137] and IcoServerPort 6500(Release)/8000(Beta)

not sure though.

Now the most important part. To actually access or login, the Client(Your Game) sends the ICO Server

-Username + Password + Version

Notice they are not encrypted at least for, Vanilla, Entrenchement and Diplomacy

Username + Password are no Problem for me i have an account, but i do not know, how the Version for Rebellion is transmitted. I give you some example Versions of the other Releases which will be sent to the server.

Vanilla: Username + Password + "v1.195"

Entrenchement: Username + "Password + Entrenchment v1.055"

Diplomacy: Username + Password + "Diplomacy v1.37"

The Version is always the current Version, if u do not have the current version of the game the acces to the ICO Server will be denied, thats why it is important.

To solve the problem myself i tried to bruteforce the version on the noted server + ports as in

"Rebellion v1.8[0-2].[0000-9999]"

I failed.

What can u do?

I need you to sniff your sockets with Wireshark(or anything else), and dump me the Client-Server conversation(preferably as Hexdump) after u have successfully logged in.

-To do that easy way in Wireshark set the filter to "tcp"

-now log in.

-look for packets with ip 74.204.71.137 or 74.204.71.200

-Right click one of these packages and choose "Follow TCP Stream"

-dump result here(blank out your username + password though).

Thats it basicly.

If actually some Devs want to help me: fetch me your ICO Server-Client-Protocol plox

Ah in the process of doing this i nmaped your 2 ICO servers: pls dont ban me.

Example Dump:

Edit: fuck the example