Details

The packet where we send our authentication information. It includes some version information, but for the most part they appear to be unused.

Breakdown

• Channel: 0x01
• Data
  • Protocol Version (4 bytes)
  • TLV 0x01 (Username)
    • Type: Non-terminated string
    • Length: Variable
    • Value: UIN/Screen name
  • TLV 0x02 (Roasted Password)
    • Type: Non-terminated string
    • Length: Variable
    • Value: Roasted password
    • Note: This is a very weak and easy to break from of encryption, if you can call it that.
  • TLV 0x03 (Client ID String)
    • Type: Non-terminated string
    • Length: Variable
    • Value: "ICQBasic"
  • TLV 0x16 (Client ID Number)
    • Type: Short integer
    • Length: 2
    • Value: 0x010A
  • TLV 0x17 (Client Major Version)
    • Type: Short integer
    • Length: 2
    • Value: 0x0014
  • TLV 0x18 (Client Minor Version)
    • Type: Short integer
    • Length: 2
    • Value: 0x0034
  • TLV 0x19 (Client Lesser Version)
    • Type: Short integer
    • Length: 2
    • Value: 0x0000
  • TLV 0x1A (Client Build Number)
    • Type: Short integer
    • Length: 2
    • Value: 0x0BB8
  • TLV 0x14 (Client Distribution Number)
    • Type: Integer
    • Length: 4
    • Value: 0x0000043D
  • TLV 0x17 (Client Major Version)
    • Type: Short integer
    • Length: 2
    • Value: 0x0014
  • TLV 0x0F (Client Language)
    • Type: Non-terminated string
    • Length: 2
    • Value: "en"
  • TLV 0x0E (Client Country)
    • Type: Non-terminated string
    • Length: 2
    • Value: "us"

Packet Dump

00000000  2a 01 1e 2e 00 59 00 00  00 01 00 01 00 08 XX XX *....Y.. ........
00000010  XX XX XX XX XX XX 00 02  00 XX XX XX XX XX XX XX ........ ........
00000020  XX 00 03 00 08 49 43 51  42 61 73 69 63 00 16 00 .....ICQ Basic...
00000030  02 01 0a 00 17 00 02 00  14 00 18 00 02 00 34 00 ........ ......4.
00000040  19 00 02 00 00 00 1a 00  02 0b b8 00 14 00 04 00 ........ ........
00000050  00 04 3d 00 0f 00 02 65  6e 00 0e 00 02 75 73    ..=....e n....us