<![CDATA[n-dev - All Forums]]> http://n-dev.net/ Sun, 20 May 2012 11:40:39 +0000 MyBB <![CDATA[Title ID Rules Found!]]> http://n-dev.net/showthread.php?tid=1276 Sat, 05 May 2012 16:07:35 +0000 http://n-dev.net/showthread.php?tid=1276 3DBrew.org, there is a page on the official and proper organisation of Title IDs. I have been doing quite a bit of testing with my Dev 3DS and there is quite a bit of difference between the Title ID convention and how the 3DS recognises applications through the Title ID.

An example CTR Title Id : 0004ABCDXUUUUUZZ

An example converted TWL Title Id : 0004ABCDSSTTTTRR

All:

ABCD= Title Type Identifier

CTR:

X=?
UUUUU=Unique ID
ZZ=Extra Identifier

TWL:

SS= System Code
TTTT=Unique Title Code
RR=Region Code


ABCD:

There are three broad title groups, 'System', 'TWL' and 'Application'. Though the 3DS sees them as 'System', 'TWL' and anything else is given the alias 'Application'. And then there are different types of 'Applications', but more on that later.

For a title to be seen as a 'System' software title:
[Image: attachment.php?aid=31]

For a title to be seen as a 'TWL' software title:
[Image: attachment.php?aid=32]

For a title to be seen as an 'Application' software Title:
[Image: attachment.php?aid=33]
NOTE: If 'A' and 'C' both fill the 'System' title requirements, this title will be seen as 'System' Instead of 'Application'.

System software titles can only be installed to the CTR NAND
TWL software titles can only be installed to the TWL NAND

Application software titles are extremely versatile. By default they can be installed to the SDMC, but if configured correctly, they can be installed to the CTR NAND as well(see 'ZZ').

A list of known 'Application' title types:

0000-Default
0001-Download Play Child
0002-Demo
000E-Add-on Content

A list of known 'System' title types:

0010-System Applications
0138-System Firmware

(see 3DBrew.org for more)

A list of known 'TWL' title types:

8004-Regular TWL apps(like DSiWare)(This the only TWL title type deletable from System Settings)
8005-Hidden system TWL apps(like DS Download Play)
8011-TWL Development Apps
800F-TWL applets

X:

This appears to be part of the 'per application' identifier like the Unique ID, but it is not recognised as part of the Unique ID by the 3DS

UUUUU:

This is the 'Unique Id' which is an application identifier used by the 3DS to identify each application. And consist of any combination of characters '0-9' and 'a-f'

ZZ:

This is an extra identifier flag used by the 3DS to gather extra information on CTR titles. This extra information has different affects on different title types:

For 'Application' Type titles:
[Image: attachment.php?aid=39]

For 'System' Type titles:
[Image: attachment.php?aid=40]

SS:

The System code, with the DSi was used as a title type identifier. This has changed with the 3DS, because 'ABCD' now acts as a title type identifier. The system code is more or less redundant as it has no affect on how the 3DS handles TWL titles.

TTTT:

The Unique Title identifier for TWL titles.

RR:

The region coding follows the same format as the DSi did, however the TWL(only installable TWL title) regions have been simplified to follow the 3DS regions. For instance a TWL title purchased from the Australian eShop would have a region code of '56' as oppose to the Australian DSiWare region '55' (See DSiBrew)
[Image: attachment.php?aid=41]


EXAMPLES:

Here I have attached a collection of dummy .cia files with their Title IDs modified (only the original .CIA '0000-CTR_APP_DEFAULT.cia' is valid to install, as the rest have been modified without being re-signed). I created this pack so users with 3DS development units can see how their revision of Dev Menu reacts to different types of titles: DOWNLOAD


NOTE: While this is how the 3DS will identify each kind of application initially, how the Title ID affects the installation/loading of an application, I have no way of knowing without the SDK and keys to test my theories.

.png  SYS.png (Size: 2.26 KB / Downloads: 133)

.png  TWL.png (Size: 2.52 KB / Downloads: 130)

.png  app.png (Size: 2.14 KB / Downloads: 131)

.png  zz app.png (Size: 4.7 KB / Downloads: 82)

.png  zz sys.png (Size: 3.8 KB / Downloads: 75)

.png  zz twl.png (Size: 2.49 KB / Downloads: 76) ]]> 3DBrew.org, there is a page on the official and proper organisation of Title IDs. I have been doing quite a bit of testing with my Dev 3DS and there is quite a bit of difference between the Title ID convention and how the 3DS recognises applications through the Title ID.

An example CTR Title Id : 0004ABCDXUUUUUZZ

An example converted TWL Title Id : 0004ABCDSSTTTTRR

All:

ABCD= Title Type Identifier

CTR:

X=?
UUUUU=Unique ID
ZZ=Extra Identifier

TWL:

SS= System Code
TTTT=Unique Title Code
RR=Region Code


ABCD:

There are three broad title groups, 'System', 'TWL' and 'Application'. Though the 3DS sees them as 'System', 'TWL' and anything else is given the alias 'Application'. And then there are different types of 'Applications', but more on that later.

For a title to be seen as a 'System' software title:
[Image: attachment.php?aid=31]

For a title to be seen as a 'TWL' software title:
[Image: attachment.php?aid=32]

For a title to be seen as an 'Application' software Title:
[Image: attachment.php?aid=33]
NOTE: If 'A' and 'C' both fill the 'System' title requirements, this title will be seen as 'System' Instead of 'Application'.

System software titles can only be installed to the CTR NAND
TWL software titles can only be installed to the TWL NAND

Application software titles are extremely versatile. By default they can be installed to the SDMC, but if configured correctly, they can be installed to the CTR NAND as well(see 'ZZ').

A list of known 'Application' title types:

0000-Default
0001-Download Play Child
0002-Demo
000E-Add-on Content

A list of known 'System' title types:

0010-System Applications
0138-System Firmware

(see 3DBrew.org for more)

A list of known 'TWL' title types:

8004-Regular TWL apps(like DSiWare)(This the only TWL title type deletable from System Settings)
8005-Hidden system TWL apps(like DS Download Play)
8011-TWL Development Apps
800F-TWL applets

X:

This appears to be part of the 'per application' identifier like the Unique ID, but it is not recognised as part of the Unique ID by the 3DS

UUUUU:

This is the 'Unique Id' which is an application identifier used by the 3DS to identify each application. And consist of any combination of characters '0-9' and 'a-f'

ZZ:

This is an extra identifier flag used by the 3DS to gather extra information on CTR titles. This extra information has different affects on different title types:

For 'Application' Type titles:
[Image: attachment.php?aid=39]

For 'System' Type titles:
[Image: attachment.php?aid=40]

SS:

The System code, with the DSi was used as a title type identifier. This has changed with the 3DS, because 'ABCD' now acts as a title type identifier. The system code is more or less redundant as it has no affect on how the 3DS handles TWL titles.

TTTT:

The Unique Title identifier for TWL titles.

RR:

The region coding follows the same format as the DSi did, however the TWL(only installable TWL title) regions have been simplified to follow the 3DS regions. For instance a TWL title purchased from the Australian eShop would have a region code of '56' as oppose to the Australian DSiWare region '55' (See DSiBrew)
[Image: attachment.php?aid=41]


EXAMPLES:

Here I have attached a collection of dummy .cia files with their Title IDs modified (only the original .CIA '0000-CTR_APP_DEFAULT.cia' is valid to install, as the rest have been modified without being re-signed). I created this pack so users with 3DS development units can see how their revision of Dev Menu reacts to different types of titles: DOWNLOAD


NOTE: While this is how the 3DS will identify each kind of application initially, how the Title ID affects the installation/loading of an application, I have no way of knowing without the SDK and keys to test my theories.

.png  SYS.png (Size: 2.26 KB / Downloads: 133)

.png  TWL.png (Size: 2.52 KB / Downloads: 130)

.png  app.png (Size: 2.14 KB / Downloads: 131)

.png  zz app.png (Size: 4.7 KB / Downloads: 82)

.png  zz sys.png (Size: 3.8 KB / Downloads: 75)

.png  zz twl.png (Size: 2.49 KB / Downloads: 76) ]]> <![CDATA[Application Screenshots]]> http://n-dev.net/showthread.php?tid=1274 Wed, 02 May 2012 00:03:47 +0000 http://n-dev.net/showthread.php?tid=1274 [Image: attachment.php?aid=24]
[Image: attachment.php?aid=25]
[Image: attachment.php?aid=26]
[Image: attachment.php?aid=27]
[Image: attachment.php?aid=28]
[Image: attachment.php?aid=29]
[Image: attachment.php?aid=30]

.png  Activity Log.png (Size: 80.46 KB / Downloads: 83)

.png  Download Play 1.png (Size: 58.69 KB / Downloads: 81)

.png  Health and Safety.png (Size: 57.88 KB / Downloads: 80)

.png  Mii Maker.png (Size: 122.47 KB / Downloads: 79)

.png  Nintendo 3DS Camera.png (Size: 172.24 KB / Downloads: 81)

.png  Nintendo 3DS Sound.png (Size: 108.18 KB / Downloads: 82)

.png  StreetPass Mii Plaza.png (Size: 155 KB / Downloads: 83) ]]> [Image: attachment.php?aid=24]
[Image: attachment.php?aid=25]
[Image: attachment.php?aid=26]
[Image: attachment.php?aid=27]
[Image: attachment.php?aid=28]
[Image: attachment.php?aid=29]
[Image: attachment.php?aid=30]

.png  Activity Log.png (Size: 80.46 KB / Downloads: 83)

.png  Download Play 1.png (Size: 58.69 KB / Downloads: 81)

.png  Health and Safety.png (Size: 57.88 KB / Downloads: 80)

.png  Mii Maker.png (Size: 122.47 KB / Downloads: 79)

.png  Nintendo 3DS Camera.png (Size: 172.24 KB / Downloads: 81)

.png  Nintendo 3DS Sound.png (Size: 108.18 KB / Downloads: 82)

.png  StreetPass Mii Plaza.png (Size: 155 KB / Downloads: 83) ]]> <![CDATA[C learning game]]> http://n-dev.net/showthread.php?tid=1273 Fri, 27 Apr 2012 16:40:00 +0000 http://n-dev.net/showthread.php?tid=1273 <![CDATA[Ofisial firmware.]]> http://n-dev.net/showthread.php?tid=1272 Wed, 25 Apr 2012 18:15:32 +0000 http://n-dev.net/showthread.php?tid=1272 <![CDATA[crossover Linux]]> http://n-dev.net/showthread.php?tid=1271 Mon, 23 Apr 2012 20:30:11 +0000 http://n-dev.net/showthread.php?tid=1271 I don't get this but I will try it when I get to my desktop computer. Ubuntu 11.04]]> I don't get this but I will try it when I get to my desktop computer. Ubuntu 11.04]]> <![CDATA[Crytek looking at flash support]]> http://n-dev.net/showthread.php?tid=1270 Mon, 23 Apr 2012 17:48:53 +0000 http://n-dev.net/showthread.php?tid=1270 I could think though that since they are so into making crytek engine so light they be thinking on portiing the cry engine into flash support. THat will making it extremely multiplatform and preaty fast depending on you CPU and Memory. The GPU will be use but not as much. The crytek engine 3 was release in fall 2009.]]> I could think though that since they are so into making crytek engine so light they be thinking on portiing the cry engine into flash support. THat will making it extremely multiplatform and preaty fast depending on you CPU and Memory. The GPU will be use but not as much. The crytek engine 3 was release in fall 2009.]]> <![CDATA[hey eli]]> http://n-dev.net/showthread.php?tid=1266 Fri, 20 Apr 2012 04:02:26 +0000 http://n-dev.net/showthread.php?tid=1266
Im sure other people will want to know how are things doing Tongue
Thanks in advance.]]>
Im sure other people will want to know how are things doing Tongue
Thanks in advance.]]> <![CDATA[Dolphin for Linux Ubuntu?]]> http://n-dev.net/showthread.php?tid=1264 Wed, 18 Apr 2012 01:31:35 +0000 http://n-dev.net/showthread.php?tid=1264 ]]> ]]> <![CDATA[SightLight here!]]> http://n-dev.net/showthread.php?tid=1263 Tue, 17 Apr 2012 22:24:18 +0000 http://n-dev.net/showthread.php?tid=1263
My name is Joshua and Ill be here as much time as I can. Im interested in the 3DS o get hacked. Thanks for having me here at n-dev!]]>
My name is Joshua and Ill be here as much time as I can. Im interested in the 3DS o get hacked. Thanks for having me here at n-dev!]]> <![CDATA[3DBrew.org down?]]> http://n-dev.net/showthread.php?tid=1262 Tue, 17 Apr 2012 01:48:42 +0000 http://n-dev.net/showthread.php?tid=1262 <![CDATA[The Louvre museum adopted 3DS]]> http://n-dev.net/showthread.php?tid=1261 Fri, 13 Apr 2012 16:30:59 +0000 http://n-dev.net/showthread.php?tid=1261 The original 3DS
There's no speaker?
How is it ?Is it good guide?
Does anyone live in Paris?]]> The original 3DS
There's no speaker?
How is it ?Is it good guide?
Does anyone live in Paris?]]> <![CDATA[Make GAME BGM with3DS SOUND!]]> http://n-dev.net/showthread.php?tid=1260 Sat, 07 Apr 2012 16:05:43 +0000 http://n-dev.net/showthread.php?tid=1260 <![CDATA[Hi!]]> http://n-dev.net/showthread.php?tid=1259 Tue, 20 Mar 2012 19:21:03 +0000 http://n-dev.net/showthread.php?tid=1259
Also, is there anything I can do to help you guys? I know absolutely nothing about hacking, but I have a 3DS and I have some skills working on textures and logos in Photoshop (from previously being a game modder), if those can be of any use I'd be glad to lend you guys a hand!

Syko]]>
Also, is there anything I can do to help you guys? I know absolutely nothing about hacking, but I have a 3DS and I have some skills working on textures and logos in Photoshop (from previously being a game modder), if those can be of any use I'd be glad to lend you guys a hand!

Syko]]> <![CDATA[Screen Capturing]]> http://n-dev.net/showthread.php?tid=1258 Mon, 19 Mar 2012 13:56:39 +0000 http://n-dev.net/showthread.php?tid=1258 But,it seems very hard to capture upper screen(=3D screen.)
The touch screen adopt parallel signals,but upper screen does serial.
What do you think about it?]]> But,it seems very hard to capture upper screen(=3D screen.)
The touch screen adopt parallel signals,but upper screen does serial.
What do you think about it?]]> <![CDATA[Recruiting Moderators!]]> http://n-dev.net/showthread.php?tid=327 Fri, 03 Feb 2012 06:38:15 +0000 http://n-dev.net/showthread.php?tid=327
We already have an anti-spam plug-in however it's only capable of filtering out so much out and it would be more expedient to have our own users capable of removing it, like the wiki.

Please and thanks.

jl12]]>
We already have an anti-spam plug-in however it's only capable of filtering out so much out and it would be more expedient to have our own users capable of removing it, like the wiki.

Please and thanks.

jl12]]> <![CDATA[Homebrew translation information]]> http://n-dev.net/showthread.php?tid=247 Tue, 24 Jan 2012 14:20:14 +0000 http://n-dev.net/showthread.php?tid=247 here
This page may help you translate your homebrew.
I think,homebrew have some problems:
No Standards.You have to read readme enough before setting and installing it.
No version cotrol.
No software store.You must find homebrew by Internet.
No multi-language support.So I create the page above.
[PM]
elisherer,I used your software as an example.]]> here
This page may help you translate your homebrew.
I think,homebrew have some problems:
No Standards.You have to read readme enough before setting and installing it.
No version cotrol.
No software store.You must find homebrew by Internet.
No multi-language support.So I create the page above.
[PM]
elisherer,I used your software as an example.]]> <![CDATA[Hacked forum...]]> http://n-dev.net/showthread.php?tid=157 Sun, 15 Jan 2012 21:28:07 +0000 http://n-dev.net/showthread.php?tid=157
There are almost 600 "registered" users which 30 of them have a birthday everyday...And I see posts from only less than 10 users...]]>
There are almost 600 "registered" users which 30 of them have a birthday everyday...And I see posts from only less than 10 users...]]> <![CDATA[Should we create a moderator group to keep out spam]]> http://n-dev.net/showthread.php?tid=130 Fri, 13 Jan 2012 03:48:21 +0000 http://n-dev.net/showthread.php?tid=130
What do you think?]]>
What do you think?]]> <![CDATA[Nintendo Zone Box ]]> http://n-dev.net/showthread.php?tid=95 Fri, 06 Jan 2012 05:29:51 +0000 http://n-dev.net/showthread.php?tid=95 [Image: attachment.php?aid=15]
[Image: attachment.php?aid=16]
[Image: attachment.php?aid=17]
According to the manual, its the Nintendo Zone Box (model no. NZB-001) for DSs. However it uses the DSI/3DS charger cord and uses Development card with a red label as opposed to blue.Huh

Either way, I've never seen one of these before, on the internet or at all.

What do you think?

.pdf  manual.pdf (Size: 1.66 MB / Downloads: 244)

.pdf  test setup.pdf (Size: 689.61 KB / Downloads: 206)

.png  back.png (Size: 722.14 KB / Downloads: 958)

.png  left side.png (Size: 750.35 KB / Downloads: 853)

.png  right side.png (Size: 766.53 KB / Downloads: 861) ]]> [Image: attachment.php?aid=15]
[Image: attachment.php?aid=16]
[Image: attachment.php?aid=17]
According to the manual, its the Nintendo Zone Box (model no. NZB-001) for DSs. However it uses the DSI/3DS charger cord and uses Development card with a red label as opposed to blue.Huh

Either way, I've never seen one of these before, on the internet or at all.

What do you think?

.pdf  manual.pdf (Size: 1.66 MB / Downloads: 244)

.pdf  test setup.pdf (Size: 689.61 KB / Downloads: 206)

.png  back.png (Size: 722.14 KB / Downloads: 958)

.png  left side.png (Size: 750.35 KB / Downloads: 853)

.png  right side.png (Size: 766.53 KB / Downloads: 861) ]]> <![CDATA[Mario Kart 7 Networking]]> http://n-dev.net/showthread.php?tid=92 Wed, 04 Jan 2012 05:22:52 +0000 http://n-dev.net/showthread.php?tid=92
This is not complete, nor may it be correct.

Connection Sequence
This is what I observed. It may not hold from match to match.

1. 3DS connects to nasc.nintendowifi.net:443. They exchange some unknown data, then the 3DS disconnects.

All further communication occurs over UDP.

2. Lookup nncs1.app.nintendowifi.net and nncs2.app.nintendowifi.net. The 3DS communicates with these two hosts for a few seconds.

3. The 3DS starts communicating with 202.32.117.114. No DNS query for this host was observed so perhaps one of the two above hosts tells the 3DS about this host.

4. The 3DS starts communicating with 118.151.128.7. No DNS query was observed for this host either. For the remainder of the the packet trace I have observed small "heartbeat" messages sent/received to and from this server every 10 seconds.

5. I input to join a race. The 3DS communicates with nncs1.app.nintendowifi.net for a bit then starts communicating with 201.227.156.3. It will talk to this host a lot for the remainder of my race session. No DNS query for this host either.

6. A few seconds later my 3DS gets this packet from the above host:
Code:
????p??6??????????????????)??? ?????)??????a?prudp:/address=24.150.216.232;port=53803;natf=1;natm=1;pmp=0;sid=15;type=3;upnp=0;RVCID​=25919327?(?prudp:/address=192.168.0.186;port=53803??)??????a?prudp:/address=210.142.237.97;port=58632;natf=2;natm=1;pmp=0;sid=15;type=3;upnp=0;RVCID​=25928610?'?prudp:/address=192.168.11.2;port=58632??)??????_?prudp:/address=92.205.9.197;port=56716;natf=2;natm=1;pmp=0;sid=15;type=3;upnp=0;RVCID=2​5933261?)?prudp:/address=192.168.178.38;port=56716??)??????b?prudp:/address=110.158.146.228;port=63630;natf=1;natm=1;pmp=0;sid=15;type=3;upnp=0;RVCI​D=25938004?&?prudp:/address=192.168.0.2;port=61628??)??????`?prudp:/address=58.183.24.221;port=49393;natf=2;natm=1;pmp=0;sid=15;type=3;upnp=0;RVCID=​25939714?&?prudp:/address=192.168.0.5;port=49393??)??????a?prudp:/address=86.161.137.202;port=63571;natf=2;natm=1;pmp=0;sid=15;type=3;upnp=0;RVCID​=25941436?'?prudp:/address=192.168.1.69;port=63571?c???????????????)??? ???G???C???????????????????????????????????????1749409??????????????????????????​?????????????????? ???)???)???????????k?
This is most likely the information about how to connect to my opponents. You can see their public IPs followed by their private IPs on the next line. Not sure about the other values. They probably represent the detected NAT and firewall configurations. RVCID may be a unique ID assigned to each racer. Not sure what the 1749409 is.

7. More chatter with ..156.3 including this packet being sent from my 3DS to ..156.3.
Code:
?????. uI????????????????)????_?prudp:/address=68.96.**.***;port=65233;natf=2;natm=1;pmp=0;sid=15;type=3;upnp=0;RVCID=2​5940467?(?prudp:/address=192.168.1.109;port=65233????????????????????????????????)???????????
(Last digits of my IP removed by me.)
This one is my entry. Not sure why my 3DS is sending it now. My guess is that I was joining an existing group and now the server must send them my info so they can find me.

8. Some more chatter with ..128.7. This is longer than the usual "heartbeat" but it did occur on the 10 second mark so idk if it is related. Chatter with ..156.3 continues as well.

9. My 3DS starts talking to the other 3DS'. The order appears arbitrary. We each seem to exchange those prudp:/ messages with each other.

We select racers, tracks, and the race starts. Some notes about observations during the race follow:

During the race my 3DS sends status packets continuously to all the other racers except 210... who it stopped communicating with around the time of track selection. I can't recall if they D/C'd. This leads me to believe they are using a p2p topology like all the other MK games.

I noticed my 3DS was sending what I assume to be status packets to ..156.3. continuously during the race. Not sure why is would do this unless ninty wants to snoop on your races. It may be to broadcast the race to ppl waiting to join the next one yet I observed my 3DS began sending status packets to a new host: 67.3.171.7 (who I assume was another player) in the middle of the race. So there goes that theory. Creepy...

General Observations

Finding those plaintext prudp:/ messages probably means the communication is not compressed or encrypted (aside from that initial SSL connection).
All messages sent between the 3DS' and ..156.3 began with 0x1111.
I looked for Mii name strings but was unable to find any. Most likely they are UTF-16 and may be compressed (along with the other Mii data that must be sent).

That's all

Hopefully I can record myself next time I do a capture to match what is happening when.]]>
This is not complete, nor may it be correct.

Connection Sequence
This is what I observed. It may not hold from match to match.

1. 3DS connects to nasc.nintendowifi.net:443. They exchange some unknown data, then the 3DS disconnects.

All further communication occurs over UDP.

2. Lookup nncs1.app.nintendowifi.net and nncs2.app.nintendowifi.net. The 3DS communicates with these two hosts for a few seconds.

3. The 3DS starts communicating with 202.32.117.114. No DNS query for this host was observed so perhaps one of the two above hosts tells the 3DS about this host.

4. The 3DS starts communicating with 118.151.128.7. No DNS query was observed for this host either. For the remainder of the the packet trace I have observed small "heartbeat" messages sent/received to and from this server every 10 seconds.

5. I input to join a race. The 3DS communicates with nncs1.app.nintendowifi.net for a bit then starts communicating with 201.227.156.3. It will talk to this host a lot for the remainder of my race session. No DNS query for this host either.

6. A few seconds later my 3DS gets this packet from the above host:
Code:
????p??6??????????????????)??? ?????)??????a?prudp:/address=24.150.216.232;port=53803;natf=1;natm=1;pmp=0;sid=15;type=3;upnp=0;RVCID​=25919327?(?prudp:/address=192.168.0.186;port=53803??)??????a?prudp:/address=210.142.237.97;port=58632;natf=2;natm=1;pmp=0;sid=15;type=3;upnp=0;RVCID​=25928610?'?prudp:/address=192.168.11.2;port=58632??)??????_?prudp:/address=92.205.9.197;port=56716;natf=2;natm=1;pmp=0;sid=15;type=3;upnp=0;RVCID=2​5933261?)?prudp:/address=192.168.178.38;port=56716??)??????b?prudp:/address=110.158.146.228;port=63630;natf=1;natm=1;pmp=0;sid=15;type=3;upnp=0;RVCI​D=25938004?&?prudp:/address=192.168.0.2;port=61628??)??????`?prudp:/address=58.183.24.221;port=49393;natf=2;natm=1;pmp=0;sid=15;type=3;upnp=0;RVCID=​25939714?&?prudp:/address=192.168.0.5;port=49393??)??????a?prudp:/address=86.161.137.202;port=63571;natf=2;natm=1;pmp=0;sid=15;type=3;upnp=0;RVCID​=25941436?'?prudp:/address=192.168.1.69;port=63571?c???????????????)??? ???G???C???????????????????????????????????????1749409??????????????????????????​?????????????????? ???)???)???????????k?
This is most likely the information about how to connect to my opponents. You can see their public IPs followed by their private IPs on the next line. Not sure about the other values. They probably represent the detected NAT and firewall configurations. RVCID may be a unique ID assigned to each racer. Not sure what the 1749409 is.

7. More chatter with ..156.3 including this packet being sent from my 3DS to ..156.3.
Code:
?????. uI????????????????)????_?prudp:/address=68.96.**.***;port=65233;natf=2;natm=1;pmp=0;sid=15;type=3;upnp=0;RVCID=2​5940467?(?prudp:/address=192.168.1.109;port=65233????????????????????????????????)???????????
(Last digits of my IP removed by me.)
This one is my entry. Not sure why my 3DS is sending it now. My guess is that I was joining an existing group and now the server must send them my info so they can find me.

8. Some more chatter with ..128.7. This is longer than the usual "heartbeat" but it did occur on the 10 second mark so idk if it is related. Chatter with ..156.3 continues as well.

9. My 3DS starts talking to the other 3DS'. The order appears arbitrary. We each seem to exchange those prudp:/ messages with each other.

We select racers, tracks, and the race starts. Some notes about observations during the race follow:

During the race my 3DS sends status packets continuously to all the other racers except 210... who it stopped communicating with around the time of track selection. I can't recall if they D/C'd. This leads me to believe they are using a p2p topology like all the other MK games.

I noticed my 3DS was sending what I assume to be status packets to ..156.3. continuously during the race. Not sure why is would do this unless ninty wants to snoop on your races. It may be to broadcast the race to ppl waiting to join the next one yet I observed my 3DS began sending status packets to a new host: 67.3.171.7 (who I assume was another player) in the middle of the race. So there goes that theory. Creepy...

General Observations

Finding those plaintext prudp:/ messages probably means the communication is not compressed or encrypted (aside from that initial SSL connection).
All messages sent between the 3DS' and ..156.3 began with 0x1111.
I looked for Mii name strings but was unable to find any. Most likely they are UTF-16 and may be compressed (along with the other Mii data that must be sent).

That's all

Hopefully I can record myself next time I do a capture to match what is happening when.]]>