Author | Message | Time |
---|---|---|
Sveet | i was sniffing some packets and caught this one: [code]0000 ff 44 09 00 07 01 00 00 00[/code] bndocs doesn't list a 0x07, does anyone know what it means? my client sent it directly after sending 0x0a bnet replied: [code]0000 ff 44 1d 00 07 01 00 00 00 01 00 34 0b c1 2b ea 0010 c9 01 fd de 00 00 00 00 00 00 02 19 00[/code] on a very side note: i am tracking packets to madserver.net i have no idea what that is nor any way to stop it. ideas? | June 10, 2009, 8:40 AM |
HdxBmx27 | MadServer.net is the new ad system [quote]- Battle.net now uses a new banner ad system.[/quote] I believe that's what they are referring to. If you're worried about it kill these domains: madserver.net ad.madserver.net imp.madserver.net media.madserver.net locate.madserver.net | June 10, 2009, 11:10 AM |
Maged | [quote author=Sveet link=topic=17982.msg182931#msg182931 date=1244623247]bndocs doesn't list a 0x07, does anyone know what it means? my client sent it directly after sending 0x0a[/quote] According to BNalyzer... [img]http://maged.lordaeron.org/0x44_subcmd0x07.png[/img] | June 10, 2009, 5:19 PM |
Sveet | oh cool i was going off http://www.bnetdocs.org/?op=packet&pid=393 and thanks about the madserver thing, i was worried i might have some custom keylogger, cause it only showed up when i went on bnet. | June 10, 2009, 6:03 PM |
iCe | where does one find this BNalyzer?? | June 10, 2009, 7:08 PM |
HdxBmx27 | If someone can format that properly I'll add her into the BnetDocs specs so this doesn't happen again. [From the screen shot I don't know the sizes of any of the properties] [code] C->S: For subcommand 0x07 (Tournament Request): (DWORD) Cookie S->C: For subcommand 0x07 (Tournament Request): (DWORD) Cookie (STRING) Status * (FILETIME) Start/Ending Date (WORD) Unknown (WORD) Unknown (BYTE) Wins (BYTE) Losses (BYTE) Draws (BYTE) Unknown (BYTE) Unknown (BYTE) Unknown (BYTE) Unknown[/code] Anyone mine finding out what the unknowns are? And the possible other statuses? | June 10, 2009, 9:24 PM |
Sveet | http://realityripple.com/Uploads/Projects/BNalyzer.zip it works really good, i found it after his post. i dunno why nobody ever mentioned this before XD | June 10, 2009, 10:51 PM |