• Welcome to Valhalla Legends Archive.
 

Packet 0x72 Information

Started by shadypalm88, September 07, 2003, 04:58 PM

Previous topic - Next topic

shadypalm88

I've been recieving unhandled packets from Battle.Net that have the unwelcome effect of dropping my bot.  It would appear that they are being sent intentionally.  My first guess was that this is a clan invitation packet, but since I'm not on WAR3 that doesn't make much sense.

Here's the dump zDS gives:
Info:  Cloaked has received an unknown packet from the server.
 0000   FF 72 7B 00 47 5E 00 00 - 6B 6A 68 67 68 6B 6A 00   .r{.G^..kjhghkj.
 0010   48 54 52 61 50 00 09 53 - 74 72 65 74 63 68 73 6C   HTRaP..Stretchsl
 0020   6F 77 00 24 24 24 2E 24 - 24 24 00 73 6F 29 42 2E   ow.$$$.$$$.so)B.
 0030   49 2E 54 2E 43 2E 48 28 - 00 53 4F 29 69 6D 63 72   I.T.C.H(.SO)imcr
 0040   61 7A 79 28 00 4D 6F 69 - 73 74 75 72 65 45 79 65   azy(.MoistureEye
 0050   73 00 53 4F 29 54 61 6C - 70 68 6F 6E 28 00 53 4F   s.SO)Talphon(.SO
 0060   29 44 61 52 4B 28 00 43 - 6C 6F 61 6B 65 64 00 53   )DaRK(.Cloaked.S
 0070   68 69 76 61 4F 70 74 69 - 6F 6E 00                  hivaOption.


Any ideas on what that is or anything I can do to block it?  I'm not sure if it's on bnetdocs or not because I can't login to it.

iago

Do those names mean anything to you?  Friendlist perhaps?
This'll make an interesting test for broken AV:
QuoteX5O!P%@AP[4\PZX54(P^)7CC)7}$EICAR-STANDARD-ANTIVIRUS-TEST-FILE!$H+H*


shadypalm88

#2
Sorry, forgot that detail.  It is a list of people in the channel, or at least a partial list.  I'm thinking HTrap is the initiator since his name is followed by two null bytes instead of the one null byte terminating all other names.

Spht

Quote from: shadypalm88 on September 07, 2003, 04:58 PM
I've been recieving unhandled packets from Battle.Net that have the unwelcome effect of dropping my bot.  It would appear that they are being sent intentionally.  My first guess was that this is a clan invitation packet, but since I'm not on WAR3 that doesn't make much sense.

Here's the dump zDS gives:
Info:  Cloaked has received an unknown packet from the server.
 0000   FF 72 7B 00 47 5E 00 00 - 6B 6A 68 67 68 6B 6A 00   .r{.G^..kjhghkj.
 0010   48 54 52 61 50 00 09 53 - 74 72 65 74 63 68 73 6C   HTRaP..Stretchsl
 0020   6F 77 00 24 24 24 2E 24 - 24 24 00 73 6F 29 42 2E   ow.$$$.$$$.so)B.
 0030   49 2E 54 2E 43 2E 48 28 - 00 53 4F 29 69 6D 63 72   I.T.C.H(.SO)imcr
 0040   61 7A 79 28 00 4D 6F 69 - 73 74 75 72 65 45 79 65   azy(.MoistureEye
 0050   73 00 53 4F 29 54 61 6C - 70 68 6F 6E 28 00 53 4F   s.SO)Talphon(.SO
 0060   29 44 61 52 4B 28 00 43 - 6C 6F 61 6B 65 64 00 53   )DaRK(.Cloaked.S
 0070   68 69 76 61 4F 70 74 69 - 6F 6E 00                  hivaOption.


Any ideas on what that is or anything I can do to block it?  I'm not sure if it's on bnetdocs or not because I can't login to it.

You receive this message when someone has selected a set of candidates to create a clan. You were invited.

UserLoser

You can invite users to a Warcraft III arranged team game on a non-war3 client, i've done it on warcraft ii

Maddox

Quote from: shadypalm88 on September 07, 2003, 05:15 PM
Sorry, forgot that detail.  It is a list of people in the channel, or at least a partial list.  I'm thinking HTrap is the initiator since his name is followed by two null bytes instead of the one null byte terminating all other names.

His name isn't followed by 2 null bytes.
asdf.

Soul Taker

Quote from: Maddox on September 08, 2003, 01:41 AM
Quote from: shadypalm88 on September 07, 2003, 05:15 PM
Sorry, forgot that detail.  It is a list of people in the channel, or at least a partial list.  I'm thinking HTrap is the initiator since his name is followed by two null bytes instead of the one null byte terminating all other names.

His name isn't followed by 2 null bytes.
Nope, it's followed by a null and the number of items in the list!