sthalik 10 Posted September 5, 2011 Hey, I've been sniffing out what the ArmA II OA process spits out through UDP to my server and I have no idea how to replicate it. There's a sequence of 2 packets: 01:50:15.254187 IP 109.173.135.185.63334 > 78.152.23.83.2302: UDP, length 7 0x0000: 4500 0023 0a03 4000 7c11 9975 6dad 87b9 E..#..@.|..um... 0x0010: 4e98 1753 f766 08fe 000f 8410 fefd 0982 N..S.f.......... 0x0020: 0e89 0900 0000 0000 0000 0000 0000 .............. 01:50:15.254489 IP 78.152.23.83.2302 > 109.173.135.185.63334: UDP, length 16 0x0000: 4500 002c 0000 4000 4011 df6f 4e98 1753 E..,..@.@..oN..S 0x0010: 6dad 87b9 08fe f766 0018 5b7b 0982 0e89 m......f..[{.... 0x0020: 0931 3039 3933 3332 3633 3700 .1099332637. 01:50:15.265886 IP 109.173.135.185.63334 > 78.152.23.83.2302: UDP, length 39 0x0000: 4500 0043 0a06 4000 7c11 9952 6dad 87b9 E..C..@.|..Rm... 0x0010: 4e98 1753 f766 08fe 002f f5c9 fefd 0082 N..S.f.../...... 0x0020: 0e89 0941 867c 1d19 0104 080a 0506 6f10 ...A.|........o. 0x0030: 1364 6566 6768 696a 6b6c 6d1f 6e70 7271 .defghijklm.nprq 0x0040: 7300 00 s.. 01:50:15.266092 IP 78.152.23.83.2302 > 109.173.135.185.63334: UDP, length 849 0x0000: 4500 036d 0000 4000 4011 dc2e 4e98 1753 E..m..@.@...N..S 0x0010: 6dad 87b9 08fe f766 0359 5ebc 0082 0e89 m......f.Y^..... 0x0020: 0943 4f53 4120 506f 6c69 7368 2043 6f6f .COSA.Polish.Coo 0x0030: 7020 4772 6f75 7000 0030 0032 3400 0000 p.Group..0.24... [...] Apparently the reply to the first one is some 'seed' value that has to be represented in the ping-value for the second one. But I don't know the transformation for it. Perhaps there's some one-time pad involved? Anyone can manage to query my server for the player list and can share some code? TIA, -sh Share this post Link to post Share on other sites
nuxil 2 Posted September 5, 2011 (edited) How could you miss this one? a few threads below http://forums.bistudio.com/showthread.php?t=78332 you also might want to read this thread http://forums.bistudio.com/showthread.php?t=120552&page=12 Edited September 5, 2011 by nuxil Share this post Link to post Share on other sites