| 1 |
4ae45b10
|
Ermal Luçi
|
# MSN (Micosoft Network) Messenger file transfers (MSNFTP and MSNSLP)
|
| 2 |
66f2dd0e
|
Ermal Lu?i
|
# Pattern attributes: good fast fast
|
| 3 |
4ae45b10
|
Ermal Luçi
|
# Protocol groups: chat document_retrieval proprietary
|
| 4 |
|
|
# Wiki: http://www.protocolinfo.org/wiki/MSN_Messenger
|
| 5 |
66f2dd0e
|
Ermal Lu?i
|
# Copyright (C) 2008 Matthew Strait, Ethan Sommer; See ../LICENSE
|
| 6 |
4ae45b10
|
Ermal Luçi
|
#
|
| 7 |
|
|
# http://www.hypothetic.org/docs/msn/client/file_transfer.php
|
| 8 |
|
|
|
| 9 |
|
|
# NOTE! This pattern does not catch the modern type of MSN filetransfers
|
| 10 |
|
|
# because they use the same TCP connection as the chat itself. See
|
| 11 |
|
|
# ../example_traffic/msn_chat_and_file_transfer.txt for a demonstration.
|
| 12 |
|
|
|
| 13 |
|
|
# This pattern has been tested and seems to work well. It, does,
|
| 14 |
|
|
# however, require more testing with various versions of the official
|
| 15 |
|
|
# MSN client as well as with clones such as Trillian, Miranda, Gaim,
|
| 16 |
|
|
# etc. If you are using a MSN clone and this pattern DOES work for you,
|
| 17 |
|
|
# please, also let us know.
|
| 18 |
|
|
|
| 19 |
|
|
# First part matches the older MSNFTP: A MSN filetransfer is a normal
|
| 20 |
|
|
# MSN connection except that the protocol is MSNFTP. Some clients
|
| 21 |
|
|
# (especially Trillian) send other protocol versions besides MSNFTP
|
| 22 |
|
|
# which should be matched by the [ -~]*.
|
| 23 |
|
|
|
| 24 |
|
|
# Second part matches newer MSNSLP:
|
| 25 |
|
|
# http://msnpiki.msnfanatic.com/index.php/MSNC:MSNSLP
|
| 26 |
|
|
# This part is untested.
|
| 27 |
|
|
|
| 28 |
|
|
msn-filetransfer
|
| 29 |
|
|
^(ver [ -~]*msnftp\x0d\x0aver msnftp\x0d\x0ausr|method msnmsgr:)
|