1 |
4ae45b10
|
Ermal Luçi
|
# Battlefield 2 - An EA game.
|
2 |
|
|
# Pattern attributes: ok slow notsofast
|
3 |
|
|
# Protocol groups: game proprietary
|
4 |
|
|
# Wiki: http://www.protocolinfo.org/wiki/Battlefield_2
|
5 |
66f2dd0e
|
Ermal Lu?i
|
# Copyright (C) 2008 Matthew Strait, Ethan Sommer; See ../LICENSE
|
6 |
4ae45b10
|
Ermal Luçi
|
#
|
7 |
|
|
# This pattern is unconfirmed except implicitly by a comment on protocolinfo.
|
8 |
|
|
|
9 |
|
|
battlefield2
|
10 |
|
|
# gameplay|account-login|server browsing/information
|
11 |
|
|
# See http://protocolinfo.org/wiki/Battlefield_2
|
12 |
|
|
# Can we put a ^ on the last branch? If so, nosofast --> veryfast
|
13 |
|
|
|
14 |
|
|
# 193.85.217.35 on protocolinfo says:
|
15 |
|
|
# The first part of the pattern, \x11\x20\x01\xa0\x98\x11, has to be
|
16 |
|
|
# modified for different version of Battlefield 2. The gameplay part of
|
17 |
|
|
# pattern for BF2 v1.4 is \x11\x20\x01\x30\xb9\x10\x11, and for BF2
|
18 |
|
|
# v1.41 is \x11\x20\x01\x50\xb9\x10\x11
|
19 |
|
|
#
|
20 |
|
|
# Rather than put all of those in, I've just gone with "...?" in the
|
21 |
|
|
# middle.
|
22 |
|
|
|
23 |
|
|
^(\x11\x20\x01...?\x11|\xfe\xfd.?.?.?.?.?.?(\x14\x01\x06|\xff\xff\xff))|[]\x01].?battlefield2
|
24 |
|
|
|
25 |
|
|
# Pattern prior to 193.85.217.35's comment on protocolinfo:
|
26 |
|
|
#^(\x11\x20\x01\xa0\x98\x11|\xfe\xfd.?.?.?.?.?.?(\x14\x01\x06|\xff\xff\xff))|[]\x01].?battlefield2
|