SNAC(04,07)/CH2  SRV_CLIENT_ICBM_CH2 

This is the message from server that was sent by another client. It contain two parts: fixed part (sender uin, msg-id cookie, channel, sender info) and message data part. See also additional information about online userinfo block.

 00 04   word   SNAC family
 00 07   word   SNAC subtype
 00 00   word   SNAC flags
 xx xx xx xx   dword   SNAC request-id
 xx xx xx xx
 xx xx xx xx
  qword   msg-id cookie
 00 02   word   message channel
 xx   byte   screenname string length
 xx ..   string   screenname string
 xx xx   word   sender warning level
 xx xx   word   number of TLVs in fixed part
 00 01   word   TLV.Type(0x01) - user class
 00 02   word   TLV.Length
 xx xx   word   user class
 00 06   word   TLV.Type(0x06) - user status
 00 04   word   TLV.Length
 xx xx xx xx   dword   user status
 00 0F   word   TLV.Type(0x0F) - online time
 00 04   word   TLV.Length
 xx xx xx xx   dword   client online time
 00 03   word   TLV.Type(0x03) - account creation time
 00 04   word   TLV.Length
 xx xx xx xx   dword   user account creation time

 00 05   word   TLV.Type(0x05) - rendezvous message data
 xx xx   word   TLV.Length
 xx xx   word   message type (0 - request, 1 - cancel, 2 - accept)
 xx xx xx xx
 xx xx xx xx
  qword   msg-id cookie (same as above)
 xx .. xx   guid   capability (determines format of message data in "extention data" below)
 00 04   word   TLV.Type(0x04) - external ip
 xx xx   word   TLV.Length
 xx xx xx xx   dword   external ip
 00 05   word   TLV.Type(0x05) - listening port
 xx xx   word   TLV.Length
 xx xx   word   listening port
 00 0A   word   TLV.Type(0x0A) - unknown
 xx xx   word   TLV.Length
 xx xx   word   unknown (usually 1)
 00 0B   word   TLV.Type(0x0B) - unknown
 xx xx   word   TLV.Length
 xx xx   word   unknown
 00 0F   word   TLV.Type(0x0F) - unknown
 00 00   word   TLV.Length
 empty
 27 11   word   TLV.Type(0x2711) - extention data
 xx xx   word   TLV.Length
Following contents is capability-specific.
Data format description for capability {09461349-4C7F-11D1-8222-444553540000}
 xx xx   word (LE)   length of following data
 xx xx   word (LE)   protocol version
 xx .. xx   guid (LE)   plugin or zero bytes
 xx xx   word   unknown
 xx xx xx xx   dword (LE)   client capabilities flags
 xx   byte   unknown
 xx xx   word (LE)   seems to be a downcounter
 xx xx   word (LE)   length of following data
 xx xx   word (LE)   seems to be a downcounter as in first chunk above
 xx ..     unknown, usually zeros
if plugin field in first chunk above is zero,
here is message, overwise here is plugin-specific data.

Example SNAC dumps with flap header:

  2A 02 08 2C 01 9D 00 04 00 07 00 00 90 2F 30 11  *..,......./0.
  70 95 A0 00 26 1F 00 00 00 02 07 31 32 33 34 35  p.&......12345
  36 37 00 00 00 04 00 01 00 02 00 50 00 06 00 04  67.........P....
  20 12 00 00 00 0F 00 04 00 00 06 F3 00 03 00 04   ..............
  40 5A 93 78 00 05 01 5B 00 00 70 95 A0 00 26 1F  @Zx...[..p.&.
  00 00 09 46 13 49 4C 7F 11 D1 82 22 44 45 53 54  ...F.IL.T"DEST
  00 00 00 0A 00 02 00 01 00 0F 00 00 27 11 01 33  ............'..3
  1B 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  00 00 00 00 00 00 03 00 00 00 00 E3 FF 0E 00 E3  .............
  FF 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00  ...............
  00 21 00 CC 00 7B 5C 72 74 66 31 5C 61 6E 73 69  .!..{\rtf1\ansi
  5C 61 6E 73 69 63 70 67 31 32 35 31 5C 64 65 66  \ansicpg1251\def
  66 30 5C 64 65 66 6C 61 6E 67 31 30 34 39 7B 5C  f0\deflang1049{\
  66 6F 6E 74 74 62 6C 7B 5C 66 30 5C 66 6E 69 6C  fonttbl{\f0\fnil
  5C 66 63 68 61 72 73 65 74 32 30 34 7B 5C 2A 5C  \fcharset204{\*\
  66 6E 61 6D 65 20 4D 53 20 53 61 6E 73 20 53 65  fname MS Sans Se
  72 69 66 3B 7D 4D 53 20 53 68 65 6C 6C 20 44 6C  rif;}MS Shell Dl
  67 3B 7D 7D 0D 0A 7B 5C 63 6F 6C 6F 72 74 62 6C  g;}}..{\colortbl
  20 3B 5C 72 65 64 30 5C 67 72 65 65 6E 30 5C 62   ;\red0\green0\b
  6C 75 65 30 3B 7D 0D 0A 5C 76 69 65 77 6B 69 6E  lue0;}..\viewkin
  64 34 5C 75 63 31 5C 70 61 72 64 5C 63 66 31 5C  d4\uc1\pard\cf1\
  66 30 5C 66 73 32 30 3C 23 23 69 63 71 69 6D 61  f0\fs20<##icqima
  67 65 30 30 30 38 3E 5C 70 61 72 0D 0A 7D 0D 0A  ge0008>\par..}..
  00 00 00 00 00 FF FF FF 00 26 00 00 00 7B 39 37  ......&...{97
  42 31 32 37 35 31 2D 32 34 33 43 2D 34 33 33 34  B12751-243C-4334
  2D 41 44 32 32 2D 44 36 41 42 46 37 33 46 31 34  -AD22-D6ABF73F14
  39 32 7D                                         92}


  Main | Basic | Login | Snaclist | Sequences | Misc | Changes | Credits | Terms