From b08a86f0b8b92e8355cabab9a894edc992aa1ad6 Mon Sep 17 00:00:00 2001
From: BodgeMaster <>
Date: Thu, 29 Dec 2022 03:28:18 +0100
Subject: [PATCH] resources: Add network capture of a server list ping

---
 resources/README.md                        |    8 +
 resources/network_capture/ping.pcapng      |  Bin 0 -> 3232 bytes
 resources/network_capture/ping_decoded.txt | 1434 ++++++++++++++++++++
 3 files changed, 1442 insertions(+)
 create mode 100644 resources/network_capture/ping.pcapng
 create mode 100644 resources/network_capture/ping_decoded.txt

diff --git a/resources/README.md b/resources/README.md
index ee5d485..15442a0 100644
--- a/resources/README.md
+++ b/resources/README.md
@@ -27,6 +27,14 @@ Data used to test the NBT library
 `level.dat_decompressed`: The same data decompressed
 
 
+## network_capture/
+
+Network captures used to get an understanding of the protocol
+
+`ping.pcapng`: WireShark capture of the multipayer screen server ping
+`ping_decoded.txt`: Extracted TCP payloads from the network capture annotated with what’s happening
+
+
 ## unicode_data/
 
 Files with unicode data
diff --git a/resources/network_capture/ping.pcapng b/resources/network_capture/ping.pcapng
new file mode 100644
index 0000000000000000000000000000000000000000..fea0759635c565e83b265ae65be64ac6bb9a0e20
GIT binary patch
literal 3232
zcmaKvTZ|i58OLWg*>saOw4t!sgi0L@4~d-E9(!gy-c}*w8DG}7wLQLWDx~pT?6K#5
zwH<=O6DUIJ3olefDlddb9{Pa9OIV4Ah(Lk1Kp>Hl2#JITREbh06#>ri24}Oo^plRx
znd|TTzi)j0$48DHJ@QioLCUX(PcDG|KTl#2A(3_6mDE%9(<o!u(y2!IG^!-eCX=yP
z5oM}P^gN13;;~$Qik=D-cYtzS2AnvJAP11+NJ-JXF-k-*A`&}GkZ1dnF4>BJ97NU-
z*3(RZH_=mV#g?1_Z;wu+i3k~qqo;C;i~8GRlNUyOUlLK?*}i%fz8eOdFPy9Uq({J8
z7m>q=q?<7(fypE|e;C|x81&C0Uq%qquw67x5F~-}x`+-8$3-<omjs)a-H2j>`(F5r
zIfKhH)*;ZV@BqZS$B5%Mt_|)Kz!<h$KZ;-f1^LRCj(*?&`7)A0kk?lZoJY<dx^nXf
zNXWGxzlVQ_3b)DY4<Ev(-&y?hqqjbXAd3f=-aWXue8l<5`)zoB;lP3Cwi&xwfBD|U
zIcuA;P26T7$a&;zhkkeqav)E*{UJ(Mn(qVNqjx_4@9z}<@RW7oZ`b|=dC#&$hz9|6
zedV=p+)0BmY<qO!D+gz~?(EX_2=G3*{L;cFZ-J>VEX*`@APYg@yP=*jXfPlnn|pA#
z1;()LVdPhqW{h9%%UA`BlXHd%880KBEWNO^qQY(Pfj}PQ?$q|p%YVPif^)F#;gTzd
zX53rPavvR?X@lJ5XSoY=Z95rTe_X!zzx?f~6`r{PYxTzJu3CLSUVn5H<nOWnV4DGS
z{R7kqe4OyzyLDXn))zmE@v9l*_&$smXN<r8KgP8s00RMQbobn=_kIA5VcV@^>CMcq
zA*1!PeHp6@k0bw@Gd_kozz^Z~M=pj$$q{VDbQMDntz8Vc(%22Hg|@EpoM-!r&#S0r
zh!W~ZwlCR{t*c2i$7>R*@e|bcbktFeK%Jn9{Dv-#CBbvS0%6E9%A>MsnC1i(6=xJd
zx31z_SJg6jlZM)o<$;ApjD#+o37INCk!%N|HGUjg!(wMbhOUCeAhZ?(*8$XdGBq7=
z!PKw_Mn&Qw@ThILhG3|nwIo4-TV>u?1gIh;@-DxoXkfL9ntK1W9`8sbenx4fH|jyG
znClxfhzi#nWSV_2%D}@k&Cp%YGZx>;OJKlen`)-ks^c9u-mA9pX06U-$0@5xhlBK}
zkft)~`lzST1s%_I2bEfaqBS7{5CTnY)Wl(}Creh!^exiU#i;40Ohzh2EkD6){3y?*
zB-QESM3D4^K2G(<LQv<h?&ib}hm+nA@Ad>o#sfdCkt8+j)?Kzz+)(U|MlE2Xjm>nL
z7g^bI8N;tII@akoTiPH>`h7$8(-My}X_BlEiVpgCix}9MX)wYqk+-;3i4g;b5i3y{
zt9MK-XlZP@P>J;zHCGI)#*}Nd(;L|~$qjPqz%@6?ioi_UrD0i#VO>h=#i)3y(~wI7
zYt?0=q;LbKRir2DWmoM?5@}K}6G^ty8Df?CFz8j|aw?V))UcT7=3^a!ZWcJAmQ!;U
zm$s%pt>FD`QyqZk1#Hr&CaG)|=VQ4<i4qz_X|Rrst4_09RR&&-u_$bv5exZ31(Q@p
zr5o$`xYsO~26~$=$b{dC#l&`utyab*r`64~?#QYzO;)NaJj>DLYOkLzsczPbVugG@
zN~UsnYoZ#yC`YkerI9Lws>kY9t!Wu)O)K@S4Z+XjMerG=eQwigPlj!pj92=~u+{5g
zd_T8owYnpwNMaRbD)QZ|)Nr|C*~R4YxXk$FI88@eicu1#U0!K#l9P^+A*w-}Z;R{G
ziq3WIwyJf*Qk<<<tVVf6c+)Z~(PVDZoMyeQvoST9!g^p%`4Uw~<?I~6GWn=&6H(Ec
zm|C-!!|2uq;fR}?oo;PY#3_u?Yw@0%BR4Xma$ppjg6woGvC)s?)%*aT^y)%!B;}K&
z7;QLVe-h27I@NMN>yD_ZEmLft9}KvmF{!z#ZZ>c;whn7SWh{MMEMjJ(Lr1AeL5hvm
zlUPP;DVsS?wVOVhi4j;)$a!qKUKy5)M2u5XeA_KbS**}V=JRwrVN?qw$EC`Apn5H7
zk}1eI?~JQdw^Cx07~l4)d5&xcQOzy~SW~J_0kJpS7&$x_C>^gqa9KZU)NLEbw5*iX
z;&_%AO_^a&U<ASps1z~qM~PrmN-&*FCvZxMbTuufYf*3=3$iRhiD8Rk6e=jnEh#&0
z^Q>(8v|(3hor(|ot$eM8$wE9W7-6cd6;gOP(P)iykLJa!Q^MR)w&ClN(PcGxnvAmX
zcGipQekxg{;OaqV)NEtKc{Pn;LYKgL4cG169x?p(t8<Uo<8}DTb2G2Iz02!fq$?Mq
zz$5;-!^d6VMIS%)p`Cl6@SE{_CBTPm598d*@{IAjeHp8O@zUH+J;*o=w{;+HUxEy%
zXD6%tb#~6$?MKMD%zHD>d;VEJx)24vdg3zhqbpB6?;-FbZ!c@7hp$@sdG7YG@XT*!
ztS{_hrDm*S3y&>r?tL@X)7<T37*}d@#-7~aD~D&f`}3~codES&yL{}K`UD_%U|+f4
zKH<A>3v<RkI(|FT@$xPmYe2_IxKFSKa~+?8oCVtq@Ttw~^5CN-<f|uc-d{joK^VgW
z{}^ls1y1QJB5>v&@Z;^x{vxuBz<ZC~Fz+9DGNx8<-aiP&U?V(>B{1F@u=f82^!&>&

literal 0
HcmV?d00001

diff --git a/resources/network_capture/ping_decoded.txt b/resources/network_capture/ping_decoded.txt
new file mode 100644
index 0000000..6973220
--- /dev/null
+++ b/resources/network_capture/ping_decoded.txt
@@ -0,0 +1,1434 @@
+Connection established by client
+
+C→S Handshake
+--
+13 Length: 19
+00 Packet type ID: 0
+f6 Protocol version: 758 (1.18.2)
+05
+0c Host string: (length 12) minecraft.ip
+6d m
+69 i
+6e n
+65 e
+63 c
+72 r
+61 a
+66 f
+74 t
+2e .
+69 i
+70 p
+63 Port: 25565
+dd
+01 Next state: status
+
+
+C→S Status request
+--
+01 Length: 1
+00 Packet type ID: 0
+
+
+S→C Status response
+--
+d9 Length: 1369
+0a
+00 Packet type ID: 0
+d6 JSON payload: (length 1366)
+0a
+7b {
+22 "
+64 d
+65 e
+73 s
+63 c
+72 r
+69 i
+70 p
+74 t
+69
+6f
+6e
+22
+3a
+7b
+22
+74
+65
+78
+74
+22
+3a
+22
+c2
+a7
+61
+53
+75
+72
+76
+69
+76
+61
+6c
+20
+6d
+6f
+64
+65
+20
+73
+65
+72
+76
+65
+72
+2e
+c2
+a7
+37
+20
+47
+61
+6d
+65
+20
+6d
+61
+79
+20
+72
+75
+6e
+20
+73
+6c
+6f
+77
+6c
+79
+20
+69
+66
+5c
+6e
+65
+78
+65
+63
+75
+74
+65
+64
+20
+6f
+66
+66
+20
+61
+20
+66
+6c
+6f
+70
+70
+79
+20
+64
+69
+73
+6b
+2e
+20
+c2
+a7
+34
+c2
+a7
+6c
+4d
+6f
+64
+65
+6d
+20
+72
+65
+71
+75
+69
+72
+65
+64
+2e
+22
+7d
+2c
+22
+70
+6c
+61
+79
+65
+72
+73
+22
+3a
+7b
+22
+6d
+61
+78
+22
+3a
+31
+30
+2c
+22
+6f
+6e
+6c
+69
+6e
+65
+22
+3a
+30
+7d
+2c
+22
+76
+65
+72
+73
+69
+6f
+6e
+22
+3a
+7b
+22
+6e
+61
+6d
+65
+22
+3a
+22
+31
+2e
+31
+38
+2e
+32
+22
+2c
+22
+70
+72
+6f
+74
+6f
+63
+6f
+6c
+22
+3a
+37
+35
+38
+7d
+2c
+22
+66
+61
+76
+69
+63
+6f
+6e
+22
+3a
+22
+64
+61
+74
+61
+3a
+69
+6d
+61
+67
+65
+2f
+70
+6e
+67
+3b
+62
+61
+73
+65
+36
+34
+2c
+69
+56
+42
+4f
+52
+77
+30
+4b
+47
+67
+6f
+41
+41
+41
+41
+4e
+53
+55
+68
+45
+55
+67
+41
+41
+41
+45
+41
+41
+41
+41
+42
+41
+43
+41
+59
+41
+41
+41
+43
+71
+61
+58
+48
+65
+41
+41
+41
+44
+46
+55
+6c
+45
+51
+56
+52
+34
+58
+74
+32
+62
+50
+57
+34
+55
+51
+52
+43
+46
+78
+39
+71
+55
+41
+2b
+77
+42
+6b
+4a
+42
+38
+45
+6c
+49
+6b
+62
+6d
+41
+4a
+6e
+34
+47
+59
+68
+4e
+51
+33
+38
+41
+6d
+63
+45
+42
+4f
+52
+63
+41
+38
+4f
+51
+64
+6a
+51
+62
+66
+65
+71
+39
+70
+76
+71
+36
+75
+6e
+64
+2f
+70
+76
+39
+70
+43
+65
+4c
+2f
+71
+76
+33
+61
+6d
+61
+6b
+48
+53
+39
+65
+6c
+73
+59
+34
+35
+77
+37
+75
+63
+67
+34
+38
+62
+78
+63
+77
+52
+53
+31
+59
+5a
+79
+72
+2b
+2b
+37
+75
+6a
+34
+59
+62
+63
+73
+66
+34
+77
+76
+42
+6d
+36
+36
+38
+6a
+59
+52
+74
+44
+4e
+4b
+4f
+69
+72
+4f
+54
+51
+77
+43
+2f
+54
+5a
+42
+42
+61
+64
+44
+66
+71
+74
+43
+6f
+76
+4e
+43
+6e
+31
+58
+67
+55
+56
+6d
+68
+2f
+36
+76
+67
+6f
+66
+76
+42
+65
+61
+34
+43
+42
+36
+36
+4e
+35
+69
+6e
+43
+42
+36
+32
+56
+35
+68
+72
+45
+7a
+77
+6b
+34
+71
+64
+61
+71
+53
+56
+4c
+43
+64
+77
+73
+43
+64
+4e
+2f
+66
+31
+52
+58
+70
+6d
+77
+56
+6d
+44
+4d
+4a
+4e
+30
+62
+43
+6c
+47
+4b
+2b
+6c
+6f
+7a
+53
+56
+57
+42
+4f
+46
+57
+36
+53
+68
+47
+6c
+68
+74
+70
+5a
+36
+4e
+63
+43
+7a
+57
+4c
+6a
+4d
+69
+30
+31
+59
+38
+6d
+62
+30
+38
+32
+39
+58
+54
+66
+4c
+63
+44
+71
+52
+66
+6f
+4c
+69
+53
+68
+43
+56
+4b
+41
+79
+49
+4d
+74
+6c
+58
+79
+33
+42
+36
+63
+70
+33
+37
+44
+58
+58
+6a
+31
+4e
+52
+6a
+77
+62
+50
+32
+66
+39
+30
+45
+63
+6c
+2b
+64
+33
+59
+48
+30
+58
+63
+41
+55
+4a
+53
+35
+51
+47
+6c
+47
+71
+53
+42
+71
+7a
+76
+41
+69
+34
+67
+59
+55
+6c
+68
+41
+79
+49
+63
+31
+79
+54
+50
+37
+38
+46
+46
+34
+61
+30
+47
+33
+4c
+38
+63
+54
+35
+4c
+68
+49
+31
+78
+50
+73
+55
+59
+50
+69
+68
+75
+51
+43
+71
+38
+31
+49
+43
+64
+4a
+48
+4a
+4e
+31
+65
+6c
+43
+6c
+41
+54
+49
+34
+78
+62
+55
+4d
+4c
+68
+6e
+57
+41
+4a
+66
+35
+76
+58
+30
+30
+64
+57
+30
+44
+50
+4e
+78
+4c
+73
+56
+59
+48
+44
+74
+6b
+71
+4e
+43
+55
+44
+65
+52
+69
+61
+44
+53
+41
+4d
+50
+62
+67
+42
+4c
+6c
+74
+46
+75
+2f
+31
+4a
+48
+48
+2f
+36
+39
+47
+34
+56
+79
+6c
+6f
+76
+64
+66
+2f
+31
+47
+4e
+54
+39
+4d
+65
+41
+41
+30
+52
+71
+51
+55
+71
+6f
+42
+6d
+6d
+4c
+67
+71
+4f
+63
+76
+48
+34
+4b
+6d
+61
+67
+42
+76
+53
+5a
+71
+57
+79
+6a
+57
+41
+36
+32
+4e
+67
+69
+6a
+56
+62
+59
+31
+61
+67
+47
+5a
+71
+56
+59
+6b
+43
+4b
+36
+31
+4e
+69
+7a
+64
+61
+59
+46
+65
+54
+74
+53
+4b
+4d
+74
+31
+66
+4d
+78
+4d
+43
+76
+4d
+32
+41
+41
+2f
+56
+69
+6f
+4c
+63
+7a
+59
+61
+69
+57
+5a
+36
+79
+58
+6f
+45
+35
+50
+77
+57
+61
+57
+64
+49
+7a
+4e
+6e
+53
+59
+72
+57
+6c
+6d
+59
+2b
+65
+32
+44
+52
+4e
+71
+54
+4d
+6b
+35
+75
+7a
+4d
+44
+65
+41
+36
+47
+5a
+70
+7a
+46
+75
+59
+73
+4f
+7a
+70
+43
+4a
+49
+77
+70
+7a
+61
+4c
+38
+4a
+39
+47
+72
+47
+35
+44
+43
+48
+2f
+72
+72
+35
+2f
+64
+71
+79
+70
+6d
+55
+62
+47
+31
+41
+56
+4f
+35
+73
+64
+5a
+5a
+58
+59
+51
+5a
+64
+34
+38
+31
+43
+6e
+51
+32
+62
+6c
+47
+36
+4f
+45
+6b
+4d
+77
+6f
+4b
+55
+63
+66
+73
+58
+71
+64
+54
+67
+32
+34
+50
+48
+68
+34
+79
+62
+52
+63
+4b
+6b
+65
+48
+37
+36
+64
+2f
+54
+73
+2b
+76
+79
+2f
+48
+39
+58
+50
+4d
+67
+46
+74
+6b
+38
+50
+72
+66
+38
+44
+67
+61
+68
+68
+53
+6a
+6f
+79
+51
+74
+6c
+6e
+70
+54
+34
+70
+30
+49
+34
+61
+30
+47
+38
+45
+71
+6e
+78
+4b
+4b
+31
+70
+54
+58
+41
+2f
+38
+79
+4a
+65
+30
+6b
+49
+37
+31
+45
+6d
+56
+69
+5a
+47
+53
+6c
+72
+55
+76
+44
+45
+30
+35
+31
+4b
+63
+47
+75
+44
+42
+52
+4e
+6a
+4d
+4b
+35
+30
+53
+69
+39
+61
+57
+74
+4b
+65
+46
+31
+4a
+54
+37
+48
+48
+41
+57
+33
+6f
+50
+4a
+36
+53
+53
+39
+4d
+61
+77
+6c
+75
+56
+65
+79
+45
+4a
+66
+34
+61
+73
+78
+50
+38
+59
+4e
+4c
+44
+37
+31
+61
+57
+75
+50
+48
+53
+36
+57
+77
+2f
+6d
+72
+4d
+77
+31
+55
+65
+50
+7a
+78
+4b
+4b
+62
+6a
+4f
+6b
+73
+61
+53
+77
+69
+58
+75
+67
+68
+74
+44
+76
+2f
+6f
+52
+72
+72
+34
+31
+6d
+46
+65
+46
+6d
+32
+34
+46
+35
+6b
+7a
+43
+6a
+62
+63
+43
+63
+35
+70
+77
+38
+39
+35
+68
+76
+6b
+33
+77
+6b
+4c
+33
+43
+58
+45
+58
+77
+73
+4c
+33
+42
+50
+42
+66
+42
+51
+2f
+63
+43
+63
+31
+77
+46
+44
+35
+38
+64
+2b
+71
+38
+43
+69
+38
+77
+4b
+66
+56
+65
+46
+78
+57
+61
+44
+66
+70
+76
+41
+6f
+72
+4e
+41
+6e
+38
+32
+68
+67
+56
+48
+51
+56
+31
+66
+63
+32
+42
+63
+6f
+2b
+38
+57
+6d
+4a
+39
+34
+4d
+33
+54
+56
+6b
+6e
+75
+41
+61
+64
+46
+73
+4c
+31
+74
+6b
+46
+54
+76
+6e
+65
+6f
+59
+44
+6d
+66
+7a
+37
+2f
+44
+32
+57
+46
+75
+32
+6e
+76
+39
+37
+4b
+38
+41
+41
+41
+41
+41
+45
+6c
+46
+54
+6b
+53
+75
+51
+6d
+43
+43
+22
+7d }
+
+
+C→S Ping
+--
+09 Length: 9
+01 Packet type ID: 1
+00 64-bit integer payload: 56701
+00
+00
+00
+00
+00
+dd
+7d
+
+S→C Pong
+--
+09 Length: 9
+01 Packet type ID: 1
+00 64-bit integer payload: 56701
+00
+00
+00
+00
+00
+dd
+7d
+
+Disconnect