SNAC(0B,03)  CLI_STATS_REPORT 

This is the client stats report. It contain CONFIDENTIAL system info, and without your permission either. AOL just like stats... :) I'm almost sure that SNAC(15,02)/07D0/0AXX group (ICQ stats) may contain such information (is it crypted to hide from us ?).

 00 0B   word   SNAC family
 00 03   word   SNAC subtype
 00 00   word   SNAC flags
 xx xx xx xx   dword   SNAC request-id
 xx xx xx xx
 xx xx xx xx
  8 bytes   unknown (stats ?)
 00 00 00 00
 00 00 00 00
 00 00 00 00
 00 00 00 00
  16 bytes   unknown (zero values)
 xx   byte   length of the screenname (uin) string
 xx ..   ascii   screenname (uin) string
 xx xx   word   unknown (machine class ?)
 xx xx   word   Length of the OS name
 xx ..   ascii   OS name (ex: Windows 2000)
 xx xx   word   Length of the OS version string
 xx ..   ascii   OS version (ex: 5.1.2600)
 xx xx   word   Length of the processor type
 xx ..   ascii   processor type (ex: Intel.Pentium)
 xx xx   word   Length of the winsock description string
 xx ..   ascii   winsock DLL description string
 xx xx   word   Length of the winsock version string
 xx ..   ascii   winsock DLL version (ex: 5.1.2600.0)
 00 00   word   Unknown field
 00 02   word   Unknown field
 00 02   word   Unknown field
 00 01   word   Unknown field
 00 02   word   Unknown field
 00 05   word   Unknown field


Example SNAC dump with flap header:

  No example (if you have it - please send it to me)


  Main | Basic | Login | Snaclist | Sequences | Misc | Changes | Credits | Terms