TiVo Community
TiVo Community
TiVo Community
Go Back   TiVo Community > Underground Playground > TiVo Underground
TiVo Community
Reply
Forum Jump
 
Thread Tools
Old 01-18-2011, 08:54 AM   #1
wmcbrine
Resistance Useless
 
wmcbrine's Avatar
 
Join Date: Aug 2003
Posts: 8,929
Discovering the iPad interface

Let's see how much I can do without actually having an iPad...

Nmap against a Series 3:

PORT STATE SERVICE
80/tcp open http
443/tcp open https
2190/tcp open unknown
2191/tcp open unknown
3791/tcp open unknown
31339/tcp open unknown

Nmap against a Premiere running 14.7RC7:

PORT STATE SERVICE
80/tcp open http
443/tcp open https
1390/tcp open iclpv-sc
1393/tcp open iclpv-nls
1400/tcp open cadkey-tablet
1410/tcp open hiq
1413/tcp open innosys-acl
2190/tcp open unknown
2191/tcp open unknown
8430/tcp open unknown
31339/tcp open unknown

FWIW, port 8430 disappeared when I repeated the scan.

Avahi Zeroconf Browser lists some new services, Premiere only:

_tivo-mindrpc._tcp
_tivo-device._tcp

These are in addition to the existing _tivo-remote._tcp, etc. that other TiVos report. According to this, the "mindrpc" service runs on port 1413. ("tivo-device" just shows as port 80.)

Perhaps the mindrpc service works like mind.tivo.com?
__________________

To view links or images in signatures your post count must be 10 or greater. You currently have 0 posts.
wmcbrine is offline   Reply With Quote
Old 01-19-2011, 06:47 PM   #2
richwiss
Registered User
 
Join Date: Feb 2003
Posts: 19
Interesting.. I'd love to play with that if I only had a TiVo premiere...
richwiss is offline   Reply With Quote
Old 01-21-2011, 06:08 PM   #3
innocentfreak
Registered User
 
Join Date: Aug 2001
Location: Florida
Posts: 8,444
Quote:
Originally Posted by wmcbrine View Post
Avahi Zeroconf Browser lists some new services, Premiere only:

_tivo-mindrpc._tcp
_tivo-device._tcp

These are in addition to the existing _tivo-remote._tcp, etc. that other TiVos report. According to this, the "mindrpc" service runs on port 1413. ("tivo-device" just shows as port 80.)

Perhaps the mindrpc service works like mind.tivo.com?
Well with the iPad app, you can either use it locally with full functionality or remotely with limited functionality so maybe the mindrpc is for commands while outside your local network.
__________________
1 - TiVo Roamio Pro
2 - TiVo Premiere XL

To view links or images in signatures your post count must be 10 or greater. You currently have 0 posts.


To view links or images in signatures your post count must be 10 or greater. You currently have 0 posts.
innocentfreak is offline   Reply With Quote
Old 01-21-2011, 08:09 PM   #4
tomhorsley
Registered User
 
Join Date: Jul 2010
Posts: 615
What we really need is something with something like a dd-wrt router they can run tcpdump on to monitor all the traffic between the ipad and the tivo. If it isn't encrypted, it should be easy to start deducing the interface (maybe :-).
tomhorsley is offline   Reply With Quote
Old 01-21-2011, 09:22 PM   #5
windracer
joined the 10k club
 
windracer's Avatar
 
Join Date: Jan 2003
Location: St. Pete, FL
Posts: 11,222
I tried messing around with Wireshark to see if I could capture traffic between my iPad and the Premiere, but don't really know what I'm doing/looking for. If anyone can give me some basic guidance on how to set this up, I'll see if I can contribute.
__________________
840~Roamio Pro (TA, MoCA) + two A92~Minis, 758~Premiere XL4 (TA, MoCA)
S/old: 746~S4, 658~HDXL, 648~OLED S3, 565~TX20, 230~S2, 140~S2

To view links or images in signatures your post count must be 10 or greater. You currently have 0 posts.
|
To view links or images in signatures your post count must be 10 or greater. You currently have 0 posts.
windracer is offline   Reply With Quote
Old 01-21-2011, 10:16 PM   #6
orangeboy
yes, I AM orangeboy!
 
Join Date: Apr 2004
Location: Moline, IL
Posts: 4,075
Quote:
Originally Posted by windracer View Post
I tried messing around with Wireshark to see if I could capture traffic between my iPad and the Premiere, but don't really know what I'm doing/looking for. If anyone can give me some basic guidance on how to set this up, I'll see if I can contribute.
You could setup a filter, something like this:

Code:
(ip.src == 192.168.0.60 and ip.dst == 192.168.0.150) or (ip.dst == 192.168.0.60 and ip.src == 192.168.0.150)
Adjust ip addresses accordingly...

Edit: I seem to recall that Wireshark may not capture the traffic of the different devices unless the NIC on the computer running Wireshark is set to promiscuous mode, and switches are not in between the computer and the target devices...
__________________

To view links or images in signatures your post count must be 10 or greater. You currently have 0 posts.


To view links or images in signatures your post count must be 10 or greater. You currently have 0 posts.


To view links or images in signatures your post count must be 10 or greater. You currently have 0 posts.


To view links or images in signatures your post count must be 10 or greater. You currently have 0 posts.


To view links or images in signatures your post count must be 10 or greater. You currently have 0 posts.

Last edited by orangeboy : 01-21-2011 at 10:41 PM.
orangeboy is offline   Reply With Quote
Old 01-22-2011, 09:07 AM   #7
davezatz
Funkadelic
 
davezatz's Avatar
 
Join Date: Apr 2002
Location: Northern Virginia
Posts: 4,256
I'm super busy at the moment (life), but if I can find some time tomorrow I'll set up my promiscuous dumb hub, borrow the wife's laptop (my MBA lacks Ethernet), and see what I can sniff off the wire. No promises though, but it's on my mind (and requested).

I assume communication to/from TiVo Inc is locked down in some way. But at the very least we should be able to get at some things locally like the scrub bar.
davezatz is online now   Reply With Quote
Old 01-23-2011, 10:29 AM   #8
km
Registered User
 
Join Date: Nov 2001
Location: Atlanta. Ga. USA
Posts: 78
Quote:
Originally Posted by davezatz View Post
I'm super busy at the moment (life), but if I can find some time tomorrow I'll set up my promiscuous dumb hub,
I've been looking for a promiscuous dumb hub. Where did you get it?
km is offline   Reply With Quote
Old 01-23-2011, 10:59 AM   #9
davezatz
Funkadelic
 
davezatz's Avatar
 
Join Date: Apr 2002
Location: Northern Virginia
Posts: 4,256
Quote:
Originally Posted by km View Post
I've been looking for a promiscuous dumb hub. Where did you get it?
Sigh, no work is going to happen today. I grabbed the hub off ebay a couple years back specifically for Ethereal/Wireshark projects. The first one I purchased didn't spew packets all over the place, so I grabbed a second which worked fine. Not sure what model I have, I'm still digging out after the move last month. But it's a small, plain, black no-name brand thing. Probably ran only $10 or $15.

UPDATE: Went digging through boxes, and this is what I have. I'm pretty sure this is the promiscuous one. Dynex DX-EHB4

Last edited by davezatz : 01-23-2011 at 11:18 AM.
davezatz is online now   Reply With Quote
Old 01-24-2011, 01:17 AM   #10
Worf
Registered User
 
Join Date: Sep 2000
Posts: 1,612
You know, another option instead of the hub (for those with friendly IT departments or good hunting skills) is a smart or managed switch. Used managed switches from Cisco and HP aren't too hard to find (hint: EOL'd ones that work are perfectly fine) and they're often cheap, and brand new smart switches from Netgear and the like aren't out there either.

These switches normally have a monitor feature which lets you tap into another port's traffic, so you get all the benefits of a hub, but it switches and you get to see just the port traffic you want.

And yes, I've had to sniff traffic at GigE speeds. It helps that I only needed a GigE link, and not sniffing at full bandwidth.
Worf is offline   Reply With Quote
Old 01-24-2011, 05:34 AM   #11
davezatz
Funkadelic
 
davezatz's Avatar
 
Join Date: Apr 2002
Location: Northern Virginia
Posts: 4,256
Eh, it's small and cheap and my home networking projects/needs are infrequent. I pulled up my ebay receipt - $9.88. Port mirroring is nice, but it usually comes in a larger footprint (if my work gear is any indication). Also, the way I hang a secondary network off my primary one with the dumb hub mostly gives me mostly the same benefits of monitoring a single port.
davezatz is online now   Reply With Quote
Old 02-10-2011, 03:08 PM   #12
tomm1079
Registered User
 
Join Date: May 2005
Posts: 566
Any further update on this? Would be nice if someone would be able to make a Tivo iPad like app
tomm1079 is offline   Reply With Quote
Old 02-12-2011, 10:05 AM   #13
km
Registered User
 
Join Date: Nov 2001
Location: Atlanta. Ga. USA
Posts: 78
Just to conclude the monitoring port tangent, there is a web page with a list of real hubs

http://www.miarec.com/knowledge/hubs

as well as switches with port mirroing.

http://www.miarec.com/knowledge/switches-port-mirroring

The latter includes a small gigabit netgear switch which lists for $70 and goes for about half that on ebay.
km is offline   Reply With Quote
Old 02-20-2011, 03:55 PM   #14
moyekj
Registered User
 
Join Date: Jan 2006
Location: Mission Viejo, CA
Posts: 8,881
My guess is that the interface is SSL encrypted (i.e. uses https), so sniffing the network communication will not yield anything readable. Otherwise I would have expected someone to post about it by now.
__________________
Roamio Pro (GigE)
Elite (MoCA)
Premiere (MoCA adapter)
Cox - Motorola CableCards & TAs
Slingbox 350 via TiVo Mini & TiVo Stream for remote viewing

To view links or images in signatures your post count must be 10 or greater. You currently have 0 posts.
moyekj is offline   Reply With Quote
Old 02-20-2011, 05:05 PM   #15
innocentfreak
Registered User
 
Join Date: Aug 2001
Location: Florida
Posts: 8,444
I would think it might also be more the fact that the people who would know what they are doing don't own iPads.

It is disappointing to see that no one has made any progress though since I would love to see some of this functionality.
__________________
1 - TiVo Roamio Pro
2 - TiVo Premiere XL

To view links or images in signatures your post count must be 10 or greater. You currently have 0 posts.


To view links or images in signatures your post count must be 10 or greater. You currently have 0 posts.
innocentfreak is offline   Reply With Quote
Old 02-20-2011, 05:12 PM   #16
orangeboy
yes, I AM orangeboy!
 
Join Date: Apr 2004
Location: Moline, IL
Posts: 4,075
Yeah, I'm not gonna run out and get an iPad just for the TiVo app. I did however download the app through iTunes (something I did get just for the TiVo app!), and extracted the files to see what I could see. Which amounted to really nothin' of use to me...
__________________

To view links or images in signatures your post count must be 10 or greater. You currently have 0 posts.


To view links or images in signatures your post count must be 10 or greater. You currently have 0 posts.


To view links or images in signatures your post count must be 10 or greater. You currently have 0 posts.


To view links or images in signatures your post count must be 10 or greater. You currently have 0 posts.


To view links or images in signatures your post count must be 10 or greater. You currently have 0 posts.
orangeboy is offline   Reply With Quote
Old 02-20-2011, 05:26 PM   #17
innocentfreak
Registered User
 
Join Date: Aug 2001
Location: Florida
Posts: 8,444
I think Best Buy got rid of their restocking fees so you could always buy and return.

I would do it, but I would then need a good wifi router to sniff the packets along with a guide for dummies on what I was doing.
__________________
1 - TiVo Roamio Pro
2 - TiVo Premiere XL

To view links or images in signatures your post count must be 10 or greater. You currently have 0 posts.


To view links or images in signatures your post count must be 10 or greater. You currently have 0 posts.
innocentfreak is offline   Reply With Quote
Old 02-20-2011, 08:00 PM   #18
davezatz
Funkadelic
 
davezatz's Avatar
 
Join Date: Apr 2002
Location: Northern Virginia
Posts: 4,256
Quote:
Originally Posted by moyekj View Post
My guess is that the interface is SSL encrypted (i.e. uses https), so sniffing the network communication will not yield anything readable. Otherwise I would have expected someone to post about it by now.
Between here and TiVo, Inc I agree it's likely. Between the iPad and my TiVo, I'm not so sure given the previously discussed Creston controls. Sorry I didn't get it done and the loaner iPad is packed up for return.
davezatz is online now   Reply With Quote
Old 02-20-2011, 08:06 PM   #19
windracer
joined the 10k club
 
windracer's Avatar
 
Join Date: Jan 2003
Location: St. Pete, FL
Posts: 11,222
I tried messing around with WireShark, but I just don't have the necessary equipment to analyze the traffic (or the wherewithal to make any sense of it if I did).
__________________
840~Roamio Pro (TA, MoCA) + two A92~Minis, 758~Premiere XL4 (TA, MoCA)
S/old: 746~S4, 658~HDXL, 648~OLED S3, 565~TX20, 230~S2, 140~S2

To view links or images in signatures your post count must be 10 or greater. You currently have 0 posts.
|
To view links or images in signatures your post count must be 10 or greater. You currently have 0 posts.
windracer is offline   Reply With Quote
Old 02-20-2011, 08:13 PM   #20
davezatz
Funkadelic
 
davezatz's Avatar
 
Join Date: Apr 2002
Location: Northern Virginia
Posts: 4,256
TiVo should just make the api/hooks public. We certainly couldn't do any worse than their parter in i.TV who stores our credentials in the clear and I've previously had scheduling issues with.
davezatz is online now   Reply With Quote
Old 02-20-2011, 08:17 PM   #21
moyekj
Registered User
 
Join Date: Jan 2006
Location: Mission Viejo, CA
Posts: 8,881
Quote:
Originally Posted by orangeboy View Post
Yeah, I'm not gonna run out and get an iPad just for the TiVo app. I did however download the app through iTunes (something I did get just for the TiVo app!), and extracted the files to see what I could see. Which amounted to really nothin' of use to me...
Note that the .ipa file you can just re-name to .zip and then you can unzip it as a normal zip file. This extracts to Payload/Quicksilver-TiVo.app with a whole lot of files under that, including many png image files. Interestingly there is a "tivo.cer" SSL certificate file there which can be converted to PEM format (using openssl) and used with wireshark to decrypt SSL communications.
I do have a hub and wireshark setup, however I'm missing the key piece to the puzzle - the iPad.
I used "grep" and various other utilities to look through the .ipa set of files but didn't find any interesting http/https/telnet looking entries.
__________________
Roamio Pro (GigE)
Elite (MoCA)
Premiere (MoCA adapter)
Cox - Motorola CableCards & TAs
Slingbox 350 via TiVo Mini & TiVo Stream for remote viewing

To view links or images in signatures your post count must be 10 or greater. You currently have 0 posts.
moyekj is offline   Reply With Quote
Old 02-20-2011, 08:18 PM   #22
innocentfreak
Registered User
 
Join Date: Aug 2001
Location: Florida
Posts: 8,444
I know Orangeboy asked TiVodesign previously about a public API prior to the iPad app, but she said he would most likely have to sign some type of agreement.

I do agree though it should be public.
__________________
1 - TiVo Roamio Pro
2 - TiVo Premiere XL

To view links or images in signatures your post count must be 10 or greater. You currently have 0 posts.


To view links or images in signatures your post count must be 10 or greater. You currently have 0 posts.
innocentfreak is offline   Reply With Quote
Old 02-26-2011, 06:58 PM   #23
jbuehl
Registered User
 
Join Date: Nov 2004
Location: Los Angeles, CA
Posts: 19
I captured some iPad-Tivo traffic to try and figure out an issue that I'm having with having to constantly reboot the Tivo to get the iPad app to work. I used an old ethernet hub and captured the traffic using Wireshark.

I can see a socket being opened by the iPad to port 1393 on the Tivo. The messages are binary, but they don't appear to be encrypted. It's definitely not SSL.
jbuehl is offline   Reply With Quote
Old 02-27-2011, 12:15 AM   #24
moyekj
Registered User
 
Join Date: Jan 2006
Location: Mission Viejo, CA
Posts: 8,881
Quote:
Originally Posted by jbuehl View Post
I captured some iPad-Tivo traffic to try and figure out an issue that I'm having with having to constantly reboot the Tivo to get the iPad app to work. I used an old ethernet hub and captured the traffic using Wireshark.

I can see a socket being opened by the iPad to port 1393 on the Tivo. The messages are binary, but they don't appear to be encrypted. It's definitely not SSL.
Post a couple more times so you have enough to attach a zip file with the wireshark pcap file so we can take a look?
__________________
Roamio Pro (GigE)
Elite (MoCA)
Premiere (MoCA adapter)
Cox - Motorola CableCards & TAs
Slingbox 350 via TiVo Mini & TiVo Stream for remote viewing

To view links or images in signatures your post count must be 10 or greater. You currently have 0 posts.
moyekj is offline   Reply With Quote
Old 02-27-2011, 08:47 AM   #25
jbuehl
Registered User
 
Join Date: Nov 2004
Location: Los Angeles, CA
Posts: 19
OK, will do.
jbuehl is offline   Reply With Quote
Old 02-27-2011, 08:57 AM   #26
jbuehl
Registered User
 
Join Date: Nov 2004
Location: Los Angeles, CA
Posts: 19
Here is a hex dump of the conversation between the iPad and the Tivo. This is the case where it is failing to work for me.


iPad:
00000000 16 03 01 00 45 01 00 00 41 03 01 4d 69 28 bf c6 ....E... A..Mi(..
00000010 12 38 2e 2a 77 11 96 d7 35 e8 9a 00 70 85 0e b1 .8.*w... 5...p...
00000020 81 80 9f 29 8b dc ed 1d 4b d3 e3 00 00 1a 00 2f ...).... K....../
00000030 00 05 00 04 00 35 00 0a 00 09 00 03 00 08 00 33 .....5.. .......3
00000040 00 39 00 16 00 15 00 14 01 00 .9...... ..

Tivo:
00000000 16 03 01 00 4a 02 00 00 46 03 01 4d 69 27 f6 bb ....J... F..Mi'..
00000010 05 e5 14 dd a5 56 3d 65 fb 3d f1 21 12 a3 87 9d .....V=e .=.!....
00000020 8f 9d 1c 6a 6a 6f e3 88 96 1b 54 20 a1 37 4c c9 ...jjo.. ..T .7L.
00000030 78 8f 21 85 cc 18 75 30 15 5f 08 03 1b 51 d2 91 x.!...u0 ._...Q..
00000040 54 13 4b b3 8b 93 39 6f 48 bd ba 54 00 2f 00 16 T.K...9o H..T./..
00000050 03 01 02 67 0b 00 02 63 00 02 60 00 02 5d 30 82 ...g...c ..`..]0.
00000060 02 59 30 82 01 c2 02 09 00 e9 89 1d ff 4b 58 c7 .Y0..... .....KX.
00000070 20 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 05 00 0...*.H ........
00000080 30 71 31 1b 30 19 06 03 55 04 03 13 12 37 34 36 0q1.0... U....746
00000090 2d 30 30 30 31 2d 39 30 32 34 2d 32 45 43 31 31 -0001-90 24-2EC11
000000A0 12 30 10 06 03 55 04 0a 13 09 54 69 56 6f 20 49 .0...U.. ..TiVo I
000000B0 6e 63 2e 31 0b 30 09 06 03 55 04 0b 13 02 49 54 nc.1.0.. .U....IT
000000C0 31 0f 30 0d 06 03 55 04 07 13 06 41 6c 76 69 73 1.0...U. ...Alvis
000000D0 6f 31 13 30 11 06 03 55 04 08 13 0a 43 61 6c 69 o1.0...U ....Cali
000000E0 66 6f 72 6e 69 61 31 0b 30 09 06 03 55 04 06 13 fornia1. 0...U...
000000F0 02 55 53 30 1e 17 0d 31 30 30 31 32 36 31 39 32 .US0...1 00126192
00000100 39 34 39 5a 17 0d 32 30 30 31 32 34 31 39 32 39 949Z..20 01241929
00000110 34 39 5a 30 71 31 1b 30 19 06 03 55 04 03 13 12 49Z0q1.0 ...U....
00000120 37 34 36 2d 30 30 30 31 2d 39 30 32 34 2d 32 45 746-0001 -9024-2E
00000130 43 31 31 12 30 10 06 03 55 04 0a 13 09 54 69 56 C11.0... U....TiV
00000140 6f 20 49 6e 63 2e 31 0b 30 09 06 03 55 04 0b 13 o Inc.1. 0...U...
00000150 02 49 54 31 0f 30 0d 06 03 55 04 07 13 06 41 6c .IT1.0.. .U....Al
00000160 76 69 73 6f 31 13 30 11 06 03 55 04 08 13 0a 43 viso1.0. ..U....C
00000170 61 6c 69 66 6f 72 6e 69 61 31 0b 30 09 06 03 55 aliforni a1.0...U
00000180 04 06 13 02 55 53 30 81 9f 30 0d 06 09 2a 86 48 ....US0. .0...*.H
00000190 86 f7 0d 01 01 01 05 00 03 81 8d 00 30 81 89 02 ........ ....0...
000001A0 81 81 00 a1 7f 64 d3 32 d5 15 c8 97 98 4a fe 75 .....d.2 .....J.u
000001B0 e2 8f 13 3e 0a d4 0b f6 c4 77 c0 db df da 96 e1 ...>.... .w......
000001C0 ad 72 4b 1f a8 e6 47 13 e4 0f a5 90 0b 00 fb 0e .rK...G. ........
000001D0 0e cc f5 ca 1c cc 51 47 8e aa fb 79 96 69 d5 3b ......QG ...y.i.;
000001E0 46 31 08 a9 57 96 6d 3d 27 1f 77 2e ac 7c e1 3b F1..W.m= '.w..|.;
000001F0 76 94 ff e1 2f 20 84 fa d2 6e 79 4e e1 49 af d6 v.../ .. .nyN.I..
00000200 e4 b7 e2 e3 77 8f ee da 6d 6c 54 5d 20 9c 39 5e ....w... mlT] .9^
00000210 7f 98 fd a5 4a 43 17 37 2a 9a 77 f2 53 df 1e 8b ....JC.7 *.w.S...
00000220 fa ec c3 02 03 01 00 01 30 0d 06 09 2a 86 48 86 ........ 0...*.H.
00000230 f7 0d 01 01 05 05 00 03 81 81 00 85 fd 97 27 b4 ........ ......'.
00000240 25 9d 18 d1 88 d5 a7 e5 f8 41 f9 e6 40 b5 90 6d %....... .A..@..m
00000250 cf d7 e0 66 e0 12 44 9d 96 47 47 76 2c e7 99 66 ...f..D. .GGv,..f
00000260 26 8b cb e8 bb b4 15 a4 05 c6 aa 55 72 ea 67 de &....... ...Ur.g.
00000270 b3 e1 b0 49 17 92 0d af 35 0e 41 54 9c 64 45 21 ...I.... 5.AT.dE!
00000280 2e ff 7d ac 44 03 74 b7 80 40 51 5e 80 17 54 53 ..}.D.t. .@Q^..TS
00000290 83 0d ad d5 54 68 f3 8c 56 f3 b7 43 08 a5 73 97 ....Th.. V..C..s.
000002A0 8a e2 6c 43 e7 93 c0 ed 39 46 49 37 2f fe 4f 52 ..lC.... 9FI7/.OR
000002B0 20 b8 2f c6 c7 64 39 16 60 8e cb 16 03 01 00 04 ./..d9. `.......
000002C0 0e 00 00 00 ....

iPad:
0000004A 16 03 01 00 86 10 00 00 82 00 80 4f 41 a7 51 7c ........ ...OA.Q|
0000005A de 12 85 80 e5 c5 27 9e ae e5 c9 a7 28 5a 11 4d ......'. ....(Z.M
0000006A 6b ac fa 7d 71 2d 56 20 01 57 28 fd 54 38 8c 75 k..}q-V .W(.T8.u
0000007A 07 4b 32 6b 8f 1e 3d 16 12 ee 5c ac 7a 27 91 2c .K2k..=. ..\.z'.,
0000008A ee cb ec e5 fc eb 67 74 bf 51 12 dc b6 36 8a b1 ......gt .Q...6..
0000009A 92 84 9f b3 df 19 75 f5 ac e6 e5 54 15 9d da 5b ......u. ...T...[
000000AA 66 35 bf 5c ba 03 89 61 f4 b1 82 6f 86 ec 8d 61 f5.\...a ...o...a
000000BA 3b bf 7b f4 a0 5f d5 ee 1d e8 8b ad 46 2d 42 66 ;.{.._.. ....F-Bf
000000CA 94 8f 25 fe ef a3 67 6d 73 d7 af ..%...gm s..
000000D5 14 03 01 00 01 01 16 03 01 00 30 ae 4d 62 0f 03 ........ ..0.Mb..
000000E5 11 35 8f 14 cf 24 3e b7 f2 08 34 d6 26 51 68 5a .5...$>. ..4.&QhZ
000000F5 1e 31 24 a2 21 05 2d e5 92 f6 3f 9a e5 b1 ae 30 .1$.!.-. ..?....0
00000105 f6 4f 1f cc df 9a e7 30 b6 6e c8 .O.....0 .n.

Tivo:
000002C4 14 03 01 00 01 01 16 03 01 00 30 9f 8b 34 49 28 ........ ..0..4I(
000002D4 94 06 dc ca ee 6b b4 37 13 52 09 de b5 77 95 1d .....k.7 .R...w..
000002E4 b5 3c 9e 10 3a 07 d7 60 fc e2 55 18 05 db fd 4c .<..:..` ..U....L
000002F4 37 a0 d0 20 8e 5c ae e0 34 4c bb 7.. .\.. 4L.

iPad:
00000110 17 03 01 00 d0 97 a7 c8 54 b8 a5 54 e5 33 e5 4f ........ T..T.3.O
00000120 97 14 50 64 5e d6 f1 2b fc 0b 16 d5 cf d1 b8 67 ..Pd^..+ .......g

iPad:
00000130 b4 29 a9 ce fb c8 9c e6 1b e4 cd 2e 4b b2 f4 9a .)...... ....K...
00000140 05 03 8a 4e 9d 2b cf d5 b0 4e 83 d4 e5 2e 96 d0 ...N.+.. .N......
00000150 e2 61 75 ab e3 9d fc e6 10 fc 0b 1c 63 ac 05 45 .au..... ....c..E
00000160 cf 37 ad ac f1 88 b2 ec aa e6 d8 0c 09 df 6b cc .7...... ......k.
00000170 6d 78 df 2e 1a 05 73 d8 1d a8 0e bf ad d0 b6 0f mx....s. ........
00000180 c8 c8 ae 10 69 80 a5 ad e9 d7 7a 2c cc 4f 8b 9e ....i... ..z,.O..
00000190 2d 94 d0 db 70 a6 08 a4 08 f2 e0 ff e2 f7 f7 ad -...p... ........
000001A0 5c 27 92 b7 b4 ee 3e 78 23 75 a3 a2 46 fb d2 7a \'....>x #u..F..z
000001B0 6e ec e4 76 c1 ed b5 b0 d2 f6 50 06 f9 25 b6 8c n..v.... ..P..%..
000001C0 27 68 4e 82 ef 89 68 b0 00 68 7d b3 54 cf 04 d8 'hN...h. .h}.T...
000001D0 f5 9c 33 c8 cb ac 0c f9 40 b8 30 b0 f7 c8 d4 fa ..3..... @.0.....
000001E0 54 a5 17 6e 27 T..n'

Tivo:
000002FF 17 03 01 00 20 07 ae 28 d4 4f 73 fe 06 5f d3 2b .... ..( .Os.._.+
0000030F 57 d3 90 04 55 c5 98 c3 03 60 85 84 4d 72 38 80 W...U... .`..Mr8.
0000031F f4 f7 2f d7 06 17 03 01 00 d0 39 65 27 66 f2 86 ../..... ..9e'f..
0000032F c1 54 21 b5 74 48 01 e3 c1 cc de 12 45 1f 95 c4 .T!.tH.. ....E...
0000033F e3 02 47 95 f1 4d 86 b5 c6 86 bf 93 c5 c1 3e 5d ..G..M.. ......>]
0000034F 15 70 75 e6 75 d2 3f 62 63 6b e4 31 52 ca ce 95 .pu.u.?b ck.1R...
0000035F 4a de ff c1 86 8d c1 c4 59 3c 6e 03 1c 3d f7 0d J....... Y<n..=..
0000036F 84 bb 47 c3 7f 56 e9 5c ec 36 6b 89 7e 37 28 a6 ..G..V.\ .6k.~7(.
0000037F 45 bb b1 fe ef ab 8a b7 96 b0 72 f6 82 0c 1f 1c E....... ..r.....
0000038F f8 c4 7b 19 22 c6 0e 51 f8 eb 09 6c 1b fd 7a 0f ..{."..Q ...l..z.
0000039F 85 76 d3 e8 fe 2d 6e 8a b0 27 45 4f c2 0c 72 9b .v...-n. .'EO..r.
000003AF 82 6e 88 50 d4 82 62 74 c9 8a 96 ee 4c 75 46 0a .n.P..bt ....LuF.
000003BF 6a 40 c7 8f 88 b8 db ad 02 a4 e2 0c d4 ad 5e 9c j@...... ......^.
000003CF 85 c3 7c 4e f0 00 d2 6e f1 0e 85 7a 6c 01 b5 5d ..|N...n ...zl..]
000003DF f9 de f9 7c 31 1e f4 30 b0 bb 97 16 4c 34 fd ea ...|1..0 ....L4..
000003EF fb 8e 74 07 27 d3 2d 82 cd 27 ..t.'.-. .'

iPad:
000001E5 17 03 01 00 90 7f ca 76 29 1f 13 78 f2 16 28 85 .......v )..x..(.
000001F5 bc 66 4a 60 47 6b 21 dc bc e0 d3 5f 78 39 2e ca .fJ`Gk!. ..._x9..
00000205 3a ef 55 bb 1c 64 c0 d5 35 58 da 59 11 1e 46 ec :.U..d.. 5X.Y..F.
00000215 63 1a c7 1a fa 8c 0d d5 f4 df 57 16 27 88 aa 4a c....... ..W.'..J
00000225 38 1a ab a5 b6 87 88 e7 e6 f5 c6 15 72 92 20 f0 8....... ....r. .
00000235 37 76 ff cc 8d c9 dd 06 a1 9b ee 90 ce d2 94 62 7v...... .......b
00000245 65 05 2e 69 8f c5 3e 8c f5 ac d1 b2 f8 7a ca 3c e..i..>. .....z.<
00000255 b7 d6 2f e1 bf 6c 32 45 9c 18 38 e1 ab 15 70 5e ../..l2E ..8...p^
00000265 43 5d df c3 68 ac c4 0a ce dc 07 e6 96 5c 3c 0d C]..h... .....\<.
00000275 b9 30 14 bd 00 .0...

Tivo:
000003F9 17 03 01 00 20 df a1 ea 79 7d 32 1e 9c 37 5e fc .... ... y}2..7^.
00000409 a2 24 bb 47 07 7b 01 ac 8d 24 4a 2d fc 39 e3 88 .$.G.{.. .$J-.9..
00000419 28 dd cc 8e 53 17 03 01 00 f0 71 25 88 5a db fa (...S... ..q%.Z..
00000429 ec b1 40 b6 fb c8 51 e5 07 c4 af 10 9a 79 5c 6c ..@...Q. .....y\l
00000439 2d 87 67 37 06 e0 e1 fa 31 f7 c1 27 84 c3 51 2c -.g7.... 1..'..Q,
00000449 21 06 2a f0 ca 44 b1 3f 3c 69 d8 25 df 54 9b 09 !.*..D.? <i.%.T..
00000459 d5 f3 f1 fe 98 f4 00 1e af 5a 63 18 2c 94 12 a9 ........ .Zc.,...
00000469 61 de 5c 8c ba a6 52 2b 19 fa 7b 58 7a 0d 14 6f a.\...R+ ..{Xz..o
00000479 18 18 c1 04 5b 73 3f e0 07 59 21 76 24 a2 38 29 ....[s?. .Y!v$.8)
00000489 54 99 46 d7 16 72 62 db 99 d0 0d a5 55 8f 51 2f T.F..rb. ....U.Q/
00000499 8b 1c 79 9e f8 20 23 0e fc ff c2 75 bf c9 b9 1a ..y.. #. ...u....
000004A9 ff 1f dc 7d 37 a0 12 c7 9e 17 b7 b5 1e 78 35 19 ...}7... .....x5.
000004B9 10 6d 1d e0 91 12 f2 af 3b b3 c9 9e 13 b7 98 44 .m...... ;......D
000004C9 bc b9 e1 a2 aa c0 43 57 13 b1 55 e8 6b fb 1d 74 ......CW ..U.k..t
000004D9 f3 60 d7 a6 7d a3 3e c2 14 e6 01 24 cc be f0 47 .`..}.>. ...$...G
000004E9 b3 3a 25 9f ea 05 da 96 76 2a 7b a6 bd c0 d7 53 .:%..... v*{....S
000004F9 3d 87 16 1f 59 6e e4 be 42 27 65 ce 88 0c 3f d9 =...Yn.. B'e...?.
00000509 d2 fc 83 65 9b 80 8e 4e 0e f2 ...e...N ..

iPad:
0000027A 15 03 01 00 20 81 9e b1 7d c7 57 c7 08 ab 69 1a .... ... }.W...i.
0000028A 7d b8 81 aa e6 48 a7 46 78 09 93 9d 43 5a 4d 32 }....H.F x...CZM2
0000029A 86 50 74 73 3c .Pts<
[/size]

jbuehl is offline   Reply With Quote
Old 02-27-2011, 09:05 AM   #27
jbuehl
Registered User
 
Join Date: Nov 2004
Location: Los Angeles, CA
Posts: 19
All the messages seem to start with 0x14030100, 0x15030100, 0x16030100, or 0x17030100. When I google those it comes up with some references to Skype. That doesn't make any sense.
jbuehl is offline   Reply With Quote
Old 02-27-2011, 09:16 AM   #28
jbuehl
Registered User
 
Join Date: Nov 2004
Location: Los Angeles, CA
Posts: 19
Port 1393 is registered with IANA as network log server, whatever that is.

# iclpv-nls 1393/tcp Network Log Server
# iclpv-nls 1393/udp Network Log Server
# iclpv-nlc 1394/tcp Network Log Client
# iclpv-nlc 1394/udp Network Log Client
jbuehl is offline   Reply With Quote
Old 02-27-2011, 09:45 AM   #29
moyekj
Registered User
 
Join Date: Jan 2006
Location: Mission Viejo, CA
Posts: 8,881
Can you attach a zip file with the actual pcap file? Rather than just the raw data the header and packet information may have more clues.
__________________
Roamio Pro (GigE)
Elite (MoCA)
Premiere (MoCA adapter)
Cox - Motorola CableCards & TAs
Slingbox 350 via TiVo Mini & TiVo Stream for remote viewing

To view links or images in signatures your post count must be 10 or greater. You currently have 0 posts.
moyekj is offline   Reply With Quote
Old 02-27-2011, 10:03 AM   #30
jbuehl
Registered User
 
Join Date: Nov 2004
Location: Los Angeles, CA
Posts: 19
Yeah, I'm still getting up to 10 posts. Only 2 more to go. I haven't seen this particular restriction in a forum before. I guess they were having a problem with people spamming them with huge uploads or something.
jbuehl is offline   Reply With Quote
Reply
Forum Jump




Thread Tools


Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Advertisements

TiVo Community
Powered by vBulletin® Version 3.6.8
Copyright ©2000 - 2014, Jelsoft Enterprises Ltd.
vBulletin Skins by: Relivo Media

(C) 2013 Magenium Solutions - All Rights Reserved. No information may be posted elsewhere without written permission.
TiVoŽ is a registered trademark of TiVo Inc. This site is not owned or operated by TiVo Inc.
All times are GMT -5. The time now is 05:30 PM.
OUR NETWORK: MyOpenRouter | TechLore | SansaCommunity | RoboCommunity | MediaSmart Home | Explore3DTV | Dijit Community | DVR Playground |