WPNP

From Protocolinfo

Jump to: navigation, search

WPNP is WinMX Peer Network Protocol.

1 Identification
- 1.1 Ports
2 Empirical information
3 See also

[edit] Identification

[edit] Ports

WinMX encourages users to allow connections on TCP port 6699 and UDP port 6257, but other ports can be chosen.

[edit] Empirical information

From looking at WinMX sessions:

The first thing that WinMX v3.53 does when it starts up is to download http://66.98.186.39/v353/mainbar/index.html . It appears to be using Internet Explorer to do this.

Then it connects to some other things, eventually settling on one which is the connection that searches go over. (For instance, 24.117.223.131 in one test.) This address is not sent in any obvious form in the preceeding conversations.

The node to which it ends up connecting always ("always" means "in the 5 connections I observed") starts by sending it a packet with just ASCII "1" in it. Next it sends a packet with 16 data Bytes back. There's no obvious pattern to its content. Then it receives 16 Bytes, sends 19, recieves 6, sends 25 and then sends 21.

It appears to use the Napster protocol for the actual downloads.