Recent changes to device discovery

device discovery modified by Michael Salathe

Michael Salathe — Thu, 22 Jan 2015 00:18:14 -0000

--- v6
+++ v7
@@ -44,7 +44,10 @@
 IP        | 4B   | int
 unknown   | 7B   |
 priority  | 1B   | int, 0-3
-unknown   | 52B  |     
+unknown   | 28B  |
+seq(?)    | 4B   |
+seq(?)    | 4B   |
+unknown   | 16B  |     
 version   | 4B   | int, reverse order
 hostname lenght(guessing)   | 1B  |int 
 hostname  | variable, max 31B| ascii

device discovery modified by Michael Salathe

Michael Salathe — Thu, 22 Jan 2015 00:05:14 -0000

--- v5
+++ v6
@@ -41,7 +41,10 @@

 Fild Name | size | format
 ----------|------|-------
-unknown   | 64B  |     
+IP        | 4B   | int
+unknown   | 7B   |
+priority  | 1B   | int, 0-3
+unknown   | 52B  |     
 version   | 4B   | int, reverse order
 hostname lenght(guessing)   | 1B  |int 
 hostname  | variable, max 31B| ascii

device discovery modified by Michael Salathe

Michael Salathe — Wed, 30 Jul 2014 00:29:22 -0000

--- v4
+++ v5
@@ -49,17 +49,9 @@
 Enttec
 ------

-Quelle: Wireshark 
+Source: www.enttec.com/pdf/misc/ESP_protocol.pdf

 Destination: 255.255.255.255:3330 UDP
-
-Wireshark capture:
-0000   45 53 50 52 00 50 c2 07 7a 3c 00 0b 16 00 4f 70  ESPR.P..z<....Op
-0010   65 6e 20 44 4d 58 20 80 01 00 00 4f 70 65 6e 20  en DMX ....Open 
-0020   44 4d 58 20 45 74 68 65 72 6e 65 74 00 00 00 01  DMX Ethernet....
-0030   01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff  ................
-0040   ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff 00  ................
-0050   00 00 00   
                                       ...
 Fild Name | size | format
 ----------|------|-------

device discovery modified by Michael Salathe

Michael Salathe — Mon, 28 Jul 2014 21:36:42 -0000

--- v3
+++ v4
@@ -51,7 +51,7 @@

 Quelle: Wireshark 

-Destination: 255.255.255.255:3333 UDP
+Destination: 255.255.255.255:3330 UDP

 Wireshark capture:
 0000   45 53 50 52 00 50 c2 07 7a 3c 00 0b 16 00 4f 70  ESPR.P..z<....Op

device discovery modified by Michael Salathe

Michael Salathe — Mon, 28 Jul 2014 20:42:53 -0000

--- v2
+++ v3
@@ -45,3 +45,31 @@
 version   | 4B   | int, reverse order
 hostname lenght(guessing)   | 1B  |int 
 hostname  | variable, max 31B| ascii
+
+Enttec
+------
+
+Quelle: Wireshark 
+
+Destination: 255.255.255.255:3333 UDP
+
+Wireshark capture:
+0000   45 53 50 52 00 50 c2 07 7a 3c 00 0b 16 00 4f 70  ESPR.P..z<....Op
+0010   65 6e 20 44 4d 58 20 80 01 00 00 4f 70 65 6e 20  en DMX ....Open 
+0020   44 4d 58 20 45 74 68 65 72 6e 65 74 00 00 00 01  DMX Ethernet....
+0030   01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff  ................
+0040   ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff 00  ................
+0050   00 00 00   
+                                      ...
+Fild Name | size | format
+----------|------|-------
+header   | 4B  | ASCII: ESPR
+Device MAC   | 6B   | int
+Node Type   | 2B  |unknown 
+Version| 1B| int x*10
+Switch Settings | 1B | unknown
+Model | 10B | ASCII
+Option Field | 1B | unknown
+TOS | 1B | unknown
+TTL | 1B | unknown
+Device Name | 20B | ASCII

device discovery modified by Michael Salathe

Michael Salathe — Mon, 28 Jul 2014 19:11:11 -0000

--- v1
+++ v2
@@ -16,3 +16,32 @@
 zeros, maybe part of Version | 4 B| 
 unknown | 4B |

+MA2
+---
+
+Destination: 236.4.0.0:29998 UDP
+
+Wireshark capture:
+0000   02 00 00 02 01 00 07 00 cc 00 01 01 80 3f 00 24  .............?.$
+0010   00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff ff  ................
+0020   ff 00 00 00 e7 00 00 00 fa 16 00 00 fa 16 00 00  ................
+0030   cc 01 01 ff ff 00 00 00 00 00 00 00 00 00 00 00  ................
+0040   04 00 00 03 1f 53 61 62 72 69 6e 61 2d 50 43 00  .....Sabrina-PC.
+0050   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
+0060   00 00 00 00 c8 0a a9 49 7e bb 00 00 02 00 00 02  .......I~.......
+0070   01 00 07 00 ff 00 00 00 fe 80 00 00 d4 72 62 6f  .............rbo
+0080   0a 00 18 00 00 00 0c a8 02 00 00 02 01 00 07 00  ................
+0090   00 00 00 00 fe 80 00 00 d4 72 62 6f 0a 00 18 00  .........rbo....
+00a0   00 00 0c a8 c5 00 00 00 98 3a 00 00 64 00 ba 07  .........:..d...
+00b0   01 00 01 00 20 02 df 0d 00 00 00 00 00 00 00 00  .... ...........
+00c0   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
+00d0   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
+00e0   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
+00f0   00 00 00 00 00 00 00 00 00 00 00 00              ............
+
+Fild Name | size | format
+----------|------|-------
+unknown   | 64B  |     
+version   | 4B   | int, reverse order
+hostname lenght(guessing)   | 1B  |int 
+hostname  | variable, max 31B| ascii

device discovery modified by Michael Salathe

Michael Salathe — Mon, 28 Jul 2014 19:03:50 -0000

ArtnetScanner uses mostly undocumented desk hellos. Most of this is reverse engineered or guessed.

Compulite Vector

Destination: 255.255.255.255:4096 UDP

Wireshark capture:
0000 00 02 00 00 00 00 33 2e 32 30 2e 52 30 34 00 00 ......3.20.R04..
0010 00 00 6e 00 48 21 ..n.H!

Fild Name	size	format
unknown	6B
Version	min 8B, maybe variable	ASCII
zeros, maybe part of Version	4 B
unknown	4B