4.1.3 FRAME 3: Establish Connection Request
From client TCP port 49759 to TCP port 1801:
-
Client -> Server : EstablishConnection Packet - MSMQBaseHeader: VersionNumber: 16 (0x10) Reserved: 192 (0xC0) - FlagsBaseHeader: 11 (0xB) MessagePriority: (.............011) - Message priority = 3 InternalMessage: (............1...) - Internal message SessionHeader: (...........0....) - Session header not included DebugSession: (..........0.....) - Debug header not included Reserved1: (........00......) - Reserved MessageTraceable: (.......0........) – Tracing disabled Reserved2: (0000000.........) - Reserved Signature: 1380927820 (0x524F494C) PacketSize: 572 (0x23C) TimeToReachQueue: 4294967295 (0xFFFFFFFF) - MSMQInternalHeader: Reserved: 0 (0x0) - FlagsInternalHeader: 2 (0x2) PacketType: (............0010) - Session: (...........0....) - Session valid Reserved: (00000000000.....) - Reserved - EstablishConnectionPacket: ClientGUID: { C626EA11-E6B6-9749-9595-9150557358D1} ServerGUID: { FCA09E90-7890-4544-8F11-394C43CD8907} TimeStamp: 501140046 milliseconds since the operating system was started Reserved: 784 (0x310) - OperatingSystem: 0 (0x0) Reserved: ( ........................00000000 ) - Reserved bits Session: ( .......................0........ ) - Not a new session OperatingSystem: ( ......................0......... ) - Initiator OS is not a server QualityOfService: ( .....................0.......... ) - Quality of transport service not supported Unused1: ( ................00000........... ) - Unused bits Padding: Binary Large Object (512 Bytes) Hex Dump: 10 C0 0B 00 4C 49 4F 52 3C 02 00 00 FF FF FF FF 00 00 02 00 D1 58 73 55 50 91 95 95 49 97 B6 E6 11 EA 26 C6 07 89 CD 43 4C 39 11 8F 44 45 90 78 90 9E A0 FC 4E CA DE 1D 10 03 00 00 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A 5A