doing some ICQ research and I found that LICQ's homepage is still online, with zero hint that it hasn't been updated in 11 years:

[foone@digipres.club]

their were proxies almost immediately, which used a local program that talked over HTTP to a remote server that then did UDP to the target (or their proxy) because any NAT, firewall, or proxy situation completely broke this

[foone@digipres.club]

why doesn't my "gaming laptop" have wireshark already installed. this system is barely usable

[sun@shitposter.world]

@foone it used a centralized server for identity and finding clients and then established a direct p2p connection between clients (that could be trivially spoofed)

[feld@friedcheese.us]

@sun @foone When did ICQ and AIM end up being the same protocol? (OSCAR)

[foone@digipres.club]

a computer needs a hex editor, packet capture, Good text editor, SSH client, ghidra or ida, decompilers for C# and java, C compiler, pythons (2 and 3), binxelview, Dependencies viewer, DOSBox, UNP, at least one unity unpacker, debugger, relative-searcher, yychr, and emulators for at least 12 consoles & home computers.

otherwise it's just a toy, like a Nintendo.

[foone@digipres.club]

@feld @[email protected] I think in the 2001 release? but I can't find details.

[foone@digipres.club]

hmm, I'm using ICQ 99b and it seems to be sending version 5 packets? interesting

[foone@digipres.club]

packets are encrypted which is a Pain.the encryption is trivially breakable but it means I can't use wireshark to see the packet contents.

unless I add support to wireshark, which sounds like A Project in itself

[ericgus@mastodon.social]

@foone Well if you are going down a rabbit hole, why not see how far down it goes.. ?

[foone@digipres.club]

@ericgus I'm already going down too many of those!

[foone@digipres.club]

oh I can write lua (eww, for low level binary stuff?) dissectors. that'll make this slightly easier

[foone@digipres.club]

I'm gonna write python code to decode a packet from these docs and then I'll convert that to lua. writing it in lua the first time will be too painful, when I don't fully understand how this nonsense works

[foo@fosstodon.org]

@foone If it helps for reference, I once wrote a Wireshark lua dissector for 2ping, a low-level UDP binary protocol. Though as a warning, I haven't looked at it in about a decade, so it may not even work anymore.
https://github.com/rfinnie/2ping/tree/main/wireshark

[sundrop@gelatino.us]

@[email protected] @[email protected] is it strictly a proprietary archival protocol or is there a daemon available for it?

[foone@digipres.club]

@Sundrop @ericgus there's no daemon for this version, no

[foone@digipres.club]

@foo thanks!

[foone@digipres.club]

how is this decryption supposed to work if it starts at offset 10 and then does it in 4-byte chunks but the packet is 28 bytes long?

[foone@digipres.club]

maybe I just need to pad all packets and they forgot to mention that

[foone@digipres.club]

wait! Wireshark DOES support ICQ, it just didn't detect it in this case. Awesome

[yuubi@furry.engineer]

@foone "For Admin Use"