SRV_USERONLINE Channel: 2 SNAC(3,B) This SNAC is sent whenever a contact in your contact list goes online. Parameters Length/TLV Content (If Fixed) Designations Description 1 xx STRLEN The length of the following UIN. Varies xx .. UIN The UIN of the contact that is coming online in ASCII format. 2 00 00 WARNING Probably a Warning Level left over from OSCAR 2 xx xx COUNT The total number of following TLVs. TLV01 00 01 00 02 xx xx UNKNOWN Unknown - appears to be 00 50 if the user is 'online' and 00 70 for 'away'. I haven't (yet) seen any other states. TLV0C 00 0C 00 25 CLI2CLI Direct connection info, the contents of this TLV are as follows. 4 xx xx xx xx IPINTERNAL The LAN internal IP address of the contact. 4 00 00 xx xx PORT The port to use in order to establish a direct connection. 1 xx TCPFLAG 01 = Firewall (or HTTPS proxy) 02 = SOCKS4/5 proxy 04 = 'normal' connection 2 xx xx TCPVERSION The highest client to client protocol version this client uses. 4 xx xx xx xx COOKIE This cookie is needed when establishing a direct client to client connection. 4 00 00 00 50 UNKNOWN Unknown 4 00 00 00 03 UNKNOWN Unknown 4 xx xx xx xx TIME A time(NULL) value. Usually a fairly recent time value. 4 xx xx xx xx TIME A time(NULL) value. 4 xx xx xx xx TIME A time(NULL) value. 2 00 00 UNKNOWN Unknown TLV0A 00 0A 00 04 xx xx xx xx IPEXTERNAL The LAN external IP address of this contact. TLV06 00 06 00 04 xx xx xx xx STATUS The online status of this contact. TLV0D 00 0D xx xx .. CAPABILITIES The capabilities of this client. TLV0F 00 0F 00 04 xx xx xx xx UNKNOWN Unknown TLV02 00 02 00 04 xx xx xx xx TIME A time(NULL) value. Member of ICQ since this time. TLV03 00 03 00 04 xx xx xx xx TIME A time(NULL) value. Online since this time. TLV04 00 04 00 02 01 d1 UNKNOWN Unknown. TLV11 00 11 00 22 xx xx ... SECURITYSETTINGS List of numbers; nonsensical at first glance. Occured when user altered his 'let other people see my mobile phone number' etc. settings. -------------------------------------------------------------------------------- 2A 02 DD 9A 00 92 FLAP: Channel 2, Seq 0xDD9A, Length 0x92 00 03 00 0B 00 00 83 2F DA C1 SNAC: 0x03/0x0B, Ref 0x832FDAC1, Flags 0 08 Length of UIN 36 36 36 30 34 34 35 39 UIN in ASCII 00 00 Unknown 00 08 Number of following TLVs 00 01 00 02 00 50 TLV(1), Unknown 00 0C 00 25 C0 A8 00 03 TLV(C), Internal IP 00 00 4B 94 TCP connection port 04 TCP connection flag 00 07 TCP protocol version 2F 83 DB FA Direct connect cookie 00 00 00 50 Unknown 00 00 00 03 Unknown 3C 27 31 3F time(NULL), recent 3C 0A B1 7C time(NULL) 00 00 00 00 time(NULL), usually 00 00 Unknown 00 0A 00 04 D9 D0 4F F7 TLV(A), External IP 00 06 00 04 00 03 00 05 TLV(6), Online status 00 0D 00 20 09 46 13 49 4C 7F 11 D1 TLV(D), Capabilities 82 22 44 45 53 54 00 00 09 46 13 44 4C 7F 11 D1 82 22 44 45 53 54 00 00 00 0F 00 04 00 00 8B 2C TLV(F), Unknown 00 02 00 04 38 C3 6B E3 TLV(2), Member since 00 03 00 04 3C 37 FA FE TLV(3), Online since