Eurocardsharing

Go Back   Eurocardsharing > Sharing receivers > Other sharing receivers

Other sharing receivers Discussion, Newcamd Server to NanoXX server at Sharing receivers forum; Dear All, I did lots of invesigation to understand the communication between receiver and the server. What I found is ...

Reply
 
LinkBack Thread Tools Display Modes
Newcamd Server to NanoXX server
Old
  (#1)
Toure Kunda
Junior Member
 
Toure Kunda's Avatar
 
Offline
Posts: 1

Level: 1 [♥ Bé-Yêu ♥]
Life: 0 / 0
Magic: 0 / 0
Experience: 0%

Thanks: 0
Thanked 3 Times in 1 Post
Join Date: Jul 2007
Newcamd Server to NanoXX server - 11-July-2008, 22:28

Dear All,

I did lots of invesigation to understand the communication between receiver and the server. What I found is the following. Basically there are three types of messages; two of them are UDP (ECM (67 bytes) and EMM (47 bytes)messages from port 1313 to port 80) and one is TCP (For software updates and keys download TCP port 3470 to 3470). ECM are used to decode DVB stream and EMM are used to control SIM cards:-



ECM messages are 67 bytes UDP from 1313 to port 80

struct OpenSatCommandTag{
uchar Command; // Always 0x47
ushort PID; /* MNET 0x0223 547
SHOWCimena 0x021D 541
SHOWTime 0x0208 520
ART 0x020A 522

uchar Reserved1[5]; // 0x00 0x00 0x00 0x00 0x00
ushort SID;
ushort CRC;
uchar Reserved2[3]; // Always 0x36 0x35 0X00
uchar ECM[52]; // Full ECM message starting with either 0x80 or 0x81
}__attribute__((packed)) ;
typedef struct OpenSatCommandTag OPENSATCOMMAND;


The server replies:-

struct OpenSatReplyTag{
uchar Command; // Always 0x47
ushort PID; // Most BIT=1
uchar Reserved1[2]; // 0x00 0x00
uchar Status; // unknown
uchar Reserved2[2]; // 0x00 0x00
ushort SID;
ushort CRC;
uchar DCW[16];
} __attribute__((packed)) ;
typedef struct OpenSatReplyTag OPENSATREPLY;


The DCW used to decode the channel.



EMM messages are 47 bytes UDP from 1313 to port 80 to different server IP with similiar outgoing request. These UDP message doesnot have a reply from the server. According to the specs these messages are used to update SIM card with new keys and are encrypt.





I managed to build my own Newcamd server to NanoXX server. It is not 100% working now. I still have to figure some unknow bytes and encryptions. I am trying to figure out what are the keys are used for and the greeting messages. Also the greeting messages to the server, which is also used to updated both software and keys.



The messages are TCP to port TCP 3470 from 3470:-

Receiver sends:

Recevier: 47 03 02 00 00 00 00 00 00 00 5a 82 01 00 xx xx xx xx xx xx xx xx xx xx xx xx xx xx which is always constant for one receiver. It seems like serial number or MAC address of the receiver.

Then the server replies with a message:-

Server: 47 83 02 00 00 00 00 00 00 00 0a 28 01 xx xx xx xx xx xx xx xx xx xx xx xx xx xx xx

which might be CAMkey or encryption key of some sort!!!!

Then another messages for software versions and keys:-

Server:
0030 45 55 20 76 31 2e 33 30 20 6b ..s...EU v1.30 k
0040 35 30 20 2f 20 31 36 20 4a 61 6e 20 30 38 0a 0a 50 / 16 Jan 08..
0050 31 2e 20 4f 6e 6c 79 20 4b 65 79 73 20 61 72 65 1. Only Keys are
0060 20 75 70 64 61 74 65 64 0a updated.




I am still struggling to figure out these messages. I donot have the same free time anymore. Hopefully someone will continue this. If anyone got more info please share.



My newcamd code is ready and whats left is only to decode the DCW field on the ECM reply message and to supply to the newcamd client.



Regards





Toure Kunda
   
Reply With Quote
The Following 3 Users Say Thank You to Toure Kunda For This Useful Post:
carlos21 (15-May-2009), eiadnour (24-January-2010), Nemo2009 (12-April-2009)
Reply

Bookmarks

Tags
nanoxx, newcamd, server


Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)
 
Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are Off
Pingbacks are Off
Refbacks are Off

Forum Jump



ECS on RSS ECS on Twitter ECS on Facebook ECS on Youtube
Follow us on:

Powered by vBulletin
Copyright 2002 - 2010, Jelsoft Enterprises Ltd.
SEO by vBSEO ©2011, Crawlability, Inc.
Dreambox