[22:08:39 ICQ] (00C430B8:668) Data sent
00000000: 2A 02 16 84-00 3C 00 04-00 06 00 00-00 00 00 06  *..„.<..........
00000010: 2C 13 57 47-84 F0 00 00-00 02 09 32-30 38 31 33  ,.WG„ð.....20813
00000020: 31 38 30 35-00 05 00 1A-00 01 2C 13-57 47 84 F0  1805......,.WG„ð
00000030: 00 00 09 46-13 43 4C 7F-11 D1 82 22-44 45 53 54  ...F.CL.Ñ‚"DEST
00000040: 00 00                                            ..
[22:08:43 ICQ] (00C430B8:668) Data sent
00000000: 2A 02 16 85-00 BF 00 04-00 06 00 00-01 4F 00 06  *..….¿.......O..
00000010: 5B 13 57 47-7A A4 00 00-00 02 09 32-30 38 31 33  [.WGz¤.....20813
00000020: 31 38 30 35-00 05 00 99-00 00 5B 13-57 47 7A A4  1805...™..[.WGz¤
00000030: 00 00 09 46-13 49 4C 7F-11 D1 82 22-44 45 53 54  ...F.IL.Ñ‚"DEST
00000040: 00 00 00 0A-00 02 00 01-00 0F 00 00-27 11 00 71  ............'..q
00000050: 1B 00 08 00-00 00 00 00-00 00 00 00-00 00 00 00  ................
00000060: 00 00 00 00-00 00 03 00-00 00 04 4F-01 0E 00 4F  ...........O...O
00000070: 01 00 00 00-00 00 00 00-00 00 00 00-00 01 00 00  ................
00000080: 01 00 01 34-00 2D 2D 2D-2D 53 65 63-75 72 65 64  ...4.----Secured
00000090: 40 68 65 6C-6C 2D 2D 2D-2D 41 42 41-41 62 55 4C  @hell----ABAAbUL
000000A0: 33 55 6B 7A-72 47 51 6A-57 62 68 67-53 77 2B 4C  3UkzrGQjWbhgSw+L
000000B0: 62 2B 4F 6B-67 69 5A 4D-00 00 00 00-00 FF FF FF  b+OkgiZM.....ÿÿÿ
000000C0: 00 00 03 00-00                                   .....
[22:08:44 ICQ] (00C430B8:668) Data sent
00000000: 2A 02 16 86-00 BF 00 04-00 06 00 00-01 50 00 06  *..†.¿.......P..
00000010: 5C 13 57 47-6E 4C 00 00-00 02 09 32-30 38 31 33  \.WGnL.....20813
00000020: 31 38 30 35-00 05 00 99-00 00 5C 13-57 47 6E 4C  1805...™..\.WGnL
00000030: 00 00 09 46-13 49 4C 7F-11 D1 82 22-44 45 53 54  ...F.IL.Ñ‚"DEST
00000040: 00 00 00 0A-00 02 00 01-00 0F 00 00-27 11 00 71  ............'..q
00000050: 1B 00 08 00-00 00 00 00-00 00 00 00-00 00 00 00  ................
00000060: 00 00 00 00-00 00 03 00-00 00 04 50-01 0E 00 50  ...........P...P
00000070: 01 00 00 00-00 00 00 00-00 00 00 00-00 01 00 00  ................
00000080: 01 00 01 34-00 2D 2D 2D-2D 53 65 63-75 72 65 64  ...4.----Secured
00000090: 40 68 65 6C-6C 2D 2D 2D-2D 41 42 41-41 4F 56 2B  @hell----ABAAOV+
000000A0: 6F 43 45 76-52 50 66 76-49 41 76 74-43 76 76 36  oCEvRPfvIAvtCvv6
000000B0: 59 67 36 32-33 6B 69 59-00 00 00 00-00 FF FF FF  Yg623kiY.....ÿÿÿ
000000C0: 00 00 03 00-00                                   .....
[22:08:47 ICQ] Init file send
[22:08:47 ICQ] OFT: Found 1 files.
[22:08:47 (NULL)] UPnP HTTP connection Host: 192.168.168.230 Port: 80

[22:08:47 (NULL)] POST /upnp/control3 HTTP/1.1

HOST: 192.168.168.230:80

CONTENT-LENGTH: 688

CONTENT-TYPE: text/xml; charset="utf-8"

SOAPACTION: "urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping"



<?xml version="1.0"?>

<s:Envelope

    xmlns:s="http://schemas.xmlsoap.org/soap/envelope/"

    s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/">

  <s:Body>

    <u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1">

      <NewRemoteHost></NewRemoteHost>

      <NewExternalPort>1891</NewExternalPort>

      <NewProtocol>TCP</NewProtocol>

      <NewInternalPort>1891</NewInternalPort>

      <NewInternalClient>192.168.168.101</NewInternalClient>

      <NewEnabled>1</NewEnabled>

      <NewPortMappingDescription>Miranda</NewPortMappingDescription>

      <NewLeaseDuration>0</NewLeaseDuration>

    </u:AddPortMapping>

  </s:Body>

</s:Envelope>


[22:08:47 (NULL)] HTTP/1.1 200 OK

CONTENT-LENGTH: 265

CONTENT-TYPE: text/xml; charset="utf-8"

EXT:

Connection: close

SERVER: IGD-HTTP/1.1 UPnP/1.0 UPnP-Device-Host/1.0



<?xml version="1.0"?>

<s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/">

<s:Body><m:AddPortMappingResponse xmlns:m="urn:schemas-upnp-org:service:WANIPConnection:1"/></s:Body></s:Envelope>


[22:08:47 (NULL)] UPnP HTTP connection Host: 192.168.168.230 Port: 80

[22:08:47 (NULL)] POST /upnp/control3 HTTP/1.1

HOST: 192.168.168.230:80

CONTENT-LENGTH: 317

CONTENT-TYPE: text/xml; charset="utf-8"

SOAPACTION: "urn:schemas-upnp-org:service:WANIPConnection:1#GetExternalIPAddress"



<?xml version="1.0"?>

<s:Envelope

    xmlns:s="http://schemas.xmlsoap.org/soap/envelope/"

    s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/">

  <s:Body>

    <u:GetExternalIPAddress xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1">

    </u:GetExternalIPAddress>

  </s:Body>

</s:Envelope>


[22:08:47 (NULL)] HTTP/1.1 200 OK

CONTENT-LENGTH: 361

CONTENT-TYPE: text/xml; charset="utf-8"

EXT:

Connection: close

SERVER: IGD-HTTP/1.1 UPnP/1.0 UPnP-Device-Host/1.0



<?xml version="1.0"?>

<s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/">

<s:Body><m:GetExternalIPAddressResponse xmlns:m="urn:schemas-upnp-org:service:WANIPConnection:1"><NewExternalIPAddress>85.216.117.91</NewExternalIPAddress></m:GetExternalIPAddressResponse></s:Body></s:Envelope>


[22:08:47 (NULL)] UPnP port mapping succeeded. Internal Port: 1891 External Port: 1891

[22:08:47 ICQP2P] (2092) Port 1891 opened for incoming connections
[22:08:47 ICQ] (00C430B8:668) Data sent
00000000: 2A 02 16 87-01 45 00 04-00 06 00 00-01 51 00 06  *..‡.E.......Q..
00000010: 5F 13 57 47-FC E5 00 00-00 02 09 32-30 38 31 33  _.WGüå.....20813
00000020: 31 38 30 35-00 05 01 23-00 00 5F 13-57 47 FC E5  1805...#.._.WGüå
00000030: 00 00 09 46-13 43 4C 7F-11 D1 82 22-44 45 53 54  ...F.CL.Ñ‚"DEST
00000040: 00 00 00 0A-00 02 00 01-00 0F 00 00-00 0D 00 05  ................
00000050: 75 74 66 2D-38 00 0C 00-98 26 6C 74-3B 49 43 51  utf-8...˜&lt;ICQ
00000060: 5F 43 4F 4F-4C 5F 46 54-26 67 74 3B-26 6C 74 3B  _COOL_FT&gt;&lt;
00000070: 46 53 26 67-74 3B 73 69-6E 75 73 2E-67 69 66 2E  FS&gt;sinus.gif.
00000080: 41 45 53 48-45 4C 4C 28-31 29 26 6C-74 3B 2F 46  AESHELL(1)&lt;/F
00000090: 53 26 67 74-3B 26 6C 74-3B 53 26 67-74 3B 33 32  S&gt;&lt;S&gt;32
000000A0: 30 30 26 6C-74 3B 2F 53-26 67 74 3B-26 6C 74 3B  00&lt;/S&gt;&lt;
000000B0: 53 49 44 26-67 74 3B 31-26 6C 74 3B-2F 53 49 44  SID&gt;1&lt;/SID
000000C0: 26 67 74 3B-26 6C 74 3B-44 45 53 43-26 67 74 3B  &gt;&lt;DESC&gt;
000000D0: 26 6C 74 3B-2F 44 45 53-43 26 67 74-3B 26 6C 74  &lt;/DESC&gt;&lt
000000E0: 3B 2F 49 43-51 5F 43 4F-4F 4C 5F 46-54 26 67 74  ;/ICQ_COOL_FT&gt
000000F0: 3B 00 02 00-04 C0 A8 A8-65 00 16 00-04 3F 57 57  ;....À¨¨e....?WW
00000100: 9A 00 03 00-04 C0 A8 A8-65 00 05 00-02 07 63 00  š....À¨¨e.....c.
00000110: 15 00 02 F8-9C 27 11 00-1D 00 01 00-01 00 00 0C  ...øœ'..........
00000120: 80 73 69 6E-75 73 2E 67-69 66 2E 41-45 53 48 45  €sinus.gif.AESHE
00000130: 4C 4C 28 31-29 00 27 12-00 05 75 74-66 2D 38 27  LL(1).'...utf-8'
00000140: 13 00 08 00-00 00 00 00-00 0C 80                 ..........€
[22:08:51 ICQ] (00C430B8:668) Data received
00000000: 2A 02 BE 35-00 1E 00 04-00 0C 00 00-01 4F 00 06  *.¾5.........O..
00000010: 5B 13 57 47-7A A4 00 00-00 02 09 32-30 38 31 33  [.WGz¤.....20813
00000020: 31 38 30 35-2A 02 BE 36-00 1E 00 04-00 0C 00 00  1805*.¾6........
00000030: 01 50 00 06-5C 13 57 47-6E 4C 00 00-00 02 09 32  .P..\.WGnL.....2
00000040: 30 38 31 33-31 38 30 35-                         08131805
[22:08:52 ICQ] (00C430B8:668) Data received
00000000: 2A 02 BE 37-00 5E 00 04-00 0B 00 00-A0 13 00 66  *.¾7.^...... ..f
00000010: 5B 13 57 47-7A A4 00 00-00 02 09 32-30 38 31 33  [.WGz¤.....20813
00000020: 31 38 30 35-00 03 1B 00-08 00 00 00-00 00 00 00  1805............
00000030: 00 00 00 00-00 00 00 00-00 00 00 00-03 00 00 00  ................
00000040: 04 4F 01 0E-00 4F 01 00-00 00 00 00-00 00 00 00  .O...O..........
00000050: 00 00 00 01-00 00 00 00-00 01 00 00-00 00 00 00  ................
00000060: FF FF FF 00-                                     ÿÿÿ.
[22:08:52 ICQ] FOX (208131805) is here 8-)
[22:08:52 ICQ] SNAC(4.B) Received an ack that I did not ask for from (208131805)
[22:08:52 ICQ] (00C430B8:668) Data received
00000000: 2A 02 BE 38-00 5E 00 04-00 0B 00 00-A0 13 00 DE  *.¾8.^...... ..Þ
00000010: 5C 13 57 47-6E 4C 00 00-00 02 09 32-30 38 31 33  \.WGnL.....20813
00000020: 31 38 30 35-00 03 1B 00-08 00 00 00-00 00 00 00  1805............
00000030: 00 00 00 00-00 00 00 00-00 00 00 00-03 00 00 00  ................
00000040: 04 50 01 0E-00 50 01 00-00 00 00 00-00 00 00 00  .P...P..........
00000050: 00 00 00 01-00 00 00 00-00 01 00 00-00 00 00 00  ................
00000060: FF FF FF 00-                                     ÿÿÿ.
[22:08:52 ICQ] FOX (208131805) is here 8-)
[22:08:52 ICQ] SNAC(4.B) Received an ack that I did not ask for from (208131805)
[22:09:02 ICQP2P] New incoming connection on port 1891 from 85.216.118.79 (1692)
[22:09:02 (NULL)] UPnP HTTP connection Host: 192.168.168.230 Port: 80

[22:09:02 (NULL)] POST /upnp/control3 HTTP/1.1

HOST: 192.168.168.230:80

CONTENT-LENGTH: 432

CONTENT-TYPE: text/xml; charset="utf-8"

SOAPACTION: "urn:schemas-upnp-org:service:WANIPConnection:1#DeletePortMapping"



<?xml version="1.0"?>

<s:Envelope

    xmlns:s="http://schemas.xmlsoap.org/soap/envelope/"

    s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/">

  <s:Body>

    <u:DeletePortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1">

     <NewRemoteHost></NewRemoteHost>

     <NewExternalPort>1891</NewExternalPort>

     <NewProtocol>TCP</NewProtocol>

    </u:DeletePortMapping>

  </s:Body>

</s:Envelope>


[22:09:02 (NULL)] HTTP/1.1 200 OK

CONTENT-LENGTH: 268

CONTENT-TYPE: text/xml; charset="utf-8"

EXT:

Connection: close

SERVER: IGD-HTTP/1.1 UPnP/1.0 UPnP-Device-Host/1.0



<?xml version="1.0"?>

<s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/">

<s:Body><m:DeletePortMappingResponse xmlns:m="urn:schemas-upnp-org:service:WANIPConnection:1"/></s:Body></s:Envelope>


[22:09:02 ICQP2P] Oscar listener on port 1891 released.
[22:09:02 ICQ] (00C430B8:668) Data received
00000000: 2A 02 BE 39-00 8B 00 04-00 07 00 00-A0 13 33 E5  *.¾9.‹...... .3å
00000010: 5F 13 57 47-FC E5 00 00-00 02 09 32-30 38 31 33  _.WGüå.....20813
00000020: 31 38 30 35-00 00 00 06-00 01 00 02-00 51 00 06  1805.........Q..
00000030: 00 04 10 01-00 00 00 05-00 04 43 FF-20 2B 00 1D  ..........Cÿ +..
00000040: 00 14 00 01-01 10 F7 00-E3 18 7A A2-AE 1F 13 B2  ......÷.ã.z¢®..²
00000050: 1D 2C 7E 07-85 EE 00 0F-00 04 00 00-04 D7 00 03  .,~.…î.......×..
00000060: 00 04 47 57-0E 97 00 05-00 1A 00 02-5F 13 57 47  ..GW.—......_.WG
00000070: FC E5 00 00-09 46 13 43-4C 7F 11 D1-82 22 44 45  üå...F.CL.Ñ‚"DE
00000080: 53 54 00 00-00 16 00 04-47 57 13 6E-00 13 00 01  ST......GW.n....
00000090: 82                                               ‚
[22:09:02 ICQ] Message (format 2) - UID: 208131805
[22:09:02 ICQP2P] OFT: Session established.
[22:09:02 ICQP2P] (00CD9028:1692) Data sent
00000000: 4F 46 54 32-01 00 01 01-5F 13 57 47-FC E5 00 00  OFT2...._.WGüå..
00000010: 00 00 00 00-00 01 00 01-00 01 00 01-00 00 0C 80  ...............€
00000020: 00 00 0C 80-47 57 13 5F-34 6F 00 00-FF FF 00 00  ...€GW._4o..ÿÿ..
00000030: 00 00 00 00-47 57 13 5F-FF FF 00 00-00 00 00 00  ....GW._ÿÿ......
00000040: FF FF 00 00-43 6F 6F 6C-20 46 69 6C-65 58 66 65  ÿÿ..Cool FileXfe
00000050: 72 00 00 00-00 00 00 00-00 00 00 00-00 00 00 00  r...............
00000060: 00 00 00 00-20 1C 11 00-00 00 00 00-00 00 00 00  .... ...........
00000070: 00 00 00 00-00 00 00 00-00 00 00 00-00 00 00 00  ................
00000080: 00 00 00 00-00 00 00 00-00 00 00 00-00 00 00 00  ................
00000090: 00 00 00 00-00 00 00 00-00 00 00 00-00 00 00 00  ................
000000A0: 00 00 00 00-00 00 00 00-00 00 00 00-00 00 00 00  ................
000000B0: 00 00 00 00-00 00 00 00-00 00 00 00-00 00 00 00  ................
000000C0: 73 69 6E 75-73 2E 67 69-66 2E 41 45-53 48 45 4C  sinus.gif.AESHEL
000000D0: 4C 28 31 29-00 00 00 00-00 00 00 00-00 00 00 00  L(1)............
000000E0: 00 00 00 00-00 00 00 00-00 00 00 00-00 00 00 00  ................
000000F0: 00 00 00 00-00 00 00 00-00 00 00 00-00 00 00 00  ................
[22:09:02 ICQP2P] Abortive closure of oscar socket (00CD9028) (10054)
[22:09:02 ICQP2P] (00CD9028:4294967295) Connection closed