Disklavier

Hi Kevin,

I believe this is what you are looking for:

03:16:28.528611 IP 192.168.1.127.csvr-sslproxy > 192.168.1.109.49389: P 823676930:823677009(79) ack 1213525065 win 2896 <nop,nop,timestamp 2791162 840178587>
	0x0000:  4500 0083 d94c 4000 4006 dceb c0a8 017f  E....L@.@.......
	0x0010:  c0a8 016d 0c77 c0ed 3118 5002 4854 ec49  ...m.w..1.P.HT.I
	0x0020:  8018 0b50 514c 0000 0101 080a 002a 96fa  ...PQL.......*..
	0x0030:  3214 1b9b 3c72 635f 6365 7274 6966 6963  2...<rc_certific
	0x0040:  6174 6520 7061 7261 6d3d 2253 4a61 3841  ate.param="SJa8A
	0x0050:  7077 4661 584a 5370 436e 7437 5077 7941  pwFaXJSpCnt7PwyA
	0x0060:  5a30 5248 6a31 5461 7273 3061 4439 4932  Z0RHj1Tars0aD9I2
	0x0070:  466f 6241 3533 5a48 7171 4d65 5522 202f  FobA53ZHqqMeU"./
	0x0080:  3e0a 00                                  >..

[...]

03:16:29.514337 IP 192.168.1.109.49389 > 192.168.1.127.csvr-sslproxy: P 1213525065:1213525161(96) ack 823677021 win 32942 <nop,nop,timestamp 840178597 2791989>
	0x0000:  4500 0094 6d1f 4000 4006 4908 c0a8 016d  E...m.@.@.I....m
	0x0010:  c0a8 017f c0ed 0c77 4854 ec49 3118 505d  .......wHT.I1.P]
	0x0020:  8018 80ae 03b6 0000 0101 080a 3214 1ba5  ............2...
	0x0030:  002a 9a35 3c72 635f 6365 7274 6966 6963  .*.5<rc_certific
	0x0040:  6174 6520 7061 7261 6d3d 2255 3246 7364  ate.param="U2Fsd
	0x0050:  4756 6b58 312f 3063 6433 3262 6337 6565  GVkX1/0cd32bc7ee
	0x0060:  3664 3138 3131 3831 6662 6164 3037 6161  6d181181fbad07aa
	0x0070:  3165 3437 6532 3d22 2072 633d 2269 7068  1e47e2=".rc="iph
	0x0080:  6f6e 6522 2070 6173 7363 6f64 653d 2222  one".passcode=""
	0x0090:  202f 3e0a                                ./>.

I hope this helps. Let me know if you need anything else (like any other part of the dump or whatever).

Stefan.

--- In disklavier@yahoogroups.com, Kevin Goroway <kgoroway@...> wrote:
>
> I'm working very hard nowadays to get DKVBrowser working on E3 and DKC-850 
> pianos.
> 
> Is anyone out there with an E3/iPhone and the ability to packet sniff their 
> network in promiscuous mode?  This would allow your PC to "hear" wireless 
> communication between the iPhone and the piano.  I specifically need to see the 
> encrypted handshake.  It should be in plain-text, and looks like this:
> 
> piano sends something like this:
>   <rc_certificate param="dQJLQReq3eilwMAMkaAIPXLNheB9UsE8gnR4c6udiKyMw6xRg7" />
> 
> iPhone responds with something very similar: 
>   <rc_certificate param="sEcx4E9XLbwjjWVxVglndLF0DvWytMRc" />
> 
> I was hoping that Yamaha didn't change this, but they did.  I think I'm close, 
> but I'm missing a detail.  The length of the response string is important in 
> this case...I don't know how long it is supposed to be...
> 
> Also, anyone out their happen to be experienced in reading ARM disassembly?  I'm 
> quickly learning, but it would help to be able to bounce ideas off of someone 
> else.
> 
> Another odd request.  And this one is a stretch.  Does anyone out there have an 
> old/unused iPod Touch, iPhone that they would be willing to let me borrow?  I'm 
> an android type guy, so I don't have one.  Having an iPhone type thing around to 
> sniff the packets myself would be very helpful...
> 
> Thanks!
> -Kevin
>