1# Subspace - 2D asteroids-style space game - http://sscentral.com 2# Pattern attributes: marginal veryfast fast 3# Protocol groups: game 4# Wiki: http://www.protocolinfo.org/wiki/Subspace 5# 6# By Myles Uyema <mylesuyema AT gmail.com> 7# 8# This pattern matches the initial 2 packets of the client-server 9# 'handshake' when joining a Zone. 10# 11# The first packet is an 8 byte UDP payload sent from client 12# 0x00 0x01 0x?? 0x?? 0x?? 0x?? 0x11 13# The next packet is a 12 byte UDP response from server 14# 0x00 0x10 0x?? 0x?? 0x?? 0x?? 0x?? 0x?? 0x?? 0x?? 0x01 0x00 15# 16# l7-filter strips out the null bytes, leaving me with this pattern 17 18subspace 19^\x01....\x11\x10........\x01$ 20 21