1# Battlefield 2 - An EA game. 2# Pattern attributes: ok slow notsofast 3# Protocol groups: game proprietary 4# Wiki: http://www.protocolinfo.org/wiki/Battlefield_2 5# 6# This pattern is unconfirmed except implicitly by a comment on protocolinfo. 7 8battlefield2 9# gameplay|account-login|server browsing/information 10# See http://protocolinfo.org/wiki/Battlefield_2 11# Can we put a ^ on the last branch? If so, nosofast --> veryfast 12 13# 193.85.217.35 on protocolinfo says: 14# The first part of the pattern, \x11\x20\x01\xa0\x98\x11, has to be 15# modified for different version of Battlefield 2. The gameplay part of 16# pattern for BF2 v1.4 is \x11\x20\x01\x30\xb9\x10\x11, and for BF2 17# v1.41 is \x11\x20\x01\x50\xb9\x10\x11 18# 19# Rather than put all of those in, I've just gone with "...?" in the 20# middle. 21 22^(\x11\x20\x01...?\x11|\xfe\xfd.?.?.?.?.?.?(\x14\x01\x06|\xff\xff\xff))|[]\x01].?battlefield2 23 24# Pattern prior to 193.85.217.35's comment on protocolinfo: 25#^(\x11\x20\x01\xa0\x98\x11|\xfe\xfd.?.?.?.?.?.?(\x14\x01\x06|\xff\xff\xff))|[]\x01].?battlefield2 26