Xplico.org
http://forum.xplico.org/

Paltalk
http://forum.xplico.org/viewtopic.php?f=5&t=149
Page 1 of 1

Author:  garanews [ Wed Apr 28, 2010 10:36 am ]
Post subject:  Paltalk

Hello,
will you support Paltalk?

Thanks

Author:  gianluca.costa [ Wed Apr 28, 2010 6:44 pm ]
Post subject:  Re: Paltalk

Hi garanews,
not yet.
You could post a sample pcap file of this Paltalk? Thanks.

Ciao.
Gianluca

Author:  garanews [ Fri May 07, 2010 10:43 am ]
Post subject:  Re: Paltalk

Hello,
in the attachment you find an example and some screenshot.
And here you can find some information:
http://paltalk.wikidot.com/introduction

Thanks and best regards

Author:  gianluca.costa [ Wed May 12, 2010 3:35 pm ]
Post subject:  Re: Paltalk

Hi garanews,
thanks for the information and pcap.
I reviewed your pcap and I also experiment with Paltalk and PaltalkExpress.
The first ("Paltalk") is "decoded" as "not decoded" by the last version of Xplico (undecode->TCP-UDP-> tcp:109.117.135.232:1092-64.40.10.75:27560 from your pcap), while the second ("PaltalkExpress") generates HTTP traffic to the server express.paltalk.com with (many) POST.
The only difficulty is that the protocol is not documented. But it is possible to develop for both version (Paltalk and PaltalkExpress) the dissectors and Manipulator (only for PaltalkExpress) to extract chat and users information.

We have little time to devote to the development of these dissectors. I can not give an estimate on timing for the first version of these modules.

Ciao.
Gianluca

Page 1 of 1 All times are UTC
Powered by phpBB © 2000, 2002, 2005, 2007 phpBB Group
http://www.phpbb.com/