apple-data 1.0.1 → 1.0.388

Sign up to get free protection for your applications and to get access to all the features.
Files changed (85) hide show
  1. checksums.yaml +4 -4
  2. data/lib/apple_data/boot_args.rb +0 -1
  3. data/lib/apple_data/fdr.rb +0 -1
  4. data/lib/apple_data/ioreg.rb +0 -1
  5. data/lib/apple_data/lockdown.rb +0 -1
  6. data/lib/apple_data/macho.rb +0 -1
  7. data/lib/apple_data/version.rb +1 -1
  8. data/lib/apple_data.rb +0 -1
  9. data/share/4cc.yaml +293 -297
  10. data/share/apns.yaml +364 -367
  11. data/share/backup.yaml +44 -47
  12. data/share/baseband.yaml +1 -290
  13. data/share/bluetooth.yaml +71 -75
  14. data/share/boot_args.yaml +855 -863
  15. data/share/bridgeos.yaml +131 -174
  16. data/share/bundles.yaml +60 -56
  17. data/share/cores.yaml +68 -33
  18. data/share/dnssd.yaml +166 -171
  19. data/share/fdr.yaml +148 -150
  20. data/share/homekit.yaml +14 -14
  21. data/share/icloud.yaml +8 -11
  22. data/share/img4.yaml +453 -454
  23. data/share/ioreg.yaml +5642 -5647
  24. data/share/ipsw.yaml +1099 -51505
  25. data/share/kext.yaml +1718 -3491
  26. data/share/lightning.yaml +23 -26
  27. data/share/lockdownd.yaml +71 -74
  28. data/share/mach_o.yaml +172 -204
  29. data/share/mobile_assets.yaml +127 -113
  30. data/share/mobile_gestalt.yaml +2444 -2447
  31. data/share/nvram.yaml +441 -463
  32. data/share/ota.yaml +1 -4
  33. data/share/pki.yaml +99 -103
  34. data/share/platforms.yaml +31 -35
  35. data/share/pmu.yaml +26 -52
  36. data/share/registers.yaml +1603 -1579
  37. data/share/resources.yaml +198 -202
  38. data/share/sep.yaml +206 -210
  39. data/share/services.yaml +636 -641
  40. data/share/syscfg.yaml +1 -4
  41. metadata +2 -46
  42. data/lib/apple_data/ipsw.rb +0 -25
  43. data/lib/apple_data/keybag.rb +0 -56
  44. data/share/baseband/qualcomm/mav13.yaml +0 -26
  45. data/share/baseband/qualcomm/mav20.yaml +0 -45
  46. data/share/baseband/qualcomm/mav21.yaml +0 -254
  47. data/share/coprocessor.yaml +0 -64
  48. data/share/debug.yaml +0 -13
  49. data/share/defaults.yaml +0 -5
  50. data/share/entitlements.yaml +0 -10391
  51. data/share/environment_variables.yaml +0 -354
  52. data/share/esim.yaml +0 -7
  53. data/share/firmware.yaml +0 -1310
  54. data/share/iboot.yaml +0 -143
  55. data/share/keybags/7000.yaml +0 -44342
  56. data/share/keybags/7001.yaml +0 -19430
  57. data/share/keybags/7002.yaml +0 -292
  58. data/share/keybags/8000.yaml +0 -82065
  59. data/share/keybags/8001.yaml +0 -29655
  60. data/share/keybags/8004.yaml +0 -295
  61. data/share/keybags/8006.yaml +0 -65
  62. data/share/keybags/8010.yaml +0 -23899
  63. data/share/keybags/8011.yaml +0 -4409
  64. data/share/keybags/8015.yaml +0 -23626
  65. data/share/keybags/8020.yaml +0 -4488
  66. data/share/keybags/8027.yaml +0 -43
  67. data/share/keybags/8030.yaml +0 -8687
  68. data/share/keybags/8101.yaml +0 -8595
  69. data/share/keybags/8720.yaml +0 -2026
  70. data/share/keybags/8900.yaml +0 -2344
  71. data/share/keybags/8920.yaml +0 -6761
  72. data/share/keybags/8922.yaml +0 -3141
  73. data/share/keybags/8930.yaml +0 -20583
  74. data/share/keybags/8940.yaml +0 -36319
  75. data/share/keybags/8942.yaml +0 -17343
  76. data/share/keybags/8945.yaml +0 -23360
  77. data/share/keybags/8947.yaml +0 -1384
  78. data/share/keybags/8950.yaml +0 -16258
  79. data/share/keybags/8955.yaml +0 -52163
  80. data/share/keybags/8960.yaml +0 -49499
  81. data/share/keys.yaml +0 -56
  82. data/share/sip.yaml +0 -64
  83. data/share/smc.yaml +0 -7
  84. data/share/tipw_sync.yaml +0 -79103
  85. data/share/vmapple.yaml +0 -35
data/share/apns.yaml CHANGED
@@ -6,384 +6,381 @@
6
6
  # 0x01 connected
7
7
  # 0x03 message received
8
8
  # 0x06 keep-alive response
9
- metadata:
10
- description:
11
- credits:
12
- apns_commands:
13
- 0x07:
14
- name: connect
15
- label: Connect
16
- direction: outgoing
17
- items:
18
- 0x01:
19
- name: token
20
- label: Token
21
- 0x02:
22
- name: state
23
- label: State
24
- 0x05:
25
- # the bitfield is not decoded yet, and it doesn't seem easy,
26
- # as there's several constant values.
27
- name: flags
28
- label: Flags
29
- 0x06:
30
- # 'interface' internally has values [0..4], but the number in this field
31
- # is only 0/1 for cellular/WiFi
32
- name: interface
33
- label: Interface
34
- type: FT_UINT8
35
- base: BASE_DEC
36
- strings: VALS(interface_string)
37
- 0x07:
38
- name: active_interval
39
- label: Active Interval
40
- 0x08:
41
- name: carrier
42
- label: Carrier
43
- type: FT_STRING
44
- 0x09:
45
- name: software_version
46
- label: Software Version
47
- type: FT_STRING
48
- 0x0a:
49
- name: software_build
50
- label: Software Build
51
- type: FT_STRING
52
- 0x0b:
53
- name: hardware_version
54
- label: Hardware Version
55
- type: FT_STRING
56
- 0x0c:
57
- name: certificate
58
- label: Certificate
59
- 0x0d:
60
- name: nonce
61
- label: Nonce
62
- 0x0e:
63
- name: signature
64
- label: Signature
65
- 0x10:
66
- # I *think* this is a protocol version. Values seen:
67
- # macOS Sierra: 3
68
- # iOS 12.4.8: 6
69
- # iOS 13.7: 7
70
9
 
71
- name: version
72
- label: Protocol Version
73
- type: FT_UINT16
74
- base: BASE_DEC
75
- 0x11:
76
- name: redirect_count
77
- label: Redirect Count
78
- type: FT_UINT16
79
- base: BASE_DEC
80
- 0x13:
81
- name: dns_time
82
- label: DNS Resolve Time
83
- 0x14:
84
- name: tls_time
85
- label: TLS Handshake Time
86
- type: FT_RELATIVE_TIME
10
+ 0x07:
11
+ name: connect
12
+ label: Connect
13
+ direction: outgoing
14
+ items:
15
+ 0x01:
16
+ name: token
17
+ label: Token
18
+ 0x02:
19
+ name: state
20
+ label: State
21
+ 0x05:
22
+ # the bitfield is not decoded yet, and it doesn't seem easy,
23
+ # as there's several constant values.
24
+ name: flags
25
+ label: Flags
26
+ 0x06:
27
+ # 'interface' internally has values [0..4], but the number in this field
28
+ # is only 0/1 for cellular/WiFi
29
+ name: interface
30
+ label: Interface
31
+ type: FT_UINT8
32
+ base: BASE_DEC
33
+ strings: VALS(interface_string)
34
+ 0x07:
35
+ name: active_interval
36
+ label: Active Interval
37
+ 0x08:
38
+ name: carrier
39
+ label: Carrier
40
+ type: FT_STRING
41
+ 0x09:
42
+ name: software_version
43
+ label: Software Version
44
+ type: FT_STRING
45
+ 0x0a:
46
+ name: software_build
47
+ label: Software Build
48
+ type: FT_STRING
49
+ 0x0b:
50
+ name: hardware_version
51
+ label: Hardware Version
52
+ type: FT_STRING
53
+ 0x0c:
54
+ name: certificate
55
+ label: Certificate
56
+ 0x0d:
57
+ name: nonce
58
+ label: Nonce
59
+ 0x0e:
60
+ name: signature
61
+ label: Signature
62
+ 0x10:
63
+ # I *think* this is a protocol version. Values seen:
64
+ # macOS Sierra: 3
65
+ # iOS 12.4.8: 6
66
+ # iOS 13.7: 7
87
67
 
88
- 0x08:
89
- name: connected
90
- label: Connected
91
- direction: incoming
92
- items:
93
- 0x01:
94
- name: connected_response
95
- label: Response
96
- type: FT_UINT8
97
- base: BASE_HEX
98
- 0x02:
99
- name: server_metadata
100
- label: Server Metadata
101
- type: FT_STRING
102
- 0x03:
103
- name: token
104
- label: Token
105
- 0x04:
106
- name: message_size
107
- label: Message Size
108
- type: FT_UINT16
109
- base: BASE_DEC
110
- 0x06:
111
- name: capabilities
112
- label: Capabilities
113
- type: FT_UINT32
114
- base: BASE_HEX
115
- ## whole field: capabilities
116
- ## bit0: dualChannelSupport
117
- ## bit1: reportLastReversePushRTT
118
- 0x07:
119
- name: bad_nonce_time
120
- label: Server Time For Bad Nonce
121
- type: FT_UINT64
122
- base: BASE_HEX
123
- 0x08:
124
- name: large_message_size
125
- label: Large Message Size
126
- type: FT_UINT16
127
- base: BASE_DEC
128
- 0x09:
129
- name: redirect_reason
130
- label: Redirect Reason
131
- type: FT_STRING
132
- 0x0a:
133
- name: server_time
134
- label: Server Time
135
- type: FT_ABSOLUTE_TIME
136
- base: ABSOLUTE_TIME_UTC
137
- 0x0b:
138
- name: geo_region
139
- label: Geo Region
140
- type: FT_STRING
141
- # This is a timestamp but I don't know what it means
142
- 0x0c:
143
- name: unknown_ts
144
- label: Unknown
145
- type: FT_ABSOLUTE_TIME
146
- base: ABSOLUTE_TIME_UTC
68
+ name: version
69
+ label: Protocol Version
70
+ type: FT_UINT16
71
+ base: BASE_DEC
72
+ 0x11:
73
+ name: redirect_count
74
+ label: Redirect Count
75
+ type: FT_UINT16
76
+ base: BASE_DEC
77
+ 0x13:
78
+ name: dns_time
79
+ label: DNS Resolve Time
80
+ 0x14:
81
+ name: tls_time
82
+ label: TLS Handshake Time
83
+ type: FT_RELATIVE_TIME
147
84
 
148
- 0x09:
149
- name: filter
150
- label: Filter
151
- direction: outgoing
152
- items:
153
- 0x01:
154
- name: token
155
- label: Token
156
- 0x02:
157
- name: enabled_hash
158
- label: Enabled Topic Hash
159
- 0x03:
160
- name: ignored_hash
161
- label: Ignored Topic Hash
162
- 0x04:
163
- name: opportunistic_hash
164
- label: Opportunistic Topic Hash
165
- 0x05:
166
- name: paused_hash
167
- label: Paused Topic Hash
85
+ 0x08:
86
+ name: connected
87
+ label: Connected
88
+ direction: incoming
89
+ items:
90
+ 0x01:
91
+ name: connected_response
92
+ label: Response
93
+ type: FT_UINT8
94
+ base: BASE_HEX
95
+ 0x02:
96
+ name: server_metadata
97
+ label: Server Metadata
98
+ type: FT_STRING
99
+ 0x03:
100
+ name: token
101
+ label: Token
102
+ 0x04:
103
+ name: message_size
104
+ label: Message Size
105
+ type: FT_UINT16
106
+ base: BASE_DEC
107
+ 0x06:
108
+ name: capabilities
109
+ label: Capabilities
110
+ type: FT_UINT32
111
+ base: BASE_HEX
112
+ ## whole field: capabilities
113
+ ## bit0: dualChannelSupport
114
+ ## bit1: reportLastReversePushRTT
115
+ 0x07:
116
+ name: bad_nonce_time
117
+ label: Server Time For Bad Nonce
118
+ type: FT_UINT64
119
+ base: BASE_HEX
120
+ 0x08:
121
+ name: large_message_size
122
+ label: Large Message Size
123
+ type: FT_UINT16
124
+ base: BASE_DEC
125
+ 0x09:
126
+ name: redirect_reason
127
+ label: Redirect Reason
128
+ type: FT_STRING
129
+ 0x0a:
130
+ name: server_time
131
+ label: Server Time
132
+ type: FT_ABSOLUTE_TIME
133
+ base: ABSOLUTE_TIME_UTC
134
+ 0x0b:
135
+ name: geo_region
136
+ label: Geo Region
137
+ type: FT_STRING
138
+ # This is a timestamp but I don't know what it means
139
+ 0x0c:
140
+ name: unknown_ts
141
+ label: Unknown
142
+ type: FT_ABSOLUTE_TIME
143
+ base: ABSOLUTE_TIME_UTC
168
144
 
169
- 0x0a:
170
- name: message
171
- label: Message
172
- direction: both
173
- items:
174
- # outgoing, 1 is topic hash, 2 is token
175
- # incoming, 1 is token, 2 is topic hash
176
- 0x1:
177
- name: topic_hash
178
- label: Topic Hash
179
- 0x2:
180
- name: token
181
- label: Token
182
- 0x3:
183
- name: payload
184
- label: Payload
185
- 0x4:
186
- name: message_id
187
- label: Message ID
188
- type: FT_UINT32
189
- base: BASE_HEX
190
- 0x5:
191
- name: expiry
192
- label: Message Expiry Time
193
- type: FT_ABSOLUTE_TIME
194
- base: ABSOLUTE_TIME_UTC
195
- 0x6:
196
- # this is nanoseconds since Unix epoch,
197
- # but Wireshark doesn't yet support that
198
- name: timestamp
199
- label: Message Timestamp
200
- type: FT_UINT64
201
- base: BASE_HEX
202
- 0x9:
203
- name: storage_flags
204
- label: Storage Fiags
205
- type: FT_UINT8
206
- base: BASE_HEX
207
- 0xd:
208
- name: priority
209
- label: Priority
210
- type: FT_UINT8
211
- base: BASE_HEX
212
- 0xf:
213
- name: base_token
214
- label: Base Token
215
- 0x15:
216
- name: tracing_uuid
217
- label: Message Tracing UUID
218
- 0x18:
219
- name: correlation_id
220
- label: Correlation Identifier
221
- type: FT_STRING
222
- 0x1a:
223
- name: apn_flags
224
- label: APN Flags
225
- type: FT_UINT32
226
- base: BASE_HEX
227
- 0x1c:
228
- name: push_type
229
- label: Push Type
230
- type: FT_UINT16
231
- base: BASE_DEC
232
- strings: VALS(push_type_string)
233
- 0x19:
234
- name: lastRTT
235
- label: Last RTT
236
- type: FT_UINT16
237
- base: BASE_DEC
145
+ 0x09:
146
+ name: filter
147
+ label: Filter
148
+ direction: outgoing
149
+ items:
150
+ 0x01:
151
+ name: token
152
+ label: Token
153
+ 0x02:
154
+ name: enabled_hash
155
+ label: Enabled Topic Hash
156
+ 0x03:
157
+ name: ignored_hash
158
+ label: Ignored Topic Hash
159
+ 0x04:
160
+ name: opportunistic_hash
161
+ label: Opportunistic Topic Hash
162
+ 0x05:
163
+ name: paused_hash
164
+ label: Paused Topic Hash
238
165
 
239
- 0x0b:
240
- name: ack
241
- label: Acknowledge Message
242
- direction: both
243
- items:
244
- 0x1:
245
- name: token
246
- label: Token
247
- 0x4:
248
- name: message_id
249
- label: Message ID
250
- type: FT_UINT32
251
- base: BASE_HEX
252
- 0x8:
253
- name: response
254
- label: Response
255
- type: FT_UINT8
256
- base: BASE_HEX
166
+ 0x0a:
167
+ name: message
168
+ label: Message
169
+ direction: both
170
+ items:
171
+ # outgoing, 1 is topic hash, 2 is token
172
+ # incoming, 1 is token, 2 is topic hash
173
+ 0x1:
174
+ name: topic_hash
175
+ label: Topic Hash
176
+ 0x2:
177
+ name: token
178
+ label: Token
179
+ 0x3:
180
+ name: payload
181
+ label: Payload
182
+ 0x4:
183
+ name: message_id
184
+ label: Message ID
185
+ type: FT_UINT32
186
+ base: BASE_HEX
187
+ 0x5:
188
+ name: expiry
189
+ label: Message Expiry Time
190
+ type: FT_ABSOLUTE_TIME
191
+ base: ABSOLUTE_TIME_UTC
192
+ 0x6:
193
+ # this is nanoseconds since Unix epoch,
194
+ # but Wireshark doesn't yet support that
195
+ name: timestamp
196
+ label: Message Timestamp
197
+ type: FT_UINT64
198
+ base: BASE_HEX
199
+ 0x9:
200
+ name: storage_flags
201
+ label: Storage Fiags
202
+ type: FT_UINT8
203
+ base: BASE_HEX
204
+ 0xd:
205
+ name: priority
206
+ label: Priority
207
+ type: FT_UINT8
208
+ base: BASE_HEX
209
+ 0xf:
210
+ name: base_token
211
+ label: Base Token
212
+ 0x15:
213
+ name: tracing_uuid
214
+ label: Message Tracing UUID
215
+ 0x18:
216
+ name: correlation_id
217
+ label: Correlation Identifier
218
+ type: FT_STRING
219
+ 0x1a:
220
+ name: apn_flags
221
+ label: APN Flags
222
+ type: FT_UINT32
223
+ base: BASE_HEX
224
+ 0x1c:
225
+ name: push_type
226
+ label: Push Type
227
+ type: FT_UINT16
228
+ base: BASE_DEC
229
+ strings: VALS(push_type_string)
230
+ 0x19:
231
+ name: lastRTT
232
+ label: Last RTT
233
+ type: FT_UINT16
234
+ base: BASE_DEC
257
235
 
258
- 0x0c:
259
- name: keepalive
260
- label: Keep-Alive
261
- direction: outgoing
262
- items:
263
- 0x01:
264
- name: carrier
265
- label: Carrier
266
- type: FT_STRING
267
- 0x02:
268
- name: software_version
269
- label: Software Version
270
- type: FT_STRING
271
- 0x03:
272
- name: software_build
273
- label: Software Build
274
- type: FT_STRING
275
- 0x04:
276
- name: hardware_version
277
- label: Hardware Version
278
- type: FT_STRING
279
- 0x05:
280
- name: interval
281
- label: Keepalive Interval
282
- type: FT_STRING
283
- 0x06:
284
- name: delayed_interval
285
- label: Delayed Response Interval
286
- type: FT_STRING
236
+ 0x0b:
237
+ name: ack
238
+ label: Acknowledge Message
239
+ direction: both
240
+ items:
241
+ 0x1:
242
+ name: token
243
+ label: Token
244
+ 0x4:
245
+ name: message_id
246
+ label: Message ID
247
+ type: FT_UINT32
248
+ base: BASE_HEX
249
+ 0x8:
250
+ name: response
251
+ label: Response
252
+ type: FT_UINT8
253
+ base: BASE_HEX
287
254
 
288
- 0x0d:
289
- name: keepalive_response
290
- label: Keep-Alive Response
291
- direction: incoming
292
- items:
293
- 0x1:
294
- name: response
295
- label: Response
296
- type: FT_UINT8
297
- base: BASE_HEX
255
+ 0x0c:
256
+ name: keepalive
257
+ label: Keep-Alive
258
+ direction: outgoing
259
+ items:
260
+ 0x01:
261
+ name: carrier
262
+ label: Carrier
263
+ type: FT_STRING
264
+ 0x02:
265
+ name: software_version
266
+ label: Software Version
267
+ type: FT_STRING
268
+ 0x03:
269
+ name: software_build
270
+ label: Software Build
271
+ type: FT_STRING
272
+ 0x04:
273
+ name: hardware_version
274
+ label: Hardware Version
275
+ type: FT_STRING
276
+ 0x05:
277
+ name: interval
278
+ label: Keepalive Interval
279
+ type: FT_STRING
280
+ 0x06:
281
+ name: delayed_interval
282
+ label: Delayed Response Interval
283
+ type: FT_STRING
298
284
 
299
- 0x0f:
300
- name: flush
301
- label: Flush
302
- direction: incoming
303
- items:
304
- 0x1:
305
- name: want_padding
306
- label: Want Padding
307
- type: FT_UINT16
308
- base: BASE_HEX
285
+ 0x0d:
286
+ name: keepalive_response
287
+ label: Keep-Alive Response
288
+ direction: incoming
289
+ items:
290
+ 0x1:
291
+ name: response
292
+ label: Response
293
+ type: FT_UINT8
294
+ base: BASE_HEX
309
295
 
310
- 0x10:
311
- name: flush_response
312
- label: Flush Response
313
- direction: incoming
296
+ 0x0f:
297
+ name: flush
298
+ label: Flush
299
+ direction: incoming
300
+ items:
301
+ 0x1:
302
+ name: want_padding
303
+ label: Want Padding
304
+ type: FT_UINT16
305
+ base: BASE_HEX
314
306
 
315
- 0x11:
316
- name: apptoken
317
- label: App Token Generate Request
318
- direction: outgoing
319
- items:
320
- 0x01:
321
- name: base_token
322
- label: Base Token
323
- 0x02:
324
- name: topic_hash
325
- label: Topic Hash
326
- 0x03:
327
- name: appid
328
- label: App ID
329
- type: FT_UINT16
330
- base: BASE_HEX
307
+ 0x10:
308
+ name: flush_response
309
+ label: Flush Response
310
+ direction: incoming
331
311
 
332
- 0x12:
333
- name: apptoken_response
334
- label: App Token Generate Response
335
- direction: incoming
336
- items:
337
- 0x01:
338
- name: response
339
- label: Response
340
- type: FT_UINT8
341
- base: BASE_HEX
342
- 0x02:
343
- name: token
344
- label: Token
345
- 0x03:
346
- name: topic_hash
347
- label: Topic Hash
348
- 0x04:
349
- name: appid
350
- label: App ID
351
- type: FT_UINT16
352
- base: BASE_HEX
312
+ 0x11:
313
+ name: apptoken
314
+ label: App Token Generate Request
315
+ direction: outgoing
316
+ items:
317
+ 0x01:
318
+ name: base_token
319
+ label: Base Token
320
+ 0x02:
321
+ name: topic_hash
322
+ label: Topic Hash
323
+ 0x03:
324
+ name: appid
325
+ label: App ID
326
+ type: FT_UINT16
327
+ base: BASE_HEX
353
328
 
354
- 0x14:
355
- name: setstate
356
- label: Set Active State
357
- direction: outgoing
358
- items:
359
- 0x01:
360
- name: state
361
- label: State
362
- type: FT_UINT8
363
- base: BASE_DEC
364
- strings: VALS(active_state_string)
365
- # this is hardcoded to 0x258 ??
366
- 0x02:
367
- name: interval
368
- label: Interval
369
- type: FT_UINT32
370
- base: BASE_HEX
329
+ 0x12:
330
+ name: apptoken_response
331
+ label: App Token Generate Response
332
+ direction: incoming
333
+ items:
334
+ 0x01:
335
+ name: response
336
+ label: Response
337
+ type: FT_UINT8
338
+ base: BASE_HEX
339
+ 0x02:
340
+ name: token
341
+ label: Token
342
+ 0x03:
343
+ name: topic_hash
344
+ label: Topic Hash
345
+ 0x04:
346
+ name: appid
347
+ label: App ID
348
+ type: FT_UINT16
349
+ base: BASE_HEX
371
350
 
372
- 0x16:
373
- name: keepalive_ack
374
- label: Keep-Alive Ack
375
- direction: incoming
351
+ 0x14:
352
+ name: setstate
353
+ label: Set Active State
354
+ direction: outgoing
355
+ items:
356
+ 0x01:
357
+ name: state
358
+ label: State
359
+ type: FT_UINT8
360
+ base: BASE_DEC
361
+ strings: VALS(active_state_string)
362
+ # this is hardcoded to 0x258 ??
363
+ 0x02:
364
+ name: interval
365
+ label: Interval
366
+ type: FT_UINT32
367
+ base: BASE_HEX
376
368
 
377
- 0x17:
378
- name: redirect
379
- label: Redirect # ??
380
- direction: incoming
381
- items:
382
- 0x02:
383
- name: server_metadata
384
- label: Server Metadata
385
- type: FT_STRING
386
- 0x09:
387
- name: redirect_reason
388
- label: Redirect Reason
389
- type: FT_STRING
369
+ 0x16:
370
+ name: keepalive_ack
371
+ label: Keep-Alive Ack
372
+ direction: incoming
373
+
374
+ 0x17:
375
+ name: redirect
376
+ label: Redirect # ??
377
+ direction: incoming
378
+ items:
379
+ 0x02:
380
+ name: server_metadata
381
+ label: Server Metadata
382
+ type: FT_STRING
383
+ 0x09:
384
+ name: redirect_reason
385
+ label: Redirect Reason
386
+ type: FT_STRING