napster messages ================ by drscholl@users.sourceforge.net April 7, 2000 0. Foreward This is meant to be an open specification. If you find errors or know of additional functionality not described hereafter, please send me email. It benefits the entire community to have a complete and accurate protocol specification. Not only does it allow for clients to be developed for any platform, but also decreases the strain on the server having to parse out bad client messages. Disclaimer: The following information was gathered by analyzing the protocol between the linux nap client and may not resemble the official Windows client protocol. 1. Recent Changes * Section 3: 430-432 channel invite messages (2001-04-07) * Section 3: WMA-FILE used as checksum for .wma files (2001-03-12) * numeric 607 adds download client's speed (2000-12-28) * added new numerics 640-642 for direct client to client browsing support (2000-12-23) 2. Client-Server protocol Napster uses TCP for client to server communication. Typically the servers run on ports 8888 and 7777. Note that this is different from the `metaserver' (or redirector) which runs on port 8875. each message to/from the server is in the form of <length><type><data> where <length> and <type> are 2 bytes each. <length> specifies the length in bytes of the <data> portion of the message. Be aware that <length> and <type> appear to be in little-endian format (least significant byte goes first). For example, in the C language you would encode the number 1 as const unsigned char num[2] = { 0x01, 0x00 }; and 256 would be encoded as const unsigned char num[2] = { 0x00, 0x01 }; [The above is for illustrative purposes only, there are much quicker ways to actually encode a number. -ed] The <data> portion of the message is a plain ASCII string. Note that in many cases, strings are passed as double-quoted entries. For example, filenames and client id strings are always sent as "random band - generic cowboy song.mp3" or "nap v0.8" Where required, double quotes are used in the description of the messages below. Some additional information about use of quotes inside of quotes: > The answer is, no, it doesn't do escaping of quotes. If you try searching > for the phrase 'a "quoted" string' on the windows client, you get no songs > found, and "invalid search request" printed in yellow in your console > window. (don't know what code that is, sorry.) > > and no wonder-- a little birdie told me that the client sends this: > > FILENAME CONTAINS "a "quoted" string" MAX_RESULTS 100 [contributed by Ben Byer <bbyer@rice.edu>. -ed] Note that unlike the IRC protocol, each line does NOT end in \r\n. The <length> field specifies exactly how much data you should read. 3. Message Types The following section describes the format of the <data> section for each specific message type. Each field is denoted with <>. The fields in a message are separated by a single space character (ASCII 32). Where appropriate, examples of the <data> section for each message are given. <type> can be one of the following (converted to big-endian): 0 error message [SERVER] Format: <message> 2 login [CLIENT] Format: <nick> <password> <port> "<client-info>" <link-type> [ <num> ] <port> is the port the client is listening on for data transfer. if this value is 0, it means that the client is behind a firewall and can only push files outward. it is expected that requests for downloads be made using the 500 message (see below) <client-info> is a string containing the client version info <link-type> is an integer indicating the client's bandwidth 0 unknown 1 14.4 kbps 2 28.8 kpbs 3 33.6 kbps 4 56.7 kbps 5 64K ISDN 6 128K ISDN 7 Cable 8 DSL 9 T1 10 T3 or greater <num> build number for the windows client [optional] Example: foo badpass 6699 "nap v0.8" 3 3 login ack [SERVER] Format: <email> the server sends this message to the client after a succesful login (2). If the nick is registered, the <email> address given at registration time is returned. If the nick is not registered, a dummy value is returned. 4 version check [CLIENT] Format: <version> Server sends [5] if an update is needed. All other responses are ignored. <version> = string, version 2.0b5a sends "2.0" 5 "auto-upgrade" [SERVER] Format: <version> <hostname:filename> Napster is out of date, get a new version. Or also known as gaping security hole. <version> = string, the new version number. <hostname> = string, hostname of upgrade (http) server <filename> = string, filename Connections are always made to port 80. The HTTP Request: GET <filename> HTTP/1.0 Connection: Keep-Alive Host: <hostname> Expected HTTP Response. Content-Length: <size> Content-Type: <doesn't matter> <data> Upgrade file is save as "upgrade.exe". And executed as: upgrade.exe UPGRADE "<current.exe>" As far as I can tell no confirmation is requested by Napster when it receives this message. And immediately start to "auto-upgrade". To keep users informed that Napster is doing something potentially very harmful to their computer it displays a message saying it's "auto-upgrading". I think this pretty bad, since all someone has to do is hack a napster server et voila a zillion clients at your disposal. As far as I known this only affects the Win32 2.0b5a Napster client. Other clients/versions I don't know. [This section was contributed by Thomas van der Heijden <thom@bart.nl> -ed] 6 new user login [CLIENT] Format: <nick> <pass> <port> "<client-info>" <speed> <email-address> This message is used when logging in for the first time to register a new nickname. The client normally checks for an unused nick using the "check nickname" (7) message and upon receipt of a "nickname not registered" (8) from the server will proceceed to log in with this command. note: this message is similar to the 0x02 message, with the addition of <email-address> on the end Example: foo foo 6699 "nap v0.8" 3 email@here.com 7 nick check [CLIENT] Format: <nick> Queries the server to see if <nick> is already registered. This message is typically used prior to logging in for the first time to check for a valid nickname. Response to this message is one of 8, 9 or 10 8 nickname not registered [SERVER] Format: (empty) The server sends this message in response to the "nick check" (7) message to indicate that the specified nickname is not already registered and is ok to use. 9 nickname already registered [SERVER] Format: (empty) The server sends this message when the nickname the client has requested has already been registered by another user 10 (0x0a) invalid nickname [SERVER] Format: (empty) This server sends this message in response to the "check nickname" (7) messages when the specified nickname is invalid, usually due to bad characters such as spaces or other non-printable characters. The Napster, Inc. servers only accept (upper- and lower-case) nicks comprised of the following: abcdefghijklmnopqrstuvwxyz1234567890_[]{}-@^!$ 11 ??? [CLIENT] Format: <nick> <pass> [returns "parameters are unparsable" -ed] 12 ??? [SERVER] Format: (empty) this message is returned in response to message 11 from the client 13 echo??? [SERVER] Format: <numeric>: [args] Prior to issuing a login (2) command, the server will echo back the received numeric and any arguments of any commands it receives. 14 login options [CLIENT] NAME:%s ADDRESS:%s CITY:%s STATE:%s PHONE:%s AGE:%s INCOME:%s EDUCATION:%s Example: NAME: kev ADDRESS: CITY: ephrata STATE: pa PHONE: AGE: 60 or older INCOME: $100,000 or more EDUCATION: Graduate Degree 100 (0x64) client notification of shared file [CLIENT] Format: "<filename>" <md5> <size> <bitrate> <frequency> <time> <md5> see section "MD5" <size> is bytes <bitrate> is kbps <frequency> is hz <time> is seconds Example: "generic band - generic song.mp3" b92870e0d41bc8e698cf2f0a1ddfeac7 443332 128 44100 60 102 (0x66) remove file [CLIENT] Format: <filename> client requests to remove file from shared library 110 unshare all files [CLIENT] Format: (empty) Notifies the server that the client is no longer sharing any of the files previously shared. 200 (0xc8) client search request [CLIENT] [FILENAME CONTAINS "artist name"] MAX_RESULTS <max> [FILENAME CONTAINS "song"] [LINESPEED <compare> <link-type>] [BITRATE <compare> "<br>"] [FREQ <compare> "<freq>"] [WMA-FILE] [LOCAL_ONLY] The artist name and the song name are, obviously, treated the same by the server; confirm this for yourself on the windows client. max is a number; if it is greater than 100, the server will only return 100 results. <compare> is one of the following: "AT LEAST" "AT BEST" "EQUAL TO" <link-type> see 0x02 (client login) for a description <br> is a number, in kbps <freq> is a sample frequency, in Hz LOCAL_ONLY causes the server to only search for files from users on the same server rather than all linked servers. The windows client filters by ping time inside the client. It pretty much has to, and it's easy to see the result by setting ping time to at best 100 ms or so, and max search terms to 50. You'll get back like 3 results, but the client will still tell you that it found "50 results". Examples: FILENAME CONTAINS "Sneaker Pimps" MAX_RESULTS 75 FILENAME CONTAINS "tesko suicide" BITRATE "AT LEAST" "128" MAX_RESULTS 100 FILENAME CONTAINS "Ventolin" LINESPEED "EQUAL TO" 10 [Thanks to Ben Byer <bbyer@rice.edu> for this contribution. -ed] 201 (0xc9) search response [SERVER] "<filename>" <md5> <size> <bitrate> <frequency> <length> <nick> <ip> <link-type> [weight] <md5> see secton "MD5" <size> is file size in bytes <bitrate> is mp3 bit rate in kbps <frequency> is sample rate in hz <length> is the play length of the mp3 in seconds <nick> the person sharing the file <ip> is an unsigned long integer representing the ip address of the user with this file <link-type> see message client login (2) message for a description [weight] a weighting factor to allow the client to sort the list of results. positive values indicate a "better" match, negative values indicate a "worse" match. If not present, the weight should be considered to be 0. Example: "random band - random song.mp3" 7d733c1e7419674744768db71bff8bcd 2558199 128 44100 159 lefty 3437166285 4 202 (0xca) end of search response from server [SERVER] Format: (empty) 203 (0xcb) download request [CLIENT] Format: <nick> "<filename>" client requests to download <filename> from <nick>. client expects to make an outgoing connection to <nick> on their specified data port. Example: mred "C:\Program Files\Napster\generic cowboy song.mp3" SEE ALSO: 500 alternate download request 204 (0xcc) download ack [SERVER] <nick> <ip> <port> "<filename>" <md5> <linespeed> server sends this message in response to a 203 request. <nick> is the user who has the file <ip> is an unsigned long integer representing the ip address <port> is the port <nick> is listening on <filename> is the file to retrieve <md5> is the md5 sum <linespeed> is the user's connection speed (see login(2)) Example: lefty 4877911892 6699 "generic band - generic song.mp3" 10fe9e623b1962da85eea61df7ac1f69 3 205 (0xcd) private message to/from another user [CLIENT, SERVER] <nick> <message> note the same type is used for a client sending a msg or recieving one [Commentary: this message causes problems if you consider linking servers together. With the current one server situation, the server just rewrites the message it receives with the name of the client that sent it and passes it to the recipient client. However, in the case where the recipient and sender are not on the same server, there is loss of information without encapsulating it. It would have been better to put both the sender and recipient because if the servers are ever linked they will have to make a new message type for this situation. -ed] 206 (0xce) get error [SERVER] <nick> "<filename>" the server sends this message when the file that the user has requested to download is unavailable (such as the user is not logged in). 207 (0xcf) add hotlist entry [CLIENT] <user> This message is used to add additional entries to the client's hotlist. The server will send 209 and 210 messages when a user on the hotlist has logged in or out, respectively. 208 (0xd0) hotlist [CLIENT] <user> This message is used to send the initial list of hotlist entries during the initial login process. It is normally send prior to to the add file (100) commands. To add more entries to the hotlist after the initial list is sent, clients should use the 207 message instead. 209 (0xd1) user signon [SERVER] <user> <speed> server is notifying client that a user in their hotlist, <user>, has signed on the server with link <speed> 210 (0xd2) user signoff [SERVER] <user> server is notifying client that a user on their hotlist, <user>, has signed off the server. this message is also sent by the server when the client attempts to browse a nonexistent client. [why don't they just use 404 for this? -ed] 211 (0xd3) browse a user's files [CLIENT] <nick> the client sends this message when it wants to get a list of the files shared by a specific client 212 (0xd4) browse response [SERVER] <nick> "<filename>" <md5> <size> <bitrate> <frequency> <time> <nick> is the user contributing the file <filename> is the mp3 file contributed <md5> is the has of the mp3 file <size> is the file size in bytes <bitrate> is the mp3 bitrate in kbps <frequence> is the sampling frequency in Hz <time> is the play time in seconds Example: foouser "generic band - generic song.mp3" b92870e0d41bc8e698cf2f0a1ddfeac7 443332 128 44100 60 213 (0xd5) end of browse list [SERVER] <nick> [ip] indicates no more entries in the browse list for <user>. <ip> gives the client's IP address. 214 (0xd6) server stats [CLIENT, SERVER] client: no data server: <users> <# files> <size> <size> is approximate total library size in gigabytes this message is sent by the server occasionaly without request Example: 553 64692 254 215 (0xd7) request resume [CLIENT] <checksum> <filesize> client is requesting a list of all users which have the file with the characteristics. the server responds with a list of 216 messages for each match, followed by a 217 message to terminate the list 216 (0xd8) resume search response [SERVER] <user> <ip> <port> <filename> <checksum> <size> <speed> this message contains the matches for the resume request (215). the list is terminated by a 217 message. 217 (0xd9) end of resume search list [SERVER] no data. this messag terminates a list of 216 messages initiated by a 215 client request 218 (0xda) downloading file [CLIENT] no body. client sends this message to the server to indicate they are in the process of downloading a file. this adds 1 to the download count which the server maintains. 219 (0xdb) download complete [CLIENT] no body. client sends this message to the server to indicate they have completed the file for which a prior 218 message was sent. this subtracts one from the download count the server maintains 220 (0xdc) uploading file [CLIENT] no body. client sends this message to indicate they are uploading a file. this adds one to the upload count maintained by the server. 221 (0xdd) upload complete [CLIENT] no body. client sends this message when they are finished uploading a file. this subtracts one from the upload count maintained by the server. 300 (0x12c) optional ports [CLIENT] <port> This command allows the client to specify optional ports to try for data connections if the one currently in use is unreachable by other parties. 301 (0x12d) hotlist ack [SERVER] <user> server is notifying client that <user> has successfully be added to their hotlist 302 (0x12e) hotlist error [SERVER] <user> server is notifying client that it was unable to add <user> to their hotlist. [can you only add registered nicks to your hotlist? -ed] 303 (0x12f) remove user from hotlist [CLIENT] <user> client is notifying the server that it no longer wishes to request notifications about <user> when they sign on or off the server. no response is sent in return. 310 ??? [CLIENT, SERVER] client: no data server: 0 unknown command. server returns 0 regardless of any parameters 316 client disconnect??? [CLIENT, SERVER] client: no data server: 0 The server sends this message with a value of `0' when the client is about to be disconnected. It is unkonwn what this command does when issued by the client. The server appears to send the 316 message without disconnected the client in this case. [the server seems to send this message if you send it a numeric greater than 1000. the server will also disconnect you after sending this message. -ed] 320 (0x140) user ignore list [CLIENT, SERVER] client: no data server: <count> client request to display the list of ignored users. server returns the number of users being ignored 321 (0x141) user ignore list entry [SERVER] <user> server sends each ignored nick in response to a 320 request. the list is terminated by a 320 message with the number of ignored users. 322 (0x142) add user to ignore list [CLIENT, SERVER] <user> server acks the request by returning the nick 323 (0x143) remove user from ignore list [CLIENT] <user> server acks the request by returning the nick to be removed from the ignore list. 324 (0x144) user is not ignored [SERVER] <user> server indicates that <user> is not currently ignored in response to a 323 request. 325 (0x145) user is already ignored [SERVER] <user> server indicates the specified user is already on the user's ignore list 326 (0x146) clear ignore list [CLIENT, SERVER] client: no data. server: <count> client requests the server clear its ignore list. server returns the number of entries removed from the ignore list. 330 (0x14a) blocked ip list [CLIENT] 332 (0x14c) block ip [CLIENT] 333 (0x14d) unblock ip [CLIENT] 400 (0x190) join channel [CLIENT] <channel-name> the client sends this command to join a channel 401 (0x191) part channel [CLIENT, SERVER] <channel-name> The client sends this command to part a channel. Server sends this message to indicate that the client has parted the channel. Note that this is sometimes sent even when the client has not requested, so a client _must_ be prepared to accept it at any time. 402 (0x192) send public message [CLIENT] <channel> <message> 403 (0x193) public message [SERVER] <channel> <nick> <text> this message is sent by the server when a client sends a public message to a channel. Example: 80's espinozaf hello...hola 404 (0x194) error message [SERVER] <text> This message is used to send general error messages to a client that is logged in. Note: Message 0 is only sent during the login process. Examples: User nosuchuser is not currently online. Channel #nosuchchannel does not exist! permission denied ping failed, blah is not online 405 (0x195) join acknowledge [SERVER] <channel> the server sends this message to the client to acknowlege that it has joined the requested channel (400) 406 (0x196) join message [SERVER] <channel> <user> <sharing> <link-type> <user> has joined <channel> Example: 80's WilmaFlinstone 12 2 407 (0x197) user parted channel [SERVER] <channel> <nick> <sharing> <linespeed> Example: 80's DLongley 23 7 408 (0x198) channel user list entry [SERVER] this message is identical to the join (406) message. the server will send the list of users in the channel prior to the client join command in this message. joins that occur after the client has joined will be noted by a 406 message. 409 (0x199) end of channel user list [SERVER] <channel> this message is sent by the server to indicate it has sent all informati about the users in a channel 410 (0x19a) channel topic [CLIENT, SERVER] <channel> <topic> sent when joining a channel or a new topic is set. a client requesting topic change also uses this message. [why didn't they put a field to indicate WHO changed the topic? as it is now you can only tell that it was changed. -ed] 420 (0x1a4) channel ban list [CLIENT, SERVER] Format: <channel> This command is used by clients to request the list of channel bans, and by the server to indicate the end of the channel ban list for a channel (also see 421). 421 (0x1a5) channel ban list entry [SERVER] 422 (0x1a6) channel ban [CLIENT] <channel> <user|ip> [ "<reason>" ] 423 (0x1a7) channel unban [CLIENT] <channel> <user|ip> [ "<reason>" ] 424 (0x1a8) channel ban clear [CLIENT] Format: <channel> 425 channel motd (alternate topic (?)) [SERVER] Format: <message> [The server sends this command when a user joins one of the predefined channels. It seems to send a default message if the topic for the channel is the default, otherwise it sends the current channel topic. -ed] 430 invite a user [CLIENT, SERVER] client: <nick> <channel> server: <nick> <channel> "<topic>" <unknown_digit> <unknown_text> This command is used by Napster 2.0 BETA 9.6 to invite a user to a channel. client: <nick> - nick of invited user <channel> - channel user <nick> was invited to server: <nick> - nick of user who was inviting <channel> - channel <topic> - channel's topic <unknown_digit> - ??? ("0" works fine) <unknown_text> - ??? ("Hello!" works fine) Last two arguments i cannot check because i temporary don't have internet access (e-mail only). If someone will test this message on napster.com servers please send me results. When user receives 430 message user should reply with 431 or 432. Client example: CyberAlien2 #test_channel Server example: CyberAlien3 #test_channel "Welcome to the #test_channel." 0 Hello! !!! If anyone known what should server reply instead of "0 Hello!" please tell me. 431 invitation accepted [CLIENT] <user> <channel> <user> - user who was inviting 432 invitation declined [CLIENT] format: copy of command received in 430 message 500 (0x1f4) alternate download request [CLIENT] <nick> "<filename>" requests that <nick> make an outgoing connection to the requesters client and send <filename>. this message is for use when the person sharing the file can only make an outgoing tcp connection because of firewalls blocking incoming messages. this message should be used to request files from users who have specified their data port as 0 in their login message 501 (0x1f5) alternate download ack [SERVER] <nick> <ip> <port> "<filename>" <md5> <speed> this message is sent to the uploader when their data port is set to 0 to indicate they are behind a firewall and need to push all data outware. the uploader is responsible for connecting to the downloader to transfer the file. 600 (0x258) request user's link speed [CLIENT] <nick> 601 (0x259) link speed response [SERVER] <nick> <linespeed> 602 (0x25a) ??? [CLIENT] <?> server returns a 404 with "*gulp* Drink milk, it does a body good!" 603 (0x25b) whois request [CLIENT] <nick> 604 (0x25c) whois response [SERVER] <nick> "<user-level>" <time> "<channels>" "<status>" <shared> <downloads> <uploads> <link-type> "<client-info>" [ <total downloads> <total_uploads> <ip> <connecting port> <data port> <email> ] <user-level> is one of "User", "Moderator", "Admin" or "Elite" <time> is seconds this user has been connected <channels> is the list of channels the client is a member of, each separated by a space (ASCII 32) <status> is one of "Active", "Inactive" (offline) or "Remote" (on a different server) <shared> is number of files user has available for download <downloads> is the current number of downloads in progress <uploads> is the current number of uploads in progress <link-type> see 0x02 (client login) above <client-info> see 0x02 (client login) above The following fields are displayed for user level moderator and above: <total uploads> <total downloads> <ip> note: can be "unavailable" <connecting port> <data port> <email> note: can be unavailable Example: lefty "User" 1203 "80's " "Active" 0 0 0 3 "nap v0.8" 605 (0x25d) whowas response [SERVER] <user> <level> <last-seen> if the user listed in a 603 request is not currently online, the server sends this message. <user> is the user for which information was requested <level> is the user's last known userlevel (user/mod/admin) <last-seen> is the last time at which this user was seen, measured as seconds since 12:00am on January 1, 1970 (UNIX time_t). 606 (0x25e) change user level [CLIENT] <nick> <level> changes the privileges for <nick> to <level>. client must be admin level to execute this request [I have not verified this message since I don't have admin status on any of the servers. -ed] 607 (0x25f) upload request [SERVER] <nick> "<filename>" <speed> this message is used to notify the client that user <nick> has requested upload of <filename> Example: lefty "generic band - generic song.mp3" 7 608 (0x260) accept upload request [CLIENT] <nick> "<filename>" client is notifying server that upload of <filename> to <nick> is accepted, and that the requesting client may begin download Example: lefty "generic band - generic song.mp3" 609 (0x261) accept failed [SERVER] <nick> "<filename>" this message is sent by the server when the client that the file was requested from does not accept the upload request. 610 (0x262) kill (disconnect) a user [CLIENT] <nick> [ "<reason>" ] client request to disconnect a user. 611 (0x263) nuke a user [CLIENT] <nick> client request to delete account for <nick> 612 (0x264) ban user [CLIENT] <nick | ip> [ "<reason>" ] client request to place a ban on either a specific nickname or an ip address 613 (0x265) set data port for user [CLIENT, SERVER] client: <user> <port> server: <port> This command is used by administrators to request that another client set the port used for data transfers to <port>. The server sends a message with the requested port number to the target client. NOTE: the target client can change its port number to whatever it wishes using the 703 command. 614 (0x266) unban user [CLIENT] Format: <nick | ip> [ "<reason>" ] 615 (0x267) show bans for server [CLIENT] Format: (empty) client requests the list of banned ips for the current server 616 (0x268) (ip?) ban list entry [SERVER] Format: <ip> <nick> "<reason>" <time> <n> <ip> is the string version of the ip banned <nick> is the user setting the ban <reason> is the reason given <time> is the time_t when the ban was set <n> is ???. value is either 0 or 1 This message is sent in response to the 615 client request, one for each ban. The list is terminated with a 0 length 615 message from the server. Example: 207.172.245. valkyrie "DoS exploit" 947304224 0 617 (0x269) list channels [CLIENT, SERVER] Format: (empty) client requests a list of channels on the server. server responds with 618/617 server indicates end of channel list using this message. 618 (0x26a) channel list entry [SERVER] Format: <channel-name> <number-of-users> <topic> this is the server response to a 617 client request, one for each channel. Example: Help 50 OpenNap help channel 619 (0x26b) queue limit [CLIENT] Format: <nick> "<filename>" <n> a client may limit the number of downloads from a particular client. once the limit for a particular user has been reached, the uploading client can send this message to notify the downloader that they have hit the limit and can't have any more simultaneous downloads. <nick> is the user who hit the limit, <filename> is the file they were trying to download when they hit the limit, and <n> is the number of simultaneous downloads allowed. Example: joebob "C:\MP3\Generic Band - Generic Song.mp3" 3 620 (0x26c) queue limit [SERVER] <nick> "<filename>" <filesize> <digit> This message is sent by the server in response to the 619 client request, when one user needs to notify another that they have reached the maximum allowed simultaneous downloads. When the server recieves the 619 request from the uploading client, it sends the 620 message to the downloading client. The only difference in format is the addition of the <nick> field in the 620 message which specifies the username of the uploading agent which is notifying the downloader that the queue is full. Example: joebob "C:\MP3\Generic Band - Generic Song.mp3" 1234567 3 621 (0x26d) message of the day [CLIENT, SERVER] <text> Server: each 621 message contains a single line of text Client: client sends a 621 command with no data to request the motd be sent. The server will usually send this automatically after a user logs in, so this command allows a user to reread it upon request. 622 (0x26e) muzzle a user [CLIENT] <nick> [ "<reason>" ] client requests that <nick> not be allowed to send public messages 623 (0x26f) unmuzzle a user [CLIENT] <nick> [ "<reason>" ] client requests that the enforced silence on <nick> be lifted 624 (0x270) un-nuke a user [CLIENT] <user> 625 (0x271) change a user's linespeed [CLIENT] <user> <speed> 626 (0x272) data port error [CLIENT, SERVER] <user> When a downloading client detects that the uploader's data port is unreachable, it should send a 626 message to the server with the nick of the user for which the connection failed. The server then relays the message to the uploader, substituing the downloader's nickname in the message. 627 (0x273) operator message [CLIENT, SERVER] client: <text> server: <nick> <text> client request to send a message to all admins/moderators 628 (0x274) global message [CLIENT, SERVER] client: <text> server: <nick> <text> client request send a message to all users 629 (0x275) banned users [SERVER] Format: <nick> when displaying the ban list for the server, this message is used to indicate banned nicknames. 630-639 missing 640 direct browse request [CLIENT, SERVER] Client: <nick> Server: <nick> [ip port] Client: request files for <nick> Server: <nick> is requesting your files. optionally, <ip> and <port> are given if the client getting browsed is firewalled This message is sent to initiate a direct client to client browsing of shared files. See section 5.3. 641 direct browse accept [CLIENT, SERVER] Client: <nick> Server: <nick> <ip> <port> The client to be browsed sends this message back to the server to indicate it is willing to accept a direct browse from <nick>. The server sends this message to the requestor of the browse to indicate where it should connect in order to do a direct browse from <nick>. See section 5.3 642 direct browse error [SERVER] <nick> "message" Server sends this messags in response to a 640 request if there is an error (eg. both clients are firewalled, or the browsee is not sharing any files). See section 5.3 643-649 missing 650-651 ??? [CLIENT] permission denied. 652 (0x28c) cloak user [CLIENT] sets the current user to "invisible" 653-699 missing. 700 change link speed [CLIENT] <speed> client is notifying server that its correct link speed is <speed>, in the range 0-10 (see the login message for details). 701 change user password [CLIENT] <password> client wishes to change their password 702 change email address [CLIENT] <email address> client wishes to change their email address 703 change data port [CLIENT] <port> client is changing the data port being listened on for file transfers 704-747 missing. 748 login attempt [SERVER] the server sends this message to a logged in client when another client attempts to log in with the same nickname. 749 missing. 750 (0x2ee) server ping [CLIENT, SERVER] server: none client: <user> Napster 2.0b5a sends the username in a response to a 750 from the server. [server returns an empty 750 command in response. server ping? -ed] 751 (0x2ef) ping user [CLIENT, SERVER] <user> client is attempting to determine if <user>'s connection is alive 752 (0x2f0) pong response [CLIENT, SERVER] <user> this message is sent in response to the the 751 (PING) requeset 753 (0x2f1) change password for another user [CLIENT] <user> <password> "<reason>" allows an administrator to change the password for another user 754-769 missing. 770 ??? [CLIENT] permission denied. 771 ??? [CLIENT] permission denied. 772-799 missing. 800 (0x320) reload config [CLIENT] <config variable> resets configuration parameter to its default value 801 (0x321) server version [CLIENT] no data. client request's a server's version 802-804 missing. 805 ??? [returns permission denied. -ed] 810 (0x32a) set config [CLIENT] <config string> request a change in server configuration variables 811 (0x32b) ??? [CLIENT] [returns permission denied. -ed] 820 (0x334) clear channel [CLIENT] <channel> remove all users from the specified channel 821 (0x335) redirect client to another server [CLIENT, SERVER] client: <user> <server> <port> server: <server> <port> This command allows an administrator to redirect clients to another server. 822 (0x336) cycle client [CLIENT, SERVER] client: <user> <metaserver> server: <metaserver> This commands allows an administrator to make a client restart the login process by first connecting to the metaserver (redirector) at <host>. 823 (0x337) set channel level [CLIENT] <channel> <level> Sets <channel> such that users must be at least <level> in order to enter the channel 824 (0x338) emote [CLIENT, SERVER] client: <channel> "<text>" server: <channel> <user> "<text>" A variation of the public message command to indicate an action by the user. Often implemented as the "/me" command in IRC clients. 825 (0x339) user list entry [SERVER] <channel> <user> <files shared> <speed> an 825 message is sent for each user in the channel specified by the 830 message Example: Help testor3 0 3 [This appears to be exactly the same format as the 408 message. -ed] 826 (0x33a) channel limit [CLIENT] <channel> <limit> sets the maximum number of users that may enter a channel. <limit> is an integer value between 0 and 999999999. setting it higher that this results in the limit being set to -1. by default, created channels have a limit of 200. there appears to be no restriction on any channel member changing the limit, and no notification is given 827 (0x33b) show all channels [CLIENT, SERVER] no data. client request to show all channels, including "hidden" channels. the server also sends this message to terminate 828 (0x33c) channel list [SERVER] <channel> <users> <n1> <level> <limit> "<topic>" the server sends a list of 828 commands, one for each channel, including "hidden" channels that don't show up in the normal channel list. <level> is the mimimum user level required for entry into a channel <limit> is the max number of users allowed in a channel <n1> is either 0 or 1. seems to be 1 if the channel was user created, or 0 if a predefined channel??? 829 (0x33d) kick user from channel [CLIENT] <channel> <user> [ "<reason>" ] 830 (0x33e) list users in channel [CLIENT, SERVER] <channel> client requests a list of all users in <channel>. server responds with a 825 response for each user, followed by an 830 response with no data [why didn't they just use the 409 message? -ed] 831 (0x33f) global user list [CLIENT] [returns permission denied. -ed] 832-869 missing. 870 add files by directory [CLIENT] Format: "<directory>" "<file>" <md5> <size> <bitrate> <freq> <duration> [ ... ] This command allows a client to share multiple files in the same directory as a shortcut to multiple 100 (share file) commands. <directory> is the path which should be prepended to all the given filenames in the rest of the command. <file> is the name of the file to share *without* its directory component. When other clients do a browse/share, the real path will be reported as <directory>/<file>. The portion of this command after the <directory> may be repeated as many times as necessary for files in the same directory. NOTE: most servers will not accept commands of length longer than 2048 bytes so you still may need to break up the files into multiple commands if there are many files in a single directory. 871-899 missing. 900 connection test [SERVER] <ip> <port> <data> <ip> - string, ip address to connect to. <port> - integer, port to connect to <data> - string, data to send to server. Try to connect to <ip> on <port> for atmost 1000 seconds. If the connection succeeds send the <data> to target. [reported by Thomas van der Heijden <thom@bart.nl>] 901 listen test [SERVER] <port> <timeout> <data> <port> - integer, port to listen on <timeout> - integer, time to wait for connection in seconds <data> - string, data to send after connection has been made. Listen on <port> for <timeout> seconds. If a connection arrives, return <data> to sender. [reported by Thomas van der Heijden <thom@bart.nl>] 920 ??? [CLIENT] Format: 1 This is sent by the BETA8 client prior to login. Purpose unknown. 3. MD5 It looks like the vast majority of the files are hashed using the first 299,008 bytes of the file. There have been some cases where the hash matches at 300,032 bytes, but no correlation has been drawn as to when that happens. The speculation at this point is that it might have to do with the existence of a ID3v2 tag, or perhaps the file was sampled at 48kHz...? The current method seems to be: skip id3v2, seek to frame sync and hash. Note: the linux nap client (versions 0.7 - 0.9) seem to hash exactly 300,000 bytes, which is NOT what the official windows client does. More recent Napster clients seem to send the string WMA-FILE as the checksum instead of the actual hash value for .wma files. 5. Client-Client Protocol File transfer occur directly between clients without passing through the server. There are four transfer modes, upload, download, firewalled upload, firewalled download. The normal method of transfer is that the client wishing to download a file makes a TCP connection to the client holding the file on their data port. However, in the case where the client sharing the file is behind a firewall, it is necessary for them to "push" the data by making a TCP connection to the downloader's data port. 5.1 Normal Downloading Regardless of which mode, the downloading client will first issue either a search(200) or browse(211) command to the server. This returns a list of files and information on the client sharin the file. To request a download, a get(203) request is sent to the server. The server will respond with a get ack(204) containing more detailed information. This is the point at which the different methods diverge. If the 204 get ack says that the remote clients data port is 0, you must send a 500 request to the server requesting that the remote client send the data to you. In this case you wait for the remote client to connect to your own data port. In the case where the sharing client is not firewalled, you make a TCP connection to the data port specified in the 204 message from the server. The remote client should accept the connection and immediately send one ASCII char, `1' (ASCII 49). Once you read this char, you send a request for the file you wish to download. First send the string "GET" in a single packet, then send <mynick> "<filename>" <offset> where <mynick> is your napster user name, <filename> is the file you wish to download, and <offset> if the byte offst in the file to begin the transfer at (if you are downloading for the first time, and not resuming a prior transfer, you should uses 0 to start at the beginning of the file). The remote client will then return the file size, or an error message such as "INVALID REQUEST" or "FILE NOT SHARED". Note that the file size is not terminated in any special way, and the best way to figure out the size is to keep reading until you hit a character that is not a digit (it will usually be 0xff which is the start of the MP3 frame sync header, but if a ID3v2 tag is present it might look different). Immediately following the file size is where the data stream for the file begins. Once the data transfer is initiated, the downloader should notify the server that they are downloading a file by sending the 218 message. Once the transfer is complete, you send a 219 message to indicate you have finished the download. Note that this is cummalitive, so that if you are downloading multiple files, you send one 218/219 pair for EACH concurrent download--this is how the server knows how many transfers you have going on. Likewise, the uploader should send one 220 messge for each upload, and one 221 when each upload has finished. 5.2 Firwalled Downloading As described above, when the file needs to be pushed from a client behind a firewall, the downloader sends a 500 message to the server. This causes a 501 message to be sent to the uploader, which is similar to the 204 message for a normal download. Once the uploader receives the 501 message from the server, they should make a TCP connection to the downloader's data port (given in the 501 message). Upon connection, the downloader's client will sent one byte, the ASCII character `1'. The uploader should then send the string "SEND" in a single packet, and then the information: <mynick> "<filename>" <size> where <mynick> is the uploader's napster user name, <filename> is the file being sent, and <size> is the size of the file in bytes. Upon receipt, the downloading client will either send the byte offset at whcih the transfer should start, or an error message such as "INVALID REQUEST". The byte offset should be sent as a single packet in plain ASCII digits. Just as with above in section 4.1, a 0 byte offset indicates the transfer should begin at the start of the file. Each client should notify the server that they are uploading or downloading with the 218/219 (downloading) or 220/221 (uploading) command pairs (see section 4.1 for more detailed information). 5.3 Client to Client Browsing Napster 2.0 BETA 8 adds a feature which allows direct client-to-client browsing of file lists. To request a browse, a client uses the 640 <nick> command. The server then sends a 640 <requester> to the client which is getting browsed with the nick of the client that is requesting the browse. If the client accepts the browse request, it sends back a 641 <requestor> to the server with the nick of the client requesting the browse. The server then sends a 641 <nick> <ip> <port> to the requesting client. In the case of an error, the server will send a 642 command in response to the 640 command. The browsing client then makes a TCP conection to the remote client's data port. After getting the "1" character, the browsing client sends a GETLIST At which point the remote client sends its nick followed by a linefeed (\n) by itself in a single packet (ie, one write() call) <nick> LF followed by the list of files being shared (the format being the same as the data of the "share" command). Each line is terminated by a linefeed char. At the end of the list, an additional linefeed char is sent and then the client closes the connection. In the case that the remote client is firewalled, the browse list will have to be pushed to the requesting client. The remote client makes a TCP connection to the requesting client, then sends SENDLIST <nick>\n followed by the list of files, as with the "GETLIST" command response. 6. Where to get more help? Join the napdev mailing list by sending email to napdev-subscribe@onelist.com or by visiting the community page http://www.onelist.com/community/napdev/. This list is designed for open source napster developers to share information about the specification or applications. 7. Acknowledgements A big THANKS goes to the following people who contributed valuable information to this specification: Ben Byer <bbyer@rice.edu> JT <jtraub@dragoncat.net> Evan Martin <eeyem@u.washington.edu> Colten Edwards (aka panasync@efnet) <edwards@bitchx.dimension6.com> Thomas van der Heijden <thom@bart.nl>