76
edits
Changes
Jump to navigation
Jump to search
Line 407:
Line 407: + + + + + + + + + + + + + + Line 412:
Line 426: + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +
→StreetPass Relay
The 3DS (#1) that the Initial Probe Response is directed to will send an 802.11 Action frame back to the device. The sequence numbers at this point stop stepping up by 3, and instead increase by one based from each originating device's SN. It will then send another Probe Request, this time sent directly to the responding 3DS (#2) by specifying its MAC address in the destination field, and setting its own MAC address in the source address field. It also does not have a SSID specified in the frame, except the frame will contain a BSSID with the value of the 3DS (#2) that responded to the initial Probe, and thus acts as the master in the 802.11 exchange.
The 3DS (#1) that the Initial Probe Response is directed to will send an 802.11 Action frame back to the device. The sequence numbers at this point stop stepping up by 3, and instead increase by one based from each originating device's SN. It will then send another Probe Request, this time sent directly to the responding 3DS (#2) by specifying its MAC address in the destination field, and setting its own MAC address in the source address field. It also does not have a SSID specified in the frame, except the frame will contain a BSSID with the value of the 3DS (#2) that responded to the initial Probe, and thus acts as the master in the 802.11 exchange.
=== Send Mode ===
The 3DS can mark StreetPass data with one of 4 Send Modes
{| class="wikitable" border="1"
!ID!!Send Mode!!Description
|-
|0||EXCHANGE||StreetPass message exchange will only happen if both consoles can store the message of the other. E.g. the inbox isn't full. Example title: StreetPass Mii Plaza
|-
|1||RECV_ONLY||3DS doesn't have anything in its outbox so it is only receiving messages.
|-
|2||SEND_ONLY||
|-
|3||SEND_RECV||
|}
== StreetPass Spoofing ==
== StreetPass Spoofing ==
A streetpass "AP" was spoofed with hostapd by setting the SSID to "Nintendo_3DS_continuous_scan_000", with the extra Nintendo tag from another 3DS' probe request. Like 3DS<>3DS communications, the 3DS didn't authenticate or associate with the host. Streetpass communications use CCMP encryption. Eventually the 3DS stops communicating with the host since the host doesn't reply to any of the data frames, then sends a 802.11 "Action" frame, with category ID 0x7f and Nintendo's vendor ID: 00 1f 32.(However the 3DS keeps communicating with the above process repeatedly)
A streetpass "AP" was spoofed with hostapd by setting the SSID to "Nintendo_3DS_continuous_scan_000", with the extra Nintendo tag from another 3DS' probe request. Like 3DS<>3DS communications, the 3DS didn't authenticate or associate with the host. Streetpass communications use CCMP encryption. Eventually the 3DS stops communicating with the host since the host doesn't reply to any of the data frames, then sends a 802.11 "Action" frame, with category ID 0x7f and Nintendo's vendor ID: 00 1f 32.(However the 3DS keeps communicating with the above process repeatedly)
Communication with two 3DSes are the same as above except there's actual encrypted data sent to/from both consoles, unlike the fake host.
Communication with two 3DSes are the same as above except there's actual encrypted data sent to/from both consoles, unlike the fake host.
==StreetPass Relay==
This feature was implemented in version [[6.2.0-12]].
It was probably controlled over the [[SpotPass#policylist]]. When connecting to a Nintendo Zone Hotspot the console will send an additional GET parameter named ''ap''. Adding the following priority to the policylist will instruct the console to upload its data (The level tag can probably be lower and must not be HIGH).
<pre>
<Priority>
<TitleId>0004013000003400</TitleId>
<TaskId>sprelay</TaskId>
<Level>HIGH</Level>
<Persistent>false</Persistent>
<Revive>false</Revive>
</Priority>
</pre>
===Request===
The following additional headers will be send in the request:
{| class=wikitable
|X-Boss-Apinfo||Access Point Info. The same number that is send with the policylist GET parameter ap. Probably identifies the SSID of connected Nintendo Zone Hotspot. If not connected to Nintendo Zone Hotspot this will be an empty string.||02012600000
|-
|X-Boss-Bssid||The MAC address of the access point the 3DS is connected to.||11:22:33:44:55:66
|-
|X-Boss-Country||2 letter country code of the set language.||ES
|-
|X-Boss-Region||3 letter region code of the 3DS' region.||EUR
|-
|X-Boss-Userid||A unique 16 character long hexadecimal string that represents a 64-bit integer. It is unknown how this number is generated.||6966442DE2EED063
|}
In the request body there will be a file named ''spr-meta'' and a file per registered StreetPass game ''spr-slotXX'' where XX is an incrementing number. If the game contains not messages in its outbox so the size of the file would be 0 then no file is created and sent but it will still be listed in the spr-meta file.
===spr-meta file===
The spr-meta file is a text file which may contain the following content.
<pre>
slotsize: 5
spr-slot01: 3,000EC400,10664
spr-slot02: 2,0007AD00,3648
spr-slot03: 3,00030000,3804
spr-slot04: 1,00051600,0
spr-slot05: 0,00020800,28228
</pre>
The comma seperated list after each spr-slotXX has the following meaning
{| class=wikitable
|Send Mode||StreetPass ID (Low title ID of the game. May be from a different region like japan.)||Size of the file in bytes
|}
===spr-slotXX files===
These are binary files. They begin a with a header with the follwing structure.
{| class=wikitable
!Offset!!Size!!Description
|-
|0x00||0x04||Magic number 0x00006161
|-
|0x04||0x04||Size of the file in bytes including this header
|-
|0x08||0x04||StreetPass ID (Low title ID of the game. May be from a different region like japan.)
|-
|0x0C||0x04||Unknown
|-
|0x10||0x04||Number of messages after this header
|}
After the header follows the StreetPass message exactly as it is stored in the outbox of [[CECD_Savegame#File_.3C12-char_ID.3E|CEC Save]].
===Response===
The following headers are expected:
{| class=wikitable
!Key!!colspan=3|Value!!Example
|-
|X-Spr-SlotXX-Result||StreetPass ID||Send Mode||Size of the file in bytes||X-Spr-Slot01-Result: 000EC400,3,17760
|}
It expects a header for every game it sent in the request.
The body is expected to contain binary data with the same structure as the spr-slotXX files in the request. The order of these must be the same as the reponse header order.
[[Category:Nintendo Software]]
[[Category:Nintendo Software]]