<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv=Content-Type content="text/html; charset=us-ascii">
<meta name=Generator content="Microsoft Word 11 (filtered medium)">
<style>
<!--
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman";}
a:link, span.MsoHyperlink
{color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{color:purple;
text-decoration:underline;}
span.EmailStyle17
{mso-style-type:personal-compose;
font-family:Arial;
color:windowtext;}
@page Section1
{size:612.0pt 792.0pt;
margin:72.0pt 90.0pt 72.0pt 90.0pt;}
div.Section1
{page:Section1;}
/* List Definitions */
@list l0
{mso-list-id:948396469;
mso-list-type:hybrid;
mso-list-template-ids:-2022918652 67698703 67698713 67698715 67698703 67698713 67698715 67698703 67698713 67698715;}
@list l0:level1
{mso-level-tab-stop:36.0pt;
mso-level-number-position:left;
text-indent:-18.0pt;}
ol
{margin-bottom:0cm;}
ul
{margin-bottom:0cm;}
-->
</style>
<!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang=EN-US link=blue vlink=purple>
<div class=Section1>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'>Using Wireshark I can see that ZoIPer always send a 160 byte
payload. First few payloads contain 20 bytes of data (what I believe to
be a mode 3 frame, ie first byte in 0x18 – 0x1F range), followed by 0x7B
(21<sup>st</sup> byte), ie. 5 bit 0x0F terminator padded with 011. … and
then zeroes all the way up to 160 bytes.<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'>… but then after a few payloads there are more
following these 21 bytes … typically looking like this:<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'>0000 00 0c 29 02 83 c6 00 1c 25 10 d0 48 08 00
45 00 ..)..... %..H..E.<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'>0010 00 c0 4c 58 00 00 80 11 53 38 0a cb 42 82
0a cb ..LX.... S8..B...<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'>0020 42 85 11 d9 11 d9 00 ac 6d d2 00 04 0c 80 >>
Payload starts here >> 1d be B....... m.......<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'>0030 24 9c 1c 59 38 59 74 90 48 be 91 e6 8b c9
ef 99 $..Y8Yt. H.......<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'>0040 68 ee >> Terminatar as 21<sup>st</sup> byte
>> 7b >> and then … >> 1a 24 03 50 00 00 00 1c 1a
24 03 03 00 h.{.$.P. ....$...<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'>0050 00 00 0f df 80 41 4e 8b 17 c0 10 3f 45 c1
78 55 .....AN. ...?E.xU<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'>0060 a7 c0 9f 89 94 c0 5c 06 b4 c0 12 ac c8 c0
88 23 ......\. .......#<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'>0070 21 41 50 69 2e c1 0c 8a 13 c1 ba 24 7b c0
c3 55 !APi.... ...${..U<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'>0080 a3 c0 c6 51 d6 c0 94 94 49 c0 af 0e 77 41
dd aa ...Q.... I...wA..<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'>0090 fe c0 40 e4 2e c1 00 00 00 00 60 d4 23 03
40 1c ..@..... ..`.#.@.<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'>00a0 59 3e e8 d7 23 03 fc ef a6 03 00 00 00 00
a0 00 Y>..#... ........<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'>00b0 00 00 00 00 80 3f 34 a2 f4 bf 21 3c 6a 3f
00 00 .....?4. ..!<j?..<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'>00c0 80 3f 5e a2 f6 bf 03 43 6e 3f 00 00 80
3f .?^....C n?...? <o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'>Questions:<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'><o:p> </o:p></span></font></p>
<ol style='margin-top:0cm' start=1 type=1>
<li class=MsoNormal style='mso-list:l0 level1 lfo1'><font size=2 face=Arial><span
style='font-size:10.0pt;font-family:Arial'>What is the rest and how do I
decode it with my own VoIP client?<o:p></o:p></span></font></li>
<li class=MsoNormal style='mso-list:l0 level1 lfo1'><font size=2 face=Arial><span
style='font-size:10.0pt;font-family:Arial'>How do I encode my outgoing
audio so that it looks something like the above?<o:p></o:p></span></font></li>
</ol>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'><o:p> </o:p></span></font></p>
</div>
<FONT face="Times New Roman" size=3><SPAN lang=EN-US
style="FONT-SIZE: 12pt; mso-ansi-language: EN-US">
<P class=MsoNormal style="MARGIN: 0cm 0cm 0pt 36pt" align=left><FONT face=Arial
size=2><SPAN style="FONT-SIZE: 10pt; FONT-FAMILY: Arial">To read FirstRand
Bank's Disclaimer for this email click on the following address or copy into
your Internet browser: <BR><A
href="https://www.fnb.co.za/disclaimer.html">https://www.fnb.co.za/disclaimer.html</A>
<BR style="mso-special-character: line-break"><BR
style="mso-special-character: line-break"></P><O:P></O:P></SPAN></FONT><FONT
face=Arial size=2><SPAN style="FONT-SIZE: 10pt; FONT-FAMILY: Arial">
<P class=MsoNormal style="MARGIN: 0cm 0cm 0pt 36pt"><FONT face=Arial
size=2><SPAN style="FONT-SIZE: 10pt; FONT-FAMILY: Arial">If you are unable to
access the Disclaimer, send a blank e-mail to </SPAN></FONT><FONT face=Arial
size=2><SPAN style="FONT-SIZE: 10pt; FONT-FAMILY: Arial"><A
href="mailto:firstrandbankdisclaimer@fnb.co.za">firstrandbankdisclaimer@fnb.co.za</A>
and we will send you a copy of the Disclaimer.<o:p></o:p></SPAN></FONT></P>
<P class=MsoNormal style="MARGIN: 0cm 0cm 0pt 36pt"
align=left></SPAN></FONT></SPAN></FONT></P>
</body>
</html>