Hi all,
This is my first post and not sure if I'm in the correct place but taking a chance . I have a question:

In trying to understand how the protocol works, I downloaded Limewire for Windows and made a download which I recorded in Wireshark.

In a GNUTELLA CONNECT reply message, a servent gives me X-Try-Ultrapeers: field with a list of IPs and their ports that are using the protocol.

After this packet, there are a number of UDP packets sent from my client to these ports on these IP addresses.
The problem is I cannot tell what these UDP packets contain. They are encrypted/compressed in some way.
Can anyone help in finding out what these packets contain? (I tried inflating the data over UDP using zlib::inflate() but it returns an error.

Thanks.