PS3 Remote Play

Discuss the development of new homebrew software, tools and libraries.

Moderators: cheriff, TyRaNiD

Post Reply
jimparis
Posts: 1145
Joined: Fri Jun 10, 2005 4:21 am
Location: Boston

PS3 Remote Play

Post by jimparis »

For remote play over the Internet, the PSP opens five HTTP connections to the PS3 on port 9293. I've posted dumps of a short session here:
http://ps3.jim.sh/remoteplay/

The five connections are session, ctrl, video, audio, and pad. For example, the first is:

Code: Select all

GET /sce/premo/session HTTP/1.1
User-Agent: premo/1.0.0 libhttp/1.0.0
Accept: */*;q=0.01
Accept-Encoding: 
Accept-Charset: iso-8859-1;q=0.01
Host: 18.95.2.5:9293
PREMO-PSPID: EGVdxcfAdNjw/eJ2d0GFcA==
PREMO-Version: 0.1
PREMO-Mode: PREMO
PREMO-Platform-Info: PSP
PREMO-Pad-Info: PSP-Pad
PREMO-UserName: amltcA==
PREMO-Trans: capable
PREMO-SIGNIN-ID: amltQGp0YW4uY29t
Connection: Keep-Alive

HTTP/1.1 200 OK
SessionID: 0000003898193939
Connection: close
Pragma: no-cache
Content-Length: 0
PREMO-Version: 0.1
PREMO-Video-Codec: M4V
PREMO-Video-Resolution: 480x272
PREMO-Video-Bitrate: 384000-1024000
PREMO-Video-ClockFrequency: 90000
PREMO-Video-Framerate: 30
PREMO-PS3-Nickname: cHMzLmppbQ==
PREMO-Audio-Codec: AT3
PREMO-Audio-SamplingRate: 48000
PREMO-Audio-Channels: 2
PREMO-Audio-Bitrate: 144000
PREMO-Audio-ClockFrequency: 90000
PREMO-Pad-Complete: on
PREMO-Trans-Mode: peer
PREMO-Nonce: M82JAIf9cAIC2JcrZzv9tg==
The audio, video, and pad data appears encrypted. If there is more interest in figuring out these protocols (so that we can create our own remote play clients and servers), I think the next step would be to reverse the remote play functions in the PSP firmware to figure out what's up with the authentication, encryption, and data format. Anyone bored enough to give it a look? :)
jimparis
Posts: 1145
Joined: Fri Jun 10, 2005 4:21 am
Location: Boston

Post by jimparis »

For remote play auto-start, the PS3 wakes whenever it sees an ARP request for the IP address that it was using when it turned off. The PSN attempts to connect to it via TCP and that triggers the ARP from your firewall or whatever.

The PS3 still sends a DHCP release before powering off, so it's possible for some other device to grab the address instead. In that case the PS3 would wake on seeing an ARP to that other device, but then it just fetches a new DHCP lease, and it turns back off automatically when the remote play connection doesn't start for a minute or two.

As for turning off the PS3, that seems to be controlled by the PS3 itself, because it just displays a "Turn off the system?" prompt over the normal remote play graphical connection.

Still waiting for some bored PSP hacker to actually reverse the PSN sign-in and the remote play protocol... :P
Warren
Posts: 175
Joined: Sat Jan 24, 2004 8:26 am
Location: San Diego, CA

Post by Warren »

I'm very interested in this stuff but don't have time to look into it atm.
Creighton
Posts: 1
Joined: Thu Jan 10, 2008 8:09 am

Post by Creighton »

Sorry to bump this, but I'm trying to spark some interest in hacking the remote play as well.

It would be great to create a java or flash app that can handle remote play the same as the psp can, only on a computer or other handhelds. I recently did a dump of the HTTP transactions as well, and have the same findings as jimparis does above.

I'm in no way very technical at all about any of this, but what I can tell is that the ps3 is sending video and audio separately (obviously). The audio's format is AT3, which correct me if I'm wrong, but only the PSP has the capability/drivers to playback.

Has there been any progress on this?
PSN: Creighton
digihoe
Posts: 108
Joined: Sat May 14, 2005 7:40 pm

Post by digihoe »

There are drivers under Windows to playback AT3, pure AT3 that is.. None of the new ones, AT3+ or AT3+ rev 2...

Best regards!
Post Reply