Talk:QQ

From Protocolinfo

Jump to: navigation, search

HI,

"qq.pat" from "l7-protocols-2008-02-20" said "tcp protocol: the second byte is 02 and last byte is 03",

but when I tested on my PC, I found that when qq2007/qq2008 use tcp protocol, the third byte instead of the second is always 02.

So the QQ protocol changed again, or I have made a mistake, I wonder that.

tony 2008-03-31

  1. Tencent QQ Protocol - Chinese instant messenger protocol - http://www.qq.com
  2. Pattern attributes: good fast fast
  3. Protocol groups: chat
  4. Wiki: http://www.protocolinfo.org/wiki/QQ
  6. Over six million people use QQ in China, according to wsgtrsys.
  8. This pattern has been tested and is believed to work well.
  10. QQ uses three (two?) methods to connect to server(s?).
  11. one is udp, and another is tcp
  12. udp protocol: the first byte is 02 and last byte is 03
  13. tcp protocol: the second byte is 02 and last byte is 03
  14. pattern written by www.routerclub.com wsgtrsys

qq ^.?\x02.+\x03$

Ok, easily enough accommodated with another .? in the pattern. I assume that you found that the current pattern doesn't work for you? Please try ^.?.?\x02.+\x03$ and see if that helps. --Sysop 05:09, 23 April 2008 (PDT)
Retrieved from "http://www.protocolinfo.org/wiki/Talk:QQ"
Personal tools