2012 QQ协议 Analyzer分析结果

以下是复制的QQAnalyzer分析结果，中括号中为分析后结果，貌似有部分错误，大家有没有好的方法旁路阻断QQ，我测试另一台主机复制数据发送相同的数据包不可以。

[NO.1 2012-05-31 08:47:20 091 SEND 87字节]

02 2D 3D 00 91 00 15 48 1D 93 F9 02 00 00 00 01
01 01 00 00 65 60 F2 16 D4 08 4F 42 C3 23 8A 2E
67 3D 64 67 A8 F4 51 44 E4 FE ED 28 58 38 85 E2
15 01 10 BD 92 A4 60 9D 66 EB ED 7E C3 15 EB 34
38 0B 57 5C 06 F1 C9 D0 DA 35 07 A5 CC 85 4C B5
72 E5 5B 51 BF 26 03
[
02 //包头
2D 3D //版本号
00 91 //命令
00 15 //包序号
48 1D 93 F9 //QQ号码:1209897977
02 00 00 00 01 01 01 00 00 65 60 //固定，QQ版本号不同则不同
F2 16 D4 08 4F 42 C3 23 8A 2E 67 3D 64 67 A8 F4 //0x91密钥
00 01 //固定两字节
00 00 08 04 01 E0 //0091Data01（在后面的命令里面要用到的）
00 00 03 64 00 00 00 01 00 00 11 D1 //0091Data02（在后面的命令里面要用到的）
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 //首次发送为15字节0
03 //包尾
]


[NO.2 2012-05-31 08:47:20 106 RECEIVE 103字节]
02 2D 3D 00 91 00 15 48 1D 93 F9 00 00 00 83 B3
70 FE 66 BC 51 C5 A7 3B 41 43 4B 48 41 41 98 61
3D AD A7 D9 B1 62 88 33 E9 7A 28 20 19 AD B5 E0
A0 6F 1B 3E 9E D7 81 DC 36 D7 B7 E2 45 0D 9F B7
8A 8F 39 AA 73 B1 6A 93 D4 86 17 92 B5 D9 28 31
43 1E 8E 8D 11 8E 7D C1 97 1E 78 D2 17 18 31 6D
39 15 C2 02 22 69 03
[
02 //包头
2D 3D //版本号
00 91 //命令
00 15 //包序号
48 1D 93 F9 //QQ号码:1209897977
00 00 00 //固定全为0
00 //接触成功
4F C6 BF A2 //登录时间:2012-5-31 8:47:30
7C 80 EB 2A //登录IP地址:124.128.235.42
00 00 00 00 00 00 00 00 //固定8字节0
00 38 //0091_Token长度：56字节
5D 8F 11 2E 54 78 6E 49 01 3E 9C E5 99 1A AA 37
F7 51 DD 2C B9 13 D8 CE 18 9E 8A 77 5C F7 7A 5A
20 CF F9 2D FE 14 35 D0 B8 4E DA 33 65 B9 C0 BF
85 E1 30 94 FC FE 66 B8
00 //接触成功
03 //包尾
]


[NO.3 2012-05-31 08:47:20 107 SEND 199字节]
02 2D 3D 00 BA 7A B5 48 1D 93 F9 02 00 00 00 01
01 01 00 00 65 60 14 A5 36 E3 33 EE A6 F2 25 F4
41 5E 6D BE 41 87 75 6A 46 E3 07 B3 7A 6B A0 C2
95 B0 20 34 29 83 AC DA B3 E8 E1 13 8A C9 C0 FB
C0 EC 53 CF 53 B3 67 91 1C 4F 7C C3 AB B5 F0 2C
F0 22 1C 89 A1 E6 B3 C0 30 5B 1A AC D6 39 DC 86
26 5B FF F4 70 9E EB 51 3E 05 CC 9C 1A 0E 04 0D
30 29 9A 55 AC C9 C0 21 9E E9 99 2A 42 5E 59 4C
E9 70 2F E6 F8 D9 C6 75 15 4A FF BD D0 6C DA 79
53 C4 F2 A8 74 DF 53 50 95 49 76 A1 FF B3 22 08
22 CD 9F 8B 13 B6 C4 F5 38 06 A3 50 15 97 B6 AB
C4 24 E4 CE 3C 1B 10 19 04 53 7C 5B C3 46 84 71
4E EE 6F 6B 26 D9 03
[
02 //包头
2D 3D //版本号
00 BA //命令
7A B5 //包序号
48 1D 93 F9 //QQ号码:1209897977
02 00 00 00 01 01 01 00 00 65 60 //固定，QQ版本号不同则不同
14 A5 36 E3 33 EE A6 F2 25 F4 41 5E 6D BE 41 87 //0xBA密钥
00 01 //固定两字节
00 00 08 04 01 E0 //0091Data01
00 00 03 64 00 00 00 01 00 00 11 D1 //0091Data02
00 38 //0091_Token长度：56字节
5D 8F 11 2E 54 78 6E 49 01 3E 9C E5 99 1A AA 37
F7 51 DD 2C B9 13 D8 CE 18 9E 8A 77 5C F7 7A 5A
20 CF F9 2D FE 14 35 D0 B8 4E DA 33 65 B9 C0 BF
85 E1 30 94 FC FE 66 B8
13 00 05 00 00 00 00 00 00 00 //固定
00 38 //00BA_New_Token长度:56字节
A5 66 0F 51 72 B8 0B 8C EE 76 97 3A D3 F6 94 75
67 67 32 E9 8C 85 CB F4 08 78 93 A0 FC 42 F6 77
66 FC 1C 5D 8F 08 DA B2 12 25 E7 D9 B1 A8 12 0B
CA 69 C2 80 BD 3A D3 5B
03 //包尾
]


[NO.4 2012-05-31 08:47:20 162 RECEIVE 95字节]
02 2D 3D 00 BA 7A B5 48 1D 93 F9 00 00 00 99 97
2B 5F 7A A0 51 D4 64 A8 38 C5 F7 42 B1 41 60 E1
8A 13 06 6B D6 49 6E 85 9D E6 40 BA B2 21 1E CC
08 9C 53 38 E9 78 D0 66 85 09 7C 67 24 E4 C9 68
AD 0E 3F AA 18 43 70 5A C5 F1 1E B4 4B 90 B9 6B
08 DA 08 88 B2 51 CB 7F E7 AE F4 FD A7 3C 03
[
02 //包头
2D 3D //版本号
00 BA //命令
7A B5 //包序号
48 1D 93 F9 //QQ号码:1209897977
00 00 00 //固定
13 //验证结果：03或13表示成功，04表示需要验证码
00 05 //固定
00 //是否需要验证码：0不需要，1需要
00 00 00 00 //验证码，需要验证码时为00 00 01 23，不需要时为全0
00 38 //00BA_Token长度：56字节
FC AB 85 FD 40 61 1D B3 CC B1 09 18 5A 07 3C 6E
1E A9 41 5E 9A 19 70 48 47 71 D8 BE 44 10 60 E0
DD FD 6B 2D DA E2 F7 B3 06 9C D3 66 B9 D1 1B B8
74 E3 E8 0E 2F 0B 29 DD
03 //包尾
]


[NO.5 2012-05-31 08:47:20 166 SEND 655字节]
02 2D 3D 00 DD 3B 91 48 1D 93 F9 02 00 00 00 01
01 01 00 00 65 60 C8 53 3B 58 30 10 68 E3 97 00
6C A5 31 D6 36 9B 29 74 7C 16 BA EF 62 F7 2A 8F
BF C3 AE BF 6A 13 62 35 0F CE 99 B0 30 7C FA 7F
95 BA 1C 05 A7 BD B6 11 60 41 C8 E8 85 29 E8 B8
15 35 70 73 3D A8 27 5E 5B 26 BE 8F 9F B3 05 82
29 9E 17 5F 2E 7D 07 A3 AF C1 EA 05 19 E8 DC 60
5D 7F 0D 6A 96 03 AB CF 0B 98 D5 59 7C 9F 9B 98
4F 36 66 17 D4 28 8C 04 42 EC B3 14 27 6D B4 22
F5 07 6A 76 0C FF E9 63 25 22 E4 57 A9 F9 43 B7
53 CB D2 3B 45 23 96 1E D0 13 25 70 75 81 CA 72
6E A4 BA 97 17 FE 24 8C D1 52 D7 FC 29 9B 0D 93
38 BE 38 93 BC 2B DD E6 A8 FE 3E 0E 0F 0C 39 7C
FA 27 BE 3F A0 A0 CB C5 1F C2 42 A7 0C C1 0B A6
27 27 ED 8C D1 FA B0 75 F4 63 96 C3 D7 5B 8A 78
B7 3C A6 B9 6E 69 1A 94 97 02 0A BE A6 86 20 EC
24 CC 54 E1 A4 8D 4C 73 75 A2 1B D8 FB 68 82 CE
5A 1F EE 06 4E 33 91 04 37 6F 16 F3 3C F7 78 65
2F 77 F9 BF 43 3D F5 1A 6E 87 58 29 3A C6 20 CD
8E 5D 11 FD 27 6B 9A 60 99 CD 53 92 47 D6 04 4D
34 C8 1D 34 4B C4 F0 41 92 6F D5 FC 4A F1 3A 2E
30 D0 4A 3D C4 D5 E7 EA C3 E1 3A C6 D9 AA FC A2
55 BF 2A D2 3F 4D 23 7B 86 31 72 00 E9 13 2A FE
BE 2B B8 18 19 44 47 2C 58 6C CA E7 37 33 04 AD
61 6C 91 7E 1D 82 79 84 1F 8B 45 53 3B 54 CF 7D
8D A4 82 9F 24 1A D8 AF AE A3 F9 C2 E1 C9 B8 07
9C 18 A5 79 63 BC 41 D7 EA DA 94 4C F2 F9 37 35
7D DE CD 63 04 6F E3 8A AC F7 52 E1 59 12 8D 44
F4 9D 04 13 55 3B 70 D8 BC 21 F1 6B C6 7E 2F 5A
64 EE 50 9A 63 C2 AC 5B 9D A6 87 6D 48 94 CB 02
E5 71 6D B7 01 F1 96 BF 2D CE 36 50 25 2A 49 DA
7E 30 CA 83 0B 82 95 F3 0E 9B DA 84 15 0E 11 4C
6D 43 94 91 E5 6D A9 2C D1 FC EA FC C8 72 15 68
79 5A 16 B6 C1 94 3F 8D A1 AB 65 C3 A2 DB 17 DE
AC E6 D9 94 D1 BB BF 8D CE E9 DD 7E 1D B2 21 BA
07 6A D5 34 0D 46 B1 37 A2 C5 5F B0 DE 3B 78 1D
04 18 9E 1F BD EA 47 55 0E BB 68 DA DC 32 7B 4B
0C FD 5B EE 96 94 80 BE 9E 42 75 26 FF 98 FD 36
4E 64 22 E3 72 E3 8C 78 78 A6 75 5A 99 ED EC 74
30 3E 0F 1F 64 BA 5B AF 4D C0 68 F6 44 0A DA 64
59 AA 6D 5A 4D 11 6E 89 5D 13 1B 98 FB 6D 03
[
02 //包头
2D 3D //版本号
00 DD //命令
3B 91 //包序号
48 1D 93 F9 //QQ号码:1209897977
02 00 00 00 01 01 01 00 00 65 60 //固定，QQ版本号不同则不同
C8 53 3B 58 30 10 68 E3 97 00 6C A5 31 D6 36 9B //0xDD初始密钥
01 19 //固定两字节
00 01 //固定两字节
00 00 08 04 01 E0 //0091Data01
00 00 03 64 00 00 00 01 00 00 11 D1 //0091Data02
00 38 //00BA_Token长度：56字节
FC AB 85 FD 40 61 1D B3 CC B1 09 18 5A 07 3C 6E
1E A9 41 5E 9A 19 70 48 47 71 D8 BE 44 10 60 E0
DD FD 6B 2D DA E2 F7 B3 06 9C D3 66 B9 D1 1B B8
74 E3 E8 0E 2F 0B 29 DD
00 78 //密码验证：120字节
96 FC D1 86 B9 62 60 C5 01 F8 B0 81 DA D1 93 B0
7D AF 60 8A 9D 97 6F 36 14 FD 74 D0 A8 6A 14 DE
66 05 2F E8 B8 EA 95 9E AA 30 6F 6E 3C 3D 44 4C
51 32 06 68 89 C9 4B AB B3 85 DA BB B0 0B 35 B1
FC A8 DD D9 4E C1 B6 7D 64 7B 77 38 CE 79 37 7E
59 15 CC 9B 2B 57 41 CA 49 77 C6 D3 62 35 B2 AB
5A D8 B4 8D 6C 50 33 D2 AF E7 70 2B 78 2F 37 EB
DE F4 1A 1D D2 C7 8E 32
[
DD 41 AC 11 //随机4字节
00 01 //固定
48 1D 93 F9 //QQ号码:1209897977
00 00 03 64 00 00 00 01 00 00 11 D1 //0091Data02
00 00 00 //固定3字节
77 32 2F A4 88 FE 2D 78 59 74 CE BC 39 E4 B4 E2 //密码的一次MD5值，服务器用该MD5值验证用户密码是否正确
4F C6 BF A2 //登录时间：2012-5-31 8:47:30
00 00 00 00 00 00 00 00 00 00 00 00 00 //固定13字节
7C 80 EB 2A //IP地址：124.128.235.42
00 00 00 00 00 00 00 00 //固定8字节
00 10 //数据长度，16字节
F4 6B 6C A0 08 47 54 4C 99 D9 EF 2D 0B 83 7E 96
E6 58 E6 9D 9D 85 1C 01 05 83 85 1C 87 15 ED 1F //00DD临时密钥(通过验证时客户端用该密钥解密服务端发送回来的数据)
]
00 14 //数据长度：20字节
57 D9 9C 8B 07 24 42 96 4A 47 59 DD 35 AE 76 C2 56 2B F4 FD
00 //固定
00 38 //00BA_New_Token长度:56字节
A5 66 0F 51 72 B8 0B 8C EE 76 97 3A D3 F6 94 75
67 67 32 E9 8C 85 CB F4 08 78 93 A0 FC 42 F6 77
66 FC 1C 5D 8F 08 DA B2 12 25 E7 D9 B1 A8 12 0B
CA 69 C2 80 BD 3A D3 5B
01 3C 2E 01 //固定：4字节
52 30 DF CF //固定：4字节
00 10 //密钥长度：16字节
28 8B 35 F3 FB 8A BC 76 38 3D 97 6D 02 2C 08 A8 //0xDD固定Key1
02 4E 80 1A 27 //固定：5字节
00 10 //密钥长度：16字节
B0 0D DA 08 FF 71 AA FF F4 E0 9E D7 A8 64 FF DB //0xDD固定Key2
//尾部填充0
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00 00 00 00 00 00
03 //包尾
]


[NO.6 2012-05-31 08:47:20 186 RECEIVE 319字节]
02 65 60 00 DD 3B 91 48 1D 93 F9 00 00 00 21 41
DA 8B 56 0D 99 3E 6F 88 B1 3A 79 05 B9 DE 15 6B
13 AE 33 49 C6 5C 27 9B EA 83 75 12 D6 FA 74 34
E1 27 8A 15 37 2D 68 92 8A 5D B9 C3 68 67 19 44
C5 07 6A B6 03 E0 05 7B 7E C4 AF B7 AF 73 5A 3A
2C 08 91 05 39 77 E9 B8 A8 81 3B 4A E3 23 48 36
27 79 F1 15 39 A7 88 91 2B 44 CE 26 25 23 D1 B6
15 74 67 C8 79 5E 0A 6A DB FB 8D 99 ED 0B A4 7B
76 38 EA 5C F3 63 24 74 5E E6 8F 79 26 BF C8 8C
A1 A0 BE 9D A3 93 47 60 1E CA E3 DC E4 F8 FE 38
36 7C EE 92 27 54 38 14 F8 A4 96 D7 E8 7C B1 16
48 F7 FB D1 2C B8 FE CE 29 5F FF 75 32 28 F2 13
2F 69 79 BC B5 0D 2E 69 76 EE 0F DF E4 BA BA 2C
D0 B9 90 B8 D1 BE 4A E6 83 B5 13 BE C2 BA 21 61
A5 47 04 2F E4 F7 E5 F9 C0 CF E8 CA 08 CB C5 6B
84 10 BB 40 5C BD 06 6C 30 1B 07 0D F8 33 FB C8
69 18 68 E0 D7 F0 85 84 C7 2B B0 A3 85 DA F8 1C
41 51 D1 88 69 51 DA A5 5E 6F 6C 2F 99 E8 56 69
29 A4 5B 4C 97 92 BD 72 8E 7C 39 83 98 6E 58 BA
BF 95 A9 19 A5 D9 52 C3 62 2D 4A 36 13 FA 03
[
02 //包头
65 60 //版本号
00 DD //命令
3B 91 //包序号
48 1D 93 F9 //QQ号码:1209897977
00 00 00 //固定全为0
01 1B //数