互联网中即时消息业务的分析和识别(论文).docVIP

互联网中即时消息业务的分析和识别 摘 要 随着互联网技术的飞速发展，我们的社会正在经历一场信息化的革命，这场革命改变了人们以往的通信方式，给我们的生活带来了新体验。而即时消息业务（IM）是这场革命的重要产物之一。即时消息业务作为一种用户之间进行实时信息传递的主要手段，除了能够提供最初的纯文本交流服务，随着宽带的普及，也开始为人们提供了视频、音频交流等融合宽带元素的服务。 然而，由于IM 厂商各自为战，为了保证自身IM 软件的用户群数量，各种即时消息业务一直没有形成被广泛认可的规范。每种即时通的协议规范都各具特点，对各类即时消息业务的通信机制，数据传输格式等进行研究分析，比较它们的通信格式的不同之处，有利于我们寻求一个更好的即时消息通信协议，同样有助于对互联网中不同即时消息业务的数据包进行识别。 本文主要对在中国应用最广泛的三种即时消息业务QQ、MSN和飞信的协议特征进行了研究。由于他们使用的协议主要是基于UDP或者TCP协议的，因此，论文开始介绍了TCP/IP协议；另外，介绍了在互联中进行抓包解包的协议分析工具Wireshark。但最主要的内容是：介绍了QQ的协议，加密算法，数据包格式以及解析了QQ的登陆、发送接收消息流程等；介绍了 MSN和飞信，主要阐述了它们的通信架构，数据通信格式，描述了其从登陆，发起一个聊天到关闭聊天窗口的过程。 关键字 即时消息 QQ MSN 飞信 协议分析 The analysis and recognition of IM on the Internet ABSTRACT With the rapid development of the internet technology, our society is undergoing an information revolution. This revolution has changed the way of the communication between people, and brought new experiences to our life .Instant Messaging (IM) has been one of the important products of this revolution. As a main approach of live information transmission between users, Instant Messaging (IM) is able to provide the initial service of text intercommunication, and as the wide use of broadband, it as well has started the services that comprise the broadband element like video, voice and so on. Nevertheless, as the IM manufacturers fight for themselves, and insure the number of its subscribers, all kinds of Instant Messaging has not formed a unified standard. The protocol standard of each IM has its own characteristics, the study of telecommunication mechanisms, data transmission format, etc of each kind of Instant Messaging, and the comparison of different kinds of telecommunication format will help us to find a better telecommunication protocol for Instant Messaging, as well as do a favor to the recognition of data packets of different kinds of IM on the internet. This paper mainly studies the protocol characteristics of QQ, MSN and Fetion, three kinds of the most widely used IMs in China. As the protocols they use are b