Msn15 协议分析

2008/01/17 2:54 | 鬼仔 | 技术文章 | 占个座先

来源：http://blog.csdn.net/cnqing/

21:56: VER 77 MSNP15 MSNP14 MSNP13 CVR0 //–>协商MSN版本请求

21:56: VER 77 MSNP15 MSNP14 MSNP13 CVR0 //<–协商MSN版本请求

21:56: CVR 78 0x0804 winnt 6.0 i386 MSNMSGR 8.1.0178 msmsgs [email protected]
USR 79 SSO I [email protected] //–>发出客户端的OS、语言、MSN Messenger版本等信息、单点登录

21:56: CVR 78 8.1.0178 8.1.0178 8.0.0787
http://msgr.dlservice.microsoft.com/download/B/D/3/BD343317-2DBF-48FE-8BD9-9E3212D65E6A/Install_Messenger.exe
http://get.live.com/cn
// ?返回推荐的MSN Messenger版本、升级软件需要的下载地址等信息。

21:56: XFR 79 NS 207.46.106.73:1863 U D //à请求分配SS服务器

21:56: VER 80 MSNP15 MSNP14 MSNP13 CVR0 //à服务器转移后重新登录

21:56: VER 80 MSNP15 MSNP14 MSNP13 CVR0 //?重复以上的登录过程

21:56: CVR 81 0x0804 winnt 6.0 i386 MSNMSGR 8.1.0178 msmsgs [email protected]
USR 82 SSO I [email protected]
//?重复以上的登录过程

21:56: CVR 81 8.1.0178 8.1.0178 8.0.0787
http://msgr.dlservice.microsoft.com/download/B/D/3/BD343317-2DBF-48FE-8BD9-9E3212D65E6A/Install_Messenger.exe
http://get.live.com/cn
//?重复以上的登录过程

21:56: GCF 0 7020 //?接下来的内容是一些包含安全策略BASE64编码后关键字的XML档案（简单整理了一下）
<Policies>
<Policytype="ABCH">
<policy>
<setid="push"service="ABCH"priority="200">
<rid="pushstorage" threshold="120000" />
</set>
</policy>
</Policy>
<Policytype="SHIELDS">
<config>
<shield>
<climaj="7"min="0"minbld="0" maxbld="9999"deny="" />
</shield>
<block>
<hashes></hashes>
<regexp>
<imtextvalue="XC5waWY=" /> //DECODE BASE64= \.pif
<imtext value="XC5zY3I=" />
<imtextvalue="Z3JvdXBwaWN0dXJlXC5waHA=" />
<imtextvalue="Z3JvdXBpY3R1cmVcLnBocA==" />
<imtextvalue="Z2FsbGVyeVwucGhw" />
<imtextvalue="c3RhZmZcLnBocA==" />
<imtextvalue="cGljc1wucGhw" />
<imtextvalue="cm90dGVudG9tYXRvZXNcLnVz" />
<imtextvalue="bXNuXC5waHBcP2VtYWlsPQ==" />
<imtextvalue="ZG93bmxvYWRcLnBocA==" />
<imtextvalue="NjlcLjU2XC4xMjlcLjY3L2dpZnRcLmNvbQ==" />
<imtextvalue="eG1hcy0yMDA2" />
<imtextvalue="bWlyYWxhZm90by9mb3RvXC5leGU=" />
<imtextvalue="MTY4XC4xNjlcLjc4XC4xOQ==" />
<imtextvalue="cHJvZmlsZVwucGhwXD8=" />
<imtextvalue="dHVmb3Rv" />
<imtextvalue="dmVydGkyL2ZhbnRhc21hXC56aXA=" />
<imtextvalue="YXJtYXpmaWxlc1wuc210cFwucnU=" />
<imtextvalue="c3dlZXRwaWN0dXJlc1wubXlwaG90b3NcLmNjL2thdGllc2V4XC5waWY=" />
<imtextvalue="MjAxXC4yMlwuNlwuNC9mb3Rvcy9zYWZhZGFcLmh0bWw=" />
<imtextvalue="Y2huc3R1ZGlvXC5jb20vdXBsb2FkL2ltcGx1c2VcLmV4ZQ=="/>
<imtextvalue="c2h1cmxcLm9yZy9teWhvbWVwYWdl" />
<imtextvalue="cDEzNzdcLnBpYy1teXNwYWNlXC5pbmZv" />
<imtextvalue="cGljODMxXC5tcDMtbXlzcGFjZVwuY29t" />
<imtextvalue="ODhjaGlcLmNvbQ==" />
<imtextvalue="bmloYW81MlwuY29t" />
<imtextvalue="ODFjb3B5XC5jb20=" />
<imtextvalue="bXlvbmxpbmVjYW1cLm5ldA==" />
<imtextvalue="Nzc4ODVcLmNu" />
<imtextvalue="NTF6aGFvZ3VcLmNvbQ==" />
<imtextvalue="NTFzaGVqaWFvXC5jbg==" />
<imtextvalue="Z2FuZ2VuXC5jbg==" />
<imtextvalue="d2FuZ3dcLmNu" />
<imtextvalue="dWdseXBob3Rvc1wubmV0" />
<imtextvalue="ZnVucGljXC5kZQ==" />
<imtextvalue="NTA1dW5pdGVkXC5jb20=" />
<imtextvalue="dDM1XC5jb20=" />
<imtextvalue="cXVpY2tuZXdzXC5pbmZv" />
<imtextvalue="c3ltYW50ZWNcLmNvbS9zZWN1cml0eV9yZXNwb25zZS93cml0ZXVwXC5qc3BcP2RvY2lkPTIwMDQtMT
IwNzE0LTA2NDMtOTk=" />
<imtextvalue="bWVtYmVyc1wubHljb3NcLmNvXC51ay9zdnkyMS90L2NvbnRhY3RcLnBocA==" />
<imtextvalue="c29ucmVzaW1sZXIxXC5nb29nbGVwYWdlc1wuY29tL296ZWxyZXNpbWxlclwuaHRt" />
<imtextvalue="dmlvdGFnYWxsZXJ5XC5jb20=" />
<imtextvalue="aW1hZ2UwMDFcLnBuZw==" />
<imtextvalue="aW1hZ2UwMDJcLmdpZg==" />
<imtextvalue="ZnVuYnVkZHlpY29uc1wuY29t" />
<imtextvalue="d2VsbHdlbGxcLmJpeg==" />
<imtextvalue="Y2FzZWRpbmplcnRpb25rZGVydW5oZGFzZW9cLmNvbQ==" />
<imtextvalue="amVydGlvbmtkZXdpb25kYXNlcnVuZlwuY29t" />
<imtextvalue="YnV0dWlua2Rlc2lvbm1hc1wuY29t" />
<imtextvalue="aW1wXC5leGU=" />
<imtextvalue="YnVzaC1ncmFjaW9zb1wuZXhl" />
<imtextvalue="bWVtZWJlcnNcLmx5Y29zXC5jb1wudWsvZ2V0bWVzc2VuZ2Vy" />
<imtextvalue="Z2V0LW1lc3Nlbmdlcg==" />
<imtextvalue="YmVsZ3JhdmVoZWxwZGVza1wuY29t" />
<imtextvalue="eHBpbWFkXC5jb20=" />
<imtextvalue="YWxidW1cLnppcA==" />
<imtextvalue="bWFsYnJhbmNoZVwuZ29yYWNlclwuZGU=" />
<imtextvalue="YWxicmFoZW1cLmNvbQ==" />
<imtextvalue="aW1wcm9maWxlXC5uZXQ=" />
<imtextvalue="dW5rbm93bnRvb2xzXC5jb20=" />
<imtextvalue="aGV0YW5kdW5oYXNkZVwuY29t" />
<imtextvalue="dGhlY29vbHBpY3NcLm5ldA==" />
<imtextvalue="Lip3d3dcLnByb3ZuYXJrb3Rpa2FcLmNvbS4q" />
<imtextvalue="Z3JhdGlzaG9zdFwuY29t" />
<imtextvalue="ZHJlYW1saWZlMzY1XC5jb20=" />
<imtextvalue="d2hvYWRtaXRzeW91XC5jb20=" />
<imtextvalue="YmxvY2tvb1wuY29t" />
<imtextvalue="YmFyYXRpbmhhXC5teXBldHNcLndz" />
<imtextvalue="bWVzc2FuZ2Vyc3RhdHNcLm5ldA==" />
<imtextvalue="bWVzc2VuZ2VydG9vbHNcLm9yZw==" />
<imtextvalue="c3R1ZmZwbHVnXC5jb20vdGVtcC9kb3duZ3JkclwuZXhl" />
<imtextvalue="aG9ybnltYXRjaGVzXC5jb20=" />
<imtextvalue="aXdhbnR1XC5jb20=" />
<imtextvalue="YmxvY2stY2hlY2tlclwuY29t" />
<imtextvalue="YW1pZ29zcGFyYXNlbXByZVwuc210cFwucnU=" />
<imtextvalue="YW1pZ29zcGFyYXNlbXByb1wuc210cFwucnU=" />
<imtextvalue="Y2hpbmFjaXJjbGVcLmNvbQ==" />
<imtextvalue="bWVuc2FnZW1wYXJhdmNcLm1haWwxNVwuY29t" />
<imtextvalue="OTMwbGVcLmNvbQ==" />
<imtextvalue="NjY2NjNcLmNu" />
<imtext value="c2h1c3VcLmNu" />
<imtextvalue="MTcxN3dhblwuY24=" />
<imtextvalue="OTk1YmFcLmNvbQ==" />
<imtext value="bXlkaXBhblwuY24=" />
<imtextvalue="NTFrb25ncWlcLmNvbQ==" />
<imtextvalue="OTRuaWxlXC5jb20=" />
<imtextvalue="bGlmZTM2NVwuY29t" />
<imtextvalue="cGhvdG9nYmFzZVwuY29tL3BpY3R1cmVzXC5waHBcP3Bob3RvNjU2XC5qcGc=" />
<imtextvalue="bXlwZW5neW91XC5jb20=" />
<imtextvalue="NTFwaW5nZ3VvXC5jbg==" />
<imtext value="c3BvdHlvdXJmYWNlXC5uZXQvbWFpbi9waWN0dXJlcy9zZXh5" />
<imtextvalue="d2luZG93c2xpdmVtZXNzZW5nZXJcLmJpeg==" />
<imtextvalue="bWVuc2FnZWlyb3ZpcnR1YWxcLmxhbmRcLnJ1" />
<imtextvalue="cHJvdm5hcmtvdGlrYVwuY29t" />
<imtextvalue="dGlueXVybFwuY29tL2FzZGtmaDEzLw==" />
<imtextvalue="d2FzZWRpbnRlcmZ1bnZhXC5jb20=" />
<imtextvalue="cWVydW5oZXJkYXNmdW5raW5cLmNvbQ==" />
<imtextvalue="cGhvdG9zXC56aXA=" />
<imtextvalue="Lioybm52YzcuKg==" />
<imtextvalue="Lip1cmx0ZWFcLmNvbS4q" />
<imtextvalue="dXJsdGVhXC5jb20vcDJz" />
<imtextvalue="dGlueXVybFwuY29tLzJubnZjNw==" />
<imtextvalue="bGlua2FuZ2VsXC5uZXQvbXNu" />
<imtextvalue="bWVzc2VuZ2VyLXRpcHNcLmNvbQ==" />
<imtextvalue="aW1yZWFsbVwuY29t" />
<imtextvalue="YmxvY2tuYmxvY2tcLmNvbQ==" />
<imtextvalue="aW10cmFjdFwuY29t" />
<imtextvalue="bWVzc2FnaW5nLW5hbWVz" />
<imtextvalue="LiptZXNzZW5nZXJsaXZlXC5pbmZvLio=" />
<imtextvalue="dGVibG9xdWVvXC5jb20=" />
<imtextvalue="Y2Jzd2VzdFwuY29t" />
<imtextvalue="bmV3bXNu" />
<imtextvalue="Y2lybmV3c1wuY29t" />
<imtextvalue="LiplYXNlZHJ1bmtpb25kZWh1bmZhbnNcLmNvbS4q" />
</regexp>
</block>
</config>
</Policy>
</Policies>

21:56: USR 83 SSO S //<–下面内容包含了单点登录身份认证信息
t=EwBIAswbAQAUs1/VcBU2sH7mwYy3BysWZ71CRDGAAFPSWtLQyZX3t9gSerdEUYLK0EElqkkzBaY
+MC1df6U4DSq7Rqx3+A9Nz3J2FrBg4OEc6iw/IFajJbwPsEIUagxoVqf0nVOsuAuvkFiGyjM6emlymla
QqdfJuhVAGwmN6b4fso/Qd13SG6QlF1p1+qPEZ0/Y0gmUJc8FBCwYUfhPA2YAAAjILU7EpvIKK5gB5
hltbnH8rXDXKKqgbw50zPWympG3pGAvQZTEZ6veqDtS0sJrgwY5dDVujp7x22+O64z1ZZt+NET5czA
gVnXmfPkSAIN/3jusCPMK63kpRL36ieI6xd24cjPTUhvIdYEnn4ixDtkVvhPnahL84LfZK81TTBZPgaTLfC
UZ6YnkDpgRfjYe/aNUYzJ+KQXolJRUbAtYB0+Teh0PClSRjQMfOyxO3/2YQDqhBe5w16/Z+yUT12707l
PI7BpiM2cVmiJQGkSSygMp6h3CGQsz+9bU5edHSZOzNww3carKtrdhwEU0BnisY76l1YQJX3KJt6viC
kaz1FInUv8VwGdSod981bKUsR6c5SwHJRt1XGrOeEPZsaJhJ/NMDNAZ4KtAIUut/D654/eVes6jyhkaJ
Gx/1Jh+SbdxlEwxbpSX+kqCuL0QD/2ZO8O7udZP9At7gXzvlmwsRM4tznkBIWjDABUgILXAuS/d9+2/
RTRnfgLIeIwNQ+7Y+7uTN/DKlxxc+TmSqEIfl4GnzOXGxvVFTKXYc5rPhGpqm8CdpAE=&p=HAAAAAE
AAAADZgAABIAAAAgAAAAUAAAASAAAAJ2EzG62+tMBuDlxB3nlxU9pqJ20cbKJgwvZH7t/8cK3gMv
9/RVFJekn5M7lb29pxKsdvBQMsRMRhaeRnc8uFXAMZzpTj5A29Az2YC5bwrIYBwBFYZaRSP7NQcHY
S03xY2MDxEQ=

21:56: SBS 0 null //à未知命令

21:56: USR 83 OK [email protected] 1 0 //<–登录成功

21:56: MSG Hotmail Hotmail 1201 //?返回客户端基本信息
MIME-Version: 1.0
Content-Type: text/x-msmsgsprofile; charset=UTF-8
LoginTime: 1184680572
EmailEnabled: 0
MemberIdHigh: 212993
MemberIdLow: -2121519422
lang_preference: 2052
preferredEmail:
country: CN
PostalCode:
Gender:
Kid: 0
Age:
BDayPre:
Birthday:
Wallet:
Flags: 1610614337
sid: 72652
MSPAuth:
EwBIAswbAQAUs1/VcBU2sH7mwYy3BysWZ71CRDGAAFPSWtLQyZX3t9gSerdEUYLK0EElqkkzBaY+
MC1df6U4DSq7Rqx3+A9Nz3J2FrBg4OEc6iw/IFajJbwPsEIUagxoVqf0nVOsuAuvkFiGyjM6emlymlaQ
qdfJuhVAGwmN6b4fso/Qd13SG6QlF1p1+qPEZ0/Y0gmUJc8FBCwYUfhPA2YAAAjILU7EpvIKK5gB5hl
tbnH8rXDXKKqgbw50zPWympG3pGAvQZTEZ6veqDtS0sJrgwY5dDVujp7x22+O64z1ZZt+NET5czAg
VnXmfPkSAIN/3jusCPMK63kpRL36ieI6xd24cjPTUhvIdYEnn4ixDtkVvhPnahL84LfZK81TTBZPgaTLfC
UZ6YnkDpgRfjYe/aNUYzJ+KQXolJRUbAtYB0+Teh0PClSRjQMfOyxO3/2YQDqhBe5w16/Z+yUT12707l
PI7BpiM2cVmiJQGkSSygMp6h3CGQsz+9bU5edHSZOzNww3carKtrdhwEU0BnisY76l1YQJX3KJt6viC
kaz1FInUv8VwGdSod981bKUsR6c5SwHJRt1XGrOeEPZsaJhJ/NMDNAZ4KtAIUut/D654/eVes6jyhkaJ
Gx/1Jh+SbdxlEwxbpSX+kqCuL0QD/2ZO8O7udZP9At7gXzvlmwsRM4tznkBIWjDABUgILXAuS/d9+2/
RTRnfgLIeIwNQ+7Y+7uTN/DKlxxc+TmSqEIfl4GnzOXGxvVFTKXYc5rPhGpqm8CdpAE=&p=
ClientIP: 222.68.167.212
ClientPort: 18182
ABCHMigrated: 1
Nickname: [email protected]

21:56: FQY 84 53 //<–转发服务器
<ml l="2"><d n="email.com.cn"><c n="unidc"/></d></ml>
21:56: BLP 85 AL //?下载信息(好友分组)
FQY 86 50 //?下面是XML的好友分组信息有删减

<mll="2">
<dn="21cn.com"> //domainname=21cn.com
<cn="kf_701"/>//clientname=kf_701
</d>
</ml> //[email protected]

<mll="1">
<dn="itsmlight.com">
<cn="zhaomz"l="3"t="1"/>
</d>
<dn="mail.china.com">
<cn="wgy8446"l="3"t="1"/>
</d>
<d n="sms107.com">
<cn="smsbot702"l="3"t="1"/>
<cn="smsbot302"l="3"t="1"/>
<cn="smsbot38"l="3"t="1"/>
<cn="smsbot9"l="4" t="1"/>
<cn="smsbot1"l="4"t="1"/>
</d>
<dn="vip.sohu.com">
<cn="leadwe"l="3"t="1"/>
</d>
<dn="msn.com">
<cn="dongnet"l="3" t="1"/>
<cn="unml"l="3"t="1"/>
<cn="yanhaimao"l="3"t="1"/>
<cn="lujinyuan"l="3"t="1"/>
<cn="heyfly"l="3"t="1"/>
<cn="jianphu"l="3"t="1"/>
<cn="kangsgs"l="3"t="1"/>
<cn="ionwing"l="4"t="1"/>
</d>
<dn="gmail.com">
<cn="laixiaoyu"l="3"t="1"/>
<cn="cnqing"l="3"t="1"/>
<cn="alphacsharp"l="3"t="1"/>
<cn="kangsgs"l="3"t="1"/>
<cn="dotnetcool"l="3"t="1"/>
<cn="crazyazreal"l="3"t="1"/>
<cn="wanygan83"l="3"t="1"/>
<cn="oooodo"l="3"t="1"/>
<cn="heihu.mts"l="4" t="1"/>
</d>
<dn="kouton.com">
<cn="kernel"l="3"t="1"/>
</d>
<d n="hotmail.com">
<cn="oyxl-333"l="3" t="1"/>
</d>
</ml>

<ml>
<dn="email.com.cn">
<cn="unidc" />
</d>
</ml>
PRP 88 //à下载昵称，签名设置、显示图片
MFN !Jean%20Su //显示昵称
CHG 89 NLN //更新在线状态
1984745516 %3Cmsnobj%20Creator%3D%22cnqing%40gmail.com%22%20Type%3D%223%22%2
0SHA1D%3D%22mdKCPp4ctfahlsh3nEesqxKCsgA%3D%22%20Size%3D%222663%22%20Location
%3D%220%22%20Friendly%3D%22aABlAGEAZAAyAAAA%22%2F%3E//URLDECODE=<msnobj
Creator="[email protected]" Type="3" SHA1D="mdKCPp4ctfahlsh3nEesqxKCsgA=" Size="2663"
Location="0" Friendly="aABlAGEAZAAyAAAA"/>

UUX 90 89 //个性签名之后一段是下载好友个性签名及正在收听的音乐

<Data><PSM>烟戒了
</PSM><CurrentMedia></CurrentMedia><MachineGuid></MachineGuid></Data>BLP 91 AL

21:56: PRP 88 MFN !Jean%20Su

21:56: BLP 91 AL //下载信息

21:56: MSG Hotmail Hotmail 289
MIME-Version: 1.0
Content-Type: text/x-msmsgsinitialmdatanotification; charset=UTF-8

Mail-Data: <MD><E><I>0</I><IU>0</IU><O>0</O><OU>0</OU></E><Q><QTM>409600</QTM><QNM>204
800</QNM></Q></MD>
Inbox-URL: /cgi-bin/HoTMaiL
Folders-URL: /cgi-bin/folders
Post-URL: http://www.hotmail.com

21:56: ADL 87 OK //未知

21:56: CHG 89 NLN //更新在线状态
1984745516 %3Cmsnobj%20Creator%3D%22cnqing%40gmail.com%22%20Type%3D%223%22%2
0SHA1D%3D%22mdKCPp4ctfahlsh3nEesqxKCsgA%3D%22%20Size%3D%222663%22%20Location
%3D%220%22%20Friendly%3D%22aABlAGEAZAAyAAAA%22%2F%3E
//<msnobj Creator="[email protected]" Type="3" SHA1D="mdKCPp4ctfahlsh3nEesqxKCsgA="
Size="2663" Location="0" Friendly="aABlAGEAZAAyAAAA"/>
21:56: UUX 90 0

21:56: ILN 89 NLN [email protected] 1 rita //初始信息通告
1985859644 %3Cmsnobj%20Creator%3D%22singling0%40hotmail.com%22%20Type%3D%223%2
2%20SHA1D%3D%22ICNB40FEtVHMfmUP6Yb%2BZeBIwbc%3D%22%20Size%3D%2223903%22%
20Location%3D%220%22%20Friendly%3D%22UAAxADAAMwAwADUANQA2AAAA%22%2F%3E

21:56: UBX [email protected] 1 118 //下载好友个性签名及正在收听的音乐
<Data><PSM></PSM><CurrentMedia></CurrentMedia><MachineGuid>{AD9231D5-4098-4A7E-8
CAD-0BA9268C75AA}</MachineGuid></Data>
21:56: ILN 89 IDL [email protected] 1 sophie-云里雾里 //初始信息通告
1342554148 %3Cmsnobj%20Creator%3D%22sophie888888992%40hotmail.com%22%20Size%3D
%2221767%22%20Type%3D%223%22%20Location%3D%22TFR10.dat%22%20Friendly%3D%22A
AA%3D%22%20SHA1D%3D%22aYvjMG3V0%2BFHZX5xRbgWgpJdceo%3D%22%20SHA1C%3D%22
Nfr535PnhPl%2BuQoEc8xB3jpCivA%3D%22%2F%3E

21:56: UBX [email protected] 1 53 //下载好友个性签名及正在收听的音乐
<Data><PSM></PSM><CurrentMedia></CurrentMedia></Data>
21:56: ILN 89 NLN [email protected] 1 Steve%20Gu //初始信息通告
1616756780 %3Cmsnobj%20Creator%3D%22fulcrum_gxl%40hotmail.com%22%20Size%3D%222
9911%22%20Type%3D%223%22%20Location%3D%22TFR3E.dat%22%20Friendly%3D%22AAA%3
D%22%20SHA1D%3D%226Fb7%2BSXauyStBwlZy72aA5uB3ZE%3D%22%20SHA1C%3D%22UuTVn
k0Ne2OfW%2FN189q7nOlCMbM%3D%22%2F%3E

21:56: UBX [email protected] 1 125 //下载好友个性签名及正在收听的音乐
<Data><PSM>Fulcrum</PSM><CurrentMedia></CurrentMedia><MachineGuid>{572E3130-F3EA-
44C0-865E-9BDF274CD9FE}</MachineGuid></Data>
21:56: ILN 89 NLN [email protected] 1 AllenZhang //初始信息通告
985859628 %3Cmsnobj%20Creator%3D%22mfczmh%40sina.com%22%20Type%3D%223%22%20
SHA1D%3D%225M6Ifldvf9D4j%2BE3zAXwGD9WL2U%3D%22%20Size%3D%221993%22%20Locat
ion%3D%220%22%20Friendly%3D%22MQAAAA%3D%3D%22%2F%3E

21:56: UBX [email protected] 1 140 //下载好友个性签名及正在收听的音乐
<Data><PSM>24hours找工作！！
</PSM><CurrentMedia></CurrentMedia><MachineGuid>{87FFC806-1F15-4B05-8821-6C2638E61
993}</MachineGuid></Data>
21:56: ILN 89 NLN [email protected] 1 !Jean%20Su //初始信息通告
1984745516 %3Cmsnobj%20Creator%3D%22cnqing%40gmail.com%22%20Type%3D%223%22%2
0SHA1D%3D%22mdKCPp4ctfahlsh3nEesqxKCsgA%3D%22%20Size%3D%222663%22%20Location
%3D%220%22%20Friendly%3D%22aABlAGEAZAAyAAAA%22%2F%3E

//下面开始一段会话
21:56: XFR 95 SB //请求分配服务器

21:56: XFR 95 SB 207.46.27.189:1863 CKI 498535913.587823.275266 U messenger.msn.com 1
//回应服务器

21:56: USR 55 [email protected] 498535913.587823.275266 //身份确认

21:56: USR 55 OK [email protected] !Jean%20Su //确认成功

21:56: CAL 56 [email protected] //呼叫好友

21:56: CAL 56 RINGING 498535913 //好友回应

21:56: JOI [email protected] (I)熊赳赳-宇泰软件-永远不会独行! 1985859644 //建立连接

21:56: MSG 54 N 129 //发送消息
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
X-MMS-IM-Format: FN=SimSun; EF=; CO=0; CS=86; PF=0

111111111111111

21:56: CHL 0 23426656029284179651 //一次SERVER PING

21:56: QRY 96 PROD0114ES4Z%Q5W 32 //响应CHL命令
6d6a861d3aa77000aa4c3542d83e29cb
21:56: QRY 96 //响应CHL命令

21:56: FLN [email protected] 1 1985859644 //结束会话

21:56: BYE [email protected] //结束成功

21:56: NLN NLN [email protected] 1 (I)熊赳赳-宇泰软件-永远不会独行!
1984745532 %3Cmsnobj%20Creator%3D%22jj-bear%40163.net%22%20Type%3D%223%22%20S
HA1D%3D%22DMHCzigGPEdDgVXllbhohFX%2FIx8%3D%22%20Size%3D%2223354%22%20Locati
on%3D%220%22%20Friendly%3D%22ZwBlAHIAcgBhAHIAZAA4AF8AMQAwADIANAAAAA%3D%3
D%22%2F%3E

21:56: UBX [email protected] 1 119 //更新签名信息
<Data><PSM>You will never walk alone! 戒烟
中…</PSM><CurrentMedia></CurrentMedia><MachineGuid></MachineGuid></Data>
21:56: NLN NLN [email protected] 1 (I)熊赳赳-宇泰软件-永远不会独行!
1985859644 %3Cmsnobj%20Creator%3D%22jj-bear%40163.net%22%20Type%3D%223%22%20S
HA1D%3D%22DMHCzigGPEdDgVXllbhohFX%2FIx8%3D%22%20Size%3D%2223354%22%20Locati
on%3D%220%22%20Friendly%3D%22ZwBlAHIAcgBhAHIAZAA4AF8AMQAwADIANAAAAA%3D%3
D%22%2F%3E

21:56: NLN NLN [email protected] 1 (I)熊赳赳-宇泰软件-永远不会独行!
1985859644 %3Cmsnobj%20Creator%3D%22jj-bear%40163.net%22%20Type%3D%223%22%20S
HA1D%3D%22DMHCzigGPEdDgVXllbhohFX%2FIx8%3D%22%20Size%3D%2223354%22%20Locati
on%3D%220%22%20Friendly%3D%22ZwBlAHIAcgBhAHIAZAA4AF8AMQAwADIANAAAAA%3D%3
D%22%2F%3E

21:57: XFR 97 SB //请求分配服务器

21:57: XFR 97 SB 207.46.26.30:1863 CKI 361087961.205134118.248248102 U
messenger.msn.com 1//回应服务器

21:57: USR 57 [email protected] 361087961.205134118.248248102 //身份确认

21:57: USR 57 OK [email protected] !Jean%20Su //确认成功

21:57: CAL 58 [email protected] //呼叫好友

21:57: CAL 58 RINGING 361087961 //好友响应

21:57: JOI [email protected] 小i新东方 1074184236 //建立连接

21:57: MSG [email protected] 小i新东方 57 //接收到消息
MIME-Version: 1.0
Content-Type: text/x-robot-profile

21:57: MSG [email protected] 小i新东方 478 //接受消息
MIME-Version: 1.0 //版本号
Content-Type: text/plain; charset=UTF-8 //类型、编码
X-MMS-IM-Format: FN=%E5%AE%8B%E4%BD%93; EF=; CO=a0667b; CS=86; PF=2 //字体、大小、
颜色、区码

【帮助菜单】
:)输入以下序号可直接进入相应栏目：
1. 考试课程 2. 留学课程
3. 外语充电 4. 职业提升

5. 英语随身听 6. 主题英语角
7. 加入学习小组 8. 每日英语测评
9. 课程开放日（12月24日，新
概念全线免费）
21:57: MSG [email protected] 小i新东方 670 //收到一个活动请求
MIME-Version: 1.0
Content-Type: application/x-msnmsgrp2p
P2P-Dest: [email protected]

gVS /?wT INVITE MSNMSGR:[email protected] //邀请活动
MSNSLP/1.0
To: <msnmsgr:[email protected]>
From: <msnmsgr:[email protected]>
Via: MSNSLP/1.0/TLP ;branch={3E28590A-52C4-5ECB-16EC-BC529DAA654C}
CSeq: 0
Call-ID: {727D67AE-4A20-BCDC-D5CB-14F249854FF1}
Max-Forwards: 0
Content-Type: application/x-msnmsgr-sessionreqbody
Content-Length: 203

EUF-GUID: {6A13AF9C-5308-4F35-923A-67E8DDA40C2F}
SessionID: 1417135663
AppID: 99995164
Context: OQA5ADkAOQA1ADEANgA0ADsAMQA7AA9caQCwZRxOuWXxgu2LOmdoVrpO
//BASE64 DECODE= 99995164;1;小i新东方英语机器人
Robot-Command: auto-accept#[email protected]#

21:57: MSG 59 D 138
MIME-Version: 1.0
Content-Type: application/x-msnmsgrp2p
P2P-Dest: [email protected]

P?% gVS/?wT
21:57: ACK 59 //确认

21:57: MSG 60 D 510
MIME-Version: 1.0
Content-Type: application/x-msnmsgrp2p
P2P-Dest: [email protected]

Q?%t t ?
3MSNSLP/1.0 603 Decline //拒绝请求
To: <msnmsgr:[email protected]>
From: <msnmsgr:[email protected]>
Via: MSNSLP/1.0/TLP ;branch={3E28590A-52C4-5ECB-16EC-BC529DAA654C}
CSeq: 1
Call-ID: {727D67AE-4A20-BCDC-D5CB-14F249854FF1}
Max-Forwards: 0
Content-Type: application/x-msnmsgr-sessionreqbody
Content-Length: 67

SessionID: 1417135663
SChannelState: 0
Capabilities-Flags: 1

21:57: ACK 60

21:57: MSG [email protected] 小i新东方 141
MIME-Version: 1.0
Content-Type: application/x-msnmsgrp2p
P2P-Dest: [email protected]

hVS t Q?%?
3t
21:57: MSG [email protected] 小i新东方 529
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
X-MMS-IM-Format: FN=%E5%AE%8B%E4%BD%93; EF=; CO=a0263f; CS=86; PF=2

你干嘛要拒绝我的邀请啊？如果接受的话，会看到详细的栏目内容。
输入“？”或“help”获取帮助信息
妈富隆幸福大魔咒，种情感树，得温
馨礼
妈富隆幸福大魔咒，为你所爱的人种下情感树，更有机会得到温馨礼物，详情点击
http://www.linktoad.com/adclick.php?
aid=207909&cid=4617&url=http://www.marvelon.com.cn/happiness

21:57: MSG 61 D 1340 //发送文件
MIME-Version: 1.0
Content-Type: application/x-msnmsgrp2p
P2P-Dest: [email protected]

R?%! ?
To: <msnmsgr:[email protected]>
From: <msnmsgr:[email protected]>
Via: MSNSLP/1.0/TLP ;branch={7D55BE10-BA1B-4486-9B6D-8DFC9A0AEAC7}
CSeq: 0
Call-ID: {1BB2675F-D5CB-4B74-BADE-B38F1CF71BB6}
Max-Forwards: 0
Content-Type: application/x-msnmsgr-sessionreqbody
Content-Length: 990

EUF-GUID: {5D3E02AB-6190-11D3-BBBB-00C04F795683} //这个表示文件传输
SessionID: 1417135666
SChannelState: 0
Capabilities-Flags: 1
AppID: 2
Context:
fgIAAAMAAAB/pXcAAAAAAAEAAABDABNOtlsWfwt6LgBwAGQAZgAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
//BASE64 DECODE=家编程.pdf

21:57: ACK 61

21:57: MSG 62 D 249
MIME-Version: 1.0
Content-Type: application/x-msnmsgrp2p
P2P-Dest: [email protected]

R?%?
! o L)3
AAAAAAAAAAAAAA/////wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=

21:57: ACK 62

21:57: MSG [email protected] 小i新东方 141
MIME-Version: 1.0
Content-Type: application/x-msnmsgrp2p
P2P-Dest: [email protected]

44P ! R?%L)3!
21:57: MSG [email protected] 小i新东方 472
MIME-Version: 1.0
Content-Type: application/x-msnmsgrp2p
P2P-Dest: [email protected]

44P K K 2?wT MSNSLP/1.0 603 Decline//拒绝接受
To: <msnmsgr:[email protected]>
From: <msnmsgr:[email protected]>
Via: MSNSLP/1.0/TLP ;branch={7D55BE10-BA1B-4486-9B6D-8DFC9A0AEAC7}
CSeq: 1
Call-ID: {1BB2675F-D5CB-4B74-BADE-B38F1CF71BB6}
Max-Forwards: 0
Content-Type: application/x-msnmsgr-sessionreqbody
Content-Length: 26

SessionID: 1417135666

21:57: MSG 63 D 138
MIME-Version: 1.0
Content-Type: application/x-msnmsgrp2p
P2P-Dest: [email protected]

S?% 44P2?wTK
21:57: ACK 63

21:57: OUT //退出

21:57:
21:57: OUT

21:57: OUT

21:57: OUT

L)3INVITE MSNMSGR:[email protected] MSNSLP/1.0

相关日志

发表评论