只是好奇 - 用于通信协议逆向工程的自动甚至半自动技术是什么？
我对嗅探流量并试图理解协议的情况特别感兴趣。
我可以找到关于学者的论文数量，但根据我的经验，这在大多数情况下是一个完全手动的过程。
如果有人有该领域的经验并愿意分享，我们将不胜感激。
Just curious - what are some automatic or even semi-automatic techniques for reverse-engineering of communication protocols?
I am particularly interested in the case when one's sniffing traffic and trying to understand the protocol.
I could find a number of papers on scholar, but in my experience this is a completely manual process most of the times.
If anyone has experience in the field and feels like sharing it would be much appreciated.
发布评论
评论（1）
获得对通信链路的某种控制措施并嗅探数据。然后练习相关应用程序的操作范围，以了解协议的相关性，以便您可以收集一般观察结果。
Google 获取协议。也许它已经出版了。也许有人已经弄清楚了，或者有人不小心泄露了有关它的详细信息。
编写一个测试程序来替换协议的一端：尝试通过反复试验来引出另一端的响应。
编写一个测试程序来替换
通常，一个协议是另一个协议的后代，或者至少在很多方面与另一个协议相关。通过查看细节并熟悉许多协议，人们通常可以对其特性和能力做出良好的猜测。
Obtain some measure of control over a communication link and sniff the data. Then exercise the range of operations of the associated application to feel out how the protocol relates so you can gather general observations.
Google for the protocol. Maybe it is published. Maybe someone has already figured it out, or someone has carelessly leaked details about it.
Write a test program which replaces one end of the protocol: try eliciting responses from the other side by trial and error.
Often a protocol is a descendant of—or at least related in many ways to—another one. By seeing the specifics and having familiarity with many protocols, one can often make good educated guesses about its features and abilities.