Tip of the Month

Network Analysis Tip of the Month – September 2005

Google Talks, do you listen?

Author – Saurabh Bhasin

A quick analysis of the sign-on process revealed that Google Talk's infrastructure runs on Jabber (IETF's formalization calls it Extensible Messaging and Presence Protocol - XMPP ( http://www.xmpp.org/specs/). After a little research and looking at few captures of the sign-on process, a simple "Pattern Filter" looking for HEX {[6A6162626572]OR[676D61696C2E636F6D]} catches what we want!

Obviously you can take a look at the complete hex and advance the filter to capture usernames and email addresses. Go Wild!