创建

bin/conf/project_list.conf

@@ -0,0 +1,23 @@
+#project_requirement_name	value_type	
+#current requirement definitions:
+#    terminal_tag,
+#    ipv4_frag_list,
+#    ipv6_frag_list,
+#    stream_id,
+# value type definitions
+#    char,
+#    short,
+#    int,
+#    long,
+#    struct     
+
+#terminal_tag		struct
+#ipv4_frag_list		struct
+#ipv6_frag_list		struct
+#stream_id		struct
+#test_project		struct
+#tcp_flow_stat		struct
+#udp_flow_stat		struct
+
+JT_IP_PKT	struct
+STREAMID	long

bin/conf/qq_file_trans.conf

@@ -0,0 +1,33 @@
+[MODULE]
+#日志
+RUN_LOG_DIR=./log/qq_file_trans/
+RUN_LOG_LEVEL=40
+
+#存本地文件开关
+DEBUG_SWITCH=0
+
+#统计信息
+STAT_FIELD_CYCLE=300
+STAT_FIELD_TRIG=0
+
+
+[FEATURE]
+#FEATURE_QQ_NUMBER_TCP=0:27,00,00,00,00,14;0:04,37,21
+#FEATURE_QQ_TCPFILENAME=0:0c,00,00,00,00,2b;31:0c,00,00,00,00,2b
+#FEATURE_QQ_TCPFILE=0:04,36,43,00&39:65,65,00,00
+
+FEATURE_QQ_NUMBER_TCP=0:04&13:00,01,00,00,00,00,00
+FEATURE_QQ_TCPFILENAME=0:04&13:00,01,00,00,00,00,00&31:0c,00,00,00,00,2b
+FEATURE_QQ_TCPFILE=0:04&13:00,01,00,00,00,00,00&39:65,65,00,00
+FEATURE_QQ_TCPFILE_END=0:04&13:00,01,00,00,00,00,00&39:56,56,00,00
+
+#文件应该也有特征13:00,01,00,00,00,00,00
+FEATURE_QQ_NUMBER_UDP=0:03,00,01,00,00,00,00,00;13:00,01,00,00,00,00,00
+FEATURE_QQ_UDPFILENAME=3:00,2b,52,00,00;34:00,2b,52,00,00
+FEATURE_QQ_UDPFILE_START=3:00,2d,63,00;34:00,2d,63,00
+FEATURE_QQ_UDPFILE_END=3:00,2b,56,00,00;34:00,2b,56,00,00
+
+#其他QQ协议特征，上面的也会作为协议特征
+FEATURE_QQTCP_PROTOCOL=
+FEATURE_QQUDP_PROTOCOL=
+

bin/plug/business/conflist_business.inf

@@ -0,0 +1,24 @@
+##./plug/business/test_app/test_app.inf
+##./plug/business/test_http/test_http.inf
+##./plug/business/ipsec_biz_sample/ipsec_biz_sample.inf
+##./plug/business/l2tp_biz_sample/l2tp_biz_sample.inf
+##./plug/business/pptp_biz_sample/pptp_biz_sample.inf
+##./plug/business/terminal_tag/terminal_tag.inf
+##./plug/business/g_device_plug/g_device_plug.inf
+#
+#./plug/business/ycl_ftp/ycl_ftp.inf
+#./plug/business/ycl_mail/ycl_mail.inf
+#./plug/business/ycl_http_service/ycl_http_service.inf
+##./plug/business/ycl_http_netdisk/ycl_http_netdisk.inf
+#./plug/business/ycl_http_webmail/ycl_http_webmail.inf
+##./plug/business/ycl_qq_biz/ycl_qq_biz.inf
+##./plug/business/ycl_qq/ycl_qq_biz.inf
+#
+#./plug/business/http_jt_audit/http_jt_audit.inf
+#./plug/business/dns_audit/dns_jt_audit.inf
+#./plug/business/mail_audit/mail_jt_audit.inf
+#./plug/business/ssl_audit/ssl_audit.inf
+#./plug/business/ftp_audit/ftp_audit.inf
+#./plug/business/ip_jt/ip_jt.inf
+##./plug/business/MESA_capfile/MESA_capfile.inf
+./plug/business/qq_file_trans/qq_file_trans.inf

bin/plug/business/qq_file_trans/qq_file_trans.inf

@@ -0,0 +1,13 @@
+[PLUGINFO]
+PLUGNAME=QQ_FILE_TRANS
+SO_PATH=./plug/business/qq_file_trans/qq_file_trans.so
+INIT_FUNC=QQ_PROT_INIT
+DESTROY_FUNC=QQ_PROT_DESTROY
+
+[UDP]
+FUNC_FLAG=ALL
+FUNC_NAME=QQ_PROT_UDP_ENTRY
+
+[TCP]
+FUNC_FLAG=ALL
+FUNC_NAME=QQ_PROT_TCP_ENTRY