KMFM Realization for Real-Time P2P Messenger IP Trace

Criminals exchange various kinds of important information escaping from police´s trace network by using a messenger. In order to cut off malignant crimes increasing and sophisticated daily, this must be cut off by tracing the IP of the messenger in real-time. The analysis method suggested in this thesis finds out the common part among packets after capturing various messenger packets by using the world wide used Wincap3.1 and analyzing in the way of trial-and- error. Here, I realized the real-time KMFM (Kyonggi Messenger Forensic Monitor) which analyzes the extracted information showed on a screen by using the mathematical function so as to extract the necessary parts after extracting the pattern coinciding with the hex value.