Wired just ran a article with reguards to using a genome based model to help reverse engineering.
http://www.wired.com/news/infostruct...tml?tw=rss.TOP
The actual project is
http://www.baselineresearch.net/PI/
In the sample they try to analyze icmp, and do remarkabley well. As I don't have access to eqemu packet dumps anymore, It might be interesting to see just how well this method works with reguard to everquest packets, and if it is in fact at all useful (as it seems projects like ours are the target of the resesarch).