This page keeps track of the ICQ protocol. It seems to be getting more and more difficult to reverse engineer.