From 088415be8ff96e2866b0726ce666c88fdcb7104f Mon Sep 17 00:00:00 2001
From: david <david@e0a8ed71-7df4-0310-8962-fdc924857419>
Date: Mon, 1 Jul 2013 09:07:04 +0000
Subject: [PATCH] =?UTF-8?q?Ventrilo=20service=20probe=20from=20Marin=20Mar?=
 =?UTF-8?q?=C5=BEi=C4=87.?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

http://seclists.org/nmap-dev/2013/q2/413
---
 nmap-service-probes | 12 ++++++++++++
 1 file changed, 12 insertions(+)

diff --git a/nmap-service-probes b/nmap-service-probes
index 4e3d24975..599833cfc 100644
--- a/nmap-service-probes
+++ b/nmap-service-probes
@@ -11885,3 +11885,15 @@ rarity 9
 ports 64738
 
 match murmur m|^\0...abcdefgh............$|s p/Murmur/ v/1.2.X/
+
+
+##############################NEXT PROBE##############################
+# Ventrilo 2.1.2+
+# UDP general status request (encrypted).
+# See http://aluigi.altervista.org/papers.htm#ventrilo
+# http://seclists.org/nmap-dev/2013/q2/413
+Probe UDP Ventrilo q|\x01\xe7\xe5\x75\x31\xa3\x17\x0b\x21\xcf\xbf\x2b\x99\x4e\xdd\x19\xac\xde\x08\x5f\x8b\x24\x0a\x11\x19\xb6\x73\x6f\xad\x28\x13\xd2\x0a\xb9\x12\x75|
+rarity 9
+ports 3784
+
+match ventrilo m|^.{111}|s p/Ventrilo/ v/2.1.2+/