From 47bd7535349883db64ea2910a5e28b7c501427a7 Mon Sep 17 00:00:00 2001
From: david <david@e0a8ed71-7df4-0310-8962-fdc924857419>
Date: Mon, 1 Jul 2013 09:07:03 +0000
Subject: [PATCH] =?UTF-8?q?Ventrilo=20UDP=20payload=20from=20Marin=20Mar?=
 =?UTF-8?q?=C5=BEi=C4=87.?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

http://seclists.org/nmap-dev/2013/q2/413
---
 nmap-payloads | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/nmap-payloads b/nmap-payloads
index 6168bd8cd..1124f62c3 100644
--- a/nmap-payloads
+++ b/nmap-payloads
@@ -236,3 +236,9 @@ udp 26000,26001,26002,26003,26004,27960,27961,27962,27963,27964,30720,30721,3072
 # UDP ping. "abcdefgh" is an identifier. See
 # http://mumble.sourceforge.net/Protocol.
 udp 64738 "\x00\x00\x00\x00abcdefgh"
+
+# Ventrilo 2.1.2+
+# UDP general status request (encrypted).
+# See http://aluigi.altervista.org/papers.htm#ventrilo
+udp 3784
+"\x01\xe7\xe5\x75\x31\xa3\x17\x0b\x21\xcf\xbf\x2b\x99\x4e\xdd\x19\xac\xde\x08\x5f\x8b\x24\x0a\x11\x19\xb6\x73\x6f\xad\x28\x13\xd2\x0a\xb9\x12\x75"