summaryrefslogtreecommitdiffstats
path: root/src/usr/local/share/protocols/radmin.pat
diff options
context:
space:
mode:
Diffstat (limited to 'src/usr/local/share/protocols/radmin.pat')
-rw-r--r--src/usr/local/share/protocols/radmin.pat17
1 files changed, 17 insertions, 0 deletions
diff --git a/src/usr/local/share/protocols/radmin.pat b/src/usr/local/share/protocols/radmin.pat
new file mode 100644
index 0000000..d13aa65
--- /dev/null
+++ b/src/usr/local/share/protocols/radmin.pat
@@ -0,0 +1,17 @@
+# Famatech Remote Administrator - remote desktop for MS Windows
+# Pattern attributes: ok veryfast fast
+# Protocol groups: remote_access proprietary
+# Wiki: http://www.protocolinfo.org/wiki/Radmin
+# Copyright (C) 2008 Matthew Strait, Ethan Sommer; See ../LICENSE
+#
+# This pattern has been verified with Radmin v1.1 and v3.0beta on Win2000/XP
+# It has only been tested between a single pair of computers.
+
+# The first packet of every TCP stream appears to be either one of:
+#
+# 01 00 00 00 01 00 00 00 08 08
+# 01 00 00 00 01 00 00 00 1b 1b
+
+radmin
+^\x01\x01(\x08\x08|\x1b\x1b)$
+
OpenPOWER on IntegriCloud