Differences between revisions 4 and 5
Revision 4 as of 2006-06-25 18:11:15
Size: 798
Editor: h47n2fls31o982
Comment:
Revision 5 as of 2006-06-25 18:16:38
Size: 784
Editor: h47n2fls31o982
Comment:
Deletions are marked like this. Additions are marked like this.
Line 4: Line 4:

Line 16: Line 14:
 * {{{ExampleVP.pcap - This file contains a capture of a Ventrilo se protocol, however the packets are encrypted (See Aluigi's page for decryption algorithm and THIS for a decrypted capture)}}} {{{ExampleVP.pcap - This file contains a capture of a Ventrilo se protocol, }}}{{{however the packets are encrypted. }}}{{{See Luigi's page for decryption algorithm and this for a decrypted capture.}}}
Line 18: Line 17:
 * [http://aluigi.altervista.org/papers.htm#ventrilo Aluigi's page] - The one and only recource on the VCP protocol.
== Discussion ==
 * [http://aluigi.altervista.org/papers.htm#ventrilo Luigi's page] - The one and only recource on the VP protocol.

Ventrilo Protocol

VP - The ventrilo protocol is the one used by Ventrilo to encrypt and decrypt VoIP chatting.

Protocol dependencies

  • ["TCP"]: Typically, VP uses ["TCP"] as its transport protocol. The TCP port for VP traffic is 3784.

Example traffic

[http://pastebin.ca/71370 HERE] (Long text pasted on pastebin.ca)

Wireshark

The VP dissector is non-existing.

Example capture file

ExampleVP.pcap - This file contains a capture of a Ventrilo se protocol, however the packets are encrypted. See Luigi's page for decryption algorithm and this for a decrypted capture.

Ventrilo (last edited 2008-05-20 02:53:18 by GuyHarris)