1
|
# TeamSpeak - VoIP application - http://goteamspeak.com
|
2
|
# Pattern attributes: good veryfast fast
|
3
|
# Protocol groups: voip proprietary
|
4
|
# Wiki: http://www.protocolinfo.org/wiki/TeamSpeak
|
5
|
# Copyright (C) 2008 Matthew Strait, Ethan Sommer; See ../LICENSE
|
6
|
#
|
7
|
# This pattern has been tested by Matthew Strait and verified by packet
|
8
|
# traces by at least two other people. The meaning of f4b303 is not
|
9
|
# known, but it seems to appear in all first packets. This pattern only
|
10
|
# matches the actual UDP voice traffic, not the TeamSpeak web interface
|
11
|
# or "TCP query".
|
12
|
|
13
|
teamspeak
|
14
|
^\xf4\xbe\x03.*teamspeak
|
15
|
|