1# VNC - Virtual Network Computing. Also known as RFB - Remote Frame Buffer 2# Pattern attributes: great veryfast fast 3# Protocol groups: remote_access 4# Wiki: http://www.protocolinfo.org/wiki/VNC 5# 6# http://www.realvnc.com/documentation.html 7# 8# This pattern has been verified with vnc v3.3.7 on WinXP and Linux 9# 10# Thanks to Trevor Paskett <tpaskett AT cymphonix.com> for this pattern. 11 12vnc 13# Assumes single digit major and minor version numbers 14# This message should be all alone in the first packet, so ^$ is appropriate 15^rfb 00[1-9]\.00[0-9]\x0a$ 16 17# This is a more restrictive version which assumes the version numbers 18# are ones actually in existance at the time of this writing, i.e. 3.3, 19# 3.7 and 3.8 (with some clients wrongly reporting 3.5). It should be 20# slightly faster, but probably not worth the extra maintenance. 21# ^rfb 003\.00[3578]\x0a$ 22 23