From l7protocols
Jump to navigation Jump to search

Ventrilo is a proprietary VoIP application made by Flagship Industries. It has clients for Windows and Mac (and a Linux version in development), and servers for FreeBSD, Linux, NetBSD, Mac, Solaris and Windows. It is intended to be general purpose, but it appears that gaming is intended to be a common use. It uses "channels", similarly to IRC. It can be used for text-only communication, and functions much like IRC in this mode.



By default, servers listen on TCP port 3784 for voice data and UDP port 3784 for status queries. While this can be changed, in the free version of the server this configuration option is locked.

As of Ventrilo 3.0.0 - All free servers use:

  • [IN/OUT] TCP/UDP port 3784 - Required for voice data and status queries.
  • [OUT] UDP 6100 - Required for contacting Ventrilo Flagship, and for the use of using the server. (unsure why)
  • [OUT] UDP 5000 - Not Required but used for contacting Ventrilo Flagship. (unsure why)


l7-filter uses the ventrilo pattern. It matches only the TCP component of Ventrilo. It is lightly tested.

See also