The NTA Monitor VPN Fingerprinting tool (ike-scan) exploits transport characteristics in the Internet Key Exchange (IKE) service, the mechanism used by VPNs to establish a connection between a server and a remote client.
The ike-scan tool scans IP addresses for VPN servers by sending a specially crafted IKE packet to each host within a network. Most hosts running IKE will respond, identifying their presence. The tool then remains silent and monitors retransmission packets. These retransmission responses are recorded, displayed and matched against a known set of VPN product fingerprints.
Download Information:
Source distribution: ike-scan-1.7.tar.gz
The mentioned package will compile on UNIX and Linux systems as well as Windows systems with Cygwin. You will need a C compiler, the "make" utility and the appropriate system header files to compile ike-scan. It uses autoconf and automake, so compilation and installation is the normal ./configure; make; make install process.
Windows binary: ike-scan-win32-1.7.zip
This mentioned package is a zip file containing a Win-32 binary version of ike-scan together with the Cygwin DLL which provides Posix support. It runs on Win-9x/ME, NT, 2000 and XP. The executable was produced by compiling the ike-scan source on a Windows system running Cygwin.
Previous versions of ike-scan are available at: http://www.nta-monitor.com/ike-scan/archive/
If you specifically want an older version of the ike-scan software, then you can get it from here.