--- nmap-service-probes-3.78	2004-12-15 11:49:32.000000000 +0100
+++ nmap-service-probes	2004-12-15 11:04:03.000000000 +0100
@@ -1356,6 +1355,9 @@
 match http m|^HTTP/1\.1 \d\d\d .*\r\nServer: Oracle HTTP Server Powered by Apache\r\n|s v/Oracle HTTP Server Powered by Apache///
 match http m|^HTTP/1\.1 \d\d\d .*\r\nServer: webfs/(\d[-.\w]+)\r\n| v/WebFS httpd/$1//
 
+# HP OpenView ITO agent (probably version 7.25) on Windows, port 381
+match http m|^HTTP/1\.1 \d\d\d .*\r\nserver: BBC \d[-.\w]+; com\.hp\.openview\.Coda \d[-.\w]+\r\n\r\n| v/HP OpenView ITO agent - Coda///
+
 ##############################NEXT PROBE##############################
 Probe TCP RTSPRequest q|OPTIONS / RTSP/1.0\r\n\r\n|
 match rtsp m|^RTSP/1\.0 200 OK\r\nCSeq: 0\r\nDate: .*\r\nServer: RealServer Version (\d[-.\w]+) \(win32\)\r\n| v/Realserver RTSP/$1/win32/
@@ -1365,6 +1367,9 @@
 match powerchute m|^RTSP/1\.0 400 Bad request\r\nContent-type: text/html\r\n\r\n| v/APC PowerChute Agent///
 match msdtc m|^ERROR\n$|s v/Microsoft Distributed Transaction Coordinator//error/
 
+# HP OpenView ITO agent (probably version 7.25) on Windows, port 383
+match http m|^HTTP/1\.1 \d\d\d .*\r\nserver: BBC \d[-.\w]+; com\.hp\.openview\.bbc\.LLBserver \d[-.\w]+\r\n\r\n|s v/HP OpenView ITO agent - LLB server///
+
 # This probe sends an RPC "Null command" to the port for service
 # 100000 (portmapper).
 # Some of these numbers are abitrary (such as ID).  I could consider