intrigue-ident 0.9.9 → 0.31

data/checks/http/almuba.rb

@@ -1,30 +0,0 @@
-module Intrigue
-module Ident
-module Check
-class Almubda < Intrigue::Ident::Check::Base
-
-  def generate_checks(url)
-    [
-      {
-        :type => "fingerprint",
-        :category => "application",
-        :tags => ["CMS"],
-        :vendor => "Almubda",
-        :product => "Almubda CMS",
-        :references => [],
-        :version => nil,
-        :match_type => :content_body,
-        :match_content => /Powered by Al Mubda version (\d.*?)<\/a>/i,
-        :dynamic_version => lambda { |x| _first_body_capture(x, /Powered by Al Mubda version (\d.*?)<\/a>/i)},
-        :match_details => "footer match",
-        :hide => false,
-        :paths => ["#{url}"],
-        :inference => true
-      }
-    ]
-  end
-
-end
-end
-end
-end

data/checks/http/amazon.rb

@@ -1,263 +0,0 @@
-module Intrigue
-module Ident
-module Check
-class Amazon < Intrigue::Ident::Check::Base
-
-  def generate_checks(url)
-    [
-      {
-        :type => "fingerprint",
-        :category => "service",
-        :tags => ["Load Balancer", "Hosting", "WAF", "IaaS"],
-        :url => "https://aws.amazon.com/blogs/aws/aws-web-application-firewall-waf-for-application-load-balancers/",
-        :references => ["https://stackoverflow.com/questions/49197688/is-the-most-recent-awsalb-cookie-required-aws-elb-application-load-balancer"],
-        :vendor => "Amazon",
-        :product => "Application Load Balancer",
-        :version => nil,
-        :match_type => :content_cookies,
-        :match_content =>  /AWSALB=/,
-        :match_details =>"amazon App LB cookie (sticky sessions)",
-        :hide => false,
-        :paths => ["#{url}"],
-        :inference => false
-      },
-      {
-        :type => "fingerprint",
-        :category => "service",
-        :tags => ["CDN", "Hosting", "WAF", "IaaS"],
-        :vendor => "Amazon",
-        :product =>"Cloudfront",
-        :version => nil,
-        :match_details =>"cloudfront cache header",
-        :match_type => :content_headers,
-        :match_content =>  /via:.*.cloudfront.net \(CloudFront\)/,
-        :hide => false,
-        :paths => ["#{url}"],
-        :inference => false
-      },
-      {
-        :type => "fingerprint",
-        :category => "service",
-        :tags => ["CDN", "Hosting", "WAF", "IaaS"],
-        :vendor => "Amazon",
-        :product =>"Cloudfront",
-        :version => nil,
-        :match_details =>"cloudfront cache header",
-        :match_type => :content_headers,
-        :match_content =>  /x-cache:.*cloudfront/i,
-        :hide => false,
-        :paths => ["#{url}"],
-        :inference => false
-      },
-      {
-        :type => "fingerprint",
-        :category => "service",
-        :tags => ["CDN", "Hosting","WAF", "IaaS"],
-        :vendor => "Amazon",
-        :product =>"Cloudfront",
-        :match_details =>"no configured hostname error condition",
-        :version => nil,
-        :match_type => :content_body,
-        :match_content => /ERROR: The request could not be satisfied/,
-        :dynamic_hide => lambda{ |x| 
-          return true if _uri_match(x,/cloudfront.net/)       || 
-                         _uri_match(x,/\d+.\d+.\d+.\d+:/) 
-        },
-        :paths => ["#{url}"],
-        :inference => false
-      },
-      {
-        :type => "fingerprint",
-        :category => "service",
-        :tags => ["CDN", "Hosting","WAF", "IaaS"],
-        :vendor => "Amazon",
-        :product =>"Cloudfront",
-        :match_details =>"cloudfront error",
-        :version => nil,
-        :match_type => :content_body,
-        :match_content => /If you provide content to customers through CloudFront, you can find steps to troubleshoot and help prevent this error by reviewing the CloudFront documentation./im,
-        :dynamic_hide => lambda{ |x| 
-          return true if _uri_match(x,/cloudfront.net/)       || 
-                         _uri_match(x,/\d+.\d+.\d+.\d+:/) 
-        },
-        :paths => ["#{url}"],
-        :inference => false
-      },
-      {
-        :type => "fingerprint",
-        :category => "service",
-        :tags => ["CDN", "Hosting","WAF", "IaaS"],
-        :vendor => "Amazon",
-        :product =>"Cloudfront",
-        :match_details =>"Cloudfront 403",
-        :version => nil,
-        :match_type => :content_body,
-        :match_content => /<H1>403 ERROR<\/H1>\n<H2>The request could not be satisfied.<\/H2>\n.*Generated by cloudfront \(CloudFront\)/im,
-        :dynamic_hide => lambda{ |x| 
-          return true if _uri_match(x,/cloudfront.net/)       || 
-                         _uri_match(x,/\d+.\d+.\d+.\d+:/) 
-        },
-        :paths => ["#{url}"],
-        :inference => false
-      },
-      {
-        :type => "fingerprint",
-        :category => "service",
-        :tags => ["CDN", "Hosting","WAF", "IaaS"],
-        :vendor => "Amazon",
-        :product =>"Cloudfront",
-        :match_details =>"generic error",
-        :version => nil,
-        :match_type => :content_headers,
-        :match_content =>  /Error from cloudfront/,
-        :dynamic_hide => lambda{ |x| 
-          return true if _uri_match(x,/cloudfront.net/)       || 
-                         _uri_match(x,/\d+.\d+.\d+.\d+:/) 
-        },
-        :paths => ["#{url}"],
-        :inference => false
-      },
-      {
-        :type => "fingerprint",
-        :category => "service",
-        :tags => ["CDN", "Hosting","WAF", "IaaS"],
-        :vendor => "Amazon",
-        :product =>"Cloudfront",
-        :match_details =>"x-amz-cf-pop header",
-        :version => nil,
-        :match_type => :content_headers,
-        :match_content =>  /^x-amz-cf-pop:.*/i,
-        :hide => false,
-        :paths => ["#{url}"],
-        :inference => false
-      },
-      { 
-        :type => "fingerprint",
-        :category => "service",
-        :tags => ["CDN", "Hosting","WAF", "IaaS"],
-        :vendor => "Amazon",
-        :product =>"Cloudfront",
-        :match_details =>"x-amz-cf-id header",
-        :version => nil,
-        :match_type => :content_headers,
-        :match_content =>  /^x-amz-cf-id:.*/i,
-        :hide => false,
-        :paths => ["#{url}"],
-        :inference => false
-      },
-      {
-        :type => "fingerprint",
-        :category => "service",
-        :tags => ["CDN", "Hosting", "WAF", "IaaS"],
-        :vendor => "Amazon",
-        :product =>"Cloudfront",
-        :match_details =>"generic error",
-        :version => nil,
-        :match_type => :content_headers,
-        :match_content => /^x-cache: Error from cloudfront$/i,
-        :dynamic_hide => lambda{ |x| 
-          return true if _uri_match(x,/cloudfront.net/)       || 
-                         _uri_match(x,/\d+.\d+.\d+.\d+:/) 
-        },
-        :paths => ["#{url}"],
-        :inference => false
-      },
-      {
-        :type => "fingerprint",
-        :category => "service",
-        :tags => ["CDN", "Hosting", "WAF", "IaaS"],
-        :vendor => "Amazon",
-        :product =>"Cloudfront",
-        :match_details =>"403 error condition",
-        :version => nil,
-        :match_type => :content_body,
-        :match_content => /<h1>403 Forbidden<\/h1><\/center>\n<hr><center>cloudfront/,
-        :dynamic_hide => lambda{ |x| 
-          return true if _uri_match(x,/cloudfront.net/)       || 
-                         _uri_match(x,/\d+.\d+.\d+.\d+:/) 
-        },
-        :paths => ["#{url}"],
-        :inference => false
-      },
-      {
-        :type => "fingerprint",
-        :category => "service",
-        :tags => ["Load Balancer", "Hosting", "IaaS"],
-        :url => "https://aws.amazon.com/elasticloadbalancing/",
-        :vendor => "Amazon",
-        :product => "Elastic Load Balancer",
-        :version => nil,
-        :match_type => :content_headers,
-        :match_content =>  /awselb\/\d.\d/,
-        :match_details =>"error page",
-        :dynamic_hide => lambda{ |x| 
-          return true if _uri_match(x,/amazonaws.com/)       || 
-                         _uri_match(x,/\d+.\d+.\d+.\d+:/) 
-        },
-        :dynamic_version => lambda { |x| _first_header_capture(x,/awselb\/(\d.\d)/) },
-        :paths => ["#{url}"],
-        :inference => false
-      },
-      {
-        :type => "fingerprint",
-        :category => "service",
-        :tags => ["Load Balancer", "Hosting", "IaaS"],
-        :url => "https://aws.amazon.com/blogs/aws/aws-web-application-firewall-waf-for-application-load-balancers/",
-        :vendor => "Amazon",
-        :product => "Elastic Load Balancer",
-        :version => nil,
-        :match_type => :content_cookies,
-        :match_content =>  /AWSELB=/,
-        :match_details =>"amazon elastic cookie",
-        :hide => false,
-        :paths => ["#{url}"],
-        :inference => false
-      },
-      {
-        :type => "fingerprint",
-        :category => "operating_system",
-        :tags => ["OS", "IaaS"],
-        :vendor => "Amazon",
-        :product =>"Linux",
-        :match_details =>"nginx test page",
-        :version => nil,
-        :match_type => :content_title,
-        :match_content => /^Test Page for the Nginx HTTP Server on the Amazon Linux AMI$/,
-        :hide => false,
-        :paths => ["#{url}"],
-        :inference => false
-      },
-      {
-        :type => "fingerprint",
-        :category => "operating_system",
-        :tags => ["OS", "IaaS"],
-        :vendor => "Amazon",
-        :product =>"Linux",
-        :match_details =>"nginx test page",
-        :version => nil,
-        :match_type => :content_title,
-        :match_content => /^Test Page for the Nginx HTTP Server on Amazon Linux$/,
-        :hide => false,
-        :paths => ["#{url}"],
-        :inference => false
-      },
-      {
-        :type => "fingerprint",
-        :category => "service",
-        :tags => ["Web Server", "Hosting", "IaaS"],
-        :vendor => "Amazon",
-        :product =>"S3",
-        :match_details =>"server header",
-        :version => nil,
-        :match_type => :content_headers,
-        :match_content => /server: AmazonS3/,
-        :hide => false,
-        :paths => ["#{url}"],
-        :inference => false
-      }
-    ]
-  end
-end
-end
-end
-end

data/checks/http/amirocms.rb

@@ -1,30 +0,0 @@
-module Intrigue
-module Ident
-module Check
-class AmiroCMS < Intrigue::Ident::Check::Base
-
-  def generate_checks(url)
-    [
-      {
-        :type => "fingerprint",
-        :category => "application",
-        :tags => ["CMS"],
-        :vendor => "Amiro.CMS",
-        :product => "Amiro.CMS",
-        :references => ["https://www.amiro.ru/"],
-        :version => nil,
-        :match_type => :content_body,
-        :match_content => /Amiro.CMS/i,
-        :dynamic_version => nil,
-        :match_details => "header match",
-        :hide => false,
-        :paths => ["#{url}"],
-        :inference => true
-      }
-    ]
-  end
-
-end
-end
-end
-end

data/checks/http/anelectron.rb

@@ -1,29 +0,0 @@
-module Intrigue
-module Ident
-module Check
-class Anelectron < Intrigue::Ident::Check::Base
-
-  def generate_checks(url)
-    [
-      {
-        :type => "fingerprint",
-        :category => "application",
-        :tags => ["Web Server"],
-        :vendor => "Anelectron",
-        :product => "Advanced Electron Forum",
-        :references => [],
-        :version => nil,
-        :match_type => :content_body,
-        :match_content => /Powered By AEF/i,
-        :match_details => "powered by message",
-        :hide => false,
-        :paths => ["#{url}"],
-        :inference => true
-      }
-    ]
-  end
-
-end
-end
-end
-end

data/checks/http/anquanbao.rb

@@ -1,32 +0,0 @@
-module Intrigue
-module Ident
-module Check
-class Anquanbao < Intrigue::Ident::Check::Base
-
-  def generate_checks(url)
-    [
-      {
-        :type => "fingerprint",
-        :category => "service",
-        :tags => ["WAF"],
-        :website => "",
-        :vendor => "Anquanbao",
-        :product => "WAF",
-        :references => [
-          "https://github.com/EnableSecurity/wafw00f"
-        ],
-        :version => nil,
-        :match_type => :content_headers,
-        :match_content => /^X-Powered-By-Anquanbao/i,
-        :match_details => "header match",
-        :hide => false,
-        :paths => ["#{url}"],
-        :inference => false
-      }
-    ]
-  end
-  
-end
-end
-end
-end

data/checks/http/aol.rb

@@ -1,29 +0,0 @@
-module Intrigue
-module Ident
-module Check
-class AOL < Intrigue::Ident::Check::Base
-
-  def generate_checks(url)
-    [
-      {
-        :type => "fingerprint",
-        :category => "application",
-        :tags => ["Web Server"],
-        :vendor => "AOL",
-        :product => "AOLserver",
-        :references => ["https://aolserver.github.io/"],
-        :version => nil,
-        :match_type => :content_headers,
-        :match_content =>  /^Server:\ AOLserver\/(\d\.\d\.\d)$/i,
-        :dynamic_version => lambda { |x|
-          _first_header_capture(x,/^Server:\ AOLserver\/(\d\.\d\.\d)$/i) },
-        :hide => false,
-        :paths => ["#{url}"],
-        :inference => true
-      }
-    ]
-  end
-end
-end
-end
-end

data/checks/http/apache.rb

@@ -1,358 +0,0 @@
-module Intrigue
-module Ident
-module Check
-class Apache < Intrigue::Ident::Check::Base
-
-  def generate_checks(url)
-    [ # Apache HTTP Server Test Page
-      {
-        :type => "fingerprint",
-        :category => "application",
-        :tags => ["Administrative", "Web Server", "Database"],
-        :vendor => "Apache",
-        :product =>"Ambari",
-        :match_details =>"page title",
-        :version => nil,
-        :match_type => :content_body,
-        :match_content =>  /<title>Ambari<\/title>/i,
-        :paths => ["#{url}"],
-        :inference => false
-      },
-      {
-        :type => "fingerprint",
-        :category => "application",
-        :tags => ["Application Server"],
-        :vendor => "Apache",
-        :product =>"Coyote",
-        :match_details =>"Apache coyote application server - server header",
-        :version => nil,
-        :match_type => :content_headers,
-        :match_content =>  /server:\ Apache-Coyote/i,
-        :dynamic_version_field => "headers",
-        :dynamic_version_regex => /server: Apache-Coyote\/(.*)/i,
-        :dynamic_version => lambda { |x|
-          _first_header_capture(x,/server: Apache-Coyote\/(.*)/i)
-        },
-        :paths => ["#{url}"],
-        :inference => true
-      },
-      {
-        :type => "fingerprint",
-        :category => "application",
-        :tags => ["Application Server"],
-        :vendor => "Apache",
-        :product =>"Groovy",
-        :match_details =>"Groovy error page",
-        :match_type => :content_body,
-        :version => nil,
-        :match_content =>  /Error processing GroovyPageView:/i,
-        :paths => ["#{url}"],
-        :inference => false
-      },
-      {
-        :type => "fingerprint",
-        :category => "application",
-        :tags => ["Web Server"],
-        :vendor => "Apache",
-        :product =>"HTTP Server",
-        :match_details =>"test page title",
-        :version => nil,
-        :match_type => :content_title,
-        :match_content =>  /Apache HTTP Server Test Page/i,
-        :paths => ["#{url}"],
-        :inference => false
-      },
-      {
-        :type => "fingerprint",
-        :category => "application",
-        :tags => ["Web Server"],
-        :vendor => "Apache",
-        :product =>"HTTP Server",
-        :match_details =>"Apache server header w/o version",
-        :version => nil,
-        :match_type => :content_headers,
-        :match_content =>  /^server: Apache$/i,
-        :paths => ["#{url}"],
-        :inference => false
-      },
-      {
-        :type => "fingerprint",
-        :category => "application",
-        :tags => ["Web Server"],
-        :vendor => "Apache",
-        :product =>"HTTP Server",
-        :match_details =>"Apache web server - server header - with versions",
-        :version => nil,
-        :match_type => :content_headers,
-        :match_content =>  /^server:.*Apache\/([\d\.]*).*$/i,
-        :dynamic_version => lambda { |x|
-          # check for backported OS type
-          backported = false
-          backported = true if _first_header_match(x,/^server:.*\(CentOS\).*$/)
-          backported = true if _first_header_match(x,/^server:.*\(Red Hat\).*$/)
-          backported = true if _first_header_match(x,/^server:.*\(Red Hat Enterprise Linux\).*$/)
-
-          # grab the version
-          version = _first_header_capture(x,/server:.*Apache\/([\d\.]*).*/)
-      
-          # return a version string that indicates we can't do inference
-          return "#{version} (Backported)" if backported
-        
-        # otherwise just return the version 
-        version
-        },
-        :paths => ["#{url}"],
-        :inference => true
-      },
-      {
-        :type => "fingerprint",
-        :category => "application",
-        :tags => ["Web Server"],
-        :vendor => "Apache",
-        :product =>"HTTP Server",
-        :match_details =>"Apache web server - server header - no version",
-        :version => nil,
-        :match_type => :content_headers,
-        :match_content =>  /^server:\ Apache$/i,
-        :paths => ["#{url}"],
-        :inference => false
-      },
-      {
-        :type => "fingerprint",
-        :category => "application",
-        :tags => ["Web Server"],
-        :vendor => "Apache",
-        :product =>"HTTP Server",
-        :match_details =>"Apache generic error",
-        :version => nil,
-        :match_type => :content_body,
-        :match_content =>  /The server encountered an internal error or misconfiguration and was unable to complete your request./i,
-        :paths => ["#{url}"],
-        :inference => false
-      },
-      {
-        :type => "fingerprint",
-        :category => "application",
-        :tags => ["Library"],
-        :vendor =>"Apache",
-        :product =>"mod_auth_kerb",
-        :match_details =>"server header",
-        :version => nil,
-        :match_type => :content_headers,
-        :match_content =>  /^.*mod_auth_kerb\/.*$/i,
-        :dynamic_version => lambda { |x|
-          _first_header_capture(x,/^.*mod_auth_kerb\/([\w\d\.\-]*)\s.*$/i)
-        },
-        :paths => ["#{url}"],
-        :inference => true
-      },
-      {
-        :type => "fingerprint",
-        :category => "application",
-        :tags => ["Library"],
-        :vendor =>"Apache",
-        :product =>"mod_bwlimited",
-        :match_details =>"server header",
-        :version => nil,
-        :match_type => :content_headers,
-        :match_content =>  /^.*mod_bwlimited\/.*$/i,
-        :dynamic_version => lambda { |x|
-          _first_header_capture(x,/^.*mod_bwlimited\/([\w\d\.\-]*)\s.*$/i)
-        },
-        :paths => ["#{url}"],
-        :inference => true
-      },
-      {
-        :type => "fingerprint",
-        :category => "application",
-        :tags => ["Library"],
-        :vendor =>"Apache",
-        :product =>"mod_fcgid",
-        :match_details =>"server header",
-        :version => nil,
-        :match_type => :content_headers,
-        :match_content =>  /^.*mod_fcgid\/.*$/i,
-        :dynamic_version => lambda { |x|
-          _first_header_capture(x,/^.*mod_fcgid\/([\w\d\.\-]*)\s.*$/i)
-        },
-        :paths => ["#{url}"],
-        :inference => true
-      },
-      {
-        :type => "fingerprint",
-        :category => "application",
-        :tags => ["Library"],
-        :vendor =>"Apache",
-        :product =>"tomcat_jk_connector",
-        :match_details =>"server header",
-        :version => nil,
-        :match_type => :content_headers,
-        :match_content =>  /^.*mod_jk\/.*$/i,
-        :dynamic_version => lambda { |x|
-          _first_header_capture(x,/^.*mod_jk\/([\w\d\.\-]*)\s.*$/i)
-        },
-        :paths => ["#{url}"],
-        :inference => true
-      },
-      {
-        :type => "fingerprint",
-        :category => "application",
-        :tags => ["Library"],
-        :vendor =>"Apache",
-        :product =>"mod_perl",
-        :match_details =>"server header",
-        :version => nil,
-        :match_type => :content_headers,
-        :match_content =>  /^.*mod_perl\/.*$/i,
-        :dynamic_version => lambda { |x|
-          _first_header_capture(x,/^.*mod_perl\/([\w\d\.\-]*)\s.*$/i)
-        },
-        :paths => ["#{url}"],
-        :inference => true
-      },
-      {
-        :type => "fingerprint",
-        :category => "application",
-        :tags => ["Library"],
-        :vendor =>"Apache",
-        :product =>"mod_ssl",
-        :match_details =>"server header",
-        :version => nil,
-        :match_type => :content_headers,
-        :match_content =>  /^.*mod_ssl\/.*$/i,
-        :dynamic_version => lambda { |x|
-          _first_header_capture(x,/^.*mod_ssl\/([\w\d\.\-]*)\s.*$/i)
-        },
-        :paths => ["#{url}"],
-        :inference => true
-      },
-      {
-        :type => "fingerprint",
-        :category => "application",
-        :tags => ["Web Server"],
-        :vendor =>"Apache",
-        :product =>"PivotalWebServer",
-        :match_details =>"server header",
-        :version => nil,
-        :match_type => :content_headers,
-        :match_content =>  /^server: Apache PivotalWebServer$/i,
-        :paths => ["#{url}"],
-        :inference => false
-      },
-      {
-        :type => "fingerprint",
-        :category => "application",
-        :tags => ["Application Server"],
-        :vendor => "Apache",
-        :product =>"Sling",
-        :references => ["https://sling.apache.org/"],
-        :match_details =>"Apache Sling™ is a framework for RESTful web-applications based on an extensible content tree. also note that this may be related to apache experience manager",
-        :version => nil,
-        :match_type => :content_body,
-        :match_content =>  /<address>Apache Sling<\/address>/i,
-        :paths => ["#{url}"],
-        :inference => true
-      },
-      {
-        :type => "fingerprint",
-        :category => "application",
-        :tags => ["Application Server"],
-        :vendor => "Apache",
-        :product => "Tomcat",
-        :match_details =>"Tomcat Application Server",
-        :match_type => :content_title,
-        :version => 6,
-        :match_content =>  /Tomcat 6 Welcome Page/,
-        :paths => ["#{url}"],
-        :inference => true
-      },
-      {
-        :type => "fingerprint",
-        :category => "application",
-        :tags => ["Application Server"],
-        :vendor => "Apache",
-        :product => "Tomcat",
-        :match_details =>"Tomcat Application Server",
-        :match_type => :content_body,
-        :version => nil,
-        :match_content =>  /this is the default Tomcat home page/,
-        :paths => ["#{url}"],
-        :inference => false
-      },
-      {
-        :type => "fingerprint",
-        :category => "application",
-        :tags => ["Application Server"],
-        :vendor => "Apache",
-        :product => "Tomcat",
-        :match_details =>"Tomcat Application Server",
-        :match_type => :content_body,
-        :version => nil,
-        :match_content =>  /If you're seeing this, you've successfully installed Tomcat. Congratulations/,
-        :paths => ["#{url}"],
-        :inference => false
-      },
-      {
-        :type => "fingerprint",
-        :category => "application",
-        :tags => ["Application Server"],
-        :vendor => "Apache",
-        :product => "Tomcat",
-        :match_details =>"Tomcat Application Server",
-        :match_type => :content_body,
-        :version => nil,
-        :match_content =>  /this is the default Tomcat home page/,
-        :paths => ["#{url}"],
-        :inference => false
-      },
-      {
-        :type => "fingerprint",
-        :category => "application",
-        :tags => ["Application Server"],
-        :vendor => "Apache",
-        :product => "Tomcat",
-        :match_details =>"Tomcat Application Server",
-        :match_type => :content_title,
-        :version => nil,
-        :match_content =>  /Apache Tomcat/,
-        :dynamic_version_field => "title",
-        :dynamic_version_regex => /Apache Tomcat\/(.*?) - Error report/i,
-        :dynamic_version => lambda{ |x|
-          _first_body_capture(x, /<title>(.*)<\/title>/,["Apache Tomcat/"," - Error report"])
-        },
-        :paths => ["#{url}","#{url}/doesntexist-123"],
-        :inference => true
-      },
-      {
-        :type => "fingerprint",
-        :category => "application",
-        :tags => ["Application Server"],
-        :vendor => "Apache",
-        :product => "Traffic Server",
-        :match_details =>"header",
-        :match_type => :content_headers,
-        :version => nil,
-        :match_content =>  /^server: ATS$/,
-        :paths => ["#{url}"],
-        :inference => false
-      },
-      {
-        :type => "fingerprint",
-        :category => "application",
-        :tags => ["Application Server"],
-        :vendor => "Apache",
-        :product => "Traffic Server",
-        :match_details =>"header",
-        :match_type => :content_headers,
-        :version => nil,
-        :match_content =>  /^via:.*ApacheTrafficServer.*$/,
-        :paths => ["#{url}"],
-        :inference => false
-      }
-      
-    ]
-  end
-end
-end
-end
-end