recog-intrigue 2.3.7

Sign up to get free protection for your applications and to get access to all the features.
Files changed (130) hide show
  1. checksums.yaml +7 -0
  2. data/.github/ISSUE_TEMPLATE/bug_report.md +37 -0
  3. data/.github/ISSUE_TEMPLATE/feature_request.md +17 -0
  4. data/.github/ISSUE_TEMPLATE/fingerprint_request.md +27 -0
  5. data/.github/PULL_REQUEST_TEMPLATE +24 -0
  6. data/.gitignore +14 -0
  7. data/.rbenv-gemset +1 -0
  8. data/.rspec +3 -0
  9. data/.ruby-gemset +1 -0
  10. data/.ruby-version +1 -0
  11. data/.travis.yml +25 -0
  12. data/.yardopts +1 -0
  13. data/CONTRIBUTING.md +171 -0
  14. data/COPYING +23 -0
  15. data/Gemfile +10 -0
  16. data/LICENSE +7 -0
  17. data/README.md +85 -0
  18. data/Rakefile +22 -0
  19. data/bin/recog_export +81 -0
  20. data/bin/recog_match +55 -0
  21. data/bin/recog_standardize +118 -0
  22. data/bin/recog_verify +64 -0
  23. data/cpe-remap.yaml +134 -0
  24. data/features/data/failing_banners_fingerprints.xml +20 -0
  25. data/features/data/matching_banners_fingerprints.xml +23 -0
  26. data/features/data/multiple_banners_fingerprints.xml +32 -0
  27. data/features/data/no_tests.xml +3 -0
  28. data/features/data/sample_banner.txt +2 -0
  29. data/features/data/successful_tests.xml +18 -0
  30. data/features/data/tests_with_failures.xml +20 -0
  31. data/features/data/tests_with_warnings.xml +17 -0
  32. data/features/match.feature +36 -0
  33. data/features/support/aruba.rb +3 -0
  34. data/features/support/env.rb +6 -0
  35. data/features/verify.feature +48 -0
  36. data/identifiers/README.md +47 -0
  37. data/identifiers/os_architecture.txt +20 -0
  38. data/identifiers/os_device.txt +52 -0
  39. data/identifiers/os_family.txt +160 -0
  40. data/identifiers/os_product.txt +199 -0
  41. data/identifiers/service_family.txt +185 -0
  42. data/identifiers/service_product.txt +255 -0
  43. data/identifiers/software_class.txt +26 -0
  44. data/identifiers/software_family.txt +91 -0
  45. data/identifiers/software_product.txt +333 -0
  46. data/identifiers/vendor.txt +405 -0
  47. data/lib/recog.rb +4 -0
  48. data/lib/recog/db.rb +78 -0
  49. data/lib/recog/db_manager.rb +31 -0
  50. data/lib/recog/fingerprint.rb +280 -0
  51. data/lib/recog/fingerprint/regexp_factory.rb +56 -0
  52. data/lib/recog/fingerprint/test.rb +18 -0
  53. data/lib/recog/formatter.rb +51 -0
  54. data/lib/recog/match_reporter.rb +77 -0
  55. data/lib/recog/matcher.rb +94 -0
  56. data/lib/recog/matcher_factory.rb +14 -0
  57. data/lib/recog/nizer.rb +347 -0
  58. data/lib/recog/verifier.rb +39 -0
  59. data/lib/recog/verifier_factory.rb +13 -0
  60. data/lib/recog/verify_reporter.rb +86 -0
  61. data/lib/recog/version.rb +3 -0
  62. data/misc/convert_mysql_err +61 -0
  63. data/misc/order.xsl +17 -0
  64. data/recog-intrigue.gemspec +45 -0
  65. data/requirements.txt +2 -0
  66. data/spec/data/best_os_match_1.yml +17 -0
  67. data/spec/data/best_os_match_2.yml +17 -0
  68. data/spec/data/best_service_match_1.yml +17 -0
  69. data/spec/data/smb_native_os.txt +25 -0
  70. data/spec/data/test_fingerprints.xml +36 -0
  71. data/spec/data/verification_fingerprints.xml +86 -0
  72. data/spec/data/whitespaced_fingerprint.xml +5 -0
  73. data/spec/lib/fingerprint_self_test_spec.rb +174 -0
  74. data/spec/lib/recog/db_spec.rb +98 -0
  75. data/spec/lib/recog/fingerprint/regexp_factory_spec.rb +73 -0
  76. data/spec/lib/recog/fingerprint_spec.rb +112 -0
  77. data/spec/lib/recog/formatter_spec.rb +69 -0
  78. data/spec/lib/recog/match_reporter_spec.rb +91 -0
  79. data/spec/lib/recog/nizer_spec.rb +330 -0
  80. data/spec/lib/recog/verify_reporter_spec.rb +113 -0
  81. data/spec/spec_helper.rb +82 -0
  82. data/update_cpes.py +186 -0
  83. data/xml/apache_modules.xml +1911 -0
  84. data/xml/apache_os.xml +273 -0
  85. data/xml/architecture.xml +36 -0
  86. data/xml/dns_versionbind.xml +761 -0
  87. data/xml/fingerprints.xsd +128 -0
  88. data/xml/ftp_banners.xml +1553 -0
  89. data/xml/h323_callresp.xml +603 -0
  90. data/xml/hp_pjl_id.xml +358 -0
  91. data/xml/html_title.xml +1630 -0
  92. data/xml/http_cookies.xml +411 -0
  93. data/xml/http_servers.xml +3195 -0
  94. data/xml/http_wwwauth.xml +595 -0
  95. data/xml/imap_banners.xml +245 -0
  96. data/xml/ldap_searchresult.xml +711 -0
  97. data/xml/mdns_device-info_txt.xml +1796 -0
  98. data/xml/mdns_workstation_txt.xml +15 -0
  99. data/xml/mysql_banners.xml +1649 -0
  100. data/xml/mysql_error.xml +871 -0
  101. data/xml/nntp_banners.xml +82 -0
  102. data/xml/ntp_banners.xml +1223 -0
  103. data/xml/operating_system.xml +629 -0
  104. data/xml/pop_banners.xml +499 -0
  105. data/xml/rsh_resp.xml +76 -0
  106. data/xml/rtsp_servers.xml +76 -0
  107. data/xml/sip_banners.xml +359 -0
  108. data/xml/sip_user_agents.xml +221 -0
  109. data/xml/smb_native_lm.xml +62 -0
  110. data/xml/smb_native_os.xml +662 -0
  111. data/xml/smtp_banners.xml +1690 -0
  112. data/xml/smtp_debug.xml +39 -0
  113. data/xml/smtp_ehlo.xml +49 -0
  114. data/xml/smtp_expn.xml +82 -0
  115. data/xml/smtp_help.xml +157 -0
  116. data/xml/smtp_mailfrom.xml +20 -0
  117. data/xml/smtp_noop.xml +44 -0
  118. data/xml/smtp_quit.xml +29 -0
  119. data/xml/smtp_rcptto.xml +25 -0
  120. data/xml/smtp_rset.xml +26 -0
  121. data/xml/smtp_turn.xml +26 -0
  122. data/xml/smtp_vrfy.xml +89 -0
  123. data/xml/snmp_sysdescr.xml +6507 -0
  124. data/xml/snmp_sysobjid.xml +430 -0
  125. data/xml/ssh_banners.xml +1968 -0
  126. data/xml/telnet_banners.xml +1595 -0
  127. data/xml/x11_banners.xml +232 -0
  128. data/xml/x509_issuers.xml +134 -0
  129. data/xml/x509_subjects.xml +1268 -0
  130. metadata +304 -0
@@ -0,0 +1,358 @@
1
+ <?xml version="1.0" encoding="UTF-8"?>
2
+ <fingerprints protocol="pjl" database_type="service" preference="0.10">
3
+ <!--
4
+ For printers running the PJL protocol (usually on 9100/tcp), their type can be requested
5
+ by the INFO ID command. The printer types (strings surrounded by double quotes) are
6
+ matched against these patterns to fingerprint the printer.
7
+
8
+ 'preference' notes: The value has been explicitly set to 0.10 due to the very loose
9
+ regex that is used here.
10
+ -->
11
+ <!--
12
+ LaserJet and Designjet are registered trademarks of HP. Therefore matching for the keywords
13
+ is sufficient for asserting all relevant information
14
+ -->
15
+ <fingerprint pattern="(?i)laserjet (.*)(?: series)?">
16
+ <description>HP JetDirect Printer</description>
17
+ <example>HP LaserJet 4100 Series</example>
18
+ <example>HP LaserJet 2200</example>
19
+ <example>LASERJET 4050</example>
20
+ <example>LASERJET 4 PLUS</example>
21
+ <example>HP LaserJet Professional P1606dn</example>
22
+ <param pos="0" name="service.vendor" value="HP"/>
23
+ <param pos="0" name="service.product" value="JetDirect"/>
24
+ <param pos="0" name="service.family" value="JetDirect"/>
25
+ <param pos="0" name="os.vendor" value="HP"/>
26
+ <param pos="0" name="os.device" value="Printer"/>
27
+ <param pos="0" name="os.family" value="LaserJet"/>
28
+ <param pos="1" name="os.product"/>
29
+ </fingerprint>
30
+ <fingerprint pattern="(?i)(designjet \S+)">
31
+ <description>HP Designjet printer</description>
32
+ <example>hp designjet 110plus</example>
33
+ <example>DESIGNJET 1050C</example>
34
+ <example>DESIGNJET 1055CM</example>
35
+ <example>DESIGNJET 700</example>
36
+ <param pos="0" name="service.vendor" value="HP"/>
37
+ <param pos="0" name="service.product" value="JetDirect"/>
38
+ <param pos="0" name="service.family" value="JetDirect"/>
39
+ <param pos="0" name="os.vendor" value="HP"/>
40
+ <param pos="0" name="os.family" value="DesignJet"/>
41
+ <param pos="0" name="os.device" value="Printer"/>
42
+ <param pos="1" name="os.product"/>
43
+ </fingerprint>
44
+ <fingerprint pattern="^Xerox ColorQube (\S+)$">
45
+ <description>Xerox ColorQube Multifunction Printer</description>
46
+ <example>Xerox ColorQube 8570DN</example>
47
+ <example>Xerox ColorQube 8570DT</example>
48
+ <example>Xerox ColorQube 8570N</example>
49
+ <param pos="0" name="os.vendor" value="Xerox"/>
50
+ <param pos="0" name="os.family" value="ColorQube"/>
51
+ <param pos="1" name="os.product"/>
52
+ <param pos="0" name="os.device" value="Multifunction Device"/>
53
+ </fingerprint>
54
+ <fingerprint pattern="^Brother (.+)$">
55
+ <description>Brother Printer</description>
56
+ <example>Brother HL-1660e</example>
57
+ <param pos="0" name="os.vendor" value="Brother"/>
58
+ <param pos="0" name="os.device" value="Printer"/>
59
+ <param pos="1" name="os.product"/>
60
+ </fingerprint>
61
+ <!-- Assert the product range as a product fingerprint. -->
62
+ <fingerprint pattern="^(iR ?\S+)">
63
+ <description>Canon iR multifunction device</description>
64
+ <example>iR 3180C EUR</example>
65
+ <example>iR C4080/C4580</example>
66
+ <example>iR1020/1024/1025</example>
67
+ <param pos="0" name="os.vendor" value="Canon"/>
68
+ <param pos="0" name="os.family" value="iR Series"/>
69
+ <param pos="0" name="os.device" value="Multifunction Device"/>
70
+ <param pos="1" name="os.product"/>
71
+ </fingerprint>
72
+ <fingerprint pattern="^(?:Dell (?:Color Laser |Laser Printer )?|(?:Color Laser |Laser Printer ))(\d+(?:n|cn|dn|cdn))(?: Color Laser| Laser Printer)?$">
73
+ <description>Dell Laser Printer</description>
74
+ <example>Dell Laser Printer 1710n</example>
75
+ <example>Dell Color Laser 3110cn</example>
76
+ <example>Laser Printer 5100cn</example>
77
+ <example>Dell 2130cn Color Laser</example>
78
+ <example>Dell 2330dn Laser Printer</example>
79
+ <example>Dell 2350dn Laser Printer</example>
80
+ <example>Dell 3130cn Color Laser</example>
81
+ <example>Dell 5130cdn Color Laser</example>
82
+ <example>Dell 5230n Laser Printer</example>
83
+ <example>Dell 2145cn</example>
84
+ <param pos="0" name="os.vendor" value="Dell"/>
85
+ <param pos="0" name="os.family" value="Laser Printer"/>
86
+ <param pos="0" name="os.device" value="Printer"/>
87
+ <param pos="1" name="os.product"/>
88
+ </fingerprint>
89
+ <fingerprint pattern="^Dell (\d+(?:n|cn|dn|cdn)) MFP$">
90
+ <description>Dell Laser multifunction device</description>
91
+ <example>Dell 2135cn MFP</example>
92
+ <example>Dell 2335dn MFP</example>
93
+ <param pos="0" name="os.vendor" value="Dell"/>
94
+ <param pos="0" name="os.family" value="Laser Printer"/>
95
+ <param pos="0" name="os.device" value="Multifunction Device"/>
96
+ <param pos="1" name="os.product"/>
97
+ </fingerprint>
98
+ <fingerprint pattern="^HP (\S+ Digital Sender)$">
99
+ <description>HP Digital Sender scanner</description>
100
+ <example>HP 9250C Digital Sender</example>
101
+ <param pos="0" name="os.vendor" value="HP"/>
102
+ <param pos="0" name="os.device" value="Scanner"/>
103
+ <param pos="0" name="os.family" value="Digital Sender"/>
104
+ <param pos="1" name="os.product"/>
105
+ </fingerprint>
106
+ <fingerprint pattern="^(?:IBM )?Infoprint(?: Color)? (\S+)$">
107
+ <description>IBM Infoprint Printer</description>
108
+ <param pos="0" name="os.vendor" value="IBM"/>
109
+ <param pos="0" name="os.family" value="Infoprint"/>
110
+ <param pos="0" name="os.device" value="Printer"/>
111
+ <param pos="1" name="os.product"/>
112
+ </fingerprint>
113
+ <fingerprint pattern="^KM-(.*)$">
114
+ <description>Konica Minolta printer</description>
115
+ <example>KM-5050</example>
116
+ <param pos="0" name="os.vendor" value="Lexmark"/>
117
+ <param pos="0" name="os.device" value="Printer"/>
118
+ <param pos="1" name="os.product"/>
119
+ </fingerprint>
120
+ <fingerprint pattern="^(FS-\S+MFP\S*)$">
121
+ <description>Kyocera Mita Multifunction device</description>
122
+ <example>FS-C2126MFP</example>
123
+ <example>FS-C2126MFP+</example>
124
+ <example>FS-1035MFP/DP</example>
125
+ <param pos="0" name="os.vendor" value="Kyocera Mita"/>
126
+ <param pos="0" name="os.device" value="Multifunction Device"/>
127
+ <param pos="0" name="os.family" value="FS"/>
128
+ <param pos="1" name="os.product"/>
129
+ </fingerprint>
130
+ <fingerprint pattern="^(FS-(?:C)?\d+(?:D|DN))$">
131
+ <description>Kyocera Mita Printer</description>
132
+ <example>FS-C8500DN</example>
133
+ <example>FS-4100DN</example>
134
+ <example>FS-2020D</example>
135
+ <param pos="0" name="os.vendor" value="Kyocera Mita"/>
136
+ <param pos="0" name="os.device" value="Printer"/>
137
+ <param pos="0" name="os.family" value="FS"/>
138
+ <param pos="1" name="os.product"/>
139
+ </fingerprint>
140
+ <fingerprint pattern="^(TASKalfa \S+)$">
141
+ <description>Kyocera Mita TASKalfa multifunction device</description>
142
+ <example>TASKalfa 300ci</example>
143
+ <example>TASKalfa 520i</example>
144
+ <example>TASKalfa 250ci</example>
145
+ <param pos="0" name="os.vendor" value="Kyocera Mita"/>
146
+ <param pos="0" name="os.device" value="Multifunction Device"/>
147
+ <param pos="0" name="os.family" value="TASKalfa"/>
148
+ <param pos="1" name="os.product"/>
149
+ </fingerprint>
150
+ <fingerprint pattern="^Lexmark (.*)$">
151
+ <description>Lexmark JetDirect printer</description>
152
+ <example>Lexmark C910</example>
153
+ <example>Lexmark Optra LaserPrinter</example>
154
+ <example>Lexmark Optra S 1250</example>
155
+ <param pos="0" name="os.vendor" value="Lexmark"/>
156
+ <param pos="0" name="os.device" value="Printer"/>
157
+ <param pos="1" name="os.product"/>
158
+ </fingerprint>
159
+ <fingerprint pattern="(?i)^Oce (fx[^\s:]+):.*$">
160
+ <description>Oce FX series multifunction device</description>
161
+ <example os.product="fx3000">Oce fx3000:8C5-B29:Ver.D:U0707161719:B0601271355</example>
162
+ <param pos="0" name="os.vendor" value="Oce"/>
163
+ <param pos="0" name="os.family" value="FX Series"/>
164
+ <param pos="0" name="os.device" value="Multifunction Device"/>
165
+ <param pos="1" name="os.product"/>
166
+ </fingerprint>
167
+ <fingerprint pattern="(?i)^Oce (VL\S+):.*$">
168
+ <description>Oce VarioLink multifunction device</description>
169
+ <example>Oce VL3200:8C5-D92:Ver.B</example>
170
+ <param pos="0" name="os.vendor" value="Oce"/>
171
+ <param pos="0" name="os.family" value="VarioLink"/>
172
+ <param pos="0" name="os.device" value="Multifunction Device"/>
173
+ <param pos="1" name="os.product"/>
174
+ </fingerprint>
175
+ <!-- IGI is Imagistics International, which was acquired by Oce.
176
+ I can't find MX-MBX3 or any variant online. -->
177
+ <fingerprint pattern="(?i)^OceIGI MX-\S+">
178
+ <description>Oce-acquired IGI printer</description>
179
+ <example>OceIGI MX-NBX3 02-Jul-07 14:47</example>
180
+ <param pos="0" name="os.vendor" value="Oce"/>
181
+ <param pos="0" name="os.device" value="Printer"/>
182
+ </fingerprint>
183
+ <!-- im3510/4510 is actually a range of model numbers, but asserting a range
184
+ of models as a product is preferableto asserting nothing. -->
185
+ <fingerprint pattern="(?i)^Imagistics (im\S+) (.+)">
186
+ <description>Oce IM series multifunction device</description>
187
+ <example>Imagistics im3510/4510 02-Aug-04 10:56</example>
188
+ <param pos="0" name="os.vendor" value="Oce"/>
189
+ <param pos="0" name="os.family" value="IM Series"/>
190
+ <param pos="0" name="os.device" value="Multifunction Device"/>
191
+ <param pos="0" name="system.time.format" value="dd-MMM-yy HH:mm"/>
192
+ <param pos="1" name="os.product"/>
193
+ <param pos="2" name="system.time"/>
194
+ </fingerprint>
195
+ <!-- C610 is a series; there are several models with suffixes n, dn, dtn, cdn -->
196
+ <fingerprint pattern="^OKI (C\d+)\S*$">
197
+ <description>Okidata color printer</description>
198
+ <example>OKI C610</example>
199
+ <example>OKI C710</example>
200
+ <example>OKI C710dn</example>
201
+ <param pos="0" name="os.vendor" value="Okidata"/>
202
+ <param pos="0" name="os.device" value="Printer"/>
203
+ <param pos="1" name="os.product"/>
204
+ </fingerprint>
205
+ <fingerprint pattern="^OKI (MC\d+)\S*$">
206
+ <description>Okidata multifunction device</description>
207
+ <example>OKI MC860</example>
208
+ <param pos="0" name="os.vendor" value="Okidata"/>
209
+ <param pos="0" name="os.device" value="Multifunction Device"/>
210
+ <param pos="1" name="os.product"/>
211
+ </fingerprint>
212
+ <fingerprint pattern="(?i)^RICOH ((?:Aficio|MP|SP) .*)$">
213
+ <description>Ricoh Aficio Printer</description>
214
+ <example>RICOH Aficio 2075</example>
215
+ <example>RICOH Aficio AP610N</example>
216
+ <example>RICOH Aficio SP 8100DN</example>
217
+ <example>RICOH MP C1500/615C</example>
218
+ <param pos="0" name="os.vendor" value="Ricoh"/>
219
+ <param pos="0" name="os.family" value="Aficio"/>
220
+ <param pos="1" name="os.product"/>
221
+ <param pos="0" name="os.device" value="Printer"/>
222
+ </fingerprint>
223
+ <!-- NRG was acquired by Ricoh; classify NRG printers as such.
224
+ Be consistent with snmp_sysdescr.xml. -->
225
+ <fingerprint pattern="(?i)^NRG ([MS]P \S+)$">
226
+ <description>Ricoh NRG printer</description>
227
+ <example>NRG MP 171</example>
228
+ <example>NRG MP 3350</example>
229
+ <example>NRG MP C2550</example>
230
+ <example>NRG MP C2800</example>
231
+ <example>NRG MP C3500</example>
232
+ <example>NRG MP C4000</example>
233
+ <example>NRG MP C4500</example>
234
+ <example>NRG SP C231SF</example>
235
+ <param pos="0" name="os.vendor" value="Ricoh"/>
236
+ <param pos="0" name="os.device" value="Printer"/>
237
+ <param pos="1" name="os.product"/>
238
+ </fingerprint>
239
+ <!-- Gestetner == NRG, and was acquired by Ricoh.
240
+ Assert the range of products as os.product. -->
241
+ <fingerprint pattern="(?i)^Gestetner (MP\S+/DSc\S+)$">
242
+ <description>Ricoh Gestetner multifunction device</description>
243
+ <example>Gestetner MPC2500/DSc525</example>
244
+ <param pos="0" name="os.vendor" value="Ricoh"/>
245
+ <param pos="0" name="os.device" value="Multifunction Device"/>
246
+ <param pos="1" name="os.product"/>
247
+ </fingerprint>
248
+ <fingerprint pattern="(?i)^HYDRA$">
249
+ <description>RSI Hydra printer</description>
250
+ <example>HYDRA</example>
251
+ <param pos="0" name="os.vendor" value="RSI"/>
252
+ <param pos="0" name="os.device" value="Printer"/>
253
+ <param pos="0" name="os.product" value="Hydra"/>
254
+ </fingerprint>
255
+ <fingerprint pattern="(?i)^Savin (\S+)$">
256
+ <description>Savin Printer</description>
257
+ <example>SAVIN 4075</example>
258
+ <param pos="0" name="os.vendor" value="Savin"/>
259
+ <param pos="0" name="os.device" value="Printer"/>
260
+ <param pos="1" name="os.product"/>
261
+ </fingerprint>
262
+ <fingerprint pattern="(?i)^Samsung ((?:SCX|CLX)-\S+) Series$">
263
+ <description>Samsung multifunction device</description>
264
+ <example>Samsung SCX-5835_5935 Series</example>
265
+ <example>Samsung CLX-4195 Series</example>
266
+ <param pos="0" name="os.vendor" value="Samsung"/>
267
+ <param pos="0" name="os.device" value="Multifunction Device"/>
268
+ <param pos="1" name="os.product"/>
269
+ </fingerprint>
270
+ <fingerprint pattern="(?i)^Samsung ((?:ML|CLP)-\S+) Series$">
271
+ <description>Samsung printer</description>
272
+ <example>Samsung CLP-680 Series</example>
273
+ <example>Samsung ML-5012_5512 Series</example>
274
+ <param pos="0" name="os.vendor" value="Samsung"/>
275
+ <param pos="0" name="os.device" value="Printer"/>
276
+ <param pos="1" name="os.product"/>
277
+ </fingerprint>
278
+ <fingerprint pattern="(?i)^SHARP (\S+-\S+) .*$">
279
+ <description>Sharp Printer</description>
280
+ <example>Sharp MX-NBX3 18-Mar-08 10:22</example>
281
+ <example>Sharp AR-P17 24-Mar-04 19:55</example>
282
+ <param pos="0" name="os.vendor" value="Sharp"/>
283
+ <param pos="0" name="os.device" value="Printer"/>
284
+ <param pos="1" name="os.product"/>
285
+ </fingerprint>
286
+ <fingerprint pattern="(?i)^Source Technologies (\S+)$">
287
+ <description>Source Technologies Printer</description>
288
+ <example>Source Technologies ST-9620</example>
289
+ <param pos="0" name="os.vendor" value="Source Technologies"/>
290
+ <param pos="0" name="os.device" value="Printer"/>
291
+ <param pos="1" name="os.product"/>
292
+ </fingerprint>
293
+ <!-- Consistent with snmp_sysdescr.xml -->
294
+ <fingerprint pattern="^TOSHIBA (e-STUDIO\S+)(?:\s+.*)?" certainty="0.9">
295
+ <description>Toshiba e-STUDIO multifunction device</description>
296
+ <example>TOSHIBA e-STUDIO350 V468Z 20061013</example>
297
+ <example>TOSHIBA e-STUDIO350-450 V444Z 20041104</example>
298
+ <example>TOSHIBA e-STUDIO450 V468Z 20061013</example>
299
+ <example>TOSHIBA e-STUDIO500S</example>
300
+ <param pos="0" name="os.vendor" value="Toshiba"/>
301
+ <param pos="0" name="os.family" value="e-STUDIO"/>
302
+ <param pos="0" name="os.device" value="Multifunction Device"/>
303
+ <param pos="1" name="os.product"/>
304
+ </fingerprint>
305
+ <!-- TODO:
306
+ Xerox AccXES devices are documented to return:
307
+
308
+ "<printer name> <release #>"
309
+ <FF>
310
+
311
+ In the above, <printer name> is the official product name of the
312
+ AccXES printer, and <release #> corresponds to a software release
313
+ number.
314
+ -->
315
+ <fingerprint pattern="^(?:ID=)?Xerox (Phaser \S+)$" certainty="0.9">
316
+ <description>Xerox Phaser Printer</description>
317
+ <example>Xerox Phaser 6180MFP-D</example>
318
+ <example>ID=Xerox Phaser 5400</example>
319
+ <param pos="0" name="os.vendor" value="Xerox"/>
320
+ <param pos="0" name="os.family" value="Phaser"/>
321
+ <param pos="0" name="os.device" value="Printer"/>
322
+ <param pos="1" name="os.product"/>
323
+ </fingerprint>
324
+ <fingerprint pattern="^Xerox (WorkCentre .*)$" certainty="0.9">
325
+ <description>Xerox Workcentre Printer</description>
326
+ <example>Xerox WorkCentre 7425</example>
327
+ <example>Xerox WorkCentre Pro 245</example>
328
+ <example>Xerox WorkCentre Pro 55, v1 Multifunction System</example>
329
+ <param pos="0" name="os.vendor" value="Xerox"/>
330
+ <param pos="0" name="os.family" value="WorkCentre"/>
331
+ <param pos="1" name="os.product"/>
332
+ <param pos="0" name="os.device" value="Printer"/>
333
+ </fingerprint>
334
+ <fingerprint pattern="^(XC\S+)$" certainty="0.9">
335
+ <description>Xerox XC Printer</description>
336
+ <example>XC560</example>
337
+ <param pos="0" name="os.vendor" value="Xerox"/>
338
+ <param pos="0" name="os.family" value="XC"/>
339
+ <param pos="0" name="os.device" value="Printer"/>
340
+ <param pos="1" name="os.product"/>
341
+ </fingerprint>
342
+ <fingerprint pattern="^(DC\S+)$" certainty="0.9">
343
+ <description>Xerox DocuColor Printer</description>
344
+ <example>DC250</example>
345
+ <param pos="0" name="os.vendor" value="Xerox"/>
346
+ <param pos="0" name="os.family" value="DocuColor"/>
347
+ <param pos="0" name="os.device" value="Printer"/>
348
+ <param pos="1" name="os.product"/>
349
+ </fingerprint>
350
+ <fingerprint pattern="^(EX\d+-\d+)$" certainty="0.9">
351
+ <description>Xerox EX Print Server, powered by EFI Fiery</description>
352
+ <example>EX4112-4127</example>
353
+ <param pos="0" name="os.vendor" value="Xerox"/>
354
+ <param pos="0" name="os.family" value="EX"/>
355
+ <param pos="0" name="os.device" value="Print server"/>
356
+ <param pos="1" name="os.product"/>
357
+ </fingerprint>
358
+ </fingerprints>
@@ -0,0 +1,1630 @@
1
+ <?xml version="1.0" encoding="UTF-8"?>
2
+ <fingerprints matches="html_title" database_type="service" preference="0.90">
3
+
4
+ <!-- HTML Title elements found in HTTP response bodies are matched against these patterns to fingerprint HTTP servers. -->
5
+
6
+ <fingerprint pattern="^Index of /">
7
+ <description>Apache HTTPD indexes</description>
8
+ <example>Index of /</example>
9
+ <param pos="0" name="service.vendor" value="Apache"/>
10
+ <param pos="0" name="service.product" value="HTTPD"/>
11
+ <param pos="0" name="service.family" value="Apache"/>
12
+ <param pos="0" name="service.cpe23" value="cpe:/a:apache:http_server:-"/>
13
+ </fingerprint>
14
+
15
+ <fingerprint pattern="^Test Page for the Nginx HTTP Server on (?:the )?Amazon Linux(?: AMI)?$">
16
+ <description>Apache HTTPD default installation on Amazon Linux</description>
17
+ <example>Test Page for the Nginx HTTP Server on the Amazon Linux AMI</example>
18
+ <example>Test Page for the Nginx HTTP Server on Amazon Linux</example>
19
+ <param pos="0" name="service.vendor" value="Apache"/>
20
+ <param pos="0" name="service.product" value="HTTPD"/>
21
+ <param pos="0" name="service.family" value="Apache"/>
22
+ <param pos="0" name="service.cpe23" value="cpe:/a:apache:http_server:-"/>
23
+ <param pos="0" name="os.vendor" value="Amazon"/>
24
+ <param pos="0" name="os.family" value="Linux"/>
25
+ <param pos="0" name="os.product" value="Linux AMI"/>
26
+ </fingerprint>
27
+
28
+ <fingerprint pattern="^Apache HTTP Server Test Page powered by CentOS$">
29
+ <description>Apache HTTPD default installation on CentOS</description>
30
+ <example>Apache HTTP Server Test Page powered by CentOS</example>
31
+ <param pos="0" name="service.vendor" value="Apache"/>
32
+ <param pos="0" name="service.product" value="HTTPD"/>
33
+ <param pos="0" name="service.family" value="Apache"/>
34
+ <param pos="0" name="service.cpe23" value="cpe:/a:apache:http_server:-"/>
35
+ <param pos="0" name="os.vendor" value="CentOS"/>
36
+ <param pos="0" name="os.family" value="Linux"/>
37
+ <param pos="0" name="os.product" value="Linux"/>
38
+ <param pos="0" name="os.cpe23" value="cpe:/o:centos:centos:-"/>
39
+ </fingerprint>
40
+
41
+ <fingerprint pattern="^Apache2 Debian Default Page: It works$">
42
+ <description>Apache HTTPD default installation on Debian</description>
43
+ <example>Apache2 Debian Default Page: It works</example>
44
+ <param pos="0" name="service.vendor" value="Apache"/>
45
+ <param pos="0" name="service.product" value="HTTPD"/>
46
+ <param pos="0" name="service.family" value="Apache"/>
47
+ <param pos="0" name="service.cpe23" value="cpe:/a:apache:http_server:-"/>
48
+ <param pos="0" name="os.vendor" value="Debian"/>
49
+ <param pos="0" name="os.product" value="Linux"/>
50
+ <param pos="0" name="os.cpe23" value="cpe:/o:debian:debian_linux:-"/>
51
+ </fingerprint>
52
+
53
+ <fingerprint pattern="^Apache2 Ubuntu Default Page: It works$">
54
+ <description>Apache HTTPD default installation on Ubuntu</description>
55
+ <example>Apache2 Ubuntu Default Page: It works</example>
56
+ <param pos="0" name="service.vendor" value="Apache"/>
57
+ <param pos="0" name="service.product" value="HTTPD"/>
58
+ <param pos="0" name="service.family" value="Apache"/>
59
+ <param pos="0" name="service.cpe23" value="cpe:/a:apache:http_server:-"/>
60
+ <param pos="0" name="os.vendor" value="Ubuntu"/>
61
+ <param pos="0" name="os.product" value="Linux"/>
62
+ <param pos="0" name="os.cpe23" value="cpe:/o:canonical:ubuntu_linux:-"/>
63
+ </fingerprint>
64
+
65
+ <fingerprint pattern="^Sample Home Page for APACHEDFT Server$">
66
+ <description>IBM iSeries Apache Default Page</description>
67
+ <example>Sample Home Page for APACHEDFT Server</example>
68
+ <param pos="0" name="os.vendor" value="IBM"/>
69
+ <param pos="0" name="os.family" value="OS/400"/>
70
+ <param pos="0" name="os.product" value="OS/400"/>
71
+ <param pos="0" name="os.cpe23" value="cpe:/o:ibm:os_400:-"/>
72
+ <param pos="0" name="service.vendor" value="Apache"/>
73
+ <param pos="0" name="service.product" value="HTTPD"/>
74
+ <param pos="0" name="service.family" value="Apache"/>
75
+ <param pos="0" name="service.cpe23" value="cpe:/a:apache:http_server:-"/>
76
+ </fingerprint>
77
+
78
+ <fingerprint pattern="^Apache Tomcat$">
79
+ <description>Apache Tomcat with no version</description>
80
+ <example>Apache Tomcat</example>
81
+ <param pos="0" name="service.vendor" value="Apache"/>
82
+ <param pos="0" name="service.product" value="Tomcat"/>
83
+ <param pos="0" name="service.family" value="Tomcat"/>
84
+ <param pos="0" name="service.cpe23" value="cpe:/a:apache:tomcat:-"/>
85
+ </fingerprint>
86
+
87
+ <fingerprint pattern="^Apache Tomcat/(\S+)$">
88
+ <description>Apache tomcat with minimal version information</description>
89
+ <example service.version="8.0.32">Apache Tomcat/8.0.32</example>
90
+ <param pos="0" name="service.vendor" value="Apache"/>
91
+ <param pos="0" name="service.product" value="Tomcat"/>
92
+ <param pos="0" name="service.family" value="Tomcat"/>
93
+ <param pos="1" name="service.version"/>
94
+ <param pos="0" name="service.cpe23" value="cpe:/a:apache:tomcat:{service.version}"/>
95
+ </fingerprint>
96
+
97
+ <fingerprint pattern="^AiCloud">
98
+ <description>ASUS AiCloud</description>
99
+ <example>AiCloud</example>
100
+ <param pos="0" name="hw.vendor" value="Asus"/>
101
+ <param pos="0" name="hw.device" value="WAP"/>
102
+ </fingerprint>
103
+
104
+ <!-- HiSilicon is OEMd by a number of DVR manufacturers -->
105
+ <fingerprint pattern="^DVR Components Download$">
106
+ <description>Web server found on DVR and webcam servers sourced from HiSilicon</description>
107
+ <example>DVR Components Download</example>
108
+ <param pos="0" name="service.vendor" value="HiSilicon"/>
109
+ <param pos="0" name="service.product" value="Cross Web Server"/>
110
+ <param pos="0" name="os.vendor" value="HiSilicon"/>
111
+ <param pos="0" name="os.device" value="DVR"/>
112
+ <param pos="0" name="hw.device" value="DVR"/>
113
+ </fingerprint>
114
+
115
+ <fingerprint pattern="^FRITZ!Box$">
116
+ <description>AVM FRITZ!Box</description>
117
+ <example>FRITZ!Box</example>
118
+ <param pos="0" name="hw.vendor" value="AVM"/>
119
+ <param pos="0" name="hw.device" value="WAP"/>
120
+ <param pos="0" name="hw.family" value="FRITZ!Box"/>
121
+ </fingerprint>
122
+
123
+ <fingerprint pattern="^FRITZ!Powerline$">
124
+ <description>AVM FRITZ!Powerline</description>
125
+ <example>FRITZ!Powerline</example>
126
+ <param pos="0" name="hw.vendor" value="AVM"/>
127
+ <param pos="0" name="hw.device" value="Powerline"/>
128
+ <param pos="0" name="hw.family" value="FRITZ!Powerline"/>
129
+ </fingerprint>
130
+
131
+ <fingerprint pattern="^FRITZ!WLAN Repeater$">
132
+ <description>FRITZ!WLAN Repeater</description>
133
+ <example>FRITZ!WLAN Repeater</example>
134
+ <param pos="0" name="hw.vendor" value="AVM"/>
135
+ <param pos="0" name="hw.device" value="WLAN Repeater"/>
136
+ <param pos="0" name="hw.family" value="FRITZ!WLAN Repeater"/>
137
+ </fingerprint>
138
+
139
+ <fingerprint pattern="^cPanel Login$">
140
+ <description>cPanel</description>
141
+ <example>cPanel Login</example>
142
+ <param pos="0" name="service.vendor" value="cPanel"/>
143
+ <param pos="0" name="service.product" value="cPanel"/>
144
+ <param pos="0" name="service.cpe23" value="cpe:/a:cpanel:cpanel:-"/>
145
+ </fingerprint>
146
+
147
+ <fingerprint pattern="^WHM Login$">
148
+ <description>cPanel Web Host Manager</description>
149
+ <example>WHM Login</example>
150
+ <param pos="0" name="service.vendor" value="cPanel"/>
151
+ <param pos="0" name="service.product" value="WHM"/>
152
+ <param pos="0" name="service.cpe23" value="cpe:/a:cpanel:whm:-"/>
153
+ </fingerprint>
154
+
155
+ <fingerprint pattern="^Windows CE$">
156
+ <description>Windows CE</description>
157
+ <example>Windows CE</example>
158
+ <param pos="0" name="os.vendor" value="Microsoft"/>
159
+ <param pos="0" name="os.family" value="Windows"/>
160
+ <param pos="0" name="os.product" value="Windows CE"/>
161
+ <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows-ce:-"/>
162
+ </fingerprint>
163
+
164
+ <fingerprint pattern="^IIS7$">
165
+ <description>Default IIS 7</description>
166
+ <example>IIS7</example>
167
+ <param pos="0" name="service.vendor" value="Microsoft"/>
168
+ <param pos="0" name="service.product" value="IIS"/>
169
+ <param pos="0" name="service.family" value="IIS"/>
170
+ <param pos="0" name="service.version" value="7"/>
171
+ <param pos="0" name="service.cpe23" value="cpe:/a:microsoft:iis:{service.version}"/>
172
+ <param pos="0" name="os.vendor" value="Microsoft"/>
173
+ <param pos="0" name="os.family" value="Windows"/>
174
+ <param pos="0" name="os.product" value="Windows"/>
175
+ <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows:-"/>
176
+ </fingerprint>
177
+
178
+ <fingerprint pattern="^Microsoft Internet Information Services 8">
179
+ <description>Default IIS 8</description>
180
+ <example>Microsoft Internet Information Services 8</example>
181
+ <param pos="0" name="service.vendor" value="Microsoft"/>
182
+ <param pos="0" name="service.product" value="IIS"/>
183
+ <param pos="0" name="service.family" value="IIS"/>
184
+ <param pos="0" name="service.version" value="8"/>
185
+ <param pos="0" name="service.cpe23" value="cpe:/a:microsoft:iis:{service.version}"/>
186
+ <param pos="0" name="os.vendor" value="Microsoft"/>
187
+ <param pos="0" name="os.family" value="Windows"/>
188
+ <param pos="0" name="os.product" value="Windows"/>
189
+ <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows:-"/>
190
+ </fingerprint>
191
+
192
+ <fingerprint pattern="^IIS (\d\.\d) Detailed Error">
193
+ <description>IIS Detailed Error</description>
194
+ <example service.version="7.0">IIS 7.0 Detailed Error - 401.2 - Unauthorized</example>
195
+ <example service.version="8.0">IIS 8.0 Detailed Error - 403.14 - Forbidden</example>
196
+ <example service.version="8.5">IIS 8.5 Detailed Error - 403.14 - Forbidden</example>
197
+ <param pos="0" name="service.vendor" value="Microsoft"/>
198
+ <param pos="0" name="service.product" value="IIS"/>
199
+ <param pos="0" name="service.family" value="IIS"/>
200
+ <param pos="1" name="service.version"/>
201
+ <param pos="0" name="service.cpe23" value="cpe:/a:microsoft:iis:{service.version}"/>
202
+ <param pos="0" name="os.vendor" value="Microsoft"/>
203
+ <param pos="0" name="os.family" value="Windows"/>
204
+ <param pos="0" name="os.product" value="Windows"/>
205
+ <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows:-"/>
206
+ </fingerprint>
207
+
208
+ <fingerprint pattern="^IIS Windows(?: Server)?$">
209
+ <description>Default IIS</description>
210
+ <example>IIS Windows</example>
211
+ <example>IIS Windows Server</example>
212
+ <param pos="0" name="service.vendor" value="Microsoft"/>
213
+ <param pos="0" name="service.product" value="IIS"/>
214
+ <param pos="0" name="service.family" value="IIS"/>
215
+ <param pos="0" name="os.vendor" value="Microsoft"/>
216
+ <param pos="0" name="os.family" value="Windows"/>
217
+ <param pos="0" name="os.product" value="Windows"/>
218
+ <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows:-"/>
219
+ </fingerprint>
220
+
221
+ <fingerprint pattern="^(?:NETIASPOT Management Console|Konsola zarzdzania NETIASPOT)$">
222
+ <description>Netia Spot wireless router</description>
223
+ <example>Konsola zarzdzania NETIASPOT</example>
224
+ <example>NETIASPOT Management Console</example>
225
+ <param pos="0" name="hw.vendor" value="Netia"/>
226
+ <param pos="0" name="hw.product" value="Spot"/>
227
+ <param pos="0" name="hw.product" value="WAP"/>
228
+ </fingerprint>
229
+
230
+ <fingerprint pattern="^hue personal wireless lighting$">
231
+ <description>Philips Hue Personal Wireless Lighting</description>
232
+ <example>hue personal wireless lighting</example>
233
+ <param pos="0" name="hw.vendor" value="Philips"/>
234
+ <param pos="0" name="hw.product" value="Hue"/>
235
+ <param pos="0" name="hw.device" value="Light Bulb"/>
236
+ </fingerprint>
237
+
238
+ <fingerprint pattern="LANDesk\(R\) Management Agent$">
239
+ <description>LANDesk Management Agent</description>
240
+ <param pos="0" name="service.vendor" value="LANDesk"/>
241
+ <param pos="0" name="service.product" value="Management Agent"/>
242
+ <param pos="0" name="service.family" value="Management Agent"/>
243
+ <param pos="0" name="service.cpe23" value="cpe:/a:landesk:management_agent:-"/>
244
+ </fingerprint>
245
+
246
+ <fingerprint pattern="^(?:Parallels )?Plesk (?:(?:Onyx|Panel) )?([\d\.]+)$">
247
+ <description>Plesk web hosting platform with a version</description>
248
+ <example service.version="12.0.18">Plesk 12.0.18</example>
249
+ <example service.version="17.5.3">Plesk Onyx 17.5.3</example>
250
+ <example service.version="12.0.1">Parallels Plesk 12.0.1</example>
251
+ <example service.version="11.5.30">Parallels Plesk Panel 11.5.30</example>
252
+ <param pos="0" name="service.vendor" value="Plesk"/>
253
+ <param pos="0" name="service.product" value="Plesk"/>
254
+ <param pos="1" name="service.version"/>
255
+ <param pos="0" name="service.cpe23" value="cpe:/a:plesk:plesk:{service.version}"/>
256
+ </fingerprint>
257
+
258
+ <fingerprint pattern="^(?:Parallels )?Plesk (?:(?:Onyx|Panel) )?([\d\.]+) for Microsoft Windows$">
259
+ <description>Plesk web hosting platform with a version on Windows</description>
260
+ <example service.version="12.5.30">Plesk 12.5.30 for Microsoft Windows</example>
261
+ <example service.version="11.5.30">Parallels Plesk Panel 11.5.30 for Microsoft Windows</example>
262
+ <param pos="0" name="service.vendor" value="Plesk"/>
263
+ <param pos="0" name="service.product" value="Plesk"/>
264
+ <param pos="1" name="service.version"/>
265
+ <param pos="0" name="service.cpe23" value="cpe:/a:plesk:plesk:{service.version}"/>
266
+ <param pos="0" name="os.vendor" value="Microsoft"/>
267
+ <param pos="0" name="os.family" value="Windows"/>
268
+ <param pos="0" name="os.product" value="Windows"/>
269
+ <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows:-"/>
270
+ </fingerprint>
271
+
272
+ <fingerprint pattern="^(?i)Default (?:Parallels )?Plesk (?:Panel )?Page$">
273
+ <description>Plesk web hosting platform with no version</description>
274
+ <example>Default Parallels Plesk Panel Page</example>
275
+ <example>Default Parallels Plesk Page</example>
276
+ <example>Default PLESK Page</example>
277
+ <param pos="0" name="service.vendor" value="Plesk"/>
278
+ <param pos="0" name="service.product" value="Plesk"/>
279
+ <param pos="0" name="service.cpe23" value="cpe:/a:plesk:plesk:-"/>
280
+ </fingerprint>
281
+
282
+ <fingerprint pattern="^Web Viewer for Samsung DVR$">
283
+ <description>Samsung DVRs</description>
284
+ <example>Web Viewer for Samsung DVR</example>
285
+ <param pos="0" name="hw.vendor" value="Samsung"/>
286
+ <param pos="0" name="hw.device" value="DVR"/>
287
+ </fingerprint>
288
+
289
+ <fingerprint pattern="^(?i)(?:Dell )?Sonicwall - Authentication$">
290
+ <description>Sonicwall firewalls</description>
291
+ <example>SonicWall - Authentication</example>
292
+ <param pos="0" name="os.vendor" value="SonicWall"/>
293
+ <param pos="0" name="os.device" value="Firewall"/>
294
+ <param pos="0" name="os.family" value="SonicOS"/>
295
+ </fingerprint>
296
+
297
+ <fingerprint pattern="^(.*).nbsp;-.nbsp;Synology.nbsp;DiskStation$">
298
+ <description>Synology DiskStation</description>
299
+ <example host.name="DiskStation">DiskStation&amp;nbsp;-&amp;nbsp;Synology&amp;nbsp;DiskStation</example>
300
+ <example host.name="DS218">DS218&amp;nbsp;-&amp;nbsp;Synology&amp;nbsp;DiskStation</example>
301
+ <param pos="0" name="hw.vendor" value="Synology"/>
302
+ <param pos="0" name="hw.family" value="DiskStation"/>
303
+ <param pos="0" name="hw.device" value="NAS"/>
304
+ <param pos="0" name="os.device" value="NAS"/>
305
+ <param pos="0" name="os.family" value="Linux"/>
306
+ <param pos="0" name="os.product" value="DSM"/>
307
+ <param pos="0" name="os.vendor" value="Synology"/>
308
+ <param pos="1" name="host.name"/>
309
+ </fingerprint>
310
+
311
+ <fingerprint pattern="Synology Web Station!$">
312
+ <description>Synology with WebStation web hosting</description>
313
+ <example>Hello! Welcome to Synology Web Station!</example>
314
+ <example>Hallo! Herzlich Willkommen bei Synology Web Station!</example>
315
+ <param pos="0" name="hw.vendor" value="Synology"/>
316
+ <param pos="0" name="hw.family" value="DiskStation"/>
317
+ <param pos="0" name="hw.device" value="NAS"/>
318
+ <param pos="0" name="os.device" value="NAS"/>
319
+ <param pos="0" name="os.family" value="Linux"/>
320
+ <param pos="0" name="os.product" value="DSM"/>
321
+ <param pos="0" name="os.vendor" value="Synology"/>
322
+ </fingerprint>
323
+
324
+ <fingerprint pattern="^Web Filter Block Override$">
325
+ <description>Fortinet FortiGate/Fortiguard Web Filter</description>
326
+ <example>Web Filter Block Override</example>
327
+ <param pos="0" name="os.vendor" value="Fortinet"/>
328
+ <param pos="0" name="os.family" value="FortiOS"/>
329
+ <param pos="0" name="os.product" value="FortiOS"/>
330
+ <param pos="0" name="os.device" value="Firewall"/>
331
+ <param pos="0" name="os.cpe23" value="cpe:/o:fortinet:fortios:-"/>
332
+ <param pos="0" name="hw.vendor" value="Fortinet"/>
333
+ <param pos="0" name="hw.family" value="FortiGate"/>
334
+ <param pos="0" name="hw.device" value="Firewall"/>
335
+ </fingerprint>
336
+
337
+ <!-- Various products by Ubiquiti networks -->
338
+ <fingerprint pattern="^Ubiquiti Networks$">
339
+ <description>Generic products by Ubiquiti Networks</description>
340
+ <example>Ubiquiti Networks</example>
341
+ <param pos="0" name="hw.vendor" value="Ubiquiti"/>
342
+ </fingerprint>
343
+
344
+ <fingerprint pattern="^UniFi Security Gateway$">
345
+ <description>Ubiquiti Security Gateway</description>
346
+ <example>UniFi Security Gateway</example>
347
+ <param pos="0" name="hw.vendor" value="Ubiquiti"/>
348
+ <param pos="0" name="hw.device" value="Router"/>
349
+ <param pos="0" name="hw.product" value="UniFi Security Gateway"/>
350
+ </fingerprint>
351
+
352
+ <fingerprint pattern="^EdgeOS$">
353
+ <description>Ubiquiti EdgeRouter/EdgeSwitch/etc</description>
354
+ <example>EdgeOS</example>
355
+ <param pos="0" name="hw.vendor" value="Ubiquiti"/>
356
+ </fingerprint>
357
+
358
+ <fingerprint pattern="^CloudKey$">
359
+ <description>Ubiquiti UniFi Cloud Key</description>
360
+ <example>CloudKey</example>
361
+ <param pos="0" name="hw.vendor" value="Ubiquiti"/>
362
+ <param pos="0" name="hw.product" value="UniFi Cloud Key"/>
363
+ </fingerprint>
364
+
365
+ <fingerprint pattern="^airCube$">
366
+ <description>Ubiquiti airCube WAP</description>
367
+ <example>airCube</example>
368
+ <param pos="0" name="hw.vendor" value="Ubiquiti"/>
369
+ <param pos="0" name="hw.product" value="airCube"/>
370
+ <param pos="0" name="hw.device" value="WAP"/>
371
+ </fingerprint>
372
+
373
+ <fingerprint pattern="^UniFi Video$">
374
+ <description>Various UniFi Video web service</description>
375
+ <example>UniFi Video</example>
376
+ <param pos="0" name="service.vendor" value="Ubiquiti"/>
377
+ <param pos="0" name="service.product" value="UniFi Video"/>
378
+ <param pos="0" name="service.cpe23" value="cpe:/a:ubiquiti:unifi_video:-"/>
379
+ </fingerprint>
380
+
381
+ <fingerprint pattern="^UniFi NVR: Software Portal$">
382
+ <description>UniFi NVR for recording from UniFi video cameras</description>
383
+ <example>UniFi NVR: Software Portal</example>
384
+ <param pos="0" name="hw.vendor" value="Ubiquiti"/>
385
+ <param pos="0" name="hw.family" value="UniFi"/>
386
+ <param pos="0" name="hw.family" value="UniFi NVR"/>
387
+ <param pos="0" name="hw.device" value="DVR"/>
388
+ </fingerprint>
389
+
390
+ <fingerprint pattern="^RomPager Embedded Web Server Toolkit$">
391
+ <description>Embedded HTTP server used by many vendors and device
392
+ types, including APC, 3Com, Andover Controls, Cisco VoIP, D-Link,
393
+ Extreme Networks, Foundry Networks, Konica Minolta, Kronos
394
+ Timekeeper, McDATA, Netopia, Nortel Networks, Power Measurement Ltd,
395
+ and Xerox.</description>
396
+ <example>RomPager Embedded Web Server Toolkit</example>
397
+ <param pos="0" name="service.vendor" value="Allegro Software"/>
398
+ <param pos="0" name="service.product" value="RomPager"/>
399
+ </fingerprint>
400
+
401
+ <fingerprint pattern="^RouterOS router configuration page$">
402
+ <description>MikroTik RouterOS router configuration page</description>
403
+ <example>RouterOS router configuration page</example>
404
+ <param pos="0" name="os.vendor" value="MikroTik"/>
405
+ <param pos="0" name="os.device" value="Router"/>
406
+ <param pos="0" name="os.product" value="RouterOS"/>
407
+ <param pos="0" name="os.cpe23" value="cpe:/o:mikrotik:routeros:-"/>
408
+ <param pos="0" name="hw.vendor" value="MikroTik"/>
409
+ <param pos="0" name="hw.device" value="Router"/>
410
+ </fingerprint>
411
+
412
+ <fingerprint pattern="^(?:Welcome to nginx!|Test Page for the Nginx HTTP Server)$">
413
+ <description>Default OS-agnostic nginx</description>
414
+ <example>Welcome to nginx!</example>
415
+ <example>Test Page for the Nginx HTTP Server</example>
416
+ <param pos="0" name="service.product" value="nginx"/>
417
+ <param pos="0" name="service.family" value="nginx"/>
418
+ <param pos="0" name="service.vendor" value="nginx"/>
419
+ <param pos="0" name="service.cpe23" value="cpe:/a:nginx:nginx:-"/>
420
+ </fingerprint>
421
+
422
+ <fingerprint pattern="^Test Page for the Nginx HTTP Server on (?:Fedora|EPEL)$">
423
+ <description>Default nginx on Fedora</description>
424
+ <example>Test Page for the Nginx HTTP Server on Fedora</example>
425
+ <param pos="0" name="service.product" value="nginx"/>
426
+ <param pos="0" name="service.family" value="nginx"/>
427
+ <param pos="0" name="service.vendor" value="nginx"/>
428
+ <param pos="0" name="service.cpe23" value="cpe:/a:nginx:nginx:-"/>
429
+ <param pos="0" name="os.family" value="Linux"/>
430
+ <param pos="0" name="os.vendor" value="Red Hat"/>
431
+ <param pos="0" name="os.product" value="Fedora Core Linux"/>
432
+ <param pos="0" name="os.cpe23" value="cpe:/o:redhat:fedora_core:-"/>
433
+ </fingerprint>
434
+
435
+ <fingerprint pattern="^Welcome to nginx on Debian!$">
436
+ <description>Default nginx on Debian</description>
437
+ <example>Welcome to nginx on Debian!</example>
438
+ <param pos="0" name="service.product" value="nginx"/>
439
+ <param pos="0" name="service.family" value="nginx"/>
440
+ <param pos="0" name="service.vendor" value="nginx"/>
441
+ <param pos="0" name="service.cpe23" value="cpe:/a:nginx:nginx:-"/>
442
+ <param pos="0" name="os.vendor" value="Debian"/>
443
+ <param pos="0" name="os.product" value="Linux"/>
444
+ <param pos="0" name="os.cpe23" value="cpe:/o:debian:debian_linux:-"/>
445
+ </fingerprint>
446
+
447
+ <fingerprint pattern="^Eagle Eye Networks ">
448
+ <description>Eagle Eye Networks to manage IoT cameras home webpage</description>
449
+ <example>Eagle Eye Networks (Local)</example>
450
+ <param pos="0" name="hw.product" value="Bridge"/>
451
+ <param pos="0" name="hw.vendor" value="Eagle Eye Networks"/>
452
+ </fingerprint>
453
+ <fingerprint pattern="^Web Local Display Unauthorized$">
454
+ <description>Eagle Eye Networks to manage IoT cameras unauthorized webpage</description>
455
+ <example>Web Local Display Unauthorized</example>
456
+ <param pos="0" name="hw.product" value=" Bridge"/>
457
+ <param pos="0" name="hw.vendor" value="Eagle Eye Networks"/>
458
+ </fingerprint>
459
+
460
+ <!-- Netgear Products -->
461
+ <fingerprint pattern="^(?:NETGEAR|NetGear) ([a-zA-Z0-9\-\+]+)$">
462
+ <description>Netgear Switches</description>
463
+ <example hw.product="GS108T">NETGEAR GS108T</example>
464
+ <example hw.product="M4100-24G-POE+">NETGEAR M4100-24G-POE+</example>
465
+ <example hw.product="GS748T">NetGear GS748T</example>
466
+ <param pos="0" name="hw.vendor" value="Netgear"/>
467
+ <param pos="0" name="hw.device" value="Switch"/>
468
+ <param pos="1" name="hw.product"/>
469
+ </fingerprint>
470
+
471
+ <fingerprint pattern="^(?:NETGEAR|NetGear) Router ([a-zA-Z0-9\-\+]+)$">
472
+ <description>Netgear Routers</description>
473
+ <example hw.product="WNR2000v4">NETGEAR Router WNR2000v4</example>
474
+ <example hw.product="R6100">NETGEAR Router R6100</example>
475
+ <param pos="0" name="hw.vendor" value="Netgear"/>
476
+ <param pos="0" name="hw.device" value="Router"/>
477
+ <param pos="1" name="hw.product"/>
478
+ </fingerprint>
479
+
480
+ <fingerprint pattern="^Netgear Prosafe Plus Switch$">
481
+ <description>Netgear Prosafe Plus Switch</description>
482
+ <example>Netgear Prosafe Plus Switch</example>
483
+ <param pos="0" name="hw.vendor" value="Netgear"/>
484
+ <param pos="0" name="hw.device" value="Switch"/>
485
+ <param pos="0" name="hw.product" value="Prosafe Plus"/>
486
+ </fingerprint>
487
+
488
+ <fingerprint pattern="^(.*).nbsp;Configuration and Management$">
489
+ <description>Digi Terminal Servers</description>
490
+ <example hw.product="Digi One SP">Digi One SP&amp;nbsp;Configuration and Management</example>
491
+ <example hw.product="PortServer TS 4">PortServer TS 4&amp;nbsp;Configuration and Management</example>
492
+ <example hw.product="PortServer TS 4 H MEI">PortServer TS 4 H MEI&amp;nbsp;Configuration and Management</example>
493
+ <param pos="0" name="hw.vendor" value="Digi"/>
494
+ <param pos="0" name="hw.device" value="Device Server"/>
495
+ <param pos="1" name="hw.product"/>
496
+ <param pos="0" name="os.vendor" value="Digi"/>
497
+ <param pos="0" name="os.device" value="Device Server"/>
498
+ <param pos="0" name="os.product" value="NET+OS"/>
499
+ </fingerprint>
500
+
501
+ <fingerprint pattern="^NPort Web Console$">
502
+ <description>Moxa NPort Terminal Servers</description>
503
+ <example>NPort Web Console</example>
504
+ <param pos="0" name="hw.vendor" value="Moxa"/>
505
+ <param pos="0" name="hw.device" value="Device Server"/>
506
+ <param pos="0" name="hw.product" value="NPort"/>
507
+ </fingerprint>
508
+
509
+ <fingerprint pattern="^Lantronix (SL[BC].*)$">
510
+ <description>Lantronix terminal server</description>
511
+ <example hw.product="SLB882/8824">Lantronix SLB882/8824</example>
512
+ <example hw.product="SLB">Lantronix SLB</example>
513
+ <example hw.product="SLC 8048">Lantronix SLC 8048</example>
514
+ <param pos="0" name="hw.vendor" value="Lantronix"/>
515
+ <param pos="0" name="hw.device" value="Device Server"/>
516
+ <param pos="1" name="hw.product"/>
517
+ </fingerprint>
518
+
519
+ <fingerprint pattern="^(KN\S+) - Cover$">
520
+ <description>ATEN KVM over IP</description>
521
+ <example hw.product="KN4140v">KN4140v - Cover</example>
522
+ <example hw.product="KN4132">KN4132 - Cover</example>
523
+ <param pos="0" name="hw.vendor" value="ATEN"/>
524
+ <param pos="0" name="hw.device" value="KVM"/>
525
+ <param pos="1" name="hw.product"/>
526
+ </fingerprint>
527
+
528
+ <fingerprint pattern="^Ethernet Relay Module$">
529
+ <description>AVT.pl Ethernet Relay Module</description>
530
+ <example>Ethernet Relay Module</example>
531
+ <param pos="0" name="hw.vendor" value="AVT"/>
532
+ <param pos="0" name="hw.device" value="Power Relay"/>
533
+ <param pos="0" name="hw.product" value="Ethernet Relay Module"/>
534
+ </fingerprint>
535
+
536
+ <fingerprint pattern="^Inveo Lantick Ethernet Relay Controller$">
537
+ <description>Inveo Lantick Ethernet Relay Controller</description>
538
+ <example>Inveo Lantick Ethernet Relay Controller</example>
539
+ <param pos="0" name="hw.vendor" value="Inveo"/>
540
+ <param pos="0" name="hw.device" value="Power Relay"/>
541
+ <param pos="0" name="hw.product" value="Lantick Ethernet Relay Controller"/>
542
+ </fingerprint>
543
+
544
+ <fingerprint pattern="^(myUTN(?:-[a-zA-Z0-9]+)?) Control Center$">
545
+ <description>myUTN Device Server</description>
546
+ <example hw.product="myUTN-50a">myUTN-50a Control Center</example>
547
+ <example hw.product="myUTN">myUTN Control Center</example>
548
+ <param pos="0" name="hw.vendor" value="SEH Technology"/>
549
+ <param pos="0" name="hw.device" value="Device Server"/>
550
+ <param pos="1" name="hw.product"/>
551
+ </fingerprint>
552
+
553
+ <fingerprint pattern="^iCOM Control Board$">
554
+ <description>Liebert iCOM Cooling Unit Control Board</description>
555
+ <example>iCOM Control Board</example>
556
+ <param pos="0" name="hw.vendor" value="Liebert"/>
557
+ <param pos="0" name="hw.device" value="Environment Control"/>
558
+ <param pos="0" name="hw.product" value="iCOM Control Panel"/>
559
+ </fingerprint>
560
+
561
+ <fingerprint pattern="^Sigma Control 2$">
562
+ <description>Sigma Control 2 Air Compressor Controls</description>
563
+ <example>Sigma Control 2</example>
564
+ <param pos="0" name="hw.vendor" value="Kaeser Compressors"/>
565
+ <param pos="0" name="hw.device" value="Environment Control"/>
566
+ <param pos="0" name="hw.product" value="Sigma Control 2"/>
567
+ </fingerprint>
568
+
569
+
570
+
571
+
572
+ <fingerprint pattern="^WebPower$">
573
+ <description>Eltek Power Controller</description>
574
+ <example>WebPower</example>
575
+ <param pos="0" name="hw.vendor" value="Eltek"/>
576
+ <param pos="0" name="hw.device" value="Power device"/>
577
+ </fingerprint>
578
+
579
+ <fingerprint pattern="(Expert Power Control NET \d+x\d+) - (.*)$">
580
+ <description>Gude Expert Power Control</description>
581
+ <example host.name="Rack42" hw.product="Expert Power Control NET 2x6">Expert Power Control NET 2x6 - Rack42</example>
582
+ <param pos="0" name="hw.vendor" value="Gude"/>
583
+ <param pos="0" name="hw.device" value="Power device"/>
584
+ <param pos="1" name="hw.product"/>
585
+ <param pos="2" name="host.name"/>
586
+ </fingerprint>
587
+
588
+ <fingerprint pattern="^Sentry Switched CDU$">
589
+ <description>Sentry Switched CDU</description>
590
+ <example>Sentry Switched CDU</example>
591
+ <param pos="0" name="hw.vendor" value="ServerTech"/>
592
+ <param pos="0" name="hw.device" value="Power device"/>
593
+ <param pos="0" name="hw.product" value="Sentry Switched CDU"/>
594
+ </fingerprint>
595
+
596
+ <fingerprint pattern="^Emerson Network Power Rack PDU Card$">
597
+ <description>Emerson Network Power Rack PDU Card</description>
598
+ <example>Emerson Network Power Rack PDU Card</example>
599
+ <param pos="0" name="hw.vendor" value="Emerson"/>
600
+ <param pos="0" name="hw.device" value="Power device"/>
601
+ <param pos="0" name="hw.product" value="Rack PDU Card"/>
602
+ </fingerprint>
603
+
604
+ <fingerprint pattern="^(.*) IntelliSlot Web(?:/\d+)? Card?$">
605
+ <description>Emerson Network Power IntelliSlot Web Card and rebrands</description>
606
+ <example hw.vendor="Emerson Network Power">Emerson Network Power IntelliSlot Web Card</example>
607
+ <example hw.vendor="Emerson Network Power">Emerson Network Power IntelliSlot Web/485 Card</example>
608
+ <example hw.vendor="Vertiv">Vertiv IntelliSlot Web Card</example>
609
+ <example hw.vendor="Liebert">Liebert IntelliSlot Web Card</example>
610
+ <param pos="1" name="hw.vendor"/>
611
+ <param pos="0" name="hw.device" value="Power device"/>
612
+ <param pos="0" name="hw.product" value="IntelliSlot Web Card"/>
613
+ </fingerprint>
614
+
615
+ <fingerprint pattern="^ConnectUPS Web/SNMP Card$">
616
+ <description>ConnectUPS Web/SNMP Card</description>
617
+ <example>ConnectUPS Web/SNMP Card</example>
618
+ <param pos="0" name="hw.vendor" value="APC"/>
619
+ <param pos="0" name="hw.device" value="Power device"/>
620
+ <param pos="0" name="hw.product" value="ConnectUPS Web Card"/>
621
+ </fingerprint>
622
+
623
+ <fingerprint pattern="^Calient Technologies Inc\.$">
624
+ <description>Calient Photonic Switch</description>
625
+ <example>Calient Technologies Inc.</example>
626
+ <param pos="0" name="hw.vendor" value="Calient"/>
627
+ <param pos="0" name="hw.device" value="Switch"/>
628
+ <param pos="0" name="hw.product" value="Photonic Switch"/>
629
+ <param pos="0" name="os.vendor" value="Calient"/>
630
+ <param pos="0" name="os.device" value="Switch"/>
631
+ <param pos="0" name="os.family" value="Linux"/>
632
+ </fingerprint>
633
+
634
+ <fingerprint pattern="^Google Fiber Network Box Diagnostics$">
635
+ <description>Google Fiber Router</description>
636
+ <example>Google Fiber Network Box Diagnostics</example>
637
+ <param pos="0" name="hw.vendor" value="Google"/>
638
+ <param pos="0" name="hw.device" value="Router"/>
639
+ <param pos="0" name="hw.product" value="Fiber Network Box"/>
640
+ </fingerprint>
641
+
642
+ <fingerprint pattern="ServerView.* (iRMC S\d+) Web Server">
643
+ <description>Fujitsu iRMC BMC</description>
644
+ <example hw.product="iRMC S3" os.product="iRMC S3">ServerView Remote Management iRMC S3 Web Server</example>
645
+ <example hw.product="iRMC S4" os.product="iRMC S4">ServerView&amp;reg;&amp;nbsp;Remote Management iRMC S4 Web Server Redirecting ...</example>
646
+ <example hw.product="iRMC S2" os.product="iRMC S2">ServerView Remote Management iRMC S2 Web Server</example>
647
+ <param pos="0" name="hw.device" value="Lights Out Management"/>
648
+ <param pos="0" name="hw.vendor" value="Fujitsu"/>
649
+ <param pos="1" name="hw.product"/>
650
+ <param pos="0" name="os.vendor" value="Fujitsu"/>
651
+ <param pos="1" name="os.product"/>
652
+ </fingerprint>
653
+
654
+ <fingerprint pattern="^Cisco UCS KVM Direct$">
655
+ <description>Cisco UCS KVM Direct</description>
656
+ <example>Cisco UCS KVM Direct</example>
657
+ <param pos="0" name="hw.vendor" value="Cisco"/>
658
+ <param pos="0" name="hw.device" value="Lights Out Management"/>
659
+ <param pos="0" name="hw.product" value="UCS Manager"/>
660
+ <param pos="0" name="os.vendor" value="Cisco"/>
661
+ <param pos="0" name="os.family" value="Linux"/>
662
+ <param pos="0" name="os.product" value="NX-OS"/>
663
+ <param pos="0" name="os.certainty" value="0.8"/>
664
+ </fingerprint>
665
+
666
+ <fingerprint pattern="^Cisco UCS Manager$">
667
+ <description>Cisco UCS Manager</description>
668
+ <example>Cisco UCS Manager</example>
669
+ <param pos="0" name="hw.device" value="Lights Out Management"/>
670
+ <param pos="0" name="hw.vendor" value="Cisco"/>
671
+ <param pos="0" name="hw.product" value="UCS Manager"/>
672
+ <param pos="0" name="os.vendor" value="Cisco"/>
673
+ <param pos="0" name="os.family" value="Linux"/>
674
+ <param pos="0" name="os.product" value="NX-OS"/>
675
+ <param pos="0" name="os.certainty" value="0.8"/>
676
+ </fingerprint>
677
+
678
+ <fingerprint pattern="^Cisco (?:IMC Login|Integrated Management Controller)">
679
+ <description>Cisco Integrated Management Controller</description>
680
+ <example>Cisco Integrated Management Controller</example>
681
+ <example>Cisco Integrated Management Controller Login</example>
682
+ <example>Cisco Integrated Management Controller WebUI</example>
683
+ <example>Cisco IMC Login Page</example>
684
+ <param pos="0" name="hw.device" value="Lights Out Management"/>
685
+ <param pos="0" name="hw.vendor" value="Cisco"/>
686
+ <param pos="0" name="hw.product" value="IMC"/>
687
+ <param pos="0" name="os.vendor" value="Cisco"/>
688
+ <param pos="0" name="os.family" value="Linux"/>
689
+ <param pos="0" name="os.product" value="IMC"/>
690
+ </fingerprint>
691
+
692
+ <fingerprint pattern="^HPE Virtual Connect Manager$">
693
+ <description>HPE Virtual Connect Manager</description>
694
+ <example>HPE Virtual Connect Manager</example>
695
+ <param pos="0" name="hw.device" value="Lights Out Management"/>
696
+ <param pos="0" name="hw.vendor" value="HPE"/>
697
+ <param pos="0" name="hw.product" value="Virtual Connect Manager"/>
698
+ <param pos="0" name="os.vendor" value="HPE"/>
699
+ <param pos="0" name="os.device" value="Lights Out Management"/>
700
+ <param pos="0" name="os.product" value="iLO"/>
701
+ </fingerprint>
702
+
703
+ <fingerprint pattern="^HPE BladeSystem Onboard Administrator$">
704
+ <description>HPE BladeSystem Onboard Administrator</description>
705
+ <example>HPE BladeSystem Onboard Administrator</example>
706
+ <param pos="0" name="hw.device" value="Lights Out Management"/>
707
+ <param pos="0" name="hw.vendor" value="HPE"/>
708
+ <param pos="0" name="hw.product" value="BladeSystem Onboard Administrator"/>
709
+ </fingerprint>
710
+
711
+ <fingerprint pattern="^HPE System Management Homepage$">
712
+ <description>HPE System Management Homepage</description>
713
+ <example>HPE System Management Homepage</example>
714
+ <param pos="0" name="hw.device" value="Lights Out Management"/>
715
+ <param pos="0" name="hw.vendor" value="HPE"/>
716
+ <param pos="0" name="hw.product" value="System Management"/>
717
+ <param pos="0" name="os.vendor" value="HPE"/>
718
+ <param pos="0" name="os.device" value="Lights Out Management"/>
719
+ <param pos="0" name="os.product" value="iLO"/>
720
+ </fingerprint>
721
+
722
+ <fingerprint pattern="^HP Integrated Lights-Out$">
723
+ <description>HP Integrated Lights-Out</description>
724
+ <example>HP Integrated Lights-Out</example>
725
+ <param pos="0" name="hw.device" value="Lights Out Management"/>
726
+ <param pos="0" name="hw.vendor" value="HP"/>
727
+ <param pos="0" name="hw.product" value="iLO"/>
728
+ <param pos="0" name="os.vendor" value="HP"/>
729
+ <param pos="0" name="os.device" value="Lights Out Management"/>
730
+ <param pos="0" name="os.family" value="iLO"/>
731
+ <param pos="0" name="os.product" value="iLO"/>
732
+ </fingerprint>
733
+
734
+ <fingerprint pattern="^HP Integrated Lights-Out 2$">
735
+ <description>HP Integrated Lights-Out 2</description>
736
+ <example>HP Integrated Lights-Out 2</example>
737
+ <param pos="0" name="hw.device" value="Lights Out Management"/>
738
+ <param pos="0" name="hw.vendor" value="HP"/>
739
+ <param pos="0" name="hw.product" value="iLO"/>
740
+ <param pos="0" name="os.vendor" value="HP"/>
741
+ <param pos="0" name="os.device" value="Lights Out Management"/>
742
+ <param pos="0" name="os.family" value="iLO"/>
743
+ <param pos="0" name="os.product" value="iLO 2"/>
744
+ </fingerprint>
745
+
746
+ <fingerprint pattern="^(iLO \d+)$">
747
+ <description>HP Integrated Lights-Out 3+</description>
748
+ <example hw.product="iLO 3" os.product="iLO 3">iLO 3</example>
749
+ <example hw.product="iLO 4" os.product="iLO 4">iLO 4</example>
750
+ <param pos="0" name="hw.device" value="Lights Out Management"/>
751
+ <param pos="0" name="hw.vendor" value="HP"/>
752
+ <param pos="1" name="hw.product"/>
753
+ <param pos="0" name="os.vendor" value="HP"/>
754
+ <param pos="0" name="os.device" value="Lights Out Management"/>
755
+ <param pos="0" name="os.family" value="iLO"/>
756
+ <param pos="1" name="os.product"/>
757
+ </fingerprint>
758
+
759
+ <fingerprint pattern="^HPE SimpliVity OmniStack$">
760
+ <description>HPE SimpliVity OmniStack</description>
761
+ <example>HPE SimpliVity OmniStack</example>
762
+ <param pos="0" name="hw.device" value="NAS"/>
763
+ <param pos="0" name="hw.vendor" value="HPE"/>
764
+ <param pos="0" name="hw.product" value="SimpliVity OmniStack"/>
765
+ </fingerprint>
766
+
767
+ <fingerprint pattern="^HPE (StoreEver \S+)$">
768
+ <description>HPE StoreEver</description>
769
+ <example hw.product="StoreEver MSL3040">HPE StoreEver MSL3040</example>
770
+ <param pos="0" name="hw.device" value="Tape Library"/>
771
+ <param pos="0" name="hw.vendor" value="HPE"/>
772
+ <param pos="1" name="hw.product"/>
773
+ </fingerprint>
774
+
775
+ <fingerprint pattern="^Dell OpenManage Switch Administrator$">
776
+ <description>Dell OpenManage Switch Administrator</description>
777
+ <example>Dell OpenManage Switch Administrator</example>
778
+ <param pos="0" name="hw.vendor" value="Dell"/>
779
+ <param pos="0" name="hw.device" value="Switch"/>
780
+ <param pos="0" name="hw.product" value="OpenManage Switch"/>
781
+ </fingerprint>
782
+
783
+ <fingerprint pattern="^(\S+)\s+-\s+ProCurve Switch (\S+) \((.*)\)$">
784
+ <description>HPE ProCurve Switch w/Hostname</description>
785
+ <example host.name="SW1" hw.product="4204vl" procurve.model="J8770A">SW1 - ProCurve Switch 4204vl (J8770A)</example>
786
+ <param pos="0" name="hw.vendor" value="HPE"/>
787
+ <param pos="0" name="hw.device" value="Switch"/>
788
+ <param pos="2" name="hw.product"/>
789
+ <param pos="1" name="host.name"/>
790
+ <param pos="3" name="procurve.model"/>
791
+ </fingerprint>
792
+
793
+ <fingerprint pattern="^ProCurve Switch (\S+) \((.*)\)$">
794
+ <description>HPE ProCurve Switch w/o Hostname</description>
795
+ <example hw.product="2610-24/12PWR" procurve.model="J9086A">ProCurve Switch 2610-24/12PWR (J9086A)</example>
796
+ <param pos="0" name="hw.vendor" value="HPE"/>
797
+ <param pos="0" name="hw.device" value="Switch"/>
798
+ <param pos="1" name="hw.product"/>
799
+ <param pos="2" name="procurve.model"/>
800
+ </fingerprint>
801
+
802
+ <fingerprint pattern="^FlexiPacket Hub$">
803
+ <description>Nokia Siemens FlexiPacket Hub</description>
804
+ <example>FlexiPacket Hub</example>
805
+ <param pos="0" name="hw.vendor" value="Nokia-Siemens"/>
806
+ <param pos="0" name="hw.device" value="Switch"/>
807
+ <param pos="0" name="hw.product" value="FlexiPacket Hub"/>
808
+ </fingerprint>
809
+
810
+ <fingerprint pattern="^R&amp;S Instrument VNC desktop$">
811
+ <description>Rohde and Schwarz Remote Instrument (vnc)</description>
812
+ <example>R&amp;S Instrument VNC desktop</example>
813
+ <param pos="0" name="hw.device" value="Test Instrument"/>
814
+ <param pos="0" name="hw.vendor" value="Rohde &amp; Schwarz"/>
815
+ <param pos="0" name="os.device" value="Test Instrument"/>
816
+ <param pos="0" name="os.vendor" value="Rohde &amp; Schwarz"/>
817
+ <param pos="0" name="os.family" value="Linux"/>
818
+ </fingerprint>
819
+
820
+ <fingerprint pattern="^Rohde &amp; Schwarz remote instrument$">
821
+ <description>Rohde and Schwarz Remote Instrument (web admin)</description>
822
+ <example>Rohde &amp; Schwarz remote instrument</example>
823
+ <param pos="0" name="hw.device" value="Test Instrument"/>
824
+ <param pos="0" name="hw.vendor" value="Rohde &amp; Schwarz"/>
825
+ </fingerprint>
826
+
827
+ <fingerprint pattern="^EXA$">
828
+ <description>Keysight EXA Signal Analyzer</description>
829
+ <example>EXA</example>
830
+ <param pos="0" name="hw.vendor" value="Keysight"/>
831
+ <param pos="0" name="hw.device" value="Test Instrument"/>
832
+ <param pos="0" name="hw.product" value="EXA Signal Analyzer"/>
833
+ <param pos="0" name="os.device" value="Test Instrument"/>
834
+ </fingerprint>
835
+
836
+ <fingerprint pattern="^MXA$">
837
+ <description>Keysight MXA Signal Analyzer</description>
838
+ <example>MXA</example>
839
+ <param pos="0" name="hw.vendor" value="Keysight"/>
840
+ <param pos="0" name="hw.device" value="Test Instrument"/>
841
+ <param pos="0" name="hw.product" value="MXA Signal Analyzer"/>
842
+ <param pos="0" name="os.device" value="Test Instrument"/>
843
+ </fingerprint>
844
+
845
+ <fingerprint pattern="^Paragon-100G$">
846
+ <description>Calnex Paragon-100G</description>
847
+ <example>Paragon-100G</example>
848
+ <param pos="0" name="hw.vendor" value="Calnex"/>
849
+ <param pos="0" name="hw.device" value="Test Instrument"/>
850
+ <param pos="0" name="hw.product" value="Paragon-100G"/>
851
+ </fingerprint>
852
+
853
+ <fingerprint pattern="^33521A$">
854
+ <description>Keysight 33521A Waveform Generator</description>
855
+ <example>33521A</example>
856
+ <param pos="0" name="hw.vendor" value="Keysight"/>
857
+ <param pos="0" name="hw.device" value="Test Instrument"/>
858
+ <param pos="0" name="hw.product" value="33521A Waveform Generator"/>
859
+ </fingerprint>
860
+
861
+ <fingerprint pattern="^34972A$">
862
+ <description>Keysight 34972A Data Logger</description>
863
+ <example>34972A</example>
864
+ <param pos="0" name="hw.vendor" value="Keysight"/>
865
+ <param pos="0" name="hw.device" value="Test Instrument"/>
866
+ <param pos="0" name="hw.product" value="34972A Data Logger"/>
867
+ </fingerprint>
868
+
869
+ <fingerprint pattern="^53230A$">
870
+ <description>Agilent 53230A Frequency Counter</description>
871
+ <example>53230A</example>
872
+ <param pos="0" name="hw.vendor" value="Agilent"/>
873
+ <param pos="0" name="hw.device" value="Test Instrument"/>
874
+ <param pos="0" name="hw.product" value="53230A Frequency Counter"/>
875
+ </fingerprint>
876
+
877
+ <fingerprint pattern="^Agilent 33220A \((.*)\)$">
878
+ <description>Agilent 33220A</description>
879
+ <example agilent.serial="MY44041111">Agilent 33220A (MY44041111)</example>
880
+ <param pos="0" name="hw.vendor" value="Agilent"/>
881
+ <param pos="0" name="hw.device" value="Test Instrument"/>
882
+ <param pos="0" name="hw.product" value="33220A Waveform Generator"/>
883
+ <param pos="1" name="agilent.serial"/>
884
+ </fingerprint>
885
+
886
+ <fingerprint pattern="^Agilent N5172B (?:EXG )?(MY\S+)$">
887
+ <description>Agilent N5172B</description>
888
+ <example agilent.serial="MY44041111">Agilent N5172B EXG MY44041111</example>
889
+ <param pos="0" name="hw.vendor" value="Agilent"/>
890
+ <param pos="0" name="hw.device" value="Test Instrument"/>
891
+ <param pos="0" name="hw.product" value="N5172B Signal Generator"/>
892
+ <param pos="1" name="agilent.serial"/>
893
+ </fingerprint>
894
+
895
+ <fingerprint pattern="^Polycom - Configuration Utility$">
896
+ <description>Polycom IP Phone</description>
897
+ <example>Polycom - Configuration Utility</example>
898
+ <param pos="0" name="hw.vendor" value="Polycom"/>
899
+ <param pos="0" name="hw.family" value="SoundPoint"/>
900
+ <param pos="0" name="hw.device" value="VoIP"/>
901
+ <param pos="0" name="os.vendor" value="Polycom"/>
902
+ <param pos="0" name="os.product" value="Polycom"/>
903
+ </fingerprint>
904
+
905
+
906
+ <fingerprint pattern="^Digium Phone Settings$">
907
+ <description>Digium Phone Settings</description>
908
+ <example>Digium Phone Settings</example>
909
+ <param pos="0" name="hw.vendor" value="Digium"/>
910
+ <param pos="0" name="hw.device" value="VoIP"/>
911
+ </fingerprint>
912
+
913
+ <fingerprint pattern="^(SPA\S+) Configuration Utility$">
914
+ <description>Cisco IP Phone - SPA504G Configuration Utility</description>
915
+ <example hw.product="SPA504G">SPA504G Configuration Utility</example>
916
+ <param pos="0" name="hw.vendor" value="Cisco"/>
917
+ <param pos="0" name="hw.device" value="VoIP"/>
918
+ <param pos="1" name="hw.product"/>
919
+ </fingerprint>
920
+
921
+ <fingerprint pattern="^Cisco (?:SPA Configuration|IP Phone)$">
922
+ <description>Cisco IP Phone </description>
923
+ <example>Cisco SPA Configuration</example>
924
+ <example>Cisco IP Phone</example>
925
+ <param pos="0" name="hw.vendor" value="Cisco"/>
926
+ <param pos="0" name="hw.device" value="VoIP"/>
927
+ </fingerprint>
928
+
929
+ <fingerprint pattern="^Cisco IP Camera$">
930
+ <description>Cisco IP Camera</description>
931
+ <example>Cisco IP Camera</example>
932
+ <param pos="0" name="hw.vendor" value="Cisco"/>
933
+ <param pos="0" name="hw.device" value="Web cam"/>
934
+ </fingerprint>
935
+
936
+ <fingerprint pattern="^Cisco TelePresence MCU">
937
+ <description>Cisco TelePresence MCU - Home page</description>
938
+ <example>Cisco TelePresence MCU - Home page</example>
939
+ <example>Cisco TelePresence MCU MSE - Home page</example>
940
+ <param pos="0" name="hw.vendor" value="Cisco"/>
941
+ <param pos="0" name="hw.device" value="Video Conferencing"/>
942
+ <param pos="0" name="hw.product" value="TelePresence MCU"/>
943
+ </fingerprint>
944
+
945
+ <fingerprint pattern="^Cisco (Nexus \d+\S+)$">
946
+ <description>Cisco Nexus Virtual Switch</description>
947
+ <example hw.product="Nexus 1000V">Cisco Nexus 1000V</example>
948
+ <param pos="0" name="hw.vendor" value="Cisco"/>
949
+ <param pos="0" name="hw.device" value="Switch"/>
950
+ <param pos="1" name="hw.product"/>
951
+ </fingerprint>
952
+
953
+ <fingerprint pattern="^Cisco Catalyst Switch - Home$">
954
+ <description>Cisco Catalyst Switch</description>
955
+ <example>Cisco Catalyst Switch - Home</example>
956
+ <param pos="0" name="hw.vendor" value="Cisco"/>
957
+ <param pos="0" name="hw.device" value="Switch"/>
958
+ <param pos="0" name="hw.product" value="Catalyst"/>
959
+ <param pos="0" name="os.vendor" value="Cisco"/>
960
+ <param pos="0" name="os.product" value="CatOS"/>
961
+ </fingerprint>
962
+
963
+ <fingerprint pattern="^Cisco MDS 9000(?: and Nexus 5000)? Management Modules (\d+\.\d+\S+)$">
964
+ <description>Cisco MDS 9000/Nexus 5000</description>
965
+ <example os.version="7.3(1)D1(1)">Cisco MDS 9000 and Nexus 5000 Management Modules 7.3(1)D1(1)</example>
966
+ <example os.version="6.2(13a)">Cisco MDS 9000 and Nexus 5000 Management Modules 6.2(13a)</example>
967
+ <example os.version="3.3(2)">Cisco MDS 9000 Management Modules 3.3(2)</example>
968
+ <param pos="0" name="hw.vendor" value="Cisco"/>
969
+ <param pos="0" name="hw.device" value="Switch"/>
970
+ <param pos="0" name="hw.product" value="MDS 9000"/>
971
+ <param pos="0" name="os.vendor" value="Cisco"/>
972
+ <param pos="0" name="os.device" value="Switch"/>
973
+ <param pos="0" name="os.product" value="MDS 9000"/>
974
+ <param pos="1" name="os.version"/>
975
+ </fingerprint>
976
+
977
+ <fingerprint pattern="^Stealthwatch Management Console$">
978
+ <description>Stealthwatch Management Console</description>
979
+ <example>Stealthwatch Management Console</example>
980
+ <param pos="0" name="hw.vendor" value="Cisco"/>
981
+ <param pos="0" name="hw.device" value="Security Appliance"/>
982
+ <param pos="0" name="hw.product" value="Stealthwatch"/>
983
+ <param pos="0" name="os.vendor" value="Cisco"/>
984
+ <param pos="0" name="os.device" value="Security Appliance"/>
985
+ <param pos="0" name="os.product" value="Stealthwatch"/>
986
+ </fingerprint>
987
+
988
+ <fingerprint pattern="^Cisco vManage$">
989
+ <description>Cisco vManage SD-WAN</description>
990
+ <example>Cisco vManage</example>
991
+ <param pos="0" name="hw.vendor" value="Cisco"/>
992
+ <param pos="0" name="hw.device" value="SD-WAN Appliance"/>
993
+ <param pos="0" name="hw.product" value="vManage"/>
994
+ <param pos="0" name="os.vendor" value="Cisco"/>
995
+ <param pos="0" name="os.device" value="SD-WAN Appliance"/>
996
+ <param pos="0" name="os.product" value="vManage"/>
997
+ </fingerprint>
998
+
999
+ <fingerprint pattern="^Login - Cisco DNA Center$">
1000
+ <description>Cisco DNA Center Appliance</description>
1001
+ <example>Login - Cisco DNA Center</example>
1002
+ <param pos="0" name="hw.vendor" value="Cisco"/>
1003
+ <param pos="0" name="hw.device" value="Network Management Device"/>
1004
+ <param pos="0" name="hw.product" value="DNA Center"/>
1005
+ <param pos="0" name="os.vendor" value="Cisco"/>
1006
+ <param pos="0" name="os.device" value="Network Management Device"/>
1007
+ <param pos="0" name="os.product" value="DNA Center"/>
1008
+ </fingerprint>
1009
+
1010
+ <fingerprint pattern="^Cisco (?:Enterprise )?NFVIS$">
1011
+ <description>Cisco NFVIS</description>
1012
+ <example>Cisco NFVIS</example>
1013
+ <example>Cisco Enterprise NFVIS</example>
1014
+ <param pos="0" name="hw.vendor" value="Cisco"/>
1015
+ <param pos="0" name="hw.device" value="Network Management Device"/>
1016
+ <param pos="0" name="hw.product" value="NFVIS"/>
1017
+ <param pos="0" name="os.vendor" value="Cisco"/>
1018
+ <param pos="0" name="os.device" value="Network Management Device"/>
1019
+ <param pos="0" name="os.product" value="NFVIS"/>
1020
+ </fingerprint>
1021
+
1022
+ <fingerprint pattern="^Cisco Systems Login$">
1023
+ <description>Cisco WLC</description>
1024
+ <example>Cisco Systems Login</example>
1025
+ <param pos="0" name="os.vendor" value="Cisco"/>
1026
+ <param pos="0" name="os.device" value="Wireless Controller"/>
1027
+ <param pos="0" name="os.product" value="Wireless Controller"/>
1028
+ <param pos="0" name="os.cpe23" value="cpe:/o:cisco:wireless_lan_controller:-"/>
1029
+ <param pos="0" name="hw.vendor" value="Cisco"/>
1030
+ <param pos="0" name="hw.device" value="Wireless Controller"/>
1031
+ <param pos="0" name="hw.product" value="Wireless Controller"/>
1032
+ </fingerprint>
1033
+
1034
+ <fingerprint pattern="^Duo Access Gateway$">
1035
+ <description>Duo Access Gateway</description>
1036
+ <example>Duo Access Gateway</example>
1037
+ <param pos="0" name="hw.vendor" value="Duo"/>
1038
+ <param pos="0" name="hw.device" value="Security Appliance"/>
1039
+ <param pos="0" name="hw.product" value="Access Gateway"/>
1040
+ <param pos="0" name="os.vendor" value="Duo"/>
1041
+ <param pos="0" name="os.device" value="Security Appliance"/>
1042
+ <param pos="0" name="os.product" value="Access Gateway"/>
1043
+ </fingerprint>
1044
+
1045
+ <fingerprint pattern="^Login - Duo Network Gateway$">
1046
+ <description>Duo Network Gateway</description>
1047
+ <example>Login - Duo Network Gateway</example>
1048
+ <param pos="0" name="hw.vendor" value="Duo"/>
1049
+ <param pos="0" name="hw.device" value="Security Appliance"/>
1050
+ <param pos="0" name="hw.product" value="Network Gateway"/>
1051
+ <param pos="0" name="os.vendor" value="Duo"/>
1052
+ <param pos="0" name="os.device" value="Security Appliance"/>
1053
+ <param pos="0" name="os.product" value="Network Gateway"/>
1054
+ </fingerprint>
1055
+
1056
+ <fingerprint pattern="^VBrick Rev">
1057
+ <description>VBrick Rev</description>
1058
+ <example>VBrick Rev</example>
1059
+ <param pos="0" name="hw.vendor" value="Cisco"/>
1060
+ <param pos="0" name="hw.device" value="Video Conferencing"/>
1061
+ <param pos="0" name="hw.product" value="VBrick Rev"/>
1062
+ <param pos="0" name="os.vendor" value="Cisco"/>
1063
+ <param pos="0" name="os.device" value="Video Conferencing"/>
1064
+ <param pos="0" name="os.product" value="VBrick Rev"/>
1065
+ </fingerprint>
1066
+
1067
+ <fingerprint pattern="^(LinxVII-\S+) Remote Access$">
1068
+ <description>LinxVII-5S Data Terminal</description>
1069
+ <example hw.product="LinxVII-5S">LinxVII-5S Remote Access</example>
1070
+ <param pos="0" name="hw.vendor" value="LINX"/>
1071
+ <param pos="0" name="hw.device" value="Data Terminal"/>
1072
+ <param pos="1" name="hw.product"/>
1073
+ </fingerprint>
1074
+
1075
+ <fingerprint pattern="^Datalogic Mobile Portable$">
1076
+ <description>Datalogic Mobile Portable</description>
1077
+ <example>Datalogic Mobile Portable</example>
1078
+ <param pos="0" name="hw.vendor" value="Datalogic Mobile"/>
1079
+ <param pos="0" name="hw.device" value="Handheld Scanner"/>
1080
+ </fingerprint>
1081
+
1082
+ <fingerprint pattern="^AXIS$">
1083
+ <description>Axis Communications Web Cam</description>
1084
+ <example>AXIS</example>
1085
+ <param pos="0" name="hw.vendor" value="AXIS"/>
1086
+ <param pos="0" name="hw.device" value="Web cam"/>
1087
+ <param pos="0" name="os.vendor" value="AXIS"/>
1088
+ <param pos="0" name="os.family" value="Linux"/>
1089
+ <param pos="0" name="os.device" value="Web cam"/>
1090
+ </fingerprint>
1091
+
1092
+ <fingerprint pattern="^Hanwha Techwin$">
1093
+ <description>Hanwha Techwin IP Camera</description>
1094
+ <example>Hanwha Techwin</example>
1095
+ <param pos="0" name="hw.vendor" value="Hanwha Techwin"/>
1096
+ <param pos="0" name="hw.device" value="Web cam"/>
1097
+ <param pos="0" name="os.vendor" value="Hanwha Techwin"/>
1098
+ <param pos="0" name="os.device" value="Web cam"/>
1099
+ <param pos="0" name="os.family" value="Linux"/>
1100
+ </fingerprint>
1101
+
1102
+ <fingerprint pattern="^(WV-NS\S+) Network Camera$">
1103
+ <description>WV-NS202A Network Camera</description>
1104
+ <example hw.product="WV-NS202A">WV-NS202A Network Camera</example>
1105
+ <example hw.product="WV-NS954">WV-NS954 Network Camera</example>
1106
+ <param pos="0" name="hw.vendor" value="Panasonic"/>
1107
+ <param pos="0" name="hw.device" value="Web cam"/>
1108
+ <param pos="1" name="hw.product"/>
1109
+ <param pos="0" name="os.vendor" value="Panasonic"/>
1110
+ <param pos="0" name="os.device" value="Web cam"/>
1111
+ <param pos="0" name="os.family" value="Linux"/>
1112
+ </fingerprint>
1113
+
1114
+ <fingerprint pattern="^KACE Systems Management Appliance">
1115
+ <description>KACE Systems Management Appliances</description>
1116
+ <example>KACE Systems Management Appliance Service Center</example>
1117
+ <example>KACE Systems Management Appliance Administrator Console</example>
1118
+ <param pos="0" name="hw.vendor" value="KACE"/>
1119
+ <param pos="0" name="hw.device" value="Support Appliance"/>
1120
+ <param pos="0" name="os.vendor" value="KACE"/>
1121
+ <param pos="0" name="os.family" value="FreeBSD"/>
1122
+ </fingerprint>
1123
+
1124
+ <fingerprint pattern="Portal.*Powered by BOMGAR$">
1125
+ <description>Bomgar Appliances</description>
1126
+ <example>Remote Support Portal | Powered by BOMGAR</example>
1127
+ <example>Customer Support Portal Powered by BOMGAR</example>
1128
+ <param pos="0" name="hw.vendor" value="Bomgar"/>
1129
+ <param pos="0" name="hw.device" value="Support Appliance"/>
1130
+ <param pos="0" name="os.vendor" value="Bomgar"/>
1131
+ <param pos="0" name="os.family" value="Linux"/>
1132
+ </fingerprint>
1133
+
1134
+ <fingerprint pattern="^XRoads Network Appliance Administration$">
1135
+ <description>XRoads SD-WAN Network Appliance </description>
1136
+ <example>XRoads Network Appliance Administration</example>
1137
+ <param pos="0" name="hw.vendor" value="XRoads"/>
1138
+ <param pos="0" name="hw.device" value="SD-WAN Appliance"/>
1139
+ <param pos="0" name="os.vendor" value="XRoads"/>
1140
+ <param pos="0" name="os.family" value="Linux"/>
1141
+ </fingerprint>
1142
+
1143
+ <!-- An OEM of the Quantum Corporation SuperLoader 3 -->
1144
+ <fingerprint pattern="^On Board Remote Management$">
1145
+ <description>PowerVault 124T Tape Library</description>
1146
+ <example>On Board Remote Management</example>
1147
+ <param pos="0" name="hw.vendor" value="Dell"/>
1148
+ <param pos="0" name="hw.device" value="Tape Library"/>
1149
+ <param pos="0" name="hw.product" value="PowerVault 124T"/>
1150
+ <param pos="0" name="os.vendor" value="Dell"/>
1151
+ </fingerprint>
1152
+
1153
+ <fingerprint pattern="^(HD-RX-\S+)$">
1154
+ <description>Crestron Multiformat Receivers</description>
1155
+ <example hw.product="HD-RX-201-C-E">HD-RX-201-C-E</example>
1156
+ <param pos="0" name="hw.vendor" value="Crestron"/>
1157
+ <param pos="0" name="hw.device" value="Media Receiver"/>
1158
+ <param pos="1" name="hw.product"/>
1159
+ <param pos="0" name="os.vendor" value="Crestron"/>
1160
+ </fingerprint>
1161
+
1162
+ <fingerprint pattern="^Lencore Sound Manager 2$">
1163
+ <description>Lencore Sound Manager 2</description>
1164
+ <example>Lencore Sound Manager 2</example>
1165
+ <param pos="0" name="hw.vendor" value="Lencore"/>
1166
+ <param pos="0" name="hw.device" value="Media Receiver"/>
1167
+ <param pos="0" name="hw.product" value="Lencore Sound Manager 2"/>
1168
+ <param pos="0" name="os.vendor" value="i.LON"/>
1169
+ <param pos="0" name="os.product" value="SmartServer"/>
1170
+ </fingerprint>
1171
+
1172
+ <!-- Various ICS/OT -->
1173
+
1174
+ <fingerprint pattern="^CTI (25\S+) Main Menu$">
1175
+ <description>Siemens 257x Ethernet Adapter (CTI Branded)</description>
1176
+ <example hw.product="2572-A">CTI 2572-A Main Menu</example>
1177
+ <param pos="0" name="hw.vendor" value="Siemens"/>
1178
+ <param pos="0" name="hw.device" value="Ethernet Adapter"/>
1179
+ <param pos="1" name="hw.product"/>
1180
+ <param pos="0" name="os.vendor" value="Siemens"/>
1181
+ </fingerprint>
1182
+
1183
+ <fingerprint pattern="^(25\S+) Ethernet TCP/IP Module$">
1184
+ <description>Siemens 257x Ethernet Adapter</description>
1185
+ <example hw.product="2572-B">2572-B Ethernet TCP/IP Module</example>
1186
+ <param pos="0" name="hw.vendor" value="Siemens"/>
1187
+ <param pos="0" name="hw.device" value="Ethernet Adapter"/>
1188
+ <param pos="1" name="hw.product"/>
1189
+ <param pos="0" name="os.vendor" value="Siemens"/>
1190
+ </fingerprint>
1191
+
1192
+ <fingerprint pattern="^ECOM100 Main$">
1193
+ <description>DirectLOGIC DL205 communication module</description>
1194
+ <example>ECOM100 Main</example>
1195
+ <param pos="0" name="hw.vendor" value="DirectLOGIC"/>
1196
+ <param pos="0" name="hw.device" value="Ethernet Adapter"/>
1197
+ <param pos="0" name="hw.product" value="ECOM100"/>
1198
+ <param pos="0" name="os.vendor" value="DirectLOGIC"/>
1199
+ </fingerprint>
1200
+
1201
+ <fingerprint pattern="^(1794-\S+) FLEX Ethernet Adapter$">
1202
+ <description>Allen-Bradley 1794-AENTR FLEX Ethernet Adapter</description>
1203
+ <example hw.product="1794-AENTR">1794-AENTR FLEX Ethernet Adapter</example>
1204
+ <param pos="0" name="hw.vendor" value="Allen-Bradley"/>
1205
+ <param pos="0" name="hw.device" value="Ethernet Adapter"/>
1206
+ <param pos="1" name="hw.product"/>
1207
+ <param pos="0" name="os.vendor" value="Allen-Bradley"/>
1208
+ </fingerprint>
1209
+
1210
+ <fingerprint pattern="^Anybus-CC EtherNet/IP$">
1211
+ <description>Anybus-CC EtherNet/IP</description>
1212
+ <example>Anybus-CC EtherNet/IP</example>
1213
+ <param pos="0" name="hw.vendor" value="AnyBus"/>
1214
+ <param pos="0" name="hw.device" value="Ethernet Adapter"/>
1215
+ <param pos="0" name="hw.product" value="CC EtherNet/IP"/>
1216
+ <param pos="0" name="os.vendor" value="AnyBus"/>
1217
+ </fingerprint>
1218
+
1219
+ <fingerprint pattern="^Symmetry 2DBC">
1220
+ <description>AMAG Technology Symmetry EN-2DBC Access Controller</description>
1221
+ <example>Symmetry 2DBC STD APP (EN2DBC_00_EF_4F)</example>
1222
+ <param pos="0" name="hw.vendor" value="AMAG Technology"/>
1223
+ <param pos="0" name="hw.device" value="Access Control"/>
1224
+ <param pos="0" name="hw.product" value="Symmetry EN-2DBC"/>
1225
+ <param pos="0" name="os.vendor" value="AMAG Technology"/>
1226
+ </fingerprint>
1227
+
1228
+ <fingerprint pattern="^(1747-\S+) Home Page$">
1229
+ <description>Allen-Bradley 1747-LXXX SLC 5/05 Controller</description>
1230
+ <example hw.product="1747-L551">1747-L551 Home Page</example>
1231
+ <example hw.product="1747-L551/C">1747-L551/C Home Page</example>
1232
+ <example hw.product="1747-L552/C">1747-L552/C Home Page</example>
1233
+ <param pos="0" name="hw.vendor" value="Allen-Bradley"/>
1234
+ <param pos="0" name="hw.device" value="HMI Controller"/>
1235
+ <param pos="1" name="hw.product"/>
1236
+ <param pos="0" name="os.vendor" value="Allen-Bradley"/>
1237
+ </fingerprint>
1238
+
1239
+ <fingerprint pattern="^(1766-\S+) (B/\S+)$">
1240
+ <description>Allen-Bradley 1766-L32BXB PLC</description>
1241
+ <example hw.product="1766-L32BXB" os.product="1766-L32BXB" os.version="B/11.00">1766-L32BXB B/11.00</example>
1242
+ <param pos="0" name="hw.vendor" value="Allen-Bradley"/>
1243
+ <param pos="0" name="hw.device" value="PLC"/>
1244
+ <param pos="1" name="hw.product"/>
1245
+ <param pos="0" name="os.vendor" value="Allen-Bradley"/>
1246
+ <param pos="0" name="os.device" value="PLC"/>
1247
+ <param pos="1" name="os.product"/>
1248
+ <param pos="2" name="os.version"/>
1249
+ </fingerprint>
1250
+
1251
+ <fingerprint pattern="^PLC-5 Ethernet Base Page$">
1252
+ <description>PLC-5 Ethernet Interface Module</description>
1253
+ <example>PLC-5 Ethernet Base Page</example>
1254
+ <param pos="0" name="hw.vendor" value="Rockwell Automation"/>
1255
+ <param pos="0" name="hw.device" value="PLC"/>
1256
+ <param pos="0" name="hw.product" value="PLC-5"/>
1257
+ <param pos="0" name="os.vendor" value="Rockwell Automation"/>
1258
+ <param pos="0" name="os.device" value="PLC"/>
1259
+ <param pos="0" name="os.product" value="PLC-5"/>
1260
+ </fingerprint>
1261
+
1262
+ <fingerprint pattern="^(1761-NET-\S+)$">
1263
+ <description>Allen-Bradley Ethernet Module</description>
1264
+ <example hw.product="1761-NET-EN">1761-NET-EN</example>
1265
+ <example hw.product="1761-NET-ENIW">1761-NET-ENIW</example>
1266
+ <param pos="0" name="hw.vendor" value="Allen-Bradley"/>
1267
+ <param pos="0" name="hw.device" value="Ethernet Adapter"/>
1268
+ <param pos="1" name="hw.product"/>
1269
+ <param pos="0" name="os.vendor" value="Allen-Bradley"/>
1270
+ </fingerprint>
1271
+
1272
+ <fingerprint pattern="^(1785-\S+) Ethernet Base Page$">
1273
+ <description>Allen-Bradley 1785 Ethernet Module</description>
1274
+ <example hw.product="1785-ENET">1785-ENET Ethernet Base Page</example>
1275
+ <param pos="0" name="hw.vendor" value="Allen-Bradley"/>
1276
+ <param pos="0" name="hw.device" value="Ethernet Adapter"/>
1277
+ <param pos="1" name="hw.product"/>
1278
+ <param pos="0" name="os.vendor" value="Allen-Bradley"/>
1279
+ </fingerprint>
1280
+
1281
+ <fingerprint pattern="^NFT S7 - DALI-Gateway\(Ethernet\)$">
1282
+ <description>NFT DALI S7 Ethernet Module</description>
1283
+ <example>NFT S7 - DALI-Gateway(Ethernet)</example>
1284
+ <param pos="0" name="hw.vendor" value="NFT"/>
1285
+ <param pos="0" name="hw.device" value="Ethernet Adapter"/>
1286
+ <param pos="0" name="hw.product" value="S7 DALI Gateway"/>
1287
+ <param pos="0" name="os.vendor" value="NFT"/>
1288
+ </fingerprint>
1289
+
1290
+ <fingerprint pattern="^IBHLink S7\+\+$">
1291
+ <description>IBHsofte IBHLink S7++</description>
1292
+ <example>IBHLink S7++</example>
1293
+ <param pos="0" name="hw.vendor" value="IBHsofte"/>
1294
+ <param pos="0" name="hw.device" value="Ethernet Adapter"/>
1295
+ <param pos="0" name="hw.product" value="IBHLink S7++"/>
1296
+ <param pos="0" name="os.vendor" value="IBHsofte"/>
1297
+ </fingerprint>
1298
+
1299
+
1300
+ <!-- Software and Appliances -->
1301
+
1302
+ <fingerprint pattern="^S7/S5 OPC Server$">
1303
+ <description>Softing Industrial S7/S5 OPC Server</description>
1304
+ <example>S7/S5 OPC Server</example>
1305
+ <param pos="0" name="service.vendor" value="Softing"/>
1306
+ <param pos="0" name="service.product" value="S7/S5 OPC Server"/>
1307
+ <param pos="0" name="service.cpe23" value="cpe:/a:softing:s7-s5-opc-server:-"/>
1308
+ </fingerprint>
1309
+
1310
+ <fingerprint pattern="^Nessus$">
1311
+ <description>Nessus</description>
1312
+ <example>Nessus</example>
1313
+ <param pos="0" name="service.vendor" value="Tenable"/>
1314
+ <param pos="0" name="service.product" value="Nessus"/>
1315
+ <param pos="0" name="service.cpe23" value="cpe:/a:tenable:nessus:-"/>
1316
+ </fingerprint>
1317
+
1318
+ <fingerprint pattern="^Tenable Appliance$">
1319
+ <description>Tenable Appliance</description>
1320
+ <example>Tenable Appliance</example>
1321
+ <param pos="0" name="hw.vendor" value="Tenable"/>
1322
+ <param pos="0" name="hw.device" value="Security Appliance"/>
1323
+ <param pos="0" name="hw.product" value="Tenable Appliance"/>
1324
+ </fingerprint>
1325
+
1326
+ <fingerprint pattern="^(?:Welcome to Citrix )?XenServer ([0-9\.]+)$">
1327
+ <description>XenServer</description>
1328
+ <example service.version="7.2.0">Welcome to Citrix XenServer 7.2.0</example>
1329
+ <example service.version="6.2.5">XenServer 6.2.5</example>
1330
+ <param pos="0" name="service.vendor" value="Citrix"/>
1331
+ <param pos="0" name="service.product" value="XenServer"/>
1332
+ <param pos="1" name="service.version"/>
1333
+ <param pos="0" name="service.cpe23" value="cpe:/a:citrix:xenserver:{service.version}"/>
1334
+ </fingerprint>
1335
+
1336
+ <fingerprint pattern="^RabbitMQ Management$">
1337
+ <description>RabbitMQ Management</description>
1338
+ <example>RabbitMQ Management</example>
1339
+ <param pos="0" name="service.vendor" value="RabbitMQ"/>
1340
+ <param pos="0" name="service.product" value="Management Server"/>
1341
+ <param pos="0" name="service.cpe23" value="cpe:/a:rabbitmq:rabbitmq-manager:-"/>
1342
+ </fingerprint>
1343
+
1344
+ <fingerprint pattern="^Statistics Report for HAProxy$">
1345
+ <description>HAProxy Stats Server</description>
1346
+ <example>Statistics Report for HAProxy</example>
1347
+ <param pos="0" name="service.vendor" value="HAProxy"/>
1348
+ <param pos="0" name="service.product" value="HAProxy Stats Server"/>
1349
+ <param pos="0" name="service.cpe23" value="cpe:/a:haproxy:stats-server:-"/>
1350
+ </fingerprint>
1351
+
1352
+ <fingerprint pattern="^Open Manage&amp;trade;$">
1353
+ <description>Dell Open Manage Admin</description>
1354
+ <example>Open Manage&amp;trade;</example>
1355
+ <param pos="0" name="service.vendor" value="Dell"/>
1356
+ <param pos="0" name="service.product" value="Open Manage"/>
1357
+ <param pos="0" name="service.cpe23" value="cpe:/a:dell:openmanage:-"/>
1358
+ </fingerprint>
1359
+
1360
+ <fingerprint pattern="^TightVNC desktop \[(.*)\]$">
1361
+ <description>TightVNC Web Server</description>
1362
+ <example host.name="teller01">TightVNC desktop [teller01]</example>
1363
+ <param pos="0" name="service.vendor" value="TightVNC"/>
1364
+ <param pos="0" name="service.product" value="Desktop"/>
1365
+ <param pos="0" name="service.cpe23" value="cpe:/a:tightvnc:desktop:-"/>
1366
+ <param pos="1" name="host.name"/>
1367
+ </fingerprint>
1368
+
1369
+ <fingerprint pattern="^noVNC$">
1370
+ <description>noVNC Web Server</description>
1371
+ <example>noVNC</example>
1372
+ <param pos="0" name="service.vendor" value="noVNC"/>
1373
+ <param pos="0" name="service.product" value="noVNC"/>
1374
+ <param pos="0" name="service.cpe23" value="cpe:/a:novnc:novnc:-"/>
1375
+ </fingerprint>
1376
+
1377
+ <fingerprint pattern="^.* \[Jenkins\]$">
1378
+ <description>Jenkins Customized Dashboard</description>
1379
+ <example>Continuous Integrations [Jenkins]</example>
1380
+ <example>Dashboard [Jenkins]</example>
1381
+ <param pos="0" name="service.vendor" value="Jenkins"/>
1382
+ <param pos="0" name="service.product" value="Jenkins"/>
1383
+ <param pos="0" name="service.cpe23" value="cpe:/a:jenkins:jenkins:-"/>
1384
+ </fingerprint>
1385
+
1386
+ <fingerprint pattern="^Shell In A Box$">
1387
+ <description>Shell In A Box (OSS Project)</description>
1388
+ <example>Shell In A Box</example>
1389
+ <param pos="0" name="service.vendor" value="ShellInABox"/>
1390
+ <param pos="0" name="service.product" value="ShellInABox"/>
1391
+ <param pos="0" name="service.cpe23" value="cpe:/a:shellinabox:shellinabox:-"/>
1392
+ </fingerprint>
1393
+
1394
+ <fingerprint pattern="^AgilentLicenseManagerService Service$">
1395
+ <description>Agilent License Manager Service</description>
1396
+ <example>AgilentLicenseManagerService Service</example>
1397
+ <param pos="0" name="service.vendor" value="Agilent"/>
1398
+ <param pos="0" name="service.product" value="License Manager"/>
1399
+ <param pos="0" name="service.cpe23" value="cpe:/a:agilent:license-manager-"/>
1400
+ </fingerprint>
1401
+
1402
+ <fingerprint pattern="^Red Hat OpenStack Platform Director$">
1403
+ <description>Red Hat OpenStack Platform Director</description>
1404
+ <example>Red Hat OpenStack Platform Director</example>
1405
+ <param pos="0" name="service.vendor" value="Red Hat"/>
1406
+ <param pos="0" name="service.product" value="Open Stack Platform Director"/>
1407
+ <param pos="0" name="service.cpe23" value="cpe:/a:openstack:platform-director:-"/>
1408
+ </fingerprint>
1409
+
1410
+ <fingerprint pattern="^splunkd$">
1411
+ <description>Splunk HTTP server used in the web interface, forwarders, indexers and more</description>
1412
+ <example>splunkd</example>
1413
+ <param pos="0" name="service.vendor" value="Splunk"/>
1414
+ <param pos="0" name="service.product" value="Splunkd"/>
1415
+ <param pos="0" name="service.cpe23" value="cpe:/a:splunk:splunkd:-"/>
1416
+ </fingerprint>
1417
+
1418
+ <fingerprint pattern="^VMware Horizon$">
1419
+ <description>VMware Horizon</description>
1420
+ <example>VMware Horizon</example>
1421
+ <param pos="0" name="service.vendor" value="VMWare"/>
1422
+ <param pos="0" name="service.product" value="Horizon"/>
1423
+ <param pos="0" name="service.cpe23" value="cpe:/a:vmware:horizon:-"/>
1424
+ </fingerprint>
1425
+
1426
+ <fingerprint pattern="^Welcome to VMware Site Recovery Manager$">
1427
+ <description>VMware SRM</description>
1428
+ <example>Welcome to VMware Site Recovery Manager</example>
1429
+ <param pos="0" name="os.vendor" value="VMWare"/>
1430
+ <param pos="0" name="os.product" value="Linux"/>
1431
+ <param pos="0" name="hw.vendor" value="VMWare"/>
1432
+ <param pos="0" name="hw.device" value="Appliance"/>
1433
+ <param pos="0" name="hw.product" value="Site Recovery Manager"/>
1434
+ <param pos="0" name="service.vendor" value="VMWare"/>
1435
+ <param pos="0" name="service.product" value="Site Recovery Manager"/>
1436
+ <param pos="0" name="service.cpe23" value="cpe:/a:vmware:site_recovery_manager:-"/>
1437
+ </fingerprint>
1438
+
1439
+ <fingerprint pattern="^Graylog Web Interface$">
1440
+ <description>Graylog Web Interface</description>
1441
+ <example>Graylog Web Interface</example>
1442
+ <param pos="0" name="service.vendor" value="Graylog"/>
1443
+ <param pos="0" name="service.product" value="Graylog"/>
1444
+ <param pos="0" name="service.cpe23" value="cpe:/a:graylog:graylog:-"/>
1445
+ </fingerprint>
1446
+
1447
+ <fingerprint pattern="^Kibana$">
1448
+ <description>Kibana Web Interface</description>
1449
+ <example>Kibana</example>
1450
+ <param pos="0" name="service.vendor" value="Kibana"/>
1451
+ <param pos="0" name="service.product" value="Kibana"/>
1452
+ <param pos="0" name="service.cpe23" value="cpe:/a:kibana:kibana:-"/>
1453
+ </fingerprint>
1454
+
1455
+ <fingerprint pattern="^Grafana$">
1456
+ <description>Grafana Web Interface</description>
1457
+ <example>Grafana</example>
1458
+ <param pos="0" name="service.vendor" value="Grafana"/>
1459
+ <param pos="0" name="service.product" value="Grafana"/>
1460
+ <param pos="0" name="service.cpe23" value="cpe:/a:grafana:grafana:-"/>
1461
+ </fingerprint>
1462
+
1463
+ <fingerprint pattern="^Symantec Endpoint Protection Manager$">
1464
+ <description>Symantec Endpoint Protection Manager</description>
1465
+ <example>Symantec Endpoint Protection Manager</example>
1466
+ <param pos="0" name="service.vendor" value="Symantec"/>
1467
+ <param pos="0" name="service.product" value="Endpoint Protection Manager"/>
1468
+ <param pos="0" name="service.cpe23" value="cpe:/a:symantec:endpoint-protection-manager:-"/>
1469
+ </fingerprint>
1470
+
1471
+ <fingerprint pattern="^Login Gateway - Kiwi Syslog Web Access$">
1472
+ <description>Kiwi Syslog Web Access</description>
1473
+ <example>Login Gateway - Kiwi Syslog Web Access</example>
1474
+ <param pos="0" name="service.vendor" value="Solarwinds"/>
1475
+ <param pos="0" name="service.product" value="Kiwi Syslog Web Access"/>
1476
+ <param pos="0" name="service.cpe23" value="cpe:/a:solarwinds:kiwi-syslog-web:-"/>
1477
+ </fingerprint>
1478
+
1479
+ <fingerprint pattern="^Hadoop Administration$">
1480
+ <description>Hadoop Administration Web Service</description>
1481
+ <example>Hadoop Administration</example>
1482
+ <param pos="0" name="service.vendor" value="Hadoop"/>
1483
+ <param pos="0" name="service.product" value="Hadoop Web Admin"/>
1484
+ <param pos="0" name="service.cpe23" value="cpe:/a:hadoop:web-admin:-"/>
1485
+ </fingerprint>
1486
+
1487
+ <fingerprint pattern="^ManageEngine OpManager$">
1488
+ <description>ManageEngine OpManager</description>
1489
+ <example>ManageEngine OpManager</example>
1490
+ <param pos="0" name="service.vendor" value="ManageEngine"/>
1491
+ <param pos="0" name="service.product" value="OpManager"/>
1492
+ <param pos="0" name="service.cpe23" value="cpe:/a:manageengine:opmanager:-"/>
1493
+ </fingerprint>
1494
+
1495
+ <fingerprint pattern="^(ScanFront \d.+)Web Menu$">
1496
+ <!-- no space between the product model and "Web Menu" in the title -->
1497
+ <description>Canon ScanFront</description>
1498
+ <example os.product="ScanFront 220" hw.product="ScanFront 220">ScanFront 220Web Menu</example>
1499
+ <param pos="0" name="hw.device" value="Scanner"/>
1500
+ <param pos="0" name="hw.vendor" value="Canon"/>
1501
+ <param pos="1" name="hw.product"/>
1502
+ <param pos="0" name="os.device" value="Scanner"/>
1503
+ <param pos="0" name="os.vendor" value="Canon"/>
1504
+ <param pos="1" name="os.product"/>
1505
+ </fingerprint>
1506
+
1507
+ <fingerprint pattern="^CDVI Update$">
1508
+ <description>CDVI Door Control System</description>
1509
+ <example>CDVI Update</example>
1510
+ <param pos="0" name="hw.vendor" value="CDVI"/>
1511
+ <param pos="0" name="hw.device" value="Access Controller"/>
1512
+ </fingerprint>
1513
+
1514
+ <fingerprint pattern="^Liebert OpenComms Network Interface Card$">
1515
+ <description>Liebert UPS</description>
1516
+ <example>Liebert OpenComms Network Interface Card</example>
1517
+ <param pos="0" name="hw.device" value="Power device"/>
1518
+ <param pos="0" name="hw.vendor" value="Liebert"/>
1519
+ <param pos="0" name="os.device" value="Power device"/>
1520
+ <param pos="0" name="os.vendor" value="Liebert"/>
1521
+ </fingerprint>
1522
+
1523
+ <fingerprint pattern="^Excella Main Page$">
1524
+ <description>MagTek Excella STX Check Scanner</description>
1525
+ <example>Excella Main Page</example>
1526
+ <param pos="0" name="hw.device" value="Check Scanner"/>
1527
+ <param pos="0" name="hw.vendor" value="MagTek"/>
1528
+ <param pos="0" name="hw.product" value="Excella"/>
1529
+ <param pos="0" name="os.device" value="Check Scanner"/>
1530
+ <param pos="0" name="os.vendor" value="MagTek"/>
1531
+ <param pos="0" name="os.product" value="Excella"/>
1532
+ </fingerprint>
1533
+
1534
+ <fingerprint pattern="^B426$">
1535
+ <description>Bosch Security Systems Ethernet Module (Alarm Panel)</description>
1536
+ <example>B426</example>
1537
+ <param pos="0" name="hw.device" value="Alarm Panel"/>
1538
+ <param pos="0" name="hw.vendor" value="Bosch"/>
1539
+ <param pos="0" name="os.device" value="Alarm Panel"/>
1540
+ <param pos="0" name="os.vendor" value="Bosch"/>
1541
+ </fingerprint>
1542
+
1543
+ <fingerprint pattern="^Citrix Login$">
1544
+ <description>Citrix NetScaler</description>
1545
+ <example>Citrix Login</example>
1546
+ <param pos="0" name="os.vendor" value="Citrix"/>
1547
+ <param pos="0" name="os.family" value="NetScaler"/>
1548
+ <param pos="0" name="os.device" value="Network Management Device"/>
1549
+ <param pos="0" name="os.product" value="NetScaler"/>
1550
+ </fingerprint>
1551
+
1552
+ <fingerprint pattern="^HP (?:Color )?LaserJet ([^&amp;]+)&amp;">
1553
+ <description>HP LaserJet</description>
1554
+ <example hw.product="M1536dnf MFP">HP LaserJet M1536dnf MFP&amp;nbsp;&amp;nbsp;&amp;nbsp;1.1.1.1</example>
1555
+ <param pos="0" name="hw.vendor" value="HP"/>
1556
+ <param pos="0" name="hw.family" value="LaserJet"/>
1557
+ <param pos="0" name="hw.device" value="Printer"/>
1558
+ <param pos="1" name="hw.product"/>
1559
+ </fingerprint>
1560
+
1561
+ <fingerprint pattern="^Jamf Pro Login - Jamf Pro v(\S+)$">
1562
+ <description>Jamf Pro</description>
1563
+ <example service.version="10.14.0-t1563397490">Jamf Pro Login - Jamf Pro v10.14.0-t1563397490</example>
1564
+ <param pos="0" name="service.vendor" value="JAMF"/>
1565
+ <param pos="0" name="service.product" value="Pro"/>
1566
+ <param pos="0" name="service.cpe23" value="cpe:/a:jamf:pro:-"/>
1567
+ <param pos="1" name="service.version"/>
1568
+ </fingerprint>
1569
+
1570
+ <fingerprint pattern="^Keyper Systems Administration - Login$">
1571
+ <description>Keyper Systems Administration - Login</description>
1572
+ <example>Keyper Systems Administration - Login</example>
1573
+ <param pos="0" name="hw.vendor" value="Keyper"/>
1574
+ <param pos="0" name="hw.device" value="Access Control"/>
1575
+ <param pos="0" name="hw.product" value="Key Management"/>
1576
+ </fingerprint>
1577
+
1578
+ <fingerprint pattern="FireEye:\s*$">
1579
+ <description>FireEye Investigation Analysis System Appliance</description>
1580
+ <example>FireEye:</example>
1581
+ <param pos="0" name="hw.vendor" value="FireEye"/>
1582
+ <param pos="0" name="hw.product" value="IA Appliance"/>
1583
+ <param pos="0" name="hw.device" value="Security Appliance"/>
1584
+ </fingerprint>
1585
+
1586
+ <fingerprint pattern="^GigaVUE-OS$">
1587
+ <description>Gigamon GigaVUE Appliance</description>
1588
+ <example>GigaVUE-OS</example>
1589
+ <param pos="0" name="hw.vendor" value="Gigamon"/>
1590
+ <param pos="0" name="hw.device" value="Monitoring"/>
1591
+ <param pos="0" name="hw.product" value="GigaVUE"/>
1592
+ </fingerprint>
1593
+
1594
+ <fingerprint pattern="^Pure Storage Login$">
1595
+ <description>Pure Storage Appliance</description>
1596
+ <example>Pure Storage Login</example>
1597
+ <param pos="0" name="hw.vendor" value="Pure Storage"/>
1598
+ <param pos="0" name="hw.device" value="NAS"/>
1599
+ <param pos="0" name="hw.product" value="Appliance"/>
1600
+ </fingerprint>
1601
+
1602
+ <fingerprint pattern="^CRESTRON$">
1603
+ <description>Crestron Video Conferencing</description>
1604
+ <example>CRESTRON</example>
1605
+ <param pos="0" name="hw.vendor" value="Crestron"/>
1606
+ <param pos="0" name="hw.device" value="Video Conferencing"/>
1607
+ <param pos="0" name="os.vendor" value="Crestron"/>
1608
+ <param pos="0" name="os.family" value="Linux"/>
1609
+ <param pos="0" name="os.device" value="Video Conferencing"/>
1610
+ </fingerprint>
1611
+
1612
+ <fingerprint pattern="^ELAN Viewer Installation$">
1613
+ <description>ELAN Smart Home Controller</description>
1614
+ <example>ELAN Viewer Installation</example>
1615
+ <param pos="0" name="hw.vendor" value="ELAN"/>
1616
+ <param pos="0" name="hw.device" value="Building Automation"/>
1617
+ <param pos="0" name="hw.product" value="Home Controller"/>
1618
+ <param pos="0" name="os.vendor" value="ELAN"/>
1619
+ <param pos="0" name="os.family" value="Linux"/>
1620
+ </fingerprint>
1621
+
1622
+ <fingerprint pattern="^iTach IP2IR Setup and Configuration$">
1623
+ <description>iTach IP2IR</description>
1624
+ <example>iTach IP2IR Setup and Configuration</example>
1625
+ <param pos="0" name="hw.vendor" value="iTach"/>
1626
+ <param pos="0" name="hw.device" value="Device"/>
1627
+ <param pos="0" name="hw.product" value="IP2IR"/>
1628
+ </fingerprint>
1629
+
1630
+ </fingerprints>