recog-intrigue 2.3.7

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (130) hide show
  1. checksums.yaml +7 -0
  2. data/.github/ISSUE_TEMPLATE/bug_report.md +37 -0
  3. data/.github/ISSUE_TEMPLATE/feature_request.md +17 -0
  4. data/.github/ISSUE_TEMPLATE/fingerprint_request.md +27 -0
  5. data/.github/PULL_REQUEST_TEMPLATE +24 -0
  6. data/.gitignore +14 -0
  7. data/.rbenv-gemset +1 -0
  8. data/.rspec +3 -0
  9. data/.ruby-gemset +1 -0
  10. data/.ruby-version +1 -0
  11. data/.travis.yml +25 -0
  12. data/.yardopts +1 -0
  13. data/CONTRIBUTING.md +171 -0
  14. data/COPYING +23 -0
  15. data/Gemfile +10 -0
  16. data/LICENSE +7 -0
  17. data/README.md +85 -0
  18. data/Rakefile +22 -0
  19. data/bin/recog_export +81 -0
  20. data/bin/recog_match +55 -0
  21. data/bin/recog_standardize +118 -0
  22. data/bin/recog_verify +64 -0
  23. data/cpe-remap.yaml +134 -0
  24. data/features/data/failing_banners_fingerprints.xml +20 -0
  25. data/features/data/matching_banners_fingerprints.xml +23 -0
  26. data/features/data/multiple_banners_fingerprints.xml +32 -0
  27. data/features/data/no_tests.xml +3 -0
  28. data/features/data/sample_banner.txt +2 -0
  29. data/features/data/successful_tests.xml +18 -0
  30. data/features/data/tests_with_failures.xml +20 -0
  31. data/features/data/tests_with_warnings.xml +17 -0
  32. data/features/match.feature +36 -0
  33. data/features/support/aruba.rb +3 -0
  34. data/features/support/env.rb +6 -0
  35. data/features/verify.feature +48 -0
  36. data/identifiers/README.md +47 -0
  37. data/identifiers/os_architecture.txt +20 -0
  38. data/identifiers/os_device.txt +52 -0
  39. data/identifiers/os_family.txt +160 -0
  40. data/identifiers/os_product.txt +199 -0
  41. data/identifiers/service_family.txt +185 -0
  42. data/identifiers/service_product.txt +255 -0
  43. data/identifiers/software_class.txt +26 -0
  44. data/identifiers/software_family.txt +91 -0
  45. data/identifiers/software_product.txt +333 -0
  46. data/identifiers/vendor.txt +405 -0
  47. data/lib/recog.rb +4 -0
  48. data/lib/recog/db.rb +78 -0
  49. data/lib/recog/db_manager.rb +31 -0
  50. data/lib/recog/fingerprint.rb +280 -0
  51. data/lib/recog/fingerprint/regexp_factory.rb +56 -0
  52. data/lib/recog/fingerprint/test.rb +18 -0
  53. data/lib/recog/formatter.rb +51 -0
  54. data/lib/recog/match_reporter.rb +77 -0
  55. data/lib/recog/matcher.rb +94 -0
  56. data/lib/recog/matcher_factory.rb +14 -0
  57. data/lib/recog/nizer.rb +347 -0
  58. data/lib/recog/verifier.rb +39 -0
  59. data/lib/recog/verifier_factory.rb +13 -0
  60. data/lib/recog/verify_reporter.rb +86 -0
  61. data/lib/recog/version.rb +3 -0
  62. data/misc/convert_mysql_err +61 -0
  63. data/misc/order.xsl +17 -0
  64. data/recog-intrigue.gemspec +45 -0
  65. data/requirements.txt +2 -0
  66. data/spec/data/best_os_match_1.yml +17 -0
  67. data/spec/data/best_os_match_2.yml +17 -0
  68. data/spec/data/best_service_match_1.yml +17 -0
  69. data/spec/data/smb_native_os.txt +25 -0
  70. data/spec/data/test_fingerprints.xml +36 -0
  71. data/spec/data/verification_fingerprints.xml +86 -0
  72. data/spec/data/whitespaced_fingerprint.xml +5 -0
  73. data/spec/lib/fingerprint_self_test_spec.rb +174 -0
  74. data/spec/lib/recog/db_spec.rb +98 -0
  75. data/spec/lib/recog/fingerprint/regexp_factory_spec.rb +73 -0
  76. data/spec/lib/recog/fingerprint_spec.rb +112 -0
  77. data/spec/lib/recog/formatter_spec.rb +69 -0
  78. data/spec/lib/recog/match_reporter_spec.rb +91 -0
  79. data/spec/lib/recog/nizer_spec.rb +330 -0
  80. data/spec/lib/recog/verify_reporter_spec.rb +113 -0
  81. data/spec/spec_helper.rb +82 -0
  82. data/update_cpes.py +186 -0
  83. data/xml/apache_modules.xml +1911 -0
  84. data/xml/apache_os.xml +273 -0
  85. data/xml/architecture.xml +36 -0
  86. data/xml/dns_versionbind.xml +761 -0
  87. data/xml/fingerprints.xsd +128 -0
  88. data/xml/ftp_banners.xml +1553 -0
  89. data/xml/h323_callresp.xml +603 -0
  90. data/xml/hp_pjl_id.xml +358 -0
  91. data/xml/html_title.xml +1630 -0
  92. data/xml/http_cookies.xml +411 -0
  93. data/xml/http_servers.xml +3195 -0
  94. data/xml/http_wwwauth.xml +595 -0
  95. data/xml/imap_banners.xml +245 -0
  96. data/xml/ldap_searchresult.xml +711 -0
  97. data/xml/mdns_device-info_txt.xml +1796 -0
  98. data/xml/mdns_workstation_txt.xml +15 -0
  99. data/xml/mysql_banners.xml +1649 -0
  100. data/xml/mysql_error.xml +871 -0
  101. data/xml/nntp_banners.xml +82 -0
  102. data/xml/ntp_banners.xml +1223 -0
  103. data/xml/operating_system.xml +629 -0
  104. data/xml/pop_banners.xml +499 -0
  105. data/xml/rsh_resp.xml +76 -0
  106. data/xml/rtsp_servers.xml +76 -0
  107. data/xml/sip_banners.xml +359 -0
  108. data/xml/sip_user_agents.xml +221 -0
  109. data/xml/smb_native_lm.xml +62 -0
  110. data/xml/smb_native_os.xml +662 -0
  111. data/xml/smtp_banners.xml +1690 -0
  112. data/xml/smtp_debug.xml +39 -0
  113. data/xml/smtp_ehlo.xml +49 -0
  114. data/xml/smtp_expn.xml +82 -0
  115. data/xml/smtp_help.xml +157 -0
  116. data/xml/smtp_mailfrom.xml +20 -0
  117. data/xml/smtp_noop.xml +44 -0
  118. data/xml/smtp_quit.xml +29 -0
  119. data/xml/smtp_rcptto.xml +25 -0
  120. data/xml/smtp_rset.xml +26 -0
  121. data/xml/smtp_turn.xml +26 -0
  122. data/xml/smtp_vrfy.xml +89 -0
  123. data/xml/snmp_sysdescr.xml +6507 -0
  124. data/xml/snmp_sysobjid.xml +430 -0
  125. data/xml/ssh_banners.xml +1968 -0
  126. data/xml/telnet_banners.xml +1595 -0
  127. data/xml/x11_banners.xml +232 -0
  128. data/xml/x509_issuers.xml +134 -0
  129. data/xml/x509_subjects.xml +1268 -0
  130. metadata +304 -0
@@ -0,0 +1,358 @@
1
+ <?xml version="1.0" encoding="UTF-8"?>
2
+ <fingerprints protocol="pjl" database_type="service" preference="0.10">
3
+ <!--
4
+ For printers running the PJL protocol (usually on 9100/tcp), their type can be requested
5
+ by the INFO ID command. The printer types (strings surrounded by double quotes) are
6
+ matched against these patterns to fingerprint the printer.
7
+
8
+ 'preference' notes: The value has been explicitly set to 0.10 due to the very loose
9
+ regex that is used here.
10
+ -->
11
+ <!--
12
+ LaserJet and Designjet are registered trademarks of HP. Therefore matching for the keywords
13
+ is sufficient for asserting all relevant information
14
+ -->
15
+ <fingerprint pattern="(?i)laserjet (.*)(?: series)?">
16
+ <description>HP JetDirect Printer</description>
17
+ <example>HP LaserJet 4100 Series</example>
18
+ <example>HP LaserJet 2200</example>
19
+ <example>LASERJET 4050</example>
20
+ <example>LASERJET 4 PLUS</example>
21
+ <example>HP LaserJet Professional P1606dn</example>
22
+ <param pos="0" name="service.vendor" value="HP"/>
23
+ <param pos="0" name="service.product" value="JetDirect"/>
24
+ <param pos="0" name="service.family" value="JetDirect"/>
25
+ <param pos="0" name="os.vendor" value="HP"/>
26
+ <param pos="0" name="os.device" value="Printer"/>
27
+ <param pos="0" name="os.family" value="LaserJet"/>
28
+ <param pos="1" name="os.product"/>
29
+ </fingerprint>
30
+ <fingerprint pattern="(?i)(designjet \S+)">
31
+ <description>HP Designjet printer</description>
32
+ <example>hp designjet 110plus</example>
33
+ <example>DESIGNJET 1050C</example>
34
+ <example>DESIGNJET 1055CM</example>
35
+ <example>DESIGNJET 700</example>
36
+ <param pos="0" name="service.vendor" value="HP"/>
37
+ <param pos="0" name="service.product" value="JetDirect"/>
38
+ <param pos="0" name="service.family" value="JetDirect"/>
39
+ <param pos="0" name="os.vendor" value="HP"/>
40
+ <param pos="0" name="os.family" value="DesignJet"/>
41
+ <param pos="0" name="os.device" value="Printer"/>
42
+ <param pos="1" name="os.product"/>
43
+ </fingerprint>
44
+ <fingerprint pattern="^Xerox ColorQube (\S+)$">
45
+ <description>Xerox ColorQube Multifunction Printer</description>
46
+ <example>Xerox ColorQube 8570DN</example>
47
+ <example>Xerox ColorQube 8570DT</example>
48
+ <example>Xerox ColorQube 8570N</example>
49
+ <param pos="0" name="os.vendor" value="Xerox"/>
50
+ <param pos="0" name="os.family" value="ColorQube"/>
51
+ <param pos="1" name="os.product"/>
52
+ <param pos="0" name="os.device" value="Multifunction Device"/>
53
+ </fingerprint>
54
+ <fingerprint pattern="^Brother (.+)$">
55
+ <description>Brother Printer</description>
56
+ <example>Brother HL-1660e</example>
57
+ <param pos="0" name="os.vendor" value="Brother"/>
58
+ <param pos="0" name="os.device" value="Printer"/>
59
+ <param pos="1" name="os.product"/>
60
+ </fingerprint>
61
+ <!-- Assert the product range as a product fingerprint. -->
62
+ <fingerprint pattern="^(iR ?\S+)">
63
+ <description>Canon iR multifunction device</description>
64
+ <example>iR 3180C EUR</example>
65
+ <example>iR C4080/C4580</example>
66
+ <example>iR1020/1024/1025</example>
67
+ <param pos="0" name="os.vendor" value="Canon"/>
68
+ <param pos="0" name="os.family" value="iR Series"/>
69
+ <param pos="0" name="os.device" value="Multifunction Device"/>
70
+ <param pos="1" name="os.product"/>
71
+ </fingerprint>
72
+ <fingerprint pattern="^(?:Dell (?:Color Laser |Laser Printer )?|(?:Color Laser |Laser Printer ))(\d+(?:n|cn|dn|cdn))(?: Color Laser| Laser Printer)?$">
73
+ <description>Dell Laser Printer</description>
74
+ <example>Dell Laser Printer 1710n</example>
75
+ <example>Dell Color Laser 3110cn</example>
76
+ <example>Laser Printer 5100cn</example>
77
+ <example>Dell 2130cn Color Laser</example>
78
+ <example>Dell 2330dn Laser Printer</example>
79
+ <example>Dell 2350dn Laser Printer</example>
80
+ <example>Dell 3130cn Color Laser</example>
81
+ <example>Dell 5130cdn Color Laser</example>
82
+ <example>Dell 5230n Laser Printer</example>
83
+ <example>Dell 2145cn</example>
84
+ <param pos="0" name="os.vendor" value="Dell"/>
85
+ <param pos="0" name="os.family" value="Laser Printer"/>
86
+ <param pos="0" name="os.device" value="Printer"/>
87
+ <param pos="1" name="os.product"/>
88
+ </fingerprint>
89
+ <fingerprint pattern="^Dell (\d+(?:n|cn|dn|cdn)) MFP$">
90
+ <description>Dell Laser multifunction device</description>
91
+ <example>Dell 2135cn MFP</example>
92
+ <example>Dell 2335dn MFP</example>
93
+ <param pos="0" name="os.vendor" value="Dell"/>
94
+ <param pos="0" name="os.family" value="Laser Printer"/>
95
+ <param pos="0" name="os.device" value="Multifunction Device"/>
96
+ <param pos="1" name="os.product"/>
97
+ </fingerprint>
98
+ <fingerprint pattern="^HP (\S+ Digital Sender)$">
99
+ <description>HP Digital Sender scanner</description>
100
+ <example>HP 9250C Digital Sender</example>
101
+ <param pos="0" name="os.vendor" value="HP"/>
102
+ <param pos="0" name="os.device" value="Scanner"/>
103
+ <param pos="0" name="os.family" value="Digital Sender"/>
104
+ <param pos="1" name="os.product"/>
105
+ </fingerprint>
106
+ <fingerprint pattern="^(?:IBM )?Infoprint(?: Color)? (\S+)$">
107
+ <description>IBM Infoprint Printer</description>
108
+ <param pos="0" name="os.vendor" value="IBM"/>
109
+ <param pos="0" name="os.family" value="Infoprint"/>
110
+ <param pos="0" name="os.device" value="Printer"/>
111
+ <param pos="1" name="os.product"/>
112
+ </fingerprint>
113
+ <fingerprint pattern="^KM-(.*)$">
114
+ <description>Konica Minolta printer</description>
115
+ <example>KM-5050</example>
116
+ <param pos="0" name="os.vendor" value="Lexmark"/>
117
+ <param pos="0" name="os.device" value="Printer"/>
118
+ <param pos="1" name="os.product"/>
119
+ </fingerprint>
120
+ <fingerprint pattern="^(FS-\S+MFP\S*)$">
121
+ <description>Kyocera Mita Multifunction device</description>
122
+ <example>FS-C2126MFP</example>
123
+ <example>FS-C2126MFP+</example>
124
+ <example>FS-1035MFP/DP</example>
125
+ <param pos="0" name="os.vendor" value="Kyocera Mita"/>
126
+ <param pos="0" name="os.device" value="Multifunction Device"/>
127
+ <param pos="0" name="os.family" value="FS"/>
128
+ <param pos="1" name="os.product"/>
129
+ </fingerprint>
130
+ <fingerprint pattern="^(FS-(?:C)?\d+(?:D|DN))$">
131
+ <description>Kyocera Mita Printer</description>
132
+ <example>FS-C8500DN</example>
133
+ <example>FS-4100DN</example>
134
+ <example>FS-2020D</example>
135
+ <param pos="0" name="os.vendor" value="Kyocera Mita"/>
136
+ <param pos="0" name="os.device" value="Printer"/>
137
+ <param pos="0" name="os.family" value="FS"/>
138
+ <param pos="1" name="os.product"/>
139
+ </fingerprint>
140
+ <fingerprint pattern="^(TASKalfa \S+)$">
141
+ <description>Kyocera Mita TASKalfa multifunction device</description>
142
+ <example>TASKalfa 300ci</example>
143
+ <example>TASKalfa 520i</example>
144
+ <example>TASKalfa 250ci</example>
145
+ <param pos="0" name="os.vendor" value="Kyocera Mita"/>
146
+ <param pos="0" name="os.device" value="Multifunction Device"/>
147
+ <param pos="0" name="os.family" value="TASKalfa"/>
148
+ <param pos="1" name="os.product"/>
149
+ </fingerprint>
150
+ <fingerprint pattern="^Lexmark (.*)$">
151
+ <description>Lexmark JetDirect printer</description>
152
+ <example>Lexmark C910</example>
153
+ <example>Lexmark Optra LaserPrinter</example>
154
+ <example>Lexmark Optra S 1250</example>
155
+ <param pos="0" name="os.vendor" value="Lexmark"/>
156
+ <param pos="0" name="os.device" value="Printer"/>
157
+ <param pos="1" name="os.product"/>
158
+ </fingerprint>
159
+ <fingerprint pattern="(?i)^Oce (fx[^\s:]+):.*$">
160
+ <description>Oce FX series multifunction device</description>
161
+ <example os.product="fx3000">Oce fx3000:8C5-B29:Ver.D:U0707161719:B0601271355</example>
162
+ <param pos="0" name="os.vendor" value="Oce"/>
163
+ <param pos="0" name="os.family" value="FX Series"/>
164
+ <param pos="0" name="os.device" value="Multifunction Device"/>
165
+ <param pos="1" name="os.product"/>
166
+ </fingerprint>
167
+ <fingerprint pattern="(?i)^Oce (VL\S+):.*$">
168
+ <description>Oce VarioLink multifunction device</description>
169
+ <example>Oce VL3200:8C5-D92:Ver.B</example>
170
+ <param pos="0" name="os.vendor" value="Oce"/>
171
+ <param pos="0" name="os.family" value="VarioLink"/>
172
+ <param pos="0" name="os.device" value="Multifunction Device"/>
173
+ <param pos="1" name="os.product"/>
174
+ </fingerprint>
175
+ <!-- IGI is Imagistics International, which was acquired by Oce.
176
+ I can't find MX-MBX3 or any variant online. -->
177
+ <fingerprint pattern="(?i)^OceIGI MX-\S+">
178
+ <description>Oce-acquired IGI printer</description>
179
+ <example>OceIGI MX-NBX3 02-Jul-07 14:47</example>
180
+ <param pos="0" name="os.vendor" value="Oce"/>
181
+ <param pos="0" name="os.device" value="Printer"/>
182
+ </fingerprint>
183
+ <!-- im3510/4510 is actually a range of model numbers, but asserting a range
184
+ of models as a product is preferableto asserting nothing. -->
185
+ <fingerprint pattern="(?i)^Imagistics (im\S+) (.+)">
186
+ <description>Oce IM series multifunction device</description>
187
+ <example>Imagistics im3510/4510 02-Aug-04 10:56</example>
188
+ <param pos="0" name="os.vendor" value="Oce"/>
189
+ <param pos="0" name="os.family" value="IM Series"/>
190
+ <param pos="0" name="os.device" value="Multifunction Device"/>
191
+ <param pos="0" name="system.time.format" value="dd-MMM-yy HH:mm"/>
192
+ <param pos="1" name="os.product"/>
193
+ <param pos="2" name="system.time"/>
194
+ </fingerprint>
195
+ <!-- C610 is a series; there are several models with suffixes n, dn, dtn, cdn -->
196
+ <fingerprint pattern="^OKI (C\d+)\S*$">
197
+ <description>Okidata color printer</description>
198
+ <example>OKI C610</example>
199
+ <example>OKI C710</example>
200
+ <example>OKI C710dn</example>
201
+ <param pos="0" name="os.vendor" value="Okidata"/>
202
+ <param pos="0" name="os.device" value="Printer"/>
203
+ <param pos="1" name="os.product"/>
204
+ </fingerprint>
205
+ <fingerprint pattern="^OKI (MC\d+)\S*$">
206
+ <description>Okidata multifunction device</description>
207
+ <example>OKI MC860</example>
208
+ <param pos="0" name="os.vendor" value="Okidata"/>
209
+ <param pos="0" name="os.device" value="Multifunction Device"/>
210
+ <param pos="1" name="os.product"/>
211
+ </fingerprint>
212
+ <fingerprint pattern="(?i)^RICOH ((?:Aficio|MP|SP) .*)$">
213
+ <description>Ricoh Aficio Printer</description>
214
+ <example>RICOH Aficio 2075</example>
215
+ <example>RICOH Aficio AP610N</example>
216
+ <example>RICOH Aficio SP 8100DN</example>
217
+ <example>RICOH MP C1500/615C</example>
218
+ <param pos="0" name="os.vendor" value="Ricoh"/>
219
+ <param pos="0" name="os.family" value="Aficio"/>
220
+ <param pos="1" name="os.product"/>
221
+ <param pos="0" name="os.device" value="Printer"/>
222
+ </fingerprint>
223
+ <!-- NRG was acquired by Ricoh; classify NRG printers as such.
224
+ Be consistent with snmp_sysdescr.xml. -->
225
+ <fingerprint pattern="(?i)^NRG ([MS]P \S+)$">
226
+ <description>Ricoh NRG printer</description>
227
+ <example>NRG MP 171</example>
228
+ <example>NRG MP 3350</example>
229
+ <example>NRG MP C2550</example>
230
+ <example>NRG MP C2800</example>
231
+ <example>NRG MP C3500</example>
232
+ <example>NRG MP C4000</example>
233
+ <example>NRG MP C4500</example>
234
+ <example>NRG SP C231SF</example>
235
+ <param pos="0" name="os.vendor" value="Ricoh"/>
236
+ <param pos="0" name="os.device" value="Printer"/>
237
+ <param pos="1" name="os.product"/>
238
+ </fingerprint>
239
+ <!-- Gestetner == NRG, and was acquired by Ricoh.
240
+ Assert the range of products as os.product. -->
241
+ <fingerprint pattern="(?i)^Gestetner (MP\S+/DSc\S+)$">
242
+ <description>Ricoh Gestetner multifunction device</description>
243
+ <example>Gestetner MPC2500/DSc525</example>
244
+ <param pos="0" name="os.vendor" value="Ricoh"/>
245
+ <param pos="0" name="os.device" value="Multifunction Device"/>
246
+ <param pos="1" name="os.product"/>
247
+ </fingerprint>
248
+ <fingerprint pattern="(?i)^HYDRA$">
249
+ <description>RSI Hydra printer</description>
250
+ <example>HYDRA</example>
251
+ <param pos="0" name="os.vendor" value="RSI"/>
252
+ <param pos="0" name="os.device" value="Printer"/>
253
+ <param pos="0" name="os.product" value="Hydra"/>
254
+ </fingerprint>
255
+ <fingerprint pattern="(?i)^Savin (\S+)$">
256
+ <description>Savin Printer</description>
257
+ <example>SAVIN 4075</example>
258
+ <param pos="0" name="os.vendor" value="Savin"/>
259
+ <param pos="0" name="os.device" value="Printer"/>
260
+ <param pos="1" name="os.product"/>
261
+ </fingerprint>
262
+ <fingerprint pattern="(?i)^Samsung ((?:SCX|CLX)-\S+) Series$">
263
+ <description>Samsung multifunction device</description>
264
+ <example>Samsung SCX-5835_5935 Series</example>
265
+ <example>Samsung CLX-4195 Series</example>
266
+ <param pos="0" name="os.vendor" value="Samsung"/>
267
+ <param pos="0" name="os.device" value="Multifunction Device"/>
268
+ <param pos="1" name="os.product"/>
269
+ </fingerprint>
270
+ <fingerprint pattern="(?i)^Samsung ((?:ML|CLP)-\S+) Series$">
271
+ <description>Samsung printer</description>
272
+ <example>Samsung CLP-680 Series</example>
273
+ <example>Samsung ML-5012_5512 Series</example>
274
+ <param pos="0" name="os.vendor" value="Samsung"/>
275
+ <param pos="0" name="os.device" value="Printer"/>
276
+ <param pos="1" name="os.product"/>
277
+ </fingerprint>
278
+ <fingerprint pattern="(?i)^SHARP (\S+-\S+) .*$">
279
+ <description>Sharp Printer</description>
280
+ <example>Sharp MX-NBX3 18-Mar-08 10:22</example>
281
+ <example>Sharp AR-P17 24-Mar-04 19:55</example>
282
+ <param pos="0" name="os.vendor" value="Sharp"/>
283
+ <param pos="0" name="os.device" value="Printer"/>
284
+ <param pos="1" name="os.product"/>
285
+ </fingerprint>
286
+ <fingerprint pattern="(?i)^Source Technologies (\S+)$">
287
+ <description>Source Technologies Printer</description>
288
+ <example>Source Technologies ST-9620</example>
289
+ <param pos="0" name="os.vendor" value="Source Technologies"/>
290
+ <param pos="0" name="os.device" value="Printer"/>
291
+ <param pos="1" name="os.product"/>
292
+ </fingerprint>
293
+ <!-- Consistent with snmp_sysdescr.xml -->
294
+ <fingerprint pattern="^TOSHIBA (e-STUDIO\S+)(?:\s+.*)?" certainty="0.9">
295
+ <description>Toshiba e-STUDIO multifunction device</description>
296
+ <example>TOSHIBA e-STUDIO350 V468Z 20061013</example>
297
+ <example>TOSHIBA e-STUDIO350-450 V444Z 20041104</example>
298
+ <example>TOSHIBA e-STUDIO450 V468Z 20061013</example>
299
+ <example>TOSHIBA e-STUDIO500S</example>
300
+ <param pos="0" name="os.vendor" value="Toshiba"/>
301
+ <param pos="0" name="os.family" value="e-STUDIO"/>
302
+ <param pos="0" name="os.device" value="Multifunction Device"/>
303
+ <param pos="1" name="os.product"/>
304
+ </fingerprint>
305
+ <!-- TODO:
306
+ Xerox AccXES devices are documented to return:
307
+
308
+ "<printer name> <release #>"
309
+ <FF>
310
+
311
+ In the above, <printer name> is the official product name of the
312
+ AccXES printer, and <release #> corresponds to a software release
313
+ number.
314
+ -->
315
+ <fingerprint pattern="^(?:ID=)?Xerox (Phaser \S+)$" certainty="0.9">
316
+ <description>Xerox Phaser Printer</description>
317
+ <example>Xerox Phaser 6180MFP-D</example>
318
+ <example>ID=Xerox Phaser 5400</example>
319
+ <param pos="0" name="os.vendor" value="Xerox"/>
320
+ <param pos="0" name="os.family" value="Phaser"/>
321
+ <param pos="0" name="os.device" value="Printer"/>
322
+ <param pos="1" name="os.product"/>
323
+ </fingerprint>
324
+ <fingerprint pattern="^Xerox (WorkCentre .*)$" certainty="0.9">
325
+ <description>Xerox Workcentre Printer</description>
326
+ <example>Xerox WorkCentre 7425</example>
327
+ <example>Xerox WorkCentre Pro 245</example>
328
+ <example>Xerox WorkCentre Pro 55, v1 Multifunction System</example>
329
+ <param pos="0" name="os.vendor" value="Xerox"/>
330
+ <param pos="0" name="os.family" value="WorkCentre"/>
331
+ <param pos="1" name="os.product"/>
332
+ <param pos="0" name="os.device" value="Printer"/>
333
+ </fingerprint>
334
+ <fingerprint pattern="^(XC\S+)$" certainty="0.9">
335
+ <description>Xerox XC Printer</description>
336
+ <example>XC560</example>
337
+ <param pos="0" name="os.vendor" value="Xerox"/>
338
+ <param pos="0" name="os.family" value="XC"/>
339
+ <param pos="0" name="os.device" value="Printer"/>
340
+ <param pos="1" name="os.product"/>
341
+ </fingerprint>
342
+ <fingerprint pattern="^(DC\S+)$" certainty="0.9">
343
+ <description>Xerox DocuColor Printer</description>
344
+ <example>DC250</example>
345
+ <param pos="0" name="os.vendor" value="Xerox"/>
346
+ <param pos="0" name="os.family" value="DocuColor"/>
347
+ <param pos="0" name="os.device" value="Printer"/>
348
+ <param pos="1" name="os.product"/>
349
+ </fingerprint>
350
+ <fingerprint pattern="^(EX\d+-\d+)$" certainty="0.9">
351
+ <description>Xerox EX Print Server, powered by EFI Fiery</description>
352
+ <example>EX4112-4127</example>
353
+ <param pos="0" name="os.vendor" value="Xerox"/>
354
+ <param pos="0" name="os.family" value="EX"/>
355
+ <param pos="0" name="os.device" value="Print server"/>
356
+ <param pos="1" name="os.product"/>
357
+ </fingerprint>
358
+ </fingerprints>
@@ -0,0 +1,1630 @@
1
+ <?xml version="1.0" encoding="UTF-8"?>
2
+ <fingerprints matches="html_title" database_type="service" preference="0.90">
3
+
4
+ <!-- HTML Title elements found in HTTP response bodies are matched against these patterns to fingerprint HTTP servers. -->
5
+
6
+ <fingerprint pattern="^Index of /">
7
+ <description>Apache HTTPD indexes</description>
8
+ <example>Index of /</example>
9
+ <param pos="0" name="service.vendor" value="Apache"/>
10
+ <param pos="0" name="service.product" value="HTTPD"/>
11
+ <param pos="0" name="service.family" value="Apache"/>
12
+ <param pos="0" name="service.cpe23" value="cpe:/a:apache:http_server:-"/>
13
+ </fingerprint>
14
+
15
+ <fingerprint pattern="^Test Page for the Nginx HTTP Server on (?:the )?Amazon Linux(?: AMI)?$">
16
+ <description>Apache HTTPD default installation on Amazon Linux</description>
17
+ <example>Test Page for the Nginx HTTP Server on the Amazon Linux AMI</example>
18
+ <example>Test Page for the Nginx HTTP Server on Amazon Linux</example>
19
+ <param pos="0" name="service.vendor" value="Apache"/>
20
+ <param pos="0" name="service.product" value="HTTPD"/>
21
+ <param pos="0" name="service.family" value="Apache"/>
22
+ <param pos="0" name="service.cpe23" value="cpe:/a:apache:http_server:-"/>
23
+ <param pos="0" name="os.vendor" value="Amazon"/>
24
+ <param pos="0" name="os.family" value="Linux"/>
25
+ <param pos="0" name="os.product" value="Linux AMI"/>
26
+ </fingerprint>
27
+
28
+ <fingerprint pattern="^Apache HTTP Server Test Page powered by CentOS$">
29
+ <description>Apache HTTPD default installation on CentOS</description>
30
+ <example>Apache HTTP Server Test Page powered by CentOS</example>
31
+ <param pos="0" name="service.vendor" value="Apache"/>
32
+ <param pos="0" name="service.product" value="HTTPD"/>
33
+ <param pos="0" name="service.family" value="Apache"/>
34
+ <param pos="0" name="service.cpe23" value="cpe:/a:apache:http_server:-"/>
35
+ <param pos="0" name="os.vendor" value="CentOS"/>
36
+ <param pos="0" name="os.family" value="Linux"/>
37
+ <param pos="0" name="os.product" value="Linux"/>
38
+ <param pos="0" name="os.cpe23" value="cpe:/o:centos:centos:-"/>
39
+ </fingerprint>
40
+
41
+ <fingerprint pattern="^Apache2 Debian Default Page: It works$">
42
+ <description>Apache HTTPD default installation on Debian</description>
43
+ <example>Apache2 Debian Default Page: It works</example>
44
+ <param pos="0" name="service.vendor" value="Apache"/>
45
+ <param pos="0" name="service.product" value="HTTPD"/>
46
+ <param pos="0" name="service.family" value="Apache"/>
47
+ <param pos="0" name="service.cpe23" value="cpe:/a:apache:http_server:-"/>
48
+ <param pos="0" name="os.vendor" value="Debian"/>
49
+ <param pos="0" name="os.product" value="Linux"/>
50
+ <param pos="0" name="os.cpe23" value="cpe:/o:debian:debian_linux:-"/>
51
+ </fingerprint>
52
+
53
+ <fingerprint pattern="^Apache2 Ubuntu Default Page: It works$">
54
+ <description>Apache HTTPD default installation on Ubuntu</description>
55
+ <example>Apache2 Ubuntu Default Page: It works</example>
56
+ <param pos="0" name="service.vendor" value="Apache"/>
57
+ <param pos="0" name="service.product" value="HTTPD"/>
58
+ <param pos="0" name="service.family" value="Apache"/>
59
+ <param pos="0" name="service.cpe23" value="cpe:/a:apache:http_server:-"/>
60
+ <param pos="0" name="os.vendor" value="Ubuntu"/>
61
+ <param pos="0" name="os.product" value="Linux"/>
62
+ <param pos="0" name="os.cpe23" value="cpe:/o:canonical:ubuntu_linux:-"/>
63
+ </fingerprint>
64
+
65
+ <fingerprint pattern="^Sample Home Page for APACHEDFT Server$">
66
+ <description>IBM iSeries Apache Default Page</description>
67
+ <example>Sample Home Page for APACHEDFT Server</example>
68
+ <param pos="0" name="os.vendor" value="IBM"/>
69
+ <param pos="0" name="os.family" value="OS/400"/>
70
+ <param pos="0" name="os.product" value="OS/400"/>
71
+ <param pos="0" name="os.cpe23" value="cpe:/o:ibm:os_400:-"/>
72
+ <param pos="0" name="service.vendor" value="Apache"/>
73
+ <param pos="0" name="service.product" value="HTTPD"/>
74
+ <param pos="0" name="service.family" value="Apache"/>
75
+ <param pos="0" name="service.cpe23" value="cpe:/a:apache:http_server:-"/>
76
+ </fingerprint>
77
+
78
+ <fingerprint pattern="^Apache Tomcat$">
79
+ <description>Apache Tomcat with no version</description>
80
+ <example>Apache Tomcat</example>
81
+ <param pos="0" name="service.vendor" value="Apache"/>
82
+ <param pos="0" name="service.product" value="Tomcat"/>
83
+ <param pos="0" name="service.family" value="Tomcat"/>
84
+ <param pos="0" name="service.cpe23" value="cpe:/a:apache:tomcat:-"/>
85
+ </fingerprint>
86
+
87
+ <fingerprint pattern="^Apache Tomcat/(\S+)$">
88
+ <description>Apache tomcat with minimal version information</description>
89
+ <example service.version="8.0.32">Apache Tomcat/8.0.32</example>
90
+ <param pos="0" name="service.vendor" value="Apache"/>
91
+ <param pos="0" name="service.product" value="Tomcat"/>
92
+ <param pos="0" name="service.family" value="Tomcat"/>
93
+ <param pos="1" name="service.version"/>
94
+ <param pos="0" name="service.cpe23" value="cpe:/a:apache:tomcat:{service.version}"/>
95
+ </fingerprint>
96
+
97
+ <fingerprint pattern="^AiCloud">
98
+ <description>ASUS AiCloud</description>
99
+ <example>AiCloud</example>
100
+ <param pos="0" name="hw.vendor" value="Asus"/>
101
+ <param pos="0" name="hw.device" value="WAP"/>
102
+ </fingerprint>
103
+
104
+ <!-- HiSilicon is OEMd by a number of DVR manufacturers -->
105
+ <fingerprint pattern="^DVR Components Download$">
106
+ <description>Web server found on DVR and webcam servers sourced from HiSilicon</description>
107
+ <example>DVR Components Download</example>
108
+ <param pos="0" name="service.vendor" value="HiSilicon"/>
109
+ <param pos="0" name="service.product" value="Cross Web Server"/>
110
+ <param pos="0" name="os.vendor" value="HiSilicon"/>
111
+ <param pos="0" name="os.device" value="DVR"/>
112
+ <param pos="0" name="hw.device" value="DVR"/>
113
+ </fingerprint>
114
+
115
+ <fingerprint pattern="^FRITZ!Box$">
116
+ <description>AVM FRITZ!Box</description>
117
+ <example>FRITZ!Box</example>
118
+ <param pos="0" name="hw.vendor" value="AVM"/>
119
+ <param pos="0" name="hw.device" value="WAP"/>
120
+ <param pos="0" name="hw.family" value="FRITZ!Box"/>
121
+ </fingerprint>
122
+
123
+ <fingerprint pattern="^FRITZ!Powerline$">
124
+ <description>AVM FRITZ!Powerline</description>
125
+ <example>FRITZ!Powerline</example>
126
+ <param pos="0" name="hw.vendor" value="AVM"/>
127
+ <param pos="0" name="hw.device" value="Powerline"/>
128
+ <param pos="0" name="hw.family" value="FRITZ!Powerline"/>
129
+ </fingerprint>
130
+
131
+ <fingerprint pattern="^FRITZ!WLAN Repeater$">
132
+ <description>FRITZ!WLAN Repeater</description>
133
+ <example>FRITZ!WLAN Repeater</example>
134
+ <param pos="0" name="hw.vendor" value="AVM"/>
135
+ <param pos="0" name="hw.device" value="WLAN Repeater"/>
136
+ <param pos="0" name="hw.family" value="FRITZ!WLAN Repeater"/>
137
+ </fingerprint>
138
+
139
+ <fingerprint pattern="^cPanel Login$">
140
+ <description>cPanel</description>
141
+ <example>cPanel Login</example>
142
+ <param pos="0" name="service.vendor" value="cPanel"/>
143
+ <param pos="0" name="service.product" value="cPanel"/>
144
+ <param pos="0" name="service.cpe23" value="cpe:/a:cpanel:cpanel:-"/>
145
+ </fingerprint>
146
+
147
+ <fingerprint pattern="^WHM Login$">
148
+ <description>cPanel Web Host Manager</description>
149
+ <example>WHM Login</example>
150
+ <param pos="0" name="service.vendor" value="cPanel"/>
151
+ <param pos="0" name="service.product" value="WHM"/>
152
+ <param pos="0" name="service.cpe23" value="cpe:/a:cpanel:whm:-"/>
153
+ </fingerprint>
154
+
155
+ <fingerprint pattern="^Windows CE$">
156
+ <description>Windows CE</description>
157
+ <example>Windows CE</example>
158
+ <param pos="0" name="os.vendor" value="Microsoft"/>
159
+ <param pos="0" name="os.family" value="Windows"/>
160
+ <param pos="0" name="os.product" value="Windows CE"/>
161
+ <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows-ce:-"/>
162
+ </fingerprint>
163
+
164
+ <fingerprint pattern="^IIS7$">
165
+ <description>Default IIS 7</description>
166
+ <example>IIS7</example>
167
+ <param pos="0" name="service.vendor" value="Microsoft"/>
168
+ <param pos="0" name="service.product" value="IIS"/>
169
+ <param pos="0" name="service.family" value="IIS"/>
170
+ <param pos="0" name="service.version" value="7"/>
171
+ <param pos="0" name="service.cpe23" value="cpe:/a:microsoft:iis:{service.version}"/>
172
+ <param pos="0" name="os.vendor" value="Microsoft"/>
173
+ <param pos="0" name="os.family" value="Windows"/>
174
+ <param pos="0" name="os.product" value="Windows"/>
175
+ <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows:-"/>
176
+ </fingerprint>
177
+
178
+ <fingerprint pattern="^Microsoft Internet Information Services 8">
179
+ <description>Default IIS 8</description>
180
+ <example>Microsoft Internet Information Services 8</example>
181
+ <param pos="0" name="service.vendor" value="Microsoft"/>
182
+ <param pos="0" name="service.product" value="IIS"/>
183
+ <param pos="0" name="service.family" value="IIS"/>
184
+ <param pos="0" name="service.version" value="8"/>
185
+ <param pos="0" name="service.cpe23" value="cpe:/a:microsoft:iis:{service.version}"/>
186
+ <param pos="0" name="os.vendor" value="Microsoft"/>
187
+ <param pos="0" name="os.family" value="Windows"/>
188
+ <param pos="0" name="os.product" value="Windows"/>
189
+ <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows:-"/>
190
+ </fingerprint>
191
+
192
+ <fingerprint pattern="^IIS (\d\.\d) Detailed Error">
193
+ <description>IIS Detailed Error</description>
194
+ <example service.version="7.0">IIS 7.0 Detailed Error - 401.2 - Unauthorized</example>
195
+ <example service.version="8.0">IIS 8.0 Detailed Error - 403.14 - Forbidden</example>
196
+ <example service.version="8.5">IIS 8.5 Detailed Error - 403.14 - Forbidden</example>
197
+ <param pos="0" name="service.vendor" value="Microsoft"/>
198
+ <param pos="0" name="service.product" value="IIS"/>
199
+ <param pos="0" name="service.family" value="IIS"/>
200
+ <param pos="1" name="service.version"/>
201
+ <param pos="0" name="service.cpe23" value="cpe:/a:microsoft:iis:{service.version}"/>
202
+ <param pos="0" name="os.vendor" value="Microsoft"/>
203
+ <param pos="0" name="os.family" value="Windows"/>
204
+ <param pos="0" name="os.product" value="Windows"/>
205
+ <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows:-"/>
206
+ </fingerprint>
207
+
208
+ <fingerprint pattern="^IIS Windows(?: Server)?$">
209
+ <description>Default IIS</description>
210
+ <example>IIS Windows</example>
211
+ <example>IIS Windows Server</example>
212
+ <param pos="0" name="service.vendor" value="Microsoft"/>
213
+ <param pos="0" name="service.product" value="IIS"/>
214
+ <param pos="0" name="service.family" value="IIS"/>
215
+ <param pos="0" name="os.vendor" value="Microsoft"/>
216
+ <param pos="0" name="os.family" value="Windows"/>
217
+ <param pos="0" name="os.product" value="Windows"/>
218
+ <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows:-"/>
219
+ </fingerprint>
220
+
221
+ <fingerprint pattern="^(?:NETIASPOT Management Console|Konsola zarzdzania NETIASPOT)$">
222
+ <description>Netia Spot wireless router</description>
223
+ <example>Konsola zarzdzania NETIASPOT</example>
224
+ <example>NETIASPOT Management Console</example>
225
+ <param pos="0" name="hw.vendor" value="Netia"/>
226
+ <param pos="0" name="hw.product" value="Spot"/>
227
+ <param pos="0" name="hw.product" value="WAP"/>
228
+ </fingerprint>
229
+
230
+ <fingerprint pattern="^hue personal wireless lighting$">
231
+ <description>Philips Hue Personal Wireless Lighting</description>
232
+ <example>hue personal wireless lighting</example>
233
+ <param pos="0" name="hw.vendor" value="Philips"/>
234
+ <param pos="0" name="hw.product" value="Hue"/>
235
+ <param pos="0" name="hw.device" value="Light Bulb"/>
236
+ </fingerprint>
237
+
238
+ <fingerprint pattern="LANDesk\(R\) Management Agent$">
239
+ <description>LANDesk Management Agent</description>
240
+ <param pos="0" name="service.vendor" value="LANDesk"/>
241
+ <param pos="0" name="service.product" value="Management Agent"/>
242
+ <param pos="0" name="service.family" value="Management Agent"/>
243
+ <param pos="0" name="service.cpe23" value="cpe:/a:landesk:management_agent:-"/>
244
+ </fingerprint>
245
+
246
+ <fingerprint pattern="^(?:Parallels )?Plesk (?:(?:Onyx|Panel) )?([\d\.]+)$">
247
+ <description>Plesk web hosting platform with a version</description>
248
+ <example service.version="12.0.18">Plesk 12.0.18</example>
249
+ <example service.version="17.5.3">Plesk Onyx 17.5.3</example>
250
+ <example service.version="12.0.1">Parallels Plesk 12.0.1</example>
251
+ <example service.version="11.5.30">Parallels Plesk Panel 11.5.30</example>
252
+ <param pos="0" name="service.vendor" value="Plesk"/>
253
+ <param pos="0" name="service.product" value="Plesk"/>
254
+ <param pos="1" name="service.version"/>
255
+ <param pos="0" name="service.cpe23" value="cpe:/a:plesk:plesk:{service.version}"/>
256
+ </fingerprint>
257
+
258
+ <fingerprint pattern="^(?:Parallels )?Plesk (?:(?:Onyx|Panel) )?([\d\.]+) for Microsoft Windows$">
259
+ <description>Plesk web hosting platform with a version on Windows</description>
260
+ <example service.version="12.5.30">Plesk 12.5.30 for Microsoft Windows</example>
261
+ <example service.version="11.5.30">Parallels Plesk Panel 11.5.30 for Microsoft Windows</example>
262
+ <param pos="0" name="service.vendor" value="Plesk"/>
263
+ <param pos="0" name="service.product" value="Plesk"/>
264
+ <param pos="1" name="service.version"/>
265
+ <param pos="0" name="service.cpe23" value="cpe:/a:plesk:plesk:{service.version}"/>
266
+ <param pos="0" name="os.vendor" value="Microsoft"/>
267
+ <param pos="0" name="os.family" value="Windows"/>
268
+ <param pos="0" name="os.product" value="Windows"/>
269
+ <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows:-"/>
270
+ </fingerprint>
271
+
272
+ <fingerprint pattern="^(?i)Default (?:Parallels )?Plesk (?:Panel )?Page$">
273
+ <description>Plesk web hosting platform with no version</description>
274
+ <example>Default Parallels Plesk Panel Page</example>
275
+ <example>Default Parallels Plesk Page</example>
276
+ <example>Default PLESK Page</example>
277
+ <param pos="0" name="service.vendor" value="Plesk"/>
278
+ <param pos="0" name="service.product" value="Plesk"/>
279
+ <param pos="0" name="service.cpe23" value="cpe:/a:plesk:plesk:-"/>
280
+ </fingerprint>
281
+
282
+ <fingerprint pattern="^Web Viewer for Samsung DVR$">
283
+ <description>Samsung DVRs</description>
284
+ <example>Web Viewer for Samsung DVR</example>
285
+ <param pos="0" name="hw.vendor" value="Samsung"/>
286
+ <param pos="0" name="hw.device" value="DVR"/>
287
+ </fingerprint>
288
+
289
+ <fingerprint pattern="^(?i)(?:Dell )?Sonicwall - Authentication$">
290
+ <description>Sonicwall firewalls</description>
291
+ <example>SonicWall - Authentication</example>
292
+ <param pos="0" name="os.vendor" value="SonicWall"/>
293
+ <param pos="0" name="os.device" value="Firewall"/>
294
+ <param pos="0" name="os.family" value="SonicOS"/>
295
+ </fingerprint>
296
+
297
+ <fingerprint pattern="^(.*).nbsp;-.nbsp;Synology.nbsp;DiskStation$">
298
+ <description>Synology DiskStation</description>
299
+ <example host.name="DiskStation">DiskStation&amp;nbsp;-&amp;nbsp;Synology&amp;nbsp;DiskStation</example>
300
+ <example host.name="DS218">DS218&amp;nbsp;-&amp;nbsp;Synology&amp;nbsp;DiskStation</example>
301
+ <param pos="0" name="hw.vendor" value="Synology"/>
302
+ <param pos="0" name="hw.family" value="DiskStation"/>
303
+ <param pos="0" name="hw.device" value="NAS"/>
304
+ <param pos="0" name="os.device" value="NAS"/>
305
+ <param pos="0" name="os.family" value="Linux"/>
306
+ <param pos="0" name="os.product" value="DSM"/>
307
+ <param pos="0" name="os.vendor" value="Synology"/>
308
+ <param pos="1" name="host.name"/>
309
+ </fingerprint>
310
+
311
+ <fingerprint pattern="Synology Web Station!$">
312
+ <description>Synology with WebStation web hosting</description>
313
+ <example>Hello! Welcome to Synology Web Station!</example>
314
+ <example>Hallo! Herzlich Willkommen bei Synology Web Station!</example>
315
+ <param pos="0" name="hw.vendor" value="Synology"/>
316
+ <param pos="0" name="hw.family" value="DiskStation"/>
317
+ <param pos="0" name="hw.device" value="NAS"/>
318
+ <param pos="0" name="os.device" value="NAS"/>
319
+ <param pos="0" name="os.family" value="Linux"/>
320
+ <param pos="0" name="os.product" value="DSM"/>
321
+ <param pos="0" name="os.vendor" value="Synology"/>
322
+ </fingerprint>
323
+
324
+ <fingerprint pattern="^Web Filter Block Override$">
325
+ <description>Fortinet FortiGate/Fortiguard Web Filter</description>
326
+ <example>Web Filter Block Override</example>
327
+ <param pos="0" name="os.vendor" value="Fortinet"/>
328
+ <param pos="0" name="os.family" value="FortiOS"/>
329
+ <param pos="0" name="os.product" value="FortiOS"/>
330
+ <param pos="0" name="os.device" value="Firewall"/>
331
+ <param pos="0" name="os.cpe23" value="cpe:/o:fortinet:fortios:-"/>
332
+ <param pos="0" name="hw.vendor" value="Fortinet"/>
333
+ <param pos="0" name="hw.family" value="FortiGate"/>
334
+ <param pos="0" name="hw.device" value="Firewall"/>
335
+ </fingerprint>
336
+
337
+ <!-- Various products by Ubiquiti networks -->
338
+ <fingerprint pattern="^Ubiquiti Networks$">
339
+ <description>Generic products by Ubiquiti Networks</description>
340
+ <example>Ubiquiti Networks</example>
341
+ <param pos="0" name="hw.vendor" value="Ubiquiti"/>
342
+ </fingerprint>
343
+
344
+ <fingerprint pattern="^UniFi Security Gateway$">
345
+ <description>Ubiquiti Security Gateway</description>
346
+ <example>UniFi Security Gateway</example>
347
+ <param pos="0" name="hw.vendor" value="Ubiquiti"/>
348
+ <param pos="0" name="hw.device" value="Router"/>
349
+ <param pos="0" name="hw.product" value="UniFi Security Gateway"/>
350
+ </fingerprint>
351
+
352
+ <fingerprint pattern="^EdgeOS$">
353
+ <description>Ubiquiti EdgeRouter/EdgeSwitch/etc</description>
354
+ <example>EdgeOS</example>
355
+ <param pos="0" name="hw.vendor" value="Ubiquiti"/>
356
+ </fingerprint>
357
+
358
+ <fingerprint pattern="^CloudKey$">
359
+ <description>Ubiquiti UniFi Cloud Key</description>
360
+ <example>CloudKey</example>
361
+ <param pos="0" name="hw.vendor" value="Ubiquiti"/>
362
+ <param pos="0" name="hw.product" value="UniFi Cloud Key"/>
363
+ </fingerprint>
364
+
365
+ <fingerprint pattern="^airCube$">
366
+ <description>Ubiquiti airCube WAP</description>
367
+ <example>airCube</example>
368
+ <param pos="0" name="hw.vendor" value="Ubiquiti"/>
369
+ <param pos="0" name="hw.product" value="airCube"/>
370
+ <param pos="0" name="hw.device" value="WAP"/>
371
+ </fingerprint>
372
+
373
+ <fingerprint pattern="^UniFi Video$">
374
+ <description>Various UniFi Video web service</description>
375
+ <example>UniFi Video</example>
376
+ <param pos="0" name="service.vendor" value="Ubiquiti"/>
377
+ <param pos="0" name="service.product" value="UniFi Video"/>
378
+ <param pos="0" name="service.cpe23" value="cpe:/a:ubiquiti:unifi_video:-"/>
379
+ </fingerprint>
380
+
381
+ <fingerprint pattern="^UniFi NVR: Software Portal$">
382
+ <description>UniFi NVR for recording from UniFi video cameras</description>
383
+ <example>UniFi NVR: Software Portal</example>
384
+ <param pos="0" name="hw.vendor" value="Ubiquiti"/>
385
+ <param pos="0" name="hw.family" value="UniFi"/>
386
+ <param pos="0" name="hw.family" value="UniFi NVR"/>
387
+ <param pos="0" name="hw.device" value="DVR"/>
388
+ </fingerprint>
389
+
390
+ <fingerprint pattern="^RomPager Embedded Web Server Toolkit$">
391
+ <description>Embedded HTTP server used by many vendors and device
392
+ types, including APC, 3Com, Andover Controls, Cisco VoIP, D-Link,
393
+ Extreme Networks, Foundry Networks, Konica Minolta, Kronos
394
+ Timekeeper, McDATA, Netopia, Nortel Networks, Power Measurement Ltd,
395
+ and Xerox.</description>
396
+ <example>RomPager Embedded Web Server Toolkit</example>
397
+ <param pos="0" name="service.vendor" value="Allegro Software"/>
398
+ <param pos="0" name="service.product" value="RomPager"/>
399
+ </fingerprint>
400
+
401
+ <fingerprint pattern="^RouterOS router configuration page$">
402
+ <description>MikroTik RouterOS router configuration page</description>
403
+ <example>RouterOS router configuration page</example>
404
+ <param pos="0" name="os.vendor" value="MikroTik"/>
405
+ <param pos="0" name="os.device" value="Router"/>
406
+ <param pos="0" name="os.product" value="RouterOS"/>
407
+ <param pos="0" name="os.cpe23" value="cpe:/o:mikrotik:routeros:-"/>
408
+ <param pos="0" name="hw.vendor" value="MikroTik"/>
409
+ <param pos="0" name="hw.device" value="Router"/>
410
+ </fingerprint>
411
+
412
+ <fingerprint pattern="^(?:Welcome to nginx!|Test Page for the Nginx HTTP Server)$">
413
+ <description>Default OS-agnostic nginx</description>
414
+ <example>Welcome to nginx!</example>
415
+ <example>Test Page for the Nginx HTTP Server</example>
416
+ <param pos="0" name="service.product" value="nginx"/>
417
+ <param pos="0" name="service.family" value="nginx"/>
418
+ <param pos="0" name="service.vendor" value="nginx"/>
419
+ <param pos="0" name="service.cpe23" value="cpe:/a:nginx:nginx:-"/>
420
+ </fingerprint>
421
+
422
+ <fingerprint pattern="^Test Page for the Nginx HTTP Server on (?:Fedora|EPEL)$">
423
+ <description>Default nginx on Fedora</description>
424
+ <example>Test Page for the Nginx HTTP Server on Fedora</example>
425
+ <param pos="0" name="service.product" value="nginx"/>
426
+ <param pos="0" name="service.family" value="nginx"/>
427
+ <param pos="0" name="service.vendor" value="nginx"/>
428
+ <param pos="0" name="service.cpe23" value="cpe:/a:nginx:nginx:-"/>
429
+ <param pos="0" name="os.family" value="Linux"/>
430
+ <param pos="0" name="os.vendor" value="Red Hat"/>
431
+ <param pos="0" name="os.product" value="Fedora Core Linux"/>
432
+ <param pos="0" name="os.cpe23" value="cpe:/o:redhat:fedora_core:-"/>
433
+ </fingerprint>
434
+
435
+ <fingerprint pattern="^Welcome to nginx on Debian!$">
436
+ <description>Default nginx on Debian</description>
437
+ <example>Welcome to nginx on Debian!</example>
438
+ <param pos="0" name="service.product" value="nginx"/>
439
+ <param pos="0" name="service.family" value="nginx"/>
440
+ <param pos="0" name="service.vendor" value="nginx"/>
441
+ <param pos="0" name="service.cpe23" value="cpe:/a:nginx:nginx:-"/>
442
+ <param pos="0" name="os.vendor" value="Debian"/>
443
+ <param pos="0" name="os.product" value="Linux"/>
444
+ <param pos="0" name="os.cpe23" value="cpe:/o:debian:debian_linux:-"/>
445
+ </fingerprint>
446
+
447
+ <fingerprint pattern="^Eagle Eye Networks ">
448
+ <description>Eagle Eye Networks to manage IoT cameras home webpage</description>
449
+ <example>Eagle Eye Networks (Local)</example>
450
+ <param pos="0" name="hw.product" value="Bridge"/>
451
+ <param pos="0" name="hw.vendor" value="Eagle Eye Networks"/>
452
+ </fingerprint>
453
+ <fingerprint pattern="^Web Local Display Unauthorized$">
454
+ <description>Eagle Eye Networks to manage IoT cameras unauthorized webpage</description>
455
+ <example>Web Local Display Unauthorized</example>
456
+ <param pos="0" name="hw.product" value=" Bridge"/>
457
+ <param pos="0" name="hw.vendor" value="Eagle Eye Networks"/>
458
+ </fingerprint>
459
+
460
+ <!-- Netgear Products -->
461
+ <fingerprint pattern="^(?:NETGEAR|NetGear) ([a-zA-Z0-9\-\+]+)$">
462
+ <description>Netgear Switches</description>
463
+ <example hw.product="GS108T">NETGEAR GS108T</example>
464
+ <example hw.product="M4100-24G-POE+">NETGEAR M4100-24G-POE+</example>
465
+ <example hw.product="GS748T">NetGear GS748T</example>
466
+ <param pos="0" name="hw.vendor" value="Netgear"/>
467
+ <param pos="0" name="hw.device" value="Switch"/>
468
+ <param pos="1" name="hw.product"/>
469
+ </fingerprint>
470
+
471
+ <fingerprint pattern="^(?:NETGEAR|NetGear) Router ([a-zA-Z0-9\-\+]+)$">
472
+ <description>Netgear Routers</description>
473
+ <example hw.product="WNR2000v4">NETGEAR Router WNR2000v4</example>
474
+ <example hw.product="R6100">NETGEAR Router R6100</example>
475
+ <param pos="0" name="hw.vendor" value="Netgear"/>
476
+ <param pos="0" name="hw.device" value="Router"/>
477
+ <param pos="1" name="hw.product"/>
478
+ </fingerprint>
479
+
480
+ <fingerprint pattern="^Netgear Prosafe Plus Switch$">
481
+ <description>Netgear Prosafe Plus Switch</description>
482
+ <example>Netgear Prosafe Plus Switch</example>
483
+ <param pos="0" name="hw.vendor" value="Netgear"/>
484
+ <param pos="0" name="hw.device" value="Switch"/>
485
+ <param pos="0" name="hw.product" value="Prosafe Plus"/>
486
+ </fingerprint>
487
+
488
+ <fingerprint pattern="^(.*).nbsp;Configuration and Management$">
489
+ <description>Digi Terminal Servers</description>
490
+ <example hw.product="Digi One SP">Digi One SP&amp;nbsp;Configuration and Management</example>
491
+ <example hw.product="PortServer TS 4">PortServer TS 4&amp;nbsp;Configuration and Management</example>
492
+ <example hw.product="PortServer TS 4 H MEI">PortServer TS 4 H MEI&amp;nbsp;Configuration and Management</example>
493
+ <param pos="0" name="hw.vendor" value="Digi"/>
494
+ <param pos="0" name="hw.device" value="Device Server"/>
495
+ <param pos="1" name="hw.product"/>
496
+ <param pos="0" name="os.vendor" value="Digi"/>
497
+ <param pos="0" name="os.device" value="Device Server"/>
498
+ <param pos="0" name="os.product" value="NET+OS"/>
499
+ </fingerprint>
500
+
501
+ <fingerprint pattern="^NPort Web Console$">
502
+ <description>Moxa NPort Terminal Servers</description>
503
+ <example>NPort Web Console</example>
504
+ <param pos="0" name="hw.vendor" value="Moxa"/>
505
+ <param pos="0" name="hw.device" value="Device Server"/>
506
+ <param pos="0" name="hw.product" value="NPort"/>
507
+ </fingerprint>
508
+
509
+ <fingerprint pattern="^Lantronix (SL[BC].*)$">
510
+ <description>Lantronix terminal server</description>
511
+ <example hw.product="SLB882/8824">Lantronix SLB882/8824</example>
512
+ <example hw.product="SLB">Lantronix SLB</example>
513
+ <example hw.product="SLC 8048">Lantronix SLC 8048</example>
514
+ <param pos="0" name="hw.vendor" value="Lantronix"/>
515
+ <param pos="0" name="hw.device" value="Device Server"/>
516
+ <param pos="1" name="hw.product"/>
517
+ </fingerprint>
518
+
519
+ <fingerprint pattern="^(KN\S+) - Cover$">
520
+ <description>ATEN KVM over IP</description>
521
+ <example hw.product="KN4140v">KN4140v - Cover</example>
522
+ <example hw.product="KN4132">KN4132 - Cover</example>
523
+ <param pos="0" name="hw.vendor" value="ATEN"/>
524
+ <param pos="0" name="hw.device" value="KVM"/>
525
+ <param pos="1" name="hw.product"/>
526
+ </fingerprint>
527
+
528
+ <fingerprint pattern="^Ethernet Relay Module$">
529
+ <description>AVT.pl Ethernet Relay Module</description>
530
+ <example>Ethernet Relay Module</example>
531
+ <param pos="0" name="hw.vendor" value="AVT"/>
532
+ <param pos="0" name="hw.device" value="Power Relay"/>
533
+ <param pos="0" name="hw.product" value="Ethernet Relay Module"/>
534
+ </fingerprint>
535
+
536
+ <fingerprint pattern="^Inveo Lantick Ethernet Relay Controller$">
537
+ <description>Inveo Lantick Ethernet Relay Controller</description>
538
+ <example>Inveo Lantick Ethernet Relay Controller</example>
539
+ <param pos="0" name="hw.vendor" value="Inveo"/>
540
+ <param pos="0" name="hw.device" value="Power Relay"/>
541
+ <param pos="0" name="hw.product" value="Lantick Ethernet Relay Controller"/>
542
+ </fingerprint>
543
+
544
+ <fingerprint pattern="^(myUTN(?:-[a-zA-Z0-9]+)?) Control Center$">
545
+ <description>myUTN Device Server</description>
546
+ <example hw.product="myUTN-50a">myUTN-50a Control Center</example>
547
+ <example hw.product="myUTN">myUTN Control Center</example>
548
+ <param pos="0" name="hw.vendor" value="SEH Technology"/>
549
+ <param pos="0" name="hw.device" value="Device Server"/>
550
+ <param pos="1" name="hw.product"/>
551
+ </fingerprint>
552
+
553
+ <fingerprint pattern="^iCOM Control Board$">
554
+ <description>Liebert iCOM Cooling Unit Control Board</description>
555
+ <example>iCOM Control Board</example>
556
+ <param pos="0" name="hw.vendor" value="Liebert"/>
557
+ <param pos="0" name="hw.device" value="Environment Control"/>
558
+ <param pos="0" name="hw.product" value="iCOM Control Panel"/>
559
+ </fingerprint>
560
+
561
+ <fingerprint pattern="^Sigma Control 2$">
562
+ <description>Sigma Control 2 Air Compressor Controls</description>
563
+ <example>Sigma Control 2</example>
564
+ <param pos="0" name="hw.vendor" value="Kaeser Compressors"/>
565
+ <param pos="0" name="hw.device" value="Environment Control"/>
566
+ <param pos="0" name="hw.product" value="Sigma Control 2"/>
567
+ </fingerprint>
568
+
569
+
570
+
571
+
572
+ <fingerprint pattern="^WebPower$">
573
+ <description>Eltek Power Controller</description>
574
+ <example>WebPower</example>
575
+ <param pos="0" name="hw.vendor" value="Eltek"/>
576
+ <param pos="0" name="hw.device" value="Power device"/>
577
+ </fingerprint>
578
+
579
+ <fingerprint pattern="(Expert Power Control NET \d+x\d+) - (.*)$">
580
+ <description>Gude Expert Power Control</description>
581
+ <example host.name="Rack42" hw.product="Expert Power Control NET 2x6">Expert Power Control NET 2x6 - Rack42</example>
582
+ <param pos="0" name="hw.vendor" value="Gude"/>
583
+ <param pos="0" name="hw.device" value="Power device"/>
584
+ <param pos="1" name="hw.product"/>
585
+ <param pos="2" name="host.name"/>
586
+ </fingerprint>
587
+
588
+ <fingerprint pattern="^Sentry Switched CDU$">
589
+ <description>Sentry Switched CDU</description>
590
+ <example>Sentry Switched CDU</example>
591
+ <param pos="0" name="hw.vendor" value="ServerTech"/>
592
+ <param pos="0" name="hw.device" value="Power device"/>
593
+ <param pos="0" name="hw.product" value="Sentry Switched CDU"/>
594
+ </fingerprint>
595
+
596
+ <fingerprint pattern="^Emerson Network Power Rack PDU Card$">
597
+ <description>Emerson Network Power Rack PDU Card</description>
598
+ <example>Emerson Network Power Rack PDU Card</example>
599
+ <param pos="0" name="hw.vendor" value="Emerson"/>
600
+ <param pos="0" name="hw.device" value="Power device"/>
601
+ <param pos="0" name="hw.product" value="Rack PDU Card"/>
602
+ </fingerprint>
603
+
604
+ <fingerprint pattern="^(.*) IntelliSlot Web(?:/\d+)? Card?$">
605
+ <description>Emerson Network Power IntelliSlot Web Card and rebrands</description>
606
+ <example hw.vendor="Emerson Network Power">Emerson Network Power IntelliSlot Web Card</example>
607
+ <example hw.vendor="Emerson Network Power">Emerson Network Power IntelliSlot Web/485 Card</example>
608
+ <example hw.vendor="Vertiv">Vertiv IntelliSlot Web Card</example>
609
+ <example hw.vendor="Liebert">Liebert IntelliSlot Web Card</example>
610
+ <param pos="1" name="hw.vendor"/>
611
+ <param pos="0" name="hw.device" value="Power device"/>
612
+ <param pos="0" name="hw.product" value="IntelliSlot Web Card"/>
613
+ </fingerprint>
614
+
615
+ <fingerprint pattern="^ConnectUPS Web/SNMP Card$">
616
+ <description>ConnectUPS Web/SNMP Card</description>
617
+ <example>ConnectUPS Web/SNMP Card</example>
618
+ <param pos="0" name="hw.vendor" value="APC"/>
619
+ <param pos="0" name="hw.device" value="Power device"/>
620
+ <param pos="0" name="hw.product" value="ConnectUPS Web Card"/>
621
+ </fingerprint>
622
+
623
+ <fingerprint pattern="^Calient Technologies Inc\.$">
624
+ <description>Calient Photonic Switch</description>
625
+ <example>Calient Technologies Inc.</example>
626
+ <param pos="0" name="hw.vendor" value="Calient"/>
627
+ <param pos="0" name="hw.device" value="Switch"/>
628
+ <param pos="0" name="hw.product" value="Photonic Switch"/>
629
+ <param pos="0" name="os.vendor" value="Calient"/>
630
+ <param pos="0" name="os.device" value="Switch"/>
631
+ <param pos="0" name="os.family" value="Linux"/>
632
+ </fingerprint>
633
+
634
+ <fingerprint pattern="^Google Fiber Network Box Diagnostics$">
635
+ <description>Google Fiber Router</description>
636
+ <example>Google Fiber Network Box Diagnostics</example>
637
+ <param pos="0" name="hw.vendor" value="Google"/>
638
+ <param pos="0" name="hw.device" value="Router"/>
639
+ <param pos="0" name="hw.product" value="Fiber Network Box"/>
640
+ </fingerprint>
641
+
642
+ <fingerprint pattern="ServerView.* (iRMC S\d+) Web Server">
643
+ <description>Fujitsu iRMC BMC</description>
644
+ <example hw.product="iRMC S3" os.product="iRMC S3">ServerView Remote Management iRMC S3 Web Server</example>
645
+ <example hw.product="iRMC S4" os.product="iRMC S4">ServerView&amp;reg;&amp;nbsp;Remote Management iRMC S4 Web Server Redirecting ...</example>
646
+ <example hw.product="iRMC S2" os.product="iRMC S2">ServerView Remote Management iRMC S2 Web Server</example>
647
+ <param pos="0" name="hw.device" value="Lights Out Management"/>
648
+ <param pos="0" name="hw.vendor" value="Fujitsu"/>
649
+ <param pos="1" name="hw.product"/>
650
+ <param pos="0" name="os.vendor" value="Fujitsu"/>
651
+ <param pos="1" name="os.product"/>
652
+ </fingerprint>
653
+
654
+ <fingerprint pattern="^Cisco UCS KVM Direct$">
655
+ <description>Cisco UCS KVM Direct</description>
656
+ <example>Cisco UCS KVM Direct</example>
657
+ <param pos="0" name="hw.vendor" value="Cisco"/>
658
+ <param pos="0" name="hw.device" value="Lights Out Management"/>
659
+ <param pos="0" name="hw.product" value="UCS Manager"/>
660
+ <param pos="0" name="os.vendor" value="Cisco"/>
661
+ <param pos="0" name="os.family" value="Linux"/>
662
+ <param pos="0" name="os.product" value="NX-OS"/>
663
+ <param pos="0" name="os.certainty" value="0.8"/>
664
+ </fingerprint>
665
+
666
+ <fingerprint pattern="^Cisco UCS Manager$">
667
+ <description>Cisco UCS Manager</description>
668
+ <example>Cisco UCS Manager</example>
669
+ <param pos="0" name="hw.device" value="Lights Out Management"/>
670
+ <param pos="0" name="hw.vendor" value="Cisco"/>
671
+ <param pos="0" name="hw.product" value="UCS Manager"/>
672
+ <param pos="0" name="os.vendor" value="Cisco"/>
673
+ <param pos="0" name="os.family" value="Linux"/>
674
+ <param pos="0" name="os.product" value="NX-OS"/>
675
+ <param pos="0" name="os.certainty" value="0.8"/>
676
+ </fingerprint>
677
+
678
+ <fingerprint pattern="^Cisco (?:IMC Login|Integrated Management Controller)">
679
+ <description>Cisco Integrated Management Controller</description>
680
+ <example>Cisco Integrated Management Controller</example>
681
+ <example>Cisco Integrated Management Controller Login</example>
682
+ <example>Cisco Integrated Management Controller WebUI</example>
683
+ <example>Cisco IMC Login Page</example>
684
+ <param pos="0" name="hw.device" value="Lights Out Management"/>
685
+ <param pos="0" name="hw.vendor" value="Cisco"/>
686
+ <param pos="0" name="hw.product" value="IMC"/>
687
+ <param pos="0" name="os.vendor" value="Cisco"/>
688
+ <param pos="0" name="os.family" value="Linux"/>
689
+ <param pos="0" name="os.product" value="IMC"/>
690
+ </fingerprint>
691
+
692
+ <fingerprint pattern="^HPE Virtual Connect Manager$">
693
+ <description>HPE Virtual Connect Manager</description>
694
+ <example>HPE Virtual Connect Manager</example>
695
+ <param pos="0" name="hw.device" value="Lights Out Management"/>
696
+ <param pos="0" name="hw.vendor" value="HPE"/>
697
+ <param pos="0" name="hw.product" value="Virtual Connect Manager"/>
698
+ <param pos="0" name="os.vendor" value="HPE"/>
699
+ <param pos="0" name="os.device" value="Lights Out Management"/>
700
+ <param pos="0" name="os.product" value="iLO"/>
701
+ </fingerprint>
702
+
703
+ <fingerprint pattern="^HPE BladeSystem Onboard Administrator$">
704
+ <description>HPE BladeSystem Onboard Administrator</description>
705
+ <example>HPE BladeSystem Onboard Administrator</example>
706
+ <param pos="0" name="hw.device" value="Lights Out Management"/>
707
+ <param pos="0" name="hw.vendor" value="HPE"/>
708
+ <param pos="0" name="hw.product" value="BladeSystem Onboard Administrator"/>
709
+ </fingerprint>
710
+
711
+ <fingerprint pattern="^HPE System Management Homepage$">
712
+ <description>HPE System Management Homepage</description>
713
+ <example>HPE System Management Homepage</example>
714
+ <param pos="0" name="hw.device" value="Lights Out Management"/>
715
+ <param pos="0" name="hw.vendor" value="HPE"/>
716
+ <param pos="0" name="hw.product" value="System Management"/>
717
+ <param pos="0" name="os.vendor" value="HPE"/>
718
+ <param pos="0" name="os.device" value="Lights Out Management"/>
719
+ <param pos="0" name="os.product" value="iLO"/>
720
+ </fingerprint>
721
+
722
+ <fingerprint pattern="^HP Integrated Lights-Out$">
723
+ <description>HP Integrated Lights-Out</description>
724
+ <example>HP Integrated Lights-Out</example>
725
+ <param pos="0" name="hw.device" value="Lights Out Management"/>
726
+ <param pos="0" name="hw.vendor" value="HP"/>
727
+ <param pos="0" name="hw.product" value="iLO"/>
728
+ <param pos="0" name="os.vendor" value="HP"/>
729
+ <param pos="0" name="os.device" value="Lights Out Management"/>
730
+ <param pos="0" name="os.family" value="iLO"/>
731
+ <param pos="0" name="os.product" value="iLO"/>
732
+ </fingerprint>
733
+
734
+ <fingerprint pattern="^HP Integrated Lights-Out 2$">
735
+ <description>HP Integrated Lights-Out 2</description>
736
+ <example>HP Integrated Lights-Out 2</example>
737
+ <param pos="0" name="hw.device" value="Lights Out Management"/>
738
+ <param pos="0" name="hw.vendor" value="HP"/>
739
+ <param pos="0" name="hw.product" value="iLO"/>
740
+ <param pos="0" name="os.vendor" value="HP"/>
741
+ <param pos="0" name="os.device" value="Lights Out Management"/>
742
+ <param pos="0" name="os.family" value="iLO"/>
743
+ <param pos="0" name="os.product" value="iLO 2"/>
744
+ </fingerprint>
745
+
746
+ <fingerprint pattern="^(iLO \d+)$">
747
+ <description>HP Integrated Lights-Out 3+</description>
748
+ <example hw.product="iLO 3" os.product="iLO 3">iLO 3</example>
749
+ <example hw.product="iLO 4" os.product="iLO 4">iLO 4</example>
750
+ <param pos="0" name="hw.device" value="Lights Out Management"/>
751
+ <param pos="0" name="hw.vendor" value="HP"/>
752
+ <param pos="1" name="hw.product"/>
753
+ <param pos="0" name="os.vendor" value="HP"/>
754
+ <param pos="0" name="os.device" value="Lights Out Management"/>
755
+ <param pos="0" name="os.family" value="iLO"/>
756
+ <param pos="1" name="os.product"/>
757
+ </fingerprint>
758
+
759
+ <fingerprint pattern="^HPE SimpliVity OmniStack$">
760
+ <description>HPE SimpliVity OmniStack</description>
761
+ <example>HPE SimpliVity OmniStack</example>
762
+ <param pos="0" name="hw.device" value="NAS"/>
763
+ <param pos="0" name="hw.vendor" value="HPE"/>
764
+ <param pos="0" name="hw.product" value="SimpliVity OmniStack"/>
765
+ </fingerprint>
766
+
767
+ <fingerprint pattern="^HPE (StoreEver \S+)$">
768
+ <description>HPE StoreEver</description>
769
+ <example hw.product="StoreEver MSL3040">HPE StoreEver MSL3040</example>
770
+ <param pos="0" name="hw.device" value="Tape Library"/>
771
+ <param pos="0" name="hw.vendor" value="HPE"/>
772
+ <param pos="1" name="hw.product"/>
773
+ </fingerprint>
774
+
775
+ <fingerprint pattern="^Dell OpenManage Switch Administrator$">
776
+ <description>Dell OpenManage Switch Administrator</description>
777
+ <example>Dell OpenManage Switch Administrator</example>
778
+ <param pos="0" name="hw.vendor" value="Dell"/>
779
+ <param pos="0" name="hw.device" value="Switch"/>
780
+ <param pos="0" name="hw.product" value="OpenManage Switch"/>
781
+ </fingerprint>
782
+
783
+ <fingerprint pattern="^(\S+)\s+-\s+ProCurve Switch (\S+) \((.*)\)$">
784
+ <description>HPE ProCurve Switch w/Hostname</description>
785
+ <example host.name="SW1" hw.product="4204vl" procurve.model="J8770A">SW1 - ProCurve Switch 4204vl (J8770A)</example>
786
+ <param pos="0" name="hw.vendor" value="HPE"/>
787
+ <param pos="0" name="hw.device" value="Switch"/>
788
+ <param pos="2" name="hw.product"/>
789
+ <param pos="1" name="host.name"/>
790
+ <param pos="3" name="procurve.model"/>
791
+ </fingerprint>
792
+
793
+ <fingerprint pattern="^ProCurve Switch (\S+) \((.*)\)$">
794
+ <description>HPE ProCurve Switch w/o Hostname</description>
795
+ <example hw.product="2610-24/12PWR" procurve.model="J9086A">ProCurve Switch 2610-24/12PWR (J9086A)</example>
796
+ <param pos="0" name="hw.vendor" value="HPE"/>
797
+ <param pos="0" name="hw.device" value="Switch"/>
798
+ <param pos="1" name="hw.product"/>
799
+ <param pos="2" name="procurve.model"/>
800
+ </fingerprint>
801
+
802
+ <fingerprint pattern="^FlexiPacket Hub$">
803
+ <description>Nokia Siemens FlexiPacket Hub</description>
804
+ <example>FlexiPacket Hub</example>
805
+ <param pos="0" name="hw.vendor" value="Nokia-Siemens"/>
806
+ <param pos="0" name="hw.device" value="Switch"/>
807
+ <param pos="0" name="hw.product" value="FlexiPacket Hub"/>
808
+ </fingerprint>
809
+
810
+ <fingerprint pattern="^R&amp;S Instrument VNC desktop$">
811
+ <description>Rohde and Schwarz Remote Instrument (vnc)</description>
812
+ <example>R&amp;S Instrument VNC desktop</example>
813
+ <param pos="0" name="hw.device" value="Test Instrument"/>
814
+ <param pos="0" name="hw.vendor" value="Rohde &amp; Schwarz"/>
815
+ <param pos="0" name="os.device" value="Test Instrument"/>
816
+ <param pos="0" name="os.vendor" value="Rohde &amp; Schwarz"/>
817
+ <param pos="0" name="os.family" value="Linux"/>
818
+ </fingerprint>
819
+
820
+ <fingerprint pattern="^Rohde &amp; Schwarz remote instrument$">
821
+ <description>Rohde and Schwarz Remote Instrument (web admin)</description>
822
+ <example>Rohde &amp; Schwarz remote instrument</example>
823
+ <param pos="0" name="hw.device" value="Test Instrument"/>
824
+ <param pos="0" name="hw.vendor" value="Rohde &amp; Schwarz"/>
825
+ </fingerprint>
826
+
827
+ <fingerprint pattern="^EXA$">
828
+ <description>Keysight EXA Signal Analyzer</description>
829
+ <example>EXA</example>
830
+ <param pos="0" name="hw.vendor" value="Keysight"/>
831
+ <param pos="0" name="hw.device" value="Test Instrument"/>
832
+ <param pos="0" name="hw.product" value="EXA Signal Analyzer"/>
833
+ <param pos="0" name="os.device" value="Test Instrument"/>
834
+ </fingerprint>
835
+
836
+ <fingerprint pattern="^MXA$">
837
+ <description>Keysight MXA Signal Analyzer</description>
838
+ <example>MXA</example>
839
+ <param pos="0" name="hw.vendor" value="Keysight"/>
840
+ <param pos="0" name="hw.device" value="Test Instrument"/>
841
+ <param pos="0" name="hw.product" value="MXA Signal Analyzer"/>
842
+ <param pos="0" name="os.device" value="Test Instrument"/>
843
+ </fingerprint>
844
+
845
+ <fingerprint pattern="^Paragon-100G$">
846
+ <description>Calnex Paragon-100G</description>
847
+ <example>Paragon-100G</example>
848
+ <param pos="0" name="hw.vendor" value="Calnex"/>
849
+ <param pos="0" name="hw.device" value="Test Instrument"/>
850
+ <param pos="0" name="hw.product" value="Paragon-100G"/>
851
+ </fingerprint>
852
+
853
+ <fingerprint pattern="^33521A$">
854
+ <description>Keysight 33521A Waveform Generator</description>
855
+ <example>33521A</example>
856
+ <param pos="0" name="hw.vendor" value="Keysight"/>
857
+ <param pos="0" name="hw.device" value="Test Instrument"/>
858
+ <param pos="0" name="hw.product" value="33521A Waveform Generator"/>
859
+ </fingerprint>
860
+
861
+ <fingerprint pattern="^34972A$">
862
+ <description>Keysight 34972A Data Logger</description>
863
+ <example>34972A</example>
864
+ <param pos="0" name="hw.vendor" value="Keysight"/>
865
+ <param pos="0" name="hw.device" value="Test Instrument"/>
866
+ <param pos="0" name="hw.product" value="34972A Data Logger"/>
867
+ </fingerprint>
868
+
869
+ <fingerprint pattern="^53230A$">
870
+ <description>Agilent 53230A Frequency Counter</description>
871
+ <example>53230A</example>
872
+ <param pos="0" name="hw.vendor" value="Agilent"/>
873
+ <param pos="0" name="hw.device" value="Test Instrument"/>
874
+ <param pos="0" name="hw.product" value="53230A Frequency Counter"/>
875
+ </fingerprint>
876
+
877
+ <fingerprint pattern="^Agilent 33220A \((.*)\)$">
878
+ <description>Agilent 33220A</description>
879
+ <example agilent.serial="MY44041111">Agilent 33220A (MY44041111)</example>
880
+ <param pos="0" name="hw.vendor" value="Agilent"/>
881
+ <param pos="0" name="hw.device" value="Test Instrument"/>
882
+ <param pos="0" name="hw.product" value="33220A Waveform Generator"/>
883
+ <param pos="1" name="agilent.serial"/>
884
+ </fingerprint>
885
+
886
+ <fingerprint pattern="^Agilent N5172B (?:EXG )?(MY\S+)$">
887
+ <description>Agilent N5172B</description>
888
+ <example agilent.serial="MY44041111">Agilent N5172B EXG MY44041111</example>
889
+ <param pos="0" name="hw.vendor" value="Agilent"/>
890
+ <param pos="0" name="hw.device" value="Test Instrument"/>
891
+ <param pos="0" name="hw.product" value="N5172B Signal Generator"/>
892
+ <param pos="1" name="agilent.serial"/>
893
+ </fingerprint>
894
+
895
+ <fingerprint pattern="^Polycom - Configuration Utility$">
896
+ <description>Polycom IP Phone</description>
897
+ <example>Polycom - Configuration Utility</example>
898
+ <param pos="0" name="hw.vendor" value="Polycom"/>
899
+ <param pos="0" name="hw.family" value="SoundPoint"/>
900
+ <param pos="0" name="hw.device" value="VoIP"/>
901
+ <param pos="0" name="os.vendor" value="Polycom"/>
902
+ <param pos="0" name="os.product" value="Polycom"/>
903
+ </fingerprint>
904
+
905
+
906
+ <fingerprint pattern="^Digium Phone Settings$">
907
+ <description>Digium Phone Settings</description>
908
+ <example>Digium Phone Settings</example>
909
+ <param pos="0" name="hw.vendor" value="Digium"/>
910
+ <param pos="0" name="hw.device" value="VoIP"/>
911
+ </fingerprint>
912
+
913
+ <fingerprint pattern="^(SPA\S+) Configuration Utility$">
914
+ <description>Cisco IP Phone - SPA504G Configuration Utility</description>
915
+ <example hw.product="SPA504G">SPA504G Configuration Utility</example>
916
+ <param pos="0" name="hw.vendor" value="Cisco"/>
917
+ <param pos="0" name="hw.device" value="VoIP"/>
918
+ <param pos="1" name="hw.product"/>
919
+ </fingerprint>
920
+
921
+ <fingerprint pattern="^Cisco (?:SPA Configuration|IP Phone)$">
922
+ <description>Cisco IP Phone </description>
923
+ <example>Cisco SPA Configuration</example>
924
+ <example>Cisco IP Phone</example>
925
+ <param pos="0" name="hw.vendor" value="Cisco"/>
926
+ <param pos="0" name="hw.device" value="VoIP"/>
927
+ </fingerprint>
928
+
929
+ <fingerprint pattern="^Cisco IP Camera$">
930
+ <description>Cisco IP Camera</description>
931
+ <example>Cisco IP Camera</example>
932
+ <param pos="0" name="hw.vendor" value="Cisco"/>
933
+ <param pos="0" name="hw.device" value="Web cam"/>
934
+ </fingerprint>
935
+
936
+ <fingerprint pattern="^Cisco TelePresence MCU">
937
+ <description>Cisco TelePresence MCU - Home page</description>
938
+ <example>Cisco TelePresence MCU - Home page</example>
939
+ <example>Cisco TelePresence MCU MSE - Home page</example>
940
+ <param pos="0" name="hw.vendor" value="Cisco"/>
941
+ <param pos="0" name="hw.device" value="Video Conferencing"/>
942
+ <param pos="0" name="hw.product" value="TelePresence MCU"/>
943
+ </fingerprint>
944
+
945
+ <fingerprint pattern="^Cisco (Nexus \d+\S+)$">
946
+ <description>Cisco Nexus Virtual Switch</description>
947
+ <example hw.product="Nexus 1000V">Cisco Nexus 1000V</example>
948
+ <param pos="0" name="hw.vendor" value="Cisco"/>
949
+ <param pos="0" name="hw.device" value="Switch"/>
950
+ <param pos="1" name="hw.product"/>
951
+ </fingerprint>
952
+
953
+ <fingerprint pattern="^Cisco Catalyst Switch - Home$">
954
+ <description>Cisco Catalyst Switch</description>
955
+ <example>Cisco Catalyst Switch - Home</example>
956
+ <param pos="0" name="hw.vendor" value="Cisco"/>
957
+ <param pos="0" name="hw.device" value="Switch"/>
958
+ <param pos="0" name="hw.product" value="Catalyst"/>
959
+ <param pos="0" name="os.vendor" value="Cisco"/>
960
+ <param pos="0" name="os.product" value="CatOS"/>
961
+ </fingerprint>
962
+
963
+ <fingerprint pattern="^Cisco MDS 9000(?: and Nexus 5000)? Management Modules (\d+\.\d+\S+)$">
964
+ <description>Cisco MDS 9000/Nexus 5000</description>
965
+ <example os.version="7.3(1)D1(1)">Cisco MDS 9000 and Nexus 5000 Management Modules 7.3(1)D1(1)</example>
966
+ <example os.version="6.2(13a)">Cisco MDS 9000 and Nexus 5000 Management Modules 6.2(13a)</example>
967
+ <example os.version="3.3(2)">Cisco MDS 9000 Management Modules 3.3(2)</example>
968
+ <param pos="0" name="hw.vendor" value="Cisco"/>
969
+ <param pos="0" name="hw.device" value="Switch"/>
970
+ <param pos="0" name="hw.product" value="MDS 9000"/>
971
+ <param pos="0" name="os.vendor" value="Cisco"/>
972
+ <param pos="0" name="os.device" value="Switch"/>
973
+ <param pos="0" name="os.product" value="MDS 9000"/>
974
+ <param pos="1" name="os.version"/>
975
+ </fingerprint>
976
+
977
+ <fingerprint pattern="^Stealthwatch Management Console$">
978
+ <description>Stealthwatch Management Console</description>
979
+ <example>Stealthwatch Management Console</example>
980
+ <param pos="0" name="hw.vendor" value="Cisco"/>
981
+ <param pos="0" name="hw.device" value="Security Appliance"/>
982
+ <param pos="0" name="hw.product" value="Stealthwatch"/>
983
+ <param pos="0" name="os.vendor" value="Cisco"/>
984
+ <param pos="0" name="os.device" value="Security Appliance"/>
985
+ <param pos="0" name="os.product" value="Stealthwatch"/>
986
+ </fingerprint>
987
+
988
+ <fingerprint pattern="^Cisco vManage$">
989
+ <description>Cisco vManage SD-WAN</description>
990
+ <example>Cisco vManage</example>
991
+ <param pos="0" name="hw.vendor" value="Cisco"/>
992
+ <param pos="0" name="hw.device" value="SD-WAN Appliance"/>
993
+ <param pos="0" name="hw.product" value="vManage"/>
994
+ <param pos="0" name="os.vendor" value="Cisco"/>
995
+ <param pos="0" name="os.device" value="SD-WAN Appliance"/>
996
+ <param pos="0" name="os.product" value="vManage"/>
997
+ </fingerprint>
998
+
999
+ <fingerprint pattern="^Login - Cisco DNA Center$">
1000
+ <description>Cisco DNA Center Appliance</description>
1001
+ <example>Login - Cisco DNA Center</example>
1002
+ <param pos="0" name="hw.vendor" value="Cisco"/>
1003
+ <param pos="0" name="hw.device" value="Network Management Device"/>
1004
+ <param pos="0" name="hw.product" value="DNA Center"/>
1005
+ <param pos="0" name="os.vendor" value="Cisco"/>
1006
+ <param pos="0" name="os.device" value="Network Management Device"/>
1007
+ <param pos="0" name="os.product" value="DNA Center"/>
1008
+ </fingerprint>
1009
+
1010
+ <fingerprint pattern="^Cisco (?:Enterprise )?NFVIS$">
1011
+ <description>Cisco NFVIS</description>
1012
+ <example>Cisco NFVIS</example>
1013
+ <example>Cisco Enterprise NFVIS</example>
1014
+ <param pos="0" name="hw.vendor" value="Cisco"/>
1015
+ <param pos="0" name="hw.device" value="Network Management Device"/>
1016
+ <param pos="0" name="hw.product" value="NFVIS"/>
1017
+ <param pos="0" name="os.vendor" value="Cisco"/>
1018
+ <param pos="0" name="os.device" value="Network Management Device"/>
1019
+ <param pos="0" name="os.product" value="NFVIS"/>
1020
+ </fingerprint>
1021
+
1022
+ <fingerprint pattern="^Cisco Systems Login$">
1023
+ <description>Cisco WLC</description>
1024
+ <example>Cisco Systems Login</example>
1025
+ <param pos="0" name="os.vendor" value="Cisco"/>
1026
+ <param pos="0" name="os.device" value="Wireless Controller"/>
1027
+ <param pos="0" name="os.product" value="Wireless Controller"/>
1028
+ <param pos="0" name="os.cpe23" value="cpe:/o:cisco:wireless_lan_controller:-"/>
1029
+ <param pos="0" name="hw.vendor" value="Cisco"/>
1030
+ <param pos="0" name="hw.device" value="Wireless Controller"/>
1031
+ <param pos="0" name="hw.product" value="Wireless Controller"/>
1032
+ </fingerprint>
1033
+
1034
+ <fingerprint pattern="^Duo Access Gateway$">
1035
+ <description>Duo Access Gateway</description>
1036
+ <example>Duo Access Gateway</example>
1037
+ <param pos="0" name="hw.vendor" value="Duo"/>
1038
+ <param pos="0" name="hw.device" value="Security Appliance"/>
1039
+ <param pos="0" name="hw.product" value="Access Gateway"/>
1040
+ <param pos="0" name="os.vendor" value="Duo"/>
1041
+ <param pos="0" name="os.device" value="Security Appliance"/>
1042
+ <param pos="0" name="os.product" value="Access Gateway"/>
1043
+ </fingerprint>
1044
+
1045
+ <fingerprint pattern="^Login - Duo Network Gateway$">
1046
+ <description>Duo Network Gateway</description>
1047
+ <example>Login - Duo Network Gateway</example>
1048
+ <param pos="0" name="hw.vendor" value="Duo"/>
1049
+ <param pos="0" name="hw.device" value="Security Appliance"/>
1050
+ <param pos="0" name="hw.product" value="Network Gateway"/>
1051
+ <param pos="0" name="os.vendor" value="Duo"/>
1052
+ <param pos="0" name="os.device" value="Security Appliance"/>
1053
+ <param pos="0" name="os.product" value="Network Gateway"/>
1054
+ </fingerprint>
1055
+
1056
+ <fingerprint pattern="^VBrick Rev">
1057
+ <description>VBrick Rev</description>
1058
+ <example>VBrick Rev</example>
1059
+ <param pos="0" name="hw.vendor" value="Cisco"/>
1060
+ <param pos="0" name="hw.device" value="Video Conferencing"/>
1061
+ <param pos="0" name="hw.product" value="VBrick Rev"/>
1062
+ <param pos="0" name="os.vendor" value="Cisco"/>
1063
+ <param pos="0" name="os.device" value="Video Conferencing"/>
1064
+ <param pos="0" name="os.product" value="VBrick Rev"/>
1065
+ </fingerprint>
1066
+
1067
+ <fingerprint pattern="^(LinxVII-\S+) Remote Access$">
1068
+ <description>LinxVII-5S Data Terminal</description>
1069
+ <example hw.product="LinxVII-5S">LinxVII-5S Remote Access</example>
1070
+ <param pos="0" name="hw.vendor" value="LINX"/>
1071
+ <param pos="0" name="hw.device" value="Data Terminal"/>
1072
+ <param pos="1" name="hw.product"/>
1073
+ </fingerprint>
1074
+
1075
+ <fingerprint pattern="^Datalogic Mobile Portable$">
1076
+ <description>Datalogic Mobile Portable</description>
1077
+ <example>Datalogic Mobile Portable</example>
1078
+ <param pos="0" name="hw.vendor" value="Datalogic Mobile"/>
1079
+ <param pos="0" name="hw.device" value="Handheld Scanner"/>
1080
+ </fingerprint>
1081
+
1082
+ <fingerprint pattern="^AXIS$">
1083
+ <description>Axis Communications Web Cam</description>
1084
+ <example>AXIS</example>
1085
+ <param pos="0" name="hw.vendor" value="AXIS"/>
1086
+ <param pos="0" name="hw.device" value="Web cam"/>
1087
+ <param pos="0" name="os.vendor" value="AXIS"/>
1088
+ <param pos="0" name="os.family" value="Linux"/>
1089
+ <param pos="0" name="os.device" value="Web cam"/>
1090
+ </fingerprint>
1091
+
1092
+ <fingerprint pattern="^Hanwha Techwin$">
1093
+ <description>Hanwha Techwin IP Camera</description>
1094
+ <example>Hanwha Techwin</example>
1095
+ <param pos="0" name="hw.vendor" value="Hanwha Techwin"/>
1096
+ <param pos="0" name="hw.device" value="Web cam"/>
1097
+ <param pos="0" name="os.vendor" value="Hanwha Techwin"/>
1098
+ <param pos="0" name="os.device" value="Web cam"/>
1099
+ <param pos="0" name="os.family" value="Linux"/>
1100
+ </fingerprint>
1101
+
1102
+ <fingerprint pattern="^(WV-NS\S+) Network Camera$">
1103
+ <description>WV-NS202A Network Camera</description>
1104
+ <example hw.product="WV-NS202A">WV-NS202A Network Camera</example>
1105
+ <example hw.product="WV-NS954">WV-NS954 Network Camera</example>
1106
+ <param pos="0" name="hw.vendor" value="Panasonic"/>
1107
+ <param pos="0" name="hw.device" value="Web cam"/>
1108
+ <param pos="1" name="hw.product"/>
1109
+ <param pos="0" name="os.vendor" value="Panasonic"/>
1110
+ <param pos="0" name="os.device" value="Web cam"/>
1111
+ <param pos="0" name="os.family" value="Linux"/>
1112
+ </fingerprint>
1113
+
1114
+ <fingerprint pattern="^KACE Systems Management Appliance">
1115
+ <description>KACE Systems Management Appliances</description>
1116
+ <example>KACE Systems Management Appliance Service Center</example>
1117
+ <example>KACE Systems Management Appliance Administrator Console</example>
1118
+ <param pos="0" name="hw.vendor" value="KACE"/>
1119
+ <param pos="0" name="hw.device" value="Support Appliance"/>
1120
+ <param pos="0" name="os.vendor" value="KACE"/>
1121
+ <param pos="0" name="os.family" value="FreeBSD"/>
1122
+ </fingerprint>
1123
+
1124
+ <fingerprint pattern="Portal.*Powered by BOMGAR$">
1125
+ <description>Bomgar Appliances</description>
1126
+ <example>Remote Support Portal | Powered by BOMGAR</example>
1127
+ <example>Customer Support Portal Powered by BOMGAR</example>
1128
+ <param pos="0" name="hw.vendor" value="Bomgar"/>
1129
+ <param pos="0" name="hw.device" value="Support Appliance"/>
1130
+ <param pos="0" name="os.vendor" value="Bomgar"/>
1131
+ <param pos="0" name="os.family" value="Linux"/>
1132
+ </fingerprint>
1133
+
1134
+ <fingerprint pattern="^XRoads Network Appliance Administration$">
1135
+ <description>XRoads SD-WAN Network Appliance </description>
1136
+ <example>XRoads Network Appliance Administration</example>
1137
+ <param pos="0" name="hw.vendor" value="XRoads"/>
1138
+ <param pos="0" name="hw.device" value="SD-WAN Appliance"/>
1139
+ <param pos="0" name="os.vendor" value="XRoads"/>
1140
+ <param pos="0" name="os.family" value="Linux"/>
1141
+ </fingerprint>
1142
+
1143
+ <!-- An OEM of the Quantum Corporation SuperLoader 3 -->
1144
+ <fingerprint pattern="^On Board Remote Management$">
1145
+ <description>PowerVault 124T Tape Library</description>
1146
+ <example>On Board Remote Management</example>
1147
+ <param pos="0" name="hw.vendor" value="Dell"/>
1148
+ <param pos="0" name="hw.device" value="Tape Library"/>
1149
+ <param pos="0" name="hw.product" value="PowerVault 124T"/>
1150
+ <param pos="0" name="os.vendor" value="Dell"/>
1151
+ </fingerprint>
1152
+
1153
+ <fingerprint pattern="^(HD-RX-\S+)$">
1154
+ <description>Crestron Multiformat Receivers</description>
1155
+ <example hw.product="HD-RX-201-C-E">HD-RX-201-C-E</example>
1156
+ <param pos="0" name="hw.vendor" value="Crestron"/>
1157
+ <param pos="0" name="hw.device" value="Media Receiver"/>
1158
+ <param pos="1" name="hw.product"/>
1159
+ <param pos="0" name="os.vendor" value="Crestron"/>
1160
+ </fingerprint>
1161
+
1162
+ <fingerprint pattern="^Lencore Sound Manager 2$">
1163
+ <description>Lencore Sound Manager 2</description>
1164
+ <example>Lencore Sound Manager 2</example>
1165
+ <param pos="0" name="hw.vendor" value="Lencore"/>
1166
+ <param pos="0" name="hw.device" value="Media Receiver"/>
1167
+ <param pos="0" name="hw.product" value="Lencore Sound Manager 2"/>
1168
+ <param pos="0" name="os.vendor" value="i.LON"/>
1169
+ <param pos="0" name="os.product" value="SmartServer"/>
1170
+ </fingerprint>
1171
+
1172
+ <!-- Various ICS/OT -->
1173
+
1174
+ <fingerprint pattern="^CTI (25\S+) Main Menu$">
1175
+ <description>Siemens 257x Ethernet Adapter (CTI Branded)</description>
1176
+ <example hw.product="2572-A">CTI 2572-A Main Menu</example>
1177
+ <param pos="0" name="hw.vendor" value="Siemens"/>
1178
+ <param pos="0" name="hw.device" value="Ethernet Adapter"/>
1179
+ <param pos="1" name="hw.product"/>
1180
+ <param pos="0" name="os.vendor" value="Siemens"/>
1181
+ </fingerprint>
1182
+
1183
+ <fingerprint pattern="^(25\S+) Ethernet TCP/IP Module$">
1184
+ <description>Siemens 257x Ethernet Adapter</description>
1185
+ <example hw.product="2572-B">2572-B Ethernet TCP/IP Module</example>
1186
+ <param pos="0" name="hw.vendor" value="Siemens"/>
1187
+ <param pos="0" name="hw.device" value="Ethernet Adapter"/>
1188
+ <param pos="1" name="hw.product"/>
1189
+ <param pos="0" name="os.vendor" value="Siemens"/>
1190
+ </fingerprint>
1191
+
1192
+ <fingerprint pattern="^ECOM100 Main$">
1193
+ <description>DirectLOGIC DL205 communication module</description>
1194
+ <example>ECOM100 Main</example>
1195
+ <param pos="0" name="hw.vendor" value="DirectLOGIC"/>
1196
+ <param pos="0" name="hw.device" value="Ethernet Adapter"/>
1197
+ <param pos="0" name="hw.product" value="ECOM100"/>
1198
+ <param pos="0" name="os.vendor" value="DirectLOGIC"/>
1199
+ </fingerprint>
1200
+
1201
+ <fingerprint pattern="^(1794-\S+) FLEX Ethernet Adapter$">
1202
+ <description>Allen-Bradley 1794-AENTR FLEX Ethernet Adapter</description>
1203
+ <example hw.product="1794-AENTR">1794-AENTR FLEX Ethernet Adapter</example>
1204
+ <param pos="0" name="hw.vendor" value="Allen-Bradley"/>
1205
+ <param pos="0" name="hw.device" value="Ethernet Adapter"/>
1206
+ <param pos="1" name="hw.product"/>
1207
+ <param pos="0" name="os.vendor" value="Allen-Bradley"/>
1208
+ </fingerprint>
1209
+
1210
+ <fingerprint pattern="^Anybus-CC EtherNet/IP$">
1211
+ <description>Anybus-CC EtherNet/IP</description>
1212
+ <example>Anybus-CC EtherNet/IP</example>
1213
+ <param pos="0" name="hw.vendor" value="AnyBus"/>
1214
+ <param pos="0" name="hw.device" value="Ethernet Adapter"/>
1215
+ <param pos="0" name="hw.product" value="CC EtherNet/IP"/>
1216
+ <param pos="0" name="os.vendor" value="AnyBus"/>
1217
+ </fingerprint>
1218
+
1219
+ <fingerprint pattern="^Symmetry 2DBC">
1220
+ <description>AMAG Technology Symmetry EN-2DBC Access Controller</description>
1221
+ <example>Symmetry 2DBC STD APP (EN2DBC_00_EF_4F)</example>
1222
+ <param pos="0" name="hw.vendor" value="AMAG Technology"/>
1223
+ <param pos="0" name="hw.device" value="Access Control"/>
1224
+ <param pos="0" name="hw.product" value="Symmetry EN-2DBC"/>
1225
+ <param pos="0" name="os.vendor" value="AMAG Technology"/>
1226
+ </fingerprint>
1227
+
1228
+ <fingerprint pattern="^(1747-\S+) Home Page$">
1229
+ <description>Allen-Bradley 1747-LXXX SLC 5/05 Controller</description>
1230
+ <example hw.product="1747-L551">1747-L551 Home Page</example>
1231
+ <example hw.product="1747-L551/C">1747-L551/C Home Page</example>
1232
+ <example hw.product="1747-L552/C">1747-L552/C Home Page</example>
1233
+ <param pos="0" name="hw.vendor" value="Allen-Bradley"/>
1234
+ <param pos="0" name="hw.device" value="HMI Controller"/>
1235
+ <param pos="1" name="hw.product"/>
1236
+ <param pos="0" name="os.vendor" value="Allen-Bradley"/>
1237
+ </fingerprint>
1238
+
1239
+ <fingerprint pattern="^(1766-\S+) (B/\S+)$">
1240
+ <description>Allen-Bradley 1766-L32BXB PLC</description>
1241
+ <example hw.product="1766-L32BXB" os.product="1766-L32BXB" os.version="B/11.00">1766-L32BXB B/11.00</example>
1242
+ <param pos="0" name="hw.vendor" value="Allen-Bradley"/>
1243
+ <param pos="0" name="hw.device" value="PLC"/>
1244
+ <param pos="1" name="hw.product"/>
1245
+ <param pos="0" name="os.vendor" value="Allen-Bradley"/>
1246
+ <param pos="0" name="os.device" value="PLC"/>
1247
+ <param pos="1" name="os.product"/>
1248
+ <param pos="2" name="os.version"/>
1249
+ </fingerprint>
1250
+
1251
+ <fingerprint pattern="^PLC-5 Ethernet Base Page$">
1252
+ <description>PLC-5 Ethernet Interface Module</description>
1253
+ <example>PLC-5 Ethernet Base Page</example>
1254
+ <param pos="0" name="hw.vendor" value="Rockwell Automation"/>
1255
+ <param pos="0" name="hw.device" value="PLC"/>
1256
+ <param pos="0" name="hw.product" value="PLC-5"/>
1257
+ <param pos="0" name="os.vendor" value="Rockwell Automation"/>
1258
+ <param pos="0" name="os.device" value="PLC"/>
1259
+ <param pos="0" name="os.product" value="PLC-5"/>
1260
+ </fingerprint>
1261
+
1262
+ <fingerprint pattern="^(1761-NET-\S+)$">
1263
+ <description>Allen-Bradley Ethernet Module</description>
1264
+ <example hw.product="1761-NET-EN">1761-NET-EN</example>
1265
+ <example hw.product="1761-NET-ENIW">1761-NET-ENIW</example>
1266
+ <param pos="0" name="hw.vendor" value="Allen-Bradley"/>
1267
+ <param pos="0" name="hw.device" value="Ethernet Adapter"/>
1268
+ <param pos="1" name="hw.product"/>
1269
+ <param pos="0" name="os.vendor" value="Allen-Bradley"/>
1270
+ </fingerprint>
1271
+
1272
+ <fingerprint pattern="^(1785-\S+) Ethernet Base Page$">
1273
+ <description>Allen-Bradley 1785 Ethernet Module</description>
1274
+ <example hw.product="1785-ENET">1785-ENET Ethernet Base Page</example>
1275
+ <param pos="0" name="hw.vendor" value="Allen-Bradley"/>
1276
+ <param pos="0" name="hw.device" value="Ethernet Adapter"/>
1277
+ <param pos="1" name="hw.product"/>
1278
+ <param pos="0" name="os.vendor" value="Allen-Bradley"/>
1279
+ </fingerprint>
1280
+
1281
+ <fingerprint pattern="^NFT S7 - DALI-Gateway\(Ethernet\)$">
1282
+ <description>NFT DALI S7 Ethernet Module</description>
1283
+ <example>NFT S7 - DALI-Gateway(Ethernet)</example>
1284
+ <param pos="0" name="hw.vendor" value="NFT"/>
1285
+ <param pos="0" name="hw.device" value="Ethernet Adapter"/>
1286
+ <param pos="0" name="hw.product" value="S7 DALI Gateway"/>
1287
+ <param pos="0" name="os.vendor" value="NFT"/>
1288
+ </fingerprint>
1289
+
1290
+ <fingerprint pattern="^IBHLink S7\+\+$">
1291
+ <description>IBHsofte IBHLink S7++</description>
1292
+ <example>IBHLink S7++</example>
1293
+ <param pos="0" name="hw.vendor" value="IBHsofte"/>
1294
+ <param pos="0" name="hw.device" value="Ethernet Adapter"/>
1295
+ <param pos="0" name="hw.product" value="IBHLink S7++"/>
1296
+ <param pos="0" name="os.vendor" value="IBHsofte"/>
1297
+ </fingerprint>
1298
+
1299
+
1300
+ <!-- Software and Appliances -->
1301
+
1302
+ <fingerprint pattern="^S7/S5 OPC Server$">
1303
+ <description>Softing Industrial S7/S5 OPC Server</description>
1304
+ <example>S7/S5 OPC Server</example>
1305
+ <param pos="0" name="service.vendor" value="Softing"/>
1306
+ <param pos="0" name="service.product" value="S7/S5 OPC Server"/>
1307
+ <param pos="0" name="service.cpe23" value="cpe:/a:softing:s7-s5-opc-server:-"/>
1308
+ </fingerprint>
1309
+
1310
+ <fingerprint pattern="^Nessus$">
1311
+ <description>Nessus</description>
1312
+ <example>Nessus</example>
1313
+ <param pos="0" name="service.vendor" value="Tenable"/>
1314
+ <param pos="0" name="service.product" value="Nessus"/>
1315
+ <param pos="0" name="service.cpe23" value="cpe:/a:tenable:nessus:-"/>
1316
+ </fingerprint>
1317
+
1318
+ <fingerprint pattern="^Tenable Appliance$">
1319
+ <description>Tenable Appliance</description>
1320
+ <example>Tenable Appliance</example>
1321
+ <param pos="0" name="hw.vendor" value="Tenable"/>
1322
+ <param pos="0" name="hw.device" value="Security Appliance"/>
1323
+ <param pos="0" name="hw.product" value="Tenable Appliance"/>
1324
+ </fingerprint>
1325
+
1326
+ <fingerprint pattern="^(?:Welcome to Citrix )?XenServer ([0-9\.]+)$">
1327
+ <description>XenServer</description>
1328
+ <example service.version="7.2.0">Welcome to Citrix XenServer 7.2.0</example>
1329
+ <example service.version="6.2.5">XenServer 6.2.5</example>
1330
+ <param pos="0" name="service.vendor" value="Citrix"/>
1331
+ <param pos="0" name="service.product" value="XenServer"/>
1332
+ <param pos="1" name="service.version"/>
1333
+ <param pos="0" name="service.cpe23" value="cpe:/a:citrix:xenserver:{service.version}"/>
1334
+ </fingerprint>
1335
+
1336
+ <fingerprint pattern="^RabbitMQ Management$">
1337
+ <description>RabbitMQ Management</description>
1338
+ <example>RabbitMQ Management</example>
1339
+ <param pos="0" name="service.vendor" value="RabbitMQ"/>
1340
+ <param pos="0" name="service.product" value="Management Server"/>
1341
+ <param pos="0" name="service.cpe23" value="cpe:/a:rabbitmq:rabbitmq-manager:-"/>
1342
+ </fingerprint>
1343
+
1344
+ <fingerprint pattern="^Statistics Report for HAProxy$">
1345
+ <description>HAProxy Stats Server</description>
1346
+ <example>Statistics Report for HAProxy</example>
1347
+ <param pos="0" name="service.vendor" value="HAProxy"/>
1348
+ <param pos="0" name="service.product" value="HAProxy Stats Server"/>
1349
+ <param pos="0" name="service.cpe23" value="cpe:/a:haproxy:stats-server:-"/>
1350
+ </fingerprint>
1351
+
1352
+ <fingerprint pattern="^Open Manage&amp;trade;$">
1353
+ <description>Dell Open Manage Admin</description>
1354
+ <example>Open Manage&amp;trade;</example>
1355
+ <param pos="0" name="service.vendor" value="Dell"/>
1356
+ <param pos="0" name="service.product" value="Open Manage"/>
1357
+ <param pos="0" name="service.cpe23" value="cpe:/a:dell:openmanage:-"/>
1358
+ </fingerprint>
1359
+
1360
+ <fingerprint pattern="^TightVNC desktop \[(.*)\]$">
1361
+ <description>TightVNC Web Server</description>
1362
+ <example host.name="teller01">TightVNC desktop [teller01]</example>
1363
+ <param pos="0" name="service.vendor" value="TightVNC"/>
1364
+ <param pos="0" name="service.product" value="Desktop"/>
1365
+ <param pos="0" name="service.cpe23" value="cpe:/a:tightvnc:desktop:-"/>
1366
+ <param pos="1" name="host.name"/>
1367
+ </fingerprint>
1368
+
1369
+ <fingerprint pattern="^noVNC$">
1370
+ <description>noVNC Web Server</description>
1371
+ <example>noVNC</example>
1372
+ <param pos="0" name="service.vendor" value="noVNC"/>
1373
+ <param pos="0" name="service.product" value="noVNC"/>
1374
+ <param pos="0" name="service.cpe23" value="cpe:/a:novnc:novnc:-"/>
1375
+ </fingerprint>
1376
+
1377
+ <fingerprint pattern="^.* \[Jenkins\]$">
1378
+ <description>Jenkins Customized Dashboard</description>
1379
+ <example>Continuous Integrations [Jenkins]</example>
1380
+ <example>Dashboard [Jenkins]</example>
1381
+ <param pos="0" name="service.vendor" value="Jenkins"/>
1382
+ <param pos="0" name="service.product" value="Jenkins"/>
1383
+ <param pos="0" name="service.cpe23" value="cpe:/a:jenkins:jenkins:-"/>
1384
+ </fingerprint>
1385
+
1386
+ <fingerprint pattern="^Shell In A Box$">
1387
+ <description>Shell In A Box (OSS Project)</description>
1388
+ <example>Shell In A Box</example>
1389
+ <param pos="0" name="service.vendor" value="ShellInABox"/>
1390
+ <param pos="0" name="service.product" value="ShellInABox"/>
1391
+ <param pos="0" name="service.cpe23" value="cpe:/a:shellinabox:shellinabox:-"/>
1392
+ </fingerprint>
1393
+
1394
+ <fingerprint pattern="^AgilentLicenseManagerService Service$">
1395
+ <description>Agilent License Manager Service</description>
1396
+ <example>AgilentLicenseManagerService Service</example>
1397
+ <param pos="0" name="service.vendor" value="Agilent"/>
1398
+ <param pos="0" name="service.product" value="License Manager"/>
1399
+ <param pos="0" name="service.cpe23" value="cpe:/a:agilent:license-manager-"/>
1400
+ </fingerprint>
1401
+
1402
+ <fingerprint pattern="^Red Hat OpenStack Platform Director$">
1403
+ <description>Red Hat OpenStack Platform Director</description>
1404
+ <example>Red Hat OpenStack Platform Director</example>
1405
+ <param pos="0" name="service.vendor" value="Red Hat"/>
1406
+ <param pos="0" name="service.product" value="Open Stack Platform Director"/>
1407
+ <param pos="0" name="service.cpe23" value="cpe:/a:openstack:platform-director:-"/>
1408
+ </fingerprint>
1409
+
1410
+ <fingerprint pattern="^splunkd$">
1411
+ <description>Splunk HTTP server used in the web interface, forwarders, indexers and more</description>
1412
+ <example>splunkd</example>
1413
+ <param pos="0" name="service.vendor" value="Splunk"/>
1414
+ <param pos="0" name="service.product" value="Splunkd"/>
1415
+ <param pos="0" name="service.cpe23" value="cpe:/a:splunk:splunkd:-"/>
1416
+ </fingerprint>
1417
+
1418
+ <fingerprint pattern="^VMware Horizon$">
1419
+ <description>VMware Horizon</description>
1420
+ <example>VMware Horizon</example>
1421
+ <param pos="0" name="service.vendor" value="VMWare"/>
1422
+ <param pos="0" name="service.product" value="Horizon"/>
1423
+ <param pos="0" name="service.cpe23" value="cpe:/a:vmware:horizon:-"/>
1424
+ </fingerprint>
1425
+
1426
+ <fingerprint pattern="^Welcome to VMware Site Recovery Manager$">
1427
+ <description>VMware SRM</description>
1428
+ <example>Welcome to VMware Site Recovery Manager</example>
1429
+ <param pos="0" name="os.vendor" value="VMWare"/>
1430
+ <param pos="0" name="os.product" value="Linux"/>
1431
+ <param pos="0" name="hw.vendor" value="VMWare"/>
1432
+ <param pos="0" name="hw.device" value="Appliance"/>
1433
+ <param pos="0" name="hw.product" value="Site Recovery Manager"/>
1434
+ <param pos="0" name="service.vendor" value="VMWare"/>
1435
+ <param pos="0" name="service.product" value="Site Recovery Manager"/>
1436
+ <param pos="0" name="service.cpe23" value="cpe:/a:vmware:site_recovery_manager:-"/>
1437
+ </fingerprint>
1438
+
1439
+ <fingerprint pattern="^Graylog Web Interface$">
1440
+ <description>Graylog Web Interface</description>
1441
+ <example>Graylog Web Interface</example>
1442
+ <param pos="0" name="service.vendor" value="Graylog"/>
1443
+ <param pos="0" name="service.product" value="Graylog"/>
1444
+ <param pos="0" name="service.cpe23" value="cpe:/a:graylog:graylog:-"/>
1445
+ </fingerprint>
1446
+
1447
+ <fingerprint pattern="^Kibana$">
1448
+ <description>Kibana Web Interface</description>
1449
+ <example>Kibana</example>
1450
+ <param pos="0" name="service.vendor" value="Kibana"/>
1451
+ <param pos="0" name="service.product" value="Kibana"/>
1452
+ <param pos="0" name="service.cpe23" value="cpe:/a:kibana:kibana:-"/>
1453
+ </fingerprint>
1454
+
1455
+ <fingerprint pattern="^Grafana$">
1456
+ <description>Grafana Web Interface</description>
1457
+ <example>Grafana</example>
1458
+ <param pos="0" name="service.vendor" value="Grafana"/>
1459
+ <param pos="0" name="service.product" value="Grafana"/>
1460
+ <param pos="0" name="service.cpe23" value="cpe:/a:grafana:grafana:-"/>
1461
+ </fingerprint>
1462
+
1463
+ <fingerprint pattern="^Symantec Endpoint Protection Manager$">
1464
+ <description>Symantec Endpoint Protection Manager</description>
1465
+ <example>Symantec Endpoint Protection Manager</example>
1466
+ <param pos="0" name="service.vendor" value="Symantec"/>
1467
+ <param pos="0" name="service.product" value="Endpoint Protection Manager"/>
1468
+ <param pos="0" name="service.cpe23" value="cpe:/a:symantec:endpoint-protection-manager:-"/>
1469
+ </fingerprint>
1470
+
1471
+ <fingerprint pattern="^Login Gateway - Kiwi Syslog Web Access$">
1472
+ <description>Kiwi Syslog Web Access</description>
1473
+ <example>Login Gateway - Kiwi Syslog Web Access</example>
1474
+ <param pos="0" name="service.vendor" value="Solarwinds"/>
1475
+ <param pos="0" name="service.product" value="Kiwi Syslog Web Access"/>
1476
+ <param pos="0" name="service.cpe23" value="cpe:/a:solarwinds:kiwi-syslog-web:-"/>
1477
+ </fingerprint>
1478
+
1479
+ <fingerprint pattern="^Hadoop Administration$">
1480
+ <description>Hadoop Administration Web Service</description>
1481
+ <example>Hadoop Administration</example>
1482
+ <param pos="0" name="service.vendor" value="Hadoop"/>
1483
+ <param pos="0" name="service.product" value="Hadoop Web Admin"/>
1484
+ <param pos="0" name="service.cpe23" value="cpe:/a:hadoop:web-admin:-"/>
1485
+ </fingerprint>
1486
+
1487
+ <fingerprint pattern="^ManageEngine OpManager$">
1488
+ <description>ManageEngine OpManager</description>
1489
+ <example>ManageEngine OpManager</example>
1490
+ <param pos="0" name="service.vendor" value="ManageEngine"/>
1491
+ <param pos="0" name="service.product" value="OpManager"/>
1492
+ <param pos="0" name="service.cpe23" value="cpe:/a:manageengine:opmanager:-"/>
1493
+ </fingerprint>
1494
+
1495
+ <fingerprint pattern="^(ScanFront \d.+)Web Menu$">
1496
+ <!-- no space between the product model and "Web Menu" in the title -->
1497
+ <description>Canon ScanFront</description>
1498
+ <example os.product="ScanFront 220" hw.product="ScanFront 220">ScanFront 220Web Menu</example>
1499
+ <param pos="0" name="hw.device" value="Scanner"/>
1500
+ <param pos="0" name="hw.vendor" value="Canon"/>
1501
+ <param pos="1" name="hw.product"/>
1502
+ <param pos="0" name="os.device" value="Scanner"/>
1503
+ <param pos="0" name="os.vendor" value="Canon"/>
1504
+ <param pos="1" name="os.product"/>
1505
+ </fingerprint>
1506
+
1507
+ <fingerprint pattern="^CDVI Update$">
1508
+ <description>CDVI Door Control System</description>
1509
+ <example>CDVI Update</example>
1510
+ <param pos="0" name="hw.vendor" value="CDVI"/>
1511
+ <param pos="0" name="hw.device" value="Access Controller"/>
1512
+ </fingerprint>
1513
+
1514
+ <fingerprint pattern="^Liebert OpenComms Network Interface Card$">
1515
+ <description>Liebert UPS</description>
1516
+ <example>Liebert OpenComms Network Interface Card</example>
1517
+ <param pos="0" name="hw.device" value="Power device"/>
1518
+ <param pos="0" name="hw.vendor" value="Liebert"/>
1519
+ <param pos="0" name="os.device" value="Power device"/>
1520
+ <param pos="0" name="os.vendor" value="Liebert"/>
1521
+ </fingerprint>
1522
+
1523
+ <fingerprint pattern="^Excella Main Page$">
1524
+ <description>MagTek Excella STX Check Scanner</description>
1525
+ <example>Excella Main Page</example>
1526
+ <param pos="0" name="hw.device" value="Check Scanner"/>
1527
+ <param pos="0" name="hw.vendor" value="MagTek"/>
1528
+ <param pos="0" name="hw.product" value="Excella"/>
1529
+ <param pos="0" name="os.device" value="Check Scanner"/>
1530
+ <param pos="0" name="os.vendor" value="MagTek"/>
1531
+ <param pos="0" name="os.product" value="Excella"/>
1532
+ </fingerprint>
1533
+
1534
+ <fingerprint pattern="^B426$">
1535
+ <description>Bosch Security Systems Ethernet Module (Alarm Panel)</description>
1536
+ <example>B426</example>
1537
+ <param pos="0" name="hw.device" value="Alarm Panel"/>
1538
+ <param pos="0" name="hw.vendor" value="Bosch"/>
1539
+ <param pos="0" name="os.device" value="Alarm Panel"/>
1540
+ <param pos="0" name="os.vendor" value="Bosch"/>
1541
+ </fingerprint>
1542
+
1543
+ <fingerprint pattern="^Citrix Login$">
1544
+ <description>Citrix NetScaler</description>
1545
+ <example>Citrix Login</example>
1546
+ <param pos="0" name="os.vendor" value="Citrix"/>
1547
+ <param pos="0" name="os.family" value="NetScaler"/>
1548
+ <param pos="0" name="os.device" value="Network Management Device"/>
1549
+ <param pos="0" name="os.product" value="NetScaler"/>
1550
+ </fingerprint>
1551
+
1552
+ <fingerprint pattern="^HP (?:Color )?LaserJet ([^&amp;]+)&amp;">
1553
+ <description>HP LaserJet</description>
1554
+ <example hw.product="M1536dnf MFP">HP LaserJet M1536dnf MFP&amp;nbsp;&amp;nbsp;&amp;nbsp;1.1.1.1</example>
1555
+ <param pos="0" name="hw.vendor" value="HP"/>
1556
+ <param pos="0" name="hw.family" value="LaserJet"/>
1557
+ <param pos="0" name="hw.device" value="Printer"/>
1558
+ <param pos="1" name="hw.product"/>
1559
+ </fingerprint>
1560
+
1561
+ <fingerprint pattern="^Jamf Pro Login - Jamf Pro v(\S+)$">
1562
+ <description>Jamf Pro</description>
1563
+ <example service.version="10.14.0-t1563397490">Jamf Pro Login - Jamf Pro v10.14.0-t1563397490</example>
1564
+ <param pos="0" name="service.vendor" value="JAMF"/>
1565
+ <param pos="0" name="service.product" value="Pro"/>
1566
+ <param pos="0" name="service.cpe23" value="cpe:/a:jamf:pro:-"/>
1567
+ <param pos="1" name="service.version"/>
1568
+ </fingerprint>
1569
+
1570
+ <fingerprint pattern="^Keyper Systems Administration - Login$">
1571
+ <description>Keyper Systems Administration - Login</description>
1572
+ <example>Keyper Systems Administration - Login</example>
1573
+ <param pos="0" name="hw.vendor" value="Keyper"/>
1574
+ <param pos="0" name="hw.device" value="Access Control"/>
1575
+ <param pos="0" name="hw.product" value="Key Management"/>
1576
+ </fingerprint>
1577
+
1578
+ <fingerprint pattern="FireEye:\s*$">
1579
+ <description>FireEye Investigation Analysis System Appliance</description>
1580
+ <example>FireEye:</example>
1581
+ <param pos="0" name="hw.vendor" value="FireEye"/>
1582
+ <param pos="0" name="hw.product" value="IA Appliance"/>
1583
+ <param pos="0" name="hw.device" value="Security Appliance"/>
1584
+ </fingerprint>
1585
+
1586
+ <fingerprint pattern="^GigaVUE-OS$">
1587
+ <description>Gigamon GigaVUE Appliance</description>
1588
+ <example>GigaVUE-OS</example>
1589
+ <param pos="0" name="hw.vendor" value="Gigamon"/>
1590
+ <param pos="0" name="hw.device" value="Monitoring"/>
1591
+ <param pos="0" name="hw.product" value="GigaVUE"/>
1592
+ </fingerprint>
1593
+
1594
+ <fingerprint pattern="^Pure Storage Login$">
1595
+ <description>Pure Storage Appliance</description>
1596
+ <example>Pure Storage Login</example>
1597
+ <param pos="0" name="hw.vendor" value="Pure Storage"/>
1598
+ <param pos="0" name="hw.device" value="NAS"/>
1599
+ <param pos="0" name="hw.product" value="Appliance"/>
1600
+ </fingerprint>
1601
+
1602
+ <fingerprint pattern="^CRESTRON$">
1603
+ <description>Crestron Video Conferencing</description>
1604
+ <example>CRESTRON</example>
1605
+ <param pos="0" name="hw.vendor" value="Crestron"/>
1606
+ <param pos="0" name="hw.device" value="Video Conferencing"/>
1607
+ <param pos="0" name="os.vendor" value="Crestron"/>
1608
+ <param pos="0" name="os.family" value="Linux"/>
1609
+ <param pos="0" name="os.device" value="Video Conferencing"/>
1610
+ </fingerprint>
1611
+
1612
+ <fingerprint pattern="^ELAN Viewer Installation$">
1613
+ <description>ELAN Smart Home Controller</description>
1614
+ <example>ELAN Viewer Installation</example>
1615
+ <param pos="0" name="hw.vendor" value="ELAN"/>
1616
+ <param pos="0" name="hw.device" value="Building Automation"/>
1617
+ <param pos="0" name="hw.product" value="Home Controller"/>
1618
+ <param pos="0" name="os.vendor" value="ELAN"/>
1619
+ <param pos="0" name="os.family" value="Linux"/>
1620
+ </fingerprint>
1621
+
1622
+ <fingerprint pattern="^iTach IP2IR Setup and Configuration$">
1623
+ <description>iTach IP2IR</description>
1624
+ <example>iTach IP2IR Setup and Configuration</example>
1625
+ <param pos="0" name="hw.vendor" value="iTach"/>
1626
+ <param pos="0" name="hw.device" value="Device"/>
1627
+ <param pos="0" name="hw.product" value="IP2IR"/>
1628
+ </fingerprint>
1629
+
1630
+ </fingerprints>