recog-intrigue 2.3.7
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- checksums.yaml +7 -0
- data/.github/ISSUE_TEMPLATE/bug_report.md +37 -0
- data/.github/ISSUE_TEMPLATE/feature_request.md +17 -0
- data/.github/ISSUE_TEMPLATE/fingerprint_request.md +27 -0
- data/.github/PULL_REQUEST_TEMPLATE +24 -0
- data/.gitignore +14 -0
- data/.rbenv-gemset +1 -0
- data/.rspec +3 -0
- data/.ruby-gemset +1 -0
- data/.ruby-version +1 -0
- data/.travis.yml +25 -0
- data/.yardopts +1 -0
- data/CONTRIBUTING.md +171 -0
- data/COPYING +23 -0
- data/Gemfile +10 -0
- data/LICENSE +7 -0
- data/README.md +85 -0
- data/Rakefile +22 -0
- data/bin/recog_export +81 -0
- data/bin/recog_match +55 -0
- data/bin/recog_standardize +118 -0
- data/bin/recog_verify +64 -0
- data/cpe-remap.yaml +134 -0
- data/features/data/failing_banners_fingerprints.xml +20 -0
- data/features/data/matching_banners_fingerprints.xml +23 -0
- data/features/data/multiple_banners_fingerprints.xml +32 -0
- data/features/data/no_tests.xml +3 -0
- data/features/data/sample_banner.txt +2 -0
- data/features/data/successful_tests.xml +18 -0
- data/features/data/tests_with_failures.xml +20 -0
- data/features/data/tests_with_warnings.xml +17 -0
- data/features/match.feature +36 -0
- data/features/support/aruba.rb +3 -0
- data/features/support/env.rb +6 -0
- data/features/verify.feature +48 -0
- data/identifiers/README.md +47 -0
- data/identifiers/os_architecture.txt +20 -0
- data/identifiers/os_device.txt +52 -0
- data/identifiers/os_family.txt +160 -0
- data/identifiers/os_product.txt +199 -0
- data/identifiers/service_family.txt +185 -0
- data/identifiers/service_product.txt +255 -0
- data/identifiers/software_class.txt +26 -0
- data/identifiers/software_family.txt +91 -0
- data/identifiers/software_product.txt +333 -0
- data/identifiers/vendor.txt +405 -0
- data/lib/recog.rb +4 -0
- data/lib/recog/db.rb +78 -0
- data/lib/recog/db_manager.rb +31 -0
- data/lib/recog/fingerprint.rb +280 -0
- data/lib/recog/fingerprint/regexp_factory.rb +56 -0
- data/lib/recog/fingerprint/test.rb +18 -0
- data/lib/recog/formatter.rb +51 -0
- data/lib/recog/match_reporter.rb +77 -0
- data/lib/recog/matcher.rb +94 -0
- data/lib/recog/matcher_factory.rb +14 -0
- data/lib/recog/nizer.rb +347 -0
- data/lib/recog/verifier.rb +39 -0
- data/lib/recog/verifier_factory.rb +13 -0
- data/lib/recog/verify_reporter.rb +86 -0
- data/lib/recog/version.rb +3 -0
- data/misc/convert_mysql_err +61 -0
- data/misc/order.xsl +17 -0
- data/recog-intrigue.gemspec +45 -0
- data/requirements.txt +2 -0
- data/spec/data/best_os_match_1.yml +17 -0
- data/spec/data/best_os_match_2.yml +17 -0
- data/spec/data/best_service_match_1.yml +17 -0
- data/spec/data/smb_native_os.txt +25 -0
- data/spec/data/test_fingerprints.xml +36 -0
- data/spec/data/verification_fingerprints.xml +86 -0
- data/spec/data/whitespaced_fingerprint.xml +5 -0
- data/spec/lib/fingerprint_self_test_spec.rb +174 -0
- data/spec/lib/recog/db_spec.rb +98 -0
- data/spec/lib/recog/fingerprint/regexp_factory_spec.rb +73 -0
- data/spec/lib/recog/fingerprint_spec.rb +112 -0
- data/spec/lib/recog/formatter_spec.rb +69 -0
- data/spec/lib/recog/match_reporter_spec.rb +91 -0
- data/spec/lib/recog/nizer_spec.rb +330 -0
- data/spec/lib/recog/verify_reporter_spec.rb +113 -0
- data/spec/spec_helper.rb +82 -0
- data/update_cpes.py +186 -0
- data/xml/apache_modules.xml +1911 -0
- data/xml/apache_os.xml +273 -0
- data/xml/architecture.xml +36 -0
- data/xml/dns_versionbind.xml +761 -0
- data/xml/fingerprints.xsd +128 -0
- data/xml/ftp_banners.xml +1553 -0
- data/xml/h323_callresp.xml +603 -0
- data/xml/hp_pjl_id.xml +358 -0
- data/xml/html_title.xml +1630 -0
- data/xml/http_cookies.xml +411 -0
- data/xml/http_servers.xml +3195 -0
- data/xml/http_wwwauth.xml +595 -0
- data/xml/imap_banners.xml +245 -0
- data/xml/ldap_searchresult.xml +711 -0
- data/xml/mdns_device-info_txt.xml +1796 -0
- data/xml/mdns_workstation_txt.xml +15 -0
- data/xml/mysql_banners.xml +1649 -0
- data/xml/mysql_error.xml +871 -0
- data/xml/nntp_banners.xml +82 -0
- data/xml/ntp_banners.xml +1223 -0
- data/xml/operating_system.xml +629 -0
- data/xml/pop_banners.xml +499 -0
- data/xml/rsh_resp.xml +76 -0
- data/xml/rtsp_servers.xml +76 -0
- data/xml/sip_banners.xml +359 -0
- data/xml/sip_user_agents.xml +221 -0
- data/xml/smb_native_lm.xml +62 -0
- data/xml/smb_native_os.xml +662 -0
- data/xml/smtp_banners.xml +1690 -0
- data/xml/smtp_debug.xml +39 -0
- data/xml/smtp_ehlo.xml +49 -0
- data/xml/smtp_expn.xml +82 -0
- data/xml/smtp_help.xml +157 -0
- data/xml/smtp_mailfrom.xml +20 -0
- data/xml/smtp_noop.xml +44 -0
- data/xml/smtp_quit.xml +29 -0
- data/xml/smtp_rcptto.xml +25 -0
- data/xml/smtp_rset.xml +26 -0
- data/xml/smtp_turn.xml +26 -0
- data/xml/smtp_vrfy.xml +89 -0
- data/xml/snmp_sysdescr.xml +6507 -0
- data/xml/snmp_sysobjid.xml +430 -0
- data/xml/ssh_banners.xml +1968 -0
- data/xml/telnet_banners.xml +1595 -0
- data/xml/x11_banners.xml +232 -0
- data/xml/x509_issuers.xml +134 -0
- data/xml/x509_subjects.xml +1268 -0
- metadata +304 -0
|
@@ -0,0 +1,82 @@
|
|
|
1
|
+
<?xml version="1.0" encoding="UTF-8"?>
|
|
2
|
+
<fingerprints matches="nntp.banner" protocol="nntp" database_type="service">
|
|
3
|
+
<!--
|
|
4
|
+
NNTP greeting messages (part of the banner after the response code) are matched
|
|
5
|
+
against these patterns to fingerprint NNTP servers.
|
|
6
|
+
-->
|
|
7
|
+
<fingerprint pattern="CCProxy NNTP Service$">
|
|
8
|
+
<description>Youngzsoft CCProxy NNTP with no version</description>
|
|
9
|
+
<example>CCProxy NNTP Service</example>
|
|
10
|
+
<param pos="0" name="service.vendor" value="Youngzsoft"/>
|
|
11
|
+
<param pos="0" name="service.family" value="CCProxy"/>
|
|
12
|
+
<param pos="0" name="service.product" value="CCProxy"/>
|
|
13
|
+
</fingerprint>
|
|
14
|
+
<fingerprint pattern="^(\S+) Lyris ListManager NNTP Service ready">
|
|
15
|
+
<description>Lyris Listmanager</description>
|
|
16
|
+
<example host.name="blah">blah Lyris ListManager NNTP Service ready (posting ok).</example>
|
|
17
|
+
<param pos="0" name="service.vendor" value="Lyris"/>
|
|
18
|
+
<param pos="0" name="service.family" value="ListManager"/>
|
|
19
|
+
<param pos="0" name="service.product" value="ListManager"/>
|
|
20
|
+
<param pos="1" name="host.name"/>
|
|
21
|
+
</fingerprint>
|
|
22
|
+
<fingerprint pattern="^NNTP Service (?:.*) Version: (5.0.2195.[0-9]+) .*$">
|
|
23
|
+
<description>Microsoft IIS NNTP Server on Windows 2000</description>
|
|
24
|
+
<example>NNTP Service 5.00.0984 Version: 5.0.2195.7034 Posting Allowed</example>
|
|
25
|
+
<example>NNTP Service 5.00.0984 Version: 5.0.2195.5329 Posting Allowed</example>
|
|
26
|
+
<param pos="0" name="service.vendor" value="Microsoft"/>
|
|
27
|
+
<param pos="0" name="service.product" value="IIS"/>
|
|
28
|
+
<param pos="0" name="service.family" value="IIS"/>
|
|
29
|
+
<param pos="1" name="service.version"/>
|
|
30
|
+
<param pos="0" name="service.cpe23" value="cpe:/a:microsoft:iis:{service.version}"/>
|
|
31
|
+
<param pos="0" name="os.vendor" value="Microsoft"/>
|
|
32
|
+
<param pos="0" name="os.family" value="Windows"/>
|
|
33
|
+
<param pos="0" name="os.product" value="Windows 2000"/>
|
|
34
|
+
<param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_2000:-"/>
|
|
35
|
+
<param pos="1" name="ms.nttp.version"/>
|
|
36
|
+
</fingerprint>
|
|
37
|
+
<fingerprint pattern="^NNTP Service (?:.*) Version: (6.0.3790.[0-9]+) .*$">
|
|
38
|
+
<description>Microsoft IIS NNTP Server on Windows Server 2003</description>
|
|
39
|
+
<example>NNTP Service 6.0.3790.3959 Version: 6.0.3790.3959 Posting Allowed</example>
|
|
40
|
+
<example>NNTP Service 6.0.3790.206 Version: 6.0.3790.206 Posting Allowed</example>
|
|
41
|
+
<param pos="0" name="service.vendor" value="Microsoft"/>
|
|
42
|
+
<param pos="0" name="service.product" value="IIS"/>
|
|
43
|
+
<param pos="0" name="service.family" value="IIS"/>
|
|
44
|
+
<param pos="1" name="service.version"/>
|
|
45
|
+
<param pos="0" name="service.cpe23" value="cpe:/a:microsoft:iis:{service.version}"/>
|
|
46
|
+
<param pos="0" name="os.vendor" value="Microsoft"/>
|
|
47
|
+
<param pos="0" name="os.family" value="Windows"/>
|
|
48
|
+
<param pos="0" name="os.product" value="Windows Server 2003"/>
|
|
49
|
+
<param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_server_2003:-"/>
|
|
50
|
+
<param pos="1" name="ms.nttp.version"/>
|
|
51
|
+
</fingerprint>
|
|
52
|
+
<fingerprint pattern="^NNTP Service Microsoft. Internet Services (?:.*) Version: (?:[^ ]+) .*$">
|
|
53
|
+
<description>Older Microsoft IIS NNTP Servers</description>
|
|
54
|
+
<example>NNTP Service Microsoft. Internet Services 5.00 Version: 5.0.2068.0 Posting Allowed</example>
|
|
55
|
+
<example>NNTP Service Microsoft. Internet Services 5.00.7515. Version: 5.0.0.7515 Posting Allowed</example>
|
|
56
|
+
<example>NNTP Service Microsoft. Internet Services 5.5 Version: 5.5.1726.0 Posting Allowed</example>
|
|
57
|
+
<param pos="0" name="service.vendor" value="Microsoft"/>
|
|
58
|
+
<param pos="0" name="service.family" value="Exchange Server"/>
|
|
59
|
+
<param pos="0" name="service.product" value="Exchange Server"/>
|
|
60
|
+
<param pos="0" name="service.cpe23" value="cpe:/a:microsoft:exchange_server:-"/>
|
|
61
|
+
<param pos="0" name="os.vendor" value="Microsoft"/>
|
|
62
|
+
<param pos="0" name="os.family" value="Windows"/>
|
|
63
|
+
<param pos="0" name="os.product" value="Windows"/>
|
|
64
|
+
<param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows:-"/>
|
|
65
|
+
</fingerprint>
|
|
66
|
+
<fingerprint pattern="^Kerio (?:Connect|MailServer)\s+(\d\.[\d.]+)\s+(?:(?:patch|RC) (\d)\s+)?NNTP server ready$">
|
|
67
|
+
<description>Kerio Connect NNTP</description>
|
|
68
|
+
<example service.version="9.2.3">Kerio Connect 9.2.3 NNTP server ready</example>
|
|
69
|
+
<example service.version="9.2.6" service.version.version="2">Kerio Connect 9.2.6 patch 2 NNTP server ready</example>
|
|
70
|
+
<example service.version="6.7.3">Kerio MailServer 6.7.3 NNTP server ready</example>
|
|
71
|
+
<param pos="0" name="service.vendor" value="Kerio"/>
|
|
72
|
+
<param pos="0" name="service.family" value="Connect"/>
|
|
73
|
+
<param pos="0" name="service.product" value="NNTP"/>
|
|
74
|
+
<param pos="1" name="service.version"/>
|
|
75
|
+
<param pos="2" name="service.version.version"/>
|
|
76
|
+
</fingerprint>
|
|
77
|
+
<fingerprint pattern="^NNTP server ready(?: \(no posting\))?$">
|
|
78
|
+
<description>Non-specific NNTP</description>
|
|
79
|
+
<example>NNTP server ready (no posting)</example>
|
|
80
|
+
<example>NNTP server ready</example>
|
|
81
|
+
</fingerprint>
|
|
82
|
+
</fingerprints>
|
data/xml/ntp_banners.xml
ADDED
|
@@ -0,0 +1,1223 @@
|
|
|
1
|
+
<?xml version="1.0" encoding="UTF-8"?>
|
|
2
|
+
<fingerprints matches="ntp.readvar" protocol="ntp" database_type="service" preference="0.80">
|
|
3
|
+
<!--
|
|
4
|
+
NTP "banners", taken from a readvar response
|
|
5
|
+
-->
|
|
6
|
+
<fingerprint pattern="^.*version=Domain Time II (\S+),hostname=([^,]+),.*system=Win2003.*,processor=(\S+)" flags="REG_DOT_NEWLINE,REG_ICASE">
|
|
7
|
+
<description>Greyware Automation Products, Inc. Domain Time II on Windows Server 2003</description>
|
|
8
|
+
<example service.version="5.1.b.20100331R" os.arch="x64" host.name="blah">
|
|
9
|
+
version=Domain Time II 5.1.b.20100331R,hostname=blah,domain=,flat=WORKGROUP,system=Win2003 x64,processor=x64
|
|
10
|
+
</example>
|
|
11
|
+
<example service.version="5.2.b.20110831R" os.arch="x86" host.name="blah">
|
|
12
|
+
version=Domain Time II 5.2.b.20110831R,hostname=blah,domain=blah,flat=blah,system=Win2003,processor=x86
|
|
13
|
+
</example>
|
|
14
|
+
<param pos="0" name="service.vendor" value="Greyware Automation Products, Inc."/>
|
|
15
|
+
<param pos="0" name="service.product" value="Domain Time II"/>
|
|
16
|
+
<param pos="1" name="service.version"/>
|
|
17
|
+
<param pos="2" name="host.name"/>
|
|
18
|
+
<param pos="0" name="os.vendor" value="Microsoft"/>
|
|
19
|
+
<param pos="0" name="os.family" value="Windows"/>
|
|
20
|
+
<param pos="0" name="os.product" value="Windows Server 2003"/>
|
|
21
|
+
<param pos="3" name="os.arch"/>
|
|
22
|
+
<param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_server_2003:-"/>
|
|
23
|
+
</fingerprint>
|
|
24
|
+
<fingerprint pattern="^.*version=Domain Time II (\S+),hostname=([^,]+),.*system=Win2008R2.*,processor=(\S+)" flags="REG_DOT_NEWLINE,REG_ICASE">
|
|
25
|
+
<description>Greyware Automation Products, Inc. Domain Time II on Windows Server 2008 R2</description>
|
|
26
|
+
<example service.version="5.2.b.20120215R" os.arch="x64" host.name="blah">
|
|
27
|
+
version=Domain Time II 5.2.b.20120215R,hostname=blah,domain=blah,flat=blah,system=Win2008R2 x64,processor=x64
|
|
28
|
+
</example>
|
|
29
|
+
<param pos="0" name="service.vendor" value="Greyware Automation Products, Inc."/>
|
|
30
|
+
<param pos="0" name="service.product" value="Domain Time II"/>
|
|
31
|
+
<param pos="1" name="service.version"/>
|
|
32
|
+
<param pos="2" name="host.name"/>
|
|
33
|
+
<param pos="0" name="os.vendor" value="Microsoft"/>
|
|
34
|
+
<param pos="0" name="os.family" value="Windows"/>
|
|
35
|
+
<param pos="0" name="os.product" value="Windows 2008 R2"/>
|
|
36
|
+
<param pos="3" name="os.arch"/>
|
|
37
|
+
<param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_server_2008:-"/>
|
|
38
|
+
</fingerprint>
|
|
39
|
+
<fingerprint pattern="^.*version=Domain Time II (\S+),hostname=([^,]+),.*system=Win2008.*,processor=(\S+)" flags="REG_DOT_NEWLINE,REG_ICASE">
|
|
40
|
+
<description>Greyware Automation Products, Inc. Domain Time II on Windows 2008</description>
|
|
41
|
+
<example service.version="5.2.b.20140303R" os.arch="x86" host.name="blah">
|
|
42
|
+
version=Domain Time II 5.2.b.20140303R,hostname=blah,domain=blah,flat=blah,system=Win2008,processor=x86
|
|
43
|
+
</example>
|
|
44
|
+
<example service.version="5.2.b.20140523" os.arch="x64" host.name="blah">
|
|
45
|
+
version=Domain Time II 5.2.b.20140523,hostname=blah,domain=blah,flat=blah,system=Win2008 x64,processor=x64
|
|
46
|
+
</example>
|
|
47
|
+
<param pos="0" name="service.vendor" value="Greyware Automation Products, Inc."/>
|
|
48
|
+
<param pos="0" name="service.product" value="Domain Time II"/>
|
|
49
|
+
<param pos="1" name="service.version"/>
|
|
50
|
+
<param pos="2" name="host.name"/>
|
|
51
|
+
<param pos="0" name="os.vendor" value="Microsoft"/>
|
|
52
|
+
<param pos="0" name="os.family" value="Windows"/>
|
|
53
|
+
<param pos="0" name="os.product" value="Windows Server 2008"/>
|
|
54
|
+
<param pos="3" name="os.arch"/>
|
|
55
|
+
<param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_server_2008:-"/>
|
|
56
|
+
</fingerprint>
|
|
57
|
+
<fingerprint pattern="^.*version=Domain Time II (\S+),hostname=([^,]+),.*system=Win2012.*,processor=(\S+)" flags="REG_DOT_NEWLINE,REG_ICASE">
|
|
58
|
+
<description>Greyware Automation Products, Inc. Domain Time II on Windows Server 2012</description>
|
|
59
|
+
<example service.version="5.2.b.20140101R" os.arch="x64" host.name="blah">
|
|
60
|
+
version=Domain Time II 5.2.b.20140101R,hostname=blah,domain=blah,flat=blah,system=Win2012 x64,processor=x64
|
|
61
|
+
</example>
|
|
62
|
+
<param pos="0" name="service.vendor" value="Greyware Automation Products, Inc."/>
|
|
63
|
+
<param pos="0" name="service.product" value="Domain Time II"/>
|
|
64
|
+
<param pos="1" name="service.version"/>
|
|
65
|
+
<param pos="2" name="host.name"/>
|
|
66
|
+
<param pos="0" name="os.vendor" value="Microsoft"/>
|
|
67
|
+
<param pos="0" name="os.family" value="Windows"/>
|
|
68
|
+
<param pos="0" name="os.product" value="Windows Server 2012"/>
|
|
69
|
+
<param pos="3" name="os.arch"/>
|
|
70
|
+
<param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_server_2012:-"/>
|
|
71
|
+
</fingerprint>
|
|
72
|
+
<fingerprint pattern="^.*version=Domain Time II (\S+),hostname=([^,]+),.*system=Win7.*,processor=(\S+)" flags="REG_DOT_NEWLINE,REG_ICASE">
|
|
73
|
+
<description>Greyware Automation Products, Inc. Domain Time II on Windows 7</description>
|
|
74
|
+
<example service.version="5.2.b.20130405R" os.arch="x64" host.name="blah">
|
|
75
|
+
version=Domain Time II 5.2.b.20130405R,hostname=blah,domain=,flat=WORKGROUP,system=Win7 x64,processor=x64
|
|
76
|
+
</example>
|
|
77
|
+
<param pos="0" name="service.vendor" value="Greyware Automation Products, Inc."/>
|
|
78
|
+
<param pos="0" name="service.product" value="Domain Time II"/>
|
|
79
|
+
<param pos="1" name="service.version"/>
|
|
80
|
+
<param pos="2" name="host.name"/>
|
|
81
|
+
<param pos="0" name="os.vendor" value="Microsoft"/>
|
|
82
|
+
<param pos="0" name="os.family" value="Windows"/>
|
|
83
|
+
<param pos="0" name="os.product" value="Windows 7"/>
|
|
84
|
+
<param pos="3" name="os.arch"/>
|
|
85
|
+
<param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_7:-"/>
|
|
86
|
+
</fingerprint>
|
|
87
|
+
<fingerprint pattern="^.*version="ntpd (\S+)[^"]+",.*system="Equallogic \(R\) storage array"" flags="REG_DOT_NEWLINE,REG_ICASE">
|
|
88
|
+
<description>ntpd running on an EqualLogic Storage Array that includes the NTP version</description>
|
|
89
|
+
<example>
|
|
90
|
+
version="ntpd 4.2.0-r Fri Feb 5 15:18:30 EST 2010 (1)",
|
|
91
|
+
processor="Working", system="EqualLogic (R) storage array", leap=0,
|
|
92
|
+
stratum=3, precision=-7, rootdelay=102.894, rootdispersion=245.154,
|
|
93
|
+
peer=63940, refid=172.23.16.40, reftime=0xd22791f2.e4026bd4, poll=10,
|
|
94
|
+
clock=0xd2279937.d078b9f3, state=4, offset=8.644, frequency=39.586,
|
|
95
|
+
jitter=10.870, stability=0.795
|
|
96
|
+
</example>
|
|
97
|
+
<param pos="0" name="service.family" value="NTP"/>
|
|
98
|
+
<param pos="0" name="service.product" value="NTP"/>
|
|
99
|
+
<param pos="1" name="service.version"/>
|
|
100
|
+
<param pos="0" name="os.vendor" value="EqualLogic"/>
|
|
101
|
+
<param pos="0" name="os.product" value="Storage Array"/>
|
|
102
|
+
</fingerprint>
|
|
103
|
+
<fingerprint pattern="^.*system="Equallogic \(R\) storage array"" flags="REG_DOT_NEWLINE,REG_ICASE">
|
|
104
|
+
<description>ntpd running on an EqualLogic Storage Array that does not include the NTP version</description>
|
|
105
|
+
<example>
|
|
106
|
+
processor="Working", system="Equallogic (R) storage array", leap=3,
|
|
107
|
+
stratum=16, precision=-7, rootdelay=0.000, rootdispersion=11715.765,
|
|
108
|
+
peer=0, refid=0.0.0.0, reftime=0x00000000.00000000, poll=6,
|
|
109
|
+
clock=0xd229efe1.5559b3d0, state=1, phase=0.000, frequency=0.000,
|
|
110
|
+
jitter=0.000, stability=0.000
|
|
111
|
+
</example>
|
|
112
|
+
<param pos="0" name="os.vendor" value="EqualLogic"/>
|
|
113
|
+
<param pos="0" name="os.product" value="Storage Array"/>
|
|
114
|
+
</fingerprint>
|
|
115
|
+
<fingerprint pattern="^.*version="ntpd ([^ ]+)[^"]+",.*processor="([^ ]+)",.*system="Linux/(?:[^ ]+\.ESX)"" flags="REG_DOT_NEWLINE,REG_ICASE">
|
|
116
|
+
<description>ntpd running on VMware ESX</description>
|
|
117
|
+
<example service.version="4.2.2p1@1.1570-o" os.arch="x86_64">
|
|
118
|
+
version="ntpd 4.2.2p1@1.1570-o Thu Nov 26 11:34:34 UTC 2009 (1)",
|
|
119
|
+
processor="x86_64", system="Linux/2.6.18-194.ESX"
|
|
120
|
+
</example>
|
|
121
|
+
<param pos="0" name="service.family" value="NTP"/>
|
|
122
|
+
<param pos="0" name="service.product" value="NTP"/>
|
|
123
|
+
<param pos="1" name="service.version"/>
|
|
124
|
+
<param pos="0" name="os.vendor" value="VMware"/>
|
|
125
|
+
<param pos="0" name="os.family" value="VMware ESX/ESXi"/>
|
|
126
|
+
<param pos="0" name="os.product" value="VMware ESX Server"/>
|
|
127
|
+
<param pos="2" name="os.arch"/>
|
|
128
|
+
<param pos="0" name="os.cpe23" value="cpe:/o:vmware:esx:-"/>
|
|
129
|
+
</fingerprint>
|
|
130
|
+
<fingerprint pattern="^.*version="ntpd ([^ ]+)[^"]+",.*processor="([^ ]+)",.*system="Linux/?([^ ]+)"" flags="REG_DOT_NEWLINE,REG_ICASE">
|
|
131
|
+
<description>ntpd running on Linux</description>
|
|
132
|
+
<example>
|
|
133
|
+
version="ntpd 4.2.4p3@1.1502-o Wed Jul 18 11:45:01 UTC 2007 (1)",
|
|
134
|
+
processor="i686", system="Linux/2.4.29", leap=00, stratum=3,
|
|
135
|
+
</example>
|
|
136
|
+
<param pos="0" name="service.family" value="NTP"/>
|
|
137
|
+
<param pos="0" name="service.product" value="NTP"/>
|
|
138
|
+
<param pos="1" name="service.version"/>
|
|
139
|
+
<param pos="0" name="os.vendor" value="Linux"/>
|
|
140
|
+
<param pos="0" name="os.family" value="Linux"/>
|
|
141
|
+
<param pos="0" name="os.product" value="Linux"/>
|
|
142
|
+
<param pos="2" name="os.arch"/>
|
|
143
|
+
<param pos="3" name="os.version"/>
|
|
144
|
+
<param pos="0" name="os.cpe23" value="cpe:/o:linux:linux_kernel:{os.version}"/>
|
|
145
|
+
</fingerprint>
|
|
146
|
+
<fingerprint pattern="^.*version="ntpd ([^ ]+)[^"]+",.*processor="([^"]+)",.*system="Darwin/?6\.([^"]+)"" flags="REG_DOT_NEWLINE,REG_ICASE">
|
|
147
|
+
<description>ntpd running on Mac OSX 10.2/Jaguar</description>
|
|
148
|
+
<example service.version="4.1.1@1.786" os.version.version="8">
|
|
149
|
+
version="ntpd 4.1.1@1.786 Tue Nov 12 09:30:41 PST 2002 (1)", processor="Power Macintosh", system="Darwin6.8",
|
|
150
|
+
</example>
|
|
151
|
+
<param pos="0" name="service.family" value="NTP"/>
|
|
152
|
+
<param pos="0" name="service.product" value="NTP"/>
|
|
153
|
+
<param pos="1" name="service.version"/>
|
|
154
|
+
<param pos="0" name="os.vendor" value="Apple"/>
|
|
155
|
+
<param pos="0" name="os.family" value="Mac OS X"/>
|
|
156
|
+
<param pos="0" name="os.product" value="Mac OS X"/>
|
|
157
|
+
<param pos="2" name="os.arch"/>
|
|
158
|
+
<param pos="0" name="os.version" value="10.2"/>
|
|
159
|
+
<param pos="3" name="os.version.version"/>
|
|
160
|
+
<param pos="0" name="os.certainty" value="0.9"/>
|
|
161
|
+
<param pos="0" name="os.cpe23" value="cpe:/o:apple:mac_os_x:10.2"/>
|
|
162
|
+
</fingerprint>
|
|
163
|
+
<fingerprint pattern="^.*version="ntpd ([^ ]+)[^"]+",.*processor="([^"]+)",.*system="Darwin/?7\.([^"]+)"" flags="REG_DOT_NEWLINE,REG_ICASE">
|
|
164
|
+
<description>ntpd running on Mac OSX 10.3/Panther</description>
|
|
165
|
+
<param pos="0" name="service.family" value="NTP"/>
|
|
166
|
+
<param pos="0" name="service.product" value="NTP"/>
|
|
167
|
+
<param pos="1" name="service.version"/>
|
|
168
|
+
<param pos="0" name="os.vendor" value="Apple"/>
|
|
169
|
+
<param pos="0" name="os.family" value="Mac OS X"/>
|
|
170
|
+
<param pos="0" name="os.product" value="Mac OS X"/>
|
|
171
|
+
<param pos="2" name="os.arch"/>
|
|
172
|
+
<param pos="0" name="os.version" value="10.3"/>
|
|
173
|
+
<param pos="3" name="os.version.version"/>
|
|
174
|
+
<param pos="0" name="os.certainty" value="0.9"/>
|
|
175
|
+
<param pos="0" name="os.cpe23" value="cpe:/o:apple:mac_os_x:10.3"/>
|
|
176
|
+
</fingerprint>
|
|
177
|
+
<fingerprint pattern="^.*version="ntpd ([^ ]+)[^"]+",.*processor="([^"]+)",.*system="Darwin/?8\.([^"]+)"" flags="REG_DOT_NEWLINE,REG_ICASE">
|
|
178
|
+
<description>ntpd running on Mac OSX 10.4/Tiger</description>
|
|
179
|
+
<example>
|
|
180
|
+
version="ntpd 4.2.0@1.1161-r Fri Jan 13 11:36:23 PST 2006 (1)",
|
|
181
|
+
processor="i386", system="Darwin/8.11.1", leap=11, stratum=16,
|
|
182
|
+
</example>
|
|
183
|
+
<param pos="0" name="service.family" value="NTP"/>
|
|
184
|
+
<param pos="0" name="service.product" value="NTP"/>
|
|
185
|
+
<param pos="1" name="service.version"/>
|
|
186
|
+
<param pos="0" name="os.vendor" value="Apple"/>
|
|
187
|
+
<param pos="0" name="os.family" value="Mac OS X"/>
|
|
188
|
+
<param pos="0" name="os.product" value="Mac OS X"/>
|
|
189
|
+
<param pos="2" name="os.arch"/>
|
|
190
|
+
<param pos="0" name="os.version" value="10.4"/>
|
|
191
|
+
<param pos="3" name="os.version.version"/>
|
|
192
|
+
<param pos="0" name="os.certainty" value="0.9"/>
|
|
193
|
+
<param pos="0" name="os.cpe23" value="cpe:/o:apple:mac_os_x:10.4"/>
|
|
194
|
+
</fingerprint>
|
|
195
|
+
<fingerprint pattern="^.*version="ntpd ([^ ]+)[^"]+",.*processor="([^"]+)",.*system="Darwin/?9\.([^"]+)"" flags="REG_DOT_NEWLINE,REG_ICASE">
|
|
196
|
+
<description>ntpd running on Mac OSX 10.5/Leopard</description>
|
|
197
|
+
<example>
|
|
198
|
+
version="ntpd 4.2.2@1.1532-o Mon Sep 24 01:42:27 UTC 2007 (1)",
|
|
199
|
+
processor="Power Macintosh", system="Darwin/9.0.0", leap=3, stratum=16,
|
|
200
|
+
</example>
|
|
201
|
+
<param pos="0" name="service.family" value="NTP"/>
|
|
202
|
+
<param pos="0" name="service.product" value="NTP"/>
|
|
203
|
+
<param pos="1" name="service.version"/>
|
|
204
|
+
<param pos="0" name="os.vendor" value="Apple"/>
|
|
205
|
+
<param pos="0" name="os.family" value="Mac OS X"/>
|
|
206
|
+
<param pos="0" name="os.product" value="Mac OS X"/>
|
|
207
|
+
<param pos="2" name="os.arch"/>
|
|
208
|
+
<param pos="0" name="os.version" value="10.5"/>
|
|
209
|
+
<param pos="3" name="os.version.version"/>
|
|
210
|
+
<param pos="0" name="os.certainty" value="0.9"/>
|
|
211
|
+
<param pos="0" name="os.cpe23" value="cpe:/o:apple:mac_os_x:10.5"/>
|
|
212
|
+
</fingerprint>
|
|
213
|
+
<fingerprint pattern="^.*version="ntpd ([^ ]+)[^"]+",.*processor="([^"]+)",.*system="Darwin/?10\.([^"]+)"" flags="REG_DOT_NEWLINE,REG_ICASE">
|
|
214
|
+
<description>ntpd running on Mac OSX 10.6/Snow Leopard</description>
|
|
215
|
+
<example>
|
|
216
|
+
version="ntpd 4.2.4p4@1.1520-o Mon May 18 19:38:25 UTC 2009 (1)",
|
|
217
|
+
processor="i386", system="Darwin/10.8.0", leap=0, stratum=3,
|
|
218
|
+
</example>
|
|
219
|
+
<param pos="0" name="service.family" value="NTP"/>
|
|
220
|
+
<param pos="0" name="service.product" value="NTP"/>
|
|
221
|
+
<param pos="1" name="service.version"/>
|
|
222
|
+
<param pos="0" name="os.vendor" value="Apple"/>
|
|
223
|
+
<param pos="0" name="os.family" value="Mac OS X"/>
|
|
224
|
+
<param pos="0" name="os.product" value="Mac OS X"/>
|
|
225
|
+
<param pos="2" name="os.arch"/>
|
|
226
|
+
<param pos="0" name="os.version" value="10.6"/>
|
|
227
|
+
<param pos="3" name="os.version.version"/>
|
|
228
|
+
<param pos="0" name="os.certainty" value="0.9"/>
|
|
229
|
+
<param pos="0" name="os.cpe23" value="cpe:/o:apple:mac_os_x:10.6"/>
|
|
230
|
+
</fingerprint>
|
|
231
|
+
<fingerprint pattern="^.*processor="([^"]+)".*system="BSD/OS([\d.]+)"" flags="REG_DOT_NEWLINE,REG_ICASE">
|
|
232
|
+
<description>BSD/OS with a version and arch</description>
|
|
233
|
+
<example os.arch="i386" os.version="4.3.1">
|
|
234
|
+
processor="i386", system="BSD/OS4.3.1", leap=0, stratum=2
|
|
235
|
+
</example>
|
|
236
|
+
<param pos="0" name="os.vendor" value="Berkeley Software Design Inc."/>
|
|
237
|
+
<param pos="0" name="os.product" value="BSD/OS"/>
|
|
238
|
+
<param pos="1" name="os.arch"/>
|
|
239
|
+
<param pos="2" name="os.version"/>
|
|
240
|
+
</fingerprint>
|
|
241
|
+
<fingerprint pattern="^.*system="BSD/OS"" flags="REG_DOT_NEWLINE,REG_ICASE">
|
|
242
|
+
<description>BSD/OS without a version or arch</description>
|
|
243
|
+
<example>
|
|
244
|
+
system="BSD/OS", leap=3, stratum=16, rootdelay=0.00
|
|
245
|
+
</example>
|
|
246
|
+
<param pos="0" name="os.vendor" value="Berkeley Software Design Inc."/>
|
|
247
|
+
<param pos="0" name="os.product" value="BSD/OS"/>
|
|
248
|
+
</fingerprint>
|
|
249
|
+
<fingerprint pattern="^.*version="ntpd ([^ ]+)[^"]+",.*processor="([^"]+)",.*system="Darwin/?11\.([^"]+)"" flags="REG_DOT_NEWLINE,REG_ICASE">
|
|
250
|
+
<description>ntpd running on Mac OSX 10.7/Lion</description>
|
|
251
|
+
<example>
|
|
252
|
+
version="ntpd 4.2.6@1.2089-o Fri May 28 01:20:53 UTC 2010 (1)",
|
|
253
|
+
processor="x86_64", system="Darwin/11.2.0", leap=11, stratum=16,
|
|
254
|
+
</example>
|
|
255
|
+
<param pos="0" name="service.family" value="NTP"/>
|
|
256
|
+
<param pos="0" name="service.product" value="NTP"/>
|
|
257
|
+
<param pos="1" name="service.version"/>
|
|
258
|
+
<param pos="0" name="os.vendor" value="Apple"/>
|
|
259
|
+
<param pos="0" name="os.family" value="Mac OS X"/>
|
|
260
|
+
<param pos="0" name="os.product" value="Mac OS X"/>
|
|
261
|
+
<param pos="2" name="os.arch"/>
|
|
262
|
+
<param pos="0" name="os.version" value="10.7"/>
|
|
263
|
+
<param pos="3" name="os.version.version"/>
|
|
264
|
+
<param pos="0" name="os.certainty" value="0.9"/>
|
|
265
|
+
<param pos="0" name="os.cpe23" value="cpe:/o:apple:mac_os_x:10.7"/>
|
|
266
|
+
</fingerprint>
|
|
267
|
+
<fingerprint pattern="^.*version="ntpd ([^ ]+)[^"]+",.*processor="([^"]+)",.*system="Darwin/?12\.([^"]+)"" flags="REG_DOT_NEWLINE,REG_ICASE">
|
|
268
|
+
<description>ntpd running on Mac OSX 10.8/Mountain Lion</description>
|
|
269
|
+
<example service.version="4.2.6@1.2089-o" os.arch="x86_64" os.version.version="1.0">
|
|
270
|
+
version="ntpd 4.2.6@1.2089-o Fri May 28 01:20:53 UTC 2010 (1)",
|
|
271
|
+
processor="x86_64", system="Darwin/12.1.0", leap=3, stratum=16,
|
|
272
|
+
</example>
|
|
273
|
+
<param pos="0" name="service.family" value="NTP"/>
|
|
274
|
+
<param pos="0" name="service.product" value="NTP"/>
|
|
275
|
+
<param pos="1" name="service.version"/>
|
|
276
|
+
<param pos="0" name="os.vendor" value="Apple"/>
|
|
277
|
+
<param pos="0" name="os.family" value="Mac OS X"/>
|
|
278
|
+
<param pos="0" name="os.product" value="Mac OS X"/>
|
|
279
|
+
<param pos="2" name="os.arch"/>
|
|
280
|
+
<param pos="0" name="os.version" value="10.8"/>
|
|
281
|
+
<param pos="3" name="os.version.version"/>
|
|
282
|
+
<param pos="0" name="os.certainty" value="0.9"/>
|
|
283
|
+
<param pos="0" name="os.cpe23" value="cpe:/o:apple:mac_os_x:10.8"/>
|
|
284
|
+
</fingerprint>
|
|
285
|
+
<fingerprint pattern="^.*version="ntpd ([^ ]+)[^"]+",.*processor="([^"]+)",.*system="Darwin/?13\.([^"]+)"" flags="REG_DOT_NEWLINE,REG_ICASE">
|
|
286
|
+
<description>ntpd running on Mac OSX 10.9/Mavericks</description>
|
|
287
|
+
<example service.version="4.2.6@1.2089-o" os.arch="x86_64" os.version.version="4.0">
|
|
288
|
+
version="ntpd 4.2.6@1.2089-o Fri May 28 01:20:53 UTC 2010 (1)",
|
|
289
|
+
processor="x86_64", system="Darwin/13.4.0", leap=3, stratum=16,
|
|
290
|
+
</example>
|
|
291
|
+
<param pos="0" name="service.family" value="NTP"/>
|
|
292
|
+
<param pos="0" name="service.product" value="NTP"/>
|
|
293
|
+
<param pos="1" name="service.version"/>
|
|
294
|
+
<param pos="0" name="os.vendor" value="Apple"/>
|
|
295
|
+
<param pos="0" name="os.family" value="Mac OS X"/>
|
|
296
|
+
<param pos="0" name="os.product" value="Mac OS X"/>
|
|
297
|
+
<param pos="2" name="os.arch"/>
|
|
298
|
+
<param pos="0" name="os.version" value="10.9"/>
|
|
299
|
+
<param pos="3" name="os.version.version"/>
|
|
300
|
+
<param pos="0" name="os.certainty" value="0.9"/>
|
|
301
|
+
<param pos="0" name="os.cpe23" value="cpe:/o:apple:mac_os_x:10.9"/>
|
|
302
|
+
</fingerprint>
|
|
303
|
+
<fingerprint pattern="^.*version="ntpd ([^ ]+)[^"]+",.*processor="([^"]+)",.*system="Darwin/?14\.([^"]+)"" flags="REG_DOT_NEWLINE,REG_ICASE">
|
|
304
|
+
<description>ntpd running on Mac OSX 10.10/Yosemite</description>
|
|
305
|
+
<example service.version="4.2.6@1.2089-o" os.arch="x86_64" os.version.version="3.0">
|
|
306
|
+
version="ntpd 4.2.6@1.2089-o Fri May 28 01:20:53 UTC 2010 (1)",
|
|
307
|
+
processor="x86_64", system="Darwin/14.3.0", leap=00, stratum=2,
|
|
308
|
+
</example>
|
|
309
|
+
<param pos="0" name="service.family" value="NTP"/>
|
|
310
|
+
<param pos="0" name="service.product" value="NTP"/>
|
|
311
|
+
<param pos="1" name="service.version"/>
|
|
312
|
+
<param pos="0" name="os.vendor" value="Apple"/>
|
|
313
|
+
<param pos="0" name="os.family" value="Mac OS X"/>
|
|
314
|
+
<param pos="0" name="os.product" value="Mac OS X"/>
|
|
315
|
+
<param pos="2" name="os.arch"/>
|
|
316
|
+
<param pos="0" name="os.version" value="10.10"/>
|
|
317
|
+
<param pos="3" name="os.version.version"/>
|
|
318
|
+
<param pos="0" name="os.certainty" value="0.9"/>
|
|
319
|
+
<param pos="0" name="os.cpe23" value="cpe:/o:apple:mac_os_x:10.10"/>
|
|
320
|
+
</fingerprint>
|
|
321
|
+
<fingerprint pattern="^.*version="ntpd ([^ ]+)[^"]+",.*processor="([^ ]+)",.*system="FreeBSD/?(?:[^ ]+-NETSCALER-([^ ]+))"" flags="REG_DOT_NEWLINE,REG_ICASE">
|
|
322
|
+
<description>ntpd running on Citrix Netscaler, which is based on FreeBSD</description>
|
|
323
|
+
<example>
|
|
324
|
+
version="ntpd 4.2.6p2@1.2194 Wed Nov 24 15:54:11 UTC 2010 (1)",
|
|
325
|
+
processor="i386", system="FreeBSD/6.3-NETSCALER-9.3", leap=00, stratum=3,
|
|
326
|
+
</example>
|
|
327
|
+
<param pos="0" name="service.family" value="NTP"/>
|
|
328
|
+
<param pos="0" name="service.product" value="NTP"/>
|
|
329
|
+
<param pos="1" name="service.version"/>
|
|
330
|
+
<param pos="0" name="os.vendor" value="Citrix"/>
|
|
331
|
+
<param pos="0" name="os.product" value="NetScaler"/>
|
|
332
|
+
<param pos="2" name="os.arch"/>
|
|
333
|
+
<param pos="3" name="os.version"/>
|
|
334
|
+
</fingerprint>
|
|
335
|
+
<fingerprint pattern="^.*version="ntpd ([^ ]+)[^"]+",.*processor="([^ ]+)",.*system="FreeBSD/?([^ ]+)"" flags="REG_DOT_NEWLINE,REG_ICASE">
|
|
336
|
+
<description>ntpd running on FreeBSD</description>
|
|
337
|
+
<example>
|
|
338
|
+
version="ntpd 4.2.6p2@1.2194 Wed Nov 24 15:54:11 UTC 2010 (1)",
|
|
339
|
+
processor="i386", system="FreeBSD/7.4-PRERELEASE", leap=00, stratum=3,
|
|
340
|
+
</example>
|
|
341
|
+
<param pos="0" name="service.family" value="NTP"/>
|
|
342
|
+
<param pos="0" name="service.product" value="NTP"/>
|
|
343
|
+
<param pos="1" name="service.version"/>
|
|
344
|
+
<param pos="0" name="os.vendor" value="FreeBSD"/>
|
|
345
|
+
<param pos="0" name="os.family" value="FreeBSD"/>
|
|
346
|
+
<param pos="0" name="os.product" value="FreeBSD"/>
|
|
347
|
+
<param pos="2" name="os.arch"/>
|
|
348
|
+
<param pos="3" name="os.version"/>
|
|
349
|
+
<param pos="0" name="os.cpe23" value="cpe:/o:freebsd:freebsd:{os.version}"/>
|
|
350
|
+
</fingerprint>
|
|
351
|
+
<fingerprint pattern="^.*processor="([^ ]+)",.*system="FreeBSD/?([^ ]+)"" flags="REG_DOT_NEWLINE,REG_ICASE">
|
|
352
|
+
<description>ntp without a version on FreeBSD</description>
|
|
353
|
+
<example os.arch="i386" os.version="4.1-RELEASE">
|
|
354
|
+
processor="i386", system="FreeBSD4.1-RELEASE"
|
|
355
|
+
</example>
|
|
356
|
+
<example os.arch="i386" os.version="2.2.6-RELEASE">
|
|
357
|
+
processor="i386", system="FreeBSD2.2.6-RELEASE",
|
|
358
|
+
</example>
|
|
359
|
+
<param pos="0" name="os.vendor" value="FreeBSD"/>
|
|
360
|
+
<param pos="0" name="os.family" value="FreeBSD"/>
|
|
361
|
+
<param pos="0" name="os.product" value="FreeBSD"/>
|
|
362
|
+
<param pos="1" name="os.arch"/>
|
|
363
|
+
<param pos="2" name="os.version"/>
|
|
364
|
+
<param pos="0" name="os.cpe23" value="cpe:/o:freebsd:freebsd:{os.version}"/>
|
|
365
|
+
</fingerprint>
|
|
366
|
+
<fingerprint pattern="^.*version="ntpd ([^ ]+)[^"]+",.*processor="([^ ]+)",.*system="NetBSD/?([^ ]+)"" flags="REG_DOT_NEWLINE,REG_ICASE">
|
|
367
|
+
<description>ntpd running on NetBSD</description>
|
|
368
|
+
<example>
|
|
369
|
+
version="ntpd 4.2.4p6-o Thu Jan 8 21:02:40 MET 2009 (import)",
|
|
370
|
+
processor="sparc64", system="NetBSD/5.0_STABLE", leap=00, stratum=1,
|
|
371
|
+
</example>
|
|
372
|
+
<param pos="0" name="service.family" value="NTP"/>
|
|
373
|
+
<param pos="0" name="service.product" value="NTP"/>
|
|
374
|
+
<param pos="1" name="service.version"/>
|
|
375
|
+
<param pos="0" name="os.vendor" value="NetBSD"/>
|
|
376
|
+
<param pos="0" name="os.family" value="NetBSD"/>
|
|
377
|
+
<param pos="0" name="os.product" value="NetBSD"/>
|
|
378
|
+
<param pos="2" name="os.arch"/>
|
|
379
|
+
<param pos="3" name="os.version"/>
|
|
380
|
+
<param pos="0" name="os.cpe23" value="cpe:/o:netbsd:netbsd:{os.version}"/>
|
|
381
|
+
</fingerprint>
|
|
382
|
+
<fingerprint pattern="^.*processor="([^ ]+)",.*system="NetBSD/?([^ ]+)"" flags="REG_DOT_NEWLINE,REG_ICASE">
|
|
383
|
+
<description>ntpd running on NetBSD - variant 2</description>
|
|
384
|
+
<example os.arch="i386" os.version="1.5.3">
|
|
385
|
+
processor="i386", system="NetBSD1.5.3"
|
|
386
|
+
</example>
|
|
387
|
+
<example>
|
|
388
|
+
processor="i386", system="NetBSD1.6"
|
|
389
|
+
</example>
|
|
390
|
+
<example>
|
|
391
|
+
processor="i386", system="NetBSD1.6.1"
|
|
392
|
+
</example>
|
|
393
|
+
<example>
|
|
394
|
+
processor="i386", system="NetBSD1.6.2_STABLE"
|
|
395
|
+
</example>
|
|
396
|
+
<example>
|
|
397
|
+
processor="sbmips", system="NetBSD3.0"
|
|
398
|
+
</example>
|
|
399
|
+
<example>
|
|
400
|
+
processor="se100", system="NetBSD1.5.3"
|
|
401
|
+
</example>
|
|
402
|
+
<example>
|
|
403
|
+
processor="seil3", system="NetBSD1.6.1_STABLE"
|
|
404
|
+
</example>
|
|
405
|
+
<example>
|
|
406
|
+
processor="seil3", system="NetBSD1.6.2_STABLE"
|
|
407
|
+
</example>
|
|
408
|
+
<example>
|
|
409
|
+
processor="seil4", system="NetBSD1.6.1_STABLE"
|
|
410
|
+
</example>
|
|
411
|
+
<example>
|
|
412
|
+
processor="seil4", system="NetBSD1.6.2_STABLE"
|
|
413
|
+
</example>
|
|
414
|
+
<example>
|
|
415
|
+
processor="siara2k", system="NetBSD1.5.3"
|
|
416
|
+
</example>
|
|
417
|
+
<param pos="0" name="os.vendor" value="NetBSD"/>
|
|
418
|
+
<param pos="0" name="os.family" value="NetBSD"/>
|
|
419
|
+
<param pos="0" name="os.product" value="NetBSD"/>
|
|
420
|
+
<param pos="1" name="os.arch"/>
|
|
421
|
+
<param pos="2" name="os.version"/>
|
|
422
|
+
<param pos="0" name="os.cpe23" value="cpe:/o:netbsd:netbsd:{os.version}"/>
|
|
423
|
+
</fingerprint>
|
|
424
|
+
<fingerprint pattern="^.*system="NetWare"" flags="REG_DOT_NEWLINE,REG_ICASE">
|
|
425
|
+
<description>NetWare</description>
|
|
426
|
+
<example>
|
|
427
|
+
system="NetWare", leap=0, stratum=2, rootdelay=0.12
|
|
428
|
+
</example>
|
|
429
|
+
<param pos="0" name="os.vendor" value="Novell"/>
|
|
430
|
+
<param pos="0" name="os.family" value="NetWare"/>
|
|
431
|
+
<param pos="0" name="os.product" value="NetWare"/>
|
|
432
|
+
<param pos="0" name="os.cpe23" value="cpe:/o:novell:netware:-"/>
|
|
433
|
+
</fingerprint>
|
|
434
|
+
<fingerprint pattern="^.*version="ntpd ([^ ]+)[^"]+",.*processor="([^ ]+)",.*system="SunOS/?5.0"" flags="REG_DOT_NEWLINE,REG_ICASE">
|
|
435
|
+
<description>ntpd running on Solaris 2.0 (SunOS/5.0) </description>
|
|
436
|
+
<example service.version="4.2.0@1.1161-r" os.arch="sun4u">
|
|
437
|
+
version="ntpd 4.2.0@1.1161-r Wed Apr 20 11:28:05 EDT 2005 (1)",
|
|
438
|
+
processor="sun4u", system="SunOS/5.0", leap=00, stratum=2,
|
|
439
|
+
</example>
|
|
440
|
+
<example service.version="4.2.0@1.1161-r" os.arch="sun4u">
|
|
441
|
+
version="ntpd 4.2.0@1.1161-r Wed Apr 20 11:28:05 EDT 2005 (1)",
|
|
442
|
+
processor="sun4u",system="SunOS5.0", leap=00,stratum=2,
|
|
443
|
+
</example>
|
|
444
|
+
<param pos="0" name="os.vendor" value="Sun"/>
|
|
445
|
+
<param pos="0" name="os.family" value="Solaris"/>
|
|
446
|
+
<param pos="0" name="os.product" value="Solaris"/>
|
|
447
|
+
<param pos="0" name="service.family" value="NTP"/>
|
|
448
|
+
<param pos="0" name="service.product" value="NTP"/>
|
|
449
|
+
<param pos="0" name="os.version" value="2.0"/>
|
|
450
|
+
<param pos="1" name="service.version"/>
|
|
451
|
+
<param pos="2" name="os.arch"/>
|
|
452
|
+
<param pos="0" name="os.cpe23" value="cpe:/o:sun:solaris:2.0"/>
|
|
453
|
+
</fingerprint>
|
|
454
|
+
<fingerprint pattern="^.*version="ntpd ([^ ]+)[^"]+",.*processor="([^ ]+)",.*system="SunOS/?5.1"" flags="REG_DOT_NEWLINE,REG_ICASE">
|
|
455
|
+
<description> ntpd running on Solaris 2.1 (SunOS/5.1) </description>
|
|
456
|
+
<example service.version="4.2.0@1.1161-r" os.arch="sun4u">
|
|
457
|
+
version="ntpd 4.2.0@1.1161-r Wed Apr 20 11:28:05 EDT 2005 (1)",
|
|
458
|
+
processor="sun4u", system="SunOS/5.1", leap=00, stratum=2,
|
|
459
|
+
</example>
|
|
460
|
+
<example service.version="4.2.0@1.1161-r" os.arch="sun4u">
|
|
461
|
+
version="ntpd 4.2.0@1.1161-r Wed Apr 20 11:28:05 EDT 2005 (1)",
|
|
462
|
+
processor="sun4u", system="SunOS5.1", leap=00,stratum=2,
|
|
463
|
+
</example>
|
|
464
|
+
<param pos="0" name="os.vendor" value="Sun"/>
|
|
465
|
+
<param pos="0" name="os.family" value="Solaris"/>
|
|
466
|
+
<param pos="0" name="os.product" value="Solaris"/>
|
|
467
|
+
<param pos="0" name="service.family" value="NTP"/>
|
|
468
|
+
<param pos="0" name="service.product" value="NTP"/>
|
|
469
|
+
<param pos="0" name="os.version" value="2.1"/>
|
|
470
|
+
<param pos="1" name="service.version"/>
|
|
471
|
+
<param pos="2" name="os.arch"/>
|
|
472
|
+
<param pos="0" name="os.cpe23" value="cpe:/o:sun:solaris:2.1"/>
|
|
473
|
+
</fingerprint>
|
|
474
|
+
<fingerprint pattern="^.*version="ntpd ([^ ]+)[^"]+",.*processor="([^ ]+)",.*system="SunOS/?5.2"" flags="REG_DOT_NEWLINE,REG_ICASE">
|
|
475
|
+
<description> ntpd running on Solaris 2.2 (SunOS/5.2) </description>
|
|
476
|
+
<example service.version="4.2.0@1.1161-r" os.arch="sun4u">
|
|
477
|
+
version="ntpd 4.2.0@1.1161-r Wed Apr 20 11:28:05 EDT 2005 (1)",
|
|
478
|
+
processor="sun4u", system="SunOS/5.2", leap=00, stratum=2,
|
|
479
|
+
</example>
|
|
480
|
+
<example service.version="4.2.0@1.1161-r" os.arch="sun4u">
|
|
481
|
+
version="ntpd 4.2.0@1.1161-r Wed Apr 20 11:28:05 EDT 2005 (1)",
|
|
482
|
+
processor="sun4u", system="SunOS5.2", leap=00, stratum=2,
|
|
483
|
+
</example>
|
|
484
|
+
<param pos="0" name="os.vendor" value="Sun"/>
|
|
485
|
+
<param pos="0" name="os.family" value="Solaris"/>
|
|
486
|
+
<param pos="0" name="os.product" value="Solaris"/>
|
|
487
|
+
<param pos="0" name="service.family" value="NTP"/>
|
|
488
|
+
<param pos="0" name="service.product" value="NTP"/>
|
|
489
|
+
<param pos="0" name="os.version" value="2.2"/>
|
|
490
|
+
<param pos="1" name="service.version"/>
|
|
491
|
+
<param pos="2" name="os.arch"/>
|
|
492
|
+
<param pos="0" name="os.cpe23" value="cpe:/o:sun:solaris:2.2"/>
|
|
493
|
+
</fingerprint>
|
|
494
|
+
<fingerprint pattern="^.*version="ntpd ([^ ]+)[^"]+",.*processor="([^ ]+)",.*system="SunOS/?5.3"" flags="REG_DOT_NEWLINE,REG_ICASE">
|
|
495
|
+
<description> ntpd running on Solaris 2.3 (SunOS/5.3) </description>
|
|
496
|
+
<example service.version="4.2.0@1.1161-r" os.arch="sun4u">
|
|
497
|
+
version="ntpd 4.2.0@1.1161-r Wed Apr 20 11:28:05 EDT 2005 (1)",
|
|
498
|
+
processor="sun4u", system="SunOS/5.3", leap=00, stratum=2,
|
|
499
|
+
</example>
|
|
500
|
+
<example service.version="4.2.0@1.1161-r" os.arch="sun4u">
|
|
501
|
+
version="ntpd 4.2.0@1.1161-r Wed Apr 20 11:28:05 EDT 2005 (1)",
|
|
502
|
+
processor="sun4u", system="SunOS5.3", leap=00, stratum=2,
|
|
503
|
+
</example>
|
|
504
|
+
<param pos="0" name="os.vendor" value="Sun"/>
|
|
505
|
+
<param pos="0" name="os.family" value="Solaris"/>
|
|
506
|
+
<param pos="0" name="os.product" value="Solaris"/>
|
|
507
|
+
<param pos="0" name="service.family" value="NTP"/>
|
|
508
|
+
<param pos="0" name="service.product" value="NTP"/>
|
|
509
|
+
<param pos="0" name="os.version" value="2.3"/>
|
|
510
|
+
<param pos="1" name="service.version"/>
|
|
511
|
+
<param pos="2" name="os.arch"/>
|
|
512
|
+
<param pos="0" name="os.cpe23" value="cpe:/o:sun:solaris:2.3"/>
|
|
513
|
+
</fingerprint>
|
|
514
|
+
<fingerprint pattern="^.*version="ntpd ([^ ]+)[^"]+",.*processor="([^ ]+)",.*system="SunOS/?5.4"" flags="REG_DOT_NEWLINE,REG_ICASE">
|
|
515
|
+
<description>ntpd running on Solaris 2.4 (SunOS/5.4) </description>
|
|
516
|
+
<example service.version="4.2.0@1.1161-r" os.arch="sun4u">
|
|
517
|
+
version="ntpd 4.2.0@1.1161-r Wed Apr 20 11:28:05 EDT 2005 (1)",
|
|
518
|
+
processor="sun4u", system="SunOS/5.4", leap=00, stratum=2,
|
|
519
|
+
</example>
|
|
520
|
+
<example service.version="4.2.0@1.1161-r" os.arch="sun4u">
|
|
521
|
+
version="ntpd 4.2.0@1.1161-r WEd Apr 20 11:28:05 EDT 2005 (1)",
|
|
522
|
+
processor="sun4u", system="SunOS5.4", leap=00, stratum=2,
|
|
523
|
+
</example>
|
|
524
|
+
<param pos="0" name="os.vendor" value="Sun"/>
|
|
525
|
+
<param pos="0" name="os.family" value="Solaris"/>
|
|
526
|
+
<param pos="0" name="os.product" value="Solaris"/>
|
|
527
|
+
<param pos="0" name="service.family" value="NTP"/>
|
|
528
|
+
<param pos="0" name="service.product" value="NTP"/>
|
|
529
|
+
<param pos="0" name="os.version" value="2.4"/>
|
|
530
|
+
<param pos="1" name="service.version"/>
|
|
531
|
+
<param pos="2" name="os.arch"/>
|
|
532
|
+
<param pos="0" name="os.cpe23" value="cpe:/o:sun:solaris:2.4"/>
|
|
533
|
+
</fingerprint>
|
|
534
|
+
<fingerprint pattern="^.*version="ntpd ([^ ]+)[^"]+",.*processor="([^ ]+)",.*system="SunOS/?5.5"" flags="REG_DOT_NEWLINE,REG_ICASE">
|
|
535
|
+
<description>ntpd running on Solaris 2.5 (SunOS/5.5) </description>
|
|
536
|
+
<example service.version="4.2.0@1.1161-r" os.arch="sun4u">
|
|
537
|
+
version="ntpd 4.2.0@1.1161-r Wed Apr 20 11:28:05 EDT 2005 (1)",
|
|
538
|
+
processor="sun4u", system="SunOS/5.5", leap=00, stratum=2,
|
|
539
|
+
</example>
|
|
540
|
+
<example service.version="4.2.0@1.1161-r" os.arch="sun4u">
|
|
541
|
+
version="ntpd 4.2.0@1.1161-r Wed Apr 20 11:28:05 EDt 2005 (1)",
|
|
542
|
+
processor="sun4u", system="SunOS5.5", leap=00, stratum=2,
|
|
543
|
+
</example>
|
|
544
|
+
<param pos="0" name="os.vendor" value="Sun"/>
|
|
545
|
+
<param pos="0" name="os.family" value="Solaris"/>
|
|
546
|
+
<param pos="0" name="os.product" value="Solaris"/>
|
|
547
|
+
<param pos="0" name="service.family" value="NTP"/>
|
|
548
|
+
<param pos="0" name="service.product" value="NTP"/>
|
|
549
|
+
<param pos="0" name="os.version" value="2.5"/>
|
|
550
|
+
<param pos="1" name="service.version"/>
|
|
551
|
+
<param pos="2" name="os.arch"/>
|
|
552
|
+
<param pos="0" name="os.cpe23" value="cpe:/o:sun:solaris:2.5"/>
|
|
553
|
+
</fingerprint>
|
|
554
|
+
<fingerprint pattern="^.*version="ntpd ([^ ]+)[^"]+",.*processor="([^ ]+)",.*system="SunOS/?5.6"" flags="REG_DOT_NEWLINE,REG_ICASE">
|
|
555
|
+
<description>ntpd running on Solaris 2.6 (SunOS/5.6) </description>
|
|
556
|
+
<example service.version="4.2.0@1.1161-r" os.arch="sun4u">
|
|
557
|
+
version="ntpd 4.2.0@1.1161-r Wed Apr 20 11:28:05 EDT 2005 (1)",
|
|
558
|
+
processor="sun4u", system="SunOS/5.6", leap=00, stratum=2,
|
|
559
|
+
</example>
|
|
560
|
+
<example service.version="4.2.0@1.1161-r" os.arch="sun4u">
|
|
561
|
+
version="ntpd 4.2.0@1.1161-r Wed Apr 20 11:28:05 EDT 2005 (1)",
|
|
562
|
+
processor="sun4u", system="SunOS5.6", leap=00, stratum=2,
|
|
563
|
+
</example>
|
|
564
|
+
<param pos="0" name="os.vendor" value="Sun"/>
|
|
565
|
+
<param pos="0" name="os.family" value="Solaris"/>
|
|
566
|
+
<param pos="0" name="os.product" value="Solaris"/>
|
|
567
|
+
<param pos="0" name="service.family" value="NTP"/>
|
|
568
|
+
<param pos="0" name="service.product" value="NTP"/>
|
|
569
|
+
<param pos="0" name="os.version" value="2.6"/>
|
|
570
|
+
<param pos="1" name="service.version"/>
|
|
571
|
+
<param pos="2" name="os.arch"/>
|
|
572
|
+
<param pos="0" name="os.cpe23" value="cpe:/o:sun:solaris:2.6"/>
|
|
573
|
+
</fingerprint>
|
|
574
|
+
<fingerprint pattern="^.*version="ntpd ([^ ]+)[^"]+",.*processor="([^ ]+)",.*system="SunOS/?5.(1[1-9])"" flags="REG_DOT_NEWLINE,REG_ICASE">
|
|
575
|
+
<description>ntpd running on Solaris 11 or above (SunOS/5.11 and above) </description>
|
|
576
|
+
<example service.version="4.2.0@1.1161-r" os.arch="sun4u" os.version="11">
|
|
577
|
+
version="ntpd 4.2.0@1.1161-r Wed Apr 20 11:28:05 EDT 2005 (1)",
|
|
578
|
+
processor="sun4u", system="SunOS/5.11", leap=00, stratum=2,
|
|
579
|
+
</example>
|
|
580
|
+
<example service.version="4.2.0@1.1161-r" os.arch="sun4u" os.version="11">
|
|
581
|
+
version="ntpd 4.2.0@1.1161-r Wed Apr 20 11:28:05 EDT 2005 (1)",
|
|
582
|
+
processor="sun4u", system="SunOS5.11", leap=00,stratum=2,
|
|
583
|
+
</example>
|
|
584
|
+
<param pos="0" name="os.vendor" value="Oracle"/>
|
|
585
|
+
<param pos="0" name="os.family" value="Solaris"/>
|
|
586
|
+
<param pos="0" name="os.product" value="Solaris"/>
|
|
587
|
+
<param pos="0" name="service.family" value="NTP"/>
|
|
588
|
+
<param pos="0" name="service.product" value="NTP"/>
|
|
589
|
+
<param pos="1" name="service.version"/>
|
|
590
|
+
<param pos="2" name="os.arch"/>
|
|
591
|
+
<param pos="3" name="os.version"/>
|
|
592
|
+
<param pos="0" name="os.cpe23" value="cpe:/o:oracle:solaris:{os.version}"/>
|
|
593
|
+
</fingerprint>
|
|
594
|
+
<fingerprint pattern="^.*version="ntpd ([^ ]+)[^"]+",.*processor="([^ ]+)",.*system="SunOS/?5.([789]|10)"" flags="REG_DOT_NEWLINE,REG_ICASE">
|
|
595
|
+
<description>ntpd running on Solaris 7-Solaris 10 (SunOS/5.7 - SunOS/5.10) </description>
|
|
596
|
+
<example service.version="4.2.0@1.1161-r" os.arch="sun4u" os.version="7">
|
|
597
|
+
version="ntpd 4.2.0@1.1161-r Wed Apr 20 11:28:05 EDT 2005 (1)",
|
|
598
|
+
processor="sun4u", system="SunOS/5.7", leap=00, stratum=2,
|
|
599
|
+
</example>
|
|
600
|
+
<example service.version="4.2.0@1.1161-r" os.arch="sun4u" os.version="10">
|
|
601
|
+
version="ntpd 4.2.0@1.1161-r Wed Apr 20 11:28:05 EDT 2005 (1)",
|
|
602
|
+
processor="sun4u", system="SunOS/5.10", leap=00, stratum=2,
|
|
603
|
+
</example>
|
|
604
|
+
<example service.version="4.2.0@1.1161-r" os.arch="sun4u" os.version="7">
|
|
605
|
+
version="ntpd 4.2.0@1.1161-r Wed Apr 20 11:28:05 EDT 2005 (1)",
|
|
606
|
+
processor="sun4u", system="SunOS5.7", leap=00,stratum=2,
|
|
607
|
+
</example>
|
|
608
|
+
<example service.version="4.2.0@1.1161-r" os.arch="sun4u" os.version="10">
|
|
609
|
+
version="ntpd 4.2.0@1.1161-r Wed Apr 20 11:28:05 EDT 2005 (1)",
|
|
610
|
+
processor="sun4u", system="SunOS5.10", leap=00, stratum=2,
|
|
611
|
+
</example>
|
|
612
|
+
<param pos="0" name="os.vendor" value="Sun"/>
|
|
613
|
+
<param pos="0" name="os.family" value="Solaris"/>
|
|
614
|
+
<param pos="0" name="os.product" value="Solaris"/>
|
|
615
|
+
<param pos="0" name="service.family" value="NTP"/>
|
|
616
|
+
<param pos="0" name="service.product" value="NTP"/>
|
|
617
|
+
<param pos="1" name="service.version"/>
|
|
618
|
+
<param pos="2" name="os.arch"/>
|
|
619
|
+
<param pos="3" name="os.version"/>
|
|
620
|
+
<param pos="0" name="os.cpe23" value="cpe:/o:sun:solaris:{os.version}"/>
|
|
621
|
+
</fingerprint>
|
|
622
|
+
<fingerprint pattern="^.*processor="([^ ]+)",.*system="SunOS/?5.0"" flags="REG_DOT_NEWLINE,REG_ICASE">
|
|
623
|
+
<description>Solaris 2.0 (SunOS/5.0) with no ntp version</description>
|
|
624
|
+
<example os.arch="sun4m">
|
|
625
|
+
processor="sun4m", system="SunOS/5.0"
|
|
626
|
+
</example>
|
|
627
|
+
<example os.arch="sun4m">
|
|
628
|
+
processor="sun4m", system="SunOS5.0"
|
|
629
|
+
</example>
|
|
630
|
+
<param pos="0" name="os.vendor" value="Sun"/>
|
|
631
|
+
<param pos="0" name="os.family" value="Solaris"/>
|
|
632
|
+
<param pos="0" name="os.product" value="Solaris"/>
|
|
633
|
+
<param pos="0" name="os.version" value="2.0"/>
|
|
634
|
+
<param pos="1" name="os.arch"/>
|
|
635
|
+
<param pos="0" name="os.cpe23" value="cpe:/o:sun:solaris:2.0"/>
|
|
636
|
+
</fingerprint>
|
|
637
|
+
<fingerprint pattern="^.*processor="([^ ]+)",.*system="SunOS/?5.1"" flags="REG_DOT_NEWLINE,REG_ICASE">
|
|
638
|
+
<description>Solaris 2.1 (SunOS/5.1) with no ntp version</description>
|
|
639
|
+
<example os.arch="sun4m">
|
|
640
|
+
processor="sun4m", system="SunOS/5.1"
|
|
641
|
+
</example>
|
|
642
|
+
<example os.arch="sun4u">
|
|
643
|
+
processor="sun4u", system="SunOS5.1"
|
|
644
|
+
</example>
|
|
645
|
+
<param pos="0" name="os.vendor" value="Sun"/>
|
|
646
|
+
<param pos="0" name="os.family" value="Solaris"/>
|
|
647
|
+
<param pos="0" name="os.product" value="Solaris"/>
|
|
648
|
+
<param pos="0" name="os.version" value="2.1"/>
|
|
649
|
+
<param pos="1" name="os.arch"/>
|
|
650
|
+
<param pos="0" name="os.cpe23" value="cpe:/o:sun:solaris:2.1"/>
|
|
651
|
+
</fingerprint>
|
|
652
|
+
<fingerprint pattern="^.*processor="([^ ]+)",.*system="SunOS/?5.2"" flags="REG_DOT_NEWLINE,REG_ICASE">
|
|
653
|
+
<description>Solaris 2.2 (SunOS/5.2) with no ntp version</description>
|
|
654
|
+
<example os.arch="sun4m">
|
|
655
|
+
processor="sun4m", system="SunOS/5.2"
|
|
656
|
+
</example>
|
|
657
|
+
<example os.arch="sun4u">
|
|
658
|
+
processor="sun4u", system="SunOS5.2"
|
|
659
|
+
</example>
|
|
660
|
+
<param pos="0" name="os.vendor" value="Sun"/>
|
|
661
|
+
<param pos="0" name="os.family" value="Solaris"/>
|
|
662
|
+
<param pos="0" name="os.product" value="Solaris"/>
|
|
663
|
+
<param pos="0" name="os.version" value="2.2"/>
|
|
664
|
+
<param pos="1" name="os.arch"/>
|
|
665
|
+
<param pos="0" name="os.cpe23" value="cpe:/o:sun:solaris:2.2"/>
|
|
666
|
+
</fingerprint>
|
|
667
|
+
<fingerprint pattern="^.*processor="([^ ]+)",.*system="SunOS/?5.3"" flags="REG_DOT_NEWLINE,REG_ICASE">
|
|
668
|
+
<description>Solaris 2.3 (SunOS/5.3) with no ntp version</description>
|
|
669
|
+
<example os.arch="sun4m">
|
|
670
|
+
processor="sun4m", system="SunOS/5.3"
|
|
671
|
+
</example>
|
|
672
|
+
<example os.arch="sun4u">
|
|
673
|
+
processor="sun4u", system="SunOS5.3"
|
|
674
|
+
</example>
|
|
675
|
+
<param pos="0" name="os.vendor" value="Sun"/>
|
|
676
|
+
<param pos="0" name="os.family" value="Solaris"/>
|
|
677
|
+
<param pos="0" name="os.product" value="Solaris"/>
|
|
678
|
+
<param pos="0" name="os.version" value="2.3"/>
|
|
679
|
+
<param pos="1" name="os.arch"/>
|
|
680
|
+
<param pos="0" name="os.cpe23" value="cpe:/o:sun:solaris:2.3"/>
|
|
681
|
+
</fingerprint>
|
|
682
|
+
<fingerprint pattern="^.*processor="([^ ]+)",.*system="SunOS/?5.4"" flags="REG_DOT_NEWLINE,REG_ICASE">
|
|
683
|
+
<description>Solaris 2.4 (SunOS/5.4) with no ntp version</description>
|
|
684
|
+
<example os.arch="sun4m">
|
|
685
|
+
processor="sun4m", system="SunOS/5.4"
|
|
686
|
+
</example>
|
|
687
|
+
<example os.arch="sun4u">
|
|
688
|
+
processor="sun4u", system="SunOS5.4"
|
|
689
|
+
</example>
|
|
690
|
+
<param pos="0" name="os.vendor" value="Sun"/>
|
|
691
|
+
<param pos="0" name="os.family" value="Solaris"/>
|
|
692
|
+
<param pos="0" name="os.product" value="Solaris"/>
|
|
693
|
+
<param pos="0" name="os.version" value="2.4"/>
|
|
694
|
+
<param pos="1" name="os.arch"/>
|
|
695
|
+
<param pos="0" name="os.cpe23" value="cpe:/o:sun:solaris:2.4"/>
|
|
696
|
+
</fingerprint>
|
|
697
|
+
<fingerprint pattern="^.*processor="([^ ]+)",.*system="SunOS/?5.5"" flags="REG_DOT_NEWLINE,REG_ICASE">
|
|
698
|
+
<description>Solaris 2.5 (SunOS/5.5) with no ntp version</description>
|
|
699
|
+
<example os.arch="sun4m">
|
|
700
|
+
processor="sun4m", system="SunOS/5.5"
|
|
701
|
+
</example>
|
|
702
|
+
<example os.arch="sun4u">
|
|
703
|
+
processor="sun4u", system="SunOS5.5"
|
|
704
|
+
</example>
|
|
705
|
+
<param pos="0" name="os.vendor" value="Sun"/>
|
|
706
|
+
<param pos="0" name="os.family" value="Solaris"/>
|
|
707
|
+
<param pos="0" name="os.product" value="Solaris"/>
|
|
708
|
+
<param pos="0" name="os.version" value="2.5"/>
|
|
709
|
+
<param pos="1" name="os.arch"/>
|
|
710
|
+
<param pos="0" name="os.cpe23" value="cpe:/o:sun:solaris:2.5"/>
|
|
711
|
+
</fingerprint>
|
|
712
|
+
<fingerprint pattern="^.*processor="([^ ]+)",.*system="SunOS/?5.6"" flags="REG_DOT_NEWLINE,REG_ICASE">
|
|
713
|
+
<description>Solaris 2.6 (SunOS/5.6) with no ntp version</description>
|
|
714
|
+
<example os.arch="sun4m">
|
|
715
|
+
processor="sun4m", system="SunOS/5.6"
|
|
716
|
+
</example>
|
|
717
|
+
<example os.arch="sun4u">
|
|
718
|
+
processor="sun4u", system="SunOS5.6"
|
|
719
|
+
</example>
|
|
720
|
+
<param pos="0" name="os.vendor" value="Sun"/>
|
|
721
|
+
<param pos="0" name="os.family" value="Solaris"/>
|
|
722
|
+
<param pos="0" name="os.product" value="Solaris"/>
|
|
723
|
+
<param pos="0" name="os.version" value="2.6"/>
|
|
724
|
+
<param pos="1" name="os.arch"/>
|
|
725
|
+
<param pos="0" name="os.cpe23" value="cpe:/o:sun:solaris:2.6"/>
|
|
726
|
+
</fingerprint>
|
|
727
|
+
<fingerprint pattern="^.*processor="([^ ]+)",.*system="SunOS/?5.([789]|10)"" flags="REG_DOT_NEWLINE,REG_ICASE">
|
|
728
|
+
<description>Solaris 7-10 (SunOS/5.7 - SunOS/5.10) with no ntp version</description>
|
|
729
|
+
<example os.arch="sun4m" os.version="7">
|
|
730
|
+
processor="sun4m", system="SunOS/5.7"
|
|
731
|
+
</example>
|
|
732
|
+
<example os.arch="sun4m" os.version="10">
|
|
733
|
+
processor="sun4m", system="SunOS/5.10"
|
|
734
|
+
</example>
|
|
735
|
+
<example os.arch="sun4u" os.version="7">
|
|
736
|
+
processor="sun4u", system="SunOS5.7"
|
|
737
|
+
</example>
|
|
738
|
+
<example os.arch="sun4m" os.version="10">
|
|
739
|
+
processor="sun4m", system="SunOS5.10"
|
|
740
|
+
</example>
|
|
741
|
+
<param pos="0" name="os.vendor" value="Sun"/>
|
|
742
|
+
<param pos="0" name="os.family" value="Solaris"/>
|
|
743
|
+
<param pos="0" name="os.product" value="Solaris"/>
|
|
744
|
+
<param pos="1" name="os.arch"/>
|
|
745
|
+
<param pos="2" name="os.version"/>
|
|
746
|
+
<param pos="0" name="os.cpe23" value="cpe:/o:sun:solaris:{os.version}"/>
|
|
747
|
+
</fingerprint>
|
|
748
|
+
<fingerprint pattern="^.*processor="([^ ]+)",.*system="SunOS/?5.(1[1-9])"" flags="REG_DOT_NEWLINE,REG_ICASE">
|
|
749
|
+
<description>Solaris 11 and up with no ntp version</description>
|
|
750
|
+
<example os.arch="sun4m" os.version="11">
|
|
751
|
+
processor="sun4m", system="SunOS/5.11"
|
|
752
|
+
</example>
|
|
753
|
+
<example os.arch="sun4m" os.version="11">
|
|
754
|
+
processor="sun4m", system="SunOS5.11"
|
|
755
|
+
</example>
|
|
756
|
+
<param pos="0" name="os.vendor" value="Oracle"/>
|
|
757
|
+
<param pos="0" name="os.family" value="Solaris"/>
|
|
758
|
+
<param pos="0" name="os.product" value="Solaris"/>
|
|
759
|
+
<param pos="1" name="os.arch"/>
|
|
760
|
+
<param pos="2" name="os.version"/>
|
|
761
|
+
<param pos="0" name="os.cpe23" value="cpe:/o:oracle:solaris:{os.version}"/>
|
|
762
|
+
</fingerprint>
|
|
763
|
+
<fingerprint pattern="^.*system="UNIX/SunOS ([^ ]+)"" flags="REG_DOT_NEWLINE,REG_ICASE">
|
|
764
|
+
<description>SunOS with no ntp version</description>
|
|
765
|
+
<example>
|
|
766
|
+
system="UNIX/SunOS 4.x",
|
|
767
|
+
</example>
|
|
768
|
+
<param pos="0" name="os.vendor" value="Sun"/>
|
|
769
|
+
<param pos="0" name="os.family" value="Solaris"/>
|
|
770
|
+
<param pos="0" name="os.product" value="Solaris"/>
|
|
771
|
+
<param pos="1" name="os.version"/>
|
|
772
|
+
<param pos="0" name="os.cpe23" value="cpe:/o:sun:solaris:{os.version}"/>
|
|
773
|
+
</fingerprint>
|
|
774
|
+
<fingerprint pattern="^.*version="ntpd ([^ ]+)[^"]+",.*processor="([^ ]+)",.*system="JUNOS/?([^ ]+)"" flags="REG_DOT_NEWLINE,REG_ICASE">
|
|
775
|
+
<description>ntpd running on Juniper/Netscreen JunOS</description>
|
|
776
|
+
<example>
|
|
777
|
+
version="ntpd 4.2.0-a Wed Aug 12 04:22:47 UTC 2009 (1)",
|
|
778
|
+
processor="i386", system="JUNOS9.3R4.4", leap=11, stratum=16,
|
|
779
|
+
</example>
|
|
780
|
+
<param pos="0" name="os.vendor" value="Juniper"/>
|
|
781
|
+
<param pos="0" name="os.family" value="Junos"/>
|
|
782
|
+
<param pos="0" name="os.product" value="Junos OS"/>
|
|
783
|
+
<param pos="0" name="service.family" value="NTP"/>
|
|
784
|
+
<param pos="0" name="service.product" value="NTP"/>
|
|
785
|
+
<param pos="1" name="service.version"/>
|
|
786
|
+
<param pos="2" name="os.arch"/>
|
|
787
|
+
<param pos="3" name="os.version"/>
|
|
788
|
+
<param pos="0" name="os.cpe23" value="cpe:/o:juniper:junos:{os.version}"/>
|
|
789
|
+
</fingerprint>
|
|
790
|
+
<fingerprint pattern="processor="([^ ]+)",.*system="JUNOS/?([^ ]+)"" flags="REG_DOT_NEWLINE,REG_ICASE">
|
|
791
|
+
<description>Juniper/Netscreen JunOS NTP without a version</description>
|
|
792
|
+
<example os.arch="i386" os.version="7.0R2.7">processor="i386", system="JUNOS7.0R2.7", leap=0, stratum=3</example>
|
|
793
|
+
<example os.arch="i386" os.version="6.4R1.6">processor="i386", system="JUNOS6.4R1.6", leap=3, stratum=16</example>
|
|
794
|
+
<example os.arch="i386" os.version="5.5R2.3">processor="i386", system="JUNOS5.5R2.3", leap=0, stratum=3</example>
|
|
795
|
+
<param pos="0" name="os.vendor" value="Juniper"/>
|
|
796
|
+
<param pos="0" name="os.family" value="Junos"/>
|
|
797
|
+
<param pos="0" name="os.product" value="Junos OS"/>
|
|
798
|
+
<param pos="1" name="os.arch"/>
|
|
799
|
+
<param pos="2" name="os.version"/>
|
|
800
|
+
<param pos="0" name="os.cpe23" value="cpe:/o:juniper:junos:{os.version}"/>
|
|
801
|
+
</fingerprint>
|
|
802
|
+
<fingerprint pattern="^.*version="ntpd ([^ ]+)[^"]+",.*processor="([^ ]+)",.*system="Windows/?([^ ]+)?"" flags="REG_DOT_NEWLINE,REG_ICASE">
|
|
803
|
+
<description>ntpd running on Windows</description>
|
|
804
|
+
<example>
|
|
805
|
+
version="ntpd 4.2.4p7@copenhagen-o May 22 11:25:36 (UTC+02:00) 2009 (3)",
|
|
806
|
+
processor="x86", system="Windows", leap=00, stratum=2, precision=-19,
|
|
807
|
+
</example>
|
|
808
|
+
<example>
|
|
809
|
+
version="ntpd 4.2.4p4@1.1520-modena-o Dec 05 9:35:28 (UTC+01:00) 2007 (11)",
|
|
810
|
+
processor="unknown", system="WINDOWS/NT", leap=00, stratum=2,
|
|
811
|
+
</example>
|
|
812
|
+
<param pos="0" name="service.family" value="NTP"/>
|
|
813
|
+
<param pos="0" name="service.product" value="NTP"/>
|
|
814
|
+
<param pos="1" name="service.version"/>
|
|
815
|
+
<param pos="0" name="os.vendor" value="Microsoft"/>
|
|
816
|
+
<param pos="0" name="os.family" value="Windows"/>
|
|
817
|
+
<param pos="0" name="os.product" value="Windows"/>
|
|
818
|
+
<param pos="2" name="os.arch"/>
|
|
819
|
+
<param pos="3" name="os.version"/>
|
|
820
|
+
<param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows:{os.version}"/>
|
|
821
|
+
</fingerprint>
|
|
822
|
+
<fingerprint pattern="^.*version="ntpd ([^ ]+)[^"]+",.*processor="([^ ]+)",.*system="HP-UX/?([^ ]+)?"" flags="REG_DOT_NEWLINE,REG_ICASE">
|
|
823
|
+
<description>ntpd running on HP-UX</description>
|
|
824
|
+
<example>
|
|
825
|
+
version="ntpd 4.2.2@1.1532-o Wed Sep 6 16:49:43 EDT 2006 (2)",
|
|
826
|
+
processor="9000/800", system="HP-UX/B.11.11", leap=00, stratum=1,
|
|
827
|
+
</example>
|
|
828
|
+
<param pos="0" name="service.family" value="NTP"/>
|
|
829
|
+
<param pos="0" name="service.product" value="NTP"/>
|
|
830
|
+
<param pos="1" name="service.version"/>
|
|
831
|
+
<param pos="0" name="os.vendor" value="HP"/>
|
|
832
|
+
<param pos="0" name="os.family" value="HP-UX"/>
|
|
833
|
+
<param pos="0" name="os.product" value="HP-UX"/>
|
|
834
|
+
<param pos="2" name="os.arch"/>
|
|
835
|
+
<param pos="3" name="os.version"/>
|
|
836
|
+
<param pos="0" name="os.cpe23" value="cpe:/o:hp:hp-ux:{os.version}"/>
|
|
837
|
+
</fingerprint>
|
|
838
|
+
<fingerprint pattern="^.*version="ntpd ([^ ]+)[^"]+",.*processor=,.*system="HP-UX/"" flags="REG_DOT_NEWLINE,REG_ICASE">
|
|
839
|
+
<description>ntpd running on HP-UX with an empty processor</description>
|
|
840
|
+
<example service.version="4.2.6">
|
|
841
|
+
version="ntpd 4.2.6 Revision 0.0 Tue Nov 5 14:21:22 UTC 2012",
|
|
842
|
+
processor=, system="HP-UX/"
|
|
843
|
+
</example>
|
|
844
|
+
<param pos="0" name="service.family" value="NTP"/>
|
|
845
|
+
<param pos="0" name="service.product" value="NTP"/>
|
|
846
|
+
<param pos="1" name="service.version"/>
|
|
847
|
+
<param pos="0" name="os.vendor" value="HP"/>
|
|
848
|
+
<param pos="0" name="os.family" value="HP-UX"/>
|
|
849
|
+
<param pos="0" name="os.product" value="HP-UX"/>
|
|
850
|
+
<param pos="0" name="os.cpe23" value="cpe:/o:hp:hp-ux:-"/>
|
|
851
|
+
</fingerprint>
|
|
852
|
+
<fingerprint pattern="^.*version="ntpd ([^ ]+)[^"]+",.*processor="[^ ]+",.*system="([^ ]+)-hp-hpux([^ ]+)"" flags="REG_DOT_NEWLINE,REG_ICASE">
|
|
853
|
+
<description>ntpd running on HP-UX, where the processor is in the 'system' variable</description>
|
|
854
|
+
<example>
|
|
855
|
+
version="ntpd 4.2.5p154@1.1802 Tue Mar 22 22:09:00 UTC 2011 (39)",
|
|
856
|
+
processor="unknown", system="ia64-hp-hpux11.31", leap=00, stratum=1,
|
|
857
|
+
</example>
|
|
858
|
+
<param pos="0" name="service.family" value="NTP"/>
|
|
859
|
+
<param pos="0" name="service.product" value="NTP"/>
|
|
860
|
+
<param pos="1" name="service.version"/>
|
|
861
|
+
<param pos="0" name="os.vendor" value="HP"/>
|
|
862
|
+
<param pos="0" name="os.family" value="HP-UX"/>
|
|
863
|
+
<param pos="0" name="os.product" value="HP-UX"/>
|
|
864
|
+
<param pos="2" name="os.arch"/>
|
|
865
|
+
<param pos="3" name="os.version"/>
|
|
866
|
+
<param pos="0" name="os.cpe23" value="cpe:/o:hp:hp-ux:{os.version}"/>
|
|
867
|
+
</fingerprint>
|
|
868
|
+
<fingerprint pattern="^.*version="ntpd ([^ ]+)[^"]+",.*processor="([^ ]+)",.*system="VMkernel/?([^ ]+)?"" flags="REG_DOT_NEWLINE,REG_ICASE">
|
|
869
|
+
<description>ntpd running on VMware ESXi</description>
|
|
870
|
+
<example>
|
|
871
|
+
version="ntpd 4.2.4p6@1.1495 Wed Sep 22 02:33:15 UTC 2010 (1)",
|
|
872
|
+
processor="x86_64", system="VMkernel/4.1.0", leap=11, stratum=16,
|
|
873
|
+
</example>
|
|
874
|
+
<param pos="0" name="service.family" value="NTP"/>
|
|
875
|
+
<param pos="0" name="service.product" value="NTP"/>
|
|
876
|
+
<param pos="1" name="service.version"/>
|
|
877
|
+
<param pos="0" name="os.vendor" value="VMware"/>
|
|
878
|
+
<param pos="0" name="os.family" value="VMware ESX/ESXi"/>
|
|
879
|
+
<param pos="0" name="os.product" value="VMware ESXi Server"/>
|
|
880
|
+
<param pos="2" name="os.arch"/>
|
|
881
|
+
<param pos="3" name="os.version"/>
|
|
882
|
+
<param pos="0" name="os.cpe23" value="cpe:/o:vmware:esxi:{os.version}"/>
|
|
883
|
+
</fingerprint>
|
|
884
|
+
<fingerprint pattern=".*processor="([^ ]+)",.*system="OSF1[/V]?([^ ]+)"" flags="REG_DOT_NEWLINE,REG_ICASE">
|
|
885
|
+
<description>ntpd running on OSF/1</description>
|
|
886
|
+
<example os.arch="alpha" os.version="4.0">
|
|
887
|
+
processor="alpha", system="OSF1V4.0", leap=00, stratum=1, precision=-18,
|
|
888
|
+
</example>
|
|
889
|
+
<param pos="0" name="service.family" value="NTP"/>
|
|
890
|
+
<param pos="0" name="service.product" value="NTP"/>
|
|
891
|
+
<param pos="0" name="os.vendor" value="DEC"/>
|
|
892
|
+
<param pos="0" name="os.product" value="OSF/1"/>
|
|
893
|
+
<param pos="2" name="os.version"/>
|
|
894
|
+
<param pos="1" name="os.arch"/>
|
|
895
|
+
</fingerprint>
|
|
896
|
+
<fingerprint pattern=".*system="UNIX/DECOSF1"" flags="REG_DOT_NEWLINE,REG_ICASE">
|
|
897
|
+
<description>DEC OSF/1</description>
|
|
898
|
+
<example>
|
|
899
|
+
system="UNIX/DECOSF1", leap=0, stratum=3, rootdelay=18.14,
|
|
900
|
+
</example>
|
|
901
|
+
<param pos="0" name="os.vendor" value="DEC"/>
|
|
902
|
+
<param pos="0" name="os.product" value="OSF/1"/>
|
|
903
|
+
</fingerprint>
|
|
904
|
+
<fingerprint pattern="^.*system="Linux"" flags="REG_DOT_NEWLINE,REG_ICASE">
|
|
905
|
+
<description>Linux with NTP enabled, no processor/version</description>
|
|
906
|
+
<example>
|
|
907
|
+
system="Linux", leap=00, stratum=2, rootdelay=6.480,
|
|
908
|
+
</example>
|
|
909
|
+
<param pos="0" name="os.vendor" value="Linux"/>
|
|
910
|
+
<param pos="0" name="os.family" value="Linux"/>
|
|
911
|
+
<param pos="0" name="os.product" value="Linux"/>
|
|
912
|
+
<param pos="0" name="os.cpe23" value="cpe:/o:linux:linux_kernel:-"/>
|
|
913
|
+
<param pos="0" name="service.family" value="NTP"/>
|
|
914
|
+
<param pos="0" name="service.product" value="NTP"/>
|
|
915
|
+
</fingerprint>
|
|
916
|
+
<fingerprint pattern="^.*system="UNIX/AIX"" flags="REG_DOT_NEWLINE,REG_ICASE">
|
|
917
|
+
<description>AIX with NTP enabled, no processor/version</description>
|
|
918
|
+
<example>
|
|
919
|
+
system="UNIX/AIX", leap=00, stratum=3, rootdelay=2.000,
|
|
920
|
+
</example>
|
|
921
|
+
<param pos="0" name="os.vendor" value="IBM"/>
|
|
922
|
+
<param pos="0" name="os.family" value="AIX"/>
|
|
923
|
+
<param pos="0" name="os.product" value="AIX"/>
|
|
924
|
+
<param pos="0" name="os.cpe23" value="cpe:/o:ibm:aix:-"/>
|
|
925
|
+
<param pos="0" name="service.family" value="NTP"/>
|
|
926
|
+
<param pos="0" name="service.product" value="NTP"/>
|
|
927
|
+
<param pos="0" name="service.vendor" value="IBM"/>
|
|
928
|
+
</fingerprint>
|
|
929
|
+
<fingerprint pattern="^.*system="SunOS"" flags="REG_DOT_NEWLINE,REG_ICASE">
|
|
930
|
+
<description>Solaris with NTP enabled, no processor/version</description>
|
|
931
|
+
<example>
|
|
932
|
+
system="SunOS", leap=00, stratum=1, rootdelay=0.000,
|
|
933
|
+
</example>
|
|
934
|
+
<param pos="0" name="os.vendor" value="Sun"/>
|
|
935
|
+
<param pos="0" name="os.family" value="Solaris"/>
|
|
936
|
+
<param pos="0" name="os.product" value="Solaris"/>
|
|
937
|
+
<param pos="0" name="os.cpe23" value="cpe:/o:sun:solaris:-"/>
|
|
938
|
+
<param pos="0" name="service.family" value="NTP"/>
|
|
939
|
+
<param pos="0" name="service.product" value="NTP"/>
|
|
940
|
+
<param pos="0" name="service.vendor" value="Sun"/>
|
|
941
|
+
</fingerprint>
|
|
942
|
+
<fingerprint pattern="^.*system="cisco"" flags="REG_DOT_NEWLINE,REG_ICASE">
|
|
943
|
+
<description>Cisco IOS with NTP enabled</description>
|
|
944
|
+
<example>
|
|
945
|
+
system="cisco", leap=00, stratum=2, rootdelay=39.900,
|
|
946
|
+
</example>
|
|
947
|
+
<param pos="0" name="os.vendor" value="Cisco"/>
|
|
948
|
+
<param pos="0" name="os.family" value="IOS"/>
|
|
949
|
+
<param pos="0" name="os.product" value="IOS"/>
|
|
950
|
+
<param pos="0" name="os.cpe23" value="cpe:/o:cisco:ios:-"/>
|
|
951
|
+
<param pos="0" name="service.family" value="NTP"/>
|
|
952
|
+
<param pos="0" name="service.product" value="NTP"/>
|
|
953
|
+
<param pos="0" name="service.vendor" value="Cisco"/>
|
|
954
|
+
</fingerprint>
|
|
955
|
+
<fingerprint pattern="^.*system="Data ONTAP/+(\S+)".*$" flags="REG_DOT_NEWLINE,REG_ICASE">
|
|
956
|
+
<description>NetApp file servers</description>
|
|
957
|
+
<example>
|
|
958
|
+
system="Data ONTAP/8.1RC2"
|
|
959
|
+
</example>
|
|
960
|
+
<param pos="0" name="os.vendor" value="NetApp"/>
|
|
961
|
+
<param pos="0" name="os.family" value="Data ONTAP"/>
|
|
962
|
+
<param pos="0" name="os.product" value="Data ONTAP"/>
|
|
963
|
+
<param pos="0" name="os.device" value="File server"/>
|
|
964
|
+
<param pos="1" name="os.version"/>
|
|
965
|
+
<param pos="0" name="os.cpe23" value="cpe:/o:netapp:data_ontap:{os.version}"/>
|
|
966
|
+
</fingerprint>
|
|
967
|
+
<fingerprint pattern="system="UNIX/HPUX"" flags="REG_ICASE">
|
|
968
|
+
<description>Generic HPUX</description>
|
|
969
|
+
<example>
|
|
970
|
+
system="UNIX/HPUX", leap=0, stratum=3, rootdelay=1.16,
|
|
971
|
+
rootdispersion=1.89, peer=52828, refid=A.B.C.D,
|
|
972
|
+
reftime=0xd2ec64af.5cca1000, poll=10, clock=0xd2ec6545.46514000,
|
|
973
|
+
phase=-1.080, freq=-2231.51, error=0.40
|
|
974
|
+
</example>
|
|
975
|
+
<param pos="0" name="os.vendor" value="HP"/>
|
|
976
|
+
<param pos="0" name="os.family" value="HP-UX"/>
|
|
977
|
+
<param pos="0" name="os.product" value="HP-UX"/>
|
|
978
|
+
<param pos="0" name="os.cpe23" value="cpe:/o:hp:hp-ux:-"/>
|
|
979
|
+
</fingerprint>
|
|
980
|
+
<fingerprint pattern="system="UNIX"" flags="REG_ICASE">
|
|
981
|
+
<description>Generic UNIX</description>
|
|
982
|
+
<example>
|
|
983
|
+
version="4", processor="unknown", system="UNIX", leap=0, stratum=2,
|
|
984
|
+
</example>
|
|
985
|
+
<param pos="0" name="os.family" value="UNIX"/>
|
|
986
|
+
<param pos="0" name="os.product" value="UNIX"/>
|
|
987
|
+
<param pos="0" name="os.certainty" value="0.5"/>
|
|
988
|
+
</fingerprint>
|
|
989
|
+
<fingerprint pattern="system="VxWorks(?:/TORNADO)?"" flags="REG_ICASE">
|
|
990
|
+
<description>Generic VxWorks</description>
|
|
991
|
+
<example>
|
|
992
|
+
system="VxWorks", leap=0, stratum=8, rootdelay=63.74,
|
|
993
|
+
rootdispersion=151.29, peer=65508, refid=192.168.2.100,
|
|
994
|
+
reftime=0xd4747c5c.5851f000, poll=6, clock=0xd4747c6d.31206000,
|
|
995
|
+
phase=4.131, freq=18961.38, compliance=0
|
|
996
|
+
</example>
|
|
997
|
+
<example>
|
|
998
|
+
system="VXWORKS/Tornado", leap=3, stratum=16, rootdelay=0.00, rootdispersion=0.00
|
|
999
|
+
</example>
|
|
1000
|
+
<param pos="0" name="os.vendor" value="Wind River"/>
|
|
1001
|
+
<param pos="0" name="os.product" value="VxWorks"/>
|
|
1002
|
+
<param pos="0" name="os.cpe23" value="cpe:/o:windriver:vxworks:-"/>
|
|
1003
|
+
</fingerprint>
|
|
1004
|
+
<fingerprint pattern="system="arm-wrs-vxworks"" flags="REG_ICASE">
|
|
1005
|
+
<description>VxWorks ARM, cross-compiled on Linux</description>
|
|
1006
|
+
<example>
|
|
1007
|
+
processor="unknown", system="arm-wrs-vxworks", leap=0, stratum=2, rootdelay=999.86, rootdispersion=17.90, peer=32444
|
|
1008
|
+
</example>
|
|
1009
|
+
<param pos="0" name="os.vendor" value="Wind River"/>
|
|
1010
|
+
<param pos="0" name="os.product" value="VxWorks"/>
|
|
1011
|
+
<param pos="0" name="os.arch" value="ARM"/>
|
|
1012
|
+
<param pos="0" name="os.cpe23" value="cpe:/o:windriver:vxworks:-"/>
|
|
1013
|
+
</fingerprint>
|
|
1014
|
+
<fingerprint pattern="system="i386-wrs-vxworks"" flags="REG_ICASE">
|
|
1015
|
+
<description>VxWorks x86, cross-compiled on Linux</description>
|
|
1016
|
+
<example>
|
|
1017
|
+
system="i386-wrs-vxworks", leap=0, stratum=2, rootdelay=999.86, rootdispersion=17.90, peer=32444
|
|
1018
|
+
</example>
|
|
1019
|
+
<param pos="0" name="os.vendor" value="Wind River"/>
|
|
1020
|
+
<param pos="0" name="os.product" value="VxWorks"/>
|
|
1021
|
+
<param pos="0" name="os.arch" value="x86"/>
|
|
1022
|
+
<param pos="0" name="os.cpe23" value="cpe:/o:windriver:vxworks:-"/>
|
|
1023
|
+
</fingerprint>
|
|
1024
|
+
<fingerprint pattern="system="UNIX/Unixware([^ ]+)"" flags="REG_ICASE">
|
|
1025
|
+
<description>SCO Unixware NTP</description>
|
|
1026
|
+
<example>
|
|
1027
|
+
system="UNIX/Unixware2", leap=3, stratum=16, rootdelay=0.00,
|
|
1028
|
+
rootdispersion=0.00, peer=0, refid=0.0.0.0, reftime=0x00000000.00000000,
|
|
1029
|
+
poll=4, clock=0xd1d874b7.051ec000, phase=0.000, freq=0.00, error=0.00
|
|
1030
|
+
</example>
|
|
1031
|
+
<param pos="0" name="service.family" value="NTP"/>
|
|
1032
|
+
<param pos="0" name="service.product" value="NTP"/>
|
|
1033
|
+
<param pos="0" name="os.vendor" value="SCO"/>
|
|
1034
|
+
<param pos="1" name="os.product"/>
|
|
1035
|
+
</fingerprint>
|
|
1036
|
+
<fingerprint pattern="^.*processor="([^"]+)", system="SCO_SV([\d\.]+)"" flags="REG_DOT_NEWLINE,REG_ICASE">
|
|
1037
|
+
<description>SCO Unixware NTP - SCO_SV variant</description>
|
|
1038
|
+
<example os.version="3.2" os.arch="i386">
|
|
1039
|
+
processor="i386", system="SCO_SV3.2", leap=0, stratum=2, precision=-18
|
|
1040
|
+
</example>
|
|
1041
|
+
<param pos="0" name="os.vendor" value="SCO"/>
|
|
1042
|
+
<param pos="0" name="os.product" value="UNIX"/>
|
|
1043
|
+
<param pos="1" name="os.arch"/>
|
|
1044
|
+
<param pos="2" name="os.version"/>
|
|
1045
|
+
</fingerprint>
|
|
1046
|
+
<fingerprint pattern="^.*version="ntpd ([^ ]+)[^"]+",.*\s*processor="([^ ]+)",.*system="SecureOS/([^ ]+)"" flags="REG_DOT_NEWLINE,REG_ICASE">
|
|
1047
|
+
<description>McAfee Network Firewall Enterprise NTP (SecureOS)</description>
|
|
1048
|
+
<example>
|
|
1049
|
+
version="ntpd 4.2.0-r Thu Aug 11 12:41:19 CDT 2005 (1)",
|
|
1050
|
+
processor="i386", system="SecureOS/7.0.1.00", leap=0, stratum=3,
|
|
1051
|
+
precision=-19, rootdelay=27.044, rootdispersion=87.845, peer=2357,
|
|
1052
|
+
refid=A.B.C.D, reftime=0xd2636966.fd61b098, poll=10,
|
|
1053
|
+
clock=0xd2636c8e.d5e2d427, state=4, offset=0.519, frequency=-3.027,
|
|
1054
|
+
jitter=5.132, stability=0.394
|
|
1055
|
+
</example>
|
|
1056
|
+
<example>
|
|
1057
|
+
version="ntpd 4.2.0-r Thu Aug 11 12:41:19 CDT 2005 (1)",
|
|
1058
|
+
processor="i386", system="SecureOS/7.0.0.04", leap=0, stratum=2,
|
|
1059
|
+
precision=-19, rootdelay=56.480, rootdispersion=35.772, peer=8677,
|
|
1060
|
+
refid=A.B.C.D, reftime=0xd260ce25.8f9e2b59, poll=10,
|
|
1061
|
+
clock=0xd260cf6c.7e0f1646, state=4, offset=-0.129, frequency=8.718,
|
|
1062
|
+
jitter=0.548, stability=0.055
|
|
1063
|
+
</example>
|
|
1064
|
+
<param pos="0" name="service.family" value="NTP"/>
|
|
1065
|
+
<param pos="0" name="service.product" value="NTP"/>
|
|
1066
|
+
<param pos="0" name="os.vendor" value="McAfee"/>
|
|
1067
|
+
<param pos="0" name="os.product" value="SecureOS"/>
|
|
1068
|
+
<param pos="1" name="service.version"/>
|
|
1069
|
+
<param pos="2" name="os.arch"/>
|
|
1070
|
+
<param pos="3" name="os.version"/>
|
|
1071
|
+
</fingerprint>
|
|
1072
|
+
<fingerprint pattern="^.*processor="([^ ]+)".*system="Linux([^ ]+)"" flags="REG_DOT_NEWLINE,REG_ICASE">
|
|
1073
|
+
<description>ntpd running on linux</description>
|
|
1074
|
+
<example>
|
|
1075
|
+
processor="i686", system="Linux2.6.10", leap=0, stratum=2,
|
|
1076
|
+
precision=-17, rootdelay=44.644, rootdispersion=29.933, peer=13317,
|
|
1077
|
+
refid=A.B.C.D, reftime=0xd2c29f69.407570c5, poll=10,
|
|
1078
|
+
clock=0xd2c2a335.360999dc, state=4, phase=1.037, frequency=55.898,
|
|
1079
|
+
jitter=0.203, stability=0.004
|
|
1080
|
+
</example>
|
|
1081
|
+
<example>
|
|
1082
|
+
processor="i686", system="Linux2.6.23.waas", leap=0, stratum=2,
|
|
1083
|
+
precision=-18, rootdelay=37.550, rootdispersion=427.047, peer=40613,
|
|
1084
|
+
refid=172.20.62.191, reftime=0xd297a442.8b66c6de, poll=14,
|
|
1085
|
+
clock=0xd297d4bf.4a69be09, state=4, phase=2.927, frequency=25.968,
|
|
1086
|
+
jitter=3.460, stability=0.043
|
|
1087
|
+
</example>
|
|
1088
|
+
<param pos="0" name="service.family" value="NTP"/>
|
|
1089
|
+
<param pos="0" name="service.product" value="NTP"/>
|
|
1090
|
+
<param pos="0" name="os.vendor" value="Linux"/>
|
|
1091
|
+
<param pos="0" name="os.family" value="Linux"/>
|
|
1092
|
+
<param pos="0" name="os.product" value="Linux"/>
|
|
1093
|
+
<param pos="0" name="os.certainty" value="0.75"/>
|
|
1094
|
+
<param pos="1" name="os.arch"/>
|
|
1095
|
+
<param pos="2" name="os.version"/>
|
|
1096
|
+
<param pos="0" name="os.cpe23" value="cpe:/o:linux:linux_kernel:{os.version}"/>
|
|
1097
|
+
</fingerprint>
|
|
1098
|
+
<fingerprint pattern=".*version="ntpd (\S+)[^"]+",.*\s*processor="([^ ]+)".*system="Isilon OneFS/v([^ ]+)"" flags="REG_DOT_NEWLINE,REG_ICASE">
|
|
1099
|
+
<description>Isilon OneFS NTP Server</description>
|
|
1100
|
+
<example>
|
|
1101
|
+
version="ntpd 4.2.4p4-o Thu Feb 4 20:43:00 UTC 2010 (1)",
|
|
1102
|
+
processor="i386", system="Isilon OneFS/v5.5.4.21", leap=0, stratum=14,
|
|
1103
|
+
precision=-19, rootdelay=0.000, rootdispersion=11.260, peer=60044,
|
|
1104
|
+
refid=A.B.C.D, reftime=0xd2c1c806.b32bca4f, poll=10,
|
|
1105
|
+
clock=0xd2c1c81b.d2869541, state=4, offset=0.000, frequency=-9.100,
|
|
1106
|
+
jitter=0.002, noise=0.002, stability=0.000, tai=0
|
|
1107
|
+
</example>
|
|
1108
|
+
<param pos="0" name="service.family" value="NTP"/>
|
|
1109
|
+
<param pos="0" name="service.product" value="NTP"/>
|
|
1110
|
+
<param pos="0" name="os.vendor" value="Isilon"/>
|
|
1111
|
+
<param pos="0" name="os.product" value="OneFS"/>
|
|
1112
|
+
<param pos="1" name="service.version"/>
|
|
1113
|
+
<param pos="2" name="os.arch"/>
|
|
1114
|
+
<param pos="3" name="os.version"/>
|
|
1115
|
+
</fingerprint>
|
|
1116
|
+
<fingerprint pattern="system="IPSO"" flags="REG_DOT_NEWLINE,REG_ICASE">
|
|
1117
|
+
<description>Nokia IPSO NTP</description>
|
|
1118
|
+
<example>
|
|
1119
|
+
system="IPSO", leap=3, stratum=16, rootdelay=0.00, rootdispersion=0.00,
|
|
1120
|
+
peer=0, refid=0.0.0.0, reftime=0x00000000.00000000, poll=4,
|
|
1121
|
+
clock=0xd2066990.82704000, phase=0.000, freq=0.00, error=0.00
|
|
1122
|
+
</example>
|
|
1123
|
+
<example>
|
|
1124
|
+
system="IPSO", leap=0, stratum=3, rootdelay=121.57,
|
|
1125
|
+
rootdispersion=13.55, peer=29038, refid=A.B.C.D,
|
|
1126
|
+
reftime=0xd1e2ab9b.ac19b000, poll=7, clock=0xd1e2abf4.b8ef1000,
|
|
1127
|
+
phase=0.756, freq=27452.24, error=0.58
|
|
1128
|
+
</example>
|
|
1129
|
+
<param pos="0" name="service.family" value="NTP"/>
|
|
1130
|
+
<param pos="0" name="service.product" value="NTP"/>
|
|
1131
|
+
<param pos="0" name="os.vendor" value="Nokia"/>
|
|
1132
|
+
<param pos="0" name="os.product" value="IPSO"/>
|
|
1133
|
+
<param pos="0" name="os.device" value="Firewall"/>
|
|
1134
|
+
<param pos="0" name="os.cpe23" value="cpe:/o:nokia:ipso:-"/>
|
|
1135
|
+
</fingerprint>
|
|
1136
|
+
<fingerprint pattern="system="UNIX/Solaris\s[^ ]+"" flags="REG_DOT_NEWLINE,REG_ICASE">
|
|
1137
|
+
<description>Sun Solaris NTP</description>
|
|
1138
|
+
<example>
|
|
1139
|
+
system="UNIX/Solaris 2.x", leap=3, stratum=16, rootdelay=0.00,
|
|
1140
|
+
rootdispersion=0.00, peer=0, refid=0.0.0.0, reftime=0x00000000.00000000,
|
|
1141
|
+
poll=4, clock=0xd23e08ab.ecd7f000, phase=0.000, freq=11392.00,
|
|
1142
|
+
error=0.00
|
|
1143
|
+
</example>
|
|
1144
|
+
<example>
|
|
1145
|
+
system="UNIX/Solaris 2.x", leap=3, stratum=16, rootdelay=0.00,
|
|
1146
|
+
rootdispersion=0.00, peer=0, refid=0.0.0.0, reftime=0x00000000.00000000,
|
|
1147
|
+
poll=4, clock=0xd2353ae7.7bca8000, phase=0.000, freq=11392.00,
|
|
1148
|
+
error=0.00
|
|
1149
|
+
</example>
|
|
1150
|
+
<param pos="0" name="os.vendor" value="Sun"/>
|
|
1151
|
+
<param pos="0" name="os.family" value="Solaris"/>
|
|
1152
|
+
<param pos="0" name="os.product" value="Solaris"/>
|
|
1153
|
+
<param pos="0" name="os.cpe23" value="cpe:/o:sun:solaris:-"/>
|
|
1154
|
+
<param pos="0" name="service.family" value="NTP"/>
|
|
1155
|
+
<param pos="0" name="service.product" value="NTP"/>
|
|
1156
|
+
<param pos="0" name="service.vendor" value="Sun"/>
|
|
1157
|
+
</fingerprint>
|
|
1158
|
+
<fingerprint pattern="version="ntpd version = ([^ ]+)",\s*processor="([A-Z0-9]+)",\s*system="OpenVMS/V([A-Z0-9.-]+)" flags="REG_DOT_NEWLINE,REG_ICASE">
|
|
1159
|
+
<description>OpenVMS NTP Server</description>
|
|
1160
|
+
<example service.version="4.2.0" os.arch="PHMNFP" os.version="8.3">
|
|
1161
|
+
version="ntpd version = 4.2.0", processor="PHMNFP",
|
|
1162
|
+
system="OpenVMS/V8.3", leap=0, stratum=4, precision=-10,
|
|
1163
|
+
rootdelay=56.458, rootdispersion=51.315, peer=53868, refid=A.B.C.D,
|
|
1164
|
+
reftime=0xd248836a.1af277e1, poll=10, clock=0xd2488581.0790e0a1,
|
|
1165
|
+
state=4, offset=-0.561, frequency=8.597, jitter=1.507, stability=0.041
|
|
1166
|
+
</example>
|
|
1167
|
+
<example service.version="4.2.0" os.arch="STHRN2" os.version="8.3-1H1">
|
|
1168
|
+
version="ntpd version = 4.2.0", processor="STHRN2",
|
|
1169
|
+
system="OpenVMS/V8.3-1H1", leap=0, stratum=3, precision=-10,
|
|
1170
|
+
rootdelay=8.615, rootdispersion=80.724, peer=55037,
|
|
1171
|
+
refid=A.B.C.D, reftime=0xd1aa6b0e.bc19eb3b, poll=10,
|
|
1172
|
+
clock=0xd1aa6d19.d5a12600, state=4, offset=7.844, frequency=4.737,
|
|
1173
|
+
jitter=2.222, stability=0.096
|
|
1174
|
+
</example>
|
|
1175
|
+
<param pos="0" name="service.family" value="NTP"/>
|
|
1176
|
+
<param pos="0" name="service.product" value="NTP"/>
|
|
1177
|
+
<param pos="0" name="os.vendor" value="HP"/>
|
|
1178
|
+
<param pos="0" name="os.product" value="OpenVMS"/>
|
|
1179
|
+
<param pos="1" name="service.version"/>
|
|
1180
|
+
<param pos="2" name="os.arch"/>
|
|
1181
|
+
<param pos="3" name="os.version"/>
|
|
1182
|
+
<param pos="0" name="os.cpe23" value="cpe:/o:hp:openvms:{os.version}"/>
|
|
1183
|
+
</fingerprint>
|
|
1184
|
+
<fingerprint pattern="version="ntpd version = ([^ ]+)",\s*processor="unknown",\s*system="OpenVMS AXP"" flags="REG_DOT_NEWLINE,REG_ICASE">
|
|
1185
|
+
<description>OpenVMS AXP (Alpha) NTP Server</description>
|
|
1186
|
+
<example service.version="4.1.0" os.arch="Alpha">
|
|
1187
|
+
version="ntpd version = 4.1.0", processor="unknown", system="OpenVMS AXP"
|
|
1188
|
+
</example>
|
|
1189
|
+
<param pos="0" name="service.family" value="NTP"/>
|
|
1190
|
+
<param pos="0" name="service.product" value="NTP"/>
|
|
1191
|
+
<param pos="1" name="service.version"/>
|
|
1192
|
+
<param pos="0" name="os.vendor" value="OpenVMS"/>
|
|
1193
|
+
<param pos="0" name="os.product" value="OpenVMS"/>
|
|
1194
|
+
<param pos="0" name="os.arch" value="Alpha"/>
|
|
1195
|
+
</fingerprint>
|
|
1196
|
+
<fingerprint pattern=".*version="ntpd ([^ ]+)[^"]+",\s*processor="([^ ]+)",\s*system="BIG-IPBIG-IP\s+([^"]+)"" flags="REG_DOT_NEWLINE,REG_ICASE">
|
|
1197
|
+
<description>F5 Big-IP Load Balancers NTP</description>
|
|
1198
|
+
<example service.version="4.1.1a@1.791" os.arch="i386" os.version="4.5PTF-0">
|
|
1199
|
+
version="ntpd 4.1.1a@1.791 Fri Aug 8 04:08:19 PDT 2003 (1)",
|
|
1200
|
+
processor="i386", system="BIG-IPBIG-IP 4.5PTF-0", leap=3, stratum=16,
|
|
1201
|
+
precision=-16, rootdelay=0.000, rootdispersion=103599.120, peer=0,
|
|
1202
|
+
refid=0.0.0.0, reftime=0x00000000.00000000, poll=4,
|
|
1203
|
+
clock=0xd20533b8.903aa79b, state=1, offset=0.000, frequency=0.000,
|
|
1204
|
+
jitter=0.015, stability=0.000
|
|
1205
|
+
</example>
|
|
1206
|
+
<param pos="0" name="service.vendor" value="F5"/>
|
|
1207
|
+
<param pos="0" name="service.family" value="BIG-IP"/>
|
|
1208
|
+
<param pos="0" name="service.product" value="BIG-IP LTM"/>
|
|
1209
|
+
<param pos="1" name="service.version"/>
|
|
1210
|
+
<param pos="0" name="service.cpe23" value="cpe:/a:f5:big-ip_local_traffic_manager:{service.version}"/>
|
|
1211
|
+
<param pos="2" name="os.arch"/>
|
|
1212
|
+
<param pos="3" name="os.version"/>
|
|
1213
|
+
</fingerprint>
|
|
1214
|
+
<fingerprint pattern=".*version="ntpd ([^ ]+)[^"]+",\s*processor,\s*system="/"" flags="REG_DOT_NEWLINE,REG_ICASE">
|
|
1215
|
+
<description>NTP on an unknown system</description>
|
|
1216
|
+
<example service.version="4.2.6p2-RC4@1.2180-o">
|
|
1217
|
+
version="ntpd 4.2.6p2-RC4@1.2180-o Sun Jun 13 02:56:12 UTC 2010 (2)", processor, system="/"
|
|
1218
|
+
</example>
|
|
1219
|
+
<param pos="0" name="service.family" value="NTP"/>
|
|
1220
|
+
<param pos="0" name="service.product" value="NTP"/>
|
|
1221
|
+
<param pos="1" name="service.version"/>
|
|
1222
|
+
</fingerprint>
|
|
1223
|
+
</fingerprints>
|