recog 2.1.20 → 2.1.21

Sign up to get free protection for your applications and to get access to all the features.
Files changed (47) hide show
  1. checksums.yaml +4 -4
  2. data/lib/recog/version.rb +1 -1
  3. data/remap.json +131 -0
  4. data/spec/lib/fingerprint_self_test_spec.rb +16 -1
  5. data/update_cpes.py +202 -0
  6. data/xml/apache_os.xml +29 -5
  7. data/xml/architecture.xml +3 -3
  8. data/xml/dns_versionbind.xml +56 -10
  9. data/xml/ftp_banners.xml +56 -12
  10. data/xml/h323_callresp.xml +4 -4
  11. data/xml/hp_pjl_id.xml +8 -8
  12. data/xml/http_cookies.xml +20 -8
  13. data/xml/http_servers.xml +122 -8
  14. data/xml/http_wwwauth.xml +13 -3
  15. data/xml/imap_banners.xml +19 -1
  16. data/xml/ldap_searchresult.xml +44 -68
  17. data/xml/mdns_device-info_txt.xml +18 -7
  18. data/xml/mdns_workstation_txt.xml +7 -7
  19. data/xml/mysql_banners.xml +159 -13
  20. data/xml/mysql_error.xml +124 -21
  21. data/xml/nntp_banners.xml +10 -4
  22. data/xml/ntp_banners.xml +144 -84
  23. data/xml/operating_system.xml +39 -10
  24. data/xml/pop_banners.xml +32 -12
  25. data/xml/rsh_resp.xml +8 -3
  26. data/xml/sip_banners.xml +4 -3
  27. data/xml/sip_user_agents.xml +4 -3
  28. data/xml/smb_native_lm.xml +9 -4
  29. data/xml/smb_native_os.xml +50 -25
  30. data/xml/smtp_banners.xml +108 -33
  31. data/xml/smtp_debug.xml +11 -8
  32. data/xml/smtp_ehlo.xml +14 -11
  33. data/xml/smtp_expn.xml +17 -11
  34. data/xml/smtp_help.xml +17 -11
  35. data/xml/smtp_mailfrom.xml +4 -3
  36. data/xml/smtp_noop.xml +13 -8
  37. data/xml/smtp_quit.xml +10 -8
  38. data/xml/smtp_rcptto.xml +1 -3
  39. data/xml/smtp_rset.xml +10 -8
  40. data/xml/smtp_turn.xml +10 -8
  41. data/xml/smtp_vrfy.xml +18 -11
  42. data/xml/snmp_sysdescr.xml +157 -451
  43. data/xml/snmp_sysobjid.xml +57 -4
  44. data/xml/ssh_banners.xml +104 -5
  45. data/xml/upnp_banners.xml +16 -1
  46. data/xml/x11_banners.xml +34 -9
  47. metadata +4 -2
data/xml/nntp_banners.xml CHANGED
@@ -1,9 +1,9 @@
1
1
  <?xml version="1.0" encoding="UTF-8"?>
2
- <!--
3
- NNTP greeting messages (part of the banner after the response code) are matched
4
- against these patterns to fingerprint NNTP servers.
5
- -->
6
2
  <fingerprints matches="nntp.banner" protocol="nntp" database_type="service">
3
+ <!--
4
+ NNTP greeting messages (part of the banner after the response code) are matched
5
+ against these patterns to fingerprint NNTP servers.
6
+ -->
7
7
  <fingerprint pattern="^NNTP Service (?:.*) Version: (5.0.2195.[0-9]+) .*$">
8
8
  <description>Microsoft IIS NNTP Server on Windows 2000</description>
9
9
  <example>NNTP Service 5.00.0984 Version: 5.0.2195.7034 Posting Allowed</example>
@@ -12,10 +12,12 @@ against these patterns to fingerprint NNTP servers.
12
12
  <param pos="0" name="service.product" value="IIS"/>
13
13
  <param pos="0" name="service.family" value="IIS"/>
14
14
  <param pos="1" name="service.version"/>
15
+ <param pos="0" name="service.cpe23" value="cpe:/a:microsoft:iis:{service.version}"/>
15
16
  <param pos="0" name="os.vendor" value="Microsoft"/>
16
17
  <param pos="0" name="os.device" value="General"/>
17
18
  <param pos="0" name="os.family" value="Windows"/>
18
19
  <param pos="0" name="os.product" value="Windows 2000"/>
20
+ <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_2000:-"/>
19
21
  <param pos="1" name="ms.nttp.version"/>
20
22
  </fingerprint>
21
23
  <fingerprint pattern="^NNTP Service (?:.*) Version: (6.0.3790.[0-9]+) .*$">
@@ -26,10 +28,12 @@ against these patterns to fingerprint NNTP servers.
26
28
  <param pos="0" name="service.product" value="IIS"/>
27
29
  <param pos="0" name="service.family" value="IIS"/>
28
30
  <param pos="1" name="service.version"/>
31
+ <param pos="0" name="service.cpe23" value="cpe:/a:microsoft:iis:{service.version}"/>
29
32
  <param pos="0" name="os.vendor" value="Microsoft"/>
30
33
  <param pos="0" name="os.device" value="General"/>
31
34
  <param pos="0" name="os.family" value="Windows"/>
32
35
  <param pos="0" name="os.product" value="Windows Server 2003"/>
36
+ <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_server_2003:-"/>
33
37
  <param pos="1" name="ms.nttp.version"/>
34
38
  </fingerprint>
35
39
  <fingerprint pattern="^NNTP Service Microsoft. Internet Services (?:.*) Version: (?:[^ ]+) .*$">
@@ -40,9 +44,11 @@ against these patterns to fingerprint NNTP servers.
40
44
  <param pos="0" name="service.vendor" value="Microsoft"/>
41
45
  <param pos="0" name="service.family" value="Exchange Server"/>
42
46
  <param pos="0" name="service.product" value="Exchange Server"/>
47
+ <param pos="0" name="service.cpe23" value="cpe:/a:microsoft:exchange_server:-"/>
43
48
  <param pos="0" name="os.vendor" value="Microsoft"/>
44
49
  <param pos="0" name="os.device" value="General"/>
45
50
  <param pos="0" name="os.family" value="Windows"/>
46
51
  <param pos="0" name="os.product" value="Windows"/>
52
+ <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows:-"/>
47
53
  </fingerprint>
48
54
  </fingerprints>
data/xml/ntp_banners.xml CHANGED
@@ -1,8 +1,8 @@
1
1
  <?xml version="1.0" encoding="UTF-8"?>
2
- <!--
3
- NTP "banners", taken from a readvar response
4
- -->
5
2
  <fingerprints matches="ntp.readvar" protocol="ntp" database_type="service" preference="0.80">
3
+ <!--
4
+ NTP "banners", taken from a readvar response
5
+ -->
6
6
  <fingerprint pattern="^.*version=Domain Time II (\S+),hostname=([^,]+),.*system=Win2003.*,processor=(\S+)" flags="REG_DOT_NEWLINE,REG_ICASE">
7
7
  <description>Greyware Automation Products, Inc. Domain Time II on Windows Server 2003</description>
8
8
  <example service.version="5.1.b.20100331R" os.arch="x64" host.name="blah">
@@ -19,6 +19,7 @@ NTP "banners", taken from a readvar response
19
19
  <param pos="0" name="os.family" value="Windows"/>
20
20
  <param pos="0" name="os.product" value="Windows Server 2003"/>
21
21
  <param pos="3" name="os.arch"/>
22
+ <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_server_2003:-"/>
22
23
  </fingerprint>
23
24
  <fingerprint pattern="^.*version=Domain Time II (\S+),hostname=([^,]+),.*system=Win2008R2.*,processor=(\S+)" flags="REG_DOT_NEWLINE,REG_ICASE">
24
25
  <description>Greyware Automation Products, Inc. Domain Time II on Windows Server 2008 R2</description>
@@ -33,6 +34,7 @@ NTP "banners", taken from a readvar response
33
34
  <param pos="0" name="os.family" value="Windows"/>
34
35
  <param pos="0" name="os.product" value="Windows 2008 R2"/>
35
36
  <param pos="3" name="os.arch"/>
37
+ <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_server_2008:-"/>
36
38
  </fingerprint>
37
39
  <fingerprint pattern="^.*version=Domain Time II (\S+),hostname=([^,]+),.*system=Win2008.*,processor=(\S+)" flags="REG_DOT_NEWLINE,REG_ICASE">
38
40
  <description>Greyware Automation Products, Inc. Domain Time II on Windows 2008</description>
@@ -50,6 +52,7 @@ NTP "banners", taken from a readvar response
50
52
  <param pos="0" name="os.family" value="Windows"/>
51
53
  <param pos="0" name="os.product" value="Windows Server 2008"/>
52
54
  <param pos="3" name="os.arch"/>
55
+ <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_server_2008:-"/>
53
56
  </fingerprint>
54
57
  <fingerprint pattern="^.*version=Domain Time II (\S+),hostname=([^,]+),.*system=Win2012.*,processor=(\S+)" flags="REG_DOT_NEWLINE,REG_ICASE">
55
58
  <description>Greyware Automation Products, Inc. Domain Time II on Windows Server 2012</description>
@@ -64,6 +67,7 @@ NTP "banners", taken from a readvar response
64
67
  <param pos="0" name="os.family" value="Windows"/>
65
68
  <param pos="0" name="os.product" value="Windows Server 2012"/>
66
69
  <param pos="3" name="os.arch"/>
70
+ <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_server_2012:-"/>
67
71
  </fingerprint>
68
72
  <fingerprint pattern="^.*version=Domain Time II (\S+),hostname=([^,]+),.*system=Win7.*,processor=(\S+)" flags="REG_DOT_NEWLINE,REG_ICASE">
69
73
  <description>Greyware Automation Products, Inc. Domain Time II on Windows 7</description>
@@ -78,6 +82,7 @@ NTP "banners", taken from a readvar response
78
82
  <param pos="0" name="os.family" value="Windows"/>
79
83
  <param pos="0" name="os.product" value="Windows 7"/>
80
84
  <param pos="3" name="os.arch"/>
85
+ <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_7:-"/>
81
86
  </fingerprint>
82
87
  <fingerprint pattern="^.*version=&quot;ntpd (\S+)[^&quot;]+&quot;,.*system=&quot;Equallogic \(R\) storage array&quot;" flags="REG_DOT_NEWLINE,REG_ICASE">
83
88
  <description>ntpd running on an EqualLogic Storage Array that includes the NTP version</description>
@@ -120,6 +125,7 @@ NTP "banners", taken from a readvar response
120
125
  <param pos="0" name="os.family" value="VMware ESX/ESXi"/>
121
126
  <param pos="0" name="os.product" value="VMware ESX Server"/>
122
127
  <param pos="2" name="os.arch"/>
128
+ <param pos="0" name="os.cpe23" value="cpe:/o:vmware:esx:-"/>
123
129
  </fingerprint>
124
130
  <fingerprint pattern="^.*version=&quot;ntpd ([^ ]+)[^&quot;]+&quot;,.*processor=&quot;([^ ]+)&quot;,.*system=&quot;Linux/?([^ ]+)&quot;" flags="REG_DOT_NEWLINE,REG_ICASE">
125
131
  <description>ntpd running on Linux</description>
@@ -135,6 +141,7 @@ NTP "banners", taken from a readvar response
135
141
  <param pos="0" name="os.product" value="Linux"/>
136
142
  <param pos="2" name="os.arch"/>
137
143
  <param pos="3" name="os.version"/>
144
+ <param pos="0" name="os.cpe23" value="cpe:/o:linux:linux_kernel:{os.version}"/>
138
145
  </fingerprint>
139
146
  <fingerprint pattern="^.*version=&quot;ntpd ([^ ]+)[^&quot;]+&quot;,.*processor=&quot;([^&quot;]+)&quot;,.*system=&quot;Darwin/?6\.([^&quot;]+)&quot;" flags="REG_DOT_NEWLINE,REG_ICASE">
140
147
  <description>ntpd running on Mac OSX 10.2/Jaguar</description>
@@ -152,6 +159,7 @@ NTP "banners", taken from a readvar response
152
159
  <param pos="0" name="os.version" value="10.2"/>
153
160
  <param pos="3" name="os.version.version"/>
154
161
  <param pos="0" name="os.certainty" value="0.9"/>
162
+ <param pos="0" name="os.cpe23" value="cpe:/o:apple:mac_os_x:10.2"/>
155
163
  </fingerprint>
156
164
  <fingerprint pattern="^.*version=&quot;ntpd ([^ ]+)[^&quot;]+&quot;,.*processor=&quot;([^&quot;]+)&quot;,.*system=&quot;Darwin/?7\.([^&quot;]+)&quot;" flags="REG_DOT_NEWLINE,REG_ICASE">
157
165
  <description>ntpd running on Mac OSX 10.3/Panther</description>
@@ -166,6 +174,7 @@ NTP "banners", taken from a readvar response
166
174
  <param pos="0" name="os.version" value="10.3"/>
167
175
  <param pos="3" name="os.version.version"/>
168
176
  <param pos="0" name="os.certainty" value="0.9"/>
177
+ <param pos="0" name="os.cpe23" value="cpe:/o:apple:mac_os_x:10.3"/>
169
178
  </fingerprint>
170
179
  <fingerprint pattern="^.*version=&quot;ntpd ([^ ]+)[^&quot;]+&quot;,.*processor=&quot;([^&quot;]+)&quot;,.*system=&quot;Darwin/?8\.([^&quot;]+)&quot;" flags="REG_DOT_NEWLINE,REG_ICASE">
171
180
  <description>ntpd running on Mac OSX 10.4/Tiger</description>
@@ -184,6 +193,7 @@ NTP "banners", taken from a readvar response
184
193
  <param pos="0" name="os.version" value="10.4"/>
185
194
  <param pos="3" name="os.version.version"/>
186
195
  <param pos="0" name="os.certainty" value="0.9"/>
196
+ <param pos="0" name="os.cpe23" value="cpe:/o:apple:mac_os_x:10.4"/>
187
197
  </fingerprint>
188
198
  <fingerprint pattern="^.*version=&quot;ntpd ([^ ]+)[^&quot;]+&quot;,.*processor=&quot;([^&quot;]+)&quot;,.*system=&quot;Darwin/?9\.([^&quot;]+)&quot;" flags="REG_DOT_NEWLINE,REG_ICASE">
189
199
  <description>ntpd running on Mac OSX 10.5/Leopard</description>
@@ -202,6 +212,7 @@ NTP "banners", taken from a readvar response
202
212
  <param pos="0" name="os.version" value="10.5"/>
203
213
  <param pos="3" name="os.version.version"/>
204
214
  <param pos="0" name="os.certainty" value="0.9"/>
215
+ <param pos="0" name="os.cpe23" value="cpe:/o:apple:mac_os_x:10.5"/>
205
216
  </fingerprint>
206
217
  <fingerprint pattern="^.*version=&quot;ntpd ([^ ]+)[^&quot;]+&quot;,.*processor=&quot;([^&quot;]+)&quot;,.*system=&quot;Darwin/?10\.([^&quot;]+)&quot;" flags="REG_DOT_NEWLINE,REG_ICASE">
207
218
  <description>ntpd running on Mac OSX 10.6/Snow Leopard</description>
@@ -220,6 +231,7 @@ NTP "banners", taken from a readvar response
220
231
  <param pos="0" name="os.version" value="10.6"/>
221
232
  <param pos="3" name="os.version.version"/>
222
233
  <param pos="0" name="os.certainty" value="0.9"/>
234
+ <param pos="0" name="os.cpe23" value="cpe:/o:apple:mac_os_x:10.6"/>
223
235
  </fingerprint>
224
236
  <fingerprint pattern="^.*processor=&quot;([^&quot;]+)&quot;.*system=&quot;BSD/OS([\d.]+)&quot;" flags="REG_DOT_NEWLINE,REG_ICASE">
225
237
  <description>BSD/OS with a version and arch</description>
@@ -256,6 +268,7 @@ NTP "banners", taken from a readvar response
256
268
  <param pos="0" name="os.version" value="10.7"/>
257
269
  <param pos="3" name="os.version.version"/>
258
270
  <param pos="0" name="os.certainty" value="0.9"/>
271
+ <param pos="0" name="os.cpe23" value="cpe:/o:apple:mac_os_x:10.7"/>
259
272
  </fingerprint>
260
273
  <fingerprint pattern="^.*version=&quot;ntpd ([^ ]+)[^&quot;]+&quot;,.*processor=&quot;([^&quot;]+)&quot;,.*system=&quot;Darwin/?12\.([^&quot;]+)&quot;" flags="REG_DOT_NEWLINE,REG_ICASE">
261
274
  <description>ntpd running on Mac OSX 10.8/Mountain Lion</description>
@@ -274,6 +287,7 @@ NTP "banners", taken from a readvar response
274
287
  <param pos="0" name="os.version" value="10.8"/>
275
288
  <param pos="3" name="os.version.version"/>
276
289
  <param pos="0" name="os.certainty" value="0.9"/>
290
+ <param pos="0" name="os.cpe23" value="cpe:/o:apple:mac_os_x:10.8"/>
277
291
  </fingerprint>
278
292
  <fingerprint pattern="^.*version=&quot;ntpd ([^ ]+)[^&quot;]+&quot;,.*processor=&quot;([^&quot;]+)&quot;,.*system=&quot;Darwin/?13\.([^&quot;]+)&quot;" flags="REG_DOT_NEWLINE,REG_ICASE">
279
293
  <description>ntpd running on Mac OSX 10.9/Mavericks</description>
@@ -292,6 +306,7 @@ NTP "banners", taken from a readvar response
292
306
  <param pos="0" name="os.version" value="10.9"/>
293
307
  <param pos="3" name="os.version.version"/>
294
308
  <param pos="0" name="os.certainty" value="0.9"/>
309
+ <param pos="0" name="os.cpe23" value="cpe:/o:apple:mac_os_x:10.9"/>
295
310
  </fingerprint>
296
311
  <fingerprint pattern="^.*version=&quot;ntpd ([^ ]+)[^&quot;]+&quot;,.*processor=&quot;([^&quot;]+)&quot;,.*system=&quot;Darwin/?14\.([^&quot;]+)&quot;" flags="REG_DOT_NEWLINE,REG_ICASE">
297
312
  <description>ntpd running on Mac OSX 10.10/Yosemite</description>
@@ -310,6 +325,7 @@ NTP "banners", taken from a readvar response
310
325
  <param pos="0" name="os.version" value="10.10"/>
311
326
  <param pos="3" name="os.version.version"/>
312
327
  <param pos="0" name="os.certainty" value="0.9"/>
328
+ <param pos="0" name="os.cpe23" value="cpe:/o:apple:mac_os_x:10.10"/>
313
329
  </fingerprint>
314
330
  <fingerprint pattern="^.*version=&quot;ntpd ([^ ]+)[^&quot;]+&quot;,.*processor=&quot;([^ ]+)&quot;,.*system=&quot;FreeBSD/?(?:[^ ]+-NETSCALER-([^ ]+))&quot;" flags="REG_DOT_NEWLINE,REG_ICASE">
315
331
  <description>ntpd running on Citrix Netscaler, which is based on FreeBSD</description>
@@ -339,6 +355,7 @@ NTP "banners", taken from a readvar response
339
355
  <param pos="0" name="os.product" value="FreeBSD"/>
340
356
  <param pos="2" name="os.arch"/>
341
357
  <param pos="3" name="os.version"/>
358
+ <param pos="0" name="os.cpe23" value="cpe:/o:freebsd:freebsd:{os.version}"/>
342
359
  </fingerprint>
343
360
  <fingerprint pattern="^.*processor=&quot;([^ ]+)&quot;,.*system=&quot;FreeBSD/?([^ ]+)&quot;" flags="REG_DOT_NEWLINE,REG_ICASE">
344
361
  <description>ntp without a version on FreeBSD</description>
@@ -353,6 +370,7 @@ NTP "banners", taken from a readvar response
353
370
  <param pos="0" name="os.product" value="FreeBSD"/>
354
371
  <param pos="1" name="os.arch"/>
355
372
  <param pos="2" name="os.version"/>
373
+ <param pos="0" name="os.cpe23" value="cpe:/o:freebsd:freebsd:{os.version}"/>
356
374
  </fingerprint>
357
375
  <fingerprint pattern="^.*version=&quot;ntpd ([^ ]+)[^&quot;]+&quot;,.*processor=&quot;([^ ]+)&quot;,.*system=&quot;NetBSD/?([^ ]+)&quot;" flags="REG_DOT_NEWLINE,REG_ICASE">
358
376
  <description>ntpd running on NetBSD</description>
@@ -368,6 +386,7 @@ NTP "banners", taken from a readvar response
368
386
  <param pos="0" name="os.product" value="NetBSD"/>
369
387
  <param pos="2" name="os.arch"/>
370
388
  <param pos="3" name="os.version"/>
389
+ <param pos="0" name="os.cpe23" value="cpe:/o:netbsd:netbsd:{os.version}"/>
371
390
  </fingerprint>
372
391
  <fingerprint pattern="^.*processor=&quot;([^ ]+)&quot;,.*system=&quot;NetBSD/?([^ ]+)&quot;" flags="REG_DOT_NEWLINE,REG_ICASE">
373
392
  <description>ntpd running on NetBSD</description>
@@ -409,6 +428,7 @@ NTP "banners", taken from a readvar response
409
428
  <param pos="0" name="os.product" value="NetBSD"/>
410
429
  <param pos="1" name="os.arch"/>
411
430
  <param pos="2" name="os.version"/>
431
+ <param pos="0" name="os.cpe23" value="cpe:/o:netbsd:netbsd:{os.version}"/>
412
432
  </fingerprint>
413
433
  <fingerprint pattern="^.*system=&quot;NetWare&quot;" flags="REG_DOT_NEWLINE,REG_ICASE">
414
434
  <description>NetWare</description>
@@ -418,6 +438,7 @@ NTP "banners", taken from a readvar response
418
438
  <param pos="0" name="os.vendor" value="Novell"/>
419
439
  <param pos="0" name="os.family" value="NetWare"/>
420
440
  <param pos="0" name="os.product" value="NetWare"/>
441
+ <param pos="0" name="os.cpe23" value="cpe:/o:novell:netware:-"/>
421
442
  </fingerprint>
422
443
  <fingerprint pattern="^.*version=&quot;ntpd ([^ ]+)[^&quot;]+&quot;,.*processor=&quot;([^ ]+)&quot;,.*system=&quot;SunOS/?5.0&quot;" flags="REG_DOT_NEWLINE,REG_ICASE">
423
444
  <description>ntpd running on Solaris 2.0 (SunOS/5.0) </description>
@@ -437,6 +458,7 @@ NTP "banners", taken from a readvar response
437
458
  <param pos="0" name="os.version" value="2.0"/>
438
459
  <param pos="1" name="service.version"/>
439
460
  <param pos="2" name="os.arch"/>
461
+ <param pos="0" name="os.cpe23" value="cpe:/o:sun:solaris:2.0"/>
440
462
  </fingerprint>
441
463
  <fingerprint pattern="^.*version=&quot;ntpd ([^ ]+)[^&quot;]+&quot;,.*processor=&quot;([^ ]+)&quot;,.*system=&quot;SunOS/?5.1&quot;" flags="REG_DOT_NEWLINE,REG_ICASE">
442
464
  <description> ntpd running on Solaris 2.1 (SunOS/5.1) </description>
@@ -456,6 +478,7 @@ NTP "banners", taken from a readvar response
456
478
  <param pos="0" name="os.version" value="2.1"/>
457
479
  <param pos="1" name="service.version"/>
458
480
  <param pos="2" name="os.arch"/>
481
+ <param pos="0" name="os.cpe23" value="cpe:/o:sun:solaris:2.1"/>
459
482
  </fingerprint>
460
483
  <fingerprint pattern="^.*version=&quot;ntpd ([^ ]+)[^&quot;]+&quot;,.*processor=&quot;([^ ]+)&quot;,.*system=&quot;SunOS/?5.2&quot;" flags="REG_DOT_NEWLINE,REG_ICASE">
461
484
  <description> ntpd running on Solaris 2.2 (SunOS/5.2) </description>
@@ -475,6 +498,7 @@ NTP "banners", taken from a readvar response
475
498
  <param pos="0" name="os.version" value="2.2"/>
476
499
  <param pos="1" name="service.version"/>
477
500
  <param pos="2" name="os.arch"/>
501
+ <param pos="0" name="os.cpe23" value="cpe:/o:sun:solaris:2.2"/>
478
502
  </fingerprint>
479
503
  <fingerprint pattern="^.*version=&quot;ntpd ([^ ]+)[^&quot;]+&quot;,.*processor=&quot;([^ ]+)&quot;,.*system=&quot;SunOS/?5.3&quot;" flags="REG_DOT_NEWLINE,REG_ICASE">
480
504
  <description> ntpd running on Solaris 2.3 (SunOS/5.3) </description>
@@ -494,6 +518,7 @@ NTP "banners", taken from a readvar response
494
518
  <param pos="0" name="os.version" value="2.3"/>
495
519
  <param pos="1" name="service.version"/>
496
520
  <param pos="2" name="os.arch"/>
521
+ <param pos="0" name="os.cpe23" value="cpe:/o:sun:solaris:2.3"/>
497
522
  </fingerprint>
498
523
  <fingerprint pattern="^.*version=&quot;ntpd ([^ ]+)[^&quot;]+&quot;,.*processor=&quot;([^ ]+)&quot;,.*system=&quot;SunOS/?5.4&quot;" flags="REG_DOT_NEWLINE,REG_ICASE">
499
524
  <description>ntpd running on Solaris 2.4 (SunOS/5.4) </description>
@@ -513,6 +538,7 @@ NTP "banners", taken from a readvar response
513
538
  <param pos="0" name="os.version" value="2.4"/>
514
539
  <param pos="1" name="service.version"/>
515
540
  <param pos="2" name="os.arch"/>
541
+ <param pos="0" name="os.cpe23" value="cpe:/o:sun:solaris:2.4"/>
516
542
  </fingerprint>
517
543
  <fingerprint pattern="^.*version=&quot;ntpd ([^ ]+)[^&quot;]+&quot;,.*processor=&quot;([^ ]+)&quot;,.*system=&quot;SunOS/?5.5&quot;" flags="REG_DOT_NEWLINE,REG_ICASE">
518
544
  <description>ntpd running on Solaris 2.5 (SunOS/5.5) </description>
@@ -532,6 +558,7 @@ NTP "banners", taken from a readvar response
532
558
  <param pos="0" name="os.version" value="2.5"/>
533
559
  <param pos="1" name="service.version"/>
534
560
  <param pos="2" name="os.arch"/>
561
+ <param pos="0" name="os.cpe23" value="cpe:/o:sun:solaris:2.5"/>
535
562
  </fingerprint>
536
563
  <fingerprint pattern="^.*version=&quot;ntpd ([^ ]+)[^&quot;]+&quot;,.*processor=&quot;([^ ]+)&quot;,.*system=&quot;SunOS/?5.6&quot;" flags="REG_DOT_NEWLINE,REG_ICASE">
537
564
  <description>ntpd running on Solaris 2.6 (SunOS/5.6) </description>
@@ -542,7 +569,7 @@ NTP "banners", taken from a readvar response
542
569
  <example service.version="4.2.0@1.1161-r" os.arch="sun4u">
543
570
  version="ntpd 4.2.0@1.1161-r Wed Apr 20 11:28:05 EDT 2005 (1)",
544
571
  processor="sun4u", system="SunOS5.6", leap=00, stratum=2,
545
- </example>
572
+ </example>
546
573
  <param pos="0" name="os.vendor" value="Sun"/>
547
574
  <param pos="0" name="os.family" value="Solaris"/>
548
575
  <param pos="0" name="os.product" value="Solaris"/>
@@ -551,6 +578,7 @@ NTP "banners", taken from a readvar response
551
578
  <param pos="0" name="os.version" value="2.6"/>
552
579
  <param pos="1" name="service.version"/>
553
580
  <param pos="2" name="os.arch"/>
581
+ <param pos="0" name="os.cpe23" value="cpe:/o:sun:solaris:2.6"/>
554
582
  </fingerprint>
555
583
  <fingerprint pattern="^.*version=&quot;ntpd ([^ ]+)[^&quot;]+&quot;,.*processor=&quot;([^ ]+)&quot;,.*system=&quot;SunOS/?5.(1[1-9])&quot;" flags="REG_DOT_NEWLINE,REG_ICASE">
556
584
  <description>ntpd running on Solaris 11 or above (SunOS/5.11 and above) </description>
@@ -570,6 +598,7 @@ NTP "banners", taken from a readvar response
570
598
  <param pos="1" name="service.version"/>
571
599
  <param pos="2" name="os.arch"/>
572
600
  <param pos="3" name="os.version"/>
601
+ <param pos="0" name="os.cpe23" value="cpe:/o:oracle:solaris:{os.version}"/>
573
602
  </fingerprint>
574
603
  <fingerprint pattern="^.*version=&quot;ntpd ([^ ]+)[^&quot;]+&quot;,.*processor=&quot;([^ ]+)&quot;,.*system=&quot;SunOS/?5.([789]|10)&quot;" flags="REG_DOT_NEWLINE,REG_ICASE">
575
604
  <description>ntpd running on Solaris 7-Solaris 10 (SunOS/5.7 - SunOS/5.10) </description>
@@ -597,139 +626,149 @@ NTP "banners", taken from a readvar response
597
626
  <param pos="1" name="service.version"/>
598
627
  <param pos="2" name="os.arch"/>
599
628
  <param pos="3" name="os.version"/>
629
+ <param pos="0" name="os.cpe23" value="cpe:/o:sun:solaris:{os.version}"/>
600
630
  </fingerprint>
601
631
  <fingerprint pattern="^.*processor=&quot;([^ ]+)&quot;,.*system=&quot;SunOS/?5.0&quot;" flags="REG_DOT_NEWLINE,REG_ICASE">
602
- <description>Solaris 2.0 (SunOS/5.0) with no ntp version</description>
603
- <example os.arch="sun4m">
632
+ <description>Solaris 2.0 (SunOS/5.0) with no ntp version</description>
633
+ <example os.arch="sun4m">
604
634
  processor="sun4m", system="SunOS/5.0"
605
635
  </example>
606
- <example os.arch="sun4m">
636
+ <example os.arch="sun4m">
607
637
  processor="sun4m", system="SunOS5.0"
608
638
  </example>
609
- <param pos="0" name="os.vendor" value="Sun"/>
610
- <param pos="0" name="os.family" value="Solaris"/>
611
- <param pos="0" name="os.product" value="Solaris"/>
612
- <param pos="0" name="os.version" value="2.0" />
613
- <param pos="1" name="os.arch"/>
639
+ <param pos="0" name="os.vendor" value="Sun"/>
640
+ <param pos="0" name="os.family" value="Solaris"/>
641
+ <param pos="0" name="os.product" value="Solaris"/>
642
+ <param pos="0" name="os.version" value="2.0"/>
643
+ <param pos="1" name="os.arch"/>
644
+ <param pos="0" name="os.cpe23" value="cpe:/o:sun:solaris:2.0"/>
614
645
  </fingerprint>
615
646
  <fingerprint pattern="^.*processor=&quot;([^ ]+)&quot;,.*system=&quot;SunOS/?5.1&quot;" flags="REG_DOT_NEWLINE,REG_ICASE">
616
- <description>Solaris 2.1 (SunOS/5.1) with no ntp version</description>
617
- <example os.arch="sun4m">
647
+ <description>Solaris 2.1 (SunOS/5.1) with no ntp version</description>
648
+ <example os.arch="sun4m">
618
649
  processor="sun4m", system="SunOS/5.1"
619
650
  </example>
620
- <example os.arch="sun4u">
651
+ <example os.arch="sun4u">
621
652
  processor="sun4u", system="SunOS5.1"
622
653
  </example>
623
- <param pos="0" name="os.vendor" value="Sun"/>
624
- <param pos="0" name="os.family" value="Solaris"/>
625
- <param pos="0" name="os.product" value="Solaris"/>
626
- <param pos="0" name="os.version" value="2.1" />
627
- <param pos="1" name="os.arch"/>
654
+ <param pos="0" name="os.vendor" value="Sun"/>
655
+ <param pos="0" name="os.family" value="Solaris"/>
656
+ <param pos="0" name="os.product" value="Solaris"/>
657
+ <param pos="0" name="os.version" value="2.1"/>
658
+ <param pos="1" name="os.arch"/>
659
+ <param pos="0" name="os.cpe23" value="cpe:/o:sun:solaris:2.1"/>
628
660
  </fingerprint>
629
661
  <fingerprint pattern="^.*processor=&quot;([^ ]+)&quot;,.*system=&quot;SunOS/?5.2&quot;" flags="REG_DOT_NEWLINE,REG_ICASE">
630
- <description>Solaris 2.2 (SunOS/5.2) with no ntp version</description>
631
- <example os.arch="sun4m">
662
+ <description>Solaris 2.2 (SunOS/5.2) with no ntp version</description>
663
+ <example os.arch="sun4m">
632
664
  processor="sun4m", system="SunOS/5.2"
633
665
  </example>
634
- <example os.arch="sun4u">
666
+ <example os.arch="sun4u">
635
667
  processor="sun4u", system="SunOS5.2"
636
668
  </example>
637
- <param pos="0" name="os.vendor" value="Sun"/>
638
- <param pos="0" name="os.family" value="Solaris"/>
639
- <param pos="0" name="os.product" value="Solaris"/>
640
- <param pos="0" name="os.version" value="2.2" />
641
- <param pos="1" name="os.arch"/>
669
+ <param pos="0" name="os.vendor" value="Sun"/>
670
+ <param pos="0" name="os.family" value="Solaris"/>
671
+ <param pos="0" name="os.product" value="Solaris"/>
672
+ <param pos="0" name="os.version" value="2.2"/>
673
+ <param pos="1" name="os.arch"/>
674
+ <param pos="0" name="os.cpe23" value="cpe:/o:sun:solaris:2.2"/>
642
675
  </fingerprint>
643
676
  <fingerprint pattern="^.*processor=&quot;([^ ]+)&quot;,.*system=&quot;SunOS/?5.3&quot;" flags="REG_DOT_NEWLINE,REG_ICASE">
644
- <description>Solaris 2.3 (SunOS/5.3) with no ntp version</description>
645
- <example os.arch="sun4m">
677
+ <description>Solaris 2.3 (SunOS/5.3) with no ntp version</description>
678
+ <example os.arch="sun4m">
646
679
  processor="sun4m", system="SunOS/5.3"
647
680
  </example>
648
- <example os.arch="sun4u">
681
+ <example os.arch="sun4u">
649
682
  processor="sun4u", system="SunOS5.3"
650
683
  </example>
651
- <param pos="0" name="os.vendor" value="Sun"/>
652
- <param pos="0" name="os.family" value="Solaris"/>
653
- <param pos="0" name="os.product" value="Solaris"/>
654
- <param pos="0" name="os.version" value="2.3" />
655
- <param pos="1" name="os.arch"/>
684
+ <param pos="0" name="os.vendor" value="Sun"/>
685
+ <param pos="0" name="os.family" value="Solaris"/>
686
+ <param pos="0" name="os.product" value="Solaris"/>
687
+ <param pos="0" name="os.version" value="2.3"/>
688
+ <param pos="1" name="os.arch"/>
689
+ <param pos="0" name="os.cpe23" value="cpe:/o:sun:solaris:2.3"/>
656
690
  </fingerprint>
657
691
  <fingerprint pattern="^.*processor=&quot;([^ ]+)&quot;,.*system=&quot;SunOS/?5.4&quot;" flags="REG_DOT_NEWLINE,REG_ICASE">
658
- <description>Solaris 2.4 (SunOS/5.4) with no ntp version</description>
659
- <example os.arch="sun4m">
692
+ <description>Solaris 2.4 (SunOS/5.4) with no ntp version</description>
693
+ <example os.arch="sun4m">
660
694
  processor="sun4m", system="SunOS/5.4"
661
695
  </example>
662
- <example os.arch="sun4u">
696
+ <example os.arch="sun4u">
663
697
  processor="sun4u", system="SunOS5.4"
664
698
  </example>
665
- <param pos="0" name="os.vendor" value="Sun"/>
666
- <param pos="0" name="os.family" value="Solaris"/>
667
- <param pos="0" name="os.product" value="Solaris"/>
668
- <param pos="0" name="os.version" value="2.4" />
669
- <param pos="1" name="os.arch"/>
699
+ <param pos="0" name="os.vendor" value="Sun"/>
700
+ <param pos="0" name="os.family" value="Solaris"/>
701
+ <param pos="0" name="os.product" value="Solaris"/>
702
+ <param pos="0" name="os.version" value="2.4"/>
703
+ <param pos="1" name="os.arch"/>
704
+ <param pos="0" name="os.cpe23" value="cpe:/o:sun:solaris:2.4"/>
670
705
  </fingerprint>
671
706
  <fingerprint pattern="^.*processor=&quot;([^ ]+)&quot;,.*system=&quot;SunOS/?5.5&quot;" flags="REG_DOT_NEWLINE,REG_ICASE">
672
- <description>Solaris 2.5 (SunOS/5.5) with no ntp version</description>
673
- <example os.arch="sun4m">
707
+ <description>Solaris 2.5 (SunOS/5.5) with no ntp version</description>
708
+ <example os.arch="sun4m">
674
709
  processor="sun4m", system="SunOS/5.5"
675
710
  </example>
676
- <example os.arch="sun4u">
711
+ <example os.arch="sun4u">
677
712
  processor="sun4u", system="SunOS5.5"
678
713
  </example>
679
- <param pos="0" name="os.vendor" value="Sun"/>
680
- <param pos="0" name="os.family" value="Solaris"/>
681
- <param pos="0" name="os.product" value="Solaris"/>
682
- <param pos="0" name="os.version" value="2.5" />
683
- <param pos="1" name="os.arch"/>
714
+ <param pos="0" name="os.vendor" value="Sun"/>
715
+ <param pos="0" name="os.family" value="Solaris"/>
716
+ <param pos="0" name="os.product" value="Solaris"/>
717
+ <param pos="0" name="os.version" value="2.5"/>
718
+ <param pos="1" name="os.arch"/>
719
+ <param pos="0" name="os.cpe23" value="cpe:/o:sun:solaris:2.5"/>
684
720
  </fingerprint>
685
721
  <fingerprint pattern="^.*processor=&quot;([^ ]+)&quot;,.*system=&quot;SunOS/?5.6&quot;" flags="REG_DOT_NEWLINE,REG_ICASE">
686
- <description>Solaris 2.6 (SunOS/5.6) with no ntp version</description>
687
- <example os.arch="sun4m">
722
+ <description>Solaris 2.6 (SunOS/5.6) with no ntp version</description>
723
+ <example os.arch="sun4m">
688
724
  processor="sun4m", system="SunOS/5.6"
689
725
  </example>
690
- <example os.arch="sun4u">
726
+ <example os.arch="sun4u">
691
727
  processor="sun4u", system="SunOS5.6"
692
728
  </example>
693
- <param pos="0" name="os.vendor" value="Sun"/>
694
- <param pos="0" name="os.family" value="Solaris"/>
695
- <param pos="0" name="os.product" value="Solaris"/>
696
- <param pos="0" name="os.version" value="2.6" />
697
- <param pos="1" name="os.arch"/>
729
+ <param pos="0" name="os.vendor" value="Sun"/>
730
+ <param pos="0" name="os.family" value="Solaris"/>
731
+ <param pos="0" name="os.product" value="Solaris"/>
732
+ <param pos="0" name="os.version" value="2.6"/>
733
+ <param pos="1" name="os.arch"/>
734
+ <param pos="0" name="os.cpe23" value="cpe:/o:sun:solaris:2.6"/>
698
735
  </fingerprint>
699
736
  <fingerprint pattern="^.*processor=&quot;([^ ]+)&quot;,.*system=&quot;SunOS/?5.([789]|10)&quot;" flags="REG_DOT_NEWLINE,REG_ICASE">
700
- <description>Solaris 7-10 (SunOS/5.7 - SunOS/5.10) with no ntp version</description>
701
- <example os.arch="sun4m" os.version="7">
737
+ <description>Solaris 7-10 (SunOS/5.7 - SunOS/5.10) with no ntp version</description>
738
+ <example os.arch="sun4m" os.version="7">
702
739
  processor="sun4m", system="SunOS/5.7"
703
740
  </example>
704
- <example os.arch="sun4m" os.version="10">
741
+ <example os.arch="sun4m" os.version="10">
705
742
  processor="sun4m", system="SunOS/5.10"
706
743
  </example>
707
- <example os.arch="sun4u" os.version="7">
744
+ <example os.arch="sun4u" os.version="7">
708
745
  processor="sun4u", system="SunOS5.7"
709
746
  </example>
710
- <example os.arch="sun4m" os.version="10">
747
+ <example os.arch="sun4m" os.version="10">
711
748
  processor="sun4m", system="SunOS5.10"
712
749
  </example>
713
- <param pos="0" name="os.vendor" value="Sun"/>
714
- <param pos="0" name="os.family" value="Solaris"/>
715
- <param pos="0" name="os.product" value="Solaris"/>
716
- <param pos="1" name="os.arch"/>
717
- <param pos="2" name="os.version"/>
750
+ <param pos="0" name="os.vendor" value="Sun"/>
751
+ <param pos="0" name="os.family" value="Solaris"/>
752
+ <param pos="0" name="os.product" value="Solaris"/>
753
+ <param pos="1" name="os.arch"/>
754
+ <param pos="2" name="os.version"/>
755
+ <param pos="0" name="os.cpe23" value="cpe:/o:sun:solaris:{os.version}"/>
718
756
  </fingerprint>
719
757
  <fingerprint pattern="^.*processor=&quot;([^ ]+)&quot;,.*system=&quot;SunOS/?5.(1[1-9])&quot;" flags="REG_DOT_NEWLINE,REG_ICASE">
720
- <description>Solaris 11 and up with no ntp version</description>
721
- <example os.arch="sun4m" os.version="11">
758
+ <description>Solaris 11 and up with no ntp version</description>
759
+ <example os.arch="sun4m" os.version="11">
722
760
  processor="sun4m", system="SunOS/5.11"
723
761
  </example>
724
- <example os.arch="sun4m" os.version="11">
762
+ <example os.arch="sun4m" os.version="11">
725
763
  processor="sun4m", system="SunOS5.11"
726
764
  </example>
727
- <param pos="0" name="os.vendor" value="Oracle"/>
728
- <param pos="0" name="os.family" value="Solaris"/>
729
- <param pos="0" name="os.product" value="Solaris"/>
730
- <param pos="1" name="os.arch"/>
731
- <param pos="2" name="os.version"/>
732
- </fingerprint>
765
+ <param pos="0" name="os.vendor" value="Oracle"/>
766
+ <param pos="0" name="os.family" value="Solaris"/>
767
+ <param pos="0" name="os.product" value="Solaris"/>
768
+ <param pos="1" name="os.arch"/>
769
+ <param pos="2" name="os.version"/>
770
+ <param pos="0" name="os.cpe23" value="cpe:/o:oracle:solaris:{os.version}"/>
771
+ </fingerprint>
733
772
  <fingerprint pattern="^.*system=&quot;UNIX/SunOS ([^ ]+)&quot;" flags="REG_DOT_NEWLINE,REG_ICASE">
734
773
  <description>SunOS with no ntp version</description>
735
774
  <example>
@@ -739,6 +778,7 @@ NTP "banners", taken from a readvar response
739
778
  <param pos="0" name="os.family" value="Solaris"/>
740
779
  <param pos="0" name="os.product" value="Solaris"/>
741
780
  <param pos="1" name="os.version"/>
781
+ <param pos="0" name="os.cpe23" value="cpe:/o:sun:solaris:{os.version}"/>
742
782
  </fingerprint>
743
783
  <fingerprint pattern="^.*version=&quot;ntpd ([^ ]+)[^&quot;]+&quot;,.*processor=&quot;([^ ]+)&quot;,.*system=&quot;JUNOS/?([^ ]+)&quot;" flags="REG_DOT_NEWLINE,REG_ICASE">
744
784
  <description>ntpd running on Juniper/Netscreen JunOS</description>
@@ -754,6 +794,7 @@ NTP "banners", taken from a readvar response
754
794
  <param pos="1" name="service.version"/>
755
795
  <param pos="2" name="os.arch"/>
756
796
  <param pos="3" name="os.version"/>
797
+ <param pos="0" name="os.cpe23" value="cpe:/o:juniper:junos:{os.version}"/>
757
798
  </fingerprint>
758
799
  <fingerprint pattern="processor=&quot;([^ ]+)&quot;,.*system=&quot;JUNOS/?([^ ]+)&quot;" flags="REG_DOT_NEWLINE,REG_ICASE">
759
800
  <description>Juniper/Netscreen JunOS NTP without a version</description>
@@ -765,6 +806,7 @@ NTP "banners", taken from a readvar response
765
806
  <param pos="0" name="os.product" value="Junos OS"/>
766
807
  <param pos="1" name="os.arch"/>
767
808
  <param pos="2" name="os.version"/>
809
+ <param pos="0" name="os.cpe23" value="cpe:/o:juniper:junos:{os.version}"/>
768
810
  </fingerprint>
769
811
  <fingerprint pattern="^.*version=&quot;ntpd ([^ ]+)[^&quot;]+&quot;,.*processor=&quot;([^ ]+)&quot;,.*system=&quot;Windows/?([^ ]+)?&quot;" flags="REG_DOT_NEWLINE,REG_ICASE">
770
812
  <description>ntpd running on Windows</description>
@@ -784,6 +826,7 @@ NTP "banners", taken from a readvar response
784
826
  <param pos="0" name="os.product" value="Windows"/>
785
827
  <param pos="2" name="os.arch"/>
786
828
  <param pos="3" name="os.version"/>
829
+ <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows:{os.version}"/>
787
830
  </fingerprint>
788
831
  <fingerprint pattern="^.*version=&quot;ntpd ([^ ]+)[^&quot;]+&quot;,.*processor=&quot;([^ ]+)&quot;,.*system=&quot;HP-UX/?([^ ]+)?&quot;" flags="REG_DOT_NEWLINE,REG_ICASE">
789
832
  <description>ntpd running on HP-UX</description>
@@ -799,6 +842,7 @@ NTP "banners", taken from a readvar response
799
842
  <param pos="0" name="os.product" value="HP-UX"/>
800
843
  <param pos="2" name="os.arch"/>
801
844
  <param pos="3" name="os.version"/>
845
+ <param pos="0" name="os.cpe23" value="cpe:/o:hp:hp-ux:{os.version}"/>
802
846
  </fingerprint>
803
847
  <fingerprint pattern="^.*version=&quot;ntpd ([^ ]+)[^&quot;]+&quot;,.*processor=,.*system=&quot;HP-UX/&quot;" flags="REG_DOT_NEWLINE,REG_ICASE">
804
848
  <description>ntpd running on HP-UX with an empty processor</description>
@@ -812,6 +856,7 @@ NTP "banners", taken from a readvar response
812
856
  <param pos="0" name="os.vendor" value="HP"/>
813
857
  <param pos="0" name="os.family" value="HP-UX"/>
814
858
  <param pos="0" name="os.product" value="HP-UX"/>
859
+ <param pos="0" name="os.cpe23" value="cpe:/o:hp:hp-ux:-"/>
815
860
  </fingerprint>
816
861
  <fingerprint pattern="^.*version=&quot;ntpd ([^ ]+)[^&quot;]+&quot;,.*processor=&quot;[^ ]+&quot;,.*system=&quot;([^ ]+)-hp-hpux([^ ]+)&quot;" flags="REG_DOT_NEWLINE,REG_ICASE">
817
862
  <description>ntpd running on HP-UX, where the processor is in the 'system' variable</description>
@@ -827,6 +872,7 @@ NTP "banners", taken from a readvar response
827
872
  <param pos="0" name="os.product" value="HP-UX"/>
828
873
  <param pos="2" name="os.arch"/>
829
874
  <param pos="3" name="os.version"/>
875
+ <param pos="0" name="os.cpe23" value="cpe:/o:hp:hp-ux:{os.version}"/>
830
876
  </fingerprint>
831
877
  <fingerprint pattern="^.*version=&quot;ntpd ([^ ]+)[^&quot;]+&quot;,.*processor=&quot;([^ ]+)&quot;,.*system=&quot;VMkernel/?([^ ]+)?&quot;" flags="REG_DOT_NEWLINE,REG_ICASE">
832
878
  <description>ntpd running on VMware ESXi</description>
@@ -842,6 +888,7 @@ NTP "banners", taken from a readvar response
842
888
  <param pos="0" name="os.product" value="VMware ESXi Server"/>
843
889
  <param pos="2" name="os.arch"/>
844
890
  <param pos="3" name="os.version"/>
891
+ <param pos="0" name="os.cpe23" value="cpe:/o:vmware:esxi:{os.version}"/>
845
892
  </fingerprint>
846
893
  <fingerprint pattern=".*processor=&quot;([^ ]+)&quot;,.*system=&quot;OSF1[/V]?([^ ]+)&quot;" flags="REG_DOT_NEWLINE,REG_ICASE">
847
894
  <description>ntpd running on OSF/1</description>
@@ -871,6 +918,7 @@ NTP "banners", taken from a readvar response
871
918
  <param pos="0" name="os.vendor" value="Linux"/>
872
919
  <param pos="0" name="os.family" value="Linux"/>
873
920
  <param pos="0" name="os.product" value="Linux"/>
921
+ <param pos="0" name="os.cpe23" value="cpe:/o:linux:linux_kernel:-"/>
874
922
  <param pos="0" name="service.family" value="NTP"/>
875
923
  <param pos="0" name="service.product" value="NTP"/>
876
924
  </fingerprint>
@@ -882,6 +930,7 @@ NTP "banners", taken from a readvar response
882
930
  <param pos="0" name="os.vendor" value="IBM"/>
883
931
  <param pos="0" name="os.family" value="AIX"/>
884
932
  <param pos="0" name="os.product" value="AIX"/>
933
+ <param pos="0" name="os.cpe23" value="cpe:/o:ibm:aix:-"/>
885
934
  <param pos="0" name="service.family" value="NTP"/>
886
935
  <param pos="0" name="service.product" value="NTP"/>
887
936
  <param pos="0" name="service.vendor" value="IBM"/>
@@ -894,9 +943,10 @@ NTP "banners", taken from a readvar response
894
943
  <param pos="0" name="os.vendor" value="Sun"/>
895
944
  <param pos="0" name="os.family" value="Solaris"/>
896
945
  <param pos="0" name="os.product" value="Solaris"/>
946
+ <param pos="0" name="os.cpe23" value="cpe:/o:sun:solaris:-"/>
897
947
  <param pos="0" name="service.family" value="NTP"/>
898
948
  <param pos="0" name="service.product" value="NTP"/>
899
- <param pos="0" name="service.vendor" value="Solaris"/>
949
+ <param pos="0" name="service.vendor" value="Sun"/>
900
950
  </fingerprint>
901
951
  <fingerprint pattern="^.*system=&quot;cisco&quot;" flags="REG_DOT_NEWLINE,REG_ICASE">
902
952
  <description>Cisco IOS with NTP enabled</description>
@@ -906,6 +956,7 @@ NTP "banners", taken from a readvar response
906
956
  <param pos="0" name="os.vendor" value="Cisco"/>
907
957
  <param pos="0" name="os.family" value="IOS"/>
908
958
  <param pos="0" name="os.product" value="IOS"/>
959
+ <param pos="0" name="os.cpe23" value="cpe:/o:cisco:ios:-"/>
909
960
  <param pos="0" name="service.family" value="NTP"/>
910
961
  <param pos="0" name="service.product" value="NTP"/>
911
962
  <param pos="0" name="service.vendor" value="Cisco"/>
@@ -920,6 +971,7 @@ NTP "banners", taken from a readvar response
920
971
  <param pos="0" name="os.product" value="Data ONTAP"/>
921
972
  <param pos="0" name="os.device" value="File server"/>
922
973
  <param pos="1" name="os.version"/>
974
+ <param pos="0" name="os.cpe23" value="cpe:/o:netapp:data_ontap:{os.version}"/>
923
975
  </fingerprint>
924
976
  <fingerprint pattern="system=&quot;UNIX/HPUX&quot;" flags="REG_ICASE">
925
977
  <description>Generic HPUX</description>
@@ -932,6 +984,7 @@ NTP "banners", taken from a readvar response
932
984
  <param pos="0" name="os.vendor" value="HP"/>
933
985
  <param pos="0" name="os.family" value="HP-UX"/>
934
986
  <param pos="0" name="os.product" value="HP-UX"/>
987
+ <param pos="0" name="os.cpe23" value="cpe:/o:hp:hp-ux:-"/>
935
988
  </fingerprint>
936
989
  <fingerprint pattern="system=&quot;UNIX&quot;" flags="REG_ICASE">
937
990
  <description>Generic UNIX</description>
@@ -955,6 +1008,7 @@ NTP "banners", taken from a readvar response
955
1008
  </example>
956
1009
  <param pos="0" name="os.vendor" value="Wind River"/>
957
1010
  <param pos="0" name="os.product" value="VxWorks"/>
1011
+ <param pos="0" name="os.cpe23" value="cpe:/o:windriver:vxworks:-"/>
958
1012
  </fingerprint>
959
1013
  <fingerprint pattern="system=&quot;arm-wrs-vxworks&quot;" flags="REG_ICASE">
960
1014
  <description>VxWorks ARM, cross-compiled on Linux</description>
@@ -964,6 +1018,7 @@ NTP "banners", taken from a readvar response
964
1018
  <param pos="0" name="os.vendor" value="Wind River"/>
965
1019
  <param pos="0" name="os.product" value="VxWorks"/>
966
1020
  <param pos="0" name="os.arch" value="arm"/>
1021
+ <param pos="0" name="os.cpe23" value="cpe:/o:windriver:vxworks:-"/>
967
1022
  </fingerprint>
968
1023
  <fingerprint pattern="system=&quot;i386-wrs-vxworks&quot;" flags="REG_ICASE">
969
1024
  <description>VxWorks x86, cross-compiled on Linux</description>
@@ -973,6 +1028,7 @@ NTP "banners", taken from a readvar response
973
1028
  <param pos="0" name="os.vendor" value="Wind River"/>
974
1029
  <param pos="0" name="os.product" value="VxWorks"/>
975
1030
  <param pos="0" name="os.arch" value="i386"/>
1031
+ <param pos="0" name="os.cpe23" value="cpe:/o:windriver:vxworks:-"/>
976
1032
  </fingerprint>
977
1033
  <fingerprint pattern="system=&quot;UNIX/Unixware([^ ]+)&quot;" flags="REG_ICASE">
978
1034
  <description>SCO Unixware NTP</description>
@@ -1046,6 +1102,7 @@ NTP "banners", taken from a readvar response
1046
1102
  <param pos="0" name="os.certainty" value="0.75"/>
1047
1103
  <param pos="1" name="os.arch"/>
1048
1104
  <param pos="2" name="os.version"/>
1105
+ <param pos="0" name="os.cpe23" value="cpe:/o:linux:linux_kernel:{os.version}"/>
1049
1106
  </fingerprint>
1050
1107
  <fingerprint pattern=".*version=&quot;ntpd (\S+)[^&quot;]+&quot;,.*\s*processor=&quot;([^ ]+)&quot;.*system=&quot;Isilon OneFS/v([^ ]+)&quot;" flags="REG_DOT_NEWLINE,REG_ICASE">
1051
1108
  <description>Isilon OneFS NTP Server</description>
@@ -1083,6 +1140,7 @@ NTP "banners", taken from a readvar response
1083
1140
  <param pos="0" name="os.vendor" value="Nokia"/>
1084
1141
  <param pos="0" name="os.product" value="IPSO"/>
1085
1142
  <param pos="0" name="os.device" value="Firewall"/>
1143
+ <param pos="0" name="os.cpe23" value="cpe:/o:nokia:ipso:-"/>
1086
1144
  </fingerprint>
1087
1145
  <fingerprint pattern="system=&quot;UNIX/Solaris\s[^ ]+&quot;" flags="REG_DOT_NEWLINE,REG_ICASE">
1088
1146
  <description>Sun Solaris NTP</description>
@@ -1101,6 +1159,7 @@ NTP "banners", taken from a readvar response
1101
1159
  <param pos="0" name="os.vendor" value="Sun"/>
1102
1160
  <param pos="0" name="os.family" value="Solaris"/>
1103
1161
  <param pos="0" name="os.product" value="Solaris"/>
1162
+ <param pos="0" name="os.cpe23" value="cpe:/o:sun:solaris:-"/>
1104
1163
  <param pos="0" name="service.family" value="NTP"/>
1105
1164
  <param pos="0" name="service.product" value="NTP"/>
1106
1165
  <param pos="0" name="service.vendor" value="Sun"/>
@@ -1129,6 +1188,7 @@ NTP "banners", taken from a readvar response
1129
1188
  <param pos="1" name="service.version"/>
1130
1189
  <param pos="2" name="os.arch"/>
1131
1190
  <param pos="3" name="os.version"/>
1191
+ <param pos="0" name="os.cpe23" value="cpe:/o:hp:openvms:{os.version}"/>
1132
1192
  </fingerprint>
1133
1193
  <fingerprint pattern="version=&quot;ntpd version = ([^ ]+)&quot;,\s*processor=&quot;unknown&quot;,\s*system=&quot;OpenVMS AXP&quot;" flags="REG_DOT_NEWLINE,REG_ICASE">
1134
1194
  <description>OpenVMS AXP (Alpha) NTP Server</description>
@@ -1152,11 +1212,11 @@ NTP "banners", taken from a readvar response
1152
1212
  clock=0xd20533b8.903aa79b, state=1, offset=0.000, frequency=0.000,
1153
1213
  jitter=0.015, stability=0.000
1154
1214
  </example>
1155
- <param pos="0" name="service.family" value="NTP"/>
1156
- <param pos="0" name="service.product" value="NTP"/>
1157
- <param pos="0" name="os.vendor" value="F5"/>
1158
- <param pos="0" name="os.product" value="BIG-IP"/>
1215
+ <param pos="0" name="service.vendor" value="F5"/>
1216
+ <param pos="0" name="service.family" value="BIG-IP"/>
1217
+ <param pos="0" name="service.product" value="BIG-IP LTM"/>
1159
1218
  <param pos="1" name="service.version"/>
1219
+ <param pos="0" name="service.cpe23" value="cpe:/a:f5:big-ip_local_traffic_manager:{service.version}"/>
1160
1220
  <param pos="2" name="os.arch"/>
1161
1221
  <param pos="3" name="os.version"/>
1162
1222
  </fingerprint>