recog 2.1.20 → 2.1.21

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (47) hide show
  1. checksums.yaml +4 -4
  2. data/lib/recog/version.rb +1 -1
  3. data/remap.json +131 -0
  4. data/spec/lib/fingerprint_self_test_spec.rb +16 -1
  5. data/update_cpes.py +202 -0
  6. data/xml/apache_os.xml +29 -5
  7. data/xml/architecture.xml +3 -3
  8. data/xml/dns_versionbind.xml +56 -10
  9. data/xml/ftp_banners.xml +56 -12
  10. data/xml/h323_callresp.xml +4 -4
  11. data/xml/hp_pjl_id.xml +8 -8
  12. data/xml/http_cookies.xml +20 -8
  13. data/xml/http_servers.xml +122 -8
  14. data/xml/http_wwwauth.xml +13 -3
  15. data/xml/imap_banners.xml +19 -1
  16. data/xml/ldap_searchresult.xml +44 -68
  17. data/xml/mdns_device-info_txt.xml +18 -7
  18. data/xml/mdns_workstation_txt.xml +7 -7
  19. data/xml/mysql_banners.xml +159 -13
  20. data/xml/mysql_error.xml +124 -21
  21. data/xml/nntp_banners.xml +10 -4
  22. data/xml/ntp_banners.xml +144 -84
  23. data/xml/operating_system.xml +39 -10
  24. data/xml/pop_banners.xml +32 -12
  25. data/xml/rsh_resp.xml +8 -3
  26. data/xml/sip_banners.xml +4 -3
  27. data/xml/sip_user_agents.xml +4 -3
  28. data/xml/smb_native_lm.xml +9 -4
  29. data/xml/smb_native_os.xml +50 -25
  30. data/xml/smtp_banners.xml +108 -33
  31. data/xml/smtp_debug.xml +11 -8
  32. data/xml/smtp_ehlo.xml +14 -11
  33. data/xml/smtp_expn.xml +17 -11
  34. data/xml/smtp_help.xml +17 -11
  35. data/xml/smtp_mailfrom.xml +4 -3
  36. data/xml/smtp_noop.xml +13 -8
  37. data/xml/smtp_quit.xml +10 -8
  38. data/xml/smtp_rcptto.xml +1 -3
  39. data/xml/smtp_rset.xml +10 -8
  40. data/xml/smtp_turn.xml +10 -8
  41. data/xml/smtp_vrfy.xml +18 -11
  42. data/xml/snmp_sysdescr.xml +157 -451
  43. data/xml/snmp_sysobjid.xml +57 -4
  44. data/xml/ssh_banners.xml +104 -5
  45. data/xml/upnp_banners.xml +16 -1
  46. data/xml/x11_banners.xml +34 -9
  47. metadata +4 -2
data/xml/nntp_banners.xml CHANGED
@@ -1,9 +1,9 @@
1
1
  <?xml version="1.0" encoding="UTF-8"?>
2
- <!--
3
- NNTP greeting messages (part of the banner after the response code) are matched
4
- against these patterns to fingerprint NNTP servers.
5
- -->
6
2
  <fingerprints matches="nntp.banner" protocol="nntp" database_type="service">
3
+ <!--
4
+ NNTP greeting messages (part of the banner after the response code) are matched
5
+ against these patterns to fingerprint NNTP servers.
6
+ -->
7
7
  <fingerprint pattern="^NNTP Service (?:.*) Version: (5.0.2195.[0-9]+) .*$">
8
8
  <description>Microsoft IIS NNTP Server on Windows 2000</description>
9
9
  <example>NNTP Service 5.00.0984 Version: 5.0.2195.7034 Posting Allowed</example>
@@ -12,10 +12,12 @@ against these patterns to fingerprint NNTP servers.
12
12
  <param pos="0" name="service.product" value="IIS"/>
13
13
  <param pos="0" name="service.family" value="IIS"/>
14
14
  <param pos="1" name="service.version"/>
15
+ <param pos="0" name="service.cpe23" value="cpe:/a:microsoft:iis:{service.version}"/>
15
16
  <param pos="0" name="os.vendor" value="Microsoft"/>
16
17
  <param pos="0" name="os.device" value="General"/>
17
18
  <param pos="0" name="os.family" value="Windows"/>
18
19
  <param pos="0" name="os.product" value="Windows 2000"/>
20
+ <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_2000:-"/>
19
21
  <param pos="1" name="ms.nttp.version"/>
20
22
  </fingerprint>
21
23
  <fingerprint pattern="^NNTP Service (?:.*) Version: (6.0.3790.[0-9]+) .*$">
@@ -26,10 +28,12 @@ against these patterns to fingerprint NNTP servers.
26
28
  <param pos="0" name="service.product" value="IIS"/>
27
29
  <param pos="0" name="service.family" value="IIS"/>
28
30
  <param pos="1" name="service.version"/>
31
+ <param pos="0" name="service.cpe23" value="cpe:/a:microsoft:iis:{service.version}"/>
29
32
  <param pos="0" name="os.vendor" value="Microsoft"/>
30
33
  <param pos="0" name="os.device" value="General"/>
31
34
  <param pos="0" name="os.family" value="Windows"/>
32
35
  <param pos="0" name="os.product" value="Windows Server 2003"/>
36
+ <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_server_2003:-"/>
33
37
  <param pos="1" name="ms.nttp.version"/>
34
38
  </fingerprint>
35
39
  <fingerprint pattern="^NNTP Service Microsoft. Internet Services (?:.*) Version: (?:[^ ]+) .*$">
@@ -40,9 +44,11 @@ against these patterns to fingerprint NNTP servers.
40
44
  <param pos="0" name="service.vendor" value="Microsoft"/>
41
45
  <param pos="0" name="service.family" value="Exchange Server"/>
42
46
  <param pos="0" name="service.product" value="Exchange Server"/>
47
+ <param pos="0" name="service.cpe23" value="cpe:/a:microsoft:exchange_server:-"/>
43
48
  <param pos="0" name="os.vendor" value="Microsoft"/>
44
49
  <param pos="0" name="os.device" value="General"/>
45
50
  <param pos="0" name="os.family" value="Windows"/>
46
51
  <param pos="0" name="os.product" value="Windows"/>
52
+ <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows:-"/>
47
53
  </fingerprint>
48
54
  </fingerprints>
data/xml/ntp_banners.xml CHANGED
@@ -1,8 +1,8 @@
1
1
  <?xml version="1.0" encoding="UTF-8"?>
2
- <!--
3
- NTP "banners", taken from a readvar response
4
- -->
5
2
  <fingerprints matches="ntp.readvar" protocol="ntp" database_type="service" preference="0.80">
3
+ <!--
4
+ NTP "banners", taken from a readvar response
5
+ -->
6
6
  <fingerprint pattern="^.*version=Domain Time II (\S+),hostname=([^,]+),.*system=Win2003.*,processor=(\S+)" flags="REG_DOT_NEWLINE,REG_ICASE">
7
7
  <description>Greyware Automation Products, Inc. Domain Time II on Windows Server 2003</description>
8
8
  <example service.version="5.1.b.20100331R" os.arch="x64" host.name="blah">
@@ -19,6 +19,7 @@ NTP "banners", taken from a readvar response
19
19
  <param pos="0" name="os.family" value="Windows"/>
20
20
  <param pos="0" name="os.product" value="Windows Server 2003"/>
21
21
  <param pos="3" name="os.arch"/>
22
+ <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_server_2003:-"/>
22
23
  </fingerprint>
23
24
  <fingerprint pattern="^.*version=Domain Time II (\S+),hostname=([^,]+),.*system=Win2008R2.*,processor=(\S+)" flags="REG_DOT_NEWLINE,REG_ICASE">
24
25
  <description>Greyware Automation Products, Inc. Domain Time II on Windows Server 2008 R2</description>
@@ -33,6 +34,7 @@ NTP "banners", taken from a readvar response
33
34
  <param pos="0" name="os.family" value="Windows"/>
34
35
  <param pos="0" name="os.product" value="Windows 2008 R2"/>
35
36
  <param pos="3" name="os.arch"/>
37
+ <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_server_2008:-"/>
36
38
  </fingerprint>
37
39
  <fingerprint pattern="^.*version=Domain Time II (\S+),hostname=([^,]+),.*system=Win2008.*,processor=(\S+)" flags="REG_DOT_NEWLINE,REG_ICASE">
38
40
  <description>Greyware Automation Products, Inc. Domain Time II on Windows 2008</description>
@@ -50,6 +52,7 @@ NTP "banners", taken from a readvar response
50
52
  <param pos="0" name="os.family" value="Windows"/>
51
53
  <param pos="0" name="os.product" value="Windows Server 2008"/>
52
54
  <param pos="3" name="os.arch"/>
55
+ <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_server_2008:-"/>
53
56
  </fingerprint>
54
57
  <fingerprint pattern="^.*version=Domain Time II (\S+),hostname=([^,]+),.*system=Win2012.*,processor=(\S+)" flags="REG_DOT_NEWLINE,REG_ICASE">
55
58
  <description>Greyware Automation Products, Inc. Domain Time II on Windows Server 2012</description>
@@ -64,6 +67,7 @@ NTP "banners", taken from a readvar response
64
67
  <param pos="0" name="os.family" value="Windows"/>
65
68
  <param pos="0" name="os.product" value="Windows Server 2012"/>
66
69
  <param pos="3" name="os.arch"/>
70
+ <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_server_2012:-"/>
67
71
  </fingerprint>
68
72
  <fingerprint pattern="^.*version=Domain Time II (\S+),hostname=([^,]+),.*system=Win7.*,processor=(\S+)" flags="REG_DOT_NEWLINE,REG_ICASE">
69
73
  <description>Greyware Automation Products, Inc. Domain Time II on Windows 7</description>
@@ -78,6 +82,7 @@ NTP "banners", taken from a readvar response
78
82
  <param pos="0" name="os.family" value="Windows"/>
79
83
  <param pos="0" name="os.product" value="Windows 7"/>
80
84
  <param pos="3" name="os.arch"/>
85
+ <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_7:-"/>
81
86
  </fingerprint>
82
87
  <fingerprint pattern="^.*version=&quot;ntpd (\S+)[^&quot;]+&quot;,.*system=&quot;Equallogic \(R\) storage array&quot;" flags="REG_DOT_NEWLINE,REG_ICASE">
83
88
  <description>ntpd running on an EqualLogic Storage Array that includes the NTP version</description>
@@ -120,6 +125,7 @@ NTP "banners", taken from a readvar response
120
125
  <param pos="0" name="os.family" value="VMware ESX/ESXi"/>
121
126
  <param pos="0" name="os.product" value="VMware ESX Server"/>
122
127
  <param pos="2" name="os.arch"/>
128
+ <param pos="0" name="os.cpe23" value="cpe:/o:vmware:esx:-"/>
123
129
  </fingerprint>
124
130
  <fingerprint pattern="^.*version=&quot;ntpd ([^ ]+)[^&quot;]+&quot;,.*processor=&quot;([^ ]+)&quot;,.*system=&quot;Linux/?([^ ]+)&quot;" flags="REG_DOT_NEWLINE,REG_ICASE">
125
131
  <description>ntpd running on Linux</description>
@@ -135,6 +141,7 @@ NTP "banners", taken from a readvar response
135
141
  <param pos="0" name="os.product" value="Linux"/>
136
142
  <param pos="2" name="os.arch"/>
137
143
  <param pos="3" name="os.version"/>
144
+ <param pos="0" name="os.cpe23" value="cpe:/o:linux:linux_kernel:{os.version}"/>
138
145
  </fingerprint>
139
146
  <fingerprint pattern="^.*version=&quot;ntpd ([^ ]+)[^&quot;]+&quot;,.*processor=&quot;([^&quot;]+)&quot;,.*system=&quot;Darwin/?6\.([^&quot;]+)&quot;" flags="REG_DOT_NEWLINE,REG_ICASE">
140
147
  <description>ntpd running on Mac OSX 10.2/Jaguar</description>
@@ -152,6 +159,7 @@ NTP "banners", taken from a readvar response
152
159
  <param pos="0" name="os.version" value="10.2"/>
153
160
  <param pos="3" name="os.version.version"/>
154
161
  <param pos="0" name="os.certainty" value="0.9"/>
162
+ <param pos="0" name="os.cpe23" value="cpe:/o:apple:mac_os_x:10.2"/>
155
163
  </fingerprint>
156
164
  <fingerprint pattern="^.*version=&quot;ntpd ([^ ]+)[^&quot;]+&quot;,.*processor=&quot;([^&quot;]+)&quot;,.*system=&quot;Darwin/?7\.([^&quot;]+)&quot;" flags="REG_DOT_NEWLINE,REG_ICASE">
157
165
  <description>ntpd running on Mac OSX 10.3/Panther</description>
@@ -166,6 +174,7 @@ NTP "banners", taken from a readvar response
166
174
  <param pos="0" name="os.version" value="10.3"/>
167
175
  <param pos="3" name="os.version.version"/>
168
176
  <param pos="0" name="os.certainty" value="0.9"/>
177
+ <param pos="0" name="os.cpe23" value="cpe:/o:apple:mac_os_x:10.3"/>
169
178
  </fingerprint>
170
179
  <fingerprint pattern="^.*version=&quot;ntpd ([^ ]+)[^&quot;]+&quot;,.*processor=&quot;([^&quot;]+)&quot;,.*system=&quot;Darwin/?8\.([^&quot;]+)&quot;" flags="REG_DOT_NEWLINE,REG_ICASE">
171
180
  <description>ntpd running on Mac OSX 10.4/Tiger</description>
@@ -184,6 +193,7 @@ NTP "banners", taken from a readvar response
184
193
  <param pos="0" name="os.version" value="10.4"/>
185
194
  <param pos="3" name="os.version.version"/>
186
195
  <param pos="0" name="os.certainty" value="0.9"/>
196
+ <param pos="0" name="os.cpe23" value="cpe:/o:apple:mac_os_x:10.4"/>
187
197
  </fingerprint>
188
198
  <fingerprint pattern="^.*version=&quot;ntpd ([^ ]+)[^&quot;]+&quot;,.*processor=&quot;([^&quot;]+)&quot;,.*system=&quot;Darwin/?9\.([^&quot;]+)&quot;" flags="REG_DOT_NEWLINE,REG_ICASE">
189
199
  <description>ntpd running on Mac OSX 10.5/Leopard</description>
@@ -202,6 +212,7 @@ NTP "banners", taken from a readvar response
202
212
  <param pos="0" name="os.version" value="10.5"/>
203
213
  <param pos="3" name="os.version.version"/>
204
214
  <param pos="0" name="os.certainty" value="0.9"/>
215
+ <param pos="0" name="os.cpe23" value="cpe:/o:apple:mac_os_x:10.5"/>
205
216
  </fingerprint>
206
217
  <fingerprint pattern="^.*version=&quot;ntpd ([^ ]+)[^&quot;]+&quot;,.*processor=&quot;([^&quot;]+)&quot;,.*system=&quot;Darwin/?10\.([^&quot;]+)&quot;" flags="REG_DOT_NEWLINE,REG_ICASE">
207
218
  <description>ntpd running on Mac OSX 10.6/Snow Leopard</description>
@@ -220,6 +231,7 @@ NTP "banners", taken from a readvar response
220
231
  <param pos="0" name="os.version" value="10.6"/>
221
232
  <param pos="3" name="os.version.version"/>
222
233
  <param pos="0" name="os.certainty" value="0.9"/>
234
+ <param pos="0" name="os.cpe23" value="cpe:/o:apple:mac_os_x:10.6"/>
223
235
  </fingerprint>
224
236
  <fingerprint pattern="^.*processor=&quot;([^&quot;]+)&quot;.*system=&quot;BSD/OS([\d.]+)&quot;" flags="REG_DOT_NEWLINE,REG_ICASE">
225
237
  <description>BSD/OS with a version and arch</description>
@@ -256,6 +268,7 @@ NTP "banners", taken from a readvar response
256
268
  <param pos="0" name="os.version" value="10.7"/>
257
269
  <param pos="3" name="os.version.version"/>
258
270
  <param pos="0" name="os.certainty" value="0.9"/>
271
+ <param pos="0" name="os.cpe23" value="cpe:/o:apple:mac_os_x:10.7"/>
259
272
  </fingerprint>
260
273
  <fingerprint pattern="^.*version=&quot;ntpd ([^ ]+)[^&quot;]+&quot;,.*processor=&quot;([^&quot;]+)&quot;,.*system=&quot;Darwin/?12\.([^&quot;]+)&quot;" flags="REG_DOT_NEWLINE,REG_ICASE">
261
274
  <description>ntpd running on Mac OSX 10.8/Mountain Lion</description>
@@ -274,6 +287,7 @@ NTP "banners", taken from a readvar response
274
287
  <param pos="0" name="os.version" value="10.8"/>
275
288
  <param pos="3" name="os.version.version"/>
276
289
  <param pos="0" name="os.certainty" value="0.9"/>
290
+ <param pos="0" name="os.cpe23" value="cpe:/o:apple:mac_os_x:10.8"/>
277
291
  </fingerprint>
278
292
  <fingerprint pattern="^.*version=&quot;ntpd ([^ ]+)[^&quot;]+&quot;,.*processor=&quot;([^&quot;]+)&quot;,.*system=&quot;Darwin/?13\.([^&quot;]+)&quot;" flags="REG_DOT_NEWLINE,REG_ICASE">
279
293
  <description>ntpd running on Mac OSX 10.9/Mavericks</description>
@@ -292,6 +306,7 @@ NTP "banners", taken from a readvar response
292
306
  <param pos="0" name="os.version" value="10.9"/>
293
307
  <param pos="3" name="os.version.version"/>
294
308
  <param pos="0" name="os.certainty" value="0.9"/>
309
+ <param pos="0" name="os.cpe23" value="cpe:/o:apple:mac_os_x:10.9"/>
295
310
  </fingerprint>
296
311
  <fingerprint pattern="^.*version=&quot;ntpd ([^ ]+)[^&quot;]+&quot;,.*processor=&quot;([^&quot;]+)&quot;,.*system=&quot;Darwin/?14\.([^&quot;]+)&quot;" flags="REG_DOT_NEWLINE,REG_ICASE">
297
312
  <description>ntpd running on Mac OSX 10.10/Yosemite</description>
@@ -310,6 +325,7 @@ NTP "banners", taken from a readvar response
310
325
  <param pos="0" name="os.version" value="10.10"/>
311
326
  <param pos="3" name="os.version.version"/>
312
327
  <param pos="0" name="os.certainty" value="0.9"/>
328
+ <param pos="0" name="os.cpe23" value="cpe:/o:apple:mac_os_x:10.10"/>
313
329
  </fingerprint>
314
330
  <fingerprint pattern="^.*version=&quot;ntpd ([^ ]+)[^&quot;]+&quot;,.*processor=&quot;([^ ]+)&quot;,.*system=&quot;FreeBSD/?(?:[^ ]+-NETSCALER-([^ ]+))&quot;" flags="REG_DOT_NEWLINE,REG_ICASE">
315
331
  <description>ntpd running on Citrix Netscaler, which is based on FreeBSD</description>
@@ -339,6 +355,7 @@ NTP "banners", taken from a readvar response
339
355
  <param pos="0" name="os.product" value="FreeBSD"/>
340
356
  <param pos="2" name="os.arch"/>
341
357
  <param pos="3" name="os.version"/>
358
+ <param pos="0" name="os.cpe23" value="cpe:/o:freebsd:freebsd:{os.version}"/>
342
359
  </fingerprint>
343
360
  <fingerprint pattern="^.*processor=&quot;([^ ]+)&quot;,.*system=&quot;FreeBSD/?([^ ]+)&quot;" flags="REG_DOT_NEWLINE,REG_ICASE">
344
361
  <description>ntp without a version on FreeBSD</description>
@@ -353,6 +370,7 @@ NTP "banners", taken from a readvar response
353
370
  <param pos="0" name="os.product" value="FreeBSD"/>
354
371
  <param pos="1" name="os.arch"/>
355
372
  <param pos="2" name="os.version"/>
373
+ <param pos="0" name="os.cpe23" value="cpe:/o:freebsd:freebsd:{os.version}"/>
356
374
  </fingerprint>
357
375
  <fingerprint pattern="^.*version=&quot;ntpd ([^ ]+)[^&quot;]+&quot;,.*processor=&quot;([^ ]+)&quot;,.*system=&quot;NetBSD/?([^ ]+)&quot;" flags="REG_DOT_NEWLINE,REG_ICASE">
358
376
  <description>ntpd running on NetBSD</description>
@@ -368,6 +386,7 @@ NTP "banners", taken from a readvar response
368
386
  <param pos="0" name="os.product" value="NetBSD"/>
369
387
  <param pos="2" name="os.arch"/>
370
388
  <param pos="3" name="os.version"/>
389
+ <param pos="0" name="os.cpe23" value="cpe:/o:netbsd:netbsd:{os.version}"/>
371
390
  </fingerprint>
372
391
  <fingerprint pattern="^.*processor=&quot;([^ ]+)&quot;,.*system=&quot;NetBSD/?([^ ]+)&quot;" flags="REG_DOT_NEWLINE,REG_ICASE">
373
392
  <description>ntpd running on NetBSD</description>
@@ -409,6 +428,7 @@ NTP "banners", taken from a readvar response
409
428
  <param pos="0" name="os.product" value="NetBSD"/>
410
429
  <param pos="1" name="os.arch"/>
411
430
  <param pos="2" name="os.version"/>
431
+ <param pos="0" name="os.cpe23" value="cpe:/o:netbsd:netbsd:{os.version}"/>
412
432
  </fingerprint>
413
433
  <fingerprint pattern="^.*system=&quot;NetWare&quot;" flags="REG_DOT_NEWLINE,REG_ICASE">
414
434
  <description>NetWare</description>
@@ -418,6 +438,7 @@ NTP "banners", taken from a readvar response
418
438
  <param pos="0" name="os.vendor" value="Novell"/>
419
439
  <param pos="0" name="os.family" value="NetWare"/>
420
440
  <param pos="0" name="os.product" value="NetWare"/>
441
+ <param pos="0" name="os.cpe23" value="cpe:/o:novell:netware:-"/>
421
442
  </fingerprint>
422
443
  <fingerprint pattern="^.*version=&quot;ntpd ([^ ]+)[^&quot;]+&quot;,.*processor=&quot;([^ ]+)&quot;,.*system=&quot;SunOS/?5.0&quot;" flags="REG_DOT_NEWLINE,REG_ICASE">
423
444
  <description>ntpd running on Solaris 2.0 (SunOS/5.0) </description>
@@ -437,6 +458,7 @@ NTP "banners", taken from a readvar response
437
458
  <param pos="0" name="os.version" value="2.0"/>
438
459
  <param pos="1" name="service.version"/>
439
460
  <param pos="2" name="os.arch"/>
461
+ <param pos="0" name="os.cpe23" value="cpe:/o:sun:solaris:2.0"/>
440
462
  </fingerprint>
441
463
  <fingerprint pattern="^.*version=&quot;ntpd ([^ ]+)[^&quot;]+&quot;,.*processor=&quot;([^ ]+)&quot;,.*system=&quot;SunOS/?5.1&quot;" flags="REG_DOT_NEWLINE,REG_ICASE">
442
464
  <description> ntpd running on Solaris 2.1 (SunOS/5.1) </description>
@@ -456,6 +478,7 @@ NTP "banners", taken from a readvar response
456
478
  <param pos="0" name="os.version" value="2.1"/>
457
479
  <param pos="1" name="service.version"/>
458
480
  <param pos="2" name="os.arch"/>
481
+ <param pos="0" name="os.cpe23" value="cpe:/o:sun:solaris:2.1"/>
459
482
  </fingerprint>
460
483
  <fingerprint pattern="^.*version=&quot;ntpd ([^ ]+)[^&quot;]+&quot;,.*processor=&quot;([^ ]+)&quot;,.*system=&quot;SunOS/?5.2&quot;" flags="REG_DOT_NEWLINE,REG_ICASE">
461
484
  <description> ntpd running on Solaris 2.2 (SunOS/5.2) </description>
@@ -475,6 +498,7 @@ NTP "banners", taken from a readvar response
475
498
  <param pos="0" name="os.version" value="2.2"/>
476
499
  <param pos="1" name="service.version"/>
477
500
  <param pos="2" name="os.arch"/>
501
+ <param pos="0" name="os.cpe23" value="cpe:/o:sun:solaris:2.2"/>
478
502
  </fingerprint>
479
503
  <fingerprint pattern="^.*version=&quot;ntpd ([^ ]+)[^&quot;]+&quot;,.*processor=&quot;([^ ]+)&quot;,.*system=&quot;SunOS/?5.3&quot;" flags="REG_DOT_NEWLINE,REG_ICASE">
480
504
  <description> ntpd running on Solaris 2.3 (SunOS/5.3) </description>
@@ -494,6 +518,7 @@ NTP "banners", taken from a readvar response
494
518
  <param pos="0" name="os.version" value="2.3"/>
495
519
  <param pos="1" name="service.version"/>
496
520
  <param pos="2" name="os.arch"/>
521
+ <param pos="0" name="os.cpe23" value="cpe:/o:sun:solaris:2.3"/>
497
522
  </fingerprint>
498
523
  <fingerprint pattern="^.*version=&quot;ntpd ([^ ]+)[^&quot;]+&quot;,.*processor=&quot;([^ ]+)&quot;,.*system=&quot;SunOS/?5.4&quot;" flags="REG_DOT_NEWLINE,REG_ICASE">
499
524
  <description>ntpd running on Solaris 2.4 (SunOS/5.4) </description>
@@ -513,6 +538,7 @@ NTP "banners", taken from a readvar response
513
538
  <param pos="0" name="os.version" value="2.4"/>
514
539
  <param pos="1" name="service.version"/>
515
540
  <param pos="2" name="os.arch"/>
541
+ <param pos="0" name="os.cpe23" value="cpe:/o:sun:solaris:2.4"/>
516
542
  </fingerprint>
517
543
  <fingerprint pattern="^.*version=&quot;ntpd ([^ ]+)[^&quot;]+&quot;,.*processor=&quot;([^ ]+)&quot;,.*system=&quot;SunOS/?5.5&quot;" flags="REG_DOT_NEWLINE,REG_ICASE">
518
544
  <description>ntpd running on Solaris 2.5 (SunOS/5.5) </description>
@@ -532,6 +558,7 @@ NTP "banners", taken from a readvar response
532
558
  <param pos="0" name="os.version" value="2.5"/>
533
559
  <param pos="1" name="service.version"/>
534
560
  <param pos="2" name="os.arch"/>
561
+ <param pos="0" name="os.cpe23" value="cpe:/o:sun:solaris:2.5"/>
535
562
  </fingerprint>
536
563
  <fingerprint pattern="^.*version=&quot;ntpd ([^ ]+)[^&quot;]+&quot;,.*processor=&quot;([^ ]+)&quot;,.*system=&quot;SunOS/?5.6&quot;" flags="REG_DOT_NEWLINE,REG_ICASE">
537
564
  <description>ntpd running on Solaris 2.6 (SunOS/5.6) </description>
@@ -542,7 +569,7 @@ NTP "banners", taken from a readvar response
542
569
  <example service.version="4.2.0@1.1161-r" os.arch="sun4u">
543
570
  version="ntpd 4.2.0@1.1161-r Wed Apr 20 11:28:05 EDT 2005 (1)",
544
571
  processor="sun4u", system="SunOS5.6", leap=00, stratum=2,
545
- </example>
572
+ </example>
546
573
  <param pos="0" name="os.vendor" value="Sun"/>
547
574
  <param pos="0" name="os.family" value="Solaris"/>
548
575
  <param pos="0" name="os.product" value="Solaris"/>
@@ -551,6 +578,7 @@ NTP "banners", taken from a readvar response
551
578
  <param pos="0" name="os.version" value="2.6"/>
552
579
  <param pos="1" name="service.version"/>
553
580
  <param pos="2" name="os.arch"/>
581
+ <param pos="0" name="os.cpe23" value="cpe:/o:sun:solaris:2.6"/>
554
582
  </fingerprint>
555
583
  <fingerprint pattern="^.*version=&quot;ntpd ([^ ]+)[^&quot;]+&quot;,.*processor=&quot;([^ ]+)&quot;,.*system=&quot;SunOS/?5.(1[1-9])&quot;" flags="REG_DOT_NEWLINE,REG_ICASE">
556
584
  <description>ntpd running on Solaris 11 or above (SunOS/5.11 and above) </description>
@@ -570,6 +598,7 @@ NTP "banners", taken from a readvar response
570
598
  <param pos="1" name="service.version"/>
571
599
  <param pos="2" name="os.arch"/>
572
600
  <param pos="3" name="os.version"/>
601
+ <param pos="0" name="os.cpe23" value="cpe:/o:oracle:solaris:{os.version}"/>
573
602
  </fingerprint>
574
603
  <fingerprint pattern="^.*version=&quot;ntpd ([^ ]+)[^&quot;]+&quot;,.*processor=&quot;([^ ]+)&quot;,.*system=&quot;SunOS/?5.([789]|10)&quot;" flags="REG_DOT_NEWLINE,REG_ICASE">
575
604
  <description>ntpd running on Solaris 7-Solaris 10 (SunOS/5.7 - SunOS/5.10) </description>
@@ -597,139 +626,149 @@ NTP "banners", taken from a readvar response
597
626
  <param pos="1" name="service.version"/>
598
627
  <param pos="2" name="os.arch"/>
599
628
  <param pos="3" name="os.version"/>
629
+ <param pos="0" name="os.cpe23" value="cpe:/o:sun:solaris:{os.version}"/>
600
630
  </fingerprint>
601
631
  <fingerprint pattern="^.*processor=&quot;([^ ]+)&quot;,.*system=&quot;SunOS/?5.0&quot;" flags="REG_DOT_NEWLINE,REG_ICASE">
602
- <description>Solaris 2.0 (SunOS/5.0) with no ntp version</description>
603
- <example os.arch="sun4m">
632
+ <description>Solaris 2.0 (SunOS/5.0) with no ntp version</description>
633
+ <example os.arch="sun4m">
604
634
  processor="sun4m", system="SunOS/5.0"
605
635
  </example>
606
- <example os.arch="sun4m">
636
+ <example os.arch="sun4m">
607
637
  processor="sun4m", system="SunOS5.0"
608
638
  </example>
609
- <param pos="0" name="os.vendor" value="Sun"/>
610
- <param pos="0" name="os.family" value="Solaris"/>
611
- <param pos="0" name="os.product" value="Solaris"/>
612
- <param pos="0" name="os.version" value="2.0" />
613
- <param pos="1" name="os.arch"/>
639
+ <param pos="0" name="os.vendor" value="Sun"/>
640
+ <param pos="0" name="os.family" value="Solaris"/>
641
+ <param pos="0" name="os.product" value="Solaris"/>
642
+ <param pos="0" name="os.version" value="2.0"/>
643
+ <param pos="1" name="os.arch"/>
644
+ <param pos="0" name="os.cpe23" value="cpe:/o:sun:solaris:2.0"/>
614
645
  </fingerprint>
615
646
  <fingerprint pattern="^.*processor=&quot;([^ ]+)&quot;,.*system=&quot;SunOS/?5.1&quot;" flags="REG_DOT_NEWLINE,REG_ICASE">
616
- <description>Solaris 2.1 (SunOS/5.1) with no ntp version</description>
617
- <example os.arch="sun4m">
647
+ <description>Solaris 2.1 (SunOS/5.1) with no ntp version</description>
648
+ <example os.arch="sun4m">
618
649
  processor="sun4m", system="SunOS/5.1"
619
650
  </example>
620
- <example os.arch="sun4u">
651
+ <example os.arch="sun4u">
621
652
  processor="sun4u", system="SunOS5.1"
622
653
  </example>
623
- <param pos="0" name="os.vendor" value="Sun"/>
624
- <param pos="0" name="os.family" value="Solaris"/>
625
- <param pos="0" name="os.product" value="Solaris"/>
626
- <param pos="0" name="os.version" value="2.1" />
627
- <param pos="1" name="os.arch"/>
654
+ <param pos="0" name="os.vendor" value="Sun"/>
655
+ <param pos="0" name="os.family" value="Solaris"/>
656
+ <param pos="0" name="os.product" value="Solaris"/>
657
+ <param pos="0" name="os.version" value="2.1"/>
658
+ <param pos="1" name="os.arch"/>
659
+ <param pos="0" name="os.cpe23" value="cpe:/o:sun:solaris:2.1"/>
628
660
  </fingerprint>
629
661
  <fingerprint pattern="^.*processor=&quot;([^ ]+)&quot;,.*system=&quot;SunOS/?5.2&quot;" flags="REG_DOT_NEWLINE,REG_ICASE">
630
- <description>Solaris 2.2 (SunOS/5.2) with no ntp version</description>
631
- <example os.arch="sun4m">
662
+ <description>Solaris 2.2 (SunOS/5.2) with no ntp version</description>
663
+ <example os.arch="sun4m">
632
664
  processor="sun4m", system="SunOS/5.2"
633
665
  </example>
634
- <example os.arch="sun4u">
666
+ <example os.arch="sun4u">
635
667
  processor="sun4u", system="SunOS5.2"
636
668
  </example>
637
- <param pos="0" name="os.vendor" value="Sun"/>
638
- <param pos="0" name="os.family" value="Solaris"/>
639
- <param pos="0" name="os.product" value="Solaris"/>
640
- <param pos="0" name="os.version" value="2.2" />
641
- <param pos="1" name="os.arch"/>
669
+ <param pos="0" name="os.vendor" value="Sun"/>
670
+ <param pos="0" name="os.family" value="Solaris"/>
671
+ <param pos="0" name="os.product" value="Solaris"/>
672
+ <param pos="0" name="os.version" value="2.2"/>
673
+ <param pos="1" name="os.arch"/>
674
+ <param pos="0" name="os.cpe23" value="cpe:/o:sun:solaris:2.2"/>
642
675
  </fingerprint>
643
676
  <fingerprint pattern="^.*processor=&quot;([^ ]+)&quot;,.*system=&quot;SunOS/?5.3&quot;" flags="REG_DOT_NEWLINE,REG_ICASE">
644
- <description>Solaris 2.3 (SunOS/5.3) with no ntp version</description>
645
- <example os.arch="sun4m">
677
+ <description>Solaris 2.3 (SunOS/5.3) with no ntp version</description>
678
+ <example os.arch="sun4m">
646
679
  processor="sun4m", system="SunOS/5.3"
647
680
  </example>
648
- <example os.arch="sun4u">
681
+ <example os.arch="sun4u">
649
682
  processor="sun4u", system="SunOS5.3"
650
683
  </example>
651
- <param pos="0" name="os.vendor" value="Sun"/>
652
- <param pos="0" name="os.family" value="Solaris"/>
653
- <param pos="0" name="os.product" value="Solaris"/>
654
- <param pos="0" name="os.version" value="2.3" />
655
- <param pos="1" name="os.arch"/>
684
+ <param pos="0" name="os.vendor" value="Sun"/>
685
+ <param pos="0" name="os.family" value="Solaris"/>
686
+ <param pos="0" name="os.product" value="Solaris"/>
687
+ <param pos="0" name="os.version" value="2.3"/>
688
+ <param pos="1" name="os.arch"/>
689
+ <param pos="0" name="os.cpe23" value="cpe:/o:sun:solaris:2.3"/>
656
690
  </fingerprint>
657
691
  <fingerprint pattern="^.*processor=&quot;([^ ]+)&quot;,.*system=&quot;SunOS/?5.4&quot;" flags="REG_DOT_NEWLINE,REG_ICASE">
658
- <description>Solaris 2.4 (SunOS/5.4) with no ntp version</description>
659
- <example os.arch="sun4m">
692
+ <description>Solaris 2.4 (SunOS/5.4) with no ntp version</description>
693
+ <example os.arch="sun4m">
660
694
  processor="sun4m", system="SunOS/5.4"
661
695
  </example>
662
- <example os.arch="sun4u">
696
+ <example os.arch="sun4u">
663
697
  processor="sun4u", system="SunOS5.4"
664
698
  </example>
665
- <param pos="0" name="os.vendor" value="Sun"/>
666
- <param pos="0" name="os.family" value="Solaris"/>
667
- <param pos="0" name="os.product" value="Solaris"/>
668
- <param pos="0" name="os.version" value="2.4" />
669
- <param pos="1" name="os.arch"/>
699
+ <param pos="0" name="os.vendor" value="Sun"/>
700
+ <param pos="0" name="os.family" value="Solaris"/>
701
+ <param pos="0" name="os.product" value="Solaris"/>
702
+ <param pos="0" name="os.version" value="2.4"/>
703
+ <param pos="1" name="os.arch"/>
704
+ <param pos="0" name="os.cpe23" value="cpe:/o:sun:solaris:2.4"/>
670
705
  </fingerprint>
671
706
  <fingerprint pattern="^.*processor=&quot;([^ ]+)&quot;,.*system=&quot;SunOS/?5.5&quot;" flags="REG_DOT_NEWLINE,REG_ICASE">
672
- <description>Solaris 2.5 (SunOS/5.5) with no ntp version</description>
673
- <example os.arch="sun4m">
707
+ <description>Solaris 2.5 (SunOS/5.5) with no ntp version</description>
708
+ <example os.arch="sun4m">
674
709
  processor="sun4m", system="SunOS/5.5"
675
710
  </example>
676
- <example os.arch="sun4u">
711
+ <example os.arch="sun4u">
677
712
  processor="sun4u", system="SunOS5.5"
678
713
  </example>
679
- <param pos="0" name="os.vendor" value="Sun"/>
680
- <param pos="0" name="os.family" value="Solaris"/>
681
- <param pos="0" name="os.product" value="Solaris"/>
682
- <param pos="0" name="os.version" value="2.5" />
683
- <param pos="1" name="os.arch"/>
714
+ <param pos="0" name="os.vendor" value="Sun"/>
715
+ <param pos="0" name="os.family" value="Solaris"/>
716
+ <param pos="0" name="os.product" value="Solaris"/>
717
+ <param pos="0" name="os.version" value="2.5"/>
718
+ <param pos="1" name="os.arch"/>
719
+ <param pos="0" name="os.cpe23" value="cpe:/o:sun:solaris:2.5"/>
684
720
  </fingerprint>
685
721
  <fingerprint pattern="^.*processor=&quot;([^ ]+)&quot;,.*system=&quot;SunOS/?5.6&quot;" flags="REG_DOT_NEWLINE,REG_ICASE">
686
- <description>Solaris 2.6 (SunOS/5.6) with no ntp version</description>
687
- <example os.arch="sun4m">
722
+ <description>Solaris 2.6 (SunOS/5.6) with no ntp version</description>
723
+ <example os.arch="sun4m">
688
724
  processor="sun4m", system="SunOS/5.6"
689
725
  </example>
690
- <example os.arch="sun4u">
726
+ <example os.arch="sun4u">
691
727
  processor="sun4u", system="SunOS5.6"
692
728
  </example>
693
- <param pos="0" name="os.vendor" value="Sun"/>
694
- <param pos="0" name="os.family" value="Solaris"/>
695
- <param pos="0" name="os.product" value="Solaris"/>
696
- <param pos="0" name="os.version" value="2.6" />
697
- <param pos="1" name="os.arch"/>
729
+ <param pos="0" name="os.vendor" value="Sun"/>
730
+ <param pos="0" name="os.family" value="Solaris"/>
731
+ <param pos="0" name="os.product" value="Solaris"/>
732
+ <param pos="0" name="os.version" value="2.6"/>
733
+ <param pos="1" name="os.arch"/>
734
+ <param pos="0" name="os.cpe23" value="cpe:/o:sun:solaris:2.6"/>
698
735
  </fingerprint>
699
736
  <fingerprint pattern="^.*processor=&quot;([^ ]+)&quot;,.*system=&quot;SunOS/?5.([789]|10)&quot;" flags="REG_DOT_NEWLINE,REG_ICASE">
700
- <description>Solaris 7-10 (SunOS/5.7 - SunOS/5.10) with no ntp version</description>
701
- <example os.arch="sun4m" os.version="7">
737
+ <description>Solaris 7-10 (SunOS/5.7 - SunOS/5.10) with no ntp version</description>
738
+ <example os.arch="sun4m" os.version="7">
702
739
  processor="sun4m", system="SunOS/5.7"
703
740
  </example>
704
- <example os.arch="sun4m" os.version="10">
741
+ <example os.arch="sun4m" os.version="10">
705
742
  processor="sun4m", system="SunOS/5.10"
706
743
  </example>
707
- <example os.arch="sun4u" os.version="7">
744
+ <example os.arch="sun4u" os.version="7">
708
745
  processor="sun4u", system="SunOS5.7"
709
746
  </example>
710
- <example os.arch="sun4m" os.version="10">
747
+ <example os.arch="sun4m" os.version="10">
711
748
  processor="sun4m", system="SunOS5.10"
712
749
  </example>
713
- <param pos="0" name="os.vendor" value="Sun"/>
714
- <param pos="0" name="os.family" value="Solaris"/>
715
- <param pos="0" name="os.product" value="Solaris"/>
716
- <param pos="1" name="os.arch"/>
717
- <param pos="2" name="os.version"/>
750
+ <param pos="0" name="os.vendor" value="Sun"/>
751
+ <param pos="0" name="os.family" value="Solaris"/>
752
+ <param pos="0" name="os.product" value="Solaris"/>
753
+ <param pos="1" name="os.arch"/>
754
+ <param pos="2" name="os.version"/>
755
+ <param pos="0" name="os.cpe23" value="cpe:/o:sun:solaris:{os.version}"/>
718
756
  </fingerprint>
719
757
  <fingerprint pattern="^.*processor=&quot;([^ ]+)&quot;,.*system=&quot;SunOS/?5.(1[1-9])&quot;" flags="REG_DOT_NEWLINE,REG_ICASE">
720
- <description>Solaris 11 and up with no ntp version</description>
721
- <example os.arch="sun4m" os.version="11">
758
+ <description>Solaris 11 and up with no ntp version</description>
759
+ <example os.arch="sun4m" os.version="11">
722
760
  processor="sun4m", system="SunOS/5.11"
723
761
  </example>
724
- <example os.arch="sun4m" os.version="11">
762
+ <example os.arch="sun4m" os.version="11">
725
763
  processor="sun4m", system="SunOS5.11"
726
764
  </example>
727
- <param pos="0" name="os.vendor" value="Oracle"/>
728
- <param pos="0" name="os.family" value="Solaris"/>
729
- <param pos="0" name="os.product" value="Solaris"/>
730
- <param pos="1" name="os.arch"/>
731
- <param pos="2" name="os.version"/>
732
- </fingerprint>
765
+ <param pos="0" name="os.vendor" value="Oracle"/>
766
+ <param pos="0" name="os.family" value="Solaris"/>
767
+ <param pos="0" name="os.product" value="Solaris"/>
768
+ <param pos="1" name="os.arch"/>
769
+ <param pos="2" name="os.version"/>
770
+ <param pos="0" name="os.cpe23" value="cpe:/o:oracle:solaris:{os.version}"/>
771
+ </fingerprint>
733
772
  <fingerprint pattern="^.*system=&quot;UNIX/SunOS ([^ ]+)&quot;" flags="REG_DOT_NEWLINE,REG_ICASE">
734
773
  <description>SunOS with no ntp version</description>
735
774
  <example>
@@ -739,6 +778,7 @@ NTP "banners", taken from a readvar response
739
778
  <param pos="0" name="os.family" value="Solaris"/>
740
779
  <param pos="0" name="os.product" value="Solaris"/>
741
780
  <param pos="1" name="os.version"/>
781
+ <param pos="0" name="os.cpe23" value="cpe:/o:sun:solaris:{os.version}"/>
742
782
  </fingerprint>
743
783
  <fingerprint pattern="^.*version=&quot;ntpd ([^ ]+)[^&quot;]+&quot;,.*processor=&quot;([^ ]+)&quot;,.*system=&quot;JUNOS/?([^ ]+)&quot;" flags="REG_DOT_NEWLINE,REG_ICASE">
744
784
  <description>ntpd running on Juniper/Netscreen JunOS</description>
@@ -754,6 +794,7 @@ NTP "banners", taken from a readvar response
754
794
  <param pos="1" name="service.version"/>
755
795
  <param pos="2" name="os.arch"/>
756
796
  <param pos="3" name="os.version"/>
797
+ <param pos="0" name="os.cpe23" value="cpe:/o:juniper:junos:{os.version}"/>
757
798
  </fingerprint>
758
799
  <fingerprint pattern="processor=&quot;([^ ]+)&quot;,.*system=&quot;JUNOS/?([^ ]+)&quot;" flags="REG_DOT_NEWLINE,REG_ICASE">
759
800
  <description>Juniper/Netscreen JunOS NTP without a version</description>
@@ -765,6 +806,7 @@ NTP "banners", taken from a readvar response
765
806
  <param pos="0" name="os.product" value="Junos OS"/>
766
807
  <param pos="1" name="os.arch"/>
767
808
  <param pos="2" name="os.version"/>
809
+ <param pos="0" name="os.cpe23" value="cpe:/o:juniper:junos:{os.version}"/>
768
810
  </fingerprint>
769
811
  <fingerprint pattern="^.*version=&quot;ntpd ([^ ]+)[^&quot;]+&quot;,.*processor=&quot;([^ ]+)&quot;,.*system=&quot;Windows/?([^ ]+)?&quot;" flags="REG_DOT_NEWLINE,REG_ICASE">
770
812
  <description>ntpd running on Windows</description>
@@ -784,6 +826,7 @@ NTP "banners", taken from a readvar response
784
826
  <param pos="0" name="os.product" value="Windows"/>
785
827
  <param pos="2" name="os.arch"/>
786
828
  <param pos="3" name="os.version"/>
829
+ <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows:{os.version}"/>
787
830
  </fingerprint>
788
831
  <fingerprint pattern="^.*version=&quot;ntpd ([^ ]+)[^&quot;]+&quot;,.*processor=&quot;([^ ]+)&quot;,.*system=&quot;HP-UX/?([^ ]+)?&quot;" flags="REG_DOT_NEWLINE,REG_ICASE">
789
832
  <description>ntpd running on HP-UX</description>
@@ -799,6 +842,7 @@ NTP "banners", taken from a readvar response
799
842
  <param pos="0" name="os.product" value="HP-UX"/>
800
843
  <param pos="2" name="os.arch"/>
801
844
  <param pos="3" name="os.version"/>
845
+ <param pos="0" name="os.cpe23" value="cpe:/o:hp:hp-ux:{os.version}"/>
802
846
  </fingerprint>
803
847
  <fingerprint pattern="^.*version=&quot;ntpd ([^ ]+)[^&quot;]+&quot;,.*processor=,.*system=&quot;HP-UX/&quot;" flags="REG_DOT_NEWLINE,REG_ICASE">
804
848
  <description>ntpd running on HP-UX with an empty processor</description>
@@ -812,6 +856,7 @@ NTP "banners", taken from a readvar response
812
856
  <param pos="0" name="os.vendor" value="HP"/>
813
857
  <param pos="0" name="os.family" value="HP-UX"/>
814
858
  <param pos="0" name="os.product" value="HP-UX"/>
859
+ <param pos="0" name="os.cpe23" value="cpe:/o:hp:hp-ux:-"/>
815
860
  </fingerprint>
816
861
  <fingerprint pattern="^.*version=&quot;ntpd ([^ ]+)[^&quot;]+&quot;,.*processor=&quot;[^ ]+&quot;,.*system=&quot;([^ ]+)-hp-hpux([^ ]+)&quot;" flags="REG_DOT_NEWLINE,REG_ICASE">
817
862
  <description>ntpd running on HP-UX, where the processor is in the 'system' variable</description>
@@ -827,6 +872,7 @@ NTP "banners", taken from a readvar response
827
872
  <param pos="0" name="os.product" value="HP-UX"/>
828
873
  <param pos="2" name="os.arch"/>
829
874
  <param pos="3" name="os.version"/>
875
+ <param pos="0" name="os.cpe23" value="cpe:/o:hp:hp-ux:{os.version}"/>
830
876
  </fingerprint>
831
877
  <fingerprint pattern="^.*version=&quot;ntpd ([^ ]+)[^&quot;]+&quot;,.*processor=&quot;([^ ]+)&quot;,.*system=&quot;VMkernel/?([^ ]+)?&quot;" flags="REG_DOT_NEWLINE,REG_ICASE">
832
878
  <description>ntpd running on VMware ESXi</description>
@@ -842,6 +888,7 @@ NTP "banners", taken from a readvar response
842
888
  <param pos="0" name="os.product" value="VMware ESXi Server"/>
843
889
  <param pos="2" name="os.arch"/>
844
890
  <param pos="3" name="os.version"/>
891
+ <param pos="0" name="os.cpe23" value="cpe:/o:vmware:esxi:{os.version}"/>
845
892
  </fingerprint>
846
893
  <fingerprint pattern=".*processor=&quot;([^ ]+)&quot;,.*system=&quot;OSF1[/V]?([^ ]+)&quot;" flags="REG_DOT_NEWLINE,REG_ICASE">
847
894
  <description>ntpd running on OSF/1</description>
@@ -871,6 +918,7 @@ NTP "banners", taken from a readvar response
871
918
  <param pos="0" name="os.vendor" value="Linux"/>
872
919
  <param pos="0" name="os.family" value="Linux"/>
873
920
  <param pos="0" name="os.product" value="Linux"/>
921
+ <param pos="0" name="os.cpe23" value="cpe:/o:linux:linux_kernel:-"/>
874
922
  <param pos="0" name="service.family" value="NTP"/>
875
923
  <param pos="0" name="service.product" value="NTP"/>
876
924
  </fingerprint>
@@ -882,6 +930,7 @@ NTP "banners", taken from a readvar response
882
930
  <param pos="0" name="os.vendor" value="IBM"/>
883
931
  <param pos="0" name="os.family" value="AIX"/>
884
932
  <param pos="0" name="os.product" value="AIX"/>
933
+ <param pos="0" name="os.cpe23" value="cpe:/o:ibm:aix:-"/>
885
934
  <param pos="0" name="service.family" value="NTP"/>
886
935
  <param pos="0" name="service.product" value="NTP"/>
887
936
  <param pos="0" name="service.vendor" value="IBM"/>
@@ -894,9 +943,10 @@ NTP "banners", taken from a readvar response
894
943
  <param pos="0" name="os.vendor" value="Sun"/>
895
944
  <param pos="0" name="os.family" value="Solaris"/>
896
945
  <param pos="0" name="os.product" value="Solaris"/>
946
+ <param pos="0" name="os.cpe23" value="cpe:/o:sun:solaris:-"/>
897
947
  <param pos="0" name="service.family" value="NTP"/>
898
948
  <param pos="0" name="service.product" value="NTP"/>
899
- <param pos="0" name="service.vendor" value="Solaris"/>
949
+ <param pos="0" name="service.vendor" value="Sun"/>
900
950
  </fingerprint>
901
951
  <fingerprint pattern="^.*system=&quot;cisco&quot;" flags="REG_DOT_NEWLINE,REG_ICASE">
902
952
  <description>Cisco IOS with NTP enabled</description>
@@ -906,6 +956,7 @@ NTP "banners", taken from a readvar response
906
956
  <param pos="0" name="os.vendor" value="Cisco"/>
907
957
  <param pos="0" name="os.family" value="IOS"/>
908
958
  <param pos="0" name="os.product" value="IOS"/>
959
+ <param pos="0" name="os.cpe23" value="cpe:/o:cisco:ios:-"/>
909
960
  <param pos="0" name="service.family" value="NTP"/>
910
961
  <param pos="0" name="service.product" value="NTP"/>
911
962
  <param pos="0" name="service.vendor" value="Cisco"/>
@@ -920,6 +971,7 @@ NTP "banners", taken from a readvar response
920
971
  <param pos="0" name="os.product" value="Data ONTAP"/>
921
972
  <param pos="0" name="os.device" value="File server"/>
922
973
  <param pos="1" name="os.version"/>
974
+ <param pos="0" name="os.cpe23" value="cpe:/o:netapp:data_ontap:{os.version}"/>
923
975
  </fingerprint>
924
976
  <fingerprint pattern="system=&quot;UNIX/HPUX&quot;" flags="REG_ICASE">
925
977
  <description>Generic HPUX</description>
@@ -932,6 +984,7 @@ NTP "banners", taken from a readvar response
932
984
  <param pos="0" name="os.vendor" value="HP"/>
933
985
  <param pos="0" name="os.family" value="HP-UX"/>
934
986
  <param pos="0" name="os.product" value="HP-UX"/>
987
+ <param pos="0" name="os.cpe23" value="cpe:/o:hp:hp-ux:-"/>
935
988
  </fingerprint>
936
989
  <fingerprint pattern="system=&quot;UNIX&quot;" flags="REG_ICASE">
937
990
  <description>Generic UNIX</description>
@@ -955,6 +1008,7 @@ NTP "banners", taken from a readvar response
955
1008
  </example>
956
1009
  <param pos="0" name="os.vendor" value="Wind River"/>
957
1010
  <param pos="0" name="os.product" value="VxWorks"/>
1011
+ <param pos="0" name="os.cpe23" value="cpe:/o:windriver:vxworks:-"/>
958
1012
  </fingerprint>
959
1013
  <fingerprint pattern="system=&quot;arm-wrs-vxworks&quot;" flags="REG_ICASE">
960
1014
  <description>VxWorks ARM, cross-compiled on Linux</description>
@@ -964,6 +1018,7 @@ NTP "banners", taken from a readvar response
964
1018
  <param pos="0" name="os.vendor" value="Wind River"/>
965
1019
  <param pos="0" name="os.product" value="VxWorks"/>
966
1020
  <param pos="0" name="os.arch" value="arm"/>
1021
+ <param pos="0" name="os.cpe23" value="cpe:/o:windriver:vxworks:-"/>
967
1022
  </fingerprint>
968
1023
  <fingerprint pattern="system=&quot;i386-wrs-vxworks&quot;" flags="REG_ICASE">
969
1024
  <description>VxWorks x86, cross-compiled on Linux</description>
@@ -973,6 +1028,7 @@ NTP "banners", taken from a readvar response
973
1028
  <param pos="0" name="os.vendor" value="Wind River"/>
974
1029
  <param pos="0" name="os.product" value="VxWorks"/>
975
1030
  <param pos="0" name="os.arch" value="i386"/>
1031
+ <param pos="0" name="os.cpe23" value="cpe:/o:windriver:vxworks:-"/>
976
1032
  </fingerprint>
977
1033
  <fingerprint pattern="system=&quot;UNIX/Unixware([^ ]+)&quot;" flags="REG_ICASE">
978
1034
  <description>SCO Unixware NTP</description>
@@ -1046,6 +1102,7 @@ NTP "banners", taken from a readvar response
1046
1102
  <param pos="0" name="os.certainty" value="0.75"/>
1047
1103
  <param pos="1" name="os.arch"/>
1048
1104
  <param pos="2" name="os.version"/>
1105
+ <param pos="0" name="os.cpe23" value="cpe:/o:linux:linux_kernel:{os.version}"/>
1049
1106
  </fingerprint>
1050
1107
  <fingerprint pattern=".*version=&quot;ntpd (\S+)[^&quot;]+&quot;,.*\s*processor=&quot;([^ ]+)&quot;.*system=&quot;Isilon OneFS/v([^ ]+)&quot;" flags="REG_DOT_NEWLINE,REG_ICASE">
1051
1108
  <description>Isilon OneFS NTP Server</description>
@@ -1083,6 +1140,7 @@ NTP "banners", taken from a readvar response
1083
1140
  <param pos="0" name="os.vendor" value="Nokia"/>
1084
1141
  <param pos="0" name="os.product" value="IPSO"/>
1085
1142
  <param pos="0" name="os.device" value="Firewall"/>
1143
+ <param pos="0" name="os.cpe23" value="cpe:/o:nokia:ipso:-"/>
1086
1144
  </fingerprint>
1087
1145
  <fingerprint pattern="system=&quot;UNIX/Solaris\s[^ ]+&quot;" flags="REG_DOT_NEWLINE,REG_ICASE">
1088
1146
  <description>Sun Solaris NTP</description>
@@ -1101,6 +1159,7 @@ NTP "banners", taken from a readvar response
1101
1159
  <param pos="0" name="os.vendor" value="Sun"/>
1102
1160
  <param pos="0" name="os.family" value="Solaris"/>
1103
1161
  <param pos="0" name="os.product" value="Solaris"/>
1162
+ <param pos="0" name="os.cpe23" value="cpe:/o:sun:solaris:-"/>
1104
1163
  <param pos="0" name="service.family" value="NTP"/>
1105
1164
  <param pos="0" name="service.product" value="NTP"/>
1106
1165
  <param pos="0" name="service.vendor" value="Sun"/>
@@ -1129,6 +1188,7 @@ NTP "banners", taken from a readvar response
1129
1188
  <param pos="1" name="service.version"/>
1130
1189
  <param pos="2" name="os.arch"/>
1131
1190
  <param pos="3" name="os.version"/>
1191
+ <param pos="0" name="os.cpe23" value="cpe:/o:hp:openvms:{os.version}"/>
1132
1192
  </fingerprint>
1133
1193
  <fingerprint pattern="version=&quot;ntpd version = ([^ ]+)&quot;,\s*processor=&quot;unknown&quot;,\s*system=&quot;OpenVMS AXP&quot;" flags="REG_DOT_NEWLINE,REG_ICASE">
1134
1194
  <description>OpenVMS AXP (Alpha) NTP Server</description>
@@ -1152,11 +1212,11 @@ NTP "banners", taken from a readvar response
1152
1212
  clock=0xd20533b8.903aa79b, state=1, offset=0.000, frequency=0.000,
1153
1213
  jitter=0.015, stability=0.000
1154
1214
  </example>
1155
- <param pos="0" name="service.family" value="NTP"/>
1156
- <param pos="0" name="service.product" value="NTP"/>
1157
- <param pos="0" name="os.vendor" value="F5"/>
1158
- <param pos="0" name="os.product" value="BIG-IP"/>
1215
+ <param pos="0" name="service.vendor" value="F5"/>
1216
+ <param pos="0" name="service.family" value="BIG-IP"/>
1217
+ <param pos="0" name="service.product" value="BIG-IP LTM"/>
1159
1218
  <param pos="1" name="service.version"/>
1219
+ <param pos="0" name="service.cpe23" value="cpe:/a:f5:big-ip_local_traffic_manager:{service.version}"/>
1160
1220
  <param pos="2" name="os.arch"/>
1161
1221
  <param pos="3" name="os.version"/>
1162
1222
  </fingerprint>