recog 2.3.15 → 2.3.20

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (53) hide show
  1. checksums.yaml +4 -4
  2. data/.github/workflows/ci.yml +26 -0
  3. data/.snyk +10 -0
  4. data/LICENSE +1 -1
  5. data/bin/recog_standardize +8 -2
  6. data/cpe-remap.yaml +314 -170
  7. data/identifiers/README.md +24 -10
  8. data/identifiers/fields.txt +104 -0
  9. data/identifiers/hw_device.txt +5 -4
  10. data/identifiers/hw_family.txt +17 -0
  11. data/identifiers/hw_product.txt +87 -6
  12. data/identifiers/os_architecture.txt +0 -10
  13. data/identifiers/os_device.txt +12 -31
  14. data/identifiers/os_family.txt +2 -94
  15. data/identifiers/os_product.txt +45 -124
  16. data/identifiers/service_family.txt +14 -37
  17. data/identifiers/service_product.txt +283 -88
  18. data/identifiers/vendor.txt +99 -192
  19. data/lib/recog/version.rb +1 -1
  20. data/requirements.txt +1 -1
  21. data/update_cpes.py +110 -49
  22. data/xml/apache_modules.xml +60 -0
  23. data/xml/dns_versionbind.xml +40 -17
  24. data/xml/favicons.xml +163 -20
  25. data/xml/ftp_banners.xml +25 -25
  26. data/xml/hp_pjl_id.xml +1 -1
  27. data/xml/html_title.xml +561 -51
  28. data/xml/http_cookies.xml +266 -61
  29. data/xml/http_servers.xml +472 -96
  30. data/xml/http_wwwauth.xml +53 -26
  31. data/xml/ldap_searchresult.xml +10 -6
  32. data/xml/mdns_device-info_txt.xml +308 -10
  33. data/xml/ntp_banners.xml +15 -1
  34. data/xml/operating_system.xml +1 -0
  35. data/xml/rtsp_servers.xml +7 -0
  36. data/xml/sip_banners.xml +346 -8
  37. data/xml/sip_user_agents.xml +321 -7
  38. data/xml/smb_native_lm.xml +32 -1
  39. data/xml/smb_native_os.xml +158 -33
  40. data/xml/smtp_banners.xml +48 -7
  41. data/xml/smtp_expn.xml +1 -0
  42. data/xml/smtp_help.xml +2 -0
  43. data/xml/smtp_vrfy.xml +3 -1
  44. data/xml/snmp_sysdescr.xml +211 -42
  45. data/xml/ssh_banners.xml +127 -14
  46. data/xml/telnet_banners.xml +44 -14
  47. data/xml/tls_jarm.xml +140 -0
  48. data/xml/x509_issuers.xml +179 -7
  49. data/xml/x509_subjects.xml +252 -35
  50. metadata +6 -5
  51. data/identifiers/software_class.txt +0 -26
  52. data/identifiers/software_family.txt +0 -91
  53. data/identifiers/software_product.txt +0 -333
data/xml/smtp_banners.xml CHANGED
@@ -77,6 +77,7 @@
77
77
  <param pos="0" name="service.family" value="Mail Server"/>
78
78
  <param pos="0" name="service.product" value="Mail Server"/>
79
79
  <param pos="1" name="service.version"/>
80
+ <param pos="0" name="service.cpe23" value="cpe:/a:argosoft:mail_server:{service.version}"/>
80
81
  </fingerprint>
81
82
 
82
83
  <fingerprint pattern="^^(?:(\S+) +)?ArGoSoft Mail Server Freeware, Version [^ ]+ \(([^ ]+\.[^ ]+\.[^ ]+\.[^ ]+)\) *$">
@@ -91,6 +92,7 @@
91
92
  <param pos="0" name="service.family" value="Mail Server"/>
92
93
  <param pos="0" name="service.product" value="Mail Server"/>
93
94
  <param pos="2" name="service.version"/>
95
+ <param pos="0" name="service.cpe23" value="cpe:/a:argosoft:mail_server:{service.version}"/>
94
96
  <param pos="1" name="host.name"/>
95
97
  </fingerprint>
96
98
 
@@ -108,6 +110,7 @@
108
110
  <param pos="0" name="service.product" value="Mail Server"/>
109
111
  <param pos="1" name="host.name"/>
110
112
  <param pos="2" name="service.version"/>
113
+ <param pos="0" name="service.cpe23" value="cpe:/a:argosoft:mail_server:{service.version}"/>
111
114
  </fingerprint>
112
115
 
113
116
  <fingerprint pattern="^([^ ]+) +AppleShare IP Mail Server ([^ ]+\.[\d.]+) SMTP Server Ready *$">
@@ -330,17 +333,20 @@
330
333
  <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows:-"/>
331
334
  </fingerprint>
332
335
 
333
- <fingerprint pattern="^ESMTP Exim$">
334
- <description>Exim - without version string or hostname</description>
336
+ <fingerprint pattern="^ESMTP Exim ?((?:\w\w\w, \d+ \w\w\w \d\d\d\d [\d:]+ [-+]\d{3,4})?)$">
337
+ <description>Exim - without version string or hostname - timestamp optional</description>
335
338
  <example>ESMTP Exim</example>
339
+ <example system.time="Thu, 29 Apr 2021 06:46:16 +0200">ESMTP Exim Thu, 29 Apr 2021 06:46:16 +0200</example>
336
340
  <param pos="0" name="service.vendor" value="exim"/>
337
341
  <param pos="0" name="service.family" value="exim"/>
338
342
  <param pos="0" name="service.product" value="exim"/>
339
343
  <param pos="0" name="service.cpe23" value="cpe:/a:exim:exim:-"/>
344
+ <param pos="1" name="system.time"/>
340
345
  </fingerprint>
341
346
 
342
- <fingerprint pattern="^ ?([^, ]+)(?:,)? ESMTP \(?(?i:Exim) +(\d+\.[\d_.bRC-]+)\)?(?: +#\d)? ?.?((?:\w\w\w, \d+ \w\w\w \d\d\d\d [\d:]+ [-+]\d\d\d\d)?) *(?:We do not authorize the use of this system to transport unsolicited, and\/or bulk e-mail.)?$">
347
+ <fingerprint pattern="^ ?([^, ]+)(?:,)? +ESMTP \(?(?i:Exim) +(\d+\.[\d_.bdRC-]+)\)?(?: +#\d+)? ?.?((?:\w\w\w, \d+ \w\w\w \d\d\d\d [\d:]+ [-+]\d{3,4})?) *(?:We do not authorize the use of this system to transport unsolicited, and\/or bulk e-mail.)?$">
343
348
  <description>Exim - with version string and optional timestamp</description>
349
+ <example service.version="4.91" host.name="foo.bar">foo.bar ESMTP Exim 4.91 Thu, 29 Apr 2021 05:41:36 +400</example>
344
350
  <example service.version="4.89" host.name="foo.bar">foo.bar ESMTP Exim 4.89 "</example>
345
351
  <example service.version="4.83" host.name="foo.bar">foo.bar, ESMTP EXIM 4.83</example>
346
352
  <example service.version="4.84_2" host.name="foo.bar">foo.bar ESMTP Exim 4.84_2 </example>
@@ -349,7 +355,7 @@
349
355
  <example service.version="4.89-122312">foo.bar ESMTP Exim 4.89-122312 Thu, 16 Nov 2017 10:33:38 +0200 </example>
350
356
  <example service.version="4.87">foo.bar ESMTP (Exim 4.87) Thu, 30 Nov 2017 03:25:58 -0800 </example>
351
357
  <example service.version="4.80" system.time="Thu, 16 Nov 2017 01:04:30 -0800">foo.bar ESMTP Exim 4.80 Thu, 16 Nov 2017 01:04:30 -0800 </example>
352
- <example service.version="3.12" system.time="Wed, 31 Jan 2001 15:47:23 +1100">foo.bar ESMTP Exim 3.12 #1 Wed, 31 Jan 2001 15:47:23 +1100 </example>
358
+ <example service.version="4.92.2" system.time="Thu, 29 Apr 2021 07:43:39 +0200">foo.bar ESMTP Exim 4.92.2 #89 Thu, 29 Apr 2021 07:43:39 +0200 </example>
353
359
  <example service.version="4.89" host.name="foo.bar"> foo.bar ESMTP Exim 4.89 #1 Thu, 16 Nov 2017 04:55:31 -0500 We do not authorize the use of this system to transport unsolicited, and/or bulk e-mail.</example>
354
360
  <param pos="0" name="service.vendor" value="exim"/>
355
361
  <param pos="0" name="service.family" value="exim"/>
@@ -429,6 +435,16 @@
429
435
  <param pos="1" name="host.name"/>
430
436
  </fingerprint>
431
437
 
438
+ <fingerprint pattern="^([\w.-]+) ESMTP \([a-z0-9]{32}\)$">
439
+ <description>Barracuda Email Security Gateway - physical or virtual appliance</description>
440
+ <example host.name="barracuda.foo.bar">barracuda.foo.bar ESMTP (0a8d40ef45300cc1bd0f16ced5c9e6f1)</example>
441
+ <param pos="0" name="service.vendor" value="Barracuda"/>
442
+ <param pos="0" name="service.product" value="Email Security Gateway"/>
443
+ <param pos="0" name="hw.vendor" value="Barracuda"/>
444
+ <param pos="0" name="hw.product" value="Email Security Gateway"/>
445
+ <param pos="1" name="host.name"/>
446
+ </fingerprint>
447
+
432
448
  <fingerprint pattern="^([^ ]+) FTGate server ready .*$">
433
449
  <description>FTGate mail server, runs on Windows 9x/NT/2k (http://www.ftgate.com)</description>
434
450
  <example host.name="foo.bar">foo.bar FTGate server ready -attitude [C.o.r.E]</example>
@@ -821,6 +837,7 @@
821
837
  <param pos="0" name="service.family" value="Lotus Domino"/>
822
838
  <param pos="0" name="service.product" value="Lotus Domino"/>
823
839
  <param pos="0" name="service.version" value="4"/>
840
+ <param pos="0" name="service.cpe23" value="cpe:/a:ibm:lotus_domino:4"/>
824
841
  <param pos="1" name="host.name"/>
825
842
  </fingerprint>
826
843
 
@@ -872,6 +889,7 @@
872
889
  <param pos="0" name="service.vendor" value="Lotus"/>
873
890
  <param pos="0" name="service.family" value="Lotus Domino"/>
874
891
  <param pos="0" name="service.product" value="Lotus Domino"/>
892
+ <param pos="0" name="service.cpe23" value="cpe:/a:ibm:lotus_domino:-"/>
875
893
  <param pos="1" name="host.name"/>
876
894
  <param pos="2" name="notes.build.version"/>
877
895
  <param pos="3" name="system.time"/>
@@ -883,6 +901,7 @@
883
901
  <param pos="0" name="service.vendor" value="Lotus"/>
884
902
  <param pos="0" name="service.family" value="Lotus Domino"/>
885
903
  <param pos="0" name="service.product" value="Lotus Domino"/>
904
+ <param pos="0" name="service.cpe23" value="cpe:/a:ibm:lotus_domino:-"/>
886
905
  <param pos="0" name="system.time.format" value="EEE, d MMM yyyy HH:mm:ss Z"/>
887
906
  <param pos="1" name="host.name"/>
888
907
  <param pos="2" name="system.time"/>
@@ -1322,6 +1341,25 @@
1322
1341
  <param pos="4" name="system.time"/>
1323
1342
  </fingerprint>
1324
1343
 
1344
+ <fingerprint pattern="^([^ ]+) ESMTP Sendmail ([^/]+)/([^/]+)/Debian-\d\+deb9u1; (.+); .*$">
1345
+ <description>Sendmail - Debian 9.1 (stretch)</description>
1346
+ <example service.version="8.15.2">foo.bar ESMTP Sendmail 8.15.2/8.15.2/Debian-8+deb9u1; Thu, 29 Apr 2021 06:45:02 +0200; (No UCE/UBE) logging access from: xyz.foo.bar(OK)-xyz.foo.bar [10.0.0.1]</example>
1347
+ <param pos="0" name="service.vendor" value="Sendmail"/>
1348
+ <param pos="0" name="service.family" value="Sendmail"/>
1349
+ <param pos="0" name="service.product" value="Sendmail"/>
1350
+ <param pos="0" name="os.vendor" value="Debian"/>
1351
+ <param pos="0" name="os.family" value="Linux"/>
1352
+ <param pos="0" name="os.product" value="Linux"/>
1353
+ <param pos="0" name="os.version" value="9.1"/>
1354
+ <param pos="0" name="os.cpe23" value="cpe:/o:debian:debian_linux:9.1"/>
1355
+ <param pos="0" name="system.time.format" value="EEE, d MMM yyyy HH:mm:ss Z"/>
1356
+ <param pos="1" name="host.name"/>
1357
+ <param pos="2" name="service.version"/>
1358
+ <param pos="0" name="service.cpe23" value="cpe:/a:sendmail:sendmail:{service.version}"/>
1359
+ <param pos="3" name="sendmail.config.version"/>
1360
+ <param pos="4" name="system.time"/>
1361
+ </fingerprint>
1362
+
1325
1363
  <fingerprint pattern="^([^ ]+) ESMTP Sendmail ([^/]+)/([^/]+)/Debian-\d\+lenny\d; (.+); .*$">
1326
1364
  <description>Sendmail - Debian 5.x (lenny)</description>
1327
1365
  <example service.version="8.14.3">foo.bar ESMTP Sendmail 8.14.3/8.14.3/Debian-5+lenny1; Thu, 30 Nov 2017 12:29:40 +0300; (No UCE/UBE) logging access from: xyz.foo.bar(OK)-xyz.foo.bar [10.0.0.1]</example>
@@ -1560,9 +1598,10 @@
1560
1598
  <param pos="0" name="system.time.format" value="EEE, d MMM yyyy HH:mm:ss Z"/>
1561
1599
  </fingerprint>
1562
1600
 
1563
- <fingerprint pattern="^ESMTP Sendmail +([^/ ]+) */ *([^/ ]+); (\w\w\w, \d+ \w\w\w \d\d\d\d [\d:]+ [-+]\d\d\d\d)$">
1601
+ <fingerprint pattern="^\s?ESMTP Sendmail +([^/ ]+) */ *([^/ ]+); (\w\w\w, \d+ \w\w\w \d\d\d\d [\d:]+ [-+]\d\d\d\d)$">
1564
1602
  <description>Sendmail - with version and date, w/o hostname or platform (semicolon variant)</description>
1565
1603
  <example service.version="8.13.1" sendmail.config.version="8.13.1" system.time="Thu, 30 Nov 2017 01:58:22 -0700">ESMTP Sendmail 8.13.1/8.13.1; Thu, 30 Nov 2017 01:58:22 -0700</example>
1604
+ <example service.version="8.14.7" sendmail.config.version="8.14.7" system.time="Thu, 29 Apr 2021 14:07:54 +0900"> ESMTP Sendmail 8.14.7/8.14.7; Thu, 29 Apr 2021 14:07:54 +0900</example>
1566
1605
  <param pos="0" name="service.vendor" value="Sendmail"/>
1567
1606
  <param pos="0" name="service.family" value="Sendmail"/>
1568
1607
  <param pos="0" name="service.product" value="Sendmail"/>
@@ -1657,7 +1696,8 @@
1657
1696
  <description>Symantec Mail Security for SMTP</description>
1658
1697
  <example host.name="foo.bar">foo.bar ESMTP Symantec Mail Security</example>
1659
1698
  <param pos="0" name="service.vendor" value="Symantec"/>
1660
- <param pos="0" name="service.product" value="Symantec Mail Security for SMTP"/>
1699
+ <param pos="0" name="service.product" value="Mail Security for SMTP"/>
1700
+ <param pos="0" name="service.cpe23" value="cpe:/a:symantec:mail_security_for_smtp:-"/>
1661
1701
  <param pos="1" name="host.name"/>
1662
1702
  </fingerprint>
1663
1703
 
@@ -1665,7 +1705,8 @@
1665
1705
  <description>Symantec Mail Gateway</description>
1666
1706
  <example host.name="foo.bar">foo.bar ESMTP Symantec Messaging Gateway</example>
1667
1707
  <param pos="0" name="service.vendor" value="Symantec"/>
1668
- <param pos="0" name="service.product" value="Symantec Messaging Gateway"/>
1708
+ <param pos="0" name="service.product" value="Messaging Gateway"/>
1709
+ <param pos="0" name="service.cpe23" value="cpe:/a:symantec:messaging_gateway:-"/>
1669
1710
  <param pos="1" name="host.name"/>
1670
1711
  </fingerprint>
1671
1712
 
data/xml/smtp_expn.xml CHANGED
@@ -78,6 +78,7 @@
78
78
  <param pos="0" name="service.vendor" value="Lotus"/>
79
79
  <param pos="0" name="service.family" value="Lotus Domino"/>
80
80
  <param pos="0" name="service.product" value="Lotus Domino"/>
81
+ <param pos="0" name="service.cpe23" value="cpe:/a:ibm:lotus_domino:-"/>
81
82
  </fingerprint>
82
83
 
83
84
  <fingerprint pattern="^550[ -]Unable to find list '.*'\.$">
data/xml/smtp_help.xml CHANGED
@@ -15,6 +15,7 @@
15
15
  <param pos="0" name="service.family" value="Mail Server"/>
16
16
  <param pos="0" name="service.product" value="Mail Server"/>
17
17
  <param pos="1" name="service.version"/>
18
+ <param pos="0" name="service.cpe23" value="cpe:/a:argosoft:mail_server:{service.version}"/>
18
19
  </fingerprint>
19
20
 
20
21
  <fingerprint pattern="^214[ -].*support@argosoft\.com *$">
@@ -23,6 +24,7 @@
23
24
  <param pos="0" name="service.vendor" value="ArGoSoft"/>
24
25
  <param pos="0" name="service.family" value="Mail Server"/>
25
26
  <param pos="0" name="service.product" value="Mail Server"/>
27
+ <param pos="0" name="service.cpe23" value="cpe:/a:argosoft:mail_server:-"/>
26
28
  </fingerprint>
27
29
 
28
30
  <fingerprint pattern="^500[ -]Syntax error, command &quot;XXXX&quot; unrecognized$">
data/xml/smtp_vrfy.xml CHANGED
@@ -86,7 +86,8 @@
86
86
  <description>Symantec Mail Security</description>
87
87
  <example>504 &lt;foo&gt;: Recipient address rejected: need fully-qualified address</example>
88
88
  <param pos="0" name="service.vendor" value="Symantec"/>
89
- <param pos="0" name="service.product" value="Symantec Mail Security for SMTP"/>
89
+ <param pos="0" name="service.product" value="Mail Security for SMTP"/>
90
+ <param pos="0" name="service.cpe23" value="cpe:/a:symantec:mail_security_for_smtp:-"/>
90
91
  </fingerprint>
91
92
 
92
93
  <fingerprint pattern="^252 Unable to VRFY &quot;.*&quot;, but will accept message and attempt delivery *$">
@@ -94,6 +95,7 @@
94
95
  <param pos="0" name="service.vendor" value="Lotus"/>
95
96
  <param pos="0" name="service.family" value="Lotus Domino"/>
96
97
  <param pos="0" name="service.product" value="Lotus Domino"/>
98
+ <param pos="0" name="service.cpe23" value="cpe:/a:ibm:lotus_domino:-"/>
97
99
  </fingerprint>
98
100
 
99
101
  </fingerprints>
@@ -932,7 +932,7 @@
932
932
  <example>Monarch M09855 FW Ver 6.2 / 7411 Network Adapter FW Ver CAMO-7.60, 802.11b-g WiFi FW Ver</example>
933
933
  <example>Monarch M09855 FW Ver 6.2 / 7411 Network Adapter FW Ver CAMO-7.60, 802.11b-g WiFi FW Ver / Verifier</example>
934
934
  <param pos="0" name="os.vendor" value="Avery Dennison"/>
935
- <param pos="0" name="os.device" value="Print server"/>
935
+ <param pos="0" name="os.device" value="Print Server"/>
936
936
  <param pos="1" name="os.product"/>
937
937
  </fingerprint>
938
938
 
@@ -985,7 +985,7 @@
985
985
  <example os.product="NPS 550R Printer Server" os.version="4.11">Axis NPS 550R Printer Server V4.11 Mar 1 1994</example>
986
986
  <example os.product="NPS 550RPrint server" os.version="5.22">Axis NPS 550RPrint serverV5.22 Oct 07 1996</example>
987
987
  <param pos="0" name="os.vendor" value="Axis"/>
988
- <param pos="0" name="os.device" value="Print server"/>
988
+ <param pos="0" name="os.device" value="Print Server"/>
989
989
  <param pos="1" name="os.product"/>
990
990
  <param pos="2" name="os.version"/>
991
991
  </fingerprint>
@@ -1001,7 +1001,7 @@
1001
1001
  <example os.product="SG400" os.version="4.1.1.1" os.version.version="22695">Blue Coat SG400, ProxySG Version: SGOS 4.1.1.1, Release id: 22695</example>
1002
1002
  <example os.product="SG8100" os.version="4.3.4.1" os.version.version="52168">Blue Coat SG8100 Series, ProxySG Version: SGOS 4.3.4.1, Release id: 52168</example>
1003
1003
  <param pos="0" name="os.vendor" value="Blue Coat"/>
1004
- <param pos="0" name="os.device" value="Web proxy"/>
1004
+ <param pos="0" name="os.device" value="Web Proxy"/>
1005
1005
  <param pos="1" name="os.product"/>
1006
1006
  <param pos="2" name="os.version"/>
1007
1007
  <param pos="3" name="os.version.version"/>
@@ -1011,7 +1011,7 @@
1011
1011
  <description>Blue Coat ProxyAV</description>
1012
1012
  <example os.product="AV1200" os.version="3.2.6.1" os.version.version="51482">Blue Coat AV1200 Series, ProxyAV Version: 3.2.6.1, Release id: 51482</example>
1013
1013
  <param pos="0" name="os.vendor" value="Blue Coat"/>
1014
- <param pos="0" name="os.device" value="Web proxy"/>
1014
+ <param pos="0" name="os.device" value="Web Proxy"/>
1015
1015
  <param pos="1" name="os.product"/>
1016
1016
  <param pos="2" name="os.version"/>
1017
1017
  <param pos="3" name="os.version.version"/>
@@ -1040,6 +1040,8 @@
1040
1040
  <param pos="0" name="os.product" value="Fabric OS"/>
1041
1041
  <param pos="0" name="os.device" value="Switch"/>
1042
1042
  <param pos="0" name="os.cpe23" value="cpe:/o:brocade:fabric_os:-"/>
1043
+ <param pos="0" name="hw.vendor" value="Brocade"/>
1044
+ <param pos="0" name="hw.device" value="Switch"/>
1043
1045
  </fingerprint>
1044
1046
 
1045
1047
  <fingerprint pattern="^Brocade ((?:\S+ )?SAN Switch) Module for IBM eServer BladeCenter$">
@@ -1050,6 +1052,7 @@
1050
1052
  <param pos="0" name="os.vendor" value="Brocade"/>
1051
1053
  <param pos="0" name="os.device" value="Switch"/>
1052
1054
  <param pos="1" name="os.product"/>
1055
+ <param pos="0" name="hw.vendor" value="Brocade"/>
1053
1056
  </fingerprint>
1054
1057
 
1055
1058
  <fingerprint pattern="^Brocade (?:Communications? Systems, Inc\. )?([^,\(]+)(?: \([^\)]+\))?,(?: Extended route scalability,)? IronWare Version V?(\S+) .*$">
@@ -1079,6 +1082,47 @@
1079
1082
  <param pos="2" name="os.version"/>
1080
1083
  </fingerprint>
1081
1084
 
1085
+ <fingerprint pattern="^Brocade VDX Switch, BR-(\S+), Network Operating System Software Version (\S+)\.$">
1086
+ <description>Brocade VDX Switch</description>
1087
+ <example hw.product="VDX6740" os.version="7.0.2b">Brocade VDX Switch, BR-VDX6740, Network Operating System Software Version 7.0.2b.</example>
1088
+ <param pos="0" name="os.vendor" value="Brocade"/>
1089
+ <param pos="0" name="os.device" value="Switch"/>
1090
+ <param pos="0" name="os.family" value="NetworkOS"/>
1091
+ <param pos="2" name="os.version"/>
1092
+ <param pos="0" name="hw.vendor" value="Brocade"/>
1093
+ <param pos="0" name="hw.family" value="VDX"/>
1094
+ <param pos="1" name="hw.product"/>
1095
+ <param pos="0" name="hw.device" value="Switch"/>
1096
+ </fingerprint>
1097
+
1098
+ <fingerprint pattern="^([^,]+), (VDX\S+), Network Operating System Software Version (\S+)\.$">
1099
+ <description>Brocade VDX Switch w/Hostname</description>
1100
+ <example host.name="core02" hw.product="VDX6740T-1G" os.version="7.0.1b">core02, VDX6740T-1G, Network Operating System Software Version 7.0.1b.</example>
1101
+ <param pos="0" name="os.vendor" value="Brocade"/>
1102
+ <param pos="0" name="os.device" value="Switch"/>
1103
+ <param pos="0" name="os.family" value="NetworkOS"/>
1104
+ <param pos="3" name="os.version"/>
1105
+ <param pos="0" name="hw.vendor" value="Brocade"/>
1106
+ <param pos="0" name="hw.family" value="VDX"/>
1107
+ <param pos="2" name="hw.product"/>
1108
+ <param pos="0" name="hw.device" value="Switch"/>
1109
+ <param pos="1" name="host.name"/>
1110
+ </fingerprint>
1111
+
1112
+ <fingerprint pattern="^([^,]+), BR-(\S+), Network Operating System Software Version (\S+)\.$">
1113
+ <description>Brocade VDX Switch w/Hostname and BR prefix</description>
1114
+ <example host.name="core01" hw.product="VDX6740" os.version="7.0.2b">core01, BR-VDX6740, Network Operating System Software Version 7.0.2b.</example>
1115
+ <param pos="0" name="os.vendor" value="Brocade"/>
1116
+ <param pos="0" name="os.device" value="Switch"/>
1117
+ <param pos="0" name="os.family" value="NetworkOS"/>
1118
+ <param pos="3" name="os.version"/>
1119
+ <param pos="0" name="hw.vendor" value="Brocade"/>
1120
+ <param pos="0" name="hw.family" value="VDX"/>
1121
+ <param pos="2" name="hw.product"/>
1122
+ <param pos="0" name="hw.device" value="Switch"/>
1123
+ <param pos="1" name="host.name"/>
1124
+ </fingerprint>
1125
+
1082
1126
  <!--======================================================================
1083
1127
  BROTHER
1084
1128
  =======================================================================-->
@@ -1320,7 +1364,7 @@
1320
1364
  <description>Canon Camera</description>
1321
1365
  <example>Canon Network Camera VB-C60</example>
1322
1366
  <param pos="0" name="os.vendor" value="Canon"/>
1323
- <param pos="0" name="os.device" value="Web cam"/>
1367
+ <param pos="0" name="os.device" value="IP Camera"/>
1324
1368
  <param pos="1" name="os.product"/>
1325
1369
  </fingerprint>
1326
1370
 
@@ -1345,7 +1389,7 @@
1345
1389
  <description>Castelle FaxPress</description>
1346
1390
  <param pos="0" name="os.vendor" value="Castelle"/>
1347
1391
  <param pos="0" name="os.product" value="FaxPress"/>
1348
- <param pos="0" name="os.device" value="Fax server"/>
1392
+ <param pos="0" name="os.device" value="Fax Server"/>
1349
1393
  </fingerprint>
1350
1394
 
1351
1395
  <!--======================================================================
@@ -1539,7 +1583,7 @@
1539
1583
  <param pos="0" name="os.product" value="Adaptive Security Appliance"/>
1540
1584
  <param pos="0" name="os.device" value="Firewall"/>
1541
1585
  <param pos="1" name="os.version"/>
1542
- <param pos="0" name="os.cpe23" value="cpe:/o:cisco:adaptive_security_appliance:{os.version}"/>
1586
+ <param pos="0" name="os.cpe23" value="cpe:/o:cisco:adaptive_security_appliance_software:{os.version}"/>
1543
1587
  <param pos="0" name="hw.vendor" value="Cisco"/>
1544
1588
  <param pos="0" name="hw.family" value="Adaptive Security Appliance"/>
1545
1589
  <param pos="0" name="hw.product" value="Adaptive Security Appliance"/>
@@ -1554,7 +1598,7 @@
1554
1598
  <param pos="0" name="os.vendor" value="Cisco"/>
1555
1599
  <param pos="0" name="os.family" value="760 Series"/>
1556
1600
  <param pos="0" name="os.product" value="761"/>
1557
- <param pos="0" name="os.device" value="Broadband router"/>
1601
+ <param pos="0" name="os.device" value="Broadband Router"/>
1558
1602
  <param pos="1" name="os.version"/>
1559
1603
  </fingerprint>
1560
1604
 
@@ -1568,7 +1612,7 @@
1568
1612
  <param pos="0" name="os.product" value="VPN 3000 Concentrator"/>
1569
1613
  <param pos="0" name="os.device" value="VPN"/>
1570
1614
  <param pos="1" name="os.version"/>
1571
- <param pos="0" name="os.cpe23" value="cpe:/o:cisco:vpn_3000_concentrator:{os.version}"/>
1615
+ <param pos="0" name="os.cpe23" value="cpe:/o:cisco:vpn_3000_concentrator_series_software:{os.version}"/>
1572
1616
  </fingerprint>
1573
1617
 
1574
1618
  <fingerprint pattern="^(?:Cisco )?Network Analysis Module \(WS-[^\)]+\), Version ([^, ]+)[,\s]?">
@@ -1587,6 +1631,11 @@ Copyright (c) 1999-2004 by cisco Systems, Inc.</example>
1587
1631
  <param pos="0" name="os.product" value="NAM"/>
1588
1632
  <param pos="0" name="os.device" value="Network Management Device"/>
1589
1633
  <param pos="1" name="os.version"/>
1634
+ <param pos="0" name="os.cpe23" value="cpe:/o:cisco:network_analysis_module_software:{os.version}"/>
1635
+ <param pos="0" name="hw.vendor" value="Cisco"/>
1636
+ <param pos="0" name="hw.product" value="NAM"/>
1637
+ <param pos="0" name="hw.device" value="Network Management Device"/>
1638
+ <param pos="0" name="hw.cpe23" value="cpe:/h:cisco:network_analysis_module:-"/>
1590
1639
  </fingerprint>
1591
1640
 
1592
1641
  <fingerprint pattern="^(?:Cisco )?Network Analysis Module \(WS-([^\-]+)-NAM\)$">
@@ -1596,6 +1645,9 @@ Copyright (c) 1999-2004 by cisco Systems, Inc.</example>
1596
1645
  <param pos="0" name="os.vendor" value="Cisco"/>
1597
1646
  <param pos="0" name="os.product" value="NAM"/>
1598
1647
  <param pos="0" name="os.device" value="Network Management Device"/>
1648
+ <param pos="0" name="os.cpe23" value="cpe:/o:cisco:network_analysis_module_software:-"/>
1649
+ <param pos="0" name="hw.vendor" value="Cisco"/>
1650
+ <param pos="0" name="hw.device" value="Network Management Device"/>
1599
1651
  <param pos="1" name="hw.product"/>
1600
1652
  </fingerprint>
1601
1653
 
@@ -1796,6 +1848,21 @@ Copyright (c) 1995-2005 by Cisco Systems
1796
1848
  <param pos="1" name="os.version"/>
1797
1849
  </fingerprint>
1798
1850
 
1851
+ <!--======================================================================
1852
+ Cumulus
1853
+ =======================================================================-->
1854
+
1855
+ <fingerprint pattern="^Cumulus Linux (\S+) \(Linux Kernel ([^\)]+)\)">
1856
+ <description>Cumulus Linux</description>
1857
+ <example os.version="3.7.2" os.version.version="4.1.33-1+cl3u17">Cumulus Linux 3.7.2 (Linux Kernel 4.1.33-1+cl3u17)</example>
1858
+ <param pos="0" name="os.vendor" value="Cumulus"/>
1859
+ <param pos="0" name="os.device" value="Switch"/>
1860
+ <param pos="0" name="os.product" value="Cumulus Linux"/>
1861
+ <param pos="1" name="os.version"/>
1862
+ <param pos="2" name="os.version.version"/>
1863
+ <param pos="0" name="os.cpe23" value="cpe:/o:cumulusnetworks:cumulus_linux:{os.version}"/>
1864
+ </fingerprint>
1865
+
1799
1866
  <!--======================================================================
1800
1867
  DATA DOMAIN
1801
1868
  =======================================================================-->
@@ -1807,6 +1874,7 @@ Copyright (c) 1995-2005 by Cisco Systems
1807
1874
  <param pos="0" name="os.product" value="DD OS"/>
1808
1875
  <param pos="0" name="os.device" value="Storage"/>
1809
1876
  <param pos="1" name="os.version"/>
1877
+ <param pos="0" name="os.cpe23" value="cpe:/o:dell:emc_data_domain_os:{os.version}"/>
1810
1878
  </fingerprint>
1811
1879
 
1812
1880
  <!--======================================================================
@@ -1831,7 +1899,7 @@ Copyright (c) 1995-2005 by Cisco Systems
1831
1899
  <example>Datamax Printer</example>
1832
1900
  <param pos="0" name="os.vendor" value="Datamax"/>
1833
1901
  <param pos="0" name="os.device" value="Printer"/>
1834
- <param pos="0" name="os.product" value="Print server"/>
1902
+ <param pos="0" name="os.product" value="Print Server"/>
1835
1903
  </fingerprint>
1836
1904
 
1837
1905
  <!--======================================================================
@@ -2970,7 +3038,7 @@ Copyright (c) 1995-2005 by Cisco Systems
2970
3038
  <example>HP ETHERNET MULTI-ENVIRONMENT</example>
2971
3039
  <param pos="0" name="os.vendor" value="HP"/>
2972
3040
  <param pos="0" name="os.family" value="JetDirect"/>
2973
- <param pos="0" name="os.device" value="Print server"/>
3041
+ <param pos="0" name="os.device" value="Print Server"/>
2974
3042
  </fingerprint>
2975
3043
 
2976
3044
  <fingerprint pattern="^HP ETHERNET MULTI-ENVIRONMENT,ROM (\S+?),JETDIRECT(?: EX)?,(\w+),EEPROM.*$">
@@ -2981,7 +3049,7 @@ Copyright (c) 1995-2005 by Cisco Systems
2981
3049
  <example>HP ETHERNET MULTI-ENVIRONMENT,ROM B.25.01,JETDIRECT,JD118,EEPROM D.27.02,CIDATE 03/23/2004</example>
2982
3050
  <param pos="0" name="os.vendor" value="HP"/>
2983
3051
  <param pos="0" name="os.family" value="JetDirect"/>
2984
- <param pos="0" name="os.device" value="Print server"/>
3052
+ <param pos="0" name="os.device" value="Print Server"/>
2985
3053
  <param pos="1" name="os.version"/>
2986
3054
  <param pos="2" name="os.product"/>
2987
3055
  </fingerprint>
@@ -3014,6 +3082,7 @@ Copyright (c) 1995-2005 by Cisco Systems
3014
3082
  <param pos="0" name="os.product" value="iLO"/>
3015
3083
  <param pos="0" name="os.device" value="Lights Out Management"/>
3016
3084
  <param pos="1" name="os.version"/>
3085
+ <param pos="0" name="os.cpe23" value="cpe:/o:hp:integrated_lights-out_firmware:{os.version}"/>
3017
3086
  </fingerprint>
3018
3087
 
3019
3088
  <fingerprint pattern="^Integrated Lights-Out (\d) \(iLO \d\) for Integrity$">
@@ -3024,6 +3093,7 @@ Copyright (c) 1995-2005 by Cisco Systems
3024
3093
  <param pos="0" name="os.product" value="iLO"/>
3025
3094
  <param pos="0" name="os.device" value="Lights Out Management"/>
3026
3095
  <param pos="1" name="os.version"/>
3096
+ <param pos="0" name="os.cpe23" value="cpe:/o:hp:integrated_lights-out_firmware:{os.version}"/>
3027
3097
  </fingerprint>
3028
3098
 
3029
3099
  <!--======================================================================
@@ -3389,7 +3459,7 @@ Copyright (c) 1995-2005 by Cisco Systems
3389
3459
  <param pos="0" name="os.vendor" value="Intel"/>
3390
3460
  <param pos="0" name="os.family" value="NetportExpress"/>
3391
3461
  <param pos="0" name="os.product" value="PRO/100"/>
3392
- <param pos="0" name="os.device" value="Print server"/>
3462
+ <param pos="0" name="os.device" value="Print Server"/>
3393
3463
  </fingerprint>
3394
3464
 
3395
3465
  <!--======================================================================
@@ -3401,7 +3471,7 @@ Copyright (c) 1995-2005 by Cisco Systems
3401
3471
  <example>Intermec CX Terminal</example>
3402
3472
  <param pos="0" name="os.vendor" value="Intermec"/>
3403
3473
  <param pos="0" name="os.product" value="CX Data Collection Terminal"/>
3404
- <param pos="0" name="os.device" value="POS"/>
3474
+ <param pos="0" name="os.device" value="Point of Sale"/>
3405
3475
  </fingerprint>
3406
3476
 
3407
3477
  <fingerprint pattern="^Thermal Label Printer Intermec (\S+)$">
@@ -3848,7 +3918,7 @@ Copyright (c) 1995-2005 by Cisco Systems
3848
3918
  <param pos="0" name="os.certainty" value="1.0"/>
3849
3919
  <param pos="0" name="os.vendor" value="Lexmark"/>
3850
3920
  <param pos="0" name="os.family" value="MarkNet"/>
3851
- <param pos="0" name="os.device" value="Print server"/>
3921
+ <param pos="0" name="os.device" value="Print Server"/>
3852
3922
  <param pos="1" name="os.product"/>
3853
3923
  <param pos="2" name="os.version"/>
3854
3924
  </fingerprint>
@@ -3933,7 +4003,7 @@ Copyright (c) 1995-2005 by Cisco Systems
3933
4003
  <description>Lexmark Printer - print server variant</description>
3934
4004
  <example>Lexmark C500 PS Print Server</example>
3935
4005
  <param pos="0" name="os.vendor" value="Lexmark"/>
3936
- <param pos="0" name="os.device" value="Print server"/>
4006
+ <param pos="0" name="os.device" value="Print Server"/>
3937
4007
  <param pos="1" name="os.product"/>
3938
4008
  </fingerprint>
3939
4009
 
@@ -4740,7 +4810,7 @@ Copyright (c) 1995-2005 by Cisco Systems
4740
4810
  <example>LX Console Manager, s/w version=5.3.9</example>
4741
4811
  <param pos="0" name="os.vendor" value="MRV Communications"/>
4742
4812
  <param pos="0" name="os.product" value="LX"/>
4743
- <param pos="0" name="os.device" value="Remote access server"/>
4813
+ <param pos="0" name="os.device" value="Remote Access Server"/>
4744
4814
  <param pos="1" name="os.version"/>
4745
4815
  </fingerprint>
4746
4816
 
@@ -4753,7 +4823,7 @@ Copyright (c) 1995-2005 by Cisco Systems
4753
4823
  <example>RASExpress Server Version 5.63</example>
4754
4824
  <param pos="0" name="os.vendor" value="MultiTech"/>
4755
4825
  <param pos="0" name="os.product" value="RASExpress"/>
4756
- <param pos="0" name="os.device" value="Remote access server"/>
4826
+ <param pos="0" name="os.device" value="Remote Access Server"/>
4757
4827
  <param pos="1" name="os.version"/>
4758
4828
  </fingerprint>
4759
4829
 
@@ -4784,7 +4854,7 @@ Copyright (c) 1995-2005 by Cisco Systems
4784
4854
  <param pos="0" name="os.vendor" value="NetApp"/>
4785
4855
  <param pos="0" name="os.family" value="Data ONTAP"/>
4786
4856
  <param pos="0" name="os.product" value="Data ONTAP"/>
4787
- <param pos="0" name="os.device" value="File server"/>
4857
+ <param pos="0" name="os.device" value="NAS"/>
4788
4858
  <param pos="1" name="os.version"/>
4789
4859
  <param pos="0" name="os.cpe23" value="cpe:/o:netapp:data_ontap:{os.version}"/>
4790
4860
  </fingerprint>
@@ -4833,7 +4903,7 @@ Copyright (c) 1995-2005 by Cisco Systems
4833
4903
  <example>Netopia R9100 v4.8.2</example>
4834
4904
  <param pos="0" name="os.vendor" value="Netopia"/>
4835
4905
  <param pos="0" name="os.family" value="Netopia"/>
4836
- <param pos="0" name="os.device" value="Broadband router"/>
4906
+ <param pos="0" name="os.device" value="Broadband Router"/>
4837
4907
  <param pos="1" name="os.product"/>
4838
4908
  <param pos="2" name="os.version"/>
4839
4909
  </fingerprint>
@@ -4852,6 +4922,7 @@ Copyright (c) 1995-2005 by Cisco Systems
4852
4922
  <param pos="0" name="os.product" value="NetScaler"/>
4853
4923
  <param pos="1" name="os.version"/>
4854
4924
  <param pos="2" name="os.version.version"/>
4925
+ <param pos="0" name="os.cpe23" value="cpe:/o:citrix:netscaler_firmware:{os.version}"/>
4855
4926
  </fingerprint>
4856
4927
 
4857
4928
  <!--======================================================================
@@ -4997,7 +5068,7 @@ Copyright (c) 1995-2005 by Cisco Systems
4997
5068
  <example os.product="2424">Nortel Application Switch 2424</example>
4998
5069
  <param pos="0" name="os.vendor" value="Nortel"/>
4999
5070
  <param pos="0" name="os.family" value="Application Switch"/>
5000
- <param pos="0" name="os.device" value="Load balancer"/>
5071
+ <param pos="0" name="os.device" value="Load Balancer"/>
5001
5072
  <param pos="1" name="os.product"/>
5002
5073
  </fingerprint>
5003
5074
 
@@ -5258,7 +5329,7 @@ Copyright (c) 1995-2005 by Cisco Systems
5258
5329
  <param pos="0" name="os.family" value="NC Series"/>
5259
5330
  <param pos="1" name="os.product"/>
5260
5331
  <param pos="2" name="os.version"/>
5261
- <param pos="0" name="os.device" value="Print server"/>
5332
+ <param pos="0" name="os.device" value="Print Server"/>
5262
5333
  </fingerprint>
5263
5334
 
5264
5335
  <fingerprint pattern="^Oce (im\d+)$">
@@ -5445,7 +5516,7 @@ Copyright (c) 1995-2005 by Cisco Systems
5445
5516
  <example>OKI OkiLAN 6400e Rev. 10/100BASE Ethernet PrintServer: Attached to B720n Rev.7.1b1: (C)2005 OKI DATA CORP</example>
5446
5517
  <example>OKI OkiLAN 6400e Rev. 10/100BASE Ethernet PrintServer: Attached to B930 Rev.3.6: (C)2005 OKI DATA CORP</example>
5447
5518
  <param pos="0" name="os.vendor" value="Oki"/>
5448
- <param pos="0" name="os.device" value="Print server"/>
5519
+ <param pos="0" name="os.device" value="Print Server"/>
5449
5520
  <param pos="1" name="os.product"/>
5450
5521
  </fingerprint>
5451
5522
 
@@ -5454,7 +5525,7 @@ Copyright (c) 1995-2005 by Cisco Systems
5454
5525
  <example>OKI FastEther8450e Rev.01.08 10/100BASE Ethernet PrintServer: Attached to B430 Rev.C2.00 : Copyright (c) 2008 Oki Data Corporation. All rights reserved.</example>
5455
5526
  <example>OKI FastEther8450e Rev.08.01 10/100BASE Ethernet PrintServer: Attached to C5650 Rev.M1.02 : Copyright (c) 2007 Oki Data Corporation. All rights reserved.</example>
5456
5527
  <param pos="0" name="os.vendor" value="Oki"/>
5457
- <param pos="0" name="os.device" value="Print server"/>
5528
+ <param pos="0" name="os.device" value="Print Server"/>
5458
5529
  <param pos="1" name="os.product"/>
5459
5530
  <param pos="2" name="os.version"/>
5460
5531
  </fingerprint>
@@ -5495,14 +5566,28 @@ Copyright (c) 1995-2005 by Cisco Systems
5495
5566
  <example>Palo Alto Networks PA-4000 series firewall</example>
5496
5567
  <param pos="0" name="os.vendor" value="Palo Alto Networks"/>
5497
5568
  <param pos="0" name="os.device" value="Firewall"/>
5498
- <param pos="1" name="os.product"/>
5569
+ <param pos="0" name="os.product" value="PAN-OS"/>
5570
+ <param pos="0" name="os.family" value="PAN-OS"/>
5571
+ <param pos="0" name="os.cpe23" value="cpe:/o:paloaltonetworks:pan-os:-"/>
5572
+ <param pos="0" name="service.vendor" value="Palo Alto Networks"/>
5573
+ <param pos="0" name="service.device" value="Firewall"/>
5574
+ <param pos="0" name="hw.vendor" value="Palo Alto Networks"/>
5575
+ <param pos="0" name="hw.device" value="Firewall"/>
5576
+ <param pos="1" name="hw.product"/>
5499
5577
  </fingerprint>
5500
5578
 
5501
5579
  <fingerprint pattern="^Palo Alto Networks Panorama server$">
5502
5580
  <description>Palo Alto Panorama</description>
5503
5581
  <example>Palo Alto Networks Panorama server</example>
5504
5582
  <param pos="0" name="os.vendor" value="Palo Alto Networks"/>
5505
- <param pos="0" name="os.product" value="Panorama Server"/>
5583
+ <param pos="0" name="os.product" value="PAN-OS"/>
5584
+ <param pos="0" name="os.family" value="PAN-OS"/>
5585
+ <param pos="0" name="os.device" value="Firewall"/>
5586
+ <param pos="0" name="os.cpe23" value="cpe:/o:paloaltonetworks:pan-os:-"/>
5587
+ <param pos="0" name="service.vendor" value="Palo Alto Networks"/>
5588
+ <param pos="0" name="service.product" value="Panorama Server"/>
5589
+ <param pos="0" name="service.device" value="Firewall"/>
5590
+ <param pos="0" name="hw.vendor" value="Palo Alto Networks"/>
5506
5591
  </fingerprint>
5507
5592
 
5508
5593
  <!--======================================================================
@@ -5645,7 +5730,7 @@ Copyright (c) 1995-2005 by Cisco Systems
5645
5730
  <example>Rectifier Technologies Pacific WebCSU 169-412 V1.30</example>
5646
5731
  <param pos="0" name="os.vendor" value="Rectifier Technologies"/>
5647
5732
  <param pos="0" name="os.family" value="RTP Power Controller"/>
5648
- <param pos="0" name="os.device" value="Power device"/>
5733
+ <param pos="0" name="os.device" value="Power Device"/>
5649
5734
  <param pos="1" name="os.product"/>
5650
5735
  <param pos="2" name="os.version"/>
5651
5736
  </fingerprint>
@@ -5655,7 +5740,7 @@ Copyright (c) 1995-2005 by Cisco Systems
5655
5740
  <example>Rectifier SNMP Server</example>
5656
5741
  <param pos="0" name="os.vendor" value="Rectifier Technologies"/>
5657
5742
  <param pos="0" name="os.family" value="RTP Power Controller"/>
5658
- <param pos="0" name="os.device" value="Power device"/>
5743
+ <param pos="0" name="os.device" value="Power Device"/>
5659
5744
  <param pos="0" name="os.product" value="WebCSU"/>
5660
5745
  </fingerprint>
5661
5746
 
@@ -6093,13 +6178,13 @@ Copyright (c) 1995-2005 by Cisco Systems
6093
6178
  <param pos="0" name="os.vendor" value="SonicWall"/>
6094
6179
  <param pos="0" name="os.device" value="Firewall"/>
6095
6180
  <param pos="0" name="os.product" value="SonicOS"/>
6181
+ <param pos="0" name="hw.vendor" value="SonicWall"/>
6096
6182
  <param pos="1" name="hw.product"/>
6097
6183
  <param pos="2" name="hw.model"/>
6098
6184
  <param pos="3" name="os.version"/>
6099
6185
  <param pos="0" name="os.cpe23" value="cpe:/o:sonicwall:sonicos:{os.version}"/>
6100
6186
  </fingerprint>
6101
6187
 
6102
-
6103
6188
  <fingerprint pattern="^SonicWALL (\S+).*?\(SonicOS \S+ ((?:\d\.)+\d+-\d+[a-zA-Z]).*\)">
6104
6189
  <description>SonicWall - SonicOS Enhanced variant without hardware model</description>
6105
6190
  <example hw.product="SOHO" os.version="5.9.1.4-4o">SonicWALL SOHO (SonicOS Enhanced 5.9.1.4-4o)</example>
@@ -6107,6 +6192,7 @@ Copyright (c) 1995-2005 by Cisco Systems
6107
6192
  <param pos="0" name="os.vendor" value="SonicWall"/>
6108
6193
  <param pos="0" name="os.device" value="Firewall"/>
6109
6194
  <param pos="0" name="os.product" value="SonicOS"/>
6195
+ <param pos="0" name="hw.vendor" value="SonicWall"/>
6110
6196
  <param pos="1" name="hw.product"/>
6111
6197
  <param pos="2" name="os.version"/>
6112
6198
  <param pos="0" name="os.cpe23" value="cpe:/o:sonicwall:sonicos:{os.version}"/>
@@ -6126,6 +6212,7 @@ Copyright (c) 1995-2005 by Cisco Systems
6126
6212
  <param pos="0" name="os.device" value="Firewall"/>
6127
6213
  <param pos="0" name="os.product" value="SonicOS"/>
6128
6214
  <param pos="0" name="os.cpe23" value="cpe:/o:sonicwall:sonicos:-"/>
6215
+ <param pos="0" name="hw.vendor" value="SonicWall"/>
6129
6216
  <param pos="1" name="hw.family"/>
6130
6217
  <param pos="2" name="hw.product"/>
6131
6218
  </fingerprint>
@@ -6905,7 +6992,7 @@ Copyright (c) 1995-2005 by Cisco Systems
6905
6992
  <example>silex PocketPro 100s</example>
6906
6993
  <example>silex PocketPro 100s compatible with an HP JETDIRECT EX</example>
6907
6994
  <param pos="0" name="os.vendor" value="Troy"/>
6908
- <param pos="0" name="os.device" value="Print server"/>
6995
+ <param pos="0" name="os.device" value="Print Server"/>
6909
6996
  <param pos="0" name="os.product" value="PocketPro"/>
6910
6997
  </fingerprint>
6911
6998
 
@@ -6923,6 +7010,73 @@ Copyright (c) 1995-2005 by Cisco Systems
6923
7010
  <param pos="0" name="os.device" value="Multifunction Device"/>
6924
7011
  </fingerprint>
6925
7012
 
7013
+ <!--======================================================================
7014
+ UBIQUITI
7015
+ =======================================================================-->
7016
+
7017
+ <fingerprint pattern="^(UAP-[^\s]+) ([0-9][.a-zA-Z0-9\-]+)$">
7018
+ <description>Ubiquiti Wireless UAP</description>
7019
+ <example hw.product="UAP-AC-Mesh-Pro" hw.version="4.3.20.11298">UAP-AC-Mesh-Pro 4.3.20.11298</example>
7020
+ <param pos="0" name="hw.vendor" value="Ubiquiti"/>
7021
+ <param pos="0" name="hw.device" value="WAP"/>
7022
+ <param pos="1" name="hw.product"/>
7023
+ <param pos="2" name="hw.version"/>
7024
+ <param pos="0" name="os.vendor" value="Ubiquiti"/>
7025
+ <param pos="0" name="os.family" value="Linux"/>
7026
+ <param pos="0" name="os.device" value="WAP"/>
7027
+ </fingerprint>
7028
+
7029
+ <fingerprint pattern="^(EdgeSwitch [^,]+), ([0-9][.a-zA-Z0-9\-]+), Linux ([0-9][.a-zA-Z0-9\-]+)">
7030
+ <description>Ubiquiti EdgeSwitch w/Version and Linux version</description>
7031
+ <example hw.product="EdgeSwitch 48-Port Lite" hw.version="1.8.1.5145168" os.version="3.6.5-1b505fb7">EdgeSwitch 48-Port Lite, 1.8.1.5145168, Linux 3.6.5-1b505fb7, 1.1.0.5102011</example>
7032
+ <param pos="0" name="hw.vendor" value="Ubiquiti"/>
7033
+ <param pos="0" name="hw.device" value="Switch"/>
7034
+ <param pos="1" name="hw.product"/>
7035
+ <param pos="2" name="hw.version"/>
7036
+ <param pos="0" name="os.vendor" value="Ubiquiti"/>
7037
+ <param pos="0" name="os.family" value="Linux"/>
7038
+ <param pos="0" name="os.device" value="Switch"/>
7039
+ <param pos="3" name="os.version"/>
7040
+ </fingerprint>
7041
+
7042
+ <fingerprint pattern="^(USW GigaBit Ethernet Switch), firmware v?([0-9][.a-zA-Z0-9\-]+)$">
7043
+ <description>Ubiquiti GigaBit Ethernet Switch w/Version</description>
7044
+ <example hw.product="USW GigaBit Ethernet Switch" hw.version="5.34.0.12180">USW GigaBit Ethernet Switch, firmware 5.34.0.12180</example>
7045
+ <example hw.product="USW GigaBit Ethernet Switch" hw.version="4.3.20.1129">USW GigaBit Ethernet Switch, firmware v4.3.20.1129</example>
7046
+ <param pos="0" name="hw.vendor" value="Ubiquiti"/>
7047
+ <param pos="0" name="hw.device" value="Switch"/>
7048
+ <param pos="1" name="hw.product"/>
7049
+ <param pos="2" name="hw.version"/>
7050
+ <param pos="0" name="os.vendor" value="Ubiquiti"/>
7051
+ <param pos="0" name="os.family" value="Linux"/>
7052
+ <param pos="0" name="os.device" value="Switch"/>
7053
+ </fingerprint>
7054
+
7055
+ <fingerprint pattern="^(USW-[^\s]+), ([0-9][.a-zA-Z0-9\-]+), Linux ([0-9][.a-zA-Z0-9\-]+)$">
7056
+ <description>Ubiquiti Switch w/Version and Linux version</description>
7057
+ <example hw.product="USW-8P-60" hw.version="4.3.20.11298" os.version="3.6.5">USW-8P-60, 4.3.20.11298, Linux 3.6.5</example>
7058
+ <param pos="0" name="hw.vendor" value="Ubiquiti"/>
7059
+ <param pos="0" name="hw.device" value="Switch"/>
7060
+ <param pos="1" name="hw.product"/>
7061
+ <param pos="2" name="hw.version"/>
7062
+ <param pos="0" name="os.vendor" value="Ubiquiti"/>
7063
+ <param pos="0" name="os.family" value="Linux"/>
7064
+ <param pos="0" name="os.device" value="Switch"/>
7065
+ <param pos="3" name="os.version"/>
7066
+ </fingerprint>
7067
+
7068
+ <fingerprint pattern="^(USW-[^\s]+), ([0-9][.a-zA-Z0-9\-]+)$">
7069
+ <description>Ubiquiti Switch w/Version (no Linux version)</description>
7070
+ <example hw.product="USW-5-Flex" hw.version="4.0.80.10875">USW-5-Flex, 4.0.80.10875</example>
7071
+ <param pos="0" name="hw.vendor" value="Ubiquiti"/>
7072
+ <param pos="0" name="hw.device" value="Switch"/>
7073
+ <param pos="1" name="hw.product"/>
7074
+ <param pos="2" name="hw.version"/>
7075
+ <param pos="0" name="os.vendor" value="Ubiquiti"/>
7076
+ <param pos="0" name="os.family" value="Linux"/>
7077
+ <param pos="0" name="os.device" value="Switch"/>
7078
+ </fingerprint>
7079
+
6926
7080
  <!--======================================================================
6927
7081
  UNISYS
6928
7082
  =======================================================================-->
@@ -6948,15 +7102,30 @@ Copyright (c) 1995-2005 by Cisco Systems
6948
7102
  VMware
6949
7103
  =======================================================================-->
6950
7104
 
6951
- <fingerprint pattern="^(VMware ESXi?) (\d\.\d+\.\d+) build-\d+ VMware, Inc\. (\S+)$">
6952
- <description>VMware ESX/ESXi</description>
6953
- <example os.product="VMware ESXi" os.version="5.1.0" os.arch="x86_64">VMware ESXi 5.1.0 build-1157734 VMware, Inc. x86_64</example>
6954
- <example os.product="VMware ESX" os.version="5.0.0" os.arch="x86_64">VMware ESX 5.0.0 build-623860 VMware, Inc. x86_64</example>
7105
+ <fingerprint pattern="^VMware ESXi (\d\.\d+\.\d+) build-\d+ VMware, Inc\. (\S+)$">
7106
+ <description>VMware ESXi</description>
7107
+ <example os.version="5.1.0" os.arch="x86_64">VMware ESXi 5.1.0 build-1157734 VMware, Inc. x86_64</example>
6955
7108
  <param pos="0" name="os.vendor" value="VMware"/>
6956
7109
  <param pos="0" name="os.family" value="VMware ESX/ESXi"/>
6957
- <param pos="1" name="os.product"/>
6958
- <param pos="2" name="os.version"/>
6959
- <param pos="3" name="os.arch"/>
7110
+ <param pos="0" name="os.product" value="VMware ESXi Server"/>
7111
+ <param pos="1" name="os.version"/>
7112
+ <param pos="2" name="os.arch"/>
7113
+ <param pos="0" name="os.device" value="Hypervisor"/>
7114
+ <param pos="0" name="os.cpe23" value="cpe:/o:vmware:esxi:{os.version}"/>
7115
+ <param pos="0" name="hw.device" value="Hypervisor"/>
7116
+ </fingerprint>
7117
+
7118
+ <fingerprint pattern="^VMware ESX (\d\.\d+\.\d+) build-\d+ VMware, Inc\. (\S+)$">
7119
+ <description>VMware ESX</description>
7120
+ <example os.version="5.0.0" os.arch="x86_64">VMware ESX 5.0.0 build-623860 VMware, Inc. x86_64</example>
7121
+ <param pos="0" name="os.vendor" value="VMware"/>
7122
+ <param pos="0" name="os.family" value="VMware ESX/ESXi"/>
7123
+ <param pos="0" name="os.product" value="VMware ESX Server"/>
7124
+ <param pos="1" name="os.version"/>
7125
+ <param pos="2" name="os.arch"/>
7126
+ <param pos="0" name="os.device" value="Hypervisor"/>
7127
+ <param pos="0" name="os.cpe23" value="cpe:/o:vmware:esx:{os.version}"/>
7128
+ <param pos="0" name="hw.device" value="Hypervisor"/>
6960
7129
  </fingerprint>
6961
7130
 
6962
7131
  <fingerprint pattern="^&quot;vSphere Management Assistant ([\d\.]+)&quot;$">
@@ -7188,7 +7357,7 @@ Copyright (c) 1995-2005 by Cisco Systems
7188
7357
  <example>ZebraNet PrintServer</example>
7189
7358
  <param pos="0" name="os.vendor" value="ZebraNet"/>
7190
7359
  <param pos="0" name="os.product" value="PrintServer"/>
7191
- <param pos="0" name="os.device" value="Print server"/>
7360
+ <param pos="0" name="os.device" value="Print Server"/>
7192
7361
  </fingerprint>
7193
7362
 
7194
7363
  <!--======================================================================
@@ -7200,7 +7369,7 @@ Copyright (c) 1995-2005 by Cisco Systems
7200
7369
  <example>Prestige 645</example>
7201
7370
  <param pos="0" name="os.vendor" value="Zyxel"/>
7202
7371
  <param pos="0" name="os.product" value="Prestige 645"/>
7203
- <param pos="0" name="os.device" value="Broadband router"/>
7372
+ <param pos="0" name="os.device" value="Broadband Router"/>
7204
7373
  </fingerprint>
7205
7374
 
7206
7375
  <fingerprint pattern="^Prestige 660HW-61$">
@@ -7232,7 +7401,7 @@ Copyright (c) 1995-2005 by Cisco Systems
7232
7401
  <example>Prestige 642R-13</example>
7233
7402
  <param pos="0" name="os.vendor" value="Zyxel"/>
7234
7403
  <param pos="0" name="os.product" value="Prestige 642R-13"/>
7235
- <param pos="0" name="os.device" value="Broadband router"/>
7404
+ <param pos="0" name="os.device" value="Broadband Router"/>
7236
7405
  </fingerprint>
7237
7406
 
7238
7407
  <fingerprint pattern="^Prestige 660ME-61$">
@@ -7240,7 +7409,7 @@ Copyright (c) 1995-2005 by Cisco Systems
7240
7409
  <example>Prestige 660ME-61</example>
7241
7410
  <param pos="0" name="os.vendor" value="Zyxel"/>
7242
7411
  <param pos="0" name="os.product" value="Prestige 660ME-61"/>
7243
- <param pos="0" name="os.device" value="Broadband router"/>
7412
+ <param pos="0" name="os.device" value="Broadband Router"/>
7244
7413
  </fingerprint>
7245
7414
 
7246
7415
  <fingerprint pattern="^Prestige 650R-T3$">
@@ -7248,7 +7417,7 @@ Copyright (c) 1995-2005 by Cisco Systems
7248
7417
  <example>Prestige 650R-T3</example>
7249
7418
  <param pos="0" name="os.vendor" value="Zyxel"/>
7250
7419
  <param pos="0" name="os.product" value="Prestige 650R-T3"/>
7251
- <param pos="0" name="os.device" value="Broadband router"/>
7420
+ <param pos="0" name="os.device" value="Broadband Router"/>
7252
7421
  </fingerprint>
7253
7422
 
7254
7423
  </fingerprints>