recog 2.3.18 → 2.3.22

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (73) hide show
  1. checksums.yaml +4 -4
  2. data/.github/dependabot.yml +8 -0
  3. data/.github/workflows/ci.yml +26 -0
  4. data/.github/workflows/verify.yml +89 -0
  5. data/CONTRIBUTING.md +6 -0
  6. data/README.md +17 -0
  7. data/bin/recog_standardize +33 -12
  8. data/bin/recog_verify +1 -2
  9. data/cpe-remap.yaml +355 -200
  10. data/features/verify.feature +14 -14
  11. data/identifiers/README.md +24 -10
  12. data/identifiers/fields.txt +105 -0
  13. data/identifiers/hw_device.txt +8 -0
  14. data/identifiers/hw_family.txt +19 -0
  15. data/identifiers/hw_product.txt +122 -0
  16. data/identifiers/os_device.txt +2 -1
  17. data/identifiers/os_family.txt +3 -0
  18. data/identifiers/os_product.txt +46 -8
  19. data/identifiers/service_family.txt +10 -1
  20. data/identifiers/service_product.txt +90 -2
  21. data/identifiers/vendor.txt +104 -0
  22. data/lib/recog/db.rb +2 -1
  23. data/lib/recog/fingerprint.rb +18 -5
  24. data/lib/recog/nizer.rb +1 -82
  25. data/lib/recog/verifier.rb +5 -5
  26. data/lib/recog/verifier_factory.rb +3 -3
  27. data/lib/recog/verify_reporter.rb +14 -4
  28. data/lib/recog/version.rb +1 -1
  29. data/requirements.txt +1 -1
  30. data/spec/lib/fingerprint_self_test_spec.rb +1 -0
  31. data/spec/lib/recog/verify_reporter_spec.rb +69 -0
  32. data/tools/dev/hooks/pre-commit +21 -0
  33. data/update_cpes.py +19 -6
  34. data/xml/apache_modules.xml +60 -0
  35. data/xml/apache_os.xml +38 -38
  36. data/xml/dhcp_vendor_class.xml +206 -0
  37. data/xml/dns_versionbind.xml +11 -1
  38. data/xml/favicons.xml +270 -45
  39. data/xml/ftp_banners.xml +89 -64
  40. data/xml/h323_callresp.xml +99 -99
  41. data/xml/hp_pjl_id.xml +3 -3
  42. data/xml/html_title.xml +1051 -62
  43. data/xml/http_cookies.xml +294 -85
  44. data/xml/http_servers.xml +551 -122
  45. data/xml/http_wwwauth.xml +139 -43
  46. data/xml/imap_banners.xml +8 -8
  47. data/xml/ldap_searchresult.xml +1 -0
  48. data/xml/mdns_device-info_txt.xml +720 -27
  49. data/xml/mysql_banners.xml +3 -2
  50. data/xml/nntp_banners.xml +4 -4
  51. data/xml/ntp_banners.xml +79 -65
  52. data/xml/operating_system.xml +6 -6
  53. data/xml/pop_banners.xml +11 -11
  54. data/xml/rsh_resp.xml +3 -3
  55. data/xml/rtsp_servers.xml +7 -0
  56. data/xml/sip_banners.xml +374 -9
  57. data/xml/sip_user_agents.xml +377 -5
  58. data/xml/smb_native_lm.xml +32 -1
  59. data/xml/smb_native_os.xml +160 -33
  60. data/xml/smtp_banners.xml +168 -129
  61. data/xml/smtp_ehlo.xml +1 -1
  62. data/xml/smtp_expn.xml +1 -0
  63. data/xml/smtp_help.xml +10 -10
  64. data/xml/smtp_noop.xml +2 -2
  65. data/xml/smtp_vrfy.xml +1 -0
  66. data/xml/snmp_sysdescr.xml +508 -214
  67. data/xml/snmp_sysobjid.xml +25 -25
  68. data/xml/ssh_banners.xml +145 -29
  69. data/xml/telnet_banners.xml +240 -61
  70. data/xml/tls_jarm.xml +162 -0
  71. data/xml/x509_issuers.xml +237 -2
  72. data/xml/x509_subjects.xml +369 -49
  73. metadata +10 -3
data/xml/html_title.xml CHANGED
@@ -1,25 +1,80 @@
1
1
  <?xml version='1.0' encoding='UTF-8'?>
2
- <fingerprints matches="html_title" database_type="service" preference="0.90">
2
+ <fingerprints matches="html_title" protocol="http" database_type="service" preference="0.90">
3
3
  <!-- HTML Title elements found in HTTP response bodies are matched against these patterns to fingerprint HTTP servers. -->
4
4
 
5
5
  <fingerprint pattern="^301 Moved Permanently$">
6
6
  <description>301 Moved Permanently - generic -- assert nothing.</description>
7
7
  <example>301 Moved Permanently</example>
8
+ <param pos="0" name="hw.certainty" value="0.0"/>
9
+ <param pos="0" name="os.certainty" value="0.0"/>
10
+ <param pos="0" name="service.certainty" value="0.0"/>
11
+ </fingerprint>
12
+
13
+ <fingerprint pattern="^302 Found$">
14
+ <description>302 Found - generic -- assert nothing.</description>
15
+ <example>302 Found</example>
16
+ <param pos="0" name="hw.certainty" value="0.0"/>
17
+ <param pos="0" name="os.certainty" value="0.0"/>
18
+ <param pos="0" name="service.certainty" value="0.0"/>
8
19
  </fingerprint>
9
20
 
10
21
  <fingerprint pattern="^400 Bad Request$">
11
22
  <description>400 Bad Request - generic -- assert nothing.</description>
12
23
  <example>400 Bad Request</example>
24
+ <param pos="0" name="hw.certainty" value="0.0"/>
25
+ <param pos="0" name="os.certainty" value="0.0"/>
26
+ <param pos="0" name="service.certainty" value="0.0"/>
13
27
  </fingerprint>
14
28
 
15
29
  <fingerprint pattern="^401 Unauthorized$">
16
30
  <description>401 Unauthorized - generic -- assert nothing.</description>
17
31
  <example>401 Unauthorized</example>
32
+ <param pos="0" name="hw.certainty" value="0.0"/>
33
+ <param pos="0" name="os.certainty" value="0.0"/>
34
+ <param pos="0" name="service.certainty" value="0.0"/>
35
+ </fingerprint>
36
+
37
+ <fingerprint pattern="^403 Forbidden$">
38
+ <description>403 Forbidden - generic -- assert nothing.</description>
39
+ <example>403 Forbidden</example>
40
+ <param pos="0" name="hw.certainty" value="0.0"/>
41
+ <param pos="0" name="os.certainty" value="0.0"/>
42
+ <param pos="0" name="service.certainty" value="0.0"/>
18
43
  </fingerprint>
19
44
 
20
- <fingerprint pattern="^404 Not Found$">
45
+ <fingerprint pattern="^(?:404 )?Not Found$">
21
46
  <description>404 Not Found - generic -- assert nothing.</description>
22
47
  <example>404 Not Found</example>
48
+ <example>Not Found</example>
49
+ <param pos="0" name="hw.certainty" value="0.0"/>
50
+ <param pos="0" name="os.certainty" value="0.0"/>
51
+ <param pos="0" name="service.certainty" value="0.0"/>
52
+ </fingerprint>
53
+
54
+ <fingerprint pattern="^Invalid URL$">
55
+ <description>Invalid URL - generic -- assert nothing.</description>
56
+ <example>Invalid URL</example>
57
+ <param pos="0" name="hw.certainty" value="0.0"/>
58
+ <param pos="0" name="os.certainty" value="0.0"/>
59
+ <param pos="0" name="service.certainty" value="0.0"/>
60
+ </fingerprint>
61
+
62
+ <fingerprint pattern="^ERROR: The request could not be satisfied$">
63
+ <description>Amazon CloudFront web load balancer endpoint</description>
64
+ <example>ERROR: The request could not be satisfied</example>
65
+ <param pos="0" name="service.vendor" value="Amazon"/>
66
+ <param pos="0" name="service.family" value="CloudFront"/>
67
+ <param pos="0" name="service.product" value="CloudFront Load Balancer"/>
68
+ <param pos="0" name="service.cpe23" value="cpe:/a:amazon:amazon_cloudfront:-"/>
69
+ </fingerprint>
70
+
71
+ <fingerprint pattern="^Microsoft Azure Web App - Error 404$">
72
+ <description>Microsoft Azure Web App - Error 404</description>
73
+ <example>Microsoft Azure Web App - Error 404</example>
74
+ <param pos="0" name="service.vendor" value="Microsoft"/>
75
+ <param pos="0" name="service.family" value="Azure"/>
76
+ <param pos="0" name="service.product" value="Azure App Service on Azure Stack"/>
77
+ <param pos="0" name="service.cpe23" value="cpe:/a:microsoft:azure_app_service_on_azure_stack:-"/>
23
78
  </fingerprint>
24
79
 
25
80
  <fingerprint pattern="^Index of /">
@@ -103,9 +158,10 @@
103
158
  <param pos="0" name="service.cpe23" value="cpe:/a:apache:tomcat:-"/>
104
159
  </fingerprint>
105
160
 
106
- <fingerprint pattern="^Apache Tomcat/(\S+)$">
161
+ <fingerprint pattern="^Apache Tomcat/(\S+)(?: - Error report)?$">
107
162
  <description>Apache tomcat with minimal version information</description>
108
163
  <example service.version="8.0.32">Apache Tomcat/8.0.32</example>
164
+ <example service.version="5.5.29">Apache Tomcat/5.5.29 - Error report</example>
109
165
  <param pos="0" name="service.vendor" value="Apache"/>
110
166
  <param pos="0" name="service.product" value="Tomcat"/>
111
167
  <param pos="0" name="service.family" value="Tomcat"/>
@@ -113,6 +169,32 @@
113
169
  <param pos="0" name="service.cpe23" value="cpe:/a:apache:tomcat:{service.version}"/>
114
170
  </fingerprint>
115
171
 
172
+ <fingerprint pattern="^Apache Tomcat/(\S+) \(Ubuntu\) - Error report$">
173
+ <description>Apache Tomcat - Error report on Ubuntu</description>
174
+ <example service.version="8.0.32">Apache Tomcat/8.0.32 (Ubuntu) - Error report</example>
175
+ <param pos="0" name="service.vendor" value="Apache"/>
176
+ <param pos="0" name="service.product" value="Tomcat"/>
177
+ <param pos="0" name="service.family" value="Tomcat"/>
178
+ <param pos="1" name="service.version"/>
179
+ <param pos="0" name="service.cpe23" value="cpe:/a:apache:tomcat:{service.version}"/>
180
+ <param pos="0" name="os.vendor" value="Ubuntu"/>
181
+ <param pos="0" name="os.product" value="Linux"/>
182
+ <param pos="0" name="os.cpe23" value="cpe:/o:canonical:ubuntu_linux:-"/>
183
+ </fingerprint>
184
+
185
+ <fingerprint pattern="^Apache Tomcat/(\S+) \(Debian\) - Error report$">
186
+ <description>Apache Tomcat - Error report on Debian</description>
187
+ <example service.version="7.0.56">Apache Tomcat/7.0.56 (Debian) - Error report</example>
188
+ <param pos="0" name="service.vendor" value="Apache"/>
189
+ <param pos="0" name="service.product" value="Tomcat"/>
190
+ <param pos="0" name="service.family" value="Tomcat"/>
191
+ <param pos="1" name="service.version"/>
192
+ <param pos="0" name="service.cpe23" value="cpe:/a:apache:tomcat:{service.version}"/>
193
+ <param pos="0" name="os.vendor" value="Debian"/>
194
+ <param pos="0" name="os.product" value="Linux"/>
195
+ <param pos="0" name="os.cpe23" value="cpe:/o:debian:debian_linux:-"/>
196
+ </fingerprint>
197
+
116
198
  <fingerprint pattern="^AiCloud">
117
199
  <description>ASUS AiCloud</description>
118
200
  <example>AiCloud</example>
@@ -240,7 +322,7 @@
240
322
  <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows:-"/>
241
323
  </fingerprint>
242
324
 
243
- <fingerprint pattern="^(?:NETIASPOT Management Console|Konsola zarzdzania NETIASPOT)$">
325
+ <fingerprint pattern="^NETIASPOT Management Console|Konsola zarzdzania NETIASPOT$">
244
326
  <description>Netia Spot wireless router</description>
245
327
  <example>Konsola zarzdzania NETIASPOT</example>
246
328
  <example>NETIASPOT Management Console</example>
@@ -255,6 +337,7 @@
255
337
  <param pos="0" name="hw.vendor" value="Philips"/>
256
338
  <param pos="0" name="hw.product" value="Hue"/>
257
339
  <param pos="0" name="hw.device" value="Light Bulb"/>
340
+ <param pos="0" name="hw.cpe23" value="cpe:/h:philips:hue:-"/>
258
341
  </fingerprint>
259
342
 
260
343
  <fingerprint pattern="LANDesk\(R\) Management Agent$">
@@ -291,7 +374,7 @@
291
374
  <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows:-"/>
292
375
  </fingerprint>
293
376
 
294
- <fingerprint pattern="^(?i)Default (?:Parallels )?Plesk (?:Panel )?Page$">
377
+ <fingerprint pattern="(?i)^Default (?:Parallels )?Plesk (?:Panel )?Page$">
295
378
  <description>Plesk web hosting platform with no version</description>
296
379
  <example>Default Parallels Plesk Panel Page</example>
297
380
  <example>Default Parallels Plesk Page</example>
@@ -301,6 +384,14 @@
301
384
  <param pos="0" name="service.cpe23" value="cpe:/a:parallels:parallels_plesk_panel:-"/>
302
385
  </fingerprint>
303
386
 
387
+ <fingerprint pattern="^Sage X3$">
388
+ <description>Sage X3 Syracuse Web Server</description>
389
+ <example>Sage X3</example>
390
+ <param pos="0" name="service.vendor" value="Sage"/>
391
+ <param pos="0" name="service.family" value="Sage X3 Syracuse Web Server"/>
392
+ <param pos="0" name="service.product" value="Sage X3 Syracuse Web Server"/>
393
+ </fingerprint>
394
+
304
395
  <fingerprint pattern="^Web Viewer for Samsung DVR$">
305
396
  <description>Samsung DVRs</description>
306
397
  <example>Web Viewer for Samsung DVR</example>
@@ -308,15 +399,41 @@
308
399
  <param pos="0" name="hw.device" value="DVR"/>
309
400
  </fingerprint>
310
401
 
311
- <fingerprint pattern="^(?i)(?:Dell )?Sonicwall - Authentication$">
402
+ <fingerprint pattern="(?i)^(?:Dell )?Sonicwall - Authentication$">
312
403
  <description>Sonicwall firewalls</description>
313
404
  <example>SonicWall - Authentication</example>
314
405
  <param pos="0" name="os.vendor" value="SonicWall"/>
315
406
  <param pos="0" name="os.device" value="Firewall"/>
316
407
  <param pos="0" name="os.family" value="SonicOS"/>
408
+ <param pos="0" name="os.product" value="SonicOS"/>
409
+ <param pos="0" name="os.cpe23" value="cpe:/o:sonicwall:sonicos:-"/>
410
+ </fingerprint>
411
+
412
+ <fingerprint pattern="^SonicWall Universal Management Suite v(\d+\.\d+)$">
413
+ <description>SonicWall Universal Management Appliance - with version</description>
414
+ <example service.version="8.7">SonicWall Universal Management Suite v8.7</example>
415
+ <param pos="0" name="service.vendor" value="SonicWall"/>
416
+ <param pos="0" name="service.product" value="Universal Management Appliance"/>
417
+ <param pos="1" name="service.version"/>
418
+ <param pos="0" name="service.cpe23" value="cpe:/a:sonicwall:universal_management_appliance:{service.version}"/>
419
+ <param pos="0" name="os.vendor" value="SonicWall"/>
420
+ <param pos="0" name="os.family" value="SonicOS"/>
421
+ <param pos="0" name="os.product" value="SonicOS"/>
422
+ <param pos="0" name="os.cpe23" value="cpe:/o:sonicwall:sonicos:-"/>
423
+ </fingerprint>
424
+
425
+ <fingerprint pattern="^Fireware XTM User Authentication$">
426
+ <description>WatchGuard Fireware XTM login page</description>
427
+ <example>Fireware XTM User Authentication</example>
428
+ <param pos="0" name="service.vendor" value="WatchGuard"/>
429
+ <param pos="0" name="service.product" value="Fireware XTM"/>
430
+ <param pos="0" name="service.cpe23" value="cpe:/a:watchguard:fireware_xtm:-"/>
431
+ <param pos="0" name="os.vendor" value="WatchGuard"/>
432
+ <param pos="0" name="os.product" value="Fireware"/>
433
+ <param pos="0" name="os.cpe23" value="cpe:/o:watchguard:fireware:-"/>
317
434
  </fingerprint>
318
435
 
319
- <fingerprint pattern="^(.*).nbsp;-.nbsp;Synology.nbsp;DiskStation$">
436
+ <fingerprint pattern="^(.{0,512}).nbsp;-.nbsp;Synology.nbsp;DiskStation$">
320
437
  <description>Synology DiskStation</description>
321
438
  <example host.name="DiskStation">DiskStation&amp;nbsp;-&amp;nbsp;Synology&amp;nbsp;DiskStation</example>
322
439
  <example host.name="DS218">DS218&amp;nbsp;-&amp;nbsp;Synology&amp;nbsp;DiskStation</example>
@@ -334,6 +451,10 @@
334
451
  <description>Synology with WebStation web hosting</description>
335
452
  <example>Hello! Welcome to Synology Web Station!</example>
336
453
  <example>Hallo! Herzlich Willkommen bei Synology Web Station!</example>
454
+ <param pos="0" name="service.vendor" value="Synology"/>
455
+ <param pos="0" name="service.family" value="Diskstation"/>
456
+ <param pos="0" name="service.product" value="Web Station"/>
457
+ <param pos="0" name="service.cpe23" value="cpe:/a:synology:web_station:-"/>
337
458
  <param pos="0" name="hw.vendor" value="Synology"/>
338
459
  <param pos="0" name="hw.family" value="DiskStation"/>
339
460
  <param pos="0" name="hw.device" value="NAS"/>
@@ -343,6 +464,14 @@
343
464
  <param pos="0" name="os.vendor" value="Synology"/>
344
465
  </fingerprint>
345
466
 
467
+ <fingerprint pattern="^Synology.nbsp;Router.nbsp;-.nbsp;synology$">
468
+ <description>Synology Router</description>
469
+ <example>Synology&amp;nbsp;Router&amp;nbsp;-&amp;nbsp;synology</example>
470
+ <param pos="0" name="hw.vendor" value="Synology"/>
471
+ <param pos="0" name="hw.device" value="Router"/>
472
+ <param pos="0" name="hw.certainty" value="0.7"/>
473
+ </fingerprint>
474
+
346
475
  <fingerprint pattern="^Web Filter Block Override$">
347
476
  <description>Fortinet FortiGate/Fortiguard Web Filter</description>
348
477
  <example>Web Filter Block Override</example>
@@ -356,6 +485,19 @@
356
485
  <param pos="0" name="hw.device" value="Firewall"/>
357
486
  </fingerprint>
358
487
 
488
+ <fingerprint pattern="^FortiGate$">
489
+ <description>Fortinet FortiGate Network Firewall</description>
490
+ <example>FortiGate</example>
491
+ <param pos="0" name="os.vendor" value="Fortinet"/>
492
+ <param pos="0" name="os.family" value="FortiOS"/>
493
+ <param pos="0" name="os.product" value="FortiOS"/>
494
+ <param pos="0" name="os.device" value="Firewall"/>
495
+ <param pos="0" name="os.cpe23" value="cpe:/o:fortinet:fortios:-"/>
496
+ <param pos="0" name="hw.vendor" value="Fortinet"/>
497
+ <param pos="0" name="hw.family" value="FortiGate"/>
498
+ <param pos="0" name="hw.device" value="Firewall"/>
499
+ </fingerprint>
500
+
359
501
  <!-- Various products by Ubiquiti networks -->
360
502
 
361
503
  <fingerprint pattern="^Ubiquiti Networks$">
@@ -418,7 +560,7 @@
418
560
  <param pos="0" name="service.cpe23" value="cpe:/a:ui:unifi_video:-"/>
419
561
  </fingerprint>
420
562
 
421
- <fingerprint pattern="^(?:UniFi NVR: Software Portal|airVision: \[NVR\] - Software Portal)$">
563
+ <fingerprint pattern="^UniFi NVR: Software Portal|airVision: \[NVR\] - Software Portal$">
422
564
  <description>UniFi NVR for recording from UniFi video cameras</description>
423
565
  <example>UniFi NVR: Software Portal</example>
424
566
  <example>airVision: [NVR] - Software Portal</example>
@@ -428,6 +570,58 @@
428
570
  <param pos="0" name="hw.device" value="DVR"/>
429
571
  </fingerprint>
430
572
 
573
+ <fingerprint pattern="^Welcome to AmpliFi$">
574
+ <description>Ubiquiti AmpliFi Router</description>
575
+ <example>Welcome to AmpliFi</example>
576
+ <param pos="0" name="hw.vendor" value="Ubiquiti"/>
577
+ <param pos="0" name="hw.product" value="AmpliFi"/>
578
+ <param pos="0" name="hw.device" value="Router"/>
579
+ </fingerprint>
580
+
581
+ <!-- Various products by Zyxel -->
582
+
583
+ <fingerprint pattern="^USG60$">
584
+ <description>Zyxel USG60 Unified Security Gateway</description>
585
+ <example>USG60</example>
586
+ <param pos="0" name="os.vendor" value="Zyxel"/>
587
+ <param pos="0" name="os.product" value="USG60 firmware"/>
588
+ <param pos="0" name="os.device" value="Firewall"/>
589
+ <param pos="0" name="os.cpe23" value="cpe:/o:zyxel:usg60_firmware:-"/>
590
+ <param pos="0" name="hw.vendor" value="Zyxel"/>
591
+ <param pos="0" name="hw.family" value="Unified Security Gateway"/>
592
+ <param pos="0" name="hw.product" value="USG60"/>
593
+ <param pos="0" name="hw.device" value="Firewall"/>
594
+ <param pos="0" name="hw.cpe23" value="cpe:/h:zyxel:usg60:-"/>
595
+ </fingerprint>
596
+
597
+ <fingerprint pattern="^USG40$">
598
+ <description>Zyxel USG40 Unified Security Gateway</description>
599
+ <example>USG40</example>
600
+ <param pos="0" name="os.vendor" value="Zyxel"/>
601
+ <param pos="0" name="os.product" value="USG40 firmware"/>
602
+ <param pos="0" name="os.device" value="Firewall"/>
603
+ <param pos="0" name="os.cpe23" value="cpe:/o:zyxel:usg40_firmware:-"/>
604
+ <param pos="0" name="hw.vendor" value="Zyxel"/>
605
+ <param pos="0" name="hw.family" value="Unified Security Gateway"/>
606
+ <param pos="0" name="hw.product" value="USG40"/>
607
+ <param pos="0" name="hw.device" value="Firewall"/>
608
+ <param pos="0" name="hw.cpe23" value="cpe:/h:zyxel:usg40:-"/>
609
+ </fingerprint>
610
+
611
+ <fingerprint pattern="^USG20-VPN$">
612
+ <description>Zyxel USG20-VPN Unified Security Gateway</description>
613
+ <example>USG20-VPN</example>
614
+ <param pos="0" name="os.vendor" value="Zyxel"/>
615
+ <param pos="0" name="os.product" value="USG20-VPN firmware"/>
616
+ <param pos="0" name="os.device" value="Firewall"/>
617
+ <param pos="0" name="os.cpe23" value="cpe:/o:zyxel:usg20-vpn_firmware:-"/>
618
+ <param pos="0" name="hw.vendor" value="Zyxel"/>
619
+ <param pos="0" name="hw.family" value="Unified Security Gateway"/>
620
+ <param pos="0" name="hw.product" value="USG20-VPN"/>
621
+ <param pos="0" name="hw.device" value="Firewall"/>
622
+ <param pos="0" name="hw.cpe23" value="cpe:/h:zyxel:usg20-vpn:-"/>
623
+ </fingerprint>
624
+
431
625
  <fingerprint pattern="^RomPager Embedded Web Server Toolkit$">
432
626
  <description>Embedded HTTP server used by many vendors and device
433
627
  types, including APC, 3Com, Andover Controls, Cisco VoIP, D-Link,
@@ -439,6 +633,18 @@
439
633
  <param pos="0" name="service.product" value="RomPager"/>
440
634
  </fingerprint>
441
635
 
636
+ <fingerprint pattern="^Wowza Streaming Engine 4 (Subscription|Perpetual Pro) Edition (\d\.[\w.]+) build(\d+)$">
637
+ <description>Wowza Streaming Engine</description>
638
+ <example service.version="4.7.7.01" service.version.version="20190222144406">Wowza Streaming Engine 4 Subscription Edition 4.7.7.01 build20190222144406</example>
639
+ <example service.edition="Perpetual Pro">Wowza Streaming Engine 4 Perpetual Pro Edition 4.8.8.01 build20201216140014</example>
640
+ <param pos="0" name="service.vendor" value="Wowza"/>
641
+ <param pos="0" name="service.product" value="Streaming Engine"/>
642
+ <param pos="1" name="service.edition"/>
643
+ <param pos="2" name="service.version"/>
644
+ <param pos="3" name="service.version.version"/>
645
+ <param pos="0" name="service.cpe23" value="cpe:/a:wowza:streaming_engine:{service.version}"/>
646
+ </fingerprint>
647
+
442
648
  <fingerprint pattern="^RouterOS router configuration page$">
443
649
  <description>MikroTik RouterOS router configuration page</description>
444
650
  <example>RouterOS router configuration page</example>
@@ -450,7 +656,17 @@
450
656
  <param pos="0" name="hw.device" value="Router"/>
451
657
  </fingerprint>
452
658
 
453
- <fingerprint pattern="^(?:Welcome to nginx!|Test Page for the Nginx HTTP Server)$">
659
+ <fingerprint pattern="^MikroTik SwOS$">
660
+ <description>MikroTik SwOS switch configuration page</description>
661
+ <example>MikroTik SwOS</example>
662
+ <param pos="0" name="os.vendor" value="MikroTik"/>
663
+ <param pos="0" name="os.device" value="Switch"/>
664
+ <param pos="0" name="os.product" value="SwOS"/>
665
+ <param pos="0" name="hw.vendor" value="MikroTik"/>
666
+ <param pos="0" name="hw.device" value="Switch"/>
667
+ </fingerprint>
668
+
669
+ <fingerprint pattern="^Welcome to nginx!|Test Page for the Nginx HTTP Server$">
454
670
  <description>Default OS-agnostic nginx</description>
455
671
  <example>Welcome to nginx!</example>
456
672
  <example>Test Page for the Nginx HTTP Server</example>
@@ -531,15 +747,20 @@
531
747
  <param pos="1" name="hw.product"/>
532
748
  </fingerprint>
533
749
 
534
- <fingerprint pattern="^Netgear Prosafe Plus Switch$">
750
+ <fingerprint pattern="(?i)^Netgear Prosafe Plus Switch$">
535
751
  <description>Netgear Prosafe Plus Switch</description>
536
752
  <example>Netgear Prosafe Plus Switch</example>
753
+ <example>NETGEAR ProSAFE Plus Switch</example>
754
+ <param pos="0" name="os.vendor" value="Netgear"/>
755
+ <param pos="0" name="os.device" value="Switch"/>
756
+ <param pos="0" name="os.product" value="Prosafe Firmware"/>
757
+ <param pos="0" name="os.cpe23" value="cpe:/o:netgear:prosafe_firmware:-"/>
537
758
  <param pos="0" name="hw.vendor" value="Netgear"/>
538
759
  <param pos="0" name="hw.device" value="Switch"/>
539
760
  <param pos="0" name="hw.product" value="Prosafe Plus"/>
540
761
  </fingerprint>
541
762
 
542
- <fingerprint pattern="^(.*).nbsp;Configuration and Management$">
763
+ <fingerprint pattern="^(.{0,256}).nbsp;Configuration and Management$">
543
764
  <description>Digi Terminal Servers</description>
544
765
  <example hw.product="Digi One SP">Digi One SP&amp;nbsp;Configuration and Management</example>
545
766
  <example hw.product="PortServer TS 4">PortServer TS 4&amp;nbsp;Configuration and Management</example>
@@ -552,6 +773,37 @@
552
773
  <param pos="0" name="os.product" value="NET+OS"/>
553
774
  </fingerprint>
554
775
 
776
+ <fingerprint pattern="^(?:TransPort )?(WR\S+) \(SN: (\d+)\) Configuration and Management$">
777
+ <description>Digi Cellular Routers</description>
778
+ <example hw.product="WR44v2" hw.serial_number="888111" digi.serial_number="888111">WR44v2 (SN: 888111) Configuration and Management</example>
779
+ <example hw.product="WR21" hw.serial_number="888111" digi.serial_number="888111">WR21 (SN: 888111) Configuration and Management</example>
780
+ <example hw.product="WR44v2" hw.serial_number="888111" digi.serial_number="888111">TransPort WR44v2 (SN: 888111) Configuration and Management</example>
781
+ <example hw.product="WR44RR" hw.serial_number="888111" digi.serial_number="888111">TransPort WR44RR (SN: 888111) Configuration and Management</example>
782
+ <example hw.product="WR44" hw.serial_number="888111" digi.serial_number="888111">TransPort WR44 (SN: 888111) Configuration and Management</example>
783
+ <param pos="0" name="hw.vendor" value="Digi"/>
784
+ <param pos="0" name="hw.device" value="Router"/>
785
+ <param pos="1" name="hw.product"/>
786
+ <param pos="2" name="digi.serial_number"/>
787
+ <param pos="2" name="hw.serial_number"/>
788
+ </fingerprint>
789
+
790
+ <fingerprint pattern="^Digi (\S+) - ([a-fA-F0-9]{12})">
791
+ <description>Digi TX Cellular Routers</description>
792
+ <example hw.product="TX54-Dual-Cellular" host.mac="0040FF100000">Digi TX54-Dual-Cellular - 0040FF100000</example>
793
+ <param pos="0" name="hw.vendor" value="Digi"/>
794
+ <param pos="0" name="hw.device" value="Router"/>
795
+ <param pos="1" name="hw.product"/>
796
+ <param pos="2" name="host.mac"/>
797
+ </fingerprint>
798
+
799
+ <fingerprint pattern="^Digi Configuration and Management$">
800
+ <description>Digi Cellular Routers (Generic)</description>
801
+ <example>Digi Configuration and Management</example>
802
+ <param pos="0" name="hw.vendor" value="Digi"/>
803
+ <param pos="0" name="hw.device" value="Router"/>
804
+ <param pos="0" name="hw.certainty" value="0.25"/>
805
+ </fingerprint>
806
+
555
807
  <fingerprint pattern="^NPort Web Console$">
556
808
  <description>Moxa NPort Terminal Servers</description>
557
809
  <example>NPort Web Console</example>
@@ -570,6 +822,14 @@
570
822
  <param pos="1" name="hw.product"/>
571
823
  </fingerprint>
572
824
 
825
+ <fingerprint pattern="^Lantronix WEB-Manager$">
826
+ <description>Lantronix UDS terminal server</description>
827
+ <example>Lantronix WEB-Manager</example>
828
+ <param pos="0" name="hw.vendor" value="Lantronix"/>
829
+ <param pos="0" name="hw.device" value="Device Server"/>
830
+ <param pos="0" name="hw.product" value="UDS"/>
831
+ </fingerprint>
832
+
573
833
  <fingerprint pattern="^(KN\S+) - Cover$">
574
834
  <description>ATEN KVM over IP</description>
575
835
  <example hw.product="KN4140v">KN4140v - Cover</example>
@@ -595,6 +855,14 @@
595
855
  <param pos="0" name="hw.product" value="Lantick Ethernet Relay Controller"/>
596
856
  </fingerprint>
597
857
 
858
+ <fingerprint pattern="^XYTRONIX Relay$">
859
+ <description>Xytronix Relay</description>
860
+ <example>XYTRONIX Relay</example>
861
+ <param pos="0" name="hw.vendor" value="Xytronix"/>
862
+ <param pos="0" name="hw.device" value="Relay Controller"/>
863
+ <param pos="0" name="hw.product" value="Ethernet Relay Controller"/>
864
+ </fingerprint>
865
+
598
866
  <fingerprint pattern="^(myUTN(?:-[a-zA-Z0-9]+)?) Control Center$">
599
867
  <description>myUTN Device Server</description>
600
868
  <example hw.product="myUTN-50a">myUTN-50a Control Center</example>
@@ -652,7 +920,7 @@
652
920
  <param pos="0" name="hw.product" value="Rack PDU Card"/>
653
921
  </fingerprint>
654
922
 
655
- <fingerprint pattern="^(.*) IntelliSlot Web(?:/\d+)? Card?$">
923
+ <fingerprint pattern="^(.{0,256}) IntelliSlot Web(?:/\d+)? Card?$">
656
924
  <description>Emerson Network Power IntelliSlot Web Card and rebrands</description>
657
925
  <example hw.vendor="Emerson Network Power">Emerson Network Power IntelliSlot Web Card</example>
658
926
  <example hw.vendor="Emerson Network Power">Emerson Network Power IntelliSlot Web/485 Card</example>
@@ -798,11 +1066,12 @@
798
1066
  <param pos="0" name="hw.device" value="Lights Out Management"/>
799
1067
  <param pos="0" name="hw.vendor" value="HP"/>
800
1068
  <param pos="0" name="hw.product" value="iLO"/>
801
- <param pos="0" name="hw.cpe23" value="cpe:/h:hp:integrated_lights_out:-"/>
1069
+ <param pos="0" name="hw.cpe23" value="cpe:/h:hp:integrated_lights-out:-"/>
802
1070
  <param pos="0" name="os.vendor" value="HP"/>
803
1071
  <param pos="0" name="os.device" value="Lights Out Management"/>
804
1072
  <param pos="0" name="os.family" value="iLO"/>
805
1073
  <param pos="0" name="os.product" value="iLO"/>
1074
+ <param pos="0" name="os.cpe23" value="cpe:/o:hp:integrated_lights-out_firmware:-"/>
806
1075
  </fingerprint>
807
1076
 
808
1077
  <fingerprint pattern="^HP Integrated Lights-Out 2$">
@@ -811,24 +1080,38 @@
811
1080
  <param pos="0" name="hw.device" value="Lights Out Management"/>
812
1081
  <param pos="0" name="hw.vendor" value="HP"/>
813
1082
  <param pos="0" name="hw.product" value="iLO"/>
814
- <param pos="0" name="hw.cpe23" value="cpe:/h:hp:integrated_lights_out:-"/>
1083
+ <param pos="0" name="hw.cpe23" value="cpe:/h:hp:integrated_lights-out:-"/>
815
1084
  <param pos="0" name="os.vendor" value="HP"/>
816
1085
  <param pos="0" name="os.device" value="Lights Out Management"/>
817
1086
  <param pos="0" name="os.family" value="iLO"/>
818
1087
  <param pos="0" name="os.product" value="iLO 2"/>
1088
+ <param pos="0" name="os.cpe23" value="cpe:/o:hp:integrated_lights-out_2_firmware:-"/>
819
1089
  </fingerprint>
820
1090
 
821
- <fingerprint pattern="^(iLO \d+)$">
822
- <description>HP Integrated Lights-Out 3+</description>
823
- <example hw.product="iLO 3" os.product="iLO 3">iLO 3</example>
824
- <example hw.product="iLO 4" os.product="iLO 4">iLO 4</example>
1091
+ <fingerprint pattern="^iLO 3$">
1092
+ <description>HP Integrated Lights-Out 3</description>
1093
+ <example>iLO 3</example>
825
1094
  <param pos="0" name="hw.device" value="Lights Out Management"/>
826
1095
  <param pos="0" name="hw.vendor" value="HP"/>
827
- <param pos="1" name="hw.product"/>
1096
+ <param pos="0" name="hw.product" value="iLO 3"/>
828
1097
  <param pos="0" name="os.vendor" value="HP"/>
829
1098
  <param pos="0" name="os.device" value="Lights Out Management"/>
830
1099
  <param pos="0" name="os.family" value="iLO"/>
831
- <param pos="1" name="os.product"/>
1100
+ <param pos="0" name="os.product" value="iLO 3"/>
1101
+ <param pos="0" name="os.cpe23" value="cpe:/o:hp:integrated_lights-out_3_firmware:-"/>
1102
+ </fingerprint>
1103
+
1104
+ <fingerprint pattern="^iLO 4$">
1105
+ <description>HP Integrated Lights-Out 4</description>
1106
+ <example>iLO 4</example>
1107
+ <param pos="0" name="hw.device" value="Lights Out Management"/>
1108
+ <param pos="0" name="hw.vendor" value="HP"/>
1109
+ <param pos="0" name="hw.product" value="iLO 4"/>
1110
+ <param pos="0" name="os.vendor" value="HP"/>
1111
+ <param pos="0" name="os.device" value="Lights Out Management"/>
1112
+ <param pos="0" name="os.family" value="iLO"/>
1113
+ <param pos="0" name="os.product" value="iLO 4"/>
1114
+ <param pos="0" name="os.cpe23" value="cpe:/o:hp:integrated_lights-out_4_firmware:-"/>
832
1115
  </fingerprint>
833
1116
 
834
1117
  <fingerprint pattern="^HPE SimpliVity OmniStack$">
@@ -855,7 +1138,7 @@
855
1138
  <param pos="0" name="hw.product" value="OpenManage Switch"/>
856
1139
  </fingerprint>
857
1140
 
858
- <fingerprint pattern="^(\S+)\s+-\s+ProCurve Switch (\S+) \((.*)\)$">
1141
+ <fingerprint pattern="^(\S{1,512})\s{1,8}-\s{1,8}ProCurve Switch (\S+) \((.*)\)$">
859
1142
  <description>HPE ProCurve Switch w/Hostname</description>
860
1143
  <example host.name="SW1" hw.product="4204vl" procurve.model="J8770A">SW1 - ProCurve Switch 4204vl (J8770A)</example>
861
1144
  <param pos="0" name="hw.vendor" value="HPE"/>
@@ -951,20 +1234,39 @@
951
1234
 
952
1235
  <fingerprint pattern="^Agilent 33220A \((.*)\)$">
953
1236
  <description>Agilent 33220A</description>
954
- <example agilent.serial="MY44041111">Agilent 33220A (MY44041111)</example>
1237
+ <example agilent.serial="MY44041111" hw.serial_number="MY44041111">Agilent 33220A (MY44041111)</example>
955
1238
  <param pos="0" name="hw.vendor" value="Agilent"/>
956
1239
  <param pos="0" name="hw.device" value="Test Instrument"/>
957
1240
  <param pos="0" name="hw.product" value="33220A Waveform Generator"/>
958
1241
  <param pos="1" name="agilent.serial"/>
1242
+ <param pos="1" name="hw.serial_number"/>
959
1243
  </fingerprint>
960
1244
 
961
1245
  <fingerprint pattern="^Agilent N5172B (?:EXG )?(MY\S+)$">
962
1246
  <description>Agilent N5172B</description>
963
- <example agilent.serial="MY44041111">Agilent N5172B EXG MY44041111</example>
1247
+ <example agilent.serial="MY44041111" hw.serial_number="MY44041111">Agilent N5172B EXG MY44041111</example>
964
1248
  <param pos="0" name="hw.vendor" value="Agilent"/>
965
1249
  <param pos="0" name="hw.device" value="Test Instrument"/>
966
1250
  <param pos="0" name="hw.product" value="N5172B Signal Generator"/>
967
1251
  <param pos="1" name="agilent.serial"/>
1252
+ <param pos="1" name="hw.serial_number"/>
1253
+ </fingerprint>
1254
+
1255
+ <fingerprint pattern="^Agilent E5810 \(([a-fA-F0-9-]{17})\)$">
1256
+ <description>Agilent E5810 Instrument Gateway Device</description>
1257
+ <example host.mac="00-30-D3-01-01-01">Agilent E5810 (00-30-D3-01-01-01)</example>
1258
+ <param pos="0" name="hw.vendor" value="Agilent"/>
1259
+ <param pos="0" name="hw.device" value="Test Instrument"/>
1260
+ <param pos="0" name="hw.product" value="E5810 Gateway Device"/>
1261
+ <param pos="1" name="host.mac"/>
1262
+ </fingerprint>
1263
+
1264
+ <fingerprint pattern="^LXI - Agilent Technologies - N1913A - EPM Series Power Meter$">
1265
+ <description>Agilent N1913A EPM Series Power Meter</description>
1266
+ <example>LXI - Agilent Technologies - N1913A - EPM Series Power Meter</example>
1267
+ <param pos="0" name="hw.vendor" value="Agilent"/>
1268
+ <param pos="0" name="hw.device" value="Test Instrument"/>
1269
+ <param pos="0" name="hw.product" value="N1913A Power Meter"/>
968
1270
  </fingerprint>
969
1271
 
970
1272
  <fingerprint pattern="^Polycom - Configuration Utility$">
@@ -984,6 +1286,14 @@
984
1286
  <param pos="0" name="hw.device" value="VoIP"/>
985
1287
  </fingerprint>
986
1288
 
1289
+ <fingerprint pattern="^3CX Phone System Management Console$">
1290
+ <description>3CX Phone System Management Console</description>
1291
+ <example>3CX Phone System Management Console</example>
1292
+ <param pos="0" name="service.vendor" value="3CX"/>
1293
+ <param pos="0" name="service.product" value="3CX Web Server"/>
1294
+ <param pos="0" name="service.cpe23" value="cpe:/a:3cx:3cx_web_server:-"/>
1295
+ </fingerprint>
1296
+
987
1297
  <fingerprint pattern="^(SPA\S+) Configuration Utility$">
988
1298
  <description>Cisco IP Phone - SPA504G Configuration Utility</description>
989
1299
  <example hw.product="SPA504G">SPA504G Configuration Utility</example>
@@ -992,6 +1302,15 @@
992
1302
  <param pos="1" name="hw.product"/>
993
1303
  </fingerprint>
994
1304
 
1305
+ <fingerprint pattern="^(SPA\S+) Device Information \(SEP(\S+)\)$">
1306
+ <description>Cisco IP Phone - SPA504G</description>
1307
+ <example hw.product="SPA504G" host.mac="0123456789ab">SPA504G Device Information (SEP0123456789ab)</example>
1308
+ <param pos="0" name="hw.vendor" value="Cisco"/>
1309
+ <param pos="0" name="hw.device" value="VoIP"/>
1310
+ <param pos="1" name="hw.product"/>
1311
+ <param pos="2" name="host.mac"/>
1312
+ </fingerprint>
1313
+
995
1314
  <fingerprint pattern="^Cisco (?:SPA Configuration|IP Phone)$">
996
1315
  <description>Cisco IP Phone </description>
997
1316
  <example>Cisco SPA Configuration</example>
@@ -1048,7 +1367,6 @@
1048
1367
  <param pos="0" name="os.device" value="Switch"/>
1049
1368
  <param pos="0" name="os.product" value="MDS 9000"/>
1050
1369
  <param pos="1" name="os.version"/>
1051
- <param pos="0" name="os.cpe23" value="cpe:/o:cisco:mds_9000:{os.version}"/>
1052
1370
  </fingerprint>
1053
1371
 
1054
1372
  <fingerprint pattern="^Stealthwatch Management Console$">
@@ -1102,13 +1420,21 @@
1102
1420
  <param pos="0" name="os.vendor" value="Cisco"/>
1103
1421
  <param pos="0" name="os.device" value="Wireless Controller"/>
1104
1422
  <param pos="0" name="os.product" value="Wireless LAN Controller"/>
1105
- <param pos="0" name="os.cpe23" value="cpe:/o:cisco:wireless_lan_controller:-"/>
1423
+ <param pos="0" name="os.cpe23" value="cpe:/o:cisco:wireless_lan_controller_software:-"/>
1106
1424
  <param pos="0" name="hw.vendor" value="Cisco"/>
1107
1425
  <param pos="0" name="hw.device" value="Wireless Controller"/>
1108
1426
  <param pos="0" name="hw.product" value="Wireless LAN Controller"/>
1109
1427
  <param pos="0" name="hw.cpe23" value="cpe:/h:cisco:wireless_lan_controller:-"/>
1110
1428
  </fingerprint>
1111
1429
 
1430
+ <fingerprint pattern="^Cisco ASDM (\S+)$">
1431
+ <description>Cisco Adaptive Security Device Manager Application</description>
1432
+ <example service.version="6.4(7)">Cisco ASDM 6.4(7)</example>
1433
+ <param pos="0" name="service.vendor" value="Cisco"/>
1434
+ <param pos="0" name="service.product" value="ASDM"/>
1435
+ <param pos="1" name="service.version"/>
1436
+ </fingerprint>
1437
+
1112
1438
  <fingerprint pattern="^Duo Access Gateway$">
1113
1439
  <description>Duo Access Gateway</description>
1114
1440
  <example>Duo Access Gateway</example>
@@ -1207,6 +1533,7 @@
1207
1533
  <param pos="0" name="hw.vendor" value="KACE"/>
1208
1534
  <param pos="0" name="hw.device" value="Support Appliance"/>
1209
1535
  <param pos="0" name="hw.product" value="K1000"/>
1536
+ <param pos="0" name="hw.cpe23" value="cpe:/h:dell:kace_k1000_systems_management_appliance:-"/>
1210
1537
  <param pos="0" name="os.vendor" value="KACE"/>
1211
1538
  <param pos="0" name="os.family" value="FreeBSD"/>
1212
1539
  </fingerprint>
@@ -1260,6 +1587,36 @@
1260
1587
  <param pos="0" name="os.product" value="SmartServer"/>
1261
1588
  </fingerprint>
1262
1589
 
1590
+ <!-- Various products by Avocent -->
1591
+
1592
+ <fingerprint pattern="^Avocent AutoView ([^/$]+)">
1593
+ <description>Avocent AutoView KVM</description>
1594
+ <example hw.model="3100">Avocent AutoView 3100/3200</example>
1595
+ <example hw.model="3050">Avocent AutoView 3050</example>
1596
+ <param pos="0" name="hw.vendor" value="Avocent"/>
1597
+ <param pos="0" name="hw.device" value="KVM"/>
1598
+ <param pos="1" name="hw.model"/>
1599
+ <param pos="0" name="hw.product" value="AutoView {hw.model}"/>
1600
+ </fingerprint>
1601
+
1602
+ <!-- Various products by Aerohive -->
1603
+
1604
+ <fingerprint pattern="^Aerohive HiveUI$">
1605
+ <description>Aerohive Access Point</description>
1606
+ <example>Aerohive HiveUI</example>
1607
+ <param pos="0" name="hw.vendor" value="Aerohive"/>
1608
+ <param pos="0" name="hw.device" value="WAP"/>
1609
+ </fingerprint>
1610
+
1611
+ <!-- Various products by Ruckus -->
1612
+
1613
+ <fingerprint pattern="^Ruckus Wireless Admin$">
1614
+ <description>Ruckus Wireless Access Point</description>
1615
+ <example>Ruckus Wireless Admin</example>
1616
+ <param pos="0" name="hw.vendor" value="Ruckus"/>
1617
+ <param pos="0" name="hw.device" value="WAP"/>
1618
+ </fingerprint>
1619
+
1263
1620
  <!-- Various ICS/OT -->
1264
1621
 
1265
1622
  <fingerprint pattern="^CTI (25\S+) Main Menu$">
@@ -1419,7 +1776,26 @@
1419
1776
  <param pos="0" name="service.vendor" value="Citrix"/>
1420
1777
  <param pos="0" name="service.product" value="XenServer"/>
1421
1778
  <param pos="1" name="service.version"/>
1779
+ <param pos="0" name="service.device" value="Hypervisor"/>
1422
1780
  <param pos="0" name="service.cpe23" value="cpe:/a:citrix:xenserver:{service.version}"/>
1781
+ <param pos="0" name="os.vendor" value="Citrix"/>
1782
+ <param pos="0" name="os.product" value="XenServer"/>
1783
+ <param pos="0" name="os.device" value="Hypervisor"/>
1784
+ <param pos="0" name="hw.device" value="Hypervisor"/>
1785
+ </fingerprint>
1786
+
1787
+ <fingerprint pattern="^Welcome to Citrix Hypervisor ([0-9\.]+)$">
1788
+ <description>XenServer - Hypervisor variant</description>
1789
+ <example service.version="8.2.0">Welcome to Citrix Hypervisor 8.2.0</example>
1790
+ <param pos="0" name="service.vendor" value="Citrix"/>
1791
+ <param pos="0" name="service.product" value="XenServer"/>
1792
+ <param pos="1" name="service.version"/>
1793
+ <param pos="0" name="service.device" value="Hypervisor"/>
1794
+ <param pos="0" name="service.cpe23" value="cpe:/a:citrix:xenserver:{service.version}"/>
1795
+ <param pos="0" name="os.vendor" value="Citrix"/>
1796
+ <param pos="0" name="os.product" value="XenServer"/>
1797
+ <param pos="0" name="os.device" value="Hypervisor"/>
1798
+ <param pos="0" name="hw.device" value="Hypervisor"/>
1423
1799
  </fingerprint>
1424
1800
 
1425
1801
  <fingerprint pattern="^RabbitMQ Management$">
@@ -1469,7 +1845,7 @@
1469
1845
  <param pos="0" name="service.cpe23" value="cpe:/a:realvnc:realvnc:-"/>
1470
1846
  </fingerprint>
1471
1847
 
1472
- <fingerprint pattern="^.* \[Jenkins\]$">
1848
+ <fingerprint pattern="^.{0,1000} \[Jenkins\]$">
1473
1849
  <description>Jenkins Customized Dashboard</description>
1474
1850
  <example>Continuous Integrations [Jenkins]</example>
1475
1851
  <example>Dashboard [Jenkins]</example>
@@ -1501,10 +1877,11 @@
1501
1877
  </fingerprint>
1502
1878
 
1503
1879
  <fingerprint pattern="^Login - OpenStack Dashboard$">
1504
- <description>OpenStack Dashboard</description>
1880
+ <description>OpenStack Horizon Dashboard</description>
1505
1881
  <example>Login - OpenStack Dashboard</example>
1506
1882
  <param pos="0" name="service.vendor" value="OpenStack"/>
1507
- <param pos="0" name="service.product" value="Dashboard"/>
1883
+ <param pos="0" name="service.product" value="Horizon"/>
1884
+ <param pos="0" name="service.cpe23" value="cpe:/a:openstack:horizon:-"/>
1508
1885
  </fingerprint>
1509
1886
 
1510
1887
  <fingerprint pattern="^splunkd$">
@@ -1538,6 +1915,34 @@
1538
1915
  <param pos="0" name="service.product" value="Site Recovery Manager"/>
1539
1916
  </fingerprint>
1540
1917
 
1918
+ <fingerprint pattern="^&quot; \+ ID_VC_Welcome \+ &quot;$">
1919
+ <description>VMware vCenter</description>
1920
+ <example>" + ID_VC_Welcome + "</example>
1921
+ <param pos="0" name="service.vendor" value="VMware"/>
1922
+ <param pos="0" name="service.product" value="vCenter"/>
1923
+ <param pos="0" name="service.cpe23" value="cpe:/a:vmware:vcenter_server:-"/>
1924
+ </fingerprint>
1925
+
1926
+ <fingerprint pattern="^&quot; \+ ID_EESX_Welcome \+ &quot;$">
1927
+ <description>VMware ESXi</description>
1928
+ <example>" + ID_EESX_Welcome + "</example>
1929
+ <param pos="0" name="service.vendor" value="VMware"/>
1930
+ <param pos="0" name="os.vendor" value="VMware"/>
1931
+ <param pos="0" name="os.family" value="VMware ESX/ESXi"/>
1932
+ <param pos="0" name="os.product" value="VMware ESXi Server"/>
1933
+ <param pos="0" name="os.device" value="Hypervisor"/>
1934
+ <param pos="0" name="os.cpe23" value="cpe:/o:vmware:esxi:-"/>
1935
+ <param pos="0" name="hw.device" value="Hypervisor"/>
1936
+ </fingerprint>
1937
+
1938
+ <fingerprint pattern="^&quot; \+ ID_Converter_Welcome \+ &quot;$">
1939
+ <description>VMware Converter</description>
1940
+ <example>" + ID_Converter_Welcome + "</example>
1941
+ <param pos="0" name="service.vendor" value="VMware"/>
1942
+ <param pos="0" name="service.product" value="vCenter Converter"/>
1943
+ <param pos="0" name="service.cpe23" value="cpe:/a:vmware:vcenter_converter:-"/>
1944
+ </fingerprint>
1945
+
1541
1946
  <fingerprint pattern="^Graylog Web Interface$">
1542
1947
  <description>Graylog Web Interface</description>
1543
1948
  <example>Graylog Web Interface</example>
@@ -1593,7 +1998,15 @@
1593
1998
  <example>ManageEngine OpManager</example>
1594
1999
  <param pos="0" name="service.vendor" value="ManageEngine"/>
1595
2000
  <param pos="0" name="service.product" value="OpManager"/>
1596
- <param pos="0" name="service.cpe23" value="cpe:/a:manageengine:opmanager:-"/>
2001
+ <param pos="0" name="service.cpe23" value="cpe:/a:zohocorp:manageengine_opmanager:-"/>
2002
+ </fingerprint>
2003
+
2004
+ <fingerprint pattern="^ManageEngine Desktop Central 9$">
2005
+ <description>ManageEngine Desktop Central 9</description>
2006
+ <example>ManageEngine Desktop Central 9</example>
2007
+ <param pos="0" name="service.vendor" value="ManageEngine"/>
2008
+ <param pos="0" name="service.product" value="Desktop Central"/>
2009
+ <param pos="0" name="service.cpe23" value="cpe:/a:manageengine:desktop_central:-"/>
1597
2010
  </fingerprint>
1598
2011
 
1599
2012
  <fingerprint pattern="^ManageEngine ADAudit Plus$">
@@ -1601,6 +2014,7 @@
1601
2014
  <example>ManageEngine ADAudit Plus</example>
1602
2015
  <param pos="0" name="service.vendor" value="ManageEngine"/>
1603
2016
  <param pos="0" name="service.product" value="ADAudit Plus"/>
2017
+ <param pos="0" name="service.cpe23" value="cpe:/a:zohocorp:manageengine_adaudit_plus:-"/>
1604
2018
  </fingerprint>
1605
2019
 
1606
2020
  <fingerprint pattern="^(ScanFront \d.+)Web Menu$">
@@ -1659,11 +2073,17 @@
1659
2073
  <param pos="0" name="os.family" value="NetScaler"/>
1660
2074
  <param pos="0" name="os.device" value="Network Management Device"/>
1661
2075
  <param pos="0" name="os.product" value="NetScaler"/>
2076
+ <param pos="0" name="os.cpe23" value="cpe:/o:citrix:netscaler_firmware:-"/>
1662
2077
  <param pos="0" name="service.vendor" value="Citrix"/>
1663
2078
  <param pos="0" name="service.family" value="NetScaler"/>
1664
2079
  <param pos="0" name="service.device" value="Network Management Device"/>
1665
2080
  <param pos="0" name="service.product" value="NetScaler"/>
1666
2081
  <param pos="0" name="service.cpe23" value="cpe:/a:citrix:netscaler:-"/>
2082
+ <param pos="0" name="hw.vendor" value="Citrix"/>
2083
+ <param pos="0" name="hw.family" value="NetScaler"/>
2084
+ <param pos="0" name="hw.device" value="Network Management Device"/>
2085
+ <param pos="0" name="hw.product" value="NetScaler Gateway"/>
2086
+ <param pos="0" name="hw.cpe23" value="cpe:/h:citrix:netscaler_gateway:-"/>
1667
2087
  </fingerprint>
1668
2088
 
1669
2089
  <fingerprint pattern="^Netscaler Gateway$">
@@ -1673,10 +2093,17 @@
1673
2093
  <param pos="0" name="os.family" value="NetScaler"/>
1674
2094
  <param pos="0" name="os.device" value="Network Management Device"/>
1675
2095
  <param pos="0" name="os.product" value="NetScaler Gateway"/>
2096
+ <param pos="0" name="os.cpe23" value="cpe:/o:citrix:netscaler_gateway_firmware:-"/>
1676
2097
  <param pos="0" name="service.vendor" value="Citrix"/>
1677
2098
  <param pos="0" name="service.family" value="NetScaler"/>
1678
2099
  <param pos="0" name="service.device" value="Network Management Device"/>
1679
2100
  <param pos="0" name="service.product" value="NetScaler Gateway"/>
2101
+ <param pos="0" name="service.cpe23" value="cpe:/a:citrix:netscaler_gateway:-"/>
2102
+ <param pos="0" name="hw.vendor" value="Citrix"/>
2103
+ <param pos="0" name="hw.family" value="NetScaler"/>
2104
+ <param pos="0" name="hw.device" value="Network Management Device"/>
2105
+ <param pos="0" name="hw.product" value="NetScaler Gateway"/>
2106
+ <param pos="0" name="hw.cpe23" value="cpe:/h:citrix:netscaler_gateway:-"/>
1680
2107
  </fingerprint>
1681
2108
 
1682
2109
  <fingerprint pattern="^Citrix (?:NetScaler SDX|ADC SDX)$">
@@ -1691,6 +2118,11 @@
1691
2118
  <param pos="0" name="service.family" value="NetScaler"/>
1692
2119
  <param pos="0" name="service.device" value="Network Management Device"/>
1693
2120
  <param pos="0" name="service.product" value="NetScaler SDX Gateway"/>
2121
+ <param pos="0" name="hw.vendor" value="Citrix"/>
2122
+ <param pos="0" name="hw.family" value="NetScaler"/>
2123
+ <param pos="0" name="hw.device" value="Network Management Device"/>
2124
+ <param pos="0" name="hw.product" value="NetScaler SDX Gateway"/>
2125
+ <param pos="0" name="hw.cpe23" value="cpe:/h:citrix:netscaler_sdx:-"/>
1694
2126
  </fingerprint>
1695
2127
 
1696
2128
  <fingerprint pattern="^Citrix NetScaler Insight Center$">
@@ -1755,7 +2187,7 @@
1755
2187
  <description>Pure Storage Appliance</description>
1756
2188
  <example>Pure Storage Login</example>
1757
2189
  <param pos="0" name="hw.vendor" value="Pure Storage"/>
1758
- <param pos="0" name="hw.device" value="NAS"/>
2190
+ <param pos="0" name="hw.device" value="Storage Appliance"/>
1759
2191
  <param pos="0" name="hw.product" value="Appliance"/>
1760
2192
  </fingerprint>
1761
2193
 
@@ -1804,22 +2236,22 @@
1804
2236
 
1805
2237
  <fingerprint pattern="^AVTECH Software, Inc\. - Room Alert(?:&amp;reg;)?\s+([a-zA-Z0-9/]+) - Advanced">
1806
2238
  <description>AVTECH RoomAlert</description>
1807
- <example hw.product="Room Alert 11E" hw.product.model="11E">AVTECH Software, Inc. - Room Alert 11E - Advanced Computer Room Environment Monitoring, Alerting &amp;amp; Automatic Corrective Action</example>
1808
- <example hw.product="Room Alert 32E/W" hw.product.model="32E/W">AVTECH Software, Inc. - Room Alert 32E/W - Advanced Computer Room Environment Monitoring, Alerting &amp;amp; Automatic Corrective Action</example>
1809
- <example hw.product="Room Alert 32E/W" hw.product.model="32E/W">AVTECH Software, Inc. - Room Alert&amp;reg; 32E/W - Advanced Computer Room Monitoring, Alerting &amp;amp; Automatic Corrective Action</example>
2239
+ <example hw.product="Room Alert 11E" hw.model="11E">AVTECH Software, Inc. - Room Alert 11E - Advanced Computer Room Environment Monitoring, Alerting &amp;amp; Automatic Corrective Action</example>
2240
+ <example hw.product="Room Alert 32E/W" hw.model="32E/W">AVTECH Software, Inc. - Room Alert 32E/W - Advanced Computer Room Environment Monitoring, Alerting &amp;amp; Automatic Corrective Action</example>
2241
+ <example hw.product="Room Alert 32E/W" hw.model="32E/W">AVTECH Software, Inc. - Room Alert&amp;reg; 32E/W - Advanced Computer Room Monitoring, Alerting &amp;amp; Automatic Corrective Action</example>
1810
2242
  <param pos="0" name="hw.vendor" value="AVTECH"/>
1811
2243
  <param pos="0" name="hw.device" value="Monitoring"/>
1812
- <param pos="1" name="hw.product.model"/>
1813
- <param pos="0" name="hw.product" value="Room Alert {hw.product.model}"/>
2244
+ <param pos="1" name="hw.model"/>
2245
+ <param pos="0" name="hw.product" value="Room Alert {hw.model}"/>
1814
2246
  </fingerprint>
1815
2247
 
1816
2248
  <fingerprint pattern="^AVTECH Software, Inc\. - TemPageR\s+([a-zA-Z0-9/]+) - Real-Time">
1817
2249
  <description>AVTECH TepPageR</description>
1818
- <example hw.product="TemPageR 3E" hw.product.model="3E">AVTECH Software, Inc. - TemPageR 3E - Real-Time Temperature Monitor For IT &amp;amp; Facilities Environment Monitoring</example>
2250
+ <example hw.product="TemPageR 3E" hw.model="3E">AVTECH Software, Inc. - TemPageR 3E - Real-Time Temperature Monitor For IT &amp;amp; Facilities Environment Monitoring</example>
1819
2251
  <param pos="0" name="hw.vendor" value="AVTECH"/>
1820
2252
  <param pos="0" name="hw.device" value="Monitoring"/>
1821
- <param pos="1" name="hw.product.model"/>
1822
- <param pos="0" name="hw.product" value="TemPageR {hw.product.model}"/>
2253
+ <param pos="1" name="hw.model"/>
2254
+ <param pos="0" name="hw.product" value="TemPageR {hw.model}"/>
1823
2255
  </fingerprint>
1824
2256
 
1825
2257
  <fingerprint pattern="^AppDynamics$">
@@ -1938,7 +2370,7 @@
1938
2370
  <param pos="0" name="hw.product" value="Network Node"/>
1939
2371
  </fingerprint>
1940
2372
 
1941
- <fingerprint pattern="^(?:S2 Netbox Login|Home - NetBox)$">
2373
+ <fingerprint pattern="^S2 Netbox Login|Home - NetBox$">
1942
2374
  <description>S2 Netbox Appliance</description>
1943
2375
  <example>S2 Netbox Login</example>
1944
2376
  <example>Home - NetBox</example>
@@ -1990,7 +2422,7 @@
1990
2422
  <param pos="0" name="service.cpe23" value="cpe:/a:ibm:tivoli_storage_flashcopy_manager:-"/>
1991
2423
  </fingerprint>
1992
2424
 
1993
- <fingerprint pattern="^(?:Jupyter Notebook|JupyterLab|Home Page - Select or create a notebook)$">
2425
+ <fingerprint pattern="^Jupyter Notebook|JupyterLab|Home Page - Select or create a notebook$">
1994
2426
  <description>Jupyter Notebook Server</description>
1995
2427
  <example>Jupyter Notebook</example>
1996
2428
  <example>JupyterLab</example>
@@ -2035,7 +2467,7 @@
2035
2467
  <param pos="0" name="service.product" value="Network Monitor"/>
2036
2468
  </fingerprint>
2037
2469
 
2038
- <fingerprint pattern="^(?:BrightSign&amp;reg;|BrightSign Applications|Diagnostics Web Server)$">
2470
+ <fingerprint pattern="^BrightSign&amp;reg;|BrightSign Applications|Diagnostics Web Server$">
2039
2471
  <description>BrightSign Controller</description>
2040
2472
  <example>BrightSign&amp;reg;</example>
2041
2473
  <example>BrightSign Applications</example>
@@ -2056,7 +2488,7 @@
2056
2488
  <param pos="0" name="hw.device" value="WAP"/>
2057
2489
  </fingerprint>
2058
2490
 
2059
- <fingerprint pattern="^(?:DD System Manager|System Manager)$">
2491
+ <fingerprint pattern="^DD System Manager|System Manager$">
2060
2492
  <description>Data Domain System Manager</description>
2061
2493
  <example>DD System Manager</example>
2062
2494
  <example>System Manager</example>
@@ -2076,7 +2508,7 @@
2076
2508
  <param pos="0" name="service.product" value="SonarQube"/>
2077
2509
  </fingerprint>
2078
2510
 
2079
- <fingerprint pattern="^(\S+) - Opengear Management Console$">
2511
+ <fingerprint pattern="^(\S{1,512}) - Opengear Management Console$">
2080
2512
  <description>Opengear Management Console</description>
2081
2513
  <example host.name="server01">server01 - Opengear Management Console</example>
2082
2514
  <param pos="0" name="service.vendor" value="Opengear"/>
@@ -2109,7 +2541,7 @@
2109
2541
  <param pos="0" name="service.cpe23" value="cpe:/a:influxdata:influxdb:2.0"/>
2110
2542
  </fingerprint>
2111
2543
 
2112
- <fingerprint pattern="^(?:Sign in . GitLab|GitLab|GitLab is not responding)$">
2544
+ <fingerprint pattern="^Sign in . GitLab|GitLab|GitLab is not responding$">
2113
2545
  <description>GitLab</description>
2114
2546
  <example>Sign in · GitLab</example>
2115
2547
  <example>GitLab is not responding</example>
@@ -2120,7 +2552,7 @@
2120
2552
  <param pos="0" name="service.cpe23" value="cpe:/a:gitlab:gitlab:-"/>
2121
2553
  </fingerprint>
2122
2554
 
2123
- <fingerprint pattern="^(?:GitHub Enterprise|Setup GitHub Enterprise|GitHub Enterprise preflight check)$">
2555
+ <fingerprint pattern="^GitHub Enterprise|Setup GitHub Enterprise|GitHub Enterprise preflight check$">
2124
2556
  <description>GitHub Enterprise</description>
2125
2557
  <example>GitHub Enterprise</example>
2126
2558
  <example>Setup GitHub Enterprise</example>
@@ -2129,7 +2561,7 @@
2129
2561
  <param pos="0" name="service.product" value="Enterprise"/>
2130
2562
  </fingerprint>
2131
2563
 
2132
- <fingerprint pattern="^(?:SAP NetWeaver Application Server Java|SAP&amp;#x20;NetWeaver&amp;#x20;Portal|Loading Portal\.\.\.)$">
2564
+ <fingerprint pattern="^SAP NetWeaver Application Server Java|SAP&amp;#x20;NetWeaver&amp;#x20;Portal|Loading Portal\.\.\.$">
2133
2565
  <description>SAP NetWeaver Portal</description>
2134
2566
  <example>SAP NetWeaver Application Server Java</example>
2135
2567
  <example>SAP&amp;#x20;NetWeaver&amp;#x20;Portal</example>
@@ -2148,7 +2580,7 @@
2148
2580
  <param pos="0" name="service.cpe23" value="cpe:/a:lansweeper:lansweeper:-"/>
2149
2581
  </fingerprint>
2150
2582
 
2151
- <fingerprint pattern="^(?:Celery Flower|Flower)$">
2583
+ <fingerprint pattern="^Celery Flower|Flower$">
2152
2584
  <description>Celery Flower Dashboard</description>
2153
2585
  <example>Celery Flower</example>
2154
2586
  <example>Flower</example>
@@ -2181,6 +2613,14 @@
2181
2613
  <param pos="0" name="service.product" value="Kiwi Syslog"/>
2182
2614
  </fingerprint>
2183
2615
 
2616
+ <fingerprint pattern="^SolarWinds Orion$">
2617
+ <description>SolarWinds Orion</description>
2618
+ <example>SolarWinds Orion</example>
2619
+ <param pos="0" name="service.vendor" value="SolarWinds"/>
2620
+ <param pos="0" name="service.product" value="Orion Platform"/>
2621
+ <param pos="0" name="service.cpe23" value="cpe:/a:solarwinds:orion_platform:-"/>
2622
+ </fingerprint>
2623
+
2184
2624
  <fingerprint pattern="^ClickShare Configurator$">
2185
2625
  <description>ClickShare Wireless Presenter</description>
2186
2626
  <example>ClickShare Configurator</example>
@@ -2201,6 +2641,47 @@
2201
2641
  <param pos="1" name="hw.product"/>
2202
2642
  </fingerprint>
2203
2643
 
2644
+ <fingerprint pattern="^Welcome to Oracle Fusion Middleware$">
2645
+ <description>Oracle Fusion Middleware</description>
2646
+ <example>Welcome to Oracle Fusion Middleware</example>
2647
+ <param pos="0" name="service.vendor" value="Oracle"/>
2648
+ <param pos="0" name="service.product" value="Fusion Middleware"/>
2649
+ <param pos="0" name="service.cpe23" value="cpe:/a:oracle:fusion_middleware:-"/>
2650
+ </fingerprint>
2651
+
2652
+ <fingerprint pattern="^Oracle Secure Global Desktop(?: Redirect Page)?$">
2653
+ <description>Oracle Secure Global Desktop</description>
2654
+ <example>Oracle Secure Global Desktop</example>
2655
+ <example>Oracle Secure Global Desktop Redirect Page</example>
2656
+ <param pos="0" name="service.vendor" value="Oracle"/>
2657
+ <param pos="0" name="service.product" value="Secure Global Desktop"/>
2658
+ <param pos="0" name="service.cpe23" value="cpe:/a:oracle:secure_global_desktop:-"/>
2659
+ </fingerprint>
2660
+
2661
+ <fingerprint pattern="^OTM - Oracle Transportation Management$">
2662
+ <description>Oracle Transportation Management</description>
2663
+ <example>OTM - Oracle Transportation Management</example>
2664
+ <param pos="0" name="service.vendor" value="Oracle"/>
2665
+ <param pos="0" name="service.product" value="Transportation Management"/>
2666
+ <param pos="0" name="service.cpe23" value="cpe:/a:oracle:transportation_management:-"/>
2667
+ </fingerprint>
2668
+
2669
+ <fingerprint pattern="^Bad Oracle Access Manager Request$">
2670
+ <description>Oracle Access Manager - Bad Request</description>
2671
+ <example>Bad Oracle Access Manager Request</example>
2672
+ <param pos="0" name="service.vendor" value="Oracle"/>
2673
+ <param pos="0" name="service.product" value="Access Manager"/>
2674
+ <param pos="0" name="service.cpe23" value="cpe:/a:oracle:access_manager:-"/>
2675
+ </fingerprint>
2676
+
2677
+ <fingerprint pattern="^Oracle Access Manager Operation Error$">
2678
+ <description>Oracle Access Manager - Operation Error</description>
2679
+ <example>Oracle Access Manager Operation Error</example>
2680
+ <param pos="0" name="service.vendor" value="Oracle"/>
2681
+ <param pos="0" name="service.product" value="Access Manager"/>
2682
+ <param pos="0" name="service.cpe23" value="cpe:/a:oracle:access_manager:-"/>
2683
+ </fingerprint>
2684
+
2204
2685
  <fingerprint pattern="^(?:Oracle\(R\) )?Integrated Lights Out Manager$">
2205
2686
  <description>Oracle iLOM</description>
2206
2687
  <example>Oracle(R) Integrated Lights Out Manager</example>
@@ -2213,6 +2694,7 @@
2213
2694
  <param pos="0" name="os.vendor" value="Oracle"/>
2214
2695
  <param pos="0" name="os.family" value="ILOM"/>
2215
2696
  <param pos="0" name="os.product" value="ILOM"/>
2697
+ <param pos="0" name="os.cpe23" value="cpe:/o:oracle:integrated_lights_out_manager_firmware:-"/>
2216
2698
  </fingerprint>
2217
2699
 
2218
2700
  <fingerprint pattern="^Genetec - SHARPV\S+$">
@@ -2238,7 +2720,7 @@
2238
2720
  <param pos="0" name="service.cpe23" value="cpe:/a:apache:flink:-"/>
2239
2721
  </fingerprint>
2240
2722
 
2241
- <fingerprint pattern="^(?:Twonky|Twonky Server|TwonkyMedia|TwonkyMedia server media browser)$">
2723
+ <fingerprint pattern="^Twonky|Twonky Server|TwonkyMedia|TwonkyMedia server media browser$">
2242
2724
  <description>Twonky Server</description>
2243
2725
  <example>Twonky</example>
2244
2726
  <example>Twonky Server</example>
@@ -2283,7 +2765,7 @@
2283
2765
  <param pos="0" name="service.cpe23" value="cpe:/a:sabnzbd:sabnzbd:-"/>
2284
2766
  </fingerprint>
2285
2767
 
2286
- <fingerprint pattern="^(?:Zabbix|.*: Zabbix)$">
2768
+ <fingerprint pattern="^Zabbix|.*: Zabbix$">
2287
2769
  <description>Zabbix</description>
2288
2770
  <example>Zabbix</example>
2289
2771
  <example>appliance: Zabbix</example>
@@ -2292,7 +2774,7 @@
2292
2774
  <param pos="0" name="service.cpe23" value="cpe:/a:zabbix:zabbix:-"/>
2293
2775
  </fingerprint>
2294
2776
 
2295
- <fingerprint pattern="^(\S+) \(build (\S+)\) - Info$">
2777
+ <fingerprint pattern="^(\S{1,512}) \(build (\S+)\) - Info$">
2296
2778
  <description>DD-WRT</description>
2297
2779
  <example host.name="SubTerraVia-NUC" os.version="36104" os.build="36104">SubTerraVia-NUC (build 36104) - Info</example>
2298
2780
  <example host.name="DD-WRT" os.version="35030M" os.build="35030M">DD-WRT (build 35030M) - Info</example>
@@ -2305,7 +2787,7 @@
2305
2787
  <param pos="0" name="os.cpe23" value="cpe:/o:dd-wrt:dd-wrt:{os.version}"/>
2306
2788
  </fingerprint>
2307
2789
 
2308
- <fingerprint pattern="^(?:Apache Druid|Druid Console|Legacy Coordinator Console)$">
2790
+ <fingerprint pattern="^Apache Druid|Druid Console|Legacy Coordinator Console$">
2309
2791
  <description>Apache Druid</description>
2310
2792
  <example>Apache Druid</example>
2311
2793
  <example>Legacy Coordinator Console</example>
@@ -2316,10 +2798,11 @@
2316
2798
  </fingerprint>
2317
2799
 
2318
2800
  <fingerprint pattern="^Gerrit Code Review$">
2319
- <description>Gerrit Code Review</description>
2801
+ <description>Google's Gerrit Code Review</description>
2320
2802
  <example>Gerrit Code Review</example>
2321
- <param pos="0" name="service.vendor" value="Gerrit"/>
2322
- <param pos="0" name="service.product" value="Code Review"/>
2803
+ <param pos="0" name="service.vendor" value="Google"/>
2804
+ <param pos="0" name="service.product" value="Gerrit"/>
2805
+ <param pos="0" name="service.cpe23" value="cpe:/a:google:gerrit:-"/>
2323
2806
  </fingerprint>
2324
2807
 
2325
2808
  <fingerprint pattern=" - Ignition Gateway$">
@@ -2391,7 +2874,7 @@
2391
2874
  <example>Rundeck - Login</example>
2392
2875
  <param pos="0" name="service.vendor" value="Rundeck"/>
2393
2876
  <param pos="0" name="service.product" value="Rundeck"/>
2394
- <param pos="0" name="service.cpe23" value="cpe:/a:rundeck:rundeck:-"/>
2877
+ <param pos="0" name="service.cpe23" value="cpe:/a:pagerduty:rundeck:-"/>
2395
2878
  </fingerprint>
2396
2879
 
2397
2880
  <fingerprint pattern="^CrushFTP WebInterface$">
@@ -2511,9 +2994,10 @@
2511
2994
  <example>SolarWinds Virtualization Manager</example>
2512
2995
  <param pos="0" name="service.vendor" value="SolarWinds"/>
2513
2996
  <param pos="0" name="service.product" value="Virtualization Manager"/>
2997
+ <param pos="0" name="service.cpe23" value="cpe:/a:solarwinds:virtualization_manager:-"/>
2514
2998
  </fingerprint>
2515
2999
 
2516
- <fingerprint pattern="^(?:Gitea: .*|LocalRepo|TurnKey Gitea)$">
3000
+ <fingerprint pattern="^Gitea: .*|LocalRepo|TurnKey Gitea$">
2517
3001
  <description>Gitea</description>
2518
3002
  <example>Gitea: Git with a cup of tea</example>
2519
3003
  <example>TurnKey Gitea</example>
@@ -2568,9 +3052,10 @@
2568
3052
  <param pos="0" name="service.certainty" value="0.5"/>
2569
3053
  </fingerprint>
2570
3054
 
2571
- <fingerprint pattern="^ownCloud$">
3055
+ <fingerprint pattern="^[oO]wn[cC]loud$">
2572
3056
  <description>ownCloud</description>
2573
3057
  <example>ownCloud</example>
3058
+ <example>Owncloud</example>
2574
3059
  <param pos="0" name="service.vendor" value="ownCloud"/>
2575
3060
  <param pos="0" name="service.product" value="ownCloud Server"/>
2576
3061
  <param pos="0" name="service.certainty" value="0.5"/>
@@ -2597,9 +3082,10 @@
2597
3082
  <example>RStudio Sign In</example>
2598
3083
  <param pos="0" name="service.vendor" value="RStudio"/>
2599
3084
  <param pos="0" name="service.product" value="Connect"/>
3085
+ <param pos="0" name="service.cpe23" value="cpe:/a:rstudio:connect:-"/>
2600
3086
  </fingerprint>
2601
3087
 
2602
- <fingerprint pattern="^(?:TurnKey Moodle|New Site)$">
3088
+ <fingerprint pattern="^TurnKey Moodle|New Site$">
2603
3089
  <description>Moodle</description>
2604
3090
  <example>TurnKey Moodle</example>
2605
3091
  <example>New Site</example>
@@ -2638,7 +3124,7 @@
2638
3124
  <param pos="0" name="service.cpe23" value="cpe:/a:atlassian:jira:-"/>
2639
3125
  </fingerprint>
2640
3126
 
2641
- <fingerprint pattern="^(?:Welcome to XAMPP|XAMPP for Linux)">
3127
+ <fingerprint pattern="^Welcome to XAMPP|XAMPP for Linux">
2642
3128
  <description>XAMPP Server</description>
2643
3129
  <example>Welcome to XAMPP</example>
2644
3130
  <example>XAMPP for Linux</example>
@@ -2654,15 +3140,16 @@
2654
3140
  <param pos="0" name="service.product" value="Security Scanner"/>
2655
3141
  </fingerprint>
2656
3142
 
2657
- <fingerprint pattern="^Kodi$">
3143
+ <fingerprint pattern="^(?:Chorus 2 - )?Kodi(?: web interface)?$">
2658
3144
  <description>Kodi Media Server</description>
2659
3145
  <example>Kodi</example>
3146
+ <example>Chorus 2 - Kodi web interface</example>
2660
3147
  <param pos="0" name="service.vendor" value="Kodi"/>
2661
3148
  <param pos="0" name="service.product" value="Media Server"/>
2662
3149
  <param pos="0" name="service.cpe23" value="cpe:/a:kodi:kodi:-"/>
2663
3150
  </fingerprint>
2664
3151
 
2665
- <fingerprint pattern="^(?:Drupal|TurnKey Drupal\d+|Select an installation profile)$">
3152
+ <fingerprint pattern="^Drupal|TurnKey Drupal\d+|Select an installation profile$">
2666
3153
  <description>Drupal CMS</description>
2667
3154
  <example>Drupal</example>
2668
3155
  <example>TurnKey Drupal8</example>
@@ -2720,7 +3207,7 @@
2720
3207
  <param pos="0" name="hw.certainty" value="0.75"/>
2721
3208
  <param pos="0" name="os.vendor" value="Dell"/>
2722
3209
  <param pos="0" name="os.product" value="iDRAC Linux"/>
2723
- <param pos="0" name="os .certainty" value="0.75"/>
3210
+ <param pos="0" name="os.certainty" value="0.75"/>
2724
3211
  </fingerprint>
2725
3212
 
2726
3213
  <fingerprint pattern="^Pulse Connect Secure - SSL">
@@ -2735,4 +3222,506 @@
2735
3222
  <param pos="0" name="os.product" value="Pulse Connect Secure"/>
2736
3223
  </fingerprint>
2737
3224
 
3225
+ <fingerprint pattern="^Jellyfin$">
3226
+ <description>Jellyfin media server</description>
3227
+ <example>Jellyfin</example>
3228
+ <param pos="0" name="service.vendor" value="Jellyfin"/>
3229
+ <param pos="0" name="service.product" value="Media Server"/>
3230
+ </fingerprint>
3231
+
3232
+ <fingerprint pattern="^.{1,256} - Proxmox Virtual Environment$">
3233
+ <description>Proxmox open-source virtualization platform</description>
3234
+ <example>hypervisor - Proxmox Virtual Environment</example>
3235
+ <param pos="0" name="service.vendor" value="Proxmox"/>
3236
+ <param pos="0" name="service.product" value="Virtual Environment"/>
3237
+ <param pos="0" name="service.cpe23" value="cpe:/a:proxmox:virtual_environment:-"/>
3238
+ <param pos="0" name="os.vendor" value="Proxmox"/>
3239
+ <param pos="0" name="os.family" value="Linux"/>
3240
+ <param pos="0" name="os.product" value="Proxmox"/>
3241
+ </fingerprint>
3242
+
3243
+ <fingerprint pattern="^Sony Network Camera$">
3244
+ <description>Sony Network Camera</description>
3245
+ <example>Sony Network Camera</example>
3246
+ <param pos="0" name="hw.vendor" value="Sony"/>
3247
+ <param pos="0" name="hw.device" value="IP Camera"/>
3248
+ <param pos="0" name="hw.product" value="Network Camera"/>
3249
+ </fingerprint>
3250
+
3251
+ <fingerprint pattern="Lifesize&amp;reg;$">
3252
+ <description>Lifesize TelePresence</description>
3253
+ <example>Lifesize&amp;reg;</example>
3254
+ <example>400 - Bad Request Lifesize&amp;reg;</example>
3255
+ <param pos="0" name="hw.vendor" value="Lifesize"/>
3256
+ <param pos="0" name="hw.device" value="Video Conferencing"/>
3257
+ <param pos="0" name="hw.product" value="TelePresence"/>
3258
+ <param pos="0" name="os.vendor" value="Lifesize"/>
3259
+ <param pos="0" name="os.family" value="Linux"/>
3260
+ <param pos="0" name="os.product" value="TelePresence"/>
3261
+ <param pos="0" name="os.device" value="Video Conferencing"/>
3262
+ </fingerprint>
3263
+
3264
+ <fingerprint pattern="^AT&amp;amp;T VPN Gateway$">
3265
+ <description>ATT VPN Gateway</description>
3266
+ <example>AT&amp;amp;T VPN Gateway</example>
3267
+ <param pos="0" name="hw.vendor" value="ATT"/>
3268
+ <param pos="0" name="hw.device" value="VPN"/>
3269
+ <param pos="0" name="hw.product" value="VPN Gateway"/>
3270
+ </fingerprint>
3271
+
3272
+ <fingerprint pattern="^AT&amp;amp;T U\d+: '([^']+)'$">
3273
+ <description>ATT VPN Gateway w Hostname</description>
3274
+ <example host.name="Austin-Boston">AT&amp;amp;T U115: 'Austin-Boston'</example>
3275
+ <param pos="0" name="hw.vendor" value="ATT"/>
3276
+ <param pos="0" name="hw.device" value="VPN"/>
3277
+ <param pos="0" name="hw.product" value="VPN Gateway"/>
3278
+ <param pos="1" name="host.name"/>
3279
+ </fingerprint>
3280
+
3281
+ <fingerprint pattern="^(?:Symantec Encryption Verified Directory|Symantec Encryption Server.*)$">
3282
+ <description>Symantec PGP Key Management Server</description>
3283
+ <example>Symantec Encryption Verified Directory</example>
3284
+ <example>Symantec Encryption Server - Page Not Found</example>
3285
+ <example>Symantec Encryption Server - Login</example>
3286
+ <param pos="0" name="hw.vendor" value="Symantec"/>
3287
+ <param pos="0" name="hw.device" value="Security Appliance"/>
3288
+ <param pos="0" name="hw.product" value="Key Management Server"/>
3289
+ </fingerprint>
3290
+
3291
+ <fingerprint pattern="^Riverbed Technology, Inc\.$">
3292
+ <description>Riverbed Steelhead Appliance</description>
3293
+ <example>Riverbed Technology, Inc.</example>
3294
+ <param pos="0" name="hw.vendor" value="Riverbed"/>
3295
+ <param pos="0" name="hw.device" value="Security Appliance"/>
3296
+ <param pos="0" name="hw.product" value="Steelhead"/>
3297
+ <param pos="0" name="os.product" value="RiOS"/>
3298
+ <param pos="0" name="os.vendor" value="Riverbed"/>
3299
+ <param pos="0" name="os.cpe23" value="cpe:/o:riverbed:rios:-"/>
3300
+ </fingerprint>
3301
+
3302
+ <fingerprint pattern="^ClearPass - Aruba Networks$">
3303
+ <description>ClearPass Policy Manager Appliance</description>
3304
+ <example>ClearPass - Aruba Networks</example>
3305
+ <param pos="0" name="hw.vendor" value="Aruba Networks"/>
3306
+ <param pos="0" name="hw.device" value="Network Appliance"/>
3307
+ <param pos="0" name="hw.product" value="ClearPass Policy Manager"/>
3308
+ <param pos="0" name="service.vendor" value="Aruba Networks"/>
3309
+ <param pos="0" name="service.device" value="Network Appliance"/>
3310
+ <param pos="0" name="service.product" value="ClearPass Policy Manager"/>
3311
+ <param pos="0" name="service.cpe23" value="cpe:/a:arubanetworks:clearpass_policy_manager:-"/>
3312
+ </fingerprint>
3313
+
3314
+ <fingerprint pattern="^MSTR Collab Server$">
3315
+ <description>MicroStrategy Collaboration Server</description>
3316
+ <example>MSTR Collab Server</example>
3317
+ <param pos="0" name="service.vendor" value="MicroStrategy"/>
3318
+ <param pos="0" name="service.product" value="Collaboration Server"/>
3319
+ <param pos="0" name="service.certainty" value="0.5"/>
3320
+ </fingerprint>
3321
+
3322
+ <fingerprint pattern="^Openfire Admin Console$">
3323
+ <description>Openfire Admin Console</description>
3324
+ <example>Openfire Admin Console</example>
3325
+ <param pos="0" name="service.vendor" value="Ignite Realtime"/>
3326
+ <param pos="0" name="service.product" value="OpenFire"/>
3327
+ <param pos="0" name="service.cpe23" value="cpe:/a:igniterealtime:openfire:-"/>
3328
+ </fingerprint>
3329
+
3330
+ <fingerprint pattern="^:: PBX in a Flash">
3331
+ <description>PBX in a Flash</description>
3332
+ <example>:: PBX in a Flash, Welcome!</example>
3333
+ <param pos="0" name="hw.vendor" value="PIAF"/>
3334
+ <param pos="0" name="hw.device" value="SIP Gateway"/>
3335
+ <param pos="0" name="hw.product" value="PIAF Virtual Appliance"/>
3336
+ </fingerprint>
3337
+
3338
+ <fingerprint pattern="^Hak5 Cloud C">
3339
+ <description>Hak5 Cloud c2</description>
3340
+ <example>Hak5 Cloud C²</example>
3341
+ <param pos="0" name="service.vendor" value="Hak5"/>
3342
+ <param pos="0" name="service.product" value="Cloud C2"/>
3343
+ </fingerprint>
3344
+
3345
+ <fingerprint pattern="^Metabase$">
3346
+ <description>Metabase</description>
3347
+ <example>Metabase</example>
3348
+ <param pos="0" name="service.vendor" value="Metabase"/>
3349
+ <param pos="0" name="service.product" value="Metabase"/>
3350
+ <param pos="0" name="service.cpe23" value="cpe:/a:metabase:metabase:-"/>
3351
+ </fingerprint>
3352
+
3353
+ <fingerprint pattern="Nextcloud">
3354
+ <description>Nextcloud</description>
3355
+ <example>Nextcloud</example>
3356
+ <param pos="0" name="service.vendor" value="Nextcloud"/>
3357
+ <param pos="0" name="service.product" value="Nextcloud Server"/>
3358
+ <param pos="0" name="service.cpe23" value="cpe:/a:nextcloud:nextcloud_server:-"/>
3359
+ </fingerprint>
3360
+
3361
+ <fingerprint pattern="^Observium">
3362
+ <description>Observium</description>
3363
+ <example>Observium : - Test infra</example>
3364
+ <param pos="0" name="service.vendor" value="Observium"/>
3365
+ <param pos="0" name="service.product" value="Observium"/>
3366
+ <param pos="0" name="service.cpe23" value="cpe:/a:observium:observium:-"/>
3367
+ </fingerprint>
3368
+
3369
+ <fingerprint pattern="^Login to Webmin$">
3370
+ <description>Webmin</description>
3371
+ <example>Login to Webmin</example>
3372
+ <param pos="0" name="service.vendor" value="Webmin"/>
3373
+ <param pos="0" name="service.product" value="Webmin"/>
3374
+ <param pos="0" name="service.cpe23" value="cpe:/a:webmin:webmin:-"/>
3375
+ </fingerprint>
3376
+
3377
+ <fingerprint pattern="^Login to Usermin$">
3378
+ <description>Usermin</description>
3379
+ <example>Login to Usermin</example>
3380
+ <param pos="0" name="service.vendor" value="Webmin"/>
3381
+ <param pos="0" name="service.product" value="Usermin"/>
3382
+ <param pos="0" name="service.cpe23" value="cpe:/a:webmin:usermin:-"/>
3383
+ </fingerprint>
3384
+
3385
+ <fingerprint pattern="^MoinMoinWiki">
3386
+ <description>Moinmoin wiki</description>
3387
+ <example>MoinMoinWiki - MoinMoin</example>
3388
+ <param pos="0" name="service.vendor" value="MoinMoin"/>
3389
+ <param pos="0" name="service.product" value="MoinMoin"/>
3390
+ <param pos="0" name="service.cpe23" value="cpe:/a:moinmo:moinmoin:-"/>
3391
+ </fingerprint>
3392
+
3393
+ <fingerprint pattern="^(\w+) - BlackBox Management Console$">
3394
+ <description>BlackBox Management Console</description>
3395
+ <example host.name="ABC123">ABC123 - BlackBox Management Console</example>
3396
+ <param pos="0" name="hw.vendor" value="BlackBox"/>
3397
+ <param pos="0" name="hw.device" value="Device Server"/>
3398
+ <param pos="0" name="hw.product" value="BlackBox"/>
3399
+ <param pos="1" name="host.name"/>
3400
+ </fingerprint>
3401
+
3402
+ <fingerprint pattern="^Shelly Color Bulb$">
3403
+ <description>Shelly Smart Bulb</description>
3404
+ <example>Shelly Color Bulb</example>
3405
+ <param pos="0" name="os.vendor" value="Cesanta"/>
3406
+ <param pos="0" name="os.product" value="Mongoose OS"/>
3407
+ <param pos="0" name="os.cpe23" value="cpe:/o:cesanta:mongoose_os:-"/>
3408
+ <param pos="0" name="hw.vendor" value="Shelly"/>
3409
+ <param pos="0" name="hw.device" value="Light Bulb"/>
3410
+ <param pos="0" name="hw.product" value="Color Bulb"/>
3411
+ </fingerprint>
3412
+
3413
+ <fingerprint pattern="^Shelly (Plug|Dimmer(?: 2)?|Switch)$">
3414
+ <description>Shelly Plug/Dimmer/Switch Devices</description>
3415
+ <example hw.product="Plug">Shelly Plug</example>
3416
+ <example hw.product="Dimmer">Shelly Dimmer</example>
3417
+ <example hw.product="Dimmer 2">Shelly Dimmer 2</example>
3418
+ <example hw.product="Switch">Shelly Switch</example>
3419
+ <param pos="0" name="os.vendor" value="Cesanta"/>
3420
+ <param pos="0" name="os.product" value="Mongoose OS"/>
3421
+ <param pos="0" name="os.cpe23" value="cpe:/o:cesanta:mongoose_os:-"/>
3422
+ <param pos="0" name="hw.vendor" value="Shelly"/>
3423
+ <param pos="0" name="hw.device" value="Device"/>
3424
+ <param pos="1" name="hw.product"/>
3425
+ </fingerprint>
3426
+
3427
+ <fingerprint pattern="^Shelly[ ]?(RGBW2|1L)$">
3428
+ <description>Shelly Lighting Controller</description>
3429
+ <example hw.product="RGBW2">Shelly RGBW2</example>
3430
+ <example hw.product="1L">Shelly1L</example>
3431
+ <param pos="0" name="os.vendor" value="Cesanta"/>
3432
+ <param pos="0" name="os.product" value="Mongoose OS"/>
3433
+ <param pos="0" name="os.cpe23" value="cpe:/o:cesanta:mongoose_os:-"/>
3434
+ <param pos="0" name="hw.vendor" value="Shelly"/>
3435
+ <param pos="0" name="hw.device" value="Device"/>
3436
+ <param pos="1" name="hw.product"/>
3437
+ </fingerprint>
3438
+
3439
+ <fingerprint pattern="^TinyGS Configuration$">
3440
+ <description>TinyGS LoRa Ground Station Software</description>
3441
+ <example>TinyGS Configuration</example>
3442
+ <param pos="0" name="service.product" value="TinyGS"/>
3443
+ </fingerprint>
3444
+
3445
+ <fingerprint pattern="^WLED$">
3446
+ <description>WLED Controlled Device</description>
3447
+ <example>WLED</example>
3448
+ <param pos="0" name="service.vendor" value="Aircookie"/>
3449
+ <param pos="0" name="service.product" value="WLED"/>
3450
+ <param pos="0" name="service.device" value="Device"/>
3451
+ </fingerprint>
3452
+
3453
+ <fingerprint pattern="^Freebox OS (?:.*)$">
3454
+ <description>Freebox OS on Freebox Set-top Box Devices</description>
3455
+ <example>Freebox OS :: Identification</example>
3456
+ <param pos="0" name="os.vendor" value="Freebox"/>
3457
+ <param pos="0" name="os.product" value="Freebox OS"/>
3458
+ <param pos="0" name="hw.vendor" value="Freebox"/>
3459
+ <param pos="0" name="hw.device" value="Device"/>
3460
+ </fingerprint>
3461
+
3462
+ <fingerprint pattern="^HP UPS Network Module$">
3463
+ <description>HP RT3000 G2 UPS</description>
3464
+ <example>HP UPS Network Module</example>
3465
+ <param pos="0" name="hw.vendor" value="HP"/>
3466
+ <param pos="0" name="hw.device" value="UPS"/>
3467
+ </fingerprint>
3468
+
3469
+ <fingerprint pattern="^UniFi Network$">
3470
+ <description>Ubiquiti UniFi Network Application</description>
3471
+ <example>UniFi Network</example>
3472
+ <param pos="0" name="service.vendor" value="Ubiquiti"/>
3473
+ <param pos="0" name="service.product" value="UniFi"/>
3474
+ <param pos="0" name="service.device" value="Device"/>
3475
+ <param pos="0" name="service.cpe23" value="cpe:/a:ui:unifi:-"/>
3476
+ </fingerprint>
3477
+
3478
+ <fingerprint pattern="^Login to AdminDroid Office 365 Reporter$">
3479
+ <description>AdminDroid Office 365 Reporter Application</description>
3480
+ <example>Login to AdminDroid Office 365 Reporter</example>
3481
+ <param pos="0" name="service.vendor" value="AdminDroid"/>
3482
+ <param pos="0" name="service.product" value="Office 365 Reporter"/>
3483
+ </fingerprint>
3484
+
3485
+ <fingerprint pattern="^Nanoleaf Firmware Upload$">
3486
+ <description>Nanoleaf LED Lighting</description>
3487
+ <example>Nanoleaf Firmware Upload</example>
3488
+ <param pos="0" name="hw.vendor" value="Nanoleaf"/>
3489
+ <param pos="0" name="hw.device" value="Device"/>
3490
+ </fingerprint>
3491
+
3492
+ <fingerprint pattern="^GoGogate - LAN$">
3493
+ <description>GoGogate Garage Door Opener</description>
3494
+ <example>GoGogate - LAN</example>
3495
+ <param pos="0" name="hw.vendor" value="GoGogate"/>
3496
+ <param pos="0" name="hw.device" value="Device"/>
3497
+ </fingerprint>
3498
+
3499
+ <fingerprint pattern="^ASUS Login$">
3500
+ <description>ASUS Router/Network Device</description>
3501
+ <example>ASUS Login</example>
3502
+ <param pos="0" name="hw.vendor" value="Asus"/>
3503
+ <param pos="0" name="hw.device" value="Device"/>
3504
+ </fingerprint>
3505
+
3506
+ <fingerprint pattern="^GigaBlue Quad Plus - OpenWebif$">
3507
+ <description>GigaBlue Quad Plus Satellite TV Receiver</description>
3508
+ <example>GigaBlue Quad Plus - OpenWebif</example>
3509
+ <param pos="0" name="hw.vendor" value="GigaBlue"/>
3510
+ <param pos="0" name="hw.device" value="Device"/>
3511
+ <param pos="0" name="hw.product" value="Quad Plus Receiver"/>
3512
+ </fingerprint>
3513
+
3514
+ <fingerprint pattern="^Barix Instreamer Instreamer$">
3515
+ <description>Barix Instreamer</description>
3516
+ <example>Barix Instreamer Instreamer</example>
3517
+ <param pos="0" name="hw.vendor" value="Barix"/>
3518
+ <param pos="0" name="hw.device" value="Audio Encoder"/>
3519
+ <param pos="0" name="hw.product" value="Instreamer"/>
3520
+ </fingerprint>
3521
+
3522
+ <fingerprint pattern="^Tracker Display$">
3523
+ <description>SpotterRF</description>
3524
+ <example>Tracker Display</example>
3525
+ <param pos="0" name="os.vendor" value="SpotterRF"/>
3526
+ <param pos="0" name="os.family" value="Linux"/>
3527
+ <param pos="0" name="os.certainty" value="0.90"/>
3528
+ <param pos="0" name="hw.vendor" value="SpotterRF"/>
3529
+ <param pos="0" name="hw.device" value="Sensor"/>
3530
+ <param pos="0" name="hw.product" value="Drone Detector"/>
3531
+ </fingerprint>
3532
+
3533
+ <fingerprint pattern="^Polycom (DMA \d+)$">
3534
+ <description>Polycom DMA 7000</description>
3535
+ <example hw.product="DMA 7000">Polycom DMA 7000</example>
3536
+ <param pos="0" name="hw.vendor" value="Polycom"/>
3537
+ <param pos="0" name="hw.device" value="VoIP"/>
3538
+ <param pos="1" name="hw.product"/>
3539
+ </fingerprint>
3540
+
3541
+ <fingerprint pattern="^VVX(\d{3})$">
3542
+ <description>Polycom VVX VoIP Phones</description>
3543
+ <example hw.model="250">VVX250</example>
3544
+ <param pos="0" name="hw.vendor" value="Polycom"/>
3545
+ <param pos="0" name="hw.device" value="VoIP"/>
3546
+ <param pos="1" name="hw.model"/>
3547
+ <param pos="0" name="hw.product" value="VVX {hw.model}"/>
3548
+ </fingerprint>
3549
+
3550
+ <fingerprint pattern="^(OBi[23]\d{2})">
3551
+ <description>Poly OBI Analog Telephone Adapter</description>
3552
+ <example hw.product="OBi200">OBi200</example>
3553
+ <param pos="0" name="hw.vendor" value="Poly"/>
3554
+ <param pos="0" name="hw.device" value="VoIP"/>
3555
+ <param pos="1" name="hw.product"/>
3556
+ </fingerprint>
3557
+
3558
+ <fingerprint pattern="^Alpha Technologies$">
3559
+ <description>Alpha Technologies Novus UPS</description>
3560
+ <example>Alpha Technologies</example>
3561
+ <param pos="0" name="hw.vendor" value="Alpha Technologies"/>
3562
+ <param pos="0" name="hw.device" value="Power Device"/>
3563
+ <param pos="0" name="hw.product" value="Novus UPS"/>
3564
+ </fingerprint>
3565
+
3566
+ <fingerprint pattern="^Network Management Card$">
3567
+ <description>Eaton UPS Network Card</description>
3568
+ <example>Network Management Card</example>
3569
+ <param pos="0" name="hw.vendor" value="Eaton"/>
3570
+ <param pos="0" name="hw.device" value="Power Device"/>
3571
+ <param pos="0" name="hw.product" value="UPS"/>
3572
+ <param pos="0" name="hw.certainty" value="0.5"/>
3573
+ </fingerprint>
3574
+
3575
+ <fingerprint pattern="^UPS Properties$">
3576
+ <description>APC UPS Network Card</description>
3577
+ <example>UPS Properties</example>
3578
+ <param pos="0" name="hw.vendor" value="APC"/>
3579
+ <param pos="0" name="hw.device" value="Power Device"/>
3580
+ <param pos="0" name="hw.product" value="UPS"/>
3581
+ <param pos="0" name="hw.certainty" value="0.5"/>
3582
+ </fingerprint>
3583
+
3584
+ <fingerprint pattern="^HP ([\w ]+) PostScript">
3585
+ <description>HP Printer</description>
3586
+ <example hw.product="Designjet T1200">HP Designjet T1200 PostScript - Supplies</example>
3587
+ <param pos="0" name="hw.vendor" value="HP"/>
3588
+ <param pos="0" name="hw.family" value="JetDirect"/>
3589
+ <param pos="0" name="hw.device" value="Printer"/>
3590
+ <param pos="1" name="hw.product"/>
3591
+ </fingerprint>
3592
+
3593
+ <fingerprint pattern="^Radio Configuration/Diagnostic Utility$">
3594
+ <description>ProSoft RadioLinx</description>
3595
+ <example>Radio Configuration/Diagnostic Utility</example>
3596
+ <param pos="0" name="hw.vendor" value="ProSoft Technology"/>
3597
+ <param pos="0" name="hw.device" value="WAP"/>
3598
+ <param pos="0" name="hw.product" value="RadioLinx"/>
3599
+ <param pos="0" name="hw.certainty" value="0.5"/>
3600
+ </fingerprint>
3601
+
3602
+ <fingerprint pattern="^Welcome to ntopng$">
3603
+ <description>ntopng Network Analysis Application</description>
3604
+ <example>Welcome to ntopng</example>
3605
+ <param pos="0" name="service.vendor" value="ntop"/>
3606
+ <param pos="0" name="service.product" value="ntopng"/>
3607
+ <param pos="0" name="service.cpe23" value="cpe:/a:ntop:ntopng:-"/>
3608
+ </fingerprint>
3609
+
3610
+ <fingerprint pattern="^FreeNAS$">
3611
+ <description>iXsystems FreeNAS</description>
3612
+ <example>FreeNAS</example>
3613
+ <param pos="0" name="service.vendor" value="iXsystems"/>
3614
+ <param pos="0" name="service.product" value="FreeNAS"/>
3615
+ <param pos="0" name="os.vendor" value="iXsystems"/>
3616
+ <param pos="0" name="os.family" value="FreeBSD"/>
3617
+ <param pos="0" name="os.product" value="FreeNAS Firmware"/>
3618
+ <param pos="0" name="os.cpe23" value="cpe:/o:ixsystems:freenas_firmware:-"/>
3619
+ </fingerprint>
3620
+
3621
+ <fingerprint pattern="^Xerox (.{1,1000}) - \d+\.\d+\.\d+\.\d+$">
3622
+ <description>Xerox Color Printer</description>
3623
+ <example hw.product="Color 570">Xerox Color 570 - 100.100.100.101</example>
3624
+ <param pos="0" name="hw.vendor" value="Xerox"/>
3625
+ <param pos="0" name="hw.device" value="Printer"/>
3626
+ <param pos="1" name="hw.product"/>
3627
+ </fingerprint>
3628
+
3629
+ <fingerprint pattern="^Web Smart Switch$">
3630
+ <description>3Com Switch</description>
3631
+ <example>Web Smart Switch</example>
3632
+ <param pos="0" name="hw.vendor" value="3Com"/>
3633
+ <param pos="0" name="hw.device" value="Switch"/>
3634
+ </fingerprint>
3635
+
3636
+ <fingerprint pattern="^(Quantum) - (Scalar i\d+) Login Screen$">
3637
+ <description>Quantum Scalar Tape Library</description>
3638
+ <example hw.vendor="Quantum" hw.product="Scalar i80">Quantum - Scalar i80 Login Screen</example>
3639
+ <param pos="0" name="hw.device" value="Tape Library"/>
3640
+ <param pos="1" name="hw.vendor"/>
3641
+ <param pos="2" name="hw.product"/>
3642
+ </fingerprint>
3643
+
3644
+ <fingerprint pattern="^Printer Administration$">
3645
+ <description>Weidmüller Printer</description>
3646
+ <example>Printer Administration</example>
3647
+ <param pos="0" name="hw.vendor" value="Weidmüller"/>
3648
+ <param pos="0" name="hw.device" value="Printer"/>
3649
+ </fingerprint>
3650
+
3651
+ <fingerprint pattern="^Machine Identification - (MX-\S+)$">
3652
+ <description>Sharp MX Printer</description>
3653
+ <example hw.product="MX-3071">Machine Identification - MX-3071</example>
3654
+ <param pos="0" name="hw.vendor" value="Sharp"/>
3655
+ <param pos="0" name="hw.device" value="Printer"/>
3656
+ <param pos="1" name="hw.product"/>
3657
+ </fingerprint>
3658
+
3659
+ <fingerprint pattern="^Remote UI: Login: (MF\S+):">
3660
+ <description>Canon MF Printer</description>
3661
+ <example hw.product="MF632C/634C">Remote UI: Login: MF632C/634C: MF632C/634C</example>
3662
+ <param pos="0" name="hw.vendor" value="Canon"/>
3663
+ <param pos="0" name="hw.device" value="Printer"/>
3664
+ <param pos="1" name="hw.product"/>
3665
+ <param pos="0" name="hw.certainty" value="0.8"/>
3666
+ </fingerprint>
3667
+
3668
+ <fingerprint pattern="^Network Video Recorder Login$">
3669
+ <description>Nuuo NVR</description>
3670
+ <example>Network Video Recorder Login</example>
3671
+ <param pos="0" name="hw.vendor" value="Nuuo"/>
3672
+ <param pos="0" name="hw.device" value="DVR"/>
3673
+ </fingerprint>
3674
+
3675
+ <fingerprint pattern="^Evolis Printer$">
3676
+ <description>Evolis Printer</description>
3677
+ <example>Evolis Printer</example>
3678
+ <param pos="0" name="hw.vendor" value="Evolis"/>
3679
+ <param pos="0" name="hw.device" value="Printer"/>
3680
+ </fingerprint>
3681
+
3682
+ <fingerprint pattern="^WyzeOutdoorPlug - ">
3683
+ <description>Wyze Plug Outdoor</description>
3684
+ <example>WyzeOutdoorPlug - Main Menu</example>
3685
+ <param pos="0" name="hw.vendor" value="Wyze"/>
3686
+ <param pos="0" name="hw.device" value="Device"/>
3687
+ <param pos="0" name="hw.product" value="Plug Outdoor"/>
3688
+ </fingerprint>
3689
+
3690
+ <fingerprint pattern="^Aptinex IOT Relay Module - (\d+ Channel) (Rev\S+)?">
3691
+ <description>Aptinex Relay Controller</description>
3692
+ <example aptinex.model="4 Channel" os.version="Rev1.1">Aptinex IOT Relay Module - 4 Channel Rev1.1</example>
3693
+ <param pos="0" name="os.vendor" value="Aptinex"/>
3694
+ <param pos="0" name="hw.vendor" value="Aptinex"/>
3695
+ <param pos="0" name="hw.device" value="Relay Controller"/>
3696
+ <param pos="0" name="hw.product" value="{aptinex.model} Relay Controller"/>
3697
+ <param pos="1" name="aptinex.model"/>
3698
+ <param pos="2" name="os.version"/>
3699
+ </fingerprint>
3700
+
3701
+ <fingerprint pattern="^Diagnoser - Bobcatminer Diagnostic Dashboard$">
3702
+ <description>Bobcat Helium Miner</description>
3703
+ <example>Diagnoser - Bobcatminer Diagnostic Dashboard</example>
3704
+ <param pos="0" name="hw.vendor" value="Bobcat"/>
3705
+ <param pos="0" name="hw.device" value="Device"/>
3706
+ <param pos="0" name="hw.product" value="Helium Miner"/>
3707
+ </fingerprint>
3708
+
3709
+ <fingerprint pattern="^LORIX Manager$">
3710
+ <description>Wifx LORIX One</description>
3711
+ <example>LORIX Manager</example>
3712
+ <param pos="0" name="os.vendor" value="Wifx"/>
3713
+ <param pos="0" name="os.product" value="LORIX OS"/>
3714
+ <param pos="0" name="hw.vendor" value="Wifx"/>
3715
+ <param pos="0" name="hw.device" value="Device"/>
3716
+ <param pos="0" name="hw.product" value="LORIX ONE"/>
3717
+ </fingerprint>
3718
+
3719
+ <fingerprint pattern="^ETERNUS$">
3720
+ <description>Fujitsu ETERNUS Storage Appliance</description>
3721
+ <example>ETERNUS</example>
3722
+ <param pos="0" name="hw.vendor" value="Fujitsu"/>
3723
+ <param pos="0" name="hw.device" value="Storage Appliance"/>
3724
+ <param pos="0" name="hw.product" value="Eternus"/>
3725
+ </fingerprint>
3726
+
2738
3727
  </fingerprints>