recog 2.3.18 → 2.3.22

Sign up to get free protection for your applications and to get access to all the features.
Files changed (73) hide show
  1. checksums.yaml +4 -4
  2. data/.github/dependabot.yml +8 -0
  3. data/.github/workflows/ci.yml +26 -0
  4. data/.github/workflows/verify.yml +89 -0
  5. data/CONTRIBUTING.md +6 -0
  6. data/README.md +17 -0
  7. data/bin/recog_standardize +33 -12
  8. data/bin/recog_verify +1 -2
  9. data/cpe-remap.yaml +355 -200
  10. data/features/verify.feature +14 -14
  11. data/identifiers/README.md +24 -10
  12. data/identifiers/fields.txt +105 -0
  13. data/identifiers/hw_device.txt +8 -0
  14. data/identifiers/hw_family.txt +19 -0
  15. data/identifiers/hw_product.txt +122 -0
  16. data/identifiers/os_device.txt +2 -1
  17. data/identifiers/os_family.txt +3 -0
  18. data/identifiers/os_product.txt +46 -8
  19. data/identifiers/service_family.txt +10 -1
  20. data/identifiers/service_product.txt +90 -2
  21. data/identifiers/vendor.txt +104 -0
  22. data/lib/recog/db.rb +2 -1
  23. data/lib/recog/fingerprint.rb +18 -5
  24. data/lib/recog/nizer.rb +1 -82
  25. data/lib/recog/verifier.rb +5 -5
  26. data/lib/recog/verifier_factory.rb +3 -3
  27. data/lib/recog/verify_reporter.rb +14 -4
  28. data/lib/recog/version.rb +1 -1
  29. data/requirements.txt +1 -1
  30. data/spec/lib/fingerprint_self_test_spec.rb +1 -0
  31. data/spec/lib/recog/verify_reporter_spec.rb +69 -0
  32. data/tools/dev/hooks/pre-commit +21 -0
  33. data/update_cpes.py +19 -6
  34. data/xml/apache_modules.xml +60 -0
  35. data/xml/apache_os.xml +38 -38
  36. data/xml/dhcp_vendor_class.xml +206 -0
  37. data/xml/dns_versionbind.xml +11 -1
  38. data/xml/favicons.xml +270 -45
  39. data/xml/ftp_banners.xml +89 -64
  40. data/xml/h323_callresp.xml +99 -99
  41. data/xml/hp_pjl_id.xml +3 -3
  42. data/xml/html_title.xml +1051 -62
  43. data/xml/http_cookies.xml +294 -85
  44. data/xml/http_servers.xml +551 -122
  45. data/xml/http_wwwauth.xml +139 -43
  46. data/xml/imap_banners.xml +8 -8
  47. data/xml/ldap_searchresult.xml +1 -0
  48. data/xml/mdns_device-info_txt.xml +720 -27
  49. data/xml/mysql_banners.xml +3 -2
  50. data/xml/nntp_banners.xml +4 -4
  51. data/xml/ntp_banners.xml +79 -65
  52. data/xml/operating_system.xml +6 -6
  53. data/xml/pop_banners.xml +11 -11
  54. data/xml/rsh_resp.xml +3 -3
  55. data/xml/rtsp_servers.xml +7 -0
  56. data/xml/sip_banners.xml +374 -9
  57. data/xml/sip_user_agents.xml +377 -5
  58. data/xml/smb_native_lm.xml +32 -1
  59. data/xml/smb_native_os.xml +160 -33
  60. data/xml/smtp_banners.xml +168 -129
  61. data/xml/smtp_ehlo.xml +1 -1
  62. data/xml/smtp_expn.xml +1 -0
  63. data/xml/smtp_help.xml +10 -10
  64. data/xml/smtp_noop.xml +2 -2
  65. data/xml/smtp_vrfy.xml +1 -0
  66. data/xml/snmp_sysdescr.xml +508 -214
  67. data/xml/snmp_sysobjid.xml +25 -25
  68. data/xml/ssh_banners.xml +145 -29
  69. data/xml/telnet_banners.xml +240 -61
  70. data/xml/tls_jarm.xml +162 -0
  71. data/xml/x509_issuers.xml +237 -2
  72. data/xml/x509_subjects.xml +369 -49
  73. metadata +10 -3
data/xml/html_title.xml CHANGED
@@ -1,25 +1,80 @@
1
1
  <?xml version='1.0' encoding='UTF-8'?>
2
- <fingerprints matches="html_title" database_type="service" preference="0.90">
2
+ <fingerprints matches="html_title" protocol="http" database_type="service" preference="0.90">
3
3
  <!-- HTML Title elements found in HTTP response bodies are matched against these patterns to fingerprint HTTP servers. -->
4
4
 
5
5
  <fingerprint pattern="^301 Moved Permanently$">
6
6
  <description>301 Moved Permanently - generic -- assert nothing.</description>
7
7
  <example>301 Moved Permanently</example>
8
+ <param pos="0" name="hw.certainty" value="0.0"/>
9
+ <param pos="0" name="os.certainty" value="0.0"/>
10
+ <param pos="0" name="service.certainty" value="0.0"/>
11
+ </fingerprint>
12
+
13
+ <fingerprint pattern="^302 Found$">
14
+ <description>302 Found - generic -- assert nothing.</description>
15
+ <example>302 Found</example>
16
+ <param pos="0" name="hw.certainty" value="0.0"/>
17
+ <param pos="0" name="os.certainty" value="0.0"/>
18
+ <param pos="0" name="service.certainty" value="0.0"/>
8
19
  </fingerprint>
9
20
 
10
21
  <fingerprint pattern="^400 Bad Request$">
11
22
  <description>400 Bad Request - generic -- assert nothing.</description>
12
23
  <example>400 Bad Request</example>
24
+ <param pos="0" name="hw.certainty" value="0.0"/>
25
+ <param pos="0" name="os.certainty" value="0.0"/>
26
+ <param pos="0" name="service.certainty" value="0.0"/>
13
27
  </fingerprint>
14
28
 
15
29
  <fingerprint pattern="^401 Unauthorized$">
16
30
  <description>401 Unauthorized - generic -- assert nothing.</description>
17
31
  <example>401 Unauthorized</example>
32
+ <param pos="0" name="hw.certainty" value="0.0"/>
33
+ <param pos="0" name="os.certainty" value="0.0"/>
34
+ <param pos="0" name="service.certainty" value="0.0"/>
35
+ </fingerprint>
36
+
37
+ <fingerprint pattern="^403 Forbidden$">
38
+ <description>403 Forbidden - generic -- assert nothing.</description>
39
+ <example>403 Forbidden</example>
40
+ <param pos="0" name="hw.certainty" value="0.0"/>
41
+ <param pos="0" name="os.certainty" value="0.0"/>
42
+ <param pos="0" name="service.certainty" value="0.0"/>
18
43
  </fingerprint>
19
44
 
20
- <fingerprint pattern="^404 Not Found$">
45
+ <fingerprint pattern="^(?:404 )?Not Found$">
21
46
  <description>404 Not Found - generic -- assert nothing.</description>
22
47
  <example>404 Not Found</example>
48
+ <example>Not Found</example>
49
+ <param pos="0" name="hw.certainty" value="0.0"/>
50
+ <param pos="0" name="os.certainty" value="0.0"/>
51
+ <param pos="0" name="service.certainty" value="0.0"/>
52
+ </fingerprint>
53
+
54
+ <fingerprint pattern="^Invalid URL$">
55
+ <description>Invalid URL - generic -- assert nothing.</description>
56
+ <example>Invalid URL</example>
57
+ <param pos="0" name="hw.certainty" value="0.0"/>
58
+ <param pos="0" name="os.certainty" value="0.0"/>
59
+ <param pos="0" name="service.certainty" value="0.0"/>
60
+ </fingerprint>
61
+
62
+ <fingerprint pattern="^ERROR: The request could not be satisfied$">
63
+ <description>Amazon CloudFront web load balancer endpoint</description>
64
+ <example>ERROR: The request could not be satisfied</example>
65
+ <param pos="0" name="service.vendor" value="Amazon"/>
66
+ <param pos="0" name="service.family" value="CloudFront"/>
67
+ <param pos="0" name="service.product" value="CloudFront Load Balancer"/>
68
+ <param pos="0" name="service.cpe23" value="cpe:/a:amazon:amazon_cloudfront:-"/>
69
+ </fingerprint>
70
+
71
+ <fingerprint pattern="^Microsoft Azure Web App - Error 404$">
72
+ <description>Microsoft Azure Web App - Error 404</description>
73
+ <example>Microsoft Azure Web App - Error 404</example>
74
+ <param pos="0" name="service.vendor" value="Microsoft"/>
75
+ <param pos="0" name="service.family" value="Azure"/>
76
+ <param pos="0" name="service.product" value="Azure App Service on Azure Stack"/>
77
+ <param pos="0" name="service.cpe23" value="cpe:/a:microsoft:azure_app_service_on_azure_stack:-"/>
23
78
  </fingerprint>
24
79
 
25
80
  <fingerprint pattern="^Index of /">
@@ -103,9 +158,10 @@
103
158
  <param pos="0" name="service.cpe23" value="cpe:/a:apache:tomcat:-"/>
104
159
  </fingerprint>
105
160
 
106
- <fingerprint pattern="^Apache Tomcat/(\S+)$">
161
+ <fingerprint pattern="^Apache Tomcat/(\S+)(?: - Error report)?$">
107
162
  <description>Apache tomcat with minimal version information</description>
108
163
  <example service.version="8.0.32">Apache Tomcat/8.0.32</example>
164
+ <example service.version="5.5.29">Apache Tomcat/5.5.29 - Error report</example>
109
165
  <param pos="0" name="service.vendor" value="Apache"/>
110
166
  <param pos="0" name="service.product" value="Tomcat"/>
111
167
  <param pos="0" name="service.family" value="Tomcat"/>
@@ -113,6 +169,32 @@
113
169
  <param pos="0" name="service.cpe23" value="cpe:/a:apache:tomcat:{service.version}"/>
114
170
  </fingerprint>
115
171
 
172
+ <fingerprint pattern="^Apache Tomcat/(\S+) \(Ubuntu\) - Error report$">
173
+ <description>Apache Tomcat - Error report on Ubuntu</description>
174
+ <example service.version="8.0.32">Apache Tomcat/8.0.32 (Ubuntu) - Error report</example>
175
+ <param pos="0" name="service.vendor" value="Apache"/>
176
+ <param pos="0" name="service.product" value="Tomcat"/>
177
+ <param pos="0" name="service.family" value="Tomcat"/>
178
+ <param pos="1" name="service.version"/>
179
+ <param pos="0" name="service.cpe23" value="cpe:/a:apache:tomcat:{service.version}"/>
180
+ <param pos="0" name="os.vendor" value="Ubuntu"/>
181
+ <param pos="0" name="os.product" value="Linux"/>
182
+ <param pos="0" name="os.cpe23" value="cpe:/o:canonical:ubuntu_linux:-"/>
183
+ </fingerprint>
184
+
185
+ <fingerprint pattern="^Apache Tomcat/(\S+) \(Debian\) - Error report$">
186
+ <description>Apache Tomcat - Error report on Debian</description>
187
+ <example service.version="7.0.56">Apache Tomcat/7.0.56 (Debian) - Error report</example>
188
+ <param pos="0" name="service.vendor" value="Apache"/>
189
+ <param pos="0" name="service.product" value="Tomcat"/>
190
+ <param pos="0" name="service.family" value="Tomcat"/>
191
+ <param pos="1" name="service.version"/>
192
+ <param pos="0" name="service.cpe23" value="cpe:/a:apache:tomcat:{service.version}"/>
193
+ <param pos="0" name="os.vendor" value="Debian"/>
194
+ <param pos="0" name="os.product" value="Linux"/>
195
+ <param pos="0" name="os.cpe23" value="cpe:/o:debian:debian_linux:-"/>
196
+ </fingerprint>
197
+
116
198
  <fingerprint pattern="^AiCloud">
117
199
  <description>ASUS AiCloud</description>
118
200
  <example>AiCloud</example>
@@ -240,7 +322,7 @@
240
322
  <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows:-"/>
241
323
  </fingerprint>
242
324
 
243
- <fingerprint pattern="^(?:NETIASPOT Management Console|Konsola zarzdzania NETIASPOT)$">
325
+ <fingerprint pattern="^NETIASPOT Management Console|Konsola zarzdzania NETIASPOT$">
244
326
  <description>Netia Spot wireless router</description>
245
327
  <example>Konsola zarzdzania NETIASPOT</example>
246
328
  <example>NETIASPOT Management Console</example>
@@ -255,6 +337,7 @@
255
337
  <param pos="0" name="hw.vendor" value="Philips"/>
256
338
  <param pos="0" name="hw.product" value="Hue"/>
257
339
  <param pos="0" name="hw.device" value="Light Bulb"/>
340
+ <param pos="0" name="hw.cpe23" value="cpe:/h:philips:hue:-"/>
258
341
  </fingerprint>
259
342
 
260
343
  <fingerprint pattern="LANDesk\(R\) Management Agent$">
@@ -291,7 +374,7 @@
291
374
  <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows:-"/>
292
375
  </fingerprint>
293
376
 
294
- <fingerprint pattern="^(?i)Default (?:Parallels )?Plesk (?:Panel )?Page$">
377
+ <fingerprint pattern="(?i)^Default (?:Parallels )?Plesk (?:Panel )?Page$">
295
378
  <description>Plesk web hosting platform with no version</description>
296
379
  <example>Default Parallels Plesk Panel Page</example>
297
380
  <example>Default Parallels Plesk Page</example>
@@ -301,6 +384,14 @@
301
384
  <param pos="0" name="service.cpe23" value="cpe:/a:parallels:parallels_plesk_panel:-"/>
302
385
  </fingerprint>
303
386
 
387
+ <fingerprint pattern="^Sage X3$">
388
+ <description>Sage X3 Syracuse Web Server</description>
389
+ <example>Sage X3</example>
390
+ <param pos="0" name="service.vendor" value="Sage"/>
391
+ <param pos="0" name="service.family" value="Sage X3 Syracuse Web Server"/>
392
+ <param pos="0" name="service.product" value="Sage X3 Syracuse Web Server"/>
393
+ </fingerprint>
394
+
304
395
  <fingerprint pattern="^Web Viewer for Samsung DVR$">
305
396
  <description>Samsung DVRs</description>
306
397
  <example>Web Viewer for Samsung DVR</example>
@@ -308,15 +399,41 @@
308
399
  <param pos="0" name="hw.device" value="DVR"/>
309
400
  </fingerprint>
310
401
 
311
- <fingerprint pattern="^(?i)(?:Dell )?Sonicwall - Authentication$">
402
+ <fingerprint pattern="(?i)^(?:Dell )?Sonicwall - Authentication$">
312
403
  <description>Sonicwall firewalls</description>
313
404
  <example>SonicWall - Authentication</example>
314
405
  <param pos="0" name="os.vendor" value="SonicWall"/>
315
406
  <param pos="0" name="os.device" value="Firewall"/>
316
407
  <param pos="0" name="os.family" value="SonicOS"/>
408
+ <param pos="0" name="os.product" value="SonicOS"/>
409
+ <param pos="0" name="os.cpe23" value="cpe:/o:sonicwall:sonicos:-"/>
410
+ </fingerprint>
411
+
412
+ <fingerprint pattern="^SonicWall Universal Management Suite v(\d+\.\d+)$">
413
+ <description>SonicWall Universal Management Appliance - with version</description>
414
+ <example service.version="8.7">SonicWall Universal Management Suite v8.7</example>
415
+ <param pos="0" name="service.vendor" value="SonicWall"/>
416
+ <param pos="0" name="service.product" value="Universal Management Appliance"/>
417
+ <param pos="1" name="service.version"/>
418
+ <param pos="0" name="service.cpe23" value="cpe:/a:sonicwall:universal_management_appliance:{service.version}"/>
419
+ <param pos="0" name="os.vendor" value="SonicWall"/>
420
+ <param pos="0" name="os.family" value="SonicOS"/>
421
+ <param pos="0" name="os.product" value="SonicOS"/>
422
+ <param pos="0" name="os.cpe23" value="cpe:/o:sonicwall:sonicos:-"/>
423
+ </fingerprint>
424
+
425
+ <fingerprint pattern="^Fireware XTM User Authentication$">
426
+ <description>WatchGuard Fireware XTM login page</description>
427
+ <example>Fireware XTM User Authentication</example>
428
+ <param pos="0" name="service.vendor" value="WatchGuard"/>
429
+ <param pos="0" name="service.product" value="Fireware XTM"/>
430
+ <param pos="0" name="service.cpe23" value="cpe:/a:watchguard:fireware_xtm:-"/>
431
+ <param pos="0" name="os.vendor" value="WatchGuard"/>
432
+ <param pos="0" name="os.product" value="Fireware"/>
433
+ <param pos="0" name="os.cpe23" value="cpe:/o:watchguard:fireware:-"/>
317
434
  </fingerprint>
318
435
 
319
- <fingerprint pattern="^(.*).nbsp;-.nbsp;Synology.nbsp;DiskStation$">
436
+ <fingerprint pattern="^(.{0,512}).nbsp;-.nbsp;Synology.nbsp;DiskStation$">
320
437
  <description>Synology DiskStation</description>
321
438
  <example host.name="DiskStation">DiskStation&amp;nbsp;-&amp;nbsp;Synology&amp;nbsp;DiskStation</example>
322
439
  <example host.name="DS218">DS218&amp;nbsp;-&amp;nbsp;Synology&amp;nbsp;DiskStation</example>
@@ -334,6 +451,10 @@
334
451
  <description>Synology with WebStation web hosting</description>
335
452
  <example>Hello! Welcome to Synology Web Station!</example>
336
453
  <example>Hallo! Herzlich Willkommen bei Synology Web Station!</example>
454
+ <param pos="0" name="service.vendor" value="Synology"/>
455
+ <param pos="0" name="service.family" value="Diskstation"/>
456
+ <param pos="0" name="service.product" value="Web Station"/>
457
+ <param pos="0" name="service.cpe23" value="cpe:/a:synology:web_station:-"/>
337
458
  <param pos="0" name="hw.vendor" value="Synology"/>
338
459
  <param pos="0" name="hw.family" value="DiskStation"/>
339
460
  <param pos="0" name="hw.device" value="NAS"/>
@@ -343,6 +464,14 @@
343
464
  <param pos="0" name="os.vendor" value="Synology"/>
344
465
  </fingerprint>
345
466
 
467
+ <fingerprint pattern="^Synology.nbsp;Router.nbsp;-.nbsp;synology$">
468
+ <description>Synology Router</description>
469
+ <example>Synology&amp;nbsp;Router&amp;nbsp;-&amp;nbsp;synology</example>
470
+ <param pos="0" name="hw.vendor" value="Synology"/>
471
+ <param pos="0" name="hw.device" value="Router"/>
472
+ <param pos="0" name="hw.certainty" value="0.7"/>
473
+ </fingerprint>
474
+
346
475
  <fingerprint pattern="^Web Filter Block Override$">
347
476
  <description>Fortinet FortiGate/Fortiguard Web Filter</description>
348
477
  <example>Web Filter Block Override</example>
@@ -356,6 +485,19 @@
356
485
  <param pos="0" name="hw.device" value="Firewall"/>
357
486
  </fingerprint>
358
487
 
488
+ <fingerprint pattern="^FortiGate$">
489
+ <description>Fortinet FortiGate Network Firewall</description>
490
+ <example>FortiGate</example>
491
+ <param pos="0" name="os.vendor" value="Fortinet"/>
492
+ <param pos="0" name="os.family" value="FortiOS"/>
493
+ <param pos="0" name="os.product" value="FortiOS"/>
494
+ <param pos="0" name="os.device" value="Firewall"/>
495
+ <param pos="0" name="os.cpe23" value="cpe:/o:fortinet:fortios:-"/>
496
+ <param pos="0" name="hw.vendor" value="Fortinet"/>
497
+ <param pos="0" name="hw.family" value="FortiGate"/>
498
+ <param pos="0" name="hw.device" value="Firewall"/>
499
+ </fingerprint>
500
+
359
501
  <!-- Various products by Ubiquiti networks -->
360
502
 
361
503
  <fingerprint pattern="^Ubiquiti Networks$">
@@ -418,7 +560,7 @@
418
560
  <param pos="0" name="service.cpe23" value="cpe:/a:ui:unifi_video:-"/>
419
561
  </fingerprint>
420
562
 
421
- <fingerprint pattern="^(?:UniFi NVR: Software Portal|airVision: \[NVR\] - Software Portal)$">
563
+ <fingerprint pattern="^UniFi NVR: Software Portal|airVision: \[NVR\] - Software Portal$">
422
564
  <description>UniFi NVR for recording from UniFi video cameras</description>
423
565
  <example>UniFi NVR: Software Portal</example>
424
566
  <example>airVision: [NVR] - Software Portal</example>
@@ -428,6 +570,58 @@
428
570
  <param pos="0" name="hw.device" value="DVR"/>
429
571
  </fingerprint>
430
572
 
573
+ <fingerprint pattern="^Welcome to AmpliFi$">
574
+ <description>Ubiquiti AmpliFi Router</description>
575
+ <example>Welcome to AmpliFi</example>
576
+ <param pos="0" name="hw.vendor" value="Ubiquiti"/>
577
+ <param pos="0" name="hw.product" value="AmpliFi"/>
578
+ <param pos="0" name="hw.device" value="Router"/>
579
+ </fingerprint>
580
+
581
+ <!-- Various products by Zyxel -->
582
+
583
+ <fingerprint pattern="^USG60$">
584
+ <description>Zyxel USG60 Unified Security Gateway</description>
585
+ <example>USG60</example>
586
+ <param pos="0" name="os.vendor" value="Zyxel"/>
587
+ <param pos="0" name="os.product" value="USG60 firmware"/>
588
+ <param pos="0" name="os.device" value="Firewall"/>
589
+ <param pos="0" name="os.cpe23" value="cpe:/o:zyxel:usg60_firmware:-"/>
590
+ <param pos="0" name="hw.vendor" value="Zyxel"/>
591
+ <param pos="0" name="hw.family" value="Unified Security Gateway"/>
592
+ <param pos="0" name="hw.product" value="USG60"/>
593
+ <param pos="0" name="hw.device" value="Firewall"/>
594
+ <param pos="0" name="hw.cpe23" value="cpe:/h:zyxel:usg60:-"/>
595
+ </fingerprint>
596
+
597
+ <fingerprint pattern="^USG40$">
598
+ <description>Zyxel USG40 Unified Security Gateway</description>
599
+ <example>USG40</example>
600
+ <param pos="0" name="os.vendor" value="Zyxel"/>
601
+ <param pos="0" name="os.product" value="USG40 firmware"/>
602
+ <param pos="0" name="os.device" value="Firewall"/>
603
+ <param pos="0" name="os.cpe23" value="cpe:/o:zyxel:usg40_firmware:-"/>
604
+ <param pos="0" name="hw.vendor" value="Zyxel"/>
605
+ <param pos="0" name="hw.family" value="Unified Security Gateway"/>
606
+ <param pos="0" name="hw.product" value="USG40"/>
607
+ <param pos="0" name="hw.device" value="Firewall"/>
608
+ <param pos="0" name="hw.cpe23" value="cpe:/h:zyxel:usg40:-"/>
609
+ </fingerprint>
610
+
611
+ <fingerprint pattern="^USG20-VPN$">
612
+ <description>Zyxel USG20-VPN Unified Security Gateway</description>
613
+ <example>USG20-VPN</example>
614
+ <param pos="0" name="os.vendor" value="Zyxel"/>
615
+ <param pos="0" name="os.product" value="USG20-VPN firmware"/>
616
+ <param pos="0" name="os.device" value="Firewall"/>
617
+ <param pos="0" name="os.cpe23" value="cpe:/o:zyxel:usg20-vpn_firmware:-"/>
618
+ <param pos="0" name="hw.vendor" value="Zyxel"/>
619
+ <param pos="0" name="hw.family" value="Unified Security Gateway"/>
620
+ <param pos="0" name="hw.product" value="USG20-VPN"/>
621
+ <param pos="0" name="hw.device" value="Firewall"/>
622
+ <param pos="0" name="hw.cpe23" value="cpe:/h:zyxel:usg20-vpn:-"/>
623
+ </fingerprint>
624
+
431
625
  <fingerprint pattern="^RomPager Embedded Web Server Toolkit$">
432
626
  <description>Embedded HTTP server used by many vendors and device
433
627
  types, including APC, 3Com, Andover Controls, Cisco VoIP, D-Link,
@@ -439,6 +633,18 @@
439
633
  <param pos="0" name="service.product" value="RomPager"/>
440
634
  </fingerprint>
441
635
 
636
+ <fingerprint pattern="^Wowza Streaming Engine 4 (Subscription|Perpetual Pro) Edition (\d\.[\w.]+) build(\d+)$">
637
+ <description>Wowza Streaming Engine</description>
638
+ <example service.version="4.7.7.01" service.version.version="20190222144406">Wowza Streaming Engine 4 Subscription Edition 4.7.7.01 build20190222144406</example>
639
+ <example service.edition="Perpetual Pro">Wowza Streaming Engine 4 Perpetual Pro Edition 4.8.8.01 build20201216140014</example>
640
+ <param pos="0" name="service.vendor" value="Wowza"/>
641
+ <param pos="0" name="service.product" value="Streaming Engine"/>
642
+ <param pos="1" name="service.edition"/>
643
+ <param pos="2" name="service.version"/>
644
+ <param pos="3" name="service.version.version"/>
645
+ <param pos="0" name="service.cpe23" value="cpe:/a:wowza:streaming_engine:{service.version}"/>
646
+ </fingerprint>
647
+
442
648
  <fingerprint pattern="^RouterOS router configuration page$">
443
649
  <description>MikroTik RouterOS router configuration page</description>
444
650
  <example>RouterOS router configuration page</example>
@@ -450,7 +656,17 @@
450
656
  <param pos="0" name="hw.device" value="Router"/>
451
657
  </fingerprint>
452
658
 
453
- <fingerprint pattern="^(?:Welcome to nginx!|Test Page for the Nginx HTTP Server)$">
659
+ <fingerprint pattern="^MikroTik SwOS$">
660
+ <description>MikroTik SwOS switch configuration page</description>
661
+ <example>MikroTik SwOS</example>
662
+ <param pos="0" name="os.vendor" value="MikroTik"/>
663
+ <param pos="0" name="os.device" value="Switch"/>
664
+ <param pos="0" name="os.product" value="SwOS"/>
665
+ <param pos="0" name="hw.vendor" value="MikroTik"/>
666
+ <param pos="0" name="hw.device" value="Switch"/>
667
+ </fingerprint>
668
+
669
+ <fingerprint pattern="^Welcome to nginx!|Test Page for the Nginx HTTP Server$">
454
670
  <description>Default OS-agnostic nginx</description>
455
671
  <example>Welcome to nginx!</example>
456
672
  <example>Test Page for the Nginx HTTP Server</example>
@@ -531,15 +747,20 @@
531
747
  <param pos="1" name="hw.product"/>
532
748
  </fingerprint>
533
749
 
534
- <fingerprint pattern="^Netgear Prosafe Plus Switch$">
750
+ <fingerprint pattern="(?i)^Netgear Prosafe Plus Switch$">
535
751
  <description>Netgear Prosafe Plus Switch</description>
536
752
  <example>Netgear Prosafe Plus Switch</example>
753
+ <example>NETGEAR ProSAFE Plus Switch</example>
754
+ <param pos="0" name="os.vendor" value="Netgear"/>
755
+ <param pos="0" name="os.device" value="Switch"/>
756
+ <param pos="0" name="os.product" value="Prosafe Firmware"/>
757
+ <param pos="0" name="os.cpe23" value="cpe:/o:netgear:prosafe_firmware:-"/>
537
758
  <param pos="0" name="hw.vendor" value="Netgear"/>
538
759
  <param pos="0" name="hw.device" value="Switch"/>
539
760
  <param pos="0" name="hw.product" value="Prosafe Plus"/>
540
761
  </fingerprint>
541
762
 
542
- <fingerprint pattern="^(.*).nbsp;Configuration and Management$">
763
+ <fingerprint pattern="^(.{0,256}).nbsp;Configuration and Management$">
543
764
  <description>Digi Terminal Servers</description>
544
765
  <example hw.product="Digi One SP">Digi One SP&amp;nbsp;Configuration and Management</example>
545
766
  <example hw.product="PortServer TS 4">PortServer TS 4&amp;nbsp;Configuration and Management</example>
@@ -552,6 +773,37 @@
552
773
  <param pos="0" name="os.product" value="NET+OS"/>
553
774
  </fingerprint>
554
775
 
776
+ <fingerprint pattern="^(?:TransPort )?(WR\S+) \(SN: (\d+)\) Configuration and Management$">
777
+ <description>Digi Cellular Routers</description>
778
+ <example hw.product="WR44v2" hw.serial_number="888111" digi.serial_number="888111">WR44v2 (SN: 888111) Configuration and Management</example>
779
+ <example hw.product="WR21" hw.serial_number="888111" digi.serial_number="888111">WR21 (SN: 888111) Configuration and Management</example>
780
+ <example hw.product="WR44v2" hw.serial_number="888111" digi.serial_number="888111">TransPort WR44v2 (SN: 888111) Configuration and Management</example>
781
+ <example hw.product="WR44RR" hw.serial_number="888111" digi.serial_number="888111">TransPort WR44RR (SN: 888111) Configuration and Management</example>
782
+ <example hw.product="WR44" hw.serial_number="888111" digi.serial_number="888111">TransPort WR44 (SN: 888111) Configuration and Management</example>
783
+ <param pos="0" name="hw.vendor" value="Digi"/>
784
+ <param pos="0" name="hw.device" value="Router"/>
785
+ <param pos="1" name="hw.product"/>
786
+ <param pos="2" name="digi.serial_number"/>
787
+ <param pos="2" name="hw.serial_number"/>
788
+ </fingerprint>
789
+
790
+ <fingerprint pattern="^Digi (\S+) - ([a-fA-F0-9]{12})">
791
+ <description>Digi TX Cellular Routers</description>
792
+ <example hw.product="TX54-Dual-Cellular" host.mac="0040FF100000">Digi TX54-Dual-Cellular - 0040FF100000</example>
793
+ <param pos="0" name="hw.vendor" value="Digi"/>
794
+ <param pos="0" name="hw.device" value="Router"/>
795
+ <param pos="1" name="hw.product"/>
796
+ <param pos="2" name="host.mac"/>
797
+ </fingerprint>
798
+
799
+ <fingerprint pattern="^Digi Configuration and Management$">
800
+ <description>Digi Cellular Routers (Generic)</description>
801
+ <example>Digi Configuration and Management</example>
802
+ <param pos="0" name="hw.vendor" value="Digi"/>
803
+ <param pos="0" name="hw.device" value="Router"/>
804
+ <param pos="0" name="hw.certainty" value="0.25"/>
805
+ </fingerprint>
806
+
555
807
  <fingerprint pattern="^NPort Web Console$">
556
808
  <description>Moxa NPort Terminal Servers</description>
557
809
  <example>NPort Web Console</example>
@@ -570,6 +822,14 @@
570
822
  <param pos="1" name="hw.product"/>
571
823
  </fingerprint>
572
824
 
825
+ <fingerprint pattern="^Lantronix WEB-Manager$">
826
+ <description>Lantronix UDS terminal server</description>
827
+ <example>Lantronix WEB-Manager</example>
828
+ <param pos="0" name="hw.vendor" value="Lantronix"/>
829
+ <param pos="0" name="hw.device" value="Device Server"/>
830
+ <param pos="0" name="hw.product" value="UDS"/>
831
+ </fingerprint>
832
+
573
833
  <fingerprint pattern="^(KN\S+) - Cover$">
574
834
  <description>ATEN KVM over IP</description>
575
835
  <example hw.product="KN4140v">KN4140v - Cover</example>
@@ -595,6 +855,14 @@
595
855
  <param pos="0" name="hw.product" value="Lantick Ethernet Relay Controller"/>
596
856
  </fingerprint>
597
857
 
858
+ <fingerprint pattern="^XYTRONIX Relay$">
859
+ <description>Xytronix Relay</description>
860
+ <example>XYTRONIX Relay</example>
861
+ <param pos="0" name="hw.vendor" value="Xytronix"/>
862
+ <param pos="0" name="hw.device" value="Relay Controller"/>
863
+ <param pos="0" name="hw.product" value="Ethernet Relay Controller"/>
864
+ </fingerprint>
865
+
598
866
  <fingerprint pattern="^(myUTN(?:-[a-zA-Z0-9]+)?) Control Center$">
599
867
  <description>myUTN Device Server</description>
600
868
  <example hw.product="myUTN-50a">myUTN-50a Control Center</example>
@@ -652,7 +920,7 @@
652
920
  <param pos="0" name="hw.product" value="Rack PDU Card"/>
653
921
  </fingerprint>
654
922
 
655
- <fingerprint pattern="^(.*) IntelliSlot Web(?:/\d+)? Card?$">
923
+ <fingerprint pattern="^(.{0,256}) IntelliSlot Web(?:/\d+)? Card?$">
656
924
  <description>Emerson Network Power IntelliSlot Web Card and rebrands</description>
657
925
  <example hw.vendor="Emerson Network Power">Emerson Network Power IntelliSlot Web Card</example>
658
926
  <example hw.vendor="Emerson Network Power">Emerson Network Power IntelliSlot Web/485 Card</example>
@@ -798,11 +1066,12 @@
798
1066
  <param pos="0" name="hw.device" value="Lights Out Management"/>
799
1067
  <param pos="0" name="hw.vendor" value="HP"/>
800
1068
  <param pos="0" name="hw.product" value="iLO"/>
801
- <param pos="0" name="hw.cpe23" value="cpe:/h:hp:integrated_lights_out:-"/>
1069
+ <param pos="0" name="hw.cpe23" value="cpe:/h:hp:integrated_lights-out:-"/>
802
1070
  <param pos="0" name="os.vendor" value="HP"/>
803
1071
  <param pos="0" name="os.device" value="Lights Out Management"/>
804
1072
  <param pos="0" name="os.family" value="iLO"/>
805
1073
  <param pos="0" name="os.product" value="iLO"/>
1074
+ <param pos="0" name="os.cpe23" value="cpe:/o:hp:integrated_lights-out_firmware:-"/>
806
1075
  </fingerprint>
807
1076
 
808
1077
  <fingerprint pattern="^HP Integrated Lights-Out 2$">
@@ -811,24 +1080,38 @@
811
1080
  <param pos="0" name="hw.device" value="Lights Out Management"/>
812
1081
  <param pos="0" name="hw.vendor" value="HP"/>
813
1082
  <param pos="0" name="hw.product" value="iLO"/>
814
- <param pos="0" name="hw.cpe23" value="cpe:/h:hp:integrated_lights_out:-"/>
1083
+ <param pos="0" name="hw.cpe23" value="cpe:/h:hp:integrated_lights-out:-"/>
815
1084
  <param pos="0" name="os.vendor" value="HP"/>
816
1085
  <param pos="0" name="os.device" value="Lights Out Management"/>
817
1086
  <param pos="0" name="os.family" value="iLO"/>
818
1087
  <param pos="0" name="os.product" value="iLO 2"/>
1088
+ <param pos="0" name="os.cpe23" value="cpe:/o:hp:integrated_lights-out_2_firmware:-"/>
819
1089
  </fingerprint>
820
1090
 
821
- <fingerprint pattern="^(iLO \d+)$">
822
- <description>HP Integrated Lights-Out 3+</description>
823
- <example hw.product="iLO 3" os.product="iLO 3">iLO 3</example>
824
- <example hw.product="iLO 4" os.product="iLO 4">iLO 4</example>
1091
+ <fingerprint pattern="^iLO 3$">
1092
+ <description>HP Integrated Lights-Out 3</description>
1093
+ <example>iLO 3</example>
825
1094
  <param pos="0" name="hw.device" value="Lights Out Management"/>
826
1095
  <param pos="0" name="hw.vendor" value="HP"/>
827
- <param pos="1" name="hw.product"/>
1096
+ <param pos="0" name="hw.product" value="iLO 3"/>
828
1097
  <param pos="0" name="os.vendor" value="HP"/>
829
1098
  <param pos="0" name="os.device" value="Lights Out Management"/>
830
1099
  <param pos="0" name="os.family" value="iLO"/>
831
- <param pos="1" name="os.product"/>
1100
+ <param pos="0" name="os.product" value="iLO 3"/>
1101
+ <param pos="0" name="os.cpe23" value="cpe:/o:hp:integrated_lights-out_3_firmware:-"/>
1102
+ </fingerprint>
1103
+
1104
+ <fingerprint pattern="^iLO 4$">
1105
+ <description>HP Integrated Lights-Out 4</description>
1106
+ <example>iLO 4</example>
1107
+ <param pos="0" name="hw.device" value="Lights Out Management"/>
1108
+ <param pos="0" name="hw.vendor" value="HP"/>
1109
+ <param pos="0" name="hw.product" value="iLO 4"/>
1110
+ <param pos="0" name="os.vendor" value="HP"/>
1111
+ <param pos="0" name="os.device" value="Lights Out Management"/>
1112
+ <param pos="0" name="os.family" value="iLO"/>
1113
+ <param pos="0" name="os.product" value="iLO 4"/>
1114
+ <param pos="0" name="os.cpe23" value="cpe:/o:hp:integrated_lights-out_4_firmware:-"/>
832
1115
  </fingerprint>
833
1116
 
834
1117
  <fingerprint pattern="^HPE SimpliVity OmniStack$">
@@ -855,7 +1138,7 @@
855
1138
  <param pos="0" name="hw.product" value="OpenManage Switch"/>
856
1139
  </fingerprint>
857
1140
 
858
- <fingerprint pattern="^(\S+)\s+-\s+ProCurve Switch (\S+) \((.*)\)$">
1141
+ <fingerprint pattern="^(\S{1,512})\s{1,8}-\s{1,8}ProCurve Switch (\S+) \((.*)\)$">
859
1142
  <description>HPE ProCurve Switch w/Hostname</description>
860
1143
  <example host.name="SW1" hw.product="4204vl" procurve.model="J8770A">SW1 - ProCurve Switch 4204vl (J8770A)</example>
861
1144
  <param pos="0" name="hw.vendor" value="HPE"/>
@@ -951,20 +1234,39 @@
951
1234
 
952
1235
  <fingerprint pattern="^Agilent 33220A \((.*)\)$">
953
1236
  <description>Agilent 33220A</description>
954
- <example agilent.serial="MY44041111">Agilent 33220A (MY44041111)</example>
1237
+ <example agilent.serial="MY44041111" hw.serial_number="MY44041111">Agilent 33220A (MY44041111)</example>
955
1238
  <param pos="0" name="hw.vendor" value="Agilent"/>
956
1239
  <param pos="0" name="hw.device" value="Test Instrument"/>
957
1240
  <param pos="0" name="hw.product" value="33220A Waveform Generator"/>
958
1241
  <param pos="1" name="agilent.serial"/>
1242
+ <param pos="1" name="hw.serial_number"/>
959
1243
  </fingerprint>
960
1244
 
961
1245
  <fingerprint pattern="^Agilent N5172B (?:EXG )?(MY\S+)$">
962
1246
  <description>Agilent N5172B</description>
963
- <example agilent.serial="MY44041111">Agilent N5172B EXG MY44041111</example>
1247
+ <example agilent.serial="MY44041111" hw.serial_number="MY44041111">Agilent N5172B EXG MY44041111</example>
964
1248
  <param pos="0" name="hw.vendor" value="Agilent"/>
965
1249
  <param pos="0" name="hw.device" value="Test Instrument"/>
966
1250
  <param pos="0" name="hw.product" value="N5172B Signal Generator"/>
967
1251
  <param pos="1" name="agilent.serial"/>
1252
+ <param pos="1" name="hw.serial_number"/>
1253
+ </fingerprint>
1254
+
1255
+ <fingerprint pattern="^Agilent E5810 \(([a-fA-F0-9-]{17})\)$">
1256
+ <description>Agilent E5810 Instrument Gateway Device</description>
1257
+ <example host.mac="00-30-D3-01-01-01">Agilent E5810 (00-30-D3-01-01-01)</example>
1258
+ <param pos="0" name="hw.vendor" value="Agilent"/>
1259
+ <param pos="0" name="hw.device" value="Test Instrument"/>
1260
+ <param pos="0" name="hw.product" value="E5810 Gateway Device"/>
1261
+ <param pos="1" name="host.mac"/>
1262
+ </fingerprint>
1263
+
1264
+ <fingerprint pattern="^LXI - Agilent Technologies - N1913A - EPM Series Power Meter$">
1265
+ <description>Agilent N1913A EPM Series Power Meter</description>
1266
+ <example>LXI - Agilent Technologies - N1913A - EPM Series Power Meter</example>
1267
+ <param pos="0" name="hw.vendor" value="Agilent"/>
1268
+ <param pos="0" name="hw.device" value="Test Instrument"/>
1269
+ <param pos="0" name="hw.product" value="N1913A Power Meter"/>
968
1270
  </fingerprint>
969
1271
 
970
1272
  <fingerprint pattern="^Polycom - Configuration Utility$">
@@ -984,6 +1286,14 @@
984
1286
  <param pos="0" name="hw.device" value="VoIP"/>
985
1287
  </fingerprint>
986
1288
 
1289
+ <fingerprint pattern="^3CX Phone System Management Console$">
1290
+ <description>3CX Phone System Management Console</description>
1291
+ <example>3CX Phone System Management Console</example>
1292
+ <param pos="0" name="service.vendor" value="3CX"/>
1293
+ <param pos="0" name="service.product" value="3CX Web Server"/>
1294
+ <param pos="0" name="service.cpe23" value="cpe:/a:3cx:3cx_web_server:-"/>
1295
+ </fingerprint>
1296
+
987
1297
  <fingerprint pattern="^(SPA\S+) Configuration Utility$">
988
1298
  <description>Cisco IP Phone - SPA504G Configuration Utility</description>
989
1299
  <example hw.product="SPA504G">SPA504G Configuration Utility</example>
@@ -992,6 +1302,15 @@
992
1302
  <param pos="1" name="hw.product"/>
993
1303
  </fingerprint>
994
1304
 
1305
+ <fingerprint pattern="^(SPA\S+) Device Information \(SEP(\S+)\)$">
1306
+ <description>Cisco IP Phone - SPA504G</description>
1307
+ <example hw.product="SPA504G" host.mac="0123456789ab">SPA504G Device Information (SEP0123456789ab)</example>
1308
+ <param pos="0" name="hw.vendor" value="Cisco"/>
1309
+ <param pos="0" name="hw.device" value="VoIP"/>
1310
+ <param pos="1" name="hw.product"/>
1311
+ <param pos="2" name="host.mac"/>
1312
+ </fingerprint>
1313
+
995
1314
  <fingerprint pattern="^Cisco (?:SPA Configuration|IP Phone)$">
996
1315
  <description>Cisco IP Phone </description>
997
1316
  <example>Cisco SPA Configuration</example>
@@ -1048,7 +1367,6 @@
1048
1367
  <param pos="0" name="os.device" value="Switch"/>
1049
1368
  <param pos="0" name="os.product" value="MDS 9000"/>
1050
1369
  <param pos="1" name="os.version"/>
1051
- <param pos="0" name="os.cpe23" value="cpe:/o:cisco:mds_9000:{os.version}"/>
1052
1370
  </fingerprint>
1053
1371
 
1054
1372
  <fingerprint pattern="^Stealthwatch Management Console$">
@@ -1102,13 +1420,21 @@
1102
1420
  <param pos="0" name="os.vendor" value="Cisco"/>
1103
1421
  <param pos="0" name="os.device" value="Wireless Controller"/>
1104
1422
  <param pos="0" name="os.product" value="Wireless LAN Controller"/>
1105
- <param pos="0" name="os.cpe23" value="cpe:/o:cisco:wireless_lan_controller:-"/>
1423
+ <param pos="0" name="os.cpe23" value="cpe:/o:cisco:wireless_lan_controller_software:-"/>
1106
1424
  <param pos="0" name="hw.vendor" value="Cisco"/>
1107
1425
  <param pos="0" name="hw.device" value="Wireless Controller"/>
1108
1426
  <param pos="0" name="hw.product" value="Wireless LAN Controller"/>
1109
1427
  <param pos="0" name="hw.cpe23" value="cpe:/h:cisco:wireless_lan_controller:-"/>
1110
1428
  </fingerprint>
1111
1429
 
1430
+ <fingerprint pattern="^Cisco ASDM (\S+)$">
1431
+ <description>Cisco Adaptive Security Device Manager Application</description>
1432
+ <example service.version="6.4(7)">Cisco ASDM 6.4(7)</example>
1433
+ <param pos="0" name="service.vendor" value="Cisco"/>
1434
+ <param pos="0" name="service.product" value="ASDM"/>
1435
+ <param pos="1" name="service.version"/>
1436
+ </fingerprint>
1437
+
1112
1438
  <fingerprint pattern="^Duo Access Gateway$">
1113
1439
  <description>Duo Access Gateway</description>
1114
1440
  <example>Duo Access Gateway</example>
@@ -1207,6 +1533,7 @@
1207
1533
  <param pos="0" name="hw.vendor" value="KACE"/>
1208
1534
  <param pos="0" name="hw.device" value="Support Appliance"/>
1209
1535
  <param pos="0" name="hw.product" value="K1000"/>
1536
+ <param pos="0" name="hw.cpe23" value="cpe:/h:dell:kace_k1000_systems_management_appliance:-"/>
1210
1537
  <param pos="0" name="os.vendor" value="KACE"/>
1211
1538
  <param pos="0" name="os.family" value="FreeBSD"/>
1212
1539
  </fingerprint>
@@ -1260,6 +1587,36 @@
1260
1587
  <param pos="0" name="os.product" value="SmartServer"/>
1261
1588
  </fingerprint>
1262
1589
 
1590
+ <!-- Various products by Avocent -->
1591
+
1592
+ <fingerprint pattern="^Avocent AutoView ([^/$]+)">
1593
+ <description>Avocent AutoView KVM</description>
1594
+ <example hw.model="3100">Avocent AutoView 3100/3200</example>
1595
+ <example hw.model="3050">Avocent AutoView 3050</example>
1596
+ <param pos="0" name="hw.vendor" value="Avocent"/>
1597
+ <param pos="0" name="hw.device" value="KVM"/>
1598
+ <param pos="1" name="hw.model"/>
1599
+ <param pos="0" name="hw.product" value="AutoView {hw.model}"/>
1600
+ </fingerprint>
1601
+
1602
+ <!-- Various products by Aerohive -->
1603
+
1604
+ <fingerprint pattern="^Aerohive HiveUI$">
1605
+ <description>Aerohive Access Point</description>
1606
+ <example>Aerohive HiveUI</example>
1607
+ <param pos="0" name="hw.vendor" value="Aerohive"/>
1608
+ <param pos="0" name="hw.device" value="WAP"/>
1609
+ </fingerprint>
1610
+
1611
+ <!-- Various products by Ruckus -->
1612
+
1613
+ <fingerprint pattern="^Ruckus Wireless Admin$">
1614
+ <description>Ruckus Wireless Access Point</description>
1615
+ <example>Ruckus Wireless Admin</example>
1616
+ <param pos="0" name="hw.vendor" value="Ruckus"/>
1617
+ <param pos="0" name="hw.device" value="WAP"/>
1618
+ </fingerprint>
1619
+
1263
1620
  <!-- Various ICS/OT -->
1264
1621
 
1265
1622
  <fingerprint pattern="^CTI (25\S+) Main Menu$">
@@ -1419,7 +1776,26 @@
1419
1776
  <param pos="0" name="service.vendor" value="Citrix"/>
1420
1777
  <param pos="0" name="service.product" value="XenServer"/>
1421
1778
  <param pos="1" name="service.version"/>
1779
+ <param pos="0" name="service.device" value="Hypervisor"/>
1422
1780
  <param pos="0" name="service.cpe23" value="cpe:/a:citrix:xenserver:{service.version}"/>
1781
+ <param pos="0" name="os.vendor" value="Citrix"/>
1782
+ <param pos="0" name="os.product" value="XenServer"/>
1783
+ <param pos="0" name="os.device" value="Hypervisor"/>
1784
+ <param pos="0" name="hw.device" value="Hypervisor"/>
1785
+ </fingerprint>
1786
+
1787
+ <fingerprint pattern="^Welcome to Citrix Hypervisor ([0-9\.]+)$">
1788
+ <description>XenServer - Hypervisor variant</description>
1789
+ <example service.version="8.2.0">Welcome to Citrix Hypervisor 8.2.0</example>
1790
+ <param pos="0" name="service.vendor" value="Citrix"/>
1791
+ <param pos="0" name="service.product" value="XenServer"/>
1792
+ <param pos="1" name="service.version"/>
1793
+ <param pos="0" name="service.device" value="Hypervisor"/>
1794
+ <param pos="0" name="service.cpe23" value="cpe:/a:citrix:xenserver:{service.version}"/>
1795
+ <param pos="0" name="os.vendor" value="Citrix"/>
1796
+ <param pos="0" name="os.product" value="XenServer"/>
1797
+ <param pos="0" name="os.device" value="Hypervisor"/>
1798
+ <param pos="0" name="hw.device" value="Hypervisor"/>
1423
1799
  </fingerprint>
1424
1800
 
1425
1801
  <fingerprint pattern="^RabbitMQ Management$">
@@ -1469,7 +1845,7 @@
1469
1845
  <param pos="0" name="service.cpe23" value="cpe:/a:realvnc:realvnc:-"/>
1470
1846
  </fingerprint>
1471
1847
 
1472
- <fingerprint pattern="^.* \[Jenkins\]$">
1848
+ <fingerprint pattern="^.{0,1000} \[Jenkins\]$">
1473
1849
  <description>Jenkins Customized Dashboard</description>
1474
1850
  <example>Continuous Integrations [Jenkins]</example>
1475
1851
  <example>Dashboard [Jenkins]</example>
@@ -1501,10 +1877,11 @@
1501
1877
  </fingerprint>
1502
1878
 
1503
1879
  <fingerprint pattern="^Login - OpenStack Dashboard$">
1504
- <description>OpenStack Dashboard</description>
1880
+ <description>OpenStack Horizon Dashboard</description>
1505
1881
  <example>Login - OpenStack Dashboard</example>
1506
1882
  <param pos="0" name="service.vendor" value="OpenStack"/>
1507
- <param pos="0" name="service.product" value="Dashboard"/>
1883
+ <param pos="0" name="service.product" value="Horizon"/>
1884
+ <param pos="0" name="service.cpe23" value="cpe:/a:openstack:horizon:-"/>
1508
1885
  </fingerprint>
1509
1886
 
1510
1887
  <fingerprint pattern="^splunkd$">
@@ -1538,6 +1915,34 @@
1538
1915
  <param pos="0" name="service.product" value="Site Recovery Manager"/>
1539
1916
  </fingerprint>
1540
1917
 
1918
+ <fingerprint pattern="^&quot; \+ ID_VC_Welcome \+ &quot;$">
1919
+ <description>VMware vCenter</description>
1920
+ <example>" + ID_VC_Welcome + "</example>
1921
+ <param pos="0" name="service.vendor" value="VMware"/>
1922
+ <param pos="0" name="service.product" value="vCenter"/>
1923
+ <param pos="0" name="service.cpe23" value="cpe:/a:vmware:vcenter_server:-"/>
1924
+ </fingerprint>
1925
+
1926
+ <fingerprint pattern="^&quot; \+ ID_EESX_Welcome \+ &quot;$">
1927
+ <description>VMware ESXi</description>
1928
+ <example>" + ID_EESX_Welcome + "</example>
1929
+ <param pos="0" name="service.vendor" value="VMware"/>
1930
+ <param pos="0" name="os.vendor" value="VMware"/>
1931
+ <param pos="0" name="os.family" value="VMware ESX/ESXi"/>
1932
+ <param pos="0" name="os.product" value="VMware ESXi Server"/>
1933
+ <param pos="0" name="os.device" value="Hypervisor"/>
1934
+ <param pos="0" name="os.cpe23" value="cpe:/o:vmware:esxi:-"/>
1935
+ <param pos="0" name="hw.device" value="Hypervisor"/>
1936
+ </fingerprint>
1937
+
1938
+ <fingerprint pattern="^&quot; \+ ID_Converter_Welcome \+ &quot;$">
1939
+ <description>VMware Converter</description>
1940
+ <example>" + ID_Converter_Welcome + "</example>
1941
+ <param pos="0" name="service.vendor" value="VMware"/>
1942
+ <param pos="0" name="service.product" value="vCenter Converter"/>
1943
+ <param pos="0" name="service.cpe23" value="cpe:/a:vmware:vcenter_converter:-"/>
1944
+ </fingerprint>
1945
+
1541
1946
  <fingerprint pattern="^Graylog Web Interface$">
1542
1947
  <description>Graylog Web Interface</description>
1543
1948
  <example>Graylog Web Interface</example>
@@ -1593,7 +1998,15 @@
1593
1998
  <example>ManageEngine OpManager</example>
1594
1999
  <param pos="0" name="service.vendor" value="ManageEngine"/>
1595
2000
  <param pos="0" name="service.product" value="OpManager"/>
1596
- <param pos="0" name="service.cpe23" value="cpe:/a:manageengine:opmanager:-"/>
2001
+ <param pos="0" name="service.cpe23" value="cpe:/a:zohocorp:manageengine_opmanager:-"/>
2002
+ </fingerprint>
2003
+
2004
+ <fingerprint pattern="^ManageEngine Desktop Central 9$">
2005
+ <description>ManageEngine Desktop Central 9</description>
2006
+ <example>ManageEngine Desktop Central 9</example>
2007
+ <param pos="0" name="service.vendor" value="ManageEngine"/>
2008
+ <param pos="0" name="service.product" value="Desktop Central"/>
2009
+ <param pos="0" name="service.cpe23" value="cpe:/a:manageengine:desktop_central:-"/>
1597
2010
  </fingerprint>
1598
2011
 
1599
2012
  <fingerprint pattern="^ManageEngine ADAudit Plus$">
@@ -1601,6 +2014,7 @@
1601
2014
  <example>ManageEngine ADAudit Plus</example>
1602
2015
  <param pos="0" name="service.vendor" value="ManageEngine"/>
1603
2016
  <param pos="0" name="service.product" value="ADAudit Plus"/>
2017
+ <param pos="0" name="service.cpe23" value="cpe:/a:zohocorp:manageengine_adaudit_plus:-"/>
1604
2018
  </fingerprint>
1605
2019
 
1606
2020
  <fingerprint pattern="^(ScanFront \d.+)Web Menu$">
@@ -1659,11 +2073,17 @@
1659
2073
  <param pos="0" name="os.family" value="NetScaler"/>
1660
2074
  <param pos="0" name="os.device" value="Network Management Device"/>
1661
2075
  <param pos="0" name="os.product" value="NetScaler"/>
2076
+ <param pos="0" name="os.cpe23" value="cpe:/o:citrix:netscaler_firmware:-"/>
1662
2077
  <param pos="0" name="service.vendor" value="Citrix"/>
1663
2078
  <param pos="0" name="service.family" value="NetScaler"/>
1664
2079
  <param pos="0" name="service.device" value="Network Management Device"/>
1665
2080
  <param pos="0" name="service.product" value="NetScaler"/>
1666
2081
  <param pos="0" name="service.cpe23" value="cpe:/a:citrix:netscaler:-"/>
2082
+ <param pos="0" name="hw.vendor" value="Citrix"/>
2083
+ <param pos="0" name="hw.family" value="NetScaler"/>
2084
+ <param pos="0" name="hw.device" value="Network Management Device"/>
2085
+ <param pos="0" name="hw.product" value="NetScaler Gateway"/>
2086
+ <param pos="0" name="hw.cpe23" value="cpe:/h:citrix:netscaler_gateway:-"/>
1667
2087
  </fingerprint>
1668
2088
 
1669
2089
  <fingerprint pattern="^Netscaler Gateway$">
@@ -1673,10 +2093,17 @@
1673
2093
  <param pos="0" name="os.family" value="NetScaler"/>
1674
2094
  <param pos="0" name="os.device" value="Network Management Device"/>
1675
2095
  <param pos="0" name="os.product" value="NetScaler Gateway"/>
2096
+ <param pos="0" name="os.cpe23" value="cpe:/o:citrix:netscaler_gateway_firmware:-"/>
1676
2097
  <param pos="0" name="service.vendor" value="Citrix"/>
1677
2098
  <param pos="0" name="service.family" value="NetScaler"/>
1678
2099
  <param pos="0" name="service.device" value="Network Management Device"/>
1679
2100
  <param pos="0" name="service.product" value="NetScaler Gateway"/>
2101
+ <param pos="0" name="service.cpe23" value="cpe:/a:citrix:netscaler_gateway:-"/>
2102
+ <param pos="0" name="hw.vendor" value="Citrix"/>
2103
+ <param pos="0" name="hw.family" value="NetScaler"/>
2104
+ <param pos="0" name="hw.device" value="Network Management Device"/>
2105
+ <param pos="0" name="hw.product" value="NetScaler Gateway"/>
2106
+ <param pos="0" name="hw.cpe23" value="cpe:/h:citrix:netscaler_gateway:-"/>
1680
2107
  </fingerprint>
1681
2108
 
1682
2109
  <fingerprint pattern="^Citrix (?:NetScaler SDX|ADC SDX)$">
@@ -1691,6 +2118,11 @@
1691
2118
  <param pos="0" name="service.family" value="NetScaler"/>
1692
2119
  <param pos="0" name="service.device" value="Network Management Device"/>
1693
2120
  <param pos="0" name="service.product" value="NetScaler SDX Gateway"/>
2121
+ <param pos="0" name="hw.vendor" value="Citrix"/>
2122
+ <param pos="0" name="hw.family" value="NetScaler"/>
2123
+ <param pos="0" name="hw.device" value="Network Management Device"/>
2124
+ <param pos="0" name="hw.product" value="NetScaler SDX Gateway"/>
2125
+ <param pos="0" name="hw.cpe23" value="cpe:/h:citrix:netscaler_sdx:-"/>
1694
2126
  </fingerprint>
1695
2127
 
1696
2128
  <fingerprint pattern="^Citrix NetScaler Insight Center$">
@@ -1755,7 +2187,7 @@
1755
2187
  <description>Pure Storage Appliance</description>
1756
2188
  <example>Pure Storage Login</example>
1757
2189
  <param pos="0" name="hw.vendor" value="Pure Storage"/>
1758
- <param pos="0" name="hw.device" value="NAS"/>
2190
+ <param pos="0" name="hw.device" value="Storage Appliance"/>
1759
2191
  <param pos="0" name="hw.product" value="Appliance"/>
1760
2192
  </fingerprint>
1761
2193
 
@@ -1804,22 +2236,22 @@
1804
2236
 
1805
2237
  <fingerprint pattern="^AVTECH Software, Inc\. - Room Alert(?:&amp;reg;)?\s+([a-zA-Z0-9/]+) - Advanced">
1806
2238
  <description>AVTECH RoomAlert</description>
1807
- <example hw.product="Room Alert 11E" hw.product.model="11E">AVTECH Software, Inc. - Room Alert 11E - Advanced Computer Room Environment Monitoring, Alerting &amp;amp; Automatic Corrective Action</example>
1808
- <example hw.product="Room Alert 32E/W" hw.product.model="32E/W">AVTECH Software, Inc. - Room Alert 32E/W - Advanced Computer Room Environment Monitoring, Alerting &amp;amp; Automatic Corrective Action</example>
1809
- <example hw.product="Room Alert 32E/W" hw.product.model="32E/W">AVTECH Software, Inc. - Room Alert&amp;reg; 32E/W - Advanced Computer Room Monitoring, Alerting &amp;amp; Automatic Corrective Action</example>
2239
+ <example hw.product="Room Alert 11E" hw.model="11E">AVTECH Software, Inc. - Room Alert 11E - Advanced Computer Room Environment Monitoring, Alerting &amp;amp; Automatic Corrective Action</example>
2240
+ <example hw.product="Room Alert 32E/W" hw.model="32E/W">AVTECH Software, Inc. - Room Alert 32E/W - Advanced Computer Room Environment Monitoring, Alerting &amp;amp; Automatic Corrective Action</example>
2241
+ <example hw.product="Room Alert 32E/W" hw.model="32E/W">AVTECH Software, Inc. - Room Alert&amp;reg; 32E/W - Advanced Computer Room Monitoring, Alerting &amp;amp; Automatic Corrective Action</example>
1810
2242
  <param pos="0" name="hw.vendor" value="AVTECH"/>
1811
2243
  <param pos="0" name="hw.device" value="Monitoring"/>
1812
- <param pos="1" name="hw.product.model"/>
1813
- <param pos="0" name="hw.product" value="Room Alert {hw.product.model}"/>
2244
+ <param pos="1" name="hw.model"/>
2245
+ <param pos="0" name="hw.product" value="Room Alert {hw.model}"/>
1814
2246
  </fingerprint>
1815
2247
 
1816
2248
  <fingerprint pattern="^AVTECH Software, Inc\. - TemPageR\s+([a-zA-Z0-9/]+) - Real-Time">
1817
2249
  <description>AVTECH TepPageR</description>
1818
- <example hw.product="TemPageR 3E" hw.product.model="3E">AVTECH Software, Inc. - TemPageR 3E - Real-Time Temperature Monitor For IT &amp;amp; Facilities Environment Monitoring</example>
2250
+ <example hw.product="TemPageR 3E" hw.model="3E">AVTECH Software, Inc. - TemPageR 3E - Real-Time Temperature Monitor For IT &amp;amp; Facilities Environment Monitoring</example>
1819
2251
  <param pos="0" name="hw.vendor" value="AVTECH"/>
1820
2252
  <param pos="0" name="hw.device" value="Monitoring"/>
1821
- <param pos="1" name="hw.product.model"/>
1822
- <param pos="0" name="hw.product" value="TemPageR {hw.product.model}"/>
2253
+ <param pos="1" name="hw.model"/>
2254
+ <param pos="0" name="hw.product" value="TemPageR {hw.model}"/>
1823
2255
  </fingerprint>
1824
2256
 
1825
2257
  <fingerprint pattern="^AppDynamics$">
@@ -1938,7 +2370,7 @@
1938
2370
  <param pos="0" name="hw.product" value="Network Node"/>
1939
2371
  </fingerprint>
1940
2372
 
1941
- <fingerprint pattern="^(?:S2 Netbox Login|Home - NetBox)$">
2373
+ <fingerprint pattern="^S2 Netbox Login|Home - NetBox$">
1942
2374
  <description>S2 Netbox Appliance</description>
1943
2375
  <example>S2 Netbox Login</example>
1944
2376
  <example>Home - NetBox</example>
@@ -1990,7 +2422,7 @@
1990
2422
  <param pos="0" name="service.cpe23" value="cpe:/a:ibm:tivoli_storage_flashcopy_manager:-"/>
1991
2423
  </fingerprint>
1992
2424
 
1993
- <fingerprint pattern="^(?:Jupyter Notebook|JupyterLab|Home Page - Select or create a notebook)$">
2425
+ <fingerprint pattern="^Jupyter Notebook|JupyterLab|Home Page - Select or create a notebook$">
1994
2426
  <description>Jupyter Notebook Server</description>
1995
2427
  <example>Jupyter Notebook</example>
1996
2428
  <example>JupyterLab</example>
@@ -2035,7 +2467,7 @@
2035
2467
  <param pos="0" name="service.product" value="Network Monitor"/>
2036
2468
  </fingerprint>
2037
2469
 
2038
- <fingerprint pattern="^(?:BrightSign&amp;reg;|BrightSign Applications|Diagnostics Web Server)$">
2470
+ <fingerprint pattern="^BrightSign&amp;reg;|BrightSign Applications|Diagnostics Web Server$">
2039
2471
  <description>BrightSign Controller</description>
2040
2472
  <example>BrightSign&amp;reg;</example>
2041
2473
  <example>BrightSign Applications</example>
@@ -2056,7 +2488,7 @@
2056
2488
  <param pos="0" name="hw.device" value="WAP"/>
2057
2489
  </fingerprint>
2058
2490
 
2059
- <fingerprint pattern="^(?:DD System Manager|System Manager)$">
2491
+ <fingerprint pattern="^DD System Manager|System Manager$">
2060
2492
  <description>Data Domain System Manager</description>
2061
2493
  <example>DD System Manager</example>
2062
2494
  <example>System Manager</example>
@@ -2076,7 +2508,7 @@
2076
2508
  <param pos="0" name="service.product" value="SonarQube"/>
2077
2509
  </fingerprint>
2078
2510
 
2079
- <fingerprint pattern="^(\S+) - Opengear Management Console$">
2511
+ <fingerprint pattern="^(\S{1,512}) - Opengear Management Console$">
2080
2512
  <description>Opengear Management Console</description>
2081
2513
  <example host.name="server01">server01 - Opengear Management Console</example>
2082
2514
  <param pos="0" name="service.vendor" value="Opengear"/>
@@ -2109,7 +2541,7 @@
2109
2541
  <param pos="0" name="service.cpe23" value="cpe:/a:influxdata:influxdb:2.0"/>
2110
2542
  </fingerprint>
2111
2543
 
2112
- <fingerprint pattern="^(?:Sign in . GitLab|GitLab|GitLab is not responding)$">
2544
+ <fingerprint pattern="^Sign in . GitLab|GitLab|GitLab is not responding$">
2113
2545
  <description>GitLab</description>
2114
2546
  <example>Sign in · GitLab</example>
2115
2547
  <example>GitLab is not responding</example>
@@ -2120,7 +2552,7 @@
2120
2552
  <param pos="0" name="service.cpe23" value="cpe:/a:gitlab:gitlab:-"/>
2121
2553
  </fingerprint>
2122
2554
 
2123
- <fingerprint pattern="^(?:GitHub Enterprise|Setup GitHub Enterprise|GitHub Enterprise preflight check)$">
2555
+ <fingerprint pattern="^GitHub Enterprise|Setup GitHub Enterprise|GitHub Enterprise preflight check$">
2124
2556
  <description>GitHub Enterprise</description>
2125
2557
  <example>GitHub Enterprise</example>
2126
2558
  <example>Setup GitHub Enterprise</example>
@@ -2129,7 +2561,7 @@
2129
2561
  <param pos="0" name="service.product" value="Enterprise"/>
2130
2562
  </fingerprint>
2131
2563
 
2132
- <fingerprint pattern="^(?:SAP NetWeaver Application Server Java|SAP&amp;#x20;NetWeaver&amp;#x20;Portal|Loading Portal\.\.\.)$">
2564
+ <fingerprint pattern="^SAP NetWeaver Application Server Java|SAP&amp;#x20;NetWeaver&amp;#x20;Portal|Loading Portal\.\.\.$">
2133
2565
  <description>SAP NetWeaver Portal</description>
2134
2566
  <example>SAP NetWeaver Application Server Java</example>
2135
2567
  <example>SAP&amp;#x20;NetWeaver&amp;#x20;Portal</example>
@@ -2148,7 +2580,7 @@
2148
2580
  <param pos="0" name="service.cpe23" value="cpe:/a:lansweeper:lansweeper:-"/>
2149
2581
  </fingerprint>
2150
2582
 
2151
- <fingerprint pattern="^(?:Celery Flower|Flower)$">
2583
+ <fingerprint pattern="^Celery Flower|Flower$">
2152
2584
  <description>Celery Flower Dashboard</description>
2153
2585
  <example>Celery Flower</example>
2154
2586
  <example>Flower</example>
@@ -2181,6 +2613,14 @@
2181
2613
  <param pos="0" name="service.product" value="Kiwi Syslog"/>
2182
2614
  </fingerprint>
2183
2615
 
2616
+ <fingerprint pattern="^SolarWinds Orion$">
2617
+ <description>SolarWinds Orion</description>
2618
+ <example>SolarWinds Orion</example>
2619
+ <param pos="0" name="service.vendor" value="SolarWinds"/>
2620
+ <param pos="0" name="service.product" value="Orion Platform"/>
2621
+ <param pos="0" name="service.cpe23" value="cpe:/a:solarwinds:orion_platform:-"/>
2622
+ </fingerprint>
2623
+
2184
2624
  <fingerprint pattern="^ClickShare Configurator$">
2185
2625
  <description>ClickShare Wireless Presenter</description>
2186
2626
  <example>ClickShare Configurator</example>
@@ -2201,6 +2641,47 @@
2201
2641
  <param pos="1" name="hw.product"/>
2202
2642
  </fingerprint>
2203
2643
 
2644
+ <fingerprint pattern="^Welcome to Oracle Fusion Middleware$">
2645
+ <description>Oracle Fusion Middleware</description>
2646
+ <example>Welcome to Oracle Fusion Middleware</example>
2647
+ <param pos="0" name="service.vendor" value="Oracle"/>
2648
+ <param pos="0" name="service.product" value="Fusion Middleware"/>
2649
+ <param pos="0" name="service.cpe23" value="cpe:/a:oracle:fusion_middleware:-"/>
2650
+ </fingerprint>
2651
+
2652
+ <fingerprint pattern="^Oracle Secure Global Desktop(?: Redirect Page)?$">
2653
+ <description>Oracle Secure Global Desktop</description>
2654
+ <example>Oracle Secure Global Desktop</example>
2655
+ <example>Oracle Secure Global Desktop Redirect Page</example>
2656
+ <param pos="0" name="service.vendor" value="Oracle"/>
2657
+ <param pos="0" name="service.product" value="Secure Global Desktop"/>
2658
+ <param pos="0" name="service.cpe23" value="cpe:/a:oracle:secure_global_desktop:-"/>
2659
+ </fingerprint>
2660
+
2661
+ <fingerprint pattern="^OTM - Oracle Transportation Management$">
2662
+ <description>Oracle Transportation Management</description>
2663
+ <example>OTM - Oracle Transportation Management</example>
2664
+ <param pos="0" name="service.vendor" value="Oracle"/>
2665
+ <param pos="0" name="service.product" value="Transportation Management"/>
2666
+ <param pos="0" name="service.cpe23" value="cpe:/a:oracle:transportation_management:-"/>
2667
+ </fingerprint>
2668
+
2669
+ <fingerprint pattern="^Bad Oracle Access Manager Request$">
2670
+ <description>Oracle Access Manager - Bad Request</description>
2671
+ <example>Bad Oracle Access Manager Request</example>
2672
+ <param pos="0" name="service.vendor" value="Oracle"/>
2673
+ <param pos="0" name="service.product" value="Access Manager"/>
2674
+ <param pos="0" name="service.cpe23" value="cpe:/a:oracle:access_manager:-"/>
2675
+ </fingerprint>
2676
+
2677
+ <fingerprint pattern="^Oracle Access Manager Operation Error$">
2678
+ <description>Oracle Access Manager - Operation Error</description>
2679
+ <example>Oracle Access Manager Operation Error</example>
2680
+ <param pos="0" name="service.vendor" value="Oracle"/>
2681
+ <param pos="0" name="service.product" value="Access Manager"/>
2682
+ <param pos="0" name="service.cpe23" value="cpe:/a:oracle:access_manager:-"/>
2683
+ </fingerprint>
2684
+
2204
2685
  <fingerprint pattern="^(?:Oracle\(R\) )?Integrated Lights Out Manager$">
2205
2686
  <description>Oracle iLOM</description>
2206
2687
  <example>Oracle(R) Integrated Lights Out Manager</example>
@@ -2213,6 +2694,7 @@
2213
2694
  <param pos="0" name="os.vendor" value="Oracle"/>
2214
2695
  <param pos="0" name="os.family" value="ILOM"/>
2215
2696
  <param pos="0" name="os.product" value="ILOM"/>
2697
+ <param pos="0" name="os.cpe23" value="cpe:/o:oracle:integrated_lights_out_manager_firmware:-"/>
2216
2698
  </fingerprint>
2217
2699
 
2218
2700
  <fingerprint pattern="^Genetec - SHARPV\S+$">
@@ -2238,7 +2720,7 @@
2238
2720
  <param pos="0" name="service.cpe23" value="cpe:/a:apache:flink:-"/>
2239
2721
  </fingerprint>
2240
2722
 
2241
- <fingerprint pattern="^(?:Twonky|Twonky Server|TwonkyMedia|TwonkyMedia server media browser)$">
2723
+ <fingerprint pattern="^Twonky|Twonky Server|TwonkyMedia|TwonkyMedia server media browser$">
2242
2724
  <description>Twonky Server</description>
2243
2725
  <example>Twonky</example>
2244
2726
  <example>Twonky Server</example>
@@ -2283,7 +2765,7 @@
2283
2765
  <param pos="0" name="service.cpe23" value="cpe:/a:sabnzbd:sabnzbd:-"/>
2284
2766
  </fingerprint>
2285
2767
 
2286
- <fingerprint pattern="^(?:Zabbix|.*: Zabbix)$">
2768
+ <fingerprint pattern="^Zabbix|.*: Zabbix$">
2287
2769
  <description>Zabbix</description>
2288
2770
  <example>Zabbix</example>
2289
2771
  <example>appliance: Zabbix</example>
@@ -2292,7 +2774,7 @@
2292
2774
  <param pos="0" name="service.cpe23" value="cpe:/a:zabbix:zabbix:-"/>
2293
2775
  </fingerprint>
2294
2776
 
2295
- <fingerprint pattern="^(\S+) \(build (\S+)\) - Info$">
2777
+ <fingerprint pattern="^(\S{1,512}) \(build (\S+)\) - Info$">
2296
2778
  <description>DD-WRT</description>
2297
2779
  <example host.name="SubTerraVia-NUC" os.version="36104" os.build="36104">SubTerraVia-NUC (build 36104) - Info</example>
2298
2780
  <example host.name="DD-WRT" os.version="35030M" os.build="35030M">DD-WRT (build 35030M) - Info</example>
@@ -2305,7 +2787,7 @@
2305
2787
  <param pos="0" name="os.cpe23" value="cpe:/o:dd-wrt:dd-wrt:{os.version}"/>
2306
2788
  </fingerprint>
2307
2789
 
2308
- <fingerprint pattern="^(?:Apache Druid|Druid Console|Legacy Coordinator Console)$">
2790
+ <fingerprint pattern="^Apache Druid|Druid Console|Legacy Coordinator Console$">
2309
2791
  <description>Apache Druid</description>
2310
2792
  <example>Apache Druid</example>
2311
2793
  <example>Legacy Coordinator Console</example>
@@ -2316,10 +2798,11 @@
2316
2798
  </fingerprint>
2317
2799
 
2318
2800
  <fingerprint pattern="^Gerrit Code Review$">
2319
- <description>Gerrit Code Review</description>
2801
+ <description>Google's Gerrit Code Review</description>
2320
2802
  <example>Gerrit Code Review</example>
2321
- <param pos="0" name="service.vendor" value="Gerrit"/>
2322
- <param pos="0" name="service.product" value="Code Review"/>
2803
+ <param pos="0" name="service.vendor" value="Google"/>
2804
+ <param pos="0" name="service.product" value="Gerrit"/>
2805
+ <param pos="0" name="service.cpe23" value="cpe:/a:google:gerrit:-"/>
2323
2806
  </fingerprint>
2324
2807
 
2325
2808
  <fingerprint pattern=" - Ignition Gateway$">
@@ -2391,7 +2874,7 @@
2391
2874
  <example>Rundeck - Login</example>
2392
2875
  <param pos="0" name="service.vendor" value="Rundeck"/>
2393
2876
  <param pos="0" name="service.product" value="Rundeck"/>
2394
- <param pos="0" name="service.cpe23" value="cpe:/a:rundeck:rundeck:-"/>
2877
+ <param pos="0" name="service.cpe23" value="cpe:/a:pagerduty:rundeck:-"/>
2395
2878
  </fingerprint>
2396
2879
 
2397
2880
  <fingerprint pattern="^CrushFTP WebInterface$">
@@ -2511,9 +2994,10 @@
2511
2994
  <example>SolarWinds Virtualization Manager</example>
2512
2995
  <param pos="0" name="service.vendor" value="SolarWinds"/>
2513
2996
  <param pos="0" name="service.product" value="Virtualization Manager"/>
2997
+ <param pos="0" name="service.cpe23" value="cpe:/a:solarwinds:virtualization_manager:-"/>
2514
2998
  </fingerprint>
2515
2999
 
2516
- <fingerprint pattern="^(?:Gitea: .*|LocalRepo|TurnKey Gitea)$">
3000
+ <fingerprint pattern="^Gitea: .*|LocalRepo|TurnKey Gitea$">
2517
3001
  <description>Gitea</description>
2518
3002
  <example>Gitea: Git with a cup of tea</example>
2519
3003
  <example>TurnKey Gitea</example>
@@ -2568,9 +3052,10 @@
2568
3052
  <param pos="0" name="service.certainty" value="0.5"/>
2569
3053
  </fingerprint>
2570
3054
 
2571
- <fingerprint pattern="^ownCloud$">
3055
+ <fingerprint pattern="^[oO]wn[cC]loud$">
2572
3056
  <description>ownCloud</description>
2573
3057
  <example>ownCloud</example>
3058
+ <example>Owncloud</example>
2574
3059
  <param pos="0" name="service.vendor" value="ownCloud"/>
2575
3060
  <param pos="0" name="service.product" value="ownCloud Server"/>
2576
3061
  <param pos="0" name="service.certainty" value="0.5"/>
@@ -2597,9 +3082,10 @@
2597
3082
  <example>RStudio Sign In</example>
2598
3083
  <param pos="0" name="service.vendor" value="RStudio"/>
2599
3084
  <param pos="0" name="service.product" value="Connect"/>
3085
+ <param pos="0" name="service.cpe23" value="cpe:/a:rstudio:connect:-"/>
2600
3086
  </fingerprint>
2601
3087
 
2602
- <fingerprint pattern="^(?:TurnKey Moodle|New Site)$">
3088
+ <fingerprint pattern="^TurnKey Moodle|New Site$">
2603
3089
  <description>Moodle</description>
2604
3090
  <example>TurnKey Moodle</example>
2605
3091
  <example>New Site</example>
@@ -2638,7 +3124,7 @@
2638
3124
  <param pos="0" name="service.cpe23" value="cpe:/a:atlassian:jira:-"/>
2639
3125
  </fingerprint>
2640
3126
 
2641
- <fingerprint pattern="^(?:Welcome to XAMPP|XAMPP for Linux)">
3127
+ <fingerprint pattern="^Welcome to XAMPP|XAMPP for Linux">
2642
3128
  <description>XAMPP Server</description>
2643
3129
  <example>Welcome to XAMPP</example>
2644
3130
  <example>XAMPP for Linux</example>
@@ -2654,15 +3140,16 @@
2654
3140
  <param pos="0" name="service.product" value="Security Scanner"/>
2655
3141
  </fingerprint>
2656
3142
 
2657
- <fingerprint pattern="^Kodi$">
3143
+ <fingerprint pattern="^(?:Chorus 2 - )?Kodi(?: web interface)?$">
2658
3144
  <description>Kodi Media Server</description>
2659
3145
  <example>Kodi</example>
3146
+ <example>Chorus 2 - Kodi web interface</example>
2660
3147
  <param pos="0" name="service.vendor" value="Kodi"/>
2661
3148
  <param pos="0" name="service.product" value="Media Server"/>
2662
3149
  <param pos="0" name="service.cpe23" value="cpe:/a:kodi:kodi:-"/>
2663
3150
  </fingerprint>
2664
3151
 
2665
- <fingerprint pattern="^(?:Drupal|TurnKey Drupal\d+|Select an installation profile)$">
3152
+ <fingerprint pattern="^Drupal|TurnKey Drupal\d+|Select an installation profile$">
2666
3153
  <description>Drupal CMS</description>
2667
3154
  <example>Drupal</example>
2668
3155
  <example>TurnKey Drupal8</example>
@@ -2720,7 +3207,7 @@
2720
3207
  <param pos="0" name="hw.certainty" value="0.75"/>
2721
3208
  <param pos="0" name="os.vendor" value="Dell"/>
2722
3209
  <param pos="0" name="os.product" value="iDRAC Linux"/>
2723
- <param pos="0" name="os .certainty" value="0.75"/>
3210
+ <param pos="0" name="os.certainty" value="0.75"/>
2724
3211
  </fingerprint>
2725
3212
 
2726
3213
  <fingerprint pattern="^Pulse Connect Secure - SSL">
@@ -2735,4 +3222,506 @@
2735
3222
  <param pos="0" name="os.product" value="Pulse Connect Secure"/>
2736
3223
  </fingerprint>
2737
3224
 
3225
+ <fingerprint pattern="^Jellyfin$">
3226
+ <description>Jellyfin media server</description>
3227
+ <example>Jellyfin</example>
3228
+ <param pos="0" name="service.vendor" value="Jellyfin"/>
3229
+ <param pos="0" name="service.product" value="Media Server"/>
3230
+ </fingerprint>
3231
+
3232
+ <fingerprint pattern="^.{1,256} - Proxmox Virtual Environment$">
3233
+ <description>Proxmox open-source virtualization platform</description>
3234
+ <example>hypervisor - Proxmox Virtual Environment</example>
3235
+ <param pos="0" name="service.vendor" value="Proxmox"/>
3236
+ <param pos="0" name="service.product" value="Virtual Environment"/>
3237
+ <param pos="0" name="service.cpe23" value="cpe:/a:proxmox:virtual_environment:-"/>
3238
+ <param pos="0" name="os.vendor" value="Proxmox"/>
3239
+ <param pos="0" name="os.family" value="Linux"/>
3240
+ <param pos="0" name="os.product" value="Proxmox"/>
3241
+ </fingerprint>
3242
+
3243
+ <fingerprint pattern="^Sony Network Camera$">
3244
+ <description>Sony Network Camera</description>
3245
+ <example>Sony Network Camera</example>
3246
+ <param pos="0" name="hw.vendor" value="Sony"/>
3247
+ <param pos="0" name="hw.device" value="IP Camera"/>
3248
+ <param pos="0" name="hw.product" value="Network Camera"/>
3249
+ </fingerprint>
3250
+
3251
+ <fingerprint pattern="Lifesize&amp;reg;$">
3252
+ <description>Lifesize TelePresence</description>
3253
+ <example>Lifesize&amp;reg;</example>
3254
+ <example>400 - Bad Request Lifesize&amp;reg;</example>
3255
+ <param pos="0" name="hw.vendor" value="Lifesize"/>
3256
+ <param pos="0" name="hw.device" value="Video Conferencing"/>
3257
+ <param pos="0" name="hw.product" value="TelePresence"/>
3258
+ <param pos="0" name="os.vendor" value="Lifesize"/>
3259
+ <param pos="0" name="os.family" value="Linux"/>
3260
+ <param pos="0" name="os.product" value="TelePresence"/>
3261
+ <param pos="0" name="os.device" value="Video Conferencing"/>
3262
+ </fingerprint>
3263
+
3264
+ <fingerprint pattern="^AT&amp;amp;T VPN Gateway$">
3265
+ <description>ATT VPN Gateway</description>
3266
+ <example>AT&amp;amp;T VPN Gateway</example>
3267
+ <param pos="0" name="hw.vendor" value="ATT"/>
3268
+ <param pos="0" name="hw.device" value="VPN"/>
3269
+ <param pos="0" name="hw.product" value="VPN Gateway"/>
3270
+ </fingerprint>
3271
+
3272
+ <fingerprint pattern="^AT&amp;amp;T U\d+: '([^']+)'$">
3273
+ <description>ATT VPN Gateway w Hostname</description>
3274
+ <example host.name="Austin-Boston">AT&amp;amp;T U115: 'Austin-Boston'</example>
3275
+ <param pos="0" name="hw.vendor" value="ATT"/>
3276
+ <param pos="0" name="hw.device" value="VPN"/>
3277
+ <param pos="0" name="hw.product" value="VPN Gateway"/>
3278
+ <param pos="1" name="host.name"/>
3279
+ </fingerprint>
3280
+
3281
+ <fingerprint pattern="^(?:Symantec Encryption Verified Directory|Symantec Encryption Server.*)$">
3282
+ <description>Symantec PGP Key Management Server</description>
3283
+ <example>Symantec Encryption Verified Directory</example>
3284
+ <example>Symantec Encryption Server - Page Not Found</example>
3285
+ <example>Symantec Encryption Server - Login</example>
3286
+ <param pos="0" name="hw.vendor" value="Symantec"/>
3287
+ <param pos="0" name="hw.device" value="Security Appliance"/>
3288
+ <param pos="0" name="hw.product" value="Key Management Server"/>
3289
+ </fingerprint>
3290
+
3291
+ <fingerprint pattern="^Riverbed Technology, Inc\.$">
3292
+ <description>Riverbed Steelhead Appliance</description>
3293
+ <example>Riverbed Technology, Inc.</example>
3294
+ <param pos="0" name="hw.vendor" value="Riverbed"/>
3295
+ <param pos="0" name="hw.device" value="Security Appliance"/>
3296
+ <param pos="0" name="hw.product" value="Steelhead"/>
3297
+ <param pos="0" name="os.product" value="RiOS"/>
3298
+ <param pos="0" name="os.vendor" value="Riverbed"/>
3299
+ <param pos="0" name="os.cpe23" value="cpe:/o:riverbed:rios:-"/>
3300
+ </fingerprint>
3301
+
3302
+ <fingerprint pattern="^ClearPass - Aruba Networks$">
3303
+ <description>ClearPass Policy Manager Appliance</description>
3304
+ <example>ClearPass - Aruba Networks</example>
3305
+ <param pos="0" name="hw.vendor" value="Aruba Networks"/>
3306
+ <param pos="0" name="hw.device" value="Network Appliance"/>
3307
+ <param pos="0" name="hw.product" value="ClearPass Policy Manager"/>
3308
+ <param pos="0" name="service.vendor" value="Aruba Networks"/>
3309
+ <param pos="0" name="service.device" value="Network Appliance"/>
3310
+ <param pos="0" name="service.product" value="ClearPass Policy Manager"/>
3311
+ <param pos="0" name="service.cpe23" value="cpe:/a:arubanetworks:clearpass_policy_manager:-"/>
3312
+ </fingerprint>
3313
+
3314
+ <fingerprint pattern="^MSTR Collab Server$">
3315
+ <description>MicroStrategy Collaboration Server</description>
3316
+ <example>MSTR Collab Server</example>
3317
+ <param pos="0" name="service.vendor" value="MicroStrategy"/>
3318
+ <param pos="0" name="service.product" value="Collaboration Server"/>
3319
+ <param pos="0" name="service.certainty" value="0.5"/>
3320
+ </fingerprint>
3321
+
3322
+ <fingerprint pattern="^Openfire Admin Console$">
3323
+ <description>Openfire Admin Console</description>
3324
+ <example>Openfire Admin Console</example>
3325
+ <param pos="0" name="service.vendor" value="Ignite Realtime"/>
3326
+ <param pos="0" name="service.product" value="OpenFire"/>
3327
+ <param pos="0" name="service.cpe23" value="cpe:/a:igniterealtime:openfire:-"/>
3328
+ </fingerprint>
3329
+
3330
+ <fingerprint pattern="^:: PBX in a Flash">
3331
+ <description>PBX in a Flash</description>
3332
+ <example>:: PBX in a Flash, Welcome!</example>
3333
+ <param pos="0" name="hw.vendor" value="PIAF"/>
3334
+ <param pos="0" name="hw.device" value="SIP Gateway"/>
3335
+ <param pos="0" name="hw.product" value="PIAF Virtual Appliance"/>
3336
+ </fingerprint>
3337
+
3338
+ <fingerprint pattern="^Hak5 Cloud C">
3339
+ <description>Hak5 Cloud c2</description>
3340
+ <example>Hak5 Cloud C²</example>
3341
+ <param pos="0" name="service.vendor" value="Hak5"/>
3342
+ <param pos="0" name="service.product" value="Cloud C2"/>
3343
+ </fingerprint>
3344
+
3345
+ <fingerprint pattern="^Metabase$">
3346
+ <description>Metabase</description>
3347
+ <example>Metabase</example>
3348
+ <param pos="0" name="service.vendor" value="Metabase"/>
3349
+ <param pos="0" name="service.product" value="Metabase"/>
3350
+ <param pos="0" name="service.cpe23" value="cpe:/a:metabase:metabase:-"/>
3351
+ </fingerprint>
3352
+
3353
+ <fingerprint pattern="Nextcloud">
3354
+ <description>Nextcloud</description>
3355
+ <example>Nextcloud</example>
3356
+ <param pos="0" name="service.vendor" value="Nextcloud"/>
3357
+ <param pos="0" name="service.product" value="Nextcloud Server"/>
3358
+ <param pos="0" name="service.cpe23" value="cpe:/a:nextcloud:nextcloud_server:-"/>
3359
+ </fingerprint>
3360
+
3361
+ <fingerprint pattern="^Observium">
3362
+ <description>Observium</description>
3363
+ <example>Observium : - Test infra</example>
3364
+ <param pos="0" name="service.vendor" value="Observium"/>
3365
+ <param pos="0" name="service.product" value="Observium"/>
3366
+ <param pos="0" name="service.cpe23" value="cpe:/a:observium:observium:-"/>
3367
+ </fingerprint>
3368
+
3369
+ <fingerprint pattern="^Login to Webmin$">
3370
+ <description>Webmin</description>
3371
+ <example>Login to Webmin</example>
3372
+ <param pos="0" name="service.vendor" value="Webmin"/>
3373
+ <param pos="0" name="service.product" value="Webmin"/>
3374
+ <param pos="0" name="service.cpe23" value="cpe:/a:webmin:webmin:-"/>
3375
+ </fingerprint>
3376
+
3377
+ <fingerprint pattern="^Login to Usermin$">
3378
+ <description>Usermin</description>
3379
+ <example>Login to Usermin</example>
3380
+ <param pos="0" name="service.vendor" value="Webmin"/>
3381
+ <param pos="0" name="service.product" value="Usermin"/>
3382
+ <param pos="0" name="service.cpe23" value="cpe:/a:webmin:usermin:-"/>
3383
+ </fingerprint>
3384
+
3385
+ <fingerprint pattern="^MoinMoinWiki">
3386
+ <description>Moinmoin wiki</description>
3387
+ <example>MoinMoinWiki - MoinMoin</example>
3388
+ <param pos="0" name="service.vendor" value="MoinMoin"/>
3389
+ <param pos="0" name="service.product" value="MoinMoin"/>
3390
+ <param pos="0" name="service.cpe23" value="cpe:/a:moinmo:moinmoin:-"/>
3391
+ </fingerprint>
3392
+
3393
+ <fingerprint pattern="^(\w+) - BlackBox Management Console$">
3394
+ <description>BlackBox Management Console</description>
3395
+ <example host.name="ABC123">ABC123 - BlackBox Management Console</example>
3396
+ <param pos="0" name="hw.vendor" value="BlackBox"/>
3397
+ <param pos="0" name="hw.device" value="Device Server"/>
3398
+ <param pos="0" name="hw.product" value="BlackBox"/>
3399
+ <param pos="1" name="host.name"/>
3400
+ </fingerprint>
3401
+
3402
+ <fingerprint pattern="^Shelly Color Bulb$">
3403
+ <description>Shelly Smart Bulb</description>
3404
+ <example>Shelly Color Bulb</example>
3405
+ <param pos="0" name="os.vendor" value="Cesanta"/>
3406
+ <param pos="0" name="os.product" value="Mongoose OS"/>
3407
+ <param pos="0" name="os.cpe23" value="cpe:/o:cesanta:mongoose_os:-"/>
3408
+ <param pos="0" name="hw.vendor" value="Shelly"/>
3409
+ <param pos="0" name="hw.device" value="Light Bulb"/>
3410
+ <param pos="0" name="hw.product" value="Color Bulb"/>
3411
+ </fingerprint>
3412
+
3413
+ <fingerprint pattern="^Shelly (Plug|Dimmer(?: 2)?|Switch)$">
3414
+ <description>Shelly Plug/Dimmer/Switch Devices</description>
3415
+ <example hw.product="Plug">Shelly Plug</example>
3416
+ <example hw.product="Dimmer">Shelly Dimmer</example>
3417
+ <example hw.product="Dimmer 2">Shelly Dimmer 2</example>
3418
+ <example hw.product="Switch">Shelly Switch</example>
3419
+ <param pos="0" name="os.vendor" value="Cesanta"/>
3420
+ <param pos="0" name="os.product" value="Mongoose OS"/>
3421
+ <param pos="0" name="os.cpe23" value="cpe:/o:cesanta:mongoose_os:-"/>
3422
+ <param pos="0" name="hw.vendor" value="Shelly"/>
3423
+ <param pos="0" name="hw.device" value="Device"/>
3424
+ <param pos="1" name="hw.product"/>
3425
+ </fingerprint>
3426
+
3427
+ <fingerprint pattern="^Shelly[ ]?(RGBW2|1L)$">
3428
+ <description>Shelly Lighting Controller</description>
3429
+ <example hw.product="RGBW2">Shelly RGBW2</example>
3430
+ <example hw.product="1L">Shelly1L</example>
3431
+ <param pos="0" name="os.vendor" value="Cesanta"/>
3432
+ <param pos="0" name="os.product" value="Mongoose OS"/>
3433
+ <param pos="0" name="os.cpe23" value="cpe:/o:cesanta:mongoose_os:-"/>
3434
+ <param pos="0" name="hw.vendor" value="Shelly"/>
3435
+ <param pos="0" name="hw.device" value="Device"/>
3436
+ <param pos="1" name="hw.product"/>
3437
+ </fingerprint>
3438
+
3439
+ <fingerprint pattern="^TinyGS Configuration$">
3440
+ <description>TinyGS LoRa Ground Station Software</description>
3441
+ <example>TinyGS Configuration</example>
3442
+ <param pos="0" name="service.product" value="TinyGS"/>
3443
+ </fingerprint>
3444
+
3445
+ <fingerprint pattern="^WLED$">
3446
+ <description>WLED Controlled Device</description>
3447
+ <example>WLED</example>
3448
+ <param pos="0" name="service.vendor" value="Aircookie"/>
3449
+ <param pos="0" name="service.product" value="WLED"/>
3450
+ <param pos="0" name="service.device" value="Device"/>
3451
+ </fingerprint>
3452
+
3453
+ <fingerprint pattern="^Freebox OS (?:.*)$">
3454
+ <description>Freebox OS on Freebox Set-top Box Devices</description>
3455
+ <example>Freebox OS :: Identification</example>
3456
+ <param pos="0" name="os.vendor" value="Freebox"/>
3457
+ <param pos="0" name="os.product" value="Freebox OS"/>
3458
+ <param pos="0" name="hw.vendor" value="Freebox"/>
3459
+ <param pos="0" name="hw.device" value="Device"/>
3460
+ </fingerprint>
3461
+
3462
+ <fingerprint pattern="^HP UPS Network Module$">
3463
+ <description>HP RT3000 G2 UPS</description>
3464
+ <example>HP UPS Network Module</example>
3465
+ <param pos="0" name="hw.vendor" value="HP"/>
3466
+ <param pos="0" name="hw.device" value="UPS"/>
3467
+ </fingerprint>
3468
+
3469
+ <fingerprint pattern="^UniFi Network$">
3470
+ <description>Ubiquiti UniFi Network Application</description>
3471
+ <example>UniFi Network</example>
3472
+ <param pos="0" name="service.vendor" value="Ubiquiti"/>
3473
+ <param pos="0" name="service.product" value="UniFi"/>
3474
+ <param pos="0" name="service.device" value="Device"/>
3475
+ <param pos="0" name="service.cpe23" value="cpe:/a:ui:unifi:-"/>
3476
+ </fingerprint>
3477
+
3478
+ <fingerprint pattern="^Login to AdminDroid Office 365 Reporter$">
3479
+ <description>AdminDroid Office 365 Reporter Application</description>
3480
+ <example>Login to AdminDroid Office 365 Reporter</example>
3481
+ <param pos="0" name="service.vendor" value="AdminDroid"/>
3482
+ <param pos="0" name="service.product" value="Office 365 Reporter"/>
3483
+ </fingerprint>
3484
+
3485
+ <fingerprint pattern="^Nanoleaf Firmware Upload$">
3486
+ <description>Nanoleaf LED Lighting</description>
3487
+ <example>Nanoleaf Firmware Upload</example>
3488
+ <param pos="0" name="hw.vendor" value="Nanoleaf"/>
3489
+ <param pos="0" name="hw.device" value="Device"/>
3490
+ </fingerprint>
3491
+
3492
+ <fingerprint pattern="^GoGogate - LAN$">
3493
+ <description>GoGogate Garage Door Opener</description>
3494
+ <example>GoGogate - LAN</example>
3495
+ <param pos="0" name="hw.vendor" value="GoGogate"/>
3496
+ <param pos="0" name="hw.device" value="Device"/>
3497
+ </fingerprint>
3498
+
3499
+ <fingerprint pattern="^ASUS Login$">
3500
+ <description>ASUS Router/Network Device</description>
3501
+ <example>ASUS Login</example>
3502
+ <param pos="0" name="hw.vendor" value="Asus"/>
3503
+ <param pos="0" name="hw.device" value="Device"/>
3504
+ </fingerprint>
3505
+
3506
+ <fingerprint pattern="^GigaBlue Quad Plus - OpenWebif$">
3507
+ <description>GigaBlue Quad Plus Satellite TV Receiver</description>
3508
+ <example>GigaBlue Quad Plus - OpenWebif</example>
3509
+ <param pos="0" name="hw.vendor" value="GigaBlue"/>
3510
+ <param pos="0" name="hw.device" value="Device"/>
3511
+ <param pos="0" name="hw.product" value="Quad Plus Receiver"/>
3512
+ </fingerprint>
3513
+
3514
+ <fingerprint pattern="^Barix Instreamer Instreamer$">
3515
+ <description>Barix Instreamer</description>
3516
+ <example>Barix Instreamer Instreamer</example>
3517
+ <param pos="0" name="hw.vendor" value="Barix"/>
3518
+ <param pos="0" name="hw.device" value="Audio Encoder"/>
3519
+ <param pos="0" name="hw.product" value="Instreamer"/>
3520
+ </fingerprint>
3521
+
3522
+ <fingerprint pattern="^Tracker Display$">
3523
+ <description>SpotterRF</description>
3524
+ <example>Tracker Display</example>
3525
+ <param pos="0" name="os.vendor" value="SpotterRF"/>
3526
+ <param pos="0" name="os.family" value="Linux"/>
3527
+ <param pos="0" name="os.certainty" value="0.90"/>
3528
+ <param pos="0" name="hw.vendor" value="SpotterRF"/>
3529
+ <param pos="0" name="hw.device" value="Sensor"/>
3530
+ <param pos="0" name="hw.product" value="Drone Detector"/>
3531
+ </fingerprint>
3532
+
3533
+ <fingerprint pattern="^Polycom (DMA \d+)$">
3534
+ <description>Polycom DMA 7000</description>
3535
+ <example hw.product="DMA 7000">Polycom DMA 7000</example>
3536
+ <param pos="0" name="hw.vendor" value="Polycom"/>
3537
+ <param pos="0" name="hw.device" value="VoIP"/>
3538
+ <param pos="1" name="hw.product"/>
3539
+ </fingerprint>
3540
+
3541
+ <fingerprint pattern="^VVX(\d{3})$">
3542
+ <description>Polycom VVX VoIP Phones</description>
3543
+ <example hw.model="250">VVX250</example>
3544
+ <param pos="0" name="hw.vendor" value="Polycom"/>
3545
+ <param pos="0" name="hw.device" value="VoIP"/>
3546
+ <param pos="1" name="hw.model"/>
3547
+ <param pos="0" name="hw.product" value="VVX {hw.model}"/>
3548
+ </fingerprint>
3549
+
3550
+ <fingerprint pattern="^(OBi[23]\d{2})">
3551
+ <description>Poly OBI Analog Telephone Adapter</description>
3552
+ <example hw.product="OBi200">OBi200</example>
3553
+ <param pos="0" name="hw.vendor" value="Poly"/>
3554
+ <param pos="0" name="hw.device" value="VoIP"/>
3555
+ <param pos="1" name="hw.product"/>
3556
+ </fingerprint>
3557
+
3558
+ <fingerprint pattern="^Alpha Technologies$">
3559
+ <description>Alpha Technologies Novus UPS</description>
3560
+ <example>Alpha Technologies</example>
3561
+ <param pos="0" name="hw.vendor" value="Alpha Technologies"/>
3562
+ <param pos="0" name="hw.device" value="Power Device"/>
3563
+ <param pos="0" name="hw.product" value="Novus UPS"/>
3564
+ </fingerprint>
3565
+
3566
+ <fingerprint pattern="^Network Management Card$">
3567
+ <description>Eaton UPS Network Card</description>
3568
+ <example>Network Management Card</example>
3569
+ <param pos="0" name="hw.vendor" value="Eaton"/>
3570
+ <param pos="0" name="hw.device" value="Power Device"/>
3571
+ <param pos="0" name="hw.product" value="UPS"/>
3572
+ <param pos="0" name="hw.certainty" value="0.5"/>
3573
+ </fingerprint>
3574
+
3575
+ <fingerprint pattern="^UPS Properties$">
3576
+ <description>APC UPS Network Card</description>
3577
+ <example>UPS Properties</example>
3578
+ <param pos="0" name="hw.vendor" value="APC"/>
3579
+ <param pos="0" name="hw.device" value="Power Device"/>
3580
+ <param pos="0" name="hw.product" value="UPS"/>
3581
+ <param pos="0" name="hw.certainty" value="0.5"/>
3582
+ </fingerprint>
3583
+
3584
+ <fingerprint pattern="^HP ([\w ]+) PostScript">
3585
+ <description>HP Printer</description>
3586
+ <example hw.product="Designjet T1200">HP Designjet T1200 PostScript - Supplies</example>
3587
+ <param pos="0" name="hw.vendor" value="HP"/>
3588
+ <param pos="0" name="hw.family" value="JetDirect"/>
3589
+ <param pos="0" name="hw.device" value="Printer"/>
3590
+ <param pos="1" name="hw.product"/>
3591
+ </fingerprint>
3592
+
3593
+ <fingerprint pattern="^Radio Configuration/Diagnostic Utility$">
3594
+ <description>ProSoft RadioLinx</description>
3595
+ <example>Radio Configuration/Diagnostic Utility</example>
3596
+ <param pos="0" name="hw.vendor" value="ProSoft Technology"/>
3597
+ <param pos="0" name="hw.device" value="WAP"/>
3598
+ <param pos="0" name="hw.product" value="RadioLinx"/>
3599
+ <param pos="0" name="hw.certainty" value="0.5"/>
3600
+ </fingerprint>
3601
+
3602
+ <fingerprint pattern="^Welcome to ntopng$">
3603
+ <description>ntopng Network Analysis Application</description>
3604
+ <example>Welcome to ntopng</example>
3605
+ <param pos="0" name="service.vendor" value="ntop"/>
3606
+ <param pos="0" name="service.product" value="ntopng"/>
3607
+ <param pos="0" name="service.cpe23" value="cpe:/a:ntop:ntopng:-"/>
3608
+ </fingerprint>
3609
+
3610
+ <fingerprint pattern="^FreeNAS$">
3611
+ <description>iXsystems FreeNAS</description>
3612
+ <example>FreeNAS</example>
3613
+ <param pos="0" name="service.vendor" value="iXsystems"/>
3614
+ <param pos="0" name="service.product" value="FreeNAS"/>
3615
+ <param pos="0" name="os.vendor" value="iXsystems"/>
3616
+ <param pos="0" name="os.family" value="FreeBSD"/>
3617
+ <param pos="0" name="os.product" value="FreeNAS Firmware"/>
3618
+ <param pos="0" name="os.cpe23" value="cpe:/o:ixsystems:freenas_firmware:-"/>
3619
+ </fingerprint>
3620
+
3621
+ <fingerprint pattern="^Xerox (.{1,1000}) - \d+\.\d+\.\d+\.\d+$">
3622
+ <description>Xerox Color Printer</description>
3623
+ <example hw.product="Color 570">Xerox Color 570 - 100.100.100.101</example>
3624
+ <param pos="0" name="hw.vendor" value="Xerox"/>
3625
+ <param pos="0" name="hw.device" value="Printer"/>
3626
+ <param pos="1" name="hw.product"/>
3627
+ </fingerprint>
3628
+
3629
+ <fingerprint pattern="^Web Smart Switch$">
3630
+ <description>3Com Switch</description>
3631
+ <example>Web Smart Switch</example>
3632
+ <param pos="0" name="hw.vendor" value="3Com"/>
3633
+ <param pos="0" name="hw.device" value="Switch"/>
3634
+ </fingerprint>
3635
+
3636
+ <fingerprint pattern="^(Quantum) - (Scalar i\d+) Login Screen$">
3637
+ <description>Quantum Scalar Tape Library</description>
3638
+ <example hw.vendor="Quantum" hw.product="Scalar i80">Quantum - Scalar i80 Login Screen</example>
3639
+ <param pos="0" name="hw.device" value="Tape Library"/>
3640
+ <param pos="1" name="hw.vendor"/>
3641
+ <param pos="2" name="hw.product"/>
3642
+ </fingerprint>
3643
+
3644
+ <fingerprint pattern="^Printer Administration$">
3645
+ <description>Weidmüller Printer</description>
3646
+ <example>Printer Administration</example>
3647
+ <param pos="0" name="hw.vendor" value="Weidmüller"/>
3648
+ <param pos="0" name="hw.device" value="Printer"/>
3649
+ </fingerprint>
3650
+
3651
+ <fingerprint pattern="^Machine Identification - (MX-\S+)$">
3652
+ <description>Sharp MX Printer</description>
3653
+ <example hw.product="MX-3071">Machine Identification - MX-3071</example>
3654
+ <param pos="0" name="hw.vendor" value="Sharp"/>
3655
+ <param pos="0" name="hw.device" value="Printer"/>
3656
+ <param pos="1" name="hw.product"/>
3657
+ </fingerprint>
3658
+
3659
+ <fingerprint pattern="^Remote UI: Login: (MF\S+):">
3660
+ <description>Canon MF Printer</description>
3661
+ <example hw.product="MF632C/634C">Remote UI: Login: MF632C/634C: MF632C/634C</example>
3662
+ <param pos="0" name="hw.vendor" value="Canon"/>
3663
+ <param pos="0" name="hw.device" value="Printer"/>
3664
+ <param pos="1" name="hw.product"/>
3665
+ <param pos="0" name="hw.certainty" value="0.8"/>
3666
+ </fingerprint>
3667
+
3668
+ <fingerprint pattern="^Network Video Recorder Login$">
3669
+ <description>Nuuo NVR</description>
3670
+ <example>Network Video Recorder Login</example>
3671
+ <param pos="0" name="hw.vendor" value="Nuuo"/>
3672
+ <param pos="0" name="hw.device" value="DVR"/>
3673
+ </fingerprint>
3674
+
3675
+ <fingerprint pattern="^Evolis Printer$">
3676
+ <description>Evolis Printer</description>
3677
+ <example>Evolis Printer</example>
3678
+ <param pos="0" name="hw.vendor" value="Evolis"/>
3679
+ <param pos="0" name="hw.device" value="Printer"/>
3680
+ </fingerprint>
3681
+
3682
+ <fingerprint pattern="^WyzeOutdoorPlug - ">
3683
+ <description>Wyze Plug Outdoor</description>
3684
+ <example>WyzeOutdoorPlug - Main Menu</example>
3685
+ <param pos="0" name="hw.vendor" value="Wyze"/>
3686
+ <param pos="0" name="hw.device" value="Device"/>
3687
+ <param pos="0" name="hw.product" value="Plug Outdoor"/>
3688
+ </fingerprint>
3689
+
3690
+ <fingerprint pattern="^Aptinex IOT Relay Module - (\d+ Channel) (Rev\S+)?">
3691
+ <description>Aptinex Relay Controller</description>
3692
+ <example aptinex.model="4 Channel" os.version="Rev1.1">Aptinex IOT Relay Module - 4 Channel Rev1.1</example>
3693
+ <param pos="0" name="os.vendor" value="Aptinex"/>
3694
+ <param pos="0" name="hw.vendor" value="Aptinex"/>
3695
+ <param pos="0" name="hw.device" value="Relay Controller"/>
3696
+ <param pos="0" name="hw.product" value="{aptinex.model} Relay Controller"/>
3697
+ <param pos="1" name="aptinex.model"/>
3698
+ <param pos="2" name="os.version"/>
3699
+ </fingerprint>
3700
+
3701
+ <fingerprint pattern="^Diagnoser - Bobcatminer Diagnostic Dashboard$">
3702
+ <description>Bobcat Helium Miner</description>
3703
+ <example>Diagnoser - Bobcatminer Diagnostic Dashboard</example>
3704
+ <param pos="0" name="hw.vendor" value="Bobcat"/>
3705
+ <param pos="0" name="hw.device" value="Device"/>
3706
+ <param pos="0" name="hw.product" value="Helium Miner"/>
3707
+ </fingerprint>
3708
+
3709
+ <fingerprint pattern="^LORIX Manager$">
3710
+ <description>Wifx LORIX One</description>
3711
+ <example>LORIX Manager</example>
3712
+ <param pos="0" name="os.vendor" value="Wifx"/>
3713
+ <param pos="0" name="os.product" value="LORIX OS"/>
3714
+ <param pos="0" name="hw.vendor" value="Wifx"/>
3715
+ <param pos="0" name="hw.device" value="Device"/>
3716
+ <param pos="0" name="hw.product" value="LORIX ONE"/>
3717
+ </fingerprint>
3718
+
3719
+ <fingerprint pattern="^ETERNUS$">
3720
+ <description>Fujitsu ETERNUS Storage Appliance</description>
3721
+ <example>ETERNUS</example>
3722
+ <param pos="0" name="hw.vendor" value="Fujitsu"/>
3723
+ <param pos="0" name="hw.device" value="Storage Appliance"/>
3724
+ <param pos="0" name="hw.product" value="Eternus"/>
3725
+ </fingerprint>
3726
+
2738
3727
  </fingerprints>