recog 2.3.18 → 2.3.22
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- checksums.yaml +4 -4
- data/.github/dependabot.yml +8 -0
- data/.github/workflows/ci.yml +26 -0
- data/.github/workflows/verify.yml +89 -0
- data/CONTRIBUTING.md +6 -0
- data/README.md +17 -0
- data/bin/recog_standardize +33 -12
- data/bin/recog_verify +1 -2
- data/cpe-remap.yaml +355 -200
- data/features/verify.feature +14 -14
- data/identifiers/README.md +24 -10
- data/identifiers/fields.txt +105 -0
- data/identifiers/hw_device.txt +8 -0
- data/identifiers/hw_family.txt +19 -0
- data/identifiers/hw_product.txt +122 -0
- data/identifiers/os_device.txt +2 -1
- data/identifiers/os_family.txt +3 -0
- data/identifiers/os_product.txt +46 -8
- data/identifiers/service_family.txt +10 -1
- data/identifiers/service_product.txt +90 -2
- data/identifiers/vendor.txt +104 -0
- data/lib/recog/db.rb +2 -1
- data/lib/recog/fingerprint.rb +18 -5
- data/lib/recog/nizer.rb +1 -82
- data/lib/recog/verifier.rb +5 -5
- data/lib/recog/verifier_factory.rb +3 -3
- data/lib/recog/verify_reporter.rb +14 -4
- data/lib/recog/version.rb +1 -1
- data/requirements.txt +1 -1
- data/spec/lib/fingerprint_self_test_spec.rb +1 -0
- data/spec/lib/recog/verify_reporter_spec.rb +69 -0
- data/tools/dev/hooks/pre-commit +21 -0
- data/update_cpes.py +19 -6
- data/xml/apache_modules.xml +60 -0
- data/xml/apache_os.xml +38 -38
- data/xml/dhcp_vendor_class.xml +206 -0
- data/xml/dns_versionbind.xml +11 -1
- data/xml/favicons.xml +270 -45
- data/xml/ftp_banners.xml +89 -64
- data/xml/h323_callresp.xml +99 -99
- data/xml/hp_pjl_id.xml +3 -3
- data/xml/html_title.xml +1051 -62
- data/xml/http_cookies.xml +294 -85
- data/xml/http_servers.xml +551 -122
- data/xml/http_wwwauth.xml +139 -43
- data/xml/imap_banners.xml +8 -8
- data/xml/ldap_searchresult.xml +1 -0
- data/xml/mdns_device-info_txt.xml +720 -27
- data/xml/mysql_banners.xml +3 -2
- data/xml/nntp_banners.xml +4 -4
- data/xml/ntp_banners.xml +79 -65
- data/xml/operating_system.xml +6 -6
- data/xml/pop_banners.xml +11 -11
- data/xml/rsh_resp.xml +3 -3
- data/xml/rtsp_servers.xml +7 -0
- data/xml/sip_banners.xml +374 -9
- data/xml/sip_user_agents.xml +377 -5
- data/xml/smb_native_lm.xml +32 -1
- data/xml/smb_native_os.xml +160 -33
- data/xml/smtp_banners.xml +168 -129
- data/xml/smtp_ehlo.xml +1 -1
- data/xml/smtp_expn.xml +1 -0
- data/xml/smtp_help.xml +10 -10
- data/xml/smtp_noop.xml +2 -2
- data/xml/smtp_vrfy.xml +1 -0
- data/xml/snmp_sysdescr.xml +508 -214
- data/xml/snmp_sysobjid.xml +25 -25
- data/xml/ssh_banners.xml +145 -29
- data/xml/telnet_banners.xml +240 -61
- data/xml/tls_jarm.xml +162 -0
- data/xml/x509_issuers.xml +237 -2
- data/xml/x509_subjects.xml +369 -49
- metadata +10 -3
data/xml/ntp_banners.xml
CHANGED
|
@@ -4,7 +4,7 @@
|
|
|
4
4
|
NTP "banners", taken from a readvar response
|
|
5
5
|
-->
|
|
6
6
|
|
|
7
|
-
<fingerprint pattern="
|
|
7
|
+
<fingerprint pattern="version=Domain Time II (\S+),hostname=([^,]+),.*system=Win2003.*,processor=(\S+)" flags="REG_DOT_NEWLINE,REG_ICASE">
|
|
8
8
|
<description>Greyware Automation Products, Inc. Domain Time II on Windows Server 2003</description>
|
|
9
9
|
<example service.version="5.1.b.20100331R" os.arch="x64" host.name="blah">
|
|
10
10
|
version=Domain Time II 5.1.b.20100331R,hostname=blah,domain=,flat=WORKGROUP,system=Win2003 x64,processor=x64
|
|
@@ -23,7 +23,7 @@
|
|
|
23
23
|
<param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_server_2003:-"/>
|
|
24
24
|
</fingerprint>
|
|
25
25
|
|
|
26
|
-
<fingerprint pattern="
|
|
26
|
+
<fingerprint pattern="version=Domain Time II (\S+),hostname=([^,]+),.*system=Win2008R2.*,processor=(\S+)" flags="REG_DOT_NEWLINE,REG_ICASE">
|
|
27
27
|
<description>Greyware Automation Products, Inc. Domain Time II on Windows Server 2008 R2</description>
|
|
28
28
|
<example service.version="5.2.b.20120215R" os.arch="x64" host.name="blah">
|
|
29
29
|
version=Domain Time II 5.2.b.20120215R,hostname=blah,domain=blah,flat=blah,system=Win2008R2 x64,processor=x64
|
|
@@ -39,7 +39,7 @@
|
|
|
39
39
|
<param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_server_2008:-"/>
|
|
40
40
|
</fingerprint>
|
|
41
41
|
|
|
42
|
-
<fingerprint pattern="
|
|
42
|
+
<fingerprint pattern="version=Domain Time II (\S+),hostname=([^,]+),.*system=Win2008.*,processor=(\S+)" flags="REG_DOT_NEWLINE,REG_ICASE">
|
|
43
43
|
<description>Greyware Automation Products, Inc. Domain Time II on Windows 2008</description>
|
|
44
44
|
<example service.version="5.2.b.20140303R" os.arch="x86" host.name="blah">
|
|
45
45
|
version=Domain Time II 5.2.b.20140303R,hostname=blah,domain=blah,flat=blah,system=Win2008,processor=x86
|
|
@@ -58,7 +58,7 @@
|
|
|
58
58
|
<param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_server_2008:-"/>
|
|
59
59
|
</fingerprint>
|
|
60
60
|
|
|
61
|
-
<fingerprint pattern="
|
|
61
|
+
<fingerprint pattern="version=Domain Time II (\S+),hostname=([^,]+),.*system=Win2012.*,processor=(\S+)" flags="REG_DOT_NEWLINE,REG_ICASE">
|
|
62
62
|
<description>Greyware Automation Products, Inc. Domain Time II on Windows Server 2012</description>
|
|
63
63
|
<example service.version="5.2.b.20140101R" os.arch="x64" host.name="blah">
|
|
64
64
|
version=Domain Time II 5.2.b.20140101R,hostname=blah,domain=blah,flat=blah,system=Win2012 x64,processor=x64
|
|
@@ -74,7 +74,7 @@
|
|
|
74
74
|
<param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_server_2012:-"/>
|
|
75
75
|
</fingerprint>
|
|
76
76
|
|
|
77
|
-
<fingerprint pattern="
|
|
77
|
+
<fingerprint pattern="version=Domain Time II (\S+),hostname=([^,]+),.*system=Win7.*,processor=(\S+)" flags="REG_DOT_NEWLINE,REG_ICASE">
|
|
78
78
|
<description>Greyware Automation Products, Inc. Domain Time II on Windows 7</description>
|
|
79
79
|
<example service.version="5.2.b.20130405R" os.arch="x64" host.name="blah">
|
|
80
80
|
version=Domain Time II 5.2.b.20130405R,hostname=blah,domain=,flat=WORKGROUP,system=Win7 x64,processor=x64
|
|
@@ -90,7 +90,7 @@
|
|
|
90
90
|
<param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_7:-"/>
|
|
91
91
|
</fingerprint>
|
|
92
92
|
|
|
93
|
-
<fingerprint pattern="
|
|
93
|
+
<fingerprint pattern="version="ntpd (\S+)[^"]+",.*system="Equallogic \(R\) storage array"" flags="REG_DOT_NEWLINE,REG_ICASE">
|
|
94
94
|
<description>ntpd running on an EqualLogic Storage Array that includes the NTP version</description>
|
|
95
95
|
<example>
|
|
96
96
|
version="ntpd 4.2.0-r Fri Feb 5 15:18:30 EST 2010 (1)",
|
|
@@ -107,7 +107,7 @@
|
|
|
107
107
|
<param pos="0" name="os.product" value="Storage Array"/>
|
|
108
108
|
</fingerprint>
|
|
109
109
|
|
|
110
|
-
<fingerprint pattern="
|
|
110
|
+
<fingerprint pattern="system="Equallogic \(R\) storage array"" flags="REG_DOT_NEWLINE,REG_ICASE">
|
|
111
111
|
<description>ntpd running on an EqualLogic Storage Array that does not include the NTP version</description>
|
|
112
112
|
<example>
|
|
113
113
|
processor="Working", system="Equallogic (R) storage array", leap=3,
|
|
@@ -120,7 +120,7 @@
|
|
|
120
120
|
<param pos="0" name="os.product" value="Storage Array"/>
|
|
121
121
|
</fingerprint>
|
|
122
122
|
|
|
123
|
-
<fingerprint pattern="
|
|
123
|
+
<fingerprint pattern="version="ntpd ([^ ]+)[^"]+",.*processor="([^ ]+)",.*system="Linux/(?:[^ ]+\.ESX)"" flags="REG_DOT_NEWLINE,REG_ICASE">
|
|
124
124
|
<description>ntpd running on VMware ESX</description>
|
|
125
125
|
<example service.version="4.2.2p1@1.1570-o" os.arch="x86_64">
|
|
126
126
|
version="ntpd 4.2.2p1@1.1570-o Thu Nov 26 11:34:34 UTC 2009 (1)",
|
|
@@ -133,10 +133,12 @@
|
|
|
133
133
|
<param pos="0" name="os.family" value="VMware ESX/ESXi"/>
|
|
134
134
|
<param pos="0" name="os.product" value="VMware ESX Server"/>
|
|
135
135
|
<param pos="2" name="os.arch"/>
|
|
136
|
+
<param pos="0" name="os.device" value="Hypervisor"/>
|
|
136
137
|
<param pos="0" name="os.cpe23" value="cpe:/o:vmware:esx:-"/>
|
|
138
|
+
<param pos="0" name="hw.device" value="Hypervisor"/>
|
|
137
139
|
</fingerprint>
|
|
138
140
|
|
|
139
|
-
<fingerprint pattern="
|
|
141
|
+
<fingerprint pattern="version="ntpd ([^ ]+)[^"]+",.*processor="([^ ]+)",.*system="Linux/?([^ ]+)"" flags="REG_DOT_NEWLINE,REG_ICASE">
|
|
140
142
|
<description>ntpd running on Linux</description>
|
|
141
143
|
<example>
|
|
142
144
|
version="ntpd 4.2.4p3@1.1502-o Wed Jul 18 11:45:01 UTC 2007 (1)",
|
|
@@ -153,7 +155,7 @@
|
|
|
153
155
|
<param pos="0" name="os.cpe23" value="cpe:/o:linux:linux_kernel:{os.version}"/>
|
|
154
156
|
</fingerprint>
|
|
155
157
|
|
|
156
|
-
<fingerprint pattern="
|
|
158
|
+
<fingerprint pattern="version="ntpd ([^ ]+)[^"]+",.*processor="([^"]+)",.*system="Darwin/?6\.([^"]+)"" flags="REG_DOT_NEWLINE,REG_ICASE">
|
|
157
159
|
<description>ntpd running on Mac OSX 10.2/Jaguar</description>
|
|
158
160
|
<example service.version="4.1.1@1.786" os.version.version="8">
|
|
159
161
|
version="ntpd 4.1.1@1.786 Tue Nov 12 09:30:41 PST 2002 (1)", processor="Power Macintosh", system="Darwin6.8",
|
|
@@ -171,7 +173,7 @@
|
|
|
171
173
|
<param pos="0" name="os.cpe23" value="cpe:/o:apple:mac_os_x:10.2"/>
|
|
172
174
|
</fingerprint>
|
|
173
175
|
|
|
174
|
-
<fingerprint pattern="
|
|
176
|
+
<fingerprint pattern="version="ntpd ([^ ]+)[^"]+",.*processor="([^"]+)",.*system="Darwin/?7\.([^"]+)"" flags="REG_DOT_NEWLINE,REG_ICASE">
|
|
175
177
|
<description>ntpd running on Mac OSX 10.3/Panther</description>
|
|
176
178
|
<param pos="0" name="service.family" value="NTP"/>
|
|
177
179
|
<param pos="0" name="service.product" value="NTP"/>
|
|
@@ -186,7 +188,7 @@
|
|
|
186
188
|
<param pos="0" name="os.cpe23" value="cpe:/o:apple:mac_os_x:10.3"/>
|
|
187
189
|
</fingerprint>
|
|
188
190
|
|
|
189
|
-
<fingerprint pattern="
|
|
191
|
+
<fingerprint pattern="version="ntpd ([^ ]+)[^"]+",.*processor="([^"]+)",.*system="Darwin/?8\.([^"]+)"" flags="REG_DOT_NEWLINE,REG_ICASE">
|
|
190
192
|
<description>ntpd running on Mac OSX 10.4/Tiger</description>
|
|
191
193
|
<example>
|
|
192
194
|
version="ntpd 4.2.0@1.1161-r Fri Jan 13 11:36:23 PST 2006 (1)",
|
|
@@ -205,7 +207,7 @@
|
|
|
205
207
|
<param pos="0" name="os.cpe23" value="cpe:/o:apple:mac_os_x:10.4"/>
|
|
206
208
|
</fingerprint>
|
|
207
209
|
|
|
208
|
-
<fingerprint pattern="
|
|
210
|
+
<fingerprint pattern="version="ntpd ([^ ]+)[^"]+",.*processor="([^"]+)",.*system="Darwin/?9\.([^"]+)"" flags="REG_DOT_NEWLINE,REG_ICASE">
|
|
209
211
|
<description>ntpd running on Mac OSX 10.5/Leopard</description>
|
|
210
212
|
<example>
|
|
211
213
|
version="ntpd 4.2.2@1.1532-o Mon Sep 24 01:42:27 UTC 2007 (1)",
|
|
@@ -224,7 +226,7 @@
|
|
|
224
226
|
<param pos="0" name="os.cpe23" value="cpe:/o:apple:mac_os_x:10.5"/>
|
|
225
227
|
</fingerprint>
|
|
226
228
|
|
|
227
|
-
<fingerprint pattern="
|
|
229
|
+
<fingerprint pattern="version="ntpd ([^ ]+)[^"]+",.*processor="([^"]+)",.*system="Darwin/?10\.([^"]+)"" flags="REG_DOT_NEWLINE,REG_ICASE">
|
|
228
230
|
<description>ntpd running on Mac OSX 10.6/Snow Leopard</description>
|
|
229
231
|
<example>
|
|
230
232
|
version="ntpd 4.2.4p4@1.1520-o Mon May 18 19:38:25 UTC 2009 (1)",
|
|
@@ -243,7 +245,7 @@
|
|
|
243
245
|
<param pos="0" name="os.cpe23" value="cpe:/o:apple:mac_os_x:10.6"/>
|
|
244
246
|
</fingerprint>
|
|
245
247
|
|
|
246
|
-
<fingerprint pattern="
|
|
248
|
+
<fingerprint pattern="processor="([^"]+)".*system="BSD/OS([\d.]+)"" flags="REG_DOT_NEWLINE,REG_ICASE">
|
|
247
249
|
<description>BSD/OS with a version and arch</description>
|
|
248
250
|
<example os.arch="i386" os.version="4.3.1">
|
|
249
251
|
processor="i386", system="BSD/OS4.3.1", leap=0, stratum=2
|
|
@@ -254,7 +256,7 @@
|
|
|
254
256
|
<param pos="2" name="os.version"/>
|
|
255
257
|
</fingerprint>
|
|
256
258
|
|
|
257
|
-
<fingerprint pattern="
|
|
259
|
+
<fingerprint pattern="system="BSD/OS"" flags="REG_DOT_NEWLINE,REG_ICASE">
|
|
258
260
|
<description>BSD/OS without a version or arch</description>
|
|
259
261
|
<example>
|
|
260
262
|
system="BSD/OS", leap=3, stratum=16, rootdelay=0.00
|
|
@@ -263,7 +265,7 @@
|
|
|
263
265
|
<param pos="0" name="os.product" value="BSD/OS"/>
|
|
264
266
|
</fingerprint>
|
|
265
267
|
|
|
266
|
-
<fingerprint pattern="
|
|
268
|
+
<fingerprint pattern="version="ntpd ([^ ]+)[^"]+",.*processor="([^"]+)",.*system="Darwin/?11\.([^"]+)"" flags="REG_DOT_NEWLINE,REG_ICASE">
|
|
267
269
|
<description>ntpd running on Mac OSX 10.7/Lion</description>
|
|
268
270
|
<example>
|
|
269
271
|
version="ntpd 4.2.6@1.2089-o Fri May 28 01:20:53 UTC 2010 (1)",
|
|
@@ -282,7 +284,7 @@
|
|
|
282
284
|
<param pos="0" name="os.cpe23" value="cpe:/o:apple:mac_os_x:10.7"/>
|
|
283
285
|
</fingerprint>
|
|
284
286
|
|
|
285
|
-
<fingerprint pattern="
|
|
287
|
+
<fingerprint pattern="version="ntpd ([^ ]+)[^"]+",.*processor="([^"]+)",.*system="Darwin/?12\.([^"]+)"" flags="REG_DOT_NEWLINE,REG_ICASE">
|
|
286
288
|
<description>ntpd running on Mac OSX 10.8/Mountain Lion</description>
|
|
287
289
|
<example service.version="4.2.6@1.2089-o" os.arch="x86_64" os.version.version="1.0">
|
|
288
290
|
version="ntpd 4.2.6@1.2089-o Fri May 28 01:20:53 UTC 2010 (1)",
|
|
@@ -301,7 +303,7 @@
|
|
|
301
303
|
<param pos="0" name="os.cpe23" value="cpe:/o:apple:mac_os_x:10.8"/>
|
|
302
304
|
</fingerprint>
|
|
303
305
|
|
|
304
|
-
<fingerprint pattern="
|
|
306
|
+
<fingerprint pattern="version="ntpd ([^ ]+)[^"]+",.*processor="([^"]+)",.*system="Darwin/?13\.([^"]+)"" flags="REG_DOT_NEWLINE,REG_ICASE">
|
|
305
307
|
<description>ntpd running on Mac OSX 10.9/Mavericks</description>
|
|
306
308
|
<example service.version="4.2.6@1.2089-o" os.arch="x86_64" os.version.version="4.0">
|
|
307
309
|
version="ntpd 4.2.6@1.2089-o Fri May 28 01:20:53 UTC 2010 (1)",
|
|
@@ -320,7 +322,7 @@
|
|
|
320
322
|
<param pos="0" name="os.cpe23" value="cpe:/o:apple:mac_os_x:10.9"/>
|
|
321
323
|
</fingerprint>
|
|
322
324
|
|
|
323
|
-
<fingerprint pattern="
|
|
325
|
+
<fingerprint pattern="version="ntpd ([^ ]+)[^"]+",.*processor="([^"]+)",.*system="Darwin/?14\.([^"]+)"" flags="REG_DOT_NEWLINE,REG_ICASE">
|
|
324
326
|
<description>ntpd running on Mac OSX 10.10/Yosemite</description>
|
|
325
327
|
<example service.version="4.2.6@1.2089-o" os.arch="x86_64" os.version.version="3.0">
|
|
326
328
|
version="ntpd 4.2.6@1.2089-o Fri May 28 01:20:53 UTC 2010 (1)",
|
|
@@ -339,7 +341,7 @@
|
|
|
339
341
|
<param pos="0" name="os.cpe23" value="cpe:/o:apple:mac_os_x:10.10"/>
|
|
340
342
|
</fingerprint>
|
|
341
343
|
|
|
342
|
-
<fingerprint pattern="
|
|
344
|
+
<fingerprint pattern="version="ntpd ([^ p]+)(p[^ "]+)?[^"]+",.*processor="([^ ]+)",.*system="FreeBSD/?(?:[^ ]+-NETSCALER-([^ ]+))"" flags="REG_DOT_NEWLINE,REG_ICASE">
|
|
343
345
|
<description>ntpd running on Citrix Netscaler, which is based on FreeBSD</description>
|
|
344
346
|
<example service.version="4.2.6" service.version.version="p2@1.2194" os.arch="i386" os.version="9.3">
|
|
345
347
|
version="ntpd 4.2.6p2@1.2194 Wed Nov 24 15:54:11 UTC 2010 (1)",
|
|
@@ -360,9 +362,10 @@
|
|
|
360
362
|
<param pos="0" name="os.product" value="NetScaler"/>
|
|
361
363
|
<param pos="3" name="os.arch"/>
|
|
362
364
|
<param pos="4" name="os.version"/>
|
|
365
|
+
<param pos="0" name="os.cpe23" value="cpe:/o:citrix:netscaler_firmware:{os.version}"/>
|
|
363
366
|
</fingerprint>
|
|
364
367
|
|
|
365
|
-
<fingerprint pattern="
|
|
368
|
+
<fingerprint pattern="version="ntpd ([^ ]+)[^"]+",.*processor="([^ ]+)",.*system="FreeBSD/?([^ ]+)"" flags="REG_DOT_NEWLINE,REG_ICASE">
|
|
366
369
|
<description>ntpd running on FreeBSD</description>
|
|
367
370
|
<example>
|
|
368
371
|
version="ntpd 4.2.6p2@1.2194 Wed Nov 24 15:54:11 UTC 2010 (1)",
|
|
@@ -379,7 +382,7 @@
|
|
|
379
382
|
<param pos="0" name="os.cpe23" value="cpe:/o:freebsd:freebsd:{os.version}"/>
|
|
380
383
|
</fingerprint>
|
|
381
384
|
|
|
382
|
-
<fingerprint pattern="
|
|
385
|
+
<fingerprint pattern="processor="([^ ]+)",.*system="FreeBSD/?([^ ]+)"" flags="REG_DOT_NEWLINE,REG_ICASE">
|
|
383
386
|
<description>ntp without a version on FreeBSD</description>
|
|
384
387
|
<example os.arch="i386" os.version="4.1-RELEASE">
|
|
385
388
|
processor="i386", system="FreeBSD4.1-RELEASE"
|
|
@@ -395,7 +398,7 @@
|
|
|
395
398
|
<param pos="0" name="os.cpe23" value="cpe:/o:freebsd:freebsd:{os.version}"/>
|
|
396
399
|
</fingerprint>
|
|
397
400
|
|
|
398
|
-
<fingerprint pattern="
|
|
401
|
+
<fingerprint pattern="version="ntpd ([^ ]+)[^"]+",.*processor="([^ ]+)",.*system="NetBSD/?([^ ]+)"" flags="REG_DOT_NEWLINE,REG_ICASE">
|
|
399
402
|
<description>ntpd running on NetBSD</description>
|
|
400
403
|
<example>
|
|
401
404
|
version="ntpd 4.2.4p6-o Thu Jan 8 21:02:40 MET 2009 (import)",
|
|
@@ -412,7 +415,7 @@
|
|
|
412
415
|
<param pos="0" name="os.cpe23" value="cpe:/o:netbsd:netbsd:{os.version}"/>
|
|
413
416
|
</fingerprint>
|
|
414
417
|
|
|
415
|
-
<fingerprint pattern="
|
|
418
|
+
<fingerprint pattern="processor="([^ ]+)",.*system="NetBSD/?([^ ]+)"" flags="REG_DOT_NEWLINE,REG_ICASE">
|
|
416
419
|
<description>ntpd running on NetBSD - variant 2</description>
|
|
417
420
|
<example os.arch="i386" os.version="1.5.3">
|
|
418
421
|
processor="i386", system="NetBSD1.5.3"
|
|
@@ -455,7 +458,7 @@
|
|
|
455
458
|
<param pos="0" name="os.cpe23" value="cpe:/o:netbsd:netbsd:{os.version}"/>
|
|
456
459
|
</fingerprint>
|
|
457
460
|
|
|
458
|
-
<fingerprint pattern="
|
|
461
|
+
<fingerprint pattern="system="NetWare"" flags="REG_DOT_NEWLINE,REG_ICASE">
|
|
459
462
|
<description>NetWare</description>
|
|
460
463
|
<example>
|
|
461
464
|
system="NetWare", leap=0, stratum=2, rootdelay=0.12
|
|
@@ -466,7 +469,7 @@
|
|
|
466
469
|
<param pos="0" name="os.cpe23" value="cpe:/o:novell:netware:-"/>
|
|
467
470
|
</fingerprint>
|
|
468
471
|
|
|
469
|
-
<fingerprint pattern="
|
|
472
|
+
<fingerprint pattern="version="ntpd ([^ ]+)[^"]+",.*processor="([^ ]+)",.*system="SunOS/?5.0"" flags="REG_DOT_NEWLINE,REG_ICASE">
|
|
470
473
|
<description>ntpd running on Solaris 2.0 (SunOS/5.0) </description>
|
|
471
474
|
<example service.version="4.2.0@1.1161-r" os.arch="sun4u">
|
|
472
475
|
version="ntpd 4.2.0@1.1161-r Wed Apr 20 11:28:05 EDT 2005 (1)",
|
|
@@ -487,7 +490,7 @@
|
|
|
487
490
|
<param pos="0" name="os.cpe23" value="cpe:/o:sun:solaris:2.0"/>
|
|
488
491
|
</fingerprint>
|
|
489
492
|
|
|
490
|
-
<fingerprint pattern="
|
|
493
|
+
<fingerprint pattern="version="ntpd ([^ ]+)[^"]+",.*processor="([^ ]+)",.*system="SunOS/?5.1"" flags="REG_DOT_NEWLINE,REG_ICASE">
|
|
491
494
|
<description> ntpd running on Solaris 2.1 (SunOS/5.1) </description>
|
|
492
495
|
<example service.version="4.2.0@1.1161-r" os.arch="sun4u">
|
|
493
496
|
version="ntpd 4.2.0@1.1161-r Wed Apr 20 11:28:05 EDT 2005 (1)",
|
|
@@ -508,7 +511,7 @@
|
|
|
508
511
|
<param pos="0" name="os.cpe23" value="cpe:/o:sun:solaris:2.1"/>
|
|
509
512
|
</fingerprint>
|
|
510
513
|
|
|
511
|
-
<fingerprint pattern="
|
|
514
|
+
<fingerprint pattern="version="ntpd ([^ ]+)[^"]+",.*processor="([^ ]+)",.*system="SunOS/?5.2"" flags="REG_DOT_NEWLINE,REG_ICASE">
|
|
512
515
|
<description> ntpd running on Solaris 2.2 (SunOS/5.2) </description>
|
|
513
516
|
<example service.version="4.2.0@1.1161-r" os.arch="sun4u">
|
|
514
517
|
version="ntpd 4.2.0@1.1161-r Wed Apr 20 11:28:05 EDT 2005 (1)",
|
|
@@ -529,7 +532,7 @@
|
|
|
529
532
|
<param pos="0" name="os.cpe23" value="cpe:/o:sun:solaris:2.2"/>
|
|
530
533
|
</fingerprint>
|
|
531
534
|
|
|
532
|
-
<fingerprint pattern="
|
|
535
|
+
<fingerprint pattern="version="ntpd ([^ ]+)[^"]+",.*processor="([^ ]+)",.*system="SunOS/?5.3"" flags="REG_DOT_NEWLINE,REG_ICASE">
|
|
533
536
|
<description> ntpd running on Solaris 2.3 (SunOS/5.3) </description>
|
|
534
537
|
<example service.version="4.2.0@1.1161-r" os.arch="sun4u">
|
|
535
538
|
version="ntpd 4.2.0@1.1161-r Wed Apr 20 11:28:05 EDT 2005 (1)",
|
|
@@ -550,7 +553,7 @@
|
|
|
550
553
|
<param pos="0" name="os.cpe23" value="cpe:/o:sun:solaris:2.3"/>
|
|
551
554
|
</fingerprint>
|
|
552
555
|
|
|
553
|
-
<fingerprint pattern="
|
|
556
|
+
<fingerprint pattern="version="ntpd ([^ ]+)[^"]+",.*processor="([^ ]+)",.*system="SunOS/?5.4"" flags="REG_DOT_NEWLINE,REG_ICASE">
|
|
554
557
|
<description>ntpd running on Solaris 2.4 (SunOS/5.4) </description>
|
|
555
558
|
<example service.version="4.2.0@1.1161-r" os.arch="sun4u">
|
|
556
559
|
version="ntpd 4.2.0@1.1161-r Wed Apr 20 11:28:05 EDT 2005 (1)",
|
|
@@ -571,7 +574,7 @@
|
|
|
571
574
|
<param pos="0" name="os.cpe23" value="cpe:/o:sun:solaris:2.4"/>
|
|
572
575
|
</fingerprint>
|
|
573
576
|
|
|
574
|
-
<fingerprint pattern="
|
|
577
|
+
<fingerprint pattern="version="ntpd ([^ ]+)[^"]+",.*processor="([^ ]+)",.*system="SunOS/?5.5"" flags="REG_DOT_NEWLINE,REG_ICASE">
|
|
575
578
|
<description>ntpd running on Solaris 2.5 (SunOS/5.5) </description>
|
|
576
579
|
<example service.version="4.2.0@1.1161-r" os.arch="sun4u">
|
|
577
580
|
version="ntpd 4.2.0@1.1161-r Wed Apr 20 11:28:05 EDT 2005 (1)",
|
|
@@ -592,7 +595,7 @@
|
|
|
592
595
|
<param pos="0" name="os.cpe23" value="cpe:/o:sun:solaris:2.5"/>
|
|
593
596
|
</fingerprint>
|
|
594
597
|
|
|
595
|
-
<fingerprint pattern="
|
|
598
|
+
<fingerprint pattern="version="ntpd ([^ ]+)[^"]+",.*processor="([^ ]+)",.*system="SunOS/?5.6"" flags="REG_DOT_NEWLINE,REG_ICASE">
|
|
596
599
|
<description>ntpd running on Solaris 2.6 (SunOS/5.6) </description>
|
|
597
600
|
<example service.version="4.2.0@1.1161-r" os.arch="sun4u">
|
|
598
601
|
version="ntpd 4.2.0@1.1161-r Wed Apr 20 11:28:05 EDT 2005 (1)",
|
|
@@ -613,7 +616,7 @@
|
|
|
613
616
|
<param pos="0" name="os.cpe23" value="cpe:/o:sun:solaris:2.6"/>
|
|
614
617
|
</fingerprint>
|
|
615
618
|
|
|
616
|
-
<fingerprint pattern="
|
|
619
|
+
<fingerprint pattern="version="ntpd ([^ ]+)[^"]+",.*processor="([^ ]+)",.*system="SunOS/?5.(1[1-9])"" flags="REG_DOT_NEWLINE,REG_ICASE">
|
|
617
620
|
<description>ntpd running on Solaris 11 or above (SunOS/5.11 and above) </description>
|
|
618
621
|
<example service.version="4.2.0@1.1161-r" os.arch="sun4u" os.version="11">
|
|
619
622
|
version="ntpd 4.2.0@1.1161-r Wed Apr 20 11:28:05 EDT 2005 (1)",
|
|
@@ -634,7 +637,7 @@
|
|
|
634
637
|
<param pos="0" name="os.cpe23" value="cpe:/o:oracle:solaris:{os.version}"/>
|
|
635
638
|
</fingerprint>
|
|
636
639
|
|
|
637
|
-
<fingerprint pattern="
|
|
640
|
+
<fingerprint pattern="version="ntpd ([^ ]+)[^"]+",.*processor="([^ ]+)",.*system="SunOS/?5.([789]|10)"" flags="REG_DOT_NEWLINE,REG_ICASE">
|
|
638
641
|
<description>ntpd running on Solaris 7-Solaris 10 (SunOS/5.7 - SunOS/5.10) </description>
|
|
639
642
|
<example service.version="4.2.0@1.1161-r" os.arch="sun4u" os.version="7">
|
|
640
643
|
version="ntpd 4.2.0@1.1161-r Wed Apr 20 11:28:05 EDT 2005 (1)",
|
|
@@ -663,7 +666,7 @@
|
|
|
663
666
|
<param pos="0" name="os.cpe23" value="cpe:/o:sun:solaris:{os.version}"/>
|
|
664
667
|
</fingerprint>
|
|
665
668
|
|
|
666
|
-
<fingerprint pattern="
|
|
669
|
+
<fingerprint pattern="processor="([^ ]+)",.*system="SunOS/?5.0"" flags="REG_DOT_NEWLINE,REG_ICASE">
|
|
667
670
|
<description>Solaris 2.0 (SunOS/5.0) with no ntp version</description>
|
|
668
671
|
<example os.arch="sun4m">
|
|
669
672
|
processor="sun4m", system="SunOS/5.0"
|
|
@@ -679,7 +682,7 @@
|
|
|
679
682
|
<param pos="0" name="os.cpe23" value="cpe:/o:sun:solaris:2.0"/>
|
|
680
683
|
</fingerprint>
|
|
681
684
|
|
|
682
|
-
<fingerprint pattern="
|
|
685
|
+
<fingerprint pattern="processor="([^ ]+)",.*system="SunOS/?5.1"" flags="REG_DOT_NEWLINE,REG_ICASE">
|
|
683
686
|
<description>Solaris 2.1 (SunOS/5.1) with no ntp version</description>
|
|
684
687
|
<example os.arch="sun4m">
|
|
685
688
|
processor="sun4m", system="SunOS/5.1"
|
|
@@ -695,7 +698,7 @@
|
|
|
695
698
|
<param pos="0" name="os.cpe23" value="cpe:/o:sun:solaris:2.1"/>
|
|
696
699
|
</fingerprint>
|
|
697
700
|
|
|
698
|
-
<fingerprint pattern="
|
|
701
|
+
<fingerprint pattern="processor="([^ ]+)",.*system="SunOS/?5.2"" flags="REG_DOT_NEWLINE,REG_ICASE">
|
|
699
702
|
<description>Solaris 2.2 (SunOS/5.2) with no ntp version</description>
|
|
700
703
|
<example os.arch="sun4m">
|
|
701
704
|
processor="sun4m", system="SunOS/5.2"
|
|
@@ -711,7 +714,7 @@
|
|
|
711
714
|
<param pos="0" name="os.cpe23" value="cpe:/o:sun:solaris:2.2"/>
|
|
712
715
|
</fingerprint>
|
|
713
716
|
|
|
714
|
-
<fingerprint pattern="
|
|
717
|
+
<fingerprint pattern="processor="([^ ]+)",.*system="SunOS/?5.3"" flags="REG_DOT_NEWLINE,REG_ICASE">
|
|
715
718
|
<description>Solaris 2.3 (SunOS/5.3) with no ntp version</description>
|
|
716
719
|
<example os.arch="sun4m">
|
|
717
720
|
processor="sun4m", system="SunOS/5.3"
|
|
@@ -727,7 +730,7 @@
|
|
|
727
730
|
<param pos="0" name="os.cpe23" value="cpe:/o:sun:solaris:2.3"/>
|
|
728
731
|
</fingerprint>
|
|
729
732
|
|
|
730
|
-
<fingerprint pattern="
|
|
733
|
+
<fingerprint pattern="processor="([^ ]+)",.*system="SunOS/?5.4"" flags="REG_DOT_NEWLINE,REG_ICASE">
|
|
731
734
|
<description>Solaris 2.4 (SunOS/5.4) with no ntp version</description>
|
|
732
735
|
<example os.arch="sun4m">
|
|
733
736
|
processor="sun4m", system="SunOS/5.4"
|
|
@@ -743,7 +746,7 @@
|
|
|
743
746
|
<param pos="0" name="os.cpe23" value="cpe:/o:sun:solaris:2.4"/>
|
|
744
747
|
</fingerprint>
|
|
745
748
|
|
|
746
|
-
<fingerprint pattern="
|
|
749
|
+
<fingerprint pattern="processor="([^ ]+)",.*system="SunOS/?5.5"" flags="REG_DOT_NEWLINE,REG_ICASE">
|
|
747
750
|
<description>Solaris 2.5 (SunOS/5.5) with no ntp version</description>
|
|
748
751
|
<example os.arch="sun4m">
|
|
749
752
|
processor="sun4m", system="SunOS/5.5"
|
|
@@ -759,7 +762,7 @@
|
|
|
759
762
|
<param pos="0" name="os.cpe23" value="cpe:/o:sun:solaris:2.5"/>
|
|
760
763
|
</fingerprint>
|
|
761
764
|
|
|
762
|
-
<fingerprint pattern="
|
|
765
|
+
<fingerprint pattern="processor="([^ ]+)",.*system="SunOS/?5.6"" flags="REG_DOT_NEWLINE,REG_ICASE">
|
|
763
766
|
<description>Solaris 2.6 (SunOS/5.6) with no ntp version</description>
|
|
764
767
|
<example os.arch="sun4m">
|
|
765
768
|
processor="sun4m", system="SunOS/5.6"
|
|
@@ -775,7 +778,7 @@
|
|
|
775
778
|
<param pos="0" name="os.cpe23" value="cpe:/o:sun:solaris:2.6"/>
|
|
776
779
|
</fingerprint>
|
|
777
780
|
|
|
778
|
-
<fingerprint pattern="
|
|
781
|
+
<fingerprint pattern="processor="([^ ]+)",.*system="SunOS/?5.([789]|10)"" flags="REG_DOT_NEWLINE,REG_ICASE">
|
|
779
782
|
<description>Solaris 7-10 (SunOS/5.7 - SunOS/5.10) with no ntp version</description>
|
|
780
783
|
<example os.arch="sun4m" os.version="7">
|
|
781
784
|
processor="sun4m", system="SunOS/5.7"
|
|
@@ -797,7 +800,7 @@
|
|
|
797
800
|
<param pos="0" name="os.cpe23" value="cpe:/o:sun:solaris:{os.version}"/>
|
|
798
801
|
</fingerprint>
|
|
799
802
|
|
|
800
|
-
<fingerprint pattern="
|
|
803
|
+
<fingerprint pattern="processor="([^ ]+)",.*system="SunOS/?5.(1[1-9])"" flags="REG_DOT_NEWLINE,REG_ICASE">
|
|
801
804
|
<description>Solaris 11 and up with no ntp version</description>
|
|
802
805
|
<example os.arch="sun4m" os.version="11">
|
|
803
806
|
processor="sun4m", system="SunOS/5.11"
|
|
@@ -813,7 +816,7 @@
|
|
|
813
816
|
<param pos="0" name="os.cpe23" value="cpe:/o:oracle:solaris:{os.version}"/>
|
|
814
817
|
</fingerprint>
|
|
815
818
|
|
|
816
|
-
<fingerprint pattern="
|
|
819
|
+
<fingerprint pattern="system="UNIX/SunOS ([^ ]+)"" flags="REG_DOT_NEWLINE,REG_ICASE">
|
|
817
820
|
<description>SunOS with no ntp version</description>
|
|
818
821
|
<example>
|
|
819
822
|
system="UNIX/SunOS 4.x",
|
|
@@ -825,7 +828,7 @@
|
|
|
825
828
|
<param pos="0" name="os.cpe23" value="cpe:/o:sun:solaris:{os.version}"/>
|
|
826
829
|
</fingerprint>
|
|
827
830
|
|
|
828
|
-
<fingerprint pattern="
|
|
831
|
+
<fingerprint pattern="version="ntpd ([^ ]+)[^"]+",.*processor="([^ ]+)",.*system="JUNOS/?([^ ]+)"" flags="REG_DOT_NEWLINE,REG_ICASE">
|
|
829
832
|
<description>ntpd running on Juniper/Netscreen JunOS</description>
|
|
830
833
|
<example>
|
|
831
834
|
version="ntpd 4.2.0-a Wed Aug 12 04:22:47 UTC 2009 (1)",
|
|
@@ -855,7 +858,7 @@
|
|
|
855
858
|
<param pos="0" name="os.cpe23" value="cpe:/o:juniper:junos:{os.version}"/>
|
|
856
859
|
</fingerprint>
|
|
857
860
|
|
|
858
|
-
<fingerprint pattern="
|
|
861
|
+
<fingerprint pattern="version="ntpd ([^ ]+)[^"]+",.*processor="([^ ]+)",.*system="Windows/?([^ ]+)?"" flags="REG_DOT_NEWLINE,REG_ICASE">
|
|
859
862
|
<description>ntpd running on Windows</description>
|
|
860
863
|
<example>
|
|
861
864
|
version="ntpd 4.2.4p7@copenhagen-o May 22 11:25:36 (UTC+02:00) 2009 (3)",
|
|
@@ -876,7 +879,7 @@
|
|
|
876
879
|
<param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows:{os.version}"/>
|
|
877
880
|
</fingerprint>
|
|
878
881
|
|
|
879
|
-
<fingerprint pattern="
|
|
882
|
+
<fingerprint pattern="version="ntpd ([^ ]+)[^"]+",.*processor="([^ ]+)",.*system="HP-UX/?([^ ]+)?"" flags="REG_DOT_NEWLINE,REG_ICASE">
|
|
880
883
|
<description>ntpd running on HP-UX</description>
|
|
881
884
|
<example>
|
|
882
885
|
version="ntpd 4.2.2@1.1532-o Wed Sep 6 16:49:43 EDT 2006 (2)",
|
|
@@ -893,7 +896,7 @@
|
|
|
893
896
|
<param pos="0" name="os.cpe23" value="cpe:/o:hp:hp-ux:{os.version}"/>
|
|
894
897
|
</fingerprint>
|
|
895
898
|
|
|
896
|
-
<fingerprint pattern="
|
|
899
|
+
<fingerprint pattern="version="ntpd ([^ ]+)[^"]+",.*processor=,.*system="HP-UX/"" flags="REG_DOT_NEWLINE,REG_ICASE">
|
|
897
900
|
<description>ntpd running on HP-UX with an empty processor</description>
|
|
898
901
|
<example service.version="4.2.6">
|
|
899
902
|
version="ntpd 4.2.6 Revision 0.0 Tue Nov 5 14:21:22 UTC 2012",
|
|
@@ -908,7 +911,7 @@
|
|
|
908
911
|
<param pos="0" name="os.cpe23" value="cpe:/o:hp:hp-ux:-"/>
|
|
909
912
|
</fingerprint>
|
|
910
913
|
|
|
911
|
-
<fingerprint pattern="
|
|
914
|
+
<fingerprint pattern="version="ntpd ([^ ]+)[^"]+",.*processor="[^ ]+",.*system="([^ ]+)-hp-hpux([^ ]+)"" flags="REG_DOT_NEWLINE,REG_ICASE">
|
|
912
915
|
<description>ntpd running on HP-UX, where the processor is in the 'system' variable</description>
|
|
913
916
|
<example>
|
|
914
917
|
version="ntpd 4.2.5p154@1.1802 Tue Mar 22 22:09:00 UTC 2011 (39)",
|
|
@@ -925,7 +928,12 @@
|
|
|
925
928
|
<param pos="0" name="os.cpe23" value="cpe:/o:hp:hp-ux:{os.version}"/>
|
|
926
929
|
</fingerprint>
|
|
927
930
|
|
|
928
|
-
|
|
931
|
+
<!--
|
|
932
|
+
This may need to be split into ESX and ESXi. ESXi started w/ version 4.1 and
|
|
933
|
+
all versions 5.x were ESXi only.
|
|
934
|
+
-->
|
|
935
|
+
|
|
936
|
+
<fingerprint pattern="version="ntpd ([^ ]+)[^"]+",.*processor="([^ ]+)",.*system="VMkernel/?([^ ]+)?"" flags="REG_DOT_NEWLINE,REG_ICASE">
|
|
929
937
|
<description>ntpd running on VMware ESXi</description>
|
|
930
938
|
<example>
|
|
931
939
|
version="ntpd 4.2.4p6@1.1495 Wed Sep 22 02:33:15 UTC 2010 (1)",
|
|
@@ -939,10 +947,12 @@
|
|
|
939
947
|
<param pos="0" name="os.product" value="VMware ESXi Server"/>
|
|
940
948
|
<param pos="2" name="os.arch"/>
|
|
941
949
|
<param pos="3" name="os.version"/>
|
|
950
|
+
<param pos="0" name="os.device" value="Hypervisor"/>
|
|
942
951
|
<param pos="0" name="os.cpe23" value="cpe:/o:vmware:esxi:{os.version}"/>
|
|
952
|
+
<param pos="0" name="hw.device" value="Hypervisor"/>
|
|
943
953
|
</fingerprint>
|
|
944
954
|
|
|
945
|
-
<fingerprint pattern="
|
|
955
|
+
<fingerprint pattern="processor="([^ ]+)",.*system="OSF1[/V]?([^ ]+)"" flags="REG_DOT_NEWLINE,REG_ICASE">
|
|
946
956
|
<description>ntpd running on OSF/1</description>
|
|
947
957
|
<example os.arch="alpha" os.version="4.0">
|
|
948
958
|
processor="alpha", system="OSF1V4.0", leap=00, stratum=1, precision=-18,
|
|
@@ -955,7 +965,7 @@
|
|
|
955
965
|
<param pos="1" name="os.arch"/>
|
|
956
966
|
</fingerprint>
|
|
957
967
|
|
|
958
|
-
<fingerprint pattern="
|
|
968
|
+
<fingerprint pattern="system="UNIX/DECOSF1"" flags="REG_DOT_NEWLINE,REG_ICASE">
|
|
959
969
|
<description>DEC OSF/1</description>
|
|
960
970
|
<example>
|
|
961
971
|
system="UNIX/DECOSF1", leap=0, stratum=3, rootdelay=18.14,
|
|
@@ -964,7 +974,7 @@
|
|
|
964
974
|
<param pos="0" name="os.product" value="OSF/1"/>
|
|
965
975
|
</fingerprint>
|
|
966
976
|
|
|
967
|
-
<fingerprint pattern="
|
|
977
|
+
<fingerprint pattern="system="Linux"" flags="REG_DOT_NEWLINE,REG_ICASE">
|
|
968
978
|
<description>Linux with NTP enabled, no processor/version</description>
|
|
969
979
|
<example>
|
|
970
980
|
system="Linux", leap=00, stratum=2, rootdelay=6.480,
|
|
@@ -977,7 +987,7 @@
|
|
|
977
987
|
<param pos="0" name="service.product" value="NTP"/>
|
|
978
988
|
</fingerprint>
|
|
979
989
|
|
|
980
|
-
<fingerprint pattern="
|
|
990
|
+
<fingerprint pattern="system="UNIX/AIX"" flags="REG_DOT_NEWLINE,REG_ICASE">
|
|
981
991
|
<description>AIX with NTP enabled, no processor/version</description>
|
|
982
992
|
<example>
|
|
983
993
|
system="UNIX/AIX", leap=00, stratum=3, rootdelay=2.000,
|
|
@@ -991,7 +1001,7 @@
|
|
|
991
1001
|
<param pos="0" name="service.vendor" value="IBM"/>
|
|
992
1002
|
</fingerprint>
|
|
993
1003
|
|
|
994
|
-
<fingerprint pattern="
|
|
1004
|
+
<fingerprint pattern="system="SunOS"" flags="REG_DOT_NEWLINE,REG_ICASE">
|
|
995
1005
|
<description>Solaris with NTP enabled, no processor/version</description>
|
|
996
1006
|
<example>
|
|
997
1007
|
system="SunOS", leap=00, stratum=1, rootdelay=0.000,
|
|
@@ -1005,7 +1015,7 @@
|
|
|
1005
1015
|
<param pos="0" name="service.vendor" value="Sun"/>
|
|
1006
1016
|
</fingerprint>
|
|
1007
1017
|
|
|
1008
|
-
<fingerprint pattern="
|
|
1018
|
+
<fingerprint pattern="system="cisco"" flags="REG_DOT_NEWLINE,REG_ICASE">
|
|
1009
1019
|
<description>Cisco IOS with NTP enabled</description>
|
|
1010
1020
|
<example>
|
|
1011
1021
|
system="cisco", leap=00, stratum=2, rootdelay=39.900,
|
|
@@ -1019,7 +1029,7 @@
|
|
|
1019
1029
|
<param pos="0" name="service.vendor" value="Cisco"/>
|
|
1020
1030
|
</fingerprint>
|
|
1021
1031
|
|
|
1022
|
-
<fingerprint pattern="
|
|
1032
|
+
<fingerprint pattern="system="Data ONTAP/+(\S+)"" flags="REG_DOT_NEWLINE,REG_ICASE">
|
|
1023
1033
|
<description>NetApp file servers</description>
|
|
1024
1034
|
<example>
|
|
1025
1035
|
system="Data ONTAP/8.1RC2"
|
|
@@ -1027,9 +1037,13 @@
|
|
|
1027
1037
|
<param pos="0" name="os.vendor" value="NetApp"/>
|
|
1028
1038
|
<param pos="0" name="os.family" value="Data ONTAP"/>
|
|
1029
1039
|
<param pos="0" name="os.product" value="Data ONTAP"/>
|
|
1030
|
-
<param pos="0" name="os.device" value="File Server"/>
|
|
1031
1040
|
<param pos="1" name="os.version"/>
|
|
1041
|
+
<param pos="0" name="os.device" value="NAS"/>
|
|
1032
1042
|
<param pos="0" name="os.cpe23" value="cpe:/o:netapp:data_ontap:{os.version}"/>
|
|
1043
|
+
<param pos="0" name="hw.vendor" value="NetApp"/>
|
|
1044
|
+
<param pos="0" name="hw.device" value="NAS"/>
|
|
1045
|
+
<param pos="0" name="hw.family" value="Data ONTAP"/>
|
|
1046
|
+
<param pos="0" name="hw.product" value="Data ONTAP"/>
|
|
1033
1047
|
</fingerprint>
|
|
1034
1048
|
|
|
1035
1049
|
<fingerprint pattern="system="UNIX/HPUX"" flags="REG_ICASE">
|
|
@@ -1107,7 +1121,7 @@
|
|
|
1107
1121
|
<param pos="1" name="os.product"/>
|
|
1108
1122
|
</fingerprint>
|
|
1109
1123
|
|
|
1110
|
-
<fingerprint pattern="
|
|
1124
|
+
<fingerprint pattern="processor="([^"]+)", system="SCO_SV([\d\.]+)"" flags="REG_DOT_NEWLINE,REG_ICASE">
|
|
1111
1125
|
<description>SCO Unixware NTP - SCO_SV variant</description>
|
|
1112
1126
|
<example os.version="3.2" os.arch="i386">
|
|
1113
1127
|
processor="i386", system="SCO_SV3.2", leap=0, stratum=2, precision=-18
|
|
@@ -1118,7 +1132,7 @@
|
|
|
1118
1132
|
<param pos="2" name="os.version"/>
|
|
1119
1133
|
</fingerprint>
|
|
1120
1134
|
|
|
1121
|
-
<fingerprint pattern="
|
|
1135
|
+
<fingerprint pattern="version="ntpd ([^ ]+)[^"]+",.*\s*processor="([^ ]+)",.*system="SecureOS/([^ ]+)"" flags="REG_DOT_NEWLINE,REG_ICASE">
|
|
1122
1136
|
<description>McAfee Network Firewall Enterprise NTP (SecureOS)</description>
|
|
1123
1137
|
<example>
|
|
1124
1138
|
version="ntpd 4.2.0-r Thu Aug 11 12:41:19 CDT 2005 (1)",
|
|
@@ -1145,7 +1159,7 @@
|
|
|
1145
1159
|
<param pos="3" name="os.version"/>
|
|
1146
1160
|
</fingerprint>
|
|
1147
1161
|
|
|
1148
|
-
<fingerprint pattern="
|
|
1162
|
+
<fingerprint pattern="processor="([^ ]+)".*system="Linux([^ ]+)"" flags="REG_DOT_NEWLINE,REG_ICASE">
|
|
1149
1163
|
<description>ntpd running on linux</description>
|
|
1150
1164
|
<example>
|
|
1151
1165
|
processor="i686", system="Linux2.6.10", leap=0, stratum=2,
|
|
@@ -1172,7 +1186,7 @@
|
|
|
1172
1186
|
<param pos="0" name="os.cpe23" value="cpe:/o:linux:linux_kernel:{os.version}"/>
|
|
1173
1187
|
</fingerprint>
|
|
1174
1188
|
|
|
1175
|
-
<fingerprint pattern="
|
|
1189
|
+
<fingerprint pattern="version="ntpd (\S+)[^"]+",.*\s*processor="([^ ]+)".*system="Isilon OneFS/v([^ ]+)"" flags="REG_DOT_NEWLINE,REG_ICASE">
|
|
1176
1190
|
<description>Isilon OneFS NTP Server</description>
|
|
1177
1191
|
<example>
|
|
1178
1192
|
version="ntpd 4.2.4p4-o Thu Feb 4 20:43:00 UTC 2010 (1)",
|
|
@@ -1275,7 +1289,7 @@
|
|
|
1275
1289
|
<param pos="0" name="os.arch" value="Alpha"/>
|
|
1276
1290
|
</fingerprint>
|
|
1277
1291
|
|
|
1278
|
-
<fingerprint pattern="
|
|
1292
|
+
<fingerprint pattern="version="ntpd ([^ ]+)[^"]+",\s*processor="([^ ]+)",\s*system="BIG-IPBIG-IP\s+([^"]+)"" flags="REG_DOT_NEWLINE,REG_ICASE">
|
|
1279
1293
|
<description>F5 Big-IP Load Balancers NTP</description>
|
|
1280
1294
|
<example service.version="4.1.1a@1.791" os.arch="i386" os.version="4.5PTF-0">
|
|
1281
1295
|
version="ntpd 4.1.1a@1.791 Fri Aug 8 04:08:19 PDT 2003 (1)",
|
|
@@ -1294,7 +1308,7 @@
|
|
|
1294
1308
|
<param pos="3" name="os.version"/>
|
|
1295
1309
|
</fingerprint>
|
|
1296
1310
|
|
|
1297
|
-
<fingerprint pattern="
|
|
1311
|
+
<fingerprint pattern="version="ntpd ([^ ]+)[^"]+",\s*processor,\s*system="/"" flags="REG_DOT_NEWLINE,REG_ICASE">
|
|
1298
1312
|
<description>NTP on an unknown system</description>
|
|
1299
1313
|
<example service.version="4.2.6p2-RC4@1.2180-o">
|
|
1300
1314
|
version="ntpd 4.2.6p2-RC4@1.2180-o Sun Jun 13 02:56:12 UTC 2010 (2)", processor, system="/"
|