recog 2.3.18 → 2.3.22

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (73) hide show
  1. checksums.yaml +4 -4
  2. data/.github/dependabot.yml +8 -0
  3. data/.github/workflows/ci.yml +26 -0
  4. data/.github/workflows/verify.yml +89 -0
  5. data/CONTRIBUTING.md +6 -0
  6. data/README.md +17 -0
  7. data/bin/recog_standardize +33 -12
  8. data/bin/recog_verify +1 -2
  9. data/cpe-remap.yaml +355 -200
  10. data/features/verify.feature +14 -14
  11. data/identifiers/README.md +24 -10
  12. data/identifiers/fields.txt +105 -0
  13. data/identifiers/hw_device.txt +8 -0
  14. data/identifiers/hw_family.txt +19 -0
  15. data/identifiers/hw_product.txt +122 -0
  16. data/identifiers/os_device.txt +2 -1
  17. data/identifiers/os_family.txt +3 -0
  18. data/identifiers/os_product.txt +46 -8
  19. data/identifiers/service_family.txt +10 -1
  20. data/identifiers/service_product.txt +90 -2
  21. data/identifiers/vendor.txt +104 -0
  22. data/lib/recog/db.rb +2 -1
  23. data/lib/recog/fingerprint.rb +18 -5
  24. data/lib/recog/nizer.rb +1 -82
  25. data/lib/recog/verifier.rb +5 -5
  26. data/lib/recog/verifier_factory.rb +3 -3
  27. data/lib/recog/verify_reporter.rb +14 -4
  28. data/lib/recog/version.rb +1 -1
  29. data/requirements.txt +1 -1
  30. data/spec/lib/fingerprint_self_test_spec.rb +1 -0
  31. data/spec/lib/recog/verify_reporter_spec.rb +69 -0
  32. data/tools/dev/hooks/pre-commit +21 -0
  33. data/update_cpes.py +19 -6
  34. data/xml/apache_modules.xml +60 -0
  35. data/xml/apache_os.xml +38 -38
  36. data/xml/dhcp_vendor_class.xml +206 -0
  37. data/xml/dns_versionbind.xml +11 -1
  38. data/xml/favicons.xml +270 -45
  39. data/xml/ftp_banners.xml +89 -64
  40. data/xml/h323_callresp.xml +99 -99
  41. data/xml/hp_pjl_id.xml +3 -3
  42. data/xml/html_title.xml +1051 -62
  43. data/xml/http_cookies.xml +294 -85
  44. data/xml/http_servers.xml +551 -122
  45. data/xml/http_wwwauth.xml +139 -43
  46. data/xml/imap_banners.xml +8 -8
  47. data/xml/ldap_searchresult.xml +1 -0
  48. data/xml/mdns_device-info_txt.xml +720 -27
  49. data/xml/mysql_banners.xml +3 -2
  50. data/xml/nntp_banners.xml +4 -4
  51. data/xml/ntp_banners.xml +79 -65
  52. data/xml/operating_system.xml +6 -6
  53. data/xml/pop_banners.xml +11 -11
  54. data/xml/rsh_resp.xml +3 -3
  55. data/xml/rtsp_servers.xml +7 -0
  56. data/xml/sip_banners.xml +374 -9
  57. data/xml/sip_user_agents.xml +377 -5
  58. data/xml/smb_native_lm.xml +32 -1
  59. data/xml/smb_native_os.xml +160 -33
  60. data/xml/smtp_banners.xml +168 -129
  61. data/xml/smtp_ehlo.xml +1 -1
  62. data/xml/smtp_expn.xml +1 -0
  63. data/xml/smtp_help.xml +10 -10
  64. data/xml/smtp_noop.xml +2 -2
  65. data/xml/smtp_vrfy.xml +1 -0
  66. data/xml/snmp_sysdescr.xml +508 -214
  67. data/xml/snmp_sysobjid.xml +25 -25
  68. data/xml/ssh_banners.xml +145 -29
  69. data/xml/telnet_banners.xml +240 -61
  70. data/xml/tls_jarm.xml +162 -0
  71. data/xml/x509_issuers.xml +237 -2
  72. data/xml/x509_subjects.xml +369 -49
  73. metadata +10 -3
@@ -62,7 +62,7 @@
62
62
  <param pos="1" name="os.version"/>
63
63
  </fingerprint>
64
64
 
65
- <fingerprint pattern="^3Com HomeConnect ADSL Modem V([^,]+),\s+.*$">
65
+ <fingerprint pattern="^3Com HomeConnect ADSL Modem V([^,]+),\s+">
66
66
  <description>3COM ADSL Modem</description>
67
67
  <example>3Com HomeConnect ADSL Modem V1.1.8, Built on May 17 2000 at 18:24:32.</example>
68
68
  <param pos="0" name="os.vendor" value="3Com"/>
@@ -98,7 +98,7 @@
98
98
  <param pos="2" name="os.version"/>
99
99
  </fingerprint>
100
100
 
101
- <fingerprint pattern="^3Com OfficeConnect (Remote ADSL \S+) V([^,]+),.*$">
101
+ <fingerprint pattern="^3Com OfficeConnect (Remote ADSL \S+) V([^,]+),">
102
102
  <description>3COM Cable Modem - build date variant</description>
103
103
  <example>3Com OfficeConnect Remote ADSL 812 V1.0.5, Built on Mar 16 2000 at 17:27:24.</example>
104
104
  <param pos="0" name="os.vendor" value="3Com"/>
@@ -128,7 +128,7 @@
128
128
  <param pos="1" name="os.product"/>
129
129
  </fingerprint>
130
130
 
131
- <fingerprint pattern="^3Com Router Software V([^,]+), SNMP agent for (Router \S+) with.*$">
131
+ <fingerprint pattern="^3Com Router Software V([^,]+), SNMP agent for (Router \S+) with">
132
132
  <description>3COM Router - processor variant</description>
133
133
  <example>3Com Router Software V1.10, SNMP agent for Router 3012 with 1 MPC 860 Processor, Copyright (c) Reserved.</example>
134
134
  <example>3Com Router Software V1.10, SNMP agent for Router 5009 with 1 MPC 8241 Processor, Copyright (c) Reserved.</example>
@@ -217,7 +217,7 @@
217
217
  <param pos="1" name="os.product"/>
218
218
  </fingerprint>
219
219
 
220
- <fingerprint pattern="(?i)^3Com Baseline Switch (\S+ Plus).* Software Version (\d+\.\S+ release \S+).*$">
220
+ <fingerprint pattern="(?i)^3Com Baseline Switch (\S+ Plus).* Software Version (\d+\.\S+ release \S+)">
221
221
  <description>3COM Baseline Switch with software version</description>
222
222
  <example>3Com Baseline Switch 2920-SFP Plus Software Version 5.20 RELEASE 1101 Copyright (c) 2004-2009 3Com Corporation. All rights reserved.</example>
223
223
  <example>3Com Baseline Switch 2920-SFP Plus Software Version 5.20 Release 1101P02 Copyright (c) 2004-2009 3Com Corporation. All rights reserved.</example>
@@ -244,7 +244,7 @@
244
244
  <param pos="2" name="os.version"/>
245
245
  </fingerprint>
246
246
 
247
- <fingerprint pattern="^3Com Corporation HiPer Access Router Card.*$">
247
+ <fingerprint pattern="^3Com Corporation HiPer Access Router Card">
248
248
  <description>3COM HiPer Access Router Card</description>
249
249
  <example>3Com Corporation HiPer Access Router Card Built on Apr 19 2000 at 12:33:01.</example>
250
250
  <param pos="0" name="os.vendor" value="3Com"/>
@@ -278,7 +278,7 @@
278
278
  <param pos="1" name="os.product"/>
279
279
  </fingerprint>
280
280
 
281
- <fingerprint pattern="^3Com Enterprise AP:\s*v(\S+) .*$">
281
+ <fingerprint pattern="^3Com Enterprise AP:\s*v(\S+)">
282
282
  <description>3COM Enterprise AP</description>
283
283
  <example os.version="3.1.00">3Com Enterprise AP: v3.1.00 v3.0.8</example>
284
284
  <example>3Com Enterprise AP: v3.2.0 v3.0.8</example>
@@ -303,7 +303,7 @@
303
303
  <param pos="1" name="hw.product"/>
304
304
  </fingerprint>
305
305
 
306
- <fingerprint pattern="^3Com Router .* Software Release ([^,]+), .*$">
306
+ <fingerprint pattern="^3Com Router .* Software Release ([^,]+),">
307
307
  <description>3COM Router - release variant</description>
308
308
  <example os.version="1910P02">3Com Router OSR6740 Software Release 1910P02, Standard (build V300R003B04D015SP01)</example>
309
309
  <param pos="0" name="os.vendor" value="3Com"/>
@@ -312,7 +312,7 @@
312
312
  <param pos="1" name="os.version"/>
313
313
  </fingerprint>
314
314
 
315
- <fingerprint pattern="^3Com (Router \S+) Software (\S+).*$">
315
+ <fingerprint pattern="^3Com (Router \S+) Software (\S+)">
316
316
  <description>3COM Router</description>
317
317
  <example hw.product="Router 3012" os.version="Extended_V1.30">3Com Router 3012 Software Extended_V1.30</example>
318
318
  <example>3Com Router 3013 Software V1.40.19</example>
@@ -518,7 +518,7 @@
518
518
  <param pos="1" name="os.product"/>
519
519
  </fingerprint>
520
520
 
521
- <fingerprint pattern="^Total Access ([^,\s]+).*Version: ([^,]+), Date: .*$">
521
+ <fingerprint pattern="^Total Access ([^,\s]+).*Version: ([^,]+), Date:">
522
522
  <description>ADTRAN TotalAccess - date variant</description>
523
523
  <example>Total Access 924 (2nd Gen), Version: A1.08.00.E, Date: Tue Apr 28 10:54:58 2009</example>
524
524
  <example>Total Access 904 (1st Gen), Version: A4.02.00.E, Date: Mon Aug 09 13:57:18 2010</example>
@@ -544,7 +544,7 @@
544
544
  <param pos="1" name="os.product"/>
545
545
  </fingerprint>
546
546
 
547
- <fingerprint pattern="^(TA\d\S+) (\d\S+ )?Total Access .*$">
547
+ <fingerprint pattern="^(TA\d\S+) (\d\S+ )?Total Access">
548
548
  <description>ADTRAN TotalAccess - model first variant</description>
549
549
  <example>TA1100F 1179.760 Total Access SFP-Based System</example>
550
550
  <example>TA1200F 1179.660L1 Total Access IP DSLAM System</example>
@@ -568,7 +568,7 @@
568
568
  <param pos="0" name="os.product" value="DSLAM Shelf"/>
569
569
  </fingerprint>
570
570
 
571
- <fingerprint pattern="(?i)^ADTRAN (T3SU-\S+).*$">
571
+ <fingerprint pattern="(?i)^ADTRAN (T3SU-\S+)">
572
572
  <description>ADTRAN DSU/CSU</description>
573
573
  <example>ADTRAN T3SU-300 (1200.217L1)</example>
574
574
  <param pos="0" name="os.device" value="DSU/CSU"/>
@@ -660,11 +660,23 @@
660
660
  <param pos="1" name="os.product"/>
661
661
  </fingerprint>
662
662
 
663
+ <!--======================================================================
664
+ ALLWORX
665
+ =======================================================================-->
666
+
667
+ <fingerprint pattern="^ALLWORX (9\d{3})$">
668
+ <description>Allworx 9XXX IP Phones</description>
669
+ <example hw.product="9308">ALLWORX 9308</example>
670
+ <param pos="0" name="hw.vendor" value="Allworx"/>
671
+ <param pos="0" name="hw.device" value="VoIP"/>
672
+ <param pos="1" name="hw.product"/>
673
+ </fingerprint>
674
+
663
675
  <!--======================================================================
664
676
  APC
665
677
  =======================================================================-->
666
678
 
667
- <fingerprint pattern="^APC - (\d+-port IP KVM) - version: V_(\S+) .*$">
679
+ <fingerprint pattern="^APC - (\d+-port IP KVM) - version: V_(\S+)">
668
680
  <description>APC KVM over IP</description>
669
681
  <example>APC - 16-port IP KVM - version: V_2.0.0-2 (Oct/17/06)</example>
670
682
  <param pos="0" name="os.vendor" value="APC"/>
@@ -674,7 +686,7 @@
674
686
  <param pos="2" name="os.version"/>
675
687
  </fingerprint>
676
688
 
677
- <fingerprint pattern="^APC Embedded PowerNet SNMP Agent \(.*SW v([^,]+),.*M[oO][dD]:\s*([^,]+),.*$">
689
+ <fingerprint pattern="^APC Embedded PowerNet SNMP Agent \(.*SW v([^,]+),.*M[oO][dD]:\s*([^,]+),">
678
690
  <description>APC Embedded PowerNet</description>
679
691
  <example>APC Embedded PowerNet SNMP Agent (FW v3.0.2 SW v2.2.4.a, HW ged~, MOD: AP9605, Mfg: 06/24/1998, SN: X)</example>
680
692
  <example>APC Embedded PowerNet SNMP Agent (SW v2.0.3, HW v2.0B, Mod: AP9206, Mfg 06/22/94, SN: A94063028359)</example>
@@ -684,7 +696,7 @@
684
696
  <param pos="2" name="os.product"/>
685
697
  </fingerprint>
686
698
 
687
- <fingerprint pattern="^APC (?:Environmental (?:Management System|Manager|Monitoring Unit)|InfraStruXure Manager|.* Rack PDU|NetBotz Rack Access|Web/SNMP Management Card).*AF1:\s*v?(\S+).*MN:\s*(\S+).*$">
699
+ <fingerprint pattern="^APC (?:Environmental (?:Management System|Manager|Monitoring Unit)|InfraStruXure Manager|.* Rack PDU|NetBotz Rack Access|Web/SNMP Management Card).*AF1:\s*v?(\S+).*MN:\s*(\S+)">
688
700
  <description>APC UPS</description>
689
701
  <example>APC Environmental Management System (MB:v3.6.9 PF:v2.6.4 PN:apc_hw02_aos_264.bin AF1:v2.6.7 AN1:apc_hw02_ems_267.bin MN:AP9320 HR:4 SN: ZA0747015277 MD:11/25/2007)</example>
690
702
  <example>APC Environmental Manager (MB:v3.8.0 PF:v3.0.3 PN:apc_hw03_aos_303.bin AF1:v3.0.4 AN1:apc_hw03_mem_304.bin MN:AP9340 HR:05 SN: ZA0739002849 MD:09/25/2007)</example>
@@ -727,7 +739,7 @@
727
739
  <param pos="1" name="os.version"/>
728
740
  </fingerprint>
729
741
 
730
- <fingerprint pattern="^Apple AirPort - Apple (?:Inc\.|Computer).*$">
742
+ <fingerprint pattern="^Apple AirPort - Apple (?:Inc\.|Computer)">
731
743
  <description>Apple Airport Extreme</description>
732
744
  <example>Apple AirPort - Apple Inc., 2006-2009. All rights Reserved.</example>
733
745
  <example>Apple AirPort - Apple Computer, 2006. All rights Reserved</example>
@@ -793,7 +805,7 @@
793
805
  <param pos="1" name="os.version"/>
794
806
  </fingerprint>
795
807
 
796
- <fingerprint pattern="^Avaya (AP-\d+|AP4\-AP5\-AP6|Wireless Outdoor Router|Wireless AP\-3)\s*[vV](\S+).*$">
808
+ <fingerprint pattern="^Avaya (AP-\d+|AP4\-AP5\-AP6|Wireless Outdoor Router|Wireless AP\-3)\s*[vV](\S+)">
797
809
  <description>Avaya WAP</description>
798
810
  <example>Avaya AP-3 v2.5.3(914) SN-02UT44560476 v2.0.10</example>
799
811
  <example>Avaya AP-8 v2.6.0(914) SN-06UT27560151 v3.1.0</example>
@@ -809,7 +821,7 @@
809
821
  <param pos="2" name="os.version"/>
810
822
  </fingerprint>
811
823
 
812
- <fingerprint pattern="^Avaya (?:Inc\.\s*\-\s*)?([^,]+?)[\s,]*SW version (\S+).*$">
824
+ <fingerprint pattern="^Avaya (?:Inc\.\s*\-\s*)?([^,]+?)[\s,]*SW version (\S+)">
813
825
  <description>Avaya Switch</description>
814
826
  <example os.product="C360" os.version="4.3.12">Avaya Inc. - C360 , SW version 4.3.12 , CS 1.1</example>
815
827
  <example os.product="C360 Stackable Switch" os.version="4.5.14">Avaya Inc.- C360 Stackable Switch, SW version 4.5.14</example>
@@ -820,7 +832,7 @@
820
832
  <param pos="2" name="os.version"/>
821
833
  </fingerprint>
822
834
 
823
- <fingerprint pattern="^Avaya Inc\., (.* Media Gateway), SW Version (\S+).*$">
835
+ <fingerprint pattern="^Avaya Inc\., (.* Media Gateway), SW Version (\S+)">
824
836
  <description>Avaya Media Gateway</description>
825
837
  <example>Avaya Inc., G250 Media Gateway, SW Version 25.28.0</example>
826
838
  <example>Avaya Inc., G250-BRI Media Gateway, SW Version 25.28.0</example>
@@ -925,7 +937,7 @@
925
937
  AVERY DENNISON
926
938
  =======================================================================-->
927
939
 
928
- <fingerprint pattern="^Monarch (?:M\d+ FW Ver \d+\.\d / )?(\d+) (?:Print|Network) Adapter.*$">
940
+ <fingerprint pattern="^Monarch (?:M\d+ FW Ver \d+\.\d / )?(\d+) (?:Print|Network) Adapter">
929
941
  <description>Avery Dennison Monarch barcode printers</description>
930
942
  <example>Monarch 7411 Print Adapter</example>
931
943
  <example>Monarch 7410 Print Adapter compatible with an HP JETDIRECT EX</example>
@@ -994,7 +1006,7 @@
994
1006
  BLUE COAT
995
1007
  =======================================================================-->
996
1008
 
997
- <fingerprint pattern="^Blue Coat (SG\S+)(?: Series)?,.*\s+SGOS ([^,]+), Release id:\s*(\S+).*$">
1009
+ <fingerprint pattern="^Blue Coat (SG\S+)(?: Series)?,.*\s+SGOS ([^,]+), Release id:\s*(\S+)">
998
1010
  <description>Blue Coat Proxy SG</description>
999
1011
  <example os.product="SG400" os.version="5.2.4.8" os.version.version="35838">Blue Coat SG400 Series, Version: SGOS 5.2.4.8, Release id: 35838 Proxy Edition</example>
1000
1012
  <example os.product="SG800" os.version="2.1.6044" os.version.version="19480">Blue Coat SG800 Series, Security-Gateway Version: SGOS 2.1.6044, Release id: 19480 Service Pack 4</example>
@@ -1007,7 +1019,7 @@
1007
1019
  <param pos="3" name="os.version.version"/>
1008
1020
  </fingerprint>
1009
1021
 
1010
- <fingerprint pattern="^Blue Coat (AV\S+)(?: Series)?, ProxyAV Version: ([^,]+). Release id:\s*(\S+).*$">
1022
+ <fingerprint pattern="^Blue Coat (AV\S+)(?: Series)?, ProxyAV Version: ([^,]+). Release id:\s*(\S+)">
1011
1023
  <description>Blue Coat ProxyAV</description>
1012
1024
  <example os.product="AV1200" os.version="3.2.6.1" os.version.version="51482">Blue Coat AV1200 Series, ProxyAV Version: 3.2.6.1, Release id: 51482</example>
1013
1025
  <param pos="0" name="os.vendor" value="Blue Coat"/>
@@ -1039,7 +1051,9 @@
1039
1051
  <param pos="0" name="os.vendor" value="Brocade"/>
1040
1052
  <param pos="0" name="os.product" value="Fabric OS"/>
1041
1053
  <param pos="0" name="os.device" value="Switch"/>
1042
- <param pos="0" name="os.cpe23" value="cpe:/o:brocade:fabric_os:-"/>
1054
+ <param pos="0" name="os.cpe23" value="cpe:/o:brocade:fabric_operating_system:-"/>
1055
+ <param pos="0" name="hw.vendor" value="Brocade"/>
1056
+ <param pos="0" name="hw.device" value="Switch"/>
1043
1057
  </fingerprint>
1044
1058
 
1045
1059
  <fingerprint pattern="^Brocade ((?:\S+ )?SAN Switch) Module for IBM eServer BladeCenter$">
@@ -1050,9 +1064,10 @@
1050
1064
  <param pos="0" name="os.vendor" value="Brocade"/>
1051
1065
  <param pos="0" name="os.device" value="Switch"/>
1052
1066
  <param pos="1" name="os.product"/>
1067
+ <param pos="0" name="hw.vendor" value="Brocade"/>
1053
1068
  </fingerprint>
1054
1069
 
1055
- <fingerprint pattern="^Brocade (?:Communications? Systems, Inc\. )?([^,\(]+)(?: \([^\)]+\))?,(?: Extended route scalability,)? IronWare Version V?(\S+) .*$">
1070
+ <fingerprint pattern="^Brocade (?:Communications? Systems, Inc\. )?([^,\(]+)(?: \([^\)]+\))?,(?: Extended route scalability,)? IronWare Version V?(\S+)">
1056
1071
  <description>Brocade IronWare</description>
1057
1072
  <example>Brocade Communications Systems, Inc. BigIron RX, IronWare Version V2.7.3aT143 Compiled on Jan 07 2011 at 19:37:41 labeled as V2.7.03a</example>
1058
1073
  <example>Brocade Communications Systems, Inc. FESX424-PREM, IronWare Version 07.0.01bT3e3 Compiled on Mar 17 2010 at 23:02:11 labeled as SXR07001b</example>
@@ -1079,11 +1094,52 @@
1079
1094
  <param pos="2" name="os.version"/>
1080
1095
  </fingerprint>
1081
1096
 
1097
+ <fingerprint pattern="^Brocade VDX Switch, BR-(\S+), Network Operating System Software Version (\S+)\.$">
1098
+ <description>Brocade VDX Switch</description>
1099
+ <example hw.product="VDX6740" os.version="7.0.2b">Brocade VDX Switch, BR-VDX6740, Network Operating System Software Version 7.0.2b.</example>
1100
+ <param pos="0" name="os.vendor" value="Brocade"/>
1101
+ <param pos="0" name="os.device" value="Switch"/>
1102
+ <param pos="0" name="os.family" value="NetworkOS"/>
1103
+ <param pos="2" name="os.version"/>
1104
+ <param pos="0" name="hw.vendor" value="Brocade"/>
1105
+ <param pos="0" name="hw.family" value="VDX"/>
1106
+ <param pos="1" name="hw.product"/>
1107
+ <param pos="0" name="hw.device" value="Switch"/>
1108
+ </fingerprint>
1109
+
1110
+ <fingerprint pattern="^([^,]{1,512}), (VDX\S+), Network Operating System Software Version (\S+)\.$">
1111
+ <description>Brocade VDX Switch w/Hostname</description>
1112
+ <example host.name="core02" hw.product="VDX6740T-1G" os.version="7.0.1b">core02, VDX6740T-1G, Network Operating System Software Version 7.0.1b.</example>
1113
+ <param pos="0" name="os.vendor" value="Brocade"/>
1114
+ <param pos="0" name="os.device" value="Switch"/>
1115
+ <param pos="0" name="os.family" value="NetworkOS"/>
1116
+ <param pos="3" name="os.version"/>
1117
+ <param pos="0" name="hw.vendor" value="Brocade"/>
1118
+ <param pos="0" name="hw.family" value="VDX"/>
1119
+ <param pos="2" name="hw.product"/>
1120
+ <param pos="0" name="hw.device" value="Switch"/>
1121
+ <param pos="1" name="host.name"/>
1122
+ </fingerprint>
1123
+
1124
+ <fingerprint pattern="^([^,]{1,512}), BR-(\S+), Network Operating System Software Version (\S+)\.$">
1125
+ <description>Brocade VDX Switch w/Hostname and BR prefix</description>
1126
+ <example host.name="core01" hw.product="VDX6740" os.version="7.0.2b">core01, BR-VDX6740, Network Operating System Software Version 7.0.2b.</example>
1127
+ <param pos="0" name="os.vendor" value="Brocade"/>
1128
+ <param pos="0" name="os.device" value="Switch"/>
1129
+ <param pos="0" name="os.family" value="NetworkOS"/>
1130
+ <param pos="3" name="os.version"/>
1131
+ <param pos="0" name="hw.vendor" value="Brocade"/>
1132
+ <param pos="0" name="hw.family" value="VDX"/>
1133
+ <param pos="2" name="hw.product"/>
1134
+ <param pos="0" name="hw.device" value="Switch"/>
1135
+ <param pos="1" name="host.name"/>
1136
+ </fingerprint>
1137
+
1082
1138
  <!--======================================================================
1083
1139
  BROTHER
1084
1140
  =======================================================================-->
1085
1141
 
1086
- <fingerprint pattern="^SP NC-[^,]+, Firmware Ver\.(\S+).*$">
1142
+ <fingerprint pattern="^SP NC-[^,]+, Firmware Ver\.(\S+)">
1087
1143
  <description>Brother multifunction device</description>
1088
1144
  <example>SP NC-6300h, Firmware Ver.B ,MID 5CS-157</example>
1089
1145
  <example>SP NC-6300h, Firmware Ver.C ,MID 5CS-157</example>
@@ -1093,7 +1149,7 @@
1093
1149
  <param pos="1" name="os.version"/>
1094
1150
  </fingerprint>
1095
1151
 
1096
- <fingerprint pattern="^Brother (NC-\d+\S+),\s*Firmware Ver\.\s?([^\s,]+).*">
1152
+ <fingerprint pattern="^Brother (NC-\d+\S+),\s*Firmware Ver\.\s?([^\s,]+)">
1097
1153
  <description>Brother multifunction device - variant 1</description>
1098
1154
  <example>Brother NC-130h, Firmware Ver.0.09 ,MID 8CA-A17-001</example>
1099
1155
  <example>Brother NC-6800h, Firmware Ver.1.04 (09.05.08),MID 8C5-D61,FID 2</example>
@@ -1352,7 +1408,7 @@
1352
1408
  Computer Associates
1353
1409
  =======================================================================-->
1354
1410
 
1355
- <fingerprint pattern="^(?:Linux )?\s*SystemEDGE.*$">
1411
+ <fingerprint pattern="^(?:Linux )?\s{0,256}SystemEDGE">
1356
1412
  <description>CA SystemEDGE Management Agent</description>
1357
1413
  <example>Linux SystemEDGE Management Agent, Concord Communications, Inc.</example>
1358
1414
  <example>SystemEDGE Management Agent, CA, Inc.</example>
@@ -1409,7 +1465,7 @@
1409
1465
  <param pos="0" name="os.product" value="Switch"/>
1410
1466
  </fingerprint>
1411
1467
 
1412
- <fingerprint pattern="^(\S+) OPTICAL SW:(\S+) .* Ciena \(R\) Corporation$">
1468
+ <fingerprint pattern="^(\S{1,32}) OPTICAL SW:(\S+) .* Ciena \(R\) Corporation$">
1413
1469
  <description>Ciena Optical - software version variant</description>
1414
1470
  <example>6500 OPTICAL SW:0810 BN:HD (c) Ciena (R) Corporation</example>
1415
1471
  <param pos="0" name="os.vendor" value="Ciena"/>
@@ -1539,7 +1595,7 @@
1539
1595
  <param pos="0" name="os.product" value="Adaptive Security Appliance"/>
1540
1596
  <param pos="0" name="os.device" value="Firewall"/>
1541
1597
  <param pos="1" name="os.version"/>
1542
- <param pos="0" name="os.cpe23" value="cpe:/o:cisco:adaptive_security_appliance:{os.version}"/>
1598
+ <param pos="0" name="os.cpe23" value="cpe:/o:cisco:adaptive_security_appliance_software:{os.version}"/>
1543
1599
  <param pos="0" name="hw.vendor" value="Cisco"/>
1544
1600
  <param pos="0" name="hw.family" value="Adaptive Security Appliance"/>
1545
1601
  <param pos="0" name="hw.product" value="Adaptive Security Appliance"/>
@@ -1547,7 +1603,7 @@
1547
1603
  <param pos="0" name="hw.cpe23" value="cpe:/h:cisco:adaptive_security_appliance:-"/>
1548
1604
  </fingerprint>
1549
1605
 
1550
- <fingerprint pattern="^Cisco 761 Software Version (.*) -.*$">
1606
+ <fingerprint pattern="^Cisco 761 Software Version (.*) -">
1551
1607
  <description>Cisco 761</description>
1552
1608
  <example>Cisco 761 Software Version c760-i.b.NET3 4.2(3) - Aug 21 1998 17:05:41 ISDN Stack Revision NET3 2.10</example>
1553
1609
  <param pos="0" name="os.certainty" value="0.85"/>
@@ -1558,7 +1614,7 @@
1558
1614
  <param pos="1" name="os.version"/>
1559
1615
  </fingerprint>
1560
1616
 
1561
- <fingerprint pattern="^Cisco Systems, Inc\./VPN 3000 Concentrator(?: Series)? Version (\S+) built.*$">
1617
+ <fingerprint pattern="^Cisco Systems, Inc\./VPN 3000 Concentrator(?: Series)? Version (\S+) built">
1562
1618
  <description>Cisco VPN 3000 Concentrator</description>
1563
1619
  <example>Cisco Systems, Inc./VPN 3000 Concentrator Series Version 3.0.2.Rel built by vmurphy on Apr 05 2001 21:41:33</example>
1564
1620
  <example>Cisco Systems, Inc./VPN 3000 Concentrator Version 4.1.3.Rel built by vmurphy on Apr 12 2004 04:06:15</example>
@@ -1568,7 +1624,7 @@
1568
1624
  <param pos="0" name="os.product" value="VPN 3000 Concentrator"/>
1569
1625
  <param pos="0" name="os.device" value="VPN"/>
1570
1626
  <param pos="1" name="os.version"/>
1571
- <param pos="0" name="os.cpe23" value="cpe:/o:cisco:vpn_3000_concentrator:{os.version}"/>
1627
+ <param pos="0" name="os.cpe23" value="cpe:/o:cisco:vpn_3000_concentrator_series_software:{os.version}"/>
1572
1628
  </fingerprint>
1573
1629
 
1574
1630
  <fingerprint pattern="^(?:Cisco )?Network Analysis Module \(WS-[^\)]+\), Version ([^, ]+)[,\s]?">
@@ -1587,6 +1643,11 @@ Copyright (c) 1999-2004 by cisco Systems, Inc.</example>
1587
1643
  <param pos="0" name="os.product" value="NAM"/>
1588
1644
  <param pos="0" name="os.device" value="Network Management Device"/>
1589
1645
  <param pos="1" name="os.version"/>
1646
+ <param pos="0" name="os.cpe23" value="cpe:/o:cisco:network_analysis_module_software:{os.version}"/>
1647
+ <param pos="0" name="hw.vendor" value="Cisco"/>
1648
+ <param pos="0" name="hw.product" value="NAM"/>
1649
+ <param pos="0" name="hw.device" value="Network Management Device"/>
1650
+ <param pos="0" name="hw.cpe23" value="cpe:/h:cisco:network_analysis_module:-"/>
1590
1651
  </fingerprint>
1591
1652
 
1592
1653
  <fingerprint pattern="^(?:Cisco )?Network Analysis Module \(WS-([^\-]+)-NAM\)$">
@@ -1596,6 +1657,9 @@ Copyright (c) 1999-2004 by cisco Systems, Inc.</example>
1596
1657
  <param pos="0" name="os.vendor" value="Cisco"/>
1597
1658
  <param pos="0" name="os.product" value="NAM"/>
1598
1659
  <param pos="0" name="os.device" value="Network Management Device"/>
1660
+ <param pos="0" name="os.cpe23" value="cpe:/o:cisco:network_analysis_module_software:-"/>
1661
+ <param pos="0" name="hw.vendor" value="Cisco"/>
1662
+ <param pos="0" name="hw.device" value="Network Management Device"/>
1599
1663
  <param pos="1" name="hw.product"/>
1600
1664
  </fingerprint>
1601
1665
 
@@ -1718,7 +1782,7 @@ Copyright (c) 1995-2005 by Cisco Systems
1718
1782
  <param pos="2" name="os.version"/>
1719
1783
  </fingerprint>
1720
1784
 
1721
- <fingerprint pattern="^Cisco (NX-OS|SAN-OS)\(tm\) ([^,]+), Software \([^\)]+\), Version ([^\,]+), .* Cisco Systems.*$">
1785
+ <fingerprint pattern="^Cisco (NX-OS|SAN-OS)\(tm\) ([^,]+), Software \([^\)]+\), Version ([^\,]+), .* Cisco Systems">
1722
1786
  <description>Cisco NX-OS/SAN-OS</description>
1723
1787
  <example>Cisco NX-OS(tm) cgr1000, Software (cgr1000-uk9), Version 5.2(1)CG2(1), Interim version 5.2(1)CG2(0.167, RELEASE SOFTWARE Copyright (c) 2002-2011 by Cisco Systems, Inc. Compiled 1/1/2012 1:00:00</example>
1724
1788
  <example>Cisco NX-OS(tm) m9100, Software (m9100-s2ek9-mz), Version 5.0(4), RELEASE SOFTWARE Copyright (c) 2002-2010 by Cisco Systems, Inc. Compiled 7/26/2010 15:00:00</example>
@@ -1742,6 +1806,24 @@ Copyright (c) 1995-2005 by Cisco Systems
1742
1806
  <param pos="0" name="os.product" value="Wireless Controller"/>
1743
1807
  </fingerprint>
1744
1808
 
1809
+ <!--======================================================================
1810
+ Crestron
1811
+ =======================================================================-->
1812
+
1813
+ <fingerprint pattern="^Crestron Electronics (AM-\d+) \(Version ([\d.]+)\)">
1814
+ <description>Crestron AirMedia</description>
1815
+ <example os.version="2.4.2.1" hw.product="AM-100">Crestron Electronics AM-100 (Version 2.4.2.1)</example>
1816
+ <param pos="0" name="os.vendor" value="Crestron"/>
1817
+ <param pos="0" name="os.family" value="Linux"/>
1818
+ <param pos="0" name="os.product" value="Linux"/>
1819
+ <param pos="2" name="os.version"/>
1820
+ <param pos="0" name="os.certainty" value="0.95"/>
1821
+ <param pos="0" name="hw.vendor" value="Crestron"/>
1822
+ <param pos="1" name="hw.product"/>
1823
+ <param pos="0" name="hw.device" value="Video Conferencing"/>
1824
+ <param pos="0" name="hw.certainty" value="0.95"/>
1825
+ </fingerprint>
1826
+
1745
1827
  <!--======================================================================
1746
1828
  Cobox
1747
1829
  =======================================================================-->
@@ -1775,7 +1857,7 @@ Copyright (c) 1995-2005 by Cisco Systems
1775
1857
  Compuprint
1776
1858
  =======================================================================-->
1777
1859
 
1778
- <fingerprint pattern="^(SP\d+)\s.*">
1860
+ <fingerprint pattern="^(SP\d+)\s">
1779
1861
  <description>Compuprint SP series printers</description>
1780
1862
  <example>SP40 </example>
1781
1863
  <param pos="0" name="os.vendor" value="Compuprint"/>
@@ -1796,6 +1878,21 @@ Copyright (c) 1995-2005 by Cisco Systems
1796
1878
  <param pos="1" name="os.version"/>
1797
1879
  </fingerprint>
1798
1880
 
1881
+ <!--======================================================================
1882
+ Cumulus
1883
+ =======================================================================-->
1884
+
1885
+ <fingerprint pattern="^Cumulus Linux (\S+) \(Linux Kernel ([^\)]+)\)">
1886
+ <description>Cumulus Linux</description>
1887
+ <example os.version="3.7.2" os.version.version="4.1.33-1+cl3u17">Cumulus Linux 3.7.2 (Linux Kernel 4.1.33-1+cl3u17)</example>
1888
+ <param pos="0" name="os.vendor" value="Cumulus"/>
1889
+ <param pos="0" name="os.device" value="Switch"/>
1890
+ <param pos="0" name="os.product" value="Cumulus Linux"/>
1891
+ <param pos="1" name="os.version"/>
1892
+ <param pos="2" name="os.version.version"/>
1893
+ <param pos="0" name="os.cpe23" value="cpe:/o:cumulusnetworks:cumulus_linux:{os.version}"/>
1894
+ </fingerprint>
1895
+
1799
1896
  <!--======================================================================
1800
1897
  DATA DOMAIN
1801
1898
  =======================================================================-->
@@ -1814,7 +1911,7 @@ Copyright (c) 1995-2005 by Cisco Systems
1814
1911
  DATAMAX
1815
1912
  =======================================================================-->
1816
1913
 
1817
- <fingerprint pattern="^Datamax Corporation I-Class (\S+) Ver:(\S+) .*$">
1914
+ <fingerprint pattern="^Datamax Corporation I-Class (\S+) Ver:(\S+)">
1818
1915
  <description>Datamax I-Class printer</description>
1819
1916
  <example>Datamax Corporation I-Class 4208 Ver:08.01 01/14/2004 PN:83-2297-08B</example>
1820
1917
  <example>Datamax Corporation I-Class 4208 Ver:08.038 11/16/2004 PN:83-2297-08D8</example>
@@ -1826,7 +1923,7 @@ Copyright (c) 1995-2005 by Cisco Systems
1826
1923
  <param pos="2" name="os.version"/>
1827
1924
  </fingerprint>
1828
1925
 
1829
- <fingerprint pattern="^Datamax (?:Printer|.*Print Server).*$">
1926
+ <fingerprint pattern="^Datamax (?:Printer|.*Print Server)">
1830
1927
  <description>Datamax printer</description>
1831
1928
  <example>Datamax DMXrfNet Print Server compatible with an HP JETDIRECT EX</example>
1832
1929
  <example>Datamax Printer</example>
@@ -1867,7 +1964,7 @@ Copyright (c) 1995-2005 by Cisco Systems
1867
1964
  <param pos="1" name="os.product"/>
1868
1965
  </fingerprint>
1869
1966
 
1870
- <fingerprint pattern="^Dell (\d{4}[cd]?n) (?:Laser )?MFP.*$">
1967
+ <fingerprint pattern="^Dell (\d{4}[cd]?n) (?:Laser )?MFP">
1871
1968
  <description>Dell MFP Laser Printer</description>
1872
1969
  <example>Dell 2135cn MFP; Net 12.10, Controller 200903191302, Engine 03.00.10</example>
1873
1970
  <example>Dell 2335dn MFP; 2.70.03.02;Engine 1.10.65;NIC V4.01.30(2335dn MFP) 02-05-2010;S/N JQF9FG1</example>
@@ -1878,7 +1975,7 @@ Copyright (c) 1995-2005 by Cisco Systems
1878
1975
  <param pos="1" name="os.product"/>
1879
1976
  </fingerprint>
1880
1977
 
1881
- <fingerprint pattern="^Dell(?:.*Laser.*)? (\w*\d{4}cn)(?:.*Net |; V)(\S+)(?:,| ).*$">
1978
+ <fingerprint pattern="^Dell(?:.*Laser.*)? (\w*\d{4}cn)(?:.*Net |; V)(\S+)(?:,| )">
1882
1979
  <description>Dell Color Laser Printer</description>
1883
1980
  <example>Dell Laser Printer 5100cn (Net 6.26, Controller 200408201123, Engine 01.00.04)</example>
1884
1981
  <example>Dell Color Laser 3110cn; Net 8.29, Controller 200604102121, Engine 05.03.00</example>
@@ -1892,7 +1989,7 @@ Copyright (c) 1995-2005 by Cisco Systems
1892
1989
  <param pos="2" name="os.version"/>
1893
1990
  </fingerprint>
1894
1991
 
1895
- <fingerprint pattern="^Dell Laser Printer (\S+) version (\S+).*$">
1992
+ <fingerprint pattern="^Dell Laser Printer (\S+) version (\S+)">
1896
1993
  <description>Dell Laser Printer</description>
1897
1994
  <example>Dell Laser Printer 1720dn version NM.NA.N099 kernel 2.6.10 All-N-1</example>
1898
1995
  <example>Dell Laser Printer 5210n version NS.NP.N212 kernel 2.6.6 All-N-1</example>
@@ -1904,7 +2001,7 @@ Copyright (c) 1995-2005 by Cisco Systems
1904
2001
  <param pos="2" name="os.version"/>
1905
2002
  </fingerprint>
1906
2003
 
1907
- <fingerprint pattern="^Dell (\S+)(?: Mono)? Laser Printer(?:;| version) \S+;?.*$">
2004
+ <fingerprint pattern="^Dell (\S+)(?: Mono)? Laser Printer(?:;| version) \S+;?">
1908
2005
  <description>Dell Laser Printer - variant 1</description>
1909
2006
  <example>Dell 2330dn Laser Printer version NR.APS.N449 kernel 2.6.18.5 All-N-1</example>
1910
2007
  <example>Dell 2350dn Laser Printer version NR.APS.N449 kernel 2.6.18.5 All-N-1</example>
@@ -1949,7 +2046,7 @@ Copyright (c) 1995-2005 by Cisco Systems
1949
2046
  <param pos="2" name="os.version"/>
1950
2047
  </fingerprint>
1951
2048
 
1952
- <fingerprint pattern="^Digi International (PortServer II) v(\S+) .*$">
2049
+ <fingerprint pattern="^Digi International (PortServer II) v(\S+)">
1953
2050
  <description>Digi Serial PortServer II</description>
1954
2051
  <example>Digi International PortServer II v3.1.12 Jan 21 2003</example>
1955
2052
  <param pos="0" name="os.vendor" value="Digi"/>
@@ -2014,7 +2111,7 @@ Copyright (c) 1995-2005 by Cisco Systems
2014
2111
  EATON
2015
2112
  =======================================================================-->
2016
2113
 
2017
- <fingerprint pattern="^(Evolution(?: S )?(?:\s*\d+)?).*$">
2114
+ <fingerprint pattern="^(Evolution(?: S )?(?:\s*\d+)?)">
2018
2115
  <description>Eaton Evolution UPS</description>
2019
2116
  <example>Evolution 1100</example>
2020
2117
  <example>Evolution 1500</example>
@@ -2199,7 +2296,7 @@ Copyright (c) 1995-2005 by Cisco Systems
2199
2296
 
2200
2297
  <!-- Sneaky. The XOS uses both Zero and Oh depending on version -->
2201
2298
 
2202
- <fingerprint pattern="Extreme(?:X[0O]S|Ware X[0O]S) (?:\S+ )?version (\S+) \S+ by \S+ on .*$">
2299
+ <fingerprint pattern="Extreme(?:X[0O]S|Ware X[0O]S) (?:\S+ )?version (\S+) \S+ by \S+ on">
2203
2300
  <description>Extreme Networks Switches</description>
2204
2301
  <example>ExtremeWare X0S version 11.2.0.15 v1120b15 by release-manager on Fri Apr 1 18:40:23 PST 2005</example>
2205
2302
  <example>ExtremeXOS version 11.6.3.5 v1163b5 by release-manager on Sun Sep 9 10:46:16 PDT 2007</example>
@@ -2214,7 +2311,7 @@ Copyright (c) 1995-2005 by Cisco Systems
2214
2311
  Foundry Networks
2215
2312
  =======================================================================-->
2216
2313
 
2217
- <fingerprint pattern="^Foundry Networks, Inc\. ([^,]+), (?:IronWare|Iron Software) Version V?(\S+) Compiled .*$">
2314
+ <fingerprint pattern="^Foundry Networks, Inc\. ([^,]+), (?:IronWare|Iron Software) Version V?(\S+) Compiled">
2218
2315
  <description>Foundry Networks IronWare Switches</description>
2219
2316
  <example>Foundry Networks, Inc. Backbone, IronWare Version 06.6.36T41 Compiled on Jul 20 2001 at 21:38:29 labeled as BIS06636</example>
2220
2317
  <example>Foundry Networks, Inc. BigIron 15000 Router, IronWare Version 08.0.01vT53 Compiled on Feb 26 2010 at 20:07:21 labeled as B2P08001v</example>
@@ -2284,7 +2381,7 @@ Copyright (c) 1995-2005 by Cisco Systems
2284
2381
  FUJI XEROX
2285
2382
  =======================================================================-->
2286
2383
 
2287
- <fingerprint pattern="^FUJI XEROX ((?:Document Centre|DocuCentre-\S+) [^\s;]+).*$">
2384
+ <fingerprint pattern="^FUJI XEROX ((?:Document Centre|DocuCentre-\S+) [^\s;]+)">
2288
2385
  <description>Xerox Document Centre Multi-function System - Fuji variant</description>
2289
2386
  <example>FUJI XEROX Document Centre C360;ESS 1.131.11,IOT 6.6.5,IIT 12.7.0,IIT D12.0.0,ADF 10.3.0,FAX 11.20.50</example>
2290
2387
  <example>FUJI XEROX Document Centre C400 v 2. 0. 6</example>
@@ -2296,7 +2393,7 @@ Copyright (c) 1995-2005 by Cisco Systems
2296
2393
  <param pos="1" name="os.product"/>
2297
2394
  </fingerprint>
2298
2395
 
2299
- <fingerprint pattern="^FUJI XEROX (\S+ [^\s;]+).*$">
2396
+ <fingerprint pattern="^FUJI XEROX (\S+ [^\s;]+)">
2300
2397
  <description>FUJI Xerox default</description>
2301
2398
  <example>FUJI XEROX ApeosPort-II C4300 ;ESS 1.121.8,IOT 3.8.2,IIT 7.6.0,ADF 11.6.3,FAX 11.20.53</example>
2302
2399
  <param pos="0" name="os.vendor" value="Fuji Xerox"/>
@@ -2372,7 +2469,7 @@ Copyright (c) 1995-2005 by Cisco Systems
2372
2469
  <param pos="1" name="hw.product"/>
2373
2470
  </fingerprint>
2374
2471
 
2375
- <fingerprint pattern="^HP-UX (\S+) (\S+) .*$">
2472
+ <fingerprint pattern="^HP-UX (\S+) (\S+)">
2376
2473
  <description>HP-UX</description>
2377
2474
  <example>HP-UX hostname B.10.20 A 9000/820 2006447661</example>
2378
2475
  <param pos="0" name="os.vendor" value="HP"/>
@@ -2383,9 +2480,9 @@ Copyright (c) 1995-2005 by Cisco Systems
2383
2480
  <param pos="0" name="os.cpe23" value="cpe:/o:hp:hp-ux:{os.version}"/>
2384
2481
  </fingerprint>
2385
2482
 
2386
- <fingerprint pattern="^(\S+) .*OpenVMS V(\S+) .*$">
2483
+ <fingerprint pattern="^(\S{1,512}) .*OpenVMS V(\S+)">
2387
2484
  <description>OpenVMS</description>
2388
- <example>hostname VAX 4000-200 OpenVMS V7.2 Compaq TCP/IP Services for OpenVMS</example>
2485
+ <example host.name="hostname">hostname VAX 4000-200 OpenVMS V7.2 Compaq TCP/IP Services for OpenVMS</example>
2389
2486
  <param pos="0" name="os.vendor" value="HP"/>
2390
2487
  <param pos="0" name="os.family" value="OpenVMS"/>
2391
2488
  <param pos="0" name="os.product" value="OpenVMS"/>
@@ -2394,7 +2491,7 @@ Copyright (c) 1995-2005 by Cisco Systems
2394
2491
  <param pos="0" name="os.cpe23" value="cpe:/o:hp:openvms:{os.version}"/>
2395
2492
  </fingerprint>
2396
2493
 
2397
- <fingerprint pattern="^(\S+) (.*?) (?:HP|Compaq) Tru64 UNIX V(\S+) \(Rev\. ([^\)]+)\).*TCP/IP$">
2494
+ <fingerprint pattern="^(\S{1,512}) (.*?) (?:HP|Compaq) Tru64 UNIX V(\S+) \(Rev\. ([^\)]+)\).*TCP\/IP$">
2398
2495
  <description>Digital/Compaq/HP Tru64 Unix</description>
2399
2496
  <example host.name="was1" hw.product="AlphaServer DS10 466 MHz" os.version="5.1B" os.version.version="2650">was1 AlphaServer DS10 466 MHz Compaq Tru64 UNIX V5.1B (Rev. 2650); Wed Feb 25 13:29:07 KST 2004 TCP/IP</example>
2400
2497
  <param pos="0" name="os.vendor" value="HP"/>
@@ -2407,7 +2504,7 @@ Copyright (c) 1995-2005 by Cisco Systems
2407
2504
  <param pos="0" name="os.cpe23" value="cpe:/o:hp:tru64_unix:{os.version}"/>
2408
2505
  </fingerprint>
2409
2506
 
2410
- <fingerprint pattern="^(\S+) (.*?) Digital UNIX V(\S+)\s+\(Rev\. ([^\)]+)\).*TCP/IP$">
2507
+ <fingerprint pattern="^(\S{1,512}) (.*?) Digital UNIX V(\S+)\s+\(Rev\. ([^\)]+)\).*TCP/IP$">
2411
2508
  <description>Digital/Compaq/HP Tru64 Unix - Digital branding variant</description>
2412
2509
  <example host.name="example.com" hw.product="COMPAQ AlphaServer DS10 617 MHz" os.version="4.0F" os.version.version="1229">example.com COMPAQ AlphaServer DS10 617 MHz Digital UNIX V4.0F (Rev. 1229); Wed May 22 13:55:58 CST 2002 TCP/IP</example>
2413
2510
  <example host.name="example.com" hw.product="COMPAQ Professional Workstation XP1000" os.version="4.0F" os.version.version="1229">example.com COMPAQ Professional Workstation XP1000 Digital UNIX V4.0F (Rev. 1229); Wed Jun 30 14:32:53 MET DST 2004 . TCP/IP</example>
@@ -2437,7 +2534,7 @@ Copyright (c) 1995-2005 by Cisco Systems
2437
2534
  <param pos="2" name="os.version"/>
2438
2535
  </fingerprint>
2439
2536
 
2440
- <fingerprint pattern="^HP3000 SERIES ([^,]+), MPE XL version (\S+) NS Transport .*$">
2537
+ <fingerprint pattern="^HP3000 SERIES ([^,]+), MPE XL version (\S+) NS Transport">
2441
2538
  <description>HP3000 MPEi/X</description>
2442
2539
  <example>HP3000 SERIES 918RX, MPE XL version C.75.00 NS Transport version B.07.05</example>
2443
2540
  <example>HP3000 SERIES 928RX, MPE XL version C.60.00 NS Transport version B.06.00</example>
@@ -2465,7 +2562,7 @@ Copyright (c) 1995-2005 by Cisco Systems
2465
2562
  <param pos="2" name="os.version"/>
2466
2563
  </fingerprint>
2467
2564
 
2468
- <fingerprint pattern="^HP Comware Platform Software Comware Software Version ([^\s,]+)[,\s]\s*(?:Release|Alpha|Beta)\s*(\S+) HP (\S+) Router .*$">
2565
+ <fingerprint pattern="^HP Comware Platform Software Comware Software Version ([^\s,]+)[,\s]\s*(?:Release|Alpha|Beta)\s*(\S+) HP (\S+) Router">
2469
2566
  <description>HP Comware</description>
2470
2567
  <example>HP Comware Platform Software Comware Software Version 5.20,Release 2603P08 HP A6602 Router Copyright(c) 2010-2011 Hewlett-Packard Development Company, L.P.</example>
2471
2568
  <example>HP Comware Platform Software Comware Software Version 5.20,Release 2603P08 HP A6608 Router Copyright(c) 2010-2011 Hewlett-Packard Development Company, L.P.</example>
@@ -2478,7 +2575,7 @@ Copyright (c) 1995-2005 by Cisco Systems
2478
2575
  <param pos="2" name="os.version.version"/>
2479
2576
  </fingerprint>
2480
2577
 
2481
- <fingerprint pattern="^HP Series Router (\S+) HP Comware Platform Software Comware Software Version ([^\s,]+)[,\s]\s*Release ([^,\s]+)?[,\s].*Copyright.*$">
2578
+ <fingerprint pattern="^HP Series Router (\S+) HP Comware Platform Software Comware Software Version ([^\s,]+)[,\s]\s*Release ([^,\s]+)?[,\s].*Copyright">
2482
2579
  <description>HP Comware - variant 1</description>
2483
2580
  <example hw.product="A-MSR20-40" os.version="5.20" os.version.version="2209P15">HP Series Router A-MSR20-40 HP Comware Platform Software Comware Software Version 5.20, Release 2209P15, Standard Copyright(c) 2010-2012 Hewlett-Packard Development Company, L.P.</example>
2484
2581
  <example>HP Series Router A-MSR30-20 HP Comware Platform Software Comware Software Version 5.20, Release 2207P41, Standard Copyright(c) 2010 Hewlett-Packard Development Company, L.P.</example>
@@ -2492,7 +2589,7 @@ Copyright (c) 1995-2005 by Cisco Systems
2492
2589
  <param pos="3" name="os.version.version"/>
2493
2590
  </fingerprint>
2494
2591
 
2495
- <fingerprint pattern="^HP Series Router (\S+) HP Comware Platform Software Comware Software Version ([^,]+), (\S+) Copyright.*$">
2592
+ <fingerprint pattern="^HP Series Router (\S+) HP Comware Platform Software Comware Software Version ([^,]+), (\S+) Copyright">
2496
2593
  <description>HP Comware - variant 2</description>
2497
2594
  <example hw.product="A-MSR20-40" os.version="5.20" os.version.version="T2207L16">HP Series Router A-MSR20-40 HP Comware Platform Software Comware Software Version 5.20, T2207L16 Copyright(c) 2010-2011 Hewlett-Packard Development Company, L.P.</example>
2498
2595
  <param pos="0" name="os.vendor" value="HP"/>
@@ -2504,7 +2601,7 @@ Copyright (c) 1995-2005 by Cisco Systems
2504
2601
  <param pos="1" name="hw.product"/>
2505
2602
  </fingerprint>
2506
2603
 
2507
- <fingerprint pattern="^HP Comware Platform Software, Software Version ([^\s,]+)[,\s]\s*(?:Release|Alpha|Beta)\s*(\S+) HP (\S+) (?:SI|EI|Switch|Copyright|v\d) .*$">
2604
+ <fingerprint pattern="^HP Comware Platform Software, Software Version ([^\s,]+)[,\s]\s*(?:Release|Alpha|Beta)\s*(\S+) HP (\S+) (?:SI|EI|Switch|Copyright|v\d)">
2508
2605
  <description>HP Comware - variant 3</description>
2509
2606
  <example>HP Comware Platform Software, Software Version 5.20 Release 2208 HP A5500-24G SI Switch with 2 Interface Slots Copyright (c) 2010-2011 Hewlett-Packard Development Company, L.P.</example>
2510
2607
  <example>HP Comware Platform Software, Software Version 5.20 Release 2208 HP A5500-48G EI Switch with 2 Interface Slots Copyright (c) 2010-2011 Hewlett-Packard Development Company, L.P.</example>
@@ -2555,7 +2652,7 @@ Copyright (c) 1995-2005 by Cisco Systems
2555
2652
  <param pos="1" name="hw.product"/>
2556
2653
  </fingerprint>
2557
2654
 
2558
- <fingerprint pattern="^HP (V1910\S+) (?:\(.*?\) )?Switch Software Version (\S+).? Release (\S+) Copyright.*$">
2655
+ <fingerprint pattern="^HP (V1910\S+) (?:\(.*?\) )?Switch Software Version (\S+).? Release (\S+) Copyright">
2559
2656
  <description>HP Switch</description>
2560
2657
  <example>HP V1910-16G Switch Software Version 5.20 Release 1108 Copyright (c) 2004-2011 Hewlett-Packard Development Company, L.P.</example>
2561
2658
  <example>HP V1910-16G Switch Software Version 5.20, Release 1511 Copyright(c) 2010-2012 HP Tech. Co., Ltd. All rights reserved.</example>
@@ -2576,7 +2673,7 @@ Copyright (c) 1995-2005 by Cisco Systems
2576
2673
  <param pos="3" name="os.version.version"/>
2577
2674
  </fingerprint>
2578
2675
 
2579
- <fingerprint pattern="^HP (V1905\S+) Switch Product Version (\S+) Copyright.*$">
2676
+ <fingerprint pattern="^HP (V1905\S+) Switch Product Version (\S+) Copyright">
2580
2677
  <description>HP Switch - product version variant</description>
2581
2678
  <example>HP V1905-24 Switch Product Version 02.00.01 Copyright (c) 2011 Hewlett-Packard Development Company, L.P All rights Reserved.</example>
2582
2679
  <example>HP V1905-24-PoE Switch Product Version 02.00.01 Copyright (c) 2011 Hewlett-Packard Development Company, L.P All rights Reserved.</example>
@@ -2589,7 +2686,7 @@ Copyright (c) 1995-2005 by Cisco Systems
2589
2686
  <param pos="1" name="hw.product"/>
2590
2687
  </fingerprint>
2591
2688
 
2592
- <fingerprint pattern="^Hewlett-Packard Company (\S+) HP ProCurve Routing Switch.*Software Version (\S+) .*$">
2689
+ <fingerprint pattern="^Hewlett-Packard Company (\S+) HP ProCurve Routing Switch.*Software Version (\S+)">
2593
2690
  <description>HP ProCurve Routing Switch - build data variant</description>
2594
2691
  <example>Hewlett-Packard Company J4139A HP ProCurve Routing Switch 9304M, Software Version 08.0.01kT53 Compiled on Apr 27 2007 at 18:55:59 labeled as H2R08001k</example>
2595
2692
  <param pos="0" name="os.vendor" value="HP"/>
@@ -2599,7 +2696,7 @@ Copyright (c) 1995-2005 by Cisco Systems
2599
2696
  <param pos="2" name="os.version"/>
2600
2697
  </fingerprint>
2601
2698
 
2602
- <fingerprint pattern="^HP (J\S+) ProCurve Switch.*, revision (\S+),.*$">
2699
+ <fingerprint pattern="^HP (J\S+) ProCurve Switch.*, revision (\S+),">
2603
2700
  <description>HP ProCurve Routing Switch</description>
2604
2701
  <example>HP J4813A ProCurve Switch 2524, revision F.05.34, ROM F.02.01 (/sw/code/build/info(s02))</example>
2605
2702
  <example>HP J4121A ProCurve Switch 4000M, revision C.09.28, ROM C.06.01 (/sw/code/build/vgro(c09))</example>
@@ -2610,7 +2707,7 @@ Copyright (c) 1995-2005 by Cisco Systems
2610
2707
  <param pos="2" name="os.version"/>
2611
2708
  </fingerprint>
2612
2709
 
2613
- <fingerprint pattern="^ProCurve (J\S+) Switch.*, revision (\S+),.*$">
2710
+ <fingerprint pattern="^ProCurve (J\S+) Switch.*, revision (\S+),">
2614
2711
  <description>HP ProCurve Switch - HP prefix and build path variant</description>
2615
2712
  <example>ProCurve J4900B Switch 2626, revision H.08.98, ROM H.08.02 (/sw/code/build/fish(ts_08_5))</example>
2616
2713
  <param pos="0" name="os.vendor" value="HP"/>
@@ -2620,7 +2717,7 @@ Copyright (c) 1995-2005 by Cisco Systems
2620
2717
  <param pos="2" name="os.version"/>
2621
2718
  </fingerprint>
2622
2719
 
2623
- <fingerprint pattern="^HP ProCurve (\S+) - \d+ GE, ([A-Z]{1,2}\.[^,]+), .*$">
2720
+ <fingerprint pattern="^HP ProCurve (\S+) - \d+ GE, ([A-Z]{1,2}\.[^,]+),">
2624
2721
  <description>HP ProCurve Switch - HP prefix variant</description>
2625
2722
  <example os.product="1810G" os.version="H.1.2">HP ProCurve 1810G - 8 GE, H.1.2, eCos-2.0</example>
2626
2723
  <example>HP ProCurve 1810G - 24 GE, P.1.14, eCos-2.0</example>
@@ -2632,7 +2729,7 @@ Copyright (c) 1995-2005 by Cisco Systems
2632
2729
  <param pos="2" name="os.version"/>
2633
2730
  </fingerprint>
2634
2731
 
2635
- <fingerprint pattern="^HP V1810\S+ ([A-Z]{1,2}\.[^,]+), .*$">
2732
+ <fingerprint pattern="^HP V1810\S+ ([A-Z]{1,2}\.[^,]+),">
2636
2733
  <description>HP Procurve 1810 Series Switch</description>
2637
2734
  <example os.version="PK.1.4">HP V1810-48G, PK.1.4, eCos-2.0, CFE-3.8</example>
2638
2735
  <param pos="0" name="os.vendor" value="HP"/>
@@ -2642,7 +2739,7 @@ Copyright (c) 1995-2005 by Cisco Systems
2642
2739
  <param pos="1" name="os.version"/>
2643
2740
  </fingerprint>
2644
2741
 
2645
- <fingerprint pattern="^ProCurve (\S+) (.*?) Switch, revision ([^,]+),.*$">
2742
+ <fingerprint pattern="^ProCurve (\S+) (.*?) Switch, revision ([^,]+),">
2646
2743
  <description>HP ProCurve Switch - extended model variant</description>
2647
2744
  <example>ProCurve J9145A 2910al-24G Switch, revision W.14.03, ROM W.14.04 (/sw/code/build/sbm(t4a_RC3))</example>
2648
2745
  <example>ProCurve J9145A 2910al-24G Switch, revision W.14.30, ROM W.14.04 (/sw/code/build/sbm(t4a))</example>
@@ -2654,7 +2751,7 @@ Copyright (c) 1995-2005 by Cisco Systems
2654
2751
  <param pos="1" name="hw.product"/>
2655
2752
  </fingerprint>
2656
2753
 
2657
- <fingerprint pattern="^ProCurve (\S+) Switch ([^,]+), revision ([^,]+),.*$">
2754
+ <fingerprint pattern="^ProCurve (\S+) Switch ([^,]+), revision ([^,]+),">
2658
2755
  <description>HP Switch - build path variant</description>
2659
2756
  <example>ProCurve j9020a Switch 2510-48, revision U.11.04, ROM R.10.06 (/sw/code/build/dosx(ndx))</example>
2660
2757
  <example>ProCurve j9020a Switch 2510-48, revision U.11.08, ROM R.10.06 (/sw/code/build/dosx(ndx))</example>
@@ -2667,7 +2764,7 @@ Copyright (c) 1995-2005 by Cisco Systems
2667
2764
  <param pos="1" name="hw.product"/>
2668
2765
  </fingerprint>
2669
2766
 
2670
- <fingerprint pattern="^HP(\S+) HP ProCurve Switch ([^,]+), revision ([^,]+),.*$">
2767
+ <fingerprint pattern="^HP(\S+) HP ProCurve Switch ([^,]+), revision ([^,]+),">
2671
2768
  <description>HP ProCurve Switch - model first variant</description>
2672
2769
  <example>HPJ3298A HP ProCurve Switch 212M, revision D.05.04, ROM D.05.01 (/sw/code/build/srao(f98))</example>
2673
2770
  <example>HPJ4121A HP ProCurve Switch 4000M, revision C.05.04, ROM C.05.02 (/sw/code/build/vgro(f98))</example>
@@ -2679,7 +2776,7 @@ Copyright (c) 1995-2005 by Cisco Systems
2679
2776
  <param pos="1" name="hw.product"/>
2680
2777
  </fingerprint>
2681
2778
 
2682
- <fingerprint pattern="^HP (\S+) (\S+) Switch, revision ([^,]+),.*$">
2779
+ <fingerprint pattern="^HP (\S+) (\S+) Switch, revision ([^,]+),">
2683
2780
  <description>HP Switch - rom variant</description>
2684
2781
  <example>HP J9145A E2910al-24G Switch, revision W.15.08.0007, ROM W.14.06 (/ws/swbuildm/rel_galt_qaoff/code/build/sbm(rel_galt_qaoff)) (Formerly ProCurve)</example>
2685
2782
  <example>HP J9623A E2620-24 Switch, revision RA.15.05.0006, ROM RA.15.10 (/sw/code/build/xform(RA_15_05)) (Formerly ProCurve)</example>
@@ -2692,7 +2789,7 @@ Copyright (c) 1995-2005 by Cisco Systems
2692
2789
  <param pos="1" name="hw.product"/>
2693
2790
  </fingerprint>
2694
2791
 
2695
- <fingerprint pattern="^HP (\S+) Switch ([^,]+), revision ([^,]+),.*$">
2792
+ <fingerprint pattern="^HP (\S+) Switch ([^,]+), revision ([^,]+),">
2696
2793
  <description>HP Switch - extended model variant</description>
2697
2794
  <example>HP J8692A Switch E3500yl-24G, revision K.15.05.0002, ROM K.15.13 (/sw/code/build/btm(K_15_05)) (Formerly ProCurve)</example>
2698
2795
  <example>HP J8697A Switch E5406zl, revision K.15.06.0006, ROM K.15.19 (/sw/code/build/btm(K_15_06)) (Formerly ProCurve)</example>
@@ -2705,7 +2802,7 @@ Copyright (c) 1995-2005 by Cisco Systems
2705
2802
  <param pos="1" name="hw.product"/>
2706
2803
  </fingerprint>
2707
2804
 
2708
- <fingerprint pattern="^HP(\S+) ProCurve \S+ Hub \d+M+, ROM ([^,]+),.*$">
2805
+ <fingerprint pattern="^HP(\S+) ProCurve \S+ Hub \d+M+, ROM ([^,]+),">
2709
2806
  <description>HP ProCurve Hub</description>
2710
2807
  <example>HPJ3288A ProCurve 10/100 Hub 12M, ROM A.01.00, EEPROM A.01.00, HW A.02.00</example>
2711
2808
  <example>HPJ3289A ProCurve 10/100 Hub 24M, ROM A.01.00, EEPROM A.01.00, HW A.02.00</example>
@@ -2731,7 +2828,7 @@ Copyright (c) 1995-2005 by Cisco Systems
2731
2828
  <param pos="2" name="os.version"/>
2732
2829
  </fingerprint>
2733
2830
 
2734
- <fingerprint pattern="^HP Pro[cC]urve Access Point (\S+): v(\S+).*$">
2831
+ <fingerprint pattern="^HP Pro[cC]urve Access Point (\S+): v(\S+)">
2735
2832
  <description>HP ProCurve Wireless Access Point - serial number variant</description>
2736
2833
  <example>HP ProCurve Access Point 420: v2.1.5 v3.0.6</example>
2737
2834
  <example>HP Procurve Access Point 420: v2.0.38 v1.1.8 SN:TW517QB0VM</example>
@@ -2744,7 +2841,7 @@ Copyright (c) 1995-2005 by Cisco Systems
2744
2841
  <param pos="2" name="os.version"/>
2745
2842
  </fingerprint>
2746
2843
 
2747
- <fingerprint pattern="^HP ProCurve AP (.*?)v(\d[0-9\.]+)\(.*SN-.*$">
2844
+ <fingerprint pattern="^HP ProCurve AP (.*?)v(\d[0-9\.]+)\(.*SN-">
2748
2845
  <description>HP ProCurve Wireless Access Point</description>
2749
2846
  <example>HP ProCurve AP 520wlv2.4.5(758) SN-PG44JL9CWY23 v2.0.10</example>
2750
2847
  <param pos="0" name="os.vendor" value="HP"/>
@@ -2754,7 +2851,7 @@ Copyright (c) 1995-2005 by Cisco Systems
2754
2851
  <param pos="2" name="os.version"/>
2755
2852
  </fingerprint>
2756
2853
 
2757
- <fingerprint pattern="^ProCurve Access Point (\S+(?: \S+)) ([^,]+), revision ([^,]+),.*$">
2854
+ <fingerprint pattern="^ProCurve Access Point (\S+(?: \S+)) ([^,]+), revision ([^,]+),">
2758
2855
  <description>HP ProCurve Wireless Access Point - boot variant</description>
2759
2856
  <example>ProCurve Access Point 10ag WW J9141A, revision WM.01.11, boot version WAB.01.00</example>
2760
2857
  <example>ProCurve Access Point 530 NA J8986A, revision WA.02.15, boot version WAB.01.00</example>
@@ -2771,7 +2868,7 @@ Copyright (c) 1995-2005 by Cisco Systems
2771
2868
  <param pos="2" name="hw.product"/>
2772
2869
  </fingerprint>
2773
2870
 
2774
- <fingerprint pattern="^ProCurve Secure Router ([^,]+), Version: ([^,]+),.*$">
2871
+ <fingerprint pattern="^ProCurve Secure Router ([^,]+), Version: ([^,]+),">
2775
2872
  <description>HP ProCurve Secure Router</description>
2776
2873
  <example>ProCurve Secure Router 7102dl, Version: 03.01, Date: Fri Aug 12 08:41:29 2005</example>
2777
2874
  <example>ProCurve Secure Router 7102dl, Version: 05.02, Date: Mon May 15 09:32:11 2006</example>
@@ -2974,7 +3071,7 @@ Copyright (c) 1995-2005 by Cisco Systems
2974
3071
  <param pos="0" name="os.device" value="Print Server"/>
2975
3072
  </fingerprint>
2976
3073
 
2977
- <fingerprint pattern="^HP ETHERNET MULTI-ENVIRONMENT,ROM (\S+?),JETDIRECT(?: EX)?,(\w+),EEPROM.*$">
3074
+ <fingerprint pattern="^HP ETHERNET MULTI-ENVIRONMENT,ROM (\S+?),JETDIRECT(?: EX)?,(\w+),EEPROM">
2978
3075
  <description>HP JetDirect printer</description>
2979
3076
  <example>HP ETHERNET MULTI-ENVIRONMENT,ROM A.03.15,JETDIRECT,JD24,EEPROM A.04.09</example>
2980
3077
  <example>HP ETHERNET MULTI-ENVIRONMENT,ROM A.05.03,JETDIRECT,JD24,EEPROM A.05.05</example>
@@ -3015,6 +3112,7 @@ Copyright (c) 1995-2005 by Cisco Systems
3015
3112
  <param pos="0" name="os.product" value="iLO"/>
3016
3113
  <param pos="0" name="os.device" value="Lights Out Management"/>
3017
3114
  <param pos="1" name="os.version"/>
3115
+ <param pos="0" name="os.cpe23" value="cpe:/o:hp:integrated_lights-out_firmware:{os.version}"/>
3018
3116
  </fingerprint>
3019
3117
 
3020
3118
  <fingerprint pattern="^Integrated Lights-Out (\d) \(iLO \d\) for Integrity$">
@@ -3025,6 +3123,7 @@ Copyright (c) 1995-2005 by Cisco Systems
3025
3123
  <param pos="0" name="os.product" value="iLO"/>
3026
3124
  <param pos="0" name="os.device" value="Lights Out Management"/>
3027
3125
  <param pos="1" name="os.version"/>
3126
+ <param pos="0" name="os.cpe23" value="cpe:/o:hp:integrated_lights-out_firmware:{os.version}"/>
3028
3127
  </fingerprint>
3029
3128
 
3030
3129
  <!--======================================================================
@@ -3064,7 +3163,7 @@ Copyright (c) 1995-2005 by Cisco Systems
3064
3163
  IBM
3065
3164
  =======================================================================-->
3066
3165
 
3067
- <fingerprint pattern="^IBM RISC System/6000 .* Base Operating System AIX [^:]+: 03\.02\..*$">
3166
+ <fingerprint pattern="^IBM RISC System/6000 .* Base Operating System AIX [^:]+: 03\.02\.">
3068
3167
  <description>IBM AIX 3.2 on RS/6000</description>
3069
3168
  <example>IBM RISC System/6000 Machine Type: 0x0035 Processor id: 000018593500 The Base Operating System AIX version: 03.02.0000.0000 TCPIP Applications version: 03.02.0000.0000</example>
3070
3169
  <example>IBM RISC System/6000 Machine Type: 0x0100 Processor id: 000125576600 The Base Operating System AIX version: 03.02.0000.0000 TCPIP Applications version: 03.02.0000.0000</example>
@@ -3076,7 +3175,7 @@ Copyright (c) 1995-2005 by Cisco Systems
3076
3175
  <param pos="0" name="os.cpe23" value="cpe:/o:ibm:aix:3.2"/>
3077
3176
  </fingerprint>
3078
3177
 
3079
- <fingerprint pattern="^RISC System/6000 .* Base Operating System Runtime AIX [^:]+: 04\.02\..*$">
3178
+ <fingerprint pattern="^RISC System/6000 .* Base Operating System Runtime AIX [^:]+: 04\.02\.">
3080
3179
  <description>IBM AIX 4.2 on RS/6000</description>
3081
3180
  <example>RISC System/6000 Architecture Machine Type: 0x0800 Processor id: 000148364800 Base Operating System Runtime AIX version: 04.02.0001.0000 TCP/IP Client Support version: 04.02.0001.0000</example>
3082
3181
  <param pos="0" name="os.vendor" value="IBM"/>
@@ -3087,7 +3186,7 @@ Copyright (c) 1995-2005 by Cisco Systems
3087
3186
  <param pos="0" name="os.cpe23" value="cpe:/o:ibm:aix:4.2"/>
3088
3187
  </fingerprint>
3089
3188
 
3090
- <fingerprint pattern="^RISC System/6000 .* Base Operating System Runtime AIX [^:]+: 04\.03\..*$">
3189
+ <fingerprint pattern="^RISC System/6000 .* Base Operating System Runtime AIX [^:]+: 04\.03\.">
3091
3190
  <description>IBM AIX 4.3 on RS/6000</description>
3092
3191
  <example>RISC System/6000 Architecture Machine Type: 0x0400 Processor id: 000033407200 Base Operating System Runtime AIX version: 04.03.0003.0000 TCP/IP Client Support version: 04.03.0003.0000</example>
3093
3192
  <example>RISC System/6000 Architecture Machine Type: 0x0400 Processor id: 000055848900 Base Operating System Runtime AIX version: 04.03.0003.0075 TCP/IP Client Support version: 04.03.0003.0075</example>
@@ -3103,7 +3202,7 @@ Copyright (c) 1995-2005 by Cisco Systems
3103
3202
  <param pos="0" name="os.cpe23" value="cpe:/o:ibm:aix:4.3"/>
3104
3203
  </fingerprint>
3105
3204
 
3106
- <fingerprint pattern="^(?:\S+ )?(?:Motorola PowerPC|IBM PowerPC|\S+ \S+ PowerPC IBM).*Base Operating System Runtime AIX [^:]+: 04\.02\..*$">
3205
+ <fingerprint pattern="^(?:\S{1,1000} )?(?:Motorola PowerPC|IBM PowerPC|\S+ \S+ PowerPC IBM).*Base Operating System Runtime AIX [^:]+: 04\.02\.">
3107
3206
  <description>IBM AIX 4.2 on PowerPC</description>
3108
3207
  <example>IBM PowerPC CHRP Computer Machine Type: 0x0800004c Processor id: 0040906A4C00 Base Operating System Runtime AIX version: 04.02.0001.0000 TCP/IP Client Support version: 04.02.0001.0000</example>
3109
3208
  <example>IBM PowerPC CHRP Computer Machine Type: 0x0800004c Processor id: 0044B47A4C00 Base Operating System Runtime AIX version: 04.02.0001.0000 TCP/IP Client Support version: 04.02.0001.0000</example>
@@ -3118,7 +3217,7 @@ Copyright (c) 1995-2005 by Cisco Systems
3118
3217
  <param pos="0" name="os.cpe23" value="cpe:/o:ibm:aix:4.2"/>
3119
3218
  </fingerprint>
3120
3219
 
3121
- <fingerprint pattern="^(?:\S+ )?(?:Motorola PowerPC|IBM PowerPC|\S+ \S+ PowerPC IBM).*Base Operating System Runtime AIX [^:]+: 04\.03\..*$">
3220
+ <fingerprint pattern="^(?:\S{1,1000} )?(?:Motorola PowerPC|IBM PowerPC|\S+ \S+ PowerPC IBM).*Base Operating System Runtime AIX [^:]+: 04\.03\.">
3122
3221
  <description>IBM AIX 4.3 on PowerPC</description>
3123
3222
  <example>IBM PowerPC CHRP Computer Machine Type: 0x0800004c Processor id: 0056BD5A4C00 Base Operating System Runtime AIX version: 04.03.0003.0075 TCP/IP Client Support version: 04.03.0003.0075</example>
3124
3223
  <example>IBM PowerPC CHRP Computer Machine Type: 0x0800004c Processor id: 005A269A4C00 Base Operating System Runtime AIX version: 04.03.0003.0075 TCP/IP Client Support version: 04.03.0003.0075</example>
@@ -3135,7 +3234,7 @@ Copyright (c) 1995-2005 by Cisco Systems
3135
3234
  <param pos="0" name="os.cpe23" value="cpe:/o:ibm:aix:4.3"/>
3136
3235
  </fingerprint>
3137
3236
 
3138
- <fingerprint pattern="^(?:\S+ )?(?:Motorola PowerPC|IBM PowerPC|\S+ \S+ PowerPC IBM).*Base Operating System Runtime AIX [^:]+: 05\.01\..*$">
3237
+ <fingerprint pattern="^(?:\S{1,1000} )?(?:Motorola PowerPC|IBM PowerPC|\S+ \S+ PowerPC IBM).*Base Operating System Runtime AIX [^:]+: 05\.01\.">
3139
3238
  <description>IBM AIX 5.1 on PowerPC</description>
3140
3239
  <example>IBM PowerPC CHRP Computer Machine Type: 0x0800004c Processor id: 0059B7BA4C00 Base Operating System Runtime AIX version: 05.01.0000.0051 TCP/IP Client Support version: 05.01.0000.0070</example>
3141
3240
  <example>IBM PowerPC CHRP Computer Machine Type: 0x0800004c Processor id: 009F12264C00 Base Operating System Runtime AIX version: 05.01.0000.0050 TCP/IP Client Support version: 05.01.0000.0050</example>
@@ -3158,7 +3257,7 @@ Copyright (c) 1995-2005 by Cisco Systems
3158
3257
  <param pos="0" name="os.cpe23" value="cpe:/o:ibm:aix:5.1"/>
3159
3258
  </fingerprint>
3160
3259
 
3161
- <fingerprint pattern="^(?:\S+ )?(?:Motorola PowerPC|IBM PowerPC|\S+ \S+ PowerPC IBM).*Operating System Software: AIX version: 5\.1 Networking Software:.*$">
3260
+ <fingerprint pattern="^(?:\S{1,1000} )?(?:Motorola PowerPC|IBM PowerPC|\S+ \S+ PowerPC IBM).*Operating System Software: AIX version: 5\.1 Networking Software:">
3162
3261
  <description>IBM AIX 5.1 on PowerPC - network software variant</description>
3163
3262
  <example>IBM PowerPC CHRP Computer Machine Type: 0x0800004c Processor id: 0008FB8A4C00 Operating System Software: AIX version: 5.1 Networking Software: not available!</example>
3164
3263
  <example>IBM PowerPC CHRP Computer Machine Type: 0x0800004c Processor id: 000BD57F4C00 Operating System Software: AIX version: 5.1 Networking Software: not available!</example>
@@ -3170,7 +3269,7 @@ Copyright (c) 1995-2005 by Cisco Systems
3170
3269
  <param pos="0" name="os.cpe23" value="cpe:/o:ibm:aix:5.1"/>
3171
3270
  </fingerprint>
3172
3271
 
3173
- <fingerprint pattern="^(?:\S+ )?(?:Motorola PowerPC|IBM PowerPC|\S+ \S+ PowerPC IBM).*Base Operating System Runtime AIX [^:]+: 05\.02\..*$">
3272
+ <fingerprint pattern="^(?:\S{1,1000} )?(?:Motorola PowerPC|IBM PowerPC|\S+ \S+ PowerPC IBM).*Base Operating System Runtime AIX [^:]+: 05\.02\.">
3174
3273
  <description>IBM AIX 5.2 on PowerPC</description>
3175
3274
  <example>IBM PowerPC CHRP Computer.Machine Type: 0x0800004c Processor id: 00C0E53F4C00.Base Operating System Runtime AIX version: 05.02.0000.0105.TCP/IP Client Support version: 05.02.0000.0107</example>
3176
3275
  <example>IBM PowerPC CHRP Computer Machine Type: 0x0800004c Processor id: 00CBEEFA4C00 Base Operating System Runtime AIX version: 05.02.0000.0075 TCP/IP Client Support version: 05.02.0000.0075</example>
@@ -3197,7 +3296,7 @@ Copyright (c) 1995-2005 by Cisco Systems
3197
3296
  <param pos="0" name="os.cpe23" value="cpe:/o:ibm:aix:5.2"/>
3198
3297
  </fingerprint>
3199
3298
 
3200
- <fingerprint pattern="^(?:\S+ )?(?:Motorola PowerPC|IBM PowerPC|\S+ \S+ PowerPC IBM).*Base Operating System Runtime AIX [^:]+: 05\.03\..*$">
3299
+ <fingerprint pattern="^(?:\S{1,1000} )?(?:Motorola PowerPC|IBM PowerPC|\S+ \S+ PowerPC IBM).*Base Operating System Runtime AIX [^:]+: 05\.03\.">
3201
3300
  <description>IBM AIX 5.3 on PowerPC</description>
3202
3301
  <example>IBM PowerPC CHRP Computer.Machine Type: 0x0800004c Processor id: 000A3CD8D600.Base Operating System Runtime AIX version: 05.03.0000.0060.TCP/IP Client Support version: 05.03.0000.0063</example>
3203
3302
  <example>IBM PowerPC CHRP Computer Machine Type: 0x0800004c Processor id: 00F7BF9F4C00 Base Operating System Runtime AIX version: 05.03.0012.0001 TCP/IP Client Support version: 05.03.0012.0005</example>
@@ -3220,7 +3319,7 @@ Copyright (c) 1995-2005 by Cisco Systems
3220
3319
  <param pos="0" name="os.cpe23" value="cpe:/o:ibm:aix:5.3"/>
3221
3320
  </fingerprint>
3222
3321
 
3223
- <fingerprint pattern="^(?:\S+ )?(?:Motorola PowerPC|IBM PowerPC|\S+ \S+ PowerPC IBM).*Base Operating System Runtime VIOS [^:]+: 05\.03\..*$">
3322
+ <fingerprint pattern="^(?:\S{1,1000} )?(?:Motorola PowerPC|IBM PowerPC|\S+ \S+ PowerPC IBM).*Base Operating System Runtime VIOS [^:]+: 05\.03\.">
3224
3323
  <description>IBM VIOS 5.3 on PowerPC</description>
3225
3324
  <example>IBM PowerPC CHRP Computer Machine Type: 0x0800004c Processor id: 00018C4AD400 Base Operating System Runtime VIOS version: 05.03.0008.0000 TCP/IP Client Support version: 05.03.0008.0000</example>
3226
3325
  <example>IBM PowerPC CHRP Computer Machine Type: 0x0800004c Processor id: 0002EBDAD700 Base Operating System Runtime VIOS version: 05.03.0008.0000 TCP/IP Client Support version: 05.03.0008.0001</example>
@@ -3234,10 +3333,9 @@ Copyright (c) 1995-2005 by Cisco Systems
3234
3333
  <param pos="0" name="os.version" value="5.3"/>
3235
3334
  <param pos="0" name="os.arch" value="PowerPC"/>
3236
3335
  <param pos="0" name="os.certainty" value="0.9"/>
3237
- <param pos="0" name="os.cpe23" value="cpe:/o:ibm:vios:5.3"/>
3238
3336
  </fingerprint>
3239
3337
 
3240
- <fingerprint pattern="^(?:\S+ )?(?:Motorola PowerPC|IBM PowerPC|\S+ \S+ PowerPC IBM).*Base Operating System Runtime AIX [^:]+: 06\.01\..*$">
3338
+ <fingerprint pattern="^(?:\S{1,1000} )?(?:Motorola PowerPC|IBM PowerPC|\S+ \S+ PowerPC IBM).*Base Operating System Runtime AIX [^:]+: 06\.01\.">
3241
3339
  <description>IBM AIX 6.1 on PowerPC</description>
3242
3340
  <example>IBM PowerPC CHRP Computer Machine Type: 0x0800004c Processor id: 00F77AEE4C00 Base Operating System Runtime AIX version: 06.01.0006.0015 TCP/IP Client Support version: 06.01.0006.0015</example>
3243
3341
  <example>IBM PowerPC CHRP Computer Machine Type: 0x0800004c Processor id: 00F77C9A4C00 Base Operating System Runtime AIX version: 06.01.0006.0015 TCP/IP Client Support version: 06.01.0006.0015</example>
@@ -3251,17 +3349,16 @@ Copyright (c) 1995-2005 by Cisco Systems
3251
3349
  <param pos="0" name="os.cpe23" value="cpe:/o:ibm:aix:6.1"/>
3252
3350
  </fingerprint>
3253
3351
 
3254
- <fingerprint pattern="^(?:\S+ )?(?:Motorola PowerPC|IBM PowerPC|\S+ \S+ PowerPC IBM).*Base Operating System Runtime VIOS [^:]+: 06\.01\..*$">
3352
+ <fingerprint pattern="^(?:\S{1,1000} )?(?:Motorola PowerPC|IBM PowerPC|\S+ \S+ PowerPC IBM).*Base Operating System Runtime VIOS [^:]+: 06\.01\.">
3255
3353
  <description>IBM VIOS 6.1 on PowerPC</description>
3256
3354
  <example>IBM PowerPC CHRP Computer Machine Type: 0x0800004c Processor id: 00055539D600 Base Operating System Runtime VIOS version: 06.01.0007.0000 TCP/IP Client Support version: 06.01.0005.0000</example>
3257
3355
  <param pos="0" name="os.vendor" value="IBM"/>
3258
3356
  <param pos="0" name="os.product" value="VIOS"/>
3259
3357
  <param pos="0" name="os.version" value="6.1"/>
3260
3358
  <param pos="0" name="os.arch" value="PowerPC"/>
3261
- <param pos="0" name="os.cpe23" value="cpe:/o:ibm:vios:6.1"/>
3262
3359
  </fingerprint>
3263
3360
 
3264
- <fingerprint pattern="^(?:\S+ )?(?:Motorola PowerPC|IBM PowerPC|\S+ \S+ PowerPC IBM).*Base Operating System Runtime AIX [^:]+: 07\.01\..*$">
3361
+ <fingerprint pattern="^(?:\S{1,1000} )?(?:Motorola PowerPC|IBM PowerPC|\S+ \S+ PowerPC IBM).*Base Operating System Runtime AIX [^:]+: 07\.01\.">
3265
3362
  <description>IBM AIX 7.1 on PowerPC</description>
3266
3363
  <example>IBM PowerPC CHRP Computer Machine Type: 0x0800004c Processor id: 000B0148D700 Base Operating System Runtime AIX version: 07.01.0000.0015 TCP/IP Client Support version: 07.01.0000.0015</example>
3267
3364
  <example>IBM PowerPC CHRP Computer Machine Type: 0x0800004c Processor id: 00C5433C4C00 Base Operating System Runtime AIX version: 07.01.0001.0000 TCP/IP Client Support version: 07.01.0001.0003</example>
@@ -3274,7 +3371,7 @@ Copyright (c) 1995-2005 by Cisco Systems
3274
3371
  <param pos="0" name="os.cpe23" value="cpe:/o:ibm:aix:7.1"/>
3275
3372
  </fingerprint>
3276
3373
 
3277
- <fingerprint pattern="^(?:\S+ )?UNIX System Machine Type: not available.*Base Operating System Runtime AIX [^:]+: 05\.01\..*$">
3374
+ <fingerprint pattern="^(?:\S{1,1000} )?UNIX System Machine Type: not available.*Base Operating System Runtime AIX [^:]+: 05\.01\.">
3278
3375
  <description>IBM AIX 5.1 - unknown machine type variant</description>
3279
3376
  <example>UNIX System Machine Type: not available! Processor id: 0001FDAF4C00 Base Operating System Runtime AIX version: 05.01.0000.0051 TCP/IP Client Support version: 05.01.0000.0070</example>
3280
3377
  <param pos="0" name="os.vendor" value="IBM"/>
@@ -3284,7 +3381,7 @@ Copyright (c) 1995-2005 by Cisco Systems
3284
3381
  <param pos="0" name="os.cpe23" value="cpe:/o:ibm:aix:5.1"/>
3285
3382
  </fingerprint>
3286
3383
 
3287
- <fingerprint pattern="^(?:\S+ )?UNIX System Machine Type: not available.*Base Operating System Runtime AIX [^:]+: 05\.02\..*$">
3384
+ <fingerprint pattern="^(?:\S{1,1000} )?UNIX System Machine Type: not available.*Base Operating System Runtime AIX [^:]+: 05\.02\.">
3288
3385
  <description>IBM AIX 5.2 - unknown machine type variant</description>
3289
3386
  <example>UNIX System Machine Type: not available! Processor id: 0001FDAF4C00 Base Operating System Runtime AIX version: 05.02.0000.0105 TCP/IP Client Support version: 05.02.0000.0107</example>
3290
3387
  <param pos="0" name="os.vendor" value="IBM"/>
@@ -3294,7 +3391,7 @@ Copyright (c) 1995-2005 by Cisco Systems
3294
3391
  <param pos="0" name="os.cpe23" value="cpe:/o:ibm:aix:5.2"/>
3295
3392
  </fingerprint>
3296
3393
 
3297
- <fingerprint pattern="^(?:\S+ )?UNIX System Machine Type: not available.*Base Operating System Runtime AIX [^:]+: 05\.03\..*$">
3394
+ <fingerprint pattern="^(?:\S{1,1000} )?UNIX System Machine Type: not available.*Base Operating System Runtime AIX [^:]+: 05\.03\.">
3298
3395
  <description>IBM AIX 5.3 - unknown machine type variant</description>
3299
3396
  <example>UNIX System Machine Type: not available! Processor id: 0001FDAF4C00 Base Operating System Runtime AIX version: 05.03.0000.0050 TCP/IP Client Support version: 05.03.0000.0053</example>
3300
3397
  <param pos="0" name="os.vendor" value="IBM"/>
@@ -3304,7 +3401,7 @@ Copyright (c) 1995-2005 by Cisco Systems
3304
3401
  <param pos="0" name="os.cpe23" value="cpe:/o:ibm:aix:5.3"/>
3305
3402
  </fingerprint>
3306
3403
 
3307
- <fingerprint pattern="^(?:\S+ )?UNIX System Machine Type: not available.*Base Operating System Runtime AIX [^:]+: 06\.01\..*$">
3404
+ <fingerprint pattern="^(?:\S{1,1000} )?UNIX System Machine Type: not available.*Base Operating System Runtime AIX [^:]+: 06\.01\.">
3308
3405
  <description>IBM AIX 6.1 - unknown machine type variant</description>
3309
3406
  <example>UNIX System Machine Type: not available! Processor id: 0001FDAF4C00 Base Operating System Runtime AIX version: 06.01.0007.0000 TCP/IP Client Support version: 06.01.0005.0000</example>
3310
3407
  <param pos="0" name="os.vendor" value="IBM"/>
@@ -3314,7 +3411,7 @@ Copyright (c) 1995-2005 by Cisco Systems
3314
3411
  <param pos="0" name="os.cpe23" value="cpe:/o:ibm:aix:6.1"/>
3315
3412
  </fingerprint>
3316
3413
 
3317
- <fingerprint pattern="^(?:\S+ )?UNIX System Machine Type: not available.*Base Operating System Runtime AIX [^:]+: 07\.01\..*$">
3414
+ <fingerprint pattern="^(?:\S{1,1000} )?UNIX System Machine Type: not available.*Base Operating System Runtime AIX [^:]+: 07\.01\.">
3318
3415
  <description>IBM AIX 7.1 - unknown machine type variant</description>
3319
3416
  <example>UNIX System Machine Type: not available! Processor id: 0001FDAF4C00 Base Operating System Runtime AIX version: 07.01.0001.0000 TCP/IP Client Support version: 07.01.0001.0002</example>
3320
3417
  <param pos="0" name="os.vendor" value="IBM"/>
@@ -3334,7 +3431,7 @@ Copyright (c) 1995-2005 by Cisco Systems
3334
3431
  <param pos="1" name="os.product"/>
3335
3432
  </fingerprint>
3336
3433
 
3337
- <fingerprint pattern="^IBM 6400 Version (\S+).*$">
3434
+ <fingerprint pattern="^IBM 6400 Version (\S+)">
3338
3435
  <description>IBM 6400 Matrix Printer</description>
3339
3436
  <example>IBM 6400 Version 1.1.41 3-3-3</example>
3340
3437
  <example>IBM 6400 Version 1.1.38.11 3-3-3</example>
@@ -3516,7 +3613,7 @@ Copyright (c) 1995-2005 by Cisco Systems
3516
3613
  <param pos="1" name="os.product"/>
3517
3614
  </fingerprint>
3518
3615
 
3519
- <fingerprint pattern="^Juniper Networks, Inc\. (?:(?:Dell|DELL) )?(\S+) internet router, kernel JUNOS (\S+?),? .*$">
3616
+ <fingerprint pattern="^Juniper Networks, Inc\. (?:(?:Dell|DELL) )?(\S+) internet router, kernel JUNOS (\S+?),? ">
3520
3617
  <description>Juniper Router - build path variant</description>
3521
3618
  <example hw.model="J-EX4200-24T" os.version="11.1R3.5">Juniper Networks, Inc. DELL J-EX4200-24T internet router, kernel JUNOS 11.1R3.5 #0: 2011-06-25 01:18:46 UTC builder@briath.juniper.net:/volume/build/junos/11.1/release/11.1R3.5/obj-powerpc/bsd/kernels/JUNIPER-EX/kernel Build date: 2011-06-25 01:01:37</example>
3522
3619
  <example os.version="11.4R1.6">Juniper Networks, Inc. ex4200-48p internet router, kernel JUNOS 11.4R1.6 #0: 2011-11-15 11:14:01 UTC builder@evenath.juniper.net:/volume/build/junos/11.4/release/11.4R1.6/obj-powerpc/bsd/kernels/JUNIPER-EX/kernel Build date: 2011-11-15 10:35:08 UTC C</example>
@@ -3531,7 +3628,22 @@ Copyright (c) 1995-2005 by Cisco Systems
3531
3628
  <param pos="0" name="os.cpe23" value="cpe:/o:juniper:junos:{os.version}"/>
3532
3629
  </fingerprint>
3533
3630
 
3534
- <fingerprint pattern="^Juniper Networks, Inc\. (\S+) Edge Routing Switch SW Version : \((\S+) (\S+) \[BuildId (\d+)\]\) .*$">
3631
+ <fingerprint pattern="^Juniper Networks, Inc\. (\S+) Ethernet Switch, kernel JUNOS (\S+?),? ">
3632
+ <description>Juniper Ethernet Switch</description>
3633
+ <example hw.product="ex2300-c-12t" os.version="15.1X53-D590.1">Juniper Networks, Inc. ex2300-c-12t Ethernet Switch, kernel JUNOS 15.1X53-D590.1, Build date: 2018-11-14 20:31:32 UTC Copyright (c) 1996-2018 Juniper Networks, Inc.</example>
3634
+ <example hw.product="ex2200-c-12t-2g" os.version="12.3R12-S15">Juniper Networks, Inc. ex2200-c-12t-2g Ethernet Switch, kernel JUNOS 12.3R12-S15, Build date: 2020-02-13 14:27:08 UTC Copyright (c) 1996-2020 Juniper Networks, Inc.</example>
3635
+ <example hw.product="qfx5110-48s-4c" os.version="17.3R3-S1.5">Juniper Networks, Inc. qfx5110-48s-4c Ethernet Switch, kernel JUNOS 17.3R3-S1.5, Build date: 2018-08-31 19:06:08 UTC Copyright (c) 1996-2018 Juniper Networks, Inc.</example>
3636
+ <param pos="0" name="os.vendor" value="Juniper"/>
3637
+ <param pos="0" name="os.device" value="Switch"/>
3638
+ <param pos="0" name="os.product" value="Junos OS"/>
3639
+ <param pos="2" name="os.version"/>
3640
+ <param pos="0" name="os.cpe23" value="cpe:/o:juniper:junos:{os.version}"/>
3641
+ <param pos="0" name="hw.vendor" value="Juniper"/>
3642
+ <param pos="0" name="hw.device" value="Switch"/>
3643
+ <param pos="1" name="hw.product"/>
3644
+ </fingerprint>
3645
+
3646
+ <fingerprint pattern="^Juniper Networks, Inc\. (\S+) Edge Routing Switch SW Version : \((\S+) (\S+) \[BuildId (\d+)\]\)">
3535
3647
  <description>Juniper Edge Routing Switch</description>
3536
3648
  <example>Juniper Networks, Inc. E120 Edge Routing Switch SW Version : (10.1.0 release-0.0 [BuildId 10854]) Build Date : April 22, 2009 02:27 Copyright (c) 1999-2009 Juniper Networks, Inc. All rights reserved.</example>
3537
3649
  <example>Juniper Networks, Inc. E120 Edge Routing Switch SW Version : (10.1.3 release-0.0 [BuildId 12315]) Build Date : July 7, 2010 13:31 Copyright (c) 1999-2010 Juniper Networks, Inc. All rights reserved.</example>
@@ -3553,7 +3665,7 @@ Copyright (c) 1995-2005 by Cisco Systems
3553
3665
  <param pos="2" name="os.version"/>
3554
3666
  </fingerprint>
3555
3667
 
3556
- <fingerprint pattern="^Juniper Networks, Inc\. (\S+) Edge Switch Router SW Version : \((\S+) (\S+) \[BuildId (\d+)\]\) .*$">
3668
+ <fingerprint pattern="^Juniper Networks, Inc\. (\S+) Edge Switch Router SW Version : \((\S+) (\S+) \[BuildId (\d+)\]\)">
3557
3669
  <description>Juniper Edge Routing Switch - variant 1</description>
3558
3670
  <example>Juniper Networks, Inc. RX1400 Edge Switch Router SW Version : (10.3.2 patch-0.2 [BuildId 12841]) Build Date : February 3, 2011 16:26 Copyright (c) 1999, 2001 Juniper Networks, Inc.</example>
3559
3671
  <param pos="0" name="os.vendor" value="Juniper"/>
@@ -3582,11 +3694,24 @@ Copyright (c) 1995-2005 by Cisco Systems
3582
3694
  <param pos="1" name="os.product"/>
3583
3695
  </fingerprint>
3584
3696
 
3697
+ <fingerprint pattern="^Juniper (\S+) Ethernet Switch$">
3698
+ <description>Juniper Ethernet Swtich</description>
3699
+ <example hw.product="EX4200-48PX">Juniper EX4200-48PX Ethernet Switch</example>
3700
+ <example hw.product="EX2200-C-12T-2G">Juniper EX2200-C-12T-2G Ethernet Switch</example>
3701
+ <param pos="0" name="os.vendor" value="Juniper"/>
3702
+ <param pos="0" name="os.device" value="Switch"/>
3703
+ <param pos="0" name="os.product" value="Junos OS"/>
3704
+ <param pos="0" name="os.cpe23" value="cpe:/o:juniper:junos:-"/>
3705
+ <param pos="0" name="hw.vendor" value="Juniper"/>
3706
+ <param pos="0" name="hw.device" value="Switch"/>
3707
+ <param pos="1" name="hw.product"/>
3708
+ </fingerprint>
3709
+
3585
3710
  <!--======================================================================
3586
3711
  LANIER
3587
3712
  =======================================================================-->
3588
3713
 
3589
- <fingerprint pattern="^LANIER (.*) ([0-9.]+) / LANIER.*$">
3714
+ <fingerprint pattern="^LANIER (.*) ([0-9.]+) / LANIER">
3590
3715
  <description>Lanier multifunction device</description>
3591
3716
  <example>LANIER LD145 2.40 / LANIER Network Printer C model / LANIER Network Scanner C model / LANIER Network Facsimile C model</example>
3592
3717
  <example>LANIER LD335c 1.27 / LANIER Network Printer C model / LANIER Network Scanner C model</example>
@@ -3602,7 +3727,7 @@ Copyright (c) 1995-2005 by Cisco Systems
3602
3727
  LANTRONIX
3603
3728
  =======================================================================-->
3604
3729
 
3605
- <fingerprint pattern="^Lantronix ((?:LPS|EPS|MPS)\S+) Version [VB]?([^/\(\s]+)[/\(\s]?.*$">
3730
+ <fingerprint pattern="^Lantronix ((?:LPS|EPS|MPS)\S+) Version [VB]?([^/\(\s]+)[/\(\s]?">
3606
3731
  <description>Lantronix print server</description>
3607
3732
  <example>Lantronix EPS2 Version V3.3/4(950530)</example>
3608
3733
  <example>Lantronix EPS2 Version V3.4/1(960401)</example>
@@ -3632,7 +3757,7 @@ Copyright (c) 1995-2005 by Cisco Systems
3632
3757
 
3633
3758
  <!-- These devices are all some form of device/terminal/serial/console server -->
3634
3759
 
3635
- <fingerprint pattern="^(?i:Lantronix) ((MSS|SCS|LRS|ETS|EDS)\S+) (?:Version |[VB])?([^/\(\s]+)[/\(\s]?.*$">
3760
+ <fingerprint pattern="^(?i:Lantronix) ((MSS|SCS|LRS|ETS|EDS)\S+) (?:Version |[VB])?([^/\(\s]+)[/\(\s]?">
3636
3761
  <description>Lantronix terminal server</description>
3637
3762
  <example>Lantronix MSS100 Version V3.6/9(030114)</example>
3638
3763
  <example>Lantronix EDS8PS V4.1.0.2R17 (03111515KK9H)</example>
@@ -3723,7 +3848,7 @@ Copyright (c) 1995-2005 by Cisco Systems
3723
3848
  <param pos="2" name="os.version"/>
3724
3849
  </fingerprint>
3725
3850
 
3726
- <fingerprint pattern="^Lantronix (MatchPort \S+(?: \S+)?) V(\S+) \(.*$">
3851
+ <fingerprint pattern="^Lantronix (MatchPort \S+(?: \S+)?) V(\S+) \(">
3727
3852
  <description>Lantronix MatchPort serial to ethernet adapter</description>
3728
3853
  <example>Lantronix MatchPort AR V1.1.0.0R1 (07101497G7IJFA)</example>
3729
3854
  <example>Lantronix MatchPort AR V1.1.0.0R6.MC_V3.5 (07100747G7I1DT)</example>
@@ -3784,7 +3909,7 @@ Copyright (c) 1995-2005 by Cisco Systems
3784
3909
  <param pos="3" name="os.version"/>
3785
3910
  </fingerprint>
3786
3911
 
3787
- <fingerprint pattern="^Lantronix ((NTS)\S*) \S+ (\S+) \(.*$">
3912
+ <fingerprint pattern="^Lantronix ((NTS)\S*) \S+ (\S+) \(">
3788
3913
  <description>Lantronix NTS</description>
3789
3914
  <example>Lantronix NTS 0239032 04.4 (010817)</example>
3790
3915
  <example>Lantronix NTS 1145416 04.4 (010817)</example>
@@ -3809,7 +3934,7 @@ Copyright (c) 1995-2005 by Cisco Systems
3809
3934
  LEXMARK
3810
3935
  =======================================================================-->
3811
3936
 
3812
- <fingerprint pattern="^Lexmark C760 version ([\d.]+).*$">
3937
+ <fingerprint pattern="^Lexmark C760 version ([\d.]+)">
3813
3938
  <description>Lexmark C760 Color Laser Printer</description>
3814
3939
  <param pos="0" name="os.certainty" value="1.0"/>
3815
3940
  <param pos="0" name="os.vendor" value="Lexmark"/>
@@ -3818,7 +3943,7 @@ Copyright (c) 1995-2005 by Cisco Systems
3818
3943
  <param pos="1" name="os.version"/>
3819
3944
  </fingerprint>
3820
3945
 
3821
- <fingerprint pattern="^Lexmark (\S+) version (\S+).*$">
3946
+ <fingerprint pattern="^Lexmark (\S+) version (\S+)">
3822
3947
  <description>Lexmark Laser Printer</description>
3823
3948
  <example>Lexmark C524 version NS.NP.N212 kernel 2.6.6 All-N-1</example>
3824
3949
  <example>Lexmark T522 version 54.30.06 kernel 2.4.0-test6 All-N-1</example>
@@ -3837,7 +3962,7 @@ Copyright (c) 1995-2005 by Cisco Systems
3837
3962
  <param pos="2" name="os.version"/>
3838
3963
  </fingerprint>
3839
3964
 
3840
- <fingerprint pattern="^(?:Lexmark )?MarkNet (.*) Version (\S+) Ethernet.*$">
3965
+ <fingerprint pattern="^(?:Lexmark )?MarkNet (.*) Version (\S+) Ethernet">
3841
3966
  <description>Lexmark MarkNet Printer Server</description>
3842
3967
  <example>MarkNet Pro 1 Version 2.10.192 Ethernet 10T.</example>
3843
3968
  <example>MarkNet Pro 1 Version 2.10.192 Ethernet Combo.</example>
@@ -3854,7 +3979,7 @@ Copyright (c) 1995-2005 by Cisco Systems
3854
3979
  <param pos="2" name="os.version"/>
3855
3980
  </fingerprint>
3856
3981
 
3857
- <fingerprint pattern="^Lexmark Optra (\S+(?: \S+)?(?: \S+)?) +Version (\S+).*$">
3982
+ <fingerprint pattern="^Lexmark Optra (\S+(?: \S+)?(?: \S+)?) +Version (\S+)">
3858
3983
  <description>Lexmark Optra Laser Printer</description>
3859
3984
  <example>Lexmark Optra T610 Version 5.15.18 FaxSCSI-Ethernet.</example>
3860
3985
  <example>Lexmark Optra K 1220 Version 1.9.14 Ethernet 10/100.</example>
@@ -3870,7 +3995,7 @@ Copyright (c) 1995-2005 by Cisco Systems
3870
3995
  <param pos="2" name="os.version"/>
3871
3996
  </fingerprint>
3872
3997
 
3873
- <fingerprint pattern="^Lexmark Forms Printer (\S+(?: plus)?) +version (\S+).*$">
3998
+ <fingerprint pattern="^Lexmark Forms Printer (\S+(?: plus)?) +version (\S+)">
3874
3999
  <description>Lexmark Forms Printer</description>
3875
4000
  <example>Lexmark Forms Printer 2580 version LC.CO.N061 kernel 2.6.10 All-N-1</example>
3876
4001
  <example>Lexmark Forms Printer 2580 version LCL.CU.P105 kernel 2.6.10 All-N-1</example>
@@ -3888,7 +4013,7 @@ Copyright (c) 1995-2005 by Cisco Systems
3888
4013
  <param pos="2" name="os.version"/>
3889
4014
  </fingerprint>
3890
4015
 
3891
- <fingerprint pattern="^Lexmark (\S+) Series version (\S+).*$">
4016
+ <fingerprint pattern="^Lexmark (\S+) Series version (\S+)">
3892
4017
  <description>Lexmark Printer</description>
3893
4018
  <example>Lexmark Pro5500 Series version FHN.RB.P1.111006z kernel 2.6.28.10.1 All-N-1</example>
3894
4019
  <example>Lexmark Pro910 Series version FQN.QNL.P1.111026 kernel 2.6.28.10.1 All-N-1</example>
@@ -3900,7 +4025,7 @@ Copyright (c) 1995-2005 by Cisco Systems
3900
4025
  <param pos="2" name="os.version"/>
3901
4026
  </fingerprint>
3902
4027
 
3903
- <fingerprint pattern="^(?:Lexmark|LEXMARK) (\S+) [vV]ersion (\S+).*$">
4028
+ <fingerprint pattern="^(?:Lexmark|LEXMARK) (\S+) [vV]ersion (\S+)">
3904
4029
  <description>Lexmark Printer - no kernel variant</description>
3905
4030
  <example>LEXMARK X204 version NM.APS.N058 kernel 2.6.18.5 All-N-1</example>
3906
4031
  <example>Lexmark C720 Version 3.19.12 Ethernet 10/100.</example>
@@ -3985,7 +4110,7 @@ Copyright (c) 1995-2005 by Cisco Systems
3985
4110
  <param pos="0" name="os.device" value="Printer"/>
3986
4111
  </fingerprint>
3987
4112
 
3988
- <fingerprint pattern="^KYOCERA Printer I/F (IB-.*) Ver .*$">
4113
+ <fingerprint pattern="^KYOCERA Printer I/F (IB-.*) Ver">
3989
4114
  <description>KYOCERA MITA printer - version variant</description>
3990
4115
  <example>KYOCERA Printer I/F IB-23 Ver 1.1.0</example>
3991
4116
  <example>KYOCERA Printer I/F IB-20/21 Ver 1.1.1</example>
@@ -4126,7 +4251,7 @@ Copyright (c) 1995-2005 by Cisco Systems
4126
4251
  <param pos="0" name="os.cpe23" value="cpe:/o:redhat:linux:7.3"/>
4127
4252
  </fingerprint>
4128
4253
 
4129
- <fingerprint pattern="^CentOS release ([\d.]*) .*$">
4254
+ <fingerprint pattern="^CentOS release ([\d.]*)">
4130
4255
  <description>CentOS Linux</description>
4131
4256
  <example>CentOS release 4.9 (Final)</example>
4132
4257
  <param pos="0" name="os.certainty" value="0.9"/>
@@ -4268,7 +4393,7 @@ Copyright (c) 1995-2005 by Cisco Systems
4268
4393
  <param pos="2" name="os.arch"/>
4269
4394
  </fingerprint>
4270
4395
 
4271
- <fingerprint pattern="^Silver Peak Systems, Inc\. (\S+) Linux (.*?) ([0-9]+\.[0-9]+\.[0-9]+\S*).* (?:[0-9]{4}|[A-Z][A-Z][A-Z]{1,2}|\+[0-9]+|Local time.*(?:manual|zic|m\S*)) (\S+).*$">
4396
+ <fingerprint pattern="^Silver Peak Systems, Inc\. (\S+) Linux (.*?) ([0-9]+\.[0-9]+\.[0-9]+\S*).* (?:[0-9]{4}|[A-Z][A-Z][A-Z]{1,2}|\+[0-9]+|Local time.*(?:manual|zic|m\S*)) (\S+)">
4272
4397
  <description>Silver Peak Systems</description>
4273
4398
  <example os.product="NX7600" host.name="foo" os.version="2.6.22.14" os.arch="x86_64">Silver Peak Systems, Inc. NX7600 Linux foo 2.6.22.14 hidalgo 3.3.0.0_32549 #1 2010-07-20 04:25:08 SMP x86_64</example>
4274
4399
  <param pos="0" name="os.certainty" value="0.9"/>
@@ -4287,7 +4412,7 @@ Copyright (c) 1995-2005 by Cisco Systems
4287
4412
  specific pattern available.
4288
4413
  -->
4289
4414
 
4290
- <fingerprint pattern="^Linux (.*?) ([0-9]+\.[0-9]+\.[0-9]+\S*).* (?:[0-9]{4}|[A-Z][A-Z][A-Z]{1,2}|\+[0-9]+|Local time.*(?:manual|zic|m\S*)) (\S+).*$">
4415
+ <fingerprint pattern="^Linux (.*?) ([0-9]+\.[0-9]+\.[0-9]+\S*).* (?:[0-9]{4}|[A-Z][A-Z][A-Z]{1,2}|\+[0-9]+|Local time.*(?:manual|zic|m\S*)) (\S+)">
4291
4416
  <description>Linux x86_64 Generic - hostname variant</description>
4292
4417
  <example os.arch="x86_64" os.version="2.6.9" linux.kernel.version="2.6.9" host.name="hostname">Linux hostname 2.6.9 #2 SMP Tue Jun 26 16:10:49 EDT 2012 x86_64</example>
4293
4418
  <param pos="0" name="os.certainty" value="0.5"/>
@@ -4299,7 +4424,7 @@ Copyright (c) 1995-2005 by Cisco Systems
4299
4424
  <param pos="3" name="os.arch"/>
4300
4425
  </fingerprint>
4301
4426
 
4302
- <fingerprint pattern="^Linux ([0-9]+\.[0-9]+\.[0-9]+\S*).* (?:[0-9]{4}|[A-Z][A-Z][A-Z]{1,2}|\+[0-9]+|Local time.*(?:manual|zic|m\S*)) (\S+).*$">
4427
+ <fingerprint pattern="^Linux ([0-9]+\.[0-9]+\.[0-9]+\S*).* (?:[0-9]{4}|[A-Z][A-Z][A-Z]{1,2}|\+[0-9]+|Local time.*(?:manual|zic|m\S*)) (\S+)">
4303
4428
  <description>Linux Generic</description>
4304
4429
  <example os.version="2.6.9" linux.kernel.version="2.6.9" os.arch="x86_64">Linux 2.6.9 #2 SMP Tue Jun 26 16:10:49 EDT 2012 x86_64</example>
4305
4430
  <param pos="0" name="os.certainty" value="0.5"/>
@@ -4487,7 +4612,7 @@ Copyright (c) 1995-2005 by Cisco Systems
4487
4612
  These are baseline patterns that only use sysDesc. We use these if we are unable to fingerprint the sysObjectID.
4488
4613
  -->
4489
4614
 
4490
- <fingerprint pattern="^Hardware: x86.*Software: Windows NT Version 4\.0.*$">
4615
+ <fingerprint pattern="^Hardware: x86.*Software: Windows NT Version 4\.0">
4491
4616
  <description>Windows NT 4 on x86</description>
4492
4617
  <example>Hardware: x86 Family 6 Model 8 Stepping 3 AT/AT COMPATIBLE - Software: Windows NT Version 4.0 (Build Number: 1381 Uniprocessor Free )</example>
4493
4618
  <param pos="0" name="os.vendor" value="Microsoft"/>
@@ -4497,7 +4622,7 @@ Copyright (c) 1995-2005 by Cisco Systems
4497
4622
  <param pos="0" name="os.arch" value="x86"/>
4498
4623
  </fingerprint>
4499
4624
 
4500
- <fingerprint pattern="^Hardware: x86.*Software: Windows 2000 Version 5\.0.*$">
4625
+ <fingerprint pattern="^Hardware: x86.*Software: Windows 2000 Version 5\.0">
4501
4626
  <description>Windows 2000 on x86</description>
4502
4627
  <example>Hardware: x86 Family 15 Model 4 Stepping 8 AT/AT COMPATIBLE - Software: Windows 2000 Version 5.0 (Build 2195 Uniprocessor Free)</example>
4503
4628
  <param pos="0" name="os.vendor" value="Microsoft"/>
@@ -4507,7 +4632,7 @@ Copyright (c) 1995-2005 by Cisco Systems
4507
4632
  <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_2000:-"/>
4508
4633
  </fingerprint>
4509
4634
 
4510
- <fingerprint pattern="^Hardware: x86.*Software: Windows 2000 Version 5\.1.*$">
4635
+ <fingerprint pattern="^Hardware: x86.*Software: Windows 2000 Version 5\.1">
4511
4636
  <description>Windows XP on x86</description>
4512
4637
  <example>Hardware: x86 Family 15 Model 75 Stepping 2 AT/AT COMPATIBLE - Software: Windows 2000 Version 5.1 (Build 2600 Uniprocessor Free)</example>
4513
4638
  <param pos="0" name="os.vendor" value="Microsoft"/>
@@ -4517,7 +4642,7 @@ Copyright (c) 1995-2005 by Cisco Systems
4517
4642
  <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_xp:-"/>
4518
4643
  </fingerprint>
4519
4644
 
4520
- <fingerprint pattern="^Hardware: x86.*Software: Windows Version 5\.2.*$">
4645
+ <fingerprint pattern="^Hardware: x86.*Software: Windows Version 5\.2">
4521
4646
  <description>Windows Server 2003 on x86</description>
4522
4647
  <example>Hardware: x86 Family 6 Model 15 Stepping 6 AT/AT COMPATIBLE - Software: Windows Version 5.2 (Build 3790 Multiprocessor Free)</example>
4523
4648
  <param pos="0" name="os.vendor" value="Microsoft"/>
@@ -4527,7 +4652,7 @@ Copyright (c) 1995-2005 by Cisco Systems
4527
4652
  <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_server_2003:-"/>
4528
4653
  </fingerprint>
4529
4654
 
4530
- <fingerprint pattern="^Hardware: \S+64.*Software: Windows Version 5\.2.*$">
4655
+ <fingerprint pattern="^Hardware: \S+64.*Software: Windows Version 5\.2">
4531
4656
  <description>Windows Server 2003 on x86_64</description>
4532
4657
  <example>Hardware: AMD64 Family 15 Model 4 Stepping 3 AT/AT COMPATIBLE - Software: Windows Version 5.2 (Build 3790 Multiprocessor Free)</example>
4533
4658
  <example>Hardware: Intel64 Family 6 Model 15 Stepping 6 AT/AT COMPATIBLE - Software: Windows Version 5.2 (Build 3790 Multiprocessor Free)</example>
@@ -4538,7 +4663,7 @@ Copyright (c) 1995-2005 by Cisco Systems
4538
4663
  <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_server_2003:-"/>
4539
4664
  </fingerprint>
4540
4665
 
4541
- <fingerprint pattern="^Windows_NT Microsoft Windows Server 2003 5.2 3790 Service Pack 2, GenuineIntel \S+64.*$">
4666
+ <fingerprint pattern="^Windows_NT Microsoft Windows Server 2003 5.2 3790 Service Pack 2, GenuineIntel \S+64">
4542
4667
  <description>Rare Windows 2003 SP2 sysDescr, x64</description>
4543
4668
  <example>Windows_NT Microsoft Windows Server 2003 5.2 3790 Service Pack 2, GenuineIntel EM64T Family 6 Model 23 Stepping 6</example>
4544
4669
  <param pos="0" name="os.vendor" value="Microsoft"/>
@@ -4549,7 +4674,7 @@ Copyright (c) 1995-2005 by Cisco Systems
4549
4674
  <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_server_2003:SP1"/>
4550
4675
  </fingerprint>
4551
4676
 
4552
- <fingerprint pattern="^Windows_NT Microsoft Windows Server 2003 5.2 3790 Service Pack 2, GenuineIntel x86.*$">
4677
+ <fingerprint pattern="^Windows_NT Microsoft Windows Server 2003 5.2 3790 Service Pack 2, GenuineIntel x86">
4553
4678
  <description>Rare Windows 2003 SP2 sysDescr, x86</description>
4554
4679
  <example>Windows_NT Microsoft Windows Server 2003 5.2 3790 Service Pack 2, GenuineIntel x86 Family 6 Model 23 Stepping 6</example>
4555
4680
  <param pos="0" name="os.vendor" value="Microsoft"/>
@@ -4560,7 +4685,7 @@ Copyright (c) 1995-2005 by Cisco Systems
4560
4685
  <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_server_2003:SP1"/>
4561
4686
  </fingerprint>
4562
4687
 
4563
- <fingerprint pattern="^Microsoft Windows CE Version ([\d.]+).*$">
4688
+ <fingerprint pattern="^Microsoft Windows CE Version ([\d.]+)">
4564
4689
  <description>Windows CE</description>
4565
4690
  <example>Microsoft Windows CE Version 4.20 (Build 0)</example>
4566
4691
  <example>Microsoft Windows CE Version 4.20 (Build 1088)</example>
@@ -4571,7 +4696,7 @@ Copyright (c) 1995-2005 by Cisco Systems
4571
4696
  <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_ce:{os.version}"/>
4572
4697
  </fingerprint>
4573
4698
 
4574
- <fingerprint pattern="^Hardware: x86.*Software: Windows Version 6.0 \(Build 6000.*$">
4699
+ <fingerprint pattern="^Hardware: x86.*Software: Windows Version 6.0 \(Build 6000">
4575
4700
  <description>Windows Vista on x86</description>
4576
4701
  <example>Hardware: x86 Family 15 Model 2 Stepping 5 AT/AT COMPATIBLE - Software: Windows Version 6.0 (Build 6000 Multiprocessor Free)</example>
4577
4702
  <param pos="0" name="os.vendor" value="Microsoft"/>
@@ -4581,7 +4706,7 @@ Copyright (c) 1995-2005 by Cisco Systems
4581
4706
  <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_vista:-"/>
4582
4707
  </fingerprint>
4583
4708
 
4584
- <fingerprint pattern="^Hardware: \S+64.*Software: Windows Version 6.0 \(Build 6000.*$">
4709
+ <fingerprint pattern="^Hardware: \S+64.*Software: Windows Version 6.0 \(Build 6000">
4585
4710
  <description>Windows Vista on x86_64</description>
4586
4711
  <example>Hardware: Intel64 Family 15 Model 2 Stepping 5 AT/AT COMPATIBLE - Software: Windows Version 6.0 (Build 6000 Multiprocessor Free)</example>
4587
4712
  <param pos="0" name="os.vendor" value="Microsoft"/>
@@ -4591,7 +4716,7 @@ Copyright (c) 1995-2005 by Cisco Systems
4591
4716
  <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_vista:-"/>
4592
4717
  </fingerprint>
4593
4718
 
4594
- <fingerprint pattern="^Hardware: x86.*Software: Windows Version 6.0 \(Build 6001.*$">
4719
+ <fingerprint pattern="^Hardware: x86.*Software: Windows Version 6.0 \(Build 6001">
4595
4720
  <description>Windows Vista SP1 on x86</description>
4596
4721
  <example>Hardware: x86 Family 15 Model 2 Stepping 5 AT/AT COMPATIBLE - Software: Windows Version 6.0 (Build 6001 Multiprocessor Free)</example>
4597
4722
  <param pos="0" name="os.vendor" value="Microsoft"/>
@@ -4602,7 +4727,7 @@ Copyright (c) 1995-2005 by Cisco Systems
4602
4727
  <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_vista:SP1"/>
4603
4728
  </fingerprint>
4604
4729
 
4605
- <fingerprint pattern="^Hardware: \S+64.*Software: Windows Version 6.0 \(Build 6001.*$">
4730
+ <fingerprint pattern="^Hardware: \S+64.*Software: Windows Version 6.0 \(Build 6001">
4606
4731
  <description>Windows Vista SP1 on x86_64</description>
4607
4732
  <example>Hardware: AMD64 Family 16 Model 2 Stepping 3 AT/AT COMPATIBLE - Software: Windows Version 6.0 (Build 6001 Multiprocessor Free)</example>
4608
4733
  <example>Hardware: Intel64 Family 15 Model 2 Stepping 5 AT/AT COMPATIBLE - Software: Windows Version 6.0 (Build 6001 Multiprocessor Free)</example>
@@ -4614,7 +4739,7 @@ Copyright (c) 1995-2005 by Cisco Systems
4614
4739
  <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_vista:SP1"/>
4615
4740
  </fingerprint>
4616
4741
 
4617
- <fingerprint pattern="^Hardware: x86.*Software: Windows Version 6.0 \(Build 6002.*$">
4742
+ <fingerprint pattern="^Hardware: x86.*Software: Windows Version 6.0 \(Build 6002">
4618
4743
  <description>Windows Vista SP2 on x86</description>
4619
4744
  <example>Hardware: x86 Family 15 Model 2 Stepping 5 AT/AT COMPATIBLE - Software: Windows Version 6.0 (Build 6002 Multiprocessor Free)</example>
4620
4745
  <param pos="0" name="os.vendor" value="Microsoft"/>
@@ -4625,7 +4750,7 @@ Copyright (c) 1995-2005 by Cisco Systems
4625
4750
  <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_vista:SP2"/>
4626
4751
  </fingerprint>
4627
4752
 
4628
- <fingerprint pattern="^Hardware: \S+64.*Software: Windows Version 6.0 \(Build 6002.*$">
4753
+ <fingerprint pattern="^Hardware: \S+64.*Software: Windows Version 6.0 \(Build 6002">
4629
4754
  <description>Windows Vista SP2 on x86_64</description>
4630
4755
  <example>Hardware: AMD64 Family 16 Model 2 Stepping 3 AT/AT COMPATIBLE - Software: Windows Version 6.0 (Build 6002 Multiprocessor Free)</example>
4631
4756
  <example>Hardware: Intel64 Family 15 Model 2 Stepping 5 AT/AT COMPATIBLE - Software: Windows Version 6.0 (Build 6002 Multiprocessor Free)</example>
@@ -4637,7 +4762,7 @@ Copyright (c) 1995-2005 by Cisco Systems
4637
4762
  <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_vista:SP2"/>
4638
4763
  </fingerprint>
4639
4764
 
4640
- <fingerprint pattern="^Hardware: x86.*Software: Windows Version 6.1 \(Build 7600.*$">
4765
+ <fingerprint pattern="^Hardware: x86.*Software: Windows Version 6.1 \(Build 7600">
4641
4766
  <description>Windows 7 on x86</description>
4642
4767
  <example>Hardware: x86 Family 15 Model 2 Stepping 5 AT/AT COMPATIBLE - Software: Windows Version 6.1 (Build 7600 Multiprocessor Free)</example>
4643
4768
  <param pos="0" name="os.vendor" value="Microsoft"/>
@@ -4647,7 +4772,7 @@ Copyright (c) 1995-2005 by Cisco Systems
4647
4772
  <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_7:-"/>
4648
4773
  </fingerprint>
4649
4774
 
4650
- <fingerprint pattern="^Hardware: \S+64.*Software: Windows Version 6.1 \(Build 7600.*$">
4775
+ <fingerprint pattern="^Hardware: \S+64.*Software: Windows Version 6.1 \(Build 7600">
4651
4776
  <description>Windows 7 on x86_64</description>
4652
4777
  <example>Hardware: AMD64 Family 16 Model 2 Stepping 3 AT/AT COMPATIBLE - Software: Windows Version 6.1 (Build 7600 Multiprocessor Free)</example>
4653
4778
  <example>Hardware: Intel64 Family 15 Model 2 Stepping 5 AT/AT COMPATIBLE - Software: Windows Version 6.1 (Build 7600 Multiprocessor Free)</example>
@@ -4658,7 +4783,7 @@ Copyright (c) 1995-2005 by Cisco Systems
4658
4783
  <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_7:-"/>
4659
4784
  </fingerprint>
4660
4785
 
4661
- <fingerprint pattern="^Hardware: x86.*Software: Windows Version 6.1 \(Build 7601.*$">
4786
+ <fingerprint pattern="^Hardware: x86.*Software: Windows Version 6.1 \(Build 7601">
4662
4787
  <description>Windows 7 SP1 on x86</description>
4663
4788
  <example>Hardware: x86 Family 15 Model 2 Stepping 5 AT/AT COMPATIBLE - Software: Windows Version 6.1 (Build 7601 Multiprocessor Free)</example>
4664
4789
  <param pos="0" name="os.vendor" value="Microsoft"/>
@@ -4669,7 +4794,7 @@ Copyright (c) 1995-2005 by Cisco Systems
4669
4794
  <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_7:SP1"/>
4670
4795
  </fingerprint>
4671
4796
 
4672
- <fingerprint pattern="^Hardware: \S+64.*Software: Windows Version 6.1 \(Build 7601.*$">
4797
+ <fingerprint pattern="^Hardware: \S+64.*Software: Windows Version 6.1 \(Build 7601">
4673
4798
  <description>Windows 7 SP1 on x86_64</description>
4674
4799
  <example>Hardware: AMD64 Family 16 Model 2 Stepping 3 AT/AT COMPATIBLE - Software: Windows Version 6.1 (Build 7601 Multiprocessor Free)</example>
4675
4800
  <example>Hardware: Intel64 Family 15 Model 2 Stepping 5 AT/AT COMPATIBLE - Software: Windows Version 6.1 (Build 7601 Multiprocessor Free)</example>
@@ -4721,7 +4846,7 @@ Copyright (c) 1995-2005 by Cisco Systems
4721
4846
  <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_8.1:-"/>
4722
4847
  </fingerprint>
4723
4848
 
4724
- <fingerprint pattern="Windows\s\S+\s(6\.2\.\d+)\s+Server\s[\d\.]+\s(\w+).*">
4849
+ <fingerprint pattern="Windows\s\S+\s(6\.2\.\d+)\s+Server\s[\d\.]+\s(\w+)">
4725
4850
  <description>Windows Server 2012</description>
4726
4851
  <example>Windows w12-srv-snmp 6.2.9200 Server 4.0 Intel64 Family 6 Model 26 Stepping 4</example>
4727
4852
  <param pos="0" name="os.vendor" value="Microsoft"/>
@@ -4776,7 +4901,7 @@ Copyright (c) 1995-2005 by Cisco Systems
4776
4901
  NETAPP
4777
4902
  =======================================================================-->
4778
4903
 
4779
- <fingerprint pattern="^(?:NetApp|Data ONTAP) Release (\S+):? .*$">
4904
+ <fingerprint pattern="^(?:NetApp|Data ONTAP) Release (\S+):?">
4780
4905
  <description>NetApp filer</description>
4781
4906
  <example>Data ONTAP Release 7.2.3: Thu Jul 5 10:42:49 PDT 2007 (IBM)</example>
4782
4907
  <example>NetApp Release 7.2.4: Fri Nov 16 00:34:57 PST 2007</example>
@@ -4785,7 +4910,7 @@ Copyright (c) 1995-2005 by Cisco Systems
4785
4910
  <param pos="0" name="os.vendor" value="NetApp"/>
4786
4911
  <param pos="0" name="os.family" value="Data ONTAP"/>
4787
4912
  <param pos="0" name="os.product" value="Data ONTAP"/>
4788
- <param pos="0" name="os.device" value="File Server"/>
4913
+ <param pos="0" name="os.device" value="NAS"/>
4789
4914
  <param pos="1" name="os.version"/>
4790
4915
  <param pos="0" name="os.cpe23" value="cpe:/o:netapp:data_ontap:{os.version}"/>
4791
4916
  </fingerprint>
@@ -4794,7 +4919,7 @@ Copyright (c) 1995-2005 by Cisco Systems
4794
4919
  NETBOTZ
4795
4920
  =======================================================================-->
4796
4921
 
4797
- <fingerprint pattern="^NetBotz RackBotz (\S+) Appliance; FV: ([^,]+), HR: .*$">
4922
+ <fingerprint pattern="^NetBotz RackBotz (\S+) Appliance; FV: ([^,]+), HR:">
4798
4923
  <description>NetBotz RackBotz monitoring device</description>
4799
4924
  <example>NetBotz RackBotz 400C Appliance; FV: A1_3_71_136-20021216P, HR: REV A13, MD: 11/04/2003; MC: TEX</example>
4800
4925
  <example>NetBotz RackBotz 400C Appliance; FV: A1_3_90_168-20040908P, HR: REV A13, MD: 11/03/2003; MC: TEX</example>
@@ -4843,7 +4968,7 @@ Copyright (c) 1995-2005 by Cisco Systems
4843
4968
  Netscaler
4844
4969
  =======================================================================-->
4845
4970
 
4846
- <fingerprint pattern="^NetScaler NS([^:]+): Build ([^,]+), Date: .*$">
4971
+ <fingerprint pattern="^NetScaler NS([^:]+): Build ([^,]+), Date:">
4847
4972
  <description>Netscaler Appliance</description>
4848
4973
  <example os.version="10.0" os.version.version="54.6.nc">NetScaler NS10.0: Build 54.6.nc, Date: Apr 6 2012, 08:00:41 </example>
4849
4974
  <example>NetScaler NS9.3: Build 57.5.nc, Date: Jun 27 2012, 19:37:56 </example>
@@ -4853,13 +4978,14 @@ Copyright (c) 1995-2005 by Cisco Systems
4853
4978
  <param pos="0" name="os.product" value="NetScaler"/>
4854
4979
  <param pos="1" name="os.version"/>
4855
4980
  <param pos="2" name="os.version.version"/>
4981
+ <param pos="0" name="os.cpe23" value="cpe:/o:citrix:netscaler_firmware:{os.version}"/>
4856
4982
  </fingerprint>
4857
4983
 
4858
4984
  <!--======================================================================
4859
4985
  NORTEL
4860
4986
  =======================================================================-->
4861
4987
 
4862
- <fingerprint pattern="^Business Policy Switch 2000.* SW:v([\d.]+) .*$">
4988
+ <fingerprint pattern="^Business Policy Switch 2000.* SW:v([\d.]+)">
4863
4989
  <description>Nortel Business Policy Switch 2000</description>
4864
4990
  <example>Business Policy Switch 2000 HW:10 FW:3.6.0.1 SW:v3.1.6.02 ISVN:2</example>
4865
4991
  <param pos="0" name="os.certainty" value="1.0"/>
@@ -4870,7 +4996,7 @@ Copyright (c) 1995-2005 by Cisco Systems
4870
4996
  <param pos="1" name="os.version"/>
4871
4997
  </fingerprint>
4872
4998
 
4873
- <fingerprint pattern="^BayStack (\S+).*SW:[vV](\S+).*$">
4999
+ <fingerprint pattern="^BayStack (\S+).*SW:[vV](\S+)">
4874
5000
  <description>Nortel BayStack switch</description>
4875
5001
  <example>BayStack 420 HW:#02 FW:3.0.0.3 SW:v3.0.0.46</example>
4876
5002
  <example>BayStack 450-24T HW:RevB FW:V1.02 SW:V1.0.0.8</example>
@@ -4884,7 +5010,7 @@ Copyright (c) 1995-2005 by Cisco Systems
4884
5010
  <param pos="2" name="os.version"/>
4885
5011
  </fingerprint>
4886
5012
 
4887
- <fingerprint pattern="^Ethernet Switch (\S+).*SW:v([\d.]+).*$">
5013
+ <fingerprint pattern="^Ethernet Switch (\S+).*SW:v([\d.]+)">
4888
5014
  <description>Nortel BayStack switch - variant 1</description>
4889
5015
  <example>Ethernet Switch 470-48T HW:#05 FW:3.6.0.6 SW:v3.6.2.04 BN:4 ISVN:2 (c) Nortel Networks</example>
4890
5016
  <param pos="0" name="os.certainty" value="1.0"/>
@@ -5013,7 +5139,7 @@ Copyright (c) 1995-2005 by Cisco Systems
5013
5139
  <param pos="2" name="os.version"/>
5014
5140
  </fingerprint>
5015
5141
 
5016
- <fingerprint pattern="^Nortel SR ([^,\s]+).*Software Version = ([^,]+),.*$">
5142
+ <fingerprint pattern="^Nortel SR ([^,\s]+).*Software Version = ([^,]+),">
5017
5143
  <description>Nortel Secure Router</description>
5018
5144
  <example>Nortel SR 1001, Software Version = r8.3.5, Boot Version = J1100_031805</example>
5019
5145
  <example>Nortel SR 1004, Software Version = r8.4.4, Boot Version = T1k031605</example>
@@ -5026,7 +5152,7 @@ Copyright (c) 1995-2005 by Cisco Systems
5026
5152
  <param pos="2" name="os.version"/>
5027
5153
  </fingerprint>
5028
5154
 
5029
- <fingerprint pattern="^Image: rel/([^/\s]+)/? Created on .*$">
5155
+ <fingerprint pattern="^Image: rel/([^/\s]+)/? Created on">
5030
5156
  <description>Bay Networks Router</description>
5031
5157
  <example>Image: rel/10.00 Created on Fri Mar 1 23:18:04 EST 1996.</example>
5032
5158
  <example>Image: rel/10.01 Created on Thu Jul 18 11:31:53 EDT 1996.</example>
@@ -5043,7 +5169,7 @@ Copyright (c) 1995-2005 by Cisco Systems
5043
5169
  <param pos="1" name="os.version"/>
5044
5170
  </fingerprint>
5045
5171
 
5046
- <fingerprint pattern="^Nortel (Layer2-3 GbE Switch Module).*$">
5172
+ <fingerprint pattern="^Nortel (Layer2-3 GbE Switch Module)">
5047
5173
  <description>Nortel Switch Module</description>
5048
5174
  <example>Nortel Layer2-3 GbE Switch Module(Copper)</example>
5049
5175
  <param pos="0" name="os.vendor" value="Nortel"/>
@@ -5226,7 +5352,7 @@ Copyright (c) 1995-2005 by Cisco Systems
5226
5352
  <param pos="0" name="os.cpe23" value="cpe:/o:novell:netware:6.5 SP7"/>
5227
5353
  </fingerprint>
5228
5354
 
5229
- <fingerprint pattern="^Novell NetWare ([\d.]+).*$">
5355
+ <fingerprint pattern="^Novell NetWare ([\d.]+)">
5230
5356
  <description>Novell NetWare - version capture variant</description>
5231
5357
  <example os.version="5.70.08">Novell NetWare 5.70.08 October 3, 2008</example>
5232
5358
  <param pos="0" name="os.certainty" value="0.85"/>
@@ -5251,7 +5377,7 @@ Copyright (c) 1995-2005 by Cisco Systems
5251
5377
  OCE
5252
5378
  ========================================================================-->
5253
5379
 
5254
- <fingerprint pattern="^Oce (NC-\d+h), Firmware Ver.(\d+.\d+)\s+\(\d{1,2}.\d{1,2}.\d{1,2}\),.*$">
5380
+ <fingerprint pattern="^Oce (NC-\d+h), Firmware Ver.(\d+.\d+)\s+\(\d{1,2}.\d{1,2}.\d{1,2}\),">
5255
5381
  <description>Oce NC Series of Print Servers</description>
5256
5382
  <example>Oce NC-6800h, Firmware Ver.1.01 (10.01.08),MID 8C5-D92,FID 2</example>
5257
5383
  <example>Oce NC-6400h, Firmware Ver.1.03 (07.02.27),MID 8C5-B29,FID 2</example>
@@ -5311,7 +5437,7 @@ Copyright (c) 1995-2005 by Cisco Systems
5311
5437
  <param pos="0" name="os.device" value="Multifunction Device"/>
5312
5438
  </fingerprint>
5313
5439
 
5314
- <fingerprint pattern="^Oce, DS60 ([^,]+),.*$">
5440
+ <fingerprint pattern="^Oce, DS60 ([^,]+),">
5315
5441
  <description>Oce DS60 multifunction device</description>
5316
5442
  <example>Oce, DS60 R1.2.0, Smart Imager R8.5.3.22</example>
5317
5443
  <param pos="0" name="os.vendor" value="Oce"/>
@@ -5321,7 +5447,7 @@ Copyright (c) 1995-2005 by Cisco Systems
5321
5447
  <param pos="0" name="os.device" value="Multifunction Device"/>
5322
5448
  </fingerprint>
5323
5449
 
5324
- <fingerprint pattern="^Oce, TDS750 ([^,]+),.*$">
5450
+ <fingerprint pattern="^Oce, TDS750 ([^,]+),">
5325
5451
  <description>Oce TDS750 multifunction device</description>
5326
5452
  <example>Oce, TDS750 R1.1, Power Logic Controller R14.8.1.0_12010481</example>
5327
5453
  <param pos="0" name="os.vendor" value="Oce"/>
@@ -5331,7 +5457,7 @@ Copyright (c) 1995-2005 by Cisco Systems
5331
5457
  <param pos="0" name="os.device" value="Multifunction Device"/>
5332
5458
  </fingerprint>
5333
5459
 
5334
- <fingerprint pattern="^Oce, (ColorWave\S+) ([^,]+),.*$">
5460
+ <fingerprint pattern="^Oce, (ColorWave\S+) ([^,]+),">
5335
5461
  <description>Oce ColorWave multifunction device</description>
5336
5462
  <example>Oce, ColorWave650 R2.0, EmCon R2.0, Network interface</example>
5337
5463
  <param pos="0" name="os.vendor" value="Oce"/>
@@ -5341,7 +5467,7 @@ Copyright (c) 1995-2005 by Cisco Systems
5341
5467
  <param pos="0" name="os.device" value="Multifunction Device"/>
5342
5468
  </fingerprint>
5343
5469
 
5344
- <fingerprint pattern="^Oce, (VarioPrint \S+) ([^,]+),.*$">
5470
+ <fingerprint pattern="^Oce, (VarioPrint \S+) ([^,]+),">
5345
5471
  <description>Oce VarioPrint multifunction device - detailed variant</description>
5346
5472
  <example>Oce, VarioPrint 135 R2.1.0.0, PRISMAsync R13.4.42.7</example>
5347
5473
  <example>Oce, VarioPrint 2045 R3.2, Controller R8.2.15</example>
@@ -5362,7 +5488,7 @@ Copyright (c) 1995-2005 by Cisco Systems
5362
5488
  <param pos="0" name="os.device" value="Multifunction Device"/>
5363
5489
  </fingerprint>
5364
5490
 
5365
- <fingerprint pattern="^Oce (CS\S+).*$">
5491
+ <fingerprint pattern="^Oce (CS\S+)">
5366
5492
  <description>Oce CS Series</description>
5367
5493
  <example>Oce CS2344 /P</example>
5368
5494
  <param pos="0" name="os.vendor" value="Oce"/>
@@ -5371,7 +5497,7 @@ Copyright (c) 1995-2005 by Cisco Systems
5371
5497
  <param pos="0" name="os.device" value="Multifunction Device"/>
5372
5498
  </fingerprint>
5373
5499
 
5374
- <fingerprint pattern="^Oce (\d+\S*).*$">
5500
+ <fingerprint pattern="^Oce (\d+\S*)">
5375
5501
  <description>Oce Device</description>
5376
5502
  <example>Oce 1000C</example>
5377
5503
  <param pos="0" name="os.vendor" value="Oce"/>
@@ -5393,7 +5519,7 @@ Copyright (c) 1995-2005 by Cisco Systems
5393
5519
  NRG
5394
5520
  =======================================================================-->
5395
5521
 
5396
- <fingerprint pattern="^NRG ((?:MP|SP )?\S+|DSm\d+) (?:V|v)?\.?(\S+).*$">
5522
+ <fingerprint pattern="^NRG ((?:MP|SP )?\S+|DSm\d+) (?:V|v)?\.?(\S+)">
5397
5523
  <description>Ricoh NRG network multifunction device</description>
5398
5524
  <example hw.product="SP C312DN" os.version="1.03">NRG SP C312DN V1.03 / NRG Network Printer C model</example>
5399
5525
  <example>NRG MP 3350 1.10 / NRG Network Printer C model / NRG Network Scanner C model</example>
@@ -5439,7 +5565,7 @@ Copyright (c) 1995-2005 by Cisco Systems
5439
5565
  Oki Data
5440
5566
  =======================================================================-->
5441
5567
 
5442
- <fingerprint pattern="^OKI (\S+(?: \S+)?(?: \S+)?) Rev\. \S+ .*Print\s*Server.*$">
5568
+ <fingerprint pattern="^OKI (\S+(?: \S+)?(?: \S+)?) Rev\. \S+ .*Print\s*Server">
5443
5569
  <description>OKI Print Server - rev space variant</description>
5444
5570
  <example>OKI OkiLAN 6400e Rev. 10/100BASE Ethernet PrintServer: Attached to B6250 Rev.8.1: (C)2005 OKI DATA CORP</example>
5445
5571
  <example>OKI OkiLAN 6400e Rev. 10/100BASE Ethernet PrintServer: Attached to B6500 Rev.2.19 C1: (C)2005 OKI DATA CORP</example>
@@ -5450,7 +5576,7 @@ Copyright (c) 1995-2005 by Cisco Systems
5450
5576
  <param pos="1" name="os.product"/>
5451
5577
  </fingerprint>
5452
5578
 
5453
- <fingerprint pattern="^OKI (\S+(?: \S+)?(?: \S+)?) Rev\.(\S+) .*Print\s*Server.*$">
5579
+ <fingerprint pattern="^OKI (\S+(?: \S+)?(?: \S+)?) Rev\.(\S+) .*Print\s*Server">
5454
5580
  <description>OKI Print Server</description>
5455
5581
  <example>OKI FastEther8450e Rev.01.08 10/100BASE Ethernet PrintServer: Attached to B430 Rev.C2.00 : Copyright (c) 2008 Oki Data Corporation. All rights reserved.</example>
5456
5582
  <example>OKI FastEther8450e Rev.08.01 10/100BASE Ethernet PrintServer: Attached to C5650 Rev.M1.02 : Copyright (c) 2007 Oki Data Corporation. All rights reserved.</example>
@@ -5496,14 +5622,28 @@ Copyright (c) 1995-2005 by Cisco Systems
5496
5622
  <example>Palo Alto Networks PA-4000 series firewall</example>
5497
5623
  <param pos="0" name="os.vendor" value="Palo Alto Networks"/>
5498
5624
  <param pos="0" name="os.device" value="Firewall"/>
5499
- <param pos="1" name="os.product"/>
5625
+ <param pos="0" name="os.product" value="PAN-OS"/>
5626
+ <param pos="0" name="os.family" value="PAN-OS"/>
5627
+ <param pos="0" name="os.cpe23" value="cpe:/o:paloaltonetworks:pan-os:-"/>
5628
+ <param pos="0" name="service.vendor" value="Palo Alto Networks"/>
5629
+ <param pos="0" name="service.device" value="Firewall"/>
5630
+ <param pos="0" name="hw.vendor" value="Palo Alto Networks"/>
5631
+ <param pos="0" name="hw.device" value="Firewall"/>
5632
+ <param pos="1" name="hw.product"/>
5500
5633
  </fingerprint>
5501
5634
 
5502
5635
  <fingerprint pattern="^Palo Alto Networks Panorama server$">
5503
5636
  <description>Palo Alto Panorama</description>
5504
5637
  <example>Palo Alto Networks Panorama server</example>
5505
5638
  <param pos="0" name="os.vendor" value="Palo Alto Networks"/>
5506
- <param pos="0" name="os.product" value="Panorama Server"/>
5639
+ <param pos="0" name="os.product" value="PAN-OS"/>
5640
+ <param pos="0" name="os.family" value="PAN-OS"/>
5641
+ <param pos="0" name="os.device" value="Firewall"/>
5642
+ <param pos="0" name="os.cpe23" value="cpe:/o:paloaltonetworks:pan-os:-"/>
5643
+ <param pos="0" name="service.vendor" value="Palo Alto Networks"/>
5644
+ <param pos="0" name="service.product" value="Panorama Server"/>
5645
+ <param pos="0" name="service.device" value="Firewall"/>
5646
+ <param pos="0" name="hw.vendor" value="Palo Alto Networks"/>
5507
5647
  </fingerprint>
5508
5648
 
5509
5649
  <!--======================================================================
@@ -5531,7 +5671,7 @@ Copyright (c) 1995-2005 by Cisco Systems
5531
5671
  PARADYNE
5532
5672
  =======================================================================-->
5533
5673
 
5534
- <fingerprint pattern="^PARADYNE T1 DSU/CSU; model: ([^;]+); S/W Release: ([^;]+); .*$">
5674
+ <fingerprint pattern="^PARADYNE T1 DSU/CSU; model: ([^;]+); S/W Release: ([^;]+);">
5535
5675
  <description>Paradyne CSU/DSU</description>
5536
5676
  <example>PARADYNE T1 DSU/CSU; model: 3165-A4-210; S/W Release: 05.01.16; H/W CCA1: 3996-82C; Serial number: 5796841</example>
5537
5677
  <param pos="0" name="os.certainty" value="1.0"/>
@@ -5541,7 +5681,7 @@ Copyright (c) 1995-2005 by Cisco Systems
5541
5681
  <param pos="2" name="os.version"/>
5542
5682
  </fingerprint>
5543
5683
 
5544
- <fingerprint pattern="^PARADYNE (BitStorm \S+);.*S/W Release: ([^;]+);.*$">
5684
+ <fingerprint pattern="^PARADYNE (BitStorm \S+);.*S/W Release: ([^;]+);">
5545
5685
  <description>Paradyne BitStorm DSLAM</description>
5546
5686
  <example>PARADYNE BitStorm 2600; S/W Release: 02.05.07;</example>
5547
5687
  <example>PARADYNE BitStorm 4800; S/W Release: 01.00.09;</example>
@@ -5553,7 +5693,7 @@ Copyright (c) 1995-2005 by Cisco Systems
5553
5693
  <param pos="2" name="os.version"/>
5554
5694
  </fingerprint>
5555
5695
 
5556
- <fingerprint pattern="^PARADYNE (GranDSLAM \S+);.*S/W Release: ([^;]+);.*$">
5696
+ <fingerprint pattern="^PARADYNE (GranDSLAM \S+);.*S/W Release: ([^;]+);">
5557
5697
  <description>Paradyne GranDSLAM</description>
5558
5698
  <example>PARADYNE GranDSLAM 4200; S/W Release: 02.05.23;</example>
5559
5699
  <param pos="0" name="os.certainty" value="1.0"/>
@@ -5564,7 +5704,7 @@ Copyright (c) 1995-2005 by Cisco Systems
5564
5704
  <param pos="2" name="os.version"/>
5565
5705
  </fingerprint>
5566
5706
 
5567
- <fingerprint pattern="^PARADYNE SHDSL FrameSaver DSL; Model: ([^;]+); S/W Release: ([^;]+);.*$">
5707
+ <fingerprint pattern="^PARADYNE SHDSL FrameSaver DSL; Model: ([^;]+); S/W Release: ([^;]+);">
5568
5708
  <description>Paradyne Frame Relay</description>
5569
5709
  <example>PARADYNE SHDSL FrameSaver DSL; Model: 9788; S/W Release: 02.00.06; NAM CCA number: 4814-80C; Serial number: 6658952</example>
5570
5710
  <param pos="0" name="os.certainty" value="1.0"/>
@@ -5575,7 +5715,7 @@ Copyright (c) 1995-2005 by Cisco Systems
5575
5715
  <param pos="2" name="os.version"/>
5576
5716
  </fingerprint>
5577
5717
 
5578
- <fingerprint pattern="^Paradyne (ATM (?:ReachDSL|ADSL) Unit); Model: ([^;]+);.*S/W Release: ([^;]+);.*$">
5718
+ <fingerprint pattern="^Paradyne (ATM (?:ReachDSL|ADSL) Unit); Model: ([^;]+);.*S/W Release: ([^;]+);">
5579
5719
  <description>Paradyne ATM DSL Unit</description>
5580
5720
  <example os.family="ATM ADSL Unit" os.product="4223-A1-532" os.version="02.03.08">Paradyne ATM ADSL Unit; Model: 4223-A1-532; CCA: 868-5969-8200; S/W Release: 02.03.08; Hardware Revision: 5969-82A; Serial number: 6963727 ;</example>
5581
5721
  <example os.family="ATM ReachDSL Unit" os.product="4211-A1-530" os.version="02.03.04">Paradyne ATM ReachDSL Unit; Model: 4211-A1-530; CCA: 868-5315-8200; S/W Release: 02.03.04; Hardware Revision: 5315-82G; Serial number: 6066448 ;</example>
@@ -5587,7 +5727,7 @@ Copyright (c) 1995-2005 by Cisco Systems
5587
5727
  <param pos="3" name="os.version"/>
5588
5728
  </fingerprint>
5589
5729
 
5590
- <fingerprint pattern="^Paradyne (?:Hot[wW]ire [^;]+); Model: ([^;]+);.*S/W Release: ([^;]+);.*$">
5730
+ <fingerprint pattern="^Paradyne (?:Hot[wW]ire [^;]+); Model: ([^;]+);.*S/W Release: ([^;]+);">
5591
5731
  <description>Paradyne HotWire</description>
5592
5732
  <example os.product="8546-B1-000" os.version="02.03.15">Paradyne Hotwire DSL4; Model: 8546-B1-000; Card: R4IP; S/W Release: 02.03.15; H/W Revision: 1004-80A; Serial number: 7HMOC</example>
5593
5733
  <example os.product="8000-B1-000" os.version="02.00.22">Paradyne HotWire MCC; Model: 8000-B1-000; Card: MC-M; S/W Release: 02.00.22; H/W Revision: 1010-80A; Serial number: 7HHJR</example>
@@ -5720,7 +5860,7 @@ Copyright (c) 1995-2005 by Cisco Systems
5720
5860
  RedBack Networks
5721
5861
  =======================================================================-->
5722
5862
 
5723
- <fingerprint pattern="^Red[bB]ack Networks AOS Release (\S+) .* Copyright.*$">
5863
+ <fingerprint pattern="^Red[bB]ack Networks AOS Release (\S+) .* Copyright">
5724
5864
  <description>Redback networks AOS</description>
5725
5865
  <example>RedBack Networks AOS Release 3.1.6.18 PRODUCTION MAINTENANCE RELEASE Copyright (c) 1997-2001 by RedBack Networks, Inc. Compiled 2001-Oct-24 19:56:11 GMT by wheatley</example>
5726
5866
  <example>Redback Networks AOS Release 5.0.6.10 MAINTENANCE RELEASE Copyright (c) 1997-2002 by Redback Networks, Inc. Compiled 2002-Sep-20 20:53:18 GMT by wheatley</example>
@@ -5737,7 +5877,7 @@ Copyright (c) 1995-2005 by Cisco Systems
5737
5877
  <param pos="1" name="os.version"/>
5738
5878
  </fingerprint>
5739
5879
 
5740
- <fingerprint pattern="^Redback Networks SmartEdge OS Version SEOS-(.*?) Built by .*$">
5880
+ <fingerprint pattern="^Redback Networks SmartEdge OS Version SEOS-(.*?) Built by">
5741
5881
  <description>Redback SmartEdge</description>
5742
5882
  <example>Redback Networks SmartEdge OS Version SEOS-11.1.2.3p1-Release Built by sysbuild@SWB-node04 Fri Dec 23 11:47:30 PST 2011 Copyright (C) 1998-2011, Redback Networks Inc. All rights reserved.</example>
5743
5883
  <example>Redback Networks SmartEdge OS Version SEOS-11.1.2.3p3-Release Built by sysbuild@SWB-node06 Thu Feb 16 16:39:21 PST 2012 Copyright (C) 1998-2012, Redback Networks Inc. All rights reserved.</example>
@@ -5753,7 +5893,7 @@ Copyright (c) 1995-2005 by Cisco Systems
5753
5893
  RICOH
5754
5894
  =======================================================================-->
5755
5895
 
5756
- <fingerprint pattern="^RICOH Aficio ((?:[MS]P )?\S+) ([0-9\.a-zA-Z]+) .*$">
5896
+ <fingerprint pattern="^RICOH Aficio ((?:[MS]P )?\S+) ([0-9\.a-zA-Z]+) ">
5757
5897
  <description>Ricoh Aficio multifunction device</description>
5758
5898
  <example>RICOH Aficio 1022 5.20 / RICOH Network Printer C model / RICOH Network Facsimile C model</example>
5759
5899
  <example>RICOH Aficio 1232C 2.07.2 / RICOH Network Printer C model / RICOH Network Scanner C model / RICOH Network Facsimile C model</example>
@@ -5798,7 +5938,7 @@ Copyright (c) 1995-2005 by Cisco Systems
5798
5938
  <param pos="1" name="os.product"/>
5799
5939
  </fingerprint>
5800
5940
 
5801
- <fingerprint pattern="^RICOH Aficio (\S+) /.*$">
5941
+ <fingerprint pattern="^RICOH Aficio (\S+) /">
5802
5942
  <description>Generic Ricoh Aficio multifunction device - variant 2</description>
5803
5943
  <example>RICOH Aficio 1013 / RICOH Network Printer D model</example>
5804
5944
  <param pos="0" name="os.vendor" value="Ricoh"/>
@@ -5807,7 +5947,7 @@ Copyright (c) 1995-2005 by Cisco Systems
5807
5947
  <param pos="1" name="os.product"/>
5808
5948
  </fingerprint>
5809
5949
 
5810
- <fingerprint pattern="^RICOH imagio (\S+ \S+|\S+) (\d+\S+) /.*$">
5950
+ <fingerprint pattern="^RICOH imagio (\S+ \S+|\S+) (\d+\S+) /">
5811
5951
  <description>Generic Ricoh Imagio multifunction device</description>
5812
5952
  <example>RICOH imagio MP C6001 1.04 / RICOH Network Printer C model / RICOH Network Scanner C model</example>
5813
5953
  <example>RICOH imagio MP C6001 1.05.1 / RICOH Network Printer C model / RICOH Network Scanner C model</example>
@@ -5821,7 +5961,7 @@ Copyright (c) 1995-2005 by Cisco Systems
5821
5961
  <param pos="2" name="os.version"/>
5822
5962
  </fingerprint>
5823
5963
 
5824
- <fingerprint pattern="^RICOH IPS[Ii]O (\S+) (\S+) /.*$">
5964
+ <fingerprint pattern="^RICOH IPS[Ii]O (\S+) (\S+) /">
5825
5965
  <description>Generic Ricoh IPSIO multifunction device</description>
5826
5966
  <example>RICOH IPSiO NX96e 1.01 / RICOH Network Printer C model</example>
5827
5967
  <param pos="0" name="os.vendor" value="Ricoh"/>
@@ -5831,7 +5971,7 @@ Copyright (c) 1995-2005 by Cisco Systems
5831
5971
  <param pos="2" name="os.version"/>
5832
5972
  </fingerprint>
5833
5973
 
5834
- <fingerprint pattern="^RICOH IPS[Ii]O (\S+ \S+) (?:Ver )?[Vv]?(\S+) /.*$">
5974
+ <fingerprint pattern="^RICOH IPS[Ii]O (\S+ \S+) (?:Ver )?[Vv]?(\S+) /">
5835
5975
  <description>Generic Ricoh IPSIO multifunction device - variant 1</description>
5836
5976
  <example os.product="SP C301SF" os.version="1.26">RICOH IPSiO SP C301SF v1.26 / RICOH Network Printer C model /RICOH Network Scanner C model /RICOH Network Facsimile C model</example>
5837
5977
  <example os.product="SP C310" os.version="1.00">RICOH IPSiO SP C310 1.00 / RICOH Network Printer C model</example>
@@ -5843,7 +5983,7 @@ Copyright (c) 1995-2005 by Cisco Systems
5843
5983
  <param pos="2" name="os.version"/>
5844
5984
  </fingerprint>
5845
5985
 
5846
- <fingerprint pattern="^RICOH Pro (\S+) (\S+) /.*$">
5986
+ <fingerprint pattern="^RICOH Pro (\S+) (\S+) /">
5847
5987
  <description>Generic Ricoh Pro multifunction device</description>
5848
5988
  <example>RICOH Pro 907EX 1.02 / RICOH Network Printer C model / RICOH Network Scanner C model</example>
5849
5989
  <param pos="0" name="os.vendor" value="Ricoh"/>
@@ -5935,7 +6075,7 @@ Copyright (c) 1995-2005 by Cisco Systems
5935
6075
  SINDORICOH MF 4550_5550 version NR2.APS.N016 kernel 2.6.18.5 All-N-1
5936
6076
  -->
5937
6077
 
5938
- <fingerprint pattern="^Gestetner (\S+) (\S+) / Gestetner Network Printer.*$">
6078
+ <fingerprint pattern="^Gestetner (\S+) (\S+) / Gestetner Network Printer">
5939
6079
  <description>Gestetner Network Printer</description>
5940
6080
  <example>Gestetner C7640nD 1.01 / Gestetner Network Printer C model</example>
5941
6081
  <param pos="0" name="os.vendor" value="Ricoh"/>
@@ -5975,7 +6115,7 @@ Copyright (c) 1995-2005 by Cisco Systems
5975
6115
  <param pos="1" name="os.product"/>
5976
6116
  </fingerprint>
5977
6117
 
5978
- <fingerprint pattern="^(?:IBM )?InfoPrint (?:\(v\d+\) )?(\d+\S+).*$">
6118
+ <fingerprint pattern="^(?:IBM )?InfoPrint (?:\(v\d+\) )?(\d+\S+)">
5979
6119
  <description>IBM Infoprint Printer</description>
5980
6120
  <example>IBM InfoPrint (v1) 21</example>
5981
6121
  <example>InfoPrint 4247-Z03</example>
@@ -6023,6 +6163,34 @@ Copyright (c) 1995-2005 by Cisco Systems
6023
6163
  <param pos="0" name="os.device" value="Router"/>
6024
6164
  </fingerprint>
6025
6165
 
6166
+ <fingerprint pattern="^(CSS\S+) SwOS v(\S+)$">
6167
+ <description>MikroTik Swtich</description>
6168
+ <example hw.product="CSS326-24G-2S+" os.version="2.13">CSS326-24G-2S+ SwOS v2.13</example>
6169
+ <param pos="0" name="os.vendor" value="MikroTik"/>
6170
+ <param pos="0" name="os.device" value="Switch"/>
6171
+ <param pos="0" name="os.product" value="SwOS"/>
6172
+ <param pos="0" name="hw.vendor" value="MikroTik"/>
6173
+ <param pos="0" name="hw.device" value="Switch"/>
6174
+ <param pos="1" name="hw.product"/>
6175
+ <param pos="2" name="os.version"/>
6176
+ </fingerprint>
6177
+
6178
+ <!--======================================================================
6179
+ NVIDIA
6180
+ =======================================================================-->
6181
+
6182
+ <fingerprint pattern="^Onyx,(MSN\S+),SWv(\S+)$">
6183
+ <description>NVIDIA MSN Switch</description>
6184
+ <example hw.product="MSN2700" os.version="3.9.3202">Onyx,MSN2700,SWv3.9.3202</example>
6185
+ <param pos="0" name="os.vendor" value="NVIDIA"/>
6186
+ <param pos="0" name="os.product" value="Onyx"/>
6187
+ <param pos="0" name="os.device" value="Switch"/>
6188
+ <param pos="0" name="hw.vendor" value="NVIDIA"/>
6189
+ <param pos="0" name="hw.device" value="Switch"/>
6190
+ <param pos="1" name="hw.product"/>
6191
+ <param pos="2" name="os.version"/>
6192
+ </fingerprint>
6193
+
6026
6194
  <!--======================================================================
6027
6195
  SAVIN
6028
6196
  =======================================================================-->
@@ -6037,7 +6205,7 @@ Copyright (c) 1995-2005 by Cisco Systems
6037
6205
  <param pos="1" name="os.product"/>
6038
6206
  </fingerprint>
6039
6207
 
6040
- <fingerprint pattern="^SAVIN ((?:\S+ )?\S+) (\d\S+) / .*$">
6208
+ <fingerprint pattern="^SAVIN ((?:\S+ )?\S+) (\d\S+) /">
6041
6209
  <description>Savin Printer - version variant</description>
6042
6210
  <example>SAVIN 2522 5.20 / SAVIN Network Printer C model / SAVIN Network Scanner C model / SAVIN Network Facsimile C model</example>
6043
6211
  <example>SAVIN 9922DP 1.4.9 / RICOH Network Printer C model</example>
@@ -6053,7 +6221,7 @@ Copyright (c) 1995-2005 by Cisco Systems
6053
6221
  Samsung
6054
6222
  =======================================================================-->
6055
6223
 
6056
- <fingerprint pattern="^Samsung(?: Samsung)? ([^;\s]+)(?: \d\S+)?(?: Series)?(?: Series)?;?\s*(?:OS )?V?([^\;\s]+)\s?.*?;.*Engine.*$">
6224
+ <fingerprint pattern="^Samsung(?: Samsung)? ([^;\s]+)(?: \d\S+)?(?: Series)?(?: Series)?;?\s*(?:OS )?V?([^\;\s]+)\s?.*?;.*Engine">
6057
6225
  <description>Samsung Printer</description>
6058
6226
  <example>Samsung CLP-300; CLP300N_V1.01.02.01 11-15-2006;Engine 1.01.57;NIC V4.01.06(CLP-300) 11-03-2006;S/N XXXXXXXXXXXXXXXX</example>
6059
6227
  <example>Samsung Samsung SCX-470x Series; V3.00.01.04 SEP-16-2011;Engine V1.02.05 09-02-2011;NIC V6.01.00;S/N XXXXXXXXXXXXXXXX</example>
@@ -6073,7 +6241,7 @@ Copyright (c) 1995-2005 by Cisco Systems
6073
6241
  <param pos="1" name="os.product"/>
6074
6242
  </fingerprint>
6075
6243
 
6076
- <fingerprint pattern="^Samsung (CLP-705) Series; ; S/N.*$">
6244
+ <fingerprint pattern="^Samsung (CLP-705) Series; ; S/N">
6077
6245
  <description>Samsung Printer - serial number variant</description>
6078
6246
  <example>Samsung CLP-705 Series; ; S/N XXXXXXXXXXXXXXXX</example>
6079
6247
  <param pos="0" name="os.vendor" value="Samsung"/>
@@ -6094,6 +6262,7 @@ Copyright (c) 1995-2005 by Cisco Systems
6094
6262
  <param pos="0" name="os.vendor" value="SonicWall"/>
6095
6263
  <param pos="0" name="os.device" value="Firewall"/>
6096
6264
  <param pos="0" name="os.product" value="SonicOS"/>
6265
+ <param pos="0" name="hw.vendor" value="SonicWall"/>
6097
6266
  <param pos="1" name="hw.product"/>
6098
6267
  <param pos="2" name="hw.model"/>
6099
6268
  <param pos="3" name="os.version"/>
@@ -6107,6 +6276,7 @@ Copyright (c) 1995-2005 by Cisco Systems
6107
6276
  <param pos="0" name="os.vendor" value="SonicWall"/>
6108
6277
  <param pos="0" name="os.device" value="Firewall"/>
6109
6278
  <param pos="0" name="os.product" value="SonicOS"/>
6279
+ <param pos="0" name="hw.vendor" value="SonicWall"/>
6110
6280
  <param pos="1" name="hw.product"/>
6111
6281
  <param pos="2" name="os.version"/>
6112
6282
  <param pos="0" name="os.cpe23" value="cpe:/o:sonicwall:sonicos:{os.version}"/>
@@ -6126,6 +6296,7 @@ Copyright (c) 1995-2005 by Cisco Systems
6126
6296
  <param pos="0" name="os.device" value="Firewall"/>
6127
6297
  <param pos="0" name="os.product" value="SonicOS"/>
6128
6298
  <param pos="0" name="os.cpe23" value="cpe:/o:sonicwall:sonicos:-"/>
6299
+ <param pos="0" name="hw.vendor" value="SonicWall"/>
6129
6300
  <param pos="1" name="hw.family"/>
6130
6301
  <param pos="2" name="hw.product"/>
6131
6302
  </fingerprint>
@@ -6178,7 +6349,7 @@ Copyright (c) 1995-2005 by Cisco Systems
6178
6349
  SGI
6179
6350
  =======================================================================-->
6180
6351
 
6181
- <fingerprint pattern="^.* IRIX (?:version )?(\d+\S+).*$">
6352
+ <fingerprint pattern="^.{0,256} IRIX (?:version )?(\d+\S+)">
6182
6353
  <description>SGI IRIX</description>
6183
6354
  <example os.version="6.5">Silicon Graphics IRIS Indigo2 running IRIX version 6.5</example>
6184
6355
  <example os.version="5.3">Silicon Graphics IRIS Indigo2 Elan running IRIX 5.3</example>
@@ -6193,7 +6364,7 @@ Copyright (c) 1995-2005 by Cisco Systems
6193
6364
  <param pos="0" name="os.cpe23" value="cpe:/o:sgi:irix:{os.version}"/>
6194
6365
  </fingerprint>
6195
6366
 
6196
- <fingerprint pattern="^.* IRIX64 (?:version )?(\d+\S+).*$">
6367
+ <fingerprint pattern="^.{0,256} IRIX64 (?:version )?(\d+\S+)">
6197
6368
  <description>SGI IRIX64</description>
6198
6369
  <example os.version="6.5">Silicon Graphics Challenge/1 running IRIX64 6.5</example>
6199
6370
  <example os.version="6.5">Silicon Graphics Fuel running IRIX64 version 6.5</example>
@@ -6301,7 +6472,7 @@ Copyright (c) 1995-2005 by Cisco Systems
6301
6472
  <param pos="1" name="os.product"/>
6302
6473
  </fingerprint>
6303
6474
 
6304
- <fingerprint pattern="^Siemens (\S+)\s+(.*?Router) \(([^\)]+)\) v?(\S+)\s*.*$">
6475
+ <fingerprint pattern="^Siemens (\S+)\s+(.*?Router) \(([^\)]+)\) v?(\S+)\s*">
6305
6476
  <description>Siemens Router</description>
6306
6477
  <example>Siemens 5830 DMT Router (5830-001) v6.1.120 Copyright (C) 2004 Siemens Subscriber Networks, Inc. All Rights Reserved</example>
6307
6478
  <example>Siemens 5851 SDSL [ATM] Router (5851-648) v6.1.140 Copyright (C) 2004 Siemens Subscriber Networks, Inc. All Rights Reserved</example>
@@ -6314,7 +6485,7 @@ Copyright (c) 1995-2005 by Cisco Systems
6314
6485
  <param pos="3" name="siemens.model"/>
6315
6486
  </fingerprint>
6316
6487
 
6317
- <fingerprint pattern="^Siemens (\S+)\s+(.*?)\s+\(([^\)]+)\) Router .*?v(\d+\S+)\s+.*$">
6488
+ <fingerprint pattern="^Siemens (\S+)\s+(.*?)\s+\(([^\)]+)\) Router .*?v(\d+\S+)\s+">
6318
6489
  <description>Siemens Router - variant 1</description>
6319
6490
  <example>Siemens 7950 G.SHDSL [ATM] (7950-001) Router with ISDN Voice v6.1.077 All Rights Reserved</example>
6320
6491
  <param pos="0" name="os.vendor" value="Siemens"/>
@@ -6325,7 +6496,7 @@ Copyright (c) 1995-2005 by Cisco Systems
6325
6496
  <param pos="3" name="siemens.model"/>
6326
6497
  </fingerprint>
6327
6498
 
6328
- <fingerprint pattern="^Siemens, SIMATIC HMI, ([^,]+),.*FW:\s*V([^,]+).*$">
6499
+ <fingerprint pattern="^Siemens, SIMATIC HMI, ([^,]+),.*FW:\s*V([^,]+)">
6329
6500
  <description>Siemens HMI - firmware variant</description>
6330
6501
  <example hw.product="KTP1000 Basic PN">Siemens, SIMATIC HMI, KTP1000 Basic PN, 6AV6 647-0AF11-3AX0, HW: 1, FW: V01.06.00, Revision: 1</example>
6331
6502
  <example hw.version="01.06.00">Siemens, SIMATIC HMI, KTP600 Basic Mono PN, 6AV6647-0AB11-3AX0, HW:1, FW:V01.06.00</example>
@@ -6342,7 +6513,7 @@ Copyright (c) 1995-2005 by Cisco Systems
6342
6513
  <param pos="2" name="hw.version"/>
6343
6514
  </fingerprint>
6344
6515
 
6345
- <fingerprint pattern="^Siemens, SIMATIC HMI, ([^,]+),.*SW:\s*V\s*(\d+ \d+ \d+).*$">
6516
+ <fingerprint pattern="^Siemens, SIMATIC HMI, ([^,]+),.*SW:\s*V\s*(\d+ \d+ \d+)">
6346
6517
  <description>Siemens HMI</description>
6347
6518
  <example hw.product="MP177">Siemens, SIMATIC HMI, MP177, 6AV6 642-0EA01-3AX0, HW: 0, SW: V 1 0 0</example>
6348
6519
  <example hw.version="1 0 2">Siemens, SIMATIC HMI, TP177B, 6AV6 642-0BD01-3AX0, HW: 0, SW: V 1 0 2</example>
@@ -6361,7 +6532,7 @@ Copyright (c) 1995-2005 by Cisco Systems
6361
6532
  <param pos="2" name="hw.version"/>
6362
6533
  </fingerprint>
6363
6534
 
6364
- <fingerprint pattern="^Siemens, SIMATIC NET, ([^,]+),.*FW:\s*(?:Version )?V?([^,]+).*$">
6535
+ <fingerprint pattern="^Siemens, SIMATIC NET, ([^,]+),.*FW:\s*(?:Version )?V?([^,]+)">
6365
6536
  <description>Siemens NET - verbose variant</description>
6366
6537
  <example hw.product="CP 343-1 Advanced" hw.version="1.2.3">Siemens, SIMATIC NET, CP 343-1 Advanced, 6GK7 343-1GX30-0XE0, HW: Version 3, FW: Version V1.2.3, VPB9502953</example>
6367
6538
  <example hw.product="CP 343-1 Lean" hw.version="2.6.0">Siemens, SIMATIC NET, CP 343-1 Lean, 6GK7 343-1CX10-0XE0, HW: Version 6, FW: Version V2.6.0, VPC3513639</example>
@@ -6393,7 +6564,7 @@ Copyright (c) 1995-2005 by Cisco Systems
6393
6564
  <param pos="2" name="hw.version"/>
6394
6565
  </fingerprint>
6395
6566
 
6396
- <fingerprint pattern="^Siemens, SIMATIC S7, ([^,]+), .*?FW: (?:Version )?V?\.?([^,]+).*$">
6567
+ <fingerprint pattern="^Siemens, SIMATIC S7, ([^,]+), .*?FW: (?:Version )?V?\.?([^,]+)">
6397
6568
  <description>Siemens S7</description>
6398
6569
  <example hw.product="CPU-1200" hw.version="2.0.2">Siemens, SIMATIC S7, CPU-1200, 6ES7 211-1BD30-0XB0, HW: 1, FW: V.2.0.2, SZVX8YU9000553</example>
6399
6570
  <example hw.product="CPU315-2 PN/DP" hw.version="2.5.0">Siemens, SIMATIC S7, CPU315-2 PN/DP, 6ES7 315-2EH13-0AB0 , HW: 3, FW: V2.5.0, S C-V4P07826200</example>
@@ -6406,7 +6577,7 @@ Copyright (c) 1995-2005 by Cisco Systems
6406
6577
  <param pos="2" name="hw.version"/>
6407
6578
  </fingerprint>
6408
6579
 
6409
- <fingerprint pattern="^Siemens, SIMATIC S7, ([^,]+), .*?, V\.([^,]+).*$">
6580
+ <fingerprint pattern="^Siemens, SIMATIC S7, ([^,]+), .*?, V\.([^,]+)">
6410
6581
  <description>Siemens S7 - variant 1</description>
6411
6582
  <example hw.product="CPU-1200">Siemens, SIMATIC S7, CPU-1200, 6ES7 212-1BD30-0XB0 SZVA1YU6008610 , 1, V.1.0.1, SZVA1YU6008610</example>
6412
6583
  <example hw.version="1.0.1">Siemens, SIMATIC S7, CPU-1200, 6ES7 212-1HD30-0XB0 SZVA3YU7002312 , 1, V.1.0.1, SZVA3YU7002312</example>
@@ -6429,7 +6600,7 @@ Copyright (c) 1995-2005 by Cisco Systems
6429
6600
  <param pos="1" name="hw.product"/>
6430
6601
  </fingerprint>
6431
6602
 
6432
- <fingerprint pattern="^Siemens, SINUMERIK, solution line ([^,]+),.*?FW:V([^,]+).*$">
6603
+ <fingerprint pattern="^Siemens, SINUMERIK, solution line ([^,]+),.*?FW:V([^,]+)">
6433
6604
  <description>Siemens Sinumerik Solution Line</description>
6434
6605
  <example hw.product="PCU50">Siemens, SINUMERIK, solution line PCU50, , HW:1, FW:V00.00.00,</example>
6435
6606
  <example hw.version="00.00.00">Siemens, SINUMERIK, solution line PCU50.3B-P 1GB XP, 6FC5210-0DF33-2AB0, HW:A, FW:V00.00.00, ST-BN2040231</example>
@@ -6672,7 +6843,7 @@ Copyright (c) 1995-2005 by Cisco Systems
6672
6843
  <param pos="0" name="os.cpe23" value="cpe:/o:sun:solaris:-"/>
6673
6844
  </fingerprint>
6674
6845
 
6675
- <fingerprint pattern="^Sun SNMP Agent,.*$">
6846
+ <fingerprint pattern="^Sun SNMP Agent,">
6676
6847
  <description>Sun SNMP agent on unknown Sun hardware</description>
6677
6848
  <example>Sun SNMP Agent, Ultra-whatever</example>
6678
6849
  <example>Sun SNMP Agent,</example>
@@ -6692,7 +6863,7 @@ Copyright (c) 1995-2005 by Cisco Systems
6692
6863
  <param pos="0" name="os.device" value="Storage"/>
6693
6864
  </fingerprint>
6694
6865
 
6695
- <fingerprint pattern="^SunOS 5\.([789]|10) (\S+) sparc SUNW,([^,]+),.*$">
6866
+ <fingerprint pattern="^SunOS 5\.([789]|10) (\S+) sparc SUNW,([^,]+),">
6696
6867
  <description>SunOS/Solaris 5.7-5.10 - Call Manager variant</description>
6697
6868
  <example os.version="10" os.arch="sun4u" hw.product="Sun-Fire-V210">SunOS 5.10 sun4u sparc SUNW,Sun-Fire-V210, Class 4 Call Manager</example>
6698
6869
  <example>SunOS 5.10 sun4u sparc SUNW,Sun-Fire-V210, Class 5 Call Manager</example>
@@ -6714,7 +6885,7 @@ Copyright (c) 1995-2005 by Cisco Systems
6714
6885
  <param pos="3" name="hw.product"/>
6715
6886
  </fingerprint>
6716
6887
 
6717
- <fingerprint pattern="^SunOS 5\.(1[1-9]) (\S+) sparc SUNW,([^,]+),.*$">
6888
+ <fingerprint pattern="^SunOS 5\.(1[1-9]) (\S+) sparc SUNW,([^,]+),">
6718
6889
  <description>Oracle/Solaris 5.11 and upwards - Call Manager variant</description>
6719
6890
  <example os.version="11" os.arch="sun4u" hw.product="Sun-Fire-V210">SunOS 5.11 sun4u sparc SUNW,Sun-Fire-V210, Class 4 Call Manager</example>
6720
6891
  <example os.version="12" os.arch="sun4u" hw.product="Sun-Fire-V210">SunOS 5.12 sun4u sparc SUNW,Sun-Fire-V210, Class 4 Call Manager</example>
@@ -6728,7 +6899,7 @@ Copyright (c) 1995-2005 by Cisco Systems
6728
6899
  <param pos="3" name="hw.product"/>
6729
6900
  </fingerprint>
6730
6901
 
6731
- <fingerprint pattern="^SunOS (\S+) 5\.([789]|10) \S+ (\S+) \S+ SUNW,([^,]+).*$">
6902
+ <fingerprint pattern="^SunOS (\S+) 5\.([789]|10) \S+ (\S+) \S+ SUNW,([^,]+)">
6732
6903
  <description>SunOS/Solaris 5.7-5.10 - SUNW variant</description>
6733
6904
  <example host.name="integra01" os.version="10" os.arch="sun4v" hw.product="T5240">SunOS integra01 5.10 Generic_127127-11 sun4v sparc SUNW,T5240</example>
6734
6905
  <example>SunOS integra02 5.10 Generic_127127-11 sun4v sparc SUNW,T5240</example>
@@ -6748,7 +6919,7 @@ Copyright (c) 1995-2005 by Cisco Systems
6748
6919
  <param pos="4" name="hw.product"/>
6749
6920
  </fingerprint>
6750
6921
 
6751
- <fingerprint pattern="^SunOS (\S+) 5\.(1[1-9]) \S+ (\S+) \S+ SUNW,([^,]+).*$">
6922
+ <fingerprint pattern="^SunOS (\S+) 5\.(1[1-9]) \S+ (\S+) \S+ SUNW,([^,]+)">
6752
6923
  <description>Oracle/Solaris 5.11 and upwards - SUNW variant</description>
6753
6924
  <example host.name="integra01" os.version="11" os.arch="sun4v" hw.product="T5240">SunOS integra01 5.11 Generic_127127-11 sun4v sparc SUNW,T5240</example>
6754
6925
  <example host.name="integra01" os.version="12" os.arch="sun4v" hw.product="T5240">SunOS integra01 5.12 Generic_127127-11 sun4v sparc SUNW,T5240</example>
@@ -6854,7 +7025,7 @@ Copyright (c) 1995-2005 by Cisco Systems
6854
7025
  <param pos="0" name="os.device" value="WAP"/>
6855
7026
  </fingerprint>
6856
7027
 
6857
- <fingerprint pattern="^Symbol ((?:Spectrum24 (?:FHSS|Ethernet) )?Access Point)[,-].*S/W rev:\s*(\S+).*$">
7028
+ <fingerprint pattern="^Symbol ((?:Spectrum24 (?:FHSS|Ethernet) )?Access Point)[,-].*S/W rev:\s*(\S+)">
6858
7029
  <description>Symbol Access Point - detailed variant</description>
6859
7030
  <example os.product="Access Point" os.version="02.70-06">Symbol Access Point, S/W rev:- S/W rev: 02.70-06</example>
6860
7031
  <example os.product="Access Point" os.version="02.21-01">Symbol Access Point, S/W rev:02.21-01</example>
@@ -6866,7 +7037,7 @@ Copyright (c) 1995-2005 by Cisco Systems
6866
7037
  <param pos="2" name="os.version"/>
6867
7038
  </fingerprint>
6868
7039
 
6869
- <fingerprint pattern="^Symbol (AP\S+|WS\S+) .* SW=(\S+) .*$">
7040
+ <fingerprint pattern="^Symbol (AP\S+|WS\S+) .* SW=(\S+)">
6870
7041
  <description>Symbol Access Point - abreviated variant</description>
6871
7042
  <example>Symbol AP-7131 HW=E SW=4.0.3.0-010R MIB=01h18</example>
6872
7043
  <example>Symbol AP5131 HW=A SW=0.0-045R MIB=01b15</example>
@@ -6896,7 +7067,7 @@ Copyright (c) 1995-2005 by Cisco Systems
6896
7067
  Troy
6897
7068
  =======================================================================-->
6898
7069
 
6899
- <fingerprint pattern="^(?:\S+ )?PocketPro.*$">
7070
+ <fingerprint pattern="^(?:\S+ )?PocketPro">
6900
7071
  <description>Troy PocketPro Print Server</description>
6901
7072
  <example>PocketPro</example>
6902
7073
  <example>PocketPro 100</example>
@@ -6923,11 +7094,105 @@ Copyright (c) 1995-2005 by Cisco Systems
6923
7094
  <param pos="0" name="os.device" value="Multifunction Device"/>
6924
7095
  </fingerprint>
6925
7096
 
7097
+ <fingerprint pattern="^TOSHIBA TEC (B\S+)$">
7098
+ <description>Toshiba TEC Printer</description>
7099
+ <example>TOSHIBA TEC B-FV4</example>
7100
+ <param pos="0" name="hw.vendor" value="Toshiba"/>
7101
+ <param pos="0" name="hw.device" value="Printer"/>
7102
+ <param pos="1" name="hw.product"/>
7103
+ </fingerprint>
7104
+
7105
+ <!--======================================================================
7106
+ TRUENAS / FREENAS
7107
+ =======================================================================-->
7108
+
7109
+ <fingerprint pattern="^(TrueNAS|FreeNAS)-(\S+) \((?:\S+)\)\. Hardware: (\S+) ">
7110
+ <description>TrueNAS/FreeNAS Device</description>
7111
+ <example os.product="FreeNAS" os.version="11.3-U3.2">FreeNAS-11.3-U3.2 (1e9dd3b3e2). Hardware: amd64 Intel(R) Xeon(R) CPU E3-1230 v6 @ 3.50GHz running at 3504. Software: FreeBSD 11.3-RELEASE-p9 (revision 199506)</example>
7112
+ <example os.product="TrueNAS" os.version="12.0-U4.1">TrueNAS-12.0-U4.1 (fb0389beb0). Hardware: amd64 Intel(R) Xeon(R) CPU E5-1620 v3 @ 3.50GHz running at 3491 MHz. Software: FreeBSD 12.2-RELEASE-p6 (revision 199506)</example>
7113
+ <param pos="0" name="os.certainty" value="0.9"/>
7114
+ <param pos="0" name="os.vendor" value="iXsystems"/>
7115
+ <param pos="0" name="os.device" value="NAS"/>
7116
+ <param pos="0" name="hw.device" value="NAS"/>
7117
+ <param pos="1" name="os.product"/>
7118
+ <param pos="2" name="os.version"/>
7119
+ <param pos="3" name="os.arch"/>
7120
+ </fingerprint>
7121
+
7122
+ <!--======================================================================
7123
+ UBIQUITI
7124
+ =======================================================================-->
7125
+
7126
+ <fingerprint pattern="^(UAP-[^\s]+) ([0-9][.a-zA-Z0-9\-]+)$">
7127
+ <description>Ubiquiti Wireless UAP</description>
7128
+ <example hw.product="UAP-AC-Mesh-Pro" hw.version="4.3.20.11298">UAP-AC-Mesh-Pro 4.3.20.11298</example>
7129
+ <param pos="0" name="hw.vendor" value="Ubiquiti"/>
7130
+ <param pos="0" name="hw.device" value="WAP"/>
7131
+ <param pos="1" name="hw.product"/>
7132
+ <param pos="2" name="hw.version"/>
7133
+ <param pos="0" name="os.vendor" value="Ubiquiti"/>
7134
+ <param pos="0" name="os.family" value="Linux"/>
7135
+ <param pos="0" name="os.device" value="WAP"/>
7136
+ </fingerprint>
7137
+
7138
+ <fingerprint pattern="^(EdgeSwitch [^,]+), ([0-9][.a-zA-Z0-9\-]+), Linux ([0-9][.a-zA-Z0-9\-]+)">
7139
+ <description>Ubiquiti EdgeSwitch w/Version and Linux version</description>
7140
+ <example hw.product="EdgeSwitch 48-Port Lite" hw.version="1.8.1.5145168" os.version="3.6.5-1b505fb7">EdgeSwitch 48-Port Lite, 1.8.1.5145168, Linux 3.6.5-1b505fb7, 1.1.0.5102011</example>
7141
+ <param pos="0" name="hw.vendor" value="Ubiquiti"/>
7142
+ <param pos="0" name="hw.device" value="Switch"/>
7143
+ <param pos="1" name="hw.product"/>
7144
+ <param pos="2" name="hw.version"/>
7145
+ <param pos="0" name="os.vendor" value="Ubiquiti"/>
7146
+ <param pos="0" name="os.family" value="Linux"/>
7147
+ <param pos="0" name="os.device" value="Switch"/>
7148
+ <param pos="3" name="os.version"/>
7149
+ </fingerprint>
7150
+
7151
+ <fingerprint pattern="^(USW GigaBit Ethernet Switch), firmware v?([0-9][.a-zA-Z0-9\-]+)$">
7152
+ <description>Ubiquiti GigaBit Ethernet Switch w/Version</description>
7153
+ <example hw.product="USW GigaBit Ethernet Switch" hw.version="5.34.0.12180">USW GigaBit Ethernet Switch, firmware 5.34.0.12180</example>
7154
+ <example hw.product="USW GigaBit Ethernet Switch" hw.version="4.3.20.1129">USW GigaBit Ethernet Switch, firmware v4.3.20.1129</example>
7155
+ <param pos="0" name="hw.vendor" value="Ubiquiti"/>
7156
+ <param pos="0" name="hw.device" value="Switch"/>
7157
+ <param pos="1" name="hw.product"/>
7158
+ <param pos="2" name="hw.version"/>
7159
+ <param pos="0" name="os.vendor" value="Ubiquiti"/>
7160
+ <param pos="0" name="os.family" value="Linux"/>
7161
+ <param pos="0" name="os.device" value="Switch"/>
7162
+ </fingerprint>
7163
+
7164
+ <fingerprint pattern="^(US[W]?-[^\s]+), ([0-9][.a-zA-Z0-9\-]+), Linux ([0-9][.a-zA-Z0-9\-]+)$">
7165
+ <description>Ubiquiti Switch w/Version and Linux version</description>
7166
+ <example hw.product="USW-8P-60" hw.version="4.3.20.11298" os.version="3.6.5">USW-8P-60, 4.3.20.11298, Linux 3.6.5</example>
7167
+ <example hw.product="US-24-500W" hw.version="5.43.36.12724" os.version="3.6.5">US-24-500W, 5.43.36.12724, Linux 3.6.5</example>
7168
+ <param pos="0" name="hw.vendor" value="Ubiquiti"/>
7169
+ <param pos="0" name="hw.device" value="Switch"/>
7170
+ <param pos="1" name="hw.product"/>
7171
+ <param pos="2" name="hw.version"/>
7172
+ <param pos="0" name="os.vendor" value="Ubiquiti"/>
7173
+ <param pos="0" name="os.family" value="Linux"/>
7174
+ <param pos="0" name="os.device" value="Switch"/>
7175
+ <param pos="3" name="os.version"/>
7176
+ </fingerprint>
7177
+
7178
+ <fingerprint pattern="^(USW-[^\s,]+)(?:,)? ([0-9][.a-zA-Z0-9\-]+)$">
7179
+ <description>Ubiquiti Switch w/Version (no Linux version)</description>
7180
+ <example hw.product="USW-5-Flex" hw.version="4.0.80.10875">USW-5-Flex, 4.0.80.10875</example>
7181
+ <example hw.product="USW-Flex" hw.version="5.64.8.13083">USW-Flex 5.64.8.13083</example>
7182
+ <param pos="0" name="hw.vendor" value="Ubiquiti"/>
7183
+ <param pos="0" name="hw.device" value="Switch"/>
7184
+ <param pos="1" name="hw.product"/>
7185
+ <param pos="2" name="hw.version"/>
7186
+ <param pos="0" name="os.vendor" value="Ubiquiti"/>
7187
+ <param pos="0" name="os.family" value="Linux"/>
7188
+ <param pos="0" name="os.device" value="Switch"/>
7189
+ </fingerprint>
7190
+
6926
7191
  <!--======================================================================
6927
7192
  UNISYS
6928
7193
  =======================================================================-->
6929
7194
 
6930
- <fingerprint pattern="^Unisys (\S+) version (\S+) kernel .*$">
7195
+ <fingerprint pattern="^Unisys (\S+) version (\S+) kernel">
6931
7196
  <description>Unisys printer</description>
6932
7197
  <example>Unisys UDS544 version NS.NP.N219 kernel 2.6.6 All-N-1</example>
6933
7198
  <param pos="0" name="os.vendor" value="Unisys"/>
@@ -6944,19 +7209,48 @@ Copyright (c) 1995-2005 by Cisco Systems
6944
7209
  <param pos="0" name="os.cpe23" value="cpe:/o:windriver:vxworks:-"/>
6945
7210
  </fingerprint>
6946
7211
 
7212
+ <!--======================================================================
7213
+ VBrick
7214
+ =======================================================================-->
7215
+
7216
+ <fingerprint pattern="^VBrick Systems Inc., Model (\d+) Serial (\d+)$">
7217
+ <description>VBrick Video Encoder</description>
7218
+ <example hw.model="4300" hw.serial_number="01010101010">VBrick Systems Inc., Model 4300 Serial 01010101010</example>
7219
+ <param pos="0" name="hw.vendor" value="VBrick"/>
7220
+ <param pos="0" name="hw.device" value="Video Encoder"/>
7221
+ <param pos="1" name="hw.model"/>
7222
+ <param pos="0" name="hw.product" value="{hw.device} {hw.model}"/>
7223
+ <param pos="2" name="hw.serial_number"/>
7224
+ </fingerprint>
7225
+
6947
7226
  <!--======================================================================
6948
7227
  VMware
6949
7228
  =======================================================================-->
6950
7229
 
6951
- <fingerprint pattern="^(VMware ESXi?) (\d\.\d+\.\d+) build-\d+ VMware, Inc\. (\S+)$">
6952
- <description>VMware ESX/ESXi</description>
6953
- <example os.product="VMware ESXi" os.version="5.1.0" os.arch="x86_64">VMware ESXi 5.1.0 build-1157734 VMware, Inc. x86_64</example>
6954
- <example os.product="VMware ESX" os.version="5.0.0" os.arch="x86_64">VMware ESX 5.0.0 build-623860 VMware, Inc. x86_64</example>
7230
+ <fingerprint pattern="^VMware ESXi (\d\.\d+\.\d+) build-\d+ VMware, Inc\. (\S+)$">
7231
+ <description>VMware ESXi</description>
7232
+ <example os.version="5.1.0" os.arch="x86_64">VMware ESXi 5.1.0 build-1157734 VMware, Inc. x86_64</example>
6955
7233
  <param pos="0" name="os.vendor" value="VMware"/>
6956
7234
  <param pos="0" name="os.family" value="VMware ESX/ESXi"/>
6957
- <param pos="1" name="os.product"/>
6958
- <param pos="2" name="os.version"/>
6959
- <param pos="3" name="os.arch"/>
7235
+ <param pos="0" name="os.product" value="VMware ESXi Server"/>
7236
+ <param pos="1" name="os.version"/>
7237
+ <param pos="2" name="os.arch"/>
7238
+ <param pos="0" name="os.device" value="Hypervisor"/>
7239
+ <param pos="0" name="os.cpe23" value="cpe:/o:vmware:esxi:{os.version}"/>
7240
+ <param pos="0" name="hw.device" value="Hypervisor"/>
7241
+ </fingerprint>
7242
+
7243
+ <fingerprint pattern="^VMware ESX (\d\.\d+\.\d+) build-\d+ VMware, Inc\. (\S+)$">
7244
+ <description>VMware ESX</description>
7245
+ <example os.version="5.0.0" os.arch="x86_64">VMware ESX 5.0.0 build-623860 VMware, Inc. x86_64</example>
7246
+ <param pos="0" name="os.vendor" value="VMware"/>
7247
+ <param pos="0" name="os.family" value="VMware ESX/ESXi"/>
7248
+ <param pos="0" name="os.product" value="VMware ESX Server"/>
7249
+ <param pos="1" name="os.version"/>
7250
+ <param pos="2" name="os.arch"/>
7251
+ <param pos="0" name="os.device" value="Hypervisor"/>
7252
+ <param pos="0" name="os.cpe23" value="cpe:/o:vmware:esx:{os.version}"/>
7253
+ <param pos="0" name="hw.device" value="Hypervisor"/>
6960
7254
  </fingerprint>
6961
7255
 
6962
7256
  <fingerprint pattern="^&quot;vSphere Management Assistant ([\d\.]+)&quot;$">
@@ -6971,7 +7265,7 @@ Copyright (c) 1995-2005 by Cisco Systems
6971
7265
  XEROX
6972
7266
  =======================================================================-->
6973
7267
 
6974
- <fingerprint pattern="^Xerox Phaser ([^;]+);\sOS\s(\d+\.\d+\.\d+\.\d+).*$" certainty="1.0">
7268
+ <fingerprint pattern="^Xerox Phaser ([^;]+);\sOS\s(\d+\.\d+\.\d+\.\d+)" certainty="1.0">
6975
7269
  <description>Xerox Phaser 3000MFP Series </description>
6976
7270
  <example hw.product="3300MFP" os.version="1.50.00.17">Xerox Phaser 3300MFP; OS 1.50.00.17 05-07-2013, Engine 1.05.44, NIC V4.03.01(P3300MFP), PCL5e 6.08.01 11-10-2009, PCL6 5.98 09-23-2009, PS3 V2.19.06 12-15-2010, SPL 5.24 03-27-2006, PDF V1.00.32 02-25-2006, IBM/EPSON 5.22 09-24-2009</example>
6977
7271
  <example hw.product="3300MFP" os.version="1.50.00.14">Xerox Phaser 3300MFP; OS 1.50.00.14 07-16-2009, Engine 1.05.44, NIC V4.02.06(P3300MFP) 07-16-2009, PCL5e 5.93 03-19-2009, PCL6 5.94 05-11-2009, PS3 V1.99.06 04-09-2009, SPL 5.24 03-27-2006, PDF V1.00.32 02-25-2006, IBM/EPSON 5.20 02-03-2009</example>
@@ -6985,7 +7279,7 @@ Copyright (c) 1995-2005 by Cisco Systems
6985
7279
  <param pos="2" name="os.version"/>
6986
7280
  </fingerprint>
6987
7281
 
6988
- <fingerprint pattern="^Xerox WorkCentre ([^;]+);\s+SS\s+(\d+\.\d+\.\d+\.\d+).*$" certainty="1.0">
7282
+ <fingerprint pattern="^Xerox WorkCentre ([^;]+);\s+SS\s+(\d+\.\d+\.\d+\.\d+)" certainty="1.0">
6989
7283
  <description>Xerox WorkCentre 3345/3335 Printers</description>
6990
7284
  <example hw.product="3335" os.version="60.004.00.000">Xerox WorkCentre 3335; SS 60.004.00.000, NC 4.00.50.73, UI V5.51.00.31.00_17030801, ME V0.00.39, CCOS 6.9.P</example>
6991
7285
  <example hw.product="3345" os.version="60.001.01.000">Xerox WorkCentre 3345; SS 60.001.01.000, NC 4.00.50.46, UI V5.51.00.29.00_16052717, ME V0.00.37, CCOS 6.9.P</example>
@@ -6999,7 +7293,7 @@ Copyright (c) 1995-2005 by Cisco Systems
6999
7293
  <param pos="2" name="os.version"/>
7000
7294
  </fingerprint>
7001
7295
 
7002
- <fingerprint pattern="^Xerox (B\d+) Multifunction Printer; SS\s+(\d+\.\d+\.\d+\.\d+).*$" certainty="1.0">
7296
+ <fingerprint pattern="^Xerox (B\d+) Multifunction Printer; SS\s+(\d+\.\d+\.\d+\.\d+)" certainty="1.0">
7003
7297
  <description>Xerox B series Multfunction Printer</description>
7004
7298
  <example hw.product="B1025" os.version="75.000.77.000">Xerox B1025 Multifunction Printer; SS 75.000.77.000, NC V4.00.50, UI V5.52.00.08.00_18032319, ME V0.00.25 03-20-2018, CCOS 6.9.P</example>
7005
7299
  <param pos="0" name="os.vendor" value="Xerox"/>
@@ -7012,7 +7306,7 @@ Copyright (c) 1995-2005 by Cisco Systems
7012
7306
  <param pos="2" name="os.version"/>
7013
7307
  </fingerprint>
7014
7308
 
7015
- <fingerprint pattern="^Xerox (Phaser [^;]+).*[, ]OS ([^;,]+).*$" certainty="1.0">
7309
+ <fingerprint pattern="^Xerox (Phaser [^;]+).*[, ]OS ([^;,]+)" certainty="1.0">
7016
7310
  <description>Xerox Phaser Laser Printer - OS variant</description>
7017
7311
  <example>Xerox Phaser 5500DN;PS G02.10,Net 22.42.11.22.2004,Eng 11.42.00,OS 4.46;SN RET570148</example>
7018
7312
  <example>Xerox Phaser 6350DP;PS 5.0.0,Net 24.98.07.15.2005,Eng 3.2.0,OS 5.98</example>
@@ -7032,7 +7326,7 @@ Copyright (c) 1995-2005 by Cisco Systems
7032
7326
  <param pos="2" name="os.version"/>
7033
7327
  </fingerprint>
7034
7328
 
7035
- <fingerprint pattern="^Xerox (Phaser .+) v\(.*/([^/]+)\).*$" certainty="1.0">
7329
+ <fingerprint pattern="^Xerox (Phaser .+) v\(.*/([^/]+)\)" certainty="1.0">
7036
7330
  <description>Xerox Phaser Laser Printer - memory variant</description>
7037
7331
  <example>Xerox Phaser 6200 DX v(2.12/14.66.02.22.2002/1.6.7/4.26) Printer 256MB LPH130287</example>
7038
7332
  <param pos="0" name="os.vendor" value="Xerox"/>
@@ -7045,7 +7339,7 @@ Copyright (c) 1995-2005 by Cisco Systems
7045
7339
  <param pos="2" name="os.version"/>
7046
7340
  </fingerprint>
7047
7341
 
7048
- <fingerprint pattern="^Xerox (Phaser [^;]+);.*$" certainty="1.0">
7342
+ <fingerprint pattern="^Xerox (Phaser [^;]+);" certainty="1.0">
7049
7343
  <description>Xerox Phaser Laser Printer</description>
7050
7344
  <example>Xerox Phaser 6140N; NIC 14.31,ESS 200905190951,IOT 02.01.00,Boot 200809191035</example>
7051
7345
  <example>Xerox Phaser 6180MFP-D; Net 11.74,ESS 200802151717,IOT 05.09.00,Boot 200706151125</example>
@@ -7059,7 +7353,7 @@ Copyright (c) 1995-2005 by Cisco Systems
7059
7353
  <param pos="1" name="os.product"/>
7060
7354
  </fingerprint>
7061
7355
 
7062
- <fingerprint pattern="^Xerox Document Centre Multi-function System.*$">
7356
+ <fingerprint pattern="^Xerox Document Centre Multi-function System">
7063
7357
  <description>Xerox Document Centre Multi-function System</description>
7064
7358
  <example>Xerox Document Centre Multi-function System, ESS 0.19.12.011.1, IOT 28.52.0, UI 0.10.27.31, Finisher 7.95.0</example>
7065
7359
  <example>Xerox Document Centre Multi-function System, ESS 0.19.02.503.6, IOT 0.19.2.503, UI 0.19.2.503</example>
@@ -7086,7 +7380,7 @@ Copyright (c) 1995-2005 by Cisco Systems
7086
7380
  <param pos="2" name="os.version"/>
7087
7381
  </fingerprint>
7088
7382
 
7089
- <fingerprint pattern="^Xerox WorkCentre Pro Multifunction System[,;] .*$" certainty="1.0">
7383
+ <fingerprint pattern="^Xerox WorkCentre Pro Multifunction System[,;]" certainty="1.0">
7090
7384
  <description>Xerox WorkCentre Pro Laser Printer</description>
7091
7385
  <example>Xerox WorkCentre Pro Multifunction System, ESS 0.C03.04.510.01, IOT 9.0.3, UI 0.1.4.509, Scanner 1.4.0</example>
7092
7386
  <example>Xerox WorkCentre Pro Multifunction System, ESS 0.C03.04.510.01, IOT 9.0.3, UI 0.1.4.509, Finisher 3.8.0, Scanner 1.4.0</example>
@@ -7100,7 +7394,7 @@ Copyright (c) 1995-2005 by Cisco Systems
7100
7394
  <param pos="0" name="hw.device" value="Printer"/>
7101
7395
  </fingerprint>
7102
7396
 
7103
- <fingerprint pattern="^Xerox (WorkCentre [^\s;]+).*$" certainty="1.0">
7397
+ <fingerprint pattern="^Xerox (WorkCentre [^\s;]+)" certainty="1.0">
7104
7398
  <description>Xerox WorkCentre</description>
7105
7399
  <example>Xerox WorkCentre 5665 v1 Multifunction System; System Software 000.000.000.00000, ESS</example>
7106
7400
  <example>Xerox WorkCentre 7132;ESS PS1.202.1,IOT 10.5.0,FIN B12.12.0,IIT 7.5.0,ADF 11.6.3,FAX 1.30.50</example>
@@ -7113,7 +7407,7 @@ Copyright (c) 1995-2005 by Cisco Systems
7113
7407
  <param pos="0" name="hw.device" value="Printer"/>
7114
7408
  </fingerprint>
7115
7409
 
7116
- <fingerprint pattern="^Xerox (\S+ [^\s;]+).*$" certainty="1.0">
7410
+ <fingerprint pattern="^Xerox (\S+ [^\s;]+)" certainty="1.0">
7117
7411
  <description>Xerox Default</description>
7118
7412
  <example>Xerox ColorQube 9203; System Software 000.000.000.00000, ESS</example>
7119
7413
  <example>Xerox DocuTech 6115; DocuSP CP.4205.90</example>
@@ -7125,7 +7419,7 @@ Copyright (c) 1995-2005 by Cisco Systems
7125
7419
  <param pos="0" name="hw.device" value="Printer"/>
7126
7420
  </fingerprint>
7127
7421
 
7128
- <fingerprint pattern="^XEROX (\d{4} WIDE FORMAT) PRINTER; ACCXES (\d+.\d+) \d+, IOT .*$" certainty="1.0">
7422
+ <fingerprint pattern="^XEROX (\d{4} WIDE FORMAT) PRINTER; ACCXES (\d+.\d+) \d+, IOT" certainty="1.0">
7129
7423
  <description>Xerox Wide Format Printer</description>
7130
7424
  <example>XEROX 6204 WIDE FORMAT PRINTER; ACCXES 15.0 136, IOT 01.01.07</example>
7131
7425
  <param pos="0" name="os.vendor" value="Xerox"/>
@@ -7137,7 +7431,7 @@ Copyright (c) 1995-2005 by Cisco Systems
7137
7431
  <param pos="2" name="os.version"/>
7138
7432
  </fingerprint>
7139
7433
 
7140
- <fingerprint pattern="^XEROX (WIDE FORMAT \d{4}) PRINTER; ACCXES (\d+.\d+) \d+, IOT .*$" certainty="1.0">
7434
+ <fingerprint pattern="^XEROX (WIDE FORMAT \d{4}) PRINTER; ACCXES (\d+.\d+) \d+, IOT" certainty="1.0">
7141
7435
  <description>Xerox Wide Format Printer - variant 1</description>
7142
7436
  <example>XEROX WIDE FORMAT 6605 PRINTER; ACCXES 14.0 142, IOT 01.01.04XXXXXX</example>
7143
7437
  <example>XEROX WIDE FORMAT 6604 PRINTER; ACCXES 14.0 142, IOT 01.01.04XXXXXX</example>
@@ -7155,7 +7449,7 @@ Copyright (c) 1995-2005 by Cisco Systems
7155
7449
  Xyplex
7156
7450
  =======================================================================-->
7157
7451
 
7158
- <fingerprint pattern="^.*Xyplex hardware (\S+) .*Xyplex software Terminal Server V(\S+)\s*$">
7452
+ <fingerprint pattern="Xyplex hardware (\S+) .*Xyplex software Terminal Server V(\S+)\s*$">
7159
7453
  <description>Xyplex Terminal Server</description>
7160
7454
  <example>- Netlink-Xyplex Xyplex hardware MX-1600 00.00.00 Rom 470000 Xyplex software Terminal Server V6.0S91 </example>
7161
7455
  <example>- WTF? Xyplex hardware CSERV-20 00.00.00 Rom 470000 Xyplex software Terminal Server V6.0.3 </example>