recog 2.3.21 → 3.0.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (120) hide show
  1. checksums.yaml +4 -4
  2. data/LICENSE +1 -1
  3. data/README.md +42 -16
  4. data/Rakefile +2 -9
  5. data/lib/recog/db.rb +2 -1
  6. data/lib/recog/db_manager.rb +1 -1
  7. data/lib/recog/fingerprint.rb +33 -6
  8. data/lib/recog/fingerprint_parse_error.rb +10 -0
  9. data/lib/recog/verifier.rb +9 -9
  10. data/lib/recog/verify_reporter.rb +17 -6
  11. data/lib/recog/version.rb +1 -1
  12. data/{bin → recog/bin}/recog_match +0 -1
  13. data/{xml → recog/xml}/apache_modules.xml +0 -0
  14. data/{xml → recog/xml}/apache_os.xml +98 -56
  15. data/{xml → recog/xml}/architecture.xml +15 -1
  16. data/recog/xml/dhcp_vendor_class.xml +206 -0
  17. data/{xml → recog/xml}/dns_versionbind.xml +16 -13
  18. data/{xml → recog/xml}/favicons.xml +297 -47
  19. data/{xml → recog/xml}/fingerprints.xsd +9 -1
  20. data/{xml → recog/xml}/ftp_banners.xml +160 -156
  21. data/{xml → recog/xml}/h323_callresp.xml +101 -101
  22. data/{xml → recog/xml}/hp_pjl_id.xml +84 -84
  23. data/{xml → recog/xml}/html_title.xml +727 -34
  24. data/{xml → recog/xml}/http_cookies.xml +160 -77
  25. data/{xml → recog/xml}/http_servers.xml +556 -283
  26. data/{xml → recog/xml}/http_wwwauth.xml +190 -75
  27. data/{xml → recog/xml}/imap_banners.xml +5 -5
  28. data/{xml → recog/xml}/ldap_searchresult.xml +0 -0
  29. data/{xml → recog/xml}/mdns_device-info_txt.xml +389 -26
  30. data/{xml → recog/xml}/mdns_workstation_txt.xml +0 -0
  31. data/{xml → recog/xml}/mysql_banners.xml +1 -1
  32. data/{xml → recog/xml}/mysql_error.xml +0 -0
  33. data/{xml → recog/xml}/nntp_banners.xml +11 -8
  34. data/{xml → recog/xml}/ntp_banners.xml +97 -97
  35. data/{xml → recog/xml}/operating_system.xml +95 -80
  36. data/{xml → recog/xml}/pop_banners.xml +23 -23
  37. data/{xml → recog/xml}/rsh_resp.xml +3 -3
  38. data/{xml → recog/xml}/rtsp_servers.xml +0 -0
  39. data/{xml → recog/xml}/sip_banners.xml +43 -5
  40. data/{xml → recog/xml}/sip_user_agents.xml +175 -27
  41. data/{xml → recog/xml}/smb_native_lm.xml +5 -5
  42. data/{xml → recog/xml}/smb_native_os.xml +25 -25
  43. data/{xml → recog/xml}/smtp_banners.xml +147 -146
  44. data/{xml → recog/xml}/smtp_debug.xml +0 -0
  45. data/{xml → recog/xml}/smtp_ehlo.xml +1 -1
  46. data/{xml → recog/xml}/smtp_expn.xml +0 -0
  47. data/{xml → recog/xml}/smtp_help.xml +11 -11
  48. data/{xml → recog/xml}/smtp_mailfrom.xml +0 -0
  49. data/{xml → recog/xml}/smtp_noop.xml +2 -2
  50. data/{xml → recog/xml}/smtp_quit.xml +0 -0
  51. data/{xml → recog/xml}/smtp_rcptto.xml +0 -0
  52. data/{xml → recog/xml}/smtp_rset.xml +0 -0
  53. data/{xml → recog/xml}/smtp_turn.xml +0 -0
  54. data/{xml → recog/xml}/smtp_vrfy.xml +0 -0
  55. data/{xml → recog/xml}/snmp_sysdescr.xml +1570 -1430
  56. data/{xml → recog/xml}/snmp_sysobjid.xml +38 -27
  57. data/{xml → recog/xml}/ssh_banners.xml +16 -10
  58. data/{xml → recog/xml}/telnet_banners.xml +238 -21
  59. data/{xml → recog/xml}/tls_jarm.xml +56 -6
  60. data/{xml → recog/xml}/x11_banners.xml +3 -3
  61. data/{xml → recog/xml}/x509_issuers.xml +49 -1
  62. data/{xml → recog/xml}/x509_subjects.xml +139 -38
  63. data/recog.gemspec +9 -5
  64. data/spec/data/external_example_fingerprint/hp_printer_ex_01.txt +1 -0
  65. data/spec/data/external_example_fingerprint/hp_printer_ex_02.txt +1 -0
  66. data/spec/data/external_example_fingerprint.xml +8 -0
  67. data/spec/data/external_example_illegal_path_fingerprint.xml +7 -0
  68. data/spec/lib/recog/db_spec.rb +84 -61
  69. data/spec/lib/recog/fingerprint_spec.rb +4 -4
  70. data/spec/lib/recog/verify_reporter_spec.rb +73 -4
  71. data/spec/spec_helper.rb +4 -0
  72. metadata +65 -134
  73. data/.github/ISSUE_TEMPLATE/bug_report.md +0 -37
  74. data/.github/ISSUE_TEMPLATE/feature_request.md +0 -17
  75. data/.github/ISSUE_TEMPLATE/fingerprint_request.md +0 -27
  76. data/.github/PULL_REQUEST_TEMPLATE +0 -24
  77. data/.github/SECURITY.md +0 -35
  78. data/.github/workflows/ci.yml +0 -26
  79. data/.gitignore +0 -23
  80. data/.rspec +0 -3
  81. data/.ruby-gemset +0 -1
  82. data/.ruby-version +0 -1
  83. data/.snyk +0 -10
  84. data/.travis.yml +0 -25
  85. data/CONTRIBUTING.md +0 -270
  86. data/bin/recog_cleanup +0 -16
  87. data/bin/recog_export +0 -81
  88. data/bin/recog_standardize +0 -148
  89. data/bin/recog_verify +0 -64
  90. data/cpe-remap.yaml +0 -343
  91. data/features/data/failing_banners_fingerprints.xml +0 -20
  92. data/features/data/matching_banners_fingerprints.xml +0 -23
  93. data/features/data/multiple_banners_fingerprints.xml +0 -32
  94. data/features/data/no_tests.xml +0 -3
  95. data/features/data/sample_banner.txt +0 -2
  96. data/features/data/successful_tests.xml +0 -18
  97. data/features/data/tests_with_failures.xml +0 -20
  98. data/features/data/tests_with_warnings.xml +0 -17
  99. data/features/match.feature +0 -36
  100. data/features/support/aruba.rb +0 -3
  101. data/features/support/env.rb +0 -6
  102. data/features/verify.feature +0 -48
  103. data/identifiers/README.md +0 -70
  104. data/identifiers/fields.txt +0 -104
  105. data/identifiers/hw_device.txt +0 -78
  106. data/identifiers/hw_family.txt +0 -113
  107. data/identifiers/hw_product.txt +0 -410
  108. data/identifiers/os_architecture.txt +0 -10
  109. data/identifiers/os_device.txt +0 -75
  110. data/identifiers/os_family.txt +0 -233
  111. data/identifiers/os_product.txt +0 -340
  112. data/identifiers/service_family.txt +0 -249
  113. data/identifiers/service_product.txt +0 -752
  114. data/identifiers/vendor.txt +0 -798
  115. data/lib/recog/verifier_factory.rb +0 -13
  116. data/misc/convert_mysql_err +0 -61
  117. data/misc/order.xsl +0 -17
  118. data/requirements.txt +0 -2
  119. data/spec/lib/fingerprint_self_test_spec.rb +0 -174
  120. data/update_cpes.py +0 -250
data/{xml → recog/xml}/html_title.xml RENAMED
@@ -214,6 +214,17 @@
214
214
  <param pos="0" name="hw.device" value="DVR"/>
215
215
  </fingerprint>
216
216
 
217
+ <!-- Xiongmai Technology is rebranded by a number of DVR and IP Camera manufacturers -->
218
+
219
+ <fingerprint pattern="^NETSurveillance WEB$">
220
+ <description>NetSurveillance web interface on DVR and IP Camera devices sourced from Xiongmai Technology</description>
221
+ <example>NETSurveillance WEB</example>
222
+ <param pos="0" name="service.vendor" value="Xiongmai Technology"/>
223
+ <param pos="0" name="service.product" value="uc-httpd"/>
224
+ <param pos="0" name="service.cpe23" value="cpe:/a:xiongmaitech:uc-httpd:-"/>
225
+ <param pos="0" name="os.vendor" value="Xiongmai Technology"/>
226
+ </fingerprint>
227
+
217
228
  <fingerprint pattern="^FRITZ!Box$">
218
229
  <description>AVM FRITZ!Box</description>
219
230
  <example>FRITZ!Box</example>
@@ -322,7 +333,7 @@
322
333
  <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows:-"/>
323
334
  </fingerprint>
324
335
 
325
- <fingerprint pattern="^(?:NETIASPOT Management Console|Konsola zarzdzania NETIASPOT)$">
336
+ <fingerprint pattern="^NETIASPOT Management Console|Konsola zarzdzania NETIASPOT$">
326
337
  <description>Netia Spot wireless router</description>
327
338
  <example>Konsola zarzdzania NETIASPOT</example>
328
339
  <example>NETIASPOT Management Console</example>
@@ -427,9 +438,14 @@
427
438
  <example>Fireware XTM User Authentication</example>
428
439
  <param pos="0" name="service.vendor" value="WatchGuard"/>
429
440
  <param pos="0" name="service.product" value="Fireware XTM"/>
441
+ <param pos="0" name="service.device" value="Firewall"/>
430
442
  <param pos="0" name="service.cpe23" value="cpe:/a:watchguard:fireware_xtm:-"/>
443
+ <param pos="0" name="service.component.vendor" value="nginx"/>
444
+ <param pos="0" name="service.component.product" value="nginx"/>
445
+ <param pos="0" name="service.component.cpe23" value="cpe:/a:f5:nginx:-"/>
431
446
  <param pos="0" name="os.vendor" value="WatchGuard"/>
432
447
  <param pos="0" name="os.product" value="Fireware"/>
448
+ <param pos="0" name="os.device" value="Firewall"/>
433
449
  <param pos="0" name="os.cpe23" value="cpe:/o:watchguard:fireware:-"/>
434
450
  </fingerprint>
435
451
 
@@ -464,6 +480,14 @@
464
480
  <param pos="0" name="os.vendor" value="Synology"/>
465
481
  </fingerprint>
466
482
 
483
+ <fingerprint pattern="^Synology.nbsp;Router.nbsp;-.nbsp;synology$">
484
+ <description>Synology Router</description>
485
+ <example>Synology&amp;nbsp;Router&amp;nbsp;-&amp;nbsp;synology</example>
486
+ <param pos="0" name="hw.vendor" value="Synology"/>
487
+ <param pos="0" name="hw.device" value="Router"/>
488
+ <param pos="0" name="hw.certainty" value="0.7"/>
489
+ </fingerprint>
490
+
467
491
  <fingerprint pattern="^Web Filter Block Override$">
468
492
  <description>Fortinet FortiGate/Fortiguard Web Filter</description>
469
493
  <example>Web Filter Block Override</example>
@@ -477,6 +501,19 @@
477
501
  <param pos="0" name="hw.device" value="Firewall"/>
478
502
  </fingerprint>
479
503
 
504
+ <fingerprint pattern="^FortiGate$">
505
+ <description>Fortinet FortiGate Network Firewall</description>
506
+ <example>FortiGate</example>
507
+ <param pos="0" name="os.vendor" value="Fortinet"/>
508
+ <param pos="0" name="os.family" value="FortiOS"/>
509
+ <param pos="0" name="os.product" value="FortiOS"/>
510
+ <param pos="0" name="os.device" value="Firewall"/>
511
+ <param pos="0" name="os.cpe23" value="cpe:/o:fortinet:fortios:-"/>
512
+ <param pos="0" name="hw.vendor" value="Fortinet"/>
513
+ <param pos="0" name="hw.family" value="FortiGate"/>
514
+ <param pos="0" name="hw.device" value="Firewall"/>
515
+ </fingerprint>
516
+
480
517
  <!-- Various products by Ubiquiti networks -->
481
518
 
482
519
  <fingerprint pattern="^Ubiquiti Networks$">
@@ -539,7 +576,7 @@
539
576
  <param pos="0" name="service.cpe23" value="cpe:/a:ui:unifi_video:-"/>
540
577
  </fingerprint>
541
578
 
542
- <fingerprint pattern="^(?:UniFi NVR: Software Portal|airVision: \[NVR\] - Software Portal)$">
579
+ <fingerprint pattern="^UniFi NVR: Software Portal|airVision: \[NVR\] - Software Portal$">
543
580
  <description>UniFi NVR for recording from UniFi video cameras</description>
544
581
  <example>UniFi NVR: Software Portal</example>
545
582
  <example>airVision: [NVR] - Software Portal</example>
@@ -549,6 +586,14 @@
549
586
  <param pos="0" name="hw.device" value="DVR"/>
550
587
  </fingerprint>
551
588
 
589
+ <fingerprint pattern="^Welcome to AmpliFi$">
590
+ <description>Ubiquiti AmpliFi Router</description>
591
+ <example>Welcome to AmpliFi</example>
592
+ <param pos="0" name="hw.vendor" value="Ubiquiti"/>
593
+ <param pos="0" name="hw.product" value="AmpliFi"/>
594
+ <param pos="0" name="hw.device" value="Router"/>
595
+ </fingerprint>
596
+
552
597
  <!-- Various products by Zyxel -->
553
598
 
554
599
  <fingerprint pattern="^USG60$">
@@ -606,8 +651,8 @@
606
651
 
607
652
  <fingerprint pattern="^Wowza Streaming Engine 4 (Subscription|Perpetual Pro) Edition (\d\.[\w.]+) build(\d+)$">
608
653
  <description>Wowza Streaming Engine</description>
609
- <example service.version="4.7.7.01" service.version.version="20190222144406">Wowza Streaming Engine 4 Subscription Edition 4.7.7.01 build20190222144406</example>
610
- <example service.edition="Perpetual Pro">Wowza Streaming Engine 4 Perpetual Pro Edition 4.8.8.01 build20201216140014</example>
654
+ <example service.version="4.7.7.01" service.version.version="20190222144406" service.edition="Subscription">Wowza Streaming Engine 4 Subscription Edition 4.7.7.01 build20190222144406</example>
655
+ <example service.edition="Perpetual Pro" service.version="4.8.8.01" service.version.version="20201216140014">Wowza Streaming Engine 4 Perpetual Pro Edition 4.8.8.01 build20201216140014</example>
611
656
  <param pos="0" name="service.vendor" value="Wowza"/>
612
657
  <param pos="0" name="service.product" value="Streaming Engine"/>
613
658
  <param pos="1" name="service.edition"/>
@@ -627,14 +672,24 @@
627
672
  <param pos="0" name="hw.device" value="Router"/>
628
673
  </fingerprint>
629
674
 
630
- <fingerprint pattern="^(?:Welcome to nginx!|Test Page for the Nginx HTTP Server)$">
675
+ <fingerprint pattern="^MikroTik SwOS$">
676
+ <description>MikroTik SwOS switch configuration page</description>
677
+ <example>MikroTik SwOS</example>
678
+ <param pos="0" name="os.vendor" value="MikroTik"/>
679
+ <param pos="0" name="os.device" value="Switch"/>
680
+ <param pos="0" name="os.product" value="SwOS"/>
681
+ <param pos="0" name="hw.vendor" value="MikroTik"/>
682
+ <param pos="0" name="hw.device" value="Switch"/>
683
+ </fingerprint>
684
+
685
+ <fingerprint pattern="^Welcome to nginx!|Test Page for the Nginx HTTP Server$">
631
686
  <description>Default OS-agnostic nginx</description>
632
687
  <example>Welcome to nginx!</example>
633
688
  <example>Test Page for the Nginx HTTP Server</example>
634
689
  <param pos="0" name="service.product" value="nginx"/>
635
690
  <param pos="0" name="service.family" value="nginx"/>
636
691
  <param pos="0" name="service.vendor" value="nginx"/>
637
- <param pos="0" name="service.cpe23" value="cpe:/a:nginx:nginx:-"/>
692
+ <param pos="0" name="service.cpe23" value="cpe:/a:f5:nginx:-"/>
638
693
  </fingerprint>
639
694
 
640
695
  <fingerprint pattern="^Test Page for the Nginx HTTP Server on (?:Fedora|EPEL)$">
@@ -643,11 +698,11 @@
643
698
  <param pos="0" name="service.product" value="nginx"/>
644
699
  <param pos="0" name="service.family" value="nginx"/>
645
700
  <param pos="0" name="service.vendor" value="nginx"/>
646
- <param pos="0" name="service.cpe23" value="cpe:/a:nginx:nginx:-"/>
701
+ <param pos="0" name="service.cpe23" value="cpe:/a:f5:nginx:-"/>
647
702
  <param pos="0" name="os.family" value="Linux"/>
648
- <param pos="0" name="os.vendor" value="Red Hat"/>
649
- <param pos="0" name="os.product" value="Fedora Core Linux"/>
650
- <param pos="0" name="os.cpe23" value="cpe:/o:redhat:fedora_core:-"/>
703
+ <param pos="0" name="os.vendor" value="Fedora Project"/>
704
+ <param pos="0" name="os.product" value="Fedora Core"/>
705
+ <param pos="0" name="os.cpe23" value="cpe:/o:fedoraproject:fedora_core:-"/>
651
706
  </fingerprint>
652
707
 
653
708
  <fingerprint pattern="^Welcome to nginx on Debian!$">
@@ -656,7 +711,7 @@
656
711
  <param pos="0" name="service.product" value="nginx"/>
657
712
  <param pos="0" name="service.family" value="nginx"/>
658
713
  <param pos="0" name="service.vendor" value="nginx"/>
659
- <param pos="0" name="service.cpe23" value="cpe:/a:nginx:nginx:-"/>
714
+ <param pos="0" name="service.cpe23" value="cpe:/a:f5:nginx:-"/>
660
715
  <param pos="0" name="os.vendor" value="Debian"/>
661
716
  <param pos="0" name="os.product" value="Linux"/>
662
717
  <param pos="0" name="os.cpe23" value="cpe:/o:debian:debian_linux:-"/>
@@ -708,9 +763,10 @@
708
763
  <param pos="1" name="hw.product"/>
709
764
  </fingerprint>
710
765
 
711
- <fingerprint pattern="^Netgear Prosafe Plus Switch$">
766
+ <fingerprint pattern="(?i)^Netgear Prosafe Plus Switch$">
712
767
  <description>Netgear Prosafe Plus Switch</description>
713
768
  <example>Netgear Prosafe Plus Switch</example>
769
+ <example>NETGEAR ProSAFE Plus Switch</example>
714
770
  <param pos="0" name="os.vendor" value="Netgear"/>
715
771
  <param pos="0" name="os.device" value="Switch"/>
716
772
  <param pos="0" name="os.product" value="Prosafe Firmware"/>
@@ -733,6 +789,37 @@
733
789
  <param pos="0" name="os.product" value="NET+OS"/>
734
790
  </fingerprint>
735
791
 
792
+ <fingerprint pattern="^(?:TransPort )?(WR\S+) \(SN: (\d+)\) Configuration and Management$">
793
+ <description>Digi Cellular Routers</description>
794
+ <example hw.product="WR44v2" hw.serial_number="888111" digi.serial_number="888111">WR44v2 (SN: 888111) Configuration and Management</example>
795
+ <example hw.product="WR21" hw.serial_number="888111" digi.serial_number="888111">WR21 (SN: 888111) Configuration and Management</example>
796
+ <example hw.product="WR44v2" hw.serial_number="888111" digi.serial_number="888111">TransPort WR44v2 (SN: 888111) Configuration and Management</example>
797
+ <example hw.product="WR44RR" hw.serial_number="888111" digi.serial_number="888111">TransPort WR44RR (SN: 888111) Configuration and Management</example>
798
+ <example hw.product="WR44" hw.serial_number="888111" digi.serial_number="888111">TransPort WR44 (SN: 888111) Configuration and Management</example>
799
+ <param pos="0" name="hw.vendor" value="Digi"/>
800
+ <param pos="0" name="hw.device" value="Router"/>
801
+ <param pos="1" name="hw.product"/>
802
+ <param pos="2" name="digi.serial_number"/>
803
+ <param pos="2" name="hw.serial_number"/>
804
+ </fingerprint>
805
+
806
+ <fingerprint pattern="^Digi (\S+) - ([a-fA-F0-9]{12})">
807
+ <description>Digi TX Cellular Routers</description>
808
+ <example hw.product="TX54-Dual-Cellular" host.mac="0040FF100000">Digi TX54-Dual-Cellular - 0040FF100000</example>
809
+ <param pos="0" name="hw.vendor" value="Digi"/>
810
+ <param pos="0" name="hw.device" value="Router"/>
811
+ <param pos="1" name="hw.product"/>
812
+ <param pos="2" name="host.mac"/>
813
+ </fingerprint>
814
+
815
+ <fingerprint pattern="^Digi Configuration and Management$">
816
+ <description>Digi Cellular Routers (Generic)</description>
817
+ <example>Digi Configuration and Management</example>
818
+ <param pos="0" name="hw.vendor" value="Digi"/>
819
+ <param pos="0" name="hw.device" value="Router"/>
820
+ <param pos="0" name="hw.certainty" value="0.25"/>
821
+ </fingerprint>
822
+
736
823
  <fingerprint pattern="^NPort Web Console$">
737
824
  <description>Moxa NPort Terminal Servers</description>
738
825
  <example>NPort Web Console</example>
@@ -751,6 +838,14 @@
751
838
  <param pos="1" name="hw.product"/>
752
839
  </fingerprint>
753
840
 
841
+ <fingerprint pattern="^Lantronix WEB-Manager$">
842
+ <description>Lantronix UDS terminal server</description>
843
+ <example>Lantronix WEB-Manager</example>
844
+ <param pos="0" name="hw.vendor" value="Lantronix"/>
845
+ <param pos="0" name="hw.device" value="Device Server"/>
846
+ <param pos="0" name="hw.product" value="UDS"/>
847
+ </fingerprint>
848
+
754
849
  <fingerprint pattern="^(KN\S+) - Cover$">
755
850
  <description>ATEN KVM over IP</description>
756
851
  <example hw.product="KN4140v">KN4140v - Cover</example>
@@ -1173,6 +1268,23 @@
1173
1268
  <param pos="1" name="hw.serial_number"/>
1174
1269
  </fingerprint>
1175
1270
 
1271
+ <fingerprint pattern="^Agilent E5810 \(([a-fA-F0-9-]{17})\)$">
1272
+ <description>Agilent E5810 Instrument Gateway Device</description>
1273
+ <example host.mac="00-30-D3-01-01-01">Agilent E5810 (00-30-D3-01-01-01)</example>
1274
+ <param pos="0" name="hw.vendor" value="Agilent"/>
1275
+ <param pos="0" name="hw.device" value="Test Instrument"/>
1276
+ <param pos="0" name="hw.product" value="E5810 Gateway Device"/>
1277
+ <param pos="1" name="host.mac"/>
1278
+ </fingerprint>
1279
+
1280
+ <fingerprint pattern="^LXI - Agilent Technologies - N1913A - EPM Series Power Meter$">
1281
+ <description>Agilent N1913A EPM Series Power Meter</description>
1282
+ <example>LXI - Agilent Technologies - N1913A - EPM Series Power Meter</example>
1283
+ <param pos="0" name="hw.vendor" value="Agilent"/>
1284
+ <param pos="0" name="hw.device" value="Test Instrument"/>
1285
+ <param pos="0" name="hw.product" value="N1913A Power Meter"/>
1286
+ </fingerprint>
1287
+
1176
1288
  <fingerprint pattern="^Polycom - Configuration Utility$">
1177
1289
  <description>Polycom IP Phone</description>
1178
1290
  <example>Polycom - Configuration Utility</example>
@@ -1206,6 +1318,15 @@
1206
1318
  <param pos="1" name="hw.product"/>
1207
1319
  </fingerprint>
1208
1320
 
1321
+ <fingerprint pattern="^(SPA\S+) Device Information \(SEP(\S+)\)$">
1322
+ <description>Cisco IP Phone - SPA504G</description>
1323
+ <example hw.product="SPA504G" host.mac="0123456789ab">SPA504G Device Information (SEP0123456789ab)</example>
1324
+ <param pos="0" name="hw.vendor" value="Cisco"/>
1325
+ <param pos="0" name="hw.device" value="VoIP"/>
1326
+ <param pos="1" name="hw.product"/>
1327
+ <param pos="2" name="host.mac"/>
1328
+ </fingerprint>
1329
+
1209
1330
  <fingerprint pattern="^Cisco (?:SPA Configuration|IP Phone)$">
1210
1331
  <description>Cisco IP Phone </description>
1211
1332
  <example>Cisco SPA Configuration</example>
@@ -1262,6 +1383,7 @@
1262
1383
  <param pos="0" name="os.device" value="Switch"/>
1263
1384
  <param pos="0" name="os.product" value="MDS 9000"/>
1264
1385
  <param pos="1" name="os.version"/>
1386
+ <param pos="0" name="os.cpe23" value="cpe:/o:cisco:mds_9000_san-os:{os.version}"/>
1265
1387
  </fingerprint>
1266
1388
 
1267
1389
  <fingerprint pattern="^Stealthwatch Management Console$">
@@ -1322,6 +1444,14 @@
1322
1444
  <param pos="0" name="hw.cpe23" value="cpe:/h:cisco:wireless_lan_controller:-"/>
1323
1445
  </fingerprint>
1324
1446
 
1447
+ <fingerprint pattern="^Cisco ASDM (\S+)$">
1448
+ <description>Cisco Adaptive Security Device Manager Application</description>
1449
+ <example service.version="6.4(7)">Cisco ASDM 6.4(7)</example>
1450
+ <param pos="0" name="service.vendor" value="Cisco"/>
1451
+ <param pos="0" name="service.product" value="ASDM"/>
1452
+ <param pos="1" name="service.version"/>
1453
+ </fingerprint>
1454
+
1325
1455
  <fingerprint pattern="^Duo Access Gateway$">
1326
1456
  <description>Duo Access Gateway</description>
1327
1457
  <example>Duo Access Gateway</example>
@@ -1474,6 +1604,36 @@
1474
1604
  <param pos="0" name="os.product" value="SmartServer"/>
1475
1605
  </fingerprint>
1476
1606
 
1607
+ <!-- Various products by Avocent -->
1608
+
1609
+ <fingerprint pattern="^Avocent AutoView ([^/$]+)">
1610
+ <description>Avocent AutoView KVM</description>
1611
+ <example hw.model="3100">Avocent AutoView 3100/3200</example>
1612
+ <example hw.model="3050">Avocent AutoView 3050</example>
1613
+ <param pos="0" name="hw.vendor" value="Avocent"/>
1614
+ <param pos="0" name="hw.device" value="KVM"/>
1615
+ <param pos="1" name="hw.model"/>
1616
+ <param pos="0" name="hw.product" value="AutoView {hw.model}"/>
1617
+ </fingerprint>
1618
+
1619
+ <!-- Various products by Aerohive -->
1620
+
1621
+ <fingerprint pattern="^Aerohive HiveUI$">
1622
+ <description>Aerohive Access Point</description>
1623
+ <example>Aerohive HiveUI</example>
1624
+ <param pos="0" name="hw.vendor" value="Aerohive"/>
1625
+ <param pos="0" name="hw.device" value="WAP"/>
1626
+ </fingerprint>
1627
+
1628
+ <!-- Various products by Ruckus -->
1629
+
1630
+ <fingerprint pattern="^Ruckus Wireless Admin$">
1631
+ <description>Ruckus Wireless Access Point</description>
1632
+ <example>Ruckus Wireless Admin</example>
1633
+ <param pos="0" name="hw.vendor" value="Ruckus"/>
1634
+ <param pos="0" name="hw.device" value="WAP"/>
1635
+ </fingerprint>
1636
+
1477
1637
  <!-- Various ICS/OT -->
1478
1638
 
1479
1639
  <fingerprint pattern="^CTI (25\S+) Main Menu$">
@@ -1702,7 +1862,7 @@
1702
1862
  <param pos="0" name="service.cpe23" value="cpe:/a:realvnc:realvnc:-"/>
1703
1863
  </fingerprint>
1704
1864
 
1705
- <fingerprint pattern="^.{0,1024} \[Jenkins\]$">
1865
+ <fingerprint pattern="^.{0,1000} \[Jenkins\]$">
1706
1866
  <description>Jenkins Customized Dashboard</description>
1707
1867
  <example>Continuous Integrations [Jenkins]</example>
1708
1868
  <example>Dashboard [Jenkins]</example>
@@ -2044,7 +2204,7 @@
2044
2204
  <description>Pure Storage Appliance</description>
2045
2205
  <example>Pure Storage Login</example>
2046
2206
  <param pos="0" name="hw.vendor" value="Pure Storage"/>
2047
- <param pos="0" name="hw.device" value="NAS"/>
2207
+ <param pos="0" name="hw.device" value="Storage Appliance"/>
2048
2208
  <param pos="0" name="hw.product" value="Appliance"/>
2049
2209
  </fingerprint>
2050
2210
 
@@ -2227,7 +2387,7 @@
2227
2387
  <param pos="0" name="hw.product" value="Network Node"/>
2228
2388
  </fingerprint>
2229
2389
 
2230
- <fingerprint pattern="^(?:S2 Netbox Login|Home - NetBox)$">
2390
+ <fingerprint pattern="^S2 Netbox Login|Home - NetBox$">
2231
2391
  <description>S2 Netbox Appliance</description>
2232
2392
  <example>S2 Netbox Login</example>
2233
2393
  <example>Home - NetBox</example>
@@ -2279,7 +2439,7 @@
2279
2439
  <param pos="0" name="service.cpe23" value="cpe:/a:ibm:tivoli_storage_flashcopy_manager:-"/>
2280
2440
  </fingerprint>
2281
2441
 
2282
- <fingerprint pattern="^(?:Jupyter Notebook|JupyterLab|Home Page - Select or create a notebook)$">
2442
+ <fingerprint pattern="^Jupyter Notebook|JupyterLab|Home Page - Select or create a notebook$">
2283
2443
  <description>Jupyter Notebook Server</description>
2284
2444
  <example>Jupyter Notebook</example>
2285
2445
  <example>JupyterLab</example>
@@ -2324,7 +2484,7 @@
2324
2484
  <param pos="0" name="service.product" value="Network Monitor"/>
2325
2485
  </fingerprint>
2326
2486
 
2327
- <fingerprint pattern="^(?:BrightSign&amp;reg;|BrightSign Applications|Diagnostics Web Server)$">
2487
+ <fingerprint pattern="^BrightSign&amp;reg;|BrightSign Applications|Diagnostics Web Server$">
2328
2488
  <description>BrightSign Controller</description>
2329
2489
  <example>BrightSign&amp;reg;</example>
2330
2490
  <example>BrightSign Applications</example>
@@ -2345,7 +2505,7 @@
2345
2505
  <param pos="0" name="hw.device" value="WAP"/>
2346
2506
  </fingerprint>
2347
2507
 
2348
- <fingerprint pattern="^(?:DD System Manager|System Manager)$">
2508
+ <fingerprint pattern="^DD System Manager|System Manager$">
2349
2509
  <description>Data Domain System Manager</description>
2350
2510
  <example>DD System Manager</example>
2351
2511
  <example>System Manager</example>
@@ -2398,7 +2558,7 @@
2398
2558
  <param pos="0" name="service.cpe23" value="cpe:/a:influxdata:influxdb:2.0"/>
2399
2559
  </fingerprint>
2400
2560
 
2401
- <fingerprint pattern="^(?:Sign in . GitLab|GitLab|GitLab is not responding)$">
2561
+ <fingerprint pattern="^Sign in . GitLab|GitLab|GitLab is not responding$">
2402
2562
  <description>GitLab</description>
2403
2563
  <example>Sign in · GitLab</example>
2404
2564
  <example>GitLab is not responding</example>
@@ -2409,7 +2569,7 @@
2409
2569
  <param pos="0" name="service.cpe23" value="cpe:/a:gitlab:gitlab:-"/>
2410
2570
  </fingerprint>
2411
2571
 
2412
- <fingerprint pattern="^(?:GitHub Enterprise|Setup GitHub Enterprise|GitHub Enterprise preflight check)$">
2572
+ <fingerprint pattern="^GitHub Enterprise|Setup GitHub Enterprise|GitHub Enterprise preflight check$">
2413
2573
  <description>GitHub Enterprise</description>
2414
2574
  <example>GitHub Enterprise</example>
2415
2575
  <example>Setup GitHub Enterprise</example>
@@ -2418,7 +2578,7 @@
2418
2578
  <param pos="0" name="service.product" value="Enterprise"/>
2419
2579
  </fingerprint>
2420
2580
 
2421
- <fingerprint pattern="^(?:SAP NetWeaver Application Server Java|SAP&amp;#x20;NetWeaver&amp;#x20;Portal|Loading Portal\.\.\.)$">
2581
+ <fingerprint pattern="^SAP NetWeaver Application Server Java|SAP&amp;#x20;NetWeaver&amp;#x20;Portal|Loading Portal\.\.\.$">
2422
2582
  <description>SAP NetWeaver Portal</description>
2423
2583
  <example>SAP NetWeaver Application Server Java</example>
2424
2584
  <example>SAP&amp;#x20;NetWeaver&amp;#x20;Portal</example>
@@ -2437,7 +2597,7 @@
2437
2597
  <param pos="0" name="service.cpe23" value="cpe:/a:lansweeper:lansweeper:-"/>
2438
2598
  </fingerprint>
2439
2599
 
2440
- <fingerprint pattern="^(?:Celery Flower|Flower)$">
2600
+ <fingerprint pattern="^Celery Flower|Flower$">
2441
2601
  <description>Celery Flower Dashboard</description>
2442
2602
  <example>Celery Flower</example>
2443
2603
  <example>Flower</example>
@@ -2577,7 +2737,7 @@
2577
2737
  <param pos="0" name="service.cpe23" value="cpe:/a:apache:flink:-"/>
2578
2738
  </fingerprint>
2579
2739
 
2580
- <fingerprint pattern="^(?:Twonky|Twonky Server|TwonkyMedia|TwonkyMedia server media browser)$">
2740
+ <fingerprint pattern="^Twonky|Twonky Server|TwonkyMedia|TwonkyMedia server media browser$">
2581
2741
  <description>Twonky Server</description>
2582
2742
  <example>Twonky</example>
2583
2743
  <example>Twonky Server</example>
@@ -2622,7 +2782,7 @@
2622
2782
  <param pos="0" name="service.cpe23" value="cpe:/a:sabnzbd:sabnzbd:-"/>
2623
2783
  </fingerprint>
2624
2784
 
2625
- <fingerprint pattern="^(?:Zabbix|.*: Zabbix)$">
2785
+ <fingerprint pattern="^Zabbix|.*: Zabbix$">
2626
2786
  <description>Zabbix</description>
2627
2787
  <example>Zabbix</example>
2628
2788
  <example>appliance: Zabbix</example>
@@ -2644,7 +2804,7 @@
2644
2804
  <param pos="0" name="os.cpe23" value="cpe:/o:dd-wrt:dd-wrt:{os.version}"/>
2645
2805
  </fingerprint>
2646
2806
 
2647
- <fingerprint pattern="^(?:Apache Druid|Druid Console|Legacy Coordinator Console)$">
2807
+ <fingerprint pattern="^Apache Druid|Druid Console|Legacy Coordinator Console$">
2648
2808
  <description>Apache Druid</description>
2649
2809
  <example>Apache Druid</example>
2650
2810
  <example>Legacy Coordinator Console</example>
@@ -2731,7 +2891,7 @@
2731
2891
  <example>Rundeck - Login</example>
2732
2892
  <param pos="0" name="service.vendor" value="Rundeck"/>
2733
2893
  <param pos="0" name="service.product" value="Rundeck"/>
2734
- <param pos="0" name="service.cpe23" value="cpe:/a:rundeck:rundeck:-"/>
2894
+ <param pos="0" name="service.cpe23" value="cpe:/a:pagerduty:rundeck:-"/>
2735
2895
  </fingerprint>
2736
2896
 
2737
2897
  <fingerprint pattern="^CrushFTP WebInterface$">
@@ -2854,7 +3014,7 @@
2854
3014
  <param pos="0" name="service.cpe23" value="cpe:/a:solarwinds:virtualization_manager:-"/>
2855
3015
  </fingerprint>
2856
3016
 
2857
- <fingerprint pattern="^(?:Gitea: .*|LocalRepo|TurnKey Gitea)$">
3017
+ <fingerprint pattern="^Gitea: .*|LocalRepo|TurnKey Gitea$">
2858
3018
  <description>Gitea</description>
2859
3019
  <example>Gitea: Git with a cup of tea</example>
2860
3020
  <example>TurnKey Gitea</example>
@@ -2942,7 +3102,7 @@
2942
3102
  <param pos="0" name="service.cpe23" value="cpe:/a:rstudio:connect:-"/>
2943
3103
  </fingerprint>
2944
3104
 
2945
- <fingerprint pattern="^(?:TurnKey Moodle|New Site)$">
3105
+ <fingerprint pattern="^TurnKey Moodle|New Site$">
2946
3106
  <description>Moodle</description>
2947
3107
  <example>TurnKey Moodle</example>
2948
3108
  <example>New Site</example>
@@ -2969,7 +3129,7 @@
2969
3129
  <example>Log In - Confluence</example>
2970
3130
  <param pos="0" name="service.vendor" value="Atlassian"/>
2971
3131
  <param pos="0" name="service.product" value="Confluence"/>
2972
- <param pos="0" name="service.cpe23" value="cpe:/a:atlassian:confluence:-"/>
3132
+ <param pos="0" name="service.cpe23" value="cpe:/a:atlassian:confluence_server:-"/>
2973
3133
  </fingerprint>
2974
3134
 
2975
3135
  <fingerprint pattern="^System Dashboard - ">
@@ -2981,7 +3141,7 @@
2981
3141
  <param pos="0" name="service.cpe23" value="cpe:/a:atlassian:jira:-"/>
2982
3142
  </fingerprint>
2983
3143
 
2984
- <fingerprint pattern="^(?:Welcome to XAMPP|XAMPP for Linux)">
3144
+ <fingerprint pattern="^Welcome to XAMPP|XAMPP for Linux">
2985
3145
  <description>XAMPP Server</description>
2986
3146
  <example>Welcome to XAMPP</example>
2987
3147
  <example>XAMPP for Linux</example>
@@ -3006,7 +3166,7 @@
3006
3166
  <param pos="0" name="service.cpe23" value="cpe:/a:kodi:kodi:-"/>
3007
3167
  </fingerprint>
3008
3168
 
3009
- <fingerprint pattern="^(?:Drupal|TurnKey Drupal\d+|Select an installation profile)$">
3169
+ <fingerprint pattern="^Drupal|TurnKey Drupal\d+|Select an installation profile$">
3010
3170
  <description>Drupal CMS</description>
3011
3171
  <example>Drupal</example>
3012
3172
  <example>TurnKey Drupal8</example>
@@ -3086,9 +3246,9 @@
3086
3246
  <param pos="0" name="service.product" value="Media Server"/>
3087
3247
  </fingerprint>
3088
3248
 
3089
- <fingerprint pattern="^proxmox - Proxmox Virtual Environment$">
3249
+ <fingerprint pattern="^.{1,256} - Proxmox Virtual Environment$">
3090
3250
  <description>Proxmox open-source virtualization platform</description>
3091
- <example>proxmox - Proxmox Virtual Environment</example>
3251
+ <example>hypervisor - Proxmox Virtual Environment</example>
3092
3252
  <param pos="0" name="service.vendor" value="Proxmox"/>
3093
3253
  <param pos="0" name="service.product" value="Virtual Environment"/>
3094
3254
  <param pos="0" name="service.cpe23" value="cpe:/a:proxmox:virtual_environment:-"/>
@@ -3108,7 +3268,7 @@
3108
3268
  <fingerprint pattern="Lifesize&amp;reg;$">
3109
3269
  <description>Lifesize TelePresence</description>
3110
3270
  <example>Lifesize&amp;reg;</example>
3111
- <example>400 - Bad Request Lifesize&amp;reg;</example>
3271
+ <example>400 - Bad Request Lifesize&amp;reg;</example>
3112
3272
  <param pos="0" name="hw.vendor" value="Lifesize"/>
3113
3273
  <param pos="0" name="hw.device" value="Video Conferencing"/>
3114
3274
  <param pos="0" name="hw.product" value="TelePresence"/>
@@ -3247,4 +3407,537 @@
3247
3407
  <param pos="0" name="service.cpe23" value="cpe:/a:moinmo:moinmoin:-"/>
3248
3408
  </fingerprint>
3249
3409
 
3410
+ <fingerprint pattern="^(\w+) - BlackBox Management Console$">
3411
+ <description>BlackBox Management Console</description>
3412
+ <example host.name="ABC123">ABC123 - BlackBox Management Console</example>
3413
+ <param pos="0" name="hw.vendor" value="BlackBox"/>
3414
+ <param pos="0" name="hw.device" value="Device Server"/>
3415
+ <param pos="0" name="hw.product" value="BlackBox"/>
3416
+ <param pos="1" name="host.name"/>
3417
+ </fingerprint>
3418
+
3419
+ <fingerprint pattern="^Shelly Color Bulb$">
3420
+ <description>Shelly Smart Bulb</description>
3421
+ <example>Shelly Color Bulb</example>
3422
+ <param pos="0" name="os.vendor" value="Cesanta"/>
3423
+ <param pos="0" name="os.product" value="Mongoose OS"/>
3424
+ <param pos="0" name="os.cpe23" value="cpe:/o:cesanta:mongoose_os:-"/>
3425
+ <param pos="0" name="hw.vendor" value="Shelly"/>
3426
+ <param pos="0" name="hw.device" value="Light Bulb"/>
3427
+ <param pos="0" name="hw.product" value="Color Bulb"/>
3428
+ </fingerprint>
3429
+
3430
+ <fingerprint pattern="^Shelly (Plug|Dimmer(?: 2)?|Switch)$">
3431
+ <description>Shelly Plug/Dimmer/Switch Devices</description>
3432
+ <example hw.product="Plug">Shelly Plug</example>
3433
+ <example hw.product="Dimmer">Shelly Dimmer</example>
3434
+ <example hw.product="Dimmer 2">Shelly Dimmer 2</example>
3435
+ <example hw.product="Switch">Shelly Switch</example>
3436
+ <param pos="0" name="os.vendor" value="Cesanta"/>
3437
+ <param pos="0" name="os.product" value="Mongoose OS"/>
3438
+ <param pos="0" name="os.cpe23" value="cpe:/o:cesanta:mongoose_os:-"/>
3439
+ <param pos="0" name="hw.vendor" value="Shelly"/>
3440
+ <param pos="0" name="hw.device" value="Device"/>
3441
+ <param pos="1" name="hw.product"/>
3442
+ </fingerprint>
3443
+
3444
+ <fingerprint pattern="^Shelly[ ]?(RGBW2|1L)$">
3445
+ <description>Shelly Lighting Controller</description>
3446
+ <example hw.product="RGBW2">Shelly RGBW2</example>
3447
+ <example hw.product="1L">Shelly1L</example>
3448
+ <param pos="0" name="os.vendor" value="Cesanta"/>
3449
+ <param pos="0" name="os.product" value="Mongoose OS"/>
3450
+ <param pos="0" name="os.cpe23" value="cpe:/o:cesanta:mongoose_os:-"/>
3451
+ <param pos="0" name="hw.vendor" value="Shelly"/>
3452
+ <param pos="0" name="hw.device" value="Device"/>
3453
+ <param pos="1" name="hw.product"/>
3454
+ </fingerprint>
3455
+
3456
+ <fingerprint pattern="^TinyGS Configuration$">
3457
+ <description>TinyGS LoRa Ground Station Software</description>
3458
+ <example>TinyGS Configuration</example>
3459
+ <param pos="0" name="service.product" value="TinyGS"/>
3460
+ </fingerprint>
3461
+
3462
+ <fingerprint pattern="^WLED$">
3463
+ <description>WLED Controlled Device</description>
3464
+ <example>WLED</example>
3465
+ <param pos="0" name="service.vendor" value="Aircookie"/>
3466
+ <param pos="0" name="service.product" value="WLED"/>
3467
+ <param pos="0" name="service.device" value="Device"/>
3468
+ </fingerprint>
3469
+
3470
+ <fingerprint pattern="^Freebox OS (?:.*)$">
3471
+ <description>Freebox OS on Freebox Set-top Box Devices</description>
3472
+ <example>Freebox OS :: Identification</example>
3473
+ <param pos="0" name="os.vendor" value="Freebox"/>
3474
+ <param pos="0" name="os.product" value="Freebox OS"/>
3475
+ <param pos="0" name="hw.vendor" value="Freebox"/>
3476
+ <param pos="0" name="hw.device" value="Device"/>
3477
+ </fingerprint>
3478
+
3479
+ <fingerprint pattern="^HP UPS Network Module$">
3480
+ <description>HP RT3000 G2 UPS</description>
3481
+ <example>HP UPS Network Module</example>
3482
+ <param pos="0" name="hw.vendor" value="HP"/>
3483
+ <param pos="0" name="hw.device" value="UPS"/>
3484
+ </fingerprint>
3485
+
3486
+ <fingerprint pattern="^UniFi Network$">
3487
+ <description>Ubiquiti UniFi Network Application</description>
3488
+ <example>UniFi Network</example>
3489
+ <param pos="0" name="service.vendor" value="Ubiquiti"/>
3490
+ <param pos="0" name="service.product" value="UniFi"/>
3491
+ <param pos="0" name="service.device" value="Device"/>
3492
+ <param pos="0" name="service.cpe23" value="cpe:/a:ui:unifi:-"/>
3493
+ </fingerprint>
3494
+
3495
+ <fingerprint pattern="^Login to AdminDroid Office 365 Reporter$">
3496
+ <description>AdminDroid Office 365 Reporter Application</description>
3497
+ <example>Login to AdminDroid Office 365 Reporter</example>
3498
+ <param pos="0" name="service.vendor" value="AdminDroid"/>
3499
+ <param pos="0" name="service.product" value="Office 365 Reporter"/>
3500
+ </fingerprint>
3501
+
3502
+ <fingerprint pattern="^Nanoleaf Firmware Upload$">
3503
+ <description>Nanoleaf LED Lighting</description>
3504
+ <example>Nanoleaf Firmware Upload</example>
3505
+ <param pos="0" name="hw.vendor" value="Nanoleaf"/>
3506
+ <param pos="0" name="hw.device" value="Device"/>
3507
+ </fingerprint>
3508
+
3509
+ <fingerprint pattern="^GoGogate - LAN$">
3510
+ <description>GoGogate Garage Door Opener</description>
3511
+ <example>GoGogate - LAN</example>
3512
+ <param pos="0" name="hw.vendor" value="GoGogate"/>
3513
+ <param pos="0" name="hw.device" value="Device"/>
3514
+ </fingerprint>
3515
+
3516
+ <fingerprint pattern="^ASUS Login$">
3517
+ <description>ASUS Router/Network Device</description>
3518
+ <example>ASUS Login</example>
3519
+ <param pos="0" name="hw.vendor" value="Asus"/>
3520
+ <param pos="0" name="hw.device" value="Device"/>
3521
+ </fingerprint>
3522
+
3523
+ <fingerprint pattern="^GigaBlue Quad Plus - OpenWebif$">
3524
+ <description>GigaBlue Quad Plus Satellite TV Receiver</description>
3525
+ <example>GigaBlue Quad Plus - OpenWebif</example>
3526
+ <param pos="0" name="hw.vendor" value="GigaBlue"/>
3527
+ <param pos="0" name="hw.device" value="Device"/>
3528
+ <param pos="0" name="hw.product" value="Quad Plus Receiver"/>
3529
+ </fingerprint>
3530
+
3531
+ <fingerprint pattern="^Barix Instreamer Instreamer$">
3532
+ <description>Barix Instreamer</description>
3533
+ <example>Barix Instreamer Instreamer</example>
3534
+ <param pos="0" name="hw.vendor" value="Barix"/>
3535
+ <param pos="0" name="hw.device" value="Audio Encoder"/>
3536
+ <param pos="0" name="hw.product" value="Instreamer"/>
3537
+ </fingerprint>
3538
+
3539
+ <fingerprint pattern="^Tracker Display$">
3540
+ <description>SpotterRF</description>
3541
+ <example>Tracker Display</example>
3542
+ <param pos="0" name="os.vendor" value="SpotterRF"/>
3543
+ <param pos="0" name="os.family" value="Linux"/>
3544
+ <param pos="0" name="os.certainty" value="0.90"/>
3545
+ <param pos="0" name="hw.vendor" value="SpotterRF"/>
3546
+ <param pos="0" name="hw.device" value="Sensor"/>
3547
+ <param pos="0" name="hw.product" value="Drone Detector"/>
3548
+ </fingerprint>
3549
+
3550
+ <fingerprint pattern="^Polycom (DMA \d+)$">
3551
+ <description>Polycom DMA 7000</description>
3552
+ <example hw.product="DMA 7000">Polycom DMA 7000</example>
3553
+ <param pos="0" name="hw.vendor" value="Polycom"/>
3554
+ <param pos="0" name="hw.device" value="VoIP"/>
3555
+ <param pos="1" name="hw.product"/>
3556
+ </fingerprint>
3557
+
3558
+ <fingerprint pattern="^VVX(\d{3})$">
3559
+ <description>Polycom VVX VoIP Phones</description>
3560
+ <example hw.model="250">VVX250</example>
3561
+ <param pos="0" name="hw.vendor" value="Polycom"/>
3562
+ <param pos="0" name="hw.device" value="VoIP"/>
3563
+ <param pos="1" name="hw.model"/>
3564
+ <param pos="0" name="hw.product" value="VVX {hw.model}"/>
3565
+ </fingerprint>
3566
+
3567
+ <fingerprint pattern="^(OBi[23]\d{2})">
3568
+ <description>Poly OBI Analog Telephone Adapter</description>
3569
+ <example hw.product="OBi200">OBi200</example>
3570
+ <param pos="0" name="hw.vendor" value="Poly"/>
3571
+ <param pos="0" name="hw.device" value="VoIP"/>
3572
+ <param pos="1" name="hw.product"/>
3573
+ </fingerprint>
3574
+
3575
+ <fingerprint pattern="^Alpha Technologies$">
3576
+ <description>Alpha Technologies Novus UPS</description>
3577
+ <example>Alpha Technologies</example>
3578
+ <param pos="0" name="hw.vendor" value="Alpha Technologies"/>
3579
+ <param pos="0" name="hw.device" value="Power Device"/>
3580
+ <param pos="0" name="hw.product" value="Novus UPS"/>
3581
+ </fingerprint>
3582
+
3583
+ <fingerprint pattern="^Network Management Card$">
3584
+ <description>Eaton UPS Network Card</description>
3585
+ <example>Network Management Card</example>
3586
+ <param pos="0" name="hw.vendor" value="Eaton"/>
3587
+ <param pos="0" name="hw.device" value="Power Device"/>
3588
+ <param pos="0" name="hw.product" value="UPS"/>
3589
+ <param pos="0" name="hw.certainty" value="0.5"/>
3590
+ </fingerprint>
3591
+
3592
+ <fingerprint pattern="^UPS Properties$">
3593
+ <description>APC UPS Network Card</description>
3594
+ <example>UPS Properties</example>
3595
+ <param pos="0" name="hw.vendor" value="APC"/>
3596
+ <param pos="0" name="hw.device" value="Power Device"/>
3597
+ <param pos="0" name="hw.product" value="UPS"/>
3598
+ <param pos="0" name="hw.certainty" value="0.5"/>
3599
+ </fingerprint>
3600
+
3601
+ <fingerprint pattern="^HP ([\w ]+) PostScript">
3602
+ <description>HP Printer</description>
3603
+ <example hw.product="Designjet T1200">HP Designjet T1200 PostScript - Supplies</example>
3604
+ <param pos="0" name="hw.vendor" value="HP"/>
3605
+ <param pos="0" name="hw.family" value="JetDirect"/>
3606
+ <param pos="0" name="hw.device" value="Printer"/>
3607
+ <param pos="1" name="hw.product"/>
3608
+ </fingerprint>
3609
+
3610
+ <fingerprint pattern="^Radio Configuration/Diagnostic Utility$">
3611
+ <description>ProSoft RadioLinx</description>
3612
+ <example>Radio Configuration/Diagnostic Utility</example>
3613
+ <param pos="0" name="hw.vendor" value="ProSoft Technology"/>
3614
+ <param pos="0" name="hw.device" value="WAP"/>
3615
+ <param pos="0" name="hw.product" value="RadioLinx"/>
3616
+ <param pos="0" name="hw.certainty" value="0.5"/>
3617
+ </fingerprint>
3618
+
3619
+ <fingerprint pattern="^Welcome to ntopng$">
3620
+ <description>ntopng Network Analysis Application</description>
3621
+ <example>Welcome to ntopng</example>
3622
+ <param pos="0" name="service.vendor" value="ntop"/>
3623
+ <param pos="0" name="service.product" value="ntopng"/>
3624
+ <param pos="0" name="service.cpe23" value="cpe:/a:ntop:ntopng:-"/>
3625
+ </fingerprint>
3626
+
3627
+ <fingerprint pattern="^FreeNAS$">
3628
+ <description>iXsystems FreeNAS</description>
3629
+ <example>FreeNAS</example>
3630
+ <param pos="0" name="service.vendor" value="iXsystems"/>
3631
+ <param pos="0" name="service.product" value="FreeNAS"/>
3632
+ <param pos="0" name="os.vendor" value="iXsystems"/>
3633
+ <param pos="0" name="os.family" value="FreeBSD"/>
3634
+ <param pos="0" name="os.product" value="FreeNAS Firmware"/>
3635
+ <param pos="0" name="os.cpe23" value="cpe:/o:ixsystems:freenas_firmware:-"/>
3636
+ </fingerprint>
3637
+
3638
+ <fingerprint pattern="^Xerox (.{1,1000}) - \d+\.\d+\.\d+\.\d+$">
3639
+ <description>Xerox Color Printer</description>
3640
+ <example hw.product="Color 570">Xerox Color 570 - 100.100.100.101</example>
3641
+ <param pos="0" name="hw.vendor" value="Xerox"/>
3642
+ <param pos="0" name="hw.device" value="Printer"/>
3643
+ <param pos="1" name="hw.product"/>
3644
+ </fingerprint>
3645
+
3646
+ <fingerprint pattern="^Web Smart Switch$">
3647
+ <description>3Com Switch</description>
3648
+ <example>Web Smart Switch</example>
3649
+ <param pos="0" name="hw.vendor" value="3Com"/>
3650
+ <param pos="0" name="hw.device" value="Switch"/>
3651
+ </fingerprint>
3652
+
3653
+ <fingerprint pattern="^(Quantum) - (Scalar i\d+) Login Screen$">
3654
+ <description>Quantum Scalar Tape Library</description>
3655
+ <example hw.vendor="Quantum" hw.product="Scalar i80">Quantum - Scalar i80 Login Screen</example>
3656
+ <param pos="0" name="hw.device" value="Tape Library"/>
3657
+ <param pos="1" name="hw.vendor"/>
3658
+ <param pos="2" name="hw.product"/>
3659
+ </fingerprint>
3660
+
3661
+ <fingerprint pattern="^Printer Administration$">
3662
+ <description>Weidmüller Printer</description>
3663
+ <example>Printer Administration</example>
3664
+ <param pos="0" name="hw.vendor" value="Weidmüller"/>
3665
+ <param pos="0" name="hw.device" value="Printer"/>
3666
+ </fingerprint>
3667
+
3668
+ <fingerprint pattern="^Machine Identification - (MX-\S+)$">
3669
+ <description>Sharp MX Printer</description>
3670
+ <example hw.product="MX-3071">Machine Identification - MX-3071</example>
3671
+ <param pos="0" name="hw.vendor" value="Sharp"/>
3672
+ <param pos="0" name="hw.device" value="Printer"/>
3673
+ <param pos="1" name="hw.product"/>
3674
+ </fingerprint>
3675
+
3676
+ <fingerprint pattern="^Remote UI: Login: (MF\S+):">
3677
+ <description>Canon MF Printer</description>
3678
+ <example hw.product="MF632C/634C">Remote UI: Login: MF632C/634C: MF632C/634C</example>
3679
+ <param pos="0" name="hw.vendor" value="Canon"/>
3680
+ <param pos="0" name="hw.device" value="Printer"/>
3681
+ <param pos="1" name="hw.product"/>
3682
+ <param pos="0" name="hw.certainty" value="0.8"/>
3683
+ </fingerprint>
3684
+
3685
+ <fingerprint pattern="^Network Video Recorder Login$">
3686
+ <description>Nuuo NVR</description>
3687
+ <example>Network Video Recorder Login</example>
3688
+ <param pos="0" name="hw.vendor" value="Nuuo"/>
3689
+ <param pos="0" name="hw.device" value="DVR"/>
3690
+ </fingerprint>
3691
+
3692
+ <fingerprint pattern="^Evolis Printer$">
3693
+ <description>Evolis Printer</description>
3694
+ <example>Evolis Printer</example>
3695
+ <param pos="0" name="hw.vendor" value="Evolis"/>
3696
+ <param pos="0" name="hw.device" value="Printer"/>
3697
+ </fingerprint>
3698
+
3699
+ <fingerprint pattern="^WyzeOutdoorPlug - ">
3700
+ <description>Wyze Plug Outdoor</description>
3701
+ <example>WyzeOutdoorPlug - Main Menu</example>
3702
+ <param pos="0" name="hw.vendor" value="Wyze"/>
3703
+ <param pos="0" name="hw.device" value="Device"/>
3704
+ <param pos="0" name="hw.product" value="Plug Outdoor"/>
3705
+ </fingerprint>
3706
+
3707
+ <fingerprint pattern="^Aptinex IOT Relay Module - (\d+ Channel) (Rev\S+)?">
3708
+ <description>Aptinex Relay Controller</description>
3709
+ <example aptinex.model="4 Channel" os.version="Rev1.1">Aptinex IOT Relay Module - 4 Channel Rev1.1</example>
3710
+ <param pos="0" name="os.vendor" value="Aptinex"/>
3711
+ <param pos="0" name="hw.vendor" value="Aptinex"/>
3712
+ <param pos="0" name="hw.device" value="Relay Controller"/>
3713
+ <param pos="0" name="hw.product" value="{aptinex.model} Relay Controller"/>
3714
+ <param pos="1" name="aptinex.model"/>
3715
+ <param pos="2" name="os.version"/>
3716
+ </fingerprint>
3717
+
3718
+ <fingerprint pattern="^Diagnoser - Bobcatminer Diagnostic Dashboard$">
3719
+ <description>Bobcat Helium Miner</description>
3720
+ <example>Diagnoser - Bobcatminer Diagnostic Dashboard</example>
3721
+ <param pos="0" name="hw.vendor" value="Bobcat"/>
3722
+ <param pos="0" name="hw.device" value="Device"/>
3723
+ <param pos="0" name="hw.product" value="Helium Miner"/>
3724
+ </fingerprint>
3725
+
3726
+ <fingerprint pattern="^LORIX Manager$">
3727
+ <description>Wifx LORIX One</description>
3728
+ <example>LORIX Manager</example>
3729
+ <param pos="0" name="os.vendor" value="Wifx"/>
3730
+ <param pos="0" name="os.product" value="LORIX OS"/>
3731
+ <param pos="0" name="hw.vendor" value="Wifx"/>
3732
+ <param pos="0" name="hw.device" value="Device"/>
3733
+ <param pos="0" name="hw.product" value="LORIX ONE"/>
3734
+ </fingerprint>
3735
+
3736
+ <fingerprint pattern="^ETERNUS$">
3737
+ <description>Fujitsu ETERNUS Storage Appliance</description>
3738
+ <example>ETERNUS</example>
3739
+ <param pos="0" name="hw.vendor" value="Fujitsu"/>
3740
+ <param pos="0" name="hw.device" value="Storage Appliance"/>
3741
+ <param pos="0" name="hw.product" value="Eternus"/>
3742
+ </fingerprint>
3743
+
3744
+ <fingerprint pattern="^Covenant - Login$">
3745
+ <description>Covenant .NET C2 framework</description>
3746
+ <example>Covenant - Login</example>
3747
+ <param pos="0" name="service.product" value="Covenant"/>
3748
+ </fingerprint>
3749
+
3750
+ <fingerprint pattern="^Login \| CALDERA$">
3751
+ <description>MITRE CALDERA C2 framework</description>
3752
+ <example>Login | CALDERA</example>
3753
+ <param pos="0" name="service.vendor" value="MITRE"/>
3754
+ <param pos="0" name="service.product" value="CALDERA"/>
3755
+ <param pos="0" name="service.cpe23" value="cpe:/a:mitre:caldera:-"/>
3756
+ </fingerprint>
3757
+
3758
+ <fingerprint pattern="(?:(\S{1,512}):\d{1,5} / \S{1,512} \| )?phpMyAdmin(?: ([\d.]+(?:-[a-zA-Z0-9]+)?(?:\+\d{8}\.[a-f0-9]{4,40})?))?">
3759
+ <description>phpMyAdmin web interface for MySQL and MariaDB</description>
3760
+ <example>phpMyAdmin</example>
3761
+ <example service.version="2.10.0.2">phpMyAdmin 2.10.0.2</example>
3762
+ <example service.version="5.0.0-rc1">phpMyAdmin 5.0.0-rc1</example>
3763
+ <example service.version="5.3.0-dev">phpMyAdmin 5.3.0-dev</example>
3764
+ <example host.name="10.10.10.10" service.version="5.0.4">10.10.10.10:8080 / db.foo.bar | phpMyAdmin 5.0.4</example>
3765
+ <example host.name="localhost" service.version="5.3.0-dev+20220208.47252f9cf8">localhost:8080 / mysql-server | phpMyAdmin 5.3.0-dev+20220208.47252f9cf8</example>
3766
+ <example host.name="[::ffff:10.10.10.10]" service.version="5.3.0-dev+20220208.47252f9cf8">[::ffff:10.10.10.10]:8080 / mysql-server | phpMyAdmin 5.3.0-dev+20220208.47252f9cf8</example>
3767
+ <param pos="0" name="service.vendor" value="phpMyAdmin"/>
3768
+ <param pos="0" name="service.product" value="phpMyAdmin"/>
3769
+ <param pos="1" name="host.name"/>
3770
+ <param pos="2" name="service.version"/>
3771
+ <param pos="0" name="service.cpe23" value="cpe:/a:phpmyadmin:phpmyadmin:{service.version}"/>
3772
+ </fingerprint>
3773
+
3774
+ <fingerprint pattern="^Login - Adminer$">
3775
+ <description>Adminer database management tool</description>
3776
+ <example>Login - Adminer</example>
3777
+ <param pos="0" name="service.vendor" value="Adminer"/>
3778
+ <param pos="0" name="service.product" value="Adminer"/>
3779
+ <param pos="0" name="service.cpe23" value="cpe:/a:adminer:adminer:-"/>
3780
+ </fingerprint>
3781
+
3782
+ <fingerprint pattern="^Home - Mongo Express$">
3783
+ <description>mongo-express web-based MongoDB admin interface</description>
3784
+ <example>Home - Mongo Express</example>
3785
+ <param pos="0" name="service.vendor" value="mongo-express Project"/>
3786
+ <param pos="0" name="service.product" value="mongo-express"/>
3787
+ <param pos="0" name="service.cpe23" value="cpe:/a:mongo-express_project:mongo-express:-"/>
3788
+ </fingerprint>
3789
+
3790
+ <fingerprint pattern="^Solr Admin$">
3791
+ <description>Apache Solr</description>
3792
+ <example>Solr Admin</example>
3793
+ <param pos="0" name="service.vendor" value="Apache"/>
3794
+ <param pos="0" name="service.product" value="Solr"/>
3795
+ <param pos="0" name="service.cpe23" value="cpe:/a:apache:solr:-"/>
3796
+ </fingerprint>
3797
+
3798
+ <fingerprint pattern="^Spark (?:Master|Worker) at (?:spark:\/\/)?(\S{1,512}):\d{1,5}$">
3799
+ <description>Apache Spark</description>
3800
+ <example host.name="spark-master-0.foo.bar">Spark Master at spark://spark-master-0.foo.bar:7077</example>
3801
+ <example host.name="10.10.10.10">Spark Master at spark://10.10.10.10:7077</example>
3802
+ <example host.name="10.10.10.10">Spark Worker at 10.10.10.10:45339</example>
3803
+ <param pos="0" name="service.vendor" value="Apache"/>
3804
+ <param pos="0" name="service.product" value="Spark"/>
3805
+ <param pos="0" name="service.cpe23" value="cpe:/a:apache:spark:-"/>
3806
+ <param pos="1" name="host.name"/>
3807
+ </fingerprint>
3808
+
3809
+ <fingerprint pattern="^pfSense - Login$">
3810
+ <description>pfSense Firewall</description>
3811
+ <example>pfSense - Login</example>
3812
+ <param pos="0" name="service.vendor" value="pfSense"/>
3813
+ <param pos="0" name="service.product" value="pfSense"/>
3814
+ <param pos="0" name="service.device" value="Firewall"/>
3815
+ <param pos="0" name="service.cpe23" value="cpe:/a:pfsense:pfsense:-"/>
3816
+ <param pos="0" name="service.component.vendor" value="nginx"/>
3817
+ <param pos="0" name="service.component.product" value="nginx"/>
3818
+ <param pos="0" name="service.component.cpe23" value="cpe:/a:f5:nginx:-"/>
3819
+ <param pos="0" name="os.vendor" value="pfSense"/>
3820
+ <param pos="0" name="os.product" value="FreeBSD"/>
3821
+ </fingerprint>
3822
+
3823
+ <fingerprint pattern="^Netgate pfSense Plus - Login$">
3824
+ <description>pfSense Plus Firewall</description>
3825
+ <example>Netgate pfSense Plus - Login</example>
3826
+ <param pos="0" name="service.vendor" value="Netgate"/>
3827
+ <param pos="0" name="service.product" value="pfSense"/>
3828
+ <param pos="0" name="service.device" value="Firewall"/>
3829
+ <param pos="0" name="service.cpe23" value="cpe:/a:netgate:pfsense:-"/>
3830
+ <param pos="0" name="service.component.vendor" value="nginx"/>
3831
+ <param pos="0" name="service.component.product" value="nginx"/>
3832
+ <param pos="0" name="service.component.cpe23" value="cpe:/a:f5:nginx:-"/>
3833
+ <param pos="0" name="os.vendor" value="pfSense"/>
3834
+ <param pos="0" name="os.product" value="FreeBSD"/>
3835
+ </fingerprint>
3836
+
3837
+ <fingerprint pattern="^Vigor Login Page$">
3838
+ <description>DrayTek Vigor network equipment - without model or version</description>
3839
+ <example>Vigor Login Page</example>
3840
+ <param pos="0" name="os.vendor" value="DrayTek"/>
3841
+ <param pos="0" name="os.family" value="Vigor"/>
3842
+ <param pos="0" name="hw.vendor" value="DrayTek"/>
3843
+ <param pos="0" name="hw.family" value="Vigor"/>
3844
+ </fingerprint>
3845
+
3846
+ <fingerprint pattern="^WSO2 API Manager|\[Publisher Portal\]WSO2 APIM$">
3847
+ <description>WSO2 API Manager</description>
3848
+ <example>WSO2 API Manager</example>
3849
+ <example>[Publisher Portal]WSO2 APIM</example>
3850
+ <param pos="0" name="service.vendor" value="WSO2"/>
3851
+ <param pos="0" name="service.product" value="API Manager"/>
3852
+ <param pos="0" name="service.cpe23" value="cpe:/a:wso2:api_manager:-"/>
3853
+ <param pos="0" name="service.component.vendor" value="WSO2"/>
3854
+ <param pos="0" name="service.component.product" value="Carbon"/>
3855
+ <param pos="0" name="service.component.cpe23" value="cpe:/a:wso2:carbon:-"/>
3856
+ </fingerprint>
3857
+
3858
+ <fingerprint pattern="^WSO2 Management Console$">
3859
+ <description>WSO2 Identity Server</description>
3860
+ <example>WSO2 Management Console</example>
3861
+ <param pos="0" name="service.vendor" value="WSO2"/>
3862
+ <param pos="0" name="service.product" value="Identity Server"/>
3863
+ <param pos="0" name="service.cpe23" value="cpe:/a:wso2:identity_server:-"/>
3864
+ <param pos="0" name="service.component.vendor" value="WSO2"/>
3865
+ <param pos="0" name="service.component.product" value="Carbon"/>
3866
+ <param pos="0" name="service.component.cpe23" value="cpe:/a:wso2:carbon:-"/>
3867
+ </fingerprint>
3868
+
3869
+ <fingerprint pattern="^WSO2 Enterprise Integrator \(WSO2 EI\)$">
3870
+ <description>WSO2 Enterprise Integrator</description>
3871
+ <example>WSO2 Enterprise Integrator (WSO2 EI)</example>
3872
+ <param pos="0" name="service.vendor" value="WSO2"/>
3873
+ <param pos="0" name="service.product" value="Enterprise Integrator"/>
3874
+ <param pos="0" name="service.cpe23" value="cpe:/a:wso2:enterprise_integrator:-"/>
3875
+ <param pos="0" name="service.component.vendor" value="WSO2"/>
3876
+ <param pos="0" name="service.component.product" value="Carbon"/>
3877
+ <param pos="0" name="service.component.cpe23" value="cpe:/a:wso2:carbon:-"/>
3878
+ </fingerprint>
3879
+
3880
+ <fingerprint pattern="^dotCMS Content Management Platform$">
3881
+ <description>dotCMS Content Management Platform</description>
3882
+ <example>dotCMS Content Management Platform</example>
3883
+ <param pos="0" name="service.vendor" value="dotCMS"/>
3884
+ <param pos="0" name="service.product" value="dotCMS"/>
3885
+ <param pos="0" name="service.cpe23" value="cpe:/a:dotcms:dotcms:-"/>
3886
+ </fingerprint>
3887
+
3888
+ <!-- Specific Eltex fingerprints to enable CPE generation -->
3889
+
3890
+ <fingerprint pattern="^Eltex - NTP-RG-1402G$">
3891
+ <description>Eltex - NTP-RG-1402G broadband router</description>
3892
+ <example>Eltex - NTP-RG-1402G</example>
3893
+ <param pos="0" name="os.vendor" value="Eltex"/>
3894
+ <param pos="0" name="os.product" value="NTP-RG-1402G Firmware"/>
3895
+ <param pos="0" name="os.device" value="Broadband Router"/>
3896
+ <param pos="0" name="os.cpe23" value="cpe:/o:eltex-co:ntp-rg-1402g_firmware:-"/>
3897
+ <param pos="0" name="hw.vendor" value="Eltex"/>
3898
+ <param pos="0" name="hw.product" value="NTP-RG-1402G"/>
3899
+ <param pos="0" name="hw.device" value="Broadband Router"/>
3900
+ <param pos="0" name="hw.cpe23" value="cpe:/h:eltex-co:ntp-rg-1402g:-"/>
3901
+ </fingerprint>
3902
+
3903
+ <fingerprint pattern="^Eltex - NTP-2$">
3904
+ <description>Eltex - NTP-2 broadband router</description>
3905
+ <example>Eltex - NTP-2</example>
3906
+ <param pos="0" name="os.vendor" value="Eltex"/>
3907
+ <param pos="0" name="os.product" value="NTP-2 Firmware"/>
3908
+ <param pos="0" name="os.device" value="Broadband Router"/>
3909
+ <param pos="0" name="os.cpe23" value="cpe:/o:eltex-co:ntp-2_firmware:-"/>
3910
+ <param pos="0" name="hw.vendor" value="Eltex"/>
3911
+ <param pos="0" name="hw.product" value="NTP-2"/>
3912
+ <param pos="0" name="hw.device" value="Broadband Router"/>
3913
+ <param pos="0" name="hw.cpe23" value="cpe:/h:eltex-co:ntp-2:-"/>
3914
+ </fingerprint>
3915
+
3916
+ <!-- General Eltex fingerprints -->
3917
+
3918
+ <fingerprint pattern="^Eltex - (NT[PU]-RG-\d[\w-]+):?(:?rev\.\w\w?)?$">
3919
+ <description>Eltex RG model ONT class broadband router</description>
3920
+ <example hw.product="NTU-RG-1402G-W">Eltex - NTU-RG-1402G-W</example>
3921
+ <example hw.product="NTU-RG-1421G-Wac" hw.version="rev.A1">Eltex - NTU-RG-1421G-Wac:rev.A1</example>
3922
+ <example hw.product="NTP-RG-1402G-W" hw.version="rev.C">Eltex - NTP-RG-1402G-W:rev.C</example>
3923
+ <param pos="0" name="os.vendor" value="Eltex"/>
3924
+ <param pos="0" name="os.device" value="Broadband Router"/>
3925
+ <param pos="0" name="hw.vendor" value="Eltex"/>
3926
+ <param pos="1" name="hw.product"/>
3927
+ <param pos="2" name="hw.version"/>
3928
+ <param pos="0" name="hw.device" value="Broadband Router"/>
3929
+ </fingerprint>
3930
+
3931
+ <fingerprint pattern="^Eltex - (NT[PU]-2\w\w?)$">
3932
+ <description>Eltex - NTP / NTU model broadband router</description>
3933
+ <example hw.product="NTU-2V">Eltex - NTU-2V</example>
3934
+ <example hw.product="NTU-2VC">Eltex - NTU-2VC</example>
3935
+ <example hw.product="NTP-2C">Eltex - NTP-2C</example>
3936
+ <param pos="0" name="os.vendor" value="Eltex"/>
3937
+ <param pos="0" name="os.device" value="Broadband Router"/>
3938
+ <param pos="0" name="hw.vendor" value="Eltex"/>
3939
+ <param pos="1" name="hw.product"/>
3940
+ <param pos="0" name="hw.device" value="Broadband Router"/>
3941
+ </fingerprint>
3942
+
3250
3943
  </fingerprints>