recog 2.3.7 → 2.3.12

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (81) hide show
  1. checksums.yaml +4 -4
  2. data/.gitignore +9 -2
  3. data/.ruby-gemset +1 -0
  4. data/.ruby-version +1 -0
  5. data/.travis.yml +2 -4
  6. data/CONTRIBUTING.md +136 -37
  7. data/Gemfile +2 -5
  8. data/README.md +18 -16
  9. data/bin/recog_cleanup +16 -0
  10. data/bin/recog_standardize +142 -0
  11. data/cpe-remap.yaml +36 -1
  12. data/features/match.feature +4 -0
  13. data/features/support/aruba.rb +3 -0
  14. data/features/verify.feature +5 -0
  15. data/identifiers/README.md +56 -0
  16. data/identifiers/hw_device.txt +77 -0
  17. data/identifiers/hw_family.txt +96 -0
  18. data/identifiers/hw_product.txt +328 -0
  19. data/identifiers/os_architecture.txt +20 -0
  20. data/identifiers/os_device.txt +94 -0
  21. data/identifiers/os_family.txt +325 -0
  22. data/identifiers/os_product.txt +420 -0
  23. data/identifiers/service_family.txt +272 -0
  24. data/identifiers/service_product.txt +557 -0
  25. data/identifiers/software_class.txt +26 -0
  26. data/identifiers/software_family.txt +91 -0
  27. data/identifiers/software_product.txt +333 -0
  28. data/identifiers/vendor.txt +891 -0
  29. data/lib/recog/version.rb +1 -1
  30. data/requirements.txt +1 -1
  31. data/spec/lib/fingerprint_self_test_spec.rb +1 -1
  32. data/spec/lib/recog/fingerprint/regexp_factory_spec.rb +1 -1
  33. data/update_cpes.py +4 -1
  34. data/xml/apache_modules.xml +292 -5
  35. data/xml/apache_os.xml +50 -2
  36. data/xml/architecture.xml +19 -7
  37. data/xml/dns_versionbind.xml +200 -26
  38. data/xml/favicons.xml +1701 -0
  39. data/xml/ftp_banners.xml +276 -16
  40. data/xml/h323_callresp.xml +112 -12
  41. data/xml/hp_pjl_id.xml +47 -5
  42. data/xml/html_title.xml +1419 -72
  43. data/xml/http_cookies.xml +77 -10
  44. data/xml/http_servers.xml +898 -47
  45. data/xml/http_wwwauth.xml +154 -27
  46. data/xml/imap_banners.xml +23 -13
  47. data/xml/ldap_searchresult.xml +81 -9
  48. data/xml/mdns_device-info_txt.xml +194 -17
  49. data/xml/mdns_workstation_txt.xml +4 -2
  50. data/xml/mysql_banners.xml +554 -45
  51. data/xml/mysql_error.xml +113 -6
  52. data/xml/nntp_banners.xml +10 -2
  53. data/xml/ntp_banners.xml +95 -11
  54. data/xml/operating_system.xml +90 -3
  55. data/xml/pop_banners.xml +32 -31
  56. data/xml/rsh_resp.xml +11 -2
  57. data/xml/rtsp_servers.xml +43 -23
  58. data/xml/sip_banners.xml +9 -14
  59. data/xml/sip_user_agents.xml +69 -3
  60. data/xml/smb_native_lm.xml +10 -2
  61. data/xml/smb_native_os.xml +80 -2
  62. data/xml/smtp_banners.xml +233 -13
  63. data/xml/smtp_debug.xml +6 -4
  64. data/xml/smtp_ehlo.xml +7 -5
  65. data/xml/smtp_expn.xml +13 -4
  66. data/xml/smtp_help.xml +23 -4
  67. data/xml/smtp_mailfrom.xml +5 -2
  68. data/xml/smtp_noop.xml +6 -5
  69. data/xml/smtp_quit.xml +5 -4
  70. data/xml/smtp_rcptto.xml +5 -2
  71. data/xml/smtp_rset.xml +4 -4
  72. data/xml/smtp_turn.xml +4 -4
  73. data/xml/smtp_vrfy.xml +14 -4
  74. data/xml/snmp_sysdescr.xml +776 -52
  75. data/xml/snmp_sysobjid.xml +47 -2
  76. data/xml/ssh_banners.xml +259 -80
  77. data/xml/telnet_banners.xml +376 -23
  78. data/xml/x11_banners.xml +27 -4
  79. data/xml/x509_issuers.xml +37 -13
  80. data/xml/x509_subjects.xml +525 -55
  81. metadata +29 -6
@@ -1,17 +1,18 @@
1
- <?xml version="1.0" encoding="UTF-8"?>
1
+ <?xml version='1.0' encoding='UTF-8'?>
2
2
  <fingerprints protocol="pjl" database_type="service" preference="0.10">
3
3
  <!--
4
4
  For printers running the PJL protocol (usually on 9100/tcp), their type can be requested
5
5
  by the INFO ID command. The printer types (strings surrounded by double quotes) are
6
6
  matched against these patterns to fingerprint the printer.
7
-
8
7
  'preference' notes: The value has been explicitly set to 0.10 due to the very loose
9
8
  regex that is used here.
10
9
  -->
10
+
11
11
  <!--
12
12
  LaserJet and Designjet are registered trademarks of HP. Therefore matching for the keywords
13
13
  is sufficient for asserting all relevant information
14
14
  -->
15
+
15
16
  <fingerprint pattern="(?i)laserjet (.*)(?: series)?">
16
17
  <description>HP JetDirect Printer</description>
17
18
  <example>HP LaserJet 4100 Series</example>
@@ -27,6 +28,7 @@
27
28
  <param pos="0" name="os.family" value="LaserJet"/>
28
29
  <param pos="1" name="os.product"/>
29
30
  </fingerprint>
31
+
30
32
  <fingerprint pattern="(?i)(designjet \S+)">
31
33
  <description>HP Designjet printer</description>
32
34
  <example>hp designjet 110plus</example>
@@ -41,6 +43,7 @@
41
43
  <param pos="0" name="os.device" value="Printer"/>
42
44
  <param pos="1" name="os.product"/>
43
45
  </fingerprint>
46
+
44
47
  <fingerprint pattern="^Xerox ColorQube (\S+)$">
45
48
  <description>Xerox ColorQube Multifunction Printer</description>
46
49
  <example>Xerox ColorQube 8570DN</example>
@@ -51,6 +54,7 @@
51
54
  <param pos="1" name="os.product"/>
52
55
  <param pos="0" name="os.device" value="Multifunction Device"/>
53
56
  </fingerprint>
57
+
54
58
  <fingerprint pattern="^Brother (.+)$">
55
59
  <description>Brother Printer</description>
56
60
  <example>Brother HL-1660e</example>
@@ -58,7 +62,9 @@
58
62
  <param pos="0" name="os.device" value="Printer"/>
59
63
  <param pos="1" name="os.product"/>
60
64
  </fingerprint>
65
+
61
66
  <!-- Assert the product range as a product fingerprint. -->
67
+
62
68
  <fingerprint pattern="^(iR ?\S+)">
63
69
  <description>Canon iR multifunction device</description>
64
70
  <example>iR 3180C EUR</example>
@@ -69,6 +75,7 @@
69
75
  <param pos="0" name="os.device" value="Multifunction Device"/>
70
76
  <param pos="1" name="os.product"/>
71
77
  </fingerprint>
78
+
72
79
  <fingerprint pattern="^(?:Dell (?:Color Laser |Laser Printer )?|(?:Color Laser |Laser Printer ))(\d+(?:n|cn|dn|cdn))(?: Color Laser| Laser Printer)?$">
73
80
  <description>Dell Laser Printer</description>
74
81
  <example>Dell Laser Printer 1710n</example>
@@ -86,6 +93,7 @@
86
93
  <param pos="0" name="os.device" value="Printer"/>
87
94
  <param pos="1" name="os.product"/>
88
95
  </fingerprint>
96
+
89
97
  <fingerprint pattern="^Dell (\d+(?:n|cn|dn|cdn)) MFP$">
90
98
  <description>Dell Laser multifunction device</description>
91
99
  <example>Dell 2135cn MFP</example>
@@ -95,6 +103,7 @@
95
103
  <param pos="0" name="os.device" value="Multifunction Device"/>
96
104
  <param pos="1" name="os.product"/>
97
105
  </fingerprint>
106
+
98
107
  <fingerprint pattern="^HP (\S+ Digital Sender)$">
99
108
  <description>HP Digital Sender scanner</description>
100
109
  <example>HP 9250C Digital Sender</example>
@@ -103,6 +112,7 @@
103
112
  <param pos="0" name="os.family" value="Digital Sender"/>
104
113
  <param pos="1" name="os.product"/>
105
114
  </fingerprint>
115
+
106
116
  <fingerprint pattern="^(?:IBM )?Infoprint(?: Color)? (\S+)$">
107
117
  <description>IBM Infoprint Printer</description>
108
118
  <param pos="0" name="os.vendor" value="IBM"/>
@@ -110,6 +120,7 @@
110
120
  <param pos="0" name="os.device" value="Printer"/>
111
121
  <param pos="1" name="os.product"/>
112
122
  </fingerprint>
123
+
113
124
  <fingerprint pattern="^KM-(.*)$">
114
125
  <description>Konica Minolta printer</description>
115
126
  <example>KM-5050</example>
@@ -117,6 +128,7 @@
117
128
  <param pos="0" name="os.device" value="Printer"/>
118
129
  <param pos="1" name="os.product"/>
119
130
  </fingerprint>
131
+
120
132
  <fingerprint pattern="^(FS-\S+MFP\S*)$">
121
133
  <description>Kyocera Mita Multifunction device</description>
122
134
  <example>FS-C2126MFP</example>
@@ -127,6 +139,7 @@
127
139
  <param pos="0" name="os.family" value="FS"/>
128
140
  <param pos="1" name="os.product"/>
129
141
  </fingerprint>
142
+
130
143
  <fingerprint pattern="^(FS-(?:C)?\d+(?:D|DN))$">
131
144
  <description>Kyocera Mita Printer</description>
132
145
  <example>FS-C8500DN</example>
@@ -137,6 +150,7 @@
137
150
  <param pos="0" name="os.family" value="FS"/>
138
151
  <param pos="1" name="os.product"/>
139
152
  </fingerprint>
153
+
140
154
  <fingerprint pattern="^(TASKalfa \S+)$">
141
155
  <description>Kyocera Mita TASKalfa multifunction device</description>
142
156
  <example>TASKalfa 300ci</example>
@@ -147,6 +161,7 @@
147
161
  <param pos="0" name="os.family" value="TASKalfa"/>
148
162
  <param pos="1" name="os.product"/>
149
163
  </fingerprint>
164
+
150
165
  <fingerprint pattern="^Lexmark (.*)$">
151
166
  <description>Lexmark JetDirect printer</description>
152
167
  <example>Lexmark C910</example>
@@ -156,6 +171,7 @@
156
171
  <param pos="0" name="os.device" value="Printer"/>
157
172
  <param pos="1" name="os.product"/>
158
173
  </fingerprint>
174
+
159
175
  <fingerprint pattern="(?i)^Oce (fx[^\s:]+):.*$">
160
176
  <description>Oce FX series multifunction device</description>
161
177
  <example os.product="fx3000">Oce fx3000:8C5-B29:Ver.D:U0707161719:B0601271355</example>
@@ -164,6 +180,7 @@
164
180
  <param pos="0" name="os.device" value="Multifunction Device"/>
165
181
  <param pos="1" name="os.product"/>
166
182
  </fingerprint>
183
+
167
184
  <fingerprint pattern="(?i)^Oce (VL\S+):.*$">
168
185
  <description>Oce VarioLink multifunction device</description>
169
186
  <example>Oce VL3200:8C5-D92:Ver.B</example>
@@ -172,16 +189,20 @@
172
189
  <param pos="0" name="os.device" value="Multifunction Device"/>
173
190
  <param pos="1" name="os.product"/>
174
191
  </fingerprint>
192
+
175
193
  <!-- IGI is Imagistics International, which was acquired by Oce.
176
194
  I can't find MX-MBX3 or any variant online. -->
195
+
177
196
  <fingerprint pattern="(?i)^OceIGI MX-\S+">
178
197
  <description>Oce-acquired IGI printer</description>
179
198
  <example>OceIGI MX-NBX3 02-Jul-07 14:47</example>
180
199
  <param pos="0" name="os.vendor" value="Oce"/>
181
200
  <param pos="0" name="os.device" value="Printer"/>
182
201
  </fingerprint>
202
+
183
203
  <!-- im3510/4510 is actually a range of model numbers, but asserting a range
184
204
  of models as a product is preferableto asserting nothing. -->
205
+
185
206
  <fingerprint pattern="(?i)^Imagistics (im\S+) (.+)">
186
207
  <description>Oce IM series multifunction device</description>
187
208
  <example>Imagistics im3510/4510 02-Aug-04 10:56</example>
@@ -192,7 +213,9 @@
192
213
  <param pos="1" name="os.product"/>
193
214
  <param pos="2" name="system.time"/>
194
215
  </fingerprint>
216
+
195
217
  <!-- C610 is a series; there are several models with suffixes n, dn, dtn, cdn -->
218
+
196
219
  <fingerprint pattern="^OKI (C\d+)\S*$">
197
220
  <description>Okidata color printer</description>
198
221
  <example>OKI C610</example>
@@ -202,6 +225,7 @@
202
225
  <param pos="0" name="os.device" value="Printer"/>
203
226
  <param pos="1" name="os.product"/>
204
227
  </fingerprint>
228
+
205
229
  <fingerprint pattern="^OKI (MC\d+)\S*$">
206
230
  <description>Okidata multifunction device</description>
207
231
  <example>OKI MC860</example>
@@ -209,6 +233,7 @@
209
233
  <param pos="0" name="os.device" value="Multifunction Device"/>
210
234
  <param pos="1" name="os.product"/>
211
235
  </fingerprint>
236
+
212
237
  <fingerprint pattern="(?i)^RICOH ((?:Aficio|MP|SP) .*)$">
213
238
  <description>Ricoh Aficio Printer</description>
214
239
  <example>RICOH Aficio 2075</example>
@@ -220,8 +245,10 @@
220
245
  <param pos="1" name="os.product"/>
221
246
  <param pos="0" name="os.device" value="Printer"/>
222
247
  </fingerprint>
248
+
223
249
  <!-- NRG was acquired by Ricoh; classify NRG printers as such.
224
250
  Be consistent with snmp_sysdescr.xml. -->
251
+
225
252
  <fingerprint pattern="(?i)^NRG ([MS]P \S+)$">
226
253
  <description>Ricoh NRG printer</description>
227
254
  <example>NRG MP 171</example>
@@ -236,8 +263,10 @@
236
263
  <param pos="0" name="os.device" value="Printer"/>
237
264
  <param pos="1" name="os.product"/>
238
265
  </fingerprint>
266
+
239
267
  <!-- Gestetner == NRG, and was acquired by Ricoh.
240
268
  Assert the range of products as os.product. -->
269
+
241
270
  <fingerprint pattern="(?i)^Gestetner (MP\S+/DSc\S+)$">
242
271
  <description>Ricoh Gestetner multifunction device</description>
243
272
  <example>Gestetner MPC2500/DSc525</example>
@@ -245,6 +274,7 @@
245
274
  <param pos="0" name="os.device" value="Multifunction Device"/>
246
275
  <param pos="1" name="os.product"/>
247
276
  </fingerprint>
277
+
248
278
  <fingerprint pattern="(?i)^HYDRA$">
249
279
  <description>RSI Hydra printer</description>
250
280
  <example>HYDRA</example>
@@ -252,6 +282,7 @@
252
282
  <param pos="0" name="os.device" value="Printer"/>
253
283
  <param pos="0" name="os.product" value="Hydra"/>
254
284
  </fingerprint>
285
+
255
286
  <fingerprint pattern="(?i)^Savin (\S+)$">
256
287
  <description>Savin Printer</description>
257
288
  <example>SAVIN 4075</example>
@@ -259,6 +290,7 @@
259
290
  <param pos="0" name="os.device" value="Printer"/>
260
291
  <param pos="1" name="os.product"/>
261
292
  </fingerprint>
293
+
262
294
  <fingerprint pattern="(?i)^Samsung ((?:SCX|CLX)-\S+) Series$">
263
295
  <description>Samsung multifunction device</description>
264
296
  <example>Samsung SCX-5835_5935 Series</example>
@@ -267,6 +299,7 @@
267
299
  <param pos="0" name="os.device" value="Multifunction Device"/>
268
300
  <param pos="1" name="os.product"/>
269
301
  </fingerprint>
302
+
270
303
  <fingerprint pattern="(?i)^Samsung ((?:ML|CLP)-\S+) Series$">
271
304
  <description>Samsung printer</description>
272
305
  <example>Samsung CLP-680 Series</example>
@@ -275,6 +308,7 @@
275
308
  <param pos="0" name="os.device" value="Printer"/>
276
309
  <param pos="1" name="os.product"/>
277
310
  </fingerprint>
311
+
278
312
  <fingerprint pattern="(?i)^SHARP (\S+-\S+) .*$">
279
313
  <description>Sharp Printer</description>
280
314
  <example>Sharp MX-NBX3 18-Mar-08 10:22</example>
@@ -283,6 +317,7 @@
283
317
  <param pos="0" name="os.device" value="Printer"/>
284
318
  <param pos="1" name="os.product"/>
285
319
  </fingerprint>
320
+
286
321
  <fingerprint pattern="(?i)^Source Technologies (\S+)$">
287
322
  <description>Source Technologies Printer</description>
288
323
  <example>Source Technologies ST-9620</example>
@@ -290,7 +325,9 @@
290
325
  <param pos="0" name="os.device" value="Printer"/>
291
326
  <param pos="1" name="os.product"/>
292
327
  </fingerprint>
328
+
293
329
  <!-- Consistent with snmp_sysdescr.xml -->
330
+
294
331
  <fingerprint pattern="^TOSHIBA (e-STUDIO\S+)(?:\s+.*)?" certainty="0.9">
295
332
  <description>Toshiba e-STUDIO multifunction device</description>
296
333
  <example>TOSHIBA e-STUDIO350 V468Z 20061013</example>
@@ -302,16 +339,16 @@
302
339
  <param pos="0" name="os.device" value="Multifunction Device"/>
303
340
  <param pos="1" name="os.product"/>
304
341
  </fingerprint>
342
+
305
343
  <!-- TODO:
306
344
  Xerox AccXES devices are documented to return:
307
-
308
345
  "<printer name> <release #>"
309
346
  <FF>
310
-
311
347
  In the above, <printer name> is the official product name of the
312
348
  AccXES printer, and <release #> corresponds to a software release
313
349
  number.
314
350
  -->
351
+
315
352
  <fingerprint pattern="^(?:ID=)?Xerox (Phaser \S+)$" certainty="0.9">
316
353
  <description>Xerox Phaser Printer</description>
317
354
  <example>Xerox Phaser 6180MFP-D</example>
@@ -321,6 +358,7 @@
321
358
  <param pos="0" name="os.device" value="Printer"/>
322
359
  <param pos="1" name="os.product"/>
323
360
  </fingerprint>
361
+
324
362
  <fingerprint pattern="^Xerox (WorkCentre .*)$" certainty="0.9">
325
363
  <description>Xerox Workcentre Printer</description>
326
364
  <example>Xerox WorkCentre 7425</example>
@@ -331,6 +369,7 @@
331
369
  <param pos="1" name="os.product"/>
332
370
  <param pos="0" name="os.device" value="Printer"/>
333
371
  </fingerprint>
372
+
334
373
  <fingerprint pattern="^(XC\S+)$" certainty="0.9">
335
374
  <description>Xerox XC Printer</description>
336
375
  <example>XC560</example>
@@ -339,6 +378,7 @@
339
378
  <param pos="0" name="os.device" value="Printer"/>
340
379
  <param pos="1" name="os.product"/>
341
380
  </fingerprint>
381
+
342
382
  <fingerprint pattern="^(DC\S+)$" certainty="0.9">
343
383
  <description>Xerox DocuColor Printer</description>
344
384
  <example>DC250</example>
@@ -347,6 +387,7 @@
347
387
  <param pos="0" name="os.device" value="Printer"/>
348
388
  <param pos="1" name="os.product"/>
349
389
  </fingerprint>
390
+
350
391
  <fingerprint pattern="^(EX\d+-\d+)$" certainty="0.9">
351
392
  <description>Xerox EX Print Server, powered by EFI Fiery</description>
352
393
  <example>EX4112-4127</example>
@@ -355,4 +396,5 @@
355
396
  <param pos="0" name="os.device" value="Print server"/>
356
397
  <param pos="1" name="os.product"/>
357
398
  </fingerprint>
358
- </fingerprints>
399
+
400
+ </fingerprints>
@@ -1,6 +1,5 @@
1
- <?xml version="1.0" encoding="UTF-8"?>
1
+ <?xml version='1.0' encoding='UTF-8'?>
2
2
  <fingerprints matches="html_title" database_type="service" preference="0.90">
3
-
4
3
  <!-- HTML Title elements found in HTTP response bodies are matched against these patterns to fingerprint HTTP servers. -->
5
4
 
6
5
  <fingerprint pattern="^Index of /">
@@ -62,6 +61,19 @@
62
61
  <param pos="0" name="os.cpe23" value="cpe:/o:canonical:ubuntu_linux:-"/>
63
62
  </fingerprint>
64
63
 
64
+ <fingerprint pattern="^Sample Home Page for APACHEDFT Server$">
65
+ <description>IBM iSeries Apache Default Page</description>
66
+ <example>Sample Home Page for APACHEDFT Server</example>
67
+ <param pos="0" name="os.vendor" value="IBM"/>
68
+ <param pos="0" name="os.family" value="OS/400"/>
69
+ <param pos="0" name="os.product" value="OS/400"/>
70
+ <param pos="0" name="os.cpe23" value="cpe:/o:ibm:os_400:-"/>
71
+ <param pos="0" name="service.vendor" value="Apache"/>
72
+ <param pos="0" name="service.product" value="HTTPD"/>
73
+ <param pos="0" name="service.family" value="Apache"/>
74
+ <param pos="0" name="service.cpe23" value="cpe:/a:apache:http_server:-"/>
75
+ </fingerprint>
76
+
65
77
  <fingerprint pattern="^Apache Tomcat$">
66
78
  <description>Apache Tomcat with no version</description>
67
79
  <example>Apache Tomcat</example>
@@ -89,6 +101,7 @@
89
101
  </fingerprint>
90
102
 
91
103
  <!-- HiSilicon is OEMd by a number of DVR manufacturers -->
104
+
92
105
  <fingerprint pattern="^DVR Components Download$">
93
106
  <description>Web server found on DVR and webcam servers sourced from HiSilicon</description>
94
107
  <example>DVR Components Download</example>
@@ -115,9 +128,10 @@
115
128
  <param pos="0" name="hw.family" value="FRITZ!Powerline"/>
116
129
  </fingerprint>
117
130
 
118
- <fingerprint pattern="^FRITZ!WLAN Repeater$">
131
+ <fingerprint pattern="^FRITZ!(?:WLAN )?Repeater$">
119
132
  <description>FRITZ!WLAN Repeater</description>
120
133
  <example>FRITZ!WLAN Repeater</example>
134
+ <example>FRITZ!Repeater</example>
121
135
  <param pos="0" name="hw.vendor" value="AVM"/>
122
136
  <param pos="0" name="hw.device" value="WLAN Repeater"/>
123
137
  <param pos="0" name="hw.family" value="FRITZ!WLAN Repeater"/>
@@ -145,7 +159,7 @@
145
159
  <param pos="0" name="os.vendor" value="Microsoft"/>
146
160
  <param pos="0" name="os.family" value="Windows"/>
147
161
  <param pos="0" name="os.product" value="Windows CE"/>
148
- <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows-ce:-"/>
162
+ <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_ce:-"/>
149
163
  </fingerprint>
150
164
 
151
165
  <fingerprint pattern="^IIS7$">
@@ -155,7 +169,7 @@
155
169
  <param pos="0" name="service.product" value="IIS"/>
156
170
  <param pos="0" name="service.family" value="IIS"/>
157
171
  <param pos="0" name="service.version" value="7"/>
158
- <param pos="0" name="service.cpe23" value="cpe:/a:microsoft:iis:{service.version}"/>
172
+ <param pos="0" name="service.cpe23" value="cpe:/a:microsoft:iis:7"/>
159
173
  <param pos="0" name="os.vendor" value="Microsoft"/>
160
174
  <param pos="0" name="os.family" value="Windows"/>
161
175
  <param pos="0" name="os.product" value="Windows"/>
@@ -169,7 +183,7 @@
169
183
  <param pos="0" name="service.product" value="IIS"/>
170
184
  <param pos="0" name="service.family" value="IIS"/>
171
185
  <param pos="0" name="service.version" value="8"/>
172
- <param pos="0" name="service.cpe23" value="cpe:/a:microsoft:iis:{service.version}"/>
186
+ <param pos="0" name="service.cpe23" value="cpe:/a:microsoft:iis:8"/>
173
187
  <param pos="0" name="os.vendor" value="Microsoft"/>
174
188
  <param pos="0" name="os.family" value="Windows"/>
175
189
  <param pos="0" name="os.product" value="Windows"/>
@@ -199,6 +213,7 @@
199
213
  <param pos="0" name="service.vendor" value="Microsoft"/>
200
214
  <param pos="0" name="service.product" value="IIS"/>
201
215
  <param pos="0" name="service.family" value="IIS"/>
216
+ <param pos="0" name="service.cpe23" value="cpe:/a:microsoft:iis:-"/>
202
217
  <param pos="0" name="os.vendor" value="Microsoft"/>
203
218
  <param pos="0" name="os.family" value="Windows"/>
204
219
  <param pos="0" name="os.product" value="Windows"/>
@@ -211,7 +226,7 @@
211
226
  <example>NETIASPOT Management Console</example>
212
227
  <param pos="0" name="hw.vendor" value="Netia"/>
213
228
  <param pos="0" name="hw.product" value="Spot"/>
214
- <param pos="0" name="hw.product" value="WAP"/>
229
+ <param pos="0" name="hw.device" value="WAP"/>
215
230
  </fingerprint>
216
231
 
217
232
  <fingerprint pattern="^hue personal wireless lighting$">
@@ -224,10 +239,10 @@
224
239
 
225
240
  <fingerprint pattern="LANDesk\(R\) Management Agent$">
226
241
  <description>LANDesk Management Agent</description>
242
+ <example>LANDesk(R) Management Agent</example>
227
243
  <param pos="0" name="service.vendor" value="LANDesk"/>
228
244
  <param pos="0" name="service.product" value="Management Agent"/>
229
245
  <param pos="0" name="service.family" value="Management Agent"/>
230
- <param pos="0" name="service.cpe23" value="cpe:/a:landesk:management_agent:-"/>
231
246
  </fingerprint>
232
247
 
233
248
  <fingerprint pattern="^(?:Parallels )?Plesk (?:(?:Onyx|Panel) )?([\d\.]+)$">
@@ -236,20 +251,20 @@
236
251
  <example service.version="17.5.3">Plesk Onyx 17.5.3</example>
237
252
  <example service.version="12.0.1">Parallels Plesk 12.0.1</example>
238
253
  <example service.version="11.5.30">Parallels Plesk Panel 11.5.30</example>
239
- <param pos="0" name="service.vendor" value="Plesk"/>
254
+ <param pos="0" name="service.vendor" value="Parallels"/>
240
255
  <param pos="0" name="service.product" value="Plesk"/>
241
256
  <param pos="1" name="service.version"/>
242
- <param pos="0" name="service.cpe23" value="cpe:/a:plesk:plesk:{service.version}"/>
257
+ <param pos="0" name="service.cpe23" value="cpe:/a:parallels:parallels_plesk_panel:{service.version}"/>
243
258
  </fingerprint>
244
259
 
245
260
  <fingerprint pattern="^(?:Parallels )?Plesk (?:(?:Onyx|Panel) )?([\d\.]+) for Microsoft Windows$">
246
261
  <description>Plesk web hosting platform with a version on Windows</description>
247
262
  <example service.version="12.5.30">Plesk 12.5.30 for Microsoft Windows</example>
248
263
  <example service.version="11.5.30">Parallels Plesk Panel 11.5.30 for Microsoft Windows</example>
249
- <param pos="0" name="service.vendor" value="Plesk"/>
264
+ <param pos="0" name="service.vendor" value="Parallels"/>
250
265
  <param pos="0" name="service.product" value="Plesk"/>
251
266
  <param pos="1" name="service.version"/>
252
- <param pos="0" name="service.cpe23" value="cpe:/a:plesk:plesk:{service.version}"/>
267
+ <param pos="0" name="service.cpe23" value="cpe:/a:parallels:parallels_plesk_panel:{service.version}"/>
253
268
  <param pos="0" name="os.vendor" value="Microsoft"/>
254
269
  <param pos="0" name="os.family" value="Windows"/>
255
270
  <param pos="0" name="os.product" value="Windows"/>
@@ -261,9 +276,9 @@
261
276
  <example>Default Parallels Plesk Panel Page</example>
262
277
  <example>Default Parallels Plesk Page</example>
263
278
  <example>Default PLESK Page</example>
264
- <param pos="0" name="service.vendor" value="Plesk"/>
279
+ <param pos="0" name="service.vendor" value="Parallels"/>
265
280
  <param pos="0" name="service.product" value="Plesk"/>
266
- <param pos="0" name="service.cpe23" value="cpe:/a:plesk:plesk:-"/>
281
+ <param pos="0" name="service.cpe23" value="cpe:/a:parallels:parallels_plesk_panel:-"/>
267
282
  </fingerprint>
268
283
 
269
284
  <fingerprint pattern="^Web Viewer for Samsung DVR$">
@@ -322,21 +337,44 @@
322
337
  </fingerprint>
323
338
 
324
339
  <!-- Various products by Ubiquiti networks -->
340
+
325
341
  <fingerprint pattern="^Ubiquiti Networks$">
326
342
  <description>Generic products by Ubiquiti Networks</description>
327
343
  <example>Ubiquiti Networks</example>
328
344
  <param pos="0" name="hw.vendor" value="Ubiquiti"/>
329
345
  </fingerprint>
330
346
 
347
+ <fingerprint pattern="^UniFi Security Gateway$">
348
+ <description>Ubiquiti Security Gateway</description>
349
+ <example>UniFi Security Gateway</example>
350
+ <param pos="0" name="hw.vendor" value="Ubiquiti"/>
351
+ <param pos="0" name="hw.device" value="Router"/>
352
+ <param pos="0" name="hw.product" value="UniFi Security Gateway"/>
353
+ </fingerprint>
354
+
355
+ <fingerprint pattern="^Ubiquiti EdgeSwitch$">
356
+ <description>Ubiquiti EdgeSwitch</description>
357
+ <example>Ubiquiti EdgeSwitch</example>
358
+ <param pos="0" name="os.vendor" value="Ubiquiti"/>
359
+ <param pos="0" name="os.family" value="Linux"/>
360
+ <param pos="0" name="os.product" value="EdgeOS"/>
361
+ <param pos="0" name="hw.vendor" value="Ubiquiti"/>
362
+ <param pos="0" name="hw.product" value="EdgeSwitch"/>
363
+ </fingerprint>
364
+
331
365
  <fingerprint pattern="^EdgeOS$">
332
366
  <description>Ubiquiti EdgeRouter/EdgeSwitch/etc</description>
333
367
  <example>EdgeOS</example>
368
+ <param pos="0" name="os.vendor" value="Ubiquiti"/>
369
+ <param pos="0" name="os.family" value="Linux"/>
370
+ <param pos="0" name="os.product" value="EdgeOS"/>
334
371
  <param pos="0" name="hw.vendor" value="Ubiquiti"/>
335
372
  </fingerprint>
336
373
 
337
- <fingerprint pattern="^CloudKey$">
374
+ <fingerprint pattern="^Cloud\s*Key$">
338
375
  <description>Ubiquiti UniFi Cloud Key</description>
339
376
  <example>CloudKey</example>
377
+ <example>Cloud Key</example>
340
378
  <param pos="0" name="hw.vendor" value="Ubiquiti"/>
341
379
  <param pos="0" name="hw.product" value="UniFi Cloud Key"/>
342
380
  </fingerprint>
@@ -350,19 +388,20 @@
350
388
  </fingerprint>
351
389
 
352
390
  <fingerprint pattern="^UniFi Video$">
353
- <description>Various UniFi Video products by Ubiquiti Networks</description>
391
+ <description>Various UniFi Video web service</description>
354
392
  <example>UniFi Video</example>
355
- <param pos="0" name="hw.vendor" value="Ubiquiti"/>
356
- <param pos="0" name="hw.family" value="UniFi"/>
357
- <param pos="0" name="hw.device" value="Web Cam"/>
393
+ <param pos="0" name="service.vendor" value="Ubiquiti"/>
394
+ <param pos="0" name="service.product" value="UniFi Video"/>
395
+ <param pos="0" name="service.cpe23" value="cpe:/a:ui:unifi_video:-"/>
358
396
  </fingerprint>
359
397
 
360
- <fingerprint pattern="^UniFi NVR: Software Portal$">
398
+ <fingerprint pattern="^(?:UniFi NVR: Software Portal|airVision: \[NVR\] - Software Portal)$">
361
399
  <description>UniFi NVR for recording from UniFi video cameras</description>
362
400
  <example>UniFi NVR: Software Portal</example>
401
+ <example>airVision: [NVR] - Software Portal</example>
363
402
  <param pos="0" name="hw.vendor" value="Ubiquiti"/>
364
403
  <param pos="0" name="hw.family" value="UniFi"/>
365
- <param pos="0" name="hw.family" value="UniFi NVR"/>
404
+ <param pos="0" name="hw.product" value="UniFi NVR"/>
366
405
  <param pos="0" name="hw.device" value="DVR"/>
367
406
  </fingerprint>
368
407
 
@@ -429,14 +468,27 @@
429
468
  <param pos="0" name="hw.product" value="Bridge"/>
430
469
  <param pos="0" name="hw.vendor" value="Eagle Eye Networks"/>
431
470
  </fingerprint>
471
+
432
472
  <fingerprint pattern="^Web Local Display Unauthorized$">
433
473
  <description>Eagle Eye Networks to manage IoT cameras unauthorized webpage</description>
434
474
  <example>Web Local Display Unauthorized</example>
435
- <param pos="0" name="hw.product" value=" Bridge"/>
475
+ <param pos="0" name="hw.product" value="Bridge"/>
436
476
  <param pos="0" name="hw.vendor" value="Eagle Eye Networks"/>
437
477
  </fingerprint>
438
478
 
439
479
  <!-- Netgear Products -->
480
+
481
+ <fingerprint pattern="^NETGEAR ReadyNAS$">
482
+ <description>NETGEAR ReadyNAS</description>
483
+ <example>NETGEAR ReadyNAS</example>
484
+ <param pos="0" name="os.vendor" value="Netgear"/>
485
+ <param pos="0" name="os.product" value="Linux"/>
486
+ <param pos="0" name="hw.vendor" value="Netgear"/>
487
+ <param pos="0" name="hw.device" value="NAS"/>
488
+ <param pos="0" name="hw.family" value="ReadyNAS"/>
489
+ <param pos="0" name="hw.product" value="ReadyNAS"/>
490
+ </fingerprint>
491
+
440
492
  <fingerprint pattern="^(?:NETGEAR|NetGear) ([a-zA-Z0-9\-\+]+)$">
441
493
  <description>Netgear Switches</description>
442
494
  <example hw.product="GS108T">NETGEAR GS108T</example>
@@ -545,21 +597,18 @@
545
597
  <param pos="0" name="hw.product" value="Sigma Control 2"/>
546
598
  </fingerprint>
547
599
 
548
-
549
-
550
-
551
600
  <fingerprint pattern="^WebPower$">
552
601
  <description>Eltek Power Controller</description>
553
602
  <example>WebPower</example>
554
603
  <param pos="0" name="hw.vendor" value="Eltek"/>
555
- <param pos="0" name="hw.device" value="Power Device"/>
604
+ <param pos="0" name="hw.device" value="Power device"/>
556
605
  </fingerprint>
557
606
 
558
607
  <fingerprint pattern="(Expert Power Control NET \d+x\d+) - (.*)$">
559
608
  <description>Gude Expert Power Control</description>
560
609
  <example host.name="Rack42" hw.product="Expert Power Control NET 2x6">Expert Power Control NET 2x6 - Rack42</example>
561
610
  <param pos="0" name="hw.vendor" value="Gude"/>
562
- <param pos="0" name="hw.device" value="Power Device"/>
611
+ <param pos="0" name="hw.device" value="Power device"/>
563
612
  <param pos="1" name="hw.product"/>
564
613
  <param pos="2" name="host.name"/>
565
614
  </fingerprint>
@@ -568,7 +617,7 @@
568
617
  <description>Sentry Switched CDU</description>
569
618
  <example>Sentry Switched CDU</example>
570
619
  <param pos="0" name="hw.vendor" value="ServerTech"/>
571
- <param pos="0" name="hw.device" value="Power Device"/>
620
+ <param pos="0" name="hw.device" value="Power device"/>
572
621
  <param pos="0" name="hw.product" value="Sentry Switched CDU"/>
573
622
  </fingerprint>
574
623
 
@@ -576,7 +625,7 @@
576
625
  <description>Emerson Network Power Rack PDU Card</description>
577
626
  <example>Emerson Network Power Rack PDU Card</example>
578
627
  <param pos="0" name="hw.vendor" value="Emerson"/>
579
- <param pos="0" name="hw.device" value="Power Device"/>
628
+ <param pos="0" name="hw.device" value="Power device"/>
580
629
  <param pos="0" name="hw.product" value="Rack PDU Card"/>
581
630
  </fingerprint>
582
631
 
@@ -587,7 +636,7 @@
587
636
  <example hw.vendor="Vertiv">Vertiv IntelliSlot Web Card</example>
588
637
  <example hw.vendor="Liebert">Liebert IntelliSlot Web Card</example>
589
638
  <param pos="1" name="hw.vendor"/>
590
- <param pos="0" name="hw.device" value="Power Device"/>
639
+ <param pos="0" name="hw.device" value="Power device"/>
591
640
  <param pos="0" name="hw.product" value="IntelliSlot Web Card"/>
592
641
  </fingerprint>
593
642
 
@@ -595,7 +644,7 @@
595
644
  <description>ConnectUPS Web/SNMP Card</description>
596
645
  <example>ConnectUPS Web/SNMP Card</example>
597
646
  <param pos="0" name="hw.vendor" value="APC"/>
598
- <param pos="0" name="hw.device" value="Power Device"/>
647
+ <param pos="0" name="hw.device" value="Power device"/>
599
648
  <param pos="0" name="hw.product" value="ConnectUPS Web Card"/>
600
649
  </fingerprint>
601
650
 
@@ -630,9 +679,10 @@
630
679
  <param pos="1" name="os.product"/>
631
680
  </fingerprint>
632
681
 
633
- <fingerprint pattern="^Cisco UCS KVM Direct$">
634
- <description>Cisco UCS KVM Direct</description>
682
+ <fingerprint pattern="^Cisco (?:UCS KVM Direct|KVM)$">
683
+ <description>Cisco KVM</description>
635
684
  <example>Cisco UCS KVM Direct</example>
685
+ <example>Cisco KVM</example>
636
686
  <param pos="0" name="hw.vendor" value="Cisco"/>
637
687
  <param pos="0" name="hw.device" value="Lights Out Management"/>
638
688
  <param pos="0" name="hw.product" value="UCS Manager"/>
@@ -640,6 +690,7 @@
640
690
  <param pos="0" name="os.family" value="Linux"/>
641
691
  <param pos="0" name="os.product" value="NX-OS"/>
642
692
  <param pos="0" name="os.certainty" value="0.8"/>
693
+ <param pos="0" name="os.cpe23" value="cpe:/o:cisco:nx-os:-"/>
643
694
  </fingerprint>
644
695
 
645
696
  <fingerprint pattern="^Cisco UCS Manager$">
@@ -652,6 +703,40 @@
652
703
  <param pos="0" name="os.family" value="Linux"/>
653
704
  <param pos="0" name="os.product" value="NX-OS"/>
654
705
  <param pos="0" name="os.certainty" value="0.8"/>
706
+ <param pos="0" name="os.cpe23" value="cpe:/o:cisco:nx-os:-"/>
707
+ </fingerprint>
708
+
709
+ <fingerprint pattern="^Cisco (?:IMC Login|Integrated Management Controller)">
710
+ <description>Cisco Integrated Management Controller</description>
711
+ <example>Cisco Integrated Management Controller</example>
712
+ <example>Cisco Integrated Management Controller Login</example>
713
+ <example>Cisco Integrated Management Controller WebUI</example>
714
+ <example>Cisco IMC Login Page</example>
715
+ <param pos="0" name="hw.device" value="Lights Out Management"/>
716
+ <param pos="0" name="hw.vendor" value="Cisco"/>
717
+ <param pos="0" name="hw.product" value="IMC"/>
718
+ <param pos="0" name="os.vendor" value="Cisco"/>
719
+ <param pos="0" name="os.family" value="Linux"/>
720
+ <param pos="0" name="os.product" value="IMC"/>
721
+ </fingerprint>
722
+
723
+ <fingerprint pattern="^Cisco Meeting Management$">
724
+ <description>Cisco Meeting Management Virtual Appliance</description>
725
+ <example>Cisco Meeting Management</example>
726
+ <param pos="0" name="hw.vendor" value="Cisco"/>
727
+ <param pos="0" name="hw.device" value="Video Conferencing"/>
728
+ <param pos="0" name="hw.product" value="Meeting Management"/>
729
+ <param pos="0" name="os.vendor" value="Cisco"/>
730
+ <param pos="0" name="os.family" value="Linux"/>
731
+ <param pos="0" name="os.product" value="Meeting Management"/>
732
+ </fingerprint>
733
+
734
+ <fingerprint pattern="^Cisco SON$">
735
+ <description>Cisco Crosswork SON</description>
736
+ <example>Cisco SON</example>
737
+ <param pos="0" name="hw.vendor" value="Cisco"/>
738
+ <param pos="0" name="hw.device" value="Network Management Device"/>
739
+ <param pos="0" name="hw.product" value="Crosswork SON Appliance"/>
655
740
  </fingerprint>
656
741
 
657
742
  <fingerprint pattern="^HPE Virtual Connect Manager$">
@@ -690,6 +775,7 @@
690
775
  <param pos="0" name="hw.device" value="Lights Out Management"/>
691
776
  <param pos="0" name="hw.vendor" value="HP"/>
692
777
  <param pos="0" name="hw.product" value="iLO"/>
778
+ <param pos="0" name="hw.cpe23" value="cpe:/h:hp:integrated_lights_out:-"/>
693
779
  <param pos="0" name="os.vendor" value="HP"/>
694
780
  <param pos="0" name="os.device" value="Lights Out Management"/>
695
781
  <param pos="0" name="os.family" value="iLO"/>
@@ -702,6 +788,7 @@
702
788
  <param pos="0" name="hw.device" value="Lights Out Management"/>
703
789
  <param pos="0" name="hw.vendor" value="HP"/>
704
790
  <param pos="0" name="hw.product" value="iLO"/>
791
+ <param pos="0" name="hw.cpe23" value="cpe:/h:hp:integrated_lights_out:-"/>
705
792
  <param pos="0" name="os.vendor" value="HP"/>
706
793
  <param pos="0" name="os.device" value="Lights Out Management"/>
707
794
  <param pos="0" name="os.family" value="iLO"/>
@@ -867,7 +954,6 @@
867
954
  <param pos="0" name="os.product" value="Polycom"/>
868
955
  </fingerprint>
869
956
 
870
-
871
957
  <fingerprint pattern="^Digium Phone Settings$">
872
958
  <description>Digium Phone Settings</description>
873
959
  <example>Digium Phone Settings</example>
@@ -895,7 +981,7 @@
895
981
  <description>Cisco IP Camera</description>
896
982
  <example>Cisco IP Camera</example>
897
983
  <param pos="0" name="hw.vendor" value="Cisco"/>
898
- <param pos="0" name="hw.device" value="Web Cam"/>
984
+ <param pos="0" name="hw.device" value="Web cam"/>
899
985
  </fingerprint>
900
986
 
901
987
  <fingerprint pattern="^Cisco TelePresence MCU">
@@ -923,6 +1009,7 @@
923
1009
  <param pos="0" name="hw.product" value="Catalyst"/>
924
1010
  <param pos="0" name="os.vendor" value="Cisco"/>
925
1011
  <param pos="0" name="os.product" value="CatOS"/>
1012
+ <param pos="0" name="os.cpe23" value="cpe:/o:cisco:catos:-"/>
926
1013
  </fingerprint>
927
1014
 
928
1015
  <fingerprint pattern="^Cisco MDS 9000(?: and Nexus 5000)? Management Modules (\d+\.\d+\S+)$">
@@ -933,10 +1020,103 @@
933
1020
  <param pos="0" name="hw.vendor" value="Cisco"/>
934
1021
  <param pos="0" name="hw.device" value="Switch"/>
935
1022
  <param pos="0" name="hw.product" value="MDS 9000"/>
1023
+ <param pos="0" name="hw.cpe23" value="cpe:/h:cisco:mds_9000:-"/>
936
1024
  <param pos="0" name="os.vendor" value="Cisco"/>
937
1025
  <param pos="0" name="os.device" value="Switch"/>
938
1026
  <param pos="0" name="os.product" value="MDS 9000"/>
939
1027
  <param pos="1" name="os.version"/>
1028
+ <param pos="0" name="os.cpe23" value="cpe:/o:cisco:mds_9000:{os.version}"/>
1029
+ </fingerprint>
1030
+
1031
+ <fingerprint pattern="^Stealthwatch Management Console$">
1032
+ <description>Stealthwatch Management Console</description>
1033
+ <example>Stealthwatch Management Console</example>
1034
+ <param pos="0" name="hw.vendor" value="Cisco"/>
1035
+ <param pos="0" name="hw.device" value="Security Appliance"/>
1036
+ <param pos="0" name="hw.product" value="Stealthwatch"/>
1037
+ <param pos="0" name="os.vendor" value="Cisco"/>
1038
+ <param pos="0" name="os.device" value="Security Appliance"/>
1039
+ <param pos="0" name="os.product" value="Stealthwatch"/>
1040
+ </fingerprint>
1041
+
1042
+ <fingerprint pattern="^Cisco vManage$">
1043
+ <description>Cisco vManage SD-WAN</description>
1044
+ <example>Cisco vManage</example>
1045
+ <param pos="0" name="hw.vendor" value="Cisco"/>
1046
+ <param pos="0" name="hw.device" value="SD-WAN Appliance"/>
1047
+ <param pos="0" name="hw.product" value="vManage"/>
1048
+ <param pos="0" name="os.vendor" value="Cisco"/>
1049
+ <param pos="0" name="os.device" value="SD-WAN Appliance"/>
1050
+ <param pos="0" name="os.product" value="vManage"/>
1051
+ </fingerprint>
1052
+
1053
+ <fingerprint pattern="^Login - Cisco DNA Center$">
1054
+ <description>Cisco DNA Center Appliance</description>
1055
+ <example>Login - Cisco DNA Center</example>
1056
+ <param pos="0" name="hw.vendor" value="Cisco"/>
1057
+ <param pos="0" name="hw.device" value="Network Management Device"/>
1058
+ <param pos="0" name="hw.product" value="DNA Center"/>
1059
+ <param pos="0" name="os.vendor" value="Cisco"/>
1060
+ <param pos="0" name="os.device" value="Network Management Device"/>
1061
+ <param pos="0" name="os.product" value="DNA Center"/>
1062
+ </fingerprint>
1063
+
1064
+ <fingerprint pattern="^Cisco (?:Enterprise )?NFVIS$">
1065
+ <description>Cisco NFVIS</description>
1066
+ <example>Cisco NFVIS</example>
1067
+ <example>Cisco Enterprise NFVIS</example>
1068
+ <param pos="0" name="hw.vendor" value="Cisco"/>
1069
+ <param pos="0" name="hw.device" value="Network Management Device"/>
1070
+ <param pos="0" name="hw.product" value="NFVIS"/>
1071
+ <param pos="0" name="os.vendor" value="Cisco"/>
1072
+ <param pos="0" name="os.device" value="Network Management Device"/>
1073
+ <param pos="0" name="os.product" value="NFVIS"/>
1074
+ </fingerprint>
1075
+
1076
+ <fingerprint pattern="^Cisco Systems Login$">
1077
+ <description>Cisco WLC</description>
1078
+ <example>Cisco Systems Login</example>
1079
+ <param pos="0" name="os.vendor" value="Cisco"/>
1080
+ <param pos="0" name="os.device" value="Wireless Controller"/>
1081
+ <param pos="0" name="os.product" value="Wireless LAN Controller"/>
1082
+ <param pos="0" name="os.cpe23" value="cpe:/o:cisco:wireless_lan_controller:-"/>
1083
+ <param pos="0" name="hw.vendor" value="Cisco"/>
1084
+ <param pos="0" name="hw.device" value="Wireless Controller"/>
1085
+ <param pos="0" name="hw.product" value="Wireless LAN Controller"/>
1086
+ <param pos="0" name="hw.cpe23" value="cpe:/h:cisco:wireless_lan_controller:-"/>
1087
+ </fingerprint>
1088
+
1089
+ <fingerprint pattern="^Duo Access Gateway$">
1090
+ <description>Duo Access Gateway</description>
1091
+ <example>Duo Access Gateway</example>
1092
+ <param pos="0" name="hw.vendor" value="Duo"/>
1093
+ <param pos="0" name="hw.device" value="Security Appliance"/>
1094
+ <param pos="0" name="hw.product" value="Access Gateway"/>
1095
+ <param pos="0" name="os.vendor" value="Duo"/>
1096
+ <param pos="0" name="os.device" value="Security Appliance"/>
1097
+ <param pos="0" name="os.product" value="Access Gateway"/>
1098
+ </fingerprint>
1099
+
1100
+ <fingerprint pattern="^Login - Duo Network Gateway$">
1101
+ <description>Duo Network Gateway</description>
1102
+ <example>Login - Duo Network Gateway</example>
1103
+ <param pos="0" name="hw.vendor" value="Duo"/>
1104
+ <param pos="0" name="hw.device" value="Security Appliance"/>
1105
+ <param pos="0" name="hw.product" value="Network Gateway"/>
1106
+ <param pos="0" name="os.vendor" value="Duo"/>
1107
+ <param pos="0" name="os.device" value="Security Appliance"/>
1108
+ <param pos="0" name="os.product" value="Network Gateway"/>
1109
+ </fingerprint>
1110
+
1111
+ <fingerprint pattern="^VBrick Rev">
1112
+ <description>VBrick Rev</description>
1113
+ <example>VBrick Rev</example>
1114
+ <param pos="0" name="hw.vendor" value="Cisco"/>
1115
+ <param pos="0" name="hw.device" value="Video Conferencing"/>
1116
+ <param pos="0" name="hw.product" value="VBrick Rev"/>
1117
+ <param pos="0" name="os.vendor" value="Cisco"/>
1118
+ <param pos="0" name="os.device" value="Video Conferencing"/>
1119
+ <param pos="0" name="os.product" value="VBrick Rev"/>
940
1120
  </fingerprint>
941
1121
 
942
1122
  <fingerprint pattern="^(LinxVII-\S+) Remote Access$">
@@ -958,19 +1138,19 @@
958
1138
  <description>Axis Communications Web Cam</description>
959
1139
  <example>AXIS</example>
960
1140
  <param pos="0" name="hw.vendor" value="AXIS"/>
961
- <param pos="0" name="hw.device" value="Web Cam"/>
1141
+ <param pos="0" name="hw.device" value="Web cam"/>
962
1142
  <param pos="0" name="os.vendor" value="AXIS"/>
963
- <param pos="0" name="os.device" value="Web Cam"/>
964
1143
  <param pos="0" name="os.family" value="Linux"/>
1144
+ <param pos="0" name="os.device" value="Web cam"/>
965
1145
  </fingerprint>
966
1146
 
967
1147
  <fingerprint pattern="^Hanwha Techwin$">
968
1148
  <description>Hanwha Techwin IP Camera</description>
969
1149
  <example>Hanwha Techwin</example>
970
1150
  <param pos="0" name="hw.vendor" value="Hanwha Techwin"/>
971
- <param pos="0" name="hw.device" value="Web Cam"/>
1151
+ <param pos="0" name="hw.device" value="Web cam"/>
972
1152
  <param pos="0" name="os.vendor" value="Hanwha Techwin"/>
973
- <param pos="0" name="os.device" value="Web Cam"/>
1153
+ <param pos="0" name="os.device" value="Web cam"/>
974
1154
  <param pos="0" name="os.family" value="Linux"/>
975
1155
  </fingerprint>
976
1156
 
@@ -979,19 +1159,31 @@
979
1159
  <example hw.product="WV-NS202A">WV-NS202A Network Camera</example>
980
1160
  <example hw.product="WV-NS954">WV-NS954 Network Camera</example>
981
1161
  <param pos="0" name="hw.vendor" value="Panasonic"/>
982
- <param pos="0" name="hw.device" value="Web Cam"/>
1162
+ <param pos="0" name="hw.device" value="Web cam"/>
983
1163
  <param pos="1" name="hw.product"/>
984
1164
  <param pos="0" name="os.vendor" value="Panasonic"/>
985
- <param pos="0" name="os.device" value="Web Cam"/>
1165
+ <param pos="0" name="os.device" value="Web cam"/>
986
1166
  <param pos="0" name="os.family" value="Linux"/>
987
1167
  </fingerprint>
988
1168
 
989
- <fingerprint pattern="^KACE Systems Management Appliance">
1169
+ <fingerprint pattern="^KACE (?:Systems Management|Systems Deployment|Remote Site) Appliance">
990
1170
  <description>KACE Systems Management Appliances</description>
991
1171
  <example>KACE Systems Management Appliance Service Center</example>
992
1172
  <example>KACE Systems Management Appliance Administrator Console</example>
1173
+ <example>KACE Systems Deployment Appliance</example>
1174
+ <example>KACE Remote Site Appliance</example>
1175
+ <param pos="0" name="hw.vendor" value="KACE"/>
1176
+ <param pos="0" name="hw.device" value="Support Appliance"/>
1177
+ <param pos="0" name="os.vendor" value="KACE"/>
1178
+ <param pos="0" name="os.family" value="FreeBSD"/>
1179
+ </fingerprint>
1180
+
1181
+ <fingerprint pattern="^K1000 Service Center$">
1182
+ <description>Dell K1000 Systems Management Appliances (KACE)</description>
1183
+ <example>K1000 Service Center</example>
993
1184
  <param pos="0" name="hw.vendor" value="KACE"/>
994
1185
  <param pos="0" name="hw.device" value="Support Appliance"/>
1186
+ <param pos="0" name="hw.product" value="K1000"/>
995
1187
  <param pos="0" name="os.vendor" value="KACE"/>
996
1188
  <param pos="0" name="os.family" value="FreeBSD"/>
997
1189
  </fingerprint>
@@ -1016,6 +1208,7 @@
1016
1208
  </fingerprint>
1017
1209
 
1018
1210
  <!-- An OEM of the Quantum Corporation SuperLoader 3 -->
1211
+
1019
1212
  <fingerprint pattern="^On Board Remote Management$">
1020
1213
  <description>PowerVault 124T Tape Library</description>
1021
1214
  <example>On Board Remote Management</example>
@@ -1025,7 +1218,7 @@
1025
1218
  <param pos="0" name="os.vendor" value="Dell"/>
1026
1219
  </fingerprint>
1027
1220
 
1028
- <fingerprint pattern="^(HD-RX-\S+)$">
1221
+ <fingerprint pattern="^(HD-RX-\S+)$">
1029
1222
  <description>Crestron Multiformat Receivers</description>
1030
1223
  <example hw.product="HD-RX-201-C-E">HD-RX-201-C-E</example>
1031
1224
  <param pos="0" name="hw.vendor" value="Crestron"/>
@@ -1034,7 +1227,7 @@
1034
1227
  <param pos="0" name="os.vendor" value="Crestron"/>
1035
1228
  </fingerprint>
1036
1229
 
1037
- <fingerprint pattern="^Lencore Sound Manager 2$">
1230
+ <fingerprint pattern="^Lencore Sound Manager 2$">
1038
1231
  <description>Lencore Sound Manager 2</description>
1039
1232
  <example>Lencore Sound Manager 2</example>
1040
1233
  <param pos="0" name="hw.vendor" value="Lencore"/>
@@ -1044,9 +1237,9 @@
1044
1237
  <param pos="0" name="os.product" value="SmartServer"/>
1045
1238
  </fingerprint>
1046
1239
 
1047
- <!-- Various ICS/OT -->
1240
+ <!-- Various ICS/OT -->
1048
1241
 
1049
- <fingerprint pattern="^CTI (25\S+) Main Menu$">
1242
+ <fingerprint pattern="^CTI (25\S+) Main Menu$">
1050
1243
  <description>Siemens 257x Ethernet Adapter (CTI Branded)</description>
1051
1244
  <example hw.product="2572-A">CTI 2572-A Main Menu</example>
1052
1245
  <param pos="0" name="hw.vendor" value="Siemens"/>
@@ -1171,7 +1364,6 @@
1171
1364
  <param pos="0" name="os.vendor" value="IBHsofte"/>
1172
1365
  </fingerprint>
1173
1366
 
1174
-
1175
1367
  <!-- Software and Appliances -->
1176
1368
 
1177
1369
  <fingerprint pattern="^S7/S5 OPC Server$">
@@ -1179,7 +1371,6 @@
1179
1371
  <example>S7/S5 OPC Server</example>
1180
1372
  <param pos="0" name="service.vendor" value="Softing"/>
1181
1373
  <param pos="0" name="service.product" value="S7/S5 OPC Server"/>
1182
- <param pos="0" name="service.cpe23" value="cpe:/a:softing:s7-s5-opc-server:-"/>
1183
1374
  </fingerprint>
1184
1375
 
1185
1376
  <fingerprint pattern="^Nessus$">
@@ -1213,7 +1404,6 @@
1213
1404
  <example>RabbitMQ Management</example>
1214
1405
  <param pos="0" name="service.vendor" value="RabbitMQ"/>
1215
1406
  <param pos="0" name="service.product" value="Management Server"/>
1216
- <param pos="0" name="service.cpe23" value="cpe:/a:rabbitmq:rabbitmq-manager:-"/>
1217
1407
  </fingerprint>
1218
1408
 
1219
1409
  <fingerprint pattern="^Statistics Report for HAProxy$">
@@ -1221,14 +1411,13 @@
1221
1411
  <example>Statistics Report for HAProxy</example>
1222
1412
  <param pos="0" name="service.vendor" value="HAProxy"/>
1223
1413
  <param pos="0" name="service.product" value="HAProxy Stats Server"/>
1224
- <param pos="0" name="service.cpe23" value="cpe:/a:haproxy:stats-server:-"/>
1225
1414
  </fingerprint>
1226
1415
 
1227
1416
  <fingerprint pattern="^Open Manage&amp;trade;$">
1228
- <description>Dell Open Manage Admin</description>
1417
+ <description>Dell OpenManage Admin</description>
1229
1418
  <example>Open Manage&amp;trade;</example>
1230
1419
  <param pos="0" name="service.vendor" value="Dell"/>
1231
- <param pos="0" name="service.product" value="Open Manage"/>
1420
+ <param pos="0" name="service.product" value="OpenManage"/>
1232
1421
  <param pos="0" name="service.cpe23" value="cpe:/a:dell:openmanage:-"/>
1233
1422
  </fingerprint>
1234
1423
 
@@ -1237,7 +1426,7 @@
1237
1426
  <example host.name="teller01">TightVNC desktop [teller01]</example>
1238
1427
  <param pos="0" name="service.vendor" value="TightVNC"/>
1239
1428
  <param pos="0" name="service.product" value="Desktop"/>
1240
- <param pos="0" name="service.cpe23" value="cpe:/a:tightvnc:desktop:-"/>
1429
+ <param pos="0" name="service.cpe23" value="cpe:/a:tightvnc:tightvnc:-"/>
1241
1430
  <param pos="1" name="host.name"/>
1242
1431
  </fingerprint>
1243
1432
 
@@ -1263,7 +1452,6 @@
1263
1452
  <example>Shell In A Box</example>
1264
1453
  <param pos="0" name="service.vendor" value="ShellInABox"/>
1265
1454
  <param pos="0" name="service.product" value="ShellInABox"/>
1266
- <param pos="0" name="service.cpe23" value="cpe:/a:shellinabox:shellinabox:-"/>
1267
1455
  </fingerprint>
1268
1456
 
1269
1457
  <fingerprint pattern="^AgilentLicenseManagerService Service$">
@@ -1271,33 +1459,54 @@
1271
1459
  <example>AgilentLicenseManagerService Service</example>
1272
1460
  <param pos="0" name="service.vendor" value="Agilent"/>
1273
1461
  <param pos="0" name="service.product" value="License Manager"/>
1274
- <param pos="0" name="service.cpe23" value="cpe:/a:agilent:license-manager-"/>
1275
1462
  </fingerprint>
1276
1463
 
1277
- <fingerprint pattern="^Red Hat OpenStack Platform Director$">
1464
+ <fingerprint pattern="^Red Hat(?:.reg;)? OpenStack (?:Platform )?Director$">
1278
1465
  <description>Red Hat OpenStack Platform Director</description>
1279
1466
  <example>Red Hat OpenStack Platform Director</example>
1467
+ <example>Red Hat&amp;reg; OpenStack Director</example>
1280
1468
  <param pos="0" name="service.vendor" value="Red Hat"/>
1281
1469
  <param pos="0" name="service.product" value="Open Stack Platform Director"/>
1282
- <param pos="0" name="service.cpe23" value="cpe:/a:openstack:platform-director:-"/>
1470
+ </fingerprint>
1471
+
1472
+ <fingerprint pattern="^Login - OpenStack Dashboard$">
1473
+ <description>OpenStack Dashboard</description>
1474
+ <example>Login - OpenStack Dashboard</example>
1475
+ <param pos="0" name="service.vendor" value="OpenStack"/>
1476
+ <param pos="0" name="service.product" value="Dashboard"/>
1283
1477
  </fingerprint>
1284
1478
 
1285
1479
  <fingerprint pattern="^splunkd$">
1286
1480
  <description>Splunk HTTP server used in the web interface, forwarders, indexers and more</description>
1287
1481
  <example>splunkd</example>
1288
1482
  <param pos="0" name="service.vendor" value="Splunk"/>
1289
- <param pos="0" name="service.product" value="Splunkd"/>
1290
- <param pos="0" name="service.cpe23" value="cpe:/a:splunk:splunkd:-"/>
1483
+ <param pos="0" name="service.product" value="Splunk"/>
1484
+ <param pos="0" name="service.cpe23" value="cpe:/a:splunk:splunk:-"/>
1291
1485
  </fingerprint>
1292
1486
 
1293
- <fingerprint pattern="^VMware Horizon$">
1487
+ <fingerprint pattern="^VMware(?: Horizon(?: View)?|.nbsp;Horizon| View Portal)?$">
1294
1488
  <description>VMware Horizon</description>
1295
1489
  <example>VMware Horizon</example>
1296
- <param pos="0" name="service.vendor" value="VMWare"/>
1490
+ <example>VMware Horizon View</example>
1491
+ <example>VMware&amp;nbsp;Horizon</example>
1492
+ <example>VMware View Portal</example>
1493
+ <param pos="0" name="service.vendor" value="VMware"/>
1297
1494
  <param pos="0" name="service.product" value="Horizon"/>
1298
1495
  <param pos="0" name="service.cpe23" value="cpe:/a:vmware:horizon:-"/>
1299
1496
  </fingerprint>
1300
1497
 
1498
+ <fingerprint pattern="^Welcome to VMware Site Recovery Manager$">
1499
+ <description>VMware SRM</description>
1500
+ <example>Welcome to VMware Site Recovery Manager</example>
1501
+ <param pos="0" name="os.vendor" value="VMware"/>
1502
+ <param pos="0" name="os.product" value="Linux"/>
1503
+ <param pos="0" name="hw.vendor" value="VMware"/>
1504
+ <param pos="0" name="hw.device" value="Appliance"/>
1505
+ <param pos="0" name="hw.product" value="Site Recovery Manager"/>
1506
+ <param pos="0" name="service.vendor" value="VMware"/>
1507
+ <param pos="0" name="service.product" value="Site Recovery Manager"/>
1508
+ </fingerprint>
1509
+
1301
1510
  <fingerprint pattern="^Graylog Web Interface$">
1302
1511
  <description>Graylog Web Interface</description>
1303
1512
  <example>Graylog Web Interface</example>
@@ -1306,20 +1515,38 @@
1306
1515
  <param pos="0" name="service.cpe23" value="cpe:/a:graylog:graylog:-"/>
1307
1516
  </fingerprint>
1308
1517
 
1518
+ <!-- The 'vendor' here has changed over time -->
1519
+
1520
+ <fingerprint pattern="^(?:Elastic\s+)?Kibana$">
1521
+ <description>Kibana Web Interface</description>
1522
+ <example>Kibana</example>
1523
+ <example>Elastic Kibana</example>
1524
+ <param pos="0" name="service.vendor" value="Elastic"/>
1525
+ <param pos="0" name="service.product" value="Kibana"/>
1526
+ </fingerprint>
1527
+
1528
+ <fingerprint pattern="^Grafana$">
1529
+ <description>Grafana Web Interface</description>
1530
+ <example>Grafana</example>
1531
+ <param pos="0" name="service.vendor" value="Grafana"/>
1532
+ <param pos="0" name="service.product" value="Grafana"/>
1533
+ <param pos="0" name="service.cpe23" value="cpe:/a:grafana:grafana:-"/>
1534
+ </fingerprint>
1535
+
1536
+ <fingerprint pattern="^Prometheus Time Series Collection and Processing Server$">
1537
+ <description>Prometheus Web Interface</description>
1538
+ <example>Prometheus Time Series Collection and Processing Server</example>
1539
+ <param pos="0" name="service.vendor" value="Prometheus"/>
1540
+ <param pos="0" name="service.product" value="Prometheus"/>
1541
+ <param pos="0" name="service.cpe23" value="cpe:/a:prometheus:prometheus:-"/>
1542
+ </fingerprint>
1543
+
1309
1544
  <fingerprint pattern="^Symantec Endpoint Protection Manager$">
1310
1545
  <description>Symantec Endpoint Protection Manager</description>
1311
1546
  <example>Symantec Endpoint Protection Manager</example>
1312
1547
  <param pos="0" name="service.vendor" value="Symantec"/>
1313
1548
  <param pos="0" name="service.product" value="Endpoint Protection Manager"/>
1314
- <param pos="0" name="service.cpe23" value="cpe:/a:symantec:endpoint-protection-manager:-"/>
1315
- </fingerprint>
1316
-
1317
- <fingerprint pattern="^Login Gateway - Kiwi Syslog Web Access$">
1318
- <description>Kiwi Syslog Web Access</description>
1319
- <example>Login Gateway - Kiwi Syslog Web Access</example>
1320
- <param pos="0" name="service.vendor" value="Solarwinds"/>
1321
- <param pos="0" name="service.product" value="Kiwi Syslog Web Access"/>
1322
- <param pos="0" name="service.cpe23" value="cpe:/a:solarwinds:kiwi-syslog-web:-"/>
1549
+ <param pos="0" name="service.cpe23" value="cpe:/a:symantec:endpoint_protection_manager:-"/>
1323
1550
  </fingerprint>
1324
1551
 
1325
1552
  <fingerprint pattern="^Hadoop Administration$">
@@ -1327,7 +1554,6 @@
1327
1554
  <example>Hadoop Administration</example>
1328
1555
  <param pos="0" name="service.vendor" value="Hadoop"/>
1329
1556
  <param pos="0" name="service.product" value="Hadoop Web Admin"/>
1330
- <param pos="0" name="service.cpe23" value="cpe:/a:hadoop:web-admin:-"/>
1331
1557
  </fingerprint>
1332
1558
 
1333
1559
  <fingerprint pattern="^ManageEngine OpManager$">
@@ -1338,4 +1564,1125 @@
1338
1564
  <param pos="0" name="service.cpe23" value="cpe:/a:manageengine:opmanager:-"/>
1339
1565
  </fingerprint>
1340
1566
 
1341
- </fingerprints>
1567
+ <fingerprint pattern="^ManageEngine ADAudit Plus$">
1568
+ <description>ManageEngineADAudit Plus</description>
1569
+ <example>ManageEngine ADAudit Plus</example>
1570
+ <param pos="0" name="service.vendor" value="ManageEngine"/>
1571
+ <param pos="0" name="service.product" value="ADAudit Plus"/>
1572
+ </fingerprint>
1573
+
1574
+ <fingerprint pattern="^(ScanFront \d.+)Web Menu$">
1575
+ <!-- no space between the product model and "Web Menu" in the title -->
1576
+
1577
+ <description>Canon ScanFront</description>
1578
+ <example os.product="ScanFront 220" hw.product="ScanFront 220">ScanFront 220Web Menu</example>
1579
+ <param pos="0" name="hw.device" value="Scanner"/>
1580
+ <param pos="0" name="hw.vendor" value="Canon"/>
1581
+ <param pos="1" name="hw.product"/>
1582
+ <param pos="0" name="os.device" value="Scanner"/>
1583
+ <param pos="0" name="os.vendor" value="Canon"/>
1584
+ <param pos="1" name="os.product"/>
1585
+ </fingerprint>
1586
+
1587
+ <fingerprint pattern="^CDVI Update$">
1588
+ <description>CDVI Door Control System</description>
1589
+ <example>CDVI Update</example>
1590
+ <param pos="0" name="hw.vendor" value="CDVI"/>
1591
+ <param pos="0" name="hw.device" value="Access Control"/>
1592
+ </fingerprint>
1593
+
1594
+ <fingerprint pattern="^Liebert OpenComms Network Interface Card$">
1595
+ <description>Liebert UPS</description>
1596
+ <example>Liebert OpenComms Network Interface Card</example>
1597
+ <param pos="0" name="hw.device" value="Power device"/>
1598
+ <param pos="0" name="hw.vendor" value="Liebert"/>
1599
+ <param pos="0" name="os.device" value="Power device"/>
1600
+ <param pos="0" name="os.vendor" value="Liebert"/>
1601
+ </fingerprint>
1602
+
1603
+ <fingerprint pattern="^Excella Main Page$">
1604
+ <description>MagTek Excella STX Check Scanner</description>
1605
+ <example>Excella Main Page</example>
1606
+ <param pos="0" name="hw.device" value="Check Scanner"/>
1607
+ <param pos="0" name="hw.vendor" value="MagTek"/>
1608
+ <param pos="0" name="hw.product" value="Excella"/>
1609
+ <param pos="0" name="os.device" value="Check Scanner"/>
1610
+ <param pos="0" name="os.vendor" value="MagTek"/>
1611
+ <param pos="0" name="os.product" value="Excella"/>
1612
+ </fingerprint>
1613
+
1614
+ <fingerprint pattern="^B426$">
1615
+ <description>Bosch Security Systems Ethernet Module (Alarm Panel)</description>
1616
+ <example>B426</example>
1617
+ <param pos="0" name="hw.device" value="Alarm Panel"/>
1618
+ <param pos="0" name="hw.vendor" value="Bosch"/>
1619
+ <param pos="0" name="os.device" value="Alarm Panel"/>
1620
+ <param pos="0" name="os.vendor" value="Bosch"/>
1621
+ </fingerprint>
1622
+
1623
+ <fingerprint pattern="^Citrix Login$">
1624
+ <description>Citrix NetScaler</description>
1625
+ <example>Citrix Login</example>
1626
+ <param pos="0" name="os.vendor" value="Citrix"/>
1627
+ <param pos="0" name="os.family" value="NetScaler"/>
1628
+ <param pos="0" name="os.device" value="Network Management Device"/>
1629
+ <param pos="0" name="os.product" value="NetScaler"/>
1630
+ <param pos="0" name="service.vendor" value="Citrix"/>
1631
+ <param pos="0" name="service.family" value="NetScaler"/>
1632
+ <param pos="0" name="service.device" value="Network Management Device"/>
1633
+ <param pos="0" name="service.product" value="NetScaler"/>
1634
+ <param pos="0" name="service.cpe23" value="cpe:/a:citrix:netscaler:-"/>
1635
+ </fingerprint>
1636
+
1637
+ <fingerprint pattern="^Netscaler Gateway$">
1638
+ <description>Citrix Netscaler Gateway</description>
1639
+ <example>Netscaler Gateway</example>
1640
+ <param pos="0" name="os.vendor" value="Citrix"/>
1641
+ <param pos="0" name="os.family" value="NetScaler"/>
1642
+ <param pos="0" name="os.device" value="Network Management Device"/>
1643
+ <param pos="0" name="os.product" value="NetScaler Gateway"/>
1644
+ <param pos="0" name="service.vendor" value="Citrix"/>
1645
+ <param pos="0" name="service.family" value="NetScaler"/>
1646
+ <param pos="0" name="service.device" value="Network Management Device"/>
1647
+ <param pos="0" name="service.product" value="NetScaler Gateway"/>
1648
+ </fingerprint>
1649
+
1650
+ <fingerprint pattern="^Citrix (?:NetScaler SDX|ADC SDX)$">
1651
+ <description>Citrix NetScaler SDX Gateway</description>
1652
+ <example>Citrix NetScaler SDX</example>
1653
+ <example>Citrix ADC SDX</example>
1654
+ <param pos="0" name="os.vendor" value="Citrix"/>
1655
+ <param pos="0" name="os.family" value="NetScaler"/>
1656
+ <param pos="0" name="os.device" value="Network Management Device"/>
1657
+ <param pos="0" name="os.product" value="NetScaler SDX Gateway"/>
1658
+ <param pos="0" name="service.vendor" value="Citrix"/>
1659
+ <param pos="0" name="service.family" value="NetScaler"/>
1660
+ <param pos="0" name="service.device" value="Network Management Device"/>
1661
+ <param pos="0" name="service.product" value="NetScaler SDX Gateway"/>
1662
+ </fingerprint>
1663
+
1664
+ <fingerprint pattern="^Citrix NetScaler Insight Center$">
1665
+ <description>Citrix NetScaler Insight Center</description>
1666
+ <example>Citrix NetScaler Insight Center</example>
1667
+ <param pos="0" name="service.vendor" value="Citrix"/>
1668
+ <param pos="0" name="service.family" value="NetScaler"/>
1669
+ <param pos="0" name="service.product" value="NetScaler Insight Center"/>
1670
+ </fingerprint>
1671
+
1672
+ <fingerprint pattern="^Brother ([^\s]+) series$">
1673
+ <description>Brother Printers</description>
1674
+ <example hw.product="MFC-L5900DW">Brother MFC-L5900DW series</example>
1675
+ <param pos="0" name="hw.vendor" value="Brother"/>
1676
+ <param pos="0" name="hw.device" value="Printer"/>
1677
+ <param pos="1" name="hw.product"/>
1678
+ </fingerprint>
1679
+
1680
+ <fingerprint pattern="^HP (?:Color )?LaserJet ([^&amp;]+)&amp;">
1681
+ <description>HP LaserJet</description>
1682
+ <example hw.product="M1536dnf MFP">HP LaserJet M1536dnf MFP&amp;nbsp;&amp;nbsp;&amp;nbsp;1.1.1.1</example>
1683
+ <param pos="0" name="hw.vendor" value="HP"/>
1684
+ <param pos="0" name="hw.family" value="LaserJet"/>
1685
+ <param pos="0" name="hw.device" value="Printer"/>
1686
+ <param pos="1" name="hw.product"/>
1687
+ </fingerprint>
1688
+
1689
+ <fingerprint pattern="^Jamf Pro Login - Jamf Pro v(\S+)$">
1690
+ <description>Jamf Pro</description>
1691
+ <example service.version="10.14.0-t1563397490">Jamf Pro Login - Jamf Pro v10.14.0-t1563397490</example>
1692
+ <param pos="0" name="service.vendor" value="Jamf"/>
1693
+ <param pos="0" name="service.product" value="Jamf Pro"/>
1694
+ <param pos="1" name="service.version"/>
1695
+ <param pos="0" name="service.cpe23" value="cpe:/a:jamf:jamf:{service.version}"/>
1696
+ </fingerprint>
1697
+
1698
+ <fingerprint pattern="^Keyper Systems Administration - Login$">
1699
+ <description>Keyper Systems Administration - Login</description>
1700
+ <example>Keyper Systems Administration - Login</example>
1701
+ <param pos="0" name="hw.vendor" value="Keyper"/>
1702
+ <param pos="0" name="hw.device" value="Access Control"/>
1703
+ <param pos="0" name="hw.product" value="Key Management"/>
1704
+ </fingerprint>
1705
+
1706
+ <fingerprint pattern="FireEye:\s*$">
1707
+ <description>FireEye Investigation Analysis System Appliance</description>
1708
+ <example>FireEye:</example>
1709
+ <param pos="0" name="hw.vendor" value="FireEye"/>
1710
+ <param pos="0" name="hw.product" value="IA Appliance"/>
1711
+ <param pos="0" name="hw.device" value="Security Appliance"/>
1712
+ </fingerprint>
1713
+
1714
+ <fingerprint pattern="^GigaVUE-OS$">
1715
+ <description>Gigamon GigaVUE Appliance</description>
1716
+ <example>GigaVUE-OS</example>
1717
+ <param pos="0" name="hw.vendor" value="Gigamon"/>
1718
+ <param pos="0" name="hw.device" value="Monitoring"/>
1719
+ <param pos="0" name="hw.product" value="GigaVUE"/>
1720
+ </fingerprint>
1721
+
1722
+ <fingerprint pattern="^Pure Storage Login$">
1723
+ <description>Pure Storage Appliance</description>
1724
+ <example>Pure Storage Login</example>
1725
+ <param pos="0" name="hw.vendor" value="Pure Storage"/>
1726
+ <param pos="0" name="hw.device" value="NAS"/>
1727
+ <param pos="0" name="hw.product" value="Appliance"/>
1728
+ </fingerprint>
1729
+
1730
+ <fingerprint pattern="^Axonius Cybersecurity Asset Management Platform$">
1731
+ <description>Axonius Appliance</description>
1732
+ <example>Axonius Cybersecurity Asset Management Platform</example>
1733
+ <param pos="0" name="hw.vendor" value="Axonius"/>
1734
+ <param pos="0" name="hw.device" value="Security Appliance"/>
1735
+ <param pos="0" name="hw.product" value="Asset Management"/>
1736
+ </fingerprint>
1737
+
1738
+ <fingerprint pattern="^CRESTRON$">
1739
+ <description>Crestron Video Conferencing</description>
1740
+ <example>CRESTRON</example>
1741
+ <param pos="0" name="hw.vendor" value="Crestron"/>
1742
+ <param pos="0" name="hw.device" value="Video Conferencing"/>
1743
+ <param pos="0" name="os.vendor" value="Crestron"/>
1744
+ <param pos="0" name="os.family" value="Linux"/>
1745
+ <param pos="0" name="os.device" value="Video Conferencing"/>
1746
+ </fingerprint>
1747
+
1748
+ <fingerprint pattern="^ELAN Viewer Installation$">
1749
+ <description>ELAN Smart Home Controller</description>
1750
+ <example>ELAN Viewer Installation</example>
1751
+ <param pos="0" name="hw.vendor" value="ELAN"/>
1752
+ <param pos="0" name="hw.device" value="Building Automation"/>
1753
+ <param pos="0" name="hw.product" value="Home Controller"/>
1754
+ <param pos="0" name="os.vendor" value="ELAN"/>
1755
+ <param pos="0" name="os.family" value="Linux"/>
1756
+ </fingerprint>
1757
+
1758
+ <fingerprint pattern="^iTach IP2IR Setup and Configuration$">
1759
+ <description>iTach IP2IR</description>
1760
+ <example>iTach IP2IR Setup and Configuration</example>
1761
+ <param pos="0" name="hw.vendor" value="iTach"/>
1762
+ <param pos="0" name="hw.device" value="Device"/>
1763
+ <param pos="0" name="hw.product" value="IP2IR"/>
1764
+ </fingerprint>
1765
+
1766
+ <fingerprint pattern="^AVTECH Device ManageR$">
1767
+ <description>AVTECH Device ManageR Software</description>
1768
+ <example>AVTECH Device ManageR</example>
1769
+ <param pos="0" name="service.vendor" value="AVTECH"/>
1770
+ <param pos="0" name="service.product" value="Device Manager"/>
1771
+ </fingerprint>
1772
+
1773
+ <fingerprint pattern="^AVTECH Software, Inc\. - Room Alert(?:&amp;reg;)?\s+([a-zA-Z0-9/]+) - Advanced">
1774
+ <description>AVTECH RoomAlert</description>
1775
+ <example hw.product="Room Alert 11E" hw.product.model="11E">AVTECH Software, Inc. - Room Alert 11E - Advanced Computer Room Environment Monitoring, Alerting &amp;amp; Automatic Corrective Action</example>
1776
+ <example hw.product="Room Alert 32E/W" hw.product.model="32E/W">AVTECH Software, Inc. - Room Alert 32E/W - Advanced Computer Room Environment Monitoring, Alerting &amp;amp; Automatic Corrective Action</example>
1777
+ <example hw.product="Room Alert 32E/W" hw.product.model="32E/W">AVTECH Software, Inc. - Room Alert&amp;reg; 32E/W - Advanced Computer Room Monitoring, Alerting &amp;amp; Automatic Corrective Action</example>
1778
+ <param pos="0" name="hw.vendor" value="AVTECH"/>
1779
+ <param pos="0" name="hw.device" value="Monitoring"/>
1780
+ <param pos="1" name="hw.product.model"/>
1781
+ <param pos="0" name="hw.product" value="Room Alert {hw.product.model}"/>
1782
+ </fingerprint>
1783
+
1784
+ <fingerprint pattern="^AVTECH Software, Inc\. - TemPageR\s+([a-zA-Z0-9/]+) - Real-Time">
1785
+ <description>AVTECH TepPageR</description>
1786
+ <example hw.product="TemPageR 3E" hw.product.model="3E">AVTECH Software, Inc. - TemPageR 3E - Real-Time Temperature Monitor For IT &amp;amp; Facilities Environment Monitoring</example>
1787
+ <param pos="0" name="hw.vendor" value="AVTECH"/>
1788
+ <param pos="0" name="hw.device" value="Monitoring"/>
1789
+ <param pos="1" name="hw.product.model"/>
1790
+ <param pos="0" name="hw.product" value="TemPageR {hw.product.model}"/>
1791
+ </fingerprint>
1792
+
1793
+ <fingerprint pattern="^AppDynamics$">
1794
+ <description>Cisco AppDynamics Appliance</description>
1795
+ <example>AppDynamics</example>
1796
+ <param pos="0" name="hw.vendor" value="Cisco"/>
1797
+ <param pos="0" name="hw.device" value="Network Appliance"/>
1798
+ <param pos="0" name="hw.product" value="AppDynamics"/>
1799
+ </fingerprint>
1800
+
1801
+ <fingerprint pattern="^INDECT - CarDetector Configurator$">
1802
+ <description>INDECT Parking Management Console</description>
1803
+ <example>INDECT - CarDetector Configurator</example>
1804
+ <param pos="0" name="hw.vendor" value="INDECT"/>
1805
+ <param pos="0" name="hw.device" value="Network Appliance"/>
1806
+ <param pos="0" name="hw.product" value="CarDetector"/>
1807
+ </fingerprint>
1808
+
1809
+ <fingerprint pattern="^J-Link Pro Webserver$">
1810
+ <description>Segger J-Link Pro</description>
1811
+ <example>J-Link Pro Webserver</example>
1812
+ <param pos="0" name="hw.vendor" value="Segger"/>
1813
+ <param pos="0" name="hw.device" value="JTAG Adapter"/>
1814
+ <param pos="0" name="hw.product" value="J-Link Pro"/>
1815
+ </fingerprint>
1816
+
1817
+ <fingerprint pattern="^OneFS$">
1818
+ <description>EMC Isilon OneFS</description>
1819
+ <example>OneFS</example>
1820
+ <param pos="0" name="os.family" value="FreeBSD"/>
1821
+ <param pos="0" name="os.vendor" value="EMC"/>
1822
+ <param pos="0" name="os.product" value="Isilon OneFS OS"/>
1823
+ <param pos="0" name="hw.vendor" value="EMC"/>
1824
+ <param pos="0" name="hw.device" value="NAS"/>
1825
+ <param pos="0" name="hw.product" value="Isilon OneFS"/>
1826
+ </fingerprint>
1827
+
1828
+ <fingerprint pattern="^Isilon InsightIQ$">
1829
+ <description>EMC Isilon InsightIQ</description>
1830
+ <example>Isilon InsightIQ</example>
1831
+ <param pos="0" name="os.family" value="FreeBSD"/>
1832
+ <param pos="0" name="os.vendor" value="EMC"/>
1833
+ <param pos="0" name="os.product" value="Isilon OneFS OS"/>
1834
+ <param pos="0" name="hw.vendor" value="EMC"/>
1835
+ <param pos="0" name="hw.device" value="Network Appliance"/>
1836
+ <param pos="0" name="hw.product" value="Isilon InsightIQ"/>
1837
+ </fingerprint>
1838
+
1839
+ <fingerprint pattern="^Active Intelligence Engine$">
1840
+ <description>Attivio Active Intelligence Engine</description>
1841
+ <example>Active Intelligence Engine</example>
1842
+ <param pos="0" name="service.vendor" value="Attivio"/>
1843
+ <param pos="0" name="service.product" value="Active Intelligence Engine"/>
1844
+ </fingerprint>
1845
+
1846
+ <fingerprint pattern="^Welcome to WildFly(?: Application Server)?\s+(\d+)">
1847
+ <description>WildFly with version</description>
1848
+ <example service.version="11">Welcome to WildFly 11</example>
1849
+ <example service.version="8">Welcome to WildFly 8</example>
1850
+ <example service.version="8">Welcome to WildFly Application Server 8</example>
1851
+ <param pos="0" name="service.vendor" value="Red Hat"/>
1852
+ <param pos="0" name="service.product" value="WildFly"/>
1853
+ <param pos="1" name="service.version"/>
1854
+ <param pos="0" name="service.cpe23" value="cpe:/a:redhat:wildfly:{service.version}"/>
1855
+ </fingerprint>
1856
+
1857
+ <fingerprint pattern="^Welcome to WildFly$">
1858
+ <description>WildFly with no version</description>
1859
+ <example>Welcome to WildFly</example>
1860
+ <param pos="0" name="service.vendor" value="Red Hat"/>
1861
+ <param pos="0" name="service.product" value="WildFly"/>
1862
+ <param pos="0" name="service.cpe23" value="cpe:/a:redhat:wildfly:-"/>
1863
+ </fingerprint>
1864
+
1865
+ <fingerprint pattern="^Welcome to JBoss Application Server ([\d\.]+)$">
1866
+ <description>JBoss Application Server w/ Version</description>
1867
+ <example service.version="7">Welcome to JBoss Application Server 7</example>
1868
+ <param pos="0" name="service.vendor" value="Red Hat"/>
1869
+ <param pos="0" name="service.product" value="JBoss AS"/>
1870
+ <param pos="1" name="service.version"/>
1871
+ <param pos="0" name="service.cpe23" value="cpe:/a:redhat:jboss_wildfly_application_server:{service.version}"/>
1872
+ </fingerprint>
1873
+
1874
+ <fingerprint pattern="^Welcome to JBoss(?: AS|.trade;)$">
1875
+ <description>JBoss Application Server w/o Version</description>
1876
+ <example>Welcome to JBoss AS</example>
1877
+ <example>Welcome to JBoss&amp;trade;</example>
1878
+ <param pos="0" name="service.vendor" value="Red Hat"/>
1879
+ <param pos="0" name="service.product" value="JBoss AS"/>
1880
+ <param pos="0" name="service.cpe23" value="cpe:/a:redhat:jboss_wildfly_application_server:-"/>
1881
+ </fingerprint>
1882
+
1883
+ <fingerprint pattern="^(?:JBoss )?EAP ([\d\.]+)$">
1884
+ <description>JBoss EAP w/ Version</description>
1885
+ <example service.version="7">JBoss EAP 7</example>
1886
+ <example service.version="7">EAP 7</example>
1887
+ <param pos="0" name="service.vendor" value="Red Hat"/>
1888
+ <param pos="0" name="service.product" value="JBoss EAP"/>
1889
+ <param pos="1" name="service.version"/>
1890
+ <param pos="0" name="service.cpe23" value="cpe:/a:redhat:jboss_enterprise_application_platform:{service.version}"/>
1891
+ </fingerprint>
1892
+
1893
+ <fingerprint pattern="^Welcome to JBoss EAP$">
1894
+ <description>JBoss EAP w/o Version</description>
1895
+ <example>Welcome to JBoss EAP</example>
1896
+ <param pos="0" name="service.vendor" value="Red Hat"/>
1897
+ <param pos="0" name="service.product" value="JBoss EAP"/>
1898
+ <param pos="0" name="service.cpe23" value="cpe:/a:redhat:jboss_enterprise_application_platform:-"/>
1899
+ </fingerprint>
1900
+
1901
+ <fingerprint pattern="^S2 Network Node$">
1902
+ <description>S2 Network Node Appliance</description>
1903
+ <example>S2 Network Node</example>
1904
+ <param pos="0" name="hw.vendor" value="S2"/>
1905
+ <param pos="0" name="hw.device" value="Access Control"/>
1906
+ <param pos="0" name="hw.product" value="Network Node"/>
1907
+ </fingerprint>
1908
+
1909
+ <fingerprint pattern="^(?:S2 Netbox Login|Home - NetBox)$">
1910
+ <description>S2 Netbox Appliance</description>
1911
+ <example>S2 Netbox Login</example>
1912
+ <example>Home - NetBox</example>
1913
+ <param pos="0" name="hw.vendor" value="S2"/>
1914
+ <param pos="0" name="hw.device" value="Access Control"/>
1915
+ <param pos="0" name="hw.product" value="Netbox"/>
1916
+ </fingerprint>
1917
+
1918
+ <fingerprint pattern="^S2 NetVR Login$">
1919
+ <description>S2 NetVR Appliance</description>
1920
+ <example>S2 NetVR Login</example>
1921
+ <param pos="0" name="hw.vendor" value="S2"/>
1922
+ <param pos="0" name="hw.device" value="Access Control"/>
1923
+ <param pos="0" name="hw.product" value="NetVR"/>
1924
+ </fingerprint>
1925
+
1926
+ <fingerprint pattern="^IBM HTTP Server$">
1927
+ <description>IBM HTTP Server w/o Version</description>
1928
+ <example>IBM HTTP Server</example>
1929
+ <param pos="0" name="service.vendor" value="IBM"/>
1930
+ <param pos="0" name="service.product" value="HTTPD"/>
1931
+ <param pos="0" name="service.family" value="Apache"/>
1932
+ </fingerprint>
1933
+
1934
+ <fingerprint pattern="^IBM HTTP Server ([0-9\.]+)$">
1935
+ <description>IBM HTTP Server with Version</description>
1936
+ <example service.version="8.5.5">IBM HTTP Server 8.5.5</example>
1937
+ <param pos="0" name="service.vendor" value="IBM"/>
1938
+ <param pos="0" name="service.product" value="HTTPD"/>
1939
+ <param pos="0" name="service.family" value="Apache"/>
1940
+ <param pos="1" name="service.version"/>
1941
+ </fingerprint>
1942
+
1943
+ <fingerprint pattern="^IBM Tivoli Storage Manager$">
1944
+ <description>IBM Tivoli Storage Manager</description>
1945
+ <example>IBM Tivoli Storage Manager</example>
1946
+ <param pos="0" name="service.vendor" value="IBM"/>
1947
+ <param pos="0" name="service.family" value="Tivoli"/>
1948
+ <param pos="0" name="service.product" value="Tivoli Storage Manager"/>
1949
+ <param pos="0" name="service.cpe23" value="cpe:/a:ibm:tivoli_storage_manager:-"/>
1950
+ </fingerprint>
1951
+
1952
+ <fingerprint pattern="^IBM FlashCopy Manager$">
1953
+ <description>IBM FlashCopy Manager</description>
1954
+ <example>IBM FlashCopy Manager</example>
1955
+ <param pos="0" name="service.vendor" value="IBM"/>
1956
+ <param pos="0" name="service.family" value="Tivoli"/>
1957
+ <param pos="0" name="service.product" value="Tivoli Storage FlashCopy Manager"/>
1958
+ <param pos="0" name="service.cpe23" value="cpe:/a:ibm:tivoli_storage_flashcopy_manager:-"/>
1959
+ </fingerprint>
1960
+
1961
+ <fingerprint pattern="^(?:Jupyter Notebook|JupyterLab|Home Page - Select or create a notebook)$">
1962
+ <description>Jupyter Notebook Server</description>
1963
+ <example>Jupyter Notebook</example>
1964
+ <example>JupyterLab</example>
1965
+ <example>Home Page - Select or create a notebook</example>
1966
+ <param pos="0" name="service.vendor" value="Jupyter"/>
1967
+ <param pos="0" name="service.product" value="Notebook"/>
1968
+ <param pos="0" name="service.cpe23" value="cpe:/a:jupyter:notebook:-"/>
1969
+ </fingerprint>
1970
+
1971
+ <fingerprint pattern="^Redirect to userimage: /control/userimage\.html$">
1972
+ <description>Mobotix Network Camera</description>
1973
+ <example>Redirect to userimage: /control/userimage.html</example>
1974
+ <param pos="0" name="hw.vendor" value="Mobotix"/>
1975
+ <param pos="0" name="hw.device" value="Web cam"/>
1976
+ <param pos="0" name="hw.product" value="IP Camera"/>
1977
+ </fingerprint>
1978
+
1979
+ <fingerprint pattern="^Apache ActiveMQ$">
1980
+ <description>Apache ActiveMQ</description>
1981
+ <example>Apache ActiveMQ</example>
1982
+ <param pos="0" name="service.vendor" value="Apache"/>
1983
+ <param pos="0" name="service.family" value="ActiveMQ"/>
1984
+ <param pos="0" name="service.product" value="ActiveMQ"/>
1985
+ <param pos="0" name="service.cpe23" value="cpe:/a:apache:activemq:-"/>
1986
+ </fingerprint>
1987
+
1988
+ <fingerprint pattern="^Google Wifi$">
1989
+ <description>Google OnHub Router</description>
1990
+ <example>Google Wifi</example>
1991
+ <param pos="0" name="os.vendor" value="Google"/>
1992
+ <param pos="0" name="os.family" value="Linux"/>
1993
+ <param pos="0" name="hw.vendor" value="Google"/>
1994
+ <param pos="0" name="hw.device" value="Router"/>
1995
+ <param pos="0" name="hw.product" value="OnHub"/>
1996
+ </fingerprint>
1997
+
1998
+ <fingerprint pattern="PRTG Network Monitor">
1999
+ <description>PRTG Network Monitor (not anchored)</description>
2000
+ <example>PRTG Network Monitor (WIN-R4C1T8HRRAA)</example>
2001
+ <example>BigCorp PRTG Network Monitor (PRTG2)</example>
2002
+ <param pos="0" name="service.vendor" value="PRTG"/>
2003
+ <param pos="0" name="service.product" value="Network Monitor"/>
2004
+ </fingerprint>
2005
+
2006
+ <fingerprint pattern="^(?:BrightSign&amp;reg;|BrightSign Applications|Diagnostics Web Server)$">
2007
+ <description>BrightSign Controller</description>
2008
+ <example>BrightSign&amp;reg;</example>
2009
+ <example>BrightSign Applications</example>
2010
+ <example>Diagnostics Web Server</example>
2011
+ <param pos="0" name="os.vendor" value="BrightSign"/>
2012
+ <param pos="0" name="os.family" value="Linux"/>
2013
+ <param pos="0" name="hw.vendor" value="BrightSign"/>
2014
+ <param pos="0" name="hw.device" value="Media Server"/>
2015
+ <param pos="0" name="hw.product" value="Digital Signage Player"/>
2016
+ </fingerprint>
2017
+
2018
+ <fingerprint pattern="^Linksys Smart Wi-Fi$">
2019
+ <description>Linksys Smart Wi-Fi</description>
2020
+ <example>Linksys Smart Wi-Fi</example>
2021
+ <param pos="0" name="os.vendor" value="Linksys"/>
2022
+ <param pos="0" name="os.family" value="Linux"/>
2023
+ <param pos="0" name="hw.vendor" value="Linksys"/>
2024
+ <param pos="0" name="hw.device" value="WAP"/>
2025
+ </fingerprint>
2026
+
2027
+ <fingerprint pattern="^(?:DD System Manager|System Manager)$">
2028
+ <description>Data Domain System Manager</description>
2029
+ <example>DD System Manager</example>
2030
+ <example>System Manager</example>
2031
+ <param pos="0" name="os.vendor" value="Data Domain"/>
2032
+ <param pos="0" name="os.product" value="DD OS"/>
2033
+ <param pos="0" name="os.device" value="Storage"/>
2034
+ <param pos="0" name="hw.vendor" value="Data Domain"/>
2035
+ <param pos="0" name="hw.product" value="DD OS"/>
2036
+ <param pos="0" name="hw.device" value="Storage"/>
2037
+ </fingerprint>
2038
+
2039
+ <fingerprint pattern="^SonarQube$">
2040
+ <description>SonarQube</description>
2041
+ <example>SonarQube</example>
2042
+ <param pos="0" name="service.vendor" value="SonarQube"/>
2043
+ <param pos="0" name="service.product" value="SonarQube"/>
2044
+ </fingerprint>
2045
+
2046
+ <fingerprint pattern="^(\S+) - Opengear Management Console$">
2047
+ <description>Opengear Management Console</description>
2048
+ <example host.name="server01">server01 - Opengear Management Console</example>
2049
+ <param pos="0" name="service.vendor" value="Opengear"/>
2050
+ <param pos="0" name="service.product" value="Management Console"/>
2051
+ <param pos="1" name="host.name"/>
2052
+ </fingerprint>
2053
+
2054
+ <fingerprint pattern="^Login \(Virtual Traffic Manager Appliance :: (\S+)\)$">
2055
+ <description>Brocade Virtual Traffic Manager Appliance</description>
2056
+ <example host.name="10.0.0.1">Login (Virtual Traffic Manager Appliance :: 10.0.0.1)</example>
2057
+ <param pos="0" name="hw.vendor" value="Brocade"/>
2058
+ <param pos="0" name="hw.device" value="Network Management Device"/>
2059
+ <param pos="0" name="hw.product" value="Virtual Traffic Manager"/>
2060
+ <param pos="1" name="host.name"/>
2061
+ </fingerprint>
2062
+
2063
+ <fingerprint pattern="^Chronograf$">
2064
+ <description>Chronograf Dashboard</description>
2065
+ <example>Chronograf</example>
2066
+ <param pos="0" name="service.vendor" value="InfluxData"/>
2067
+ <param pos="0" name="service.product" value="Chronograf"/>
2068
+ </fingerprint>
2069
+
2070
+ <fingerprint pattern="^InfluxDB 2.0$">
2071
+ <description>InfluxDB 2.0 Dashboard</description>
2072
+ <example>InfluxDB 2.0</example>
2073
+ <param pos="0" name="service.vendor" value="InfluxData"/>
2074
+ <param pos="0" name="service.product" value="InfluxDB"/>
2075
+ <param pos="0" name="service.version" value="2.0"/>
2076
+ <param pos="0" name="service.cpe23" value="cpe:/a:influxdata:influxdb:2.0"/>
2077
+ </fingerprint>
2078
+
2079
+ <fingerprint pattern="^(?:Sign in . GitLab|GitLab|GitLab is not responding)$">
2080
+ <description>GitLab</description>
2081
+ <example>Sign in · GitLab</example>
2082
+ <example>GitLab is not responding</example>
2083
+ <example>GitLab</example>
2084
+ <example>Sign in | GitLab</example>
2085
+ <param pos="0" name="service.vendor" value="GitLab"/>
2086
+ <param pos="0" name="service.product" value="GitLab"/>
2087
+ <param pos="0" name="service.cpe23" value="cpe:/a:gitlab:gitlab:-"/>
2088
+ </fingerprint>
2089
+
2090
+ <fingerprint pattern="^(?:GitHub Enterprise|Setup GitHub Enterprise|GitHub Enterprise preflight check)$">
2091
+ <description>GitHub Enterprise</description>
2092
+ <example>GitHub Enterprise</example>
2093
+ <example>Setup GitHub Enterprise</example>
2094
+ <example>GitHub Enterprise preflight check</example>
2095
+ <param pos="0" name="service.vendor" value="GitHub"/>
2096
+ <param pos="0" name="service.product" value="Enterprise"/>
2097
+ </fingerprint>
2098
+
2099
+ <fingerprint pattern="^(?:SAP NetWeaver Application Server Java|SAP&amp;#x20;NetWeaver&amp;#x20;Portal|Loading Portal\.\.\.)$">
2100
+ <description>SAP NetWeaver Portal</description>
2101
+ <example>SAP NetWeaver Application Server Java</example>
2102
+ <example>SAP&amp;#x20;NetWeaver&amp;#x20;Portal</example>
2103
+ <example>Loading Portal...</example>
2104
+ <param pos="0" name="service.vendor" value="SAP"/>
2105
+ <param pos="0" name="service.product" value="NetWeaver Web AS"/>
2106
+ <param pos="0" name="service.family" value="NetWeaver"/>
2107
+ </fingerprint>
2108
+
2109
+ <fingerprint pattern="^Lansweeper (?:- Login|First Run Wizard)$">
2110
+ <description>Lansweeper</description>
2111
+ <example>Lansweeper - Login</example>
2112
+ <example>Lansweeper First Run Wizard</example>
2113
+ <param pos="0" name="service.vendor" value="Lansweeper"/>
2114
+ <param pos="0" name="service.product" value="Lansweeper"/>
2115
+ <param pos="0" name="service.cpe23" value="cpe:/a:lansweeper:lansweeper:-"/>
2116
+ </fingerprint>
2117
+
2118
+ <fingerprint pattern="^(?:Celery Flower|Flower)$">
2119
+ <description>Celery Flower Dashboard</description>
2120
+ <example>Celery Flower</example>
2121
+ <example>Flower</example>
2122
+ <param pos="0" name="service.vendor" value="Celery"/>
2123
+ <param pos="0" name="service.product" value="Flower"/>
2124
+ </fingerprint>
2125
+
2126
+ <fingerprint pattern="^(?:Insight)?VM Security Console :: Login$">
2127
+ <description>Rapid7 InsightVM Console</description>
2128
+ <example>InsightVM Security Console :: Login</example>
2129
+ <example>VM Security Console :: Login</example>
2130
+ <param pos="0" name="service.vendor" value="Rapid7"/>
2131
+ <param pos="0" name="service.product" value="InsightVM"/>
2132
+ <param pos="0" name="service.cpe23" value="cpe:/a:rapid7:insightvm:-"/>
2133
+ </fingerprint>
2134
+
2135
+ <fingerprint pattern="^Nexpose Security Console :: Login$">
2136
+ <description>Rapid7 Nexpose Console</description>
2137
+ <example>Nexpose Security Console :: Login</example>
2138
+ <param pos="0" name="service.vendor" value="Rapid7"/>
2139
+ <param pos="0" name="service.product" value="Nexpose"/>
2140
+ <param pos="0" name="service.cpe23" value="cpe:/a:rapid7:nexpose:-"/>
2141
+ </fingerprint>
2142
+
2143
+ <fingerprint pattern="^(?:Login Gateway|Session Error) - Kiwi Syslog Web Access$">
2144
+ <description>Kiwi Syslog Web Access</description>
2145
+ <example>Login Gateway - Kiwi Syslog Web Access</example>
2146
+ <example>Session Error - Kiwi Syslog Web Access</example>
2147
+ <param pos="0" name="service.vendor" value="SolarWinds"/>
2148
+ <param pos="0" name="service.product" value="Kiwi Syslog"/>
2149
+ </fingerprint>
2150
+
2151
+ <fingerprint pattern="^ClickShare Configurator$">
2152
+ <description>ClickShare Wireless Presenter</description>
2153
+ <example>ClickShare Configurator</example>
2154
+ <param pos="0" name="hw.vendor" value="Barco"/>
2155
+ <param pos="0" name="hw.device" value="Wireless Presenter"/>
2156
+ <param pos="0" name="hw.product" value="ClickShare"/>
2157
+ <param pos="0" name="os.vendor" value="Barco"/>
2158
+ <param pos="0" name="os.family" value="ClickShareOS"/>
2159
+ <param pos="0" name="os.device" value="Wireless Presenter"/>
2160
+ </fingerprint>
2161
+
2162
+ <fingerprint pattern="^(IQ\S+) IQEYE\S+: Live Images$">
2163
+ <description>IQinVision IQeye Network Camera</description>
2164
+ <example hw.product="IQA22N">IQA22N IQEYE1A1613: Live Images</example>
2165
+ <example hw.product="IQeye703">IQeye703 IQEYE011750: Live Images</example>
2166
+ <param pos="0" name="hw.vendor" value="IQinVision"/>
2167
+ <param pos="0" name="hw.device" value="Web cam"/>
2168
+ <param pos="1" name="hw.product"/>
2169
+ </fingerprint>
2170
+
2171
+ <fingerprint pattern="^(?:Oracle\(R\) )?Integrated Lights Out Manager$">
2172
+ <description>Oracle iLOM</description>
2173
+ <example>Oracle(R) Integrated Lights Out Manager</example>
2174
+ <example>Integrated Lights Out Manager</example>
2175
+ <param pos="0" name="hw.device" value="Lights Out Management"/>
2176
+ <param pos="0" name="hw.vendor" value="Oracle"/>
2177
+ <param pos="0" name="hw.family" value="ILOM"/>
2178
+ <param pos="0" name="hw.product" value="ILOM"/>
2179
+ <param pos="0" name="os.device" value="Lights Out Management"/>
2180
+ <param pos="0" name="os.vendor" value="Oracle"/>
2181
+ <param pos="0" name="os.family" value="ILOM"/>
2182
+ <param pos="0" name="os.product" value="ILOM"/>
2183
+ </fingerprint>
2184
+
2185
+ <fingerprint pattern="^Genetec - SHARPV\S+$">
2186
+ <description>Genetec AutoVu SharpV ALPR Camera</description>
2187
+ <example>Genetec - SHARPV01111</example>
2188
+ <param pos="0" name="hw.vendor" value="Genetec"/>
2189
+ <param pos="0" name="hw.device" value="Web cam"/>
2190
+ <param pos="0" name="hw.product" value="AutoVu SharpV"/>
2191
+ </fingerprint>
2192
+
2193
+ <fingerprint pattern="^Nexus Repository Manager$">
2194
+ <description>Nexus Repository Manager</description>
2195
+ <example>Nexus Repository Manager</example>
2196
+ <param pos="0" name="service.vendor" value="Apache"/>
2197
+ <param pos="0" name="service.product" value="Nexus Repository Manager"/>
2198
+ </fingerprint>
2199
+
2200
+ <fingerprint pattern="^Apache Flink Web Dashboard$">
2201
+ <description>Apache Flink Web Dashboard</description>
2202
+ <example>Apache Flink Web Dashboard</example>
2203
+ <param pos="0" name="service.vendor" value="Apache"/>
2204
+ <param pos="0" name="service.product" value="Flink"/>
2205
+ <param pos="0" name="service.cpe23" value="cpe:/a:apache:flink:-"/>
2206
+ </fingerprint>
2207
+
2208
+ <fingerprint pattern="^(?:Twonky|Twonky Server|TwonkyMedia|TwonkyMedia server media browser)$">
2209
+ <description>Twonky Server</description>
2210
+ <example>Twonky</example>
2211
+ <example>Twonky Server</example>
2212
+ <example>TwonkyMedia</example>
2213
+ <example>TwonkyMedia server media browser</example>
2214
+ <param pos="0" name="service.vendor" value="Lynx Technology"/>
2215
+ <param pos="0" name="service.product" value="Twonky Media Server"/>
2216
+ </fingerprint>
2217
+
2218
+ <fingerprint pattern="^Spiceworks(?: Server Busy| Help Desk)?$">
2219
+ <description>Spiceworks</description>
2220
+ <example>Spiceworks</example>
2221
+ <example>Spiceworks Help Desk</example>
2222
+ <example>Spiceworks Server Busy</example>
2223
+ <param pos="0" name="service.vendor" value="Spiceworks"/>
2224
+ <param pos="0" name="service.product" value="Help Desk Server"/>
2225
+ </fingerprint>
2226
+
2227
+ <fingerprint pattern="^Network Monitor$">
2228
+ <description>Spiceworks Network Monitor</description>
2229
+ <example>Network Monitor</example>
2230
+ <param pos="0" name="service.vendor" value="Spiceworks"/>
2231
+ <param pos="0" name="service.product" value="Network Monitor"/>
2232
+ </fingerprint>
2233
+
2234
+ <fingerprint pattern="^Spirent TestCenter IQ(?: - (?:Free )?Preview)?$">
2235
+ <description>Spirent TestCenter IQ</description>
2236
+ <example>Spirent TestCenter IQ</example>
2237
+ <example>Spirent TestCenter IQ - Free Preview</example>
2238
+ <example>Spirent TestCenter IQ - Preview</example>
2239
+ <param pos="0" name="service.vendor" value="Spirent Communications"/>
2240
+ <param pos="0" name="service.product" value="TestCenter IQ"/>
2241
+ </fingerprint>
2242
+
2243
+ <fingerprint pattern="^SABnzbd(?: - Log in)?$">
2244
+ <description>SABnzbd Newsreader</description>
2245
+ <example>SABnzbd</example>
2246
+ <example>SABnzbd - Log in</example>
2247
+ <param pos="0" name="service.vendor" value="SABnzbd"/>
2248
+ <param pos="0" name="service.product" value="SABnzbd"/>
2249
+ </fingerprint>
2250
+
2251
+ <fingerprint pattern="^(?:Zabbix|.*: Zabbix)$">
2252
+ <description>Zabbix</description>
2253
+ <example>Zabbix</example>
2254
+ <example>appliance: Zabbix</example>
2255
+ <param pos="0" name="service.vendor" value="Zabbix"/>
2256
+ <param pos="0" name="service.product" value="Zabbix"/>
2257
+ <param pos="0" name="service.cpe23" value="cpe:/a:zabbix:zabbix:-"/>
2258
+ </fingerprint>
2259
+
2260
+ <fingerprint pattern="^(\S+) \(build (\S+)\) - Info$">
2261
+ <description>DD-WRT</description>
2262
+ <example host.name="SubTerraVia-NUC" os.version="36104" os.build="36104">SubTerraVia-NUC (build 36104) - Info</example>
2263
+ <example host.name="DD-WRT" os.version="35030M" os.build="35030M">DD-WRT (build 35030M) - Info</example>
2264
+ <param pos="0" name="os.vendor" value="DD-WRT"/>
2265
+ <param pos="0" name="os.product" value="DD-WRT"/>
2266
+ <param pos="0" name="os.device" value="Router"/>
2267
+ <param pos="1" name="host.name"/>
2268
+ <param pos="2" name="os.version"/>
2269
+ <param pos="2" name="os.build"/>
2270
+ <param pos="0" name="os.cpe23" value="cpe:/o:dd-wrt:dd-wrt:{os.version}"/>
2271
+ </fingerprint>
2272
+
2273
+ <fingerprint pattern="^(?:Apache Druid|Druid Console|Legacy Coordinator Console)$">
2274
+ <description>Apache Druid</description>
2275
+ <example>Apache Druid</example>
2276
+ <example>Legacy Coordinator Console</example>
2277
+ <example>Druid Console</example>
2278
+ <param pos="0" name="service.vendor" value="Apache"/>
2279
+ <param pos="0" name="service.product" value="Druid"/>
2280
+ <param pos="0" name="service.cpe23" value="cpe:/a:apache:druid:-"/>
2281
+ </fingerprint>
2282
+
2283
+ <fingerprint pattern="^Gerrit Code Review$">
2284
+ <description>Gerrit Code Review</description>
2285
+ <example>Gerrit Code Review</example>
2286
+ <param pos="0" name="service.vendor" value="Gerrit"/>
2287
+ <param pos="0" name="service.product" value="Code Review"/>
2288
+ </fingerprint>
2289
+
2290
+ <fingerprint pattern=" - Ignition Gateway$">
2291
+ <description>Inductive Automation Ignition Gateway</description>
2292
+ <example>QA-ROBOT3 - Ignition Gateway</example>
2293
+ <example>Ignition 8.0 Demo Server - Ignition Gateway</example>
2294
+ <param pos="0" name="service.vendor" value="Inductive Automation"/>
2295
+ <param pos="0" name="service.product" value="Ignition Gateway"/>
2296
+ </fingerprint>
2297
+
2298
+ <fingerprint pattern="^Airflow(?: - (?:Login|DAGs))?$">
2299
+ <description>Apache Airflow</description>
2300
+ <example>Airflow</example>
2301
+ <example>Airflow - DAGs</example>
2302
+ <example>Airflow - Login</example>
2303
+ <param pos="0" name="service.vendor" value="Apache"/>
2304
+ <param pos="0" name="service.product" value="Airflow"/>
2305
+ <param pos="0" name="service.cpe23" value="cpe:/a:apache:airflow:-"/>
2306
+ </fingerprint>
2307
+
2308
+ <fingerprint pattern="^Cockroach Console$">
2309
+ <description>CockroachDB Console</description>
2310
+ <example>Cockroach Console</example>
2311
+ <param pos="0" name="service.vendor" value="Cockroach Labs"/>
2312
+ <param pos="0" name="service.product" value="CockroachDB"/>
2313
+ </fingerprint>
2314
+
2315
+ <fingerprint pattern="^(?:openmediavault control panel|OpenMediaVault web administration interface) - (\S+)$">
2316
+ <description>OpenMediaVault</description>
2317
+ <example host.name="raspberrypi">openmediavault control panel - raspberrypi</example>
2318
+ <example host.name="raspberrypi">OpenMediaVault web administration interface - raspberrypi</example>
2319
+ <param pos="0" name="os.vendor" value="OpenMediaVault"/>
2320
+ <param pos="0" name="os.family" value="Linux"/>
2321
+ <param pos="0" name="os.product" value="OpenMediaVault"/>
2322
+ <param pos="0" name="os.device" value="NAS"/>
2323
+ <param pos="1" name="host.name"/>
2324
+ </fingerprint>
2325
+
2326
+ <fingerprint pattern="^Log in to TeamCity .mdash; TeamCity$">
2327
+ <description>TeamCity</description>
2328
+ <example>Log in to TeamCity &amp;mdash; TeamCity</example>
2329
+ <param pos="0" name="service.vendor" value="JetBrains"/>
2330
+ <param pos="0" name="service.product" value="TeamCity"/>
2331
+ <param pos="0" name="service.cpe23" value="cpe:/a:jetbrains:teamcity:-"/>
2332
+ </fingerprint>
2333
+
2334
+ <fingerprint pattern="^Home - CUPS ([\d\.]+)$">
2335
+ <description>Apple CUPS</description>
2336
+ <example service.version="2.3.1">Home - CUPS 2.3.1</example>
2337
+ <param pos="0" name="service.vendor" value="Apple"/>
2338
+ <param pos="0" name="service.product" value="CUPS"/>
2339
+ <param pos="0" name="service.family" value="CUPS"/>
2340
+ <param pos="1" name="service.version"/>
2341
+ <param pos="0" name="service.cpe23" value="cpe:/a:apple:cups:{service.version}"/>
2342
+ </fingerprint>
2343
+
2344
+ <fingerprint pattern="^RUNDECK ENTERPRISE - Login$">
2345
+ <description>Rundeck Enterprise</description>
2346
+ <example>RUNDECK ENTERPRISE - Login</example>
2347
+ <param pos="0" name="service.vendor" value="Rundeck"/>
2348
+ <param pos="0" name="service.product" value="Rundeck Enterprise"/>
2349
+ </fingerprint>
2350
+
2351
+ <fingerprint pattern="^Rundeck - Login$">
2352
+ <description>Rundeck</description>
2353
+ <example>Rundeck - Login</example>
2354
+ <param pos="0" name="service.vendor" value="Rundeck"/>
2355
+ <param pos="0" name="service.product" value="Rundeck"/>
2356
+ <param pos="0" name="service.cpe23" value="cpe:/a:rundeck:rundeck:-"/>
2357
+ </fingerprint>
2358
+
2359
+ <fingerprint pattern="^CrushFTP WebInterface$">
2360
+ <description>CrushFTP Web</description>
2361
+ <example>CrushFTP WebInterface</example>
2362
+ <param pos="0" name="service.vendor" value="CrushFTP"/>
2363
+ <param pos="0" name="service.product" value="CrushFTP Web Interface"/>
2364
+ <param pos="0" name="service.certainty" value="0.5"/>
2365
+ </fingerprint>
2366
+
2367
+ <fingerprint pattern="^OpenEdge Explorer$">
2368
+ <description>Progress OpenEdge Explorer</description>
2369
+ <example>OpenEdge Explorer</example>
2370
+ <param pos="0" name="service.vendor" value="Progress"/>
2371
+ <param pos="0" name="service.product" value="OpenEdge Explorer"/>
2372
+ </fingerprint>
2373
+
2374
+ <fingerprint pattern="^Consul by HashiCorp$">
2375
+ <description>HashiCorp Consul</description>
2376
+ <example>Consul by HashiCorp</example>
2377
+ <param pos="0" name="service.vendor" value="HashiCorp"/>
2378
+ <param pos="0" name="service.product" value="Consul"/>
2379
+ <param pos="0" name="service.cpe23" value="cpe:/a:hashicorp:consul:-"/>
2380
+ </fingerprint>
2381
+
2382
+ <fingerprint pattern="^Redmine(?: 500 error)?$">
2383
+ <description>Redmine</description>
2384
+ <example>Redmine</example>
2385
+ <param pos="0" name="service.vendor" value="Redmine"/>
2386
+ <param pos="0" name="service.product" value="Redmine"/>
2387
+ <param pos="0" name="service.cpe23" value="cpe:/a:redmine:redmine:-"/>
2388
+ </fingerprint>
2389
+
2390
+ <fingerprint pattern="; Nagios Log Server$">
2391
+ <description>Nagios Log Server</description>
2392
+ <example>Database Offline &amp;middot; Nagios Log Server</example>
2393
+ <param pos="0" name="service.vendor" value="Nagios"/>
2394
+ <param pos="0" name="service.product" value="Nagios Log Server"/>
2395
+ </fingerprint>
2396
+
2397
+ <fingerprint pattern="; Nagios Network Analyzer$">
2398
+ <description>Nagios Network Analyzer</description>
2399
+ <example>Login &amp;bull; Nagios Network Analyzer</example>
2400
+ <example>Licensing &amp;bull; Nagios Network Analyzer</example>
2401
+ <param pos="0" name="service.vendor" value="Nagios"/>
2402
+ <param pos="0" name="service.product" value="Nagios Network Analyzer"/>
2403
+ </fingerprint>
2404
+
2405
+ <fingerprint pattern="^Zing Vision$">
2406
+ <description>Zing Vision</description>
2407
+ <example>Zing Vision</example>
2408
+ <param pos="0" name="service.vendor" value="Azul Systems"/>
2409
+ <param pos="0" name="service.product" value="Zing Vision"/>
2410
+ </fingerprint>
2411
+
2412
+ <fingerprint pattern="^Swagger (?:UI|Editor)$">
2413
+ <description>Swagger UI</description>
2414
+ <example>Swagger UI</example>
2415
+ <example>Swagger Editor</example>
2416
+ <param pos="0" name="service.vendor" value="Swagger"/>
2417
+ <param pos="0" name="service.product" value="UI"/>
2418
+ </fingerprint>
2419
+
2420
+ <fingerprint pattern="^Emby$">
2421
+ <description>Emby Media Server</description>
2422
+ <example>Emby</example>
2423
+ <param pos="0" name="service.vendor" value="Emby"/>
2424
+ <param pos="0" name="service.product" value="Web Client"/>
2425
+ <param pos="0" name="service.device" value="Media Server"/>
2426
+ </fingerprint>
2427
+
2428
+ <fingerprint pattern="^WS - Folding@home Work Server$">
2429
+ <description>Folding@home Work Server</description>
2430
+ <example>WS - Folding@home Work Server</example>
2431
+ <param pos="0" name="service.vendor" value="Folding@home"/>
2432
+ <param pos="0" name="service.product" value="Work Server"/>
2433
+ </fingerprint>
2434
+
2435
+ <fingerprint pattern="^Welcome to IBM Lotus Sametime$">
2436
+ <description>IBM Lotus Sametime</description>
2437
+ <example>Welcome to IBM Lotus Sametime</example>
2438
+ <param pos="0" name="service.vendor" value="IBM"/>
2439
+ <param pos="0" name="service.product" value="Lotus Sametime"/>
2440
+ <param pos="0" name="service.certainty" value="0.5"/>
2441
+ <param pos="0" name="service.cpe23" value="cpe:/a:ibm:lotus_sametime:-"/>
2442
+ </fingerprint>
2443
+
2444
+ <fingerprint pattern="^HPE OfficeConnect Switch (.*)\s+(J\S+)$">
2445
+ <description>HPE OfficeConnect Switch</description>
2446
+ <example hw.product="1820 24G" hw.model="J9980A">HPE OfficeConnect Switch 1820 24G J9980A</example>
2447
+ <example hw.product="1820 8G" hw.model="J9979A">HPE OfficeConnect Switch 1820 8G J9979A</example>
2448
+ <example hw.product="1920S 24G 2SFP PoE+ (370W)" hw.model="JL385A">HPE OfficeConnect Switch 1920S 24G 2SFP PoE+ (370W) JL385A</example>
2449
+ <param pos="0" name="hw.vendor" value="HPE"/>
2450
+ <param pos="0" name="hw.device" value="Switch"/>
2451
+ <param pos="1" name="hw.product"/>
2452
+ <param pos="2" name="hw.model"/>
2453
+ </fingerprint>
2454
+
2455
+ <fingerprint pattern="^Device42$">
2456
+ <description>Device42 Virtual Appliance</description>
2457
+ <example>Device42</example>
2458
+ <param pos="0" name="os.vendor" value="Device42"/>
2459
+ <param pos="0" name="os.family" value="Linux"/>
2460
+ <param pos="0" name="os.product" value="Linux"/>
2461
+ <param pos="0" name="os.certainty" value="0.5"/>
2462
+ <param pos="0" name="hw.vendor" value="Device42"/>
2463
+ <param pos="0" name="hw.device" value="Network Appliance"/>
2464
+ <param pos="0" name="hw.product" value="Discovery"/>
2465
+ <param pos="0" name="hw.certainty" value="0.5"/>
2466
+ </fingerprint>
2467
+
2468
+ <fingerprint pattern="^SolarWinds Virtualization Manager$">
2469
+ <description>SolarWinds Virtualization Manager</description>
2470
+ <example>SolarWinds Virtualization Manager</example>
2471
+ <param pos="0" name="service.vendor" value="SolarWinds"/>
2472
+ <param pos="0" name="service.product" value="Virtualization Manager"/>
2473
+ </fingerprint>
2474
+
2475
+ <fingerprint pattern="^(?:Gitea: .*|LocalRepo|TurnKey Gitea)$">
2476
+ <description>Gitea</description>
2477
+ <example>Gitea: Git with a cup of tea</example>
2478
+ <example>TurnKey Gitea</example>
2479
+ <example>LocalRepo</example>
2480
+ <param pos="0" name="service.vendor" value="Gitea"/>
2481
+ <param pos="0" name="service.product" value="Gitea"/>
2482
+ <param pos="0" name="service.certainty" value="0.5"/>
2483
+ <param pos="0" name="service.cpe23" value="cpe:/a:gitea:gitea:-"/>
2484
+ </fingerprint>
2485
+
2486
+ <fingerprint pattern="^Metasploit$">
2487
+ <description>Metasploit Pro (and Community Edition Web UI)</description>
2488
+ <example>Metasploit</example>
2489
+ <param pos="0" name="service.vendor" value="Rapid7"/>
2490
+ <param pos="0" name="service.product" value="Metasploit Pro"/>
2491
+ </fingerprint>
2492
+
2493
+ <fingerprint pattern="^Makito X Decoder$">
2494
+ <description>Haivision Makito X Video Decoder</description>
2495
+ <example>Makito X Decoder</example>
2496
+ <param pos="0" name="hw.vendor" value="Haivision"/>
2497
+ <param pos="0" name="hw.device" value="Video Decoder"/>
2498
+ <param pos="0" name="hw.product" value="Makito X Decoder"/>
2499
+ </fingerprint>
2500
+
2501
+ <fingerprint pattern="^Ceph(?: Dashboard)?$">
2502
+ <description>Ceph Dashboard</description>
2503
+ <example>Ceph Dashboard</example>
2504
+ <example>Ceph</example>
2505
+ <param pos="0" name="service.vendor" value="Ceph"/>
2506
+ <param pos="0" name="service.product" value="Dashboard"/>
2507
+ </fingerprint>
2508
+
2509
+ <fingerprint pattern="^Scrutinizer$">
2510
+ <description>Plixer Scrutinizer</description>
2511
+ <example>Scrutinizer</example>
2512
+ <param pos="0" name="os.vendor" value="Plixer"/>
2513
+ <param pos="0" name="os.product" value="Linux"/>
2514
+ <param pos="0" name="os.certainty" value="0.5"/>
2515
+ <param pos="0" name="hw.vendor" value="Plixer"/>
2516
+ <param pos="0" name="hw.product" value="Scrutinizer"/>
2517
+ <param pos="0" name="hw.certainty" value="0.5"/>
2518
+ </fingerprint>
2519
+
2520
+ <fingerprint pattern="^Hortonworks SmartSense Tool is loading\.\.\.$">
2521
+ <description>Cloudera Hortonworks SmartSense Tool</description>
2522
+ <example>Hortonworks SmartSense Tool is loading...</example>
2523
+ <param pos="0" name="service.vendor" value="Cloudera"/>
2524
+ <param pos="0" name="service.product" value="SmartSense Tool"/>
2525
+ <param pos="0" name="service.certainty" value="0.5"/>
2526
+ </fingerprint>
2527
+
2528
+ <fingerprint pattern="^ownCloud$">
2529
+ <description>ownCloud</description>
2530
+ <example>ownCloud</example>
2531
+ <param pos="0" name="service.vendor" value="ownCloud"/>
2532
+ <param pos="0" name="service.product" value="ownCloud Server"/>
2533
+ <param pos="0" name="service.certainty" value="0.5"/>
2534
+ </fingerprint>
2535
+
2536
+ <fingerprint pattern="^Octopus Deploy$">
2537
+ <description>Octopus Deploy</description>
2538
+ <example>Octopus Deploy</example>
2539
+ <param pos="0" name="service.vendor" value="Octopus"/>
2540
+ <param pos="0" name="service.product" value="Deploy"/>
2541
+ <param pos="0" name="service.certainty" value="0.5"/>
2542
+ </fingerprint>
2543
+
2544
+ <fingerprint pattern="^Android Debug Database$">
2545
+ <description>Android Debug Database</description>
2546
+ <example>Android Debug Database</example>
2547
+ <param pos="0" name="service.vendor" value="Android Debug Database"/>
2548
+ <param pos="0" name="service.product" value="Android Debug Database"/>
2549
+ </fingerprint>
2550
+
2551
+ <fingerprint pattern="^RStudio Sign In$">
2552
+ <description>RStudio</description>
2553
+ <example>RStudio Sign In</example>
2554
+ <param pos="0" name="service.vendor" value="RStudio"/>
2555
+ <param pos="0" name="service.product" value="Connect"/>
2556
+ </fingerprint>
2557
+
2558
+ <fingerprint pattern="^(?:TurnKey Moodle|New Site)$">
2559
+ <description>Moodle</description>
2560
+ <example>TurnKey Moodle</example>
2561
+ <example>New Site</example>
2562
+ <param pos="0" name="service.vendor" value="Moodle"/>
2563
+ <param pos="0" name="service.product" value="Moodle CMS"/>
2564
+ <param pos="0" name="service.certainty" value="0.5"/>
2565
+ </fingerprint>
2566
+
2567
+ <fingerprint pattern="^ArchiveTeam Warrior$">
2568
+ <description>Internet Archive Warrior Appliance</description>
2569
+ <example>ArchiveTeam Warrior</example>
2570
+ <param pos="0" name="os.vendor" value="Internet Archive"/>
2571
+ <param pos="0" name="os.family" value="Linux"/>
2572
+ <param pos="0" name="os.product" value="Linux"/>
2573
+ <param pos="0" name="hw.vendor" value="Internet Archive"/>
2574
+ <param pos="0" name="hw.device" value="Storage Appliance"/>
2575
+ <param pos="0" name="hw.product" value="ArchiveTeam Warrior"/>
2576
+ </fingerprint>
2577
+
2578
+ <fingerprint pattern="^(?:Dashboard|Log In) - Confluence$">
2579
+ <description>Atlassian Confluence</description>
2580
+ <example>Dashboard - Confluence</example>
2581
+ <example>Log In - Confluence</example>
2582
+ <param pos="0" name="service.vendor" value="Atlassian"/>
2583
+ <param pos="0" name="service.product" value="Confluence"/>
2584
+ <param pos="0" name="service.cpe23" value="cpe:/a:atlassian:confluence:-"/>
2585
+ </fingerprint>
2586
+
2587
+ <fingerprint pattern="^System Dashboard - ">
2588
+ <description>Atlassian Jira</description>
2589
+ <example>System Dashboard - Jira</example>
2590
+ <example>System Dashboard - [Dev Test JIRA]</example>
2591
+ <param pos="0" name="service.vendor" value="Atlassian"/>
2592
+ <param pos="0" name="service.product" value="Jira"/>
2593
+ <param pos="0" name="service.cpe23" value="cpe:/a:atlassian:jira:-"/>
2594
+ </fingerprint>
2595
+
2596
+ <fingerprint pattern="^(?:Welcome to XAMPP|XAMPP for Linux)">
2597
+ <description>XAMPP Server</description>
2598
+ <example>Welcome to XAMPP</example>
2599
+ <example>XAMPP for Linux</example>
2600
+ <param pos="0" name="service.vendor" value="XAMPP"/>
2601
+ <param pos="0" name="service.product" value="XAMPP Server"/>
2602
+ </fingerprint>
2603
+
2604
+ <fingerprint pattern="^Greenbone Security (?:Assistant|Manager)">
2605
+ <description>Greenbone Security Scanner</description>
2606
+ <example>Greenbone Security Assistant</example>
2607
+ <example>Greenbone Security Manager</example>
2608
+ <param pos="0" name="service.vendor" value="Greenbone"/>
2609
+ <param pos="0" name="service.product" value="Security Scanner"/>
2610
+ </fingerprint>
2611
+
2612
+ <fingerprint pattern="^Kodi$">
2613
+ <description>Kodi Media Server</description>
2614
+ <example>Kodi</example>
2615
+ <param pos="0" name="service.vendor" value="Kodi"/>
2616
+ <param pos="0" name="service.product" value="Media Server"/>
2617
+ </fingerprint>
2618
+
2619
+ <fingerprint pattern="^(?:Drupal|TurnKey Drupal\d+|Select an installation profile)$">
2620
+ <description>Drupal CMS</description>
2621
+ <example>Drupal</example>
2622
+ <example>TurnKey Drupal8</example>
2623
+ <example>TurnKey Drupal7</example>
2624
+ <example>Select an installation profile</example>
2625
+ <param pos="0" name="service.vendor" value="Drupal"/>
2626
+ <param pos="0" name="service.product" value="CMS"/>
2627
+ </fingerprint>
2628
+
2629
+ <fingerprint pattern="^LibreNMS$">
2630
+ <description>LibreNMS</description>
2631
+ <example>LibreNMS</example>
2632
+ <param pos="0" name="service.vendor" value="LibreNMS"/>
2633
+ <param pos="0" name="service.product" value="LibreNMS"/>
2634
+ <param pos="0" name="service.cpe23" value="cpe:/a:librenms:librenms:-"/>
2635
+ </fingerprint>
2636
+
2637
+ <fingerprint pattern="^HDHomeRun Main Menu$">
2638
+ <description>HDHomeRun</description>
2639
+ <example>HDHomeRun Main Menu</example>
2640
+ <param pos="0" name="os.vendor" value="SiliconDust"/>
2641
+ <param pos="0" name="os.family" value="Linux"/>
2642
+ <param pos="0" name="os.product" value="Linux"/>
2643
+ <param pos="0" name="hw.vendor" value="SiliconDust"/>
2644
+ <param pos="0" name="hw.device" value="Media Server"/>
2645
+ <param pos="0" name="hw.product" value="HDHomeRun"/>
2646
+ </fingerprint>
2647
+
2648
+ <fingerprint pattern="^Kubernetes Dashboard$">
2649
+ <description>Kubernetes Dashboard</description>
2650
+ <example>Kubernetes Dashboard</example>
2651
+ <param pos="0" name="service.vendor" value="Kubernetes"/>
2652
+ <param pos="0" name="service.product" value="Dashboard"/>
2653
+ </fingerprint>
2654
+
2655
+ <fingerprint pattern="^SoundTouch Access Point Setup$">
2656
+ <description>Bose SoundTouch</description>
2657
+ <example>SoundTouch Access Point Setup</example>
2658
+ <param pos="0" name="hw.device" value="Network Audio"/>
2659
+ <param pos="0" name="hw.vendor" value="Bose"/>
2660
+ <param pos="0" name="hw.family" value="SoundTouch"/>
2661
+ <param pos="0" name="os.device" value="Network Audio"/>
2662
+ <param pos="0" name="os.vendor" value="Bose"/>
2663
+ <param pos="0" name="os.product" value="SoundTouch"/>
2664
+ </fingerprint>
2665
+
2666
+ <fingerprint pattern="^(?:embedded )?WS server test page$">
2667
+ <description>Dell iDRAC Websocket Endpoint</description>
2668
+ <example>WS server test page</example>
2669
+ <example>embedded WS server test page</example>
2670
+ <param pos="0" name="hw.device" value="Lights Out Management"/>
2671
+ <param pos="0" name="hw.vendor" value="Dell"/>
2672
+ <param pos="0" name="hw.product" value="iDRAC"/>
2673
+ <param pos="0" name="hw.certainty" value="0.75"/>
2674
+ <param pos="0" name="os.vendor" value="Dell"/>
2675
+ <param pos="0" name="os.product" value="iDRAC Linux"/>
2676
+ <param pos="0" name="os .certainty" value="0.75"/>
2677
+ </fingerprint>
2678
+
2679
+ <fingerprint pattern="^Pulse Connect Secure - SSL">
2680
+ <description>Pulse Secure VPN</description>
2681
+ <example>Pulse Connect Secure - SSL</example>
2682
+ <param pos="0" name="os.vendor" value="Pulse Secure"/>
2683
+ <param pos="0" name="os.family" value="SSL-VPN"/>
2684
+ <param pos="0" name="os.device" value="SSL-VPN"/>
2685
+ <param pos="0" name="os.product" value="SSL-VPN"/>
2686
+ </fingerprint>
2687
+
2688
+ </fingerprints>