recog 2.3.7 → 2.3.8

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (50) hide show
  1. checksums.yaml +4 -4
  2. data/.gitignore +3 -2
  3. data/.ruby-gemset +1 -0
  4. data/.ruby-version +1 -0
  5. data/.travis.yml +2 -4
  6. data/Gemfile +2 -5
  7. data/bin/recog_standardize +118 -0
  8. data/cpe-remap.yaml +21 -0
  9. data/features/match.feature +4 -0
  10. data/features/support/aruba.rb +3 -0
  11. data/features/verify.feature +5 -0
  12. data/identifiers/README.md +47 -0
  13. data/identifiers/os_architecture.txt +20 -0
  14. data/identifiers/os_device.txt +52 -0
  15. data/identifiers/os_family.txt +160 -0
  16. data/identifiers/os_product.txt +199 -0
  17. data/identifiers/service_family.txt +185 -0
  18. data/identifiers/service_product.txt +255 -0
  19. data/identifiers/software_class.txt +26 -0
  20. data/identifiers/software_family.txt +91 -0
  21. data/identifiers/software_product.txt +333 -0
  22. data/identifiers/vendor.txt +405 -0
  23. data/lib/recog/version.rb +1 -1
  24. data/spec/lib/fingerprint_self_test_spec.rb +1 -1
  25. data/spec/lib/recog/fingerprint/regexp_factory_spec.rb +1 -1
  26. data/update_cpes.py +1 -1
  27. data/xml/apache_os.xml +9 -0
  28. data/xml/architecture.xml +9 -5
  29. data/xml/dns_versionbind.xml +9 -11
  30. data/xml/ftp_banners.xml +47 -5
  31. data/xml/html_title.xml +310 -196
  32. data/xml/http_cookies.xml +13 -1
  33. data/xml/http_servers.xml +145 -7
  34. data/xml/http_wwwauth.xml +13 -1
  35. data/xml/mdns_device-info_txt.xml +20 -16
  36. data/xml/mysql_banners.xml +420 -38
  37. data/xml/ntp_banners.xml +16 -8
  38. data/xml/operating_system.xml +1 -0
  39. data/xml/rtsp_servers.xml +21 -21
  40. data/xml/sip_banners.xml +5 -41
  41. data/xml/sip_user_agents.xml +40 -1
  42. data/xml/smb_native_os.xml +1 -0
  43. data/xml/smtp_banners.xml +3 -4
  44. data/xml/snmp_sysdescr.xml +44 -28
  45. data/xml/ssh_banners.xml +78 -73
  46. data/xml/telnet_banners.xml +30 -9
  47. data/xml/x11_banners.xml +1 -1
  48. data/xml/x509_issuers.xml +7 -7
  49. data/xml/x509_subjects.xml +329 -28
  50. metadata +23 -6
data/xml/telnet_banners.xml CHANGED
@@ -117,6 +117,7 @@
117
117
  <param pos="2" name="os.version.version"/>
118
118
  <param pos="3" name="os.edition"/>
119
119
  <param pos="4" name="os.build"/>
120
+ <param pos="0" name="os.cpe23" value="cpe:/o:dd-wrt:dd-wrt:{os.version}"/>
120
121
  <param pos="0" name="hw.device" value="Router"/>
121
122
  </fingerprint>
122
123
  <fingerprint pattern="^(?:\r|\n)*DD-WRT v(3.\d)-(r([\w]+)) ([\w-]+) \(c\) \d{4} NewMedia-NET GmbH(?:\r|\n)+Release: \d+\/\d+\/\d+(?:\r|\n)+.* login:\s*$">
@@ -133,6 +134,7 @@
133
134
  <param pos="2" name="os.version.version"/>
134
135
  <param pos="3" name="os.build"/>
135
136
  <param pos="4" name="os.edition"/>
137
+ <param pos="0" name="os.cpe23" value="cpe:/o:dd-wrt:dd-wrt:{os.version}"/>
136
138
  <param pos="0" name="hw.device" value="Router"/>
137
139
  </fingerprint>
138
140
  <fingerprint pattern="^(TD-\w+) [\d.]+ DSL Modem Router(?:\r|\n)+Authorization failed after trying \d+ times!!!\.(?:\r|\n)+Please login after \d+ seconds!\s*$">
@@ -989,7 +991,7 @@
989
991
  </example>
990
992
  <param pos="0" name="os.vendor" value="Flowpoint"/>
991
993
  <param pos="0" name="hw.device" value="Broadband router"/>
992
- <param pos="0" name="hw.product" value="DSL router"/>
994
+ <param pos="0" name="hw.product" value="DSL Router"/>
993
995
  <param pos="1" name="hw.model"/>
994
996
  <param pos="2" name="os.version"/>
995
997
  </fingerprint>
@@ -1071,6 +1073,9 @@
1071
1073
  gICAgICAgICAgICAgICAgICAgICAgICAgIApFbnRlciBBcHBsaWNhdGlvbiBOYW1lOg==
1072
1074
  </example>
1073
1075
  <param pos="0" name="os.vendor" value="IBM"/>
1076
+ <param pos="0" name="os.family" value="OS/400"/>
1077
+ <param pos="0" name="os.product" value="OS/400"/>
1078
+ <param pos="0" name="os.cpe23" value="cpe:/o:ibm:os_400:-"/>
1074
1079
  </fingerprint>
1075
1080
  <fingerprint pattern="^This copy of the Ataman TCP Remote Logon Services">
1076
1081
  <description>Windows NT/2k/2k3 running Ataman telnet server</description>
@@ -1531,8 +1536,8 @@
1531
1536
  UG93ZXIgTWVhc3VyZW1lbnQgTHRkLiBNZXRlciBJT04gNzMzMFYyNzEgRVRIIEVUSDczMzBWMjcyCg1TZ
1532
1537
  XJpYWwjOiBQQi0wMjA0QTA1OC0xMQoNCg1sb2dpbjo=
1533
1538
  </example>
1534
- <param pos="0" name="hw.vendor" value = "Power Measurement Ltd."/>
1535
- <param pos="0" name="hw.family" value = "ION"/>
1539
+ <param pos="0" name="hw.vendor" value="Power Measurement Ltd."/>
1540
+ <param pos="0" name="hw.family" value="ION"/>
1536
1541
  <param pos="1" name="hw.version"/>
1537
1542
  </fingerprint>
1538
1543
  <fingerprint pattern="^GW25 v([[:digit:]\.]+) - Intelligent Power Meters GPRS Gateway[[:space:]]+Developed by Satelitech">
@@ -1544,8 +1549,8 @@
1544
1549
  R1cyNSB2MS4yLjEgLSBJbnRlbGxpZ2VudCBQb3dlciBNZXRlcnMgR1BSUyBHYXRld2F5Cg1EZXZlbG9wZ
1545
1550
  WQgYnkgU2F0ZWxpdGVjaCBTLkEgZm9yIEVTRyBEaWxlYwoNRW50ZXIgcGFzc3dvcmQ6
1546
1551
  </example>
1547
- <param pos="0" name="hw.vendor" value = "Satelitech"/>
1548
- <param pos="0" name="hw.family" value = "GW25"/>
1552
+ <param pos="0" name="hw.vendor" value="Satelitech"/>
1553
+ <param pos="0" name="hw.family" value="GW25"/>
1549
1554
  <param pos="1" name="hw.version"/>
1550
1555
  </fingerprint>
1551
1556
  <fingerprint pattern="^RDK \(A Yocto Project based Distro\) ([^ ]+) Docsis-Gateway">
@@ -1557,14 +1562,14 @@
1557
1562
  UkRLIChBIFlvY3RvIFByb2plY3QgYmFzZWQgRGlzdHJvKSAyLjAgRG9jc2lzLUdhdGV3YXkNCg0NCg1Eb
1558
1563
  2NzaXMtR2F0ZXdheSBsb2dpbjo=
1559
1564
  </example>
1560
- <param pos="0" name="hw.device" value = "DOCSIS Cable Modem"/>
1561
- <param pos="0" name="os.vendor" value = "Yocto"/>
1562
- <param pos="0" name="os.product" value = "RDK"/>
1565
+ <param pos="0" name="hw.device" value="DOCSIS Cable Modem"/>
1566
+ <param pos="0" name="os.vendor" value="Yocto"/>
1567
+ <param pos="0" name="os.product" value="RDK"/>
1563
1568
  <param pos="1" name="os.version"/>
1564
1569
  </fingerprint>
1565
1570
  <fingerprint pattern="^RICOH Maintenance Shell">
1566
1571
  <description>a Ricoh device</description>
1567
- <!-- RICOH Maintenance Shell.
1572
+ <!-- RICOH Maintenance Shell.
1568
1573
  User access verification.
1569
1574
  login:-->
1570
1575
  <example _encoding="base64">
@@ -1573,4 +1578,20 @@
1573
1578
  <param pos="0" name="os.vendor" value="Ricoh"/>
1574
1579
  <param pos="0" name="os.device" value="Printer"/>
1575
1580
  </fingerprint>
1581
+ <fingerprint pattern="Precise/RTCS v([\d\.]+) Telnet server">
1582
+ <description>Liebert UPS</description>
1583
+ <!-- Precise/RTCS v2.90.00 Telnet server
1584
+ Service Port Manager Active
1585
+
1586
+ <Esc> Ends Session
1587
+ -->
1588
+ <example _encoding="base64" os.version="2.90.00">
1589
+ UHJlY2lzZS9SVENTIHYyLjkwLjAwIFRlbG5ldCBzZXJ2ZXIKCgpTZXJ2aWNlIFBvcnQgTWFuYWdlciBBY3RpdmUKCjxFc2M+IEVuZHMgU2Vzc2lvbgoKroot
1590
+ </example>
1591
+ <param pos="0" name="hw.device" value="Power device"/>
1592
+ <param pos="0" name="hw.vendor" value="Liebert"/>
1593
+ <param pos="0" name="os.device" value="Power device"/>
1594
+ <param pos="0" name="os.vendor" value="Liebert"/>
1595
+ <param pos="1" name="os.version"/>
1596
+ </fingerprint>
1576
1597
  </fingerprints>
data/xml/x11_banners.xml CHANGED
@@ -39,7 +39,7 @@
39
39
  <example>DECWINDOWS DigitalEquipmentCorporation, eXcursion</example>
40
40
  <param pos="0" name="os.vendor" value="Microsoft"/>
41
41
  <param pos="0" name="service.vendor" value="DEC"/>
42
- <param pos="0" name="service.product" value="DEC eXcursion X server"/>
42
+ <param pos="0" name="service.product" value="DEC eXcursion X Server"/>
43
43
  <param pos="0" name="os.product" value="Windows"/>
44
44
  <param pos="0" name="os.family" value="Windows"/>
45
45
  <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows:-"/>
data/xml/x509_issuers.xml CHANGED
@@ -32,9 +32,9 @@
32
32
  <description>ASUS Nexus Player (Android) with Google Cast</description>
33
33
  <example>CN=Asus fugu Cast ICA,OU=Widevine,O=Google Inc,L=Kirkland,ST=Washington,C=US</example>
34
34
  <param pos="0" name="os.vendor" value="Google"/>
35
- <param pos="0" name="os.cpe23" value="cpe:/o:google:android:-"/>
36
35
  <param pos="0" name="os.family" value="Linux"/>
37
36
  <param pos="0" name="os.product" value="Android"/>
37
+ <param pos="0" name="os.cpe23" value="cpe:/o:google:android:-"/>
38
38
  <param pos="0" name="hw.device" value="Media Server"/>
39
39
  <param pos="0" name="hw.vendor" value="ASUS"/>
40
40
  <param pos="0" name="hw.product" value="Nexus Player"/>
@@ -43,9 +43,9 @@
43
43
  <description>Sony SmartTV (Android) with Google Cast</description>
44
44
  <example>CN=Sony amai Cast ICA,OU=Widevine,O=Google Inc,L=Kirkland,ST=Washington,C=US</example>
45
45
  <param pos="0" name="os.vendor" value="Google"/>
46
- <param pos="0" name="os.cpe23" value="cpe:/o:google:android:-"/>
47
46
  <param pos="0" name="os.family" value="Linux"/>
48
47
  <param pos="0" name="os.product" value="Android"/>
48
+ <param pos="0" name="os.cpe23" value="cpe:/o:google:android:-"/>
49
49
  <param pos="0" name="hw.device" value="Smart TV"/>
50
50
  <param pos="0" name="hw.vendor" value="Sony"/>
51
51
  </fingerprint>
@@ -53,9 +53,9 @@
53
53
  <description>Vizio SmartTV (Android) with Google Cast</description>
54
54
  <example>CN=Cast TV ICA (Vizio),OU=Cast,O=Google Inc,L=Mountain View,ST=California,C=US</example>
55
55
  <param pos="0" name="os.vendor" value="Google"/>
56
- <param pos="0" name="os.cpe23" value="cpe:/o:google:android:-"/>
57
56
  <param pos="0" name="os.family" value="Linux"/>
58
57
  <param pos="0" name="os.product" value="Android"/>
58
+ <param pos="0" name="os.cpe23" value="cpe:/o:google:android:-"/>
59
59
  <param pos="0" name="hw.device" value="Smart TV"/>
60
60
  <param pos="0" name="hw.vendor" value="Vizio"/>
61
61
  </fingerprint>
@@ -63,9 +63,9 @@
63
63
  <description>NVIDIA SHIELD (Android) with Google Cast</description>
64
64
  <example>CN=NVidia Shield Cast ICA,OU=Widevine,O=Google Inc,L=Kirkland,ST=Washington,C=US</example>
65
65
  <param pos="0" name="os.vendor" value="Google"/>
66
- <param pos="0" name="os.cpe23" value="cpe:/o:google:android:-"/>
67
66
  <param pos="0" name="os.family" value="Linux"/>
68
67
  <param pos="0" name="os.product" value="Android"/>
68
+ <param pos="0" name="os.cpe23" value="cpe:/o:google:android:-"/>
69
69
  <param pos="0" name="hw.device" value="Tablet"/>
70
70
  <param pos="0" name="hw.vendor" value="NVIDIA"/>
71
71
  <param pos="0" name="hw.product" value="SHIELD"/>
@@ -74,9 +74,9 @@
74
74
  <description>NVIDIA SHIELD (Android) with Google Cast (Darcy)</description>
75
75
  <example>CN=NVidia Darcy NVidia Tegra K1-Denver Cast ICA,OU=Widevine,O=Google Inc,L=Kirkland,ST=Washington,C=US</example>
76
76
  <param pos="0" name="os.vendor" value="Google"/>
77
- <param pos="0" name="os.cpe23" value="cpe:/o:google:android:-"/>
78
77
  <param pos="0" name="os.family" value="Linux"/>
79
78
  <param pos="0" name="os.product" value="Android"/>
79
+ <param pos="0" name="os.cpe23" value="cpe:/o:google:android:-"/>
80
80
  <param pos="0" name="hw.device" value="Tablet"/>
81
81
  <param pos="0" name="hw.vendor" value="NVIDIA"/>
82
82
  <param pos="0" name="hw.product" value="SHIELD"/>
@@ -108,9 +108,9 @@
108
108
  <description>VMWare ESXi w/Installer</description>
109
109
  <example>O=VMware Installer</example>
110
110
  <param pos="0" name="os.vendor" value="VMWare"/>
111
- <param pos="0" name="os.cpe23" value="cpe:/o:vmware:esxi:-"/>
112
111
  <param pos="0" name="os.product" value="ESXi"/>
113
112
  <param pos="0" name="os.device" value="Hypervisor"/>
113
+ <param pos="0" name="os.cpe23" value="cpe:/o:vmware:esxi:-"/>
114
114
  </fingerprint>
115
115
  <fingerprint pattern="^CN=CA,OU=VMware Engineering,O=vCenter,ST=California,C=US$">
116
116
  <description>VMWare vCenter</description>
@@ -124,8 +124,8 @@
124
124
  <param pos="0" name="hw.device" value="Lights Out Management"/>
125
125
  <param pos="0" name="hw.vendor" value="HP"/>
126
126
  <param pos="0" name="hw.family" value="iLO"/>
127
- <param pos="0" name="hw.cpe23" value="cpe:/h:hp:integrated_lights_out:-"/>
128
127
  <param pos="0" name="hw.product" value="iLO"/>
128
+ <param pos="0" name="hw.cpe23" value="cpe:/h:hp:integrated_lights_out:-"/>
129
129
  <param pos="0" name="os.device" value="Lights Out Management"/>
130
130
  <param pos="0" name="os.vendor" value="HP"/>
131
131
  <param pos="0" name="os.family" value="iLO"/>
data/xml/x509_subjects.xml CHANGED
@@ -81,6 +81,13 @@
81
81
  <param pos="2" name="cisco.serial_number"/>
82
82
  <param pos="3" name="host.mac"/>
83
83
  </fingerprint>
84
+ <fingerprint pattern="^CN=SEP([a-fA-F0-9]{12}),O=TemporaryDefaultCertificate$">
85
+ <description>Cisco IP Phone without serial number</description>
86
+ <example host.mac="1C6A7AE57121">CN=SEP1C6A7AE57121,O=TemporaryDefaultCertificate</example>
87
+ <param pos="0" name="hw.device" value="VoIP"/>
88
+ <param pos="0" name="hw.vendor" value="Cisco"/>
89
+ <param pos="1" name="host.mac"/>
90
+ </fingerprint>
84
91
  <fingerprint pattern="^CN=Cambium WLAN AP,OU=Products,O=Cambium Networks Inc,L=San Jose,ST=CA,C=US$">
85
92
  <description>Cambium Networks WAP</description>
86
93
  <example>CN=Cambium WLAN AP,OU=Products,O=Cambium Networks Inc,L=San Jose,ST=CA,C=US</example>
@@ -182,8 +189,8 @@
182
189
  <param pos="0" name="hw.device" value="Lights Out Management"/>
183
190
  <param pos="0" name="hw.vendor" value="HP"/>
184
191
  <param pos="0" name="hw.family" value="iLO"/>
185
- <param pos="0" name="hw.cpe23" value="cpe:/h:hp:integrated_lights_out:-"/>
186
192
  <param pos="0" name="hw.product" value="iLO"/>
193
+ <param pos="0" name="hw.cpe23" value="cpe:/h:hp:integrated_lights_out:-"/>
187
194
  <param pos="0" name="os.device" value="Lights Out Management"/>
188
195
  <param pos="0" name="os.vendor" value="HP"/>
189
196
  <param pos="0" name="os.family" value="iLO"/>
@@ -196,8 +203,8 @@
196
203
  <param pos="0" name="hw.device" value="Lights Out Management"/>
197
204
  <param pos="0" name="hw.vendor" value="HP"/>
198
205
  <param pos="0" name="hw.family" value="iLO"/>
199
- <param pos="0" name="hw.cpe23" value="cpe:/h:hp:integrated_lights_out:-"/>
200
206
  <param pos="0" name="hw.product" value="iLO"/>
207
+ <param pos="0" name="hw.cpe23" value="cpe:/h:hp:integrated_lights_out:-"/>
201
208
  <param pos="0" name="os.device" value="Lights Out Management"/>
202
209
  <param pos="0" name="os.vendor" value="HP"/>
203
210
  <param pos="0" name="os.family" value="iLO"/>
@@ -210,8 +217,8 @@
210
217
  <param pos="0" name="hw.device" value="Lights Out Management"/>
211
218
  <param pos="0" name="hw.vendor" value="HP"/>
212
219
  <param pos="0" name="hw.family" value="iLO"/>
213
- <param pos="0" name="hw.cpe23" value="cpe:/h:hp:integrated_lights_out:-"/>
214
220
  <param pos="0" name="hw.product" value="iLO"/>
221
+ <param pos="0" name="hw.cpe23" value="cpe:/h:hp:integrated_lights_out:-"/>
215
222
  <param pos="0" name="os.device" value="Lights Out Management"/>
216
223
  <param pos="0" name="os.vendor" value="HP"/>
217
224
  <param pos="0" name="os.family" value="iLO"/>
@@ -224,8 +231,8 @@
224
231
  <param pos="0" name="hw.device" value="Lights Out Management"/>
225
232
  <param pos="0" name="hw.vendor" value="HP"/>
226
233
  <param pos="0" name="hw.family" value="iLO"/>
227
- <param pos="0" name="hw.cpe23" value="cpe:/h:hp:integrated_lights_out:-"/>
228
234
  <param pos="0" name="hw.product" value="iLO"/>
235
+ <param pos="0" name="hw.cpe23" value="cpe:/h:hp:integrated_lights_out:-"/>
229
236
  <param pos="0" name="os.device" value="Lights Out Management"/>
230
237
  <param pos="0" name="os.vendor" value="HP"/>
231
238
  <param pos="0" name="os.family" value="iLO"/>
@@ -244,9 +251,10 @@
244
251
  <param pos="0" name="os.family" value="ILOM"/>
245
252
  <param pos="0" name="os.product" value="ILOM"/>
246
253
  </fingerprint>
247
- <fingerprint pattern="^CN=AMI,OU=Service Processors,O=American Megatrends Inc\.,L=Norcross,ST=Georgia,C=US$">
254
+ <fingerprint pattern="^CN=AMI,OU=Service Processors,O=American Megatrends Inc">
248
255
  <description>AMI MegaRAC LOM</description>
249
256
  <example>CN=AMI,OU=Service Processors,O=American Megatrends Inc.,L=Norcross,ST=Georgia,C=US</example>
257
+ <example>CN=AMI,OU=Service Processors,O=American Megatrends Inc,L=Atlanta,ST=Georgia,C=US</example>
250
258
  <param pos="0" name="hw.device" value="Lights Out Management"/>
251
259
  <param pos="0" name="hw.vendor" value="AMI"/>
252
260
  <param pos="0" name="hw.family" value="MegaRAC"/>
@@ -256,6 +264,29 @@
256
264
  <param pos="0" name="os.family" value="MegaRAC"/>
257
265
  <param pos="0" name="os.product" value="MegaRAC"/>
258
266
  </fingerprint>
267
+ <fingerprint pattern="^CN=C-series CIMC,OU=PID:([^ ]+) SERIAL:([^,]+),O=Cisco">
268
+ <description>Cisco Integrated Management Controller</description>
269
+ <example cisco.serial_number="FCH18999AAA" cisco.imc_model="UCSC-C220-M3S">CN=C-series CIMC,OU=PID:UCSC-C220-M3S SERIAL:FCH18999AAA,O=Cisco Self Signed,L=San Jose,ST=California,C=US</example>
270
+ <param pos="0" name="hw.device" value="Lights Out Management"/>
271
+ <param pos="0" name="hw.vendor" value="Cisco"/>
272
+ <param pos="0" name="hw.product" value="IMC"/>
273
+ <param pos="0" name="os.vendor" value="Cisco"/>
274
+ <param pos="0" name="os.family" value="Linux"/>
275
+ <param pos="0" name="os.product" value="IMC"/>
276
+ <param pos="2" name="cisco.serial_number"/>
277
+ <param pos="1" name="cisco.imc_model"/>
278
+ </fingerprint>
279
+ <fingerprint pattern="^CN=C220-(FCH[^,]+),OU=null,O=Cisco Systems Inc">
280
+ <description>Cisco Integrated Management Controller C220</description>
281
+ <example cisco.serial_number="FCH17999AAA">CN=C220-FCH17999AAA,OU=null,O=Cisco Systems Inc.,L=San Jose,ST=California,C=US</example>
282
+ <param pos="0" name="hw.device" value="Lights Out Management"/>
283
+ <param pos="0" name="hw.vendor" value="Cisco"/>
284
+ <param pos="0" name="hw.product" value="IMC"/>
285
+ <param pos="0" name="os.vendor" value="Cisco"/>
286
+ <param pos="0" name="os.family" value="Linux"/>
287
+ <param pos="0" name="os.product" value="IMC"/>
288
+ <param pos="1" name="cisco.serial_number"/>
289
+ </fingerprint>
259
290
  <fingerprint pattern="^CN=avocent.com,OU=AESS,O=Avocent,L=Sunrise,ST=FL,C=US$">
260
291
  <description>Avocent KVM</description>
261
292
  <example>CN=avocent.com,OU=AESS,O=Avocent,L=Sunrise,ST=FL,C=US</example>
@@ -313,12 +344,48 @@
313
344
  <param pos="0" name="os.family" value="Linux"/>
314
345
  </fingerprint>
315
346
  <fingerprint pattern="^CN=ASA Temporary Self Signed Certificate$">
316
- <description>Cisco ASA</description>
347
+ <description>Cisco ASA Temp Cert</description>
317
348
  <example>CN=ASA Temporary Self Signed Certificate</example>
349
+ <param pos="0" name="os.vendor" value="Cisco"/>
350
+ <param pos="0" name="os.family" value="Adaptive Security Appliance"/>
351
+ <param pos="0" name="os.product" value="Adaptive Security Appliance"/>
352
+ <param pos="0" name="os.cpe23" value="cpe:/o:cisco:adaptive_security_appliance:-"/>
353
+ <param pos="0" name="hw.vendor" value="Cisco"/>
354
+ <param pos="0" name="hw.family" value="Adaptive Security Appliance"/>
355
+ <param pos="0" name="hw.product" value="Adaptive Security Appliance"/>
318
356
  <param pos="0" name="hw.device" value="Firewall"/>
319
357
  <param pos="0" name="hw.cpe23" value="cpe:/h:cisco:adaptive_security_appliance:-"/>
358
+ </fingerprint>
359
+ <fingerprint pattern="^SERIALNUMBER=([a-zA-Z0-9]+),CN=DEVICE-vWLC,O=Cisco Virtual WLC$">
360
+ <description>Cisco vWLC</description>
361
+ <example cisco.serial_number="9C89M2088D1">SERIALNUMBER=9C89M2088D1,CN=DEVICE-vWLC,O=Cisco Virtual WLC</example>
362
+ <param pos="0" name="os.vendor" value="Cisco"/>
363
+ <param pos="0" name="os.device" value="Wireless Controller"/>
364
+ <param pos="0" name="os.product" value="Wireless LAN Controller"/>
365
+ <param pos="0" name="os.cpe23" value="cpe:/o:cisco:wireless_lan_controller:-"/>
366
+ <param pos="1" name="cisco.serial_number"/>
367
+ </fingerprint>
368
+ <fingerprint pattern="^CN=[a-zA-Z0-9\.\-\_]+,OU=DeviceSSL \(WebAdmin\),O=Cisco Systems Inc\.,C=US$">
369
+ <description>Cisco WLC</description>
370
+ <example>CN=169.254.1.1,OU=DeviceSSL (WebAdmin),O=Cisco Systems Inc.,C=US</example>
371
+ <param pos="0" name="os.vendor" value="Cisco"/>
372
+ <param pos="0" name="os.device" value="Wireless Controller"/>
373
+ <param pos="0" name="os.product" value="Wireless LAN Controller"/>
374
+ <param pos="0" name="os.cpe23" value="cpe:/o:cisco:wireless_lan_controller:-"/>
320
375
  <param pos="0" name="hw.vendor" value="Cisco"/>
321
- <param pos="0" name="hw.product" value="Adaptive Security Appliance"/>
376
+ <param pos="0" name="hw.device" value="Wireless Controller"/>
377
+ <param pos="0" name="hw.product" value="Wireless LAN Controller"/>
378
+ <param pos="0" name="hw.cpe23" value="cpe:/h:cisco:wireless_lan_controller:-"/>
379
+ </fingerprint>
380
+ <fingerprint pattern="^CN=pca,OU=Cisco Prime Collaboration Manager,O=Cisco,L=San Jose,ST=California,C=US$">
381
+ <description>Cisco Primary Collaboration Manager</description>
382
+ <example>CN=pca,OU=Cisco Prime Collaboration Manager,O=Cisco,L=San Jose,ST=California,C=US</example>
383
+ <param pos="0" name="os.vendor" value="Cisco"/>
384
+ <param pos="0" name="os.device" value="Network Management Device"/>
385
+ <param pos="0" name="os.product" value="Prime Collaboration Manager"/>
386
+ <param pos="0" name="hw.vendor" value="Cisco"/>
387
+ <param pos="0" name="hw.device" value="Network Management Device"/>
388
+ <param pos="0" name="hw.product" value="Prime Collaboration Manager"/>
322
389
  </fingerprint>
323
390
  <fingerprint pattern="^CN=synology\.com.*,O=Synology Inc\.,L=Taipei.*,C=TW$">
324
391
  <description>Synology NAS</description>
@@ -380,18 +447,29 @@
380
447
  <description>VMWare ESX</description>
381
448
  <example>CN=server99.,OU=VMware ESX Server Default Certificate,O=VMware\, Inc,L=Palo Alto,ST=California,C=US</example>
382
449
  <param pos="0" name="os.vendor" value="VMWare"/>
383
- <param pos="0" name="os.cpe23" value="cpe:/o:vmware:esx:-"/>
384
450
  <param pos="0" name="os.product" value="ESX"/>
385
451
  <param pos="0" name="os.device" value="Hypervisor"/>
452
+ <param pos="0" name="os.cpe23" value="cpe:/o:vmware:esx:-"/>
386
453
  <param pos="1" name="host.name"/>
387
454
  </fingerprint>
455
+ <fingerprint pattern="^CN.*,OU=SRM,O=VMware\\, Inc\.,L=Palo Alto,ST=California,C=US$">
456
+ <description>VMWare SRM</description>
457
+ <example>CN=SRM01,OU=SRM,O=VMware\, Inc.,L=Palo Alto,ST=California,C=US</example>
458
+ <param pos="0" name="os.vendor" value="VMWare"/>
459
+ <param pos="0" name="os.product" value="Linux"/>
460
+ <param pos="0" name="hw.vendor" value="VMWare"/>
461
+ <param pos="0" name="hw.device" value="Appliance"/>
462
+ <param pos="0" name="hw.product" value="Site Recovery Manager"/>
463
+ <param pos="0" name="service.vendor" value="VMWare"/>
464
+ <param pos="0" name="service.product" value="Site Recovery Manager"/>
465
+ </fingerprint>
388
466
  <fingerprint pattern="^CN=IOS-Self-Signed-Certificate-">
389
467
  <description>Cisco IOS Default Certificate</description>
390
468
  <example>CN=IOS-Self-Signed-Certificate-4163115936</example>
391
469
  <param pos="0" name="os.vendor" value="Cisco"/>
392
- <param pos="0" name="os.cpe23" value="cpe:/o:cisco:ios:-"/>
393
470
  <param pos="0" name="os.family" value="IOS"/>
394
471
  <param pos="0" name="os.product" value="IOS"/>
472
+ <param pos="0" name="os.cpe23" value="cpe:/o:cisco:ios:-"/>
395
473
  <param pos="0" name="hw.vendor" value="Cisco"/>
396
474
  <param pos="0" name="hw.device" value="Router"/>
397
475
  </fingerprint>
@@ -411,9 +489,9 @@
411
489
  <description>Vizio SmartTV (Android) with Google Cast</description>
412
490
  <example chromecast.serial_number="9V039WC9" host.mac_local="FA8FCA697898">CN=9V039WC9 FA8FCA697898,OU=Cast TV (Vizio),O=Google Inc,L=Mountain View,ST=California,C=US</example>
413
491
  <param pos="0" name="os.vendor" value="Google"/>
414
- <param pos="0" name="os.cpe23" value="cpe:/o:google:android:-"/>
415
492
  <param pos="0" name="os.family" value="Linux"/>
416
493
  <param pos="0" name="os.product" value="Android"/>
494
+ <param pos="0" name="os.cpe23" value="cpe:/o:google:android:-"/>
417
495
  <param pos="0" name="hw.device" value="Smart TV"/>
418
496
  <param pos="0" name="hw.vendor" value="Vizio"/>
419
497
  <param pos="1" name="chromecast.serial_number"/>
@@ -442,6 +520,90 @@
442
520
  <param pos="0" name="os.product" value="TelePresence"/>
443
521
  <param pos="0" name="os.device" value="Video Conferencing"/>
444
522
  </fingerprint>
523
+ <fingerprint pattern="^CN=MERCURY-([a-fA-F0-9]{12}),OU=Engineering,O=Crestron">
524
+ <description>Crestron Mercury</description>
525
+ <example host.mac="00107F1ABAA0">CN=MERCURY-00107F1ABAA0,OU=Engineering,O=Crestron Electronics\, Inc.,L=Rockleigh,ST=NJ,C=US</example>
526
+ <param pos="0" name="hw.vendor" value="Crestron"/>
527
+ <param pos="0" name="hw.device" value="Video Conferencing"/>
528
+ <param pos="0" name="hw.product" value="Mercury"/>
529
+ <param pos="0" name="os.vendor" value="Crestron"/>
530
+ <param pos="0" name="os.family" value="Linux"/>
531
+ <param pos="0" name="os.device" value="Video Conferencing"/>
532
+ <param pos="1" name="host.mac"/>
533
+ </fingerprint>
534
+ <fingerprint pattern="^CN=(AM-\d+)-([a-fA-F0-9]{12}),OU=Engineering,O=Crestron">
535
+ <description>Crestron AirMedia</description>
536
+ <example hw.product="AM-200" host.mac="00107FB7B1E2">CN=AM-200-00107FB7B1E2,OU=Engineering,O=Crestron Electronics\, Inc.,L=Rockleigh,ST=NJ,C=US</example>
537
+ <param pos="0" name="hw.vendor" value="Crestron"/>
538
+ <param pos="0" name="hw.device" value="Video Conferencing"/>
539
+ <param pos="1" name="hw.product"/>
540
+ <param pos="0" name="os.vendor" value="Crestron"/>
541
+ <param pos="0" name="os.family" value="Linux"/>
542
+ <param pos="0" name="os.device" value="Video Conferencing"/>
543
+ <param pos="2" name="host.mac"/>
544
+ </fingerprint>
545
+ <fingerprint pattern="^CN=Crestron,OU=Engineering,O=Crestron Electronics\\, Inc\.,L=Rockleigh,ST=NJ,C=US$">
546
+ <description>Crestron Video Conferencing</description>
547
+ <example>CN=Crestron,OU=Engineering,O=Crestron Electronics\, Inc.,L=Rockleigh,ST=NJ,C=US</example>
548
+ <param pos="0" name="hw.vendor" value="Crestron"/>
549
+ <param pos="0" name="hw.device" value="Video Conferencing"/>
550
+ <param pos="0" name="os.vendor" value="Crestron"/>
551
+ <param pos="0" name="os.family" value="Linux"/>
552
+ <param pos="0" name="os.device" value="Video Conferencing"/>
553
+ </fingerprint>
554
+ <fingerprint pattern="^CN=ClickShare-\d+$">
555
+ <description>ClickShare Wireless Presenter</description>
556
+ <example>CN=ClickShare-4234234324</example>
557
+ <param pos="0" name="hw.vendor" value="Barco"/>
558
+ <param pos="0" name="hw.device" value="Wireless Presenter"/>
559
+ <param pos="0" name="hw.product" value="ClickShare"/>
560
+ <param pos="0" name="os.vendor" value="Barco"/>
561
+ <param pos="0" name="os.family" value="ClickShareOS"/>
562
+ <param pos="0" name="os.device" value="Wireless Presenter"/>
563
+ </fingerprint>
564
+ <fingerprint pattern="^CN=Solstice,OU=Solstice,O=Mersive Technologies Inc,L=Denver,ST=CO,C=US$">
565
+ <description>SolsticePod</description>
566
+ <example>CN=Solstice,OU=Solstice,O=Mersive Technologies Inc,L=Denver,ST=CO,C=US</example>
567
+ <param pos="0" name="hw.vendor" value="Mersive"/>
568
+ <param pos="0" name="hw.device" value="Wireless Presenter"/>
569
+ <param pos="0" name="hw.product" value="SolsticePod"/>
570
+ </fingerprint>
571
+ <fingerprint pattern="^CN=Controller,OU=FW,O=ExtronElectronics,ST=CA,C=US$">
572
+ <description>Extron MediaLink Controller</description>
573
+ <example>CN=Controller,OU=FW,O=ExtronElectronics,ST=CA,C=US</example>
574
+ <param pos="0" name="hw.vendor" value="Extron"/>
575
+ <param pos="0" name="hw.device" value="Display Controller"/>
576
+ <param pos="0" name="hw.product" value="MediaLink Controller"/>
577
+ <param pos="0" name="os.vendor" value="Extron"/>
578
+ <param pos="0" name="os.family" value="Linux"/>
579
+ </fingerprint>
580
+ <fingerprint pattern="^CN=IPLP,OU=ControlSystems,O=ExtronElectronics,L=Anaheim,ST=CA,C=US$">
581
+ <description>Extron IPLP </description>
582
+ <example>CN=IPLP,OU=ControlSystems,O=ExtronElectronics,L=Anaheim,ST=CA,C=US</example>
583
+ <param pos="0" name="hw.vendor" value="Extron"/>
584
+ <param pos="0" name="hw.device" value="Display Controller"/>
585
+ <param pos="0" name="hw.product" value="IP Link Control Processor"/>
586
+ <param pos="0" name="os.vendor" value="Extron"/>
587
+ <param pos="0" name="os.family" value="Linux"/>
588
+ </fingerprint>
589
+ <fingerprint pattern="^CN=TLP,OU=ControlSystems,O=ExtronElectronics,L=Anaheim,ST=CA,C=US$">
590
+ <description>Extron TLP </description>
591
+ <example>CN=TLP,OU=ControlSystems,O=ExtronElectronics,L=Anaheim,ST=CA,C=US</example>
592
+ <param pos="0" name="hw.vendor" value="Extron"/>
593
+ <param pos="0" name="hw.device" value="Display Controller"/>
594
+ <param pos="0" name="hw.product" value="TouchLink Control Panel"/>
595
+ <param pos="0" name="os.vendor" value="Extron"/>
596
+ <param pos="0" name="os.family" value="Linux"/>
597
+ </fingerprint>
598
+ <fingerprint pattern="^CN=ShareLink-Pro-.*,OU=AVSystems,O=ExtronElectronics">
599
+ <description>Extron ShareLink Pro </description>
600
+ <example>CN=ShareLink-Pro-18-99-99.local.com,OU=AVSystems,O=ExtronElectronics,L=Anaheim,ST=CA,C=US</example>
601
+ <param pos="0" name="hw.vendor" value="Extron"/>
602
+ <param pos="0" name="hw.device" value="Display Controller"/>
603
+ <param pos="0" name="hw.product" value="ShareLink Pro"/>
604
+ <param pos="0" name="os.vendor" value="Extron"/>
605
+ <param pos="0" name="os.family" value="Linux"/>
606
+ </fingerprint>
445
607
  <fingerprint pattern="^CN=VMM APIC,OU=VMM\d+,O=Cisco,L=San Jose,ST=CA,C=US$">
446
608
  <description>Cisco APIC</description>
447
609
  <example>CN=VMM APIC,OU=VMM15,O=Cisco,L=San Jose,ST=CA,C=US</example>
@@ -522,10 +684,10 @@
522
684
  <param pos="0" name="hw.vendor" value="Fortinet"/>
523
685
  <param pos="0" name="hw.device" value="Firewall"/>
524
686
  <param pos="0" name="os.vendor" value="Fortinet"/>
525
- <param pos="0" name="os.cpe23" value="cpe:/o:fortinet:fortios:-"/>
526
687
  <param pos="0" name="os.family" value="Linux"/>
527
688
  <param pos="0" name="os.device" value="Firewall"/>
528
689
  <param pos="0" name="os.product" value="FortiOS"/>
690
+ <param pos="0" name="os.cpe23" value="cpe:/o:fortinet:fortios:-"/>
529
691
  <param pos="1" name="fortinet.serial_number"/>
530
692
  </fingerprint>
531
693
  <fingerprint pattern="^CN=([A-Za-z0-9]+),O=Fortinet Ltd\.$">
@@ -534,10 +696,10 @@
534
696
  <param pos="0" name="hw.vendor" value="Fortinet"/>
535
697
  <param pos="0" name="hw.device" value="Firewall"/>
536
698
  <param pos="0" name="os.vendor" value="Fortinet"/>
537
- <param pos="0" name="os.cpe23" value="cpe:/o:fortinet:fortios:-"/>
538
699
  <param pos="0" name="os.family" value="Linux"/>
539
700
  <param pos="0" name="os.device" value="Firewall"/>
540
701
  <param pos="0" name="os.product" value="FortiOS"/>
702
+ <param pos="0" name="os.cpe23" value="cpe:/o:fortinet:fortios:-"/>
541
703
  <param pos="1" name="fortinet.serial_number"/>
542
704
  </fingerprint>
543
705
  <fingerprint pattern="^CN=FortiMail,OU=FortiMail,O=Fortinet,L=Sunnyvale,ST=California,C=US$">
@@ -547,10 +709,10 @@
547
709
  <param pos="0" name="hw.device" value="Appliance"/>
548
710
  <param pos="0" name="hw.product" value="FortiMail"/>
549
711
  <param pos="0" name="os.vendor" value="Fortinet"/>
550
- <param pos="0" name="os.cpe23" value="cpe:/o:fortinet:fortios:-"/>
551
712
  <param pos="0" name="os.family" value="Linux"/>
552
713
  <param pos="0" name="os.product" value="FortiOS"/>
553
714
  <param pos="0" name="os.device" value="Appliance"/>
715
+ <param pos="0" name="os.cpe23" value="cpe:/o:fortinet:fortios:-"/>
554
716
  </fingerprint>
555
717
  <fingerprint pattern="^CN=.*,OU=FortiManager,O=Fortinet,L=Sunnyvale,ST=California,C=US$">
556
718
  <description>Fortinet FortiManager Appliance</description>
@@ -559,10 +721,10 @@
559
721
  <param pos="0" name="hw.device" value="Appliance"/>
560
722
  <param pos="0" name="hw.product" value="FortiManager"/>
561
723
  <param pos="0" name="os.vendor" value="Fortinet"/>
562
- <param pos="0" name="os.cpe23" value="cpe:/o:fortinet:fortios:-"/>
563
724
  <param pos="0" name="os.family" value="Linux"/>
564
725
  <param pos="0" name="os.product" value="FortiOS"/>
565
726
  <param pos="0" name="os.device" value="Appliance"/>
727
+ <param pos="0" name="os.cpe23" value="cpe:/o:fortinet:fortios:-"/>
566
728
  </fingerprint>
567
729
  <fingerprint pattern="^CN=CyberoamApplianceCertificate">
568
730
  <description>Cyberoam SSL VPN</description>
@@ -602,6 +764,25 @@
602
764
  <param pos="0" name="os.family" value="Linux"/>
603
765
  <param pos="0" name="os.device" value="Wireless Controller"/>
604
766
  </fingerprint>
767
+ <fingerprint pattern="^CN=unifivideo-app$">
768
+ <description>UniFi Video App</description>
769
+ <example>CN=unifivideo-app</example>
770
+ <param pos="0" name="os.vendor" value="Ubiquiti"/>
771
+ <param pos="0" name="os.family" value="Linux"/>
772
+ <param pos="0" name="hw.vendor" value="Ubiquiti"/>
773
+ <param pos="0" name="hw.family" value="UniFi"/>
774
+ <param pos="0" name="hw.device" value="Web cam"/>
775
+ </fingerprint>
776
+ <fingerprint pattern="^CN=camera\.ubnt\.dev,">
777
+ <description>UniFi Video Camera</description>
778
+ <example>CN=camera.ubnt.dev,OU=devint,O=Ubiquiti Networks Inc.,L=Taipei,C=TW</example>
779
+ <param pos="0" name="hw.vendor" value="Ubiquiti"/>
780
+ <param pos="0" name="hw.device" value="Web cam"/>
781
+ <param pos="0" name="hw.product" value="Camera"/>
782
+ <param pos="0" name="os.vendor" value="Ubiquiti"/>
783
+ <param pos="0" name="os.family" value="Linux"/>
784
+ <param pos="0" name="os.device" value="Web cam"/>
785
+ </fingerprint>
605
786
  <fingerprint pattern="^CN=UBNT,OU=Technical Support,O=Ubiquiti Networks Inc\.,L=San Jose,ST=CA,C=US$">
606
787
  <description>Ubiquiti Controller</description>
607
788
  <example>CN=UBNT,OU=Technical Support,O=Ubiquiti Networks Inc.,L=San Jose,ST=CA,C=US</example>
@@ -641,16 +822,6 @@
641
822
  <param pos="0" name="os.family" value="Linux"/>
642
823
  <param pos="0" name="os.device" value="DVR"/>
643
824
  </fingerprint>
644
- <fingerprint pattern="^CN=camera.ubnt.dev,OU=devint,O=Ubiquiti Networks Inc.,L=Taipei,C=TW$">
645
- <description>Ubiquiti Video Camera</description>
646
- <example>CN=camera.ubnt.dev,OU=devint,O=Ubiquiti Networks Inc.,L=Taipei,C=TW</example>
647
- <param pos="0" name="hw.vendor" value="Ubiquiti"/>
648
- <param pos="0" name="hw.device" value="Web Cam"/>
649
- <param pos="0" name="hw.product" value="Camera"/>
650
- <param pos="0" name="os.vendor" value="Ubiquiti"/>
651
- <param pos="0" name="os.family" value="Linux"/>
652
- <param pos="0" name="os.device" value="Web Cam"/>
653
- </fingerprint>
654
825
  <fingerprint pattern="^CN=GreenWave Systems,OU=PKI,O=GreenWave Systems,L=Irvine,ST=California,C=US$">
655
826
  <description>Verizon / Greenwave FIOS Router</description>
656
827
  <example>CN=GreenWave Systems,OU=PKI,O=GreenWave Systems,L=Irvine,ST=California,C=US</example>
@@ -659,12 +830,19 @@
659
830
  <param pos="0" name="hw.product" value="Verizon FiOS Router"/>
660
831
  </fingerprint>
661
832
  <fingerprint pattern="^CN=PoliWall,OU=Bandura Labs,O=Bandura\\, LLC\.,L=Lake Saint Louis,ST=Missouri,C=US$">
662
- <description>PoliWall Firewall</description>
833
+ <description>PoliWall Firewall Original</description>
663
834
  <example>CN=PoliWall,OU=Bandura Labs,O=Bandura\, LLC.,L=Lake Saint Louis,ST=Missouri,C=US</example>
664
835
  <param pos="0" name="hw.vendor" value="Bandura Labs"/>
665
836
  <param pos="0" name="hw.device" value="Firewall"/>
666
837
  <param pos="0" name="hw.product" value="PoliWall"/>
667
838
  </fingerprint>
839
+ <fingerprint pattern="^CN=poliwall,OU=IT,O=Bandura,L=St\. Louis,ST=Missouri,C=US$">
840
+ <description>PoliWall Firewall Newer Cert</description>
841
+ <example>CN=poliwall,OU=IT,O=Bandura,L=St. Louis,ST=Missouri,C=US</example>
842
+ <param pos="0" name="hw.vendor" value="Bandura Labs"/>
843
+ <param pos="0" name="hw.device" value="Firewall"/>
844
+ <param pos="0" name="hw.product" value="PoliWall"/>
845
+ </fingerprint>
668
846
  <fingerprint pattern="^CN=pfSense-[a-zA-Z0-9]+,O=pfSense webConfigurator Self-Signed Certificate">
669
847
  <description>pfSense Firewall</description>
670
848
  <example>CN=pfSense-58fb5b0b06777,O=pfSense webConfigurator Self-Signed Certificate,L=Locality,ST=State,C=US</example>
@@ -675,6 +853,34 @@
675
853
  <param pos="0" name="os.vendor" value="pfSense"/>
676
854
  <param pos="0" name="os.product" value="FreeBSD"/>
677
855
  </fingerprint>
856
+ <fingerprint pattern="^CN=Common Name \(eg\\, YOUR name\),OU=Organizational Unit Name \(eg\\, section\),O=CompanyName,L=Somecity,ST=Somewhere,C=US$">
857
+ <description>pfSense Firewall Default Certificate</description>
858
+ <example>CN=Common Name (eg\, YOUR name),OU=Organizational Unit Name (eg\, section),O=CompanyName,L=Somecity,ST=Somewhere,C=US</example>
859
+ <param pos="0" name="hw.vendor" value="pfSense"/>
860
+ <param pos="0" name="hw.device" value="Firewall"/>
861
+ <param pos="0" name="hw.product" value="Firewall"/>
862
+ <param pos="0" name="os.vendor" value="pfSense"/>
863
+ <param pos="0" name="os.product" value="FreeBSD"/>
864
+ </fingerprint>
865
+ <fingerprint pattern="^O=OPNsense,L=Middelharnis,ST=Zuid-Holland,C=NL$">
866
+ <description>OPNsense Firewall</description>
867
+ <example>O=OPNsense,L=Middelharnis,ST=Zuid-Holland,C=NL</example>
868
+ <param pos="0" name="hw.vendor" value="OPNsense"/>
869
+ <param pos="0" name="hw.device" value="Firewall"/>
870
+ <param pos="0" name="hw.product" value="Firewall"/>
871
+ <param pos="0" name="os.vendor" value="OPNsense"/>
872
+ <param pos="0" name="os.product" value="FreeBSD"/>
873
+ </fingerprint>
874
+ <fingerprint pattern="^CN=NetVanta,O=ADTRAN\\, Inc\.,L=Huntsville,ST=AL,C=US$" certainty="0.9">
875
+ <description>ADTRAN Netvanta Router</description>
876
+ <example>CN=NetVanta,O=ADTRAN\, Inc.,L=Huntsville,ST=AL,C=US</example>
877
+ <param pos="0" name="os.device" value="Router"/>
878
+ <param pos="0" name="os.vendor" value="ADTRAN"/>
879
+ <param pos="0" name="os.family" value="NetVanta"/>
880
+ <param pos="0" name="hw.device" value="Router"/>
881
+ <param pos="0" name="hw.vendor" value="ADTRAN"/>
882
+ <param pos="0" name="hw.family" value="NetVanta"/>
883
+ </fingerprint>
678
884
  <fingerprint pattern="^CN=SophosApplianceCertificate">
679
885
  <description>Sophos Appliance</description>
680
886
  <example>CN=SophosApplianceCertificate_C330AC22W713PAF,OU=OU,O=Green House Data,L=Cheyenne,ST=WY,C=US</example>
@@ -701,6 +907,13 @@
701
907
  <param pos="1" name="host.mac"/>
702
908
  <param pos="2" name="hw.product"/>
703
909
  </fingerprint>
910
+ <fingerprint pattern="^CN=Mercury Security EP-series,O=Mercury Security Corp\.,L=Long Beach,ST=CA,C=US$">
911
+ <description>Mercurity Security (now HID Global) No MAC</description>
912
+ <example>CN=Mercury Security EP-series,O=Mercury Security Corp.,L=Long Beach,ST=CA,C=US</example>
913
+ <param pos="0" name="hw.vendor" value="Mercury Security"/>
914
+ <param pos="0" name="hw.device" value="Access Controller"/>
915
+ <param pos="0" name="hw.product" value="EP-series"/>
916
+ </fingerprint>
704
917
  <fingerprint pattern="^CN=securelogin.arubanetworks.com,">
705
918
  <description>Aruba Wireless Controller</description>
706
919
  <example>CN=securelogin.arubanetworks.com,O=Aruba Networks,C=US</example>
@@ -715,8 +928,8 @@
715
928
  <param pos="0" name="hw.vendor" value="WatchGuard"/>
716
929
  <param pos="0" name="hw.device" value="Firewall"/>
717
930
  <param pos="0" name="os.vendor" value="WatchGuard"/>
718
- <param pos="0" name="os.cpe23" value="cpe:/o:watchguard:fireware:-"/>
719
931
  <param pos="0" name="os.product" value="Fireware"/>
932
+ <param pos="0" name="os.cpe23" value="cpe:/o:watchguard:fireware:-"/>
720
933
  </fingerprint>
721
934
  <fingerprint pattern="^CN=[0-9\.]+,OU=SSL-VPN,O=SonicWALL\\, Inc\.,L=Sunnyvale,ST=CA,C=US$">
722
935
  <description>SonicWALL Firewall</description>
@@ -770,6 +983,26 @@
770
983
  <param pos="0" name="os.device" value="Printer"/>
771
984
  <param pos="0" name="os.vendor" value="Canon"/>
772
985
  </fingerprint>
986
+ <fingerprint pattern="^CN=ScanFront$">
987
+ <description>Canon ScanFront Simple</description>
988
+ <example>CN=ScanFront</example>
989
+ <param pos="0" name="hw.device" value="Scanner"/>
990
+ <param pos="0" name="hw.vendor" value="Canon"/>
991
+ <param pos="0" name="hw.product" value="ScanFront"/>
992
+ <param pos="0" name="os.device" value="Scanner"/>
993
+ <param pos="0" name="os.vendor" value="Canon"/>
994
+ <param pos="0" name="os.product" value="ScanFront"/>
995
+ </fingerprint>
996
+ <fingerprint pattern="^CN=ScanFront,OU=IMS,O=CANON ELECTRONICS INC\.,L=Minato-ku,ST=Tokyo,C=JP$">
997
+ <description>Canon ScanFront Full</description>
998
+ <example>CN=ScanFront,OU=IMS,O=CANON ELECTRONICS INC.,L=Minato-ku,ST=Tokyo,C=JP</example>
999
+ <param pos="0" name="hw.device" value="Scanner"/>
1000
+ <param pos="0" name="hw.vendor" value="Canon"/>
1001
+ <param pos="0" name="hw.product" value="ScanFront"/>
1002
+ <param pos="0" name="os.device" value="Scanner"/>
1003
+ <param pos="0" name="os.vendor" value="Canon"/>
1004
+ <param pos="0" name="os.product" value="ScanFront"/>
1005
+ </fingerprint>
773
1006
  <fingerprint pattern="^CN=tnsappliance.*,O=Tenable Network Security\\, Inc\.,L=Columbia,ST=Maryland,C=US$">
774
1007
  <description>Tenable Appliance</description>
775
1008
  <example>CN=tnsappliance-b088a321,OU=--,O=Tenable Network Security\, Inc.,L=Columbia,ST=Maryland,C=US</example>
@@ -879,12 +1112,23 @@
879
1112
  <description>Axis Communications Web Cam</description>
880
1113
  <example host.mac="accc8ea31abf">CN=axis-accc8ea31abf,O=Axis Communications AB</example>
881
1114
  <param pos="0" name="hw.vendor" value="AXIS"/>
882
- <param pos="0" name="hw.device" value="Web Cam"/>
1115
+ <param pos="0" name="hw.device" value="Web cam"/>
883
1116
  <param pos="0" name="os.vendor" value="AXIS"/>
884
- <param pos="0" name="os.device" value="Web Cam"/>
1117
+ <param pos="0" name="os.device" value="Web cam"/>
885
1118
  <param pos="0" name="os.family" value="Linux"/>
886
1119
  <param pos="1" name="host.mac"/>
887
1120
  </fingerprint>
1121
+ <fingerprint pattern="^CN=([^,]+),OU=Nortek,O=ELAN,L=StuddardMD,ST=[^,]+,C=US$">
1122
+ <description>ELAN Web Cam</description>
1123
+ <example host.name="ServerRoom">CN=ServerRoom,OU=Nortek,O=ELAN,L=StuddardMD,ST=10000,C=US</example>
1124
+ <param pos="0" name="hw.vendor" value="ELAN"/>
1125
+ <param pos="0" name="hw.device" value="Web cam"/>
1126
+ <param pos="0" name="hw.product" value="HDIPCam"/>
1127
+ <param pos="0" name="os.vendor" value="ELAN"/>
1128
+ <param pos="0" name="os.device" value="Web cam"/>
1129
+ <param pos="0" name="os.family" value="Linux"/>
1130
+ <param pos="1" name="host.name"/>
1131
+ </fingerprint>
888
1132
  <fingerprint pattern="^CN=Dell_OpenManage.*,OU=PG,O=Dell Inc\.,ST=Texas,C=US$">
889
1133
  <description>Dell OpenManage</description>
890
1134
  <example>CN=Dell_OpenManage01,OU=PG,O=Dell Inc.,ST=Texas,C=US</example>
@@ -957,4 +1201,61 @@
957
1201
  <param pos="0" name="hw.device" value="Light Bulb"/>
958
1202
  <param pos="1" name="host.mac_eui64"/>
959
1203
  </fingerprint>
1204
+ <fingerprint pattern="^CN=www\.ibm\.com,OU=IBM i Service,L=Rochester,ST=Minnesota,C=US$">
1205
+ <description>IBM iSeries Service Console</description>
1206
+ <example>CN=www.ibm.com,OU=IBM i Service,L=Rochester,ST=Minnesota,C=US</example>
1207
+ <param pos="0" name="os.vendor" value="IBM"/>
1208
+ <param pos="0" name="os.family" value="OS/400"/>
1209
+ <param pos="0" name="os.product" value="OS/400"/>
1210
+ <param pos="0" name="os.cpe23" value="cpe:/o:ibm:os_400:-"/>
1211
+ </fingerprint>
1212
+ <fingerprint pattern="^CN=.*\.ip\.kaptivo\.live,">
1213
+ <description>Kaptivo Whiteboard</description>
1214
+ <example>CN=*.ip.kaptivo.live,OU=Domain Control Validated+OU=PositiveSSL Wildcard</example>
1215
+ <param pos="0" name="hw.vendor" value="Kaptivo"/>
1216
+ <param pos="0" name="hw.product" value="Whiteboard"/>
1217
+ <param pos="0" name="hw.device" value="Whiteboard"/>
1218
+ </fingerprint>
1219
+ <fingerprint pattern="^CN=.*,OU=Network Security Management,O=FireEye\\, Inc\.,L=Milpitas,ST=California,C=US$">
1220
+ <description>FireEye Appliance</description>
1221
+ <example>CN=noc-feye-ex2,OU=Network Security Management,O=FireEye\, Inc.,L=Milpitas,ST=California,C=US</example>
1222
+ <param pos="0" name="hw.vendor" value="FireEye"/>
1223
+ <param pos="0" name="hw.product" value="Appliance"/>
1224
+ <param pos="0" name="hw.device" value="Security Appliance"/>
1225
+ </fingerprint>
1226
+ <fingerprint pattern="^CN=.*,OU=IA,O=FireEye,L=Charlottesville,ST=Virginia,C=US$">
1227
+ <description>FireEye Investigation Analysis System Appliance</description>
1228
+ <example>CN=noc-feye-ia2,OU=IA,O=FireEye,L=Charlottesville,ST=Virginia,C=US</example>
1229
+ <param pos="0" name="hw.vendor" value="FireEye"/>
1230
+ <param pos="0" name="hw.product" value="IA Appliance"/>
1231
+ <param pos="0" name="hw.device" value="Security Appliance"/>
1232
+ </fingerprint>
1233
+ <fingerprint pattern="^CN=.*,OU=Gigamon Network Visibility Systems,O=Gigamon Inc\.,L=Santa Clara,ST=California,C=US$">
1234
+ <description>Gigamon GigaVUE Appliance</description>
1235
+ <example>CN=gvue01,OU=Gigamon Network Visibility Systems,O=Gigamon Inc.,L=Santa Clara,ST=California,C=US</example>
1236
+ <param pos="0" name="hw.vendor" value="Gigamon"/>
1237
+ <param pos="0" name="hw.device" value="Monitoring"/>
1238
+ <param pos="0" name="hw.product" value="GigaVUE"/>
1239
+ </fingerprint>
1240
+ <fingerprint pattern="^CN=.*,OU=Telliris,O=DAC Systems,L=Shelton,ST=Connecticut,C=US$">
1241
+ <description>Telliris IVR</description>
1242
+ <example>CN=Telliris-IVR,OU=Telliris,O=DAC Systems,L=Shelton,ST=Connecticut,C=US</example>
1243
+ <param pos="0" name="hw.vendor" value="Telliris"/>
1244
+ <param pos="0" name="hw.device" value="Voice Appliance"/>
1245
+ <param pos="0" name="hw.product" value="IVR"/>
1246
+ </fingerprint>
1247
+ <fingerprint pattern="^CN=SLS,O=Lantronix,L=Irvine,ST=California,C=US$">
1248
+ <description>Lantronix SLS terminal server</description>
1249
+ <example>CN=SLS,O=Lantronix,L=Irvine,ST=California,C=US</example>
1250
+ <param pos="0" name="hw.vendor" value="Lantronix"/>
1251
+ <param pos="0" name="hw.device" value="Device Server"/>
1252
+ <param pos="0" name="hw.product" value="SLS"/>
1253
+ </fingerprint>
1254
+ <fingerprint pattern="^CN=Tintri Default Certificate,OU=Tintri Server Certificate,O=Tintri\\, Inc\.,L=Mountain View,ST=CA,C=US$">
1255
+ <description>Tintri Storage Appliance</description>
1256
+ <example>CN=Tintri Default Certificate,OU=Tintri Server Certificate,O=Tintri\, Inc.,L=Mountain View,ST=CA,C=US</example>
1257
+ <param pos="0" name="hw.vendor" value="Tintro"/>
1258
+ <param pos="0" name="hw.device" value="NAS"/>
1259
+ <param pos="0" name="hw.product" value="Storage Appliance"/>
1260
+ </fingerprint>
960
1261
  </fingerprints>