recog 2.3.7 → 2.3.8

Sign up to get free protection for your applications and to get access to all the features.
Files changed (50) hide show
  1. checksums.yaml +4 -4
  2. data/.gitignore +3 -2
  3. data/.ruby-gemset +1 -0
  4. data/.ruby-version +1 -0
  5. data/.travis.yml +2 -4
  6. data/Gemfile +2 -5
  7. data/bin/recog_standardize +118 -0
  8. data/cpe-remap.yaml +21 -0
  9. data/features/match.feature +4 -0
  10. data/features/support/aruba.rb +3 -0
  11. data/features/verify.feature +5 -0
  12. data/identifiers/README.md +47 -0
  13. data/identifiers/os_architecture.txt +20 -0
  14. data/identifiers/os_device.txt +52 -0
  15. data/identifiers/os_family.txt +160 -0
  16. data/identifiers/os_product.txt +199 -0
  17. data/identifiers/service_family.txt +185 -0
  18. data/identifiers/service_product.txt +255 -0
  19. data/identifiers/software_class.txt +26 -0
  20. data/identifiers/software_family.txt +91 -0
  21. data/identifiers/software_product.txt +333 -0
  22. data/identifiers/vendor.txt +405 -0
  23. data/lib/recog/version.rb +1 -1
  24. data/spec/lib/fingerprint_self_test_spec.rb +1 -1
  25. data/spec/lib/recog/fingerprint/regexp_factory_spec.rb +1 -1
  26. data/update_cpes.py +1 -1
  27. data/xml/apache_os.xml +9 -0
  28. data/xml/architecture.xml +9 -5
  29. data/xml/dns_versionbind.xml +9 -11
  30. data/xml/ftp_banners.xml +47 -5
  31. data/xml/html_title.xml +310 -196
  32. data/xml/http_cookies.xml +13 -1
  33. data/xml/http_servers.xml +145 -7
  34. data/xml/http_wwwauth.xml +13 -1
  35. data/xml/mdns_device-info_txt.xml +20 -16
  36. data/xml/mysql_banners.xml +420 -38
  37. data/xml/ntp_banners.xml +16 -8
  38. data/xml/operating_system.xml +1 -0
  39. data/xml/rtsp_servers.xml +21 -21
  40. data/xml/sip_banners.xml +5 -41
  41. data/xml/sip_user_agents.xml +40 -1
  42. data/xml/smb_native_os.xml +1 -0
  43. data/xml/smtp_banners.xml +3 -4
  44. data/xml/snmp_sysdescr.xml +44 -28
  45. data/xml/ssh_banners.xml +78 -73
  46. data/xml/telnet_banners.xml +30 -9
  47. data/xml/x11_banners.xml +1 -1
  48. data/xml/x509_issuers.xml +7 -7
  49. data/xml/x509_subjects.xml +329 -28
  50. metadata +23 -6
data/xml/telnet_banners.xml CHANGED
@@ -117,6 +117,7 @@
117
117
  <param pos="2" name="os.version.version"/>
118
118
  <param pos="3" name="os.edition"/>
119
119
  <param pos="4" name="os.build"/>
120
+ <param pos="0" name="os.cpe23" value="cpe:/o:dd-wrt:dd-wrt:{os.version}"/>
120
121
  <param pos="0" name="hw.device" value="Router"/>
121
122
  </fingerprint>
122
123
  <fingerprint pattern="^(?:\r|\n)*DD-WRT v(3.\d)-(r([\w]+)) ([\w-]+) \(c\) \d{4} NewMedia-NET GmbH(?:\r|\n)+Release: \d+\/\d+\/\d+(?:\r|\n)+.* login:\s*$">
@@ -133,6 +134,7 @@
133
134
  <param pos="2" name="os.version.version"/>
134
135
  <param pos="3" name="os.build"/>
135
136
  <param pos="4" name="os.edition"/>
137
+ <param pos="0" name="os.cpe23" value="cpe:/o:dd-wrt:dd-wrt:{os.version}"/>
136
138
  <param pos="0" name="hw.device" value="Router"/>
137
139
  </fingerprint>
138
140
  <fingerprint pattern="^(TD-\w+) [\d.]+ DSL Modem Router(?:\r|\n)+Authorization failed after trying \d+ times!!!\.(?:\r|\n)+Please login after \d+ seconds!\s*$">
@@ -989,7 +991,7 @@
989
991
  </example>
990
992
  <param pos="0" name="os.vendor" value="Flowpoint"/>
991
993
  <param pos="0" name="hw.device" value="Broadband router"/>
992
- <param pos="0" name="hw.product" value="DSL router"/>
994
+ <param pos="0" name="hw.product" value="DSL Router"/>
993
995
  <param pos="1" name="hw.model"/>
994
996
  <param pos="2" name="os.version"/>
995
997
  </fingerprint>
@@ -1071,6 +1073,9 @@
1071
1073
  gICAgICAgICAgICAgICAgICAgICAgICAgIApFbnRlciBBcHBsaWNhdGlvbiBOYW1lOg==
1072
1074
  </example>
1073
1075
  <param pos="0" name="os.vendor" value="IBM"/>
1076
+ <param pos="0" name="os.family" value="OS/400"/>
1077
+ <param pos="0" name="os.product" value="OS/400"/>
1078
+ <param pos="0" name="os.cpe23" value="cpe:/o:ibm:os_400:-"/>
1074
1079
  </fingerprint>
1075
1080
  <fingerprint pattern="^This copy of the Ataman TCP Remote Logon Services">
1076
1081
  <description>Windows NT/2k/2k3 running Ataman telnet server</description>
@@ -1531,8 +1536,8 @@
1531
1536
  UG93ZXIgTWVhc3VyZW1lbnQgTHRkLiBNZXRlciBJT04gNzMzMFYyNzEgRVRIIEVUSDczMzBWMjcyCg1TZ
1532
1537
  XJpYWwjOiBQQi0wMjA0QTA1OC0xMQoNCg1sb2dpbjo=
1533
1538
  </example>
1534
- <param pos="0" name="hw.vendor" value = "Power Measurement Ltd."/>
1535
- <param pos="0" name="hw.family" value = "ION"/>
1539
+ <param pos="0" name="hw.vendor" value="Power Measurement Ltd."/>
1540
+ <param pos="0" name="hw.family" value="ION"/>
1536
1541
  <param pos="1" name="hw.version"/>
1537
1542
  </fingerprint>
1538
1543
  <fingerprint pattern="^GW25 v([[:digit:]\.]+) - Intelligent Power Meters GPRS Gateway[[:space:]]+Developed by Satelitech">
@@ -1544,8 +1549,8 @@
1544
1549
  R1cyNSB2MS4yLjEgLSBJbnRlbGxpZ2VudCBQb3dlciBNZXRlcnMgR1BSUyBHYXRld2F5Cg1EZXZlbG9wZ
1545
1550
  WQgYnkgU2F0ZWxpdGVjaCBTLkEgZm9yIEVTRyBEaWxlYwoNRW50ZXIgcGFzc3dvcmQ6
1546
1551
  </example>
1547
- <param pos="0" name="hw.vendor" value = "Satelitech"/>
1548
- <param pos="0" name="hw.family" value = "GW25"/>
1552
+ <param pos="0" name="hw.vendor" value="Satelitech"/>
1553
+ <param pos="0" name="hw.family" value="GW25"/>
1549
1554
  <param pos="1" name="hw.version"/>
1550
1555
  </fingerprint>
1551
1556
  <fingerprint pattern="^RDK \(A Yocto Project based Distro\) ([^ ]+) Docsis-Gateway">
@@ -1557,14 +1562,14 @@
1557
1562
  UkRLIChBIFlvY3RvIFByb2plY3QgYmFzZWQgRGlzdHJvKSAyLjAgRG9jc2lzLUdhdGV3YXkNCg0NCg1Eb
1558
1563
  2NzaXMtR2F0ZXdheSBsb2dpbjo=
1559
1564
  </example>
1560
- <param pos="0" name="hw.device" value = "DOCSIS Cable Modem"/>
1561
- <param pos="0" name="os.vendor" value = "Yocto"/>
1562
- <param pos="0" name="os.product" value = "RDK"/>
1565
+ <param pos="0" name="hw.device" value="DOCSIS Cable Modem"/>
1566
+ <param pos="0" name="os.vendor" value="Yocto"/>
1567
+ <param pos="0" name="os.product" value="RDK"/>
1563
1568
  <param pos="1" name="os.version"/>
1564
1569
  </fingerprint>
1565
1570
  <fingerprint pattern="^RICOH Maintenance Shell">
1566
1571
  <description>a Ricoh device</description>
1567
- <!-- RICOH Maintenance Shell.
1572
+ <!-- RICOH Maintenance Shell.
1568
1573
  User access verification.
1569
1574
  login:-->
1570
1575
  <example _encoding="base64">
@@ -1573,4 +1578,20 @@
1573
1578
  <param pos="0" name="os.vendor" value="Ricoh"/>
1574
1579
  <param pos="0" name="os.device" value="Printer"/>
1575
1580
  </fingerprint>
1581
+ <fingerprint pattern="Precise/RTCS v([\d\.]+) Telnet server">
1582
+ <description>Liebert UPS</description>
1583
+ <!-- Precise/RTCS v2.90.00 Telnet server
1584
+ Service Port Manager Active
1585
+
1586
+ <Esc> Ends Session
1587
+ -->
1588
+ <example _encoding="base64" os.version="2.90.00">
1589
+ UHJlY2lzZS9SVENTIHYyLjkwLjAwIFRlbG5ldCBzZXJ2ZXIKCgpTZXJ2aWNlIFBvcnQgTWFuYWdlciBBY3RpdmUKCjxFc2M+IEVuZHMgU2Vzc2lvbgoKroot
1590
+ </example>
1591
+ <param pos="0" name="hw.device" value="Power device"/>
1592
+ <param pos="0" name="hw.vendor" value="Liebert"/>
1593
+ <param pos="0" name="os.device" value="Power device"/>
1594
+ <param pos="0" name="os.vendor" value="Liebert"/>
1595
+ <param pos="1" name="os.version"/>
1596
+ </fingerprint>
1576
1597
  </fingerprints>
data/xml/x11_banners.xml CHANGED
@@ -39,7 +39,7 @@
39
39
  <example>DECWINDOWS DigitalEquipmentCorporation, eXcursion</example>
40
40
  <param pos="0" name="os.vendor" value="Microsoft"/>
41
41
  <param pos="0" name="service.vendor" value="DEC"/>
42
- <param pos="0" name="service.product" value="DEC eXcursion X server"/>
42
+ <param pos="0" name="service.product" value="DEC eXcursion X Server"/>
43
43
  <param pos="0" name="os.product" value="Windows"/>
44
44
  <param pos="0" name="os.family" value="Windows"/>
45
45
  <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows:-"/>
data/xml/x509_issuers.xml CHANGED
@@ -32,9 +32,9 @@
32
32
  <description>ASUS Nexus Player (Android) with Google Cast</description>
33
33
  <example>CN=Asus fugu Cast ICA,OU=Widevine,O=Google Inc,L=Kirkland,ST=Washington,C=US</example>
34
34
  <param pos="0" name="os.vendor" value="Google"/>
35
- <param pos="0" name="os.cpe23" value="cpe:/o:google:android:-"/>
36
35
  <param pos="0" name="os.family" value="Linux"/>
37
36
  <param pos="0" name="os.product" value="Android"/>
37
+ <param pos="0" name="os.cpe23" value="cpe:/o:google:android:-"/>
38
38
  <param pos="0" name="hw.device" value="Media Server"/>
39
39
  <param pos="0" name="hw.vendor" value="ASUS"/>
40
40
  <param pos="0" name="hw.product" value="Nexus Player"/>
@@ -43,9 +43,9 @@
43
43
  <description>Sony SmartTV (Android) with Google Cast</description>
44
44
  <example>CN=Sony amai Cast ICA,OU=Widevine,O=Google Inc,L=Kirkland,ST=Washington,C=US</example>
45
45
  <param pos="0" name="os.vendor" value="Google"/>
46
- <param pos="0" name="os.cpe23" value="cpe:/o:google:android:-"/>
47
46
  <param pos="0" name="os.family" value="Linux"/>
48
47
  <param pos="0" name="os.product" value="Android"/>
48
+ <param pos="0" name="os.cpe23" value="cpe:/o:google:android:-"/>
49
49
  <param pos="0" name="hw.device" value="Smart TV"/>
50
50
  <param pos="0" name="hw.vendor" value="Sony"/>
51
51
  </fingerprint>
@@ -53,9 +53,9 @@
53
53
  <description>Vizio SmartTV (Android) with Google Cast</description>
54
54
  <example>CN=Cast TV ICA (Vizio),OU=Cast,O=Google Inc,L=Mountain View,ST=California,C=US</example>
55
55
  <param pos="0" name="os.vendor" value="Google"/>
56
- <param pos="0" name="os.cpe23" value="cpe:/o:google:android:-"/>
57
56
  <param pos="0" name="os.family" value="Linux"/>
58
57
  <param pos="0" name="os.product" value="Android"/>
58
+ <param pos="0" name="os.cpe23" value="cpe:/o:google:android:-"/>
59
59
  <param pos="0" name="hw.device" value="Smart TV"/>
60
60
  <param pos="0" name="hw.vendor" value="Vizio"/>
61
61
  </fingerprint>
@@ -63,9 +63,9 @@
63
63
  <description>NVIDIA SHIELD (Android) with Google Cast</description>
64
64
  <example>CN=NVidia Shield Cast ICA,OU=Widevine,O=Google Inc,L=Kirkland,ST=Washington,C=US</example>
65
65
  <param pos="0" name="os.vendor" value="Google"/>
66
- <param pos="0" name="os.cpe23" value="cpe:/o:google:android:-"/>
67
66
  <param pos="0" name="os.family" value="Linux"/>
68
67
  <param pos="0" name="os.product" value="Android"/>
68
+ <param pos="0" name="os.cpe23" value="cpe:/o:google:android:-"/>
69
69
  <param pos="0" name="hw.device" value="Tablet"/>
70
70
  <param pos="0" name="hw.vendor" value="NVIDIA"/>
71
71
  <param pos="0" name="hw.product" value="SHIELD"/>
@@ -74,9 +74,9 @@
74
74
  <description>NVIDIA SHIELD (Android) with Google Cast (Darcy)</description>
75
75
  <example>CN=NVidia Darcy NVidia Tegra K1-Denver Cast ICA,OU=Widevine,O=Google Inc,L=Kirkland,ST=Washington,C=US</example>
76
76
  <param pos="0" name="os.vendor" value="Google"/>
77
- <param pos="0" name="os.cpe23" value="cpe:/o:google:android:-"/>
78
77
  <param pos="0" name="os.family" value="Linux"/>
79
78
  <param pos="0" name="os.product" value="Android"/>
79
+ <param pos="0" name="os.cpe23" value="cpe:/o:google:android:-"/>
80
80
  <param pos="0" name="hw.device" value="Tablet"/>
81
81
  <param pos="0" name="hw.vendor" value="NVIDIA"/>
82
82
  <param pos="0" name="hw.product" value="SHIELD"/>
@@ -108,9 +108,9 @@
108
108
  <description>VMWare ESXi w/Installer</description>
109
109
  <example>O=VMware Installer</example>
110
110
  <param pos="0" name="os.vendor" value="VMWare"/>
111
- <param pos="0" name="os.cpe23" value="cpe:/o:vmware:esxi:-"/>
112
111
  <param pos="0" name="os.product" value="ESXi"/>
113
112
  <param pos="0" name="os.device" value="Hypervisor"/>
113
+ <param pos="0" name="os.cpe23" value="cpe:/o:vmware:esxi:-"/>
114
114
  </fingerprint>
115
115
  <fingerprint pattern="^CN=CA,OU=VMware Engineering,O=vCenter,ST=California,C=US$">
116
116
  <description>VMWare vCenter</description>
@@ -124,8 +124,8 @@
124
124
  <param pos="0" name="hw.device" value="Lights Out Management"/>
125
125
  <param pos="0" name="hw.vendor" value="HP"/>
126
126
  <param pos="0" name="hw.family" value="iLO"/>
127
- <param pos="0" name="hw.cpe23" value="cpe:/h:hp:integrated_lights_out:-"/>
128
127
  <param pos="0" name="hw.product" value="iLO"/>
128
+ <param pos="0" name="hw.cpe23" value="cpe:/h:hp:integrated_lights_out:-"/>
129
129
  <param pos="0" name="os.device" value="Lights Out Management"/>
130
130
  <param pos="0" name="os.vendor" value="HP"/>
131
131
  <param pos="0" name="os.family" value="iLO"/>
data/xml/x509_subjects.xml CHANGED
@@ -81,6 +81,13 @@
81
81
  <param pos="2" name="cisco.serial_number"/>
82
82
  <param pos="3" name="host.mac"/>
83
83
  </fingerprint>
84
+ <fingerprint pattern="^CN=SEP([a-fA-F0-9]{12}),O=TemporaryDefaultCertificate$">
85
+ <description>Cisco IP Phone without serial number</description>
86
+ <example host.mac="1C6A7AE57121">CN=SEP1C6A7AE57121,O=TemporaryDefaultCertificate</example>
87
+ <param pos="0" name="hw.device" value="VoIP"/>
88
+ <param pos="0" name="hw.vendor" value="Cisco"/>
89
+ <param pos="1" name="host.mac"/>
90
+ </fingerprint>
84
91
  <fingerprint pattern="^CN=Cambium WLAN AP,OU=Products,O=Cambium Networks Inc,L=San Jose,ST=CA,C=US$">
85
92
  <description>Cambium Networks WAP</description>
86
93
  <example>CN=Cambium WLAN AP,OU=Products,O=Cambium Networks Inc,L=San Jose,ST=CA,C=US</example>
@@ -182,8 +189,8 @@
182
189
  <param pos="0" name="hw.device" value="Lights Out Management"/>
183
190
  <param pos="0" name="hw.vendor" value="HP"/>
184
191
  <param pos="0" name="hw.family" value="iLO"/>
185
- <param pos="0" name="hw.cpe23" value="cpe:/h:hp:integrated_lights_out:-"/>
186
192
  <param pos="0" name="hw.product" value="iLO"/>
193
+ <param pos="0" name="hw.cpe23" value="cpe:/h:hp:integrated_lights_out:-"/>
187
194
  <param pos="0" name="os.device" value="Lights Out Management"/>
188
195
  <param pos="0" name="os.vendor" value="HP"/>
189
196
  <param pos="0" name="os.family" value="iLO"/>
@@ -196,8 +203,8 @@
196
203
  <param pos="0" name="hw.device" value="Lights Out Management"/>
197
204
  <param pos="0" name="hw.vendor" value="HP"/>
198
205
  <param pos="0" name="hw.family" value="iLO"/>
199
- <param pos="0" name="hw.cpe23" value="cpe:/h:hp:integrated_lights_out:-"/>
200
206
  <param pos="0" name="hw.product" value="iLO"/>
207
+ <param pos="0" name="hw.cpe23" value="cpe:/h:hp:integrated_lights_out:-"/>
201
208
  <param pos="0" name="os.device" value="Lights Out Management"/>
202
209
  <param pos="0" name="os.vendor" value="HP"/>
203
210
  <param pos="0" name="os.family" value="iLO"/>
@@ -210,8 +217,8 @@
210
217
  <param pos="0" name="hw.device" value="Lights Out Management"/>
211
218
  <param pos="0" name="hw.vendor" value="HP"/>
212
219
  <param pos="0" name="hw.family" value="iLO"/>
213
- <param pos="0" name="hw.cpe23" value="cpe:/h:hp:integrated_lights_out:-"/>
214
220
  <param pos="0" name="hw.product" value="iLO"/>
221
+ <param pos="0" name="hw.cpe23" value="cpe:/h:hp:integrated_lights_out:-"/>
215
222
  <param pos="0" name="os.device" value="Lights Out Management"/>
216
223
  <param pos="0" name="os.vendor" value="HP"/>
217
224
  <param pos="0" name="os.family" value="iLO"/>
@@ -224,8 +231,8 @@
224
231
  <param pos="0" name="hw.device" value="Lights Out Management"/>
225
232
  <param pos="0" name="hw.vendor" value="HP"/>
226
233
  <param pos="0" name="hw.family" value="iLO"/>
227
- <param pos="0" name="hw.cpe23" value="cpe:/h:hp:integrated_lights_out:-"/>
228
234
  <param pos="0" name="hw.product" value="iLO"/>
235
+ <param pos="0" name="hw.cpe23" value="cpe:/h:hp:integrated_lights_out:-"/>
229
236
  <param pos="0" name="os.device" value="Lights Out Management"/>
230
237
  <param pos="0" name="os.vendor" value="HP"/>
231
238
  <param pos="0" name="os.family" value="iLO"/>
@@ -244,9 +251,10 @@
244
251
  <param pos="0" name="os.family" value="ILOM"/>
245
252
  <param pos="0" name="os.product" value="ILOM"/>
246
253
  </fingerprint>
247
- <fingerprint pattern="^CN=AMI,OU=Service Processors,O=American Megatrends Inc\.,L=Norcross,ST=Georgia,C=US$">
254
+ <fingerprint pattern="^CN=AMI,OU=Service Processors,O=American Megatrends Inc">
248
255
  <description>AMI MegaRAC LOM</description>
249
256
  <example>CN=AMI,OU=Service Processors,O=American Megatrends Inc.,L=Norcross,ST=Georgia,C=US</example>
257
+ <example>CN=AMI,OU=Service Processors,O=American Megatrends Inc,L=Atlanta,ST=Georgia,C=US</example>
250
258
  <param pos="0" name="hw.device" value="Lights Out Management"/>
251
259
  <param pos="0" name="hw.vendor" value="AMI"/>
252
260
  <param pos="0" name="hw.family" value="MegaRAC"/>
@@ -256,6 +264,29 @@
256
264
  <param pos="0" name="os.family" value="MegaRAC"/>
257
265
  <param pos="0" name="os.product" value="MegaRAC"/>
258
266
  </fingerprint>
267
+ <fingerprint pattern="^CN=C-series CIMC,OU=PID:([^ ]+) SERIAL:([^,]+),O=Cisco">
268
+ <description>Cisco Integrated Management Controller</description>
269
+ <example cisco.serial_number="FCH18999AAA" cisco.imc_model="UCSC-C220-M3S">CN=C-series CIMC,OU=PID:UCSC-C220-M3S SERIAL:FCH18999AAA,O=Cisco Self Signed,L=San Jose,ST=California,C=US</example>
270
+ <param pos="0" name="hw.device" value="Lights Out Management"/>
271
+ <param pos="0" name="hw.vendor" value="Cisco"/>
272
+ <param pos="0" name="hw.product" value="IMC"/>
273
+ <param pos="0" name="os.vendor" value="Cisco"/>
274
+ <param pos="0" name="os.family" value="Linux"/>
275
+ <param pos="0" name="os.product" value="IMC"/>
276
+ <param pos="2" name="cisco.serial_number"/>
277
+ <param pos="1" name="cisco.imc_model"/>
278
+ </fingerprint>
279
+ <fingerprint pattern="^CN=C220-(FCH[^,]+),OU=null,O=Cisco Systems Inc">
280
+ <description>Cisco Integrated Management Controller C220</description>
281
+ <example cisco.serial_number="FCH17999AAA">CN=C220-FCH17999AAA,OU=null,O=Cisco Systems Inc.,L=San Jose,ST=California,C=US</example>
282
+ <param pos="0" name="hw.device" value="Lights Out Management"/>
283
+ <param pos="0" name="hw.vendor" value="Cisco"/>
284
+ <param pos="0" name="hw.product" value="IMC"/>
285
+ <param pos="0" name="os.vendor" value="Cisco"/>
286
+ <param pos="0" name="os.family" value="Linux"/>
287
+ <param pos="0" name="os.product" value="IMC"/>
288
+ <param pos="1" name="cisco.serial_number"/>
289
+ </fingerprint>
259
290
  <fingerprint pattern="^CN=avocent.com,OU=AESS,O=Avocent,L=Sunrise,ST=FL,C=US$">
260
291
  <description>Avocent KVM</description>
261
292
  <example>CN=avocent.com,OU=AESS,O=Avocent,L=Sunrise,ST=FL,C=US</example>
@@ -313,12 +344,48 @@
313
344
  <param pos="0" name="os.family" value="Linux"/>
314
345
  </fingerprint>
315
346
  <fingerprint pattern="^CN=ASA Temporary Self Signed Certificate$">
316
- <description>Cisco ASA</description>
347
+ <description>Cisco ASA Temp Cert</description>
317
348
  <example>CN=ASA Temporary Self Signed Certificate</example>
349
+ <param pos="0" name="os.vendor" value="Cisco"/>
350
+ <param pos="0" name="os.family" value="Adaptive Security Appliance"/>
351
+ <param pos="0" name="os.product" value="Adaptive Security Appliance"/>
352
+ <param pos="0" name="os.cpe23" value="cpe:/o:cisco:adaptive_security_appliance:-"/>
353
+ <param pos="0" name="hw.vendor" value="Cisco"/>
354
+ <param pos="0" name="hw.family" value="Adaptive Security Appliance"/>
355
+ <param pos="0" name="hw.product" value="Adaptive Security Appliance"/>
318
356
  <param pos="0" name="hw.device" value="Firewall"/>
319
357
  <param pos="0" name="hw.cpe23" value="cpe:/h:cisco:adaptive_security_appliance:-"/>
358
+ </fingerprint>
359
+ <fingerprint pattern="^SERIALNUMBER=([a-zA-Z0-9]+),CN=DEVICE-vWLC,O=Cisco Virtual WLC$">
360
+ <description>Cisco vWLC</description>
361
+ <example cisco.serial_number="9C89M2088D1">SERIALNUMBER=9C89M2088D1,CN=DEVICE-vWLC,O=Cisco Virtual WLC</example>
362
+ <param pos="0" name="os.vendor" value="Cisco"/>
363
+ <param pos="0" name="os.device" value="Wireless Controller"/>
364
+ <param pos="0" name="os.product" value="Wireless LAN Controller"/>
365
+ <param pos="0" name="os.cpe23" value="cpe:/o:cisco:wireless_lan_controller:-"/>
366
+ <param pos="1" name="cisco.serial_number"/>
367
+ </fingerprint>
368
+ <fingerprint pattern="^CN=[a-zA-Z0-9\.\-\_]+,OU=DeviceSSL \(WebAdmin\),O=Cisco Systems Inc\.,C=US$">
369
+ <description>Cisco WLC</description>
370
+ <example>CN=169.254.1.1,OU=DeviceSSL (WebAdmin),O=Cisco Systems Inc.,C=US</example>
371
+ <param pos="0" name="os.vendor" value="Cisco"/>
372
+ <param pos="0" name="os.device" value="Wireless Controller"/>
373
+ <param pos="0" name="os.product" value="Wireless LAN Controller"/>
374
+ <param pos="0" name="os.cpe23" value="cpe:/o:cisco:wireless_lan_controller:-"/>
320
375
  <param pos="0" name="hw.vendor" value="Cisco"/>
321
- <param pos="0" name="hw.product" value="Adaptive Security Appliance"/>
376
+ <param pos="0" name="hw.device" value="Wireless Controller"/>
377
+ <param pos="0" name="hw.product" value="Wireless LAN Controller"/>
378
+ <param pos="0" name="hw.cpe23" value="cpe:/h:cisco:wireless_lan_controller:-"/>
379
+ </fingerprint>
380
+ <fingerprint pattern="^CN=pca,OU=Cisco Prime Collaboration Manager,O=Cisco,L=San Jose,ST=California,C=US$">
381
+ <description>Cisco Primary Collaboration Manager</description>
382
+ <example>CN=pca,OU=Cisco Prime Collaboration Manager,O=Cisco,L=San Jose,ST=California,C=US</example>
383
+ <param pos="0" name="os.vendor" value="Cisco"/>
384
+ <param pos="0" name="os.device" value="Network Management Device"/>
385
+ <param pos="0" name="os.product" value="Prime Collaboration Manager"/>
386
+ <param pos="0" name="hw.vendor" value="Cisco"/>
387
+ <param pos="0" name="hw.device" value="Network Management Device"/>
388
+ <param pos="0" name="hw.product" value="Prime Collaboration Manager"/>
322
389
  </fingerprint>
323
390
  <fingerprint pattern="^CN=synology\.com.*,O=Synology Inc\.,L=Taipei.*,C=TW$">
324
391
  <description>Synology NAS</description>
@@ -380,18 +447,29 @@
380
447
  <description>VMWare ESX</description>
381
448
  <example>CN=server99.,OU=VMware ESX Server Default Certificate,O=VMware\, Inc,L=Palo Alto,ST=California,C=US</example>
382
449
  <param pos="0" name="os.vendor" value="VMWare"/>
383
- <param pos="0" name="os.cpe23" value="cpe:/o:vmware:esx:-"/>
384
450
  <param pos="0" name="os.product" value="ESX"/>
385
451
  <param pos="0" name="os.device" value="Hypervisor"/>
452
+ <param pos="0" name="os.cpe23" value="cpe:/o:vmware:esx:-"/>
386
453
  <param pos="1" name="host.name"/>
387
454
  </fingerprint>
455
+ <fingerprint pattern="^CN.*,OU=SRM,O=VMware\\, Inc\.,L=Palo Alto,ST=California,C=US$">
456
+ <description>VMWare SRM</description>
457
+ <example>CN=SRM01,OU=SRM,O=VMware\, Inc.,L=Palo Alto,ST=California,C=US</example>
458
+ <param pos="0" name="os.vendor" value="VMWare"/>
459
+ <param pos="0" name="os.product" value="Linux"/>
460
+ <param pos="0" name="hw.vendor" value="VMWare"/>
461
+ <param pos="0" name="hw.device" value="Appliance"/>
462
+ <param pos="0" name="hw.product" value="Site Recovery Manager"/>
463
+ <param pos="0" name="service.vendor" value="VMWare"/>
464
+ <param pos="0" name="service.product" value="Site Recovery Manager"/>
465
+ </fingerprint>
388
466
  <fingerprint pattern="^CN=IOS-Self-Signed-Certificate-">
389
467
  <description>Cisco IOS Default Certificate</description>
390
468
  <example>CN=IOS-Self-Signed-Certificate-4163115936</example>
391
469
  <param pos="0" name="os.vendor" value="Cisco"/>
392
- <param pos="0" name="os.cpe23" value="cpe:/o:cisco:ios:-"/>
393
470
  <param pos="0" name="os.family" value="IOS"/>
394
471
  <param pos="0" name="os.product" value="IOS"/>
472
+ <param pos="0" name="os.cpe23" value="cpe:/o:cisco:ios:-"/>
395
473
  <param pos="0" name="hw.vendor" value="Cisco"/>
396
474
  <param pos="0" name="hw.device" value="Router"/>
397
475
  </fingerprint>
@@ -411,9 +489,9 @@
411
489
  <description>Vizio SmartTV (Android) with Google Cast</description>
412
490
  <example chromecast.serial_number="9V039WC9" host.mac_local="FA8FCA697898">CN=9V039WC9 FA8FCA697898,OU=Cast TV (Vizio),O=Google Inc,L=Mountain View,ST=California,C=US</example>
413
491
  <param pos="0" name="os.vendor" value="Google"/>
414
- <param pos="0" name="os.cpe23" value="cpe:/o:google:android:-"/>
415
492
  <param pos="0" name="os.family" value="Linux"/>
416
493
  <param pos="0" name="os.product" value="Android"/>
494
+ <param pos="0" name="os.cpe23" value="cpe:/o:google:android:-"/>
417
495
  <param pos="0" name="hw.device" value="Smart TV"/>
418
496
  <param pos="0" name="hw.vendor" value="Vizio"/>
419
497
  <param pos="1" name="chromecast.serial_number"/>
@@ -442,6 +520,90 @@
442
520
  <param pos="0" name="os.product" value="TelePresence"/>
443
521
  <param pos="0" name="os.device" value="Video Conferencing"/>
444
522
  </fingerprint>
523
+ <fingerprint pattern="^CN=MERCURY-([a-fA-F0-9]{12}),OU=Engineering,O=Crestron">
524
+ <description>Crestron Mercury</description>
525
+ <example host.mac="00107F1ABAA0">CN=MERCURY-00107F1ABAA0,OU=Engineering,O=Crestron Electronics\, Inc.,L=Rockleigh,ST=NJ,C=US</example>
526
+ <param pos="0" name="hw.vendor" value="Crestron"/>
527
+ <param pos="0" name="hw.device" value="Video Conferencing"/>
528
+ <param pos="0" name="hw.product" value="Mercury"/>
529
+ <param pos="0" name="os.vendor" value="Crestron"/>
530
+ <param pos="0" name="os.family" value="Linux"/>
531
+ <param pos="0" name="os.device" value="Video Conferencing"/>
532
+ <param pos="1" name="host.mac"/>
533
+ </fingerprint>
534
+ <fingerprint pattern="^CN=(AM-\d+)-([a-fA-F0-9]{12}),OU=Engineering,O=Crestron">
535
+ <description>Crestron AirMedia</description>
536
+ <example hw.product="AM-200" host.mac="00107FB7B1E2">CN=AM-200-00107FB7B1E2,OU=Engineering,O=Crestron Electronics\, Inc.,L=Rockleigh,ST=NJ,C=US</example>
537
+ <param pos="0" name="hw.vendor" value="Crestron"/>
538
+ <param pos="0" name="hw.device" value="Video Conferencing"/>
539
+ <param pos="1" name="hw.product"/>
540
+ <param pos="0" name="os.vendor" value="Crestron"/>
541
+ <param pos="0" name="os.family" value="Linux"/>
542
+ <param pos="0" name="os.device" value="Video Conferencing"/>
543
+ <param pos="2" name="host.mac"/>
544
+ </fingerprint>
545
+ <fingerprint pattern="^CN=Crestron,OU=Engineering,O=Crestron Electronics\\, Inc\.,L=Rockleigh,ST=NJ,C=US$">
546
+ <description>Crestron Video Conferencing</description>
547
+ <example>CN=Crestron,OU=Engineering,O=Crestron Electronics\, Inc.,L=Rockleigh,ST=NJ,C=US</example>
548
+ <param pos="0" name="hw.vendor" value="Crestron"/>
549
+ <param pos="0" name="hw.device" value="Video Conferencing"/>
550
+ <param pos="0" name="os.vendor" value="Crestron"/>
551
+ <param pos="0" name="os.family" value="Linux"/>
552
+ <param pos="0" name="os.device" value="Video Conferencing"/>
553
+ </fingerprint>
554
+ <fingerprint pattern="^CN=ClickShare-\d+$">
555
+ <description>ClickShare Wireless Presenter</description>
556
+ <example>CN=ClickShare-4234234324</example>
557
+ <param pos="0" name="hw.vendor" value="Barco"/>
558
+ <param pos="0" name="hw.device" value="Wireless Presenter"/>
559
+ <param pos="0" name="hw.product" value="ClickShare"/>
560
+ <param pos="0" name="os.vendor" value="Barco"/>
561
+ <param pos="0" name="os.family" value="ClickShareOS"/>
562
+ <param pos="0" name="os.device" value="Wireless Presenter"/>
563
+ </fingerprint>
564
+ <fingerprint pattern="^CN=Solstice,OU=Solstice,O=Mersive Technologies Inc,L=Denver,ST=CO,C=US$">
565
+ <description>SolsticePod</description>
566
+ <example>CN=Solstice,OU=Solstice,O=Mersive Technologies Inc,L=Denver,ST=CO,C=US</example>
567
+ <param pos="0" name="hw.vendor" value="Mersive"/>
568
+ <param pos="0" name="hw.device" value="Wireless Presenter"/>
569
+ <param pos="0" name="hw.product" value="SolsticePod"/>
570
+ </fingerprint>
571
+ <fingerprint pattern="^CN=Controller,OU=FW,O=ExtronElectronics,ST=CA,C=US$">
572
+ <description>Extron MediaLink Controller</description>
573
+ <example>CN=Controller,OU=FW,O=ExtronElectronics,ST=CA,C=US</example>
574
+ <param pos="0" name="hw.vendor" value="Extron"/>
575
+ <param pos="0" name="hw.device" value="Display Controller"/>
576
+ <param pos="0" name="hw.product" value="MediaLink Controller"/>
577
+ <param pos="0" name="os.vendor" value="Extron"/>
578
+ <param pos="0" name="os.family" value="Linux"/>
579
+ </fingerprint>
580
+ <fingerprint pattern="^CN=IPLP,OU=ControlSystems,O=ExtronElectronics,L=Anaheim,ST=CA,C=US$">
581
+ <description>Extron IPLP </description>
582
+ <example>CN=IPLP,OU=ControlSystems,O=ExtronElectronics,L=Anaheim,ST=CA,C=US</example>
583
+ <param pos="0" name="hw.vendor" value="Extron"/>
584
+ <param pos="0" name="hw.device" value="Display Controller"/>
585
+ <param pos="0" name="hw.product" value="IP Link Control Processor"/>
586
+ <param pos="0" name="os.vendor" value="Extron"/>
587
+ <param pos="0" name="os.family" value="Linux"/>
588
+ </fingerprint>
589
+ <fingerprint pattern="^CN=TLP,OU=ControlSystems,O=ExtronElectronics,L=Anaheim,ST=CA,C=US$">
590
+ <description>Extron TLP </description>
591
+ <example>CN=TLP,OU=ControlSystems,O=ExtronElectronics,L=Anaheim,ST=CA,C=US</example>
592
+ <param pos="0" name="hw.vendor" value="Extron"/>
593
+ <param pos="0" name="hw.device" value="Display Controller"/>
594
+ <param pos="0" name="hw.product" value="TouchLink Control Panel"/>
595
+ <param pos="0" name="os.vendor" value="Extron"/>
596
+ <param pos="0" name="os.family" value="Linux"/>
597
+ </fingerprint>
598
+ <fingerprint pattern="^CN=ShareLink-Pro-.*,OU=AVSystems,O=ExtronElectronics">
599
+ <description>Extron ShareLink Pro </description>
600
+ <example>CN=ShareLink-Pro-18-99-99.local.com,OU=AVSystems,O=ExtronElectronics,L=Anaheim,ST=CA,C=US</example>
601
+ <param pos="0" name="hw.vendor" value="Extron"/>
602
+ <param pos="0" name="hw.device" value="Display Controller"/>
603
+ <param pos="0" name="hw.product" value="ShareLink Pro"/>
604
+ <param pos="0" name="os.vendor" value="Extron"/>
605
+ <param pos="0" name="os.family" value="Linux"/>
606
+ </fingerprint>
445
607
  <fingerprint pattern="^CN=VMM APIC,OU=VMM\d+,O=Cisco,L=San Jose,ST=CA,C=US$">
446
608
  <description>Cisco APIC</description>
447
609
  <example>CN=VMM APIC,OU=VMM15,O=Cisco,L=San Jose,ST=CA,C=US</example>
@@ -522,10 +684,10 @@
522
684
  <param pos="0" name="hw.vendor" value="Fortinet"/>
523
685
  <param pos="0" name="hw.device" value="Firewall"/>
524
686
  <param pos="0" name="os.vendor" value="Fortinet"/>
525
- <param pos="0" name="os.cpe23" value="cpe:/o:fortinet:fortios:-"/>
526
687
  <param pos="0" name="os.family" value="Linux"/>
527
688
  <param pos="0" name="os.device" value="Firewall"/>
528
689
  <param pos="0" name="os.product" value="FortiOS"/>
690
+ <param pos="0" name="os.cpe23" value="cpe:/o:fortinet:fortios:-"/>
529
691
  <param pos="1" name="fortinet.serial_number"/>
530
692
  </fingerprint>
531
693
  <fingerprint pattern="^CN=([A-Za-z0-9]+),O=Fortinet Ltd\.$">
@@ -534,10 +696,10 @@
534
696
  <param pos="0" name="hw.vendor" value="Fortinet"/>
535
697
  <param pos="0" name="hw.device" value="Firewall"/>
536
698
  <param pos="0" name="os.vendor" value="Fortinet"/>
537
- <param pos="0" name="os.cpe23" value="cpe:/o:fortinet:fortios:-"/>
538
699
  <param pos="0" name="os.family" value="Linux"/>
539
700
  <param pos="0" name="os.device" value="Firewall"/>
540
701
  <param pos="0" name="os.product" value="FortiOS"/>
702
+ <param pos="0" name="os.cpe23" value="cpe:/o:fortinet:fortios:-"/>
541
703
  <param pos="1" name="fortinet.serial_number"/>
542
704
  </fingerprint>
543
705
  <fingerprint pattern="^CN=FortiMail,OU=FortiMail,O=Fortinet,L=Sunnyvale,ST=California,C=US$">
@@ -547,10 +709,10 @@
547
709
  <param pos="0" name="hw.device" value="Appliance"/>
548
710
  <param pos="0" name="hw.product" value="FortiMail"/>
549
711
  <param pos="0" name="os.vendor" value="Fortinet"/>
550
- <param pos="0" name="os.cpe23" value="cpe:/o:fortinet:fortios:-"/>
551
712
  <param pos="0" name="os.family" value="Linux"/>
552
713
  <param pos="0" name="os.product" value="FortiOS"/>
553
714
  <param pos="0" name="os.device" value="Appliance"/>
715
+ <param pos="0" name="os.cpe23" value="cpe:/o:fortinet:fortios:-"/>
554
716
  </fingerprint>
555
717
  <fingerprint pattern="^CN=.*,OU=FortiManager,O=Fortinet,L=Sunnyvale,ST=California,C=US$">
556
718
  <description>Fortinet FortiManager Appliance</description>
@@ -559,10 +721,10 @@
559
721
  <param pos="0" name="hw.device" value="Appliance"/>
560
722
  <param pos="0" name="hw.product" value="FortiManager"/>
561
723
  <param pos="0" name="os.vendor" value="Fortinet"/>
562
- <param pos="0" name="os.cpe23" value="cpe:/o:fortinet:fortios:-"/>
563
724
  <param pos="0" name="os.family" value="Linux"/>
564
725
  <param pos="0" name="os.product" value="FortiOS"/>
565
726
  <param pos="0" name="os.device" value="Appliance"/>
727
+ <param pos="0" name="os.cpe23" value="cpe:/o:fortinet:fortios:-"/>
566
728
  </fingerprint>
567
729
  <fingerprint pattern="^CN=CyberoamApplianceCertificate">
568
730
  <description>Cyberoam SSL VPN</description>
@@ -602,6 +764,25 @@
602
764
  <param pos="0" name="os.family" value="Linux"/>
603
765
  <param pos="0" name="os.device" value="Wireless Controller"/>
604
766
  </fingerprint>
767
+ <fingerprint pattern="^CN=unifivideo-app$">
768
+ <description>UniFi Video App</description>
769
+ <example>CN=unifivideo-app</example>
770
+ <param pos="0" name="os.vendor" value="Ubiquiti"/>
771
+ <param pos="0" name="os.family" value="Linux"/>
772
+ <param pos="0" name="hw.vendor" value="Ubiquiti"/>
773
+ <param pos="0" name="hw.family" value="UniFi"/>
774
+ <param pos="0" name="hw.device" value="Web cam"/>
775
+ </fingerprint>
776
+ <fingerprint pattern="^CN=camera\.ubnt\.dev,">
777
+ <description>UniFi Video Camera</description>
778
+ <example>CN=camera.ubnt.dev,OU=devint,O=Ubiquiti Networks Inc.,L=Taipei,C=TW</example>
779
+ <param pos="0" name="hw.vendor" value="Ubiquiti"/>
780
+ <param pos="0" name="hw.device" value="Web cam"/>
781
+ <param pos="0" name="hw.product" value="Camera"/>
782
+ <param pos="0" name="os.vendor" value="Ubiquiti"/>
783
+ <param pos="0" name="os.family" value="Linux"/>
784
+ <param pos="0" name="os.device" value="Web cam"/>
785
+ </fingerprint>
605
786
  <fingerprint pattern="^CN=UBNT,OU=Technical Support,O=Ubiquiti Networks Inc\.,L=San Jose,ST=CA,C=US$">
606
787
  <description>Ubiquiti Controller</description>
607
788
  <example>CN=UBNT,OU=Technical Support,O=Ubiquiti Networks Inc.,L=San Jose,ST=CA,C=US</example>
@@ -641,16 +822,6 @@
641
822
  <param pos="0" name="os.family" value="Linux"/>
642
823
  <param pos="0" name="os.device" value="DVR"/>
643
824
  </fingerprint>
644
- <fingerprint pattern="^CN=camera.ubnt.dev,OU=devint,O=Ubiquiti Networks Inc.,L=Taipei,C=TW$">
645
- <description>Ubiquiti Video Camera</description>
646
- <example>CN=camera.ubnt.dev,OU=devint,O=Ubiquiti Networks Inc.,L=Taipei,C=TW</example>
647
- <param pos="0" name="hw.vendor" value="Ubiquiti"/>
648
- <param pos="0" name="hw.device" value="Web Cam"/>
649
- <param pos="0" name="hw.product" value="Camera"/>
650
- <param pos="0" name="os.vendor" value="Ubiquiti"/>
651
- <param pos="0" name="os.family" value="Linux"/>
652
- <param pos="0" name="os.device" value="Web Cam"/>
653
- </fingerprint>
654
825
  <fingerprint pattern="^CN=GreenWave Systems,OU=PKI,O=GreenWave Systems,L=Irvine,ST=California,C=US$">
655
826
  <description>Verizon / Greenwave FIOS Router</description>
656
827
  <example>CN=GreenWave Systems,OU=PKI,O=GreenWave Systems,L=Irvine,ST=California,C=US</example>
@@ -659,12 +830,19 @@
659
830
  <param pos="0" name="hw.product" value="Verizon FiOS Router"/>
660
831
  </fingerprint>
661
832
  <fingerprint pattern="^CN=PoliWall,OU=Bandura Labs,O=Bandura\\, LLC\.,L=Lake Saint Louis,ST=Missouri,C=US$">
662
- <description>PoliWall Firewall</description>
833
+ <description>PoliWall Firewall Original</description>
663
834
  <example>CN=PoliWall,OU=Bandura Labs,O=Bandura\, LLC.,L=Lake Saint Louis,ST=Missouri,C=US</example>
664
835
  <param pos="0" name="hw.vendor" value="Bandura Labs"/>
665
836
  <param pos="0" name="hw.device" value="Firewall"/>
666
837
  <param pos="0" name="hw.product" value="PoliWall"/>
667
838
  </fingerprint>
839
+ <fingerprint pattern="^CN=poliwall,OU=IT,O=Bandura,L=St\. Louis,ST=Missouri,C=US$">
840
+ <description>PoliWall Firewall Newer Cert</description>
841
+ <example>CN=poliwall,OU=IT,O=Bandura,L=St. Louis,ST=Missouri,C=US</example>
842
+ <param pos="0" name="hw.vendor" value="Bandura Labs"/>
843
+ <param pos="0" name="hw.device" value="Firewall"/>
844
+ <param pos="0" name="hw.product" value="PoliWall"/>
845
+ </fingerprint>
668
846
  <fingerprint pattern="^CN=pfSense-[a-zA-Z0-9]+,O=pfSense webConfigurator Self-Signed Certificate">
669
847
  <description>pfSense Firewall</description>
670
848
  <example>CN=pfSense-58fb5b0b06777,O=pfSense webConfigurator Self-Signed Certificate,L=Locality,ST=State,C=US</example>
@@ -675,6 +853,34 @@
675
853
  <param pos="0" name="os.vendor" value="pfSense"/>
676
854
  <param pos="0" name="os.product" value="FreeBSD"/>
677
855
  </fingerprint>
856
+ <fingerprint pattern="^CN=Common Name \(eg\\, YOUR name\),OU=Organizational Unit Name \(eg\\, section\),O=CompanyName,L=Somecity,ST=Somewhere,C=US$">
857
+ <description>pfSense Firewall Default Certificate</description>
858
+ <example>CN=Common Name (eg\, YOUR name),OU=Organizational Unit Name (eg\, section),O=CompanyName,L=Somecity,ST=Somewhere,C=US</example>
859
+ <param pos="0" name="hw.vendor" value="pfSense"/>
860
+ <param pos="0" name="hw.device" value="Firewall"/>
861
+ <param pos="0" name="hw.product" value="Firewall"/>
862
+ <param pos="0" name="os.vendor" value="pfSense"/>
863
+ <param pos="0" name="os.product" value="FreeBSD"/>
864
+ </fingerprint>
865
+ <fingerprint pattern="^O=OPNsense,L=Middelharnis,ST=Zuid-Holland,C=NL$">
866
+ <description>OPNsense Firewall</description>
867
+ <example>O=OPNsense,L=Middelharnis,ST=Zuid-Holland,C=NL</example>
868
+ <param pos="0" name="hw.vendor" value="OPNsense"/>
869
+ <param pos="0" name="hw.device" value="Firewall"/>
870
+ <param pos="0" name="hw.product" value="Firewall"/>
871
+ <param pos="0" name="os.vendor" value="OPNsense"/>
872
+ <param pos="0" name="os.product" value="FreeBSD"/>
873
+ </fingerprint>
874
+ <fingerprint pattern="^CN=NetVanta,O=ADTRAN\\, Inc\.,L=Huntsville,ST=AL,C=US$" certainty="0.9">
875
+ <description>ADTRAN Netvanta Router</description>
876
+ <example>CN=NetVanta,O=ADTRAN\, Inc.,L=Huntsville,ST=AL,C=US</example>
877
+ <param pos="0" name="os.device" value="Router"/>
878
+ <param pos="0" name="os.vendor" value="ADTRAN"/>
879
+ <param pos="0" name="os.family" value="NetVanta"/>
880
+ <param pos="0" name="hw.device" value="Router"/>
881
+ <param pos="0" name="hw.vendor" value="ADTRAN"/>
882
+ <param pos="0" name="hw.family" value="NetVanta"/>
883
+ </fingerprint>
678
884
  <fingerprint pattern="^CN=SophosApplianceCertificate">
679
885
  <description>Sophos Appliance</description>
680
886
  <example>CN=SophosApplianceCertificate_C330AC22W713PAF,OU=OU,O=Green House Data,L=Cheyenne,ST=WY,C=US</example>
@@ -701,6 +907,13 @@
701
907
  <param pos="1" name="host.mac"/>
702
908
  <param pos="2" name="hw.product"/>
703
909
  </fingerprint>
910
+ <fingerprint pattern="^CN=Mercury Security EP-series,O=Mercury Security Corp\.,L=Long Beach,ST=CA,C=US$">
911
+ <description>Mercurity Security (now HID Global) No MAC</description>
912
+ <example>CN=Mercury Security EP-series,O=Mercury Security Corp.,L=Long Beach,ST=CA,C=US</example>
913
+ <param pos="0" name="hw.vendor" value="Mercury Security"/>
914
+ <param pos="0" name="hw.device" value="Access Controller"/>
915
+ <param pos="0" name="hw.product" value="EP-series"/>
916
+ </fingerprint>
704
917
  <fingerprint pattern="^CN=securelogin.arubanetworks.com,">
705
918
  <description>Aruba Wireless Controller</description>
706
919
  <example>CN=securelogin.arubanetworks.com,O=Aruba Networks,C=US</example>
@@ -715,8 +928,8 @@
715
928
  <param pos="0" name="hw.vendor" value="WatchGuard"/>
716
929
  <param pos="0" name="hw.device" value="Firewall"/>
717
930
  <param pos="0" name="os.vendor" value="WatchGuard"/>
718
- <param pos="0" name="os.cpe23" value="cpe:/o:watchguard:fireware:-"/>
719
931
  <param pos="0" name="os.product" value="Fireware"/>
932
+ <param pos="0" name="os.cpe23" value="cpe:/o:watchguard:fireware:-"/>
720
933
  </fingerprint>
721
934
  <fingerprint pattern="^CN=[0-9\.]+,OU=SSL-VPN,O=SonicWALL\\, Inc\.,L=Sunnyvale,ST=CA,C=US$">
722
935
  <description>SonicWALL Firewall</description>
@@ -770,6 +983,26 @@
770
983
  <param pos="0" name="os.device" value="Printer"/>
771
984
  <param pos="0" name="os.vendor" value="Canon"/>
772
985
  </fingerprint>
986
+ <fingerprint pattern="^CN=ScanFront$">
987
+ <description>Canon ScanFront Simple</description>
988
+ <example>CN=ScanFront</example>
989
+ <param pos="0" name="hw.device" value="Scanner"/>
990
+ <param pos="0" name="hw.vendor" value="Canon"/>
991
+ <param pos="0" name="hw.product" value="ScanFront"/>
992
+ <param pos="0" name="os.device" value="Scanner"/>
993
+ <param pos="0" name="os.vendor" value="Canon"/>
994
+ <param pos="0" name="os.product" value="ScanFront"/>
995
+ </fingerprint>
996
+ <fingerprint pattern="^CN=ScanFront,OU=IMS,O=CANON ELECTRONICS INC\.,L=Minato-ku,ST=Tokyo,C=JP$">
997
+ <description>Canon ScanFront Full</description>
998
+ <example>CN=ScanFront,OU=IMS,O=CANON ELECTRONICS INC.,L=Minato-ku,ST=Tokyo,C=JP</example>
999
+ <param pos="0" name="hw.device" value="Scanner"/>
1000
+ <param pos="0" name="hw.vendor" value="Canon"/>
1001
+ <param pos="0" name="hw.product" value="ScanFront"/>
1002
+ <param pos="0" name="os.device" value="Scanner"/>
1003
+ <param pos="0" name="os.vendor" value="Canon"/>
1004
+ <param pos="0" name="os.product" value="ScanFront"/>
1005
+ </fingerprint>
773
1006
  <fingerprint pattern="^CN=tnsappliance.*,O=Tenable Network Security\\, Inc\.,L=Columbia,ST=Maryland,C=US$">
774
1007
  <description>Tenable Appliance</description>
775
1008
  <example>CN=tnsappliance-b088a321,OU=--,O=Tenable Network Security\, Inc.,L=Columbia,ST=Maryland,C=US</example>
@@ -879,12 +1112,23 @@
879
1112
  <description>Axis Communications Web Cam</description>
880
1113
  <example host.mac="accc8ea31abf">CN=axis-accc8ea31abf,O=Axis Communications AB</example>
881
1114
  <param pos="0" name="hw.vendor" value="AXIS"/>
882
- <param pos="0" name="hw.device" value="Web Cam"/>
1115
+ <param pos="0" name="hw.device" value="Web cam"/>
883
1116
  <param pos="0" name="os.vendor" value="AXIS"/>
884
- <param pos="0" name="os.device" value="Web Cam"/>
1117
+ <param pos="0" name="os.device" value="Web cam"/>
885
1118
  <param pos="0" name="os.family" value="Linux"/>
886
1119
  <param pos="1" name="host.mac"/>
887
1120
  </fingerprint>
1121
+ <fingerprint pattern="^CN=([^,]+),OU=Nortek,O=ELAN,L=StuddardMD,ST=[^,]+,C=US$">
1122
+ <description>ELAN Web Cam</description>
1123
+ <example host.name="ServerRoom">CN=ServerRoom,OU=Nortek,O=ELAN,L=StuddardMD,ST=10000,C=US</example>
1124
+ <param pos="0" name="hw.vendor" value="ELAN"/>
1125
+ <param pos="0" name="hw.device" value="Web cam"/>
1126
+ <param pos="0" name="hw.product" value="HDIPCam"/>
1127
+ <param pos="0" name="os.vendor" value="ELAN"/>
1128
+ <param pos="0" name="os.device" value="Web cam"/>
1129
+ <param pos="0" name="os.family" value="Linux"/>
1130
+ <param pos="1" name="host.name"/>
1131
+ </fingerprint>
888
1132
  <fingerprint pattern="^CN=Dell_OpenManage.*,OU=PG,O=Dell Inc\.,ST=Texas,C=US$">
889
1133
  <description>Dell OpenManage</description>
890
1134
  <example>CN=Dell_OpenManage01,OU=PG,O=Dell Inc.,ST=Texas,C=US</example>
@@ -957,4 +1201,61 @@
957
1201
  <param pos="0" name="hw.device" value="Light Bulb"/>
958
1202
  <param pos="1" name="host.mac_eui64"/>
959
1203
  </fingerprint>
1204
+ <fingerprint pattern="^CN=www\.ibm\.com,OU=IBM i Service,L=Rochester,ST=Minnesota,C=US$">
1205
+ <description>IBM iSeries Service Console</description>
1206
+ <example>CN=www.ibm.com,OU=IBM i Service,L=Rochester,ST=Minnesota,C=US</example>
1207
+ <param pos="0" name="os.vendor" value="IBM"/>
1208
+ <param pos="0" name="os.family" value="OS/400"/>
1209
+ <param pos="0" name="os.product" value="OS/400"/>
1210
+ <param pos="0" name="os.cpe23" value="cpe:/o:ibm:os_400:-"/>
1211
+ </fingerprint>
1212
+ <fingerprint pattern="^CN=.*\.ip\.kaptivo\.live,">
1213
+ <description>Kaptivo Whiteboard</description>
1214
+ <example>CN=*.ip.kaptivo.live,OU=Domain Control Validated+OU=PositiveSSL Wildcard</example>
1215
+ <param pos="0" name="hw.vendor" value="Kaptivo"/>
1216
+ <param pos="0" name="hw.product" value="Whiteboard"/>
1217
+ <param pos="0" name="hw.device" value="Whiteboard"/>
1218
+ </fingerprint>
1219
+ <fingerprint pattern="^CN=.*,OU=Network Security Management,O=FireEye\\, Inc\.,L=Milpitas,ST=California,C=US$">
1220
+ <description>FireEye Appliance</description>
1221
+ <example>CN=noc-feye-ex2,OU=Network Security Management,O=FireEye\, Inc.,L=Milpitas,ST=California,C=US</example>
1222
+ <param pos="0" name="hw.vendor" value="FireEye"/>
1223
+ <param pos="0" name="hw.product" value="Appliance"/>
1224
+ <param pos="0" name="hw.device" value="Security Appliance"/>
1225
+ </fingerprint>
1226
+ <fingerprint pattern="^CN=.*,OU=IA,O=FireEye,L=Charlottesville,ST=Virginia,C=US$">
1227
+ <description>FireEye Investigation Analysis System Appliance</description>
1228
+ <example>CN=noc-feye-ia2,OU=IA,O=FireEye,L=Charlottesville,ST=Virginia,C=US</example>
1229
+ <param pos="0" name="hw.vendor" value="FireEye"/>
1230
+ <param pos="0" name="hw.product" value="IA Appliance"/>
1231
+ <param pos="0" name="hw.device" value="Security Appliance"/>
1232
+ </fingerprint>
1233
+ <fingerprint pattern="^CN=.*,OU=Gigamon Network Visibility Systems,O=Gigamon Inc\.,L=Santa Clara,ST=California,C=US$">
1234
+ <description>Gigamon GigaVUE Appliance</description>
1235
+ <example>CN=gvue01,OU=Gigamon Network Visibility Systems,O=Gigamon Inc.,L=Santa Clara,ST=California,C=US</example>
1236
+ <param pos="0" name="hw.vendor" value="Gigamon"/>
1237
+ <param pos="0" name="hw.device" value="Monitoring"/>
1238
+ <param pos="0" name="hw.product" value="GigaVUE"/>
1239
+ </fingerprint>
1240
+ <fingerprint pattern="^CN=.*,OU=Telliris,O=DAC Systems,L=Shelton,ST=Connecticut,C=US$">
1241
+ <description>Telliris IVR</description>
1242
+ <example>CN=Telliris-IVR,OU=Telliris,O=DAC Systems,L=Shelton,ST=Connecticut,C=US</example>
1243
+ <param pos="0" name="hw.vendor" value="Telliris"/>
1244
+ <param pos="0" name="hw.device" value="Voice Appliance"/>
1245
+ <param pos="0" name="hw.product" value="IVR"/>
1246
+ </fingerprint>
1247
+ <fingerprint pattern="^CN=SLS,O=Lantronix,L=Irvine,ST=California,C=US$">
1248
+ <description>Lantronix SLS terminal server</description>
1249
+ <example>CN=SLS,O=Lantronix,L=Irvine,ST=California,C=US</example>
1250
+ <param pos="0" name="hw.vendor" value="Lantronix"/>
1251
+ <param pos="0" name="hw.device" value="Device Server"/>
1252
+ <param pos="0" name="hw.product" value="SLS"/>
1253
+ </fingerprint>
1254
+ <fingerprint pattern="^CN=Tintri Default Certificate,OU=Tintri Server Certificate,O=Tintri\\, Inc\.,L=Mountain View,ST=CA,C=US$">
1255
+ <description>Tintri Storage Appliance</description>
1256
+ <example>CN=Tintri Default Certificate,OU=Tintri Server Certificate,O=Tintri\, Inc.,L=Mountain View,ST=CA,C=US</example>
1257
+ <param pos="0" name="hw.vendor" value="Tintro"/>
1258
+ <param pos="0" name="hw.device" value="NAS"/>
1259
+ <param pos="0" name="hw.product" value="Storage Appliance"/>
1260
+ </fingerprint>
960
1261
  </fingerprints>