recog 2.3.8 → 2.3.13

Sign up to get free protection for your applications and to get access to all the features.
Files changed (69) hide show
  1. checksums.yaml +4 -4
  2. data/.gitignore +6 -0
  3. data/CONTRIBUTING.md +136 -37
  4. data/README.md +18 -16
  5. data/bin/recog_cleanup +16 -0
  6. data/bin/recog_standardize +30 -6
  7. data/cpe-remap.yaml +18 -2
  8. data/identifiers/README.md +9 -0
  9. data/identifiers/hw_device.txt +77 -0
  10. data/identifiers/hw_family.txt +96 -0
  11. data/identifiers/hw_product.txt +328 -0
  12. data/identifiers/os_architecture.txt +6 -6
  13. data/identifiers/os_device.txt +45 -3
  14. data/identifiers/os_family.txt +206 -41
  15. data/identifiers/os_product.txt +238 -17
  16. data/identifiers/service_family.txt +144 -57
  17. data/identifiers/service_product.txt +385 -83
  18. data/identifiers/vendor.txt +554 -68
  19. data/lib/recog/version.rb +1 -1
  20. data/requirements.txt +1 -1
  21. data/update_cpes.py +3 -0
  22. data/xml/apache_modules.xml +292 -5
  23. data/xml/apache_os.xml +41 -2
  24. data/xml/architecture.xml +11 -3
  25. data/xml/dns_versionbind.xml +191 -15
  26. data/xml/favicons.xml +1701 -0
  27. data/xml/ftp_banners.xml +250 -18
  28. data/xml/h323_callresp.xml +112 -12
  29. data/xml/hp_pjl_id.xml +47 -5
  30. data/xml/html_title.xml +1278 -25
  31. data/xml/http_cookies.xml +64 -9
  32. data/xml/http_servers.xml +1013 -96
  33. data/xml/http_wwwauth.xml +141 -26
  34. data/xml/imap_banners.xml +62 -13
  35. data/xml/ldap_searchresult.xml +81 -9
  36. data/xml/mdns_device-info_txt.xml +175 -2
  37. data/xml/mdns_workstation_txt.xml +4 -2
  38. data/xml/mysql_banners.xml +134 -7
  39. data/xml/mysql_error.xml +113 -6
  40. data/xml/nntp_banners.xml +10 -2
  41. data/xml/ntp_banners.xml +80 -4
  42. data/xml/operating_system.xml +89 -3
  43. data/xml/pop_banners.xml +87 -33
  44. data/xml/rsh_resp.xml +11 -2
  45. data/xml/rtsp_servers.xml +22 -2
  46. data/xml/sip_banners.xml +35 -4
  47. data/xml/sip_user_agents.xml +29 -2
  48. data/xml/smb_native_lm.xml +10 -2
  49. data/xml/smb_native_os.xml +79 -2
  50. data/xml/smtp_banners.xml +230 -9
  51. data/xml/smtp_debug.xml +6 -4
  52. data/xml/smtp_ehlo.xml +7 -5
  53. data/xml/smtp_expn.xml +13 -4
  54. data/xml/smtp_help.xml +23 -4
  55. data/xml/smtp_mailfrom.xml +5 -2
  56. data/xml/smtp_noop.xml +6 -5
  57. data/xml/smtp_quit.xml +5 -4
  58. data/xml/smtp_rcptto.xml +5 -2
  59. data/xml/smtp_rset.xml +4 -4
  60. data/xml/smtp_turn.xml +4 -4
  61. data/xml/smtp_vrfy.xml +14 -4
  62. data/xml/snmp_sysdescr.xml +733 -25
  63. data/xml/snmp_sysobjid.xml +47 -2
  64. data/xml/ssh_banners.xml +182 -8
  65. data/xml/telnet_banners.xml +493 -22
  66. data/xml/x11_banners.xml +26 -3
  67. data/xml/x509_issuers.xml +30 -6
  68. data/xml/x509_subjects.xml +200 -31
  69. metadata +8 -2
@@ -1,17 +1,18 @@
1
- <?xml version="1.0" encoding="UTF-8"?>
1
+ <?xml version='1.0' encoding='UTF-8'?>
2
2
  <fingerprints protocol="pjl" database_type="service" preference="0.10">
3
3
  <!--
4
4
  For printers running the PJL protocol (usually on 9100/tcp), their type can be requested
5
5
  by the INFO ID command. The printer types (strings surrounded by double quotes) are
6
6
  matched against these patterns to fingerprint the printer.
7
-
8
7
  'preference' notes: The value has been explicitly set to 0.10 due to the very loose
9
8
  regex that is used here.
10
9
  -->
10
+
11
11
  <!--
12
12
  LaserJet and Designjet are registered trademarks of HP. Therefore matching for the keywords
13
13
  is sufficient for asserting all relevant information
14
14
  -->
15
+
15
16
  <fingerprint pattern="(?i)laserjet (.*)(?: series)?">
16
17
  <description>HP JetDirect Printer</description>
17
18
  <example>HP LaserJet 4100 Series</example>
@@ -27,6 +28,7 @@
27
28
  <param pos="0" name="os.family" value="LaserJet"/>
28
29
  <param pos="1" name="os.product"/>
29
30
  </fingerprint>
31
+
30
32
  <fingerprint pattern="(?i)(designjet \S+)">
31
33
  <description>HP Designjet printer</description>
32
34
  <example>hp designjet 110plus</example>
@@ -41,6 +43,7 @@
41
43
  <param pos="0" name="os.device" value="Printer"/>
42
44
  <param pos="1" name="os.product"/>
43
45
  </fingerprint>
46
+
44
47
  <fingerprint pattern="^Xerox ColorQube (\S+)$">
45
48
  <description>Xerox ColorQube Multifunction Printer</description>
46
49
  <example>Xerox ColorQube 8570DN</example>
@@ -51,6 +54,7 @@
51
54
  <param pos="1" name="os.product"/>
52
55
  <param pos="0" name="os.device" value="Multifunction Device"/>
53
56
  </fingerprint>
57
+
54
58
  <fingerprint pattern="^Brother (.+)$">
55
59
  <description>Brother Printer</description>
56
60
  <example>Brother HL-1660e</example>
@@ -58,7 +62,9 @@
58
62
  <param pos="0" name="os.device" value="Printer"/>
59
63
  <param pos="1" name="os.product"/>
60
64
  </fingerprint>
65
+
61
66
  <!-- Assert the product range as a product fingerprint. -->
67
+
62
68
  <fingerprint pattern="^(iR ?\S+)">
63
69
  <description>Canon iR multifunction device</description>
64
70
  <example>iR 3180C EUR</example>
@@ -69,6 +75,7 @@
69
75
  <param pos="0" name="os.device" value="Multifunction Device"/>
70
76
  <param pos="1" name="os.product"/>
71
77
  </fingerprint>
78
+
72
79
  <fingerprint pattern="^(?:Dell (?:Color Laser |Laser Printer )?|(?:Color Laser |Laser Printer ))(\d+(?:n|cn|dn|cdn))(?: Color Laser| Laser Printer)?$">
73
80
  <description>Dell Laser Printer</description>
74
81
  <example>Dell Laser Printer 1710n</example>
@@ -86,6 +93,7 @@
86
93
  <param pos="0" name="os.device" value="Printer"/>
87
94
  <param pos="1" name="os.product"/>
88
95
  </fingerprint>
96
+
89
97
  <fingerprint pattern="^Dell (\d+(?:n|cn|dn|cdn)) MFP$">
90
98
  <description>Dell Laser multifunction device</description>
91
99
  <example>Dell 2135cn MFP</example>
@@ -95,6 +103,7 @@
95
103
  <param pos="0" name="os.device" value="Multifunction Device"/>
96
104
  <param pos="1" name="os.product"/>
97
105
  </fingerprint>
106
+
98
107
  <fingerprint pattern="^HP (\S+ Digital Sender)$">
99
108
  <description>HP Digital Sender scanner</description>
100
109
  <example>HP 9250C Digital Sender</example>
@@ -103,6 +112,7 @@
103
112
  <param pos="0" name="os.family" value="Digital Sender"/>
104
113
  <param pos="1" name="os.product"/>
105
114
  </fingerprint>
115
+
106
116
  <fingerprint pattern="^(?:IBM )?Infoprint(?: Color)? (\S+)$">
107
117
  <description>IBM Infoprint Printer</description>
108
118
  <param pos="0" name="os.vendor" value="IBM"/>
@@ -110,6 +120,7 @@
110
120
  <param pos="0" name="os.device" value="Printer"/>
111
121
  <param pos="1" name="os.product"/>
112
122
  </fingerprint>
123
+
113
124
  <fingerprint pattern="^KM-(.*)$">
114
125
  <description>Konica Minolta printer</description>
115
126
  <example>KM-5050</example>
@@ -117,6 +128,7 @@
117
128
  <param pos="0" name="os.device" value="Printer"/>
118
129
  <param pos="1" name="os.product"/>
119
130
  </fingerprint>
131
+
120
132
  <fingerprint pattern="^(FS-\S+MFP\S*)$">
121
133
  <description>Kyocera Mita Multifunction device</description>
122
134
  <example>FS-C2126MFP</example>
@@ -127,6 +139,7 @@
127
139
  <param pos="0" name="os.family" value="FS"/>
128
140
  <param pos="1" name="os.product"/>
129
141
  </fingerprint>
142
+
130
143
  <fingerprint pattern="^(FS-(?:C)?\d+(?:D|DN))$">
131
144
  <description>Kyocera Mita Printer</description>
132
145
  <example>FS-C8500DN</example>
@@ -137,6 +150,7 @@
137
150
  <param pos="0" name="os.family" value="FS"/>
138
151
  <param pos="1" name="os.product"/>
139
152
  </fingerprint>
153
+
140
154
  <fingerprint pattern="^(TASKalfa \S+)$">
141
155
  <description>Kyocera Mita TASKalfa multifunction device</description>
142
156
  <example>TASKalfa 300ci</example>
@@ -147,6 +161,7 @@
147
161
  <param pos="0" name="os.family" value="TASKalfa"/>
148
162
  <param pos="1" name="os.product"/>
149
163
  </fingerprint>
164
+
150
165
  <fingerprint pattern="^Lexmark (.*)$">
151
166
  <description>Lexmark JetDirect printer</description>
152
167
  <example>Lexmark C910</example>
@@ -156,6 +171,7 @@
156
171
  <param pos="0" name="os.device" value="Printer"/>
157
172
  <param pos="1" name="os.product"/>
158
173
  </fingerprint>
174
+
159
175
  <fingerprint pattern="(?i)^Oce (fx[^\s:]+):.*$">
160
176
  <description>Oce FX series multifunction device</description>
161
177
  <example os.product="fx3000">Oce fx3000:8C5-B29:Ver.D:U0707161719:B0601271355</example>
@@ -164,6 +180,7 @@
164
180
  <param pos="0" name="os.device" value="Multifunction Device"/>
165
181
  <param pos="1" name="os.product"/>
166
182
  </fingerprint>
183
+
167
184
  <fingerprint pattern="(?i)^Oce (VL\S+):.*$">
168
185
  <description>Oce VarioLink multifunction device</description>
169
186
  <example>Oce VL3200:8C5-D92:Ver.B</example>
@@ -172,16 +189,20 @@
172
189
  <param pos="0" name="os.device" value="Multifunction Device"/>
173
190
  <param pos="1" name="os.product"/>
174
191
  </fingerprint>
192
+
175
193
  <!-- IGI is Imagistics International, which was acquired by Oce.
176
194
  I can't find MX-MBX3 or any variant online. -->
195
+
177
196
  <fingerprint pattern="(?i)^OceIGI MX-\S+">
178
197
  <description>Oce-acquired IGI printer</description>
179
198
  <example>OceIGI MX-NBX3 02-Jul-07 14:47</example>
180
199
  <param pos="0" name="os.vendor" value="Oce"/>
181
200
  <param pos="0" name="os.device" value="Printer"/>
182
201
  </fingerprint>
202
+
183
203
  <!-- im3510/4510 is actually a range of model numbers, but asserting a range
184
204
  of models as a product is preferableto asserting nothing. -->
205
+
185
206
  <fingerprint pattern="(?i)^Imagistics (im\S+) (.+)">
186
207
  <description>Oce IM series multifunction device</description>
187
208
  <example>Imagistics im3510/4510 02-Aug-04 10:56</example>
@@ -192,7 +213,9 @@
192
213
  <param pos="1" name="os.product"/>
193
214
  <param pos="2" name="system.time"/>
194
215
  </fingerprint>
216
+
195
217
  <!-- C610 is a series; there are several models with suffixes n, dn, dtn, cdn -->
218
+
196
219
  <fingerprint pattern="^OKI (C\d+)\S*$">
197
220
  <description>Okidata color printer</description>
198
221
  <example>OKI C610</example>
@@ -202,6 +225,7 @@
202
225
  <param pos="0" name="os.device" value="Printer"/>
203
226
  <param pos="1" name="os.product"/>
204
227
  </fingerprint>
228
+
205
229
  <fingerprint pattern="^OKI (MC\d+)\S*$">
206
230
  <description>Okidata multifunction device</description>
207
231
  <example>OKI MC860</example>
@@ -209,6 +233,7 @@
209
233
  <param pos="0" name="os.device" value="Multifunction Device"/>
210
234
  <param pos="1" name="os.product"/>
211
235
  </fingerprint>
236
+
212
237
  <fingerprint pattern="(?i)^RICOH ((?:Aficio|MP|SP) .*)$">
213
238
  <description>Ricoh Aficio Printer</description>
214
239
  <example>RICOH Aficio 2075</example>
@@ -220,8 +245,10 @@
220
245
  <param pos="1" name="os.product"/>
221
246
  <param pos="0" name="os.device" value="Printer"/>
222
247
  </fingerprint>
248
+
223
249
  <!-- NRG was acquired by Ricoh; classify NRG printers as such.
224
250
  Be consistent with snmp_sysdescr.xml. -->
251
+
225
252
  <fingerprint pattern="(?i)^NRG ([MS]P \S+)$">
226
253
  <description>Ricoh NRG printer</description>
227
254
  <example>NRG MP 171</example>
@@ -236,8 +263,10 @@
236
263
  <param pos="0" name="os.device" value="Printer"/>
237
264
  <param pos="1" name="os.product"/>
238
265
  </fingerprint>
266
+
239
267
  <!-- Gestetner == NRG, and was acquired by Ricoh.
240
268
  Assert the range of products as os.product. -->
269
+
241
270
  <fingerprint pattern="(?i)^Gestetner (MP\S+/DSc\S+)$">
242
271
  <description>Ricoh Gestetner multifunction device</description>
243
272
  <example>Gestetner MPC2500/DSc525</example>
@@ -245,6 +274,7 @@
245
274
  <param pos="0" name="os.device" value="Multifunction Device"/>
246
275
  <param pos="1" name="os.product"/>
247
276
  </fingerprint>
277
+
248
278
  <fingerprint pattern="(?i)^HYDRA$">
249
279
  <description>RSI Hydra printer</description>
250
280
  <example>HYDRA</example>
@@ -252,6 +282,7 @@
252
282
  <param pos="0" name="os.device" value="Printer"/>
253
283
  <param pos="0" name="os.product" value="Hydra"/>
254
284
  </fingerprint>
285
+
255
286
  <fingerprint pattern="(?i)^Savin (\S+)$">
256
287
  <description>Savin Printer</description>
257
288
  <example>SAVIN 4075</example>
@@ -259,6 +290,7 @@
259
290
  <param pos="0" name="os.device" value="Printer"/>
260
291
  <param pos="1" name="os.product"/>
261
292
  </fingerprint>
293
+
262
294
  <fingerprint pattern="(?i)^Samsung ((?:SCX|CLX)-\S+) Series$">
263
295
  <description>Samsung multifunction device</description>
264
296
  <example>Samsung SCX-5835_5935 Series</example>
@@ -267,6 +299,7 @@
267
299
  <param pos="0" name="os.device" value="Multifunction Device"/>
268
300
  <param pos="1" name="os.product"/>
269
301
  </fingerprint>
302
+
270
303
  <fingerprint pattern="(?i)^Samsung ((?:ML|CLP)-\S+) Series$">
271
304
  <description>Samsung printer</description>
272
305
  <example>Samsung CLP-680 Series</example>
@@ -275,6 +308,7 @@
275
308
  <param pos="0" name="os.device" value="Printer"/>
276
309
  <param pos="1" name="os.product"/>
277
310
  </fingerprint>
311
+
278
312
  <fingerprint pattern="(?i)^SHARP (\S+-\S+) .*$">
279
313
  <description>Sharp Printer</description>
280
314
  <example>Sharp MX-NBX3 18-Mar-08 10:22</example>
@@ -283,6 +317,7 @@
283
317
  <param pos="0" name="os.device" value="Printer"/>
284
318
  <param pos="1" name="os.product"/>
285
319
  </fingerprint>
320
+
286
321
  <fingerprint pattern="(?i)^Source Technologies (\S+)$">
287
322
  <description>Source Technologies Printer</description>
288
323
  <example>Source Technologies ST-9620</example>
@@ -290,7 +325,9 @@
290
325
  <param pos="0" name="os.device" value="Printer"/>
291
326
  <param pos="1" name="os.product"/>
292
327
  </fingerprint>
328
+
293
329
  <!-- Consistent with snmp_sysdescr.xml -->
330
+
294
331
  <fingerprint pattern="^TOSHIBA (e-STUDIO\S+)(?:\s+.*)?" certainty="0.9">
295
332
  <description>Toshiba e-STUDIO multifunction device</description>
296
333
  <example>TOSHIBA e-STUDIO350 V468Z 20061013</example>
@@ -302,16 +339,16 @@
302
339
  <param pos="0" name="os.device" value="Multifunction Device"/>
303
340
  <param pos="1" name="os.product"/>
304
341
  </fingerprint>
342
+
305
343
  <!-- TODO:
306
344
  Xerox AccXES devices are documented to return:
307
-
308
345
  "<printer name> <release #>"
309
346
  <FF>
310
-
311
347
  In the above, <printer name> is the official product name of the
312
348
  AccXES printer, and <release #> corresponds to a software release
313
349
  number.
314
350
  -->
351
+
315
352
  <fingerprint pattern="^(?:ID=)?Xerox (Phaser \S+)$" certainty="0.9">
316
353
  <description>Xerox Phaser Printer</description>
317
354
  <example>Xerox Phaser 6180MFP-D</example>
@@ -321,6 +358,7 @@
321
358
  <param pos="0" name="os.device" value="Printer"/>
322
359
  <param pos="1" name="os.product"/>
323
360
  </fingerprint>
361
+
324
362
  <fingerprint pattern="^Xerox (WorkCentre .*)$" certainty="0.9">
325
363
  <description>Xerox Workcentre Printer</description>
326
364
  <example>Xerox WorkCentre 7425</example>
@@ -331,6 +369,7 @@
331
369
  <param pos="1" name="os.product"/>
332
370
  <param pos="0" name="os.device" value="Printer"/>
333
371
  </fingerprint>
372
+
334
373
  <fingerprint pattern="^(XC\S+)$" certainty="0.9">
335
374
  <description>Xerox XC Printer</description>
336
375
  <example>XC560</example>
@@ -339,6 +378,7 @@
339
378
  <param pos="0" name="os.device" value="Printer"/>
340
379
  <param pos="1" name="os.product"/>
341
380
  </fingerprint>
381
+
342
382
  <fingerprint pattern="^(DC\S+)$" certainty="0.9">
343
383
  <description>Xerox DocuColor Printer</description>
344
384
  <example>DC250</example>
@@ -347,6 +387,7 @@
347
387
  <param pos="0" name="os.device" value="Printer"/>
348
388
  <param pos="1" name="os.product"/>
349
389
  </fingerprint>
390
+
350
391
  <fingerprint pattern="^(EX\d+-\d+)$" certainty="0.9">
351
392
  <description>Xerox EX Print Server, powered by EFI Fiery</description>
352
393
  <example>EX4112-4127</example>
@@ -355,4 +396,5 @@
355
396
  <param pos="0" name="os.device" value="Print server"/>
356
397
  <param pos="1" name="os.product"/>
357
398
  </fingerprint>
358
- </fingerprints>
399
+
400
+ </fingerprints>
@@ -1,6 +1,27 @@
1
- <?xml version="1.0" encoding="UTF-8"?>
1
+ <?xml version='1.0' encoding='UTF-8'?>
2
2
  <fingerprints matches="html_title" database_type="service" preference="0.90">
3
3
  <!-- HTML Title elements found in HTTP response bodies are matched against these patterns to fingerprint HTTP servers. -->
4
+
5
+ <fingerprint pattern="^301 Moved Permanently$">
6
+ <description>301 Moved Permanently - generic -- assert nothing.</description>
7
+ <example>301 Moved Permanently</example>
8
+ </fingerprint>
9
+
10
+ <fingerprint pattern="^400 Bad Request$">
11
+ <description>400 Bad Request - generic -- assert nothing.</description>
12
+ <example>400 Bad Request</example>
13
+ </fingerprint>
14
+
15
+ <fingerprint pattern="^401 Unauthorized$">
16
+ <description>401 Unauthorized - generic -- assert nothing.</description>
17
+ <example>401 Unauthorized</example>
18
+ </fingerprint>
19
+
20
+ <fingerprint pattern="^404 Not Found$">
21
+ <description>404 Not Found - generic -- assert nothing.</description>
22
+ <example>404 Not Found</example>
23
+ </fingerprint>
24
+
4
25
  <fingerprint pattern="^Index of /">
5
26
  <description>Apache HTTPD indexes</description>
6
27
  <example>Index of /</example>
@@ -9,6 +30,7 @@
9
30
  <param pos="0" name="service.family" value="Apache"/>
10
31
  <param pos="0" name="service.cpe23" value="cpe:/a:apache:http_server:-"/>
11
32
  </fingerprint>
33
+
12
34
  <fingerprint pattern="^Test Page for the Nginx HTTP Server on (?:the )?Amazon Linux(?: AMI)?$">
13
35
  <description>Apache HTTPD default installation on Amazon Linux</description>
14
36
  <example>Test Page for the Nginx HTTP Server on the Amazon Linux AMI</example>
@@ -21,6 +43,7 @@
21
43
  <param pos="0" name="os.family" value="Linux"/>
22
44
  <param pos="0" name="os.product" value="Linux AMI"/>
23
45
  </fingerprint>
46
+
24
47
  <fingerprint pattern="^Apache HTTP Server Test Page powered by CentOS$">
25
48
  <description>Apache HTTPD default installation on CentOS</description>
26
49
  <example>Apache HTTP Server Test Page powered by CentOS</example>
@@ -33,6 +56,7 @@
33
56
  <param pos="0" name="os.product" value="Linux"/>
34
57
  <param pos="0" name="os.cpe23" value="cpe:/o:centos:centos:-"/>
35
58
  </fingerprint>
59
+
36
60
  <fingerprint pattern="^Apache2 Debian Default Page: It works$">
37
61
  <description>Apache HTTPD default installation on Debian</description>
38
62
  <example>Apache2 Debian Default Page: It works</example>
@@ -44,6 +68,7 @@
44
68
  <param pos="0" name="os.product" value="Linux"/>
45
69
  <param pos="0" name="os.cpe23" value="cpe:/o:debian:debian_linux:-"/>
46
70
  </fingerprint>
71
+
47
72
  <fingerprint pattern="^Apache2 Ubuntu Default Page: It works$">
48
73
  <description>Apache HTTPD default installation on Ubuntu</description>
49
74
  <example>Apache2 Ubuntu Default Page: It works</example>
@@ -55,6 +80,7 @@
55
80
  <param pos="0" name="os.product" value="Linux"/>
56
81
  <param pos="0" name="os.cpe23" value="cpe:/o:canonical:ubuntu_linux:-"/>
57
82
  </fingerprint>
83
+
58
84
  <fingerprint pattern="^Sample Home Page for APACHEDFT Server$">
59
85
  <description>IBM iSeries Apache Default Page</description>
60
86
  <example>Sample Home Page for APACHEDFT Server</example>
@@ -67,6 +93,7 @@
67
93
  <param pos="0" name="service.family" value="Apache"/>
68
94
  <param pos="0" name="service.cpe23" value="cpe:/a:apache:http_server:-"/>
69
95
  </fingerprint>
96
+
70
97
  <fingerprint pattern="^Apache Tomcat$">
71
98
  <description>Apache Tomcat with no version</description>
72
99
  <example>Apache Tomcat</example>
@@ -75,6 +102,7 @@
75
102
  <param pos="0" name="service.family" value="Tomcat"/>
76
103
  <param pos="0" name="service.cpe23" value="cpe:/a:apache:tomcat:-"/>
77
104
  </fingerprint>
105
+
78
106
  <fingerprint pattern="^Apache Tomcat/(\S+)$">
79
107
  <description>Apache tomcat with minimal version information</description>
80
108
  <example service.version="8.0.32">Apache Tomcat/8.0.32</example>
@@ -84,13 +112,16 @@
84
112
  <param pos="1" name="service.version"/>
85
113
  <param pos="0" name="service.cpe23" value="cpe:/a:apache:tomcat:{service.version}"/>
86
114
  </fingerprint>
115
+
87
116
  <fingerprint pattern="^AiCloud">
88
117
  <description>ASUS AiCloud</description>
89
118
  <example>AiCloud</example>
90
119
  <param pos="0" name="hw.vendor" value="Asus"/>
91
120
  <param pos="0" name="hw.device" value="WAP"/>
92
121
  </fingerprint>
122
+
93
123
  <!-- HiSilicon is OEMd by a number of DVR manufacturers -->
124
+
94
125
  <fingerprint pattern="^DVR Components Download$">
95
126
  <description>Web server found on DVR and webcam servers sourced from HiSilicon</description>
96
127
  <example>DVR Components Download</example>
@@ -100,6 +131,7 @@
100
131
  <param pos="0" name="os.device" value="DVR"/>
101
132
  <param pos="0" name="hw.device" value="DVR"/>
102
133
  </fingerprint>
134
+
103
135
  <fingerprint pattern="^FRITZ!Box$">
104
136
  <description>AVM FRITZ!Box</description>
105
137
  <example>FRITZ!Box</example>
@@ -107,6 +139,7 @@
107
139
  <param pos="0" name="hw.device" value="WAP"/>
108
140
  <param pos="0" name="hw.family" value="FRITZ!Box"/>
109
141
  </fingerprint>
142
+
110
143
  <fingerprint pattern="^FRITZ!Powerline$">
111
144
  <description>AVM FRITZ!Powerline</description>
112
145
  <example>FRITZ!Powerline</example>
@@ -114,13 +147,16 @@
114
147
  <param pos="0" name="hw.device" value="Powerline"/>
115
148
  <param pos="0" name="hw.family" value="FRITZ!Powerline"/>
116
149
  </fingerprint>
117
- <fingerprint pattern="^FRITZ!WLAN Repeater$">
150
+
151
+ <fingerprint pattern="^FRITZ!(?:WLAN )?Repeater$">
118
152
  <description>FRITZ!WLAN Repeater</description>
119
153
  <example>FRITZ!WLAN Repeater</example>
154
+ <example>FRITZ!Repeater</example>
120
155
  <param pos="0" name="hw.vendor" value="AVM"/>
121
156
  <param pos="0" name="hw.device" value="WLAN Repeater"/>
122
157
  <param pos="0" name="hw.family" value="FRITZ!WLAN Repeater"/>
123
158
  </fingerprint>
159
+
124
160
  <fingerprint pattern="^cPanel Login$">
125
161
  <description>cPanel</description>
126
162
  <example>cPanel Login</example>
@@ -128,6 +164,7 @@
128
164
  <param pos="0" name="service.product" value="cPanel"/>
129
165
  <param pos="0" name="service.cpe23" value="cpe:/a:cpanel:cpanel:-"/>
130
166
  </fingerprint>
167
+
131
168
  <fingerprint pattern="^WHM Login$">
132
169
  <description>cPanel Web Host Manager</description>
133
170
  <example>WHM Login</example>
@@ -135,6 +172,7 @@
135
172
  <param pos="0" name="service.product" value="WHM"/>
136
173
  <param pos="0" name="service.cpe23" value="cpe:/a:cpanel:whm:-"/>
137
174
  </fingerprint>
175
+
138
176
  <fingerprint pattern="^Windows CE$">
139
177
  <description>Windows CE</description>
140
178
  <example>Windows CE</example>
@@ -143,6 +181,7 @@
143
181
  <param pos="0" name="os.product" value="Windows CE"/>
144
182
  <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_ce:-"/>
145
183
  </fingerprint>
184
+
146
185
  <fingerprint pattern="^IIS7$">
147
186
  <description>Default IIS 7</description>
148
187
  <example>IIS7</example>
@@ -156,6 +195,7 @@
156
195
  <param pos="0" name="os.product" value="Windows"/>
157
196
  <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows:-"/>
158
197
  </fingerprint>
198
+
159
199
  <fingerprint pattern="^Microsoft Internet Information Services 8">
160
200
  <description>Default IIS 8</description>
161
201
  <example>Microsoft Internet Information Services 8</example>
@@ -169,6 +209,7 @@
169
209
  <param pos="0" name="os.product" value="Windows"/>
170
210
  <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows:-"/>
171
211
  </fingerprint>
212
+
172
213
  <fingerprint pattern="^IIS (\d\.\d) Detailed Error">
173
214
  <description>IIS Detailed Error</description>
174
215
  <example service.version="7.0">IIS 7.0 Detailed Error - 401.2 - Unauthorized</example>
@@ -184,6 +225,7 @@
184
225
  <param pos="0" name="os.product" value="Windows"/>
185
226
  <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows:-"/>
186
227
  </fingerprint>
228
+
187
229
  <fingerprint pattern="^IIS Windows(?: Server)?$">
188
230
  <description>Default IIS</description>
189
231
  <example>IIS Windows</example>
@@ -197,6 +239,7 @@
197
239
  <param pos="0" name="os.product" value="Windows"/>
198
240
  <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows:-"/>
199
241
  </fingerprint>
242
+
200
243
  <fingerprint pattern="^(?:NETIASPOT Management Console|Konsola zarzdzania NETIASPOT)$">
201
244
  <description>Netia Spot wireless router</description>
202
245
  <example>Konsola zarzdzania NETIASPOT</example>
@@ -205,6 +248,7 @@
205
248
  <param pos="0" name="hw.product" value="Spot"/>
206
249
  <param pos="0" name="hw.device" value="WAP"/>
207
250
  </fingerprint>
251
+
208
252
  <fingerprint pattern="^hue personal wireless lighting$">
209
253
  <description>Philips Hue Personal Wireless Lighting</description>
210
254
  <example>hue personal wireless lighting</example>
@@ -212,12 +256,15 @@
212
256
  <param pos="0" name="hw.product" value="Hue"/>
213
257
  <param pos="0" name="hw.device" value="Light Bulb"/>
214
258
  </fingerprint>
259
+
215
260
  <fingerprint pattern="LANDesk\(R\) Management Agent$">
216
261
  <description>LANDesk Management Agent</description>
262
+ <example>LANDesk(R) Management Agent</example>
217
263
  <param pos="0" name="service.vendor" value="LANDesk"/>
218
264
  <param pos="0" name="service.product" value="Management Agent"/>
219
265
  <param pos="0" name="service.family" value="Management Agent"/>
220
266
  </fingerprint>
267
+
221
268
  <fingerprint pattern="^(?:Parallels )?Plesk (?:(?:Onyx|Panel) )?([\d\.]+)$">
222
269
  <description>Plesk web hosting platform with a version</description>
223
270
  <example service.version="12.0.18">Plesk 12.0.18</example>
@@ -229,6 +276,7 @@
229
276
  <param pos="1" name="service.version"/>
230
277
  <param pos="0" name="service.cpe23" value="cpe:/a:parallels:parallels_plesk_panel:{service.version}"/>
231
278
  </fingerprint>
279
+
232
280
  <fingerprint pattern="^(?:Parallels )?Plesk (?:(?:Onyx|Panel) )?([\d\.]+) for Microsoft Windows$">
233
281
  <description>Plesk web hosting platform with a version on Windows</description>
234
282
  <example service.version="12.5.30">Plesk 12.5.30 for Microsoft Windows</example>
@@ -242,6 +290,7 @@
242
290
  <param pos="0" name="os.product" value="Windows"/>
243
291
  <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows:-"/>
244
292
  </fingerprint>
293
+
245
294
  <fingerprint pattern="^(?i)Default (?:Parallels )?Plesk (?:Panel )?Page$">
246
295
  <description>Plesk web hosting platform with no version</description>
247
296
  <example>Default Parallels Plesk Panel Page</example>
@@ -251,12 +300,14 @@
251
300
  <param pos="0" name="service.product" value="Plesk"/>
252
301
  <param pos="0" name="service.cpe23" value="cpe:/a:parallels:parallels_plesk_panel:-"/>
253
302
  </fingerprint>
303
+
254
304
  <fingerprint pattern="^Web Viewer for Samsung DVR$">
255
305
  <description>Samsung DVRs</description>
256
306
  <example>Web Viewer for Samsung DVR</example>
257
307
  <param pos="0" name="hw.vendor" value="Samsung"/>
258
308
  <param pos="0" name="hw.device" value="DVR"/>
259
309
  </fingerprint>
310
+
260
311
  <fingerprint pattern="^(?i)(?:Dell )?Sonicwall - Authentication$">
261
312
  <description>Sonicwall firewalls</description>
262
313
  <example>SonicWall - Authentication</example>
@@ -264,6 +315,7 @@
264
315
  <param pos="0" name="os.device" value="Firewall"/>
265
316
  <param pos="0" name="os.family" value="SonicOS"/>
266
317
  </fingerprint>
318
+
267
319
  <fingerprint pattern="^(.*).nbsp;-.nbsp;Synology.nbsp;DiskStation$">
268
320
  <description>Synology DiskStation</description>
269
321
  <example host.name="DiskStation">DiskStation&amp;nbsp;-&amp;nbsp;Synology&amp;nbsp;DiskStation</example>
@@ -277,6 +329,7 @@
277
329
  <param pos="0" name="os.vendor" value="Synology"/>
278
330
  <param pos="1" name="host.name"/>
279
331
  </fingerprint>
332
+
280
333
  <fingerprint pattern="Synology Web Station!$">
281
334
  <description>Synology with WebStation web hosting</description>
282
335
  <example>Hello! Welcome to Synology Web Station!</example>
@@ -289,6 +342,7 @@
289
342
  <param pos="0" name="os.product" value="DSM"/>
290
343
  <param pos="0" name="os.vendor" value="Synology"/>
291
344
  </fingerprint>
345
+
292
346
  <fingerprint pattern="^Web Filter Block Override$">
293
347
  <description>Fortinet FortiGate/Fortiguard Web Filter</description>
294
348
  <example>Web Filter Block Override</example>
@@ -301,12 +355,15 @@
301
355
  <param pos="0" name="hw.family" value="FortiGate"/>
302
356
  <param pos="0" name="hw.device" value="Firewall"/>
303
357
  </fingerprint>
358
+
304
359
  <!-- Various products by Ubiquiti networks -->
360
+
305
361
  <fingerprint pattern="^Ubiquiti Networks$">
306
362
  <description>Generic products by Ubiquiti Networks</description>
307
363
  <example>Ubiquiti Networks</example>
308
364
  <param pos="0" name="hw.vendor" value="Ubiquiti"/>
309
365
  </fingerprint>
366
+
310
367
  <fingerprint pattern="^UniFi Security Gateway$">
311
368
  <description>Ubiquiti Security Gateway</description>
312
369
  <example>UniFi Security Gateway</example>
@@ -314,17 +371,34 @@
314
371
  <param pos="0" name="hw.device" value="Router"/>
315
372
  <param pos="0" name="hw.product" value="UniFi Security Gateway"/>
316
373
  </fingerprint>
374
+
375
+ <fingerprint pattern="^Ubiquiti EdgeSwitch$">
376
+ <description>Ubiquiti EdgeSwitch</description>
377
+ <example>Ubiquiti EdgeSwitch</example>
378
+ <param pos="0" name="os.vendor" value="Ubiquiti"/>
379
+ <param pos="0" name="os.family" value="Linux"/>
380
+ <param pos="0" name="os.product" value="EdgeOS"/>
381
+ <param pos="0" name="hw.vendor" value="Ubiquiti"/>
382
+ <param pos="0" name="hw.product" value="EdgeSwitch"/>
383
+ </fingerprint>
384
+
317
385
  <fingerprint pattern="^EdgeOS$">
318
386
  <description>Ubiquiti EdgeRouter/EdgeSwitch/etc</description>
319
387
  <example>EdgeOS</example>
388
+ <param pos="0" name="os.vendor" value="Ubiquiti"/>
389
+ <param pos="0" name="os.family" value="Linux"/>
390
+ <param pos="0" name="os.product" value="EdgeOS"/>
320
391
  <param pos="0" name="hw.vendor" value="Ubiquiti"/>
321
392
  </fingerprint>
322
- <fingerprint pattern="^CloudKey$">
393
+
394
+ <fingerprint pattern="^Cloud\s*Key$">
323
395
  <description>Ubiquiti UniFi Cloud Key</description>
324
396
  <example>CloudKey</example>
397
+ <example>Cloud Key</example>
325
398
  <param pos="0" name="hw.vendor" value="Ubiquiti"/>
326
399
  <param pos="0" name="hw.product" value="UniFi Cloud Key"/>
327
400
  </fingerprint>
401
+
328
402
  <fingerprint pattern="^airCube$">
329
403
  <description>Ubiquiti airCube WAP</description>
330
404
  <example>airCube</example>
@@ -332,6 +406,7 @@
332
406
  <param pos="0" name="hw.product" value="airCube"/>
333
407
  <param pos="0" name="hw.device" value="WAP"/>
334
408
  </fingerprint>
409
+
335
410
  <fingerprint pattern="^UniFi Video$">
336
411
  <description>Various UniFi Video web service</description>
337
412
  <example>UniFi Video</example>
@@ -339,14 +414,17 @@
339
414
  <param pos="0" name="service.product" value="UniFi Video"/>
340
415
  <param pos="0" name="service.cpe23" value="cpe:/a:ui:unifi_video:-"/>
341
416
  </fingerprint>
342
- <fingerprint pattern="^UniFi NVR: Software Portal$">
417
+
418
+ <fingerprint pattern="^(?:UniFi NVR: Software Portal|airVision: \[NVR\] - Software Portal)$">
343
419
  <description>UniFi NVR for recording from UniFi video cameras</description>
344
420
  <example>UniFi NVR: Software Portal</example>
421
+ <example>airVision: [NVR] - Software Portal</example>
345
422
  <param pos="0" name="hw.vendor" value="Ubiquiti"/>
346
423
  <param pos="0" name="hw.family" value="UniFi"/>
347
424
  <param pos="0" name="hw.product" value="UniFi NVR"/>
348
425
  <param pos="0" name="hw.device" value="DVR"/>
349
426
  </fingerprint>
427
+
350
428
  <fingerprint pattern="^RomPager Embedded Web Server Toolkit$">
351
429
  <description>Embedded HTTP server used by many vendors and device
352
430
  types, including APC, 3Com, Andover Controls, Cisco VoIP, D-Link,
@@ -357,6 +435,7 @@
357
435
  <param pos="0" name="service.vendor" value="Allegro Software"/>
358
436
  <param pos="0" name="service.product" value="RomPager"/>
359
437
  </fingerprint>
438
+
360
439
  <fingerprint pattern="^RouterOS router configuration page$">
361
440
  <description>MikroTik RouterOS router configuration page</description>
362
441
  <example>RouterOS router configuration page</example>
@@ -367,6 +446,7 @@
367
446
  <param pos="0" name="hw.vendor" value="MikroTik"/>
368
447
  <param pos="0" name="hw.device" value="Router"/>
369
448
  </fingerprint>
449
+
370
450
  <fingerprint pattern="^(?:Welcome to nginx!|Test Page for the Nginx HTTP Server)$">
371
451
  <description>Default OS-agnostic nginx</description>
372
452
  <example>Welcome to nginx!</example>
@@ -376,6 +456,7 @@
376
456
  <param pos="0" name="service.vendor" value="nginx"/>
377
457
  <param pos="0" name="service.cpe23" value="cpe:/a:nginx:nginx:-"/>
378
458
  </fingerprint>
459
+
379
460
  <fingerprint pattern="^Test Page for the Nginx HTTP Server on (?:Fedora|EPEL)$">
380
461
  <description>Default nginx on Fedora</description>
381
462
  <example>Test Page for the Nginx HTTP Server on Fedora</example>
@@ -388,6 +469,7 @@
388
469
  <param pos="0" name="os.product" value="Fedora Core Linux"/>
389
470
  <param pos="0" name="os.cpe23" value="cpe:/o:redhat:fedora_core:-"/>
390
471
  </fingerprint>
472
+
391
473
  <fingerprint pattern="^Welcome to nginx on Debian!$">
392
474
  <description>Default nginx on Debian</description>
393
475
  <example>Welcome to nginx on Debian!</example>
@@ -399,19 +481,34 @@
399
481
  <param pos="0" name="os.product" value="Linux"/>
400
482
  <param pos="0" name="os.cpe23" value="cpe:/o:debian:debian_linux:-"/>
401
483
  </fingerprint>
484
+
402
485
  <fingerprint pattern="^Eagle Eye Networks ">
403
486
  <description>Eagle Eye Networks to manage IoT cameras home webpage</description>
404
487
  <example>Eagle Eye Networks (Local)</example>
405
488
  <param pos="0" name="hw.product" value="Bridge"/>
406
489
  <param pos="0" name="hw.vendor" value="Eagle Eye Networks"/>
407
490
  </fingerprint>
491
+
408
492
  <fingerprint pattern="^Web Local Display Unauthorized$">
409
493
  <description>Eagle Eye Networks to manage IoT cameras unauthorized webpage</description>
410
494
  <example>Web Local Display Unauthorized</example>
411
- <param pos="0" name="hw.product" value=" Bridge"/>
495
+ <param pos="0" name="hw.product" value="Bridge"/>
412
496
  <param pos="0" name="hw.vendor" value="Eagle Eye Networks"/>
413
497
  </fingerprint>
498
+
414
499
  <!-- Netgear Products -->
500
+
501
+ <fingerprint pattern="^NETGEAR ReadyNAS$">
502
+ <description>NETGEAR ReadyNAS</description>
503
+ <example>NETGEAR ReadyNAS</example>
504
+ <param pos="0" name="os.vendor" value="Netgear"/>
505
+ <param pos="0" name="os.product" value="Linux"/>
506
+ <param pos="0" name="hw.vendor" value="Netgear"/>
507
+ <param pos="0" name="hw.device" value="NAS"/>
508
+ <param pos="0" name="hw.family" value="ReadyNAS"/>
509
+ <param pos="0" name="hw.product" value="ReadyNAS"/>
510
+ </fingerprint>
511
+
415
512
  <fingerprint pattern="^(?:NETGEAR|NetGear) ([a-zA-Z0-9\-\+]+)$">
416
513
  <description>Netgear Switches</description>
417
514
  <example hw.product="GS108T">NETGEAR GS108T</example>
@@ -421,6 +518,7 @@
421
518
  <param pos="0" name="hw.device" value="Switch"/>
422
519
  <param pos="1" name="hw.product"/>
423
520
  </fingerprint>
521
+
424
522
  <fingerprint pattern="^(?:NETGEAR|NetGear) Router ([a-zA-Z0-9\-\+]+)$">
425
523
  <description>Netgear Routers</description>
426
524
  <example hw.product="WNR2000v4">NETGEAR Router WNR2000v4</example>
@@ -429,6 +527,7 @@
429
527
  <param pos="0" name="hw.device" value="Router"/>
430
528
  <param pos="1" name="hw.product"/>
431
529
  </fingerprint>
530
+
432
531
  <fingerprint pattern="^Netgear Prosafe Plus Switch$">
433
532
  <description>Netgear Prosafe Plus Switch</description>
434
533
  <example>Netgear Prosafe Plus Switch</example>
@@ -436,6 +535,7 @@
436
535
  <param pos="0" name="hw.device" value="Switch"/>
437
536
  <param pos="0" name="hw.product" value="Prosafe Plus"/>
438
537
  </fingerprint>
538
+
439
539
  <fingerprint pattern="^(.*).nbsp;Configuration and Management$">
440
540
  <description>Digi Terminal Servers</description>
441
541
  <example hw.product="Digi One SP">Digi One SP&amp;nbsp;Configuration and Management</example>
@@ -448,6 +548,7 @@
448
548
  <param pos="0" name="os.device" value="Device Server"/>
449
549
  <param pos="0" name="os.product" value="NET+OS"/>
450
550
  </fingerprint>
551
+
451
552
  <fingerprint pattern="^NPort Web Console$">
452
553
  <description>Moxa NPort Terminal Servers</description>
453
554
  <example>NPort Web Console</example>
@@ -455,6 +556,7 @@
455
556
  <param pos="0" name="hw.device" value="Device Server"/>
456
557
  <param pos="0" name="hw.product" value="NPort"/>
457
558
  </fingerprint>
559
+
458
560
  <fingerprint pattern="^Lantronix (SL[BC].*)$">
459
561
  <description>Lantronix terminal server</description>
460
562
  <example hw.product="SLB882/8824">Lantronix SLB882/8824</example>
@@ -464,6 +566,7 @@
464
566
  <param pos="0" name="hw.device" value="Device Server"/>
465
567
  <param pos="1" name="hw.product"/>
466
568
  </fingerprint>
569
+
467
570
  <fingerprint pattern="^(KN\S+) - Cover$">
468
571
  <description>ATEN KVM over IP</description>
469
572
  <example hw.product="KN4140v">KN4140v - Cover</example>
@@ -472,6 +575,7 @@
472
575
  <param pos="0" name="hw.device" value="KVM"/>
473
576
  <param pos="1" name="hw.product"/>
474
577
  </fingerprint>
578
+
475
579
  <fingerprint pattern="^Ethernet Relay Module$">
476
580
  <description>AVT.pl Ethernet Relay Module</description>
477
581
  <example>Ethernet Relay Module</example>
@@ -479,6 +583,7 @@
479
583
  <param pos="0" name="hw.device" value="Power Relay"/>
480
584
  <param pos="0" name="hw.product" value="Ethernet Relay Module"/>
481
585
  </fingerprint>
586
+
482
587
  <fingerprint pattern="^Inveo Lantick Ethernet Relay Controller$">
483
588
  <description>Inveo Lantick Ethernet Relay Controller</description>
484
589
  <example>Inveo Lantick Ethernet Relay Controller</example>
@@ -486,6 +591,7 @@
486
591
  <param pos="0" name="hw.device" value="Power Relay"/>
487
592
  <param pos="0" name="hw.product" value="Lantick Ethernet Relay Controller"/>
488
593
  </fingerprint>
594
+
489
595
  <fingerprint pattern="^(myUTN(?:-[a-zA-Z0-9]+)?) Control Center$">
490
596
  <description>myUTN Device Server</description>
491
597
  <example hw.product="myUTN-50a">myUTN-50a Control Center</example>
@@ -494,6 +600,7 @@
494
600
  <param pos="0" name="hw.device" value="Device Server"/>
495
601
  <param pos="1" name="hw.product"/>
496
602
  </fingerprint>
603
+
497
604
  <fingerprint pattern="^iCOM Control Board$">
498
605
  <description>Liebert iCOM Cooling Unit Control Board</description>
499
606
  <example>iCOM Control Board</example>
@@ -501,6 +608,7 @@
501
608
  <param pos="0" name="hw.device" value="Environment Control"/>
502
609
  <param pos="0" name="hw.product" value="iCOM Control Panel"/>
503
610
  </fingerprint>
611
+
504
612
  <fingerprint pattern="^Sigma Control 2$">
505
613
  <description>Sigma Control 2 Air Compressor Controls</description>
506
614
  <example>Sigma Control 2</example>
@@ -508,12 +616,14 @@
508
616
  <param pos="0" name="hw.device" value="Environment Control"/>
509
617
  <param pos="0" name="hw.product" value="Sigma Control 2"/>
510
618
  </fingerprint>
619
+
511
620
  <fingerprint pattern="^WebPower$">
512
621
  <description>Eltek Power Controller</description>
513
622
  <example>WebPower</example>
514
623
  <param pos="0" name="hw.vendor" value="Eltek"/>
515
624
  <param pos="0" name="hw.device" value="Power device"/>
516
625
  </fingerprint>
626
+
517
627
  <fingerprint pattern="(Expert Power Control NET \d+x\d+) - (.*)$">
518
628
  <description>Gude Expert Power Control</description>
519
629
  <example host.name="Rack42" hw.product="Expert Power Control NET 2x6">Expert Power Control NET 2x6 - Rack42</example>
@@ -522,6 +632,7 @@
522
632
  <param pos="1" name="hw.product"/>
523
633
  <param pos="2" name="host.name"/>
524
634
  </fingerprint>
635
+
525
636
  <fingerprint pattern="^Sentry Switched CDU$">
526
637
  <description>Sentry Switched CDU</description>
527
638
  <example>Sentry Switched CDU</example>
@@ -529,6 +640,7 @@
529
640
  <param pos="0" name="hw.device" value="Power device"/>
530
641
  <param pos="0" name="hw.product" value="Sentry Switched CDU"/>
531
642
  </fingerprint>
643
+
532
644
  <fingerprint pattern="^Emerson Network Power Rack PDU Card$">
533
645
  <description>Emerson Network Power Rack PDU Card</description>
534
646
  <example>Emerson Network Power Rack PDU Card</example>
@@ -536,6 +648,7 @@
536
648
  <param pos="0" name="hw.device" value="Power device"/>
537
649
  <param pos="0" name="hw.product" value="Rack PDU Card"/>
538
650
  </fingerprint>
651
+
539
652
  <fingerprint pattern="^(.*) IntelliSlot Web(?:/\d+)? Card?$">
540
653
  <description>Emerson Network Power IntelliSlot Web Card and rebrands</description>
541
654
  <example hw.vendor="Emerson Network Power">Emerson Network Power IntelliSlot Web Card</example>
@@ -546,6 +659,7 @@
546
659
  <param pos="0" name="hw.device" value="Power device"/>
547
660
  <param pos="0" name="hw.product" value="IntelliSlot Web Card"/>
548
661
  </fingerprint>
662
+
549
663
  <fingerprint pattern="^ConnectUPS Web/SNMP Card$">
550
664
  <description>ConnectUPS Web/SNMP Card</description>
551
665
  <example>ConnectUPS Web/SNMP Card</example>
@@ -553,6 +667,7 @@
553
667
  <param pos="0" name="hw.device" value="Power device"/>
554
668
  <param pos="0" name="hw.product" value="ConnectUPS Web Card"/>
555
669
  </fingerprint>
670
+
556
671
  <fingerprint pattern="^Calient Technologies Inc\.$">
557
672
  <description>Calient Photonic Switch</description>
558
673
  <example>Calient Technologies Inc.</example>
@@ -563,6 +678,7 @@
563
678
  <param pos="0" name="os.device" value="Switch"/>
564
679
  <param pos="0" name="os.family" value="Linux"/>
565
680
  </fingerprint>
681
+
566
682
  <fingerprint pattern="^Google Fiber Network Box Diagnostics$">
567
683
  <description>Google Fiber Router</description>
568
684
  <example>Google Fiber Network Box Diagnostics</example>
@@ -570,6 +686,7 @@
570
686
  <param pos="0" name="hw.device" value="Router"/>
571
687
  <param pos="0" name="hw.product" value="Fiber Network Box"/>
572
688
  </fingerprint>
689
+
573
690
  <fingerprint pattern="ServerView.* (iRMC S\d+) Web Server">
574
691
  <description>Fujitsu iRMC BMC</description>
575
692
  <example hw.product="iRMC S3" os.product="iRMC S3">ServerView Remote Management iRMC S3 Web Server</example>
@@ -581,9 +698,11 @@
581
698
  <param pos="0" name="os.vendor" value="Fujitsu"/>
582
699
  <param pos="1" name="os.product"/>
583
700
  </fingerprint>
584
- <fingerprint pattern="^Cisco UCS KVM Direct$">
585
- <description>Cisco UCS KVM Direct</description>
701
+
702
+ <fingerprint pattern="^Cisco (?:UCS KVM Direct|KVM)$">
703
+ <description>Cisco KVM</description>
586
704
  <example>Cisco UCS KVM Direct</example>
705
+ <example>Cisco KVM</example>
587
706
  <param pos="0" name="hw.vendor" value="Cisco"/>
588
707
  <param pos="0" name="hw.device" value="Lights Out Management"/>
589
708
  <param pos="0" name="hw.product" value="UCS Manager"/>
@@ -593,6 +712,7 @@
593
712
  <param pos="0" name="os.certainty" value="0.8"/>
594
713
  <param pos="0" name="os.cpe23" value="cpe:/o:cisco:nx-os:-"/>
595
714
  </fingerprint>
715
+
596
716
  <fingerprint pattern="^Cisco UCS Manager$">
597
717
  <description>Cisco UCS Manager</description>
598
718
  <example>Cisco UCS Manager</example>
@@ -605,6 +725,7 @@
605
725
  <param pos="0" name="os.certainty" value="0.8"/>
606
726
  <param pos="0" name="os.cpe23" value="cpe:/o:cisco:nx-os:-"/>
607
727
  </fingerprint>
728
+
608
729
  <fingerprint pattern="^Cisco (?:IMC Login|Integrated Management Controller)">
609
730
  <description>Cisco Integrated Management Controller</description>
610
731
  <example>Cisco Integrated Management Controller</example>
@@ -618,6 +739,26 @@
618
739
  <param pos="0" name="os.family" value="Linux"/>
619
740
  <param pos="0" name="os.product" value="IMC"/>
620
741
  </fingerprint>
742
+
743
+ <fingerprint pattern="^Cisco Meeting Management$">
744
+ <description>Cisco Meeting Management Virtual Appliance</description>
745
+ <example>Cisco Meeting Management</example>
746
+ <param pos="0" name="hw.vendor" value="Cisco"/>
747
+ <param pos="0" name="hw.device" value="Video Conferencing"/>
748
+ <param pos="0" name="hw.product" value="Meeting Management"/>
749
+ <param pos="0" name="os.vendor" value="Cisco"/>
750
+ <param pos="0" name="os.family" value="Linux"/>
751
+ <param pos="0" name="os.product" value="Meeting Management"/>
752
+ </fingerprint>
753
+
754
+ <fingerprint pattern="^Cisco SON$">
755
+ <description>Cisco Crosswork SON</description>
756
+ <example>Cisco SON</example>
757
+ <param pos="0" name="hw.vendor" value="Cisco"/>
758
+ <param pos="0" name="hw.device" value="Network Management Device"/>
759
+ <param pos="0" name="hw.product" value="Crosswork SON Appliance"/>
760
+ </fingerprint>
761
+
621
762
  <fingerprint pattern="^HPE Virtual Connect Manager$">
622
763
  <description>HPE Virtual Connect Manager</description>
623
764
  <example>HPE Virtual Connect Manager</example>
@@ -628,6 +769,7 @@
628
769
  <param pos="0" name="os.device" value="Lights Out Management"/>
629
770
  <param pos="0" name="os.product" value="iLO"/>
630
771
  </fingerprint>
772
+
631
773
  <fingerprint pattern="^HPE BladeSystem Onboard Administrator$">
632
774
  <description>HPE BladeSystem Onboard Administrator</description>
633
775
  <example>HPE BladeSystem Onboard Administrator</example>
@@ -635,6 +777,7 @@
635
777
  <param pos="0" name="hw.vendor" value="HPE"/>
636
778
  <param pos="0" name="hw.product" value="BladeSystem Onboard Administrator"/>
637
779
  </fingerprint>
780
+
638
781
  <fingerprint pattern="^HPE System Management Homepage$">
639
782
  <description>HPE System Management Homepage</description>
640
783
  <example>HPE System Management Homepage</example>
@@ -645,6 +788,7 @@
645
788
  <param pos="0" name="os.device" value="Lights Out Management"/>
646
789
  <param pos="0" name="os.product" value="iLO"/>
647
790
  </fingerprint>
791
+
648
792
  <fingerprint pattern="^HP Integrated Lights-Out$">
649
793
  <description>HP Integrated Lights-Out</description>
650
794
  <example>HP Integrated Lights-Out</example>
@@ -657,6 +801,7 @@
657
801
  <param pos="0" name="os.family" value="iLO"/>
658
802
  <param pos="0" name="os.product" value="iLO"/>
659
803
  </fingerprint>
804
+
660
805
  <fingerprint pattern="^HP Integrated Lights-Out 2$">
661
806
  <description>HP Integrated Lights-Out 2</description>
662
807
  <example>HP Integrated Lights-Out 2</example>
@@ -669,6 +814,7 @@
669
814
  <param pos="0" name="os.family" value="iLO"/>
670
815
  <param pos="0" name="os.product" value="iLO 2"/>
671
816
  </fingerprint>
817
+
672
818
  <fingerprint pattern="^(iLO \d+)$">
673
819
  <description>HP Integrated Lights-Out 3+</description>
674
820
  <example hw.product="iLO 3" os.product="iLO 3">iLO 3</example>
@@ -681,6 +827,7 @@
681
827
  <param pos="0" name="os.family" value="iLO"/>
682
828
  <param pos="1" name="os.product"/>
683
829
  </fingerprint>
830
+
684
831
  <fingerprint pattern="^HPE SimpliVity OmniStack$">
685
832
  <description>HPE SimpliVity OmniStack</description>
686
833
  <example>HPE SimpliVity OmniStack</example>
@@ -688,6 +835,7 @@
688
835
  <param pos="0" name="hw.vendor" value="HPE"/>
689
836
  <param pos="0" name="hw.product" value="SimpliVity OmniStack"/>
690
837
  </fingerprint>
838
+
691
839
  <fingerprint pattern="^HPE (StoreEver \S+)$">
692
840
  <description>HPE StoreEver</description>
693
841
  <example hw.product="StoreEver MSL3040">HPE StoreEver MSL3040</example>
@@ -695,6 +843,7 @@
695
843
  <param pos="0" name="hw.vendor" value="HPE"/>
696
844
  <param pos="1" name="hw.product"/>
697
845
  </fingerprint>
846
+
698
847
  <fingerprint pattern="^Dell OpenManage Switch Administrator$">
699
848
  <description>Dell OpenManage Switch Administrator</description>
700
849
  <example>Dell OpenManage Switch Administrator</example>
@@ -702,6 +851,7 @@
702
851
  <param pos="0" name="hw.device" value="Switch"/>
703
852
  <param pos="0" name="hw.product" value="OpenManage Switch"/>
704
853
  </fingerprint>
854
+
705
855
  <fingerprint pattern="^(\S+)\s+-\s+ProCurve Switch (\S+) \((.*)\)$">
706
856
  <description>HPE ProCurve Switch w/Hostname</description>
707
857
  <example host.name="SW1" hw.product="4204vl" procurve.model="J8770A">SW1 - ProCurve Switch 4204vl (J8770A)</example>
@@ -711,6 +861,7 @@
711
861
  <param pos="1" name="host.name"/>
712
862
  <param pos="3" name="procurve.model"/>
713
863
  </fingerprint>
864
+
714
865
  <fingerprint pattern="^ProCurve Switch (\S+) \((.*)\)$">
715
866
  <description>HPE ProCurve Switch w/o Hostname</description>
716
867
  <example hw.product="2610-24/12PWR" procurve.model="J9086A">ProCurve Switch 2610-24/12PWR (J9086A)</example>
@@ -719,6 +870,7 @@
719
870
  <param pos="1" name="hw.product"/>
720
871
  <param pos="2" name="procurve.model"/>
721
872
  </fingerprint>
873
+
722
874
  <fingerprint pattern="^FlexiPacket Hub$">
723
875
  <description>Nokia Siemens FlexiPacket Hub</description>
724
876
  <example>FlexiPacket Hub</example>
@@ -726,6 +878,7 @@
726
878
  <param pos="0" name="hw.device" value="Switch"/>
727
879
  <param pos="0" name="hw.product" value="FlexiPacket Hub"/>
728
880
  </fingerprint>
881
+
729
882
  <fingerprint pattern="^R&amp;S Instrument VNC desktop$">
730
883
  <description>Rohde and Schwarz Remote Instrument (vnc)</description>
731
884
  <example>R&amp;S Instrument VNC desktop</example>
@@ -735,12 +888,14 @@
735
888
  <param pos="0" name="os.vendor" value="Rohde &amp; Schwarz"/>
736
889
  <param pos="0" name="os.family" value="Linux"/>
737
890
  </fingerprint>
891
+
738
892
  <fingerprint pattern="^Rohde &amp; Schwarz remote instrument$">
739
893
  <description>Rohde and Schwarz Remote Instrument (web admin)</description>
740
894
  <example>Rohde &amp; Schwarz remote instrument</example>
741
895
  <param pos="0" name="hw.device" value="Test Instrument"/>
742
896
  <param pos="0" name="hw.vendor" value="Rohde &amp; Schwarz"/>
743
897
  </fingerprint>
898
+
744
899
  <fingerprint pattern="^EXA$">
745
900
  <description>Keysight EXA Signal Analyzer</description>
746
901
  <example>EXA</example>
@@ -749,6 +904,7 @@
749
904
  <param pos="0" name="hw.product" value="EXA Signal Analyzer"/>
750
905
  <param pos="0" name="os.device" value="Test Instrument"/>
751
906
  </fingerprint>
907
+
752
908
  <fingerprint pattern="^MXA$">
753
909
  <description>Keysight MXA Signal Analyzer</description>
754
910
  <example>MXA</example>
@@ -757,6 +913,7 @@
757
913
  <param pos="0" name="hw.product" value="MXA Signal Analyzer"/>
758
914
  <param pos="0" name="os.device" value="Test Instrument"/>
759
915
  </fingerprint>
916
+
760
917
  <fingerprint pattern="^Paragon-100G$">
761
918
  <description>Calnex Paragon-100G</description>
762
919
  <example>Paragon-100G</example>
@@ -764,6 +921,7 @@
764
921
  <param pos="0" name="hw.device" value="Test Instrument"/>
765
922
  <param pos="0" name="hw.product" value="Paragon-100G"/>
766
923
  </fingerprint>
924
+
767
925
  <fingerprint pattern="^33521A$">
768
926
  <description>Keysight 33521A Waveform Generator</description>
769
927
  <example>33521A</example>
@@ -771,6 +929,7 @@
771
929
  <param pos="0" name="hw.device" value="Test Instrument"/>
772
930
  <param pos="0" name="hw.product" value="33521A Waveform Generator"/>
773
931
  </fingerprint>
932
+
774
933
  <fingerprint pattern="^34972A$">
775
934
  <description>Keysight 34972A Data Logger</description>
776
935
  <example>34972A</example>
@@ -778,6 +937,7 @@
778
937
  <param pos="0" name="hw.device" value="Test Instrument"/>
779
938
  <param pos="0" name="hw.product" value="34972A Data Logger"/>
780
939
  </fingerprint>
940
+
781
941
  <fingerprint pattern="^53230A$">
782
942
  <description>Agilent 53230A Frequency Counter</description>
783
943
  <example>53230A</example>
@@ -785,6 +945,7 @@
785
945
  <param pos="0" name="hw.device" value="Test Instrument"/>
786
946
  <param pos="0" name="hw.product" value="53230A Frequency Counter"/>
787
947
  </fingerprint>
948
+
788
949
  <fingerprint pattern="^Agilent 33220A \((.*)\)$">
789
950
  <description>Agilent 33220A</description>
790
951
  <example agilent.serial="MY44041111">Agilent 33220A (MY44041111)</example>
@@ -793,6 +954,7 @@
793
954
  <param pos="0" name="hw.product" value="33220A Waveform Generator"/>
794
955
  <param pos="1" name="agilent.serial"/>
795
956
  </fingerprint>
957
+
796
958
  <fingerprint pattern="^Agilent N5172B (?:EXG )?(MY\S+)$">
797
959
  <description>Agilent N5172B</description>
798
960
  <example agilent.serial="MY44041111">Agilent N5172B EXG MY44041111</example>
@@ -801,6 +963,7 @@
801
963
  <param pos="0" name="hw.product" value="N5172B Signal Generator"/>
802
964
  <param pos="1" name="agilent.serial"/>
803
965
  </fingerprint>
966
+
804
967
  <fingerprint pattern="^Polycom - Configuration Utility$">
805
968
  <description>Polycom IP Phone</description>
806
969
  <example>Polycom - Configuration Utility</example>
@@ -810,12 +973,14 @@
810
973
  <param pos="0" name="os.vendor" value="Polycom"/>
811
974
  <param pos="0" name="os.product" value="Polycom"/>
812
975
  </fingerprint>
976
+
813
977
  <fingerprint pattern="^Digium Phone Settings$">
814
978
  <description>Digium Phone Settings</description>
815
979
  <example>Digium Phone Settings</example>
816
980
  <param pos="0" name="hw.vendor" value="Digium"/>
817
981
  <param pos="0" name="hw.device" value="VoIP"/>
818
982
  </fingerprint>
983
+
819
984
  <fingerprint pattern="^(SPA\S+) Configuration Utility$">
820
985
  <description>Cisco IP Phone - SPA504G Configuration Utility</description>
821
986
  <example hw.product="SPA504G">SPA504G Configuration Utility</example>
@@ -823,6 +988,7 @@
823
988
  <param pos="0" name="hw.device" value="VoIP"/>
824
989
  <param pos="1" name="hw.product"/>
825
990
  </fingerprint>
991
+
826
992
  <fingerprint pattern="^Cisco (?:SPA Configuration|IP Phone)$">
827
993
  <description>Cisco IP Phone </description>
828
994
  <example>Cisco SPA Configuration</example>
@@ -830,12 +996,14 @@
830
996
  <param pos="0" name="hw.vendor" value="Cisco"/>
831
997
  <param pos="0" name="hw.device" value="VoIP"/>
832
998
  </fingerprint>
999
+
833
1000
  <fingerprint pattern="^Cisco IP Camera$">
834
1001
  <description>Cisco IP Camera</description>
835
1002
  <example>Cisco IP Camera</example>
836
1003
  <param pos="0" name="hw.vendor" value="Cisco"/>
837
1004
  <param pos="0" name="hw.device" value="Web cam"/>
838
1005
  </fingerprint>
1006
+
839
1007
  <fingerprint pattern="^Cisco TelePresence MCU">
840
1008
  <description>Cisco TelePresence MCU - Home page</description>
841
1009
  <example>Cisco TelePresence MCU - Home page</example>
@@ -844,6 +1012,7 @@
844
1012
  <param pos="0" name="hw.device" value="Video Conferencing"/>
845
1013
  <param pos="0" name="hw.product" value="TelePresence MCU"/>
846
1014
  </fingerprint>
1015
+
847
1016
  <fingerprint pattern="^Cisco (Nexus \d+\S+)$">
848
1017
  <description>Cisco Nexus Virtual Switch</description>
849
1018
  <example hw.product="Nexus 1000V">Cisco Nexus 1000V</example>
@@ -851,6 +1020,7 @@
851
1020
  <param pos="0" name="hw.device" value="Switch"/>
852
1021
  <param pos="1" name="hw.product"/>
853
1022
  </fingerprint>
1023
+
854
1024
  <fingerprint pattern="^Cisco Catalyst Switch - Home$">
855
1025
  <description>Cisco Catalyst Switch</description>
856
1026
  <example>Cisco Catalyst Switch - Home</example>
@@ -861,6 +1031,7 @@
861
1031
  <param pos="0" name="os.product" value="CatOS"/>
862
1032
  <param pos="0" name="os.cpe23" value="cpe:/o:cisco:catos:-"/>
863
1033
  </fingerprint>
1034
+
864
1035
  <fingerprint pattern="^Cisco MDS 9000(?: and Nexus 5000)? Management Modules (\d+\.\d+\S+)$">
865
1036
  <description>Cisco MDS 9000/Nexus 5000</description>
866
1037
  <example os.version="7.3(1)D1(1)">Cisco MDS 9000 and Nexus 5000 Management Modules 7.3(1)D1(1)</example>
@@ -876,6 +1047,7 @@
876
1047
  <param pos="1" name="os.version"/>
877
1048
  <param pos="0" name="os.cpe23" value="cpe:/o:cisco:mds_9000:{os.version}"/>
878
1049
  </fingerprint>
1050
+
879
1051
  <fingerprint pattern="^Stealthwatch Management Console$">
880
1052
  <description>Stealthwatch Management Console</description>
881
1053
  <example>Stealthwatch Management Console</example>
@@ -886,6 +1058,7 @@
886
1058
  <param pos="0" name="os.device" value="Security Appliance"/>
887
1059
  <param pos="0" name="os.product" value="Stealthwatch"/>
888
1060
  </fingerprint>
1061
+
889
1062
  <fingerprint pattern="^Cisco vManage$">
890
1063
  <description>Cisco vManage SD-WAN</description>
891
1064
  <example>Cisco vManage</example>
@@ -896,6 +1069,7 @@
896
1069
  <param pos="0" name="os.device" value="SD-WAN Appliance"/>
897
1070
  <param pos="0" name="os.product" value="vManage"/>
898
1071
  </fingerprint>
1072
+
899
1073
  <fingerprint pattern="^Login - Cisco DNA Center$">
900
1074
  <description>Cisco DNA Center Appliance</description>
901
1075
  <example>Login - Cisco DNA Center</example>
@@ -906,6 +1080,7 @@
906
1080
  <param pos="0" name="os.device" value="Network Management Device"/>
907
1081
  <param pos="0" name="os.product" value="DNA Center"/>
908
1082
  </fingerprint>
1083
+
909
1084
  <fingerprint pattern="^Cisco (?:Enterprise )?NFVIS$">
910
1085
  <description>Cisco NFVIS</description>
911
1086
  <example>Cisco NFVIS</example>
@@ -917,16 +1092,20 @@
917
1092
  <param pos="0" name="os.device" value="Network Management Device"/>
918
1093
  <param pos="0" name="os.product" value="NFVIS"/>
919
1094
  </fingerprint>
1095
+
920
1096
  <fingerprint pattern="^Cisco Systems Login$">
921
1097
  <description>Cisco WLC</description>
922
1098
  <example>Cisco Systems Login</example>
923
1099
  <param pos="0" name="os.vendor" value="Cisco"/>
924
1100
  <param pos="0" name="os.device" value="Wireless Controller"/>
925
1101
  <param pos="0" name="os.product" value="Wireless LAN Controller"/>
1102
+ <param pos="0" name="os.cpe23" value="cpe:/o:cisco:wireless_lan_controller:-"/>
926
1103
  <param pos="0" name="hw.vendor" value="Cisco"/>
927
1104
  <param pos="0" name="hw.device" value="Wireless Controller"/>
928
1105
  <param pos="0" name="hw.product" value="Wireless LAN Controller"/>
1106
+ <param pos="0" name="hw.cpe23" value="cpe:/h:cisco:wireless_lan_controller:-"/>
929
1107
  </fingerprint>
1108
+
930
1109
  <fingerprint pattern="^Duo Access Gateway$">
931
1110
  <description>Duo Access Gateway</description>
932
1111
  <example>Duo Access Gateway</example>
@@ -937,6 +1116,7 @@
937
1116
  <param pos="0" name="os.device" value="Security Appliance"/>
938
1117
  <param pos="0" name="os.product" value="Access Gateway"/>
939
1118
  </fingerprint>
1119
+
940
1120
  <fingerprint pattern="^Login - Duo Network Gateway$">
941
1121
  <description>Duo Network Gateway</description>
942
1122
  <example>Login - Duo Network Gateway</example>
@@ -947,6 +1127,7 @@
947
1127
  <param pos="0" name="os.device" value="Security Appliance"/>
948
1128
  <param pos="0" name="os.product" value="Network Gateway"/>
949
1129
  </fingerprint>
1130
+
950
1131
  <fingerprint pattern="^VBrick Rev">
951
1132
  <description>VBrick Rev</description>
952
1133
  <example>VBrick Rev</example>
@@ -957,6 +1138,7 @@
957
1138
  <param pos="0" name="os.device" value="Video Conferencing"/>
958
1139
  <param pos="0" name="os.product" value="VBrick Rev"/>
959
1140
  </fingerprint>
1141
+
960
1142
  <fingerprint pattern="^(LinxVII-\S+) Remote Access$">
961
1143
  <description>LinxVII-5S Data Terminal</description>
962
1144
  <example hw.product="LinxVII-5S">LinxVII-5S Remote Access</example>
@@ -964,12 +1146,14 @@
964
1146
  <param pos="0" name="hw.device" value="Data Terminal"/>
965
1147
  <param pos="1" name="hw.product"/>
966
1148
  </fingerprint>
1149
+
967
1150
  <fingerprint pattern="^Datalogic Mobile Portable$">
968
1151
  <description>Datalogic Mobile Portable</description>
969
1152
  <example>Datalogic Mobile Portable</example>
970
1153
  <param pos="0" name="hw.vendor" value="Datalogic Mobile"/>
971
1154
  <param pos="0" name="hw.device" value="Handheld Scanner"/>
972
1155
  </fingerprint>
1156
+
973
1157
  <fingerprint pattern="^AXIS$">
974
1158
  <description>Axis Communications Web Cam</description>
975
1159
  <example>AXIS</example>
@@ -979,6 +1163,7 @@
979
1163
  <param pos="0" name="os.family" value="Linux"/>
980
1164
  <param pos="0" name="os.device" value="Web cam"/>
981
1165
  </fingerprint>
1166
+
982
1167
  <fingerprint pattern="^Hanwha Techwin$">
983
1168
  <description>Hanwha Techwin IP Camera</description>
984
1169
  <example>Hanwha Techwin</example>
@@ -988,6 +1173,7 @@
988
1173
  <param pos="0" name="os.device" value="Web cam"/>
989
1174
  <param pos="0" name="os.family" value="Linux"/>
990
1175
  </fingerprint>
1176
+
991
1177
  <fingerprint pattern="^(WV-NS\S+) Network Camera$">
992
1178
  <description>WV-NS202A Network Camera</description>
993
1179
  <example hw.product="WV-NS202A">WV-NS202A Network Camera</example>
@@ -999,15 +1185,29 @@
999
1185
  <param pos="0" name="os.device" value="Web cam"/>
1000
1186
  <param pos="0" name="os.family" value="Linux"/>
1001
1187
  </fingerprint>
1002
- <fingerprint pattern="^KACE Systems Management Appliance">
1188
+
1189
+ <fingerprint pattern="^KACE (?:Systems Management|Systems Deployment|Remote Site) Appliance">
1003
1190
  <description>KACE Systems Management Appliances</description>
1004
1191
  <example>KACE Systems Management Appliance Service Center</example>
1005
1192
  <example>KACE Systems Management Appliance Administrator Console</example>
1193
+ <example>KACE Systems Deployment Appliance</example>
1194
+ <example>KACE Remote Site Appliance</example>
1006
1195
  <param pos="0" name="hw.vendor" value="KACE"/>
1007
1196
  <param pos="0" name="hw.device" value="Support Appliance"/>
1008
1197
  <param pos="0" name="os.vendor" value="KACE"/>
1009
1198
  <param pos="0" name="os.family" value="FreeBSD"/>
1010
1199
  </fingerprint>
1200
+
1201
+ <fingerprint pattern="^K1000 Service Center$">
1202
+ <description>Dell K1000 Systems Management Appliances (KACE)</description>
1203
+ <example>K1000 Service Center</example>
1204
+ <param pos="0" name="hw.vendor" value="KACE"/>
1205
+ <param pos="0" name="hw.device" value="Support Appliance"/>
1206
+ <param pos="0" name="hw.product" value="K1000"/>
1207
+ <param pos="0" name="os.vendor" value="KACE"/>
1208
+ <param pos="0" name="os.family" value="FreeBSD"/>
1209
+ </fingerprint>
1210
+
1011
1211
  <fingerprint pattern="Portal.*Powered by BOMGAR$">
1012
1212
  <description>Bomgar Appliances</description>
1013
1213
  <example>Remote Support Portal | Powered by BOMGAR</example>
@@ -1017,6 +1217,7 @@
1017
1217
  <param pos="0" name="os.vendor" value="Bomgar"/>
1018
1218
  <param pos="0" name="os.family" value="Linux"/>
1019
1219
  </fingerprint>
1220
+
1020
1221
  <fingerprint pattern="^XRoads Network Appliance Administration$">
1021
1222
  <description>XRoads SD-WAN Network Appliance </description>
1022
1223
  <example>XRoads Network Appliance Administration</example>
@@ -1025,7 +1226,9 @@
1025
1226
  <param pos="0" name="os.vendor" value="XRoads"/>
1026
1227
  <param pos="0" name="os.family" value="Linux"/>
1027
1228
  </fingerprint>
1229
+
1028
1230
  <!-- An OEM of the Quantum Corporation SuperLoader 3 -->
1231
+
1029
1232
  <fingerprint pattern="^On Board Remote Management$">
1030
1233
  <description>PowerVault 124T Tape Library</description>
1031
1234
  <example>On Board Remote Management</example>
@@ -1034,6 +1237,7 @@
1034
1237
  <param pos="0" name="hw.product" value="PowerVault 124T"/>
1035
1238
  <param pos="0" name="os.vendor" value="Dell"/>
1036
1239
  </fingerprint>
1240
+
1037
1241
  <fingerprint pattern="^(HD-RX-\S+)$">
1038
1242
  <description>Crestron Multiformat Receivers</description>
1039
1243
  <example hw.product="HD-RX-201-C-E">HD-RX-201-C-E</example>
@@ -1042,6 +1246,7 @@
1042
1246
  <param pos="1" name="hw.product"/>
1043
1247
  <param pos="0" name="os.vendor" value="Crestron"/>
1044
1248
  </fingerprint>
1249
+
1045
1250
  <fingerprint pattern="^Lencore Sound Manager 2$">
1046
1251
  <description>Lencore Sound Manager 2</description>
1047
1252
  <example>Lencore Sound Manager 2</example>
@@ -1051,7 +1256,9 @@
1051
1256
  <param pos="0" name="os.vendor" value="i.LON"/>
1052
1257
  <param pos="0" name="os.product" value="SmartServer"/>
1053
1258
  </fingerprint>
1259
+
1054
1260
  <!-- Various ICS/OT -->
1261
+
1055
1262
  <fingerprint pattern="^CTI (25\S+) Main Menu$">
1056
1263
  <description>Siemens 257x Ethernet Adapter (CTI Branded)</description>
1057
1264
  <example hw.product="2572-A">CTI 2572-A Main Menu</example>
@@ -1060,6 +1267,7 @@
1060
1267
  <param pos="1" name="hw.product"/>
1061
1268
  <param pos="0" name="os.vendor" value="Siemens"/>
1062
1269
  </fingerprint>
1270
+
1063
1271
  <fingerprint pattern="^(25\S+) Ethernet TCP/IP Module$">
1064
1272
  <description>Siemens 257x Ethernet Adapter</description>
1065
1273
  <example hw.product="2572-B">2572-B Ethernet TCP/IP Module</example>
@@ -1068,6 +1276,7 @@
1068
1276
  <param pos="1" name="hw.product"/>
1069
1277
  <param pos="0" name="os.vendor" value="Siemens"/>
1070
1278
  </fingerprint>
1279
+
1071
1280
  <fingerprint pattern="^ECOM100 Main$">
1072
1281
  <description>DirectLOGIC DL205 communication module</description>
1073
1282
  <example>ECOM100 Main</example>
@@ -1076,6 +1285,7 @@
1076
1285
  <param pos="0" name="hw.product" value="ECOM100"/>
1077
1286
  <param pos="0" name="os.vendor" value="DirectLOGIC"/>
1078
1287
  </fingerprint>
1288
+
1079
1289
  <fingerprint pattern="^(1794-\S+) FLEX Ethernet Adapter$">
1080
1290
  <description>Allen-Bradley 1794-AENTR FLEX Ethernet Adapter</description>
1081
1291
  <example hw.product="1794-AENTR">1794-AENTR FLEX Ethernet Adapter</example>
@@ -1084,6 +1294,7 @@
1084
1294
  <param pos="1" name="hw.product"/>
1085
1295
  <param pos="0" name="os.vendor" value="Allen-Bradley"/>
1086
1296
  </fingerprint>
1297
+
1087
1298
  <fingerprint pattern="^Anybus-CC EtherNet/IP$">
1088
1299
  <description>Anybus-CC EtherNet/IP</description>
1089
1300
  <example>Anybus-CC EtherNet/IP</example>
@@ -1092,6 +1303,7 @@
1092
1303
  <param pos="0" name="hw.product" value="CC EtherNet/IP"/>
1093
1304
  <param pos="0" name="os.vendor" value="AnyBus"/>
1094
1305
  </fingerprint>
1306
+
1095
1307
  <fingerprint pattern="^Symmetry 2DBC">
1096
1308
  <description>AMAG Technology Symmetry EN-2DBC Access Controller</description>
1097
1309
  <example>Symmetry 2DBC STD APP (EN2DBC_00_EF_4F)</example>
@@ -1100,6 +1312,7 @@
1100
1312
  <param pos="0" name="hw.product" value="Symmetry EN-2DBC"/>
1101
1313
  <param pos="0" name="os.vendor" value="AMAG Technology"/>
1102
1314
  </fingerprint>
1315
+
1103
1316
  <fingerprint pattern="^(1747-\S+) Home Page$">
1104
1317
  <description>Allen-Bradley 1747-LXXX SLC 5/05 Controller</description>
1105
1318
  <example hw.product="1747-L551">1747-L551 Home Page</example>
@@ -1110,6 +1323,7 @@
1110
1323
  <param pos="1" name="hw.product"/>
1111
1324
  <param pos="0" name="os.vendor" value="Allen-Bradley"/>
1112
1325
  </fingerprint>
1326
+
1113
1327
  <fingerprint pattern="^(1766-\S+) (B/\S+)$">
1114
1328
  <description>Allen-Bradley 1766-L32BXB PLC</description>
1115
1329
  <example hw.product="1766-L32BXB" os.product="1766-L32BXB" os.version="B/11.00">1766-L32BXB B/11.00</example>
@@ -1121,6 +1335,7 @@
1121
1335
  <param pos="1" name="os.product"/>
1122
1336
  <param pos="2" name="os.version"/>
1123
1337
  </fingerprint>
1338
+
1124
1339
  <fingerprint pattern="^PLC-5 Ethernet Base Page$">
1125
1340
  <description>PLC-5 Ethernet Interface Module</description>
1126
1341
  <example>PLC-5 Ethernet Base Page</example>
@@ -1131,6 +1346,7 @@
1131
1346
  <param pos="0" name="os.device" value="PLC"/>
1132
1347
  <param pos="0" name="os.product" value="PLC-5"/>
1133
1348
  </fingerprint>
1349
+
1134
1350
  <fingerprint pattern="^(1761-NET-\S+)$">
1135
1351
  <description>Allen-Bradley Ethernet Module</description>
1136
1352
  <example hw.product="1761-NET-EN">1761-NET-EN</example>
@@ -1140,6 +1356,7 @@
1140
1356
  <param pos="1" name="hw.product"/>
1141
1357
  <param pos="0" name="os.vendor" value="Allen-Bradley"/>
1142
1358
  </fingerprint>
1359
+
1143
1360
  <fingerprint pattern="^(1785-\S+) Ethernet Base Page$">
1144
1361
  <description>Allen-Bradley 1785 Ethernet Module</description>
1145
1362
  <example hw.product="1785-ENET">1785-ENET Ethernet Base Page</example>
@@ -1148,6 +1365,7 @@
1148
1365
  <param pos="1" name="hw.product"/>
1149
1366
  <param pos="0" name="os.vendor" value="Allen-Bradley"/>
1150
1367
  </fingerprint>
1368
+
1151
1369
  <fingerprint pattern="^NFT S7 - DALI-Gateway\(Ethernet\)$">
1152
1370
  <description>NFT DALI S7 Ethernet Module</description>
1153
1371
  <example>NFT S7 - DALI-Gateway(Ethernet)</example>
@@ -1156,6 +1374,7 @@
1156
1374
  <param pos="0" name="hw.product" value="S7 DALI Gateway"/>
1157
1375
  <param pos="0" name="os.vendor" value="NFT"/>
1158
1376
  </fingerprint>
1377
+
1159
1378
  <fingerprint pattern="^IBHLink S7\+\+$">
1160
1379
  <description>IBHsofte IBHLink S7++</description>
1161
1380
  <example>IBHLink S7++</example>
@@ -1164,13 +1383,16 @@
1164
1383
  <param pos="0" name="hw.product" value="IBHLink S7++"/>
1165
1384
  <param pos="0" name="os.vendor" value="IBHsofte"/>
1166
1385
  </fingerprint>
1386
+
1167
1387
  <!-- Software and Appliances -->
1388
+
1168
1389
  <fingerprint pattern="^S7/S5 OPC Server$">
1169
1390
  <description>Softing Industrial S7/S5 OPC Server</description>
1170
1391
  <example>S7/S5 OPC Server</example>
1171
1392
  <param pos="0" name="service.vendor" value="Softing"/>
1172
1393
  <param pos="0" name="service.product" value="S7/S5 OPC Server"/>
1173
1394
  </fingerprint>
1395
+
1174
1396
  <fingerprint pattern="^Nessus$">
1175
1397
  <description>Nessus</description>
1176
1398
  <example>Nessus</example>
@@ -1178,6 +1400,7 @@
1178
1400
  <param pos="0" name="service.product" value="Nessus"/>
1179
1401
  <param pos="0" name="service.cpe23" value="cpe:/a:tenable:nessus:-"/>
1180
1402
  </fingerprint>
1403
+
1181
1404
  <fingerprint pattern="^Tenable Appliance$">
1182
1405
  <description>Tenable Appliance</description>
1183
1406
  <example>Tenable Appliance</example>
@@ -1185,6 +1408,7 @@
1185
1408
  <param pos="0" name="hw.device" value="Security Appliance"/>
1186
1409
  <param pos="0" name="hw.product" value="Tenable Appliance"/>
1187
1410
  </fingerprint>
1411
+
1188
1412
  <fingerprint pattern="^(?:Welcome to Citrix )?XenServer ([0-9\.]+)$">
1189
1413
  <description>XenServer</description>
1190
1414
  <example service.version="7.2.0">Welcome to Citrix XenServer 7.2.0</example>
@@ -1194,18 +1418,21 @@
1194
1418
  <param pos="1" name="service.version"/>
1195
1419
  <param pos="0" name="service.cpe23" value="cpe:/a:citrix:xenserver:{service.version}"/>
1196
1420
  </fingerprint>
1421
+
1197
1422
  <fingerprint pattern="^RabbitMQ Management$">
1198
1423
  <description>RabbitMQ Management</description>
1199
1424
  <example>RabbitMQ Management</example>
1200
1425
  <param pos="0" name="service.vendor" value="RabbitMQ"/>
1201
1426
  <param pos="0" name="service.product" value="Management Server"/>
1202
1427
  </fingerprint>
1428
+
1203
1429
  <fingerprint pattern="^Statistics Report for HAProxy$">
1204
1430
  <description>HAProxy Stats Server</description>
1205
1431
  <example>Statistics Report for HAProxy</example>
1206
1432
  <param pos="0" name="service.vendor" value="HAProxy"/>
1207
1433
  <param pos="0" name="service.product" value="HAProxy Stats Server"/>
1208
1434
  </fingerprint>
1435
+
1209
1436
  <fingerprint pattern="^Open Manage&amp;trade;$">
1210
1437
  <description>Dell OpenManage Admin</description>
1211
1438
  <example>Open Manage&amp;trade;</example>
@@ -1213,6 +1440,7 @@
1213
1440
  <param pos="0" name="service.product" value="OpenManage"/>
1214
1441
  <param pos="0" name="service.cpe23" value="cpe:/a:dell:openmanage:-"/>
1215
1442
  </fingerprint>
1443
+
1216
1444
  <fingerprint pattern="^TightVNC desktop \[(.*)\]$">
1217
1445
  <description>TightVNC Web Server</description>
1218
1446
  <example host.name="teller01">TightVNC desktop [teller01]</example>
@@ -1221,6 +1449,7 @@
1221
1449
  <param pos="0" name="service.cpe23" value="cpe:/a:tightvnc:tightvnc:-"/>
1222
1450
  <param pos="1" name="host.name"/>
1223
1451
  </fingerprint>
1452
+
1224
1453
  <fingerprint pattern="^noVNC$">
1225
1454
  <description>noVNC Web Server</description>
1226
1455
  <example>noVNC</example>
@@ -1228,6 +1457,7 @@
1228
1457
  <param pos="0" name="service.product" value="noVNC"/>
1229
1458
  <param pos="0" name="service.cpe23" value="cpe:/a:novnc:novnc:-"/>
1230
1459
  </fingerprint>
1460
+
1231
1461
  <fingerprint pattern="^.* \[Jenkins\]$">
1232
1462
  <description>Jenkins Customized Dashboard</description>
1233
1463
  <example>Continuous Integrations [Jenkins]</example>
@@ -1236,24 +1466,36 @@
1236
1466
  <param pos="0" name="service.product" value="Jenkins"/>
1237
1467
  <param pos="0" name="service.cpe23" value="cpe:/a:jenkins:jenkins:-"/>
1238
1468
  </fingerprint>
1469
+
1239
1470
  <fingerprint pattern="^Shell In A Box$">
1240
1471
  <description>Shell In A Box (OSS Project)</description>
1241
1472
  <example>Shell In A Box</example>
1242
1473
  <param pos="0" name="service.vendor" value="ShellInABox"/>
1243
1474
  <param pos="0" name="service.product" value="ShellInABox"/>
1244
1475
  </fingerprint>
1476
+
1245
1477
  <fingerprint pattern="^AgilentLicenseManagerService Service$">
1246
1478
  <description>Agilent License Manager Service</description>
1247
1479
  <example>AgilentLicenseManagerService Service</example>
1248
1480
  <param pos="0" name="service.vendor" value="Agilent"/>
1249
1481
  <param pos="0" name="service.product" value="License Manager"/>
1250
1482
  </fingerprint>
1251
- <fingerprint pattern="^Red Hat OpenStack Platform Director$">
1483
+
1484
+ <fingerprint pattern="^Red Hat(?:.reg;)? OpenStack (?:Platform )?Director$">
1252
1485
  <description>Red Hat OpenStack Platform Director</description>
1253
1486
  <example>Red Hat OpenStack Platform Director</example>
1487
+ <example>Red Hat&amp;reg; OpenStack Director</example>
1254
1488
  <param pos="0" name="service.vendor" value="Red Hat"/>
1255
1489
  <param pos="0" name="service.product" value="Open Stack Platform Director"/>
1256
1490
  </fingerprint>
1491
+
1492
+ <fingerprint pattern="^Login - OpenStack Dashboard$">
1493
+ <description>OpenStack Dashboard</description>
1494
+ <example>Login - OpenStack Dashboard</example>
1495
+ <param pos="0" name="service.vendor" value="OpenStack"/>
1496
+ <param pos="0" name="service.product" value="Dashboard"/>
1497
+ </fingerprint>
1498
+
1257
1499
  <fingerprint pattern="^splunkd$">
1258
1500
  <description>Splunk HTTP server used in the web interface, forwarders, indexers and more</description>
1259
1501
  <example>splunkd</example>
@@ -1261,24 +1503,30 @@
1261
1503
  <param pos="0" name="service.product" value="Splunk"/>
1262
1504
  <param pos="0" name="service.cpe23" value="cpe:/a:splunk:splunk:-"/>
1263
1505
  </fingerprint>
1264
- <fingerprint pattern="^VMware Horizon$">
1506
+
1507
+ <fingerprint pattern="^VMware(?: Horizon(?: View)?|.nbsp;Horizon| View Portal)?$">
1265
1508
  <description>VMware Horizon</description>
1266
1509
  <example>VMware Horizon</example>
1267
- <param pos="0" name="service.vendor" value="VMWare"/>
1510
+ <example>VMware Horizon View</example>
1511
+ <example>VMware&amp;nbsp;Horizon</example>
1512
+ <example>VMware View Portal</example>
1513
+ <param pos="0" name="service.vendor" value="VMware"/>
1268
1514
  <param pos="0" name="service.product" value="Horizon"/>
1269
1515
  <param pos="0" name="service.cpe23" value="cpe:/a:vmware:horizon:-"/>
1270
1516
  </fingerprint>
1517
+
1271
1518
  <fingerprint pattern="^Welcome to VMware Site Recovery Manager$">
1272
1519
  <description>VMware SRM</description>
1273
1520
  <example>Welcome to VMware Site Recovery Manager</example>
1274
- <param pos="0" name="os.vendor" value="VMWare"/>
1521
+ <param pos="0" name="os.vendor" value="VMware"/>
1275
1522
  <param pos="0" name="os.product" value="Linux"/>
1276
- <param pos="0" name="hw.vendor" value="VMWare"/>
1523
+ <param pos="0" name="hw.vendor" value="VMware"/>
1277
1524
  <param pos="0" name="hw.device" value="Appliance"/>
1278
1525
  <param pos="0" name="hw.product" value="Site Recovery Manager"/>
1279
- <param pos="0" name="service.vendor" value="VMWare"/>
1526
+ <param pos="0" name="service.vendor" value="VMware"/>
1280
1527
  <param pos="0" name="service.product" value="Site Recovery Manager"/>
1281
1528
  </fingerprint>
1529
+
1282
1530
  <fingerprint pattern="^Graylog Web Interface$">
1283
1531
  <description>Graylog Web Interface</description>
1284
1532
  <example>Graylog Web Interface</example>
@@ -1286,14 +1534,17 @@
1286
1534
  <param pos="0" name="service.product" value="Graylog"/>
1287
1535
  <param pos="0" name="service.cpe23" value="cpe:/a:graylog:graylog:-"/>
1288
1536
  </fingerprint>
1537
+
1289
1538
  <!-- The 'vendor' here has changed over time -->
1290
- <fingerprint pattern="^Kibana$">
1539
+
1540
+ <fingerprint pattern="^(?:Elastic\s+)?Kibana$">
1291
1541
  <description>Kibana Web Interface</description>
1292
1542
  <example>Kibana</example>
1293
- <param pos="0" name="service.vendor" value="Kibana"/>
1543
+ <example>Elastic Kibana</example>
1544
+ <param pos="0" name="service.vendor" value="Elastic"/>
1294
1545
  <param pos="0" name="service.product" value="Kibana"/>
1295
- <param pos="0" name="service.cpe23" value="cpe:/a:elasticsearch:kibana:-"/>
1296
1546
  </fingerprint>
1547
+
1297
1548
  <fingerprint pattern="^Grafana$">
1298
1549
  <description>Grafana Web Interface</description>
1299
1550
  <example>Grafana</example>
@@ -1301,6 +1552,15 @@
1301
1552
  <param pos="0" name="service.product" value="Grafana"/>
1302
1553
  <param pos="0" name="service.cpe23" value="cpe:/a:grafana:grafana:-"/>
1303
1554
  </fingerprint>
1555
+
1556
+ <fingerprint pattern="^Prometheus Time Series Collection and Processing Server$">
1557
+ <description>Prometheus Web Interface</description>
1558
+ <example>Prometheus Time Series Collection and Processing Server</example>
1559
+ <param pos="0" name="service.vendor" value="Prometheus"/>
1560
+ <param pos="0" name="service.product" value="Prometheus"/>
1561
+ <param pos="0" name="service.cpe23" value="cpe:/a:prometheus:prometheus:-"/>
1562
+ </fingerprint>
1563
+
1304
1564
  <fingerprint pattern="^Symantec Endpoint Protection Manager$">
1305
1565
  <description>Symantec Endpoint Protection Manager</description>
1306
1566
  <example>Symantec Endpoint Protection Manager</example>
@@ -1308,18 +1568,14 @@
1308
1568
  <param pos="0" name="service.product" value="Endpoint Protection Manager"/>
1309
1569
  <param pos="0" name="service.cpe23" value="cpe:/a:symantec:endpoint_protection_manager:-"/>
1310
1570
  </fingerprint>
1311
- <fingerprint pattern="^Login Gateway - Kiwi Syslog Web Access$">
1312
- <description>Kiwi Syslog Web Access</description>
1313
- <example>Login Gateway - Kiwi Syslog Web Access</example>
1314
- <param pos="0" name="service.vendor" value="Solarwinds"/>
1315
- <param pos="0" name="service.product" value="Kiwi Syslog Web Access"/>
1316
- </fingerprint>
1571
+
1317
1572
  <fingerprint pattern="^Hadoop Administration$">
1318
1573
  <description>Hadoop Administration Web Service</description>
1319
1574
  <example>Hadoop Administration</example>
1320
1575
  <param pos="0" name="service.vendor" value="Hadoop"/>
1321
1576
  <param pos="0" name="service.product" value="Hadoop Web Admin"/>
1322
1577
  </fingerprint>
1578
+
1323
1579
  <fingerprint pattern="^ManageEngine OpManager$">
1324
1580
  <description>ManageEngine OpManager</description>
1325
1581
  <example>ManageEngine OpManager</example>
@@ -1327,8 +1583,17 @@
1327
1583
  <param pos="0" name="service.product" value="OpManager"/>
1328
1584
  <param pos="0" name="service.cpe23" value="cpe:/a:manageengine:opmanager:-"/>
1329
1585
  </fingerprint>
1586
+
1587
+ <fingerprint pattern="^ManageEngine ADAudit Plus$">
1588
+ <description>ManageEngineADAudit Plus</description>
1589
+ <example>ManageEngine ADAudit Plus</example>
1590
+ <param pos="0" name="service.vendor" value="ManageEngine"/>
1591
+ <param pos="0" name="service.product" value="ADAudit Plus"/>
1592
+ </fingerprint>
1593
+
1330
1594
  <fingerprint pattern="^(ScanFront \d.+)Web Menu$">
1331
1595
  <!-- no space between the product model and "Web Menu" in the title -->
1596
+
1332
1597
  <description>Canon ScanFront</description>
1333
1598
  <example os.product="ScanFront 220" hw.product="ScanFront 220">ScanFront 220Web Menu</example>
1334
1599
  <param pos="0" name="hw.device" value="Scanner"/>
@@ -1338,12 +1603,14 @@
1338
1603
  <param pos="0" name="os.vendor" value="Canon"/>
1339
1604
  <param pos="1" name="os.product"/>
1340
1605
  </fingerprint>
1606
+
1341
1607
  <fingerprint pattern="^CDVI Update$">
1342
1608
  <description>CDVI Door Control System</description>
1343
1609
  <example>CDVI Update</example>
1344
1610
  <param pos="0" name="hw.vendor" value="CDVI"/>
1345
- <param pos="0" name="hw.device" value="Access Controller"/>
1611
+ <param pos="0" name="hw.device" value="Access Control"/>
1346
1612
  </fingerprint>
1613
+
1347
1614
  <fingerprint pattern="^Liebert OpenComms Network Interface Card$">
1348
1615
  <description>Liebert UPS</description>
1349
1616
  <example>Liebert OpenComms Network Interface Card</example>
@@ -1352,6 +1619,7 @@
1352
1619
  <param pos="0" name="os.device" value="Power device"/>
1353
1620
  <param pos="0" name="os.vendor" value="Liebert"/>
1354
1621
  </fingerprint>
1622
+
1355
1623
  <fingerprint pattern="^Excella Main Page$">
1356
1624
  <description>MagTek Excella STX Check Scanner</description>
1357
1625
  <example>Excella Main Page</example>
@@ -1362,6 +1630,7 @@
1362
1630
  <param pos="0" name="os.vendor" value="MagTek"/>
1363
1631
  <param pos="0" name="os.product" value="Excella"/>
1364
1632
  </fingerprint>
1633
+
1365
1634
  <fingerprint pattern="^B426$">
1366
1635
  <description>Bosch Security Systems Ethernet Module (Alarm Panel)</description>
1367
1636
  <example>B426</example>
@@ -1370,6 +1639,7 @@
1370
1639
  <param pos="0" name="os.device" value="Alarm Panel"/>
1371
1640
  <param pos="0" name="os.vendor" value="Bosch"/>
1372
1641
  </fingerprint>
1642
+
1373
1643
  <fingerprint pattern="^Citrix Login$">
1374
1644
  <description>Citrix NetScaler</description>
1375
1645
  <example>Citrix Login</example>
@@ -1383,6 +1653,50 @@
1383
1653
  <param pos="0" name="service.product" value="NetScaler"/>
1384
1654
  <param pos="0" name="service.cpe23" value="cpe:/a:citrix:netscaler:-"/>
1385
1655
  </fingerprint>
1656
+
1657
+ <fingerprint pattern="^Netscaler Gateway$">
1658
+ <description>Citrix Netscaler Gateway</description>
1659
+ <example>Netscaler Gateway</example>
1660
+ <param pos="0" name="os.vendor" value="Citrix"/>
1661
+ <param pos="0" name="os.family" value="NetScaler"/>
1662
+ <param pos="0" name="os.device" value="Network Management Device"/>
1663
+ <param pos="0" name="os.product" value="NetScaler Gateway"/>
1664
+ <param pos="0" name="service.vendor" value="Citrix"/>
1665
+ <param pos="0" name="service.family" value="NetScaler"/>
1666
+ <param pos="0" name="service.device" value="Network Management Device"/>
1667
+ <param pos="0" name="service.product" value="NetScaler Gateway"/>
1668
+ </fingerprint>
1669
+
1670
+ <fingerprint pattern="^Citrix (?:NetScaler SDX|ADC SDX)$">
1671
+ <description>Citrix NetScaler SDX Gateway</description>
1672
+ <example>Citrix NetScaler SDX</example>
1673
+ <example>Citrix ADC SDX</example>
1674
+ <param pos="0" name="os.vendor" value="Citrix"/>
1675
+ <param pos="0" name="os.family" value="NetScaler"/>
1676
+ <param pos="0" name="os.device" value="Network Management Device"/>
1677
+ <param pos="0" name="os.product" value="NetScaler SDX Gateway"/>
1678
+ <param pos="0" name="service.vendor" value="Citrix"/>
1679
+ <param pos="0" name="service.family" value="NetScaler"/>
1680
+ <param pos="0" name="service.device" value="Network Management Device"/>
1681
+ <param pos="0" name="service.product" value="NetScaler SDX Gateway"/>
1682
+ </fingerprint>
1683
+
1684
+ <fingerprint pattern="^Citrix NetScaler Insight Center$">
1685
+ <description>Citrix NetScaler Insight Center</description>
1686
+ <example>Citrix NetScaler Insight Center</example>
1687
+ <param pos="0" name="service.vendor" value="Citrix"/>
1688
+ <param pos="0" name="service.family" value="NetScaler"/>
1689
+ <param pos="0" name="service.product" value="NetScaler Insight Center"/>
1690
+ </fingerprint>
1691
+
1692
+ <fingerprint pattern="^Brother ([^\s]+) series$">
1693
+ <description>Brother Printers</description>
1694
+ <example hw.product="MFC-L5900DW">Brother MFC-L5900DW series</example>
1695
+ <param pos="0" name="hw.vendor" value="Brother"/>
1696
+ <param pos="0" name="hw.device" value="Printer"/>
1697
+ <param pos="1" name="hw.product"/>
1698
+ </fingerprint>
1699
+
1386
1700
  <fingerprint pattern="^HP (?:Color )?LaserJet ([^&amp;]+)&amp;">
1387
1701
  <description>HP LaserJet</description>
1388
1702
  <example hw.product="M1536dnf MFP">HP LaserJet M1536dnf MFP&amp;nbsp;&amp;nbsp;&amp;nbsp;1.1.1.1</example>
@@ -1391,6 +1705,7 @@
1391
1705
  <param pos="0" name="hw.device" value="Printer"/>
1392
1706
  <param pos="1" name="hw.product"/>
1393
1707
  </fingerprint>
1708
+
1394
1709
  <fingerprint pattern="^Jamf Pro Login - Jamf Pro v(\S+)$">
1395
1710
  <description>Jamf Pro</description>
1396
1711
  <example service.version="10.14.0-t1563397490">Jamf Pro Login - Jamf Pro v10.14.0-t1563397490</example>
@@ -1399,6 +1714,7 @@
1399
1714
  <param pos="1" name="service.version"/>
1400
1715
  <param pos="0" name="service.cpe23" value="cpe:/a:jamf:jamf:{service.version}"/>
1401
1716
  </fingerprint>
1717
+
1402
1718
  <fingerprint pattern="^Keyper Systems Administration - Login$">
1403
1719
  <description>Keyper Systems Administration - Login</description>
1404
1720
  <example>Keyper Systems Administration - Login</example>
@@ -1406,6 +1722,7 @@
1406
1722
  <param pos="0" name="hw.device" value="Access Control"/>
1407
1723
  <param pos="0" name="hw.product" value="Key Management"/>
1408
1724
  </fingerprint>
1725
+
1409
1726
  <fingerprint pattern="FireEye:\s*$">
1410
1727
  <description>FireEye Investigation Analysis System Appliance</description>
1411
1728
  <example>FireEye:</example>
@@ -1413,6 +1730,7 @@
1413
1730
  <param pos="0" name="hw.product" value="IA Appliance"/>
1414
1731
  <param pos="0" name="hw.device" value="Security Appliance"/>
1415
1732
  </fingerprint>
1733
+
1416
1734
  <fingerprint pattern="^GigaVUE-OS$">
1417
1735
  <description>Gigamon GigaVUE Appliance</description>
1418
1736
  <example>GigaVUE-OS</example>
@@ -1420,6 +1738,7 @@
1420
1738
  <param pos="0" name="hw.device" value="Monitoring"/>
1421
1739
  <param pos="0" name="hw.product" value="GigaVUE"/>
1422
1740
  </fingerprint>
1741
+
1423
1742
  <fingerprint pattern="^Pure Storage Login$">
1424
1743
  <description>Pure Storage Appliance</description>
1425
1744
  <example>Pure Storage Login</example>
@@ -1427,6 +1746,15 @@
1427
1746
  <param pos="0" name="hw.device" value="NAS"/>
1428
1747
  <param pos="0" name="hw.product" value="Appliance"/>
1429
1748
  </fingerprint>
1749
+
1750
+ <fingerprint pattern="^Axonius Cybersecurity Asset Management Platform$">
1751
+ <description>Axonius Appliance</description>
1752
+ <example>Axonius Cybersecurity Asset Management Platform</example>
1753
+ <param pos="0" name="hw.vendor" value="Axonius"/>
1754
+ <param pos="0" name="hw.device" value="Security Appliance"/>
1755
+ <param pos="0" name="hw.product" value="Asset Management"/>
1756
+ </fingerprint>
1757
+
1430
1758
  <fingerprint pattern="^CRESTRON$">
1431
1759
  <description>Crestron Video Conferencing</description>
1432
1760
  <example>CRESTRON</example>
@@ -1436,6 +1764,7 @@
1436
1764
  <param pos="0" name="os.family" value="Linux"/>
1437
1765
  <param pos="0" name="os.device" value="Video Conferencing"/>
1438
1766
  </fingerprint>
1767
+
1439
1768
  <fingerprint pattern="^ELAN Viewer Installation$">
1440
1769
  <description>ELAN Smart Home Controller</description>
1441
1770
  <example>ELAN Viewer Installation</example>
@@ -1445,6 +1774,7 @@
1445
1774
  <param pos="0" name="os.vendor" value="ELAN"/>
1446
1775
  <param pos="0" name="os.family" value="Linux"/>
1447
1776
  </fingerprint>
1777
+
1448
1778
  <fingerprint pattern="^iTach IP2IR Setup and Configuration$">
1449
1779
  <description>iTach IP2IR</description>
1450
1780
  <example>iTach IP2IR Setup and Configuration</example>
@@ -1452,4 +1782,927 @@
1452
1782
  <param pos="0" name="hw.device" value="Device"/>
1453
1783
  <param pos="0" name="hw.product" value="IP2IR"/>
1454
1784
  </fingerprint>
1455
- </fingerprints>
1785
+
1786
+ <fingerprint pattern="^AVTECH Device ManageR$">
1787
+ <description>AVTECH Device ManageR Software</description>
1788
+ <example>AVTECH Device ManageR</example>
1789
+ <param pos="0" name="service.vendor" value="AVTECH"/>
1790
+ <param pos="0" name="service.product" value="Device Manager"/>
1791
+ </fingerprint>
1792
+
1793
+ <fingerprint pattern="^AVTECH Software, Inc\. - Room Alert(?:&amp;reg;)?\s+([a-zA-Z0-9/]+) - Advanced">
1794
+ <description>AVTECH RoomAlert</description>
1795
+ <example hw.product="Room Alert 11E" hw.product.model="11E">AVTECH Software, Inc. - Room Alert 11E - Advanced Computer Room Environment Monitoring, Alerting &amp;amp; Automatic Corrective Action</example>
1796
+ <example hw.product="Room Alert 32E/W" hw.product.model="32E/W">AVTECH Software, Inc. - Room Alert 32E/W - Advanced Computer Room Environment Monitoring, Alerting &amp;amp; Automatic Corrective Action</example>
1797
+ <example hw.product="Room Alert 32E/W" hw.product.model="32E/W">AVTECH Software, Inc. - Room Alert&amp;reg; 32E/W - Advanced Computer Room Monitoring, Alerting &amp;amp; Automatic Corrective Action</example>
1798
+ <param pos="0" name="hw.vendor" value="AVTECH"/>
1799
+ <param pos="0" name="hw.device" value="Monitoring"/>
1800
+ <param pos="1" name="hw.product.model"/>
1801
+ <param pos="0" name="hw.product" value="Room Alert {hw.product.model}"/>
1802
+ </fingerprint>
1803
+
1804
+ <fingerprint pattern="^AVTECH Software, Inc\. - TemPageR\s+([a-zA-Z0-9/]+) - Real-Time">
1805
+ <description>AVTECH TepPageR</description>
1806
+ <example hw.product="TemPageR 3E" hw.product.model="3E">AVTECH Software, Inc. - TemPageR 3E - Real-Time Temperature Monitor For IT &amp;amp; Facilities Environment Monitoring</example>
1807
+ <param pos="0" name="hw.vendor" value="AVTECH"/>
1808
+ <param pos="0" name="hw.device" value="Monitoring"/>
1809
+ <param pos="1" name="hw.product.model"/>
1810
+ <param pos="0" name="hw.product" value="TemPageR {hw.product.model}"/>
1811
+ </fingerprint>
1812
+
1813
+ <fingerprint pattern="^AppDynamics$">
1814
+ <description>Cisco AppDynamics Appliance</description>
1815
+ <example>AppDynamics</example>
1816
+ <param pos="0" name="hw.vendor" value="Cisco"/>
1817
+ <param pos="0" name="hw.device" value="Network Appliance"/>
1818
+ <param pos="0" name="hw.product" value="AppDynamics"/>
1819
+ </fingerprint>
1820
+
1821
+ <fingerprint pattern="^INDECT - CarDetector Configurator$">
1822
+ <description>INDECT Parking Management Console</description>
1823
+ <example>INDECT - CarDetector Configurator</example>
1824
+ <param pos="0" name="hw.vendor" value="INDECT"/>
1825
+ <param pos="0" name="hw.device" value="Network Appliance"/>
1826
+ <param pos="0" name="hw.product" value="CarDetector"/>
1827
+ </fingerprint>
1828
+
1829
+ <fingerprint pattern="^J-Link Pro Webserver$">
1830
+ <description>Segger J-Link Pro</description>
1831
+ <example>J-Link Pro Webserver</example>
1832
+ <param pos="0" name="hw.vendor" value="Segger"/>
1833
+ <param pos="0" name="hw.device" value="JTAG Adapter"/>
1834
+ <param pos="0" name="hw.product" value="J-Link Pro"/>
1835
+ </fingerprint>
1836
+
1837
+ <fingerprint pattern="^OneFS$">
1838
+ <description>EMC Isilon OneFS</description>
1839
+ <example>OneFS</example>
1840
+ <param pos="0" name="os.family" value="FreeBSD"/>
1841
+ <param pos="0" name="os.vendor" value="EMC"/>
1842
+ <param pos="0" name="os.product" value="Isilon OneFS OS"/>
1843
+ <param pos="0" name="hw.vendor" value="EMC"/>
1844
+ <param pos="0" name="hw.device" value="NAS"/>
1845
+ <param pos="0" name="hw.product" value="Isilon OneFS"/>
1846
+ </fingerprint>
1847
+
1848
+ <fingerprint pattern="^Isilon InsightIQ$">
1849
+ <description>EMC Isilon InsightIQ</description>
1850
+ <example>Isilon InsightIQ</example>
1851
+ <param pos="0" name="os.family" value="FreeBSD"/>
1852
+ <param pos="0" name="os.vendor" value="EMC"/>
1853
+ <param pos="0" name="os.product" value="Isilon OneFS OS"/>
1854
+ <param pos="0" name="hw.vendor" value="EMC"/>
1855
+ <param pos="0" name="hw.device" value="Network Appliance"/>
1856
+ <param pos="0" name="hw.product" value="Isilon InsightIQ"/>
1857
+ </fingerprint>
1858
+
1859
+ <fingerprint pattern="^Active Intelligence Engine$">
1860
+ <description>Attivio Active Intelligence Engine</description>
1861
+ <example>Active Intelligence Engine</example>
1862
+ <param pos="0" name="service.vendor" value="Attivio"/>
1863
+ <param pos="0" name="service.product" value="Active Intelligence Engine"/>
1864
+ </fingerprint>
1865
+
1866
+ <fingerprint pattern="^Welcome to WildFly(?: Application Server)?\s+(\d+)">
1867
+ <description>WildFly with version</description>
1868
+ <example service.version="11">Welcome to WildFly 11</example>
1869
+ <example service.version="8">Welcome to WildFly 8</example>
1870
+ <example service.version="8">Welcome to WildFly Application Server 8</example>
1871
+ <param pos="0" name="service.vendor" value="Red Hat"/>
1872
+ <param pos="0" name="service.product" value="WildFly"/>
1873
+ <param pos="1" name="service.version"/>
1874
+ <param pos="0" name="service.cpe23" value="cpe:/a:redhat:wildfly:{service.version}"/>
1875
+ </fingerprint>
1876
+
1877
+ <fingerprint pattern="^Welcome to WildFly$">
1878
+ <description>WildFly with no version</description>
1879
+ <example>Welcome to WildFly</example>
1880
+ <param pos="0" name="service.vendor" value="Red Hat"/>
1881
+ <param pos="0" name="service.product" value="WildFly"/>
1882
+ <param pos="0" name="service.cpe23" value="cpe:/a:redhat:wildfly:-"/>
1883
+ </fingerprint>
1884
+
1885
+ <fingerprint pattern="^Welcome to JBoss Application Server ([\d\.]+)$">
1886
+ <description>JBoss Application Server w/ Version</description>
1887
+ <example service.version="7">Welcome to JBoss Application Server 7</example>
1888
+ <param pos="0" name="service.vendor" value="Red Hat"/>
1889
+ <param pos="0" name="service.product" value="JBoss AS"/>
1890
+ <param pos="1" name="service.version"/>
1891
+ <param pos="0" name="service.cpe23" value="cpe:/a:redhat:jboss_wildfly_application_server:{service.version}"/>
1892
+ </fingerprint>
1893
+
1894
+ <fingerprint pattern="^Welcome to JBoss(?: AS|.trade;)$">
1895
+ <description>JBoss Application Server w/o Version</description>
1896
+ <example>Welcome to JBoss AS</example>
1897
+ <example>Welcome to JBoss&amp;trade;</example>
1898
+ <param pos="0" name="service.vendor" value="Red Hat"/>
1899
+ <param pos="0" name="service.product" value="JBoss AS"/>
1900
+ <param pos="0" name="service.cpe23" value="cpe:/a:redhat:jboss_wildfly_application_server:-"/>
1901
+ </fingerprint>
1902
+
1903
+ <fingerprint pattern="^(?:JBoss )?EAP ([\d\.]+)$">
1904
+ <description>JBoss EAP w/ Version</description>
1905
+ <example service.version="7">JBoss EAP 7</example>
1906
+ <example service.version="7">EAP 7</example>
1907
+ <param pos="0" name="service.vendor" value="Red Hat"/>
1908
+ <param pos="0" name="service.product" value="JBoss EAP"/>
1909
+ <param pos="1" name="service.version"/>
1910
+ <param pos="0" name="service.cpe23" value="cpe:/a:redhat:jboss_enterprise_application_platform:{service.version}"/>
1911
+ </fingerprint>
1912
+
1913
+ <fingerprint pattern="^Welcome to JBoss EAP$">
1914
+ <description>JBoss EAP w/o Version</description>
1915
+ <example>Welcome to JBoss EAP</example>
1916
+ <param pos="0" name="service.vendor" value="Red Hat"/>
1917
+ <param pos="0" name="service.product" value="JBoss EAP"/>
1918
+ <param pos="0" name="service.cpe23" value="cpe:/a:redhat:jboss_enterprise_application_platform:-"/>
1919
+ </fingerprint>
1920
+
1921
+ <fingerprint pattern="^S2 Network Node$">
1922
+ <description>S2 Network Node Appliance</description>
1923
+ <example>S2 Network Node</example>
1924
+ <param pos="0" name="hw.vendor" value="S2"/>
1925
+ <param pos="0" name="hw.device" value="Access Control"/>
1926
+ <param pos="0" name="hw.product" value="Network Node"/>
1927
+ </fingerprint>
1928
+
1929
+ <fingerprint pattern="^(?:S2 Netbox Login|Home - NetBox)$">
1930
+ <description>S2 Netbox Appliance</description>
1931
+ <example>S2 Netbox Login</example>
1932
+ <example>Home - NetBox</example>
1933
+ <param pos="0" name="hw.vendor" value="S2"/>
1934
+ <param pos="0" name="hw.device" value="Access Control"/>
1935
+ <param pos="0" name="hw.product" value="Netbox"/>
1936
+ </fingerprint>
1937
+
1938
+ <fingerprint pattern="^S2 NetVR Login$">
1939
+ <description>S2 NetVR Appliance</description>
1940
+ <example>S2 NetVR Login</example>
1941
+ <param pos="0" name="hw.vendor" value="S2"/>
1942
+ <param pos="0" name="hw.device" value="Access Control"/>
1943
+ <param pos="0" name="hw.product" value="NetVR"/>
1944
+ </fingerprint>
1945
+
1946
+ <fingerprint pattern="^IBM HTTP Server$">
1947
+ <description>IBM HTTP Server w/o Version</description>
1948
+ <example>IBM HTTP Server</example>
1949
+ <param pos="0" name="service.vendor" value="IBM"/>
1950
+ <param pos="0" name="service.product" value="HTTPD"/>
1951
+ <param pos="0" name="service.family" value="Apache"/>
1952
+ </fingerprint>
1953
+
1954
+ <fingerprint pattern="^IBM HTTP Server ([0-9\.]+)$">
1955
+ <description>IBM HTTP Server with Version</description>
1956
+ <example service.version="8.5.5">IBM HTTP Server 8.5.5</example>
1957
+ <param pos="0" name="service.vendor" value="IBM"/>
1958
+ <param pos="0" name="service.product" value="HTTPD"/>
1959
+ <param pos="0" name="service.family" value="Apache"/>
1960
+ <param pos="1" name="service.version"/>
1961
+ </fingerprint>
1962
+
1963
+ <fingerprint pattern="^IBM Tivoli Storage Manager$">
1964
+ <description>IBM Tivoli Storage Manager</description>
1965
+ <example>IBM Tivoli Storage Manager</example>
1966
+ <param pos="0" name="service.vendor" value="IBM"/>
1967
+ <param pos="0" name="service.family" value="Tivoli"/>
1968
+ <param pos="0" name="service.product" value="Tivoli Storage Manager"/>
1969
+ <param pos="0" name="service.cpe23" value="cpe:/a:ibm:tivoli_storage_manager:-"/>
1970
+ </fingerprint>
1971
+
1972
+ <fingerprint pattern="^IBM FlashCopy Manager$">
1973
+ <description>IBM FlashCopy Manager</description>
1974
+ <example>IBM FlashCopy Manager</example>
1975
+ <param pos="0" name="service.vendor" value="IBM"/>
1976
+ <param pos="0" name="service.family" value="Tivoli"/>
1977
+ <param pos="0" name="service.product" value="Tivoli Storage FlashCopy Manager"/>
1978
+ <param pos="0" name="service.cpe23" value="cpe:/a:ibm:tivoli_storage_flashcopy_manager:-"/>
1979
+ </fingerprint>
1980
+
1981
+ <fingerprint pattern="^(?:Jupyter Notebook|JupyterLab|Home Page - Select or create a notebook)$">
1982
+ <description>Jupyter Notebook Server</description>
1983
+ <example>Jupyter Notebook</example>
1984
+ <example>JupyterLab</example>
1985
+ <example>Home Page - Select or create a notebook</example>
1986
+ <param pos="0" name="service.vendor" value="Jupyter"/>
1987
+ <param pos="0" name="service.product" value="Notebook"/>
1988
+ <param pos="0" name="service.cpe23" value="cpe:/a:jupyter:notebook:-"/>
1989
+ </fingerprint>
1990
+
1991
+ <fingerprint pattern="^Redirect to userimage: /control/userimage\.html$">
1992
+ <description>Mobotix Network Camera</description>
1993
+ <example>Redirect to userimage: /control/userimage.html</example>
1994
+ <param pos="0" name="hw.vendor" value="Mobotix"/>
1995
+ <param pos="0" name="hw.device" value="Web cam"/>
1996
+ <param pos="0" name="hw.product" value="IP Camera"/>
1997
+ </fingerprint>
1998
+
1999
+ <fingerprint pattern="^Apache ActiveMQ$">
2000
+ <description>Apache ActiveMQ</description>
2001
+ <example>Apache ActiveMQ</example>
2002
+ <param pos="0" name="service.vendor" value="Apache"/>
2003
+ <param pos="0" name="service.family" value="ActiveMQ"/>
2004
+ <param pos="0" name="service.product" value="ActiveMQ"/>
2005
+ <param pos="0" name="service.cpe23" value="cpe:/a:apache:activemq:-"/>
2006
+ </fingerprint>
2007
+
2008
+ <fingerprint pattern="^Google Wifi$">
2009
+ <description>Google OnHub Router</description>
2010
+ <example>Google Wifi</example>
2011
+ <param pos="0" name="os.vendor" value="Google"/>
2012
+ <param pos="0" name="os.family" value="Linux"/>
2013
+ <param pos="0" name="hw.vendor" value="Google"/>
2014
+ <param pos="0" name="hw.device" value="Router"/>
2015
+ <param pos="0" name="hw.product" value="OnHub"/>
2016
+ </fingerprint>
2017
+
2018
+ <fingerprint pattern="PRTG Network Monitor">
2019
+ <description>PRTG Network Monitor (not anchored)</description>
2020
+ <example>PRTG Network Monitor (WIN-R4C1T8HRRAA)</example>
2021
+ <example>BigCorp PRTG Network Monitor (PRTG2)</example>
2022
+ <param pos="0" name="service.vendor" value="PRTG"/>
2023
+ <param pos="0" name="service.product" value="Network Monitor"/>
2024
+ </fingerprint>
2025
+
2026
+ <fingerprint pattern="^(?:BrightSign&amp;reg;|BrightSign Applications|Diagnostics Web Server)$">
2027
+ <description>BrightSign Controller</description>
2028
+ <example>BrightSign&amp;reg;</example>
2029
+ <example>BrightSign Applications</example>
2030
+ <example>Diagnostics Web Server</example>
2031
+ <param pos="0" name="os.vendor" value="BrightSign"/>
2032
+ <param pos="0" name="os.family" value="Linux"/>
2033
+ <param pos="0" name="hw.vendor" value="BrightSign"/>
2034
+ <param pos="0" name="hw.device" value="Media Server"/>
2035
+ <param pos="0" name="hw.product" value="Digital Signage Player"/>
2036
+ </fingerprint>
2037
+
2038
+ <fingerprint pattern="^Linksys Smart Wi-Fi$">
2039
+ <description>Linksys Smart Wi-Fi</description>
2040
+ <example>Linksys Smart Wi-Fi</example>
2041
+ <param pos="0" name="os.vendor" value="Linksys"/>
2042
+ <param pos="0" name="os.family" value="Linux"/>
2043
+ <param pos="0" name="hw.vendor" value="Linksys"/>
2044
+ <param pos="0" name="hw.device" value="WAP"/>
2045
+ </fingerprint>
2046
+
2047
+ <fingerprint pattern="^(?:DD System Manager|System Manager)$">
2048
+ <description>Data Domain System Manager</description>
2049
+ <example>DD System Manager</example>
2050
+ <example>System Manager</example>
2051
+ <param pos="0" name="os.vendor" value="Data Domain"/>
2052
+ <param pos="0" name="os.product" value="DD OS"/>
2053
+ <param pos="0" name="os.device" value="Storage"/>
2054
+ <param pos="0" name="hw.vendor" value="Data Domain"/>
2055
+ <param pos="0" name="hw.product" value="DD OS"/>
2056
+ <param pos="0" name="hw.device" value="Storage"/>
2057
+ </fingerprint>
2058
+
2059
+ <fingerprint pattern="^SonarQube$">
2060
+ <description>SonarQube</description>
2061
+ <example>SonarQube</example>
2062
+ <param pos="0" name="service.vendor" value="SonarQube"/>
2063
+ <param pos="0" name="service.product" value="SonarQube"/>
2064
+ </fingerprint>
2065
+
2066
+ <fingerprint pattern="^(\S+) - Opengear Management Console$">
2067
+ <description>Opengear Management Console</description>
2068
+ <example host.name="server01">server01 - Opengear Management Console</example>
2069
+ <param pos="0" name="service.vendor" value="Opengear"/>
2070
+ <param pos="0" name="service.product" value="Management Console"/>
2071
+ <param pos="1" name="host.name"/>
2072
+ </fingerprint>
2073
+
2074
+ <fingerprint pattern="^Login \(Virtual Traffic Manager Appliance :: (\S+)\)$">
2075
+ <description>Brocade Virtual Traffic Manager Appliance</description>
2076
+ <example host.name="10.0.0.1">Login (Virtual Traffic Manager Appliance :: 10.0.0.1)</example>
2077
+ <param pos="0" name="hw.vendor" value="Brocade"/>
2078
+ <param pos="0" name="hw.device" value="Network Management Device"/>
2079
+ <param pos="0" name="hw.product" value="Virtual Traffic Manager"/>
2080
+ <param pos="1" name="host.name"/>
2081
+ </fingerprint>
2082
+
2083
+ <fingerprint pattern="^Chronograf$">
2084
+ <description>Chronograf Dashboard</description>
2085
+ <example>Chronograf</example>
2086
+ <param pos="0" name="service.vendor" value="InfluxData"/>
2087
+ <param pos="0" name="service.product" value="Chronograf"/>
2088
+ </fingerprint>
2089
+
2090
+ <fingerprint pattern="^InfluxDB 2.0$">
2091
+ <description>InfluxDB 2.0 Dashboard</description>
2092
+ <example>InfluxDB 2.0</example>
2093
+ <param pos="0" name="service.vendor" value="InfluxData"/>
2094
+ <param pos="0" name="service.product" value="InfluxDB"/>
2095
+ <param pos="0" name="service.version" value="2.0"/>
2096
+ <param pos="0" name="service.cpe23" value="cpe:/a:influxdata:influxdb:2.0"/>
2097
+ </fingerprint>
2098
+
2099
+ <fingerprint pattern="^(?:Sign in . GitLab|GitLab|GitLab is not responding)$">
2100
+ <description>GitLab</description>
2101
+ <example>Sign in · GitLab</example>
2102
+ <example>GitLab is not responding</example>
2103
+ <example>GitLab</example>
2104
+ <example>Sign in | GitLab</example>
2105
+ <param pos="0" name="service.vendor" value="GitLab"/>
2106
+ <param pos="0" name="service.product" value="GitLab"/>
2107
+ <param pos="0" name="service.cpe23" value="cpe:/a:gitlab:gitlab:-"/>
2108
+ </fingerprint>
2109
+
2110
+ <fingerprint pattern="^(?:GitHub Enterprise|Setup GitHub Enterprise|GitHub Enterprise preflight check)$">
2111
+ <description>GitHub Enterprise</description>
2112
+ <example>GitHub Enterprise</example>
2113
+ <example>Setup GitHub Enterprise</example>
2114
+ <example>GitHub Enterprise preflight check</example>
2115
+ <param pos="0" name="service.vendor" value="GitHub"/>
2116
+ <param pos="0" name="service.product" value="Enterprise"/>
2117
+ </fingerprint>
2118
+
2119
+ <fingerprint pattern="^(?:SAP NetWeaver Application Server Java|SAP&amp;#x20;NetWeaver&amp;#x20;Portal|Loading Portal\.\.\.)$">
2120
+ <description>SAP NetWeaver Portal</description>
2121
+ <example>SAP NetWeaver Application Server Java</example>
2122
+ <example>SAP&amp;#x20;NetWeaver&amp;#x20;Portal</example>
2123
+ <example>Loading Portal...</example>
2124
+ <param pos="0" name="service.vendor" value="SAP"/>
2125
+ <param pos="0" name="service.product" value="NetWeaver Web AS"/>
2126
+ <param pos="0" name="service.family" value="NetWeaver"/>
2127
+ </fingerprint>
2128
+
2129
+ <fingerprint pattern="^Lansweeper (?:- Login|First Run Wizard)$">
2130
+ <description>Lansweeper</description>
2131
+ <example>Lansweeper - Login</example>
2132
+ <example>Lansweeper First Run Wizard</example>
2133
+ <param pos="0" name="service.vendor" value="Lansweeper"/>
2134
+ <param pos="0" name="service.product" value="Lansweeper"/>
2135
+ <param pos="0" name="service.cpe23" value="cpe:/a:lansweeper:lansweeper:-"/>
2136
+ </fingerprint>
2137
+
2138
+ <fingerprint pattern="^(?:Celery Flower|Flower)$">
2139
+ <description>Celery Flower Dashboard</description>
2140
+ <example>Celery Flower</example>
2141
+ <example>Flower</example>
2142
+ <param pos="0" name="service.vendor" value="Celery"/>
2143
+ <param pos="0" name="service.product" value="Flower"/>
2144
+ </fingerprint>
2145
+
2146
+ <fingerprint pattern="^(?:Insight)?VM Security Console :: Login$">
2147
+ <description>Rapid7 InsightVM Console</description>
2148
+ <example>InsightVM Security Console :: Login</example>
2149
+ <example>VM Security Console :: Login</example>
2150
+ <param pos="0" name="service.vendor" value="Rapid7"/>
2151
+ <param pos="0" name="service.product" value="InsightVM"/>
2152
+ <param pos="0" name="service.cpe23" value="cpe:/a:rapid7:insightvm:-"/>
2153
+ </fingerprint>
2154
+
2155
+ <fingerprint pattern="^Nexpose Security Console :: Login$">
2156
+ <description>Rapid7 Nexpose Console</description>
2157
+ <example>Nexpose Security Console :: Login</example>
2158
+ <param pos="0" name="service.vendor" value="Rapid7"/>
2159
+ <param pos="0" name="service.product" value="Nexpose"/>
2160
+ <param pos="0" name="service.cpe23" value="cpe:/a:rapid7:nexpose:-"/>
2161
+ </fingerprint>
2162
+
2163
+ <fingerprint pattern="^(?:Login Gateway|Session Error) - Kiwi Syslog Web Access$">
2164
+ <description>Kiwi Syslog Web Access</description>
2165
+ <example>Login Gateway - Kiwi Syslog Web Access</example>
2166
+ <example>Session Error - Kiwi Syslog Web Access</example>
2167
+ <param pos="0" name="service.vendor" value="SolarWinds"/>
2168
+ <param pos="0" name="service.product" value="Kiwi Syslog"/>
2169
+ </fingerprint>
2170
+
2171
+ <fingerprint pattern="^ClickShare Configurator$">
2172
+ <description>ClickShare Wireless Presenter</description>
2173
+ <example>ClickShare Configurator</example>
2174
+ <param pos="0" name="hw.vendor" value="Barco"/>
2175
+ <param pos="0" name="hw.device" value="Wireless Presenter"/>
2176
+ <param pos="0" name="hw.product" value="ClickShare"/>
2177
+ <param pos="0" name="os.vendor" value="Barco"/>
2178
+ <param pos="0" name="os.family" value="ClickShareOS"/>
2179
+ <param pos="0" name="os.device" value="Wireless Presenter"/>
2180
+ </fingerprint>
2181
+
2182
+ <fingerprint pattern="^(IQ\S+) IQEYE\S+: Live Images$">
2183
+ <description>IQinVision IQeye Network Camera</description>
2184
+ <example hw.product="IQA22N">IQA22N IQEYE1A1613: Live Images</example>
2185
+ <example hw.product="IQeye703">IQeye703 IQEYE011750: Live Images</example>
2186
+ <param pos="0" name="hw.vendor" value="IQinVision"/>
2187
+ <param pos="0" name="hw.device" value="Web cam"/>
2188
+ <param pos="1" name="hw.product"/>
2189
+ </fingerprint>
2190
+
2191
+ <fingerprint pattern="^(?:Oracle\(R\) )?Integrated Lights Out Manager$">
2192
+ <description>Oracle iLOM</description>
2193
+ <example>Oracle(R) Integrated Lights Out Manager</example>
2194
+ <example>Integrated Lights Out Manager</example>
2195
+ <param pos="0" name="hw.device" value="Lights Out Management"/>
2196
+ <param pos="0" name="hw.vendor" value="Oracle"/>
2197
+ <param pos="0" name="hw.family" value="ILOM"/>
2198
+ <param pos="0" name="hw.product" value="ILOM"/>
2199
+ <param pos="0" name="os.device" value="Lights Out Management"/>
2200
+ <param pos="0" name="os.vendor" value="Oracle"/>
2201
+ <param pos="0" name="os.family" value="ILOM"/>
2202
+ <param pos="0" name="os.product" value="ILOM"/>
2203
+ </fingerprint>
2204
+
2205
+ <fingerprint pattern="^Genetec - SHARPV\S+$">
2206
+ <description>Genetec AutoVu SharpV ALPR Camera</description>
2207
+ <example>Genetec - SHARPV01111</example>
2208
+ <param pos="0" name="hw.vendor" value="Genetec"/>
2209
+ <param pos="0" name="hw.device" value="Web cam"/>
2210
+ <param pos="0" name="hw.product" value="AutoVu SharpV"/>
2211
+ </fingerprint>
2212
+
2213
+ <fingerprint pattern="^Nexus Repository Manager$">
2214
+ <description>Nexus Repository Manager</description>
2215
+ <example>Nexus Repository Manager</example>
2216
+ <param pos="0" name="service.vendor" value="Apache"/>
2217
+ <param pos="0" name="service.product" value="Nexus Repository Manager"/>
2218
+ </fingerprint>
2219
+
2220
+ <fingerprint pattern="^Apache Flink Web Dashboard$">
2221
+ <description>Apache Flink Web Dashboard</description>
2222
+ <example>Apache Flink Web Dashboard</example>
2223
+ <param pos="0" name="service.vendor" value="Apache"/>
2224
+ <param pos="0" name="service.product" value="Flink"/>
2225
+ <param pos="0" name="service.cpe23" value="cpe:/a:apache:flink:-"/>
2226
+ </fingerprint>
2227
+
2228
+ <fingerprint pattern="^(?:Twonky|Twonky Server|TwonkyMedia|TwonkyMedia server media browser)$">
2229
+ <description>Twonky Server</description>
2230
+ <example>Twonky</example>
2231
+ <example>Twonky Server</example>
2232
+ <example>TwonkyMedia</example>
2233
+ <example>TwonkyMedia server media browser</example>
2234
+ <param pos="0" name="service.vendor" value="Lynx Technology"/>
2235
+ <param pos="0" name="service.product" value="Twonky Media Server"/>
2236
+ </fingerprint>
2237
+
2238
+ <fingerprint pattern="^Spiceworks(?: Server Busy| Help Desk)?$">
2239
+ <description>Spiceworks</description>
2240
+ <example>Spiceworks</example>
2241
+ <example>Spiceworks Help Desk</example>
2242
+ <example>Spiceworks Server Busy</example>
2243
+ <param pos="0" name="service.vendor" value="Spiceworks"/>
2244
+ <param pos="0" name="service.product" value="Help Desk Server"/>
2245
+ </fingerprint>
2246
+
2247
+ <fingerprint pattern="^Network Monitor$">
2248
+ <description>Spiceworks Network Monitor</description>
2249
+ <example>Network Monitor</example>
2250
+ <param pos="0" name="service.vendor" value="Spiceworks"/>
2251
+ <param pos="0" name="service.product" value="Network Monitor"/>
2252
+ </fingerprint>
2253
+
2254
+ <fingerprint pattern="^Spirent TestCenter IQ(?: - (?:Free )?Preview)?$">
2255
+ <description>Spirent TestCenter IQ</description>
2256
+ <example>Spirent TestCenter IQ</example>
2257
+ <example>Spirent TestCenter IQ - Free Preview</example>
2258
+ <example>Spirent TestCenter IQ - Preview</example>
2259
+ <param pos="0" name="service.vendor" value="Spirent Communications"/>
2260
+ <param pos="0" name="service.product" value="TestCenter IQ"/>
2261
+ </fingerprint>
2262
+
2263
+ <fingerprint pattern="^SABnzbd(?: - Log in)?$">
2264
+ <description>SABnzbd Newsreader</description>
2265
+ <example>SABnzbd</example>
2266
+ <example>SABnzbd - Log in</example>
2267
+ <param pos="0" name="service.vendor" value="SABnzbd"/>
2268
+ <param pos="0" name="service.product" value="SABnzbd"/>
2269
+ </fingerprint>
2270
+
2271
+ <fingerprint pattern="^(?:Zabbix|.*: Zabbix)$">
2272
+ <description>Zabbix</description>
2273
+ <example>Zabbix</example>
2274
+ <example>appliance: Zabbix</example>
2275
+ <param pos="0" name="service.vendor" value="Zabbix"/>
2276
+ <param pos="0" name="service.product" value="Zabbix"/>
2277
+ <param pos="0" name="service.cpe23" value="cpe:/a:zabbix:zabbix:-"/>
2278
+ </fingerprint>
2279
+
2280
+ <fingerprint pattern="^(\S+) \(build (\S+)\) - Info$">
2281
+ <description>DD-WRT</description>
2282
+ <example host.name="SubTerraVia-NUC" os.version="36104" os.build="36104">SubTerraVia-NUC (build 36104) - Info</example>
2283
+ <example host.name="DD-WRT" os.version="35030M" os.build="35030M">DD-WRT (build 35030M) - Info</example>
2284
+ <param pos="0" name="os.vendor" value="DD-WRT"/>
2285
+ <param pos="0" name="os.product" value="DD-WRT"/>
2286
+ <param pos="0" name="os.device" value="Router"/>
2287
+ <param pos="1" name="host.name"/>
2288
+ <param pos="2" name="os.version"/>
2289
+ <param pos="2" name="os.build"/>
2290
+ <param pos="0" name="os.cpe23" value="cpe:/o:dd-wrt:dd-wrt:{os.version}"/>
2291
+ </fingerprint>
2292
+
2293
+ <fingerprint pattern="^(?:Apache Druid|Druid Console|Legacy Coordinator Console)$">
2294
+ <description>Apache Druid</description>
2295
+ <example>Apache Druid</example>
2296
+ <example>Legacy Coordinator Console</example>
2297
+ <example>Druid Console</example>
2298
+ <param pos="0" name="service.vendor" value="Apache"/>
2299
+ <param pos="0" name="service.product" value="Druid"/>
2300
+ <param pos="0" name="service.cpe23" value="cpe:/a:apache:druid:-"/>
2301
+ </fingerprint>
2302
+
2303
+ <fingerprint pattern="^Gerrit Code Review$">
2304
+ <description>Gerrit Code Review</description>
2305
+ <example>Gerrit Code Review</example>
2306
+ <param pos="0" name="service.vendor" value="Gerrit"/>
2307
+ <param pos="0" name="service.product" value="Code Review"/>
2308
+ </fingerprint>
2309
+
2310
+ <fingerprint pattern=" - Ignition Gateway$">
2311
+ <description>Inductive Automation Ignition Gateway</description>
2312
+ <example>QA-ROBOT3 - Ignition Gateway</example>
2313
+ <example>Ignition 8.0 Demo Server - Ignition Gateway</example>
2314
+ <param pos="0" name="service.vendor" value="Inductive Automation"/>
2315
+ <param pos="0" name="service.product" value="Ignition Gateway"/>
2316
+ </fingerprint>
2317
+
2318
+ <fingerprint pattern="^Airflow(?: - (?:Login|DAGs))?$">
2319
+ <description>Apache Airflow</description>
2320
+ <example>Airflow</example>
2321
+ <example>Airflow - DAGs</example>
2322
+ <example>Airflow - Login</example>
2323
+ <param pos="0" name="service.vendor" value="Apache"/>
2324
+ <param pos="0" name="service.product" value="Airflow"/>
2325
+ <param pos="0" name="service.cpe23" value="cpe:/a:apache:airflow:-"/>
2326
+ </fingerprint>
2327
+
2328
+ <fingerprint pattern="^Cockroach Console$">
2329
+ <description>CockroachDB Console</description>
2330
+ <example>Cockroach Console</example>
2331
+ <param pos="0" name="service.vendor" value="Cockroach Labs"/>
2332
+ <param pos="0" name="service.product" value="CockroachDB"/>
2333
+ </fingerprint>
2334
+
2335
+ <fingerprint pattern="^(?:openmediavault control panel|OpenMediaVault web administration interface) - (\S+)$">
2336
+ <description>OpenMediaVault</description>
2337
+ <example host.name="raspberrypi">openmediavault control panel - raspberrypi</example>
2338
+ <example host.name="raspberrypi">OpenMediaVault web administration interface - raspberrypi</example>
2339
+ <param pos="0" name="os.vendor" value="OpenMediaVault"/>
2340
+ <param pos="0" name="os.family" value="Linux"/>
2341
+ <param pos="0" name="os.product" value="OpenMediaVault"/>
2342
+ <param pos="0" name="os.device" value="NAS"/>
2343
+ <param pos="1" name="host.name"/>
2344
+ </fingerprint>
2345
+
2346
+ <fingerprint pattern="^Log in to TeamCity .mdash; TeamCity$">
2347
+ <description>TeamCity</description>
2348
+ <example>Log in to TeamCity &amp;mdash; TeamCity</example>
2349
+ <param pos="0" name="service.vendor" value="JetBrains"/>
2350
+ <param pos="0" name="service.product" value="TeamCity"/>
2351
+ <param pos="0" name="service.cpe23" value="cpe:/a:jetbrains:teamcity:-"/>
2352
+ </fingerprint>
2353
+
2354
+ <fingerprint pattern="^Home - CUPS ([\d\.]+)$">
2355
+ <description>Apple CUPS</description>
2356
+ <example service.version="2.3.1">Home - CUPS 2.3.1</example>
2357
+ <param pos="0" name="service.vendor" value="Apple"/>
2358
+ <param pos="0" name="service.product" value="CUPS"/>
2359
+ <param pos="0" name="service.family" value="CUPS"/>
2360
+ <param pos="1" name="service.version"/>
2361
+ <param pos="0" name="service.cpe23" value="cpe:/a:apple:cups:{service.version}"/>
2362
+ </fingerprint>
2363
+
2364
+ <fingerprint pattern="^RUNDECK ENTERPRISE - Login$">
2365
+ <description>Rundeck Enterprise</description>
2366
+ <example>RUNDECK ENTERPRISE - Login</example>
2367
+ <param pos="0" name="service.vendor" value="Rundeck"/>
2368
+ <param pos="0" name="service.product" value="Rundeck Enterprise"/>
2369
+ </fingerprint>
2370
+
2371
+ <fingerprint pattern="^Rundeck - Login$">
2372
+ <description>Rundeck</description>
2373
+ <example>Rundeck - Login</example>
2374
+ <param pos="0" name="service.vendor" value="Rundeck"/>
2375
+ <param pos="0" name="service.product" value="Rundeck"/>
2376
+ <param pos="0" name="service.cpe23" value="cpe:/a:rundeck:rundeck:-"/>
2377
+ </fingerprint>
2378
+
2379
+ <fingerprint pattern="^CrushFTP WebInterface$">
2380
+ <description>CrushFTP Web</description>
2381
+ <example>CrushFTP WebInterface</example>
2382
+ <param pos="0" name="service.vendor" value="CrushFTP"/>
2383
+ <param pos="0" name="service.product" value="CrushFTP Web Interface"/>
2384
+ <param pos="0" name="service.certainty" value="0.5"/>
2385
+ </fingerprint>
2386
+
2387
+ <fingerprint pattern="^OpenEdge Explorer$">
2388
+ <description>Progress OpenEdge Explorer</description>
2389
+ <example>OpenEdge Explorer</example>
2390
+ <param pos="0" name="service.vendor" value="Progress"/>
2391
+ <param pos="0" name="service.product" value="OpenEdge Explorer"/>
2392
+ </fingerprint>
2393
+
2394
+ <fingerprint pattern="^Consul by HashiCorp$">
2395
+ <description>HashiCorp Consul</description>
2396
+ <example>Consul by HashiCorp</example>
2397
+ <param pos="0" name="service.vendor" value="HashiCorp"/>
2398
+ <param pos="0" name="service.product" value="Consul"/>
2399
+ <param pos="0" name="service.cpe23" value="cpe:/a:hashicorp:consul:-"/>
2400
+ </fingerprint>
2401
+
2402
+ <fingerprint pattern="^Redmine(?: 500 error)?$">
2403
+ <description>Redmine</description>
2404
+ <example>Redmine</example>
2405
+ <param pos="0" name="service.vendor" value="Redmine"/>
2406
+ <param pos="0" name="service.product" value="Redmine"/>
2407
+ <param pos="0" name="service.cpe23" value="cpe:/a:redmine:redmine:-"/>
2408
+ </fingerprint>
2409
+
2410
+ <fingerprint pattern="; Nagios Log Server$">
2411
+ <description>Nagios Log Server</description>
2412
+ <example>Database Offline &amp;middot; Nagios Log Server</example>
2413
+ <param pos="0" name="service.vendor" value="Nagios"/>
2414
+ <param pos="0" name="service.product" value="Nagios Log Server"/>
2415
+ </fingerprint>
2416
+
2417
+ <fingerprint pattern="; Nagios Network Analyzer$">
2418
+ <description>Nagios Network Analyzer</description>
2419
+ <example>Login &amp;bull; Nagios Network Analyzer</example>
2420
+ <example>Licensing &amp;bull; Nagios Network Analyzer</example>
2421
+ <param pos="0" name="service.vendor" value="Nagios"/>
2422
+ <param pos="0" name="service.product" value="Nagios Network Analyzer"/>
2423
+ </fingerprint>
2424
+
2425
+ <fingerprint pattern="^Zing Vision$">
2426
+ <description>Zing Vision</description>
2427
+ <example>Zing Vision</example>
2428
+ <param pos="0" name="service.vendor" value="Azul Systems"/>
2429
+ <param pos="0" name="service.product" value="Zing Vision"/>
2430
+ </fingerprint>
2431
+
2432
+ <fingerprint pattern="^Swagger (?:UI|Editor)$">
2433
+ <description>Swagger UI</description>
2434
+ <example>Swagger UI</example>
2435
+ <example>Swagger Editor</example>
2436
+ <param pos="0" name="service.vendor" value="Swagger"/>
2437
+ <param pos="0" name="service.product" value="UI"/>
2438
+ </fingerprint>
2439
+
2440
+ <fingerprint pattern="^Emby$">
2441
+ <description>Emby Media Server</description>
2442
+ <example>Emby</example>
2443
+ <param pos="0" name="service.vendor" value="Emby"/>
2444
+ <param pos="0" name="service.product" value="Web Client"/>
2445
+ <param pos="0" name="service.device" value="Media Server"/>
2446
+ </fingerprint>
2447
+
2448
+ <fingerprint pattern="^WS - Folding@home Work Server$">
2449
+ <description>Folding@home Work Server</description>
2450
+ <example>WS - Folding@home Work Server</example>
2451
+ <param pos="0" name="service.vendor" value="Folding@home"/>
2452
+ <param pos="0" name="service.product" value="Work Server"/>
2453
+ </fingerprint>
2454
+
2455
+ <fingerprint pattern="^Welcome to IBM Lotus Sametime$">
2456
+ <description>IBM Lotus Sametime</description>
2457
+ <example>Welcome to IBM Lotus Sametime</example>
2458
+ <param pos="0" name="service.vendor" value="IBM"/>
2459
+ <param pos="0" name="service.product" value="Lotus Sametime"/>
2460
+ <param pos="0" name="service.certainty" value="0.5"/>
2461
+ <param pos="0" name="service.cpe23" value="cpe:/a:ibm:lotus_sametime:-"/>
2462
+ </fingerprint>
2463
+
2464
+ <fingerprint pattern="^HPE OfficeConnect Switch (.*)\s+(J\S+)$">
2465
+ <description>HPE OfficeConnect Switch</description>
2466
+ <example hw.product="1820 24G" hw.model="J9980A">HPE OfficeConnect Switch 1820 24G J9980A</example>
2467
+ <example hw.product="1820 8G" hw.model="J9979A">HPE OfficeConnect Switch 1820 8G J9979A</example>
2468
+ <example hw.product="1920S 24G 2SFP PoE+ (370W)" hw.model="JL385A">HPE OfficeConnect Switch 1920S 24G 2SFP PoE+ (370W) JL385A</example>
2469
+ <param pos="0" name="hw.vendor" value="HPE"/>
2470
+ <param pos="0" name="hw.device" value="Switch"/>
2471
+ <param pos="1" name="hw.product"/>
2472
+ <param pos="2" name="hw.model"/>
2473
+ </fingerprint>
2474
+
2475
+ <fingerprint pattern="^Device42$">
2476
+ <description>Device42 Virtual Appliance</description>
2477
+ <example>Device42</example>
2478
+ <param pos="0" name="os.vendor" value="Device42"/>
2479
+ <param pos="0" name="os.family" value="Linux"/>
2480
+ <param pos="0" name="os.product" value="Linux"/>
2481
+ <param pos="0" name="os.certainty" value="0.5"/>
2482
+ <param pos="0" name="hw.vendor" value="Device42"/>
2483
+ <param pos="0" name="hw.device" value="Network Appliance"/>
2484
+ <param pos="0" name="hw.product" value="Discovery"/>
2485
+ <param pos="0" name="hw.certainty" value="0.5"/>
2486
+ </fingerprint>
2487
+
2488
+ <fingerprint pattern="^SolarWinds Virtualization Manager$">
2489
+ <description>SolarWinds Virtualization Manager</description>
2490
+ <example>SolarWinds Virtualization Manager</example>
2491
+ <param pos="0" name="service.vendor" value="SolarWinds"/>
2492
+ <param pos="0" name="service.product" value="Virtualization Manager"/>
2493
+ </fingerprint>
2494
+
2495
+ <fingerprint pattern="^(?:Gitea: .*|LocalRepo|TurnKey Gitea)$">
2496
+ <description>Gitea</description>
2497
+ <example>Gitea: Git with a cup of tea</example>
2498
+ <example>TurnKey Gitea</example>
2499
+ <example>LocalRepo</example>
2500
+ <param pos="0" name="service.vendor" value="Gitea"/>
2501
+ <param pos="0" name="service.product" value="Gitea"/>
2502
+ <param pos="0" name="service.certainty" value="0.5"/>
2503
+ <param pos="0" name="service.cpe23" value="cpe:/a:gitea:gitea:-"/>
2504
+ </fingerprint>
2505
+
2506
+ <fingerprint pattern="^Metasploit$">
2507
+ <description>Metasploit Pro (and Community Edition Web UI)</description>
2508
+ <example>Metasploit</example>
2509
+ <param pos="0" name="service.vendor" value="Rapid7"/>
2510
+ <param pos="0" name="service.product" value="Metasploit Pro"/>
2511
+ </fingerprint>
2512
+
2513
+ <fingerprint pattern="^Makito X Decoder$">
2514
+ <description>Haivision Makito X Video Decoder</description>
2515
+ <example>Makito X Decoder</example>
2516
+ <param pos="0" name="hw.vendor" value="Haivision"/>
2517
+ <param pos="0" name="hw.device" value="Video Decoder"/>
2518
+ <param pos="0" name="hw.product" value="Makito X Decoder"/>
2519
+ </fingerprint>
2520
+
2521
+ <fingerprint pattern="^Ceph(?: Dashboard)?$">
2522
+ <description>Ceph Dashboard</description>
2523
+ <example>Ceph Dashboard</example>
2524
+ <example>Ceph</example>
2525
+ <param pos="0" name="service.vendor" value="Ceph"/>
2526
+ <param pos="0" name="service.product" value="Dashboard"/>
2527
+ </fingerprint>
2528
+
2529
+ <fingerprint pattern="^Scrutinizer$">
2530
+ <description>Plixer Scrutinizer</description>
2531
+ <example>Scrutinizer</example>
2532
+ <param pos="0" name="os.vendor" value="Plixer"/>
2533
+ <param pos="0" name="os.product" value="Linux"/>
2534
+ <param pos="0" name="os.certainty" value="0.5"/>
2535
+ <param pos="0" name="hw.vendor" value="Plixer"/>
2536
+ <param pos="0" name="hw.product" value="Scrutinizer"/>
2537
+ <param pos="0" name="hw.certainty" value="0.5"/>
2538
+ </fingerprint>
2539
+
2540
+ <fingerprint pattern="^Hortonworks SmartSense Tool is loading\.\.\.$">
2541
+ <description>Cloudera Hortonworks SmartSense Tool</description>
2542
+ <example>Hortonworks SmartSense Tool is loading...</example>
2543
+ <param pos="0" name="service.vendor" value="Cloudera"/>
2544
+ <param pos="0" name="service.product" value="SmartSense Tool"/>
2545
+ <param pos="0" name="service.certainty" value="0.5"/>
2546
+ </fingerprint>
2547
+
2548
+ <fingerprint pattern="^ownCloud$">
2549
+ <description>ownCloud</description>
2550
+ <example>ownCloud</example>
2551
+ <param pos="0" name="service.vendor" value="ownCloud"/>
2552
+ <param pos="0" name="service.product" value="ownCloud Server"/>
2553
+ <param pos="0" name="service.certainty" value="0.5"/>
2554
+ </fingerprint>
2555
+
2556
+ <fingerprint pattern="^Octopus Deploy$">
2557
+ <description>Octopus Deploy</description>
2558
+ <example>Octopus Deploy</example>
2559
+ <param pos="0" name="service.vendor" value="Octopus"/>
2560
+ <param pos="0" name="service.product" value="Deploy"/>
2561
+ <param pos="0" name="service.certainty" value="0.5"/>
2562
+ </fingerprint>
2563
+
2564
+ <fingerprint pattern="^Android Debug Database$">
2565
+ <description>Android Debug Database</description>
2566
+ <example>Android Debug Database</example>
2567
+ <param pos="0" name="service.vendor" value="Android Debug Database"/>
2568
+ <param pos="0" name="service.product" value="Android Debug Database"/>
2569
+ </fingerprint>
2570
+
2571
+ <fingerprint pattern="^RStudio Sign In$">
2572
+ <description>RStudio</description>
2573
+ <example>RStudio Sign In</example>
2574
+ <param pos="0" name="service.vendor" value="RStudio"/>
2575
+ <param pos="0" name="service.product" value="Connect"/>
2576
+ </fingerprint>
2577
+
2578
+ <fingerprint pattern="^(?:TurnKey Moodle|New Site)$">
2579
+ <description>Moodle</description>
2580
+ <example>TurnKey Moodle</example>
2581
+ <example>New Site</example>
2582
+ <param pos="0" name="service.vendor" value="Moodle"/>
2583
+ <param pos="0" name="service.product" value="Moodle CMS"/>
2584
+ <param pos="0" name="service.certainty" value="0.5"/>
2585
+ </fingerprint>
2586
+
2587
+ <fingerprint pattern="^ArchiveTeam Warrior$">
2588
+ <description>Internet Archive Warrior Appliance</description>
2589
+ <example>ArchiveTeam Warrior</example>
2590
+ <param pos="0" name="os.vendor" value="Internet Archive"/>
2591
+ <param pos="0" name="os.family" value="Linux"/>
2592
+ <param pos="0" name="os.product" value="Linux"/>
2593
+ <param pos="0" name="hw.vendor" value="Internet Archive"/>
2594
+ <param pos="0" name="hw.device" value="Storage Appliance"/>
2595
+ <param pos="0" name="hw.product" value="ArchiveTeam Warrior"/>
2596
+ </fingerprint>
2597
+
2598
+ <fingerprint pattern="^(?:Dashboard|Log In) - Confluence$">
2599
+ <description>Atlassian Confluence</description>
2600
+ <example>Dashboard - Confluence</example>
2601
+ <example>Log In - Confluence</example>
2602
+ <param pos="0" name="service.vendor" value="Atlassian"/>
2603
+ <param pos="0" name="service.product" value="Confluence"/>
2604
+ <param pos="0" name="service.cpe23" value="cpe:/a:atlassian:confluence:-"/>
2605
+ </fingerprint>
2606
+
2607
+ <fingerprint pattern="^System Dashboard - ">
2608
+ <description>Atlassian Jira</description>
2609
+ <example>System Dashboard - Jira</example>
2610
+ <example>System Dashboard - [Dev Test JIRA]</example>
2611
+ <param pos="0" name="service.vendor" value="Atlassian"/>
2612
+ <param pos="0" name="service.product" value="Jira"/>
2613
+ <param pos="0" name="service.cpe23" value="cpe:/a:atlassian:jira:-"/>
2614
+ </fingerprint>
2615
+
2616
+ <fingerprint pattern="^(?:Welcome to XAMPP|XAMPP for Linux)">
2617
+ <description>XAMPP Server</description>
2618
+ <example>Welcome to XAMPP</example>
2619
+ <example>XAMPP for Linux</example>
2620
+ <param pos="0" name="service.vendor" value="XAMPP"/>
2621
+ <param pos="0" name="service.product" value="XAMPP Server"/>
2622
+ </fingerprint>
2623
+
2624
+ <fingerprint pattern="^Greenbone Security (?:Assistant|Manager)">
2625
+ <description>Greenbone Security Scanner</description>
2626
+ <example>Greenbone Security Assistant</example>
2627
+ <example>Greenbone Security Manager</example>
2628
+ <param pos="0" name="service.vendor" value="Greenbone"/>
2629
+ <param pos="0" name="service.product" value="Security Scanner"/>
2630
+ </fingerprint>
2631
+
2632
+ <fingerprint pattern="^Kodi$">
2633
+ <description>Kodi Media Server</description>
2634
+ <example>Kodi</example>
2635
+ <param pos="0" name="service.vendor" value="Kodi"/>
2636
+ <param pos="0" name="service.product" value="Media Server"/>
2637
+ </fingerprint>
2638
+
2639
+ <fingerprint pattern="^(?:Drupal|TurnKey Drupal\d+|Select an installation profile)$">
2640
+ <description>Drupal CMS</description>
2641
+ <example>Drupal</example>
2642
+ <example>TurnKey Drupal8</example>
2643
+ <example>TurnKey Drupal7</example>
2644
+ <example>Select an installation profile</example>
2645
+ <param pos="0" name="service.vendor" value="Drupal"/>
2646
+ <param pos="0" name="service.product" value="CMS"/>
2647
+ </fingerprint>
2648
+
2649
+ <fingerprint pattern="^LibreNMS$">
2650
+ <description>LibreNMS</description>
2651
+ <example>LibreNMS</example>
2652
+ <param pos="0" name="service.vendor" value="LibreNMS"/>
2653
+ <param pos="0" name="service.product" value="LibreNMS"/>
2654
+ <param pos="0" name="service.cpe23" value="cpe:/a:librenms:librenms:-"/>
2655
+ </fingerprint>
2656
+
2657
+ <fingerprint pattern="^HDHomeRun Main Menu$">
2658
+ <description>HDHomeRun</description>
2659
+ <example>HDHomeRun Main Menu</example>
2660
+ <param pos="0" name="os.vendor" value="SiliconDust"/>
2661
+ <param pos="0" name="os.family" value="Linux"/>
2662
+ <param pos="0" name="os.product" value="Linux"/>
2663
+ <param pos="0" name="hw.vendor" value="SiliconDust"/>
2664
+ <param pos="0" name="hw.device" value="Media Server"/>
2665
+ <param pos="0" name="hw.product" value="HDHomeRun"/>
2666
+ </fingerprint>
2667
+
2668
+ <fingerprint pattern="^Kubernetes Dashboard$">
2669
+ <description>Kubernetes Dashboard</description>
2670
+ <example>Kubernetes Dashboard</example>
2671
+ <param pos="0" name="service.vendor" value="Kubernetes"/>
2672
+ <param pos="0" name="service.product" value="Dashboard"/>
2673
+ </fingerprint>
2674
+
2675
+ <fingerprint pattern="^SoundTouch Access Point Setup$">
2676
+ <description>Bose SoundTouch</description>
2677
+ <example>SoundTouch Access Point Setup</example>
2678
+ <param pos="0" name="hw.device" value="Network Audio"/>
2679
+ <param pos="0" name="hw.vendor" value="Bose"/>
2680
+ <param pos="0" name="hw.family" value="SoundTouch"/>
2681
+ <param pos="0" name="os.device" value="Network Audio"/>
2682
+ <param pos="0" name="os.vendor" value="Bose"/>
2683
+ <param pos="0" name="os.product" value="SoundTouch"/>
2684
+ </fingerprint>
2685
+
2686
+ <fingerprint pattern="^(?:embedded )?WS server test page$">
2687
+ <description>Dell iDRAC Websocket Endpoint</description>
2688
+ <example>WS server test page</example>
2689
+ <example>embedded WS server test page</example>
2690
+ <param pos="0" name="hw.device" value="Lights Out Management"/>
2691
+ <param pos="0" name="hw.vendor" value="Dell"/>
2692
+ <param pos="0" name="hw.product" value="iDRAC"/>
2693
+ <param pos="0" name="hw.certainty" value="0.75"/>
2694
+ <param pos="0" name="os.vendor" value="Dell"/>
2695
+ <param pos="0" name="os.product" value="iDRAC Linux"/>
2696
+ <param pos="0" name="os .certainty" value="0.75"/>
2697
+ </fingerprint>
2698
+
2699
+ <fingerprint pattern="^Pulse Connect Secure - SSL">
2700
+ <description>Pulse Secure VPN</description>
2701
+ <example>Pulse Connect Secure - SSL</example>
2702
+ <param pos="0" name="os.vendor" value="Pulse Secure"/>
2703
+ <param pos="0" name="os.family" value="SSL-VPN"/>
2704
+ <param pos="0" name="os.device" value="SSL-VPN"/>
2705
+ <param pos="0" name="os.product" value="SSL-VPN"/>
2706
+ </fingerprint>
2707
+
2708
+ </fingerprints>