recog 2.3.8 → 2.3.9

Sign up to get free protection for your applications and to get access to all the features.
Files changed (67) hide show
  1. checksums.yaml +4 -4
  2. data/.gitignore +6 -0
  3. data/CONTRIBUTING.md +136 -37
  4. data/README.md +18 -16
  5. data/bin/recog_cleanup +16 -0
  6. data/bin/recog_standardize +30 -6
  7. data/identifiers/README.md +9 -0
  8. data/identifiers/hw_device.txt +77 -0
  9. data/identifiers/hw_family.txt +96 -0
  10. data/identifiers/hw_product.txt +328 -0
  11. data/identifiers/os_architecture.txt +6 -6
  12. data/identifiers/os_device.txt +45 -3
  13. data/identifiers/os_family.txt +206 -41
  14. data/identifiers/os_product.txt +238 -17
  15. data/identifiers/service_family.txt +144 -57
  16. data/identifiers/service_product.txt +384 -83
  17. data/identifiers/vendor.txt +553 -68
  18. data/lib/recog/version.rb +1 -1
  19. data/requirements.txt +1 -1
  20. data/xml/apache_modules.xml +292 -5
  21. data/xml/apache_os.xml +41 -2
  22. data/xml/architecture.xml +11 -3
  23. data/xml/dns_versionbind.xml +76 -8
  24. data/xml/favicons.xml +1700 -0
  25. data/xml/ftp_banners.xml +178 -8
  26. data/xml/h323_callresp.xml +112 -12
  27. data/xml/hp_pjl_id.xml +47 -5
  28. data/xml/html_title.xml +1258 -25
  29. data/xml/http_cookies.xml +64 -9
  30. data/xml/http_servers.xml +667 -37
  31. data/xml/http_wwwauth.xml +141 -26
  32. data/xml/imap_banners.xml +19 -13
  33. data/xml/ldap_searchresult.xml +81 -9
  34. data/xml/mdns_device-info_txt.xml +175 -2
  35. data/xml/mdns_workstation_txt.xml +4 -2
  36. data/xml/mysql_banners.xml +134 -7
  37. data/xml/mysql_error.xml +113 -6
  38. data/xml/nntp_banners.xml +10 -2
  39. data/xml/ntp_banners.xml +80 -4
  40. data/xml/operating_system.xml +89 -3
  41. data/xml/pop_banners.xml +30 -31
  42. data/xml/rsh_resp.xml +11 -2
  43. data/xml/rtsp_servers.xml +22 -2
  44. data/xml/sip_banners.xml +35 -4
  45. data/xml/sip_user_agents.xml +29 -2
  46. data/xml/smb_native_lm.xml +10 -2
  47. data/xml/smb_native_os.xml +79 -2
  48. data/xml/smtp_banners.xml +146 -7
  49. data/xml/smtp_debug.xml +6 -4
  50. data/xml/smtp_ehlo.xml +7 -5
  51. data/xml/smtp_expn.xml +13 -4
  52. data/xml/smtp_help.xml +23 -4
  53. data/xml/smtp_mailfrom.xml +5 -2
  54. data/xml/smtp_noop.xml +6 -5
  55. data/xml/smtp_quit.xml +5 -4
  56. data/xml/smtp_rcptto.xml +5 -2
  57. data/xml/smtp_rset.xml +4 -4
  58. data/xml/smtp_turn.xml +4 -4
  59. data/xml/smtp_vrfy.xml +14 -4
  60. data/xml/snmp_sysdescr.xml +731 -24
  61. data/xml/snmp_sysobjid.xml +47 -2
  62. data/xml/ssh_banners.xml +175 -5
  63. data/xml/telnet_banners.xml +266 -15
  64. data/xml/x11_banners.xml +26 -3
  65. data/xml/x509_issuers.xml +30 -6
  66. data/xml/x509_subjects.xml +200 -31
  67. metadata +8 -2
@@ -1,17 +1,18 @@
1
- <?xml version="1.0" encoding="UTF-8"?>
1
+ <?xml version='1.0' encoding='UTF-8'?>
2
2
  <fingerprints protocol="pjl" database_type="service" preference="0.10">
3
3
  <!--
4
4
  For printers running the PJL protocol (usually on 9100/tcp), their type can be requested
5
5
  by the INFO ID command. The printer types (strings surrounded by double quotes) are
6
6
  matched against these patterns to fingerprint the printer.
7
-
8
7
  'preference' notes: The value has been explicitly set to 0.10 due to the very loose
9
8
  regex that is used here.
10
9
  -->
10
+
11
11
  <!--
12
12
  LaserJet and Designjet are registered trademarks of HP. Therefore matching for the keywords
13
13
  is sufficient for asserting all relevant information
14
14
  -->
15
+
15
16
  <fingerprint pattern="(?i)laserjet (.*)(?: series)?">
16
17
  <description>HP JetDirect Printer</description>
17
18
  <example>HP LaserJet 4100 Series</example>
@@ -27,6 +28,7 @@
27
28
  <param pos="0" name="os.family" value="LaserJet"/>
28
29
  <param pos="1" name="os.product"/>
29
30
  </fingerprint>
31
+
30
32
  <fingerprint pattern="(?i)(designjet \S+)">
31
33
  <description>HP Designjet printer</description>
32
34
  <example>hp designjet 110plus</example>
@@ -41,6 +43,7 @@
41
43
  <param pos="0" name="os.device" value="Printer"/>
42
44
  <param pos="1" name="os.product"/>
43
45
  </fingerprint>
46
+
44
47
  <fingerprint pattern="^Xerox ColorQube (\S+)$">
45
48
  <description>Xerox ColorQube Multifunction Printer</description>
46
49
  <example>Xerox ColorQube 8570DN</example>
@@ -51,6 +54,7 @@
51
54
  <param pos="1" name="os.product"/>
52
55
  <param pos="0" name="os.device" value="Multifunction Device"/>
53
56
  </fingerprint>
57
+
54
58
  <fingerprint pattern="^Brother (.+)$">
55
59
  <description>Brother Printer</description>
56
60
  <example>Brother HL-1660e</example>
@@ -58,7 +62,9 @@
58
62
  <param pos="0" name="os.device" value="Printer"/>
59
63
  <param pos="1" name="os.product"/>
60
64
  </fingerprint>
65
+
61
66
  <!-- Assert the product range as a product fingerprint. -->
67
+
62
68
  <fingerprint pattern="^(iR ?\S+)">
63
69
  <description>Canon iR multifunction device</description>
64
70
  <example>iR 3180C EUR</example>
@@ -69,6 +75,7 @@
69
75
  <param pos="0" name="os.device" value="Multifunction Device"/>
70
76
  <param pos="1" name="os.product"/>
71
77
  </fingerprint>
78
+
72
79
  <fingerprint pattern="^(?:Dell (?:Color Laser |Laser Printer )?|(?:Color Laser |Laser Printer ))(\d+(?:n|cn|dn|cdn))(?: Color Laser| Laser Printer)?$">
73
80
  <description>Dell Laser Printer</description>
74
81
  <example>Dell Laser Printer 1710n</example>
@@ -86,6 +93,7 @@
86
93
  <param pos="0" name="os.device" value="Printer"/>
87
94
  <param pos="1" name="os.product"/>
88
95
  </fingerprint>
96
+
89
97
  <fingerprint pattern="^Dell (\d+(?:n|cn|dn|cdn)) MFP$">
90
98
  <description>Dell Laser multifunction device</description>
91
99
  <example>Dell 2135cn MFP</example>
@@ -95,6 +103,7 @@
95
103
  <param pos="0" name="os.device" value="Multifunction Device"/>
96
104
  <param pos="1" name="os.product"/>
97
105
  </fingerprint>
106
+
98
107
  <fingerprint pattern="^HP (\S+ Digital Sender)$">
99
108
  <description>HP Digital Sender scanner</description>
100
109
  <example>HP 9250C Digital Sender</example>
@@ -103,6 +112,7 @@
103
112
  <param pos="0" name="os.family" value="Digital Sender"/>
104
113
  <param pos="1" name="os.product"/>
105
114
  </fingerprint>
115
+
106
116
  <fingerprint pattern="^(?:IBM )?Infoprint(?: Color)? (\S+)$">
107
117
  <description>IBM Infoprint Printer</description>
108
118
  <param pos="0" name="os.vendor" value="IBM"/>
@@ -110,6 +120,7 @@
110
120
  <param pos="0" name="os.device" value="Printer"/>
111
121
  <param pos="1" name="os.product"/>
112
122
  </fingerprint>
123
+
113
124
  <fingerprint pattern="^KM-(.*)$">
114
125
  <description>Konica Minolta printer</description>
115
126
  <example>KM-5050</example>
@@ -117,6 +128,7 @@
117
128
  <param pos="0" name="os.device" value="Printer"/>
118
129
  <param pos="1" name="os.product"/>
119
130
  </fingerprint>
131
+
120
132
  <fingerprint pattern="^(FS-\S+MFP\S*)$">
121
133
  <description>Kyocera Mita Multifunction device</description>
122
134
  <example>FS-C2126MFP</example>
@@ -127,6 +139,7 @@
127
139
  <param pos="0" name="os.family" value="FS"/>
128
140
  <param pos="1" name="os.product"/>
129
141
  </fingerprint>
142
+
130
143
  <fingerprint pattern="^(FS-(?:C)?\d+(?:D|DN))$">
131
144
  <description>Kyocera Mita Printer</description>
132
145
  <example>FS-C8500DN</example>
@@ -137,6 +150,7 @@
137
150
  <param pos="0" name="os.family" value="FS"/>
138
151
  <param pos="1" name="os.product"/>
139
152
  </fingerprint>
153
+
140
154
  <fingerprint pattern="^(TASKalfa \S+)$">
141
155
  <description>Kyocera Mita TASKalfa multifunction device</description>
142
156
  <example>TASKalfa 300ci</example>
@@ -147,6 +161,7 @@
147
161
  <param pos="0" name="os.family" value="TASKalfa"/>
148
162
  <param pos="1" name="os.product"/>
149
163
  </fingerprint>
164
+
150
165
  <fingerprint pattern="^Lexmark (.*)$">
151
166
  <description>Lexmark JetDirect printer</description>
152
167
  <example>Lexmark C910</example>
@@ -156,6 +171,7 @@
156
171
  <param pos="0" name="os.device" value="Printer"/>
157
172
  <param pos="1" name="os.product"/>
158
173
  </fingerprint>
174
+
159
175
  <fingerprint pattern="(?i)^Oce (fx[^\s:]+):.*$">
160
176
  <description>Oce FX series multifunction device</description>
161
177
  <example os.product="fx3000">Oce fx3000:8C5-B29:Ver.D:U0707161719:B0601271355</example>
@@ -164,6 +180,7 @@
164
180
  <param pos="0" name="os.device" value="Multifunction Device"/>
165
181
  <param pos="1" name="os.product"/>
166
182
  </fingerprint>
183
+
167
184
  <fingerprint pattern="(?i)^Oce (VL\S+):.*$">
168
185
  <description>Oce VarioLink multifunction device</description>
169
186
  <example>Oce VL3200:8C5-D92:Ver.B</example>
@@ -172,16 +189,20 @@
172
189
  <param pos="0" name="os.device" value="Multifunction Device"/>
173
190
  <param pos="1" name="os.product"/>
174
191
  </fingerprint>
192
+
175
193
  <!-- IGI is Imagistics International, which was acquired by Oce.
176
194
  I can't find MX-MBX3 or any variant online. -->
195
+
177
196
  <fingerprint pattern="(?i)^OceIGI MX-\S+">
178
197
  <description>Oce-acquired IGI printer</description>
179
198
  <example>OceIGI MX-NBX3 02-Jul-07 14:47</example>
180
199
  <param pos="0" name="os.vendor" value="Oce"/>
181
200
  <param pos="0" name="os.device" value="Printer"/>
182
201
  </fingerprint>
202
+
183
203
  <!-- im3510/4510 is actually a range of model numbers, but asserting a range
184
204
  of models as a product is preferableto asserting nothing. -->
205
+
185
206
  <fingerprint pattern="(?i)^Imagistics (im\S+) (.+)">
186
207
  <description>Oce IM series multifunction device</description>
187
208
  <example>Imagistics im3510/4510 02-Aug-04 10:56</example>
@@ -192,7 +213,9 @@
192
213
  <param pos="1" name="os.product"/>
193
214
  <param pos="2" name="system.time"/>
194
215
  </fingerprint>
216
+
195
217
  <!-- C610 is a series; there are several models with suffixes n, dn, dtn, cdn -->
218
+
196
219
  <fingerprint pattern="^OKI (C\d+)\S*$">
197
220
  <description>Okidata color printer</description>
198
221
  <example>OKI C610</example>
@@ -202,6 +225,7 @@
202
225
  <param pos="0" name="os.device" value="Printer"/>
203
226
  <param pos="1" name="os.product"/>
204
227
  </fingerprint>
228
+
205
229
  <fingerprint pattern="^OKI (MC\d+)\S*$">
206
230
  <description>Okidata multifunction device</description>
207
231
  <example>OKI MC860</example>
@@ -209,6 +233,7 @@
209
233
  <param pos="0" name="os.device" value="Multifunction Device"/>
210
234
  <param pos="1" name="os.product"/>
211
235
  </fingerprint>
236
+
212
237
  <fingerprint pattern="(?i)^RICOH ((?:Aficio|MP|SP) .*)$">
213
238
  <description>Ricoh Aficio Printer</description>
214
239
  <example>RICOH Aficio 2075</example>
@@ -220,8 +245,10 @@
220
245
  <param pos="1" name="os.product"/>
221
246
  <param pos="0" name="os.device" value="Printer"/>
222
247
  </fingerprint>
248
+
223
249
  <!-- NRG was acquired by Ricoh; classify NRG printers as such.
224
250
  Be consistent with snmp_sysdescr.xml. -->
251
+
225
252
  <fingerprint pattern="(?i)^NRG ([MS]P \S+)$">
226
253
  <description>Ricoh NRG printer</description>
227
254
  <example>NRG MP 171</example>
@@ -236,8 +263,10 @@
236
263
  <param pos="0" name="os.device" value="Printer"/>
237
264
  <param pos="1" name="os.product"/>
238
265
  </fingerprint>
266
+
239
267
  <!-- Gestetner == NRG, and was acquired by Ricoh.
240
268
  Assert the range of products as os.product. -->
269
+
241
270
  <fingerprint pattern="(?i)^Gestetner (MP\S+/DSc\S+)$">
242
271
  <description>Ricoh Gestetner multifunction device</description>
243
272
  <example>Gestetner MPC2500/DSc525</example>
@@ -245,6 +274,7 @@
245
274
  <param pos="0" name="os.device" value="Multifunction Device"/>
246
275
  <param pos="1" name="os.product"/>
247
276
  </fingerprint>
277
+
248
278
  <fingerprint pattern="(?i)^HYDRA$">
249
279
  <description>RSI Hydra printer</description>
250
280
  <example>HYDRA</example>
@@ -252,6 +282,7 @@
252
282
  <param pos="0" name="os.device" value="Printer"/>
253
283
  <param pos="0" name="os.product" value="Hydra"/>
254
284
  </fingerprint>
285
+
255
286
  <fingerprint pattern="(?i)^Savin (\S+)$">
256
287
  <description>Savin Printer</description>
257
288
  <example>SAVIN 4075</example>
@@ -259,6 +290,7 @@
259
290
  <param pos="0" name="os.device" value="Printer"/>
260
291
  <param pos="1" name="os.product"/>
261
292
  </fingerprint>
293
+
262
294
  <fingerprint pattern="(?i)^Samsung ((?:SCX|CLX)-\S+) Series$">
263
295
  <description>Samsung multifunction device</description>
264
296
  <example>Samsung SCX-5835_5935 Series</example>
@@ -267,6 +299,7 @@
267
299
  <param pos="0" name="os.device" value="Multifunction Device"/>
268
300
  <param pos="1" name="os.product"/>
269
301
  </fingerprint>
302
+
270
303
  <fingerprint pattern="(?i)^Samsung ((?:ML|CLP)-\S+) Series$">
271
304
  <description>Samsung printer</description>
272
305
  <example>Samsung CLP-680 Series</example>
@@ -275,6 +308,7 @@
275
308
  <param pos="0" name="os.device" value="Printer"/>
276
309
  <param pos="1" name="os.product"/>
277
310
  </fingerprint>
311
+
278
312
  <fingerprint pattern="(?i)^SHARP (\S+-\S+) .*$">
279
313
  <description>Sharp Printer</description>
280
314
  <example>Sharp MX-NBX3 18-Mar-08 10:22</example>
@@ -283,6 +317,7 @@
283
317
  <param pos="0" name="os.device" value="Printer"/>
284
318
  <param pos="1" name="os.product"/>
285
319
  </fingerprint>
320
+
286
321
  <fingerprint pattern="(?i)^Source Technologies (\S+)$">
287
322
  <description>Source Technologies Printer</description>
288
323
  <example>Source Technologies ST-9620</example>
@@ -290,7 +325,9 @@
290
325
  <param pos="0" name="os.device" value="Printer"/>
291
326
  <param pos="1" name="os.product"/>
292
327
  </fingerprint>
328
+
293
329
  <!-- Consistent with snmp_sysdescr.xml -->
330
+
294
331
  <fingerprint pattern="^TOSHIBA (e-STUDIO\S+)(?:\s+.*)?" certainty="0.9">
295
332
  <description>Toshiba e-STUDIO multifunction device</description>
296
333
  <example>TOSHIBA e-STUDIO350 V468Z 20061013</example>
@@ -302,16 +339,16 @@
302
339
  <param pos="0" name="os.device" value="Multifunction Device"/>
303
340
  <param pos="1" name="os.product"/>
304
341
  </fingerprint>
342
+
305
343
  <!-- TODO:
306
344
  Xerox AccXES devices are documented to return:
307
-
308
345
  "<printer name> <release #>"
309
346
  <FF>
310
-
311
347
  In the above, <printer name> is the official product name of the
312
348
  AccXES printer, and <release #> corresponds to a software release
313
349
  number.
314
350
  -->
351
+
315
352
  <fingerprint pattern="^(?:ID=)?Xerox (Phaser \S+)$" certainty="0.9">
316
353
  <description>Xerox Phaser Printer</description>
317
354
  <example>Xerox Phaser 6180MFP-D</example>
@@ -321,6 +358,7 @@
321
358
  <param pos="0" name="os.device" value="Printer"/>
322
359
  <param pos="1" name="os.product"/>
323
360
  </fingerprint>
361
+
324
362
  <fingerprint pattern="^Xerox (WorkCentre .*)$" certainty="0.9">
325
363
  <description>Xerox Workcentre Printer</description>
326
364
  <example>Xerox WorkCentre 7425</example>
@@ -331,6 +369,7 @@
331
369
  <param pos="1" name="os.product"/>
332
370
  <param pos="0" name="os.device" value="Printer"/>
333
371
  </fingerprint>
372
+
334
373
  <fingerprint pattern="^(XC\S+)$" certainty="0.9">
335
374
  <description>Xerox XC Printer</description>
336
375
  <example>XC560</example>
@@ -339,6 +378,7 @@
339
378
  <param pos="0" name="os.device" value="Printer"/>
340
379
  <param pos="1" name="os.product"/>
341
380
  </fingerprint>
381
+
342
382
  <fingerprint pattern="^(DC\S+)$" certainty="0.9">
343
383
  <description>Xerox DocuColor Printer</description>
344
384
  <example>DC250</example>
@@ -347,6 +387,7 @@
347
387
  <param pos="0" name="os.device" value="Printer"/>
348
388
  <param pos="1" name="os.product"/>
349
389
  </fingerprint>
390
+
350
391
  <fingerprint pattern="^(EX\d+-\d+)$" certainty="0.9">
351
392
  <description>Xerox EX Print Server, powered by EFI Fiery</description>
352
393
  <example>EX4112-4127</example>
@@ -355,4 +396,5 @@
355
396
  <param pos="0" name="os.device" value="Print server"/>
356
397
  <param pos="1" name="os.product"/>
357
398
  </fingerprint>
358
- </fingerprints>
399
+
400
+ </fingerprints>
@@ -1,6 +1,7 @@
1
- <?xml version="1.0" encoding="UTF-8"?>
1
+ <?xml version='1.0' encoding='UTF-8'?>
2
2
  <fingerprints matches="html_title" database_type="service" preference="0.90">
3
3
  <!-- HTML Title elements found in HTTP response bodies are matched against these patterns to fingerprint HTTP servers. -->
4
+
4
5
  <fingerprint pattern="^Index of /">
5
6
  <description>Apache HTTPD indexes</description>
6
7
  <example>Index of /</example>
@@ -9,6 +10,7 @@
9
10
  <param pos="0" name="service.family" value="Apache"/>
10
11
  <param pos="0" name="service.cpe23" value="cpe:/a:apache:http_server:-"/>
11
12
  </fingerprint>
13
+
12
14
  <fingerprint pattern="^Test Page for the Nginx HTTP Server on (?:the )?Amazon Linux(?: AMI)?$">
13
15
  <description>Apache HTTPD default installation on Amazon Linux</description>
14
16
  <example>Test Page for the Nginx HTTP Server on the Amazon Linux AMI</example>
@@ -21,6 +23,7 @@
21
23
  <param pos="0" name="os.family" value="Linux"/>
22
24
  <param pos="0" name="os.product" value="Linux AMI"/>
23
25
  </fingerprint>
26
+
24
27
  <fingerprint pattern="^Apache HTTP Server Test Page powered by CentOS$">
25
28
  <description>Apache HTTPD default installation on CentOS</description>
26
29
  <example>Apache HTTP Server Test Page powered by CentOS</example>
@@ -33,6 +36,7 @@
33
36
  <param pos="0" name="os.product" value="Linux"/>
34
37
  <param pos="0" name="os.cpe23" value="cpe:/o:centos:centos:-"/>
35
38
  </fingerprint>
39
+
36
40
  <fingerprint pattern="^Apache2 Debian Default Page: It works$">
37
41
  <description>Apache HTTPD default installation on Debian</description>
38
42
  <example>Apache2 Debian Default Page: It works</example>
@@ -44,6 +48,7 @@
44
48
  <param pos="0" name="os.product" value="Linux"/>
45
49
  <param pos="0" name="os.cpe23" value="cpe:/o:debian:debian_linux:-"/>
46
50
  </fingerprint>
51
+
47
52
  <fingerprint pattern="^Apache2 Ubuntu Default Page: It works$">
48
53
  <description>Apache HTTPD default installation on Ubuntu</description>
49
54
  <example>Apache2 Ubuntu Default Page: It works</example>
@@ -55,6 +60,7 @@
55
60
  <param pos="0" name="os.product" value="Linux"/>
56
61
  <param pos="0" name="os.cpe23" value="cpe:/o:canonical:ubuntu_linux:-"/>
57
62
  </fingerprint>
63
+
58
64
  <fingerprint pattern="^Sample Home Page for APACHEDFT Server$">
59
65
  <description>IBM iSeries Apache Default Page</description>
60
66
  <example>Sample Home Page for APACHEDFT Server</example>
@@ -67,6 +73,7 @@
67
73
  <param pos="0" name="service.family" value="Apache"/>
68
74
  <param pos="0" name="service.cpe23" value="cpe:/a:apache:http_server:-"/>
69
75
  </fingerprint>
76
+
70
77
  <fingerprint pattern="^Apache Tomcat$">
71
78
  <description>Apache Tomcat with no version</description>
72
79
  <example>Apache Tomcat</example>
@@ -75,6 +82,7 @@
75
82
  <param pos="0" name="service.family" value="Tomcat"/>
76
83
  <param pos="0" name="service.cpe23" value="cpe:/a:apache:tomcat:-"/>
77
84
  </fingerprint>
85
+
78
86
  <fingerprint pattern="^Apache Tomcat/(\S+)$">
79
87
  <description>Apache tomcat with minimal version information</description>
80
88
  <example service.version="8.0.32">Apache Tomcat/8.0.32</example>
@@ -84,13 +92,16 @@
84
92
  <param pos="1" name="service.version"/>
85
93
  <param pos="0" name="service.cpe23" value="cpe:/a:apache:tomcat:{service.version}"/>
86
94
  </fingerprint>
95
+
87
96
  <fingerprint pattern="^AiCloud">
88
97
  <description>ASUS AiCloud</description>
89
98
  <example>AiCloud</example>
90
99
  <param pos="0" name="hw.vendor" value="Asus"/>
91
100
  <param pos="0" name="hw.device" value="WAP"/>
92
101
  </fingerprint>
102
+
93
103
  <!-- HiSilicon is OEMd by a number of DVR manufacturers -->
104
+
94
105
  <fingerprint pattern="^DVR Components Download$">
95
106
  <description>Web server found on DVR and webcam servers sourced from HiSilicon</description>
96
107
  <example>DVR Components Download</example>
@@ -100,6 +111,7 @@
100
111
  <param pos="0" name="os.device" value="DVR"/>
101
112
  <param pos="0" name="hw.device" value="DVR"/>
102
113
  </fingerprint>
114
+
103
115
  <fingerprint pattern="^FRITZ!Box$">
104
116
  <description>AVM FRITZ!Box</description>
105
117
  <example>FRITZ!Box</example>
@@ -107,6 +119,7 @@
107
119
  <param pos="0" name="hw.device" value="WAP"/>
108
120
  <param pos="0" name="hw.family" value="FRITZ!Box"/>
109
121
  </fingerprint>
122
+
110
123
  <fingerprint pattern="^FRITZ!Powerline$">
111
124
  <description>AVM FRITZ!Powerline</description>
112
125
  <example>FRITZ!Powerline</example>
@@ -114,13 +127,16 @@
114
127
  <param pos="0" name="hw.device" value="Powerline"/>
115
128
  <param pos="0" name="hw.family" value="FRITZ!Powerline"/>
116
129
  </fingerprint>
117
- <fingerprint pattern="^FRITZ!WLAN Repeater$">
130
+
131
+ <fingerprint pattern="^FRITZ!(?:WLAN )?Repeater$">
118
132
  <description>FRITZ!WLAN Repeater</description>
119
133
  <example>FRITZ!WLAN Repeater</example>
134
+ <example>FRITZ!Repeater</example>
120
135
  <param pos="0" name="hw.vendor" value="AVM"/>
121
136
  <param pos="0" name="hw.device" value="WLAN Repeater"/>
122
137
  <param pos="0" name="hw.family" value="FRITZ!WLAN Repeater"/>
123
138
  </fingerprint>
139
+
124
140
  <fingerprint pattern="^cPanel Login$">
125
141
  <description>cPanel</description>
126
142
  <example>cPanel Login</example>
@@ -128,6 +144,7 @@
128
144
  <param pos="0" name="service.product" value="cPanel"/>
129
145
  <param pos="0" name="service.cpe23" value="cpe:/a:cpanel:cpanel:-"/>
130
146
  </fingerprint>
147
+
131
148
  <fingerprint pattern="^WHM Login$">
132
149
  <description>cPanel Web Host Manager</description>
133
150
  <example>WHM Login</example>
@@ -135,6 +152,7 @@
135
152
  <param pos="0" name="service.product" value="WHM"/>
136
153
  <param pos="0" name="service.cpe23" value="cpe:/a:cpanel:whm:-"/>
137
154
  </fingerprint>
155
+
138
156
  <fingerprint pattern="^Windows CE$">
139
157
  <description>Windows CE</description>
140
158
  <example>Windows CE</example>
@@ -143,6 +161,7 @@
143
161
  <param pos="0" name="os.product" value="Windows CE"/>
144
162
  <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_ce:-"/>
145
163
  </fingerprint>
164
+
146
165
  <fingerprint pattern="^IIS7$">
147
166
  <description>Default IIS 7</description>
148
167
  <example>IIS7</example>
@@ -156,6 +175,7 @@
156
175
  <param pos="0" name="os.product" value="Windows"/>
157
176
  <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows:-"/>
158
177
  </fingerprint>
178
+
159
179
  <fingerprint pattern="^Microsoft Internet Information Services 8">
160
180
  <description>Default IIS 8</description>
161
181
  <example>Microsoft Internet Information Services 8</example>
@@ -169,6 +189,7 @@
169
189
  <param pos="0" name="os.product" value="Windows"/>
170
190
  <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows:-"/>
171
191
  </fingerprint>
192
+
172
193
  <fingerprint pattern="^IIS (\d\.\d) Detailed Error">
173
194
  <description>IIS Detailed Error</description>
174
195
  <example service.version="7.0">IIS 7.0 Detailed Error - 401.2 - Unauthorized</example>
@@ -184,6 +205,7 @@
184
205
  <param pos="0" name="os.product" value="Windows"/>
185
206
  <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows:-"/>
186
207
  </fingerprint>
208
+
187
209
  <fingerprint pattern="^IIS Windows(?: Server)?$">
188
210
  <description>Default IIS</description>
189
211
  <example>IIS Windows</example>
@@ -197,6 +219,7 @@
197
219
  <param pos="0" name="os.product" value="Windows"/>
198
220
  <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows:-"/>
199
221
  </fingerprint>
222
+
200
223
  <fingerprint pattern="^(?:NETIASPOT Management Console|Konsola zarzdzania NETIASPOT)$">
201
224
  <description>Netia Spot wireless router</description>
202
225
  <example>Konsola zarzdzania NETIASPOT</example>
@@ -205,6 +228,7 @@
205
228
  <param pos="0" name="hw.product" value="Spot"/>
206
229
  <param pos="0" name="hw.device" value="WAP"/>
207
230
  </fingerprint>
231
+
208
232
  <fingerprint pattern="^hue personal wireless lighting$">
209
233
  <description>Philips Hue Personal Wireless Lighting</description>
210
234
  <example>hue personal wireless lighting</example>
@@ -212,12 +236,15 @@
212
236
  <param pos="0" name="hw.product" value="Hue"/>
213
237
  <param pos="0" name="hw.device" value="Light Bulb"/>
214
238
  </fingerprint>
239
+
215
240
  <fingerprint pattern="LANDesk\(R\) Management Agent$">
216
241
  <description>LANDesk Management Agent</description>
242
+ <example>LANDesk(R) Management Agent</example>
217
243
  <param pos="0" name="service.vendor" value="LANDesk"/>
218
244
  <param pos="0" name="service.product" value="Management Agent"/>
219
245
  <param pos="0" name="service.family" value="Management Agent"/>
220
246
  </fingerprint>
247
+
221
248
  <fingerprint pattern="^(?:Parallels )?Plesk (?:(?:Onyx|Panel) )?([\d\.]+)$">
222
249
  <description>Plesk web hosting platform with a version</description>
223
250
  <example service.version="12.0.18">Plesk 12.0.18</example>
@@ -229,6 +256,7 @@
229
256
  <param pos="1" name="service.version"/>
230
257
  <param pos="0" name="service.cpe23" value="cpe:/a:parallels:parallels_plesk_panel:{service.version}"/>
231
258
  </fingerprint>
259
+
232
260
  <fingerprint pattern="^(?:Parallels )?Plesk (?:(?:Onyx|Panel) )?([\d\.]+) for Microsoft Windows$">
233
261
  <description>Plesk web hosting platform with a version on Windows</description>
234
262
  <example service.version="12.5.30">Plesk 12.5.30 for Microsoft Windows</example>
@@ -242,6 +270,7 @@
242
270
  <param pos="0" name="os.product" value="Windows"/>
243
271
  <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows:-"/>
244
272
  </fingerprint>
273
+
245
274
  <fingerprint pattern="^(?i)Default (?:Parallels )?Plesk (?:Panel )?Page$">
246
275
  <description>Plesk web hosting platform with no version</description>
247
276
  <example>Default Parallels Plesk Panel Page</example>
@@ -251,12 +280,14 @@
251
280
  <param pos="0" name="service.product" value="Plesk"/>
252
281
  <param pos="0" name="service.cpe23" value="cpe:/a:parallels:parallels_plesk_panel:-"/>
253
282
  </fingerprint>
283
+
254
284
  <fingerprint pattern="^Web Viewer for Samsung DVR$">
255
285
  <description>Samsung DVRs</description>
256
286
  <example>Web Viewer for Samsung DVR</example>
257
287
  <param pos="0" name="hw.vendor" value="Samsung"/>
258
288
  <param pos="0" name="hw.device" value="DVR"/>
259
289
  </fingerprint>
290
+
260
291
  <fingerprint pattern="^(?i)(?:Dell )?Sonicwall - Authentication$">
261
292
  <description>Sonicwall firewalls</description>
262
293
  <example>SonicWall - Authentication</example>
@@ -264,6 +295,7 @@
264
295
  <param pos="0" name="os.device" value="Firewall"/>
265
296
  <param pos="0" name="os.family" value="SonicOS"/>
266
297
  </fingerprint>
298
+
267
299
  <fingerprint pattern="^(.*).nbsp;-.nbsp;Synology.nbsp;DiskStation$">
268
300
  <description>Synology DiskStation</description>
269
301
  <example host.name="DiskStation">DiskStation&amp;nbsp;-&amp;nbsp;Synology&amp;nbsp;DiskStation</example>
@@ -277,6 +309,7 @@
277
309
  <param pos="0" name="os.vendor" value="Synology"/>
278
310
  <param pos="1" name="host.name"/>
279
311
  </fingerprint>
312
+
280
313
  <fingerprint pattern="Synology Web Station!$">
281
314
  <description>Synology with WebStation web hosting</description>
282
315
  <example>Hello! Welcome to Synology Web Station!</example>
@@ -289,6 +322,7 @@
289
322
  <param pos="0" name="os.product" value="DSM"/>
290
323
  <param pos="0" name="os.vendor" value="Synology"/>
291
324
  </fingerprint>
325
+
292
326
  <fingerprint pattern="^Web Filter Block Override$">
293
327
  <description>Fortinet FortiGate/Fortiguard Web Filter</description>
294
328
  <example>Web Filter Block Override</example>
@@ -301,12 +335,15 @@
301
335
  <param pos="0" name="hw.family" value="FortiGate"/>
302
336
  <param pos="0" name="hw.device" value="Firewall"/>
303
337
  </fingerprint>
338
+
304
339
  <!-- Various products by Ubiquiti networks -->
340
+
305
341
  <fingerprint pattern="^Ubiquiti Networks$">
306
342
  <description>Generic products by Ubiquiti Networks</description>
307
343
  <example>Ubiquiti Networks</example>
308
344
  <param pos="0" name="hw.vendor" value="Ubiquiti"/>
309
345
  </fingerprint>
346
+
310
347
  <fingerprint pattern="^UniFi Security Gateway$">
311
348
  <description>Ubiquiti Security Gateway</description>
312
349
  <example>UniFi Security Gateway</example>
@@ -314,17 +351,34 @@
314
351
  <param pos="0" name="hw.device" value="Router"/>
315
352
  <param pos="0" name="hw.product" value="UniFi Security Gateway"/>
316
353
  </fingerprint>
354
+
355
+ <fingerprint pattern="^Ubiquiti EdgeSwitch$">
356
+ <description>Ubiquiti EdgeSwitch</description>
357
+ <example>Ubiquiti EdgeSwitch</example>
358
+ <param pos="0" name="os.vendor" value="Ubiquiti"/>
359
+ <param pos="0" name="os.family" value="Linux"/>
360
+ <param pos="0" name="os.product" value="EdgeOS"/>
361
+ <param pos="0" name="hw.vendor" value="Ubiquiti"/>
362
+ <param pos="0" name="hw.product" value="EdgeSwitch"/>
363
+ </fingerprint>
364
+
317
365
  <fingerprint pattern="^EdgeOS$">
318
366
  <description>Ubiquiti EdgeRouter/EdgeSwitch/etc</description>
319
367
  <example>EdgeOS</example>
368
+ <param pos="0" name="os.vendor" value="Ubiquiti"/>
369
+ <param pos="0" name="os.family" value="Linux"/>
370
+ <param pos="0" name="os.product" value="EdgeOS"/>
320
371
  <param pos="0" name="hw.vendor" value="Ubiquiti"/>
321
372
  </fingerprint>
322
- <fingerprint pattern="^CloudKey$">
373
+
374
+ <fingerprint pattern="^Cloud\s*Key$">
323
375
  <description>Ubiquiti UniFi Cloud Key</description>
324
376
  <example>CloudKey</example>
377
+ <example>Cloud Key</example>
325
378
  <param pos="0" name="hw.vendor" value="Ubiquiti"/>
326
379
  <param pos="0" name="hw.product" value="UniFi Cloud Key"/>
327
380
  </fingerprint>
381
+
328
382
  <fingerprint pattern="^airCube$">
329
383
  <description>Ubiquiti airCube WAP</description>
330
384
  <example>airCube</example>
@@ -332,6 +386,7 @@
332
386
  <param pos="0" name="hw.product" value="airCube"/>
333
387
  <param pos="0" name="hw.device" value="WAP"/>
334
388
  </fingerprint>
389
+
335
390
  <fingerprint pattern="^UniFi Video$">
336
391
  <description>Various UniFi Video web service</description>
337
392
  <example>UniFi Video</example>
@@ -339,14 +394,17 @@
339
394
  <param pos="0" name="service.product" value="UniFi Video"/>
340
395
  <param pos="0" name="service.cpe23" value="cpe:/a:ui:unifi_video:-"/>
341
396
  </fingerprint>
342
- <fingerprint pattern="^UniFi NVR: Software Portal$">
397
+
398
+ <fingerprint pattern="^(?:UniFi NVR: Software Portal|airVision: \[NVR\] - Software Portal)$">
343
399
  <description>UniFi NVR for recording from UniFi video cameras</description>
344
400
  <example>UniFi NVR: Software Portal</example>
401
+ <example>airVision: [NVR] - Software Portal</example>
345
402
  <param pos="0" name="hw.vendor" value="Ubiquiti"/>
346
403
  <param pos="0" name="hw.family" value="UniFi"/>
347
404
  <param pos="0" name="hw.product" value="UniFi NVR"/>
348
405
  <param pos="0" name="hw.device" value="DVR"/>
349
406
  </fingerprint>
407
+
350
408
  <fingerprint pattern="^RomPager Embedded Web Server Toolkit$">
351
409
  <description>Embedded HTTP server used by many vendors and device
352
410
  types, including APC, 3Com, Andover Controls, Cisco VoIP, D-Link,
@@ -357,6 +415,7 @@
357
415
  <param pos="0" name="service.vendor" value="Allegro Software"/>
358
416
  <param pos="0" name="service.product" value="RomPager"/>
359
417
  </fingerprint>
418
+
360
419
  <fingerprint pattern="^RouterOS router configuration page$">
361
420
  <description>MikroTik RouterOS router configuration page</description>
362
421
  <example>RouterOS router configuration page</example>
@@ -367,6 +426,7 @@
367
426
  <param pos="0" name="hw.vendor" value="MikroTik"/>
368
427
  <param pos="0" name="hw.device" value="Router"/>
369
428
  </fingerprint>
429
+
370
430
  <fingerprint pattern="^(?:Welcome to nginx!|Test Page for the Nginx HTTP Server)$">
371
431
  <description>Default OS-agnostic nginx</description>
372
432
  <example>Welcome to nginx!</example>
@@ -376,6 +436,7 @@
376
436
  <param pos="0" name="service.vendor" value="nginx"/>
377
437
  <param pos="0" name="service.cpe23" value="cpe:/a:nginx:nginx:-"/>
378
438
  </fingerprint>
439
+
379
440
  <fingerprint pattern="^Test Page for the Nginx HTTP Server on (?:Fedora|EPEL)$">
380
441
  <description>Default nginx on Fedora</description>
381
442
  <example>Test Page for the Nginx HTTP Server on Fedora</example>
@@ -388,6 +449,7 @@
388
449
  <param pos="0" name="os.product" value="Fedora Core Linux"/>
389
450
  <param pos="0" name="os.cpe23" value="cpe:/o:redhat:fedora_core:-"/>
390
451
  </fingerprint>
452
+
391
453
  <fingerprint pattern="^Welcome to nginx on Debian!$">
392
454
  <description>Default nginx on Debian</description>
393
455
  <example>Welcome to nginx on Debian!</example>
@@ -399,19 +461,34 @@
399
461
  <param pos="0" name="os.product" value="Linux"/>
400
462
  <param pos="0" name="os.cpe23" value="cpe:/o:debian:debian_linux:-"/>
401
463
  </fingerprint>
464
+
402
465
  <fingerprint pattern="^Eagle Eye Networks ">
403
466
  <description>Eagle Eye Networks to manage IoT cameras home webpage</description>
404
467
  <example>Eagle Eye Networks (Local)</example>
405
468
  <param pos="0" name="hw.product" value="Bridge"/>
406
469
  <param pos="0" name="hw.vendor" value="Eagle Eye Networks"/>
407
470
  </fingerprint>
471
+
408
472
  <fingerprint pattern="^Web Local Display Unauthorized$">
409
473
  <description>Eagle Eye Networks to manage IoT cameras unauthorized webpage</description>
410
474
  <example>Web Local Display Unauthorized</example>
411
- <param pos="0" name="hw.product" value=" Bridge"/>
475
+ <param pos="0" name="hw.product" value="Bridge"/>
412
476
  <param pos="0" name="hw.vendor" value="Eagle Eye Networks"/>
413
477
  </fingerprint>
478
+
414
479
  <!-- Netgear Products -->
480
+
481
+ <fingerprint pattern="^NETGEAR ReadyNAS$">
482
+ <description>NETGEAR ReadyNAS</description>
483
+ <example>NETGEAR ReadyNAS</example>
484
+ <param pos="0" name="os.vendor" value="Netgear"/>
485
+ <param pos="0" name="os.product" value="Linux"/>
486
+ <param pos="0" name="hw.vendor" value="Netgear"/>
487
+ <param pos="0" name="hw.device" value="NAS"/>
488
+ <param pos="0" name="hw.family" value="ReadyNAS"/>
489
+ <param pos="0" name="hw.product" value="ReadyNAS"/>
490
+ </fingerprint>
491
+
415
492
  <fingerprint pattern="^(?:NETGEAR|NetGear) ([a-zA-Z0-9\-\+]+)$">
416
493
  <description>Netgear Switches</description>
417
494
  <example hw.product="GS108T">NETGEAR GS108T</example>
@@ -421,6 +498,7 @@
421
498
  <param pos="0" name="hw.device" value="Switch"/>
422
499
  <param pos="1" name="hw.product"/>
423
500
  </fingerprint>
501
+
424
502
  <fingerprint pattern="^(?:NETGEAR|NetGear) Router ([a-zA-Z0-9\-\+]+)$">
425
503
  <description>Netgear Routers</description>
426
504
  <example hw.product="WNR2000v4">NETGEAR Router WNR2000v4</example>
@@ -429,6 +507,7 @@
429
507
  <param pos="0" name="hw.device" value="Router"/>
430
508
  <param pos="1" name="hw.product"/>
431
509
  </fingerprint>
510
+
432
511
  <fingerprint pattern="^Netgear Prosafe Plus Switch$">
433
512
  <description>Netgear Prosafe Plus Switch</description>
434
513
  <example>Netgear Prosafe Plus Switch</example>
@@ -436,6 +515,7 @@
436
515
  <param pos="0" name="hw.device" value="Switch"/>
437
516
  <param pos="0" name="hw.product" value="Prosafe Plus"/>
438
517
  </fingerprint>
518
+
439
519
  <fingerprint pattern="^(.*).nbsp;Configuration and Management$">
440
520
  <description>Digi Terminal Servers</description>
441
521
  <example hw.product="Digi One SP">Digi One SP&amp;nbsp;Configuration and Management</example>
@@ -448,6 +528,7 @@
448
528
  <param pos="0" name="os.device" value="Device Server"/>
449
529
  <param pos="0" name="os.product" value="NET+OS"/>
450
530
  </fingerprint>
531
+
451
532
  <fingerprint pattern="^NPort Web Console$">
452
533
  <description>Moxa NPort Terminal Servers</description>
453
534
  <example>NPort Web Console</example>
@@ -455,6 +536,7 @@
455
536
  <param pos="0" name="hw.device" value="Device Server"/>
456
537
  <param pos="0" name="hw.product" value="NPort"/>
457
538
  </fingerprint>
539
+
458
540
  <fingerprint pattern="^Lantronix (SL[BC].*)$">
459
541
  <description>Lantronix terminal server</description>
460
542
  <example hw.product="SLB882/8824">Lantronix SLB882/8824</example>
@@ -464,6 +546,7 @@
464
546
  <param pos="0" name="hw.device" value="Device Server"/>
465
547
  <param pos="1" name="hw.product"/>
466
548
  </fingerprint>
549
+
467
550
  <fingerprint pattern="^(KN\S+) - Cover$">
468
551
  <description>ATEN KVM over IP</description>
469
552
  <example hw.product="KN4140v">KN4140v - Cover</example>
@@ -472,6 +555,7 @@
472
555
  <param pos="0" name="hw.device" value="KVM"/>
473
556
  <param pos="1" name="hw.product"/>
474
557
  </fingerprint>
558
+
475
559
  <fingerprint pattern="^Ethernet Relay Module$">
476
560
  <description>AVT.pl Ethernet Relay Module</description>
477
561
  <example>Ethernet Relay Module</example>
@@ -479,6 +563,7 @@
479
563
  <param pos="0" name="hw.device" value="Power Relay"/>
480
564
  <param pos="0" name="hw.product" value="Ethernet Relay Module"/>
481
565
  </fingerprint>
566
+
482
567
  <fingerprint pattern="^Inveo Lantick Ethernet Relay Controller$">
483
568
  <description>Inveo Lantick Ethernet Relay Controller</description>
484
569
  <example>Inveo Lantick Ethernet Relay Controller</example>
@@ -486,6 +571,7 @@
486
571
  <param pos="0" name="hw.device" value="Power Relay"/>
487
572
  <param pos="0" name="hw.product" value="Lantick Ethernet Relay Controller"/>
488
573
  </fingerprint>
574
+
489
575
  <fingerprint pattern="^(myUTN(?:-[a-zA-Z0-9]+)?) Control Center$">
490
576
  <description>myUTN Device Server</description>
491
577
  <example hw.product="myUTN-50a">myUTN-50a Control Center</example>
@@ -494,6 +580,7 @@
494
580
  <param pos="0" name="hw.device" value="Device Server"/>
495
581
  <param pos="1" name="hw.product"/>
496
582
  </fingerprint>
583
+
497
584
  <fingerprint pattern="^iCOM Control Board$">
498
585
  <description>Liebert iCOM Cooling Unit Control Board</description>
499
586
  <example>iCOM Control Board</example>
@@ -501,6 +588,7 @@
501
588
  <param pos="0" name="hw.device" value="Environment Control"/>
502
589
  <param pos="0" name="hw.product" value="iCOM Control Panel"/>
503
590
  </fingerprint>
591
+
504
592
  <fingerprint pattern="^Sigma Control 2$">
505
593
  <description>Sigma Control 2 Air Compressor Controls</description>
506
594
  <example>Sigma Control 2</example>
@@ -508,12 +596,14 @@
508
596
  <param pos="0" name="hw.device" value="Environment Control"/>
509
597
  <param pos="0" name="hw.product" value="Sigma Control 2"/>
510
598
  </fingerprint>
599
+
511
600
  <fingerprint pattern="^WebPower$">
512
601
  <description>Eltek Power Controller</description>
513
602
  <example>WebPower</example>
514
603
  <param pos="0" name="hw.vendor" value="Eltek"/>
515
604
  <param pos="0" name="hw.device" value="Power device"/>
516
605
  </fingerprint>
606
+
517
607
  <fingerprint pattern="(Expert Power Control NET \d+x\d+) - (.*)$">
518
608
  <description>Gude Expert Power Control</description>
519
609
  <example host.name="Rack42" hw.product="Expert Power Control NET 2x6">Expert Power Control NET 2x6 - Rack42</example>
@@ -522,6 +612,7 @@
522
612
  <param pos="1" name="hw.product"/>
523
613
  <param pos="2" name="host.name"/>
524
614
  </fingerprint>
615
+
525
616
  <fingerprint pattern="^Sentry Switched CDU$">
526
617
  <description>Sentry Switched CDU</description>
527
618
  <example>Sentry Switched CDU</example>
@@ -529,6 +620,7 @@
529
620
  <param pos="0" name="hw.device" value="Power device"/>
530
621
  <param pos="0" name="hw.product" value="Sentry Switched CDU"/>
531
622
  </fingerprint>
623
+
532
624
  <fingerprint pattern="^Emerson Network Power Rack PDU Card$">
533
625
  <description>Emerson Network Power Rack PDU Card</description>
534
626
  <example>Emerson Network Power Rack PDU Card</example>
@@ -536,6 +628,7 @@
536
628
  <param pos="0" name="hw.device" value="Power device"/>
537
629
  <param pos="0" name="hw.product" value="Rack PDU Card"/>
538
630
  </fingerprint>
631
+
539
632
  <fingerprint pattern="^(.*) IntelliSlot Web(?:/\d+)? Card?$">
540
633
  <description>Emerson Network Power IntelliSlot Web Card and rebrands</description>
541
634
  <example hw.vendor="Emerson Network Power">Emerson Network Power IntelliSlot Web Card</example>
@@ -546,6 +639,7 @@
546
639
  <param pos="0" name="hw.device" value="Power device"/>
547
640
  <param pos="0" name="hw.product" value="IntelliSlot Web Card"/>
548
641
  </fingerprint>
642
+
549
643
  <fingerprint pattern="^ConnectUPS Web/SNMP Card$">
550
644
  <description>ConnectUPS Web/SNMP Card</description>
551
645
  <example>ConnectUPS Web/SNMP Card</example>
@@ -553,6 +647,7 @@
553
647
  <param pos="0" name="hw.device" value="Power device"/>
554
648
  <param pos="0" name="hw.product" value="ConnectUPS Web Card"/>
555
649
  </fingerprint>
650
+
556
651
  <fingerprint pattern="^Calient Technologies Inc\.$">
557
652
  <description>Calient Photonic Switch</description>
558
653
  <example>Calient Technologies Inc.</example>
@@ -563,6 +658,7 @@
563
658
  <param pos="0" name="os.device" value="Switch"/>
564
659
  <param pos="0" name="os.family" value="Linux"/>
565
660
  </fingerprint>
661
+
566
662
  <fingerprint pattern="^Google Fiber Network Box Diagnostics$">
567
663
  <description>Google Fiber Router</description>
568
664
  <example>Google Fiber Network Box Diagnostics</example>
@@ -570,6 +666,7 @@
570
666
  <param pos="0" name="hw.device" value="Router"/>
571
667
  <param pos="0" name="hw.product" value="Fiber Network Box"/>
572
668
  </fingerprint>
669
+
573
670
  <fingerprint pattern="ServerView.* (iRMC S\d+) Web Server">
574
671
  <description>Fujitsu iRMC BMC</description>
575
672
  <example hw.product="iRMC S3" os.product="iRMC S3">ServerView Remote Management iRMC S3 Web Server</example>
@@ -581,9 +678,11 @@
581
678
  <param pos="0" name="os.vendor" value="Fujitsu"/>
582
679
  <param pos="1" name="os.product"/>
583
680
  </fingerprint>
584
- <fingerprint pattern="^Cisco UCS KVM Direct$">
585
- <description>Cisco UCS KVM Direct</description>
681
+
682
+ <fingerprint pattern="^Cisco (?:UCS KVM Direct|KVM)$">
683
+ <description>Cisco KVM</description>
586
684
  <example>Cisco UCS KVM Direct</example>
685
+ <example>Cisco KVM</example>
587
686
  <param pos="0" name="hw.vendor" value="Cisco"/>
588
687
  <param pos="0" name="hw.device" value="Lights Out Management"/>
589
688
  <param pos="0" name="hw.product" value="UCS Manager"/>
@@ -593,6 +692,7 @@
593
692
  <param pos="0" name="os.certainty" value="0.8"/>
594
693
  <param pos="0" name="os.cpe23" value="cpe:/o:cisco:nx-os:-"/>
595
694
  </fingerprint>
695
+
596
696
  <fingerprint pattern="^Cisco UCS Manager$">
597
697
  <description>Cisco UCS Manager</description>
598
698
  <example>Cisco UCS Manager</example>
@@ -605,6 +705,7 @@
605
705
  <param pos="0" name="os.certainty" value="0.8"/>
606
706
  <param pos="0" name="os.cpe23" value="cpe:/o:cisco:nx-os:-"/>
607
707
  </fingerprint>
708
+
608
709
  <fingerprint pattern="^Cisco (?:IMC Login|Integrated Management Controller)">
609
710
  <description>Cisco Integrated Management Controller</description>
610
711
  <example>Cisco Integrated Management Controller</example>
@@ -618,6 +719,26 @@
618
719
  <param pos="0" name="os.family" value="Linux"/>
619
720
  <param pos="0" name="os.product" value="IMC"/>
620
721
  </fingerprint>
722
+
723
+ <fingerprint pattern="^Cisco Meeting Management$">
724
+ <description>Cisco Meeting Management Virtual Appliance</description>
725
+ <example>Cisco Meeting Management</example>
726
+ <param pos="0" name="hw.vendor" value="Cisco"/>
727
+ <param pos="0" name="hw.device" value="Video Conferencing"/>
728
+ <param pos="0" name="hw.product" value="Meeting Management"/>
729
+ <param pos="0" name="os.vendor" value="Cisco"/>
730
+ <param pos="0" name="os.family" value="Linux"/>
731
+ <param pos="0" name="os.product" value="Meeting Management"/>
732
+ </fingerprint>
733
+
734
+ <fingerprint pattern="^Cisco SON$">
735
+ <description>Cisco Crosswork SON</description>
736
+ <example>Cisco SON</example>
737
+ <param pos="0" name="hw.vendor" value="Cisco"/>
738
+ <param pos="0" name="hw.device" value="Network Management Device"/>
739
+ <param pos="0" name="hw.product" value="Crosswork SON Appliance"/>
740
+ </fingerprint>
741
+
621
742
  <fingerprint pattern="^HPE Virtual Connect Manager$">
622
743
  <description>HPE Virtual Connect Manager</description>
623
744
  <example>HPE Virtual Connect Manager</example>
@@ -628,6 +749,7 @@
628
749
  <param pos="0" name="os.device" value="Lights Out Management"/>
629
750
  <param pos="0" name="os.product" value="iLO"/>
630
751
  </fingerprint>
752
+
631
753
  <fingerprint pattern="^HPE BladeSystem Onboard Administrator$">
632
754
  <description>HPE BladeSystem Onboard Administrator</description>
633
755
  <example>HPE BladeSystem Onboard Administrator</example>
@@ -635,6 +757,7 @@
635
757
  <param pos="0" name="hw.vendor" value="HPE"/>
636
758
  <param pos="0" name="hw.product" value="BladeSystem Onboard Administrator"/>
637
759
  </fingerprint>
760
+
638
761
  <fingerprint pattern="^HPE System Management Homepage$">
639
762
  <description>HPE System Management Homepage</description>
640
763
  <example>HPE System Management Homepage</example>
@@ -645,6 +768,7 @@
645
768
  <param pos="0" name="os.device" value="Lights Out Management"/>
646
769
  <param pos="0" name="os.product" value="iLO"/>
647
770
  </fingerprint>
771
+
648
772
  <fingerprint pattern="^HP Integrated Lights-Out$">
649
773
  <description>HP Integrated Lights-Out</description>
650
774
  <example>HP Integrated Lights-Out</example>
@@ -657,6 +781,7 @@
657
781
  <param pos="0" name="os.family" value="iLO"/>
658
782
  <param pos="0" name="os.product" value="iLO"/>
659
783
  </fingerprint>
784
+
660
785
  <fingerprint pattern="^HP Integrated Lights-Out 2$">
661
786
  <description>HP Integrated Lights-Out 2</description>
662
787
  <example>HP Integrated Lights-Out 2</example>
@@ -669,6 +794,7 @@
669
794
  <param pos="0" name="os.family" value="iLO"/>
670
795
  <param pos="0" name="os.product" value="iLO 2"/>
671
796
  </fingerprint>
797
+
672
798
  <fingerprint pattern="^(iLO \d+)$">
673
799
  <description>HP Integrated Lights-Out 3+</description>
674
800
  <example hw.product="iLO 3" os.product="iLO 3">iLO 3</example>
@@ -681,6 +807,7 @@
681
807
  <param pos="0" name="os.family" value="iLO"/>
682
808
  <param pos="1" name="os.product"/>
683
809
  </fingerprint>
810
+
684
811
  <fingerprint pattern="^HPE SimpliVity OmniStack$">
685
812
  <description>HPE SimpliVity OmniStack</description>
686
813
  <example>HPE SimpliVity OmniStack</example>
@@ -688,6 +815,7 @@
688
815
  <param pos="0" name="hw.vendor" value="HPE"/>
689
816
  <param pos="0" name="hw.product" value="SimpliVity OmniStack"/>
690
817
  </fingerprint>
818
+
691
819
  <fingerprint pattern="^HPE (StoreEver \S+)$">
692
820
  <description>HPE StoreEver</description>
693
821
  <example hw.product="StoreEver MSL3040">HPE StoreEver MSL3040</example>
@@ -695,6 +823,7 @@
695
823
  <param pos="0" name="hw.vendor" value="HPE"/>
696
824
  <param pos="1" name="hw.product"/>
697
825
  </fingerprint>
826
+
698
827
  <fingerprint pattern="^Dell OpenManage Switch Administrator$">
699
828
  <description>Dell OpenManage Switch Administrator</description>
700
829
  <example>Dell OpenManage Switch Administrator</example>
@@ -702,6 +831,7 @@
702
831
  <param pos="0" name="hw.device" value="Switch"/>
703
832
  <param pos="0" name="hw.product" value="OpenManage Switch"/>
704
833
  </fingerprint>
834
+
705
835
  <fingerprint pattern="^(\S+)\s+-\s+ProCurve Switch (\S+) \((.*)\)$">
706
836
  <description>HPE ProCurve Switch w/Hostname</description>
707
837
  <example host.name="SW1" hw.product="4204vl" procurve.model="J8770A">SW1 - ProCurve Switch 4204vl (J8770A)</example>
@@ -711,6 +841,7 @@
711
841
  <param pos="1" name="host.name"/>
712
842
  <param pos="3" name="procurve.model"/>
713
843
  </fingerprint>
844
+
714
845
  <fingerprint pattern="^ProCurve Switch (\S+) \((.*)\)$">
715
846
  <description>HPE ProCurve Switch w/o Hostname</description>
716
847
  <example hw.product="2610-24/12PWR" procurve.model="J9086A">ProCurve Switch 2610-24/12PWR (J9086A)</example>
@@ -719,6 +850,7 @@
719
850
  <param pos="1" name="hw.product"/>
720
851
  <param pos="2" name="procurve.model"/>
721
852
  </fingerprint>
853
+
722
854
  <fingerprint pattern="^FlexiPacket Hub$">
723
855
  <description>Nokia Siemens FlexiPacket Hub</description>
724
856
  <example>FlexiPacket Hub</example>
@@ -726,6 +858,7 @@
726
858
  <param pos="0" name="hw.device" value="Switch"/>
727
859
  <param pos="0" name="hw.product" value="FlexiPacket Hub"/>
728
860
  </fingerprint>
861
+
729
862
  <fingerprint pattern="^R&amp;S Instrument VNC desktop$">
730
863
  <description>Rohde and Schwarz Remote Instrument (vnc)</description>
731
864
  <example>R&amp;S Instrument VNC desktop</example>
@@ -735,12 +868,14 @@
735
868
  <param pos="0" name="os.vendor" value="Rohde &amp; Schwarz"/>
736
869
  <param pos="0" name="os.family" value="Linux"/>
737
870
  </fingerprint>
871
+
738
872
  <fingerprint pattern="^Rohde &amp; Schwarz remote instrument$">
739
873
  <description>Rohde and Schwarz Remote Instrument (web admin)</description>
740
874
  <example>Rohde &amp; Schwarz remote instrument</example>
741
875
  <param pos="0" name="hw.device" value="Test Instrument"/>
742
876
  <param pos="0" name="hw.vendor" value="Rohde &amp; Schwarz"/>
743
877
  </fingerprint>
878
+
744
879
  <fingerprint pattern="^EXA$">
745
880
  <description>Keysight EXA Signal Analyzer</description>
746
881
  <example>EXA</example>
@@ -749,6 +884,7 @@
749
884
  <param pos="0" name="hw.product" value="EXA Signal Analyzer"/>
750
885
  <param pos="0" name="os.device" value="Test Instrument"/>
751
886
  </fingerprint>
887
+
752
888
  <fingerprint pattern="^MXA$">
753
889
  <description>Keysight MXA Signal Analyzer</description>
754
890
  <example>MXA</example>
@@ -757,6 +893,7 @@
757
893
  <param pos="0" name="hw.product" value="MXA Signal Analyzer"/>
758
894
  <param pos="0" name="os.device" value="Test Instrument"/>
759
895
  </fingerprint>
896
+
760
897
  <fingerprint pattern="^Paragon-100G$">
761
898
  <description>Calnex Paragon-100G</description>
762
899
  <example>Paragon-100G</example>
@@ -764,6 +901,7 @@
764
901
  <param pos="0" name="hw.device" value="Test Instrument"/>
765
902
  <param pos="0" name="hw.product" value="Paragon-100G"/>
766
903
  </fingerprint>
904
+
767
905
  <fingerprint pattern="^33521A$">
768
906
  <description>Keysight 33521A Waveform Generator</description>
769
907
  <example>33521A</example>
@@ -771,6 +909,7 @@
771
909
  <param pos="0" name="hw.device" value="Test Instrument"/>
772
910
  <param pos="0" name="hw.product" value="33521A Waveform Generator"/>
773
911
  </fingerprint>
912
+
774
913
  <fingerprint pattern="^34972A$">
775
914
  <description>Keysight 34972A Data Logger</description>
776
915
  <example>34972A</example>
@@ -778,6 +917,7 @@
778
917
  <param pos="0" name="hw.device" value="Test Instrument"/>
779
918
  <param pos="0" name="hw.product" value="34972A Data Logger"/>
780
919
  </fingerprint>
920
+
781
921
  <fingerprint pattern="^53230A$">
782
922
  <description>Agilent 53230A Frequency Counter</description>
783
923
  <example>53230A</example>
@@ -785,6 +925,7 @@
785
925
  <param pos="0" name="hw.device" value="Test Instrument"/>
786
926
  <param pos="0" name="hw.product" value="53230A Frequency Counter"/>
787
927
  </fingerprint>
928
+
788
929
  <fingerprint pattern="^Agilent 33220A \((.*)\)$">
789
930
  <description>Agilent 33220A</description>
790
931
  <example agilent.serial="MY44041111">Agilent 33220A (MY44041111)</example>
@@ -793,6 +934,7 @@
793
934
  <param pos="0" name="hw.product" value="33220A Waveform Generator"/>
794
935
  <param pos="1" name="agilent.serial"/>
795
936
  </fingerprint>
937
+
796
938
  <fingerprint pattern="^Agilent N5172B (?:EXG )?(MY\S+)$">
797
939
  <description>Agilent N5172B</description>
798
940
  <example agilent.serial="MY44041111">Agilent N5172B EXG MY44041111</example>
@@ -801,6 +943,7 @@
801
943
  <param pos="0" name="hw.product" value="N5172B Signal Generator"/>
802
944
  <param pos="1" name="agilent.serial"/>
803
945
  </fingerprint>
946
+
804
947
  <fingerprint pattern="^Polycom - Configuration Utility$">
805
948
  <description>Polycom IP Phone</description>
806
949
  <example>Polycom - Configuration Utility</example>
@@ -810,12 +953,14 @@
810
953
  <param pos="0" name="os.vendor" value="Polycom"/>
811
954
  <param pos="0" name="os.product" value="Polycom"/>
812
955
  </fingerprint>
956
+
813
957
  <fingerprint pattern="^Digium Phone Settings$">
814
958
  <description>Digium Phone Settings</description>
815
959
  <example>Digium Phone Settings</example>
816
960
  <param pos="0" name="hw.vendor" value="Digium"/>
817
961
  <param pos="0" name="hw.device" value="VoIP"/>
818
962
  </fingerprint>
963
+
819
964
  <fingerprint pattern="^(SPA\S+) Configuration Utility$">
820
965
  <description>Cisco IP Phone - SPA504G Configuration Utility</description>
821
966
  <example hw.product="SPA504G">SPA504G Configuration Utility</example>
@@ -823,6 +968,7 @@
823
968
  <param pos="0" name="hw.device" value="VoIP"/>
824
969
  <param pos="1" name="hw.product"/>
825
970
  </fingerprint>
971
+
826
972
  <fingerprint pattern="^Cisco (?:SPA Configuration|IP Phone)$">
827
973
  <description>Cisco IP Phone </description>
828
974
  <example>Cisco SPA Configuration</example>
@@ -830,12 +976,14 @@
830
976
  <param pos="0" name="hw.vendor" value="Cisco"/>
831
977
  <param pos="0" name="hw.device" value="VoIP"/>
832
978
  </fingerprint>
979
+
833
980
  <fingerprint pattern="^Cisco IP Camera$">
834
981
  <description>Cisco IP Camera</description>
835
982
  <example>Cisco IP Camera</example>
836
983
  <param pos="0" name="hw.vendor" value="Cisco"/>
837
984
  <param pos="0" name="hw.device" value="Web cam"/>
838
985
  </fingerprint>
986
+
839
987
  <fingerprint pattern="^Cisco TelePresence MCU">
840
988
  <description>Cisco TelePresence MCU - Home page</description>
841
989
  <example>Cisco TelePresence MCU - Home page</example>
@@ -844,6 +992,7 @@
844
992
  <param pos="0" name="hw.device" value="Video Conferencing"/>
845
993
  <param pos="0" name="hw.product" value="TelePresence MCU"/>
846
994
  </fingerprint>
995
+
847
996
  <fingerprint pattern="^Cisco (Nexus \d+\S+)$">
848
997
  <description>Cisco Nexus Virtual Switch</description>
849
998
  <example hw.product="Nexus 1000V">Cisco Nexus 1000V</example>
@@ -851,6 +1000,7 @@
851
1000
  <param pos="0" name="hw.device" value="Switch"/>
852
1001
  <param pos="1" name="hw.product"/>
853
1002
  </fingerprint>
1003
+
854
1004
  <fingerprint pattern="^Cisco Catalyst Switch - Home$">
855
1005
  <description>Cisco Catalyst Switch</description>
856
1006
  <example>Cisco Catalyst Switch - Home</example>
@@ -861,6 +1011,7 @@
861
1011
  <param pos="0" name="os.product" value="CatOS"/>
862
1012
  <param pos="0" name="os.cpe23" value="cpe:/o:cisco:catos:-"/>
863
1013
  </fingerprint>
1014
+
864
1015
  <fingerprint pattern="^Cisco MDS 9000(?: and Nexus 5000)? Management Modules (\d+\.\d+\S+)$">
865
1016
  <description>Cisco MDS 9000/Nexus 5000</description>
866
1017
  <example os.version="7.3(1)D1(1)">Cisco MDS 9000 and Nexus 5000 Management Modules 7.3(1)D1(1)</example>
@@ -876,6 +1027,7 @@
876
1027
  <param pos="1" name="os.version"/>
877
1028
  <param pos="0" name="os.cpe23" value="cpe:/o:cisco:mds_9000:{os.version}"/>
878
1029
  </fingerprint>
1030
+
879
1031
  <fingerprint pattern="^Stealthwatch Management Console$">
880
1032
  <description>Stealthwatch Management Console</description>
881
1033
  <example>Stealthwatch Management Console</example>
@@ -886,6 +1038,7 @@
886
1038
  <param pos="0" name="os.device" value="Security Appliance"/>
887
1039
  <param pos="0" name="os.product" value="Stealthwatch"/>
888
1040
  </fingerprint>
1041
+
889
1042
  <fingerprint pattern="^Cisco vManage$">
890
1043
  <description>Cisco vManage SD-WAN</description>
891
1044
  <example>Cisco vManage</example>
@@ -896,6 +1049,7 @@
896
1049
  <param pos="0" name="os.device" value="SD-WAN Appliance"/>
897
1050
  <param pos="0" name="os.product" value="vManage"/>
898
1051
  </fingerprint>
1052
+
899
1053
  <fingerprint pattern="^Login - Cisco DNA Center$">
900
1054
  <description>Cisco DNA Center Appliance</description>
901
1055
  <example>Login - Cisco DNA Center</example>
@@ -906,6 +1060,7 @@
906
1060
  <param pos="0" name="os.device" value="Network Management Device"/>
907
1061
  <param pos="0" name="os.product" value="DNA Center"/>
908
1062
  </fingerprint>
1063
+
909
1064
  <fingerprint pattern="^Cisco (?:Enterprise )?NFVIS$">
910
1065
  <description>Cisco NFVIS</description>
911
1066
  <example>Cisco NFVIS</example>
@@ -917,16 +1072,20 @@
917
1072
  <param pos="0" name="os.device" value="Network Management Device"/>
918
1073
  <param pos="0" name="os.product" value="NFVIS"/>
919
1074
  </fingerprint>
1075
+
920
1076
  <fingerprint pattern="^Cisco Systems Login$">
921
1077
  <description>Cisco WLC</description>
922
1078
  <example>Cisco Systems Login</example>
923
1079
  <param pos="0" name="os.vendor" value="Cisco"/>
924
1080
  <param pos="0" name="os.device" value="Wireless Controller"/>
925
1081
  <param pos="0" name="os.product" value="Wireless LAN Controller"/>
1082
+ <param pos="0" name="os.cpe23" value="cpe:/o:cisco:wireless_lan_controller:-"/>
926
1083
  <param pos="0" name="hw.vendor" value="Cisco"/>
927
1084
  <param pos="0" name="hw.device" value="Wireless Controller"/>
928
1085
  <param pos="0" name="hw.product" value="Wireless LAN Controller"/>
1086
+ <param pos="0" name="hw.cpe23" value="cpe:/h:cisco:wireless_lan_controller:-"/>
929
1087
  </fingerprint>
1088
+
930
1089
  <fingerprint pattern="^Duo Access Gateway$">
931
1090
  <description>Duo Access Gateway</description>
932
1091
  <example>Duo Access Gateway</example>
@@ -937,6 +1096,7 @@
937
1096
  <param pos="0" name="os.device" value="Security Appliance"/>
938
1097
  <param pos="0" name="os.product" value="Access Gateway"/>
939
1098
  </fingerprint>
1099
+
940
1100
  <fingerprint pattern="^Login - Duo Network Gateway$">
941
1101
  <description>Duo Network Gateway</description>
942
1102
  <example>Login - Duo Network Gateway</example>
@@ -947,6 +1107,7 @@
947
1107
  <param pos="0" name="os.device" value="Security Appliance"/>
948
1108
  <param pos="0" name="os.product" value="Network Gateway"/>
949
1109
  </fingerprint>
1110
+
950
1111
  <fingerprint pattern="^VBrick Rev">
951
1112
  <description>VBrick Rev</description>
952
1113
  <example>VBrick Rev</example>
@@ -957,6 +1118,7 @@
957
1118
  <param pos="0" name="os.device" value="Video Conferencing"/>
958
1119
  <param pos="0" name="os.product" value="VBrick Rev"/>
959
1120
  </fingerprint>
1121
+
960
1122
  <fingerprint pattern="^(LinxVII-\S+) Remote Access$">
961
1123
  <description>LinxVII-5S Data Terminal</description>
962
1124
  <example hw.product="LinxVII-5S">LinxVII-5S Remote Access</example>
@@ -964,12 +1126,14 @@
964
1126
  <param pos="0" name="hw.device" value="Data Terminal"/>
965
1127
  <param pos="1" name="hw.product"/>
966
1128
  </fingerprint>
1129
+
967
1130
  <fingerprint pattern="^Datalogic Mobile Portable$">
968
1131
  <description>Datalogic Mobile Portable</description>
969
1132
  <example>Datalogic Mobile Portable</example>
970
1133
  <param pos="0" name="hw.vendor" value="Datalogic Mobile"/>
971
1134
  <param pos="0" name="hw.device" value="Handheld Scanner"/>
972
1135
  </fingerprint>
1136
+
973
1137
  <fingerprint pattern="^AXIS$">
974
1138
  <description>Axis Communications Web Cam</description>
975
1139
  <example>AXIS</example>
@@ -979,6 +1143,7 @@
979
1143
  <param pos="0" name="os.family" value="Linux"/>
980
1144
  <param pos="0" name="os.device" value="Web cam"/>
981
1145
  </fingerprint>
1146
+
982
1147
  <fingerprint pattern="^Hanwha Techwin$">
983
1148
  <description>Hanwha Techwin IP Camera</description>
984
1149
  <example>Hanwha Techwin</example>
@@ -988,6 +1153,7 @@
988
1153
  <param pos="0" name="os.device" value="Web cam"/>
989
1154
  <param pos="0" name="os.family" value="Linux"/>
990
1155
  </fingerprint>
1156
+
991
1157
  <fingerprint pattern="^(WV-NS\S+) Network Camera$">
992
1158
  <description>WV-NS202A Network Camera</description>
993
1159
  <example hw.product="WV-NS202A">WV-NS202A Network Camera</example>
@@ -999,15 +1165,29 @@
999
1165
  <param pos="0" name="os.device" value="Web cam"/>
1000
1166
  <param pos="0" name="os.family" value="Linux"/>
1001
1167
  </fingerprint>
1002
- <fingerprint pattern="^KACE Systems Management Appliance">
1168
+
1169
+ <fingerprint pattern="^KACE (?:Systems Management|Systems Deployment|Remote Site) Appliance">
1003
1170
  <description>KACE Systems Management Appliances</description>
1004
1171
  <example>KACE Systems Management Appliance Service Center</example>
1005
1172
  <example>KACE Systems Management Appliance Administrator Console</example>
1173
+ <example>KACE Systems Deployment Appliance</example>
1174
+ <example>KACE Remote Site Appliance</example>
1006
1175
  <param pos="0" name="hw.vendor" value="KACE"/>
1007
1176
  <param pos="0" name="hw.device" value="Support Appliance"/>
1008
1177
  <param pos="0" name="os.vendor" value="KACE"/>
1009
1178
  <param pos="0" name="os.family" value="FreeBSD"/>
1010
1179
  </fingerprint>
1180
+
1181
+ <fingerprint pattern="^K1000 Service Center$">
1182
+ <description>Dell K1000 Systems Management Appliances (KACE)</description>
1183
+ <example>K1000 Service Center</example>
1184
+ <param pos="0" name="hw.vendor" value="KACE"/>
1185
+ <param pos="0" name="hw.device" value="Support Appliance"/>
1186
+ <param pos="0" name="hw.product" value="K1000"/>
1187
+ <param pos="0" name="os.vendor" value="KACE"/>
1188
+ <param pos="0" name="os.family" value="FreeBSD"/>
1189
+ </fingerprint>
1190
+
1011
1191
  <fingerprint pattern="Portal.*Powered by BOMGAR$">
1012
1192
  <description>Bomgar Appliances</description>
1013
1193
  <example>Remote Support Portal | Powered by BOMGAR</example>
@@ -1017,6 +1197,7 @@
1017
1197
  <param pos="0" name="os.vendor" value="Bomgar"/>
1018
1198
  <param pos="0" name="os.family" value="Linux"/>
1019
1199
  </fingerprint>
1200
+
1020
1201
  <fingerprint pattern="^XRoads Network Appliance Administration$">
1021
1202
  <description>XRoads SD-WAN Network Appliance </description>
1022
1203
  <example>XRoads Network Appliance Administration</example>
@@ -1025,7 +1206,9 @@
1025
1206
  <param pos="0" name="os.vendor" value="XRoads"/>
1026
1207
  <param pos="0" name="os.family" value="Linux"/>
1027
1208
  </fingerprint>
1209
+
1028
1210
  <!-- An OEM of the Quantum Corporation SuperLoader 3 -->
1211
+
1029
1212
  <fingerprint pattern="^On Board Remote Management$">
1030
1213
  <description>PowerVault 124T Tape Library</description>
1031
1214
  <example>On Board Remote Management</example>
@@ -1034,6 +1217,7 @@
1034
1217
  <param pos="0" name="hw.product" value="PowerVault 124T"/>
1035
1218
  <param pos="0" name="os.vendor" value="Dell"/>
1036
1219
  </fingerprint>
1220
+
1037
1221
  <fingerprint pattern="^(HD-RX-\S+)$">
1038
1222
  <description>Crestron Multiformat Receivers</description>
1039
1223
  <example hw.product="HD-RX-201-C-E">HD-RX-201-C-E</example>
@@ -1042,6 +1226,7 @@
1042
1226
  <param pos="1" name="hw.product"/>
1043
1227
  <param pos="0" name="os.vendor" value="Crestron"/>
1044
1228
  </fingerprint>
1229
+
1045
1230
  <fingerprint pattern="^Lencore Sound Manager 2$">
1046
1231
  <description>Lencore Sound Manager 2</description>
1047
1232
  <example>Lencore Sound Manager 2</example>
@@ -1051,7 +1236,9 @@
1051
1236
  <param pos="0" name="os.vendor" value="i.LON"/>
1052
1237
  <param pos="0" name="os.product" value="SmartServer"/>
1053
1238
  </fingerprint>
1239
+
1054
1240
  <!-- Various ICS/OT -->
1241
+
1055
1242
  <fingerprint pattern="^CTI (25\S+) Main Menu$">
1056
1243
  <description>Siemens 257x Ethernet Adapter (CTI Branded)</description>
1057
1244
  <example hw.product="2572-A">CTI 2572-A Main Menu</example>
@@ -1060,6 +1247,7 @@
1060
1247
  <param pos="1" name="hw.product"/>
1061
1248
  <param pos="0" name="os.vendor" value="Siemens"/>
1062
1249
  </fingerprint>
1250
+
1063
1251
  <fingerprint pattern="^(25\S+) Ethernet TCP/IP Module$">
1064
1252
  <description>Siemens 257x Ethernet Adapter</description>
1065
1253
  <example hw.product="2572-B">2572-B Ethernet TCP/IP Module</example>
@@ -1068,6 +1256,7 @@
1068
1256
  <param pos="1" name="hw.product"/>
1069
1257
  <param pos="0" name="os.vendor" value="Siemens"/>
1070
1258
  </fingerprint>
1259
+
1071
1260
  <fingerprint pattern="^ECOM100 Main$">
1072
1261
  <description>DirectLOGIC DL205 communication module</description>
1073
1262
  <example>ECOM100 Main</example>
@@ -1076,6 +1265,7 @@
1076
1265
  <param pos="0" name="hw.product" value="ECOM100"/>
1077
1266
  <param pos="0" name="os.vendor" value="DirectLOGIC"/>
1078
1267
  </fingerprint>
1268
+
1079
1269
  <fingerprint pattern="^(1794-\S+) FLEX Ethernet Adapter$">
1080
1270
  <description>Allen-Bradley 1794-AENTR FLEX Ethernet Adapter</description>
1081
1271
  <example hw.product="1794-AENTR">1794-AENTR FLEX Ethernet Adapter</example>
@@ -1084,6 +1274,7 @@
1084
1274
  <param pos="1" name="hw.product"/>
1085
1275
  <param pos="0" name="os.vendor" value="Allen-Bradley"/>
1086
1276
  </fingerprint>
1277
+
1087
1278
  <fingerprint pattern="^Anybus-CC EtherNet/IP$">
1088
1279
  <description>Anybus-CC EtherNet/IP</description>
1089
1280
  <example>Anybus-CC EtherNet/IP</example>
@@ -1092,6 +1283,7 @@
1092
1283
  <param pos="0" name="hw.product" value="CC EtherNet/IP"/>
1093
1284
  <param pos="0" name="os.vendor" value="AnyBus"/>
1094
1285
  </fingerprint>
1286
+
1095
1287
  <fingerprint pattern="^Symmetry 2DBC">
1096
1288
  <description>AMAG Technology Symmetry EN-2DBC Access Controller</description>
1097
1289
  <example>Symmetry 2DBC STD APP (EN2DBC_00_EF_4F)</example>
@@ -1100,6 +1292,7 @@
1100
1292
  <param pos="0" name="hw.product" value="Symmetry EN-2DBC"/>
1101
1293
  <param pos="0" name="os.vendor" value="AMAG Technology"/>
1102
1294
  </fingerprint>
1295
+
1103
1296
  <fingerprint pattern="^(1747-\S+) Home Page$">
1104
1297
  <description>Allen-Bradley 1747-LXXX SLC 5/05 Controller</description>
1105
1298
  <example hw.product="1747-L551">1747-L551 Home Page</example>
@@ -1110,6 +1303,7 @@
1110
1303
  <param pos="1" name="hw.product"/>
1111
1304
  <param pos="0" name="os.vendor" value="Allen-Bradley"/>
1112
1305
  </fingerprint>
1306
+
1113
1307
  <fingerprint pattern="^(1766-\S+) (B/\S+)$">
1114
1308
  <description>Allen-Bradley 1766-L32BXB PLC</description>
1115
1309
  <example hw.product="1766-L32BXB" os.product="1766-L32BXB" os.version="B/11.00">1766-L32BXB B/11.00</example>
@@ -1121,6 +1315,7 @@
1121
1315
  <param pos="1" name="os.product"/>
1122
1316
  <param pos="2" name="os.version"/>
1123
1317
  </fingerprint>
1318
+
1124
1319
  <fingerprint pattern="^PLC-5 Ethernet Base Page$">
1125
1320
  <description>PLC-5 Ethernet Interface Module</description>
1126
1321
  <example>PLC-5 Ethernet Base Page</example>
@@ -1131,6 +1326,7 @@
1131
1326
  <param pos="0" name="os.device" value="PLC"/>
1132
1327
  <param pos="0" name="os.product" value="PLC-5"/>
1133
1328
  </fingerprint>
1329
+
1134
1330
  <fingerprint pattern="^(1761-NET-\S+)$">
1135
1331
  <description>Allen-Bradley Ethernet Module</description>
1136
1332
  <example hw.product="1761-NET-EN">1761-NET-EN</example>
@@ -1140,6 +1336,7 @@
1140
1336
  <param pos="1" name="hw.product"/>
1141
1337
  <param pos="0" name="os.vendor" value="Allen-Bradley"/>
1142
1338
  </fingerprint>
1339
+
1143
1340
  <fingerprint pattern="^(1785-\S+) Ethernet Base Page$">
1144
1341
  <description>Allen-Bradley 1785 Ethernet Module</description>
1145
1342
  <example hw.product="1785-ENET">1785-ENET Ethernet Base Page</example>
@@ -1148,6 +1345,7 @@
1148
1345
  <param pos="1" name="hw.product"/>
1149
1346
  <param pos="0" name="os.vendor" value="Allen-Bradley"/>
1150
1347
  </fingerprint>
1348
+
1151
1349
  <fingerprint pattern="^NFT S7 - DALI-Gateway\(Ethernet\)$">
1152
1350
  <description>NFT DALI S7 Ethernet Module</description>
1153
1351
  <example>NFT S7 - DALI-Gateway(Ethernet)</example>
@@ -1156,6 +1354,7 @@
1156
1354
  <param pos="0" name="hw.product" value="S7 DALI Gateway"/>
1157
1355
  <param pos="0" name="os.vendor" value="NFT"/>
1158
1356
  </fingerprint>
1357
+
1159
1358
  <fingerprint pattern="^IBHLink S7\+\+$">
1160
1359
  <description>IBHsofte IBHLink S7++</description>
1161
1360
  <example>IBHLink S7++</example>
@@ -1164,13 +1363,16 @@
1164
1363
  <param pos="0" name="hw.product" value="IBHLink S7++"/>
1165
1364
  <param pos="0" name="os.vendor" value="IBHsofte"/>
1166
1365
  </fingerprint>
1366
+
1167
1367
  <!-- Software and Appliances -->
1368
+
1168
1369
  <fingerprint pattern="^S7/S5 OPC Server$">
1169
1370
  <description>Softing Industrial S7/S5 OPC Server</description>
1170
1371
  <example>S7/S5 OPC Server</example>
1171
1372
  <param pos="0" name="service.vendor" value="Softing"/>
1172
1373
  <param pos="0" name="service.product" value="S7/S5 OPC Server"/>
1173
1374
  </fingerprint>
1375
+
1174
1376
  <fingerprint pattern="^Nessus$">
1175
1377
  <description>Nessus</description>
1176
1378
  <example>Nessus</example>
@@ -1178,6 +1380,7 @@
1178
1380
  <param pos="0" name="service.product" value="Nessus"/>
1179
1381
  <param pos="0" name="service.cpe23" value="cpe:/a:tenable:nessus:-"/>
1180
1382
  </fingerprint>
1383
+
1181
1384
  <fingerprint pattern="^Tenable Appliance$">
1182
1385
  <description>Tenable Appliance</description>
1183
1386
  <example>Tenable Appliance</example>
@@ -1185,6 +1388,7 @@
1185
1388
  <param pos="0" name="hw.device" value="Security Appliance"/>
1186
1389
  <param pos="0" name="hw.product" value="Tenable Appliance"/>
1187
1390
  </fingerprint>
1391
+
1188
1392
  <fingerprint pattern="^(?:Welcome to Citrix )?XenServer ([0-9\.]+)$">
1189
1393
  <description>XenServer</description>
1190
1394
  <example service.version="7.2.0">Welcome to Citrix XenServer 7.2.0</example>
@@ -1194,18 +1398,21 @@
1194
1398
  <param pos="1" name="service.version"/>
1195
1399
  <param pos="0" name="service.cpe23" value="cpe:/a:citrix:xenserver:{service.version}"/>
1196
1400
  </fingerprint>
1401
+
1197
1402
  <fingerprint pattern="^RabbitMQ Management$">
1198
1403
  <description>RabbitMQ Management</description>
1199
1404
  <example>RabbitMQ Management</example>
1200
1405
  <param pos="0" name="service.vendor" value="RabbitMQ"/>
1201
1406
  <param pos="0" name="service.product" value="Management Server"/>
1202
1407
  </fingerprint>
1408
+
1203
1409
  <fingerprint pattern="^Statistics Report for HAProxy$">
1204
1410
  <description>HAProxy Stats Server</description>
1205
1411
  <example>Statistics Report for HAProxy</example>
1206
1412
  <param pos="0" name="service.vendor" value="HAProxy"/>
1207
1413
  <param pos="0" name="service.product" value="HAProxy Stats Server"/>
1208
1414
  </fingerprint>
1415
+
1209
1416
  <fingerprint pattern="^Open Manage&amp;trade;$">
1210
1417
  <description>Dell OpenManage Admin</description>
1211
1418
  <example>Open Manage&amp;trade;</example>
@@ -1213,6 +1420,7 @@
1213
1420
  <param pos="0" name="service.product" value="OpenManage"/>
1214
1421
  <param pos="0" name="service.cpe23" value="cpe:/a:dell:openmanage:-"/>
1215
1422
  </fingerprint>
1423
+
1216
1424
  <fingerprint pattern="^TightVNC desktop \[(.*)\]$">
1217
1425
  <description>TightVNC Web Server</description>
1218
1426
  <example host.name="teller01">TightVNC desktop [teller01]</example>
@@ -1221,6 +1429,7 @@
1221
1429
  <param pos="0" name="service.cpe23" value="cpe:/a:tightvnc:tightvnc:-"/>
1222
1430
  <param pos="1" name="host.name"/>
1223
1431
  </fingerprint>
1432
+
1224
1433
  <fingerprint pattern="^noVNC$">
1225
1434
  <description>noVNC Web Server</description>
1226
1435
  <example>noVNC</example>
@@ -1228,6 +1437,7 @@
1228
1437
  <param pos="0" name="service.product" value="noVNC"/>
1229
1438
  <param pos="0" name="service.cpe23" value="cpe:/a:novnc:novnc:-"/>
1230
1439
  </fingerprint>
1440
+
1231
1441
  <fingerprint pattern="^.* \[Jenkins\]$">
1232
1442
  <description>Jenkins Customized Dashboard</description>
1233
1443
  <example>Continuous Integrations [Jenkins]</example>
@@ -1236,24 +1446,36 @@
1236
1446
  <param pos="0" name="service.product" value="Jenkins"/>
1237
1447
  <param pos="0" name="service.cpe23" value="cpe:/a:jenkins:jenkins:-"/>
1238
1448
  </fingerprint>
1449
+
1239
1450
  <fingerprint pattern="^Shell In A Box$">
1240
1451
  <description>Shell In A Box (OSS Project)</description>
1241
1452
  <example>Shell In A Box</example>
1242
1453
  <param pos="0" name="service.vendor" value="ShellInABox"/>
1243
1454
  <param pos="0" name="service.product" value="ShellInABox"/>
1244
1455
  </fingerprint>
1456
+
1245
1457
  <fingerprint pattern="^AgilentLicenseManagerService Service$">
1246
1458
  <description>Agilent License Manager Service</description>
1247
1459
  <example>AgilentLicenseManagerService Service</example>
1248
1460
  <param pos="0" name="service.vendor" value="Agilent"/>
1249
1461
  <param pos="0" name="service.product" value="License Manager"/>
1250
1462
  </fingerprint>
1251
- <fingerprint pattern="^Red Hat OpenStack Platform Director$">
1463
+
1464
+ <fingerprint pattern="^Red Hat(?:.reg;)? OpenStack (?:Platform )?Director$">
1252
1465
  <description>Red Hat OpenStack Platform Director</description>
1253
1466
  <example>Red Hat OpenStack Platform Director</example>
1467
+ <example>Red Hat&amp;reg; OpenStack Director</example>
1254
1468
  <param pos="0" name="service.vendor" value="Red Hat"/>
1255
1469
  <param pos="0" name="service.product" value="Open Stack Platform Director"/>
1256
1470
  </fingerprint>
1471
+
1472
+ <fingerprint pattern="^Login - OpenStack Dashboard$">
1473
+ <description>OpenStack Dashboard</description>
1474
+ <example>Login - OpenStack Dashboard</example>
1475
+ <param pos="0" name="service.vendor" value="OpenStack"/>
1476
+ <param pos="0" name="service.product" value="Dashboard"/>
1477
+ </fingerprint>
1478
+
1257
1479
  <fingerprint pattern="^splunkd$">
1258
1480
  <description>Splunk HTTP server used in the web interface, forwarders, indexers and more</description>
1259
1481
  <example>splunkd</example>
@@ -1261,24 +1483,30 @@
1261
1483
  <param pos="0" name="service.product" value="Splunk"/>
1262
1484
  <param pos="0" name="service.cpe23" value="cpe:/a:splunk:splunk:-"/>
1263
1485
  </fingerprint>
1264
- <fingerprint pattern="^VMware Horizon$">
1486
+
1487
+ <fingerprint pattern="^VMware(?: Horizon(?: View)?|.nbsp;Horizon| View Portal)?$">
1265
1488
  <description>VMware Horizon</description>
1266
1489
  <example>VMware Horizon</example>
1267
- <param pos="0" name="service.vendor" value="VMWare"/>
1490
+ <example>VMware Horizon View</example>
1491
+ <example>VMware&amp;nbsp;Horizon</example>
1492
+ <example>VMware View Portal</example>
1493
+ <param pos="0" name="service.vendor" value="VMware"/>
1268
1494
  <param pos="0" name="service.product" value="Horizon"/>
1269
1495
  <param pos="0" name="service.cpe23" value="cpe:/a:vmware:horizon:-"/>
1270
1496
  </fingerprint>
1497
+
1271
1498
  <fingerprint pattern="^Welcome to VMware Site Recovery Manager$">
1272
1499
  <description>VMware SRM</description>
1273
1500
  <example>Welcome to VMware Site Recovery Manager</example>
1274
- <param pos="0" name="os.vendor" value="VMWare"/>
1501
+ <param pos="0" name="os.vendor" value="VMware"/>
1275
1502
  <param pos="0" name="os.product" value="Linux"/>
1276
- <param pos="0" name="hw.vendor" value="VMWare"/>
1503
+ <param pos="0" name="hw.vendor" value="VMware"/>
1277
1504
  <param pos="0" name="hw.device" value="Appliance"/>
1278
1505
  <param pos="0" name="hw.product" value="Site Recovery Manager"/>
1279
- <param pos="0" name="service.vendor" value="VMWare"/>
1506
+ <param pos="0" name="service.vendor" value="VMware"/>
1280
1507
  <param pos="0" name="service.product" value="Site Recovery Manager"/>
1281
1508
  </fingerprint>
1509
+
1282
1510
  <fingerprint pattern="^Graylog Web Interface$">
1283
1511
  <description>Graylog Web Interface</description>
1284
1512
  <example>Graylog Web Interface</example>
@@ -1286,14 +1514,17 @@
1286
1514
  <param pos="0" name="service.product" value="Graylog"/>
1287
1515
  <param pos="0" name="service.cpe23" value="cpe:/a:graylog:graylog:-"/>
1288
1516
  </fingerprint>
1517
+
1289
1518
  <!-- The 'vendor' here has changed over time -->
1290
- <fingerprint pattern="^Kibana$">
1519
+
1520
+ <fingerprint pattern="^(?:Elastic\s+)?Kibana$">
1291
1521
  <description>Kibana Web Interface</description>
1292
1522
  <example>Kibana</example>
1293
- <param pos="0" name="service.vendor" value="Kibana"/>
1523
+ <example>Elastic Kibana</example>
1524
+ <param pos="0" name="service.vendor" value="Elastic"/>
1294
1525
  <param pos="0" name="service.product" value="Kibana"/>
1295
- <param pos="0" name="service.cpe23" value="cpe:/a:elasticsearch:kibana:-"/>
1296
1526
  </fingerprint>
1527
+
1297
1528
  <fingerprint pattern="^Grafana$">
1298
1529
  <description>Grafana Web Interface</description>
1299
1530
  <example>Grafana</example>
@@ -1301,6 +1532,15 @@
1301
1532
  <param pos="0" name="service.product" value="Grafana"/>
1302
1533
  <param pos="0" name="service.cpe23" value="cpe:/a:grafana:grafana:-"/>
1303
1534
  </fingerprint>
1535
+
1536
+ <fingerprint pattern="^Prometheus Time Series Collection and Processing Server$">
1537
+ <description>Prometheus Web Interface</description>
1538
+ <example>Prometheus Time Series Collection and Processing Server</example>
1539
+ <param pos="0" name="service.vendor" value="Prometheus"/>
1540
+ <param pos="0" name="service.product" value="Prometheus"/>
1541
+ <param pos="0" name="service.cpe23" value="cpe:/a:prometheus:prometheus:-"/>
1542
+ </fingerprint>
1543
+
1304
1544
  <fingerprint pattern="^Symantec Endpoint Protection Manager$">
1305
1545
  <description>Symantec Endpoint Protection Manager</description>
1306
1546
  <example>Symantec Endpoint Protection Manager</example>
@@ -1308,18 +1548,14 @@
1308
1548
  <param pos="0" name="service.product" value="Endpoint Protection Manager"/>
1309
1549
  <param pos="0" name="service.cpe23" value="cpe:/a:symantec:endpoint_protection_manager:-"/>
1310
1550
  </fingerprint>
1311
- <fingerprint pattern="^Login Gateway - Kiwi Syslog Web Access$">
1312
- <description>Kiwi Syslog Web Access</description>
1313
- <example>Login Gateway - Kiwi Syslog Web Access</example>
1314
- <param pos="0" name="service.vendor" value="Solarwinds"/>
1315
- <param pos="0" name="service.product" value="Kiwi Syslog Web Access"/>
1316
- </fingerprint>
1551
+
1317
1552
  <fingerprint pattern="^Hadoop Administration$">
1318
1553
  <description>Hadoop Administration Web Service</description>
1319
1554
  <example>Hadoop Administration</example>
1320
1555
  <param pos="0" name="service.vendor" value="Hadoop"/>
1321
1556
  <param pos="0" name="service.product" value="Hadoop Web Admin"/>
1322
1557
  </fingerprint>
1558
+
1323
1559
  <fingerprint pattern="^ManageEngine OpManager$">
1324
1560
  <description>ManageEngine OpManager</description>
1325
1561
  <example>ManageEngine OpManager</example>
@@ -1327,8 +1563,17 @@
1327
1563
  <param pos="0" name="service.product" value="OpManager"/>
1328
1564
  <param pos="0" name="service.cpe23" value="cpe:/a:manageengine:opmanager:-"/>
1329
1565
  </fingerprint>
1566
+
1567
+ <fingerprint pattern="^ManageEngine ADAudit Plus$">
1568
+ <description>ManageEngineADAudit Plus</description>
1569
+ <example>ManageEngine ADAudit Plus</example>
1570
+ <param pos="0" name="service.vendor" value="ManageEngine"/>
1571
+ <param pos="0" name="service.product" value="ADAudit Plus"/>
1572
+ </fingerprint>
1573
+
1330
1574
  <fingerprint pattern="^(ScanFront \d.+)Web Menu$">
1331
1575
  <!-- no space between the product model and "Web Menu" in the title -->
1576
+
1332
1577
  <description>Canon ScanFront</description>
1333
1578
  <example os.product="ScanFront 220" hw.product="ScanFront 220">ScanFront 220Web Menu</example>
1334
1579
  <param pos="0" name="hw.device" value="Scanner"/>
@@ -1338,12 +1583,14 @@
1338
1583
  <param pos="0" name="os.vendor" value="Canon"/>
1339
1584
  <param pos="1" name="os.product"/>
1340
1585
  </fingerprint>
1586
+
1341
1587
  <fingerprint pattern="^CDVI Update$">
1342
1588
  <description>CDVI Door Control System</description>
1343
1589
  <example>CDVI Update</example>
1344
1590
  <param pos="0" name="hw.vendor" value="CDVI"/>
1345
- <param pos="0" name="hw.device" value="Access Controller"/>
1591
+ <param pos="0" name="hw.device" value="Access Control"/>
1346
1592
  </fingerprint>
1593
+
1347
1594
  <fingerprint pattern="^Liebert OpenComms Network Interface Card$">
1348
1595
  <description>Liebert UPS</description>
1349
1596
  <example>Liebert OpenComms Network Interface Card</example>
@@ -1352,6 +1599,7 @@
1352
1599
  <param pos="0" name="os.device" value="Power device"/>
1353
1600
  <param pos="0" name="os.vendor" value="Liebert"/>
1354
1601
  </fingerprint>
1602
+
1355
1603
  <fingerprint pattern="^Excella Main Page$">
1356
1604
  <description>MagTek Excella STX Check Scanner</description>
1357
1605
  <example>Excella Main Page</example>
@@ -1362,6 +1610,7 @@
1362
1610
  <param pos="0" name="os.vendor" value="MagTek"/>
1363
1611
  <param pos="0" name="os.product" value="Excella"/>
1364
1612
  </fingerprint>
1613
+
1365
1614
  <fingerprint pattern="^B426$">
1366
1615
  <description>Bosch Security Systems Ethernet Module (Alarm Panel)</description>
1367
1616
  <example>B426</example>
@@ -1370,6 +1619,7 @@
1370
1619
  <param pos="0" name="os.device" value="Alarm Panel"/>
1371
1620
  <param pos="0" name="os.vendor" value="Bosch"/>
1372
1621
  </fingerprint>
1622
+
1373
1623
  <fingerprint pattern="^Citrix Login$">
1374
1624
  <description>Citrix NetScaler</description>
1375
1625
  <example>Citrix Login</example>
@@ -1383,6 +1633,50 @@
1383
1633
  <param pos="0" name="service.product" value="NetScaler"/>
1384
1634
  <param pos="0" name="service.cpe23" value="cpe:/a:citrix:netscaler:-"/>
1385
1635
  </fingerprint>
1636
+
1637
+ <fingerprint pattern="^Netscaler Gateway$">
1638
+ <description>Citrix Netscaler Gateway</description>
1639
+ <example>Netscaler Gateway</example>
1640
+ <param pos="0" name="os.vendor" value="Citrix"/>
1641
+ <param pos="0" name="os.family" value="NetScaler"/>
1642
+ <param pos="0" name="os.device" value="Network Management Device"/>
1643
+ <param pos="0" name="os.product" value="NetScaler Gateway"/>
1644
+ <param pos="0" name="service.vendor" value="Citrix"/>
1645
+ <param pos="0" name="service.family" value="NetScaler"/>
1646
+ <param pos="0" name="service.device" value="Network Management Device"/>
1647
+ <param pos="0" name="service.product" value="NetScaler Gateway"/>
1648
+ </fingerprint>
1649
+
1650
+ <fingerprint pattern="^Citrix (?:NetScaler SDX|ADC SDX)$">
1651
+ <description>Citrix NetScaler SDX Gateway</description>
1652
+ <example>Citrix NetScaler SDX</example>
1653
+ <example>Citrix ADC SDX</example>
1654
+ <param pos="0" name="os.vendor" value="Citrix"/>
1655
+ <param pos="0" name="os.family" value="NetScaler"/>
1656
+ <param pos="0" name="os.device" value="Network Management Device"/>
1657
+ <param pos="0" name="os.product" value="NetScaler SDX Gateway"/>
1658
+ <param pos="0" name="service.vendor" value="Citrix"/>
1659
+ <param pos="0" name="service.family" value="NetScaler"/>
1660
+ <param pos="0" name="service.device" value="Network Management Device"/>
1661
+ <param pos="0" name="service.product" value="NetScaler SDX Gateway"/>
1662
+ </fingerprint>
1663
+
1664
+ <fingerprint pattern="^Citrix NetScaler Insight Center$">
1665
+ <description>Citrix NetScaler Insight Center</description>
1666
+ <example>Citrix NetScaler Insight Center</example>
1667
+ <param pos="0" name="service.vendor" value="Citrix"/>
1668
+ <param pos="0" name="service.family" value="NetScaler"/>
1669
+ <param pos="0" name="service.product" value="NetScaler Insight Center"/>
1670
+ </fingerprint>
1671
+
1672
+ <fingerprint pattern="^Brother ([^\s]+) series$">
1673
+ <description>Brother Printers</description>
1674
+ <example hw.product="MFC-L5900DW">Brother MFC-L5900DW series</example>
1675
+ <param pos="0" name="hw.vendor" value="Brother"/>
1676
+ <param pos="0" name="hw.device" value="Printer"/>
1677
+ <param pos="1" name="hw.product"/>
1678
+ </fingerprint>
1679
+
1386
1680
  <fingerprint pattern="^HP (?:Color )?LaserJet ([^&amp;]+)&amp;">
1387
1681
  <description>HP LaserJet</description>
1388
1682
  <example hw.product="M1536dnf MFP">HP LaserJet M1536dnf MFP&amp;nbsp;&amp;nbsp;&amp;nbsp;1.1.1.1</example>
@@ -1391,6 +1685,7 @@
1391
1685
  <param pos="0" name="hw.device" value="Printer"/>
1392
1686
  <param pos="1" name="hw.product"/>
1393
1687
  </fingerprint>
1688
+
1394
1689
  <fingerprint pattern="^Jamf Pro Login - Jamf Pro v(\S+)$">
1395
1690
  <description>Jamf Pro</description>
1396
1691
  <example service.version="10.14.0-t1563397490">Jamf Pro Login - Jamf Pro v10.14.0-t1563397490</example>
@@ -1399,6 +1694,7 @@
1399
1694
  <param pos="1" name="service.version"/>
1400
1695
  <param pos="0" name="service.cpe23" value="cpe:/a:jamf:jamf:{service.version}"/>
1401
1696
  </fingerprint>
1697
+
1402
1698
  <fingerprint pattern="^Keyper Systems Administration - Login$">
1403
1699
  <description>Keyper Systems Administration - Login</description>
1404
1700
  <example>Keyper Systems Administration - Login</example>
@@ -1406,6 +1702,7 @@
1406
1702
  <param pos="0" name="hw.device" value="Access Control"/>
1407
1703
  <param pos="0" name="hw.product" value="Key Management"/>
1408
1704
  </fingerprint>
1705
+
1409
1706
  <fingerprint pattern="FireEye:\s*$">
1410
1707
  <description>FireEye Investigation Analysis System Appliance</description>
1411
1708
  <example>FireEye:</example>
@@ -1413,6 +1710,7 @@
1413
1710
  <param pos="0" name="hw.product" value="IA Appliance"/>
1414
1711
  <param pos="0" name="hw.device" value="Security Appliance"/>
1415
1712
  </fingerprint>
1713
+
1416
1714
  <fingerprint pattern="^GigaVUE-OS$">
1417
1715
  <description>Gigamon GigaVUE Appliance</description>
1418
1716
  <example>GigaVUE-OS</example>
@@ -1420,6 +1718,7 @@
1420
1718
  <param pos="0" name="hw.device" value="Monitoring"/>
1421
1719
  <param pos="0" name="hw.product" value="GigaVUE"/>
1422
1720
  </fingerprint>
1721
+
1423
1722
  <fingerprint pattern="^Pure Storage Login$">
1424
1723
  <description>Pure Storage Appliance</description>
1425
1724
  <example>Pure Storage Login</example>
@@ -1427,6 +1726,15 @@
1427
1726
  <param pos="0" name="hw.device" value="NAS"/>
1428
1727
  <param pos="0" name="hw.product" value="Appliance"/>
1429
1728
  </fingerprint>
1729
+
1730
+ <fingerprint pattern="^Axonius Cybersecurity Asset Management Platform$">
1731
+ <description>Axonius Appliance</description>
1732
+ <example>Axonius Cybersecurity Asset Management Platform</example>
1733
+ <param pos="0" name="hw.vendor" value="Axonius"/>
1734
+ <param pos="0" name="hw.device" value="Security Appliance"/>
1735
+ <param pos="0" name="hw.product" value="Asset Management"/>
1736
+ </fingerprint>
1737
+
1430
1738
  <fingerprint pattern="^CRESTRON$">
1431
1739
  <description>Crestron Video Conferencing</description>
1432
1740
  <example>CRESTRON</example>
@@ -1436,6 +1744,7 @@
1436
1744
  <param pos="0" name="os.family" value="Linux"/>
1437
1745
  <param pos="0" name="os.device" value="Video Conferencing"/>
1438
1746
  </fingerprint>
1747
+
1439
1748
  <fingerprint pattern="^ELAN Viewer Installation$">
1440
1749
  <description>ELAN Smart Home Controller</description>
1441
1750
  <example>ELAN Viewer Installation</example>
@@ -1445,6 +1754,7 @@
1445
1754
  <param pos="0" name="os.vendor" value="ELAN"/>
1446
1755
  <param pos="0" name="os.family" value="Linux"/>
1447
1756
  </fingerprint>
1757
+
1448
1758
  <fingerprint pattern="^iTach IP2IR Setup and Configuration$">
1449
1759
  <description>iTach IP2IR</description>
1450
1760
  <example>iTach IP2IR Setup and Configuration</example>
@@ -1452,4 +1762,927 @@
1452
1762
  <param pos="0" name="hw.device" value="Device"/>
1453
1763
  <param pos="0" name="hw.product" value="IP2IR"/>
1454
1764
  </fingerprint>
1455
- </fingerprints>
1765
+
1766
+ <fingerprint pattern="^AVTECH Device ManageR$">
1767
+ <description>AVTECH Device ManageR Software</description>
1768
+ <example>AVTECH Device ManageR</example>
1769
+ <param pos="0" name="service.vendor" value="AVTECH"/>
1770
+ <param pos="0" name="service.product" value="Device Manager"/>
1771
+ </fingerprint>
1772
+
1773
+ <fingerprint pattern="^AVTECH Software, Inc\. - Room Alert(?:&amp;reg;)?\s+([a-zA-Z0-9/]+) - Advanced">
1774
+ <description>AVTECH RoomAlert</description>
1775
+ <example hw.product="Room Alert 11E" hw.product.model="11E">AVTECH Software, Inc. - Room Alert 11E - Advanced Computer Room Environment Monitoring, Alerting &amp;amp; Automatic Corrective Action</example>
1776
+ <example hw.product="Room Alert 32E/W" hw.product.model="32E/W">AVTECH Software, Inc. - Room Alert 32E/W - Advanced Computer Room Environment Monitoring, Alerting &amp;amp; Automatic Corrective Action</example>
1777
+ <example hw.product="Room Alert 32E/W" hw.product.model="32E/W">AVTECH Software, Inc. - Room Alert&amp;reg; 32E/W - Advanced Computer Room Monitoring, Alerting &amp;amp; Automatic Corrective Action</example>
1778
+ <param pos="0" name="hw.vendor" value="AVTECH"/>
1779
+ <param pos="0" name="hw.device" value="Monitoring"/>
1780
+ <param pos="1" name="hw.product.model"/>
1781
+ <param pos="0" name="hw.product" value="Room Alert {hw.product.model}"/>
1782
+ </fingerprint>
1783
+
1784
+ <fingerprint pattern="^AVTECH Software, Inc\. - TemPageR\s+([a-zA-Z0-9/]+) - Real-Time">
1785
+ <description>AVTECH TepPageR</description>
1786
+ <example hw.product="TemPageR 3E" hw.product.model="3E">AVTECH Software, Inc. - TemPageR 3E - Real-Time Temperature Monitor For IT &amp;amp; Facilities Environment Monitoring</example>
1787
+ <param pos="0" name="hw.vendor" value="AVTECH"/>
1788
+ <param pos="0" name="hw.device" value="Monitoring"/>
1789
+ <param pos="1" name="hw.product.model"/>
1790
+ <param pos="0" name="hw.product" value="TemPageR {hw.product.model}"/>
1791
+ </fingerprint>
1792
+
1793
+ <fingerprint pattern="^AppDynamics$">
1794
+ <description>Cisco AppDynamics Appliance</description>
1795
+ <example>AppDynamics</example>
1796
+ <param pos="0" name="hw.vendor" value="Cisco"/>
1797
+ <param pos="0" name="hw.device" value="Network Appliance"/>
1798
+ <param pos="0" name="hw.product" value="AppDynamics"/>
1799
+ </fingerprint>
1800
+
1801
+ <fingerprint pattern="^INDECT - CarDetector Configurator$">
1802
+ <description>INDECT Parking Management Console</description>
1803
+ <example>INDECT - CarDetector Configurator</example>
1804
+ <param pos="0" name="hw.vendor" value="INDECT"/>
1805
+ <param pos="0" name="hw.device" value="Network Appliance"/>
1806
+ <param pos="0" name="hw.product" value="CarDetector"/>
1807
+ </fingerprint>
1808
+
1809
+ <fingerprint pattern="^J-Link Pro Webserver$">
1810
+ <description>Segger J-Link Pro</description>
1811
+ <example>J-Link Pro Webserver</example>
1812
+ <param pos="0" name="hw.vendor" value="Segger"/>
1813
+ <param pos="0" name="hw.device" value="JTAG Adapter"/>
1814
+ <param pos="0" name="hw.product" value="J-Link Pro"/>
1815
+ </fingerprint>
1816
+
1817
+ <fingerprint pattern="^OneFS$">
1818
+ <description>EMC Isilon OneFS</description>
1819
+ <example>OneFS</example>
1820
+ <param pos="0" name="os.family" value="FreeBSD"/>
1821
+ <param pos="0" name="os.vendor" value="EMC"/>
1822
+ <param pos="0" name="os.product" value="Isilon OneFS OS"/>
1823
+ <param pos="0" name="hw.vendor" value="EMC"/>
1824
+ <param pos="0" name="hw.device" value="NAS"/>
1825
+ <param pos="0" name="hw.product" value="Isilon OneFS"/>
1826
+ </fingerprint>
1827
+
1828
+ <fingerprint pattern="^Isilon InsightIQ$">
1829
+ <description>EMC Isilon InsightIQ</description>
1830
+ <example>Isilon InsightIQ</example>
1831
+ <param pos="0" name="os.family" value="FreeBSD"/>
1832
+ <param pos="0" name="os.vendor" value="EMC"/>
1833
+ <param pos="0" name="os.product" value="Isilon OneFS OS"/>
1834
+ <param pos="0" name="hw.vendor" value="EMC"/>
1835
+ <param pos="0" name="hw.device" value="Network Appliance"/>
1836
+ <param pos="0" name="hw.product" value="Isilon InsightIQ"/>
1837
+ </fingerprint>
1838
+
1839
+ <fingerprint pattern="^Active Intelligence Engine$">
1840
+ <description>Attivio Active Intelligence Engine</description>
1841
+ <example>Active Intelligence Engine</example>
1842
+ <param pos="0" name="service.vendor" value="Attivio"/>
1843
+ <param pos="0" name="service.product" value="Active Intelligence Engine"/>
1844
+ </fingerprint>
1845
+
1846
+ <fingerprint pattern="^Welcome to WildFly(?: Application Server)?\s+(\d+)">
1847
+ <description>WildFly with version</description>
1848
+ <example service.version="11">Welcome to WildFly 11</example>
1849
+ <example service.version="8">Welcome to WildFly 8</example>
1850
+ <example service.version="8">Welcome to WildFly Application Server 8</example>
1851
+ <param pos="0" name="service.vendor" value="Red Hat"/>
1852
+ <param pos="0" name="service.product" value="WildFly"/>
1853
+ <param pos="1" name="service.version"/>
1854
+ <param pos="0" name="service.cpe23" value="cpe:/a:redhat:wildfly:{service.version}"/>
1855
+ </fingerprint>
1856
+
1857
+ <fingerprint pattern="^Welcome to WildFly$">
1858
+ <description>WildFly with no version</description>
1859
+ <example>Welcome to WildFly</example>
1860
+ <param pos="0" name="service.vendor" value="Red Hat"/>
1861
+ <param pos="0" name="service.product" value="WildFly"/>
1862
+ <param pos="0" name="service.cpe23" value="cpe:/a:redhat:wildfly:-"/>
1863
+ </fingerprint>
1864
+
1865
+ <fingerprint pattern="^Welcome to JBoss Application Server ([\d\.]+)$">
1866
+ <description>JBoss Application Server w/ Version</description>
1867
+ <example service.version="7">Welcome to JBoss Application Server 7</example>
1868
+ <param pos="0" name="service.vendor" value="Red Hat"/>
1869
+ <param pos="0" name="service.product" value="JBoss AS"/>
1870
+ <param pos="1" name="service.version"/>
1871
+ <param pos="0" name="service.cpe23" value="cpe:/a:redhat:jboss_wildfly_application_server:{service.version}"/>
1872
+ </fingerprint>
1873
+
1874
+ <fingerprint pattern="^Welcome to JBoss(?: AS|.trade;)$">
1875
+ <description>JBoss Application Server w/o Version</description>
1876
+ <example>Welcome to JBoss AS</example>
1877
+ <example>Welcome to JBoss&amp;trade;</example>
1878
+ <param pos="0" name="service.vendor" value="Red Hat"/>
1879
+ <param pos="0" name="service.product" value="JBoss AS"/>
1880
+ <param pos="0" name="service.cpe23" value="cpe:/a:redhat:jboss_wildfly_application_server:-"/>
1881
+ </fingerprint>
1882
+
1883
+ <fingerprint pattern="^(?:JBoss )?EAP ([\d\.]+)$">
1884
+ <description>JBoss EAP w/ Version</description>
1885
+ <example service.version="7">JBoss EAP 7</example>
1886
+ <example service.version="7">EAP 7</example>
1887
+ <param pos="0" name="service.vendor" value="Red Hat"/>
1888
+ <param pos="0" name="service.product" value="JBoss EAP"/>
1889
+ <param pos="1" name="service.version"/>
1890
+ <param pos="0" name="service.cpe23" value="cpe:/a:redhat:jboss_enterprise_application_platform:{service.version}"/>
1891
+ </fingerprint>
1892
+
1893
+ <fingerprint pattern="^Welcome to JBoss EAP$">
1894
+ <description>JBoss EAP w/o Version</description>
1895
+ <example>Welcome to JBoss EAP</example>
1896
+ <param pos="0" name="service.vendor" value="Red Hat"/>
1897
+ <param pos="0" name="service.product" value="JBoss EAP"/>
1898
+ <param pos="0" name="service.cpe23" value="cpe:/a:redhat:jboss_enterprise_application_platform:-"/>
1899
+ </fingerprint>
1900
+
1901
+ <fingerprint pattern="^S2 Network Node$">
1902
+ <description>S2 Network Node Appliance</description>
1903
+ <example>S2 Network Node</example>
1904
+ <param pos="0" name="hw.vendor" value="S2"/>
1905
+ <param pos="0" name="hw.device" value="Access Control"/>
1906
+ <param pos="0" name="hw.product" value="Network Node"/>
1907
+ </fingerprint>
1908
+
1909
+ <fingerprint pattern="^(?:S2 Netbox Login|Home - NetBox)$">
1910
+ <description>S2 Netbox Appliance</description>
1911
+ <example>S2 Netbox Login</example>
1912
+ <example>Home - NetBox</example>
1913
+ <param pos="0" name="hw.vendor" value="S2"/>
1914
+ <param pos="0" name="hw.device" value="Access Control"/>
1915
+ <param pos="0" name="hw.product" value="Netbox"/>
1916
+ </fingerprint>
1917
+
1918
+ <fingerprint pattern="^S2 NetVR Login$">
1919
+ <description>S2 NetVR Appliance</description>
1920
+ <example>S2 NetVR Login</example>
1921
+ <param pos="0" name="hw.vendor" value="S2"/>
1922
+ <param pos="0" name="hw.device" value="Access Control"/>
1923
+ <param pos="0" name="hw.product" value="NetVR"/>
1924
+ </fingerprint>
1925
+
1926
+ <fingerprint pattern="^IBM HTTP Server$">
1927
+ <description>IBM HTTP Server w/o Version</description>
1928
+ <example>IBM HTTP Server</example>
1929
+ <param pos="0" name="service.vendor" value="IBM"/>
1930
+ <param pos="0" name="service.product" value="HTTPD"/>
1931
+ <param pos="0" name="service.family" value="Apache"/>
1932
+ </fingerprint>
1933
+
1934
+ <fingerprint pattern="^IBM HTTP Server ([0-9\.]+)$">
1935
+ <description>IBM HTTP Server with Version</description>
1936
+ <example service.version="8.5.5">IBM HTTP Server 8.5.5</example>
1937
+ <param pos="0" name="service.vendor" value="IBM"/>
1938
+ <param pos="0" name="service.product" value="HTTPD"/>
1939
+ <param pos="0" name="service.family" value="Apache"/>
1940
+ <param pos="1" name="service.version"/>
1941
+ </fingerprint>
1942
+
1943
+ <fingerprint pattern="^IBM Tivoli Storage Manager$">
1944
+ <description>IBM Tivoli Storage Manager</description>
1945
+ <example>IBM Tivoli Storage Manager</example>
1946
+ <param pos="0" name="service.vendor" value="IBM"/>
1947
+ <param pos="0" name="service.family" value="Tivoli"/>
1948
+ <param pos="0" name="service.product" value="Tivoli Storage Manager"/>
1949
+ <param pos="0" name="service.cpe23" value="cpe:/a:ibm:tivoli_storage_manager:-"/>
1950
+ </fingerprint>
1951
+
1952
+ <fingerprint pattern="^IBM FlashCopy Manager$">
1953
+ <description>IBM FlashCopy Manager</description>
1954
+ <example>IBM FlashCopy Manager</example>
1955
+ <param pos="0" name="service.vendor" value="IBM"/>
1956
+ <param pos="0" name="service.family" value="Tivoli"/>
1957
+ <param pos="0" name="service.product" value="Tivoli Storage FlashCopy Manager"/>
1958
+ <param pos="0" name="service.cpe23" value="cpe:/a:ibm:tivoli_storage_flashcopy_manager:-"/>
1959
+ </fingerprint>
1960
+
1961
+ <fingerprint pattern="^(?:Jupyter Notebook|JupyterLab|Home Page - Select or create a notebook)$">
1962
+ <description>Jupyter Notebook Server</description>
1963
+ <example>Jupyter Notebook</example>
1964
+ <example>JupyterLab</example>
1965
+ <example>Home Page - Select or create a notebook</example>
1966
+ <param pos="0" name="service.vendor" value="Jupyter"/>
1967
+ <param pos="0" name="service.product" value="Notebook"/>
1968
+ <param pos="0" name="service.cpe23" value="cpe:/a:jupyter:notebook:-"/>
1969
+ </fingerprint>
1970
+
1971
+ <fingerprint pattern="^Redirect to userimage: /control/userimage\.html$">
1972
+ <description>Mobotix Network Camera</description>
1973
+ <example>Redirect to userimage: /control/userimage.html</example>
1974
+ <param pos="0" name="hw.vendor" value="Mobotix"/>
1975
+ <param pos="0" name="hw.device" value="Web cam"/>
1976
+ <param pos="0" name="hw.product" value="IP Camera"/>
1977
+ </fingerprint>
1978
+
1979
+ <fingerprint pattern="^Apache ActiveMQ$">
1980
+ <description>Apache ActiveMQ</description>
1981
+ <example>Apache ActiveMQ</example>
1982
+ <param pos="0" name="service.vendor" value="Apache"/>
1983
+ <param pos="0" name="service.family" value="ActiveMQ"/>
1984
+ <param pos="0" name="service.product" value="ActiveMQ"/>
1985
+ <param pos="0" name="service.cpe23" value="cpe:/a:apache:activemq:-"/>
1986
+ </fingerprint>
1987
+
1988
+ <fingerprint pattern="^Google Wifi$">
1989
+ <description>Google OnHub Router</description>
1990
+ <example>Google Wifi</example>
1991
+ <param pos="0" name="os.vendor" value="Google"/>
1992
+ <param pos="0" name="os.family" value="Linux"/>
1993
+ <param pos="0" name="hw.vendor" value="Google"/>
1994
+ <param pos="0" name="hw.device" value="Router"/>
1995
+ <param pos="0" name="hw.product" value="OnHub"/>
1996
+ </fingerprint>
1997
+
1998
+ <fingerprint pattern="PRTG Network Monitor">
1999
+ <description>PRTG Network Monitor (not anchored)</description>
2000
+ <example>PRTG Network Monitor (WIN-R4C1T8HRRAA)</example>
2001
+ <example>BigCorp PRTG Network Monitor (PRTG2)</example>
2002
+ <param pos="0" name="service.vendor" value="PRTG"/>
2003
+ <param pos="0" name="service.product" value="Network Monitor"/>
2004
+ </fingerprint>
2005
+
2006
+ <fingerprint pattern="^(?:BrightSign&amp;reg;|BrightSign Applications|Diagnostics Web Server)$">
2007
+ <description>BrightSign Controller</description>
2008
+ <example>BrightSign&amp;reg;</example>
2009
+ <example>BrightSign Applications</example>
2010
+ <example>Diagnostics Web Server</example>
2011
+ <param pos="0" name="os.vendor" value="BrightSign"/>
2012
+ <param pos="0" name="os.family" value="Linux"/>
2013
+ <param pos="0" name="hw.vendor" value="BrightSign"/>
2014
+ <param pos="0" name="hw.device" value="Media Server"/>
2015
+ <param pos="0" name="hw.product" value="Digital Signage Player"/>
2016
+ </fingerprint>
2017
+
2018
+ <fingerprint pattern="^Linksys Smart Wi-Fi$">
2019
+ <description>Linksys Smart Wi-Fi</description>
2020
+ <example>Linksys Smart Wi-Fi</example>
2021
+ <param pos="0" name="os.vendor" value="Linksys"/>
2022
+ <param pos="0" name="os.family" value="Linux"/>
2023
+ <param pos="0" name="hw.vendor" value="Linksys"/>
2024
+ <param pos="0" name="hw.device" value="WAP"/>
2025
+ </fingerprint>
2026
+
2027
+ <fingerprint pattern="^(?:DD System Manager|System Manager)$">
2028
+ <description>Data Domain System Manager</description>
2029
+ <example>DD System Manager</example>
2030
+ <example>System Manager</example>
2031
+ <param pos="0" name="os.vendor" value="Data Domain"/>
2032
+ <param pos="0" name="os.product" value="DD OS"/>
2033
+ <param pos="0" name="os.device" value="Storage"/>
2034
+ <param pos="0" name="hw.vendor" value="Data Domain"/>
2035
+ <param pos="0" name="hw.product" value="DD OS"/>
2036
+ <param pos="0" name="hw.device" value="Storage"/>
2037
+ </fingerprint>
2038
+
2039
+ <fingerprint pattern="^SonarQube$">
2040
+ <description>SonarQube</description>
2041
+ <example>SonarQube</example>
2042
+ <param pos="0" name="service.vendor" value="SonarQube"/>
2043
+ <param pos="0" name="service.product" value="SonarQube"/>
2044
+ </fingerprint>
2045
+
2046
+ <fingerprint pattern="^(\S+) - Opengear Management Console$">
2047
+ <description>Opengear Management Console</description>
2048
+ <example host.name="server01">server01 - Opengear Management Console</example>
2049
+ <param pos="0" name="service.vendor" value="Opengear"/>
2050
+ <param pos="0" name="service.product" value="Management Console"/>
2051
+ <param pos="1" name="host.name"/>
2052
+ </fingerprint>
2053
+
2054
+ <fingerprint pattern="^Login \(Virtual Traffic Manager Appliance :: (\S+)\)$">
2055
+ <description>Brocade Virtual Traffic Manager Appliance</description>
2056
+ <example host.name="10.0.0.1">Login (Virtual Traffic Manager Appliance :: 10.0.0.1)</example>
2057
+ <param pos="0" name="hw.vendor" value="Brocade"/>
2058
+ <param pos="0" name="hw.device" value="Network Management Device"/>
2059
+ <param pos="0" name="hw.product" value="Virtual Traffic Manager"/>
2060
+ <param pos="1" name="host.name"/>
2061
+ </fingerprint>
2062
+
2063
+ <fingerprint pattern="^Chronograf$">
2064
+ <description>Chronograf Dashboard</description>
2065
+ <example>Chronograf</example>
2066
+ <param pos="0" name="service.vendor" value="InfluxData"/>
2067
+ <param pos="0" name="service.product" value="Chronograf"/>
2068
+ </fingerprint>
2069
+
2070
+ <fingerprint pattern="^InfluxDB 2.0$">
2071
+ <description>InfluxDB 2.0 Dashboard</description>
2072
+ <example>InfluxDB 2.0</example>
2073
+ <param pos="0" name="service.vendor" value="InfluxData"/>
2074
+ <param pos="0" name="service.product" value="InfluxDB"/>
2075
+ <param pos="0" name="service.version" value="2.0"/>
2076
+ <param pos="0" name="service.cpe23" value="cpe:/a:influxdata:influxdb:2.0"/>
2077
+ </fingerprint>
2078
+
2079
+ <fingerprint pattern="^(?:Sign in . GitLab|GitLab|GitLab is not responding)$">
2080
+ <description>GitLab</description>
2081
+ <example>Sign in · GitLab</example>
2082
+ <example>GitLab is not responding</example>
2083
+ <example>GitLab</example>
2084
+ <example>Sign in | GitLab</example>
2085
+ <param pos="0" name="service.vendor" value="GitLab"/>
2086
+ <param pos="0" name="service.product" value="GitLab"/>
2087
+ <param pos="0" name="service.cpe23" value="cpe:/a:gitlab:gitlab:-"/>
2088
+ </fingerprint>
2089
+
2090
+ <fingerprint pattern="^(?:GitHub Enterprise|Setup GitHub Enterprise|GitHub Enterprise preflight check)$">
2091
+ <description>GitHub Enterprise</description>
2092
+ <example>GitHub Enterprise</example>
2093
+ <example>Setup GitHub Enterprise</example>
2094
+ <example>GitHub Enterprise preflight check</example>
2095
+ <param pos="0" name="service.vendor" value="GitHub"/>
2096
+ <param pos="0" name="service.product" value="Enterprise"/>
2097
+ </fingerprint>
2098
+
2099
+ <fingerprint pattern="^(?:SAP NetWeaver Application Server Java|SAP&amp;#x20;NetWeaver&amp;#x20;Portal|Loading Portal\.\.\.)$">
2100
+ <description>SAP NetWeaver Portal</description>
2101
+ <example>SAP NetWeaver Application Server Java</example>
2102
+ <example>SAP&amp;#x20;NetWeaver&amp;#x20;Portal</example>
2103
+ <example>Loading Portal...</example>
2104
+ <param pos="0" name="service.vendor" value="SAP"/>
2105
+ <param pos="0" name="service.product" value="NetWeaver Web AS"/>
2106
+ <param pos="0" name="service.family" value="NetWeaver"/>
2107
+ </fingerprint>
2108
+
2109
+ <fingerprint pattern="^Lansweeper (?:- Login|First Run Wizard)$">
2110
+ <description>Lansweeper</description>
2111
+ <example>Lansweeper - Login</example>
2112
+ <example>Lansweeper First Run Wizard</example>
2113
+ <param pos="0" name="service.vendor" value="Lansweeper"/>
2114
+ <param pos="0" name="service.product" value="Lansweeper"/>
2115
+ <param pos="0" name="service.cpe23" value="cpe:/a:lansweeper:lansweeper:-"/>
2116
+ </fingerprint>
2117
+
2118
+ <fingerprint pattern="^(?:Celery Flower|Flower)$">
2119
+ <description>Celery Flower Dashboard</description>
2120
+ <example>Celery Flower</example>
2121
+ <example>Flower</example>
2122
+ <param pos="0" name="service.vendor" value="Celery"/>
2123
+ <param pos="0" name="service.product" value="Flower"/>
2124
+ </fingerprint>
2125
+
2126
+ <fingerprint pattern="^(?:Insight)?VM Security Console :: Login$">
2127
+ <description>Rapid7 InsightVM Console</description>
2128
+ <example>InsightVM Security Console :: Login</example>
2129
+ <example>VM Security Console :: Login</example>
2130
+ <param pos="0" name="service.vendor" value="Rapid7"/>
2131
+ <param pos="0" name="service.product" value="InsightVM"/>
2132
+ <param pos="0" name="service.cpe23" value="cpe:/a:rapid7:insightvm:-"/>
2133
+ </fingerprint>
2134
+
2135
+ <fingerprint pattern="^Nexpose Security Console :: Login$">
2136
+ <description>Rapid7 Nexpose Console</description>
2137
+ <example>Nexpose Security Console :: Login</example>
2138
+ <param pos="0" name="service.vendor" value="Rapid7"/>
2139
+ <param pos="0" name="service.product" value="Nexpose"/>
2140
+ <param pos="0" name="service.cpe23" value="cpe:/a:rapid7:nexpose:-"/>
2141
+ </fingerprint>
2142
+
2143
+ <fingerprint pattern="^(?:Login Gateway|Session Error) - Kiwi Syslog Web Access$">
2144
+ <description>Kiwi Syslog Web Access</description>
2145
+ <example>Login Gateway - Kiwi Syslog Web Access</example>
2146
+ <example>Session Error - Kiwi Syslog Web Access</example>
2147
+ <param pos="0" name="service.vendor" value="SolarWinds"/>
2148
+ <param pos="0" name="service.product" value="Kiwi Syslog"/>
2149
+ </fingerprint>
2150
+
2151
+ <fingerprint pattern="^ClickShare Configurator$">
2152
+ <description>ClickShare Wireless Presenter</description>
2153
+ <example>ClickShare Configurator</example>
2154
+ <param pos="0" name="hw.vendor" value="Barco"/>
2155
+ <param pos="0" name="hw.device" value="Wireless Presenter"/>
2156
+ <param pos="0" name="hw.product" value="ClickShare"/>
2157
+ <param pos="0" name="os.vendor" value="Barco"/>
2158
+ <param pos="0" name="os.family" value="ClickShareOS"/>
2159
+ <param pos="0" name="os.device" value="Wireless Presenter"/>
2160
+ </fingerprint>
2161
+
2162
+ <fingerprint pattern="^(IQ\S+) IQEYE\S+: Live Images$">
2163
+ <description>IQinVision IQeye Network Camera</description>
2164
+ <example hw.product="IQA22N">IQA22N IQEYE1A1613: Live Images</example>
2165
+ <example hw.product="IQeye703">IQeye703 IQEYE011750: Live Images</example>
2166
+ <param pos="0" name="hw.vendor" value="IQinVision"/>
2167
+ <param pos="0" name="hw.device" value="Web cam"/>
2168
+ <param pos="1" name="hw.product"/>
2169
+ </fingerprint>
2170
+
2171
+ <fingerprint pattern="^(?:Oracle\(R\) )?Integrated Lights Out Manager$">
2172
+ <description>Oracle iLOM</description>
2173
+ <example>Oracle(R) Integrated Lights Out Manager</example>
2174
+ <example>Integrated Lights Out Manager</example>
2175
+ <param pos="0" name="hw.device" value="Lights Out Management"/>
2176
+ <param pos="0" name="hw.vendor" value="Oracle"/>
2177
+ <param pos="0" name="hw.family" value="ILOM"/>
2178
+ <param pos="0" name="hw.product" value="ILOM"/>
2179
+ <param pos="0" name="os.device" value="Lights Out Management"/>
2180
+ <param pos="0" name="os.vendor" value="Oracle"/>
2181
+ <param pos="0" name="os.family" value="ILOM"/>
2182
+ <param pos="0" name="os.product" value="ILOM"/>
2183
+ </fingerprint>
2184
+
2185
+ <fingerprint pattern="^Genetec - SHARPV\S+$">
2186
+ <description>Genetec AutoVu SharpV ALPR Camera</description>
2187
+ <example>Genetec - SHARPV01111</example>
2188
+ <param pos="0" name="hw.vendor" value="Genetec"/>
2189
+ <param pos="0" name="hw.device" value="Web cam"/>
2190
+ <param pos="0" name="hw.product" value="AutoVu SharpV"/>
2191
+ </fingerprint>
2192
+
2193
+ <fingerprint pattern="^Nexus Repository Manager$">
2194
+ <description>Nexus Repository Manager</description>
2195
+ <example>Nexus Repository Manager</example>
2196
+ <param pos="0" name="service.vendor" value="Apache"/>
2197
+ <param pos="0" name="service.product" value="Nexus Repository Manager"/>
2198
+ </fingerprint>
2199
+
2200
+ <fingerprint pattern="^Apache Flink Web Dashboard$">
2201
+ <description>Apache Flink Web Dashboard</description>
2202
+ <example>Apache Flink Web Dashboard</example>
2203
+ <param pos="0" name="service.vendor" value="Apache"/>
2204
+ <param pos="0" name="service.product" value="Flink"/>
2205
+ <param pos="0" name="service.cpe23" value="cpe:/a:apache:flink:-"/>
2206
+ </fingerprint>
2207
+
2208
+ <fingerprint pattern="^(?:Twonky|Twonky Server|TwonkyMedia|TwonkyMedia server media browser)$">
2209
+ <description>Twonky Server</description>
2210
+ <example>Twonky</example>
2211
+ <example>Twonky Server</example>
2212
+ <example>TwonkyMedia</example>
2213
+ <example>TwonkyMedia server media browser</example>
2214
+ <param pos="0" name="service.vendor" value="Lynx Technology"/>
2215
+ <param pos="0" name="service.product" value="Twonky Media Server"/>
2216
+ </fingerprint>
2217
+
2218
+ <fingerprint pattern="^Spiceworks(?: Server Busy| Help Desk)?$">
2219
+ <description>Spiceworks</description>
2220
+ <example>Spiceworks</example>
2221
+ <example>Spiceworks Help Desk</example>
2222
+ <example>Spiceworks Server Busy</example>
2223
+ <param pos="0" name="service.vendor" value="Spiceworks"/>
2224
+ <param pos="0" name="service.product" value="Help Desk Server"/>
2225
+ </fingerprint>
2226
+
2227
+ <fingerprint pattern="^Network Monitor$">
2228
+ <description>Spiceworks Network Monitor</description>
2229
+ <example>Network Monitor</example>
2230
+ <param pos="0" name="service.vendor" value="Spiceworks"/>
2231
+ <param pos="0" name="service.product" value="Network Monitor"/>
2232
+ </fingerprint>
2233
+
2234
+ <fingerprint pattern="^Spirent TestCenter IQ(?: - (?:Free )?Preview)?$">
2235
+ <description>Spirent TestCenter IQ</description>
2236
+ <example>Spirent TestCenter IQ</example>
2237
+ <example>Spirent TestCenter IQ - Free Preview</example>
2238
+ <example>Spirent TestCenter IQ - Preview</example>
2239
+ <param pos="0" name="service.vendor" value="Spirent Communications"/>
2240
+ <param pos="0" name="service.product" value="TestCenter IQ"/>
2241
+ </fingerprint>
2242
+
2243
+ <fingerprint pattern="^SABnzbd(?: - Log in)?$">
2244
+ <description>SABnzbd Newsreader</description>
2245
+ <example>SABnzbd</example>
2246
+ <example>SABnzbd - Log in</example>
2247
+ <param pos="0" name="service.vendor" value="SABnzbd"/>
2248
+ <param pos="0" name="service.product" value="SABnzbd"/>
2249
+ </fingerprint>
2250
+
2251
+ <fingerprint pattern="^(?:Zabbix|.*: Zabbix)$">
2252
+ <description>Zabbix</description>
2253
+ <example>Zabbix</example>
2254
+ <example>appliance: Zabbix</example>
2255
+ <param pos="0" name="service.vendor" value="Zabbix"/>
2256
+ <param pos="0" name="service.product" value="Zabbix"/>
2257
+ <param pos="0" name="service.cpe23" value="cpe:/a:zabbix:zabbix:-"/>
2258
+ </fingerprint>
2259
+
2260
+ <fingerprint pattern="^(\S+) \(build (\S+)\) - Info$">
2261
+ <description>DD-WRT</description>
2262
+ <example host.name="SubTerraVia-NUC" os.version="36104" os.build="36104">SubTerraVia-NUC (build 36104) - Info</example>
2263
+ <example host.name="DD-WRT" os.version="35030M" os.build="35030M">DD-WRT (build 35030M) - Info</example>
2264
+ <param pos="0" name="os.vendor" value="DD-WRT"/>
2265
+ <param pos="0" name="os.product" value="DD-WRT"/>
2266
+ <param pos="0" name="os.device" value="Router"/>
2267
+ <param pos="1" name="host.name"/>
2268
+ <param pos="2" name="os.version"/>
2269
+ <param pos="2" name="os.build"/>
2270
+ <param pos="0" name="os.cpe23" value="cpe:/o:dd-wrt:dd-wrt:{os.version}"/>
2271
+ </fingerprint>
2272
+
2273
+ <fingerprint pattern="^(?:Apache Druid|Druid Console|Legacy Coordinator Console)$">
2274
+ <description>Apache Druid</description>
2275
+ <example>Apache Druid</example>
2276
+ <example>Legacy Coordinator Console</example>
2277
+ <example>Druid Console</example>
2278
+ <param pos="0" name="service.vendor" value="Apache"/>
2279
+ <param pos="0" name="service.product" value="Druid"/>
2280
+ <param pos="0" name="service.cpe23" value="cpe:/a:apache:druid:-"/>
2281
+ </fingerprint>
2282
+
2283
+ <fingerprint pattern="^Gerrit Code Review$">
2284
+ <description>Gerrit Code Review</description>
2285
+ <example>Gerrit Code Review</example>
2286
+ <param pos="0" name="service.vendor" value="Gerrit"/>
2287
+ <param pos="0" name="service.product" value="Code Review"/>
2288
+ </fingerprint>
2289
+
2290
+ <fingerprint pattern=" - Ignition Gateway$">
2291
+ <description>Inductive Automation Ignition Gateway</description>
2292
+ <example>QA-ROBOT3 - Ignition Gateway</example>
2293
+ <example>Ignition 8.0 Demo Server - Ignition Gateway</example>
2294
+ <param pos="0" name="service.vendor" value="Inductive Automation"/>
2295
+ <param pos="0" name="service.product" value="Ignition Gateway"/>
2296
+ </fingerprint>
2297
+
2298
+ <fingerprint pattern="^Airflow(?: - (?:Login|DAGs))?$">
2299
+ <description>Apache Airflow</description>
2300
+ <example>Airflow</example>
2301
+ <example>Airflow - DAGs</example>
2302
+ <example>Airflow - Login</example>
2303
+ <param pos="0" name="service.vendor" value="Apache"/>
2304
+ <param pos="0" name="service.product" value="Airflow"/>
2305
+ <param pos="0" name="service.cpe23" value="cpe:/a:apache:airflow:-"/>
2306
+ </fingerprint>
2307
+
2308
+ <fingerprint pattern="^Cockroach Console$">
2309
+ <description>CockroachDB Console</description>
2310
+ <example>Cockroach Console</example>
2311
+ <param pos="0" name="service.vendor" value="Cockroach Labs"/>
2312
+ <param pos="0" name="service.product" value="CockroachDB"/>
2313
+ </fingerprint>
2314
+
2315
+ <fingerprint pattern="^(?:openmediavault control panel|OpenMediaVault web administration interface) - (\S+)$">
2316
+ <description>OpenMediaVault</description>
2317
+ <example host.name="raspberrypi">openmediavault control panel - raspberrypi</example>
2318
+ <example host.name="raspberrypi">OpenMediaVault web administration interface - raspberrypi</example>
2319
+ <param pos="0" name="os.vendor" value="OpenMediaVault"/>
2320
+ <param pos="0" name="os.family" value="Linux"/>
2321
+ <param pos="0" name="os.product" value="OpenMediaVault"/>
2322
+ <param pos="0" name="os.device" value="NAS"/>
2323
+ <param pos="1" name="host.name"/>
2324
+ </fingerprint>
2325
+
2326
+ <fingerprint pattern="^Log in to TeamCity .mdash; TeamCity$">
2327
+ <description>TeamCity</description>
2328
+ <example>Log in to TeamCity &amp;mdash; TeamCity</example>
2329
+ <param pos="0" name="service.vendor" value="JetBrains"/>
2330
+ <param pos="0" name="service.product" value="TeamCity"/>
2331
+ <param pos="0" name="service.cpe23" value="cpe:/a:jetbrains:teamcity:-"/>
2332
+ </fingerprint>
2333
+
2334
+ <fingerprint pattern="^Home - CUPS ([\d\.]+)$">
2335
+ <description>Apple CUPS</description>
2336
+ <example service.version="2.3.1">Home - CUPS 2.3.1</example>
2337
+ <param pos="0" name="service.vendor" value="Apple"/>
2338
+ <param pos="0" name="service.product" value="CUPS"/>
2339
+ <param pos="0" name="service.family" value="CUPS"/>
2340
+ <param pos="1" name="service.version"/>
2341
+ <param pos="0" name="service.cpe23" value="cpe:/a:apple:cups:{service.version}"/>
2342
+ </fingerprint>
2343
+
2344
+ <fingerprint pattern="^RUNDECK ENTERPRISE - Login$">
2345
+ <description>Rundeck Enterprise</description>
2346
+ <example>RUNDECK ENTERPRISE - Login</example>
2347
+ <param pos="0" name="service.vendor" value="Rundeck"/>
2348
+ <param pos="0" name="service.product" value="Rundeck Enterprise"/>
2349
+ </fingerprint>
2350
+
2351
+ <fingerprint pattern="^Rundeck - Login$">
2352
+ <description>Rundeck</description>
2353
+ <example>Rundeck - Login</example>
2354
+ <param pos="0" name="service.vendor" value="Rundeck"/>
2355
+ <param pos="0" name="service.product" value="Rundeck"/>
2356
+ <param pos="0" name="service.cpe23" value="cpe:/a:rundeck:rundeck:-"/>
2357
+ </fingerprint>
2358
+
2359
+ <fingerprint pattern="^CrushFTP WebInterface$">
2360
+ <description>CrushFTP Web</description>
2361
+ <example>CrushFTP WebInterface</example>
2362
+ <param pos="0" name="service.vendor" value="CrushFTP"/>
2363
+ <param pos="0" name="service.product" value="CrushFTP Web Interface"/>
2364
+ <param pos="0" name="service.certainty" value="0.5"/>
2365
+ </fingerprint>
2366
+
2367
+ <fingerprint pattern="^OpenEdge Explorer$">
2368
+ <description>Progress OpenEdge Explorer</description>
2369
+ <example>OpenEdge Explorer</example>
2370
+ <param pos="0" name="service.vendor" value="Progress"/>
2371
+ <param pos="0" name="service.product" value="OpenEdge Explorer"/>
2372
+ </fingerprint>
2373
+
2374
+ <fingerprint pattern="^Consul by HashiCorp$">
2375
+ <description>HashiCorp Consul</description>
2376
+ <example>Consul by HashiCorp</example>
2377
+ <param pos="0" name="service.vendor" value="HashiCorp"/>
2378
+ <param pos="0" name="service.product" value="Consul"/>
2379
+ <param pos="0" name="service.cpe23" value="cpe:/a:hashicorp:consul:-"/>
2380
+ </fingerprint>
2381
+
2382
+ <fingerprint pattern="^Redmine(?: 500 error)?$">
2383
+ <description>Redmine</description>
2384
+ <example>Redmine</example>
2385
+ <param pos="0" name="service.vendor" value="Redmine"/>
2386
+ <param pos="0" name="service.product" value="Redmine"/>
2387
+ <param pos="0" name="service.cpe23" value="cpe:/a:redmine:redmine:-"/>
2388
+ </fingerprint>
2389
+
2390
+ <fingerprint pattern="; Nagios Log Server$">
2391
+ <description>Nagios Log Server</description>
2392
+ <example>Database Offline &amp;middot; Nagios Log Server</example>
2393
+ <param pos="0" name="service.vendor" value="Nagios"/>
2394
+ <param pos="0" name="service.product" value="Nagios Log Server"/>
2395
+ </fingerprint>
2396
+
2397
+ <fingerprint pattern="; Nagios Network Analyzer$">
2398
+ <description>Nagios Network Analyzer</description>
2399
+ <example>Login &amp;bull; Nagios Network Analyzer</example>
2400
+ <example>Licensing &amp;bull; Nagios Network Analyzer</example>
2401
+ <param pos="0" name="service.vendor" value="Nagios"/>
2402
+ <param pos="0" name="service.product" value="Nagios Network Analyzer"/>
2403
+ </fingerprint>
2404
+
2405
+ <fingerprint pattern="^Zing Vision$">
2406
+ <description>Zing Vision</description>
2407
+ <example>Zing Vision</example>
2408
+ <param pos="0" name="service.vendor" value="Azul Systems"/>
2409
+ <param pos="0" name="service.product" value="Zing Vision"/>
2410
+ </fingerprint>
2411
+
2412
+ <fingerprint pattern="^Swagger (?:UI|Editor)$">
2413
+ <description>Swagger UI</description>
2414
+ <example>Swagger UI</example>
2415
+ <example>Swagger Editor</example>
2416
+ <param pos="0" name="service.vendor" value="Swagger"/>
2417
+ <param pos="0" name="service.product" value="UI"/>
2418
+ </fingerprint>
2419
+
2420
+ <fingerprint pattern="^Emby$">
2421
+ <description>Emby Media Server</description>
2422
+ <example>Emby</example>
2423
+ <param pos="0" name="service.vendor" value="Emby"/>
2424
+ <param pos="0" name="service.product" value="Web Client"/>
2425
+ <param pos="0" name="service.device" value="Media Server"/>
2426
+ </fingerprint>
2427
+
2428
+ <fingerprint pattern="^WS - Folding@home Work Server$">
2429
+ <description>Folding@home Work Server</description>
2430
+ <example>WS - Folding@home Work Server</example>
2431
+ <param pos="0" name="service.vendor" value="Folding@home"/>
2432
+ <param pos="0" name="service.product" value="Work Server"/>
2433
+ </fingerprint>
2434
+
2435
+ <fingerprint pattern="^Welcome to IBM Lotus Sametime$">
2436
+ <description>IBM Lotus Sametime</description>
2437
+ <example>Welcome to IBM Lotus Sametime</example>
2438
+ <param pos="0" name="service.vendor" value="IBM"/>
2439
+ <param pos="0" name="service.product" value="Lotus Sametime"/>
2440
+ <param pos="0" name="service.certainty" value="0.5"/>
2441
+ <param pos="0" name="service.cpe23" value="cpe:/a:ibm:lotus_sametime:-"/>
2442
+ </fingerprint>
2443
+
2444
+ <fingerprint pattern="^HPE OfficeConnect Switch (.*)\s+(J\S+)$">
2445
+ <description>HPE OfficeConnect Switch</description>
2446
+ <example hw.product="1820 24G" hw.model="J9980A">HPE OfficeConnect Switch 1820 24G J9980A</example>
2447
+ <example hw.product="1820 8G" hw.model="J9979A">HPE OfficeConnect Switch 1820 8G J9979A</example>
2448
+ <example hw.product="1920S 24G 2SFP PoE+ (370W)" hw.model="JL385A">HPE OfficeConnect Switch 1920S 24G 2SFP PoE+ (370W) JL385A</example>
2449
+ <param pos="0" name="hw.vendor" value="HPE"/>
2450
+ <param pos="0" name="hw.device" value="Switch"/>
2451
+ <param pos="1" name="hw.product"/>
2452
+ <param pos="2" name="hw.model"/>
2453
+ </fingerprint>
2454
+
2455
+ <fingerprint pattern="^Device42$">
2456
+ <description>Device42 Virtual Appliance</description>
2457
+ <example>Device42</example>
2458
+ <param pos="0" name="os.vendor" value="Device42"/>
2459
+ <param pos="0" name="os.family" value="Linux"/>
2460
+ <param pos="0" name="os.product" value="Linux"/>
2461
+ <param pos="0" name="os.certainty" value="0.5"/>
2462
+ <param pos="0" name="hw.vendor" value="Device42"/>
2463
+ <param pos="0" name="hw.device" value="Network Appliance"/>
2464
+ <param pos="0" name="hw.product" value="Discovery"/>
2465
+ <param pos="0" name="hw.certainty" value="0.5"/>
2466
+ </fingerprint>
2467
+
2468
+ <fingerprint pattern="^SolarWinds Virtualization Manager$">
2469
+ <description>SolarWinds Virtualization Manager</description>
2470
+ <example>SolarWinds Virtualization Manager</example>
2471
+ <param pos="0" name="service.vendor" value="SolarWinds"/>
2472
+ <param pos="0" name="service.product" value="Virtualization Manager"/>
2473
+ </fingerprint>
2474
+
2475
+ <fingerprint pattern="^(?:Gitea: .*|LocalRepo|TurnKey Gitea)$">
2476
+ <description>Gitea</description>
2477
+ <example>Gitea: Git with a cup of tea</example>
2478
+ <example>TurnKey Gitea</example>
2479
+ <example>LocalRepo</example>
2480
+ <param pos="0" name="service.vendor" value="Gitea"/>
2481
+ <param pos="0" name="service.product" value="Gitea"/>
2482
+ <param pos="0" name="service.certainty" value="0.5"/>
2483
+ <param pos="0" name="service.cpe23" value="cpe:/a:gitea:gitea:-"/>
2484
+ </fingerprint>
2485
+
2486
+ <fingerprint pattern="^Metasploit$">
2487
+ <description>Metasploit Pro (and Community Edition Web UI)</description>
2488
+ <example>Metasploit</example>
2489
+ <param pos="0" name="service.vendor" value="Rapid7"/>
2490
+ <param pos="0" name="service.product" value="Metasploit Pro"/>
2491
+ </fingerprint>
2492
+
2493
+ <fingerprint pattern="^Makito X Decoder$">
2494
+ <description>Haivision Makito X Video Decoder</description>
2495
+ <example>Makito X Decoder</example>
2496
+ <param pos="0" name="hw.vendor" value="Haivision"/>
2497
+ <param pos="0" name="hw.device" value="Video Decoder"/>
2498
+ <param pos="0" name="hw.product" value="Makito X Decoder"/>
2499
+ </fingerprint>
2500
+
2501
+ <fingerprint pattern="^Ceph(?: Dashboard)?$">
2502
+ <description>Ceph Dashboard</description>
2503
+ <example>Ceph Dashboard</example>
2504
+ <example>Ceph</example>
2505
+ <param pos="0" name="service.vendor" value="Ceph"/>
2506
+ <param pos="0" name="service.product" value="Dashboard"/>
2507
+ </fingerprint>
2508
+
2509
+ <fingerprint pattern="^Scrutinizer$">
2510
+ <description>Plixer Scrutinizer</description>
2511
+ <example>Scrutinizer</example>
2512
+ <param pos="0" name="os.vendor" value="Plixer"/>
2513
+ <param pos="0" name="os.product" value="Linux"/>
2514
+ <param pos="0" name="os.certainty" value="0.5"/>
2515
+ <param pos="0" name="hw.vendor" value="Plixer"/>
2516
+ <param pos="0" name="hw.product" value="Scrutinizer"/>
2517
+ <param pos="0" name="hw.certainty" value="0.5"/>
2518
+ </fingerprint>
2519
+
2520
+ <fingerprint pattern="^Hortonworks SmartSense Tool is loading\.\.\.$">
2521
+ <description>Cloudera Hortonworks SmartSense Tool</description>
2522
+ <example>Hortonworks SmartSense Tool is loading...</example>
2523
+ <param pos="0" name="service.vendor" value="Cloudera"/>
2524
+ <param pos="0" name="service.product" value="SmartSense Tool"/>
2525
+ <param pos="0" name="service.certainty" value="0.5"/>
2526
+ </fingerprint>
2527
+
2528
+ <fingerprint pattern="^ownCloud$">
2529
+ <description>ownCloud</description>
2530
+ <example>ownCloud</example>
2531
+ <param pos="0" name="service.vendor" value="ownCloud"/>
2532
+ <param pos="0" name="service.product" value="ownCloud Server"/>
2533
+ <param pos="0" name="service.certainty" value="0.5"/>
2534
+ </fingerprint>
2535
+
2536
+ <fingerprint pattern="^Octopus Deploy$">
2537
+ <description>Octopus Deploy</description>
2538
+ <example>Octopus Deploy</example>
2539
+ <param pos="0" name="service.vendor" value="Octopus"/>
2540
+ <param pos="0" name="service.product" value="Deploy"/>
2541
+ <param pos="0" name="service.certainty" value="0.5"/>
2542
+ </fingerprint>
2543
+
2544
+ <fingerprint pattern="^Android Debug Database$">
2545
+ <description>Android Debug Database</description>
2546
+ <example>Android Debug Database</example>
2547
+ <param pos="0" name="service.vendor" value="Android Debug Database"/>
2548
+ <param pos="0" name="service.product" value="Android Debug Database"/>
2549
+ </fingerprint>
2550
+
2551
+ <fingerprint pattern="^RStudio Sign In$">
2552
+ <description>RStudio</description>
2553
+ <example>RStudio Sign In</example>
2554
+ <param pos="0" name="service.vendor" value="RStudio"/>
2555
+ <param pos="0" name="service.product" value="Connect"/>
2556
+ </fingerprint>
2557
+
2558
+ <fingerprint pattern="^(?:TurnKey Moodle|New Site)$">
2559
+ <description>Moodle</description>
2560
+ <example>TurnKey Moodle</example>
2561
+ <example>New Site</example>
2562
+ <param pos="0" name="service.vendor" value="Moodle"/>
2563
+ <param pos="0" name="service.product" value="Moodle CMS"/>
2564
+ <param pos="0" name="service.certainty" value="0.5"/>
2565
+ </fingerprint>
2566
+
2567
+ <fingerprint pattern="^ArchiveTeam Warrior$">
2568
+ <description>Internet Archive Warrior Appliance</description>
2569
+ <example>ArchiveTeam Warrior</example>
2570
+ <param pos="0" name="os.vendor" value="Internet Archive"/>
2571
+ <param pos="0" name="os.family" value="Linux"/>
2572
+ <param pos="0" name="os.product" value="Linux"/>
2573
+ <param pos="0" name="hw.vendor" value="Internet Archive"/>
2574
+ <param pos="0" name="hw.device" value="Storage Appliance"/>
2575
+ <param pos="0" name="hw.product" value="ArchiveTeam Warrior"/>
2576
+ </fingerprint>
2577
+
2578
+ <fingerprint pattern="^(?:Dashboard|Log In) - Confluence$">
2579
+ <description>Atlassian Confluence</description>
2580
+ <example>Dashboard - Confluence</example>
2581
+ <example>Log In - Confluence</example>
2582
+ <param pos="0" name="service.vendor" value="Atlassian"/>
2583
+ <param pos="0" name="service.product" value="Confluence"/>
2584
+ <param pos="0" name="service.cpe23" value="cpe:/a:atlassian:confluence:-"/>
2585
+ </fingerprint>
2586
+
2587
+ <fingerprint pattern="^System Dashboard - ">
2588
+ <description>Atlassian Jira</description>
2589
+ <example>System Dashboard - Jira</example>
2590
+ <example>System Dashboard - [Dev Test JIRA]</example>
2591
+ <param pos="0" name="service.vendor" value="Atlassian"/>
2592
+ <param pos="0" name="service.product" value="Jira"/>
2593
+ <param pos="0" name="service.cpe23" value="cpe:/a:atlassian:jira:-"/>
2594
+ </fingerprint>
2595
+
2596
+ <fingerprint pattern="^(?:Welcome to XAMPP|XAMPP for Linux)">
2597
+ <description>XAMPP Server</description>
2598
+ <example>Welcome to XAMPP</example>
2599
+ <example>XAMPP for Linux</example>
2600
+ <param pos="0" name="service.vendor" value="XAMPP"/>
2601
+ <param pos="0" name="service.product" value="XAMPP Server"/>
2602
+ </fingerprint>
2603
+
2604
+ <fingerprint pattern="^Greenbone Security (?:Assistant|Manager)">
2605
+ <description>Greenbone Security Scanner</description>
2606
+ <example>Greenbone Security Assistant</example>
2607
+ <example>Greenbone Security Manager</example>
2608
+ <param pos="0" name="service.vendor" value="Greenbone"/>
2609
+ <param pos="0" name="service.product" value="Security Scanner"/>
2610
+ </fingerprint>
2611
+
2612
+ <fingerprint pattern="^Kodi$">
2613
+ <description>Kodi Media Server</description>
2614
+ <example>Kodi</example>
2615
+ <param pos="0" name="service.vendor" value="Kodi"/>
2616
+ <param pos="0" name="service.product" value="Media Server"/>
2617
+ </fingerprint>
2618
+
2619
+ <fingerprint pattern="^(?:Drupal|TurnKey Drupal\d+|Select an installation profile)$">
2620
+ <description>Drupal CMS</description>
2621
+ <example>Drupal</example>
2622
+ <example>TurnKey Drupal8</example>
2623
+ <example>TurnKey Drupal7</example>
2624
+ <example>Select an installation profile</example>
2625
+ <param pos="0" name="service.vendor" value="Drupal"/>
2626
+ <param pos="0" name="service.product" value="CMS"/>
2627
+ </fingerprint>
2628
+
2629
+ <fingerprint pattern="^LibreNMS$">
2630
+ <description>LibreNMS</description>
2631
+ <example>LibreNMS</example>
2632
+ <param pos="0" name="service.vendor" value="LibreNMS"/>
2633
+ <param pos="0" name="service.product" value="LibreNMS"/>
2634
+ <param pos="0" name="service.cpe23" value="cpe:/a:librenms:librenms:-"/>
2635
+ </fingerprint>
2636
+
2637
+ <fingerprint pattern="^HDHomeRun Main Menu$">
2638
+ <description>HDHomeRun</description>
2639
+ <example>HDHomeRun Main Menu</example>
2640
+ <param pos="0" name="os.vendor" value="SiliconDust"/>
2641
+ <param pos="0" name="os.family" value="Linux"/>
2642
+ <param pos="0" name="os.product" value="Linux"/>
2643
+ <param pos="0" name="hw.vendor" value="SiliconDust"/>
2644
+ <param pos="0" name="hw.device" value="Media Server"/>
2645
+ <param pos="0" name="hw.product" value="HDHomeRun"/>
2646
+ </fingerprint>
2647
+
2648
+ <fingerprint pattern="^Kubernetes Dashboard$">
2649
+ <description>Kubernetes Dashboard</description>
2650
+ <example>Kubernetes Dashboard</example>
2651
+ <param pos="0" name="service.vendor" value="Kubernetes"/>
2652
+ <param pos="0" name="service.product" value="Dashboard"/>
2653
+ </fingerprint>
2654
+
2655
+ <fingerprint pattern="^SoundTouch Access Point Setup$">
2656
+ <description>Bose SoundTouch</description>
2657
+ <example>SoundTouch Access Point Setup</example>
2658
+ <param pos="0" name="hw.device" value="Network Audio"/>
2659
+ <param pos="0" name="hw.vendor" value="Bose"/>
2660
+ <param pos="0" name="hw.family" value="SoundTouch"/>
2661
+ <param pos="0" name="os.device" value="Network Audio"/>
2662
+ <param pos="0" name="os.vendor" value="Bose"/>
2663
+ <param pos="0" name="os.product" value="SoundTouch"/>
2664
+ </fingerprint>
2665
+
2666
+ <fingerprint pattern="^(?:embedded )?WS server test page$">
2667
+ <description>Dell iDRAC Websocket Endpoint</description>
2668
+ <example>WS server test page</example>
2669
+ <example>embedded WS server test page</example>
2670
+ <param pos="0" name="hw.device" value="Lights Out Management"/>
2671
+ <param pos="0" name="hw.vendor" value="Dell"/>
2672
+ <param pos="0" name="hw.product" value="iDRAC"/>
2673
+ <param pos="0" name="hw.certainty" value="0.75"/>
2674
+ <param pos="0" name="os.vendor" value="Dell"/>
2675
+ <param pos="0" name="os.product" value="iDRAC Linux"/>
2676
+ <param pos="0" name="os .certainty" value="0.75"/>
2677
+ </fingerprint>
2678
+
2679
+ <fingerprint pattern="^Pulse Connect Secure - SSL">
2680
+ <description>Pulse Secure VPN</description>
2681
+ <example>Pulse Connect Secure - SSL</example>
2682
+ <param pos="0" name="os.vendor" value="Pulse Secure"/>
2683
+ <param pos="0" name="os.family" value="SSL-VPN"/>
2684
+ <param pos="0" name="os.device" value="SSL-VPN"/>
2685
+ <param pos="0" name="os.product" value="SSL-VPN"/>
2686
+ </fingerprint>
2687
+
2688
+ </fingerprints>