recog 2.3.8 → 2.3.9
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- checksums.yaml +4 -4
- data/.gitignore +6 -0
- data/CONTRIBUTING.md +136 -37
- data/README.md +18 -16
- data/bin/recog_cleanup +16 -0
- data/bin/recog_standardize +30 -6
- data/identifiers/README.md +9 -0
- data/identifiers/hw_device.txt +77 -0
- data/identifiers/hw_family.txt +96 -0
- data/identifiers/hw_product.txt +328 -0
- data/identifiers/os_architecture.txt +6 -6
- data/identifiers/os_device.txt +45 -3
- data/identifiers/os_family.txt +206 -41
- data/identifiers/os_product.txt +238 -17
- data/identifiers/service_family.txt +144 -57
- data/identifiers/service_product.txt +384 -83
- data/identifiers/vendor.txt +553 -68
- data/lib/recog/version.rb +1 -1
- data/requirements.txt +1 -1
- data/xml/apache_modules.xml +292 -5
- data/xml/apache_os.xml +41 -2
- data/xml/architecture.xml +11 -3
- data/xml/dns_versionbind.xml +76 -8
- data/xml/favicons.xml +1700 -0
- data/xml/ftp_banners.xml +178 -8
- data/xml/h323_callresp.xml +112 -12
- data/xml/hp_pjl_id.xml +47 -5
- data/xml/html_title.xml +1258 -25
- data/xml/http_cookies.xml +64 -9
- data/xml/http_servers.xml +667 -37
- data/xml/http_wwwauth.xml +141 -26
- data/xml/imap_banners.xml +19 -13
- data/xml/ldap_searchresult.xml +81 -9
- data/xml/mdns_device-info_txt.xml +175 -2
- data/xml/mdns_workstation_txt.xml +4 -2
- data/xml/mysql_banners.xml +134 -7
- data/xml/mysql_error.xml +113 -6
- data/xml/nntp_banners.xml +10 -2
- data/xml/ntp_banners.xml +80 -4
- data/xml/operating_system.xml +89 -3
- data/xml/pop_banners.xml +30 -31
- data/xml/rsh_resp.xml +11 -2
- data/xml/rtsp_servers.xml +22 -2
- data/xml/sip_banners.xml +35 -4
- data/xml/sip_user_agents.xml +29 -2
- data/xml/smb_native_lm.xml +10 -2
- data/xml/smb_native_os.xml +79 -2
- data/xml/smtp_banners.xml +146 -7
- data/xml/smtp_debug.xml +6 -4
- data/xml/smtp_ehlo.xml +7 -5
- data/xml/smtp_expn.xml +13 -4
- data/xml/smtp_help.xml +23 -4
- data/xml/smtp_mailfrom.xml +5 -2
- data/xml/smtp_noop.xml +6 -5
- data/xml/smtp_quit.xml +5 -4
- data/xml/smtp_rcptto.xml +5 -2
- data/xml/smtp_rset.xml +4 -4
- data/xml/smtp_turn.xml +4 -4
- data/xml/smtp_vrfy.xml +14 -4
- data/xml/snmp_sysdescr.xml +731 -24
- data/xml/snmp_sysobjid.xml +47 -2
- data/xml/ssh_banners.xml +175 -5
- data/xml/telnet_banners.xml +266 -15
- data/xml/x11_banners.xml +26 -3
- data/xml/x509_issuers.xml +30 -6
- data/xml/x509_subjects.xml +200 -31
- metadata +8 -2
data/xml/pop_banners.xml
CHANGED
@@ -1,9 +1,10 @@
|
|
1
|
-
<?xml version=
|
1
|
+
<?xml version='1.0' encoding='UTF-8'?>
|
2
2
|
<fingerprints matches="pop3.banner" protocol="pop3" database_type="service" preference="0.90">
|
3
3
|
<!--
|
4
4
|
POP3 greeting messages (part of the banner after the status indicator +OK or -ERR) are
|
5
5
|
matched against these patterns to fingerprint POP3 servers.
|
6
6
|
-->
|
7
|
+
|
7
8
|
<fingerprint pattern="^([^ ]+) +Cyrus POP3 v(\d+\.\d+.*)-OS X(?: Server)? ([\d\.]+).* server ready">
|
8
9
|
<description>OSX Cyrus POP</description>
|
9
10
|
<example host.domain="8.8.8.8" service.version="2.3.8" os.version="10.5">8.8.8.8 Cyrus POP3 v2.3.8-OS X Server 10.5: 9A562 server ready <1999107648.1324502155@8.8.8.8></example>
|
@@ -18,6 +19,7 @@
|
|
18
19
|
<param pos="0" name="os.cpe23" value="cpe:/o:apple:mac_os_x:{os.version}"/>
|
19
20
|
<param pos="1" name="host.domain"/>
|
20
21
|
</fingerprint>
|
22
|
+
|
21
23
|
<fingerprint pattern="^([^ ]+) +Cyrus POP3 v([\d\.]+)">
|
22
24
|
<description>CMU Cyrus POP</description>
|
23
25
|
<example host.domain="foo" service.version="2.3">foo Cyrus POP3 v2.3</example>
|
@@ -28,6 +30,7 @@
|
|
28
30
|
<param pos="2" name="service.version"/>
|
29
31
|
<param pos="1" name="host.domain"/>
|
30
32
|
</fingerprint>
|
33
|
+
|
31
34
|
<fingerprint pattern="^Lotus Notes POP3 server version X[^ ]+ ready on .*$">
|
32
35
|
<description>IBM Lotus Notes/Domino</description>
|
33
36
|
<example>Lotus Notes POP3 server version X2.0 ready on foo/bar.</example>
|
@@ -36,6 +39,7 @@
|
|
36
39
|
<param pos="0" name="service.product" value="Lotus Domino"/>
|
37
40
|
<param pos="0" name="service.cpe23" value="cpe:/a:ibm:lotus_domino:-"/>
|
38
41
|
</fingerprint>
|
42
|
+
|
39
43
|
<fingerprint pattern="^Lotus Notes POP3 server version Release ([^ ]+) ready on .*$">
|
40
44
|
<description>IBM Lotus Notes/Domino - Release variant</description>
|
41
45
|
<example service.version="8.5.1FP5">Lotus Notes POP3 server version Release 8.5.1FP5 ready on foo/US.</example>
|
@@ -45,6 +49,7 @@
|
|
45
49
|
<param pos="1" name="service.version"/>
|
46
50
|
<param pos="0" name="service.cpe23" value="cpe:/a:ibm:lotus_domino:{service.version}"/>
|
47
51
|
</fingerprint>
|
52
|
+
|
48
53
|
<fingerprint pattern="^Qpopper \(version (\d+\.\d+\.\d+), modified by Sphera Technologies\) at (.+) starting\..*$">
|
49
54
|
<description>Qpopper with Sphera mods</description>
|
50
55
|
<example>Qpopper (version 4.0.3, modified by Sphera Technologies) at domain starting. <xxx@domain></example>
|
@@ -54,6 +59,7 @@
|
|
54
59
|
<param pos="1" name="service.version"/>
|
55
60
|
<param pos="2" name="host.domain"/>
|
56
61
|
</fingerprint>
|
62
|
+
|
57
63
|
<fingerprint pattern="^Qpopper \(version (\d+\.\d+\.\d+)-mysql-(.+)\) at (.+) starting\..*$">
|
58
64
|
<description>Qpopper with MySQL auth module</description>
|
59
65
|
<example>Qpopper (version 4.0.3-mysql-0.13) at domain starting. <xxx@domain></example>
|
@@ -66,6 +72,7 @@
|
|
66
72
|
<param pos="2" name="service.component.version"/>
|
67
73
|
<param pos="3" name="host.domain"/>
|
68
74
|
</fingerprint>
|
75
|
+
|
69
76
|
<fingerprint pattern="(?i)^Qpop(?:per)? \(version ([\d\.]+)\) at (.+)(?: starting\.)?.*$">
|
70
77
|
<description>Qpopper missing version info</description>
|
71
78
|
<example>Qpopper (version 4.0.16) at foo.example.com</example>
|
@@ -77,6 +84,7 @@
|
|
77
84
|
<param pos="1" name="service.version"/>
|
78
85
|
<param pos="2" name="host.domain"/>
|
79
86
|
</fingerprint>
|
87
|
+
|
80
88
|
<fingerprint pattern="^QPOP \(version (.*)\) at (.+) starting\..*$">
|
81
89
|
<description>Qpopper with missing version info</description>
|
82
90
|
<example>QPOP (version ?) at domain starting. <xxx@domain></example>
|
@@ -86,6 +94,7 @@
|
|
86
94
|
<param pos="1" name="qpopper.version"/>
|
87
95
|
<param pos="2" name="host.domain"/>
|
88
96
|
</fingerprint>
|
97
|
+
|
89
98
|
<fingerprint pattern="^Microsoft Exchange Server 2003 POP3 server version (\d+\.\d+\.\d+\.\d+) (.+) ready.$">
|
90
99
|
<description>Microsoft Exchange Server 2003</description>
|
91
100
|
<example>Microsoft Exchange Server 2003 POP3 server version 6.5.6944.0 (host) ready.</example>
|
@@ -100,6 +109,7 @@
|
|
100
109
|
<param pos="0" name="os.product" value="Windows"/>
|
101
110
|
<param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows:-"/>
|
102
111
|
</fingerprint>
|
112
|
+
|
103
113
|
<fingerprint pattern="^Microsoft Exchange 2000 POP3 server version (\d+\.\d+\.\d+\.\d+) (.+) ready.$">
|
104
114
|
<description>Microsoft Exchange Server 2000</description>
|
105
115
|
<example>Microsoft Exchange 2000 POP3 server version 6.0.6603.0 (host) ready.</example>
|
@@ -114,6 +124,7 @@
|
|
114
124
|
<param pos="0" name="os.product" value="Windows"/>
|
115
125
|
<param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows:-"/>
|
116
126
|
</fingerprint>
|
127
|
+
|
117
128
|
<fingerprint pattern="^Microsoft Exchange POP3 server version (\d+\.\d+\.\d+\.\d+) ready$">
|
118
129
|
<description>Microsoft Exchange Server</description>
|
119
130
|
<example>Microsoft Exchange POP3 server version 5.5.2654.50 ready</example>
|
@@ -127,6 +138,7 @@
|
|
127
138
|
<param pos="0" name="os.product" value="Windows"/>
|
128
139
|
<param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows:-"/>
|
129
140
|
</fingerprint>
|
141
|
+
|
130
142
|
<fingerprint pattern="^Microsoft Windows POP3 Service Version 1.0 <.+@(.+)> ready.$">
|
131
143
|
<description>Microsoft POP3 Services on Windows 2003</description>
|
132
144
|
<example>Microsoft Windows POP3 Service Version 1.0 <xxx@host> ready.</example>
|
@@ -139,6 +151,7 @@
|
|
139
151
|
<param pos="0" name="os.product" value="Windows Server 2003"/>
|
140
152
|
<param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_server_2003:-"/>
|
141
153
|
</fingerprint>
|
154
|
+
|
142
155
|
<fingerprint pattern="^Microsoft Exchange Server 2007 POP3 service ready\.?$">
|
143
156
|
<description>Microsoft Exchange Server 2007</description>
|
144
157
|
<example>Microsoft Exchange Server 2007 POP3 service ready</example>
|
@@ -151,6 +164,7 @@
|
|
151
164
|
<param pos="0" name="os.product" value="Windows"/>
|
152
165
|
<param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows:-"/>
|
153
166
|
</fingerprint>
|
167
|
+
|
154
168
|
<fingerprint pattern="^The? Microsoft Exchange POP3 service is ready\.?$">
|
155
169
|
<description>Microsoft Exchange Server, generic</description>
|
156
170
|
<example>The Microsoft Exchange POP3 service is ready.</example>
|
@@ -163,12 +177,14 @@
|
|
163
177
|
<param pos="0" name="os.product" value="Windows"/>
|
164
178
|
<param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows:-"/>
|
165
179
|
</fingerprint>
|
180
|
+
|
166
181
|
<fingerprint pattern="^[dD]ovecot (?:DA )?ready\.(?: <.+@(.+)>)?$">
|
167
182
|
<description>Dovecot Secure POP Server</description>
|
168
183
|
<param pos="0" name="service.family" value="Dovecot"/>
|
169
184
|
<param pos="0" name="service.product" value="Dovecot"/>
|
170
185
|
<param pos="1" name="host.name"/>
|
171
186
|
</fingerprint>
|
187
|
+
|
172
188
|
<fingerprint pattern="^(\S+) Zimbra POP3 server ready\.?$">
|
173
189
|
<description>VMware Zimbra POP</description>
|
174
190
|
<example host.name="foo.bar">foo.bar Zimbra POP3 server ready</example>
|
@@ -177,6 +193,7 @@
|
|
177
193
|
<param pos="0" name="service.cpe23" value="cpe:/a:vmware:zimbra_desktop:-"/>
|
178
194
|
<param pos="1" name="host.name"/>
|
179
195
|
</fingerprint>
|
196
|
+
|
180
197
|
<fingerprint pattern="^(\S+) Zimbra (\S+) POP3 server ready\.?$">
|
181
198
|
<description>VMware Zimbra POP with version</description>
|
182
199
|
<example host.name="foo.bar">foo.bar Zimbra 7.0.0_GA_3079 POP3 server ready</example>
|
@@ -186,12 +203,14 @@
|
|
186
203
|
<param pos="0" name="service.cpe23" value="cpe:/a:vmware:zimbra_desktop:{service.version}"/>
|
187
204
|
<param pos="1" name="host.name"/>
|
188
205
|
</fingerprint>
|
206
|
+
|
189
207
|
<fingerprint pattern="^(?:S?POP3? server ready |Hello there.? )?<.*@([^>]+)>$">
|
190
208
|
<description>Generic masked POP3 server</description>
|
191
209
|
<example>POP3 server ready <58c29ae4-7316-429e-8109-060444ab1a28@foo.example.com></example>
|
192
210
|
<example><84427.1298535083@foo.example.com></example>
|
193
211
|
<param pos="1" name="host.name"/>
|
194
212
|
</fingerprint>
|
213
|
+
|
195
214
|
<fingerprint pattern="^ApplePasswordServer ([\d\.]+) password">
|
196
215
|
<description>Apple Open Directory</description>
|
197
216
|
<example>ApplePasswordServer 10.6.0.0 password server at 10.2.90.228 ready.</example>
|
@@ -205,6 +224,7 @@
|
|
205
224
|
<param pos="0" name="os.certainty" value="0.5"/>
|
206
225
|
<param pos="0" name="os.cpe23" value="cpe:/o:apple:mac_os_x:{os.version}"/>
|
207
226
|
</fingerprint>
|
227
|
+
|
208
228
|
<fingerprint pattern="^TCPIP POP server V\d\.\d\S-\S{3}, OpenVMS V(\d\.\d-\d)(?:\s+\S+)?\s+at\s+(\S+), .*$">
|
209
229
|
<description>TCP/IP Services for OpenVMS POP server</description>
|
210
230
|
<example os.version="7.3-2" host.name="example.com">TCPIP POP server V5.4J-15A, OpenVMS V7.3-2 Alpha at example.com, up since 2015-02-12 08:44:53 20400434.2</example>
|
@@ -218,6 +238,7 @@
|
|
218
238
|
<param pos="0" name="os.cpe23" value="cpe:/o:hp:openvms:{os.version}"/>
|
219
239
|
<param pos="2" name="host.name"/>
|
220
240
|
</fingerprint>
|
241
|
+
|
221
242
|
<fingerprint pattern="^Hello there\.$">
|
222
243
|
<description>Courier MTA POP</description>
|
223
244
|
<example>Hello there.</example>
|
@@ -225,6 +246,7 @@
|
|
225
246
|
<param pos="0" name="service.family" value="Courier MTA"/>
|
226
247
|
<param pos="0" name="service.product" value="Courier POP"/>
|
227
248
|
</fingerprint>
|
249
|
+
|
228
250
|
<fingerprint pattern="^CMailServer ([\d\.]+) POP3 Service Ready$">
|
229
251
|
<description>CMailServer</description>
|
230
252
|
<example service.version="5.0.0">CMailServer 5.0.0 POP3 Service Ready</example>
|
@@ -234,6 +256,7 @@
|
|
234
256
|
<param pos="0" name="os.vendor" value="Microsoft"/>
|
235
257
|
<param pos="1" name="service.version"/>
|
236
258
|
</fingerprint>
|
259
|
+
|
237
260
|
<fingerprint pattern="^POP3 Bigfoot v(\d\.\d) server ready$">
|
238
261
|
<description>POP3 Bigfoot server</description>
|
239
262
|
<example service.version="1.0">POP3 Bigfoot v1.0 server ready</example>
|
@@ -242,6 +265,7 @@
|
|
242
265
|
<param pos="0" name="service.product" value="Bigfoot Email Tools"/>
|
243
266
|
<param pos="1" name="service.version"/>
|
244
267
|
</fingerprint>
|
268
|
+
|
245
269
|
<fingerprint pattern="^CCProxy ([\d.]+) POP3 Service Ready$">
|
246
270
|
<description>CCProxy POP3 server</description>
|
247
271
|
<example service.version="8.0">CCProxy 8.0 POP3 Service Ready</example>
|
@@ -252,6 +276,7 @@
|
|
252
276
|
<param pos="0" name="service.product" value="CCProxy"/>
|
253
277
|
<param pos="1" name="service.version"/>
|
254
278
|
</fingerprint>
|
279
|
+
|
255
280
|
<fingerprint pattern="^POP3 on WinWebMail \[([\d.]+)\] ready\.$">
|
256
281
|
<description>WinWebmail POP3</description>
|
257
282
|
<example service.version="1.1.1.1">POP3 on WinWebMail [1.1.1.1] ready.</example>
|
@@ -263,6 +288,7 @@
|
|
263
288
|
<param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows:-"/>
|
264
289
|
<param pos="1" name="service.version"/>
|
265
290
|
</fingerprint>
|
291
|
+
|
266
292
|
<fingerprint pattern="^BlackJumboDog \(Version ([\d\.]+)\) ready$">
|
267
293
|
<description>BlackJumboDog</description>
|
268
294
|
<example service.version="5.7.5.0">BlackJumboDog (Version 5.7.5.0) ready</example>
|
@@ -274,6 +300,7 @@
|
|
274
300
|
<param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows:-"/>
|
275
301
|
<param pos="1" name="service.version"/>
|
276
302
|
</fingerprint>
|
303
|
+
|
277
304
|
<!--
|
278
305
|
; Mandrake 8.1 - uses UW IMAP
|
279
306
|
; +OK POP3 mandrake81-f540k v2000.70mdk server ready
|
@@ -283,66 +310,38 @@
|
|
283
310
|
// +OK POP3 [158.122.12.70] v2003.83mdk server ready
|
284
311
|
// +OK POP3 [161.58.53.189] 2006b.94 server ready
|
285
312
|
// +OK POP3 [192.168.0.250] v2000.70rh server ready
|
286
|
-
|
287
313
|
; Lotus Domino - NOTE: POP versions do not map to Domino version
|
288
314
|
// +OK Lotus Notes POP3 server version X2.0 ready <0015521D.86257321.0000081C.00000008@Atlas/AgileTek> on Atlas/AgileTek.
|
289
315
|
( call ?j_popPatterns add
|
290
316
|
"^\\+OK Lotus Notes POP3 server version ([^ ]*) ready on ([^\\.]*)\\.$" )
|
291
317
|
( call ?j_popNames add "Lotus-Domino" )
|
292
|
-
|
293
318
|
// +OK alquilerpc.com.mx POP3 Server (Version 1.020h) ready.
|
294
|
-
|
295
319
|
// Ipswitch IMail
|
296
320
|
// +OK X1 NT-POP3 Server geneseenet06 (IMail 8.22 45450-1)
|
297
|
-
|
298
321
|
// +OK X1 POP3 Mail Server
|
299
|
-
|
300
322
|
// +OK server POP3 server (DeskNow POP3 Server 1.0) ready
|
301
|
-
|
302
323
|
// +OK <1185161310.3352@goto15028.com> [XMail 1.24 POP3 Server] service ready; Mon, 23 Jul 2007 11:28:30 +0800
|
303
|
-
|
304
324
|
// +OK IdeaPop3Server v0.50 ready.
|
305
|
-
|
306
325
|
// +OK qxztmail POP3 server (STD Ymailserver v1.8 POP3) ready
|
307
|
-
|
308
326
|
// +OK blue.forest-green.lan POP3 server (JAMES POP3 Server 2.2.0) ready
|
309
|
-
|
310
327
|
// +OK xxx CMailServer 5.2 POP3 Service Ready
|
311
|
-
|
312
328
|
// +OK iac3 Solstice (tm) Internet Mail Server (tm) POP3 2.0 at Mon, 23 Jul 2007 20:08:02 -0500 (CDT)
|
313
|
-
|
314
329
|
// +OK Gordano Messaging Suite POP3 server ready
|
315
330
|
// +OK Gordano Messaging Suite POP3 server ready <13501095613509@hollandcanadaline.com>
|
316
|
-
|
317
331
|
// +OK unitechna.lt Merak 8.9.1 POP3 Sun, 22 Jul 2007 23:16:25 +0300 <20070722231625@unitechna.lt>
|
318
|
-
|
319
|
-
|
320
332
|
// +OK Cubic Circle's v1.31 1998/05/13 POP3 ready <0c9300004104a246@www.dvdld.co.za>
|
321
|
-
|
322
333
|
// +OK Welcome to MailEnable POP3 Server
|
323
|
-
|
324
334
|
// +OK GroupWise POP3 server ready
|
325
|
-
|
326
335
|
// +OK POP3 AnalogX Proxy 4.14 (Release) ready.
|
327
|
-
|
328
336
|
// +OK lojack.com.ar POP MDaemon 9.6.0 ready <MDAEMON-F200707232110.AA1001241MD4604@lojack.com.ar>
|
329
|
-
|
330
337
|
// +OK DBMAIL pop3 server ready to rock <4393e6301f984e87ad7cdc766595c78f@mx>
|
331
|
-
|
332
338
|
// +OK POP3 Welcome to vm-pop3d 1.1.6 <83532.1185400462@romeo.hostlab.nl>
|
333
|
-
|
334
339
|
// +OK Solid POP3 server ready
|
335
|
-
|
336
340
|
// +OK ArGoSoft Mail Server Pro for WinNT/2000/XP, Version 1.8 (1.8.8.9)
|
337
|
-
|
338
341
|
// +OK POP3 titan [cppop 20.0] at [207.150.171.34]
|
339
|
-
|
340
342
|
// +OK ModusMail POP3 Server-NOTF 4.2.425.4 Ready <42760712.1185328354.283@gbso.net>
|
341
|
-
|
342
343
|
// +OK DPOP Version number supressed.
|
343
|
-
|
344
344
|
// +OK XPOP3 0.0.1 server ready
|
345
|
-
|
346
345
|
-ERR (Proxy) connect error:socket error:No route to host
|
347
346
|
-ERR No permission
|
348
347
|
-ERR sorry, POP server too busy right now. Try again later.
|
@@ -494,6 +493,6 @@
|
|
494
493
|
// apparently this is a P3Scan Proxy bug
|
495
494
|
// http://lists.freebsd.org/pipermail/freebsd-ports/2004-May/012400.html
|
496
495
|
Oops, that would loop!
|
497
|
-
|
498
496
|
-->
|
499
|
-
|
497
|
+
|
498
|
+
</fingerprints>
|
data/xml/rsh_resp.xml
CHANGED
@@ -1,14 +1,16 @@
|
|
1
|
-
<?xml version=
|
1
|
+
<?xml version='1.0' encoding='UTF-8'?>
|
2
2
|
<fingerprints protocol="rsh" database_type="service">
|
3
3
|
<!--
|
4
4
|
Rservices responses to requests are matched against these patterns to fingerprint the OSes of servers.
|
5
5
|
-->
|
6
|
+
|
6
7
|
<fingerprint pattern="^.Permission denied: Error 0$">
|
7
8
|
<description>Digital Unix rlogind</description>
|
8
9
|
<example>xPermission denied: Error 0</example>
|
9
10
|
<param pos="0" name="os.vendor" value="HP"/>
|
10
11
|
<param pos="0" name="os.family" value="Digital Unix"/>
|
11
12
|
</fingerprint>
|
13
|
+
|
12
14
|
<fingerprint pattern="^.Winsock RSHD/NT: Protocol negotiation error\..+$|^.in\.rlogind: Permission denied\..+$" flags="REG_DOT_NEWLINE">
|
13
15
|
<description>Windows rlogind</description>
|
14
16
|
<example>xWinsock RSHD/NT: Protocol negotiation error.
|
@@ -18,6 +20,7 @@
|
|
18
20
|
<param pos="0" name="os.vendor" value="Microsoft"/>
|
19
21
|
<param pos="0" name="os.family" value="Windows"/>
|
20
22
|
</fingerprint>
|
23
|
+
|
21
24
|
<fingerprint pattern="^.permission denied\..+$" flags="REG_DOT_NEWLINE">
|
22
25
|
<description>Solaris rlogind</description>
|
23
26
|
<example>xpermission denied.
|
@@ -27,6 +30,7 @@
|
|
27
30
|
<param pos="0" name="os.product" value="Solaris"/>
|
28
31
|
<param pos="0" name="os.cpe23" value="cpe:/o:sun:solaris:-"/>
|
29
32
|
</fingerprint>
|
33
|
+
|
30
34
|
<fingerprint pattern="^.rlogind: Acc.s refus.\..+$" flags="REG_DOT_NEWLINE">
|
31
35
|
<description>AIX rlogind</description>
|
32
36
|
<example>xrlogind: Accxs refusx.
|
@@ -36,6 +40,7 @@
|
|
36
40
|
<param pos="0" name="os.product" value="AIX"/>
|
37
41
|
<param pos="0" name="os.cpe23" value="cpe:/o:ibm:aix:-"/>
|
38
42
|
</fingerprint>
|
43
|
+
|
39
44
|
<fingerprint pattern="^.rlogind: Host name for your address \([\d.]+\) unknown\..*$" flags="REG_DOT_NEWLINE">
|
40
45
|
<description>A/UX rlogind</description>
|
41
46
|
<example>xrlogind: Host name for your address (127.0.0.1) unknown.
|
@@ -43,6 +48,7 @@
|
|
43
48
|
<param pos="0" name="os.vendor" value="Apple"/>
|
44
49
|
<param pos="0" name="os.family" value="A/UX"/>
|
45
50
|
</fingerprint>
|
51
|
+
|
46
52
|
<fingerprint pattern="^.rexecd: Login incorrect\..*$" flags="REG_DOT_NEWLINE">
|
47
53
|
<description>HP-UX rexecd</description>
|
48
54
|
<example>xrexecd: Login incorrect.
|
@@ -52,6 +58,7 @@
|
|
52
58
|
<param pos="0" name="os.product" value="HP-UX"/>
|
53
59
|
<param pos="0" name="os.cpe23" value="cpe:/o:hp:hp-ux:-"/>
|
54
60
|
</fingerprint>
|
61
|
+
|
55
62
|
<fingerprint pattern="^.rexecd: [-\d]+.*$" flags="REG_DOT_NEWLINE">
|
56
63
|
<description>AIX rexecd</description>
|
57
64
|
<example>xrexecd: 0-1 The login is not correct.
|
@@ -61,6 +68,7 @@
|
|
61
68
|
<param pos="0" name="os.product" value="AIX"/>
|
62
69
|
<param pos="0" name="os.cpe23" value="cpe:/o:ibm:aix:-"/>
|
63
70
|
</fingerprint>
|
71
|
+
|
64
72
|
<fingerprint pattern="^.remshd: (?:getservbyname.+|Kerberos Authentication not enabled\..+|Error! Kerberos authentication failed)$" flags="REG_DOT_NEWLINE">
|
65
73
|
<description>HP-UX rshd</description>
|
66
74
|
<example>xremshd: getservbyname
|
@@ -73,4 +81,5 @@
|
|
73
81
|
<param pos="0" name="os.product" value="HP-UX"/>
|
74
82
|
<param pos="0" name="os.cpe23" value="cpe:/o:hp:hp-ux:-"/>
|
75
83
|
</fingerprint>
|
76
|
-
|
84
|
+
|
85
|
+
</fingerprints>
|
data/xml/rtsp_servers.xml
CHANGED
@@ -1,4 +1,4 @@
|
|
1
|
-
<?xml version=
|
1
|
+
<?xml version='1.0' encoding='UTF-8'?>
|
2
2
|
<fingerprints matches="rtsp_header.server" protocol="rtsp" database_type="service" preference="0.85">
|
3
3
|
<fingerprint pattern="^Flussonic \(http:\/\/www.flussonic.com\/\) ([\d\.]+)$">
|
4
4
|
<description>Flussonic Media Server</description>
|
@@ -8,6 +8,7 @@
|
|
8
8
|
<param pos="0" name="service.product" value="Flussonic Media Server"/>
|
9
9
|
<param pos="1" name="service.version"/>
|
10
10
|
</fingerprint>
|
11
|
+
|
11
12
|
<fingerprint pattern="^Hipcam RealServer\/V([\d\.]+)$">
|
12
13
|
<description>Hipcam IP camera running the RealServer RTSP server.</description>
|
13
14
|
<example service.version="1.0">Hipcam RealServer/V1.0</example>
|
@@ -17,6 +18,7 @@
|
|
17
18
|
<param pos="0" name="hw.vendor" value="Hipcam"/>
|
18
19
|
<param pos="0" name="hw.device" value="IP Camera"/>
|
19
20
|
</fingerprint>
|
21
|
+
|
20
22
|
<fingerprint pattern="^Dahua Rtsp Server$">
|
21
23
|
<description>Dahua IP Camera</description>
|
22
24
|
<example>Dahua Rtsp Server</example>
|
@@ -24,12 +26,14 @@
|
|
24
26
|
<param pos="0" name="hw.vendor" value="Dahua"/>
|
25
27
|
<param pos="0" name="hw.device" value="IP Camera"/>
|
26
28
|
</fingerprint>
|
29
|
+
|
27
30
|
<fingerprint pattern="^GStreamer RTSP server$">
|
28
31
|
<description>GStreamer RTSP Server (https://github.com/GStreamer/gst-rtsp-server)</description>
|
29
32
|
<example>GStreamer RTSP server</example>
|
30
33
|
<param pos="0" name="service.vendor" value="GStreamer"/>
|
31
34
|
<param pos="0" name="service.product" value="GStreamer RTSP Server"/>
|
32
35
|
</fingerprint>
|
36
|
+
|
33
37
|
<fingerprint pattern="^WMServer\/([\d\.]+)$">
|
34
38
|
<description>Windows Media Server</description>
|
35
39
|
<example service.version="9.1.1.3862">WMServer/9.1.1.3862</example>
|
@@ -41,6 +45,7 @@
|
|
41
45
|
<param pos="0" name="os.vendor" value="Microsoft"/>
|
42
46
|
<param pos="0" name="os.family" value="Windows"/>
|
43
47
|
</fingerprint>
|
48
|
+
|
44
49
|
<fingerprint pattern="^Wowza (Streaming Engine|Media Server) ([\d\.]+) build(\d*)$">
|
45
50
|
<description>Wowza Media Systems Streaming Video Services</description>
|
46
51
|
<example service.version="4.7.7" service.version.version="20181108145350" service.product="Streaming Engine">Wowza Streaming Engine 4.7.7 build20181108145350</example>
|
@@ -50,18 +55,21 @@
|
|
50
55
|
<param pos="2" name="service.version"/>
|
51
56
|
<param pos="3" name="service.version.version"/>
|
52
57
|
</fingerprint>
|
58
|
+
|
53
59
|
<fingerprint pattern="^HiIpcam\/V\d+R\d+ VodServer\/[\d\.]+$">
|
54
60
|
<description>Foscam IP Camera</description>
|
55
61
|
<example>HiIpcam/V100R003 VodServer/1.0.0</example>
|
56
62
|
<param pos="0" name="hw.vendor" value="Foscam"/>
|
57
63
|
<param pos="0" name="hw.device" value="IP Camera"/>
|
58
64
|
</fingerprint>
|
65
|
+
|
59
66
|
<fingerprint pattern="^Indigo\-Security\/[\d\.]+$">
|
60
67
|
<description>Indigo Security IP Camera</description>
|
61
68
|
<example>Indigo-Security/1.0</example>
|
62
69
|
<param pos="0" name="hw.vendor" value="Indigo Security"/>
|
63
70
|
<param pos="0" name="hw.device" value="IP Camera"/>
|
64
71
|
</fingerprint>
|
72
|
+
|
65
73
|
<fingerprint pattern="^Cisco MediaSense Media Server$">
|
66
74
|
<description>Cisco MediaSense Media Server (RTSP)</description>
|
67
75
|
<example>Cisco MediaSense Media Server</example>
|
@@ -73,4 +81,16 @@
|
|
73
81
|
<param pos="0" name="hw.device" value="SIP Gateway"/>
|
74
82
|
<param pos="0" name="hw.product" value="MediaSense"/>
|
75
83
|
</fingerprint>
|
76
|
-
|
84
|
+
|
85
|
+
<fingerprint pattern="^AvigilonOnvifNvt/(\d+\.\S+)">
|
86
|
+
<description>Avigilon IP Camera</description>
|
87
|
+
<example os.version="2.6.0.130">AvigilonOnvifNvt/2.6.0.130</example>
|
88
|
+
<param pos="0" name="hw.vendor" value="Avigilon"/>
|
89
|
+
<param pos="0" name="hw.device" value="IP Camera"/>
|
90
|
+
<param pos="0" name="os.vendor" value="Avigilon"/>
|
91
|
+
<param pos="0" name="os.family" value="Linux"/>
|
92
|
+
<param pos="0" name="os.product" value="Linux"/>
|
93
|
+
<param pos="1" name="os.version"/>
|
94
|
+
</fingerprint>
|
95
|
+
|
96
|
+
</fingerprints>
|
data/xml/sip_banners.xml
CHANGED
@@ -1,9 +1,11 @@
|
|
1
|
-
<?xml version=
|
1
|
+
<?xml version='1.0' encoding='UTF-8'?>
|
2
2
|
<fingerprints matches="sip_header.server" protocol="sip" database_type="service">
|
3
3
|
<!--
|
4
4
|
SIP Server header values are matched against these patterns to fingerprint SIP devices.
|
5
5
|
-->
|
6
|
+
|
6
7
|
<!-- Cisco/Tandberg Products -->
|
8
|
+
|
7
9
|
<fingerprint pattern="^Cisco-SIPGateway/IOS-(\S+)\.x$">
|
8
10
|
<description>Cisco IOS SIP Gateway w/ Vague Version</description>
|
9
11
|
<example os.version="12">Cisco-SIPGateway/IOS-12.x</example>
|
@@ -20,6 +22,7 @@
|
|
20
22
|
<param pos="0" name="hw.vendor" value="Cisco"/>
|
21
23
|
<param pos="0" name="hw.device" value="Router"/>
|
22
24
|
</fingerprint>
|
25
|
+
|
23
26
|
<fingerprint pattern="^Cisco-SIPGateway/IOS-(\S+)$">
|
24
27
|
<description>Cisco IOS SIP Gateway w/ Full Version</description>
|
25
28
|
<example os.version="15.2.4.M3">Cisco-SIPGateway/IOS-15.2.4.M3</example>
|
@@ -41,6 +44,7 @@
|
|
41
44
|
<param pos="0" name="hw.vendor" value="Cisco"/>
|
42
45
|
<param pos="0" name="hw.device" value="Router"/>
|
43
46
|
</fingerprint>
|
47
|
+
|
44
48
|
<fingerprint pattern="^Cisco-CP-?(\d+G?)(?:-\S+)?/([\d\.]+)">
|
45
49
|
<description>Cisco CP VoIP Phone</description>
|
46
50
|
<example hw.model="7960G" hw.version="8.0">Cisco-CP7960G/8.0</example>
|
@@ -55,6 +59,7 @@
|
|
55
59
|
<param pos="1" name="hw.model"/>
|
56
60
|
<param pos="2" name="hw.version"/>
|
57
61
|
</fingerprint>
|
62
|
+
|
58
63
|
<fingerprint pattern="(?:Cisco|Linksys)/(SPA\d+[DG]?\d?)-([\d\.a-zA-Z]+)">
|
59
64
|
<description>Cisco/Linksys SPA VoIP Phone</description>
|
60
65
|
<example hw.model="SPA112" hw.version="1.4.1SR1">Cisco/SPA112-1.4.1SR1(002)d-hisec</example>
|
@@ -72,6 +77,7 @@
|
|
72
77
|
<param pos="1" name="hw.model"/>
|
73
78
|
<param pos="2" name="hw.version"/>
|
74
79
|
</fingerprint>
|
80
|
+
|
75
81
|
<fingerprint pattern="(?:Cisco|Linksys)(?: |/)(PAP2T?)(?:-|/)(\S+)$">
|
76
82
|
<description>Cisco/Linksys VoIP / Internet Phone adapter</description>
|
77
83
|
<example hw.version="3.1.22(LS)" hw.model="PAP2">PhoneSystems.net aabbccddeeff Linksys/PAP2-3.1.22(LS)</example>
|
@@ -87,6 +93,7 @@
|
|
87
93
|
<param pos="1" name="hw.model"/>
|
88
94
|
<param pos="2" name="hw.version"/>
|
89
95
|
</fingerprint>
|
96
|
+
|
90
97
|
<fingerprint pattern="^Cisco/(SRP\d+)-([\d\.]+)">
|
91
98
|
<description>Cisco Services Ready Platforms (SRP) Router</description>
|
92
99
|
<example hw.model="SRP541" hw.version="1.2.6">Cisco/SRP541-1.2.6(003)</example>
|
@@ -99,6 +106,7 @@
|
|
99
106
|
<param pos="1" name="hw.model"/>
|
100
107
|
<param pos="2" name="hw.version"/>
|
101
108
|
</fingerprint>
|
109
|
+
|
102
110
|
<fingerprint pattern="(?:Cisco|Linksys)/(WRP\d+)-(\S+)$">
|
103
111
|
<description>Cisco/Linksys WRP Wireless Router</description>
|
104
112
|
<example hw.version="2.00.26" hw.model="WRP400">aabbccddeeff_FinalStage_Linksys/WRP400-2.00.26</example>
|
@@ -112,6 +120,7 @@
|
|
112
120
|
<param pos="1" name="hw.model"/>
|
113
121
|
<param pos="2" name="hw.version"/>
|
114
122
|
</fingerprint>
|
123
|
+
|
115
124
|
<fingerprint pattern="^TANDBERG/(\d+) \((.*)\) Cisco-(\S+)$">
|
116
125
|
<description>Cisco/Tandberg TelePresence w/Cisco Model Name</description>
|
117
126
|
<example os.version="TC7.3.7.01c84fd" tandberg.model="528" hw.product="EX60">TANDBERG/528 (TC7.3.7.01c84fd) Cisco-EX60</example>
|
@@ -126,6 +135,7 @@
|
|
126
135
|
<param pos="0" name="hw.device" value="Video Conferencing"/>
|
127
136
|
<param pos="3" name="hw.product"/>
|
128
137
|
</fingerprint>
|
138
|
+
|
129
139
|
<fingerprint pattern="^(TANDBERG/(\d+)) \((\S+).*\)$">
|
130
140
|
<description>Cisco/Tandberg TelePresence</description>
|
131
141
|
<example os.version="TC7.0.2.aecf2d9" tandberg.model="519" hw.product="TANDBERG/519">TANDBERG/519 (TC7.0.2.aecf2d9)</example>
|
@@ -144,7 +154,9 @@
|
|
144
154
|
<param pos="0" name="hw.device" value="Video Conferencing"/>
|
145
155
|
<param pos="1" name="hw.product"/>
|
146
156
|
</fingerprint>
|
157
|
+
|
147
158
|
<!-- Various -->
|
159
|
+
|
148
160
|
<fingerprint pattern="EnGenius_Router$">
|
149
161
|
<description>EnGenius DuraFon IP Phone</description>
|
150
162
|
<example>EnGenius_Router</example>
|
@@ -152,6 +164,7 @@
|
|
152
164
|
<param pos="0" name="hw.product" value="DuraFon"/>
|
153
165
|
<param pos="0" name="hw.device" value="VoIP"/>
|
154
166
|
</fingerprint>
|
167
|
+
|
155
168
|
<fingerprint pattern="(?i)^Huawei (SoftX\d+) (?:V\d.*)$">
|
156
169
|
<description>Huawei Softswitch</description>
|
157
170
|
<example hw.model="SoftX3000">Huawei SoftX3000 V300R006</example>
|
@@ -160,11 +173,13 @@
|
|
160
173
|
<param pos="0" name="hw.product" value="Softswitch"/>
|
161
174
|
<param pos="1" name="hw.model"/>
|
162
175
|
</fingerprint>
|
176
|
+
|
163
177
|
<fingerprint pattern="(?i)^SIP/1.0 \(Huawei\)$">
|
164
178
|
<description>Huawei generic</description>
|
165
179
|
<example>SIP/1.0 (Huawei)</example>
|
166
180
|
<param pos="0" name="hw.vendor" value="Huawei"/>
|
167
181
|
</fingerprint>
|
182
|
+
|
168
183
|
<fingerprint pattern="^M5T SIP(?: Stack|-UA SAFE)/v?([\d\.]+)">
|
169
184
|
<description>Media5 Corporation SIP Stack</description>
|
170
185
|
<example service.version="4.1.2.2">M5T SIP Stack/4.1.2.2</example>
|
@@ -175,6 +190,7 @@
|
|
175
190
|
<param pos="1" name="service.version"/>
|
176
191
|
<param pos="0" name="hw.device" value="VoIP"/>
|
177
192
|
</fingerprint>
|
193
|
+
|
178
194
|
<fingerprint pattern="^Tilgin Vood ([^_\s]+)">
|
179
195
|
<description>Tilgin Vood</description>
|
180
196
|
<example hw.model="HG238x">Tilgin Vood HG238x_ESx000-02_07_03_26</example>
|
@@ -184,6 +200,7 @@
|
|
184
200
|
<param pos="0" name="hw.product" value="Vood"/>
|
185
201
|
<param pos="1" name="hw.model"/>
|
186
202
|
</fingerprint>
|
203
|
+
|
187
204
|
<fingerprint pattern="^(F\d{3})/VT?(\d(?:[\d\.A-Z]+))$">
|
188
205
|
<description>ZTE GPON Router</description>
|
189
206
|
<example hw.product="F620" hw.version="3.30.20P5T4S">F620/V3.30.20P5T4S</example>
|
@@ -194,6 +211,7 @@
|
|
194
211
|
<param pos="1" name="hw.product"/>
|
195
212
|
<param pos="2" name="hw.version"/>
|
196
213
|
</fingerprint>
|
214
|
+
|
197
215
|
<fingerprint pattern="^ZXDSL (\S+)/V?(\d(?:[\d\.A-Z_]+))$">
|
198
216
|
<description>ZTE ZXDSL router</description>
|
199
217
|
<example hw.product="931VII" hw.version="2.0.00.OTET06">ZXDSL 931VII/V2.0.00.OTET06</example>
|
@@ -203,6 +221,7 @@
|
|
203
221
|
<param pos="1" name="hw.product"/>
|
204
222
|
<param pos="2" name="hw.version"/>
|
205
223
|
</fingerprint>
|
224
|
+
|
206
225
|
<fingerprint pattern="^(?:ZXHN )?(H\d{3}N)/V?(\d(?:[\d\.A-Z_]+))$">
|
207
226
|
<description>ZTE ZXHN router</description>
|
208
227
|
<example hw.product="H218N" hw.version="1.02.01_ERS">ZXHN H218N/V1.02.01_ERS</example>
|
@@ -216,6 +235,7 @@
|
|
216
235
|
<param pos="1" name="hw.product"/>
|
217
236
|
<param pos="2" name="hw.version"/>
|
218
237
|
</fingerprint>
|
238
|
+
|
219
239
|
<fingerprint pattern="^Aastra ([^/]+)/([a-zA-Z0-9\.\-]+)$">
|
220
240
|
<description>Aastra IP Phone</description>
|
221
241
|
<example hw.product="6865i" os.version="4.2.0.2023">Aastra 6865i/4.2.0.2023</example>
|
@@ -228,19 +248,21 @@
|
|
228
248
|
<param pos="0" name="hw.device" value="VoIP"/>
|
229
249
|
<param pos="1" name="hw.product"/>
|
230
250
|
</fingerprint>
|
251
|
+
|
231
252
|
<fingerprint pattern="^(?:Audiocodes-Sip-Gateway-)?(\S+) FX[A-Z_]+/v.(\S+)$">
|
232
253
|
<description>Audiocodes-Sip-Gateway</description>
|
233
254
|
<example hw.product="MP-124" os.version="6.00A.034.003">Audiocodes-Sip-Gateway-MP-124 FXS/v.6.00A.034.003</example>
|
234
255
|
<example hw.product="MP-124" os.version="6.60A.342.003">MP-124 FXS/v.6.60A.342.003</example>
|
235
256
|
<example hw.product="MP-114" os.version="6.60A.241.010">MP-114 FXS_FXO/v.6.60A.241.010</example>
|
236
|
-
<param pos="0" name="os.vendor" value="
|
257
|
+
<param pos="0" name="os.vendor" value="AudioCodes"/>
|
237
258
|
<param pos="0" name="os.family" value="SIP Gateway"/>
|
238
259
|
<param pos="2" name="os.version"/>
|
239
|
-
<param pos="0" name="hw.vendor" value="
|
260
|
+
<param pos="0" name="hw.vendor" value="AudioCodes"/>
|
240
261
|
<param pos="0" name="hw.family" value="SIP Gateway"/>
|
241
262
|
<param pos="0" name="hw.device" value="SIP Gateway"/>
|
242
263
|
<param pos="1" name="hw.product"/>
|
243
264
|
</fingerprint>
|
265
|
+
|
244
266
|
<fingerprint pattern="^Wildix GW-(\S+)$">
|
245
267
|
<description>Wildix SIP Gateway</description>
|
246
268
|
<example os.version="5.0.3.42145">Wildix GW-5.0.3.42145</example>
|
@@ -252,6 +274,7 @@
|
|
252
274
|
<param pos="0" name="hw.device" value="SIP Gateway"/>
|
253
275
|
<param pos="0" name="hw.product" value="SIP Gateway"/>
|
254
276
|
</fingerprint>
|
277
|
+
|
255
278
|
<fingerprint pattern="^Wildix GW$">
|
256
279
|
<description>Wildix SIP Gateway w/o Version</description>
|
257
280
|
<example>Wildix GW</example>
|
@@ -262,6 +285,7 @@
|
|
262
285
|
<param pos="0" name="hw.device" value="SIP Gateway"/>
|
263
286
|
<param pos="0" name="hw.product" value="SIP Gateway"/>
|
264
287
|
</fingerprint>
|
288
|
+
|
265
289
|
<fingerprint pattern="^Asterisk PBX (\S+)$">
|
266
290
|
<description>Asterisk PBX w/ Version</description>
|
267
291
|
<example service.version="13.18.0-6.7.1.1.rl.1538157944.1c65507">Asterisk PBX 13.18.0-6.7.1.1.rl.1538157944.1c65507</example>
|
@@ -271,6 +295,7 @@
|
|
271
295
|
<param pos="0" name="service.product" value="PBX"/>
|
272
296
|
<param pos="1" name="service.version"/>
|
273
297
|
</fingerprint>
|
298
|
+
|
274
299
|
<fingerprint pattern="^Asterisk PBX$">
|
275
300
|
<description>Asterisk PBX w/o Version</description>
|
276
301
|
<example>Asterisk PBX</example>
|
@@ -278,6 +303,7 @@
|
|
278
303
|
<param pos="0" name="service.family" value="PBX"/>
|
279
304
|
<param pos="0" name="service.product" value="PBX"/>
|
280
305
|
</fingerprint>
|
306
|
+
|
281
307
|
<fingerprint pattern="^FPBX-(\S+)$">
|
282
308
|
<description>FreePBX</description>
|
283
309
|
<example service.version="12.0.70(11.20.0)">FPBX-12.0.70(11.20.0)</example>
|
@@ -287,6 +313,7 @@
|
|
287
313
|
<param pos="0" name="service.product" value="PBX"/>
|
288
314
|
<param pos="1" name="service.version"/>
|
289
315
|
</fingerprint>
|
316
|
+
|
290
317
|
<fingerprint pattern="^kamailio \((\S+) \((.*)\)\)$">
|
291
318
|
<description>Kamailio SIP Server</description>
|
292
319
|
<example service.version="4.4.4" kamailio.platform="x86_64/linux">kamailio (4.4.4 (x86_64/linux))</example>
|
@@ -296,7 +323,9 @@
|
|
296
323
|
<param pos="1" name="service.version"/>
|
297
324
|
<param pos="2" name="kamailio.platform"/>
|
298
325
|
</fingerprint>
|
326
|
+
|
299
327
|
<!-- This match covers multiple product families and should be split up further -->
|
328
|
+
|
300
329
|
<fingerprint pattern="^Algo-([^/]+)/(.*)$">
|
301
330
|
<description>Algo SIP Device</description>
|
302
331
|
<example hw.product="8186" os.version="1.7">Algo-8186/1.7</example>
|
@@ -308,6 +337,7 @@
|
|
308
337
|
<param pos="0" name="hw.device" value="SIP Device"/>
|
309
338
|
<param pos="1" name="hw.product"/>
|
310
339
|
</fingerprint>
|
340
|
+
|
311
341
|
<fingerprint pattern="^(?:SIParator|Ingate-Firewall)/(\S+)$">
|
312
342
|
<description>Ingate SIParator Firewall</description>
|
313
343
|
<example os.version="5.0.10">Ingate-Firewall/5.0.10</example>
|
@@ -320,4 +350,5 @@
|
|
320
350
|
<param pos="0" name="hw.device" value="SIP Gateway"/>
|
321
351
|
<param pos="0" name="hw.product" value="SIParator Firewall"/>
|
322
352
|
</fingerprint>
|
323
|
-
|
353
|
+
|
354
|
+
</fingerprints>
|