recog 2.3.8 → 2.3.9

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (67) hide show
  1. checksums.yaml +4 -4
  2. data/.gitignore +6 -0
  3. data/CONTRIBUTING.md +136 -37
  4. data/README.md +18 -16
  5. data/bin/recog_cleanup +16 -0
  6. data/bin/recog_standardize +30 -6
  7. data/identifiers/README.md +9 -0
  8. data/identifiers/hw_device.txt +77 -0
  9. data/identifiers/hw_family.txt +96 -0
  10. data/identifiers/hw_product.txt +328 -0
  11. data/identifiers/os_architecture.txt +6 -6
  12. data/identifiers/os_device.txt +45 -3
  13. data/identifiers/os_family.txt +206 -41
  14. data/identifiers/os_product.txt +238 -17
  15. data/identifiers/service_family.txt +144 -57
  16. data/identifiers/service_product.txt +384 -83
  17. data/identifiers/vendor.txt +553 -68
  18. data/lib/recog/version.rb +1 -1
  19. data/requirements.txt +1 -1
  20. data/xml/apache_modules.xml +292 -5
  21. data/xml/apache_os.xml +41 -2
  22. data/xml/architecture.xml +11 -3
  23. data/xml/dns_versionbind.xml +76 -8
  24. data/xml/favicons.xml +1700 -0
  25. data/xml/ftp_banners.xml +178 -8
  26. data/xml/h323_callresp.xml +112 -12
  27. data/xml/hp_pjl_id.xml +47 -5
  28. data/xml/html_title.xml +1258 -25
  29. data/xml/http_cookies.xml +64 -9
  30. data/xml/http_servers.xml +667 -37
  31. data/xml/http_wwwauth.xml +141 -26
  32. data/xml/imap_banners.xml +19 -13
  33. data/xml/ldap_searchresult.xml +81 -9
  34. data/xml/mdns_device-info_txt.xml +175 -2
  35. data/xml/mdns_workstation_txt.xml +4 -2
  36. data/xml/mysql_banners.xml +134 -7
  37. data/xml/mysql_error.xml +113 -6
  38. data/xml/nntp_banners.xml +10 -2
  39. data/xml/ntp_banners.xml +80 -4
  40. data/xml/operating_system.xml +89 -3
  41. data/xml/pop_banners.xml +30 -31
  42. data/xml/rsh_resp.xml +11 -2
  43. data/xml/rtsp_servers.xml +22 -2
  44. data/xml/sip_banners.xml +35 -4
  45. data/xml/sip_user_agents.xml +29 -2
  46. data/xml/smb_native_lm.xml +10 -2
  47. data/xml/smb_native_os.xml +79 -2
  48. data/xml/smtp_banners.xml +146 -7
  49. data/xml/smtp_debug.xml +6 -4
  50. data/xml/smtp_ehlo.xml +7 -5
  51. data/xml/smtp_expn.xml +13 -4
  52. data/xml/smtp_help.xml +23 -4
  53. data/xml/smtp_mailfrom.xml +5 -2
  54. data/xml/smtp_noop.xml +6 -5
  55. data/xml/smtp_quit.xml +5 -4
  56. data/xml/smtp_rcptto.xml +5 -2
  57. data/xml/smtp_rset.xml +4 -4
  58. data/xml/smtp_turn.xml +4 -4
  59. data/xml/smtp_vrfy.xml +14 -4
  60. data/xml/snmp_sysdescr.xml +731 -24
  61. data/xml/snmp_sysobjid.xml +47 -2
  62. data/xml/ssh_banners.xml +175 -5
  63. data/xml/telnet_banners.xml +266 -15
  64. data/xml/x11_banners.xml +26 -3
  65. data/xml/x509_issuers.xml +30 -6
  66. data/xml/x509_subjects.xml +200 -31
  67. metadata +8 -2
data/xml/sip_user_agents.xml CHANGED
@@ -1,9 +1,11 @@
1
- <?xml version="1.0" encoding="UTF-8"?>
1
+ <?xml version='1.0' encoding='UTF-8'?>
2
2
  <fingerprints matches="sip_header.user_agent" protocol="sip" database_type="service">
3
3
  <!--
4
4
  SIP User Agent header values are matched against these patterns to fingerprint SIP devices.
5
5
  -->
6
+
6
7
  <!-- Axis devices -->
8
+
7
9
  <fingerprint pattern="(?i)^AXIS (\S+) Network Video Door Station$">
8
10
  <description>Axis Network Video Door stations, which have voice</description>
9
11
  <example hw.product="A8105-E">AXIS A8105-E Network Video Door Station</example>
@@ -14,6 +16,7 @@
14
16
  <param pos="0" name="os.vendor" value="AXIS"/>
15
17
  <param pos="0" name="os.family" value="Linux"/>
16
18
  </fingerprint>
19
+
17
20
  <fingerprint pattern="(?i)^AXIS (\S+) Network (?:Audio Bridge|(?:Cabinet|Horn) Speaker)$">
18
21
  <description>Axis Network audio devices</description>
19
22
  <example hw.product="C3003-E">AXIS C3003-E Network Horn Speaker</example>
@@ -25,7 +28,9 @@
25
28
  <param pos="0" name="os.vendor" value="AXIS"/>
26
29
  <param pos="0" name="os.family" value="Linux"/>
27
30
  </fingerprint>
31
+
28
32
  <!-- Cisco Devices -->
33
+
29
34
  <fingerprint pattern="^Cisco-SIPGateway/IOS-([\d\.x]+)$">
30
35
  <description>Cisco SIPGateway</description>
31
36
  <example>Cisco-SIPGateway/IOS-12.x</example>
@@ -34,13 +39,16 @@
34
39
  <param pos="1" name="os.version"/>
35
40
  <param pos="0" name="os.cpe23" value="cpe:/o:cisco:ios:{os.version}"/>
36
41
  </fingerprint>
42
+
37
43
  <!-- AVM.DE Devices -->
44
+
38
45
  <fingerprint pattern="^FRITZ!OS$">
39
46
  <description>AVM FritzOS Device</description>
40
47
  <example>FRITZ!OS</example>
41
48
  <param pos="0" name="os.vendor" value="AVM"/>
42
49
  <param pos="0" name="os.product" value="FRITZ!BOX"/>
43
50
  </fingerprint>
51
+
44
52
  <fingerprint pattern="^(?:AVM )?(FRITZ!Box .*) +(\d+\.\d+\.\d+)">
45
53
  <description>AVM FritzBox</description>
46
54
  <example>AVM FRITZ!Box Fon 06.03.13</example>
@@ -60,6 +68,7 @@
60
68
  <param pos="1" name="os.product"/>
61
69
  <param pos="2" name="os.version"/>
62
70
  </fingerprint>
71
+
63
72
  <fingerprint pattern="^(?:AVM )?(FRITZ!Fon .*) +(\d+\.\d+\.\d+)">
64
73
  <description>AVM FritzFon</description>
65
74
  <example>AVM FRITZ!Fon 7150 (fs) 38.04.56 (Mar 31 2008)</example>
@@ -69,6 +78,7 @@
69
78
  <param pos="1" name="os.product"/>
70
79
  <param pos="2" name="os.version"/>
71
80
  </fingerprint>
81
+
72
82
  <fingerprint pattern="^(?:AVM )?(Multibox .*) +(\d+\.\d+\.\d+)">
73
83
  <description>AVM Multibox</description>
74
84
  <example>AVM Multibox 7390 NGN 84.05.09 (Jan 13 2012)</example>
@@ -77,12 +87,15 @@
77
87
  <param pos="1" name="os.product"/>
78
88
  <param pos="2" name="os.version"/>
79
89
  </fingerprint>
90
+
80
91
  <!-- Huawei devices -->
92
+
81
93
  <fingerprint pattern="(?i)^Huawei$">
82
94
  <description>Huawei generic</description>
83
95
  <example>Huawei</example>
84
96
  <param pos="0" name="hw.vendor" value="Huawei"/>
85
97
  </fingerprint>
98
+
86
99
  <fingerprint pattern="(?i)^Huawei-HomeGateway/V(?:\d.*)$">
87
100
  <description>Huawei Home Gateway</description>
88
101
  <example>Huawei-HomeGateway/V100R001</example>
@@ -90,6 +103,7 @@
90
103
  <param pos="0" name="hw.device" value="Broadband router"/>
91
104
  <param pos="0" name="hw.product" value="Home Gateway"/>
92
105
  </fingerprint>
106
+
93
107
  <fingerprint pattern="(?i)^Huawei-EchoLife (HG.*)/V(?:\d.*)$">
94
108
  <description>Huawei EchoLife Home Gateway</description>
95
109
  <example hw.model="HG8121H">HUAWEI-EchoLife HG8121H/V3R018C00S110</example>
@@ -98,6 +112,7 @@
98
112
  <param pos="0" name="hw.product" value="EchoLife Home Gateway"/>
99
113
  <param pos="1" name="hw.model"/>
100
114
  </fingerprint>
115
+
101
116
  <fingerprint pattern="(?i)^Huawei (SoftX\d+) (?:V\d.*)$">
102
117
  <description>Huawei Softswitch</description>
103
118
  <example hw.model="SoftX3000">Huawei SoftX3000 V300R010</example>
@@ -106,6 +121,7 @@
106
121
  <param pos="0" name="hw.product" value="Softswitch"/>
107
122
  <param pos="1" name="hw.model"/>
108
123
  </fingerprint>
124
+
109
125
  <fingerprint pattern="^Mitel-(\S+)-SIP-Phone ([\d\.]+) (.{12})$">
110
126
  <description>Mitel SIP Phones</description>
111
127
  <example hw.product="5320" hw.version="06.05.00.11" host.mac="010203040506">Mitel-5320-SIP-Phone 06.05.00.11 010203040506</example>
@@ -115,6 +131,7 @@
115
131
  <param pos="2" name="hw.version"/>
116
132
  <param pos="3" name="host.mac"/>
117
133
  </fingerprint>
134
+
118
135
  <fingerprint pattern="^Mitel Border GW/(\S+)$">
119
136
  <description>Mitel SIP Gateway</description>
120
137
  <example hw.version="4.0.0.9">Mitel Border GW/4.0.0.9</example>
@@ -123,6 +140,7 @@
123
140
  <param pos="0" name="hw.product" value="Border GW"/>
124
141
  <param pos="1" name="hw.version"/>
125
142
  </fingerprint>
143
+
126
144
  <fingerprint pattern="^(?:Polycom/[\d\.]+ )?Polycom(SoundPoint|VVX|SoundStation)\S+_(\d+)-UA/([\d\.]+)(?:_(.{12}))?$">
127
145
  <description>Polycom SoundPoint, SountdStation, VVX VoIP phones</description>
128
146
  <example hw.version="5.8.0.13337" hw.family="VVX" hw.product="VVX 350">PolycomVVX-VVX_350-UA/5.8.0.13337</example>
@@ -138,6 +156,7 @@
138
156
  <param pos="3" name="hw.version"/>
139
157
  <param pos="4" name="host.mac"/>
140
158
  </fingerprint>
159
+
141
160
  <fingerprint pattern="^(?:Polycom/[\d\.]+ )?Polycom(?:RealPresenceTrio)-Trio_(\S+)-UA/([\d\.]+)(?:_(.{12}))?$">
142
161
  <description>Polycom RealPresence Trio Phones</description>
143
162
  <example hw.version="5.4.0.12197" hw.product="RealPresence Trio 8800">PolycomRealPresenceTrio-Trio_8800-UA/5.4.0.12197</example>
@@ -151,6 +170,7 @@
151
170
  <param pos="2" name="hw.version"/>
152
171
  <param pos="3" name="host.mac"/>
153
172
  </fingerprint>
173
+
154
174
  <fingerprint pattern="^Polycom ?HDX ?(\d+)(?: ?HD)?(?:/| \(Release - )([^\)]+)\)?">
155
175
  <description>Polycom HDX Video Conferencing</description>
156
176
  <example hw.model="9006" hw.product="HDX 9006" hw.version="3.0.6-37004">Polycom HDX 9006 (Release - 3.0.6-37004)</example>
@@ -164,6 +184,7 @@
164
184
  <param pos="1" name="hw.model"/>
165
185
  <param pos="2" name="hw.version"/>
166
186
  </fingerprint>
187
+
167
188
  <fingerprint pattern="^PolycomRealPresenceGroup(\d+)/([\d\._]+)+$">
168
189
  <description>Polycom RealPresence Group Video Conferencing</description>
169
190
  <example hw.model="700" hw.product="RealPresence Group 700" hw.version="6.2.0">PolycomRealPresenceGroup700/6.2.0</example>
@@ -174,6 +195,7 @@
174
195
  <param pos="1" name="hw.model"/>
175
196
  <param pos="2" name="hw.version"/>
176
197
  </fingerprint>
198
+
177
199
  <fingerprint pattern="^Nero SIPPS IP Phone Version ([\d\.]+)+$">
178
200
  <description>Nero SIPPS IP Phone</description>
179
201
  <example service.version="2.0.51.16">Nero SIPPS IP Phone Version 2.0.51.16</example>
@@ -183,6 +205,7 @@
183
205
  <param pos="0" name="service.product" value="SIPPS IP Phone"/>
184
206
  <param pos="1" name="service.version"/>
185
207
  </fingerprint>
208
+
186
209
  <fingerprint pattern="^ShoreGear/([\d\.]+)\s+\(ShoreTel \d+\)$">
187
210
  <description>ShoreTel VoIP Switch</description>
188
211
  <example hw.version="21.90.4128.0">ShoreGear/21.90.4128.0 (ShoreTel 15)</example>
@@ -191,6 +214,7 @@
191
214
  <param pos="0" name="hw.device" value="VoIP Switch"/>
192
215
  <param pos="1" name="hw.version"/>
193
216
  </fingerprint>
217
+
194
218
  <fingerprint pattern="^MERCURY-([a-fA-F0-9]{12})$">
195
219
  <description>Crestron Mercury</description>
196
220
  <example host.mac="00107F1ABAA0">MERCURY-00107F1ABAA0</example>
@@ -202,6 +226,7 @@
202
226
  <param pos="0" name="os.device" value="Video Conferencing"/>
203
227
  <param pos="1" name="host.mac"/>
204
228
  </fingerprint>
229
+
205
230
  <fingerprint pattern="^IPDECT/([\d\.]+)\s+\(MAC=([a-fA-F0-9]{12}); SER=">
206
231
  <description>Konftel IP Phone</description>
207
232
  <example host.mac="00087B0F1D30" hw.version="03.55.0013">IPDECT/03.55.0013 (MAC=00087B0F1D30; SER= 00000; HW=1)</example>
@@ -210,6 +235,7 @@
210
235
  <param pos="1" name="hw.version"/>
211
236
  <param pos="2" name="host.mac"/>
212
237
  </fingerprint>
238
+
213
239
  <fingerprint pattern="^Sangoma ([^\s]+) V([a-zA-Z0-9\.]+)=?">
214
240
  <description>Sangoma IP Phone</description>
215
241
  <example hw.product="S305" hw.version="3.0.4.72">Sangoma S305 V3.0.4.72</example>
@@ -218,4 +244,5 @@
218
244
  <param pos="2" name="hw.version"/>
219
245
  <param pos="1" name="hw.product"/>
220
246
  </fingerprint>
221
- </fingerprints>
247
+
248
+ </fingerprints>
data/xml/smb_native_lm.xml CHANGED
@@ -1,10 +1,12 @@
1
- <?xml version="1.0" encoding="UTF-8"?>
1
+ <?xml version='1.0' encoding='UTF-8'?>
2
2
  <fingerprints matches="smb.native_lm" protocol="smb" database_type="service">
3
3
  <!--
4
4
  SMB fingerprints obtained from the Native LM (LAN manager) field of SMB
5
5
  negotations
6
6
  -->
7
+
7
8
  <!-- Mac OS X -->
9
+
8
10
  <fingerprint pattern="^Samba (3\.0\.28a-apple)$">
9
11
  <description>Samba on OS X 10.6</description>
10
12
  <example service.version="3.0.28a-apple">Samba 3.0.28a-apple</example>
@@ -18,6 +20,7 @@
18
20
  <param pos="1" name="service.version"/>
19
21
  <param pos="0" name="service.cpe23" value="cpe:/a:samba:samba:{service.version}"/>
20
22
  </fingerprint>
23
+
21
24
  <fingerprint pattern="^Samba (3\.0\.25b-apple)$">
22
25
  <description>Samba on OS X 10.5</description>
23
26
  <example service.version="3.0.25b-apple">Samba 3.0.25b-apple</example>
@@ -31,7 +34,9 @@
31
34
  <param pos="1" name="service.version"/>
32
35
  <param pos="0" name="service.cpe23" value="cpe:/a:samba:samba:{service.version}"/>
33
36
  </fingerprint>
37
+
34
38
  <!-- TODO: Detect vendor, distribution, and package versions -->
39
+
35
40
  <fingerprint pattern="^Samba (\d\.\d+.\d+\w*)">
36
41
  <description>Samba</description>
37
42
  <example>Samba 3.0.24</example>
@@ -45,11 +50,13 @@
45
50
  <param pos="1" name="service.version"/>
46
51
  <param pos="0" name="service.cpe23" value="cpe:/a:samba:samba:{service.version}"/>
47
52
  </fingerprint>
53
+
48
54
  <fingerprint pattern="^Netreon LANMAN 1.0$">
49
55
  <description>Netreon SAN software</description>
50
56
  <example>Netreon LANMAN 1.0</example>
51
57
  <param pos="0" name="service.vendor" value="Netreon"/>
52
58
  </fingerprint>
59
+
53
60
  <fingerprint pattern="(?i)^MikrotikSMB$">
54
61
  <description>Mikrotik</description>
55
62
  <example>MikrotikSMB</example>
@@ -59,4 +66,5 @@
59
66
  <param pos="0" name="os.product" value="RouterOS"/>
60
67
  <param pos="0" name="os.cpe23" value="cpe:/o:mikrotik:routeros:-"/>
61
68
  </fingerprint>
62
- </fingerprints>
69
+
70
+ </fingerprints>
data/xml/smb_native_os.xml CHANGED
@@ -1,8 +1,9 @@
1
- <?xml version="1.0" encoding="UTF-8"?>
1
+ <?xml version='1.0' encoding='UTF-8'?>
2
2
  <fingerprints matches="smb.native_os" protocol="smb" database_type="util.os">
3
3
  <!--
4
4
  SMB fingerprints obtained from the Native OS field of SMB negotations
5
5
  -->
6
+
6
7
  <fingerprint pattern="^(Windows NT \d\.\d+)$">
7
8
  <description>Windows NT</description>
8
9
  <example os.product="Windows NT 4.0">Windows NT 4.0</example>
@@ -10,6 +11,7 @@
10
11
  <param pos="0" name="os.vendor" value="Microsoft"/>
11
12
  <param pos="1" name="os.product"/>
12
13
  </fingerprint>
14
+
13
15
  <fingerprint pattern="^(Windows (?:95|98|ME))$">
14
16
  <description>Windows 95/98/ME</description>
15
17
  <example os.product="Windows 95">Windows 95</example>
@@ -18,6 +20,7 @@
18
20
  <param pos="0" name="os.vendor" value="Microsoft"/>
19
21
  <param pos="1" name="os.product"/>
20
22
  </fingerprint>
23
+
21
24
  <fingerprint pattern="^Windows 5\.0$">
22
25
  <description>Windows 2000</description>
23
26
  <example>Windows 5.0</example>
@@ -26,6 +29,7 @@
26
29
  <param pos="0" name="os.product" value="Windows 2000"/>
27
30
  <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_2000:-"/>
28
31
  </fingerprint>
32
+
29
33
  <fingerprint pattern="^Windows 5\.1$">
30
34
  <description>Windows XP</description>
31
35
  <example>Windows 5.1</example>
@@ -34,6 +38,7 @@
34
38
  <param pos="0" name="os.product" value="Windows XP"/>
35
39
  <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_xp:-"/>
36
40
  </fingerprint>
41
+
37
42
  <fingerprint pattern="^Windows XP (\d+) (Service Pack \d+)$">
38
43
  <description>Windows XP with Service Pack</description>
39
44
  <example os.build="2600" os.version="Service Pack 1">Windows XP 2600 Service Pack 1</example>
@@ -44,6 +49,7 @@
44
49
  <param pos="2" name="os.version"/>
45
50
  <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_xp:{os.version}"/>
46
51
  </fingerprint>
52
+
47
53
  <fingerprint pattern="^Windows XP (\d+)$">
48
54
  <description>Windows XP with build number</description>
49
55
  <example os.build="2600">Windows XP 2600</example>
@@ -53,6 +59,7 @@
53
59
  <param pos="1" name="os.build"/>
54
60
  <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_xp:-"/>
55
61
  </fingerprint>
62
+
56
63
  <fingerprint pattern="^Windows XP (Home|Professional)(?: Edition)?$">
57
64
  <description>Windows XP without a version</description>
58
65
  <example os.edition="Home">Windows XP Home Edition</example>
@@ -63,6 +70,7 @@
63
70
  <param pos="1" name="os.edition"/>
64
71
  <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_xp:-"/>
65
72
  </fingerprint>
73
+
66
74
  <fingerprint pattern="^Windows \.NET">
67
75
  <description>Windows Server 2003 Beta</description>
68
76
  <param pos="0" name="os.certainty" value="1.0"/>
@@ -71,6 +79,7 @@
71
79
  <param pos="0" name="os.version" value="Beta"/>
72
80
  <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_server_2003:Beta"/>
73
81
  </fingerprint>
82
+
74
83
  <fingerprint pattern="^Windows Server 2003 R2 (\d+)$">
75
84
  <description>Windows Server 2003 R2</description>
76
85
  <param pos="0" name="os.certainty" value="1.0"/>
@@ -79,6 +88,7 @@
79
88
  <param pos="1" name="os.build"/>
80
89
  <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_server_2003:-"/>
81
90
  </fingerprint>
91
+
82
92
  <fingerprint pattern="^Windows Server 2003 R2 (\d+) (Service Pack \d+)(?:, v\.\d+)?$">
83
93
  <description>Windows Server 2003 R2 (SP)</description>
84
94
  <example os.build="3790" os.version="Service Pack 2">Windows Server 2003 R2 3790 Service Pack 2</example>
@@ -90,6 +100,7 @@
90
100
  <param pos="2" name="os.version"/>
91
101
  <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_server_2003:{os.version}"/>
92
102
  </fingerprint>
103
+
93
104
  <fingerprint pattern="^Windows Server 2003 (\d+)$">
94
105
  <description>Windows Server 2003 with a build</description>
95
106
  <example os.build="3790">Windows Server 2003 3790</example>
@@ -99,6 +110,7 @@
99
110
  <param pos="1" name="os.build"/>
100
111
  <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_server_2003:-"/>
101
112
  </fingerprint>
113
+
102
114
  <fingerprint pattern="^Windows Server 2003$">
103
115
  <description>Windows Server 2003 without a build</description>
104
116
  <example>Windows Server 2003</example>
@@ -107,6 +119,7 @@
107
119
  <param pos="0" name="os.product" value="Windows Server 2003"/>
108
120
  <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_server_2003:-"/>
109
121
  </fingerprint>
122
+
110
123
  <fingerprint pattern="^Windows Server 2003 (\d+) (Service Pack \d+)(?:, v\.\d+)?$">
111
124
  <description>Windows Server 2003 (SP)</description>
112
125
  <example os.build="3790" os.version="Service Pack 1">Windows Server 2003 3790 Service Pack 1, v.3309</example>
@@ -118,7 +131,9 @@
118
131
  <param pos="2" name="os.version"/>
119
132
  <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_server_2003:{os.version}"/>
120
133
  </fingerprint>
134
+
121
135
  <!-- Note that 2008 SP1 is technically "2008 Gold" according to Microsoft -->
136
+
122
137
  <fingerprint pattern="^Windows Server 2008$">
123
138
  <description>Windows Server 2008 without a build</description>
124
139
  <example>Windows Server 2008</example>
@@ -127,6 +142,7 @@
127
142
  <param pos="0" name="os.product" value="Windows Server 2008"/>
128
143
  <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_server_2008:-"/>
129
144
  </fingerprint>
145
+
130
146
  <fingerprint pattern="^Windows Server \(R\) 2008 (\w+|\w+ \w+|\w+ \w+ \w+)(?: (?:with|without) Hyper-V|) (\d+) (Service Pack \d+)(?:, v\.\d+)?$">
131
147
  <description>Windows Server 2008</description>
132
148
  <example os.edition="Enterprise" os.version="Service Pack 1">Windows Server (R) 2008 Enterprise without Hyper-V 6001 Service Pack 1</example>
@@ -139,6 +155,7 @@
139
155
  <param pos="3" name="os.version"/>
140
156
  <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_server_2008:{os.version}"/>
141
157
  </fingerprint>
158
+
142
159
  <fingerprint pattern="^Windows \(R\) Web Server 2008 (\d+) (Service Pack \d+)$">
143
160
  <description>Windows Web Server 2008 (SP)</description>
144
161
  <example os.edition="Web" os.version="Service Pack 2">Windows (R) Web Server 2008 6002 Service Pack 2</example>
@@ -150,6 +167,7 @@
150
167
  <param pos="2" name="os.version"/>
151
168
  <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_server_2008:{os.version}"/>
152
169
  </fingerprint>
170
+
153
171
  <fingerprint pattern="^Windows \(R\) Web Server 2008 (\d+)$">
154
172
  <description>Windows Web Server 2008</description>
155
173
  <example>Windows (R) Web Server 2008 6002</example>
@@ -160,7 +178,9 @@
160
178
  <param pos="1" name="os.build"/>
161
179
  <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_server_2008:-"/>
162
180
  </fingerprint>
181
+
163
182
  <!-- TODO: Need an example string -->
183
+
164
184
  <fingerprint pattern="^Windows \(R\) Storage Server 2008 (?:\w+|\w+ \w+|\w+ \w+ \w+) (\d+) (Service Pack \d+)$">
165
185
  <description>Windows Server 2008 Storage (SP)</description>
166
186
  <param pos="0" name="os.certainty" value="1.0"/>
@@ -171,7 +191,9 @@
171
191
  <param pos="2" name="os.version"/>
172
192
  <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_server_2008:{os.version}"/>
173
193
  </fingerprint>
194
+
174
195
  <!-- TODO: Need an example string -->
196
+
175
197
  <fingerprint pattern="^Windows \(R\) Storage Server 2008 (?:\w+|\w+ \w+|\w+ \w+ \w+) (\d+)$">
176
198
  <description>Windows Web Server 2008 Storage</description>
177
199
  <param pos="0" name="os.certainty" value="1.0"/>
@@ -181,6 +203,7 @@
181
203
  <param pos="1" name="os.build"/>
182
204
  <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_server_2008:-"/>
183
205
  </fingerprint>
206
+
184
207
  <fingerprint pattern="^Windows Server 2008 HPC Edition (\d+) (Service Pack \d+)$">
185
208
  <description>Windows Server 2008 HPC</description>
186
209
  <example>Windows Server 2008 HPC Edition 7601 Service Pack 1</example>
@@ -192,7 +215,9 @@
192
215
  <param pos="2" name="os.version"/>
193
216
  <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_server_2008:{os.version}"/>
194
217
  </fingerprint>
218
+
195
219
  <!-- TODO: Need an example string -->
220
+
196
221
  <fingerprint pattern="^Windows Server 2008 HPC Edition (\d+)$">
197
222
  <description>Windows Web Server 2008 HPC</description>
198
223
  <example>Windows Server 2008 HPC Edition 7600</example>
@@ -203,7 +228,9 @@
203
228
  <param pos="1" name="os.build"/>
204
229
  <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_server_2008:-"/>
205
230
  </fingerprint>
231
+
206
232
  <!-- 2008 R2 -->
233
+
207
234
  <fingerprint pattern="^Windows Server 2008 R2 (\w+|\w+ \w+|\w+ \w+ \w+) (\d+) (Service Pack \d+)(?:, v\.\d+)?$">
208
235
  <description>Windows Server 2008 R2</description>
209
236
  <example>Windows Server 2008 R2 Enterprise 7601 Service Pack 1</example>
@@ -216,6 +243,7 @@
216
243
  <param pos="3" name="os.version"/>
217
244
  <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_server_2008:{os.version}"/>
218
245
  </fingerprint>
246
+
219
247
  <fingerprint pattern="^Windows Server 2008 R2 (\w+|\w+ \w+|\w+ \w+ \w+) (\d+)$">
220
248
  <description>Windows Server 2008 R2 without Service Pack</description>
221
249
  <example os.edition="Enterprise">Windows Server 2008 R2 Enterprise 7600</example>
@@ -228,6 +256,7 @@
228
256
  <param pos="2" name="os.build"/>
229
257
  <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_server_2008:-"/>
230
258
  </fingerprint>
259
+
231
260
  <fingerprint pattern="^Windows Server 2016(?: Technical Preview \d+)? (\w+|\w+ \w+|\w+ \w+ \w+)(?: Evaluation)? (\d+)$">
232
261
  <description>Windows Server 2016 with a build, without service pack</description>
233
262
  <example os.edition="Datacenter" os.build="14393">Windows Server 2016 Datacenter 14393</example>
@@ -240,6 +269,7 @@
240
269
  <param pos="2" name="os.build"/>
241
270
  <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_server_2016:-"/>
242
271
  </fingerprint>
272
+
243
273
  <fingerprint pattern="^Windows Storage Server 2016 (?:\w+|\w+ \w+|\w+ \w+ \w+) (\d+)$">
244
274
  <description>Windows Server 2016 Storage</description>
245
275
  <example os.build="14393">Windows Storage Server 2016 Standard 14393</example>
@@ -250,6 +280,7 @@
250
280
  <param pos="1" name="os.build"/>
251
281
  <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_server_2016:-"/>
252
282
  </fingerprint>
283
+
253
284
  <fingerprint pattern="^Windows Web Server 2008 R2 (\d+) (Service Pack \d+)$">
254
285
  <description>Windows Server 2008 R2 Web</description>
255
286
  <example os.version="Service Pack 1">Windows Web Server 2008 R2 7601 Service Pack 1</example>
@@ -261,6 +292,7 @@
261
292
  <param pos="2" name="os.version"/>
262
293
  <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_server_2008:{os.version}"/>
263
294
  </fingerprint>
295
+
264
296
  <fingerprint pattern="^Windows Web Server 2008 R2 (\d+)$">
265
297
  <description>Windows Web Server 2008 R2 Web</description>
266
298
  <example>Windows Web Server 2008 R2 7600</example>
@@ -271,6 +303,7 @@
271
303
  <param pos="1" name="os.build"/>
272
304
  <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_server_2008:-"/>
273
305
  </fingerprint>
306
+
274
307
  <fingerprint pattern="^Windows Storage Server 2008 R2 (?:\w+|\w+ \w+|\w+ \w+ \w+) (\d+) (Service Pack \d+)$">
275
308
  <description>Windows Server 2008 Storage R2 (SP)</description>
276
309
  <example os.version="Service Pack 1" os.build="7601">Windows Storage Server 2008 R2 Essentials 7601 Service Pack 1</example>
@@ -282,6 +315,7 @@
282
315
  <param pos="2" name="os.version"/>
283
316
  <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_server_2008:{os.version}"/>
284
317
  </fingerprint>
318
+
285
319
  <fingerprint pattern="^Windows Vista \(TM\) (\w+|\w+ \w+|\w+ \w+ \w+) (\d+) (Service Pack \d+)$">
286
320
  <description>Windows Vista (SP)</description>
287
321
  <example os.edition="Home Premium" os.version="Service Pack 2">Windows Vista (TM) Home Premium 6002 Service Pack 2</example>
@@ -293,6 +327,7 @@
293
327
  <param pos="3" name="os.version"/>
294
328
  <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_vista:{os.version}"/>
295
329
  </fingerprint>
330
+
296
331
  <fingerprint pattern="^Windows Vista \(TM\) (\w+|\w+ \w+|\w+ \w+ \w+) (\d+)$">
297
332
  <description>Windows Vista</description>
298
333
  <example os.edition="Home Premium">Windows Vista (TM) Home Premium 6000</example>
@@ -303,6 +338,7 @@
303
338
  <param pos="2" name="os.build"/>
304
339
  <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_vista:-"/>
305
340
  </fingerprint>
341
+
306
342
  <fingerprint pattern="^(Windows (?:7|8|8\.1)(?:| RT)) (\w+|\w+ \w+|\w+ \w+ \w+) (\d+) (Service Pack \d+)(?:, v\.\d+)?$">
307
343
  <description>Windows 7/8 (SP + Edition)</description>
308
344
  <example os.edition="Enterprise" os.version="Service Pack 1">Windows 7 Enterprise 7601 Service Pack 1</example>
@@ -315,6 +351,7 @@
315
351
  <param pos="3" name="os.build"/>
316
352
  <param pos="4" name="os.version"/>
317
353
  </fingerprint>
354
+
318
355
  <fingerprint pattern="^(Windows (?:7|8|8\.1)(?:| RT)) (\d+) (Service Pack \d+)$">
319
356
  <description>Windows 7/8 (SP)</description>
320
357
  <example os.version="Service Pack 1">Windows 7 7601 Service Pack 1</example>
@@ -324,6 +361,7 @@
324
361
  <param pos="2" name="os.build"/>
325
362
  <param pos="3" name="os.version"/>
326
363
  </fingerprint>
364
+
327
365
  <fingerprint pattern="^(Windows (?:7|8|8\.1)(?:| RT)) (\w+|\w+ \w+|\w+ \w+ \w+) (\d+)$">
328
366
  <description>Windows 7/8 (Edition)</description>
329
367
  <example os.edition="Enterprise">Windows 7 Enterprise 7600</example>
@@ -335,6 +373,7 @@
335
373
  <param pos="2" name="os.edition"/>
336
374
  <param pos="3" name="os.build"/>
337
375
  </fingerprint>
376
+
338
377
  <fingerprint pattern="^(Windows (?:7|8|8\.1)(?:| RT)) (\d+)$">
339
378
  <description>Windows 7/8</description>
340
379
  <example>Windows 8 9200</example>
@@ -343,8 +382,11 @@
343
382
  <param pos="1" name="os.product"/>
344
383
  <param pos="2" name="os.build"/>
345
384
  </fingerprint>
385
+
346
386
  <!-- Windows 2012 R2 matches go first to simplify the regular expressions -->
387
+
347
388
  <!-- TODO: Need an example string -->
389
+
348
390
  <fingerprint pattern="^Windows Server 2012 R2 (\w+|\w+ \w+|\w+ \w+ \w+) (\d+) (Service Pack \d+)$">
349
391
  <description>Windows Server 2012 R2 (SP)</description>
350
392
  <param pos="0" name="os.certainty" value="1.0"/>
@@ -355,6 +397,7 @@
355
397
  <param pos="3" name="os.version"/>
356
398
  <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_server_2012:{os.version}"/>
357
399
  </fingerprint>
400
+
358
401
  <fingerprint pattern="^Windows Server 2012 R2 (\w+|\w+ \w+|\w+ \w+ \w+) (\d+)$">
359
402
  <description>Windows Server 2012 R2</description>
360
403
  <example os.edition="Standard">Windows Server 2012 R2 Standard 9600</example>
@@ -365,7 +408,9 @@
365
408
  <param pos="2" name="os.build"/>
366
409
  <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_server_2012:-"/>
367
410
  </fingerprint>
411
+
368
412
  <!-- TODO: Need an example string -->
413
+
369
414
  <fingerprint pattern="^Windows Server 2012 (\w+|\w+ \w+|\w+ \w+ \w+) (\d+) (Service Pack \d+)$">
370
415
  <description>Windows Server 2012 (SP)</description>
371
416
  <param pos="0" name="os.certainty" value="1.0"/>
@@ -376,6 +421,7 @@
376
421
  <param pos="3" name="os.version"/>
377
422
  <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_server_2012:{os.version}"/>
378
423
  </fingerprint>
424
+
379
425
  <fingerprint pattern="^Windows Server 2012 (\w+|\w+ \w+|\w+ \w+ \w+) (\d+)$">
380
426
  <description>Windows Server 2012</description>
381
427
  <example>Windows Server 2012 Standard 9200</example>
@@ -386,6 +432,7 @@
386
432
  <param pos="2" name="os.build"/>
387
433
  <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_server_2012:-"/>
388
434
  </fingerprint>
435
+
389
436
  <fingerprint pattern="^Windows MultiPoint Server 2012 (?:\w+|\w+ \w+|\w+ \w+ \w+) (\d+) (Service Pack \d+)$">
390
437
  <description>Windows MultiPoint Server 2012 (SP)</description>
391
438
  <example os.build="9201" os.version="Service Pack 1">Windows MultiPoint Server 2012 Premium 9201 Service Pack 1</example>
@@ -397,6 +444,7 @@
397
444
  <param pos="2" name="os.version"/>
398
445
  <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_server_2012:{os.version}"/>
399
446
  </fingerprint>
447
+
400
448
  <fingerprint pattern="^Windows MultiPoint Server 2012 (?:\w+|\w+ \w+|\w+ \w+ \w+) (\d+)$">
401
449
  <description>Windows MultiPoint Server 2012</description>
402
450
  <example os.build="9200">Windows MultiPoint Server 2012 Premium 9200</example>
@@ -407,7 +455,9 @@
407
455
  <param pos="1" name="os.build"/>
408
456
  <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_server_2012:-"/>
409
457
  </fingerprint>
458
+
410
459
  <!-- Windows 10 Preview -->
460
+
411
461
  <fingerprint pattern="^Windows 10 (\w+|\w+ \w+|\w+ \w+ \w+) Insider Preview (\d+)$">
412
462
  <description>Windows 10 Enterprise Insider Preview</description>
413
463
  <example os.build="10130" os.edition="Enterprise">Windows 10 Enterprise Insider Preview 10130</example>
@@ -418,6 +468,7 @@
418
468
  <param pos="2" name="os.build"/>
419
469
  <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_10:-"/>
420
470
  </fingerprint>
471
+
421
472
  <fingerprint pattern="^Windows 10 ((?:\w+|\w+ \w+|\w+ \w+ \w+)(?: LTSB(?: Evaluation)?)?) (\d+)$">
422
473
  <description>Windows 10</description>
423
474
  <example os.build="10130" os.edition="Enterprise">Windows 10 Enterprise 10130</example>
@@ -435,6 +486,7 @@
435
486
  <param pos="2" name="os.build"/>
436
487
  <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_10:-"/>
437
488
  </fingerprint>
489
+
438
490
  <fingerprint pattern="^VxWorks">
439
491
  <description>VxWorks</description>
440
492
  <example>VxWorks</example>
@@ -445,6 +497,7 @@
445
497
  <param pos="0" name="service.vendor" value="Wind River"/>
446
498
  <param pos="0" name="service.product" value="VxWorks CIFS"/>
447
499
  </fingerprint>
500
+
448
501
  <fingerprint pattern="^OS/400 \D(\d+)\D(\d+)\D(\d+)">
449
502
  <description>OS/400</description>
450
503
  <example os.version="4" os.version.version="5" os.version.version.version="0">OS/400 V4R5M0</example>
@@ -455,12 +508,14 @@
455
508
  <param pos="3" name="os.version.version.version"/>
456
509
  <param pos="0" name="os.cpe23" value="cpe:/o:ibm:os_400:{os.version}"/>
457
510
  </fingerprint>
511
+
458
512
  <fingerprint pattern="^Apple Base Station$">
459
513
  <description>SMB exposed via SMB shared USB disks on Apple devices</description>
460
514
  <example>Apple Base Station</example>
461
515
  <param pos="0" name="os.vendor" value="Apple"/>
462
516
  <param pos="0" name="hw.vendor" value="Apple"/>
463
517
  </fingerprint>
518
+
464
519
  <fingerprint pattern="^EMC-SNAS:T([\d\.]+)?$">
465
520
  <description>EMC Celerra</description>
466
521
  <example service.version="7.1.80.7">EMC-SNAS:T7.1.80.7</example>
@@ -475,12 +530,15 @@
475
530
  <param pos="0" name="hw.device" value="Storage"/>
476
531
  <param pos="0" name="hw.product" value="Celerra"/>
477
532
  </fingerprint>
533
+
478
534
  <fingerprint pattern="^Netreon OS 1.0$">
479
535
  <description>Netreon SAN software</description>
480
536
  <example>Netreon OS 1.0</example>
481
537
  <param pos="0" name="service.vendor" value="Netreon"/>
482
538
  </fingerprint>
539
+
483
540
  <!-- VisionFS -->
541
+
484
542
  <fingerprint pattern="^(?:ax|i3|m8|mp|pa|pp|rs|sp)ai(\d{4})">
485
543
  <description>AIX</description>
486
544
  <example service.version="9876">axai9876</example>
@@ -491,6 +549,7 @@
491
549
  <param pos="0" name="service.product" value="VisionFS"/>
492
550
  <param pos="1" name="service.version"/>
493
551
  </fingerprint>
552
+
494
553
  <fingerprint pattern="^(?:ax|i3|m8|mp|pa|pp|rs|sp)dg(\d{4})">
495
554
  <description>DG/UX</description>
496
555
  <example service.version="9876">i3dg9876</example>
@@ -500,6 +559,7 @@
500
559
  <param pos="0" name="service.product" value="VisionFS"/>
501
560
  <param pos="1" name="service.version"/>
502
561
  </fingerprint>
562
+
503
563
  <fingerprint pattern="^(?:ax|i3|m8|mp|pa|pp|rs|sp)dw(\d{4})">
504
564
  <description>Darwin</description>
505
565
  <example service.version="9876">m8dw9876</example>
@@ -510,6 +570,7 @@
510
570
  <param pos="0" name="service.product" value="VisionFS"/>
511
571
  <param pos="1" name="service.version"/>
512
572
  </fingerprint>
573
+
513
574
  <fingerprint pattern="^(?:ax|i3|m8|mp|pa|pp|rs|sp)dy(\d{4})">
514
575
  <description>DYNIX</description>
515
576
  <example service.version="9876">m8dy9876</example>
@@ -519,6 +580,7 @@
519
580
  <param pos="0" name="service.product" value="VisionFS"/>
520
581
  <param pos="1" name="service.version"/>
521
582
  </fingerprint>
583
+
522
584
  <fingerprint pattern="^(?:ax|i3|m8|mp|pa|pp|rs|sp)fb(\d{4})">
523
585
  <description>FreeBSD</description>
524
586
  <example service.version="9876">m8fb9876</example>
@@ -529,6 +591,7 @@
529
591
  <param pos="0" name="service.product" value="VisionFS"/>
530
592
  <param pos="1" name="service.version"/>
531
593
  </fingerprint>
594
+
532
595
  <fingerprint pattern="^(?:ax|i3|m8|mp|pa|pp|rs|sp)hp(\d{4})">
533
596
  <description>HP-UX</description>
534
597
  <example service.version="9876">m8hp9876</example>
@@ -539,6 +602,7 @@
539
602
  <param pos="0" name="service.product" value="VisionFS"/>
540
603
  <param pos="1" name="service.version"/>
541
604
  </fingerprint>
605
+
542
606
  <fingerprint pattern="^(?:ax|i3|m8|mp|pa|pp|rs|sp)ir(\d{4})">
543
607
  <description>IRIX</description>
544
608
  <example service.version="9876">m8ir9876</example>
@@ -549,6 +613,7 @@
549
613
  <param pos="0" name="service.product" value="VisionFS"/>
550
614
  <param pos="1" name="service.version"/>
551
615
  </fingerprint>
616
+
552
617
  <fingerprint pattern="^(?:ax|i3|m8|mp|pa|pp|rs|sp)li(\d{4})">
553
618
  <description>Linux</description>
554
619
  <example service.version="9876">m8li9876</example>
@@ -559,6 +624,7 @@
559
624
  <param pos="0" name="service.product" value="VisionFS"/>
560
625
  <param pos="1" name="service.version"/>
561
626
  </fingerprint>
627
+
562
628
  <fingerprint pattern="^(?:ax|i3|m8|mp|pa|pp|rs|sp)mo(\d{4})">
563
629
  <description>SVR</description>
564
630
  <example service.version="9876">m8mo9876</example>
@@ -568,6 +634,7 @@
568
634
  <param pos="0" name="service.product" value="VisionFS"/>
569
635
  <param pos="1" name="service.version"/>
570
636
  </fingerprint>
637
+
571
638
  <fingerprint pattern="^(?:ax|i3|m8|mp|pa|pp|rs|sp)o1(\d{4})">
572
639
  <description>OSF/1</description>
573
640
  <example service.version="9876">m8o19876</example>
@@ -577,6 +644,7 @@
577
644
  <param pos="0" name="service.product" value="VisionFS"/>
578
645
  <param pos="1" name="service.version"/>
579
646
  </fingerprint>
647
+
580
648
  <fingerprint pattern="^(?:ax|i3|m8|mp|pa|pp|rs|sp)ro(\d{4})">
581
649
  <description>RISC OS</description>
582
650
  <example service.version="9876">m8ro9876</example>
@@ -585,6 +653,7 @@
585
653
  <param pos="0" name="service.product" value="VisionFS"/>
586
654
  <param pos="1" name="service.version"/>
587
655
  </fingerprint>
656
+
588
657
  <fingerprint pattern="^(?:ax|i3|m8|mp|pa|pp|rs|sp)sc(\d{4})">
589
658
  <description>OpenServer</description>
590
659
  <example service.version="9876">m8sc9876</example>
@@ -594,6 +663,7 @@
594
663
  <param pos="0" name="service.product" value="VisionFS"/>
595
664
  <param pos="1" name="service.version"/>
596
665
  </fingerprint>
666
+
597
667
  <fingerprint pattern="^(?:ax|i3|m8|mp|pa|pp|rs|sp)so(\d{4})">
598
668
  <description>SunOS</description>
599
669
  <example service.version="9876">m8so9876</example>
@@ -604,6 +674,7 @@
604
674
  <param pos="0" name="service.product" value="VisionFS"/>
605
675
  <param pos="1" name="service.version"/>
606
676
  </fingerprint>
677
+
607
678
  <fingerprint pattern="^(?:ax|i3|m8|mp|pa|pp|rs|sp)su(\d{4})">
608
679
  <description>Solaris</description>
609
680
  <example service.version="9876">m8su9876</example>
@@ -614,6 +685,7 @@
614
685
  <param pos="0" name="service.product" value="VisionFS"/>
615
686
  <param pos="1" name="service.version"/>
616
687
  </fingerprint>
688
+
617
689
  <fingerprint pattern="^(?:ax|i3|m8|mp|pa|pp|rs|sp)sx(\d{4})">
618
690
  <description>SINIX</description>
619
691
  <example service.version="9876">m8sx9876</example>
@@ -623,6 +695,7 @@
623
695
  <param pos="0" name="service.product" value="VisionFS"/>
624
696
  <param pos="1" name="service.version"/>
625
697
  </fingerprint>
698
+
626
699
  <fingerprint pattern="^(?:ax|i3|m8|mp|pa|pp|rs|sp)ul(\d{4})">
627
700
  <description>Ultrix/1</description>
628
701
  <example service.version="9876">m8ul9876</example>
@@ -632,6 +705,7 @@
632
705
  <param pos="0" name="service.product" value="VisionFS"/>
633
706
  <param pos="1" name="service.version"/>
634
707
  </fingerprint>
708
+
635
709
  <fingerprint pattern="^(?:ax|i3|m8|mp|pa|pp|rs|sp)un(\d{4})">
636
710
  <description>UnixWare</description>
637
711
  <example service.version="9876">m8un9876</example>
@@ -641,6 +715,7 @@
641
715
  <param pos="0" name="service.product" value="VisionFS"/>
642
716
  <param pos="1" name="service.version"/>
643
717
  </fingerprint>
718
+
644
719
  <fingerprint pattern="^(?:ax|i3|m8|mp|pa|pp|rs|sp)wi(\d{4})">
645
720
  <description>Windows</description>
646
721
  <example service.version="9876">m8wi9876</example>
@@ -651,6 +726,7 @@
651
726
  <param pos="0" name="service.product" value="VisionFS"/>
652
727
  <param pos="1" name="service.version"/>
653
728
  </fingerprint>
729
+
654
730
  <fingerprint pattern="^(?i:unix)$">
655
731
  <description>Generally some Samba variant, which reports Unix</description>
656
732
  <example>Unix</example>
@@ -660,4 +736,5 @@
660
736
  <param pos="0" name="service.vendor" value="Samba"/>
661
737
  <param pos="0" name="service.cpe23" value="cpe:/a:samba:samba:-"/>
662
738
  </fingerprint>
663
- </fingerprints>
739
+
740
+ </fingerprints>