xml/smtp_quit.xml in recog-intrigue-2.3.7 vs xml/smtp_quit.xml in recog-intrigue-2.3.14

- old
+ new

@@ -1,16 +1,15 @@ -<?xml version="1.0" encoding="UTF-8"?> +<?xml version='1.0' encoding='UTF-8'?> <fingerprints protocol="smtp" database_type="service" preference="0.11"> <!-- SMTP response lines to the QUIT command are matched against these patterns (1 line at a time) to fingerprint SMTP servers. - See comment at the top of smtp_banners.xml for additional info. - 'preference' note: This value has been set so as to implement the ordering of SMTP related fingerprint databases as described in 'smtp_banners.xml'. --> + <fingerprint pattern="^221[ -]See ya in cyberspace$"> <description>221 See ya in cyberspace</description> <param pos="0" name="service.vendor" value="Alt-N"/> <param pos="0" name="service.family" value="MDaemon"/> <param pos="0" name="service.product" value="MDaemon"/> @@ -19,11 +18,13 @@ <param pos="0" name="os.family" value="Windows"/> <param pos="0" name="os.product" value="Windows"/> <param pos="0" name="os.arch" value="x86"/> <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows:-"/> </fingerprint> + <fingerprint pattern="^503[ -]5\.5\.0 Not accepting any command except QUIT$"> <description>Raptor Firewall</description> <example>503 5.5.0 Not accepting any command except QUIT</example> <param pos="0" name="service.product" value="raptor"/> </fingerprint> -</fingerprints> + +</fingerprints> \ No newline at end of file