xml/smtp_quit.xml in recog-intrigue-2.3.7 vs xml/smtp_quit.xml in recog-intrigue-2.3.14
- old
+ new
@@ -1,16 +1,15 @@
-<?xml version="1.0" encoding="UTF-8"?>
+<?xml version='1.0' encoding='UTF-8'?>
<fingerprints protocol="smtp" database_type="service" preference="0.11">
<!--
SMTP response lines to the QUIT command are matched against these patterns
(1 line at a time) to fingerprint SMTP servers.
-
See comment at the top of smtp_banners.xml for additional info.
-
'preference' note: This value has been set so as to implement the ordering
of SMTP related fingerprint databases as described in 'smtp_banners.xml'.
-->
+
<fingerprint pattern="^221[ -]See ya in cyberspace$">
<description>221 See ya in cyberspace</description>
<param pos="0" name="service.vendor" value="Alt-N"/>
<param pos="0" name="service.family" value="MDaemon"/>
<param pos="0" name="service.product" value="MDaemon"/>
@@ -19,11 +18,13 @@
<param pos="0" name="os.family" value="Windows"/>
<param pos="0" name="os.product" value="Windows"/>
<param pos="0" name="os.arch" value="x86"/>
<param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows:-"/>
</fingerprint>
+
<fingerprint pattern="^503[ -]5\.5\.0 Not accepting any command except QUIT$">
<description>Raptor Firewall</description>
<example>503 5.5.0 Not accepting any command except QUIT</example>
<param pos="0" name="service.product" value="raptor"/>
</fingerprint>
-</fingerprints>
+
+</fingerprints>
\ No newline at end of file