xml/ftp_banners.xml in recog-2.1.9 vs xml/ftp_banners.xml in recog-2.1.10
- old
+ new
@@ -214,11 +214,11 @@
<param pos="0" name="service.family" value="ProFTPD"/>
<param pos="0" name="service.vendor" value="ProFTPD Project"/>
<param pos="0" name="service.product" value="ProFTPD"/>
<param pos="1" name="host.name"/>
</fingerprint>
- <fingerprint pattern="^ProFTPD (\d+\.[^\s]+) Server \((.*)\) \[[\h.:\]]*$">
+ <fingerprint pattern="^ProFTPD (\d+\.[^\s]+) Server \((.*)\) \[[[a-f\d].:\]]*$">
<description>ProFTPD with version info - truncated</description>
<example service.version="1.3.2c">ProFTPD 1.3.2c Server (ProFTPD Default Installation) [</example>
<example proftpd.server.name="svrname.hosting.com">ProFTPD 1.3.0 Server (svrname.hosting.com) [10.10.10.</example>
<example>ProFTPD 1.3.3a Server (randomstring) [::ff</example>
<param pos="0" name="service.family" value="ProFTPD"/>
@@ -1121,21 +1121,21 @@
<param pos="0" name="service.family" value="Multicraft"/>
<param pos="0" name="service.product" value="Multicraft"/>
<param pos="0" name="service.vendor" value="Multicraft"/>
<param pos="1" name="service.version"/>
</fingerprint>
- <fingerprint pattern="^bftpd ([\d.]+) at ([\h.:]+) ready\.$">
+ <fingerprint pattern="^bftpd ([\d.]+) at ([[a-f\d].:]+) ready\.$">
<description>Bftpd FTPD Server</description>
<example service.version="2.2.1" host.ip="192.168.0.1">bftpd 2.2.1 at 192.168.0.1 ready.</example>
<example service.version="2.2" host.ip="::ffff:192.168.1.1">bftpd 2.2 at ::ffff:192.168.1.1 ready.</example>
<param pos="0" name="service.family" value="Bftpd"/>
<param pos="0" name="service.product" value="Bftpd"/>
<param pos="0" name="service.vendor" value="Bftpd Project"/>
<param pos="1" name="service.version"/>
<param pos="2" name="host.ip"/>
</fingerprint>
- <fingerprint pattern="^NASFTPD Turbo station (?:2.x )?([\w.]+) Server \(ProFTPD\) \[([\h.:]+)\]$">
+ <fingerprint pattern="^NASFTPD Turbo station (?:2.x )?([\w.]+) Server \(ProFTPD\) \[([[a-f\d].:]+)\]$">
<description>ProFTPD on QNAP Turbo Station NAS</description>
<example service.version="1.3.5a" host.ip="192.168.1.100">NASFTPD Turbo station 1.3.5a Server (ProFTPD) [192.168.1.100]</example>
<example service.version="1.3.1rc2" host.ip="192.168.1.100">NASFTPD Turbo station 2.x 1.3.1rc2 Server (ProFTPD) [192.168.1.100]</example>
<param pos="0" name="service.family" value="ProFTPD"/>
<param pos="0" name="service.vendor" value="ProFTPD Project"/>
@@ -1189,10 +1189,10 @@
<param pos="1" name="service.version"/>
<param pos="0" name="os.vendor" value="Microsoft"/>
<param pos="0" name="os.family" value="Windows"/>
<param pos="0" name="os.product" value="Windows"/>
</fingerprint>
- <fingerprint pattern="^FTP Server \(ZyWALL (USG\s?[\w-]+)\) \[([\h:.]+)\]$">
+ <fingerprint pattern="^FTP Server \(ZyWALL (USG\s?[\w-]+)\) \[([[a-f\d]:.]+)\]$">
<description>ZyXEL Unified Security Gateway</description>
<example hw.product="USG 20" host.ip="::ffff:192.168.0.2">FTP Server (ZyWALL USG 20) [::ffff:192.168.0.2]</example>
<example hw.product="USG100-PLUS" host.ip="::ffff:192.168.5.101">FTP Server (ZyWALL USG100-PLUS) [::ffff:192.168.5.101]</example>
<example hw.product="USG 20" host.ip="10.0.0.2">FTP Server (ZyWALL USG 20) [10.0.0.2]</example>
<param pos="0" name="service.vendor" value="ZyXEL"/>