Land #36, @alynn71's improvements for HP OpenView and TippingPoint

rapid7 · Feb 26, 2015 · 1c996f4 · 1c996f4
2 parents ad0942a + fcc0017
commit 1c996f4
Show file tree

Hide file tree

Showing 2 changed files with 62 additions and 11 deletions.
diff --git a/lib/recog/version.rb b/lib/recog/version.rb
@@ -1,3 +1,3 @@
 module Recog
-  VERSION = '1.0.17'
+  VERSION = '1.0.18'
 end
diff --git a/xml/http_servers.xml b/xml/http_servers.xml
@@ -1889,22 +1889,73 @@
       <param pos="0" name="os.certainty" value="0.75"/>
    </fingerprint>
 
-   <fingerprint pattern = "^com.hp.openview.Coda (\d\.\d.\d)$">
-      <description>HP Openview Coda</description>
-      <example>com.hp.openview.Coda 0.0.1</example>
+   <fingerprint pattern = "^(?:BBC \d+\.\d+\.\d+\.?\d*; )?(?:com.hp.openview.)?[c|C]oda (\d+\.\d+\.\d+\.?\d*)$">
+      <description>HP Openview Coda (Communications Daemon)</description>
+      <example service.component.version="0.0.1">com.hp.openview.Coda 0.0.1</example>
+      <example service.component.version="10.00.123">BBC 05.20.050; coda 10.00.123</example>
+      <example service.component.version="0.0.1">BBC 2.6.0.7; com.hp.openview.Coda 0.0.1</example>
       <param pos="0" name="service.vendor" value="HP"/>
       <param pos="0" name="service.family" value="OpenView"/>
-      <param pos="0" name="service.product" value="OpenView"/>
-      <param pos="1" name="service.version"/>
+      <param pos="0" name="service.component.vendor" value="HP"/>
+      <param pos="0" name="service.component.family" value="OpenView"/>
+      <param pos="0" name="service.component.product" value="CODA"/>
+      <param pos="1" name="service.component.version"/>
    </fingerprint>
 
-   <fingerprint pattern = "^com.hp.openview.bbc.LLBServer (\d\.\d.\d\.\d)$">
-      <description>HP Openview LLBServer</description>
-      <example>com.hp.openview.bbc.LLBServer 2.6.8.1</example>
+   <fingerprint pattern="^BBC \d+\.\d+\.\d+\.?\d*; ovbbcrcp (\d+\.\d+\.\d+\.?\d*)$">
+      <description>OpenView Reverse Channel Proxy (RCP)</description>
+      <example service.component.version="11.00.044">BBC 11.00.044; ovbbcrcp 11.00.044</example>
       <param pos="0" name="service.vendor" value="HP"/>
       <param pos="0" name="service.family" value="OpenView"/>
-      <param pos="0" name="service.product" value="OpenView"/>
-      <param pos="1" name="service.version"/>
+      <param pos="0" name="service.component.vendor" value="HP"/>
+      <param pos="0" name="service.component.family" value="OpenView"/>
+      <param pos="0" name="service.component.product" value="Reverse Channel Proxy"/>
+      <param pos="1" name="service.component.version"/>
+   </fingerprint>
+
+   <fingerprint pattern = "^(?:BBC \d+\.\d+\.\d+\.?\d*; )?com.hp.openview.bbc.LLBServer (\d+\.\d+\.\d+\.?\d*)$">
+      <description>HP Openview LLBServer (Local Location Broker)</description>
+      <example service.component.version="2.6.8.1">com.hp.openview.bbc.LLBServer 2.6.8.1</example>
+      <example service.component.version="2.6.0.7">BBC 2.6.0.7; com.hp.openview.bbc.LLBServer 2.6.0.7</example>
+      <param pos="0" name="service.vendor" value="HP"/>
+      <param pos="0" name="service.family" value="OpenView"/>
+      <param pos="0" name="service.component.vendor" value="HP"/>
+      <param pos="0" name="service.component.family" value="OpenView"/>
+      <param pos="0" name="service.component.product" value="LLBServer"/>
+      <param pos="1" name="service.component.version"/>
+   </fingerprint>
+
+   <fingerprint pattern="^BBC \d+\.\d+\.\d+; ovbbccb (\d+\.\d+\.\d+)$">
+      <description>OpenView Communication Broker (ovbbccb)</description>
+      <example service.component.version="06.00.083">BBC 06.00.083; ovbbccb 06.00.083</example>
+      <example service.component.version="11.10.035">BBC 11.10.035; ovbbccb 11.10.035</example>
+      <param pos="0" name="service.vendor" value="HP"/>
+      <param pos="0" name="service.family" value="OpenView"/>
+      <param pos="0" name="service.component.vendor" value="HP"/>
+      <param pos="0" name="service.component.family" value="OpenView"/>
+      <param pos="0" name="service.component.product" value="Communication Broker"/>
+      <param pos="1" name="service.component.version"/>
+   </fingerprint>
+
+	<fingerprint pattern="^BBC \d+\.\d+\.\d+; ovbbccb unknown version$">
+      <description>OpenView Communication Broker (ovbbccb) with no version</description>
+      <example>BBC 11.13.007; ovbbccb unknown version</example>
+      <param pos="0" name="service.vendor" value="HP"/>
+      <param pos="0" name="service.family" value="OpenView"/>
+      <param pos="0" name="service.component.vendor" value="HP"/>
+      <param pos="0" name="service.component.family" value="OpenView"/>
+      <param pos="0" name="service.component.product" value="Communication Broker"/>
+   </fingerprint>
+
+   <fingerprint pattern="^UOS$">
+      <example>UOS</example>
+      <description>HTTP Server that appears unique to Managment Console on HP TippingPoint IPS Devices</description>
+      <param pos="0" name="service.vendor" value="HP"/>
+      <param pos="0" name="service.product" value="HTTP"/>
+      <param pos="0" name="service.family" value="TippingPoint"/>
+      <param pos="0" name="os.vendor" value="HP"/>
+      <param pos="0" name="os.family" value="TippingPoint"/>
+      <param pos="0" name="os.device" value="IPS"/>
    </fingerprint>
 
    <fingerprint pattern="^Helix Server Version ([0-9.]*) \(win32\) \(RealServer compatible\)$">