tcp.xml 128 KB

12345678910111213141516171819202122232425262728293031323334353637383940414243444546474849505152535455565758596061626364656667686970717273747576777879808182838485868788899091929394959697989910010110210310410510610710810911011111211311411511611711811912012112212312412512612712812913013113213313413513613713813914014114214314414514614714814915015115215315415515615715815916016116216316416516616716816917017117217317417517617717817918018118218318418518618718818919019119219319419519619719819920020120220320420520620720820921021121221321421521621721821922022122222322422522622722822923023123223323423523623723823924024124224324424524624724824925025125225325425525625725825926026126226326426526626726826927027127227327427527627727827928028128228328428528628728828929029129229329429529629729829930030130230330430530630730830931031131231331431531631731831932032132232332432532632732832933033133233333433533633733833934034134234334434534634734834935035135235335435535635735835936036136236336436536636736836937037137237337437537637737837938038138238338438538638738838939039139239339439539639739839940040140240340440540640740840941041141241341441541641741841942042142242342442542642742842943043143243343443543643743843944044144244344444544644744844945045145245345445545645745845946046146246346446546646746846947047147247347447547647747847948048148248348448548648748848949049149249349449549649749849950050150250350450550650750850951051151251351451551651751851952052152252352452552652752852953053153253353453553653753853954054154254354454554654754854955055155255355455555655755855956056156256356456556656756856957057157257357457557657757857958058158258358458558658758858959059159259359459559659759859960060160260360460560660760860961061161261361461561661761861962062162262362462562662762862963063163263363463563663763863964064164264364464564664764864965065165265365465565665765865966066166266366466566666766866967067167267367467567667767867968068168268368468568668768868969069169269369469569669769869970070170270370470570670770870971071171271371471571671771871972072172272372472572672772872973073173273373473573673773873974074174274374474574674774874975075175275375475575675775875976076176276376476576676776876977077177277377477577677777877978078178278378478578678778878979079179279379479579679779879980080180280380480580680780880981081181281381481581681781881982082182282382482582682782882983083183283383483583683783883984084184284384484584684784884985085185285385485585685785885986086186286386486586686786886987087187287387487587687787887988088188288388488588688788888989089189289389489589689789889990090190290390490590690790890991091191291391491591691791891992092192292392492592692792892993093193293393493593693793893994094194294394494594694794894995095195295395495595695795895996096196296396496596696796896997097197297397497597697797897998098198298398498598698798898999099199299399499599699799899910001001100210031004100510061007100810091010101110121013101410151016101710181019102010211022102310241025102610271028102910301031103210331034103510361037103810391040104110421043104410451046104710481049105010511052105310541055105610571058105910601061106210631064106510661067106810691070107110721073107410751076107710781079108010811082108310841085108610871088108910901091109210931094109510961097109810991100110111021103110411051106110711081109111011111112111311141115111611171118111911201121112211231124112511261127112811291130113111321133113411351136113711381139114011411142114311441145114611471148114911501151115211531154115511561157115811591160116111621163116411651166116711681169117011711172117311741175117611771178117911801181118211831184118511861187118811891190119111921193119411951196119711981199120012011202120312041205120612071208120912101211121212131214121512161217121812191220122112221223122412251226122712281229123012311232123312341235123612371238123912401241124212431244124512461247124812491250125112521253125412551256125712581259126012611262126312641265126612671268126912701271127212731274127512761277127812791280128112821283128412851286128712881289129012911292129312941295129612971298129913001301130213031304130513061307130813091310131113121313131413151316131713181319132013211322132313241325132613271328132913301331133213331334133513361337133813391340134113421343134413451346134713481349135013511352135313541355135613571358135913601361136213631364136513661367136813691370137113721373137413751376137713781379138013811382138313841385
  1. <?xml version="1.0" encoding="UTF-8"?>
  2. <!-- -->
  3. <!-- Terms of use of fingerprint data: -->
  4. <!-- You are welcome to use the fingerprint data provided as long as you: -->
  5. <!-- 1. Notify the author of this file of your intentions, email to xnih13@gmail.com -->
  6. <!-- 2. Somewhere in your documentation you provide a link to Satori: -->
  7. <!-- http://github.com/xnih/satori -->
  8. <!-- -->
  9. <!-- If you are using this for your own programs it is highly recommended you -->
  10. <!-- contribute new fingerprints -->
  11. <!-- -->
  12. <!-- Updates can be found at: -->
  13. <!-- http://chatteronthewire.org/download/updates/satori/fingerprints/[filename] -->
  14. <!-- https://raw.githubusercontent.com/xnih/satori/master/fingerprints/[filename] -->
  15. <!-- example: -->
  16. <!-- http://chatteronthewire.org/download/updates/satori/fingerprints/dhcp.xml -->
  17. <!-- https://raw.githubusercontent.com/xnih/satori/master/fingerprints/dhcp.xml -->
  18. <!-- -->
  19. <TCP created="2005-08-21" last_updated="2021-01-02" author="xnih13@gmail.com" last_edited_by="xnih13@gmail.com" last_edited_with="Fingerprint Editor">
  20. <fingerprints>
  21. <fingerprint name="1763 MicroLogix 1100 PLC" os_name="1763 MicroLogix 1100 PLC" os_class="ICS device" os_vendor="Allen-Bradley" os_url="https://ab.rockwellautomation.com/Programmable-Controllers/MicroLogix-1100" device_type="" device_vendor="" device_url="" comments="" author="netresec.com" last_updated="2018-11-06">
  22. <tcp_tests>
  23. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="2048:128:0:48:M16384,N,N,S:."/>
  24. </tcp_tests>
  25. </fingerprint>
  26. <fingerprint name="ABB 800xA PLC" os_name="ABB 800xA" os_class="ABB PLC" os_vendor="ABB" os_url="https://new.abb.com/control-systems/system-800xa" device_type="" device_vendor="" device_url="" comments="" author="netresec.com" last_updated="2018-11-06">
  27. <tcp_tests>
  28. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="8192:64:1:48:M1460,N,W0:."/>
  29. </tcp_tests>
  30. </fingerprint>
  31. <fingerprint name="Advantech ADAM-5000 PLC" os_name="Advantech ADAM-5000" os_class="Advantech PLC" os_vendor="Advantech" os_url="http://www.advantech.com/products/modular-i-o-system-adam-5000-series/sub_1-368qr0" device_type="" device_vendor="" device_url="" comments="" author="netresec.com" last_updated="2018-11-06">
  32. <tcp_tests>
  33. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="2920:64:0:44:M1460:."/>
  34. </tcp_tests>
  35. </fingerprint>
  36. <fingerprint name="AIX 5.2" os_name="AIX 5.2" os_class="Unix" os_vendor="IBM Corp." os_url="http://www.ibm.com/aix" device_type="" device_vendor="" device_url="" comments="" author="xnih13@gmail.com" last_updated="2009-02-17">
  37. <tcp_tests>
  38. <test weight="5" matchtype="partial" tcpflag="S" tcpsig="65535:60:*:44:M1380:."/>
  39. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="16384:60:1:44:M1380:."/>
  40. </tcp_tests>
  41. </fingerprint>
  42. <fingerprint name="Amazon Echo Show 5" os_name="" os_class="" os_vendor="" os_url="" device_type="" device_vendor="Amazon" device_url="" comments="" author="xnih13@gmail.com" last_updated="2020-12-23">
  43. <tcp_tests>
  44. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="65535:64:1:60:M1460,S,T,N,W6:."/>
  45. </tcp_tests>
  46. </fingerprint>
  47. <fingerprint name="Amazon Fire TV Stick" os_name="" os_class="" os_vendor="" os_url="" device_type="" device_vendor="Amazon" device_url="www.amazon.com" comments="" author="xnih13@gmail.com" last_updated="2020-12-23">
  48. <tcp_tests>
  49. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="14600:64:1:60:M1460,S,T,N,W6:."/>
  50. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="14480:64:1:56:M1460,S,T:ZAT"/>
  51. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="14480:64:1:60:M1460,N,N,T,N,W6:ZAT"/>
  52. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="14480:64:1:60:M1460,S,T,N,W6:ZAT"/>
  53. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="14600:64:1:44:M1460:ZA"/>
  54. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="14600:64:1:52:M1460,N,N,S,N,W6:ZA"/>
  55. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="65535:64:1:60:M1460,S,T,N,W6:."/>
  56. </tcp_tests>
  57. </fingerprint>
  58. <fingerprint name="Android 10.x" os_name="Android 10" os_class="Android" os_vendor="Android" os_url="http://www.android.com" device_type="Smartphone" device_vendor="" device_url="" comments="" author="xnih13@gmail.com" last_updated="2020-05-27">
  59. <tcp_tests>
  60. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="65535:64:0:60:M1460,S,T,N,W9:."/>
  61. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="65535:64:1:60:M1460,N,W7,S,T:."/>
  62. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="65535:64:1:60:M1460,S,T,N,W8:."/>
  63. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="65535:64:1:60:M1460,S,T,N,W9:."/>
  64. </tcp_tests>
  65. </fingerprint>
  66. <fingerprint name="Android 4.1.x" os_name="Android 4.1" os_class="Android" os_vendor="Android" os_url="http://www.android.com" device_type="Smartphone" device_vendor="" device_url="" comments="" author="xnih13@gmail.com" last_updated="2020-05-27">
  67. <tcp_tests>
  68. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="13880:60:1:60:M1380,S,T,N,W4:."/>
  69. </tcp_tests>
  70. </fingerprint>
  71. <fingerprint name="Android 5.1.x" os_name="Android 5.1" os_class="Android" os_vendor="Android" os_url="http://www.android.com" device_type="Smartphone" device_vendor="" device_url="" comments="" author="xnih13@gmail.com" last_updated="2020-05-27">
  72. <tcp_tests>
  73. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="65535:64:1:60:M1460,S,T,N,W8:."/>
  74. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="65535:64:1:60:M1460,S,T,N,W6:."/>
  75. </tcp_tests>
  76. </fingerprint>
  77. <fingerprint name="Android 7.0.x" os_name="Android 7.0" os_class="Android" os_vendor="Android" os_url="http://www.android.com" device_type="Smartphone" device_vendor="" device_url="" comments="" author="xnih13@gmail.com" last_updated="2020-05-27">
  78. <tcp_tests>
  79. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="65535:64:1:60:M1460,S,T,N,W7:."/>
  80. </tcp_tests>
  81. </fingerprint>
  82. <fingerprint name="Android 7.1.x" os_name="Android 7" os_class="Android" os_vendor="Android" os_url="http://www.android.com" device_type="Smartphone" device_vendor="" device_url="" comments="" author="xnih13@gmail.com" last_updated="2020-05-27">
  83. <tcp_tests>
  84. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="29200:64:1:60:M1460,S,T,N,W6:."/>
  85. </tcp_tests>
  86. </fingerprint>
  87. <fingerprint name="Android 8.0.x" os_name="Android 8.0" os_class="Android" os_vendor="Android" os_url="http://www.android.com" device_type="Smartphone" device_vendor="" device_url="" comments="" author="xnih13@gmail.com" last_updated="2020-05-27">
  88. <tcp_tests>
  89. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="65535:64:1:60:M1460,S,T,N,W8:."/>
  90. </tcp_tests>
  91. </fingerprint>
  92. <fingerprint name="Android 8.1.x" os_name="Android 8.1" os_class="Android" os_vendor="Android" os_url="http://www.android.com" device_type="Smartphone" device_vendor="" device_url="" comments="" author="xnih13@gmail.com" last_updated="2020-05-27">
  93. <tcp_tests>
  94. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="65535:64:1:60:M1460,S,T,N,W7:."/>
  95. </tcp_tests>
  96. </fingerprint>
  97. <fingerprint name="Android 9.x" os_name="Android 9" os_class="Android" os_vendor="Android" os_url="http://www.android.com" device_type="Smartphone" device_vendor="" device_url="" comments="" author="xnih13@gmail.com" last_updated="2020-05-27">
  98. <tcp_tests>
  99. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="65535:64:0:60:M1460,S,T,N,W8:."/>
  100. </tcp_tests>
  101. </fingerprint>
  102. <fingerprint name="Anonym.OS" os_name="OpenBSD 3.8" os_class="OpenBSD" os_vendor="OpenBSD" os_url="http://sourceforge.net/projects/anonym-os" device_type="" device_vendor="" device_url="" comments="" author="xnih13@gmail.com" last_updated="2009-03-03">
  103. <tcp_tests>
  104. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="32767:255:1:64:M1460,N,N,S,N,W0,N,N,T:."/>
  105. </tcp_tests>
  106. </fingerprint>
  107. <fingerprint name="Apple TV" os_name="Apple TV" os_class="Apple TV OS" os_vendor="Apple" os_url="http://www.apple.com/appletv/" device_type="" device_vendor="" device_url="" comments="" author="xnih13@gmail.com" last_updated="2021-09-12">
  108. <tcp_tests>
  109. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="65535:64:1:64:M1460,N,W0,N,N,T,S,E:P"/>
  110. </tcp_tests>
  111. </fingerprint>
  112. <fingerprint name="Apple TV OS 14.0.x" os_name="iOS 14" os_class="iOS" os_vendor="Apple" os_url="" device_type="Digital Media Receiver" device_vendor="Apple" device_url="store.apple.com/apple-tv" comments="" author="xnih13@gmail.com" last_updated="2021-09-12">
  113. <tcp_tests>
  114. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="65535:64:1:64:M1460,N,W5,N,N,T,S,E,E:PZ"/>
  115. </tcp_tests>
  116. </fingerprint>
  117. <fingerprint name="Apple TV OS 14.2.x" os_name="iOS 14" os_class="iOS" os_vendor="Apple" os_url="" device_type="Digital Media Receiver" device_vendor="Apple" device_url="store.apple.com/apple-tv" comments="" author="xnih13@gmail.com" last_updated="2021-09-12">
  118. <tcp_tests>
  119. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="65535:64:1:64:M1460,N,W4,N,N,T,S,E,E:P"/>
  120. </tcp_tests>
  121. </fingerprint>
  122. <fingerprint name="AXIS 206 Network Camera" os_name="Linux 2.6.14" os_class="Linux" os_vendor="AXIS" os_url="https://www.axis.com/en-us/products/axis-206" device_type="" device_vendor="" device_url="" comments="" author="netresec.com" last_updated="2018-11-07">
  123. <tcp_tests>
  124. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="5792:64:1:60:M1460,S,T,N,W1:."/>
  125. </tcp_tests>
  126. </fingerprint>
  127. <fingerprint name="BARIX Barionet 100" os_name="BARIX Barionet 100" os_class="ICS device" os_vendor="Barix AG" os_url="https://www.barix.com/control-products/barionet-family/barix/Product/show/barionet-100/" device_type="" device_vendor="" device_url="" comments="" author="netresec.com" last_updated="2018-11-06">
  128. <tcp_tests>
  129. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="511:64:1:44:M1200:."/>
  130. </tcp_tests>
  131. </fingerprint>
  132. <fingerprint name="Big-IP F5 LB 13.1" os_name="" os_class="" os_vendor="" os_url="" device_type="Load Balancer" device_vendor="F5" device_url="http://www.f5.com" comments="" author="xnih13@gmail.com" last_updated="2021-09-12">
  133. <tcp_tests>
  134. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="4380:255:1:60:M1460,N,N,T,S,E,E:PAT"/>
  135. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="4380:255:1:48:M1460,S,E,E:PA"/>
  136. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="4140:255:1:48:M1380,S,E,E:PA"/>
  137. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="4140:255:1:48:M1460,S,E,E:PA"/>
  138. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="4140:255:1:60:M1380,N,N,T,S,E,E:PAT"/>
  139. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="4098:255:1:48:M1380,S,E,E:PA"/>
  140. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="4098:255:1:60:M1380,N,N,T,S,E,E:PAT"/>
  141. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="3840:255:1:48:M1380,S,E,E:PA"/>
  142. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="3900:255:1:48:M1380,S,E,E:PA"/>
  143. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="3900:255:1:60:M1380,N,N,T,S,E,E:PAT"/>
  144. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="3978:255:1:48:M1380,S,E,E:PA"/>
  145. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="3996:255:1:60:M1380,N,N,T,S,E,E:PAT"/>
  146. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="4020:255:1:48:M1380,S,E,E:PA"/>
  147. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="4050:255:1:48:M1380,S,E,E:PA"/>
  148. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="4056:255:1:48:M1380,S,E,E:PA"/>
  149. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="4056:255:1:60:M1380,N,N,T,S,E,E:PAT"/>
  150. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="4080:255:1:44:M1380:A"/>
  151. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="4080:255:1:44:M1460:A"/>
  152. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="4080:255:1:48:M1460,S,E,E:PA"/>
  153. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="4080:255:1:56:M1380,N,N,T:AT"/>
  154. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="4080:255:1:60:M1380,N,N,T,S,E,E:PAT"/>
  155. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="3564:255:1:60:M1460,N,N,T,S,E,E:PAT"/>
  156. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="3600:255:1:48:M1380,S,E,E:PA"/>
  157. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="3720:255:1:48:M1380,S,E,E:PA"/>
  158. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="3750:255:1:60:M1380,N,N,T,S,E,E:PAT"/>
  159. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="3780:255:1:48:M1380,S,E,E:PA"/>
  160. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="3780:255:1:60:M1380,N,N,T,S,E,E:PAT"/>
  161. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="3789:255:1:48:M1460,S,E,E:PA"/>
  162. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="4080:255:1:48:M1380,S,E,E:PA"/>
  163. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="4080:255:1:60:M1460,N,N,T,S,E,E:PAT"/>
  164. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="1608:255:1:44:M1380:A"/>
  165. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="3867:255:1:48:M1380,S,E,E:PA"/>
  166. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="4008:255:1:56:M1380,N,N,T:AT"/>
  167. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="64240:128:0:44:M1460:A"/>
  168. </tcp_tests>
  169. </fingerprint>
  170. <fingerprint name="Big-IP F5 Load Balancer Unknown Version" os_name="" os_class="" os_vendor="" os_url="" device_type="Load Balancer" device_vendor="F5" device_url="http://www.f5.com" comments="" author="xnih13@gmail.com" last_updated="2021-09-12">
  171. <tcp_tests>
  172. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="29200:64:1:60:M1460,S,T,N,W7:."/>
  173. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="4176:255:1:60:M1392,N,N,T,S,E,E:P"/>
  174. </tcp_tests>
  175. </fingerprint>
  176. <fingerprint name="Big-IP Load Balancer 1500" os_name="" os_class="" os_vendor="" os_url="" device_type="Load Balancer" device_vendor="F5" device_url="http://www.f5.com" comments="" author="xnih13@gmail.com" last_updated="2021-09-12">
  177. <tcp_tests>
  178. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="3780:255:1:48:M1380,S,E:PA"/>
  179. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="4380:255:1:48:M1460,S,E:PA"/>
  180. </tcp_tests>
  181. </fingerprint>
  182. <fingerprint name="Big-IP Load Balancer D39" os_name="" os_class="" os_vendor="" os_url="" device_type="Load Balancer" device_vendor="F5" device_url="http://www.f5.com" comments="" author="xnih13@gmail.com" last_updated="2010-07-11">
  183. <tcp_tests>
  184. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="16560:64:1:44:M1380:A"/>
  185. </tcp_tests>
  186. </fingerprint>
  187. <fingerprint name="BrightSign HD1022" os_name="" os_class="" os_vendor="" os_url="" device_type="Digital Signage" device_vendor="BrightSign" device_url="https://www.brightsign.biz/digital-signage-products" comments="" author="xnih13@gmail.com" last_updated="2020-05-27">
  188. <tcp_tests>
  189. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="14600:64:1:60:M1460,S,T,N,W7:."/>
  190. </tcp_tests>
  191. </fingerprint>
  192. <fingerprint name="BrightSign HD223" os_name="" os_class="" os_vendor="" os_url="" device_type="Digital Signage" device_vendor="BrightSign" device_url="https://www.brightsign.biz/digital-signage-products" comments="" author="xnih13@gmail.com" last_updated="2020-05-27">
  193. <tcp_tests>
  194. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="29200:64:1:60:M1460,S,T,N,W6:."/>
  195. </tcp_tests>
  196. </fingerprint>
  197. <fingerprint name="Brother DCP 7065DN" os_name="" os_class="" os_vendor="" os_url="" device_type="Printer" device_vendor="Brother Industries, Ltd." device_url="http://www.brother.com/" comments="" author="xnih13@gmail.com" last_updated="2018-10-14">
  198. <tcp_tests>
  199. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="8688:64:0:64:M1460,N,W0,N,N,S,N,N,T:."/>
  200. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="14600:64:0:44:M1460:A"/>
  201. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="8328:64:0:64:M1400,N,W0,N,N,S,N,N,T:AT"/>
  202. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="8349:64:0:60:M265,N,N,S,N,N,T:AT"/>
  203. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="8349:64:0:64:M265,N,W0,N,N,S,N,N,T:AT"/>
  204. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="8384:64:0:64:M536,N,W0,N,N,S,N,N,T:AT"/>
  205. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="8688:64:0:64:M1460,N,W0,N,N,S,N,N,T:AT"/>
  206. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="8760:64:0:44:M1460:A"/>
  207. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="8760:64:0:52:M1460,N,W0,N,N,S:A"/>
  208. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="8792:64:0:60:M640,N,W0,N,N,T:AT"/>
  209. </tcp_tests>
  210. </fingerprint>
  211. <fingerprint name="Brother MFC 7065N" os_name="" os_class="" os_vendor="" os_url="" device_type="Printer" device_vendor="Brother Industries, Ltd." device_url="http://www.brother.com/" comments="" author="xnih13@gmail.com" last_updated="2014-06-24">
  212. <tcp_tests>
  213. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="8760:64:0:52:M1460,N,W0,N,N,S:A"/>
  214. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="14600:64:0:52:M1460,N,W0,N,N,S:A"/>
  215. </tcp_tests>
  216. </fingerprint>
  217. <fingerprint name="Brother MFC 7820N" os_name="" os_class="" os_vendor="" os_url="" device_type="Printer" device_vendor="Brother Industries, Ltd." device_url="http://www.brother.com/" comments="" author="xnih13@gmail.com" last_updated="2014-06-24">
  218. <tcp_tests>
  219. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="4096:60:0:44:M1260:A"/>
  220. </tcp_tests>
  221. </fingerprint>
  222. <fingerprint name="Brother MFC 9125CN" os_name="" os_class="" os_vendor="" os_url="" device_type="Printer" device_vendor="Brother Industries, Ltd." device_url="http://www.brother.com/" comments="" author="xnih13@gmail.com" last_updated="2019-02-14">
  223. <tcp_tests>
  224. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="8760:64:1:52:M1460,N,W0,N,N,S:A"/>
  225. </tcp_tests>
  226. </fingerprint>
  227. <fingerprint name="Brother NC 7900W" os_name="" os_class="" os_vendor="" os_url="" device_type="Printer" device_vendor="Brother Industries, Ltd." device_url="http://www.brother.com/" comments="" author="xnih13@gmail.com" last_updated="2019-02-14">
  228. <tcp_tests>
  229. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="8760:64:1:52:M1460,N,W0,N,N,S:A"/>
  230. </tcp_tests>
  231. </fingerprint>
  232. <fingerprint name="Brother NC 8300H" os_name="" os_class="" os_vendor="" os_url="" device_type="Printer" device_vendor="Brother Industries, Ltd." device_url="http://www.brother.com/" comments="" author="xnih13@gmail.com" last_updated="2019-02-14">
  233. <tcp_tests>
  234. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="8760:64:1:52:M1460,N,W0,N,N,S:A"/>
  235. </tcp_tests>
  236. </fingerprint>
  237. <fingerprint name="CentOS 7.5" os_name="CentOS 7.5" os_class="Linux" os_vendor="Cent" os_url="http://www.centos.org" device_type="" device_vendor="" device_url="" comments="" author="xnih13@gmail.com" last_updated="2018-11-03">
  238. <tcp_tests>
  239. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="29200:64:1:52:M1380,N,N,S,N,W9:T"/>
  240. </tcp_tests>
  241. </fingerprint>
  242. <fingerprint name="Cisco 7905 IP Phone" os_name="" os_class="" os_vendor="" os_url="" device_type="VoIP Phone" device_vendor="Cisco Systems, Inc." device_url="http://www.cisco.com" comments="" author="xnih13@gmail.com" last_updated="2009-09-17">
  243. <tcp_tests>
  244. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="1400:255:0:44:M1456:A"/>
  245. </tcp_tests>
  246. </fingerprint>
  247. <fingerprint name="Cisco 7910 IP Phone" os_name="" os_class="" os_vendor="" os_url="" device_type="VoIP Phone" device_vendor="Cisco Systems, Inc." device_url="http://www.cisco.com" comments="" author="xnih13@gmail.com" last_updated="2009-09-17">
  248. <tcp_tests>
  249. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="1400:64:0:44:M1400:A"/>
  250. </tcp_tests>
  251. </fingerprint>
  252. <fingerprint name="Cisco 7911G IP Phone" os_name="" os_class="" os_vendor="" os_url="" device_type="VoIP Phone" device_vendor="Cisco Systems, Inc." device_url="http://www.cisco.com" comments="" author="xnih13@gmail.com" last_updated="2009-09-17">
  253. <tcp_tests>
  254. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="8192:32:0:44:M1400:A"/>
  255. </tcp_tests>
  256. </fingerprint>
  257. <fingerprint name="Cisco 7912 IP Phone" os_name="" os_class="" os_vendor="" os_url="" device_type="VoIP Phone" device_vendor="Cisco Systems, Inc." device_url="http://www.cisco.com" comments="" author="xnih13@gmail.com" last_updated="2009-09-17">
  258. <tcp_tests>
  259. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="1400:255:0:44:M1456:A"/>
  260. </tcp_tests>
  261. </fingerprint>
  262. <fingerprint name="Cisco 7960x IP Phone" os_name="" os_class="" os_vendor="" os_url="" device_type="VoIP Phone" device_vendor="Cisco Systems, Inc." device_url="http://www.cisco.com" comments="" author="xnih13@gmail.com" last_updated="2009-09-17">
  263. <tcp_tests>
  264. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="1400:64:0:44:M1400:A"/>
  265. </tcp_tests>
  266. </fingerprint>
  267. <fingerprint name="Cisco 7961G IP Phone" os_name="" os_class="" os_vendor="" os_url="" device_type="VoIP Phone" device_vendor="Cisco Systems, Inc." device_url="http://www.cisco.com" comments="" author="xnih13@gmail.com" last_updated="2009-09-17">
  268. <tcp_tests>
  269. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="8192:32:0:44:M1400:A"/>
  270. </tcp_tests>
  271. </fingerprint>
  272. <fingerprint name="Cisco Ace" os_name="" os_class="" os_vendor="" os_url="" device_type="Load Balancer" device_vendor="Cisco Systems, Inc." device_url="http://www.cisco.com" comments="" author="xnih13@gmail.com" last_updated="2012-02-11">
  273. <tcp_tests>
  274. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="32768:255:0:44:M1380:A"/>
  275. </tcp_tests>
  276. </fingerprint>
  277. <fingerprint name="Cisco ATA 186" os_name="" os_class="" os_vendor="" os_url="" device_type="VoIP Phone" device_vendor="Cisco Systems, Inc." device_url="http://www.cisco.com" comments="" author="xnih13@gmail.com" last_updated="2019-02-15">
  278. <tcp_tests>
  279. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="16000:128:0:44:M1456:AT"/>
  280. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="16000:16:0:44:M1456:AT"/>
  281. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="16000:255:0:44:M1456:AT"/>
  282. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="16000:32:0:44:M1456:AT"/>
  283. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="16000:60:0:44:M1456:AT"/>
  284. </tcp_tests>
  285. </fingerprint>
  286. <fingerprint name="Cisco IP Phone" os_name="" os_class="" os_vendor="" os_url="" device_type="VoIP Phone" device_vendor="Cisco Systems, Inc." device_url="http://www.cisco.com" comments="" author="xnih13@gmail.com" last_updated="2009-02-15">
  287. <tcp_tests>
  288. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="65535:128:0:44:M1460:A"/>
  289. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="65535:128:0:48:M1460,N,N,S:A"/>
  290. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="17520:128:1:52:M1460,N,W0,N,N,S:A"/>
  291. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="65535:128:0:48:M1460,N,N,S:."/>
  292. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="1400:64:0:44:M1400:."/>
  293. </tcp_tests>
  294. </fingerprint>
  295. <fingerprint name="Cisco ISE 2.x" os_name="" os_class="" os_vendor="" os_url="" device_type="" device_vendor="Cisco Systems, Inc." device_url="http://www.cisco.com" comments="2.2.0.470 and 2.6.0.156" author="xnih13@gmail.com" last_updated="2020-04-24">
  296. <tcp_tests>
  297. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="29200:64:1:60:M1380,S,T,N,W7:."/>
  298. </tcp_tests>
  299. </fingerprint>
  300. <fingerprint name="Cisco Router IOS 12.4" os_name="" os_class="" os_vendor="" os_url="" device_type="Router" device_vendor="Cisco Systems, Inc." device_url="http://www.cisco.com" comments="" author="xnih13@gmail.com" last_updated="2009-09-13">
  301. <tcp_tests>
  302. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="4128:255:0:44:M536:A"/>
  303. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="4128:255:0:44:M1460:A"/>
  304. </tcp_tests>
  305. </fingerprint>
  306. <fingerprint name="Cisco SSL VPN Gateway" os_name="" os_class="" os_vendor="" os_url="" device_type="Router" device_vendor="Cisco Systems, Inc." device_url="http://www.cisco.com" comments="" author="xnih13@gmail.com" last_updated="2019-02-14">
  307. <tcp_tests>
  308. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="32768:255:0:44:M1460:A"/>
  309. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="32768:255:0:56:M1460,N,N,T:AT"/>
  310. </tcp_tests>
  311. </fingerprint>
  312. <fingerprint name="dd wrt" os_name="Linux" os_class="" os_vendor="" os_url="" device_type="" device_vendor="DD WRT" device_url="https://dd-wrt.com/" comments="" author="xnih13@gmail.com" last_updated="2018-10-14">
  313. <tcp_tests>
  314. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="28960:64:1:56:M1460,S,T:ZAT"/>
  315. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="28960:64:1:60:M1460,N,N,T,N,W4:ZAT"/>
  316. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="28960:64:1:60:M1460,S,T,N,W4:ZAT"/>
  317. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="29200:64:1:44:M1460:ZA"/>
  318. </tcp_tests>
  319. </fingerprint>
  320. <fingerprint name="Debian 3.1" os_name="Linux 2.6" os_class="Linux" os_vendor="Debian" os_url="http://www.debian.org" device_type="" device_vendor="" device_url="" comments="" author="xnih13@gmail.com" last_updated="2009-03-03">
  321. <tcp_tests>
  322. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="5840:64:1:60:M1460,S,T,N,W0:."/>
  323. </tcp_tests>
  324. </fingerprint>
  325. <fingerprint name="Dell C1760nw Color Printer" os_name="" os_class="" os_vendor="" os_url="" device_type="Printer" device_vendor="Dell, Inc." device_url="http://www.dell.com" comments="Printers" author="support@packetfence.org" last_updated="2020-12-12">
  326. <tcp_tests>
  327. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="16384:64:1:48:M1460,N,W0:A"/>
  328. </tcp_tests>
  329. </fingerprint>
  330. <fingerprint name="EAGLE20 Tofino" os_name="EAGLE20 Tofino" os_class="ICS device" os_vendor="Hirchmann" os_url="http://www.hirschmann.com/en/Hirschmann_Produkte/Industrial_Ethernet/security-firewall/EAGLE20_Tofino/index.phtml" device_type="" device_vendor="" device_url="" comments="" author="netresec.com" last_updated="2018-11-07">
  331. <tcp_tests>
  332. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="10000:64:1:52:N,N,M1426,S,N,W0:."/>
  333. </tcp_tests>
  334. </fingerprint>
  335. <fingerprint name="ESX 2.x" os_name="ESX 2.x" os_class="Linux" os_vendor="VMware, Inc." os_url="http://www.vmware.com" device_type="" device_vendor="" device_url="" comments="may just be generic linux fingerprint, not esx, need more tests" author="xnih13@gmail.com" last_updated="2008-10-20">
  336. <tcp_tests>
  337. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="5840:64:1:48:M1460,N,N,S:A"/>
  338. </tcp_tests>
  339. </fingerprint>
  340. <fingerprint name="ESX 3.0" os_name="ESX 3.0" os_class="Linux" os_vendor="VMware, Inc." os_url="http://www.vmware.com" device_type="" device_vendor="" device_url="" comments="may just be generic linux fingerprint, not esx, need more tests" author="xnih13@gmail.com" last_updated="2008-10-20">
  341. <tcp_tests>
  342. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="5840:64:1:48:M1460,N,N,S:A"/>
  343. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="65535:64:1:44:M1460:A"/>
  344. </tcp_tests>
  345. </fingerprint>
  346. <fingerprint name="ESX 3.5" os_name="ESX 3.5" os_class="Linux" os_vendor="VMware, Inc." os_url="http://www.vmware.com" device_type="" device_vendor="" device_url="" comments="may just be generic linux fingerprint, not esx, need more tests" author="xnih13@gmail.com" last_updated="2009-10-14">
  347. <tcp_tests>
  348. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="5840:64:1:52:M1460,N,N,S,N,W0:ZA"/>
  349. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="65535:64:1:48:M1460,N,W1:ZA"/>
  350. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="65535:64:1:44:M1460:ZA"/>
  351. </tcp_tests>
  352. </fingerprint>
  353. <fingerprint name="ESX 6.5" os_name="ESX 6.5" os_class="Linux" os_vendor="VMware, Inc." os_url="http://www.vmware.com" device_type="" device_vendor="" device_url="" comments="may just be generic linux fingerprint, not esx, need more tests, builds 8294253, 7388607, 8935087, 10175896 " author="xnih13@gmail.com" last_updated="2021-09-12">
  354. <tcp_tests>
  355. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="65535:64:1:48:M1380,S,E,E:PT"/>
  356. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="65535:64:1:48:M1460,S,E,E:PT"/>
  357. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="65535:64:1:60:M1380,N,W9,S,T:."/>
  358. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="65535:64:1:60:M1460,N,W9,S,T:."/>
  359. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="65535:64:1:52:M1380,N,W9,S,E,E:PA"/>
  360. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="65535:64:1:60:M1380,N,W9,S,T:AT"/>
  361. </tcp_tests>
  362. </fingerprint>
  363. <fingerprint name="EZProxy" os_name="" os_class="" os_vendor="" os_url="" device_type="" device_vendor="OCLC" device_url="https://www.oclc.org/en/ezproxy.html" comments="" author="xnih13@gmail.com" last_updated="2018-11-03">
  364. <tcp_tests>
  365. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="14600:64:1:60:M1460,S,T,N,W6:."/>
  366. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="14480:64:1:60:M1460,S,T,N,W6:ZAT"/>
  367. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="14600:64:1:52:M1460,N,N,S,N,W6:ZA"/>
  368. </tcp_tests>
  369. </fingerprint>
  370. <fingerprint name="FreeBSD" os_name="FreeBSD" os_class="FreeBSD" os_vendor="FreeBSD" os_url="http://www.freebsd.org" device_type="" device_vendor="" device_url="" comments="unknown version" author="xnih13@gmail.com" last_updated="2009-03-03">
  371. <tcp_tests>
  372. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="57344:64:1:60:M1460,N,W0,N,N,T:AT"/>
  373. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="57344:64:1:44:M1460:A"/>
  374. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="65535:64:1:60:M1460,N,W1,N,N,T:Z"/>
  375. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="65535:64:1:60:M1460,N,W1,N,N,T:."/>
  376. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="65535:64:1:44:M1460:."/>
  377. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="57344:64:1:60:M1460,N,W0,N,N,T:."/>
  378. </tcp_tests>
  379. </fingerprint>
  380. <fingerprint name="FreeBSD 3.4" os_name="FreeBSD 3.4" os_class="FreeBSD" os_vendor="FreeBSD" os_url="http://www.freebsd.org" device_type="" device_vendor="" device_url="" comments="" author="xnih13@gmail.com" last_updated="2021-09-12">
  381. <tcp_tests>
  382. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="17520:64:1:44:M1460:A"/>
  383. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="16430:64:1:44:M1460:A"/>
  384. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="16384:64:1:44:M1460:A"/>
  385. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="17520:64:1:44:M1460:."/>
  386. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="16992:64:1:44:M1460:."/>
  387. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="16384:64:1:44:M1460:."/>
  388. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="16384:64:1:44:M1460:Z"/>
  389. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="3072:60:0:60:W10,N,M265,T,E:P"/>
  390. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="2048:60:0:60:W10,N,M265,T,E:P"/>
  391. </tcp_tests>
  392. </fingerprint>
  393. <fingerprint name="FreeBSD 4.2 thru 4" os_name="FreeBSD 4" os_class="FreeBSD" os_vendor="FreeBSD" os_url="http://www.freebsd.org" device_type="" device_vendor="" device_url="" comments="" author="xnih13@gmail.com" last_updated="2021-09-12">
  394. <tcp_tests>
  395. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="65535:60:1:44:M1460:A"/>
  396. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="65535:64:1:44:M1460:A"/>
  397. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="17520:64:1:44:M1460:."/>
  398. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="16384:64:1:44:M1460:."/>
  399. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="4096:60:0:60:W10,N,M265,T,E:P"/>
  400. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="2048:60:0:60:W10,N,M265,T,E:P"/>
  401. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="1024:60:0:60:W10,N,M265,T,E:P"/>
  402. </tcp_tests>
  403. </fingerprint>
  404. <fingerprint name="FreeBSD 6.x" os_name="FreeBSD 6" os_class="FreeBSD" os_vendor="FreeBSD" os_url="http://www.freebsd.org" device_type="" device_vendor="" device_url="" comments="" author="xnih13@gmail.com" last_updated="2021-09-12">
  405. <tcp_tests>
  406. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="65535:64:1:64:M1460,N,W1,N,N,T,S,E:P"/>
  407. </tcp_tests>
  408. </fingerprint>
  409. <fingerprint name="FreeBSD 7.0" os_name="FreeBSD 7" os_class="FreeBSD" os_vendor="FreeBSD" os_url="http://www.freebsd.org" device_type="" device_vendor="" device_url="" comments="" author="xnih13@gmail.com" last_updated="2009-02-20">
  410. <tcp_tests>
  411. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="65535:64:1:60:M1460,N,W3,S,T:."/>
  412. </tcp_tests>
  413. </fingerprint>
  414. <fingerprint name="FreeBSD 7.1" os_name="FreeBSD 7" os_class="FreeBSD" os_vendor="FreeBSD" os_url="http://www.freebsd.org" device_type="" device_vendor="" device_url="" comments="" author="xnih13@gmail.com" last_updated="2021-09-12">
  415. <tcp_tests>
  416. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="65535:64:1:48:M1460,S,E:P"/>
  417. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="65535:64:1:60:M1460,N,W3,S,T:AT"/>
  418. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="65535:64:1:48:M1460,S,E:PA"/>
  419. </tcp_tests>
  420. </fingerprint>
  421. <fingerprint name="FreeBSD 7.2" os_name="FreeBSD 7" os_class="FreeBSD" os_vendor="FreeBSD" os_url="http://www.freebsd.org" device_type="" device_vendor="" device_url="" comments="" author="xnih13@gmail.com" last_updated="2009-09-20">
  422. <tcp_tests>
  423. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="65535:64:1:60:M1460,N,W3,S,T:."/>
  424. </tcp_tests>
  425. </fingerprint>
  426. <fingerprint name="FreeNAS 0.7" os_name="FreeNAS" os_class="FreeBSD" os_vendor="FreeNAS" os_url="http://www.freenas.org/" device_type="" device_vendor="" device_url="" comments="FreeNAS 0.7RC1" author="xnih13@gmail.com" last_updated="2021-09-12">
  427. <tcp_tests>
  428. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="65535:64:1:64:M1460,N,W1,N,N,T,S,E:PAT"/>
  429. </tcp_tests>
  430. </fingerprint>
  431. <fingerprint name="Google Home/Nest" os_name="" os_class="" os_vendor="" os_url="" device_type="Home Assistant" device_vendor="Google" device_url="https://home.google.com" comments="" author="xnih13@gmail.com" last_updated="2020-05-27">
  432. <tcp_tests>
  433. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="14600:64:1:60:M1460,S,T,N,W6:."/>
  434. </tcp_tests>
  435. </fingerprint>
  436. <fingerprint name="HP 3482D6" os_name="" os_class="" os_vendor="" os_url="" device_type="Printer" device_vendor="Hewlett-Packard" device_url="http://www.hp.com" comments="" author="xnih13@gmail.com" last_updated="2019-02-14">
  437. <tcp_tests>
  438. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="8760:64:1:52:M1460,N,W0,N,N,S:A"/>
  439. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="8688:64:1:64:M1460,N,W0,N,N,S,N,N,T:AT"/>
  440. </tcp_tests>
  441. </fingerprint>
  442. <fingerprint name="HP A61589" os_name="" os_class="" os_vendor="" os_url="" device_type="Printer" device_vendor="Hewlett-Packard" device_url="http://www.hp.com" comments="" author="xnih13@gmail.com" last_updated="2019-02-14">
  443. <tcp_tests>
  444. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="8760:64:1:52:M1460,N,W0,N,N,S:A"/>
  445. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="8688:64:1:64:M1460,N,W0,N,N,S,N,N,T:AT"/>
  446. </tcp_tests>
  447. </fingerprint>
  448. <fingerprint name="HP B5L48A" os_name="" os_class="" os_vendor="" os_url="" device_type="Printer" device_vendor="Hewlett-Packard" device_url="http://www.hp.com" comments="" author="xnih13@gmail.com" last_updated="2019-02-14">
  449. <tcp_tests>
  450. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="2920:64:1:48:M1460,N,W0:A"/>
  451. </tcp_tests>
  452. </fingerprint>
  453. <fingerprint name="HP C2A04F" os_name="" os_class="" os_vendor="" os_url="" device_type="Printer" device_vendor="Hewlett-Packard" device_url="http://www.hp.com" comments="" author="xnih13@gmail.com" last_updated="2019-02-14">
  454. <tcp_tests>
  455. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="8760:64:1:52:M1460,N,W0,N,N,S:A"/>
  456. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="8688:64:1:64:M1460,N,W0,N,N,S,N,N,T:AT"/>
  457. </tcp_tests>
  458. </fingerprint>
  459. <fingerprint name="HP CD646A" os_name="" os_class="" os_vendor="" os_url="" device_type="Printer" device_vendor="Hewlett-Packard" device_url="http://www.hp.com" comments="" author="xnih13@gmail.com" last_updated="2019-02-14">
  460. <tcp_tests>
  461. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="2920:64:1:48:M1460,N,W0:A"/>
  462. </tcp_tests>
  463. </fingerprint>
  464. <fingerprint name="HP CE989A" os_name="" os_class="" os_vendor="" os_url="" device_type="Printer" device_vendor="Hewlett-Packard" device_url="http://www.hp.com" comments="" author="xnih13@gmail.com" last_updated="2019-02-14">
  465. <tcp_tests>
  466. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="2920:64:1:60:M1460,N,W0,N,N,T:AT"/>
  467. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="2920:64:1:48:M1460,N,W0:A"/>
  468. </tcp_tests>
  469. </fingerprint>
  470. <fingerprint name="HP CE993A" os_name="" os_class="" os_vendor="" os_url="" device_type="Printer" device_vendor="Hewlett-Packard" device_url="http://www.hp.com" comments="" author="xnih13@gmail.com" last_updated="2019-02-14">
  471. <tcp_tests>
  472. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="2920:64:1:48:M1460,N,W0:A"/>
  473. </tcp_tests>
  474. </fingerprint>
  475. <fingerprint name="HP CXXXXA" os_name="" os_class="" os_vendor="" os_url="" device_type="Printer" device_vendor="Hewlett-Packard" device_url="http://www.hp.com" comments="" author="xnih13@gmail.com" last_updated="2019-02-14">
  476. <tcp_tests>
  477. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="5840:64:0:48:M1460,N,W0:A"/>
  478. </tcp_tests>
  479. </fingerprint>
  480. <fingerprint name="HP D3L09A" os_name="" os_class="" os_vendor="" os_url="" device_type="Printer" device_vendor="Hewlett-Packard" device_url="http://www.hp.com" comments="" author="xnih13@gmail.com" last_updated="2019-02-14">
  481. <tcp_tests>
  482. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="2920:64:1:48:M1460,N,W0:A"/>
  483. </tcp_tests>
  484. </fingerprint>
  485. <fingerprint name="HP E72101" os_name="" os_class="" os_vendor="" os_url="" device_type="Printer" device_vendor="Hewlett-Packard" device_url="http://www.hp.com" comments="" author="xnih13@gmail.com" last_updated="2019-02-14">
  486. <tcp_tests>
  487. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="8760:64:1:52:M1460,N,W0,N,N,S:A"/>
  488. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="8688:64:1:64:M1460,N,W0,N,N,S,N,N,T:AT"/>
  489. </tcp_tests>
  490. </fingerprint>
  491. <fingerprint name="HP Generic JetDirect" os_name="" os_class="" os_vendor="" os_url="" device_type="Printer" device_vendor="Hewlett-Packard" device_url="http://www.hp.com" comments="" author="xnih13@gmail.com" last_updated="2019-02-14">
  492. <tcp_tests>
  493. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="8760:64:0:52:M1460,N,W0,N,N,S:A"/>
  494. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="5840:64:0:44:M1460:A"/>
  495. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="1460:64:0:44:M1460:A"/>
  496. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="1460:64:0:48:M1460,N,W0:A"/>
  497. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="5840:64:0:48:M1460,N,W0:A"/>
  498. </tcp_tests>
  499. </fingerprint>
  500. <fingerprint name="HP Q2427A" os_name="" os_class="" os_vendor="" os_url="" device_type="Printer" device_vendor="Hewlett-Packard" device_url="http://www.hp.com" comments="" author="xnih13@gmail.com" last_updated="2019-02-14">
  501. <tcp_tests>
  502. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="5840:64:0:48:M1460,N,W0:A"/>
  503. </tcp_tests>
  504. </fingerprint>
  505. <fingerprint name="HP Q7545A" os_name="" os_class="" os_vendor="" os_url="" device_type="Printer" device_vendor="Hewlett-Packard" device_url="http://www.hp.com" comments="" author="xnih13@gmail.com" last_updated="2019-02-14">
  506. <tcp_tests>
  507. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="5840:64:0:48:M1460,N,W0:A"/>
  508. </tcp_tests>
  509. </fingerprint>
  510. <fingerprint name="Iomega StoreCenter Pro ix4-200r" os_name="" os_class="" os_vendor="" os_url="" device_type="NAS" device_vendor="Iomega" device_url="http://iomega.com/nas/us-nas-comp.html" comments="" author="xnih13@gmail.com" last_updated="2010-05-10">
  511. <tcp_tests>
  512. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="5840:64:1:52:M1460,N,N,S,N,W5:ZA"/>
  513. </tcp_tests>
  514. </fingerprint>
  515. <fingerprint name="iOS 12.x" os_name="iOS 12" os_class="iOS" os_vendor="Apple, Inc." os_url="http://www.apple.com" device_type="Multimedia Device" device_vendor="Apple, Inc." device_url="http://www.apple.com/" comments="" author="xnih13@gmail.com" last_updated="2021-09-12">
  516. <tcp_tests>
  517. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="65535:64:1:64:M1460,N,W7,N,N,T,S,E,E:PZ"/>
  518. </tcp_tests>
  519. </fingerprint>
  520. <fingerprint name="iOS 13.x" os_name="iOS 13" os_class="iOS" os_vendor="Apple, Inc." os_url="http://www.apple.com" device_type="Multimedia Device" device_vendor="Apple, Inc." device_url="http://www.apple.com/" comments="" author="xnih13@gmail.com" last_updated="2021-09-12">
  521. <tcp_tests>
  522. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="65535:64:1:64:M1460,N,W7,N,N,T,S,E,E:PZ"/>
  523. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="10240:64:1:64:M1460,N,W3,N,N,T,S,E,E:PZ"/>
  524. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="65535:64:1:64:M1388,N,W7,N,N,T,S,E,E:PZ"/>
  525. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="65535:64:1:64:M1460,N,W3,N,N,T,S,E,E:PZ"/>
  526. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="65535:64:1:64:M1460,N,W5,N,N,T,S,E,E:PZ"/>
  527. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="65535:64:1:64:M1460,N,W6,N,N,T,S,E,E:PZ"/>
  528. </tcp_tests>
  529. </fingerprint>
  530. <fingerprint name="iOS 6.x" os_name="iOS 6" os_class="iOS" os_vendor="Apple, Inc." os_url="http://www.apple.com" device_type="Multimedia Device" device_vendor="Apple, Inc." device_url="http://www.apple.com/" comments="" author="xnih13@gmail.com" last_updated="2020-05-27">
  531. <tcp_tests>
  532. <test weight="5" matchtype="exact" tcpflag="A" tcpsig="32806:64:1:52:N,N,T:."/>
  533. </tcp_tests>
  534. </fingerprint>
  535. <fingerprint name="iPerf Box" os_name="" os_class="Linux" os_vendor="" os_url="" device_type="" device_vendor="" device_url="" comments="" author="xnih13@gmail.com" last_updated="2020-05-27">
  536. <tcp_tests>
  537. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="43440:64:1:60:M1380,S,T,N,W13:ZAT"/>
  538. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="43440:64:1:60:M1460,S,T,N,W13:ZAT"/>
  539. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="31856:64:1:60:M1460,S,T,N,W13:ZAT"/>
  540. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="29200:64:1:44:M1380:ZA"/>
  541. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="42340:64:1:52:M1380,N,N,S,N,W13:ZA"/>
  542. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="42340:64:1:60:M1380,S,T,N,W13:."/>
  543. </tcp_tests>
  544. </fingerprint>
  545. <fingerprint name="Johnson Controls MS-NAE3510-2" os_name="Johnson Controls MS-NAE3510-2" os_class="ICS device" os_vendor="Johnson Controls" os_url="https://www.johnsoncontrols.com/" device_type="" device_vendor="" device_url="" comments="" author="netresec.com" last_updated="2018-11-06">
  546. <tcp_tests>
  547. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="33580:128:1:52:M1460,N,W0,N,N,S:."/>
  548. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="33580:128:1:64:M1460,N,W0,N,N,T0,N,N,S:."/>
  549. </tcp_tests>
  550. </fingerprint>
  551. <fingerprint name="Linksys PAP2/PAP2T" os_name="" os_class="" os_vendor="" os_url="" device_type="VoIP Phone" device_vendor="Linksys" device_url="http://www.linksys.com" comments="" author="xnih13@gmail.com" last_updated="2010-11-13">
  552. <tcp_tests>
  553. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="16000:255:0:44:M1460:A"/>
  554. </tcp_tests>
  555. </fingerprint>
  556. <fingerprint name="Linksys WRT54G Series" os_name="" os_class="" os_vendor="" os_url="" device_type="Router" device_vendor="Linksys" device_url="http://www.linksys.com" comments="" author="Thierry@Zoller.lu" last_updated="2009-02-08">
  557. <tcp_tests>
  558. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="5840:64:1:52:M1460,N,N,S,N,W0:A"/>
  559. </tcp_tests>
  560. </fingerprint>
  561. <fingerprint name="Linux 2.2.x" os_name="Linux 2.2" os_class="Linux" os_vendor="" os_url="http://www.kernel.org" device_type="" device_vendor="" device_url="" comments="" author="xnih13@gmail.com" last_updated="2021-09-12">
  562. <tcp_tests>
  563. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="32696:64:1:44:M536:A"/>
  564. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="32595:64:1:60:M265,N,N,T,N,W0:AT"/>
  565. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="32568:64:1:44:M1416:A"/>
  566. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="32256:64:1:48:M512,N,W0:A"/>
  567. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="32120:64:1:48:M1460,N,N,S:A"/>
  568. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="32120:64:1:48:M1460,N,W0:A"/>
  569. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="32120:64:1:60:M1460,S,T,N,W0:AT"/>
  570. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="31500:64:1:48:M1260,N,N,S:A"/>
  571. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="16165:64:1:60:M265,N,N,T,N,W0:AT"/>
  572. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="16080:64:1:44:M536:A"/>
  573. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="16060:64:1:60:M1460,S,T,N,W0:AT"/>
  574. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="16060:64:1:60:M1460,N,N,T,N,W0:AT"/>
  575. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="32767:64:1:60:M1460,S,T,N,W0:."/>
  576. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="32120:64:1:60:M1460,S,T,N,W0:."/>
  577. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="32120:64:1:60:M1460,S,T,N,W0:Z"/>
  578. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="32120:64:1:52:M1460,N,N,S,N,W0:."/>
  579. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="32120:60:1:60:M1460,S,T,N,W0:."/>
  580. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="16060:64:1:60:M1460,S,T,N,W0:."/>
  581. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="5840:64:1:60:M1460,S,T,N,W0:."/>
  582. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="4096:60:0:60:W10,N,M265,T,E:P"/>
  583. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="3072:60:0:60:W10,N,M265,T,E:P"/>
  584. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="2048:60:0:60:W10,N,M265,T,E:P"/>
  585. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="1024:60:0:60:W10,N,M265,T,E:P"/>
  586. </tcp_tests>
  587. </fingerprint>
  588. <fingerprint name="Linux 2.4.x" os_name="Linux 2.4" os_class="Linux" os_vendor="" os_url="http://www.kernel.org" device_type="" device_vendor="" device_url="" comments="" author="xnih13@gmail.com" last_updated="2021-09-12">
  589. <tcp_tests>
  590. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="31856:64:1:60:M1460,S,T,N,W0:ZAT"/>
  591. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="16060:64:1:60:M1460,S,T,N,W0:AT"/>
  592. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="5840:64:1:52:M1460,N,N,S,N,W0:ZA"/>
  593. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="5840:64:1:48:M1460,N,N,S:ZA"/>
  594. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="5840:64:1:44:M1460:ZA"/>
  595. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="5840:60:1:48:M1460,N,N,S:ZA"/>
  596. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="5840:60:1:48:M1380,N,N,S:ZA"/>
  597. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="5792:64:1:60:M1460,N,N,T,N,W0:ZAT"/>
  598. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="5792:64:1:60:M1460,S,T,N,W0:ZAT"/>
  599. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="31856:64:1:60:M1460,S,T,N,W0:Z"/>
  600. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="31856:64:1:60:M1460,S,T,N,W0:ZT"/>
  601. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="16060:64:1:60:M1460,S,T,N,W0:."/>
  602. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="5840:64:1:60:M1460,E:PZ"/>
  603. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="5840:64:1:52:M1460,N,N,S,N,W0:."/>
  604. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="5840:64:1:60:M1460,S,T,N,W1:."/>
  605. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="5840:64:1:60:M1460,S,T,N,W0:."/>
  606. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="5840:64:1:60:M1460,S,T,N,W0:Z"/>
  607. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="3072:60:0:60:W10,N,M265,T,E:P"/>
  608. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="1024:60:0:60:W10,N,M265,T,E:P"/>
  609. </tcp_tests>
  610. </fingerprint>
  611. <fingerprint name="Linux 2.6.x" os_name="Linux 2.6" os_class="Linux" os_vendor="" os_url="http://www.kernel.org" device_type="" device_vendor="" device_url="" comments="" author="xnih13@gmail.com" last_updated="2019-02-15">
  612. <tcp_tests>
  613. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="5840:32:1:60:M1460,S,T,N,W2:."/>
  614. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="5840:64:1:48:M1460,N,N,S:ZA"/>
  615. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="5840:64:1:60:M1460,S,T,N,W0:."/>
  616. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="5840:64:1:60:M1460,S,T,N,W1:."/>
  617. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="5840:64:1:60:M1460,S,T,N,W2:."/>
  618. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="5840:64:1:60:M1460,S,T,N,W3:."/>
  619. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="5840:64:1:60:M1460,S,T,N,W4:."/>
  620. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="5840:64:1:60:M1460,S,T,N,W5:."/>
  621. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="5840:64:1:60:M1460,S,T,N,W7:."/>
  622. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="5840:64:1:52:M1460,N,N,S,N,W7:ZA"/>
  623. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="5840:64:1:60:M1460,S,T,N,W6:."/>
  624. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="14600:64:1:52:M1380,N,N,S,N,W7:ZA"/>
  625. </tcp_tests>
  626. </fingerprint>
  627. <fingerprint name="Linux 3.10.x" os_name="Linux 3.10" os_class="Linux" os_vendor="" os_url="http://www.kernel.org" device_type="" device_vendor="" device_url="" comments="" author="xnih13@gmail.com" last_updated="2013-05-27">
  628. <tcp_tests>
  629. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="14600:64:1:52:M1380,N,N,S,N,W7:ZA"/>
  630. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="29200:64:1:60:M1460,S,T,N,W7:."/>
  631. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="28960:64:1:60:M1460,S,T,N,W7:ZAT"/>
  632. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="28960:64:1:60:M1380,S,T,N,W7:ZAT"/>
  633. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="29200:64:1:60:M1380,S,T,N,W7:."/>
  634. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="29200:64:1:52:M1380,N,N,S,N,W7:ZA"/>
  635. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="29200:64:1:52:M1460,N,N,S,N,W7:ZA"/>
  636. </tcp_tests>
  637. </fingerprint>
  638. <fingerprint name="Linux 3.5.x" os_name="Linux 3.5" os_class="Linux" os_vendor="" os_url="http://www.kernel.org" device_type="" device_vendor="" device_url="" comments="" author="xnih13@gmail.com" last_updated="2019-02-15">
  639. <tcp_tests>
  640. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="14480:64:1:60:M1460,S,T,N,W7:ZAT"/>
  641. </tcp_tests>
  642. </fingerprint>
  643. <fingerprint name="Linux Raspberrypi 3.12.x" os_name="Linux 3.12" os_class="Linux" os_vendor="" os_url="http://www.kernel.org" device_type="" device_vendor="" device_url="" comments="June 2014 Raspberrian release" author="xnih13@gmail.com" last_updated="2014-06-23">
  644. <tcp_tests>
  645. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="29200:64:1:60:M1460,S,T,N,W5:."/>
  646. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="29200:64:1:52:M1460,N,N,S,N,W5:ZA"/>
  647. </tcp_tests>
  648. </fingerprint>
  649. <fingerprint name="Mac OS 9.x" os_name="Mac OS 9.x" os_class="Mac OS" os_vendor="Apple, Inc." os_url="http://www.apple.com" device_type="" device_vendor="" device_url="" comments="" author="xnih13@gmail.com" last_updated="2009-02-15">
  650. <tcp_tests>
  651. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="32768:255:1:48:M1460,W0,N:."/>
  652. </tcp_tests>
  653. </fingerprint>
  654. <fingerprint name="Mac OS X" os_name="Mac OS X" os_class="Mac OS" os_vendor="Apple, Inc." os_url="http://www.apple.com/macosx" device_type="" device_vendor="" device_url="" comments="" author="xnih13@gmail.com" last_updated="2009-02-08">
  655. <tcp_tests>
  656. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="65535:64:1:60:M1460,N,W2,N,N,T:."/>
  657. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="65535:64:1:60:M1460,N,W1,N,N,T:."/>
  658. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="65535:64:1:60:M1460,N,W0,N,N,T:."/>
  659. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="65535:64:1:60:M1452,N,W0,N,N,T:."/>
  660. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="65535:64:1:44:M1460:."/>
  661. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="32768:64:1:60:M1460,N,W0,N,N,T:."/>
  662. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="32768:64:1:44:M1460:."/>
  663. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="10000:64:1:60:M1460,N,W0,N,N,T:."/>
  664. </tcp_tests>
  665. </fingerprint>
  666. <fingerprint name="Mac OS X 10.10.x" os_name="Mac OS X 10.10" os_class="Mac OS" os_vendor="Apple, Inc." os_url="http://www.apple.com/macosx" device_type="" device_vendor="" device_url="" comments="" author="xnih13@gmail.com" last_updated="2021-09-12">
  667. <tcp_tests>
  668. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="65535:16:1:64:M1460,N,W4,N,N,T,S,E,E:P"/>
  669. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="65535:32:1:48:M1460,S,E,E:PT"/>
  670. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="65535:32:1:64:M1460,N,W4,N,N,T,S,E,E:P"/>
  671. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="65535:60:1:48:M1460,S,E,E:PT"/>
  672. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="65535:60:1:64:M1460,N,W4,N,N,T,S,E,E:P"/>
  673. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="65535:64:1:64:M1460,N,W5,N,N,T,S,E,E:P"/>
  674. </tcp_tests>
  675. </fingerprint>
  676. <fingerprint name="Mac OS X 10.11.x" os_name="Mac OS X 10.11" os_class="Mac OS" os_vendor="Apple, Inc." os_url="http://www.apple.com/macosx" device_type="" device_vendor="" device_url="" comments="" author="xnih13@gmail.com" last_updated="2021-11-08">
  677. <tcp_tests>
  678. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="65535:64:1:64:M1460,N,W5,N,N,T,S,E,E:P"/>
  679. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="65535:16:1:64:M1380,N,N,N,N,N,N,N,N,N,N,N,N,N,N,N,N,N,N,E,E:PT"/>
  680. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="65535:32:1:64:M1380,N,N,N,N,N,N,N,N,N,N,N,N,N,N,N,N,N,N,E,E:PT"/>
  681. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="65535:60:1:64:M1380,N,N,N,N,N,N,N,N,N,N,N,N,N,N,N,N,N,N,E,E:PT"/>
  682. </tcp_tests>
  683. </fingerprint>
  684. <fingerprint name="Mac OS X 10.12.x" os_name="Mac OS X 10.12" os_class="Mac OS" os_vendor="Apple, Inc." os_url="http://www.apple.com/macosx" device_type="" device_vendor="" device_url="" comments="" author="xnih13@gmail.com" last_updated="2021-09-12">
  685. <tcp_tests>
  686. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="65535:16:1:64:M1460,N,W4,N,N,T,S,E,E:P"/>
  687. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="65535:32:1:48:M1460,S,E,E:PT"/>
  688. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="65535:32:1:64:M1460,N,W4,N,N,T,S,E,E:P"/>
  689. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="65535:60:1:48:M1460,S,E,E:PT"/>
  690. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="65535:60:1:64:M1460,N,W4,N,N,T,S,E,E:P"/>
  691. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="65535:64:1:64:M1460,N,W5,N,N,T,S,E,E:P"/>
  692. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="65535:64:1:48:M1460,S,E,E:PT"/>
  693. </tcp_tests>
  694. </fingerprint>
  695. <fingerprint name="Mac OS X 10.13.x" os_name="Mac OS X 10.13" os_class="Mac OS" os_vendor="Apple, Inc." os_url="http://www.apple.com/macosx" device_type="" device_vendor="" device_url="" comments="" author="xnih13@gmail.com" last_updated="2021-09-12">
  696. <tcp_tests>
  697. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="65535:64:1:64:M1380,N,W5,N,N,T,S,E,E:PZ"/>
  698. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="65535:64:1:64:M1460,N,W5,N,N,T,S,E,E:PZ"/>
  699. </tcp_tests>
  700. </fingerprint>
  701. <fingerprint name="Mac OS X 10.14.x" os_name="Mac OS X 10.14" os_class="Mac OS" os_vendor="Apple, Inc." os_url="http://www.apple.com/macosx" device_type="" device_vendor="" device_url="" comments="" author="xnih13@gmail.com" last_updated="2021-09-12">
  702. <tcp_tests>
  703. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="65535:64:1:64:M1380,N,W5,N,N,T,S,E,E:PZ"/>
  704. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="65535:64:1:64:M1460,N,W5,N,N,T,S,E,E:PZ"/>
  705. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="65535:64:1:64:M1460,N,W6,N,N,T,S,E,E:PZ"/>
  706. </tcp_tests>
  707. </fingerprint>
  708. <fingerprint name="Mac OS X 10.15.x" os_name="Mac OS X 10.15" os_class="Mac OS" os_vendor="Apple, Inc." os_url="http://www.apple.com/macosx" device_type="" device_vendor="" device_url="" comments="" author="xnih13@gmail.com" last_updated="2021-09-12">
  709. <tcp_tests>
  710. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="65535:64:1:64:M1460,N,W6,N,N,T,S,E,E:PZ"/>
  711. </tcp_tests>
  712. </fingerprint>
  713. <fingerprint name="Mac OS X 10.5" os_name="Mac OS X 10.5" os_class="Mac OS" os_vendor="Apple, Inc." os_url="http://www.apple.com/macosx" device_type="" device_vendor="" device_url="" comments="" author="xnih13@gmail.com" last_updated="2021-09-12">
  714. <tcp_tests>
  715. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="65535:64:1:64:M1460,N,W1,N,N,T,S,E:P"/>
  716. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="65535:64:1:64:M1460,N,W3,N,N,T,S,E:P"/>
  717. </tcp_tests>
  718. </fingerprint>
  719. <fingerprint name="Mac OS X 10.9.x" os_name="Mac OS X 10.9" os_class="Mac OS" os_vendor="Apple, Inc." os_url="http://www.apple.com/macosx" device_type="" device_vendor="" device_url="" comments="" author="xnih13@gmail.com" last_updated="2021-11-08">
  720. <tcp_tests>
  721. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="65535:16:1:64:M1460,N,W4,N,N,T,S,E,E:P"/>
  722. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="65535:32:1:48:M1460,S,E,E:PT"/>
  723. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="65535:32:1:64:M1460,N,W4,N,N,T,S,E,E:P"/>
  724. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="65535:60:1:64:M1460,N,W4,N,N,T,S,E,E:P"/>
  725. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="65535:64:1:48:M1460,S,E,E:PT"/>
  726. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="65535:60:1:48:M1460,S,E,E:PT"/>
  727. </tcp_tests>
  728. </fingerprint>
  729. <fingerprint name="Minolta Printer" os_name="" os_class="" os_vendor="" os_url="" device_type="Printer" device_vendor="Minolta" device_url="http://www.konicaminolta.com" comments="" author="Thierry@Zoller.lu" last_updated="2008-10-20">
  730. <tcp_tests>
  731. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="16384:64:1:48:M1460,N,W0:A"/>
  732. </tcp_tests>
  733. </fingerprint>
  734. <fingerprint name="Modicon 140-NOE-771-01" os_name="Modicon 140-NOE" os_class="ICS Device" os_vendor="Modicon Quantum" os_url="https://www.modiconplc.com/schneider/Quantum-140/communications/140-NOE-771-01" device_type="" device_vendor="" device_url="" comments="" author="netresec.com" last_updated="2018-11-12">
  735. <tcp_tests>
  736. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="8192:64:0:48:M1460,N,W0:."/>
  737. </tcp_tests>
  738. </fingerprint>
  739. <fingerprint name="MOXA EDS Switch" os_name="MOXA EDS" os_class="ICS device" os_vendor="MOXA" os_url="https://www.moxa.com/product/DIN_Rail_Ethernet_Switches.htm" device_type="" device_vendor="" device_url="" comments="" author="netresec.com" last_updated="2018-11-08">
  740. <tcp_tests>
  741. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="17376:64:1:60:M1460,N,W0,N,N,T:."/>
  742. </tcp_tests>
  743. </fingerprint>
  744. <fingerprint name="MOXA ioLogic Smart Ethernet I/O" os_name="MOXA ioLogic" os_class="ICS device" os_vendor="MOXA" os_url="https://www.moxa.com/product/Smart_Ethernet_IO.htm" device_type="" device_vendor="" device_url="" comments="" author="netresec.com" last_updated="2018-11-08">
  745. <tcp_tests>
  746. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="4096:60:0:44:M1460:."/>
  747. </tcp_tests>
  748. </fingerprint>
  749. <fingerprint name="MOXA NPort 5610" os_name="MOXA NPort 5610" os_class="ICS device" os_vendor="MOXA" os_url="https://www.moxa.com/product/NPort_5600.htm" device_type="" device_vendor="" device_url="" comments="" author="netresec.com" last_updated="2018-11-12">
  750. <tcp_tests>
  751. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="4096:60:0:44:M1460:."/>
  752. </tcp_tests>
  753. </fingerprint>
  754. <fingerprint name="NETGEAR FVS114" os_name="" os_class="" os_vendor="" os_url="" device_type="Router" device_vendor="NETGEAR" device_url="http://www.netgear.com" comments="" author="xnih13@gmail.com" last_updated="2008-10-20">
  755. <tcp_tests>
  756. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="3072:64:0:44:M1240:A"/>
  757. </tcp_tests>
  758. </fingerprint>
  759. <fingerprint name="NETGEAR WGR614v6" os_name="" os_class="" os_vendor="" os_url="" device_type="Router" device_vendor="NETGEAR" device_url="http://www.netgear.com" comments="" author="xnih13@gmail.com" last_updated="2010-02-08">
  760. <tcp_tests>
  761. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="8192:64:0:44:M1460:A"/>
  762. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="8192:64:0:60:M1460,N,W0,N,N,T:."/>
  763. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="8192:64:0:60:M1460,N,W0,N,N,T:AT"/>
  764. </tcp_tests>
  765. </fingerprint>
  766. <fingerprint name="NETGEAR WNR3500L" os_name="" os_class="" os_vendor="" os_url="" device_type="Wireless Access Point" device_vendor="NETGEAR" device_url="http://www.netgear.com/products/service-providers/routers-and-gateways/gigabit-ethernet-routers-gateways/WNR3500L.aspx" comments="" author="xnih13@gmail.com" last_updated="2014-06-24">
  767. <tcp_tests>
  768. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="5840:64:1:48:M1460,N,N,S:ZA"/>
  769. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="5840:64:1:52:M1460,N,N,S,N,W6:ZA"/>
  770. </tcp_tests>
  771. </fingerprint>
  772. <fingerprint name="NetWare" os_name="NetWare" os_class="NetWare" os_vendor="Novell" os_url="http://www.novell.com" device_type="" device_vendor="" device_url="" comments="" author="xnih13@gmail.com" last_updated="2008-10-20">
  773. <tcp_tests>
  774. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="6144:128:1:48:M1460,S,N,N:A"/>
  775. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="6143:128:1:48:M1460,S,N,N:A"/>
  776. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="1260:128:1:48:M1260,S,N,N:A"/>
  777. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="6143:128:1:48:M1460,W0,N:A"/>
  778. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="6143:128:1:44:M1460:A"/>
  779. <test weight="5" matchtype="partial" tcpflag="S" tcpsig="6144:128:1:52:M1460,W*,N,S,N,N:."/>
  780. <test weight="5" matchtype="partial" tcpflag="S" tcpsig="6143:128:1:52:M1460,W*,N,S,N,N:."/>
  781. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="6144:128:1:48:M1460,W0,N:."/>
  782. </tcp_tests>
  783. </fingerprint>
  784. <fingerprint name="NetWare 6.5" os_name="NetWare 6.5" os_class="NetWare" os_vendor="Novell" os_url="http://www.novell.com" device_type="" device_vendor="" device_url="" comments="" author="xnih13@gmail.com" last_updated="2008-10-20">
  785. <tcp_tests>
  786. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="6144:128:1:48:M1460,S,N,N:A"/>
  787. </tcp_tests>
  788. </fingerprint>
  789. <fingerprint name="NSX 6.3 Manager" os_name="NSX 6.5" os_class="Linux" os_vendor="VMware, Inc." os_url="http://www.vmware.com" device_type="" device_vendor="" device_url="" comments="may just be generic linux fingerprint, not esx, need more tests, build6.3.3-6276725" author="xnih13@gmail.com" last_updated="2018-11-08">
  790. <tcp_tests>
  791. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="29200:64:1:52:M1380,N,N,S,N,W7:T"/>
  792. </tcp_tests>
  793. </fingerprint>
  794. <fingerprint name="OpenBSD 2.6-2.9" os_name="OpenBSD 2" os_class="OpenBSD" os_vendor="OpenBSD" os_url="http://www.openbsd.org" device_type="" device_vendor="" device_url="" comments="" author="xnih13@gmail.com" last_updated="2021-09-12">
  795. <tcp_tests>
  796. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="17520:64:0:44:M1460:A"/>
  797. <test weight="5" matchtype="partial" tcpflag="SA" tcpsig="17376:64:*:64:M1460,N,N,S,N,W0,N,N,T:AT"/>
  798. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="17232:64:0:48:M1460,N,N,S:A"/>
  799. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="16445:64:0:60:M1460,N,W0,N,N,T:AT"/>
  800. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="16384:64:0:44:M1460:A"/>
  801. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="17520:64:0:64:M1460,N,N,S,N,W0,N,N,T:."/>
  802. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="17376:64:0:64:M1448,N,N,S,N,W0,N,N,T:."/>
  803. <test weight="5" matchtype="partial" tcpflag="S" tcpsig="16384:64:*:64:M1460,N,N,S,N,W0,N,N,T:."/>
  804. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="16384:64:0:64:M512,N,N,S,N,W0,N,N,T:."/>
  805. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="4096:60:0:60:W10,N,M265,T,E:P"/>
  806. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="3072:60:0:60:W10,N,M265,T,E:P"/>
  807. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="2048:60:0:60:W10,N,M265,T,E:P"/>
  808. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="1024:60:0:60:W10,N,M265,T,E:P"/>
  809. </tcp_tests>
  810. </fingerprint>
  811. <fingerprint name="OpenBSD 3.8" os_name="OpenBSD 3.8" os_class="OpenBSD" os_vendor="OpenBSD" os_url="http://www.openbsd.org" device_type="" device_vendor="" device_url="" comments="" author="xnih13@gmail.com" last_updated="2009-03-03">
  812. <tcp_tests>
  813. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="16384:64:1:48:M1460,N,N,S:A"/>
  814. </tcp_tests>
  815. </fingerprint>
  816. <fingerprint name="OpenBSD 4.x" os_name="OpenBSD 4.x" os_class="OpenBSD" os_vendor="OpenBSD" os_url="http://www.openbsd.org" device_type="" device_vendor="" device_url="" comments="" author="xnih13@gmail.com" last_updated="2009-09-20">
  817. <tcp_tests>
  818. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="16384:64:1:64:M1460,N,N,S,N,W0,N,N,T:."/>
  819. </tcp_tests>
  820. </fingerprint>
  821. <fingerprint name="PC-BSD 1.2-1.5" os_name="FreeBSD 6.1-6.3" os_class="FreeBSD" os_vendor="PC-BSD" os_url="http://www.pcbsd.org" device_type="" device_vendor="" device_url="" comments="" author="xnih13@gmail.com" last_updated="2021-09-12">
  822. <tcp_tests>
  823. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="65535:64:1:48:M1460,S,E:PA"/>
  824. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="65535:64:1:64:M1460,N,W1,N,N,T,S,E:P"/>
  825. </tcp_tests>
  826. </fingerprint>
  827. <fingerprint name="PC-BSD 7.x" os_name="FreeBSD 7" os_class="Unix" os_vendor="PC-BSD" os_url="http://www.pcbsd.org" device_type="" device_vendor="" device_url="" comments="" author="xnih13@gmail.com" last_updated="2021-09-12">
  828. <tcp_tests>
  829. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="49152:64:1:60:M1460,N,W3,S,T:."/>
  830. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="65535:64:1:60:M1460,N,W3,S,T:."/>
  831. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="65535:64:1:48:M1260,S,E:PA"/>
  832. </tcp_tests>
  833. </fingerprint>
  834. <fingerprint name="PCLinuxOS" os_name="PCLinuxOS" os_class="Linux" os_vendor="PCLinux" os_url="http://www.pclinuxos.com" device_type="" device_vendor="" device_url="" comments="S from 2007" author="xnih13@gmail.com" last_updated="2008-10-20">
  835. <tcp_tests>
  836. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="5840:64:1:48:M1460,N,N,S:ZA"/>
  837. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="5840:64:1:56:M1460,S,T:."/>
  838. </tcp_tests>
  839. </fingerprint>
  840. <fingerprint name="Perle iolan sds2" os_name="" os_class="" os_vendor="" os_url="" device_type="Serial to Ethernet" device_vendor="Perle" device_url="" comments="" author="xnih13@gmail.com" last_updated="2020-05-27">
  841. <tcp_tests>
  842. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="5792:64:1:60:M1460,S,T,N,W1:ZAT"/>
  843. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="5840:64:1:44:M1460:ZA"/>
  844. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="5840:64:1:52:M1460,N,N,S,N,W1:ZA"/>
  845. </tcp_tests>
  846. </fingerprint>
  847. <fingerprint name="Phoenix Contact Bus Coupler" os_name="Phoenix Contact Bus Coupler" os_class="ICS device" os_vendor="Phoenix Contact" os_url="https://www.phoenixcontact.com/" device_type="" device_vendor="" device_url="" comments="" author="netresec.com" last_updated="2018-11-06">
  848. <tcp_tests>
  849. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="4096:64:0:40::."/>
  850. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="1024:64:0:40::."/>
  851. </tcp_tests>
  852. </fingerprint>
  853. <fingerprint name="Phoenix Contact FL SWITCH 3008" os_name="Phoenix Contact FL SWITCH 3008" os_class="ICS device" os_vendor="Phoenix Contact" os_url="https://www.phoenixcontact.com/" device_type="" device_vendor="" device_url="" comments="" author="netresec.com" last_updated="2018-11-06">
  854. <tcp_tests>
  855. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="5840:64:1:52:M1460,N,N,S,N,W0:."/>
  856. </tcp_tests>
  857. </fingerprint>
  858. <fingerprint name="Phoenix Contact ILC 150 ETH PLC" os_name="Phoenix Contact ILC 150 ETH PLC" os_class="Phoenix Contact PLC" os_vendor="Phoenix Contact" os_url="https://www.phoenixcontact.com/" device_type="" device_vendor="" device_url="" comments="" author="netresec.com" last_updated="2018-11-06">
  859. <tcp_tests>
  860. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="32768:128:1:48:M1460,N,N,S:."/>
  861. </tcp_tests>
  862. </fingerprint>
  863. <fingerprint name="Red Hat Enterprise Linux 3.0" os_name="Red Hat Enterprise Linux 3.0" os_class="Linux" os_vendor="Red Hat" os_url="http://www.redhat.com" device_type="" device_vendor="" device_url="" comments="" author="xnih13@gmail.com" last_updated="2009-02-08">
  864. <tcp_tests>
  865. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="5840:64:1:48:M1460,N,N,S:A"/>
  866. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="5840:64:1:60:M1460,S,T,N,W0:."/>
  867. </tcp_tests>
  868. </fingerprint>
  869. <fingerprint name="Redhat 5" os_name="Redhat 5" os_class="Linux" os_vendor="Red Hat" os_url="http://www.redhat.com" device_type="" device_vendor="" device_url="" comments="" author="xnih13@gmail.com" last_updated="2011-04-01">
  870. <tcp_tests>
  871. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="5840:64:1:52:M1380,N,N,S,N,W7:ZA"/>
  872. </tcp_tests>
  873. </fingerprint>
  874. <fingerprint name="Redhat 6.10" os_name="Redhat 6.10" os_class="Linux" os_vendor="Red Hat" os_url="http://www.redhat.com" device_type="" device_vendor="" device_url="" comments="" author="xnih13@gmail.com" last_updated="2021-09-12">
  875. <tcp_tests>
  876. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="4140:255:1:60:M1460,N,N,T,S,E,E:PAT"/>
  877. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="14600:64:1:52:M1380,N,N,S,N,W7:ZA"/>
  878. </tcp_tests>
  879. </fingerprint>
  880. <fingerprint name="Redhat 7.5" os_name="Redhat 7.5" os_class="Linux" os_vendor="Red Hat" os_url="http://www.redhat.com" device_type="" device_vendor="" device_url="" comments="kernel 3.10.0-862.3.3.el17.x86_64" author="xnih13@gmail.com" last_updated="2018-11-03">
  881. <tcp_tests>
  882. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="29200:64:1:60:M1460,S,T,N,W7:."/>
  883. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="28960:64:1:60:M1460,S,T,N,W7:ZAT"/>
  884. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="28960:64:1:60:M1380,S,T,N,W7:ZAT"/>
  885. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="29200:64:1:60:M1380,S,T,N,W7:."/>
  886. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="29200:64:1:52:M1380,N,N,S,N,W7:ZA"/>
  887. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="29200:64:1:52:M1460,N,N,S,N,W7:ZA"/>
  888. </tcp_tests>
  889. </fingerprint>
  890. <fingerprint name="Redhat 7.6" os_name="Redhat 7.6" os_class="Linux" os_vendor="Red Hat" os_url="http://www.redhat.com" device_type="" device_vendor="" device_url="" comments="" author="xnih13@gmail.com" last_updated="2019-02-15">
  891. <tcp_tests>
  892. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="14600:64:1:52:M1380,N,N,S,N,W7:ZA"/>
  893. </tcp_tests>
  894. </fingerprint>
  895. <fingerprint name="Redhat 7.7" os_name="Redhat 7.7" os_class="Linux" os_vendor="Red Hat" os_url="http://www.redhat.com" device_type="" device_vendor="" device_url="" comments="" author="xnih13@gmail.com" last_updated="2020-04-24">
  896. <tcp_tests>
  897. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="29200:64:1:60:M1380,S,T,N,W7:."/>
  898. </tcp_tests>
  899. </fingerprint>
  900. <fingerprint name="RedLion DSP" os_name="RedLion DSP" os_class="ICS device" os_vendor="Red Lion Controls" os_url="http://www.redlion.net/products/industrial-networking/communication-converters/protocol-converters/data-station-plus" device_type="" device_vendor="" device_url="" comments="" author="netresec.com" last_updated="2018-11-06">
  901. <tcp_tests>
  902. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="1460:128:0:44:M1280:."/>
  903. </tcp_tests>
  904. </fingerprint>
  905. <fingerprint name="Ricoh Printer" os_name="" os_class="" os_vendor="" os_url="" device_type="Printer" device_vendor="Ricoh Co., Ltd." device_url="http://www.ricoh.com" comments="" author="xnih13@gmail.com" last_updated="2009-02-16">
  906. <tcp_tests>
  907. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="16384:255:0:48:M1460,N,W0:A"/>
  908. </tcp_tests>
  909. </fingerprint>
  910. <fingerprint name="Roku 3" os_name="" os_class="" os_vendor="" os_url="" device_type="" device_vendor="Roku" device_url="http://www.roku.com/" comments="" author="xnih13@gmail.com" last_updated="2013-05-27">
  911. <tcp_tests>
  912. <test weight="5" matchtype="exact" tcpflag="A" tcpsig="468:64:1:52:N,N,T:."/>
  913. </tcp_tests>
  914. </fingerprint>
  915. <fingerprint name="Roku 3930x" os_name="" os_class="" os_vendor="" os_url="" device_type="" device_vendor="Roku" device_url="http://www.roku.com/" comments="" author="xnih13@gmail.com" last_updated="2020-12-24">
  916. <tcp_tests>
  917. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="64240:64:1:60:M1460,S,T,N,W5:."/>
  918. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="42340:64:1:60:M1460,S,T,N,W7:."/>
  919. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="25344:64:1:60:M576,S,T,N,W7:."/>
  920. </tcp_tests>
  921. </fingerprint>
  922. <fingerprint name="Roku DVP 9" os_name="" os_class="" os_vendor="" os_url="" device_type="" device_vendor="Roku" device_url="http://www.roku.com/" comments="" author="xnih13@gmail.com" last_updated="2020-05-27">
  923. <tcp_tests>
  924. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="14600:64:1:60:M1460,S,T,N,W7:."/>
  925. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="29200:64:1:60:M1460,S,T,N,W4:."/>
  926. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="32120:64:1:60:M1460,S,T,N,W0:."/>
  927. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="42340:64:1:60:M1460,S,T,N,W7:."/>
  928. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="5840:64:1:60:M1460,S,T,N,W7:."/>
  929. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="64240:64:1:60:M1460,S,T,N,W0:."/>
  930. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="64240:64:1:60:M1460,S,T,N,W1:."/>
  931. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="64240:64:1:60:M1460,S,T,N,W2:."/>
  932. </tcp_tests>
  933. </fingerprint>
  934. <fingerprint name="Samsung SmartTV" os_name="VDLinux 2.6" os_class="Linux" os_vendor="Samsung" os_url="http://developer.samsung.com/devices/tv-specs" device_type="SmartTV" device_vendor="Samsung" device_url="http://developer.samsung.com/devices/tv-specs" comments="" author="xnih13@gmail.com" last_updated="2014-06-23">
  935. <tcp_tests>
  936. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="14600:64:1:52:M1460,N,N,S,N,W7:ZA"/>
  937. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="14600:64:1:60:M1460,S,T,N,W7:."/>
  938. </tcp_tests>
  939. </fingerprint>
  940. <fingerprint name="Siemens RUGGEDCOM RS910" os_name="Siemens RUGGEDCOM RS910" os_class="ICS device" os_vendor="Phoenix Contact" os_url="https://www.phoenixcontact.com/" device_type="" device_vendor="" device_url="" comments="" author="netresec.com" last_updated="2018-11-06">
  941. <tcp_tests>
  942. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="4380:60:0:40::."/>
  943. </tcp_tests>
  944. </fingerprint>
  945. <fingerprint name="Siemens SIMATIC S7-1200" os_name="Siemens SIMATIC S7" os_class="Siemens PLC" os_vendor="Siemens" os_url="https://www.siemens.com/global/en/home/products/automation/systems/industrial/plc.html" device_type="" device_vendor="" device_url="" comments="" author="netresec.com" last_updated="2018-11-07">
  946. <tcp_tests>
  947. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="4096:30:0:44:M1460:."/>
  948. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="8192:30:0:44:M1460:."/>
  949. </tcp_tests>
  950. </fingerprint>
  951. <fingerprint name="Sipura SPA 941" os_name="" os_class="" os_vendor="" os_url="" device_type="VoIP Phone" device_vendor="Sipura Technology" device_url="http://www.sipura.net" comments="VoIP Phones/Adapters" author="xnih13@gmail.com" last_updated="2009-10-14">
  952. <tcp_tests>
  953. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="16000:255:0:44:M1456:A"/>
  954. </tcp_tests>
  955. </fingerprint>
  956. <fingerprint name="Solaris" os_name="Solaris" os_class="Unix" os_vendor="Sun Microsystems, Inc." os_url="http://www.sun.com/software/solaris" device_type="" device_vendor="" device_url="" comments="" author="xnih13@gmail.com" last_updated="2008-10-20">
  957. <tcp_tests>
  958. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="9660:255:1:48:N,N,S,M1380:A"/>
  959. </tcp_tests>
  960. </fingerprint>
  961. <fingerprint name="Solstice" os_name="Solstice" os_class="Screen Sharing" os_vendor="Mersive" os_url="https://www.mersive.com/" device_type="" device_vendor="" device_url="" comments="" author="xnih13@gmail.com" last_updated="2018-11-10">
  962. <tcp_tests>
  963. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="65535:64:1:60:M1380,S,T,N,W6:."/>
  964. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="65535:64:1:60:M1460,S,T,N,W6:."/>
  965. </tcp_tests>
  966. </fingerprint>
  967. <fingerprint name="SunOS 5.6" os_name="Sun 5.6" os_class="Unix" os_vendor="Sun Microsystems, Inc." os_url="http://www.sun.com" device_type="" device_vendor="" device_url="" comments="" author="xnih13@gmail.com" last_updated="2009-02-15">
  968. <tcp_tests>
  969. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="24820:64:1:48:N,N,S,M1460:."/>
  970. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="8760:255:1:44:M1460:."/>
  971. </tcp_tests>
  972. </fingerprint>
  973. <fingerprint name="SunRocket Gizmo" os_name="" os_class="" os_vendor="" os_url="" device_type="VoIP Gateway" device_vendor="InnoMedia, Inc." device_url="http://www.innomedia.com" comments="MTA 6328-2Re" author="xnih13@gmail.com" last_updated="2008-10-20">
  974. <tcp_tests>
  975. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="16000:64:0:44:M1452:A"/>
  976. </tcp_tests>
  977. </fingerprint>
  978. <fingerprint name="Tizen Linux" os_name="Tizen" os_class="Linux" os_vendor="" os_url="" device_type="" device_vendor="" device_url="" comments="" author="xnih13@gmail.com" last_updated="2020-12-16">
  979. <tcp_tests>
  980. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="29200:64:1:60:M1460,S,T,N,W7:."/>
  981. </tcp_tests>
  982. </fingerprint>
  983. <fingerprint name="Ubuntu 18.x" os_name="Linux 4.5" os_class="Linux" os_vendor="Ubuntu" os_url="http://ubuntu.com" device_type="" device_vendor="" device_url="" comments="Ubuntu 18.04" author="xnih13@gmail.com" last_updated="2018-10-14">
  984. <tcp_tests>
  985. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="29200:64:1:60:M1460,S,T,N,W7:."/>
  986. </tcp_tests>
  987. </fingerprint>
  988. <fingerprint name="Ubuntu 20.x" os_name="Linux 5.4" os_class="Linux" os_vendor="Ubuntu" os_url="http://ubuntu.com" device_type="" device_vendor="" device_url="" comments="" author="xnih13@gmail.com" last_updated="2020-05-21">
  989. <tcp_tests>
  990. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="64240:64:1:60:M1460,S,T,N,W7:."/>
  991. </tcp_tests>
  992. </fingerprint>
  993. <fingerprint name="Westermo MRD-355" os_name="Westermo MRD-355" os_class="ICS device" os_vendor="Westermo" os_url="https://www.westermo.com/products/routers/wireless-routers/mrd-355" device_type="" device_vendor="" device_url="" comments="" author="netresec.com" last_updated="2021-09-12">
  994. <tcp_tests>
  995. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="8000:64:0:48:M1400,W0,E:P"/>
  996. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="5840:64:1:52:M1420,N,N,S,N,W2:."/>
  997. </tcp_tests>
  998. </fingerprint>
  999. <fingerprint name="Wii" os_name="" os_class="" os_vendor="" os_url="" device_type="Game Console" device_vendor="Nintendo Co., Ltd." device_url="http://www.nintendo.com/wii" comments="" author="xnih13@gmail.com" last_updated="2010-07-11">
  1000. <tcp_tests>
  1001. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="8192:64:1:48:M1460,N,N,S:."/>
  1002. </tcp_tests>
  1003. </fingerprint>
  1004. <fingerprint name="Windows 10" os_name="Windows 10" os_class="Windows" os_vendor="Microsoft Corp." os_url="https://www.microsoft.com/en-us/windows/get-windows-10" device_type="" device_vendor="" device_url="" comments="" author="xnih13@gmail.com" last_updated="2019-02-15">
  1005. <tcp_tests>
  1006. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="64240:128:1:48:M1460,N,N,S:T"/>
  1007. </tcp_tests>
  1008. </fingerprint>
  1009. <fingerprint name="Windows 10 - 1607" os_name="Windows 10" os_class="Windows" os_vendor="Microsoft Corp." os_url="https://www.microsoft.com/en-us/windows/get-windows-10" device_type="" device_vendor="" device_url="" comments="14393 build" author="xnih13@gmail.com" last_updated="2021-09-12">
  1010. <tcp_tests>
  1011. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="8192:128:1:52:M1380,N,W8,N,N,S:T"/>
  1012. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="8192:128:1:52:M1460,N,W8,N,N,S:T"/>
  1013. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="8192:128:1:48:M1460,N,N,S:T"/>
  1014. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="65535:128:1:52:M1380,N,W3,N,N,S:T"/>
  1015. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="65535:128:1:52:M1460,N,W3,N,N,S:T"/>
  1016. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="8192:128:1:60:M1460,N,W2,S,T:."/>
  1017. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="8192:128:1:52:M1460,N,W8,N,N,S:ZT"/>
  1018. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="8192:16:1:52:M1460,N,W8,N,N,S:T"/>
  1019. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="8192:16:1:48:M1380,N,N,S:T"/>
  1020. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="8192:32:1:48:M1460,N,N,S:T"/>
  1021. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="8192:32:1:52:M1460,N,W8,N,N,S:T"/>
  1022. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="8192:60:1:48:M1460,N,N,S:T"/>
  1023. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="8192:60:1:52:M1460,N,W8,N,N,S:T"/>
  1024. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="8192:64:1:48:M1460,N,N,S:T"/>
  1025. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="8192:64:1:52:M1460,N,W2,N,N,S:T"/>
  1026. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="29200:64:1:60:M1460,S,T,N,W7:."/>
  1027. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="65535:128:1:48:M1460,N,N,S:T"/>
  1028. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="8192:128:1:48:M1460,N,N,S:ZT"/>
  1029. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="65535:64:1:64:M1460,N,W6,N,N,T,S,E,E:PZ"/>
  1030. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="65535:128:1:48:M1380,N,N,S:A"/>
  1031. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="8192:128:1:60:M1460,N,W8,N,N,T:AT"/>
  1032. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="8192:128:1:56:M1460,N,N,T:AT"/>
  1033. </tcp_tests>
  1034. </fingerprint>
  1035. <fingerprint name="Windows 10 - 1703" os_name="Windows 10" os_class="Windows" os_vendor="Microsoft Corp." os_url="https://www.microsoft.com/en-us/windows/get-windows-10" device_type="" device_vendor="" device_url="" comments="16063 build" author="xnih13@gmail.com" last_updated="2020-05-15">
  1036. <tcp_tests>
  1037. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="65535:128:1:52:M1460,N,W8,N,N,S:T"/>
  1038. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="65535:128:1:52:M1380,N,W8,N,N,S:T"/>
  1039. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="64240:128:1:52:M1460,N,W8,N,N,S:T"/>
  1040. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="64240:128:1:52:M1380,N,W8,N,N,S:T"/>
  1041. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="8192:128:1:44:M1460:A"/>
  1042. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="65535:128:1:52:M1460,N,W8,N,N,S:A"/>
  1043. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="65535:128:1:48:M1460,N,W8:A"/>
  1044. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="65392:128:0:48:M1460,N,N,S:A"/>
  1045. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="64240:128:1:44:M1460:A"/>
  1046. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="64202:128:1:52:M1366,N,W8,N,N,S:T"/>
  1047. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="29200:64:1:60:M1460,S,T,N,W7:."/>
  1048. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="64240:128:1:60:M1460,N,W8,S,T:."/>
  1049. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="65535:128:1:52:M1460,N,W3,N,N,S:T"/>
  1050. </tcp_tests>
  1051. </fingerprint>
  1052. <fingerprint name="Windows 10 - 1709" os_name="Windows 10" os_class="Windows" os_vendor="Microsoft Corp." os_url="https://www.microsoft.com/en-us/windows/get-windows-10" device_type="" device_vendor="" device_url="" comments="16299 build" author="xnih13@gmail.com" last_updated="2020-05-26">
  1053. <tcp_tests>
  1054. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="64240:128:1:52:M1460,N,W8,N,N,S:T"/>
  1055. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="65535:128:1:52:M1460,N,W8,N,N,S:A"/>
  1056. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="29200:64:1:60:M1460,S,T,N,W7:."/>
  1057. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="64240:128:1:60:M1460,N,W8,S,T:."/>
  1058. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="65535:128:1:52:M1460,N,W8,N,N,S:T"/>
  1059. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="64202:128:1:52:M1366,N,W8,N,N,S:T"/>
  1060. </tcp_tests>
  1061. </fingerprint>
  1062. <fingerprint name="Windows 10 - 1803" os_name="Windows 10" os_class="Windows" os_vendor="Microsoft Corp." os_url="https://www.microsoft.com/en-us/windows/get-windows-10" device_type="" device_vendor="" device_url="" comments="17134 build" author="xnih13@gmail.com" last_updated="2021-11-08">
  1063. <tcp_tests>
  1064. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="64240:128:1:52:M1460,N,W8,N,N,S:T"/>
  1065. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="29200:64:1:60:M1460,S,T,N,W7:."/>
  1066. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="64240:128:1:60:M1460,N,W8,S,T:."/>
  1067. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="64240:64:1:52:M1460,N,W8,N,N,S:T"/>
  1068. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="65535:128:1:52:M1460,N,W8,N,N,S:T"/>
  1069. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="64240:128:1:52:M1380,N,W8,N,N,S:T"/>
  1070. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="64202:128:1:52:M1366,N,W8,N,N,S:T"/>
  1071. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="17520:128:1:52:M1460,N,W8,N,N,S:T"/>
  1072. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="64240:128:1:52:M1460,N,W8,N,N,S:ZT"/>
  1073. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="8192:128:1:52:M1460,N,W8,N,N,S:T"/>
  1074. </tcp_tests>
  1075. </fingerprint>
  1076. <fingerprint name="Windows 10 - 1809" os_name="Windows 10" os_class="Windows" os_vendor="Microsoft Corp." os_url="https://www.microsoft.com/en-us/windows/get-windows-10" device_type="" device_vendor="" device_url="" comments="17763 build" author="xnih13@gmail.com" last_updated="2021-09-12">
  1077. <tcp_tests>
  1078. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="64240:128:1:52:M1460,N,W8,N,N,S:T"/>
  1079. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="64240:64:1:60:M1460,S,T,N,W7:."/>
  1080. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="64240:128:1:52:M1460,N,W8,N,N,S:ZT"/>
  1081. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="65535:64:1:64:M1460,N,W6,N,N,T,S,E,E:PZ"/>
  1082. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="64240:60:1:52:M1460,N,W8,N,N,S:T"/>
  1083. </tcp_tests>
  1084. </fingerprint>
  1085. <fingerprint name="Windows 10 - 1903" os_name="Windows 10" os_class="Windows" os_vendor="Microsoft Corp." os_url="https://www.microsoft.com/en-us/windows/get-windows-10" device_type="" device_vendor="" device_url="" comments="18362 build" author="xnih13@gmail.com" last_updated="2020-05-26">
  1086. <tcp_tests>
  1087. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="64240:128:1:52:M1460,N,W8,N,N,S:T"/>
  1088. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="64240:128:1:60:M1460,N,W8,S,T:."/>
  1089. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="64766:128:1:52:M1378,N,W8,N,N,S:T"/>
  1090. </tcp_tests>
  1091. </fingerprint>
  1092. <fingerprint name="Windows 10 - 1909" os_name="Windows 10" os_class="Windows" os_vendor="Microsoft Corp." os_url="https://www.microsoft.com/en-us/windows/get-windows-10" device_type="" device_vendor="" device_url="" comments="18363 build" author="xnih13@gmail.com" last_updated="2020-12-24">
  1093. <tcp_tests>
  1094. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="64202:128:1:52:M1366,N,W8,N,N,S:T"/>
  1095. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="64240:128:1:52:M1460,N,W8,N,N,S:T"/>
  1096. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="64240:128:1:60:M1460,N,W8,S,T:."/>
  1097. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="64240:64:1:52:M1460,N,W8,N,N,S:T"/>
  1098. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="64240:128:1:48:M1460,N,N,S:T"/>
  1099. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="64766:128:1:52:M1378,N,W8,N,N,S:T"/>
  1100. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="64240:128:1:52:M1360,N,W8,N,N,S:T"/>
  1101. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="64480:128:1:52:M1240,N,W8,N,N,S:T"/>
  1102. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="64240:128:1:52:M1460,N,W8,N,N,S:ZT"/>
  1103. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="65535:128:1:52:M1240,N,W8,N,N,S:T"/>
  1104. </tcp_tests>
  1105. </fingerprint>
  1106. <fingerprint name="Windows 10 - 2004" os_name="Windows 10" os_class="Windows" os_vendor="Microsoft Corp." os_url="https://www.microsoft.com/en-us/windows/get-windows-10" device_type="" device_vendor="" device_url="" comments="19041 build" author="xnih13@gmail.com" last_updated="2020-05-26">
  1107. <tcp_tests/>
  1108. </fingerprint>
  1109. <fingerprint name="Windows 2000" os_name="Windows 2000" os_class="Windows" os_vendor="Microsoft Corp." os_url="http://www.microsoft.com" device_type="" device_vendor="" device_url="" comments="" author="xnih13@gmail.com" last_updated="2008-10-20">
  1110. <tcp_tests>
  1111. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="65535:128:1:44:M1460:A"/>
  1112. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="64240:128:1:48:M1460,N,N,S:A"/>
  1113. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="17640:128:1:48:M1460,N,N,S:A"/>
  1114. <test weight="5" matchtype="partial" tcpflag="SA" tcpsig="17520:128:*:48:M1460,N,N,S:A"/>
  1115. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="17520:128:1:64:M1460,N,W0,N,N,T0,N,N,S:AT"/>
  1116. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="17520:128:1:44:M1460:A"/>
  1117. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="65535:128:1:48:M1460,N,N,S:."/>
  1118. <test weight="5" matchtype="partial" tcpflag="S" tcpsig="64240:128:*:48:M1460,N,N,S:."/>
  1119. <test weight="5" matchtype="partial" tcpflag="S" tcpsig="16384:128:*:48:M1460,N,N,S:."/>
  1120. </tcp_tests>
  1121. </fingerprint>
  1122. <fingerprint name="Windows 7" os_name="Windows 7" os_class="Windows" os_vendor="Microsoft Corp." os_url="http://www.microsoft.com/windows/windows-7/default.aspx" device_type="" device_vendor="" device_url="" comments="" author="xnih13@gmail.com" last_updated="2019-02-14">
  1123. <tcp_tests>
  1124. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="8192:128:1:52:M1460,N,W8,N,N,S:."/>
  1125. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="8192:128:1:52:M1460,N,W2,N,N,S:."/>
  1126. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="8192:128:1:48:M1460,N,N,S:."/>
  1127. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="8192:128:1:52:M1460,N,W2,N,N,S:Z"/>
  1128. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="8192:128:1:52:M1460,N,W8,N,N,S:A"/>
  1129. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="8192:128:1:48:M1460,N,N,S:A"/>
  1130. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="8192:128:1:48:M1460,N,N,S:Z"/>
  1131. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="65535:128:1:52:M1460,N,W1,N,N,S:."/>
  1132. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="65535:128:1:48:M1460,N,N,S:."/>
  1133. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="65535:128:1:52:M1460,N,W1,N,N,S:A"/>
  1134. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="8192:128:1:52:M1464,N,W8,N,N,S:A"/>
  1135. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="8192:128:1:52:M1464,N,W2,N,N,S:."/>
  1136. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="65535:128:1:52:M1460,N,W2,N,N,S:."/>
  1137. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="32768:128:1:52:M1460,N,W0,N,N,S:."/>
  1138. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="8192:128:1:60:M1460,N,W8,S,T:AT"/>
  1139. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="32768:128:1:52:M1460,N,W2,N,N,S:."/>
  1140. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="65535:128:1:52:M1460,N,W3,N,N,S:."/>
  1141. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="8192:128:1:52:M1460,N,W8,N,N,S:T"/>
  1142. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="8192:128:1:60:M1460,N,W2,S,T:."/>
  1143. </tcp_tests>
  1144. </fingerprint>
  1145. <fingerprint name="Windows 7 SP1" os_name="Windows 7" os_class="Windows" os_vendor="Microsoft Corp." os_url="http://www.microsoft.com/windows/windows-7/default.aspx" device_type="" device_vendor="" device_url="" comments="" author="xnih13@gmail.com" last_updated="2021-11-08">
  1146. <tcp_tests>
  1147. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="8192:128:1:52:M1380,N,W2,N,N,S:T"/>
  1148. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="8192:128:1:52:M1460,N,W2,N,N,S:T"/>
  1149. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="8192:128:1:52:M1460,N,W8,N,N,S:ZT"/>
  1150. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="64240:128:1:52:M1460,N,W8,N,N,S:T"/>
  1151. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="8192:128:1:48:M1460,N,N,S:T"/>
  1152. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="8192:128:1:52:M1460,N,W8,N,N,S:T"/>
  1153. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="8192:16:1:48:M1380,N,N,S:T"/>
  1154. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="8192:16:1:52:M1460,N,W8,N,N,S:T"/>
  1155. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="8192:128:1:52:M1432,N,W8,N,N,S:T"/>
  1156. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="8192:16:1:52:M1460,N,W2,N,N,S:T"/>
  1157. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="8192:64:1:52:M1460,N,W8,N,N,S:T"/>
  1158. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="64202:128:1:52:M1366,N,W8,N,N,S:T"/>
  1159. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="65535:128:1:48:M1460,N,N,S:T"/>
  1160. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="8192:128:1:60:M1460,N,W8,S,T:."/>
  1161. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="8192:128:1:56:M1460,S,T:."/>
  1162. </tcp_tests>
  1163. </fingerprint>
  1164. <fingerprint name="Windows 8" os_name="Windows 8" os_class="Windows" os_vendor="Microsoft Corp." os_url="http://www.microsoft.com/windows/windows-7/default.aspx" device_type="" device_vendor="" device_url="" comments="" author="xnih13@gmail.com" last_updated="2014-07-06">
  1165. <tcp_tests>
  1166. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="8192:128:1:52:M1380,N,W2,N,N,S:."/>
  1167. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="8192:128:1:52:M1460,N,W2,N,N,S:."/>
  1168. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="8192:128:1:52:M1460,N,W8,N,N,S:."/>
  1169. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="8192:128:1:48:M1460,N,N,S:."/>
  1170. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="8192:128:1:52:M1460,N,W8,N,N,S:A"/>
  1171. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="8192:128:1:52:M1460,N,W2,N,N,S:Z"/>
  1172. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="65535:128:1:52:M1460,N,W8,N,N,S:."/>
  1173. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="32768:128:1:52:M1460,N,W0,N,N,S:."/>
  1174. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="8192:128:1:52:M1460,N,W8,N,N,S:Z"/>
  1175. </tcp_tests>
  1176. </fingerprint>
  1177. <fingerprint name="Windows 8.1" os_name="Windows 8" os_class="Windows" os_vendor="Microsoft Corp." os_url="http://www.microsoft.com/windows/windows-7/default.aspx" device_type="" device_vendor="" device_url="" comments="" author="xnih13@gmail.com" last_updated="2020-05-26">
  1178. <tcp_tests>
  1179. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="8192:128:1:52:M1460,N,W8,N,N,S:T"/>
  1180. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="8192:128:1:48:M1460,N,N,S:T"/>
  1181. </tcp_tests>
  1182. </fingerprint>
  1183. <fingerprint name="Windows 95" os_name="Windows 95" os_class="Windows" os_vendor="Microsoft Corp." os_url="http://www.microsoft.com" device_type="" device_vendor="" device_url="" comments="" author="xnih13@gmail.com" last_updated="2008-10-20">
  1184. <tcp_tests>
  1185. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="8820:32:1:44:M1460:A"/>
  1186. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="8192:32:1:44:M1460:."/>
  1187. </tcp_tests>
  1188. </fingerprint>
  1189. <fingerprint name="Windows 98" os_name="Windows 98" os_class="Windows" os_vendor="Microsoft Corp." os_url="http://www.microsoft.com" device_type="" device_vendor="" device_url="" comments="" author="xnih13@gmail.com" last_updated="2008-10-20">
  1190. <tcp_tests>
  1191. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="17520:128:1:52:M1460,N,W0,N,N,S:A"/>
  1192. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="8820:128:1:48:M1460,N,N,S:A"/>
  1193. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="8760:128:1:44:M1460:A"/>
  1194. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="8760:128:1:48:M1460,N,N,S:A"/>
  1195. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="8576:128:1:44:M1460:A"/>
  1196. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="8215:128:1:44:M1460:A"/>
  1197. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="8192:128:1:44:M1460:."/>
  1198. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="8192:128:1:48:M1460,N,N,S:."/>
  1199. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="8192:128:1:48:M1460,N,N,S:Z"/>
  1200. </tcp_tests>
  1201. </fingerprint>
  1202. <fingerprint name="Windows CE" os_name="Windows CE" os_class="Windows" os_vendor="Microsoft Corp." os_url="http://www.microsoft.com" device_type="" device_vendor="" device_url="" comments="" author="xnih13@gmail.com" last_updated="2009-02-15">
  1203. <tcp_tests>
  1204. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="32768:32:1:44:M1460:."/>
  1205. </tcp_tests>
  1206. </fingerprint>
  1207. <fingerprint name="Windows ME" os_name="Windows ME" os_class="Windows" os_vendor="Microsoft Corp." os_url="http://www.microsoft.com" device_type="" device_vendor="" device_url="" comments="" author="xnih13@gmail.com" last_updated="2008-10-20">
  1208. <tcp_tests>
  1209. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="17640:128:1:48:M1460,N,N,S:A"/>
  1210. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="16384:128:1:48:M1460,N,N,S:."/>
  1211. </tcp_tests>
  1212. </fingerprint>
  1213. <fingerprint name="Windows NT 4" os_name="Windows NT 4" os_class="Windows" os_vendor="Microsoft Corp." os_url="http://www.microsoft.com" device_type="" device_vendor="" device_url="" comments="" author="xnih13@gmail.com" last_updated="2008-10-20">
  1214. <tcp_tests>
  1215. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="8760:128:1:44:M1460:A"/>
  1216. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="8820:128:1:44:M1460:A"/>
  1217. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="8576:128:1:44:M1460:A"/>
  1218. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="8215:128:1:44:M1460:A"/>
  1219. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="8192:128:1:44:M1460:."/>
  1220. </tcp_tests>
  1221. </fingerprint>
  1222. <fingerprint name="Windows Server 2003" os_name="Windows Server 2003" os_class="Windows" os_vendor="Microsoft Corp." os_url="http://www.microsoft.com/windowsserver2003" device_type="" device_vendor="" device_url="" comments="" author="xnih13@gmail.com" last_updated="2008-10-20">
  1223. <tcp_tests>
  1224. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="65535:128:1:48:M1460,N,N,S:A"/>
  1225. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="64240:128:0:52:M1460,N,W0,N,N,S:A"/>
  1226. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="64240:128:0:48:M1460,N,N,S:A"/>
  1227. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="64240:128:0:64:M1460,N,W0,N,N,T0,N,N,S:AT"/>
  1228. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="64240:128:0:44:M1380:A"/>
  1229. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="17520:128:1:48:M1460,N,N,S:A"/>
  1230. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="16384:128:1:48:M1460,N,N,S:A"/>
  1231. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="16384:128:0:48:M1460,N,N,S:A"/>
  1232. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="16384:128:0:52:M1460,N,W0,N,N,S:A"/>
  1233. <test weight="5" matchtype="partial" tcpflag="S" tcpsig="65535:128:*:48:M1460,N,N,S:."/>
  1234. <test weight="5" matchtype="partial" tcpflag="S" tcpsig="64240:128:*:48:M1460,N,N,S:."/>
  1235. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="16384:128:1:48:M1460,N,N,S:."/>
  1236. </tcp_tests>
  1237. </fingerprint>
  1238. <fingerprint name="Windows Server 2008" os_name="Windows Server 2008" os_class="Windows" os_vendor="Microsoft Corp." os_url="http://www.microsoft.com/windowsserver2008" device_type="" device_vendor="" device_url="" comments="" author="xnih13@gmail.com" last_updated="2011-04-01">
  1239. <tcp_tests>
  1240. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="8192:128:1:48:M1460,N,N,S:A"/>
  1241. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="8192:128:1:52:M1260,N,W8,N,N,S:A"/>
  1242. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="8192:128:1:52:M1260,N,W8,N,N,S:."/>
  1243. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="8192:128:1:52:M1460,N,W8,N,N,S:A"/>
  1244. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="8192:128:1:48:N,W8,N,N,S:A"/>
  1245. </tcp_tests>
  1246. </fingerprint>
  1247. <fingerprint name="Windows Server 2008 R2" os_name="Windows Server 2008 R2" os_class="Windows" os_vendor="Microsoft Corp." os_url="http://www.microsoft.com/windowsserver2008r2" device_type="" device_vendor="" device_url="" comments="" author="xnih13@gmail.com" last_updated="2020-05-26">
  1248. <tcp_tests>
  1249. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="8192:128:1:48:M1460,N,N,S:A"/>
  1250. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="8192:128:1:44:N,N,S:A"/>
  1251. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="8192:128:1:48:N,W8,N,N,S:A"/>
  1252. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="8192:128:1:52:M1380,N,W8,N,N,S:A"/>
  1253. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="8192:128:1:52:M1460,N,W8,N,N,S:T"/>
  1254. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="8192:128:1:52:M1380,N,W8,N,N,S:T"/>
  1255. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="8192:128:1:60:M1460,N,W8,S,T:AT"/>
  1256. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="8192:128:1:52:M1460,N,W8,N,N,S:A"/>
  1257. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="8192:128:1:48:M1380,N,N,S:A"/>
  1258. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="8192:128:1:44:M1460:A"/>
  1259. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="8192:128:1:60:M1380,N,W8,S,T:AT"/>
  1260. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="8192:128:1:48:M1460,N,N,S:T"/>
  1261. </tcp_tests>
  1262. </fingerprint>
  1263. <fingerprint name="Windows Server 2012 R2" os_name="Windows Server 2012 R2" os_class="Windows" os_vendor="Microsoft Corp." os_url="http://www.microsoft.com/" device_type="" device_vendor="" device_url="" comments="" author="xnih13@gmail.com" last_updated="2020-05-26">
  1264. <tcp_tests>
  1265. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="8192:128:1:48:M1460,N,N,S:A"/>
  1266. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="8192:128:1:52:M1380,N,W8,N,N,S:A"/>
  1267. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="8192:128:1:44:M1380:A"/>
  1268. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="8192:128:1:56:N,W8,S,T:AT"/>
  1269. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="8192:128:1:60:M1460,N,W8,S,T:AT"/>
  1270. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="8192:128:1:52:M1460,N,W8,N,N,S:A"/>
  1271. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="8192:128:1:48:M1380,N,N,S:A"/>
  1272. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="8192:128:1:44:M1460:A"/>
  1273. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="8192:128:1:60:M1380,N,W8,S,T:AT"/>
  1274. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="65535:128:1:48:M1380,N,N,S:T;"/>
  1275. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="8192:128:1:48:M1380,N,N,S:T"/>
  1276. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="8192:128:1:48:M1460,N,N,S:T"/>
  1277. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="65535:128:1:48:M1380,N,N,S:A"/>
  1278. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="8192:128:1:60:M1380,N,W8,N,N,T:AT"/>
  1279. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="8192:128:1:56:M1380,N,N,T:AT"/>
  1280. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="65535:128:1:56:M1380,S,T:AT"/>
  1281. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="65535:128:1:48:M1380,N,N,S:T"/>
  1282. </tcp_tests>
  1283. </fingerprint>
  1284. <fingerprint name="Windows Server 2016" os_name="Windows Server 2016" os_class="Windows" os_vendor="Microsoft Corp." os_url="http://www.microsoft.com/" device_type="" device_vendor="" device_url="" comments="" author="xnih13@gmail.com" last_updated="2020-05-26">
  1285. <tcp_tests>
  1286. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="8192:128:1:60:M1380,N,W8,S,T:AT"/>
  1287. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="8192:128:1:60:M1460,N,W8,S,T:AT"/>
  1288. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="8192:128:1:48:M1380,N,N,S:T"/>
  1289. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="8192:128:1:48:M1460,N,N,S:T"/>
  1290. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="8192:128:1:52:M1380,N,W8,N,N,S:A"/>
  1291. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="64202:128:1:52:M1366,N,W8,N,N,S:T"/>
  1292. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="8192:128:1:44:M1460:A"/>
  1293. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="8192:128:1:52:M1460,N,W8,N,N,S:A"/>
  1294. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="65535:128:1:48:M1460,N,N,S:A"/>
  1295. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="8192:128:1:44:M1380:A"/>
  1296. </tcp_tests>
  1297. </fingerprint>
  1298. <fingerprint name="Windows Server 2019" os_name="Windows Server 2019" os_class="Windows" os_vendor="Microsoft Corp." os_url="http://www.microsoft.com/" device_type="" device_vendor="" device_url="" comments="" author="xnih13@gmail.com" last_updated="2020-05-26">
  1299. <tcp_tests>
  1300. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="64240:128:1:52:M1380,N,W8,N,N,S:T"/>
  1301. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="65535:128:1:52:M1380,N,W8,N,N,S:A"/>
  1302. </tcp_tests>
  1303. </fingerprint>
  1304. <fingerprint name="Windows Vista" os_name="Windows Vista" os_class="Windows" os_vendor="Microsoft Corp." os_url="http://www.microsoft.com/windows/windows-vista" device_type="" device_vendor="" device_url="" comments="" author="xnih13@gmail.com" last_updated="2009-09-15">
  1305. <tcp_tests>
  1306. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="65535:128:1:48:M1460,N,N,S:."/>
  1307. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="8192:128:1:52:M1460,N,W2,N,N,S:Z"/>
  1308. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="8192:128:1:52:M1460,N,W2,N,N,S:."/>
  1309. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="8192:128:1:48:M1460,N,N,S:."/>
  1310. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="8192:128:1:52:M1260,N,W8,N,N,S:."/>
  1311. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="8192:128:1:48:M1460,N,N,S:A"/>
  1312. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="8192:128:1:48:M1260,N,N,S:A"/>
  1313. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="8192:128:1:52:M1260,N,W8,N,N,S:A"/>
  1314. </tcp_tests>
  1315. </fingerprint>
  1316. <fingerprint name="Windows XP" os_name="Windows XP" os_class="Windows" os_vendor="Microsoft Corp." os_url="http://www.microsoft.com/windows/windows-xp" device_type="" device_vendor="" device_url="" comments="" author="xnih13@gmail.com" last_updated="2010-11-13">
  1317. <tcp_tests>
  1318. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="65535:128:1:64:M1260,N,W0,N,N,T0,N,N,S:AT"/>
  1319. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="65535:128:1:64:M1460,N,W0,N,N,T0,N,N,S:AT"/>
  1320. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="65535:128:1:48:M1460,N,N,S:A"/>
  1321. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="65535:128:1:48:M1260,N,N,S:A"/>
  1322. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="64240:128:1:48:M1460,N,N,S:A"/>
  1323. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="17520:128:1:48:M1460,N,N,S:A"/>
  1324. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="17640:128:1:48:M1460,N,N,S:A"/>
  1325. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="65535:128:1:44:M1260:A"/>
  1326. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="65535:128:1:52:M1260,N,W1,N,N,S:."/>
  1327. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="65535:128:1:52:M1460,N,W1,N,N,S:."/>
  1328. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="65535:128:1:48:M1460,N,N,S:."/>
  1329. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="65535:128:1:48:M1260,N,N,S:."/>
  1330. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="64512:128:1:48:M1460,N,N,S:."/>
  1331. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="64240:128:1:48:M1460,N,N,S:."/>
  1332. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="16384:128:1:48:M1460,N,N,S:."/>
  1333. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="64240:128:1:48:M1260,N,N,S:."/>
  1334. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="64240:128:1:64:M1260,N,W0,N,N,T0,N,N,S:AT"/>
  1335. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="16384:128:1:48:M1260,N,N,S:."/>
  1336. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="65535:128:1:52:M1260,N,W0,N,N,S:A"/>
  1337. </tcp_tests>
  1338. </fingerprint>
  1339. <fingerprint name="Windows XP SP3" os_name="Windows XP" os_class="Windows" os_vendor="Microsoft Corp." os_url="http://www.microsoft.com/windows/windows-xp" device_type="" device_vendor="" device_url="" comments="" author="xnih13@gmail.com" last_updated="2021-01-02">
  1340. <tcp_tests>
  1341. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="64240:128:1:48:M1260,N,N,S:A"/>
  1342. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="64240:128:1:52:M1260,N,W0,N,N,S:A"/>
  1343. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="65535:128:1:60:M1460,N,W0,N,N,T0:AT"/>
  1344. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="65535:128:1:60:M1460,N,N,T0,N,N,S:AT"/>
  1345. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="65535:128:1:52:M1460,N,W0,N,N,S:A"/>
  1346. <test weight="5" matchtype="exact" tcpflag="A" tcpsig="32374:128:1:52:N,N,K:."/>
  1347. <test weight="5" matchtype="exact" tcpflag="A" tcpsig="32367:128:1:52:N,N,K:."/>
  1348. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="16384:128:1:48:M1260,N,N,S:T;"/>
  1349. </tcp_tests>
  1350. </fingerprint>
  1351. <fingerprint name="Xbox 360" os_name="" os_class="" os_vendor="" os_url="" device_type="Game Console" device_vendor="Microsoft Corp." device_url="http://www.xbox.com" comments="" author="xnih13@gmail.com" last_updated="2014-06-23">
  1352. <tcp_tests>
  1353. <test weight="5" matchtype="exact" tcpflag="A" tcpsig="8445:64:1:52:N,N,T:."/>
  1354. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="17520:64:0:48:M1460,N,W0:A"/>
  1355. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="17520:64:0:52:M1460,N,W0,N,N,S:."/>
  1356. </tcp_tests>
  1357. </fingerprint>
  1358. <fingerprint name="Xbox One" os_name="" os_class="" os_vendor="" os_url="" device_type="Game Console" device_vendor="Microsoft Corp." device_url="http://www.xbox.com" comments="" author="xnih13@gmail.com" last_updated="2020-05-27">
  1359. <tcp_tests>
  1360. <test weight="5" matchtype="exact" tcpflag="S" tcpsig="65518:128:1:52:M1460,N,W8,N,N,S:T"/>
  1361. </tcp_tests>
  1362. </fingerprint>
  1363. <fingerprint name="Xerox ColorQube 9303" os_name="" os_class="" os_vendor="" os_url="" device_type="Printer" device_vendor="Xerox" device_url="http://www.xerox.com" comments="" author="xnih13@gmail.com" last_updated="2009-02-14">
  1364. <tcp_tests>
  1365. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="5840:64:1:52:M1460,N,N,S,N,W5:ZA"/>
  1366. </tcp_tests>
  1367. </fingerprint>
  1368. <fingerprint name="Xerox Phaser 3330" os_name="" os_class="" os_vendor="" os_url="" device_type="Printer" device_vendor="Xerox" device_url="http://www.xerox.com" comments="" author="xnih13@gmail.com" last_updated="2009-02-14">
  1369. <tcp_tests>
  1370. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="4096:64:1:48:M1460,N,W0:A"/>
  1371. </tcp_tests>
  1372. </fingerprint>
  1373. <fingerprint name="Xerox WorkCentre 5955" os_name="" os_class="" os_vendor="" os_url="" device_type="Printer" device_vendor="Xerox" device_url="http://www.xerox.com" comments="" author="xnih13@gmail.com" last_updated="2009-02-14">
  1374. <tcp_tests>
  1375. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="5840:64:1:52:M1460,N,N,S,N,W5:ZA"/>
  1376. </tcp_tests>
  1377. </fingerprint>
  1378. <fingerprint name="Xerox WorkCentre 7XX5 v1 MultiFunction" os_name="" os_class="" os_vendor="" os_url="" device_type="Printer" device_vendor="Xerox" device_url="http://www.xerox.com" comments="" author="xnih13@gmail.com" last_updated="2019-02-14">
  1379. <tcp_tests>
  1380. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="5792:64:1:60:M1460,S,T,N,W4:ZAT"/>
  1381. <test weight="5" matchtype="exact" tcpflag="SA" tcpsig="5840:64:1:52:M1460,N,N,S,N,W4:ZA"/>
  1382. </tcp_tests>
  1383. </fingerprint>
  1384. </fingerprints>
  1385. </TCP>