# Nmap OS Fingerprinting 2nd Generation DB. -*- mode: fundamental; -*-
# $Id$ 
#
# Contributions to this database are welcome.  If Nmap obtains a new
# fingerprint (and test conditions are favorable), it will print out a
# URL you can use to submit the fingerprint.  If Nmap guesses wrong,
# please see http://nmap.org/submit/ .
#
# By submitting fingerprints you are transfering any and all copyright
# interest in the data to Insecure.Com LLC so it can modified,
# incorporated into Nmap, relicensed, etc.
#
# This collection of fingerprint data is (C) 1996-2010 by Insecure.Com
# LLC.  It is distributed under the Nmap Open Source license as
# provided in the COPYING file of the source distribution or at
# http://nmap.org/data/COPYING .  Note that this license
# requires you to license your own work under a compatible open source
# license.  If you wish to embed Nmap technology into proprietary
# software, we sell alternative licenses (contact sales@insecure.com).
# Dozens of software vendors already license Nmap technology such as
# host discovery, port scanning, OS detection, and version detection.
# For more details, see http://nmap.org/book/man-legal.html
#
# For a complete description of Nmap OS detection and the format of
# fingerprints in this file, see http://nmap.org/book/osdetect.html.

# This first element provides the number of points every fingerprint
# test is worth.  Tests like TTL or Don't fragment are worth less
# (individually) because there are so many of them and the values are
# often correlated with each other.  Meanwhile, elements such as TS
# (TCP timestamp) which are only used once, get more points.  Points
# are used when there are no perfect matches to determine which OS
# fingerprint matches a target machine most closely.
MatchPoints
SEQ(SP=25%GCD=75%ISR=25%TI=100%CI=50%II=100%SS=80%TS=100)
OPS(O1=20%O2=20%O3=20%O4=20%O5=20%O6=20)
WIN(W1=15%W2=15%W3=15%W4=15%W5=15%W6=15)
ECN(R=100%DF=20%T=15%TG=15%W=15%O=15%CC=100%Q=20)
T1(R=100%DF=20%T=15%TG=15%S=20%A=20%F=30%RD=20%Q=20)
T2(R=80%DF=20%T=15%TG=15%W=25%S=20%A=20%F=30%O=10%RD=20%Q=20)
T3(R=80%DF=20%T=15%TG=15%W=25%S=20%A=20%F=30%O=10%RD=20%Q=20)
T4(R=100%DF=20%T=15%TG=15%W=25%S=20%A=20%F=30%O=10%RD=20%Q=20)
T5(R=100%DF=20%T=15%TG=15%W=25%S=20%A=20%F=30%O=10%RD=20%Q=20)
T6(R=100%DF=20%T=15%TG=15%W=25%S=20%A=20%F=30%O=10%RD=20%Q=20)
T7(R=80%DF=20%T=15%TG=15%W=25%S=20%A=20%F=30%O=10%RD=20%Q=20)
U1(R=50%DF=20%T=15%TG=15%IPL=100%UN=100%RIPL=100%RID=100%RIPCK=100%RUCK=100%RUD=100)
IE(R=50%DFI=40%T=15%TG=15%CD=100)

# 4-port GSM-SIP gateway PORTech MV-374
# 2FXS VoIP gateway K-3288W
Fingerprint 2FXS K-3288W or PORTech MV-374 GSM-SIP VoIP adapter
Class 2FXS | embedded || VoIP adapter
Class PORTech | embedded || VoIP adapter
CPE cpe:/h:portech:mv-374
SEQ(SP=0-5%GCD=61A8|C350|124F8|186A0|1E848%ISR=8A-94%TI=I%II=RI%SS=O%TS=U)
OPS(O1=M5B4|WANM5B4T10S%O2=M578|M578W0ST10L%O3=M280|T10NNW5NM280%O4=M5B4|ST10WAL%O5=M218|M218ST10WAL%O6=M109|M109ST10)
WIN(W1=0|3180%W2=0|3180%W3=0|3180%W4=0|3180%W5=0|3180%W6=0|3180)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=0%O=WANM5B4SNN%CC=N%Q=R)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O|Z%A=S+%F=AR|AS%RD=0%Q=)
T2(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=WANM109T10S%RD=0%Q=)
T3(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=O%F=AR%O=WANM109T10S%RD=0%Q=)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=WANM109T10S%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=WANM109T10S%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=WANM109T10S%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=WFNM109T10S%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# 2N VOIP doorbell
Fingerprint 2N Helios IP VoIP doorbell
Class 2N | embedded || specialized
CPE cpe:/h:2n:helios
SEQ(SP=0-5%GCD=51E80C|A3D018|F5B824|147A030|199883C%ISR=C8-D2%TI=I|RD%CI=I%II=RI%SS=S%TS=U)
OPS(O1=M5B4%O2=M5B4%O3=M5B4%O4=M5B4%O5=M5B4%O6=M5B4)
WIN(W1=8000%W2=8000%W3=8000%W4=8000%W5=8000%W6=8000)
ECN(R=Y%DF=N%T=FA-104%TG=FF%W=8000%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=FA-104%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=FA-104%TG=FF%W=8000%S=O%A=S+%F=AS%O=M5B4%RD=0%Q=)
T4(R=Y%DF=N%T=FA-104%TG=FF%W=8000%S=A+%A=S%F=AR%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=8000%S=A%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=8000%S=A%A=S%F=AR%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FA-104%TG=FF%W=8000%S=A%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# BT2700HGV DSL Router version 5.29.107.19
Fingerprint 2Wire BT2700HG-V ADSL modem
Class 2Wire | embedded || broadband router
CPE cpe:/h:2wire:bt2700hg-v
SEQ(SP=6A-BE%GCD=1-6%ISR=96-A0%TI=I%CI=I%II=I%SS=S%TS=A)
OPS(O1=M5B4NNSW0NNNT11%O2=M578NNSW0NNNT11%O3=M280W0NNNT11%O4=M218NNSW0NNNT11%O5=M218NNSW0NNNT11%O6=M109NNSNNT11)
WIN(W1=8000%W2=8000%W3=8000%W4=8000%W5=8000%W6=8000)
ECN(R=Y%DF=Y%T=FA-104%TG=FF%W=8000%O=M5B4NNSW0N%CC=N%Q=)
T1(R=Y%DF=Y%T=FA-104%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=E44A4E43%Q=)
T5(R=Y%DF=Y%T=FA-104%TG=FF%W=0%S=Z%A=S+%F=AR%O=%RD=1F59B3D4%Q=)
T6(R=Y%DF=Y%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=1F59B3D4%Q=)
T7(R=N)
U1(DF=Y%T=FA-104%TG=FF%IPL=70%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=Y%T=FA-104%TG=FF%CD=S)

# 2wire 1701HG Gateway 3.17.5
Fingerprint 2Wire 1701HG wireless ADSL modem
Class 2Wire | embedded || WAP
CPE cpe:/h:2wire:1701hg
SEQ(SP=7E-9A%GCD=1-6%ISR=9E-A8%TI=I%TS=A)
OPS(O1=M5ACNNSW0NNNT11%O2=M578NNSW0NNNT11%O3=M280W0NNNT11%O4=M218NNSW0NNNT11%O5=M218NNSW0NNNT11%O6=M109NNSNNT11)
WIN(W1=8000%W2=8000%W3=8000%W4=8000%W5=8000%W6=8000)
ECN(R=Y%DF=Y%T=FA-104%TG=FF%W=8000%O=M5ACNNSW0N%CC=N%Q=)
T1(R=Y%DF=Y%T=FA-104%TG=FF%S=O%A=O|S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=E44A4E43%Q=)
T5(R=Y%DF=Y%T=FA-104%TG=FF%W=0%S=Z%A=S+%F=AR%O=%RD=BD1AB510%Q=)
T6(R=Y%DF=Y%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=EA6C967D%Q=)
T7(R=N)
U1(DF=Y%T=FA-104%TG=FF%IPL=70%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(R=N)

# 1701HG Gateway, Software Version: 3.17.5
# 2Wire 2700HG
# 2 Wire RG2701HG-00
# 2Wire 2701HG-B
# 2700HG-B 2Wire gateway
# 2Wire, Inc. 3800HGV-B Software Version        6.1.9.24-enh.tm
Fingerprint 2Wire 1701HG, 2700HG, 2700HG-B, 2701HG-B, RG2701HG, or 3800HGV-B wireless ADSL modem
Class 2Wire | embedded || WAP
CPE cpe:/h:2wire:1701hg
CPE cpe:/h:2wire:2700hg
CPE cpe:/h:2wire:2700hg-b
CPE cpe:/h:2wire:2701hg-b
CPE cpe:/h:2wire:rg2701hg
CPE cpe:/h:2wire:3800hgv-b
SEQ(SP=5A-A0%GCD=1-6%ISR=98-A9%TI=I%TS=A)
OPS(O1=M5B4NNSW0NNNT11%O2=M578NNSW0NNNT11%O3=M280W0NNNT11%O4=M218NNSW0NNNT11%O5=M218NNSW0NNNT11%O6=M109NNSNNT11)
WIN(W1=8000%W2=8000%W3=8000%W4=8000%W5=8000%W6=8000)
ECN(R=Y%DF=Y%T=FA-104%TG=FF%W=8000%O=M5B4NNSW0N%CC=N%Q=)
T1(R=Y%DF=Y%T=FA-104%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=E44A4E43%Q=)
T5(R=Y%DF=Y%T=FA-104%TG=FF%W=0%S=Z%A=S+%F=AR%O=%RD=BD1AB510%Q=)
T6(R=Y%DF=Y%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=EA6C967D%Q=)
T7(R=N)
U1(DF=Y%T=FA-104%TG=FF%IPL=70%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(R=N)

# Version 6.0 (Build 6002: Service Pack 2)
# 2Wire 2701HG-B Gateway running version 5.29.47
Fingerprint 2Wire 2700HG-B wireless ADSL modem
Class 2Wire | embedded || WAP
CPE cpe:/h:2wire:2700hg-b
SEQ(SP=7C-AA%GCD=1-6%ISR=94-9E%TI=I%TS=A)
OPS(O1=M5B4NNSW0NNNT11%O2=M578NNSW0NNNT11%O3=M280W0NNNT11%O4=M218NNSW0NNNT11%O5=M218NNSW0NNNT11%O6=M109NNSNNT11)
WIN(W1=8000%W2=8000%W3=8000%W4=8000%W5=8000%W6=8000)
ECN(R=Y%DF=Y%T=FA-104%TG=FF%W=8000%O=M5B4NNSW0N%CC=N%Q=)
T1(R=Y%DF=Y%T=FA-104%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=Y%DF=Y%T=FA-104%TG=FF%W=0%S=Z%A=S+%F=AR%O=%RD=BD1AB510%Q=)
T6(R=N)
T7(R=N)
U1(DF=Y%T=FA-104%TG=FF%IPL=70%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(R=N)

# 2wire 2701 HG router
Fingerprint 2Wire 2701HG wireless ADSL modem
Class 2Wire | embedded || WAP
CPE cpe:/h:2wire:2701hg
SEQ(SP=6D-C3%GCD=1-6%ISR=96-A0%TI=I%CI=I%TS=E)
OPS(O1=M5B4NNSW0NNNT11%O2=M578NNSW0NNNT11%O3=M280W0NNNT11%O4=M218NNSW0NNNT11%O5=M218NNSW0NNNT11%O6=M109NNSNNT11)
WIN(W1=8000%W2=8000%W3=8000%W4=8000%W5=8000%W6=8000)
ECN(R=Y%DF=Y%T=FA-104%TG=FF%W=8000%O=M5B4NNSW0N%CC=N%Q=)
T1(R=Y%DF=Y%T=FA-104%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=E44A4E43%Q=)
T5(R=Y%DF=Y%T=FA-104%TG=FF%W=0%S=Z%A=S+%F=AR%O=%RD=BD1AB510%Q=)
T6(R=Y%DF=Y%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=EA6C967D%Q=)
T7(R=N)
U1(DF=Y%T=FA-104%TG=FF%IPL=70%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(R=N)

# 2wire router/WAP/DSL-modem is model# 2701HG-B
Fingerprint 2Wire 2701HG-B wireless ADSL modem
Class 2Wire | embedded || WAP
CPE cpe:/h:2wire:2701hg-b
SEQ(SP=84-DA%GCD=1-6%ISR=95-CD%TI=I|RD%II=I%SS=S%TS=A)
OPS(O1=M5B4NNSW0NNNT11%O2=M578NNSW0NNNT11%O3=M280W0NNNT11%O4=M218NNSW0NNNT11%O5=M218NNSW0NNNT11%O6=M109NNSNNT11)
WIN(W1=8000%W2=8000%W3=8000%W4=8000%W5=8000%W6=8000)
ECN(R=Y%DF=Y%T=FA-104%TG=FF%W=8000%O=M5B4NNSW0N%CC=N%Q=)
T1(R=Y%DF=Y%T=FA-104%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=Y%T=FA-104%TG=FF%W=0%S=Z%A=S%F=AR%O=%RD=E44A4E43%Q=)
T3(R=Y%DF=Y%T=FA-104%TG=FF%W=8000%S=O%A=S+%F=AS%O=M109NNSW0NNNT11%RD=0%Q=)
T4(R=Y%DF=Y%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=E44A4E43%Q=)
T5(R=Y%DF=Y%T=FA-104%TG=FF%W=0%S=Z%A=S+%F=AR%O=%RD=BD1AB510%Q=)
T6(R=Y%DF=Y%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=EA6C967D%Q=)
T7(R=Y%DF=Y%T=FA-104%TG=FF%W=0%S=Z%A=S%F=AR%O=%RD=EA6C967D%Q=)
U1(DF=Y%T=FA-104%TG=FF%IPL=70%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=Y%T=FA-104%TG=FF%CD=S)

# 2Wire 2701HG-B Gateway AT&T DSL Wireless Access Point
Fingerprint 2Wire 2701HG-B wireless ADSL modem
Class 2Wire | embedded || WAP
CPE cpe:/h:2wire:2701hg-b
SEQ(SP=62-9E%GCD=1-6%ISR=99-A3%TI=I%CI=I%TS=A)
OPS(O1=M5B4NNSW0NNNT11%O2=M578NNSW0NNNT11%O3=M280W0NNNT11%O4=M5B4NNSW0NNNT11%O5=M218NNSW0NNNT11%O6=M109NNSNNT11)
WIN(W1=8000%W2=8000%W3=8000%W4=8000%W5=8000%W6=8000)
ECN(R=Y%DF=Y%T=FA-104%TG=FF%W=8000%O=M5B4NNSW0N%CC=N%Q=)
T1(R=Y%DF=Y%T=FA-104%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=E44A4E43%Q=)
T5(R=Y%DF=Y%T=FA-104%TG=FF%W=0%S=Z%A=S+%F=AR%O=%RD=BD1AB510%Q=)
T6(R=Y%DF=Y%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=EA6C967D%Q=)
T7(R=N)
U1(DF=Y%T=FA-104%TG=FF%IPL=70%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(R=N)

# 2-Wire 2701HG-G Gateway Software:  5.29.133.27
Fingerprint 2Wire 2701HG-G wireless ADSL modem
Class 2Wire | embedded || WAP
CPE cpe:/h:2wire:2701hg-g
SEQ(SP=7B-85%GCD=1-6%ISR=95-9F%TI=I%II=I%SS=S%TS=A)
OPS(O1=M5B4NNSW0NNNT11%O2=M578NNSW0NNNT11%O3=M280W0NNNT11%O4=M218NNSW0NNNT11%O5=M218NNSW0NNNT11%O6=M109NNSNNT11)
WIN(W1=8000%W2=8000%W3=8000%W4=8000%W5=8000%W6=8000)
ECN(R=Y%DF=Y%T=FA-104%TG=FF%W=8000%O=M5B4NNSW0N%CC=N%Q=)
T1(R=Y%DF=Y%T=FA-104%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%T=FA-104%TG=FF%W=8000%S=O%A=S+%F=AS%O=M109NNSW0NNNT11%RD=0%Q=)
T4(R=N)
T5(R=Y%DF=Y%T=FA-104%TG=FF%W=0%S=Z%A=S+%F=AR%O=%RD=BD1AB510%Q=)
T6(R=N)
T7(R=N)
U1(DF=Y%T=FA-104%TG=FF%IPL=70%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=Y%T=FA-104%TG=FF%CD=S)

# 2wire wireless Broadband router version 3.5.55
# 2wire 1000SW Shasta 3.5.12
Fingerprint 2Wire Shasta wireless broadband router
Class 2Wire | embedded || WAP
CPE cpe:/h:2wire:1000sw
SEQ(SP=76-A2%GCD=1-6%ISR=A0-AD%TI=I%TS=7)
OPS(O1=M5B4NNSW0NNNT11%O2=M578NNSW0NNNT11%O3=M280W0NNNT11%O4=M218NNSW0NNNT11%O5=M218NNSW0NNNT11%O6=M109NNSNNT11)
WIN(W1=8000%W2=8000%W3=8000%W4=8000%W5=8000%W6=8000)
ECN(R=Y%DF=Y%T=FA-104%TG=FF%W=8000%O=M5B4NNSW0N%CC=N%Q=)
T1(R=Y%DF=Y%T=FA-104%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=E44A4E43%Q=)
T5(R=Y%DF=Y%T=FA-104%TG=FF%W=0%S=Z%A=S+%F=AR%O=%RD=BD1AB510%Q=)
T6(R=Y%DF=Y%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=EA6C967D%Q=)
T7(R=N)
U1(DF=Y%T=FA-104%TG=FF%IPL=70%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(R=N)

# 3com OfficeConnect 812 ADSL Router
# 3Com OfficeConnect Remote ADSL 812 V2.1.5, Built on Aug 23 2002 at 11:10:56.
Fingerprint 3com OfficeConnect 812 ADSL router
Class 3Com | embedded || broadband router
CPE cpe:/h:3com:officeconnect_812 auto
SEQ(SP=0-63%GCD=61A8|C350|124F8|186A0|1E848%ISR=8A-B0%TI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4%O2=M5B4%O3=M5B4%O4=M5B4%O5=M5B4%O6=M5B4)
WIN(W1=400%W2=400%W3=400%W4=400%W5=400%W6=400)
ECN(R=Y%DF=N%T=FA-104%TG=FF%W=400%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=FA-104%TG=FF%S=O%A=O|S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=U)
T3(R=Y%DF=N%T=FA-104%TG=FF%W=400%S=O%A=S+%F=AS%O=M5B4%RD=0%Q=)
T4(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=|U)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=|U)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=|U)
T7(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=|U)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=FA-104%TG=FF%CD=S)

# 3Com X5 Unified Security Platform 3CRTPX5-U-96 with TOS Version X3.1. 1.2109
Fingerprint 3Com X5 Unified Security Platform firewall
Class 3Com | embedded || firewall
SEQ(II=I%TS=3)
OPS(O1=M5B4NW0NNT11%O2=M5B4NW0NNT11%O3=M5B4NW0NNT11%O4=M5B4NW0NNT11%O5=M5B4NW0NNT11%O6=M5B4NNT11)
WIN(W1=2000%W2=2000%W3=2000%W4=2000%W5=2000%W6=2000)
ECN(R=Y%DF=N%T=3A-44%TG=40%W=2000%O=M5B4NW0%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=O|S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=Y%DF=N%T=3F%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=N)
T7(R=N)
U1(DF=N%T=3A-44%TG=40%IPL=38%UN=0%RIPL=G%RID=4210%RIPCK=Z%RUCK=0%RUD=G)
IE(DFI=N%T=3A-44%TG=40%CD=Z)

# 3com 3016 T1 Router 3Com Router Software Extended_V1.30
Fingerprint 3Com 3016 router
Class 3Com | embedded || router
CPE cpe:/h:3com:3016 auto
SEQ(SP=C-16%GCD=F402|1E804|2DC06|3D008|4C40A%ISR=97-A1%TI=I%II=I%SS=S%TS=1)
OPS(O1=M5B4NW0NNT11%O2=M5B4NW0NNT11%O3=M5B4NW0NNT11%O4=M5B4NW0NNT11%O5=M5B4NW0NNT11%O6=M5B4NNT11)
WIN(W1=111C%W2=1068%W3=1180%W4=1000%W5=10C0%W6=1090)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=111C%O=M5B4NW0%CC=N)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0)
T2(R=N)
T3(R=Y%DF=N%T=3B-45%TG=40%W=1090%S=O%A=O%F=A%O=NNT11%RD=0)
T4(R=Y%DF=N%T=3B-45%TG=40%W=1000%S=A%A=Z%F=R%RD=0)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%RD=0)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%RD=0)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%RD=0)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=15C%RID=G%RIPCK=I%RUCK=0%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# 3Com OfficeConnect 3CR858-91 Software version V1.13-168 (Mar 21 2008 11:57:49)
Fingerprint 3Com OfficeConnect 3CR858-91 router
Class 3Com | embedded || router
CPE cpe:/h:3com:officeconnect_3cr858-91 auto
SEQ(SP=0-5%GCD=B|16|21|2C|37%ISR=30-3A%TI=I%CI=I%II=I%SS=S%TS=U)
OPS(O1=M578%O2=M578%O3=M280%O4=M578%O5=M218%O6=M109)
WIN(W1=1770%W2=1770%W3=1770%W4=1770%W5=1770%W6=1770)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=1770%O=M578%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=O|S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=O%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=O%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=Y%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N|S%T=3B-45%TG=40%CD=Z)

# 3Com 3924
Fingerprint 3Com 3924 switch
Class 3Com | embedded || switch
CPE cpe:/h:3com:3924 auto
SEQ(SP=8E-98%GCD=1-6%ISR=92-9C%TI=I%CI=I%II=RI%SS=S%TS=1)
OPS(O1=M5B4NW0NNT11%O2=M5B4NW0NNT11%O3=M5B4NW0NNT11%O4=M5B4NW0NNT11%O5=M5B4NW0NNT11%O6=M5B4NNT11)
WIN(W1=2000%W2=2000%W3=2000%W4=2000%W5=2000%W6=2000)
ECN(R=Y%DF=N%T=19-23%TG=20%W=2000%O=M5B4NW0%CC=N%Q=)
T1(R=Y%DF=N%T=19-23%TG=20%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=19-23%TG=20%W=2000%S=O%A=S+%F=AS%O=%RD=0%Q=)
T4(R=Y%DF=N%T=19-23%TG=20%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=19-23%TG=20%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=19-23%TG=20%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=19-23%TG=20%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=19-23%TG=20%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=19-23%TG=20%CD=S)

# 3Com Switch 4200G 24-Port Software Version 3Com OS V3.01.00s56
# Quadway s5600 series, VRP software, Version 3.10, Release 1510P02
Fingerprint 3Com 4200G or Huawei Quidway S5600 switch
Class 3Com | embedded || switch
Class Huawei | VRP | 3.X | switch
CPE cpe:/o:huawei:vrp:3 auto
SEQ(SP=FB-107%GCD=1-6%ISR=100-110%TI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4%O2=M5B4%O3=M5B4%O4=M5B4%O5=M5B4%O6=M5B4)
WIN(W1=2000%W2=2000%W3=2000%W4=2000%W5=2000%W6=2000)
ECN(R=Y%DF=N%T=FA-104%TG=FF%W=2000%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=FA-104%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=FA-104%TG=FF%W=1FC4%S=O%A=O%F=A%O=%RD=0%Q=)
T4(R=Y%DF=N%T=FA-104%TG=FF%W=2000%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# Huawei S3928P-EI switch VRP software, Version 3.10
# 3Com Switch 4210 26-Port Software Version 3Com OS V3.01.01s56, Bootrom Version is 4.01
# Quidway S5624F, VRP software, Version 3.10, Release 1510P02
Fingerprint 3Com 4210, or Huawei Quidway S3928P-EI or S5624F switch (VRP 3.10)
Class 3Com | embedded || switch
Class Huawei | VRP | 3.X | switch
CPE cpe:/o:huawei:vrp:3 auto
SEQ(SP=FF-109%GCD=1-6%ISR=105-111%TI=I%II=I%SS=S%TS=U)
OPS(O1=M200%O2=M200%O3=M200%O4=M200%O5=M200%O6=M200)
WIN(W1=2000%W2=2000%W3=2000%W4=2000%W5=2000%W6=2000)
ECN(R=Y%DF=N%T=100%TG=FF%W=2000%O=M200%CC=N%Q=)
T1(R=Y%DF=N%T=100%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=100%TG=FF%W=1FC4%S=O%A=O%F=A%O=%RD=0%Q=)
T4(R=Y%DF=N%T=100%TG=FF%W=2000%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=100%TG=FF%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=100%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=100%TG=FF%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=100%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=100%TG=FF%CD=S)

# 3com 4500G P.O.E switch
Fingerprint 3Com 4500G switch
Class 3Com | embedded || switch
CPE cpe:/h:3com:4500g auto
SEQ(SP=C1-CD%GCD=1-6%ISR=CD-D9%TI=I%CI=I%TS=U)
OPS(O1=M5B4%O2=M5B4%O3=M5B4%O4=M5B4%O5=M5B4%O6=M5B4)
WIN(W1=2000%W2=2000%W3=2000%W4=2000%W5=2000%W6=2000)
ECN(R=Y%DF=N%T=FA-104%TG=FF%W=2000%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=FA-104%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=FA-104%TG=FF%W=1FC4%S=O%A=O%F=A%O=%RD=0%Q=)
T4(R=Y%DF=N%T=FA-104%TG=FF%W=2000%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(R=N)

# 3Com Switch 5500-EI 28-Port Software Version 3Com OS V3.03.02s168ep05
# 3Com SuperStack 4 Switch 5500G-EI 24-Port Software Version 3Com OS V3.02.04s56
Fingerprint 3Com 5500-EI switch
Class 3Com | embedded || switch
CPE cpe:/h:3com:5500-ei auto
SEQ(SP=FC-106%GCD=1-6%ISR=100-10F%TI=I%II=I%SS=S%TS=U)
OPS(O1=M200%O2=M200%O3=M200%O4=M200%O5=M200%O6=M200)
WIN(W1=2000%W2=2000%W3=2000%W4=2000%W5=2000%W6=2000)
ECN(R=Y%DF=N%T=FA-104%TG=FF%W=2000%O=M200%CC=N%Q=)
T1(R=Y%DF=N%T=FA-104%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=N)
T7(R=N)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# 3COM 5500-ei switch
Fingerprint 3Com 5500-EI switch
Class 3Com | embedded || switch
CPE cpe:/h:3com:5500-ei auto
SEQ(SP=B-15%GCD=FA00|1F400|2EE00|3E800|4E200%ISR=96-A0%TI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4%O2=M5B4%O3=M5B4%O4=M5B4%O5=M5B4%O6=M5B4)
WIN(W1=2000%W2=2000%W3=2000%W4=2000%W5=2000%W6=2000)
ECN(R=Y%DF=N%T=FB-105%TG=FF%W=2000%O=M5B4%CC=N)
T1(R=Y%DF=N%T=FB-105%TG=FF%S=O%A=O|S+%F=AS%RD=0)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=Z%A=S+%F=AR%RD=0)
T6(R=N)
T7(R=N)
U1(DF=N%T=FB-105%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=FB-105%TG=FF%CD=S)

# 3Com 8810 with 3Com 3C17508 360GB Fabric. SW Version: 3.01.31r. Also known as: Huawei Quidway S8500.
Fingerprint 3Com 8810 switch
Class 3Com | embedded || switch
CPE cpe:/h:3com:8810 auto
SEQ(SP=C-16%GCD=FA00|1F400|2EE00|3E800|4E200%ISR=97-A1%TI=I%II=RI%SS=S%TS=U)
OPS(O1=M5B4%O2=M5B4%O3=M5B4%O4=M5B4%O5=M5B4%O6=M5B4)
WIN(W1=2000%W2=2000%W3=2000%W4=2000%W5=2000%W6=2000)
ECN(R=Y%DF=N%T=100%TG=FF%W=2000%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=100%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=100%TG=FF%W=1FC4%S=O%A=O%F=A%O=%RD=0%Q=)
T4(R=Y%DF=N%T=100%TG=FF%W=2000%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=100%TG=FF%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=100%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=100%TG=FF%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=100%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=100%TG=FF%CD=S)

# 3Com Baseline Switch 2226-SFP Plus / 3CBLSF26
Fingerprint 3Com Baseline Switch 2226-SFP Plus
Class 3Com | embedded || switch
CPE cpe:/h:3com:baseline_switch_2226-sfp_plus
SEQ(SP=8C-96%GCD=1-6%ISR=92-9C%TI=I%II=RI%SS=O|S%TS=1)
OPS(O1=M5B4NW0NNT11%O2=M5B4NW0NNT11%O3=M5B4NW0NNT11%O4=M5B4NW0NNT11%O5=M5B4NW0NNT11%O6=M5B4NNT11)
WIN(W1=3908%W2=3908%W3=3908%W4=3908%W5=3908%W6=3908)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=3908%O=M5B4NW0%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=3B-45%TG=40%W=3908%S=O%A=S+%F=AS%O=M5B4NW0NNT11NNLLLLLLLLLL|M5B4NW0NNT11W2DW2DNNLLLL%RD=0%Q=)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Baseline Switch 2250-SFP Plus
# Baseline Switch 2250-SFP Plus
Fingerprint 3Com Baseline Switch 2250-SFP Plus
Class 3Com | embedded || switch
CPE cpe:/h:3com:baseline_switch_2250-sfp_plus
SEQ(SP=90-A0%GCD=1-6%ISR=97-A1%TI=I%CI=I%II=I%SS=S%TS=1)
OPS(O1=M5A8NW0NNT11%O2=M5A8NW0NNT11%O3=M5A8NW0NNT11%O4=M5A8NW0NNT11%O5=M5A8NW0NNT11%O6=M5A8NNT11)
WIN(W1=43E0%W2=4110%W3=423C%W4=43E0%W5=4180%W6=403D)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=4470%O=M5B4NW0%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=3B-45%TG=40%W=403D%S=O%A=S+%F=AS%O=M5A8NW0NNT11%RD=0%Q=)
T4(R=Y%DF=N%T=3B-45%TG=40%W=4000%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=3401%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# Baseline Switch 2924-SFP Plus
# Cisco ESW 520 "Small Business Pro" managed switch. OS Version: 2.0.3
Fingerprint 3Com Baseline Switch 2924-SFP or Cisco ESW-520 switch
Class 3Com | embedded || switch
CPE cpe:/h:3com:baseline_switch_2924-sfp
Class Cisco | embedded || switch
CPE cpe:/h:cisco:esw-520
SEQ(SP=FD-10D%GCD=1-6%ISR=FA-112%TI=RD%CI=RD|RI%II=RI%TS=U)
OPS(O1=%O2=%O3=%O4=%O5=%O6=)
WIN(W1=100%W2=100%W3=100%W4=100%W5=100%W6=100)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=100%O=%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=3B-45%TG=40%W=100%S=O%A=S+%F=AS%O=%RD=0%Q=)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# 3Com SuperStack 3 Switch 3300
Fingerprint 3Com SuperStack 3 Switch 3300
Class 3Com | embedded || switch
CPE cpe:/h:3com:superstack_3_switch_3300 auto
SEQ(SP=0-5%GCD=0%ISR=0-5%TI=I%CI=I%II=I%SS=S%TS=U)
OPS(O1=M218%O2=M218%O3=M218%O4=M218%O5=M218%O6=M218)
WIN(W1=400%W2=400%W3=400%W4=400%W5=400%W6=400)
ECN(R=Y%DF=N%T=FA-104%TG=FF%W=400%O=M218%CC=N%Q=)
T1(R=Y%DF=N%T=FA-104%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=APR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=FA-104%TG=FF%W=400%S=O%A=S+%F=AS%O=M218%RD=0%Q=)
T4(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=APR%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S+%F=APR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=APR%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=APR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=5493%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=FA-104%TG=FF%CD=S)

# Switch 3300TM, Software Version: 2.69, Boot PROM Version: 1.00
# Switch 3300SM 3C16987A
Fingerprint 3Com SuperStack 3 Switch 3300 TM
Class 3Com | embedded || switch
CPE cpe:/h:3com:superstack_3_switch_3300_tm auto
SEQ(SP=0%GCD=0%ISR=0%TI=I%CI=I%II=I%SS=S%TS=U)
OPS(O1=M59C%O2=M59C%O3=M59C%O4=M59C%O5=M59C%O6=M59C)
WIN(W1=400%W2=400%W3=400%W4=400%W5=400%W6=400)
ECN(R=Y%DF=N%T=FA-104%TG=FF%W=400%O=M59C%CC=N%Q=)
T1(R=Y%DF=N%T=FA-104%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=APR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=FA-104%TG=FF%W=400%S=O%A=S+%F=AS%O=M59C%RD=0%Q=)
T4(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=APR%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S+%F=APR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=APR%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=APR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=>0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=FA-104%TG=FF%CD=S)

# 3Com SuperStack 3 Switch 3300XM
Fingerprint 3Com SuperStack 3 Switch 3300 XM
Class 3Com | embedded || switch
CPE cpe:/h:3com:superstack_3_switch_3300_xm auto
SEQ(SP=0-5%GCD=0%ISR=0-5%TI=I%CI=I%II=I%SS=S%TS=U)
OPS(O1=M218%O2=M218%O3=M218%O4=M218%O5=M218%O6=M218)
WIN(W1=400%W2=400%W3=400%W4=400%W5=400%W6=400)
ECN(R=Y%DF=N%T=FA-104%TG=FF%W=400%O=M218%CC=N%Q=)
T1(R=Y%DF=N%T=FA-104%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=APR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=FA-104%TG=FF%W=400%S=O%A=S+%F=AS%O=M218%RD=0%Q=)
T4(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=APR%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S+%F=APR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=APR%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=APR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=B2D%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=FA-104%TG=FF%CD=S)

#  Device type: switch.   Running: 3Com embedded.
# OS details: 3Com Superstack 3, 3300XM switch , Boot PROM Version:  1.00, Software Version:  2.69, Hardware Version:  0
Fingerprint 3Com SuperStack 3 Switch 3300 XM
Class 3Com | embedded || switch
CPE cpe:/h:3com:superstack_3_switch_3300_xm auto
SEQ(SP=0%GCD=1-6%ISR=0%TI=I%CI=I%II=I%SS=S%TS=U)
OPS(O1=M59C%O2=M59C%O3=M59C%O4=M59C%O5=M59C%O6=M59C)
WIN(W1=400%W2=400%W3=400%W4=400%W5=400%W6=400)
ECN(R=Y%DF=N%T=FA-104%TG=FF%W=400%O=M59C%CC=N%Q=)
T1(R=Y%DF=N%T=FA-104%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=APR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=FA-104%TG=FF%W=400%S=O%A=S+%F=AS%O=M59C%RD=0%Q=)
T4(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=APR%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S+%F=APR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=APR%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=APR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=>0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=FA-104%TG=FF%CD=S)

# 3300 XM 24 Port
Fingerprint 3Com SuperStack 3 Switch 3300 XM
Class 3Com | embedded || switch
CPE cpe:/h:3com:superstack_3_switch_3300_xm auto
SEQ(SP=0-5%GCD=0%ISR=0-5%TI=I%CI=I%II=I%SS=S%TS=U)
OPS(O1=M218%O2=M218%O3=M218%O4=M218%O5=M218%O6=M218)
WIN(W1=400%W2=400%W3=400%W4=400%W5=400%W6=400)
ECN(R=Y%DF=N%T=FA-104%TG=FF%W=400%O=M218%CC=N%Q=)
T1(R=Y%DF=N%T=FA-104%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=APR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=FA-104%TG=FF%W=400%S=O%A=S+%F=AS%O=M218%RD=0%Q=)
T4(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=APR%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S+%F=APR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=APR%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=APR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=BABA%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=FA-104%TG=FF%CD=S)

# 3Com SuperStack 3, Operational Version: 3.04, Boot Version: 2.03
# SuperStack Switch 4200
# 3Com SuperStack 3 Switch 4400 SE
Fingerprint 3Com SuperStack 3 Switch 3300 XM, 4200, or 4400 SE
Class 3Com | embedded || switch
CPE cpe:/h:3com:superstack_3_switch_3300_xm
CPE cpe:/h:3com:superstack_3_switch_4200
CPE cpe:/h:3com:superstack_3_switch_4200_se
SEQ(SP=1E-6A%GCD=1-6%ISR=4B-55%TI=I%CI=I%II=I%SS=S%TS=U)
OPS(O1=M218%O2=M218%O3=M218%O4=M218%O5=M218%O6=M218)
WIN(W1=400%W2=400%W3=400%W4=400%W5=400%W6=400)
ECN(R=Y%DF=N%T=FA-104%TG=FF%W=400%O=M218%CC=N%Q=)
T1(R=Y%DF=N%T=FA-104%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=APR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=FA-104%TG=FF%W=400%S=O%A=S+%F=AS%O=M218%RD=0%Q=)
T4(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=APR%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S+%F=APR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=APR%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=APR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=BABA%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=FA-104%TG=FF%CD=S)

# 3Com Switch 3812; Software Version  1.10
Fingerprint 3Com SuperStack 3 Switch 3812
Class 3Com | embedded || switch
CPE cpe:/h:3com:superstack_3_switch_3812 auto
SEQ(SP=8E-98%GCD=1-6%ISR=92-9C%TI=I%CI=I%II=RI%SS=S%TS=1)
OPS(O1=M5B4NW0NNT11%O2=M5B4NW0NNT11%O3=M5B4NW0NNT11%O4=M5B4NW0NNT11%O5=M5B4NW0NNT11%O6=M5B4NNT11)
WIN(W1=2000%W2=2000%W3=2000%W4=2000%W5=2000%W6=2000)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=2000%O=M5B4NW0%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=3B-45%TG=40%W=2000%S=O%A=S+%F=AS%O=M5B4NW0NNT11NNLLLLLLLLLL|M5B4NW0NNT11NNLLLLLLLNLL%RD=0%Q=)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# 3Com 3870 Switch 3CR17451-91
Fingerprint 3Com SuperStack 3 Switch 3870
Class 3Com | embedded || switch
CPE cpe:/h:3com:superstack_3_switch_3870 auto
SEQ(SP=88-92%GCD=1-6%ISR=90-9A%TI=I%CI=I%II=RI%SS=O)
OPS(R=N)
WIN(R=N)
ECN(R=N)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# 3Com SuperStack 3 4226T, Hardware Version: 01.01.00, Software Version: 3.00, Boot Version: 1.00
# 3Com Super Stack Switch 4200
# 3Com SuperStack 3, Hardware Version: 04.01.01, Boot Version: 2.03
# 3COM 3C17302A switch
# 3Com SuperStack 3, Operational Version: 3.00
Fingerprint 3Com SuperStack 3 Switch 4200 or 4226T
Class 3Com | embedded || switch
CPE cpe:/h:3com:superstack_3_switch_4200
CPE cpe:/h:3com:superstack_3_switch_4200t
SEQ(SP=2E-50%GCD=1-8|5C|B8|114|170|1CC%ISR=4A-54%TI=I%II=I%SS=S%TS=U)
OPS(O1=M598%O2=M598%O3=M598%O4=M598%O5=M598%O6=M598)
WIN(W1=400%W2=400%W3=400%W4=400%W5=400%W6=400)
ECN(R=Y%DF=N%T=FA-104%TG=FF%W=400%O=M598%CC=N%Q=)
T1(R=Y%DF=N%T=FA-104%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=APR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=FA-104%TG=FF%W=400%S=O%A=S+%F=AS%O=M598%RD=0%Q=)
T4(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=APR%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S+%F=APR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=APR%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=APR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=BABA%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=FA-104%TG=FF%CD=S)

# 3Com SuperStack3 4400 switch
Fingerprint 3Com SuperStack 3 Switch 4400
Class 3Com | embedded || switch
CPE cpe:/h:3com:superstack_3_switch_4400 auto
SEQ(SP=0-8D%GCD=1-6|8|58|B0|108|160|1B8%ISR=48-52%TI=I%II=I%SS=S%TS=U)
OPS(O1=M594%O2=M594%O3=M594%O4=M594%O5=M594%O6=M594)
WIN(W1=400%W2=400%W3=400%W4=400%W5=400%W6=400)
ECN(R=Y%DF=N%T=FA-104%TG=FF%W=400%O=M594%CC=N%Q=)
T1(R=Y%DF=N%T=FA-104%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=APR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=FA-104%TG=FF%W=400%S=O%A=S+%F=AS%O=M594%RD=0%Q=)
T4(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=APR%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S+%F=APR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=APR%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=APR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=BABA%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=FA-104%TG=FF%CD=S)

# 3Com SuperStack 3 Switch 4400 SE
Fingerprint 3Com SuperStack 3 Switch 4400 SE
Class 3Com | embedded || switch
CPE cpe:/h:3com:superstack_3_switch_4400_se auto
SEQ(SP=0-5%ISR=0-5%GCD=0%TI=I%II=I%SS=S%TS=U)
OPS(O1=M594%O2=M594%O3=M594%O4=M594%O5=M594%O6=M594)
WIN(W1=400%W2=400%W3=400%W4=400%W5=400%W6=400)
ECN(R=Y%DF=N%T=FA-104%TG=FF%W=400%O=M594%CC=N%Q=)
T1(R=Y%DF=N%T=FA-104%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=APR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=FA-104%TG=FF%W=400%S=O%A=S+%F=AS%O=M594%RD=0%Q=)
T4(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=APR%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S+%F=APR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=APR%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=APR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=BABA%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=FA-104%TG=FF%CD=S)

# 3Com SuperStack 3 Switch 4400 SE
Fingerprint 3Com SuperStack 3 Switch 4400 SE
Class 3Com | embedded || switch
CPE cpe:/h:3com:superstack_3_switch_4400_se auto
SEQ(SP=45-4F%GCD=1-6%ISR=4B-55%TI=I%II=I%SS=S%TS=U)
OPS(O1=M218%O2=M218%O3=M218%O4=M218%O5=M218%O6=M218)
WIN(W1=400%W2=400%W3=400%W4=400%W5=400%W6=400)
ECN(R=Y%DF=N%T=FA-104%TG=FF%W=400%O=M218%CC=N%Q=)
T1(R=Y%DF=N%T=FA-104%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S+%F=APR%O=%RD=0%Q=)
T6(R=N)
T7(R=N)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=BABA%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=FA-104%TG=FF%CD=S)

# 3Com 5500G-EI 48 Port
# super stack 3 4500  50 port managed switch
Fingerprint 3Com SuperStack 3 Switch 4500
Class 3Com | embedded || switch
CPE cpe:/h:3com:superstack_3_switch_4500 auto
SEQ(SP=FB-10D%GCD=1-6%ISR=107-111%TI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4%O2=M5B4%O3=M5B4%O4=M5B4%O5=M5B4%O6=M5B4)
WIN(W1=2000%W2=2000%W3=2000%W4=2000%W5=2000%W6=2000)
ECN(R=Y%DF=N%T=100%TG=FF%W=2000%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=100%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=100%TG=FF%W=1FC4%S=O%A=O%F=A%O=%RD=0%Q=)
T4(R=Y%DF=N%T=100%TG=FF%W=2000%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=100%TG=FF%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=100%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=100%TG=FF%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=100%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=100%TG=FF%CD=S)

# 3Com SuperStack 3 Switch 4500 Software Version 3Com OS V3.01.00s168
Fingerprint 3Com SuperStack 3 Switch 4500
Class 3Com | embedded || switch
CPE cpe:/h:3com:superstack_3_switch_4500 auto
SEQ(SP=B-1B%GCD=FA00|1F400|2EE00|3E800|4E200%ISR=96-A0%TI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4%O2=M5B4%O3=M5B4%O4=M5B4%O5=M5B4%O6=M5B4)
WIN(W1=2000%W2=2000%W3=2000%W4=2000%W5=2000%W6=2000)
ECN(R=Y%DF=N%T=FB-105%TG=FF%W=2000%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=FB-105%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=FB-105%TG=FF%W=1FC4%S=O%A=O%F=A%O=%RD=0%Q=)
T4(R=N)
T5(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=N)
T7(R=N)
U1(DF=N%T=FB-105%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=FB-105%TG=FF%CD=S)

# 3Com SuperStack 3 Switch 4500 PWR 26-Port, Software Version:  3.01.00s56op01, Bootrom Version:  1.01, Hardware Version:  00.00.00
# Huawei Quidway 18-32 ADSL Router, Versatile Routing Platform Software VRP(R) software, Version 3.30, Release 002
Fingerprint 3Com SuperStack 3 Switch 4500 or Huawei Quidway AR 18-32 ADSL router
Class 3Com | embedded || switch
Class Huawei | VRP | 3.X | broadband router
CPE cpe:/o:huawei:vrp:3 auto
SEQ(SP=B-15%GCD=FA00|1F400|2EE00|3E800|4E200%ISR=97-A1%TI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4%O2=M5B4%O3=M5B4%O4=M5B4%O5=M5B4%O6=M5B4)
WIN(W1=2000%W2=2000%W3=2000%W4=2000%W5=2000%W6=2000)
ECN(R=Y%DF=N%T=100%TG=FF%W=2000%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=100%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=100%TG=FF%W=1FC4%S=O%A=O%F=A%O=%RD=0%Q=)
T4(R=Y%DF=N%T=100%TG=FF%W=2000%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=100%TG=FF%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=100%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=100%TG=FF%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=100%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=100%TG=FF%CD=S)

# 3Com SuperStack II Switch 3300
Fingerprint 3Com SuperStack II Switch 3300
Class 3Com | embedded || switch
CPE cpe:/h:3com:superstack_ii_3300 auto
SEQ(SP=0-5%GCD=0%ISR=0-5%TI=I%CI=I%II=I%SS=S%TS=U)
OPS(O1=M218%O2=M218%O3=M218%O4=M218%O5=M218%O6=M218)
WIN(W1=400%W2=400%W3=400%W4=400%W5=400%W6=400)
ECN(R=Y%DF=N%T=FA-104%TG=FF%W=400%O=M218%CC=N%Q=)
T1(R=Y%DF=N%T=FA-104%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=APR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=FA-104%TG=FF%W=400%S=O%A=S+%F=AS%O=M218%RD=0%Q=)
T4(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=APR%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S+%F=APR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=APR%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=APR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=99DF%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=FA-104%TG=FF%CD=S)

# 3Com SuperStack II Switch 3900-36 version 3.0.1
# 3com SuperStack II Switch 3900-36 (rev CA) firmware version: 3.0.5-7
Fingerprint 3Com SuperStack II Switch 3900-36
Class 3Com | embedded || switch
CPE cpe:/h:3com:superstack_ii_3900-36 auto
SEQ(SP=B-15%GCD=FA00|1F400|2EE00|3E800|4E200|5DC00%ISR=97-A1%TI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4%O2=M5B4%O3=M5B4%O4=M5B4%O5=M5B4%O6=M5B4)
WIN(W1=1000%W2=1000%W3=1000%W4=1000%W5=1000%W6=1000)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=1000%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=3B-45%TG=40%W=1000%S=O%A=O%F=A%O=%RD=0%Q=)
T4(R=Y%DF=N%T=3B-45%TG=40%W=1000%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=Z%RUCK=0%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# 3com SuperStack Switch 4200 (PN 3C17302), Software Version 02.10, Hardware Version 02.07.00, Boot Version 1.02
Fingerprint 3Com SuperStack Switch 4200
Class 3Com | embedded || switch
CPE cpe:/h:3com:superstack_switch_4200 auto
SEQ(SP=0-5%GCD=1-6%ISR=0-5%TI=I%II=I%SS=S%TS=U)
OPS(O1=M598%O2=M598%O3=M598%O4=M598%O5=M598%O6=M598)
WIN(W1=400%W2=400%W3=400%W4=400%W5=400%W6=400)
ECN(R=Y%DF=N%T=FA-104%TG=FF%W=400%O=M598%CC=N%Q=)
T1(R=Y%DF=N%T=FA-104%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=APR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=FA-104%TG=FF%W=400%S=O%A=S+%F=AS%O=M598%RD=0%Q=)
T4(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=APR%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S+%F=APR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=APR%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=APR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=BABA%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=FA-104%TG=FF%CD=S)

# 3Com Switch 4200, Software Version: 02.03
Fingerprint 3Com Switch 4200
Class 3Com | embedded || switch
CPE cpe:/h:3com:switch_4200 auto
SEQ(SP=0-5%GCD=0%ISR=0-5%TI=I%CI=I%II=I%SS=S%TS=U)
OPS(O1=M598%O2=M598%O3=M598%O4=M598%O5=M598%O6=M598)
WIN(W1=400%W2=400%W3=400%W4=400%W5=400%W6=400)
ECN(R=Y%DF=N%T=FA-104%TG=FF%W=400%O=M598%CC=N%Q=)
T1(R=Y%DF=N%T=FA-104%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=APR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=FA-104%TG=FF%W=400%S=O%A=S+%F=AS%O=M598%RD=0%Q=)
T4(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=APR%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S+%F=APR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=APR%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=APR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=BABA%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=FA-104%TG=FF%CD=S)

# Lanswitch Platform Software Version COMWAREV300R002B16D019SP11 Switch 4200G PWR 24-Port Software Version V200R002B61D005SP01
Fingerprint 3Com Switch 4200G
Class 3Com | embedded || switch
CPE cpe:/h:3com:switch_4200g auto
SEQ(SP=F9-103%GCD=1-6%ISR=109-113%TI=I%CI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4%O2=M5B4%O3=M5B4%O4=M5B4%O5=M5B4%O6=M5B4)
WIN(W1=2000%W2=2000%W3=2000%W4=2000%W5=2000%W6=2000)
ECN(R=Y%DF=N%T=FA-104%TG=FF%W=2000%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=FA-104%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# Wireless 7760 11a/b/g Access Point, Firmware Version  :         AP software 1.6.44 Built on Apr 17, 2009
Fingerprint 3Com 7760 WAP
Class 3Com | embedded || WAP
CPE cpe:/h:3com:7760 auto
SEQ(SP=14-1E%GCD=FA00|1F400|2EE00|3E800|4E200%ISR=99-A3%TI=I%II=I%SS=S%TS=1)
OPS(O1=M5B4NW0NNT11%O2=M5B4NW0NNT11%O3=M5B4NW0NNT11%O4=M5B4NW0NNT11%O5=M5B4NW0NNT11%O6=M5B4NNT11)
WIN(W1=2000%W2=2000%W3=2000%W4=2000%W5=2000%W6=2000)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=2000%O=M5B4NW0%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=N)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=I%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# 3CRWDR100A-72, Software version 2.06T13 (Apr 25 2007 17:06:30), Boot loader version 0.67.3, ADSL modem version 07.00.04.00A
Fingerprint 3Com OfficeConnect 3CRWDR100A-72 wireless ADSL modem
Class 3Com | embedded || WAP
CPE cpe:/h:3com:officeconnect_3crwdr100a-72 auto
SEQ(SP=0-5%GCD=A|14|1E|28|32%ISR=30-3A%TI=I|RD%II=I%SS=S%TS=U)
OPS(O1=M578%O2=M578%O3=M280%O4=M578%O5=M218%O6=M109)
WIN(W1=1770%W2=1770%W3=1770%W4=1770%W5=1770%W6=1770)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=1770%O=M578%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=O|S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=O%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=O%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N|Y%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N|S%T=3B-45%TG=40%CD=Z)

# 3Com OfficeConnect Wireless 11g Cable/DSL Router (3CRWE554G72T/3CRWE554G72TU), Version 2.01.05
Fingerprint 3Com OfficeConnect 3CRWE554G72T wireless broadband router
Class 3Com | embedded || WAP
CPE cpe:/h:3com:officeconnect_3crwe554g72t auto
SEQ(SP=8F-99%GCD=1-6%ISR=94-9E%TI=I|RD%II=I%SS=S%TS=1)
OPS(O1=M5B4NW0NNT11%O2=M5B4NW0NNT11%O3=M5B4NW0NNT11%O4=M5B4NW0NNT11%O5=M5B4NW0NNT11%O6=M5B4NNT11)
WIN(W1=2238%W2=20D0%W3=2080%W4=2000%W5=2180%W6=2017)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=2238%O=M5B4NW0%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=O|S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=3B-45%TG=40%W=2000%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=15C%RID=4210%RIPCK=Z%RUCK=0%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# 3Com 3CRWER100-75 firmware 1.3
# 2.6.30.9 Kernel running on RTL8196C
Fingerprint 3Com OfficeConnect 3CRWER100-75 wireless broadband router
Class 3Com | embedded || WAP
CPE cpe:/h:3com:officeconnect_3crwer100-75 auto
SEQ(SP=C3-D1%GCD=1-6%ISR=C0-DA%TI=Z%CI=Z%II=I%TS=7)
OPS(O1=M5ACST11%O2=M5ACST11%O3=M5ACNNT11%O4=M5ACST11%O5=M5ACST11%O6=M5ACST11)
WIN(W1=1680%W2=1680%W3=1680%W4=1680%W5=1680%W6=1680)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=16B0%O=M5ACNNS%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=1680%S=O%A=S+%F=AS%O=M5ACST11%RD=0%Q=)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# 3com OfficeConnect wirless router 3CRWER100-75 firmware 1.2.0
Fingerprint 3Com OfficeConnect 3CRWER100-75 wireless router
Class 3Com | embedded || WAP
CPE cpe:/h:3com:officeconnect_3crwer100-75 auto
SEQ(SP=B1-BB%GCD=1-6%ISR=C4-CE%TI=Z%II=I%TS=7)
OPS(O1=M5B4ST11%O2=M5B4ST11%O3=M5B4NNT11%O4=M5B4ST11%O5=M5B4ST11%O6=M5B4ST11)
WIN(W1=16A0%W2=16A0%W3=16A0%W4=16A0%W5=16A0%W6=16A0)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=16D0%O=M5B4NNS%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=16A0%S=O%A=S+%F=AS%O=M5B4ST11%RD=0%Q=)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# 3Com Wireless LAN Switch (3Com WX1200).
Fingerprint 3Com WX1200 Wireless LAN Switch
Class 3Com | embedded || WAP
SEQ(SP=C7-D1%GCD=2|4|6|8|A%ISR=DA-E4%TI=Z%CI=Z%II=Z%TS=U)
OPS(O1=M5B4%O2=M578%O3=M280%O4=M5B4%O5=M218%O6=M109)
WIN(W1=2DA0%W2=2DA0%W3=2DA0%W4=2DA0%W5=2DA0%W6=2DA0)
ECN(R=Y%DF=N%T=FA-104%TG=FF%W=2DA0%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=FA-104%TG=FF%S=A%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S+%F=AR%O=%RD=0%Q=)
T4(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=FA-104%TG=FF%CD=Z)

# Enterasys Wireless Switch RBT-8400, 7.0.9.8 REL
# 3Com WX2200 running firmware 7.0.5.6.0
# Trapeze Networks Mobility Exchange (MX) Wireless Security Switch, now called the Juniper Wireless LAN Controller (WLC)
Fingerprint 3Com WX2200, Enterasys RBT-8400, or Trapeze Networks MX WAP
Class 3Com | embedded || WAP
Class Enterasys | embedded || WAP
Class Trapeze Networks | embedded || WAP
SEQ(SP=C4-D0%GCD=1-6%ISR=DC-E6%TI=Z%CI=Z%II=Z%TS=U)
OPS(O1=M5B4%O2=M578%O3=M280%O4=M5B4%O5=M218%O6=M109)
WIN(W1=2DA0%W2=2DA0%W3=2DA0%W4=2DA0%W5=2DA0%W6=2DA0)
ECN(R=Y%DF=N%T=FA-104%TG=FF%W=2DA0%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=FA-104%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A+%A=S%F=AR%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=FA-104%TG=FF%CD=Z)

# Philips SNB6500 wireless router - Runtime Code Version V1.09 (Dec 6 2005 14:30:34)
# 3Com OfficeConnect ADSL Wireless 11g Firewall Router, 3Com code 3CRWDR100A-72, software version 2.06
# Sinus 154 DSL Basic 3 router (German Telekom)
# SMCWEBT-G, access point with SMC firmware V1.07.2 (English, 09/18/2006)
# SMCWBR14-G2
# 3Com OfficeConnect ADSL router, wireless 54Mbit
Fingerprint Wireless broadband router (3Com OfficeConnect 3CRWDR100A-72, Philips SNB6500, Sinus 154, SMC SMCWEBT-G, or SMC SMCWBR14-G2)
Class 3Com | embedded || WAP
Class Philips | embedded || WAP
Class Sinus | embedded || WAP
Class SMC | embedded || WAP
SEQ(SP=0-1F%GCD=1-6|A|14|1E|28|32|3C%ISR=30-3A%TI=I%II=I%SS=S%TS=U)
OPS(O1=M578%O2=M578%O3=M280%O4=M578%O5=M218%O6=M109)
WIN(W1=1770%W2=1770%W3=1770%W4=1770%W5=1770%W6=1770)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=1770%O=M578%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=1770%S=O%A=S+%F=AS%O=M109%RD=0%Q=)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=O%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=O%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N|Y%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N|O|S|Y%T=3B-45%TG=40%CD=Z)

# 3Com NBX 100. VxWorks: http://www.3com.com/products/en_US/detail.jsp?tab=features&pathtype=purchase&sku=WEBBNGNBX100COMSYS
Fingerprint 3Com NBX 100 VoIP adapter (VxWorks)
Class 3Com | VxWorks || VoIP adapter
CPE cpe:/h:3com:nbx_100
CPE cpe:/o:3com:vxworks auto
SEQ(SP=13-1D%GCD=FA00|1F400|2EE00|3E800|4E200%ISR=98-A2%TI=I%II=I%SS=S%TS=1)
OPS(O1=M5C2NW0NNT11%O2=M5C2NW0NNT11%O3=M5C2NW0NNT11%O4=M5C2NW0NNT11%O5=M5C2NW0NNT11%O6=M5C2NNT11)
WIN(W1=2000%W2=2000%W3=2000%W4=2000%W5=2000%W6=2000)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=2000%O=M5C2NW0%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=3B-45%TG=40%W=2000%S=O%A=O%F=A%O=NNT11%RD=0%Q=)
T4(R=Y%DF=N%T=3B-45%TG=40%W=2000%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=4210%RIPCK=Z%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Radio Thermostat from Filtrete model CT50 V1.92 API version 113 Firmware version 1.04.72 www.radiothermostat.com
# 3M Radio Thermostat Company of America - Filterete 3m-50
Fingerprint 3M Filtrete 3M-50 thermostat
Class 3M | embedded || specialized
SEQ(SP=E9-101%GCD=1-6%ISR=E7-FB%TI=I%CI=I%II=I%SS=S%TS=A)
OPS(O1=M5B4NW0NNSNNT11%O2=M578NW0NNSNNT11%O3=M280NW0NNT11%O4=M5B4NW0NNSNNT11%O5=M218NW0NNSNNT11%O6=M109NNSNNT11)
WIN(W1=B50%W2=AD8%W3=9D0%W4=B50%W5=830%W6=8E5)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=B68%O=M5B4NW0NNS%CC=N)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%RD=0)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%RD=0)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%RD=0)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%RD=0)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=FA-104%TG=FF%CD=S)

# XSBoxGo+. The vendor is 4G Systems. 3G/WLAN router.
Fingerprint 4G Systems XSBoxGO+ WAP
Class 4G Systems | embedded || WAP
SEQ(SP=0-1C%GCD=1000|2000|3000|4000|5000|65000|CA000|12F000|194000|1F9000%ISR=AB-B5%TI=I%CI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4|M5B4W0L%O2=M578W0L%O3=M280W0L%O4=M5B4W0L%O5=M218W0L%O6=M109)
WIN(W1=4000%W2=4000%W3=4000%W4=4000%W5=4000%W6=4000)
ECN(R=Y%DF=N%T=FA-104%TG=FF%W=4000%O=M5B4%CC=N)
T1(R=Y%DF=N%T=FA-104%TG=FF%S=O%A=S+%F=AS%RD=0)
T2(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=Z%A=S%F=AR%O=T00LL%RD=0)
T3(R=Y%DF=N%T=FA-104%TG=FF%W=4000%S=O%A=S+%F=AS%O=M109|M109W0L%RD=0)
T4(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=T00LL%RD=0)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=Z%A=S+%F=AR%O=T00LL%RD=0)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=T00LL%RD=0)
T7(R=N)
U1(DF=N%T=FA-104%TG=FF%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=FA-104%TG=FF%CD=S)

# MS347S : see http://www.a-tecsubsystem.com/websys/atec/web/products.jsp?prodId=1191910612953
# Mapower KC 31N, usb/nas diskbox
Fingerprint A-Tec MS347S or Mapower KC31N NAS device
Class A-Tec | embedded || storage-misc
CPE cpe:/h:a-tec:ms347s
Class Mapower | embedded || storage-misc
CPE cpe:/h:mapower:kc31n auto
SEQ(SP=0-19%GCD=1-6%ISR=57-63%TI=I%CI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4%O2=M578%O3=M280%O4=M5B4%O5=M218%O6=M109)
WIN(W1=8000%W2=8000%W3=8000%W4=8000%W5=8000%W6=8000)
ECN(R=Y%DF=N%T=1B-25%TG=20%W=8000%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=1B-25%TG=20%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=1B-25%TG=20%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=1B-25%TG=20%W=8000%S=O%A=S+%F=AS%O=M109%RD=0%Q=)
T4(R=Y%DF=N%T=1B-25%TG=20%W=0%S=A%A=S%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=1B-25%TG=20%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=1B-25%TG=20%W=0%S=A%A=S%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=1B-25%TG=20%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=1B-25%TG=20%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=1B-25%TG=20%CD=S)

# Sun RSC Version 2.2.3, bootmon 2.0.0
# aastra 480i
Fingerprint Aastra 480i IP Phone or Sun Remote System Control (RSC)
Class Aastra | embedded || VoIP phone
Class Sun | embedded || remote management
SEQ(CI=I%II=I)
OPS(R=N)
WIN(R=N)
ECN(R=N)
T1(R=N)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=3B-45%TG=40%W=2000%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=Z%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# VoIP Deskphone. CT-57i
Fingerprint Aastra 57i VoIP phone
Class Aastra | embedded || VoIP phone
CPE cpe:/h:aastra:57i
SEQ(CI=RD%II=I)
OPS(O1=%O2=%O3=%O4=%O5=%O6=)
WIN(W1=0%W2=0%W3=0%W4=0%W5=0%W6=0)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=0%O=%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=Z%A=S+%F=AR%RD=0%Q=)
T2(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=70%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# AirPort Express, firmware 6.3
# Aastra 6731i Revision 0, Firmware Version 2.5.0.82
Fingerprint Aastra 6731i VoIP phone or Apple AirPort Express WAP
Class Aastra | embedded || VoIP phone
CPE cpe:/h:aastra:6731i
Class Apple | embedded || WAP
CPE cpe:/h:apple:airport_express
SEQ(CI=I%II=I)
OPS(R=N)
WIN(R=N)
ECN(R=N)
T1(R=N)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=70%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Aastra 6739i VoIP phone
Fingerprint Aastra 6739i VoIP phone
Class Aastra | embedded || VoIP phone
CPE cpe:/h:aastra:6739i
SEQ(SP=8C-96%GCD=1-6%ISR=98-A2%TI=I%CI=I%II=I%SS=S%TS=U)
OPS(O1=NNM5B4SNW0%O2=NNM5B4SNW0%O3=M5B4NW0%O4=NNM5B4SNW0%O5=NNM5B4SNW0%O6=NNM5B4S)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=NNM5B4SNW0%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S+%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S+%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=Z%A=S+%F=R%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=138%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=Z)

# Aastra A150 telephone system.
Fingerprint Aastra A510 VoIP phone
Class Aastra | embedded || VoIP phone
CPE cpe:/h:aastra:a510 auto
SEQ(SP=0-5%GCD=FA00|1F400|2EE00|3E800|4E200%ISR=94-9E%TI=I%CI=I%II=I%SS=O|S%TS=U)
OPS(R=N)
WIN(R=N)
ECN(R=N)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=O|S+%F=AS%RD=0)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%RD=0)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%RD=0)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%RD=0)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%RD=0)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Aastra Dialog 4425 VoIP Phone, firmware RK7
Fingerprint Aastra Dialog 4425 IP phone
Class Aastra | embedded || VoIP phone
SEQ(SP=FF-109%GCD=1-6%ISR=107-111%TI=I%CI=I%II=I%SS=S%TS=9)
OPS(O1=M5B4NW0NNT11%O2=M5B4NW0NNT11%O3=M5B4NW0NNT11%O4=M5B4NW0NNT11%O5=M5B4NW0NNT11%O6=M5B4NNT11)
WIN(W1=4000%W2=4000%W3=4000%W4=4000%W5=4000%W6=4000)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=4000%O=M5B4NW0%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=4000%S=O%A=S+%F=AS%O=M5B4NW0NNT11%RD=0%Q=)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=70%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Aastra/DeTeWe RFP L32 IP Poe DECT Basis Station. Software is Open Mobility Manager 1.1.4.
Fingerprint Aastra RFP L32 IP DECT WAP
Class Aastra | embedded || WAP
SEQ(SP=C2-CC%GCD=1-6%ISR=C8-D2%TI=Z%II=I%TS=8)
OPS(O1=M5B4ST11NW0%O2=M5B4ST11NW0%O3=M5B4NNT11NW0%O4=M5B4ST11NW0%O5=M5B4ST11NW0%O6=M5B4ST11)
WIN(W1=16A0%W2=16A0%W3=16A0%W4=16A0%W5=16A0%W6=16A0)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=16D0%O=M5B4NNSNW0%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=16A0%S=O%A=S+%F=AS%O=M5B4ST11NW0%RD=0%Q=)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# Aceex BR41 Broadband Router Firmware Version 2.2f
Fingerprint Aceex BR41 broadband router
Class Aceex | embedded || broadband router
CPE cpe:/h:aceex:br41 auto
SEQ(SP=0-35%GCD=1-6|B|16|21|2C|37|42%ISR=30-3A%TI=I%II=I%SS=S%TS=U)
OPS(O1=M578%O2=M578%O3=M280%O4=M578%O5=M218%O6=M109)
WIN(W1=800%W2=800%W3=800%W4=800%W5=800%W6=800)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=800%O=M578%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=800%S=O%A=S+%F=AS%O=M109%RD=0%Q=)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=O%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=O%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=Z)

# ACER Projector S5200
Fingerprint Acer S5200 projector
Class Acer | embedded || media device
SEQ(CI=I%II=I%TS=U)
OPS(O1=M5B4%O2=M5B4%O3=%O4=%O5=%O6=)
WIN(W1=7D0%W2=7D0%W3=0%W4=0%W5=0%W6=0)
ECN(R=Y%DF=N%T=63-65%TG=80%W=0%O=%CC=N%Q=)
T1(R=Y%DF=N%T=63-65%TG=80%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=63-65%TG=80%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=63-65%TG=80%W=0%S=A%A=S+%F=AR%O=%RD=0%Q=)
T4(R=Y%DF=N%T=63-65%TG=80%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
T5(R=Y%DF=N%T=63-65%TG=80%W=0%S=A%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=63-65%TG=80%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
T7(R=Y%DF=N%T=63-65%TG=80%W=0%S=A%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=63-65%TG=80%IPL=38%UN=8AFD%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=63-65%TG=80%CD=S)

# ACME Packet SBC Net-Net 4250 Firmware: SC6.2.0 MR-3
Fingerprint Acme Packet Net-Net 4250 VoIP session border controller
Class Acme Packet | embedded || firewall
SEQ(SP=FD-109%GCD=1-6%ISR=108-112%TI=I%CI=I%II=I%SS=S%TS=A)
OPS(O1=M5ACNW1NNT11%O2=M5ACNW1NNT11%O3=M5ACNW1NNT11%O4=M5ACNW1NNT11%O5=M5ACNW1NNT11%O6=M5ACNNT11)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M5ACNW1%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%S=O%A=S+%F=AS%O=M5ACNW1NNT11%RD=0%Q=)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(R=N)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Acorp-W422G, wireless ADSL router.
# Linux 2.4.17_mvl21-malta-mips_fp_le (root@home1.homework) (gcc version 2.95.3 20010315 (release/MontaVista)) #1 Sat Sep 8 00:03:33 MSD 2007, Acorp-W400G ADSL and Wi-Fi router,
Fingerprint Acorp W400G or W422G wireless ADSL modem (MontaVista embedded Linux 2.4.17)
Class Acorp | embedded || WAP
SEQ(SP=C2-CC%GCD=1-6%ISR=C7-D1%TI=Z%II=I%TS=7)
OPS(O1=M5B4ST11%O2=M5B4ST11%O3=M5B4NNT11%O4=M5B4ST11%O5=M5B4ST11%O6=M5B4ST11)
WIN(W1=16A0%W2=16A0%W3=16A0%W4=16A0%W5=16A0%W6=16A0)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=16D0%O=M5B4NNS%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=Y%DF=Y%T=FA-104%TG=FF%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=N)
T7(R=N)
U1(DF=N%T=FA-104%TG=FF%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=FA-104%TG=FF%CD=S)

# This is a GT701, which is issued by QWEST.
Fingerprint Actiontec GT701 DSL modem
Class Actiontec | embedded || broadband router
CPE cpe:/h:actiontec:gt701 auto
SEQ(SP=C8-D2%GCD=1-6%ISR=CC-D6%TI=Z%II=I%TS=7)
OPS(O1=M5B4ST11NW0%O2=M5B4ST11NW0%O3=M5B4NNT11NW0%O4=M5B4ST11NW0%O5=M5B4ST11NW0%O6=M5B4ST11)
WIN(W1=16A0%W2=16A0%W3=16A0%W4=16A0%W5=16A0%W6=16A0)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=16D0%O=M5B4NNSNW0%CC=Y%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=Y%DF=Y%T=FA-104%TG=FF%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=N)
T7(R=N)
U1(DF=N%T=FA-104%TG=FF%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=FA-104%TG=FF%CD=S)

# Actiontec Wireless Cable/DSL Router Model: R3010UW Firmware version: 1.0.10.0.76-R3010UW
Fingerprint Actiontec R3010UW wireless broadband router
Class Actiontec | embedded || WAP
CPE cpe:/h:actiontec:r3010uw auto
SEQ(SP=71-87%GCD=1-6%ISR=75-8F%TI=I%II=I%SS=S%TS=U)
OPS(O1=M109|M5A0%O2=M109|M578%O3=M109|M280%O4=M109|M280%O5=M109|M218%O6=M109)
WIN(W1=1194%W2=1194%W3=1194%W4=1194%W5=1194%W6=1194)
ECN(R=Y%DF=N%T=96-A0%TG=FF%W=1194%O=M109%CC=N%Q=)
T1(R=Y%DF=N%T=96-A0%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=96-A0%TG=FF%W=1194%S=A%A=Z%F=R%O=%RD=0%Q=)
T3(R=N)
T4(R=Y%DF=N%T=96-A0%TG=FF%W=1194%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=96-A0%TG=FF%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=96-A0%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=96-A0%TG=FF%W=0%S=Z%A=Z%F=R%O=%RD=0%Q=)
U1(DF=N%T=96-A0%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=96-A0%TG=FF%CD=S)

# Adaptec Model: 4000 series, Software: 3.1.603 (US), Hardware: 2.2.1, BIOS: 2.4.437
Fingerprint Adaptec RAID 4000 I/O controller
Class Adaptec | embedded || storage-misc
SEQ(SP=0-17%GCD=3200|6400|9600|C800|FA00|12C00%ISR=97-A1%TI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4%O2=M5B4%O3=M5B4%O4=M5B4%O5=M5B4%O6=M5B4)
WIN(W1=2238%W2=2238%W3=2238%W4=2238%W5=2238%W6=2238)
ECN(R=Y%DF=N%T=19-23%TG=20%W=2238%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=19-23%TG=20%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=19-23%TG=20%W=2238%S=O%A=O%F=A|AR%O=%RD=0%Q=)
T4(R=Y%DF=N%T=19-23%TG=20%W=2238%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=19-23%TG=20%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=19-23%TG=20%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=19-23%TG=20%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=4210%RIPCK=Z%RUCK=0%RUD=G)
IE(DFI=N%T=FA-104%TG=FF%CD=S)

# "Snap! Server" model 100
Fingerprint Adaptec Snap Server 100 NAS device
Class Adaptec | embedded || storage-misc
CPE cpe:/h:adaptec:snap_server_100 auto
SEQ(SP=C-16%GCD=3200|6400|9600|C800|FA00%ISR=96-A0%TI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4%O2=M5B4%O3=M5B4%O4=M5B4%O5=M5B4%O6=M5B4)
WIN(W1=2238%W2=2238%W3=2238%W4=2238%W5=2238%W6=2238)
ECN(R=Y%DF=N%T=1B-25%TG=20%W=2238%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=1B-25%TG=20%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=1B-25%TG=20%W=2238%S=O%A=O%F=A%O=%RD=0%Q=)
T4(R=Y%DF=N%T=1B-25%TG=20%W=2238%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=1B-25%TG=20%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=1B-25%TG=20%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=1B-25%TG=20%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(R=N)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# Snap Appliance Snap Server 1100
Fingerprint Adaptec Snap Server 100 NAS device
Class Adaptec | embedded || storage-misc
CPE cpe:/h:adaptec:snap_server_100 auto
SEQ(SP=D-17%GCD=3200|6400|9600|C800|FA00%ISR=97-A1%TI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4%O2=M5B4%O3=M5B4%O4=M5B4%O5=M5B4%O6=M5B4)
WIN(W1=2238%W2=2238%W3=2238%W4=2238%W5=2238%W6=2238)
ECN(R=Y%DF=N%T=19-23%TG=20%W=2238%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=19-23%TG=20%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=19-23%TG=20%W=2238%S=O%A=O%F=A%O=%RD=0%Q=)
T4(R=Y%DF=N%T=19-23%TG=20%W=2238%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=19-23%TG=20%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=19-23%TG=20%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=19-23%TG=20%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=4210%RIPCK=Z%RUCK=0%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# ADIC Scalar 1000 tape library remote management unit, firmware 161A.00005
Fingerprint ADIC Scalar 1000 tape library remote management unit
Class ADIC | embedded || storage-misc
SEQ(SP=14-1E%GCD=FA00|1F400|2EE00|3E800|4E200%ISR=99-A3%II=I%TS=U)
OPS(O1=M200NW0%O2=M200NW0%O3=M200NW0%O4=M200NW0%O5=M200NW0%O6=M200)
WIN(W1=578%W2=578%W3=578%W4=578%W5=578%W6=578)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=578%O=M200NW0%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=3B-45%TG=40%W=578%S=O%A=O%F=A%O=%RD=0%Q=)
T4(R=Y%DF=N%T=3B-45%TG=40%W=578%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=4210%RIPCK=Z%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Adtran NetVanta 1224R; ADTRAN, Inc. OS version 13.14.00
Fingerprint Adtran NetVanta 1224R router
Class Adtran | embedded || router
CPE cpe:/h:adtran:netvanta_1224r auto
SEQ(SP=D2-DC%GCD=1-6%ISR=DF-E9%TI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4%O2=M5B4%O3=M5B4%O4=M5B4%O5=M5B4%O6=M5B4)
WIN(W1=DAC%W2=DAC%W3=DAC%W4=DAC%W5=DAC%W6=DAC)
ECN(R=N)
T1(R=Y%DF=N%T=FA-104%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=N)
T7(R=N)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=FA-104%TG=FF%CD=Z)

# NetVanta 3200 Firmware Version  10.01.00.E Part Number  1202860L1
# ADTRAN Total Access 908, Second Generation. ! ADTRAN, Inc. OS version A2.04.00.E ! Boot ROM version 14.04.00
Fingerprint Adtran NetVanta 3200 or Total Access 908 ADSL router
Class Adtran | embedded || router
SEQ(SP=E1-F1%GCD=1-6%ISR=E4-F8%TI=I|RD%II=I%SS=O|S%TS=U)
OPS(O1=%O2=%O3=M5B4%O4=M5B4%O5=M5B4%O6=M5B4)
WIN(W1=DAC%W2=DAC%W3=DAC%W4=DAC%W5=DAC%W6=DAC)
ECN(R=N)
T1(R=Y%DF=N%T=FA-104%TG=FF%S=O%A=O|S+%F=A|AS%RD=0%Q=)
T2(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
T3(R=N)
T4(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=R%O=%RD=0%Q=)
T7(R=N)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=FA-104%TG=FF%CD=Z)

# Adtran Total Access 5000, Adtran Operating System
Fingerprint Adtran Total Access 5000 router
Class Adtran | embedded || router
CPE cpe:/h:adtran:total_access_5000
SEQ(SP=13-1D%GCD=1F4|3E8|5DC|7D0|9C4%ISR=8A-94%TI=I%CI=I%II=I%SS=S%TS=U)
OPS(O1=M218%O2=M218%O3=M218%O4=M218%O5=M218%O6=M218)
WIN(W1=400%W2=400%W3=400%W4=400%W5=400%W6=400)
ECN(R=Y%DF=N%T=FA-104%TG=FF%W=400%O=M218%CC=N%Q=)
T1(R=Y%DF=N%T=FA-104%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=FA-104%TG=FF%W=400%S=O%A=S+%F=AS%O=M218%RD=0%Q=)
T4(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=FA-104%TG=FF%CD=S)

# Adtran Total Access 624
Fingerprint Adtran Total Access 624 router
Class Adtran | embedded || router
CPE cpe:/h:adtran:total_access_624 auto
SEQ(SP=0-5%GCD=388|710|A98|E20|11A8%ISR=64-6E%TI=I%II=I%SS=S%TS=U)
OPS(O1=M3F1%O2=M3F1%O3=M3EE%O4=M5B4%O5=M3EE%O6=M3ED)
WIN(W1=1000%W2=1000%W3=1000%W4=1000%W5=1000%W6=1000)
ECN(R=Y%DF=N%T=9E-A8|C6-E1%TG=FF%W=1000%O=M3F1%CC=N%Q=)
T1(R=Y%DF=N%T=83-8D|C5-D9|DD-E7%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=A7-B9|CE-DE|E1-EB%TG=FF%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=86-90|B0-BA|C5-CF|DA-E4|EA-F4%TG=FF%W=1000%S=O%A=S+%F=AS%O=M3ED%RD=0%Q=)
T4(R=Y%DF=N%T=9D-A7|C5-E0|E9-F3%TG=FF%W=0%S=A%A=S%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=85-8F|AF-B9|C4-CE|D9-E3|E9-F3%TG=FF%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=9C-A6|C4-DF|E8-F2%TG=FF%W=0%S=A%A=S%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=A1-B5|C3-CD|D8-E2|E8-F2%TG=FF%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FE%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=FE%TG=FF%CD=Z)

# Adtran Total Access 904 (Router)
Fingerprint Adtran Total Access 904 router
Class Adtran | embedded || router
CPE cpe:/h:adtran:total_access_904 auto
SEQ(II=I)
OPS(O1=%O2=%O3=%O4=%O5=%O6=)
WIN(W1=0%W2=0%W3=0%W4=0%W5=0%W6=0)
ECN(R=N)
T1(R=Y%DF=N%T=FA-104%TG=FF%S=Z%A=S+%F=AR%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=N)
T7(R=N)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=FA-104%TG=FF%CD=Z)

# Adtran MX2800 M13 Mux (ds1's in ds3), Code Version = 3.42A, Boot Version = 2.10A
Fingerprint Adtran MX2800 multiplexer
Class Adtran | embedded || specialized
SEQ(SP=2D-9F%GCD=FA|1F4|2EE|3E8|4E2%ISR=8A-B4%TI=I%II=I%SS=S%TS=U)
OPS(O1=M218%O2=M218%O3=M218%O4=M218%O5=M218%O6=M218)
WIN(W1=1000%W2=1000%W3=1000%W4=1000%W5=1000%W6=1000)
ECN(R=Y%DF=N%T=FA-104%TG=FF%W=1000%O=M218%CC=N%Q=)
T1(R=Y%DF=N%T=FA-104%TG=FF%S=O%A=O|S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=FA-104%TG=FF%W=1000%S=O%A=O|S+%F=AS%O=M218%RD=0%Q=)
T4(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=FA-104%TG=FF%CD=S)

# Platform: HiveAP320_n, HiveOS 3.4r1 release
Fingerprint Aerohive HiveAP 320 WAP (HiveOS 3.4)
Class Aerohive | embedded || WAP
CPE cpe:/h:aerohive:hiveap_320 auto
SEQ(SP=C7-D1%GCD=1-6%ISR=CB-D5%TI=I%CI=Z%II=I%SS=S%TS=A)
OPS(O1=M5B4ST11NW2%O2=M5B4ST11NW2%O3=M5B4NNT11NW2%O4=M5B4ST11NW2%O5=M5B4ST11NW2%O6=M5B4ST11)
WIN(W1=16A0%W2=16A0%W3=16A0%W4=16A0%W5=16A0%W6=16A0)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=16D0%O=M5B4NNSNW2%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=3B-45%TG=40%W=16A0%S=O%A=S+%F=AS%O=M5B4ST11NW2%RD=0%Q=)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# router adsl Aetra Starvoice 1042
Fingerprint Aethra Starvoice 1042 ADSL router
Class Aethra | embedded || broadband router
CPE cpe:/h:aethra:starvoice_1042 auto
SEQ(SP=EA-F4%GCD=1-6%ISR=E4-EE%TI=I%CI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4%O2=M578%O3=M200%O4=M5B4%O5=M5B4%O6=M5B4)
WIN(W1=2000%W2=2000%W3=2000%W4=2000%W5=2000%W6=2000)
ECN(R=Y%DF=N%T=72-7C%TG=80%W=2000%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=72-7C%TG=80%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=72-7C%TG=80%W=2000%S=O%A=S+%F=AS%O=M109%RD=0%Q=)
T4(R=Y%DF=N%T=72-7C%TG=80%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=72-7C%TG=80%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=72-7C%TG=80%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=72-7C%TG=80%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=72-7C%TG=80%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=8299%RUD=G)
IE(DFI=N%T=72-7C%TG=80%CD=Z)

# AGFA DryStar 5500 Printer
Fingerprint Agfa DryStar 5500 printer
Class Agfa | embedded || printer
CPE cpe:/h:agfa:drystar_5500 auto
SEQ(SP=0-15%GCD=3200|6400|9600|C800|FA00%ISR=8B-95%TI=I%CI=I%II=I%SS=S%TS=U)
OPS(O1=M218%O2=M218%O3=M218%O4=M218%O5=M218%O6=M109)
WIN(W1=2238%W2=2238%W3=2238%W4=2238%W5=2238%W6=2238)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=2238%O=M218%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=3B-45%TG=40%W=2238%S=O%A=S+%F=AS%O=M218%RD=0%Q=)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=FA-104%TG=FF%CD=Z)

# This is an Airaya brand microwave radio (AI108-4958-O) which has an http and a telnet interface. https://secure.airaya.com/proddetail.asp?prod=AI108-4958-O-300
Fingerprint Airaya AI108-4958-O-300 wireless Ethernet bridge
Class Airaya | embedded || bridge
SEQ(SP=13-1D%GCD=FA00|1F400|2EE00|3E800|4E200%ISR=98-A2%TI=I%II=I%SS=S%TS=1)
OPS(O1=M5B4NW0NNT11%O2=M5B4NW0NNT11%O3=M5B4NW0NNT11%O4=M5B4NW0NNT11%O5=M5B4NW0NNT11%O6=M5B4NNT11)
WIN(W1=2000%W2=2000%W3=2000%W4=2000%W5=2000%W6=2000)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=2000%O=M5B4NW0%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=3B-45%TG=40%W=2000%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=Z%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# This is an Airlink 101 1 port USB 2.0 Multi-functional Printer Server, Model APS MFP210 (www.airlink101.com).
Fingerprint Airlink101 APS MFP210 multi-functional print server
Class Airlink101 | embedded || print server
SEQ(SP=C-16%GCD=3000|6000|9000|C000|F000%ISR=AB-B5%TI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4%O2=M5B4%O3=M5B4%O4=M5B4%O5=M5B4%O6=M5B4)
WIN(W1=5B4%W2=5B4%W3=5B4%W4=5B4%W5=5B4%W6=5B4)
ECN(R=Y%DF=N%T=1B-25%TG=20%W=5B4%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=1B-25%TG=20%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=1B-25%TG=20%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=1B-25%TG=20%W=5B4%S=O%A=O%F=AS%O=M5B4%RD=0%Q=)
T4(R=Y%DF=N%T=1B-25%TG=20%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=1B-25%TG=20%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=1B-25%TG=20%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=1B-25%TG=20%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=1B-25%TG=20%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=1B-25%TG=20%CD=S)

# D-Link DI-604 Ethernet Broadband Router, Firmware Version: V3.15b05
# D-Link DI-524 Airplus G Wireless Router Firmware Version: V2.03, Fri, Dec 09 2005
# SMC 7004 VBR EU (european edition)
# DI-604 Ethernet Broadband Router, Firmware Version: V3.10
# DI-524, Firmware Version: V2.05
# DI 524 H/W revision B4: Current Firmware Version: V2.06
# DI-604 Firmware Version : V3.14, Thu, Dec 15 2005
# ZyXEL Prestige 320W, P-320W 802.11g
# Airlive WT-2000R
Fingerprint AirLive WT-2000R, D-Link DI-524 or DI-604, SMC SMC7004VBR, or ZyXEL Prestige 320W broadband router
Class AirLive | embedded || WAP
CPE cpe:/h:airlive:wt-2000r
Class D-Link | embedded || WAP
CPE cpe:/h:dlink:di-524
CPE cpe:/h:dlink:di-604
Class SMC | embedded || broadband router
CPE cpe:/h:smc:smc7004vbr
Class ZyXEL | embedded || broadband router
CPE cpe:/h:zyxel:prestige_320w auto
SEQ(SP=0-5D%GCD=32|64|96|C8|FA%ISR=4B-6F%TI=BI%CI=BI%II=BI%SS=S%TS=U)
OPS(O1=M5B4%O2=M5B4%O3=M5B4%O4=M5B4%O5=M5B4%O6=M5B4)
WIN(W1=16D0%W2=16D0%W3=16D0%W4=16D0%W5=16D0%W6=16D0)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=16D0%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# AirMagnet SmartEdge Sensor, SW Version: 8.0.0-11510
# INSTAR CAM IN-3010
# FOSCAM FI8904/FI8904W   IP camera model
# Foscam F18918W Device Firmware Version        11.22.2.36
# Foscam FI8910W
Fingerprint AirMagnet SmartEdge wireless sensor; or Foscam FI8904W, FI8910W, or FI8918W, or Instar IN-3010 surveillance camera (Linux 2.4)
Class AirMagnet | Linux | 2.4.X | specialized
CPE cpe:/h:airmagnet:smartedge
Class Foscam | Linux | 2.4.X | webcam
CPE cpe:/h:foscam:fi8904w
CPE cpe:/h:foscam:f18910w
CPE cpe:/h:foscam:f18918w
Class Instar | Linux | 2.4.X | webcam
CPE cpe:/h:instar:in-3010
SEQ(SP=BF-D5%GCD=1-6%ISR=C1-D3%TI=Z%CI=Z%II=I%TS=7)
OPS(O1=M5B4ST11NW0%O2=M5B4ST11NW0%O3=M5B4NNT11NW0%O4=M5B4ST11NW0%O5=M5B4ST11NW0%O6=M5B4ST11)
WIN(W1=5A8%W2=5A8%W3=5A8%W4=5A8%W5=5A8%W6=5A8)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=5B4%O=M5B4NNSNW0%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=5A8%S=O%A=S+%F=AS%O=M5B4ST11NW0%RD=0%Q=)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# D-Link DI-624 wireless router rev. C, firmware 2.76 (24 Aug 2006)
# D-Link DI-524 WAP Firmware 1.21
# D-Link DI-604, firmware 3.52
# airnet awr014g
# D-Link Wbr-2310, Hardware Version: A1, Firmware Version: 1.01
# Trendnet TEW 432brp, H/W B2.1R
# TrendNet TEW-452BRP, Copyright (c) 1996-2001 Express Logic Inc. * ThreadX JADE/Green Hills Version G4.0.4.0
Fingerprint WAP: Airnet AWR014G; D-Link DI-524, DI-604, DI-624, or WBR-2310; or TRENDnet TEW-432BRP or TEW-452BRP (ThreadX)
Class Airnet | ThreadX | 4.X | WAP
CPE cpe:/h:airnet:awr014g
CPE cpe:/o:airnet:threadx:4 auto
Class D-Link | ThreadX | 4.X | WAP
CPE cpe:/h:dlink:di-524
CPE cpe:/h:dlink:di-604
CPE cpe:/h:dlink:di-624
CPE cpe:/h:dlink:wbr-2310
CPE cpe:/o:dlink:threadx:4 auto
Class TRENDnet | ThreadX | 4.X | WAP
CPE cpe:/h:trendnet:tew-432brp
CPE cpe:/h:trendnet:tew-452brp
CPE cpe:/o:trendnet:threadx:4 auto
SEQ(SP=B-15%GCD=FA7F|1F4FE|2EF7D|3E9FC|4E47B|5DEFA%ISR=96-A0%TI=I%II=I%SS=S%TS=U)
OPS(O1=M5B0%O2=M5B0%O3=M5B0%O4=M5B0%O5=M5B0%O6=M5B0)
WIN(W1=2000%W2=2000%W3=2000%W4=2000%W5=2000%W6=2000)
ECN(R=Y%DF=N%T=7F%TG=80%W=2000%O=M5B0%CC=N%Q=)
T1(R=Y%DF=N%T=7F%TG=80%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=7F%TG=80%W=2000%S=O%A=O%F=A%O=%RD=0%Q=)
T4(R=Y%DF=N%T=7F%TG=80%W=2000%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=7F%TG=80%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=7F%TG=80%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=7F%TG=80%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=7F%TG=80%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=7F%TG=80%CD=S)

# AirSpan ProST WiMAX CPE (Outdoor Version)
Fingerprint AirSpan ProST WiMAX access point
Class AirSpan | embedded || WAP
SEQ(II=I)
OPS(O1=M5B4NW0NNT11%O2=M5B4NW0NNT11%O3=M5B4NW0NNT11%O4=M5B4NW0NNT11%O5=M5B4NW0NNT11%O6=M5B4NNT11)
WIN(W1=2000%W2=2000%W3=2000%W4=2000%W5=2000%W6=2000)
ECN(R=Y%DF=Y%T=3A-44%TG=40%W=2000%O=M5B4NW0%CC=N%Q=)
T1(R=Y%DF=Y%T=3A-44%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=Y%DF=N%T=3A-44%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=N)
T7(R=N)
U1(DF=N%T=3A-44%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3A-44%TG=40%CD=S)

# AKCP sensorProbe2, www.AKCP.com. Firmware SP2388, dated 090608
Fingerprint AKCP sensorProbe2 remote sensor device
Class AKCP | embedded || specialized
SEQ(SP=0-5%GCD=1388|2710|3A98|4E20|61A8%ISR=78-82%TI=I%II=I%SS=S%TS=U)
OPS(O1=M3F4%O2=M3F4%O3=M3F4%O4=M3F4%O5=M3F4%O6=M3F4)
WIN(W1=2000%W2=2000%W3=2000%W4=2000%W5=2000%W6=2000)
ECN(R=Y%DF=N%T=7B-85%TG=80%W=2000%O=M3F4%CC=N%Q=)
T1(R=Y%DF=N%T=7B-85%TG=80%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=7B-85%TG=80%W=2000%S=A%A=S+%F=AS%O=M3F4%RD=0%Q=)
T4(R=N)
T5(R=Y%DF=N%T=7B-85%TG=80%W=2000%S=A%A=S%F=AR%O=M3F4%RD=0%Q=)
T6(R=Y%DF=N%T=7B-85%TG=80%W=2000%S=A%A=S%F=AR%O=M3F4%RD=0%Q=)
T7(R=Y%DF=N%T=7B-85%TG=80%W=2000%S=A%A=S+%F=AR%O=M3F4%RD=0%Q=)
U1(R=N)
IE(DFI=S%T=7B-85%TG=80%CD=Z)

# Alcatel Speedtouch 510 ADSL router
Fingerprint Alcatel SpeedTouch 510 DSL modem
Class Alcatel | embedded || broadband router
CPE cpe:/h:alcatel:speedtouch_510 auto
SEQ(SP=C-16%GCD=FA00|1F400|2EE00|3E800|4E200%ISR=97-A1%TI=I%II=I%SS=S%TS=1)
OPS(O1=M200NW0NNT11%O2=M200NW0NNT11%O3=M200NW0NNT11%O4=M200NW0NNT11%O5=M200NW0NNT11%O6=M200NNT11)
WIN(W1=1000%W2=1000%W3=1000%W4=1000%W5=1000%W6=1000)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=1000%O=M200NW0%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=3B-45%TG=40%W=1000%S=O%A=O%F=A%O=NNT11%RD=0%Q=)
T4(R=Y%DF=N%T=3B-45%TG=40%W=1000%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=391F%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# Alcatel SpeedTouch Pro ADSL Modem (Firmware: Khdsaa3.270  (1003194))
Fingerprint Alcatel SpeedTouch Pro ADSL Modem
Class Alcatel | embedded || broadband router
SEQ(SP=B-15%GCD=FA00|1F400|2EE00|3E800|4E200%ISR=96-A0%TI=I%II=I%SS=S%TS=1)
OPS(O1=M200NW0NNT11%O2=M200NW0NNT11%O3=M200NW0NNT11%O4=M200NW0NNT11%O5=M200NW0NNT11%O6=M200NNT11)
WIN(W1=1000%W2=1000%W3=1000%W4=1000%W5=1000%W6=1000)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=1000%O=M200NW0%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=3B-45%TG=40%W=1000%S=O%A=O%F=A%O=NNT11%RD=0%Q=)
T4(R=Y%DF=N%T=3B-45%TG=40%W=1000%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=Z%RUCK=G%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# Alcatel PBX 4400 running (Chorus MiX V.3.2 r4.1.5 COMP-386)
Fingerprint Alcatel 4400 PBX (Chorus MiX V.3.2 r4.1.5 COMP-386)
Class Alcatel | embedded || PBX
SEQ(SP=94-9E%GCD=1-6%ISR=95-9F%TI=I|RD%II=I%SS=S%TS=U)
OPS(O1=|M5B4%O2=|M5B4%O3=|M5B4%O4=|M5B4%O5=|M5B4%O6=|M5B4)
WIN(W1=111C%W2=1068%W3=1180%W4=1000%W5=10C0%W6=1090)
ECN(R=Y%DF=Y%T=41%TG=40%W=111C%O=|M5B4%CC=N%Q=)
T1(R=Y%DF=Y%T=41%TG=40%S=O%A=O|S+%F=A|AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%T=41%TG=40%W=1090%S=O%A=O|S+%F=A|AS%O=|M5B4%RD=0%Q=)
T4(R=Y%DF=N%T=41%TG=40%W=1000%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=41%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=41%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=41%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=100%TG=FF%IPL=38%UN=0%RIPL=G%RID=4210%RIPCK=I%RUCK=0%RUD=G)
IE(DFI=S%T=100%TG=FF%CD=S)

# VxWorks --Ed.
# Enterasys Vertical Horizon VH-2402S2
# Alcatel OmniStack 6024 switch
# Dell Laser MFP 1815dn
# Samsung SCX-6x22 Series printer
Fingerprint Alcatel OmniStack 6024 or Enterasys Vertical Horizon VH-2402S2 switch, or Dell 1815dn or Samsung SCX-6x22 printer
Class Alcatel | embedded || switch
CPE cpe:/h:alcatel:omnistack_6024
Class Enterasys | embedded || switch
CPE cpe:/h:enterasys:vh-2402s2
Class Dell | embedded || printer
CPE cpe:/h:dell:1815dn
Class Samsung | embedded || printer
CPE cpe:/h:samsung:scx-6x22
SEQ(SP=C-16%GCD=FA00|1F400|2EE00|3E800|4E200%ISR=97-A1%TI=I%CI=I%II=I%SS=S%TS=U)
OPS(O1=%O2=%O3=%O4=%O5=%O6=)
WIN(W1=1000%W2=1000%W3=1000%W4=1000%W5=1000%W6=1000)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=1000%O=%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=3B-45%TG=40%W=1000%S=O%A=O%F=A%O=%RD=0%Q=)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=Z%RUCK=G%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# Alcatel 4035 IP Phone
Fingerprint Alcatel 4035 VoIP phone
Class Alcatel | embedded || VoIP phone
CPE cpe:/h:alcatel:4035 auto
SEQ(SP=F4-10A%GCD=1-6%ISR=FE-110%TI=I%CI=I%II=I%SS=S%TS=U)
OPS(O1=M5B0%O2=M5B0%O3=M5B0%O4=M5B0%O5=M5B0%O6=M5B0)
WIN(W1=3E80%W2=3E80%W3=3E80%W4=3E80%W5=3E80%W6=3E80)
ECN(R=Y%DF=N%T=19-23%TG=20%W=3E80%O=M5B0%CC=N%Q=)
T1(R=Y%DF=N%T=19-23%TG=20%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=19-23%TG=20%W=0%S=Z%A=S%F=ARF%O=%RD=0%Q=)
T3(R=Y%DF=N%T=19-23%TG=20%W=3E80%S=O%A=S+%F=AS%O=M5B0%RD=0%Q=)
T4(R=Y%DF=N%T=19-23%TG=20%W=0%S=A%A=Z%F=RF%O=%RD=0%Q=)
T5(R=Y%DF=N%T=19-23%TG=20%W=0%S=Z%A=S+%F=ARF%O=%RD=0%Q=)
T6(R=Y%DF=N%T=19-23%TG=20%W=0%S=A%A=Z%F=RF%O=%RD=0%Q=)
T7(R=Y%DF=N%T=19-23%TG=20%W=0%S=Z%A=S%F=ARF%O=%RD=0%Q=)
U1(DF=N%T=19-23%TG=20%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=19-23%TG=20%CD=S)

# Alcatel OmniPCX A4400, Chorus pbx1 MiX V.3.2 r4.1.5 COMP-386
Fingerprint Alcatel-Lucent OmniPCX Enterprise A4400 PBX
Class Alcatel-Lucent | embedded || PBX
SEQ(SP=92-9C%GCD=1-6%ISR=96-A6%TI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4%O2=M5B4%O3=M5B4%O4=M5B4%O5=M5B4%O6=M5B4)
WIN(W1=111C%W2=1068%W3=1180%W4=1000%W5=10C0%W6=1090)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=111C%O=M5B4%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=1090%S=O%A=S+%F=AS%O=M5B4%RD=0%Q=)
T4(R=Y%DF=N%T=3B-45%TG=40%W=1000%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=4210%RIPCK=I%RUCK=0%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# Alcatel-Lucent OmniSwitch 6000 Software Version 6.3.1.1052.R01 Service Release, December 11, 2008.
Fingerprint Alcatel-Lucent OmniSwitch 6000 switch (firmware 6.3.1)
Class Alcatel-Lucent | embedded || switch
CPE cpe:/h:alcatel-lucent:omniswitch_6000 auto
SEQ(SP=102-10C%GCD=1-6%ISR=101-10B%TI=RD%CI=RD|RI%II=RI%TS=1)
OPS(O1=M5B4NNT11%O2=M5B4NW0NNT11%O3=M5B4NW0NNT11%O4=M5B4NNT11%O5=M5B4NNT11%O6=M5B4NNT11)
WIN(W1=2000%W2=2000%W3=2000%W4=2000%W5=2000%W6=2000)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=2000%O=M5B4%CC=N)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0)
T2(R=N)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=2000%S=O%A=S+%F=AS%O=M5B4NNT11%RD=0)
T4(R=Y%DF=N%T=3B-45%TG=40%W=2000%S=A%A=S%F=A%RD=0)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%RD=0)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%RD=0)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%RD=0)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=Z%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Alcatel-Lucent OmniSwitch 6000 Software Version 6.4.2.807.R01 GA, August 27, 2009.
# Quantum DXi8500 System Version = 2.1.1 Kernel Version = 2.6.18-164.15.1.qtm.4
Fingerprint Alcatel-Lucent OmniSwitch 6000 switch or Quantum DXi8500 NAS device
Class Alcatel-Lucent | embedded || switch
CPE cpe:/h:alcatel-lucent:omniswitch_6000 auto
Class Quantum | embedded || storage-misc
CPE cpe:/h:quantum:dxi8500
SEQ(SP=103-10D%GCD=1-6%ISR=101-10B%TI=RD%CI=RD|RI%II=RI%TS=1)
OPS(O1=M5B4NNT11%O2=M5B4NW0NNT11%O3=M5B4NW0NNT11%O4=M5B4NNT11%O5=M5B4NNT11%O6=M5B4NNT11)
WIN(W1=2000%W2=2000%W3=2000%W4=2000%W5=2000%W6=2000)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=2000%O=M5B4%CC=N)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0)
T2(R=N)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=2000%S=O%A=S+%F=AS%O=M5B4NNT11%RD=0)
T4(R=Y%DF=N%T=3B-45%TG=40%W=2000%S=A%A=Z%F=R%RD=0)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%RD=0)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%RD=0)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%RD=0)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=Z%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Omniswitch 6850
Fingerprint Alcatel-Lucent OmniSwitch 6850 switch
Class Alcatel-Lucent | embedded || switch
CPE cpe:/h:alcatel-lucent:omniswitch_6850 auto
SEQ(SP=100-10A%GCD=1-6%ISR=106-110%TI=RD%II=RI%TS=1)
OPS(O1=M5B4NW0NNT11%O2=M5B4NW0NNT11%O3=M5B4NW0NNT11%O4=M5B4NW0NNT11%O5=M5B4NW0NNT11%O6=M5B4NNT11)
WIN(W1=2000%W2=2000%W3=2000%W4=2000%W5=2000%W6=2000)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=2000%O=M5B4NW0%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=2000%S=O%A=S+%F=AS%O=M5B4NW0NNT11%RD=0%Q=)
T4(R=Y%DF=N%T=3B-45%TG=40%W=2000%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=Z%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Alcatel-Lucent Omniswitch 6850
Fingerprint Alcatel-Lucent OmniSwitch 6850 switch
Class Alcatel-Lucent | embedded || switch
CPE cpe:/h:alcatel-lucent:omniswitch_6850 auto
SEQ(SP=102-10C%GCD=1-6%ISR=FF-109%TI=RD%CI=RD|RI%II=RI%TS=1)
OPS(O1=M200NNT11%O2=M200NW0NNT11%O3=M200NW0NNT11%O4=M200NNT11%O5=M200NNT11%O6=M200NNT11)
WIN(W1=2000%W2=2000%W3=2000%W4=2000%W5=2000%W6=2000)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=2000%O=M200%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=2000%S=O%A=S+%F=AS%O=M200NNT11%RD=0%Q=)
T4(R=Y%DF=N%T=3B-45%TG=40%W=2000%S=A%A=S%F=A%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=Z%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Alcatel-Lucent OmniPCX Enterprise
# OmniPCX Enterprise R8.0.1-g1.503-12-a-nl-c80s1 (Linux 2.4.17-ll-dhs3)
Fingerprint Alcatel-Lucent OmniPCX Enterprise PBX (Linux 2.4.17)
Class Alcatel-Lucent | Linux | 2.4.X | PBX
CPE cpe:/h:alcatel-lucent:omnipcx
CPE cpe:/o:alcatel-lucent:linux_kernel:2.4 auto
SEQ(SP=C5-D3%GCD=1-6%ISR=CC-D6%TI=Z%II=I%TS=U)
OPS(O1=M5B4NNSNW0%O2=M5B4NNSNW0%O3=M5B4NW0%O4=M5B4NNSNW0%O5=M5B4NNSNW0%O6=M5B4NNS)
WIN(W1=16D0%W2=16D0%W3=16D0%W4=16D0%W5=16D0%W6=16D0)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=16D0%O=M5B4NNSNW0%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=16D0%S=O%A=S+%F=AS%O=M5B4NNSNW0%RD=0%Q=)
T4(R=Y%DF=Y%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=FA-104%TG=FF%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=Y%T=FA-104%TG=FF%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=FA-104%TG=FF%CD=S)

# Alcatel-Lucent 7750 Router running SR-OS 9.0.R9
Fingerprint Alcatel-Lucent 7750 Service Router (SR OS 9.0.R9)
Class Alcatel-Lucent | SR OS | 9.X | router
CPE cpe:/o:alcatel-lucent:sr_os:9 auto
SEQ(SP=F7-10F%GCD=1-6%ISR=105-113%TI=I%CI=I%II=RI%SS=O|S%TS=1)
OPS(O1=M400NW0NNT11%O2=M400NW0NNT11%O3=M400NW0NNT11%O4=M400NW0NNT11%O5=M400NW0NNT11%O6=M400NNT11)
WIN(W1=2000%W2=2000%W3=2000%W4=2000%W5=2000%W6=2000)
ECN(R=Y%DF=N%T=3A-44%TG=40%W=2000%O=M400NW0%CC=N%Q=)
T1(R=Y%DF=N%T=3A-44%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=3A-44%TG=40%W=2000%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3A-44%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3A-44%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3A-44%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3A-44%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=3A-44%TG=40%CD=S)

# Sirio by Alice, voip telephone used by Telecom Italia
Fingerprint Sirio by Alice VoIP phone
Class Alice | embedded || VoIP phone
SEQ(SP=C3-CD%GCD=1-6%ISR=CB-D5%TI=I%II=I%SS=S%TS=7)
OPS(O1=M5B4ST11NW1%O2=M5B4ST11NW1%O3=M5B4NNT11NW1%O4=M5B4ST11NW1%O5=M5B4ST11NW1%O6=M5B4ST11)
WIN(W1=16A0%W2=16A0%W3=16A0%W4=16A0%W5=16A0%W6=16A0)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=16D0%O=M5B4NNSNW1%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=3B-45%TG=40%W=16A0%S=O%A=S+%F=AS%O=M5B4ST11NW1%RD=0%Q=)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# Allen-Bradley 1756-ENBT card in ControlLogix 5000-series PLC
Fingerprint Allen-Bradley 1756 ControlLogix programmable automation controller
Class Allen-Bradley | embedded || specialized
SEQ(SP=15-1F%GCD=FA00|1F400|2EE00|3E800|4E200%ISR=9B-A5%TI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4NW0%O2=M5B4NW0%O3=M5B4NW0%O4=M5B4NW0%O5=M5B4NW0%O6=M5B4)
WIN(W1=1000%W2=1000%W3=1000%W4=1000%W5=1000%W6=1000)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=1000%O=M5B4NW0%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=3B-45%TG=40%W=1000%S=O%A=O%F=A%O=%RD=0%Q=)
T4(R=Y%DF=N%T=3B-45%TG=40%W=1000%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=Z%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Allen Bradley 1756-EN2T/C
Fingerprint Allen-Bradley 1756-EN2T/C programmable logic controller
Class Allen-Bradley | embedded || specialized
SEQ(SP=85-8F%GCD=1-6%ISR=94-9E%CI=I%II=I%TS=U)
OPS(O1=NNM5B4SNW0%O2=NNM5B4SNW0%O3=M5B4NW0%O4=NNM5B4SNW0%O5=NNM5B4SNW0%O6=NNM5B4S)
WIN(W1=2710%W2=2710%W3=2710%W4=2710%W5=2710%W6=2710)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=2710%O=NNM5B4SNW0%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=Z%A=Z%F=R%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=138%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=Z)

# Allen Bradley PLC-5
Fingerprint Allen-Bradley PLC-5 programmable logic controller
Class Allen-Bradley | embedded || specialized
SEQ(SP=B-15%GCD=FA00|1F400|2EE00|3E800|4E200%ISR=96-A0%TI=I%CI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4%O2=M5B4%O3=M5B4%O4=M5B4%O5=M5B4%O6=M5B4)
WIN(W1=B68%W2=AF0%W3=F00%W4=1000%W5=EA8%W6=F87)
ECN(R=Y%DF=N%T=37-41%TG=40%W=B68%O=M5B4%CC=N)
T1(R=Y%DF=N%T=37-41%TG=40%S=O%A=S+%F=AS%RD=0)
T2(R=N)
T3(R=Y%DF=N%T=37-41%TG=40%W=F87%S=O%A=O%F=A%RD=0)
T4(R=Y%DF=N%T=37-41%TG=40%W=1000%S=A%A=Z%F=R%RD=0)
T5(R=Y%DF=N%T=37-41%TG=40%W=0%S=Z%A=S+%F=AR%RD=0)
T6(R=Y%DF=N%T=37-41%TG=40%W=0%S=A%A=Z%F=R%RD=0)
T7(R=Y%DF=N%T=37-41%TG=40%W=0%S=Z%A=S%F=AR%RD=0)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=15C%RID=G%RIPCK=Z%RUCK=0%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# Belkin F5D7632-4 v1000UK, firmware AR.0.01.08UK (Oct 27 2004 01:03:29)
# Intracom Jetspeed 500i ADSL router
# Iskratel Proteus 932 VDSL Modem, Firmware version: 1.66.31
# Allied Data Technologies CopperJet 816-2P Router VoATM, Software Version: 6.02 SR4
# Iskratel Sinope568+
# Allied Data Copperjet 1616-2P
# Adva Optical FSP150CC-825
Fingerprint Broadband router (Allied Data CopperJet, Belkin F5D7632-4, Intracom Jetspeed 500i, or Iskratel Sinope568 or Proteus932); or Adva Optical FSP 150CC-825 router
Class Allied Data | embedded || broadband router
Class Adva Optical | embedded || router
Class Belkin | embedded || WAP
Class Intracom | embedded || broadband router
Class Iskratel | embedded || broadband router
SEQ(SP=6F-87%GCD=1-6%ISR=71-8D%TI=I%TS=U)
OPS(O1=M5B4%O2=M578%O3=M280%O4=M218%O5=M218%O6=M109)
WIN(W1=4000%W2=4000%W3=4000%W4=4000%W5=4000%W6=4000)
ECN(R=Y%DF=Y%T=7B-85%TG=80%W=4000%O=M5B4%CC=N%Q=)
T1(R=Y%DF=Y%T=7B-85%TG=80%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=Y%T=7B-85%TG=80%W=4000%S=A%A=Z%F=R%O=%RD=0%Q=)
T3(R=N)
T4(R=Y%DF=Y%T=7B-85%TG=80%W=4000%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=7B-85%TG=80%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=7B-85%TG=80%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=7B-85%TG=80%W=0%S=Z%A=Z%F=R%O=%RD=0%Q=)
U1(DF=N%T=96-A0%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(R=N)

# AlliedWare OS version 54291-05
Fingerprint Allied Telesis AlliedWare version 54291-05
Class Allied Telesis | AlliedWare || router
CPE cpe:/o:alliedtelesis:alliedware:54291-05
SEQ(SP=F7-107%GCD=1-6%ISR=F9-115%TI=I%II=RI%SS=S%TS=U)
OPS(O1=M400%O2=M400%O3=M280%O4=M400%O5=M218%O6=M109)
WIN(W1=400%W2=400%W3=400%W4=400%W5=400%W6=400)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=400%O=M400%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=3B-45%TG=40%W=400%S=O%A=S+%F=AS%O=M109%RD=0%Q=)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=S%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=S%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(R=N)
IE(DFI=S%T=3B-45%TG=40%CD=Z)

# Linksys Switch SRW2048 (Firmware 1.2.1)
# Linksys SRW2024 24-port 10/100/1000 Gigabit Switch, Hardware Version: 00.03.11, Boot Version:  1.0.1, Firmware Version:  1.2.1
# Linksys SRW-224G4-EU
# Allied Telesyn Switch 8000S 48Ports
# Dell PowerConnect 3448
# Dell Blade chassis switch module: Powerconnect 5316M
# PowerConnect 5324, Software Version 2.0.0.40, Boot Version 1.0.2.02
# TP-LINK TL-SL3428 switch
# DELL POWECONNECT 2824 Switch
Fingerprint Allied Telesis AT-8000S; Dell PowerConnect 2824, 3448, 5316M, or 5324; Linksys SFE2000P, SRW2024, SRW2048, or SRW224G4; or TP-Link TL-SL3428 switch
Class Allied Telesis | embedded || switch
CPE cpe:/h:alliedtelesis:at-8000s
Class Dell | embedded || switch
CPE cpe:/h:dell:powerconnect_2824
CPE cpe:/h:dell:powerconnect_3448
CPE cpe:/h:dell:powerconnect_5316m
CPE cpe:/h:dell:powerconnect_5324
Class Linksys | embedded || switch
CPE cpe:/h:linksys:sfe2000p
CPE cpe:/h:linksys:srw2024
CPE cpe:/h:linksys:srw2048
CPE cpe:/h:linksys:srw224g4
Class TP-Link | embedded || switch
CPE cpe:/h:tp-link:tl-sl3428
SEQ(SP=F4-10A%GCD=1-6%ISR=FA-10E%TI=RD%CI=RD%II=RI%TS=U)
OPS(O1=%O2=%O3=%O4=%O5=%O6=)
WIN(W1=200%W2=200%W3=200%W4=200%W5=200%W6=200)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=200%O=%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=O|S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=3B-45%TG=40%W=200%S=O%A=S+%F=AS%O=%RD=0%Q=)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Allied Telesis AT-9000/24, Software Release AT-S84 1.1.1
Fingerprint Allied Telesis AT-9000 switch
Class Allied Telesis | embedded || switch
CPE cpe:/h:alliedtelesis:at-9000
SEQ(SP=0-5%GCD=0%ISR=0-5%TI=I%II=I%SS=S%TS=U)
OPS(O1=M218%O2=M218%O3=M218%O4=M218%O5=M218%O6=M218)
WIN(W1=2000%W2=2000%W3=2000%W4=2000%W5=2000%W6=2000)
ECN(R=Y%DF=N%T=FA-104%TG=FF%W=2000%O=M218%CC=N%Q=)
T1(R=Y%DF=N%T=FA-104%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=APR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=FA-104%TG=FF%W=0|2000%S=A|O%A=O|S+%F=AS|APR%O=|M218%RD=0%Q=)
T4(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=APR%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S+%F=APR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=APR%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=APR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0|4212|8433|AE74%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=FA-104%TG=FF%CD=S)

# Allied Telesis AT-9000/24 Gigabit Ethernet Switch, Runtime Image: Version 1.1.0.28
# AT-FS750/16 Fast Ethernet WebSmart Switch,  Version AT-S80 V2.3.1 [1.1.1.92], Boot Loader: Version 1.00.07
# Allied Telesis GS950 Runtime Image : Version AT-S79 V2.3.1 [1.1.1.92]
Fingerprint Allied Telesis AT-9000, AT-FS750, or GS950 switch
Class Allied Telesis | embedded || switch
SEQ(SP=0-5%GCD=0%ISR=0-5%TI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4%O2=M5B4%O3=M5B4%O4=M5B4%O5=M5B4%O6=M5B4)
WIN(W1=2000%W2=2000%W3=2000%W4=2000%W5=2000%W6=2000)
ECN(R=Y%DF=N%T=FA-104%TG=FF%W=2000%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=FA-104%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=APR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=FA-104%TG=FF%W=2000%S=O%A=S+%F=AS%O=M5B4%RD=0%Q=)
T4(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=APR%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S+%F=APR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=APR%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=APR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0-FFFF%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=FA-104%TG=FF%CD=S)

# Allied Telesyn CentreCOM AR300L v1 Access Router
Fingerprint Allied Telesyn AT-AR300L CentreCOM router
Class Allied Telesyn | AlliedWare || router
CPE cpe:/h:alliedtelesyn:at-ar300l
CPE cpe:/o:alliedtelesyn:alliedware auto
SEQ(SP=EF-113%GCD=1-6%ISR=F2-11C%TI=I%II=RI%SS=S%TS=U)
OPS(O1=M3EC%O2=M3EC%O3=M3EC%O4=M3EC%O5=M3EC%O6=M3EC)
WIN(W1=400%W2=400%W3=400%W4=400%W5=400%W6=400)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=400%O=M3EC%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=3B-45%TG=40%W=400%S=O%A=O|S+%F=A|AS%O=|M3EC%RD=0%Q=)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=S%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=S%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=Z)

# AT-AR410 router
Fingerprint Allied Telesyn AT-AR410 router
Class Allied Telesyn | AlliedWare || router
CPE cpe:/h:alliedtelesyn:at-ar410
CPE cpe:/o:alliedtelesyn:alliedware auto
SEQ(SP=F3-107%GCD=1-6%ISR=F8-114%TI=I|RD%II=RI%SS=O%TS=U)
OPS(O1=M109%O2=M109%O3=M109%O4=M109%O5=M109%O6=M109)
WIN(W1=400%W2=400%W3=400%W4=400%W5=400%W6=400)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=400%O=|M109%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=3B-45%TG=40%W=0|400%S=O|Z%A=O|S+%F=AR|AS%O=|M109%RD=0%Q=)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=S%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=S%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(R=N)
IE(DFI=S%T=3B-45%TG=40%CD=Z)

# Allied Telesyn AT-AR750s
Fingerprint Allied Telesyn AT-AR750s router
Class Allied Telesyn | AlliedWare || router
CPE cpe:/h:alliedtelesyn:at-ar750s
CPE cpe:/o:alliedtelesyn:alliedware auto
SEQ(SP=FA-106%GCD=1-6%ISR=101-10D%TI=I%II=RI%SS=O%TS=U)
OPS(O1=M400%O2=M400%O3=M280%O4=M400%O5=M218%O6=M109)
WIN(W1=400%W2=400%W3=400%W4=400%W5=400%W6=400)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=400%O=M400%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=3B-45%TG=40%W=400%S=O%A=S+%F=AS%O=M109%RD=0%Q=)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=S%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=S%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=Z)

# Allied Telesyn 8326GB switch
Fingerprint Allied Telesyn 8326GB switch
Class Allied Telesyn | embedded || switch
CPE cpe:/h:alliedtelesyn:at-8326gb
SEQ(SP=0-5%GCD=1-6%ISR=0-5%TI=I%TS=U)
OPS(O1=M5B4%O2=M5B4%O3=M5B4%O4=M5B4%O5=M5B4%O6=M5B4)
WIN(W1=400%W2=400%W3=400%W4=400%W5=400%W6=400)
ECN(R=Y%DF=N%T=FA-104%TG=FF%W=400%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=FA-104%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=APR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=FA-104%TG=FF%W=400%S=O%A=S+%F=AS%O=M5B4%RD=0%Q=)
T4(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A|O%A=O|S%F=APR%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A|O%A=O|S+%F=APR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A|O%A=O|S%F=APR%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A|O%A=O|S%F=APR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=106B|119F|1AFE|568B|FCB7%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=FA-104%TG=FF%CD=S)

# AlliedTelesyn AT-8326GB Switch. It has embedded "AT-S41 Switch OS" V 1.1.6 with boot loader 1.01L
# AT - 8326GB Fast Ethernet Switch
# Allied Telesyn AT-8326GB switch.
# AT-8350GB switch, management system version 1.1.8
Fingerprint Allied Telesyn AT-8326GB or AT8350GB switch.
Class Allied Telesyn | embedded || switch
SEQ(SP=0-5%GCD=0%ISR=0-5%TI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4%O2=M5B4%O3=M5B4%O4=M5B4%O5=M5B4%O6=M5B4)
WIN(W1=400%W2=400%W3=400%W4=400%W5=400%W6=400)
ECN(R=Y%DF=N%T=FA-104%TG=FF%W=400%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=FA-104%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=APR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=FA-104%TG=FF%W=400%S=O%A=S+%F=AS%O=M5B4%RD=0%Q=)
T4(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=APR%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S+%F=APR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=APR%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=APR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=FA-104%TG=FF%CD=S)

# Allied Telesyn AT-8350GB Management System Version 1.1.6
Fingerprint Allied Telesyn AT-8350GB switch
Class Allied Telesyn | embedded || switch
CPE cpe:/h:alliedtelesyn:at-8350gb
SEQ(SP=0-5%GCD=0%ISR=0-5%TI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4%O2=M5B4%O3=M5B4%O4=M5B4%O5=M5B4%O6=M5B4)
WIN(W1=400%W2=400%W3=400%W4=400%W5=400%W6=400)
ECN(R=Y%DF=N%T=FA-104%TG=FF%W=400%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=FA-104%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=FA-104%TG=FF%W=400%S=O%A=S+%F=AS%O=M5B4%RD=0%Q=)
T4(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=APR%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S+%F=APR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=APR%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=APR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=237|1001|57D1|5A0E|E806%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=FA-104%TG=FF%CD=S)

# Allied Telesyn AT-9006SX/SC Ethernet Switch, AT-S26 Ethernet Switch Software: Version 1.0.3 000517
Fingerprint Allied Telesyn AT-9006SX/SC switch
Class Allied Telesyn | embedded || switch
CPE cpe:/h:alliedtelesyn:at-9006
SEQ(SP=13-B5%GCD=FA|1F4|2EE|3E8|4E2%ISR=8A-B0%TI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4%O2=M5B4%O3=M5B4%O4=M5B4%O5=M5B4%O6=M5B4)
WIN(W1=400%W2=400%W3=400%W4=400%W5=400%W6=400)
ECN(R=Y%DF=N%T=FA-104%TG=FF%W=400%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=FA-104%TG=FF%S=O%A=O|S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=FA-104%TG=FF%W=400%S=O%A=S+%F=AS%O=M5B4%RD=0%Q=)
T4(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=FA-104%TG=FF%CD=S)

# Allied Telesyn switch AT-9448Ts/XP (ATS63), firmware v2.1.0
Fingerprint Allied Telesyn AT-9448Ts/XP switch
Class Allied Telesyn | embedded || switch
CPE cpe:/h:alliedtelesyn:at-9448ts
SEQ(SP=F3-109%GCD=1-6%ISR=FE-114%TI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4%O2=M5B4%O3=M5B4%O4=M5B4%O5=M5B4%O6=M5B4)
WIN(W1=3E80%W2=3E80%W3=3E80%W4=3E80%W5=3E80%W6=3E80)
ECN(R=Y%DF=N%T=7C-86%TG=80%W=3E80%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=7C-86%TG=80%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=7C-86%TG=80%W=0%S=A%A=Z%F=RF%O=%RD=0%Q=)
T5(R=Y%DF=N%T=7C-86%TG=80%W=0%S=Z%A=S+%F=ARF%O=%RD=0%Q=)
T6(R=Y%DF=N%T=7C-86%TG=80%W=0%S=A%A=Z%F=RF%O=%RD=0%Q=)
T7(R=N)
U1(DF=N%T=7C-86%TG=80%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=7C-86%TG=80%CD=S)

# Allied Telesyn AT-GS950/24 Gigabit Ethernet Switch with Firmware Version 1.0.0.26
Fingerprint Allied Telesyn AT-GS950 Gigabit Ethernet Switch
Class Allied Telesyn | embedded || switch
CPE cpe:/h:alliedtelesyn:at-gs950
SEQ(SP=0-5%GCD=1-6%ISR=0-5%TI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4%O2=M5B4%O3=M5B4%O4=M5B4%O5=M5B4%O6=M5B4)
WIN(W1=400%W2=400%W3=400%W4=400%W5=400%W6=400)
ECN(R=Y%DF=N%T=FA-104%TG=FF%W=400%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=FA-104%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=APR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=FA-104%TG=FF%W=400%S=O%A=S+%F=AS%O=M5B4%RD=0%Q=)
T4(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=APR%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S+%F=APR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=APR%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=APR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=2C5E%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=FA-104%TG=FF%CD=S)

# D-Link Model:DES-3226L
# Allied Telesyn AT-GS950/8 switch.
Fingerprint Allied Telesyn AT-GS950 or D-Link DES-3226L switch
Class Allied Telesyn | embedded || switch
CPE cpe:/h:alliedtelesyn:at-gs950
Class D-Link | embedded || switch
CPE cpe:/h:dlink:des-3226l auto
SEQ(SP=0-DA%GCD=1-6|80|100|180|200|280|C581|18B02|25083|31604|3DB85%ISR=93-A5%TI=I%II=RI%SS=O%TS=1)
OPS(O1=M5B4NW0NNT11%O2=M5B4NW0NNT11%O3=M5B4NW0NNT11%O4=M5B4NW0NNT11%O5=M5B4NW0NNT11%O6=M5B4NNT11)
WIN(W1=2000%W2=2000%W3=2000%W4=2000%W5=2000%W6=2000)
ECN(R=Y%DF=N%T=19-23%TG=20%W=2000%O=M5B4NW0%CC=N%Q=)
T1(R=Y%DF=N%T=19-23%TG=20%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=19-23%TG=20%W=2000%S=O%A=S+%F=AS%O=M5B4NW0NNT11NNLLLLLLLLLL%RD=0%Q=)
T4(R=Y%DF=N%T=19-23%TG=20%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=19-23%TG=20%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=19-23%TG=20%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=19-23%TG=20%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=19-23%TG=20%IPL=38%UN=0|128%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=19-23%TG=20%CD=S)

# Allied Telesyn Rapier 24i
Fingerprint Allied Telesyn Rapier 24i switch
Class Allied Telesyn | embedded || switch
CPE cpe:/h:alliedtelesyn:rapier_24i
SEQ(SP=F9-103%GCD=1-6%ISR=FC-106%TI=I%CI=I%II=RI%SS=O%TS=U)
OPS(O1=M109%O2=M109%O3=M109%O4=M109%O5=M109%O6=M109)
WIN(W1=400%W2=400%W3=400%W4=400%W5=400%W6=400)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=400%O=M109%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=3B-45%TG=40%W=400%S=O%A=S+%F=AS%O=M109%RD=0%Q=)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=S%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=S%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=Z)

# Allied Telesyn Rapier G6 Switch Version 2.7.3
Fingerprint Allied Telesyn Rapier G6 switch
Class Allied Telesyn | embedded || switch
CPE cpe:/h:alliedtelesyn:rapier_g6
SEQ(SP=FC-108%GCD=1-6%ISR=FD-10B%TI=I%II=RI%SS=S%TS=U)
OPS(O1=M109%O2=M109%O3=M109%O4=M109%O5=M109%O6=M109)
WIN(W1=400%W2=400%W3=400%W4=400%W5=400%W6=400)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=400%O=M109%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=N)
T7(R=N)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=Z)

# Cisco MDS 9216i SAN Switch OS version 3.1(3)
# Webcam Allnet 2210
# cisco san-os 3.2(1a) Hardware: Cisco MDS 9124
# Nortel IP Phone 1535
# Linux 2.4.24 #1 Mon Jan 3 15:37:16 EET 2005 i686 unknown, Debian GNU/Linux 3.0
Fingerprint Allnet 2210 webcam, Cisco MDS 9124 or 9216i switch (SAN-OS 3.1 - 3.2), or Nortel IP Phone 1535
Class Allnet | embedded || webcam
CPE cpe:/h:allnet:2210 auto
Class Cisco | SAN-OS | 3.X | switch
CPE cpe:/h:cisco:mds_9124
CPE cpe:/h:cisco:mds_9216i
CPE cpe:/o:cisco:san_os:3 auto
Class Nortel | embedded || VoIP phone
CPE cpe:/h:nortel:ip_phone_1535
SEQ(SP=B4-CF%GCD=1-6%ISR=BE-D4%TI=I%CI=Z%II=I%SS=S%TS=7)
OPS(O1=M5B4ST11NW0%O2=M5B4ST11NW0%O3=M5B4NNT11NW0%O4=M5B4ST11NW0%O5=M5B4ST11NW0%O6=M5B4ST11)
WIN(W1=16A0%W2=16A0%W3=16A0%W4=16A0%W5=16A0%W6=16A0)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=16D0%O=M5B4NNSNW0%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=3B-45%TG=40%W=16A0%S=O%A=S+%F=AS%O=M5B4ST11NW0%RD=0%Q=)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# Allworx 9212 phone
Fingerprint Allworx 9212 VoIP phone
Class Allworx | embedded || VoIP phone
CPE cpe:/h:allworx:9212 auto
SEQ(SP=EC-FC%GCD=1-6%ISR=F4-100%TI=I%II=I%SS=S%TS=7)
OPS(O1=M5BCNW0NNT11%O2=M5BCNW0NNT11%O3=M5BCNW0NNT11%O4=M5BCNW0NNT11%O5=M5BCNW0NNT11%O6=M5BCNNT11)
WIN(W1=4380%W2=4110%W3=423C%W4=4074%W5=4180%W6=403D)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=4410%O=M5BCNW0%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=403D%S=O%A=S+%F=AS%O=M5BCNW0NNT11%RD=0%Q=)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Alvarion BreezeACCESS II  Association Unit Official Release Version - 4.5.17
Fingerprint Alvarion BreezeACCESS II broadband wireless access system 4.5.17
Class Alvarion | embedded || WAP
SEQ(SP=47-51%GCD=1-6%ISR=65-6F%TI=I%II=I%SS=O|S%TS=U)
OPS(O1=%O2=%O3=%O4=%O5=%O6=)
WIN(W1=5DC%W2=5DC%W3=5DC%W4=5DC%W5=5DC%W6=5DC)
ECN(R=N)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=O|S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=5DC%S=O%A=O|S+%F=AS%O=%RD=0%Q=)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=Y%T=3B-45%TG=40%IPL=38%UN=6B33|AD02|D0C3%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# Alvarion BreezeMax CPE Si E 2.3 WiMAX Access Point
Fingerprint Alvarion CPE-Si-E-2.3 BreezeMAX WiMAX WAP
Class Alvarion | embedded || WAP
SEQ(SP=96-A0%GCD=1-6%ISR=9B-A5%TI=I%TS=1)
OPS(O1=M5D8NW1NNT11%O2=M5D8NW1NNT11%O3=M5D8NW1NNT11%O4=M5D8NW1NNT11%O5=M5D8NW1NNT11%O6=M5D8NNT11)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M5D8NW1%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%S=O%A=O%F=AS%O=M5D8NW1NNT11%RD=0%Q=)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=Z%RUCK=0%RUD=G)
IE(R=N)

# AMBIT DOCSIS 2.0 Cable Modem :: Boot Code Version : 2.1.5 / Software Version : 5.11.1130 / Hardware version 4.7
# Xerox Phaser 6350DT Network Printer
# OS: 5.78; Engine 3.1.0;
Fingerprint Ambit DOCSIS 2.0 cable modem, or Xerox Phaser 6250N or 6350DT printer
Class Ambit | embedded || broadband router
Class Xerox | embedded || printer
CPE cpe:/h:xerox:phaser_6250n
CPE cpe:/h:xerox:phaser_6350dt
SEQ(SP=E-52%GCD=FA00|1F400|2EE00|3E800|4E200|5DC00%ISR=98-C4%TI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4NW0%O2=M5B4NW0%O3=M5B4NW0%O4=M5B4NW0%O5=M5B4NW0%O6=M5B4)
WIN(W1=2000%W2=2000%W3=2000%W4=2000%W5=2000%W6=2000)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=2000%O=M5B4NW0%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=3B-45%TG=40%W=2000%S=O%A=O%F=A%O=%RD=0%Q=)
T4(R=Y%DF=N%T=3B-45%TG=40%W=2000%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=I%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Tandberg video conferencing system, might be this OS: http://www.ecoscentric.com/ecos/examples.shtml
# Ubee (ambit) U10C018 Software Version : 2.105.3004 Hardware Version : 1.20
# Cisco EPC3925 EuroDocsis 3.0 2-PORT Voice Gateway
Fingerprint Ambit U10C018 or Cisco EPC3925 cable modem, or Tandberg video conferencing system
Class Ambit | embedded || broadband router
CPE cpe:/h:ambit:u10c018
Class Cisco | embedded || broadband router
CPE cpe:/h:cisco:epc3925
Class Tandberg | embedded || webcam
SEQ(SP=EB-107%GCD=1-6%ISR=E9-10D%TI=I%II=I%SS=S%TS=7)
OPS(O1=M5B4NW0NNT11%O2=M5B4NW0NNT11%O3=M5B4NW0NNT11%O4=M5B4NW0NNT11%O5=M5B4NW0NNT11%O6=M5B4NNT11)
WIN(W1=43E0%W2=4110%W3=423C%W4=4074%W5=4180%W6=403D)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=4470%O=M5B4NW0%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=N)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# AmigaOS 3.1 and EASYNET 0.172 (2009) TCP/IP stack
# AmigaOS GENESiS/AmiTCP TCP/IP stack v45.7
# AmigaOS 3.9 with AmiTCP/IP 4.5 stack
Fingerprint AmigaOS 3.1 - 3.9
Class Amiga | AmigaOS | 3.X | general purpose
CPE cpe:/o:amiga:amigaos:3 auto
SEQ(SP=B-15%GCD=FA00|1F400|2EE00|3E800|4E200%ISR=96-A0%TI=I%CI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4%O2=M5B4%O3=M5B4%O4=M5B4%O5=M5B4%O6=M5B4)
WIN(W1=1C84%W2=1B58%W3=1E00%W4=2000%W5=1F68%W6=1F0E)
ECN(R=Y%DF=N%T=37-41%TG=40%W=1C84%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=37-41%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=37-41%TG=40%W=1F0E%S=O%A=O%F=A%O=%RD=0%Q=)
T4(R=Y%DF=N%T=37-41%TG=40%W=2000%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=37-41%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=37-41%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=37-41%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=15C%RID=G%RIPCK=Z%RUCK=0%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# Amiga OS 3.9 BB2 68060 Mediator 1200
# BB2 is BoingBag 2, something like a service pack?
Fingerprint AmigaOS 3.9 BB2
Class Amiga | AmigaOS | 3.X | general purpose
CPE cpe:/o:amiga:amigaos:3 auto
SEQ(SP=C-16%GCD=FA00|1F400|2EE00|3E800|4E200%ISR=97-A1%TI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4%O2=M5B4%O3=M5B4%O4=M5B4%O5=M5B4%O6=M5B4)
WIN(W1=1C84%W2=1B58%W3=1E00%W4=2000%W5=1F68%W6=1F0E)
ECN(R=Y%DF=N%T=3B-3D%TG=40%W=1C84%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=3B-3D%TG=40%S=O%A=O|S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=Y%DF=N%T=3B-3D%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-3D%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-3D%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=15C%RID=G%RIPCK=Z%RUCK=0%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# AMX DXLINK-HDMI-RX, it runs a proprietary operating system. http://www.amx.com/products/AVB-RX-DXLINK-HDMI.asp
Fingerprint AMX AVB-RX-DXLINK-HDMI audio/video receiver
Class AMX | embedded || media device
SEQ(SP=FF-109%GCD=1-6%ISR=107-111%TI=I|RD%CI=I%II=I%SS=S%TS=U)
OPS(O1=%O2=%O3=%O4=%O5=%O6=)
WIN(W1=111C%W2=111C%W3=111C%W4=111C%W5=111C%W6=111C)
ECN(R=Y%DF=N%T=3A-44%TG=40%W=111C%O=%CC=N%Q=)
T1(R=Y%DF=N%T=3A-44%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=3A-44%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3A-44%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3A-44%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3A-44%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3A-44%TG=40%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3A-44%TG=40%CD=Z)

# Anue X/GEM controller version v3.3.1
Fingerprint Anue X/GEM ethernet network simulator
Class Anue | embedded || specialized
SEQ(SP=0-96%GCD=1-6%ISR=0-8D%TI=I%II=I%SS=O|S%TS=U)
OPS(O1=%O2=%O3=%O4=%O5=%O6=)
WIN(W1=0%W2=0%W3=0%W4=0%W5=0%W6=0)
ECN(R=Y%DF=N%T=3B-3D%TG=40%W=0%O=%CC=N%Q=)
T1(R=Y%DF=N%T=3B-3D%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=3B-3D%TG=40%W=0%S=Z%A=S%F=R%O=%RD=0%Q=)
T3(R=Y%DF=N%T=3B-3D%TG=40%W=0%S=O%A=S+%F=AS%O=%RD=0%Q=)
T4(R=Y%DF=N%T=3B-3D%TG=40%W=0%S=A%A=S%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-3D%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-3D%TG=40%W=0%S=A%A=S%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-3D%TG=40%W=0%S=Z%A=S%F=R%O=%RD=0%Q=)
U1(DF=N%T=3B-3D%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=3B-3D%TG=40%CD=S)

# Network Management Card AOS v.1.1.6 Rack PDU app v.1.0.2
Fingerprint APC power distribution unit (AOS 2.7.0)
Class APC | AOS | 1.X | power-device
CPE cpe:/o:apc:aos:1 auto
SEQ(SP=0-32%GCD=30D4|61A8|927C|C350|F424|1E848|3D090|5B8D8|7A120|98968%ISR=9F-A9%TI=I%II=I%SS=S%TS=A)
OPS(O1=M564NW0NNT11%O2=M564NW0NNT11%O3=M280NW0NNT11%O4=M5B4NW0NNT11%O5=M218NW0NNT11%O6=M109NNT11)
WIN(W1=1008%W2=1008%W3=112C%W4=10F8%W5=1060%W6=10CD)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=102C%O=M564NW0%CC=N)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%RD=0)
T6(R=N)
T7(R=N)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=FA-104%TG=FF%CD=S)

# APC Metered Rack PDU AP7851 running aos_270
Fingerprint APC AP7851 power distribution unit (AOS 2.7.0)
Class APC | AOS | 2.X | power-device
CPE cpe:/o:apc:aos:2 auto
SEQ(SP=8-1D%GCD=1E848|3D090|5B8D8|7A120|98968%ISR=9C-A6%TI=I%II=I%SS=S%TS=A)
OPS(O1=M5B4NW0NNSNNT11%O2=M578NW0NNSNNT11%O3=M280NW0NNT11%O4=M5B4NW0NNSNNT11%O5=M218NW0NNSNNT11%O6=M109NNSNNT11)
WIN(W1=10F8%W2=1044%W3=112C%W4=10F8%W5=1060%W6=10CD)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=111C%O=M5B4NW0NNS%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=10CD%S=O%A=S+%F=AS%O=M109NW0NNSNNT11%RD=0%Q=)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=FA-104%TG=FF%CD=S)

# Model Number: AP7920, Type: APC OS, Version: 270, Hardware Revision: B2, Date: 10/12/2005
Fingerprint APC AP7920 rack PDU (AOS 2.7.0)
Class APC | AOS | 2.X | power-device
CPE cpe:/o:apc:aos:2 auto
SEQ(SP=C-16%GCD=1E848|3D090|5B8D8|7A120|98968%ISR=9F-A9%TI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4%O2=M578%O3=M280%O4=M5B4%O5=M218%O6=M109)
WIN(W1=111C%W2=1068%W3=1180%W4=111C%W5=10C0%W6=1090)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=111C%O=M5B4%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=N)
T7(R=N)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=FA-104%TG=FF%CD=S)

# Model Number:   AP9606, AOS v2.5.4, aos254.bin
# APC PN: AP9606, Web/SNMP Management Card AOS   v3.2.6.b, Smart-UPS & Matrix-UPS APP v3.2.6.a
Fingerprint APC AP9606 Network Management Card (AOS 2.5.4 - 3.2.6)
Class APC | AOS | 2.X | power-device
CPE cpe:/o:apc:aos:2 auto
SEQ(SP=E2-EC%GCD=1-6%ISR=DE-E8%TI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4%O2=M578%O3=M280%O4=M200%O5=M218%O6=M109)
WIN(W1=640%W2=640%W3=640%W4=640%W5=640%W6=640)
ECN(R=Y%DF=N%T=78%TG=80%W=640%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=78%TG=80%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=78%TG=80|FF%W=640%S=O%A=S+%F=AS%O=M109%RD=0%Q=)
T4(R=Y%DF=N%T=78%TG=80%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=78%TG=80%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=78%TG=80%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=78%TG=80%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=78%TG=80%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=AB52|D22B%RUD=G)
IE(DFI=N%T=78%TG=80%CD=Z)

# American Power Conversion Network Management Card AOS v3.7.3, Model Number: AP7940
Fingerprint APC 7940 Network Management Card (AOS 3.7.3)
Class APC | AOS | 3.X | power-device
CPE cpe:/o:apc:aos:3 auto
SEQ(SP=E8-F2%GCD=1-6%ISR=E6-F0%TI=RI%II=RI%SS=S%TS=A)
OPS(O1=M5B4NW0NNSNNT11%O2=M578NW0NNSNNT11%O3=M280NW0NNT11%O4=M5B4NW0NNSNNT11%O5=M218NW0NNSNNT11%O6=|M109NNSNNT11)
WIN(W1=10F8%W2=1044%W3=112C%W4=10F8%W5=1060%W6=0|10CD)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=0|111C%O=|M5B4NW0NNS%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=FA-104%TG=FF%CD=S)

# APC Environmental Manager model APC9340 v3.5.6, with embedded Network Management Card AOS v3.5.7
Fingerprint APC 9340 Network Management Card (AOS 3.5.7)
Class APC | AOS | 3.X | power-device
CPE cpe:/o:apc:aos:3 auto
SEQ(SP=DE-E8%GCD=1-6%ISR=E6-F0%TI=RI%TS=A)
OPS(O1=M5B4NW0NNSNNT11%O2=M578NW0NNSNNT11%O3=M280NW0NNT11%O4=M5B4NW0NNSNNT11%O5=M218NW0NNSNNT11%O6=|M109NNSNNT11)
WIN(W1=10F8%W2=1044%W3=112C%W4=10F8%W5=1060%W6=0|10CD)
ECN(R=Y%DF=N%T=41%TG=40%W=0|111C%O=|M5B4NW0NNS%CC=N%Q=)
T1(R=Y%DF=N%T=41%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=41%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=41%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=41%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=41%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=FA-104%TG=FF%CD=S)

# APC AP79xx metered rack power distribution unit (AOS 3.x)
# AOS v3.6.1
Fingerprint APC AP7900-series power distribution unit (AOS 3.x)
Class APC | AOS | 3.X | power-device
CPE cpe:/o:apc:aos:3 auto
SEQ(SP=E9-FB%GCD=1-6%ISR=E6-F2%TI=RI%CI=RI%TS=A)
OPS(O1=M5B4NW0NNSNNT11%O2=M578NW0NNSNNT11%O3=M280NW0NNT11%O4=M5B4NW0NNSNNT11%O5=M218NW0NNSNNT11%O6=M109NNSNNT11)
WIN(W1=10F8%W2=1044%W3=112C%W4=10F8%W5=1060%W6=10CD)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=111C%O=M5B4NW0NNS%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=FA-104%TG=FF%CD=S)

# APC PDU - AP7930, Version: v3.3.4
Fingerprint APC AP7930 power distribution unit (AOS 3.3.4)
Class APC | AOS | 3.X | power-device
CPE cpe:/o:apc:aos:3 auto
SEQ(SP=73-B7%GCD=1-6%ISR=DE-E8%TI=I%II=I%SS=S%TS=A)
OPS(O1=M5B4NW0NNSNNT11%O2=M578NW0NNSNNT11%O3=M280NW0NNT11%O4=M5B4NW0NNSNNT11%O5=M218NW0NNSNNT11%O6=M109NNSNNT11)
WIN(W1=10F8%W2=1044%W3=112C%W4=10F8%W5=1060%W6=10CD)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=111C%O=M5B4NW0NNS%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=FA-104%TG=FF%CD=S)

# American Power Conversion Network Management Card AOS v3.3.1
# APC PN: AP9619, Network Management Card AOS v3.6.1, Smart-UPS & Matrix-UPS APP v3.5.8
# APC UPS Network Management Card, AOS v 3.3.4
# APC UPS Network Management Card, AOS v3.5.5
# Rack PDU AP7920 v3.5.8, AOS v3.5.9
Fingerprint APC AP9619 Network Management Card (AOS 3.3.1 - 3.6.1)
Class APC | AOS | 3.X | power-device
CPE cpe:/o:apc:aos:3 auto
SEQ(SP=DE-104%GCD=1-6%ISR=E3-FE%TI=I%II=I%SS=S%TS=A)
OPS(O1=M5B4NW0NNSNNT11%O2=M578NW0NNSNNT11%O3=M280NW0NNT11%O4=M5B4NW0NNSNNT11%O5=M218NW0NNSNNT11%O6=M109NNSNNT11)
WIN(W1=10F8%W2=1044%W3=112C%W4=10F8%W5=1060%W6=10CD)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=111C%O=M5B4NW0NNS%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=FA-104%TG=FF%CD=S)

# aos303.bin APC Masterswitch
Fingerprint APC MasterSwitch power distribution unit (AOS 3.0.3)
Class APC | AOS | 3.X | power-device
CPE cpe:/o:apc:aos:3 auto
SEQ(SP=CA-D4%GCD=1-6%ISR=D5-DF%TI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4%O2=M578%O3=M280%O4=M200%O5=M218%O6=M109)
WIN(W1=640%W2=640%W3=640%W4=640%W5=640%W6=640)
ECN(R=Y%DF=N%T=70%TG=80%W=640%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=70%TG=80%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=70%TG=80%W=640%S=O%A=S+%F=AS%O=M109%RD=0%Q=)
T4(R=Y%DF=N%T=70%TG=80%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=70%TG=80%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=70%TG=80%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=70%TG=80%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=70%TG=80%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=96A9%RUD=G)
IE(DFI=N%T=70%TG=80%CD=Z)

# APC Network Management Card AOS v3.5.5 
# APC aos v3.3.4, Date: 01/05/2007
# APC UPS device with a AP9619 network management card installed. The full AOS version number on this device is 3.5.5.
Fingerprint APC Network Management Card (AOS 3.3.4 - 3.5.5)
Class APC | AOS | 3.X | power-device
CPE cpe:/o:apc:aos:3 auto
SEQ(SP=E8-104%GCD=1-6%ISR=E9-FD%TI=I%CI=I%II=I%SS=S%TS=A)
OPS(O1=M5B4NW0NNSNNT11%O2=M578NW0NNSNNT11%O3=M280NW0NNT11%O4=M5B4NW0NNSNNT11%O5=M218NW0NNSNNT11%O6=M109NNSNNT11)
WIN(W1=10F8%W2=1044%W3=112C%W4=10F8%W5=1060%W6=10CD)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=111C%O=M5B4NW0NNS%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=FA-104%TG=FF%CD=S)

# Network Management Card AOS v3.5.7, Rack PDU APP v3.5.6
Fingerprint APC Network Management Card (AOS 3.5.7)
Class APC | AOS | 3.X | power-device
CPE cpe:/o:apc:aos:3 auto
SEQ(SP=5E-B8%GCD=1-6%ISR=DD-E7%TI=RI%TS=A)
OPS(O1=M5B4NW0NNSNNT11%O2=M578NW0NNSNNT11%O3=M280NW0NNT11%O4=M5B4NW0NNSNNT11%O5=M218NW0NNSNNT11%O6=M109NNSNNT11)
WIN(W1=10F8%W2=1044%W3=112C%W4=10F8%W5=1060%W6=10CD)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=111C%O=M5B4NW0NNS%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=FA-104%TG=FF%CD=S)

# APC AOS Version 5.1.1
# APC 5000
# Smart-UPS X 1000
Fingerprint APC Smart-UPS (AOS 5.1.1)
Class APC | AOS | 5.X | power-device
CPE cpe:/o:apc:aos:5 auto
CPE cpe:/h:apc:smart-ups_rt_5000va
CPE cpe:/h:apc:smart-ups_x_1000va
SEQ(R=N)
OPS(O1=M5B4NNSNNT11%O2=M578NNSNNT11%O3=M280NNT11%O4=M5B4NNSNNT11%O5=M218NNSNNT11%O6=M109NNSNNT11)
WIN(W1=10F8%W2=1044%W3=112C%W4=10F8%W5=1060%W6=10CD)
ECN(R=Y%DF=N|Y%T=3B-45%TG=40%W=111C%O=M5B4NNS%CC=N%Q=)
T1(R=Y%DF=N|Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=FA-104%TG=FF%CD=S)

# APC NetBotz 200 Rack Monitor (NBRK0200)
Fingerprint APC NetBotz 200 rack monitor
Class APC | embedded || power-device
SEQ(SP=5F-A9%GCD=1-6%ISR=DD-E7%CI=RD|RI%TS=A)
OPS(O1=M5B4NW0NNSNNT11%O2=M578NW0NNSNNT11%O3=M280NW0NNT11%O4=M5B4NW0NNSNNT11%O5=M218NW0NNSNNT11%O6=M109NNSNNT11)
WIN(W1=10F8%W2=1044%W3=112C%W4=10F8%W5=1060%W6=10CD)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=111C%O=M5B4NW0NNS%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=FA-104%TG=FF%CD=S)

# APC Silcon DP320E
Fingerprint APC Silicon DP320E UPS
Class APC | embedded || power-device
CPE cpe:/h:apc:silicon_dp320e
SEQ(SP=28-32%GCD=30D4|61A8|927C|C350|F424%ISR=9F-A9%TI=I%CI=I%II=I%SS=S%TS=A)
OPS(O1=M5B4NW0NNT11%O2=M578NW0NNT11%O3=M280NW0NNT11%O4=M5B4NW0NNT11%O5=M218NW0NNT11%O6=M109NNT11)
WIN(W1=10F8%W2=1044%W3=112C%W4=10F8%W5=1060%W6=10CD)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=111C%O=M5B4NW0%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=N)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=FA-104%TG=FF%CD=S)

# APC Smart-UPS 3000 RM, APC AOS ftpd  2.6.4  on APC AP9617 network management card
Fingerprint APC Smart-UPS 3000 RM UPS
Class APC | embedded || power-device
SEQ(CI=I%II=I)
OPS(O1=M5B4NW0NNSNNT11%O2=%O3=%O4=%O5=%O6=)
WIN(W1=10F8%W2=0%W3=0%W4=0%W5=0%W6=0)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=0%O=%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=O%F=AR%O=%RD=0%Q=)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=FA-104%TG=FF%CD=S)

# APC Smart-UPS RT 8000 RM XL 8kVA With Link3 network management card.
Fingerprint APC Smart-UPS RT 8000 RM XL UPS
Class APC | embedded || power-device
SEQ(SP=EE-F8%GCD=1-6%ISR=EE-F8%TI=I%CI=I%II=I%SS=S%TS=A)
OPS(O1=M5B4NW0NNSNNT11%O2=M578NW0NNSNNT11%O3=M280NW0NNT11%O4=M5B4NW0NNSNNT11%O5=M218NW0NNSNNT11%O6=M109NNSNNT11)
WIN(W1=10F8%W2=1044%W3=112C%W4=10F8%W5=1060%W6=10CD)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=111C%O=M5B4NW0NNS%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=N)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=FA-104%TG=FF%CD=S)

# APC Environmental Monitoring Unit, model AP9319
# APC Smart-UPS 1000 RM, Firmware 157.4.I, Network Management Card
# APC Environmental Monitoring Unit
Fingerprint APC AP9319 Environmental Monitoring Unit or Smart-UPS 1000 RM UPS
Class APC | embedded || specialized
Class APC | embedded || power-device
SEQ(SP=C-16%GCD=1E848|3D090|5B8D8|7A120|98968%ISR=9F-A9%TI=I%II=I%SS=S%TS=A)
OPS(O1=M5B4NW0NNSNNT11%O2=M578NW0NNSNNT11%O3=M280NW0NNT11%O4=|M5B4NW0NNSNNT11%O5=|M218NW0NNSNNT11%O6=|M109NNSNNT11)
WIN(W1=10F8%W2=1044%W3=112C%W4=0|10F8%W5=0|1060%W6=0|10CD)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=111C%O=M5B4NW0NNS%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=3B-45%TG=40%W=10CD%S=O%A=S+%F=AS%O=M109NW0NNSNNT11%RD=0%Q=)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=FA-104%TG=FF%CD=S)

# A/UX 3.0.2 SVR2 mc68030
# A/UX 3.1.1 SVR2 mc68040
# Apple's A/UX 3.0.1, PING okay, ftp/telnet/uucp: no answer
Fingerprint Apple A/UX 3.0.1 - 3.1.1 SVR2
Class Apple | A/UX | 3.X | general purpose
CPE cpe:/o:apple:a_ux:3 auto
SEQ(SP=0-15%GCD=FA00|1F400|2EE00|3E800|4E200%ISR=96-A0%TI=I%II=I%SS=S%TS=U)
OPS(O1=M400%O2=M400%O3=M400%O4=M400%O5=M400%O6=M400)
WIN(W1=1000%W2=1000%W3=F00%W4=1000%W5=EA8%W6=F87)
ECN(R=Y%DF=N%T=19-23%TG=20%W=1000%O=M400%CC=N%Q=)
T1(R=Y%DF=N%T=19-23%TG=20%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=19-23%TG=20%W=F87%S=O%A=O%F=A%O=%RD=0%Q=)
T4(R=Y%DF=N%T=19-23%TG=20%W=1000%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=19-23%TG=20%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=19-23%TG=20%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=19-23%TG=20%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=Z%RUCK=0%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# Apple A/UX 3.1.1 SVR2 mc68040
Fingerprint Apple A/UX 3.1.1 SVR2
Class Apple | A/UX | 3.X | general purpose
CPE cpe:/o:apple:a_ux:3 auto
SEQ(SP=C-16%GCD=FA00|1F400|2EE00|3E800|4E200%ISR=97-A1%TI=I%II=I%SS=S%TS=U)
OPS(O1=M400%O2=M400%O3=M400%O4=M400%O5=M400%O6=M400)
WIN(W1=1000%W2=1000%W3=F00%W4=1000%W5=EA8%W6=F87)
ECN(R=Y%DF=N%T=19-23%TG=20%W=1000%O=M400%CC=N%Q=)
T1(R=Y%DF=N%T=19-23%TG=20%S=O%A=O|S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=Y%DF=N%T=19-23%TG=20%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=19-23%TG=20%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=19-23%TG=20%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=Z%RUCK=0%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# Apple Time Capsule, firmware 7.3.1
# Apple Airport Extreme
# Linux 2.6.25.18-0.2-default #1 SMP 2008-10-21 16:30:26 +0200 x86_64 x86_64 x86_64 GNU/Linux
Fingerprint Apple AirPort Extreme WAP or Time Capsule NAS device (NetBSD)
Class Apple | embedded || storage-misc
Class Apple | embedded || WAP
CPE cpe:/h:apple:airport_extreme
SEQ(SP=CC-D8%GCD=1-6%ISR=D7-E1%TI=I%II=I%SS=S%TS=0)
OPS(O1=M5B4NW0NNT01SNN%O2=M5B4NW0NNT01SNN%O3=M5B4NW0NNT01%O4=M5B4NW0NNT01SNN%O5=M5B4NW0NNT01SNN%O6=M5B4NNT01SNN)
WIN(W1=8000%W2=8000%W3=8000%W4=8000%W5=8000%W6=8000)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=8000%O=M5B4NW0SNN%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=8000%S=O%A=S+%F=AS%O=M5B4NW0NNT01SNN%RD=0%Q=)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=I%RUCK=G%RUD=G)
IE(DFI=N%T=FA-104%TG=FF%CD=S)

# Apple TimeCapsule 500Gb.
Fingerprint Apple Time Capsule NAS device
Class Apple | embedded || storage-misc
SEQ(CI=I%II=I)
OPS(R=N)
WIN(R=N)
ECN(R=N)
T1(R=N)
T2(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
T3(R=N)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=FA-104%TG=FF%CD=S)

# Airport Express with firmware 6.3.
Fingerprint Apple AirPort Express WAP
Class Apple | embedded || WAP
CPE cpe:/h:apple:airport_express
SEQ(SP=CD-DB%GCD=1-6%ISR=D8-E2%TI=I%CI=I%II=I%SS=S%TS=0)
OPS(O1=M5B4NW1NNT01SNN%O2=M5B4NW1NNT01SNN%O3=M5B4NW1NNT01%O4=M5B4NW1NNT01SNN%O5=M5B4NW1NNT01SNN%O6=M5B4NNT01SNN)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M5B4NW1SNN%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%S=O%A=S+%F=AS%O=M5B4NW1NNT01SNN%RD=0%Q=)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=FA-104%TG=FF%CD=S)

# Apple Airport Express (with Airtunes), using firmware version 6.3.
Fingerprint Apple AirPort Express WAP
Class Apple | embedded || WAP
CPE cpe:/h:apple:airport_express
SEQ(SP=FC-106%GCD=1-6%ISR=105-10F%TI=I%II=I%SS=S%TS=6)
OPS(O1=M5B4NW0NNT11%O2=M5B4NW0NNT11%O3=M5B4NW0NNT11%O4=M5B4NW0NNT11%O5=M5B4NW0NNT11%O6=M5B4NNT11)
WIN(W1=4000%W2=4000%W3=4000%W4=4000%W5=4000%W6=4000)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=4000%O=M5B4NW0%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=70%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Apple Airport Extreme Dual Band firmware version 7.4.2 (Probably NetBSD --Ed.)
Fingerprint Apple AirPort Extreme WAP
Class Apple | embedded || WAP
CPE cpe:/h:apple:airport_extreme
SEQ(SP=CD-DB%GCD=1-6%ISR=D9-E3%TI=I%II=I%SS=S%TS=0)
OPS(O1=M5B4NW0NNT01SNN%O2=M5B4NW0NNT01SNN%O3=M5B4NW0NNT01%O4=M5B4NW0NNT01SNN%O5=M5B4NW0NNT01SNN%O6=M5B4NNT01SNN)
WIN(W1=8000%W2=8000%W3=8000%W4=8000%W5=8000%W6=8000)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=8000%O=M5B4NW0SNN%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=N)
T7(R=N)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=FA-104%TG=FF%CD=S)

# AirPort Extreme (802.11n)
Fingerprint Apple AirPort Extreme WAP
Class Apple | embedded || WAP
CPE cpe:/h:apple:airport_extreme
SEQ(SP=CE-D8%GCD=1-6%ISR=D7-E1%TI=I%II=I%SS=S%TS=0)
OPS(O1=M5B4NW0NNT01SNN%O2=M5B4NW0NNT01SNN%O3=M5B4NW0NNT01%O4=M5B4NW0NNT01SNN%O5=M5B4NW0NNT01SNN%O6=M5B4NNT01SNN)
WIN(W1=8000%W2=8000%W3=8000%W4=8000%W5=8000%W6=8000)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=8000%O=M5B4NW0SNN%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
T7(R=N)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=FA-104%TG=FF%CD=S)

# Apple Airport Extreme (Simultaneous Dual-Band II) router running version 7.5.1 (75100.14) of the operating system.
Fingerprint Apple AirPort Extreme WAP
Class Apple | embedded || WAP
CPE cpe:/h:apple:airport_extreme
SEQ(SP=EF-F9%GCD=1-6%ISR=FA-104%TI=RD%CI=I%II=I%TS=3|6)
OPS(O1=M5B4NW3NNT11SLL%O2=M5B4NW3NNT11SLL%O3=M5B4NW3NNT11%O4=M5B4NW3NNT11SLL%O5=M5B4NW3NNT11SLL%O6=M5B4NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M5B4NW3SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=FA-104%TG=FF%CD=S)

# Apple Airport Extreme Base station, Firmware 7.3.2
Fingerprint Apple AirPort Extreme WAP
Class Apple | embedded || WAP
CPE cpe:/h:apple:airport_extreme
SEQ(SP=D7-E1%GCD=1-6%ISR=D7-E1%TI=I%TS=0)
OPS(R=N)
WIN(R=N)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=8000%O=M5B4NW0SNN%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=O|S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=N)
T7(R=N)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=>0%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=FA-104%TG=FF%CD=S)

# Japanese Apple Airport extreme, dual radios, 802.11a/b/g/n, 2.4 GHz and 5GHz
# Apple Time Capsule 2TB (A1409) with firmware version 7.5.2.
Fingerprint Apple AirPort Extreme WAP or Time Capsule NAS device
Class Apple | embedded || WAP
CPE cpe:/h:apple:airport_extreme
Class Apple | embedded || storage-misc
SEQ(SP=CE-DA%GCD=1-6%ISR=D6-E0%TI=I%CI=I%II=I%SS=O|S%TS=0)
OPS(O1=M5B4NW0NNT01SNN|M5B4NW0NNT11SNN%O2=M5B4NW0NNT01SNN|M5B4NW0NNT11SNN%O3=M5B4NW0NNT01|M5B4NW0NNT11%O4=M5B4NW0NNT01SNN|M5B4NW0NNT11SNN%O5=M5B4NW0NNT01SNN|M5B4NW0NNT11SNN%O6=M5B4NNT01SNN|M5B4NNT11SNN)
WIN(W1=8000%W2=8000%W3=8000%W4=8000%W5=8000%W6=8000)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=8000%O=M5B4NW0SNN%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=O|S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=N)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=FA-104%TG=FF%CD=S)

# Apple Airport Extreme/Time Capsule AFP (protocol 3.2 WAP)
Fingerprint Apple AirPort Extreme WAP or Time Capsule NAS device (NetBSD 4.99)
Class Apple | embedded || WAP
CPE cpe:/h:apple:airport_extreme
Class Apple | embedded || storage-misc
SEQ(SP=CB-D7%GCD=1-6%ISR=D9-E3%TI=I%II=I%SS=S%TS=0)
OPS(O1=M5B4NW0NNT01SNN|M5B4NW0NNT11SNN%O2=M5B4NW0NNT01SNN|M5B4NW0NNT11SNN%O3=M5B4NW0NNT01|M5B4NW0NNT11%O4=M5B4NW0NNT01SNN|M5B4NW0NNT11SNN%O5=M5B4NW0NNT01SNN|M5B4NW0NNT11SNN%O6=M5B4NNT01SNN|M5B4NNT11SNN)
WIN(W1=8000%W2=8000%W3=8000%W4=8000%W5=8000%W6=8000)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=8000%O=M5B4NW0SNN%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=8000%S=O%A=S+%F=AS%O=M5B4NW0NNT01SNN|M5B4NW0NNT11SNN%RD=0%Q=)
T4(R=N)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=N)
T7(R=N)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=FA-104%TG=FF%CD=S)

# iPhone OS 4.3.3
Fingerprint Apple iOS 4.3.3
Class Apple | iOS | 4.X | media device
CPE cpe:/o:apple:iphone_os:4 auto
Class Apple | iOS | 4.X | phone
CPE cpe:/o:apple:iphone_os:4 auto
SEQ(SP=FB-105%GCD=1-6%ISR=FE-108%TI=RD%CI=RD|RI%II=RI%TS=A)
OPS(O1=M5B4NW2NNT11SLL%O2=M5B4NW2NNT11SLL%O3=M5B4NW2NNT11%O4=M5B4NW2NNT11SLL%O5=M5B4NW2NNT11SLL%O6=M5B4NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M5B4NW2SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=O|S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=3C-46%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=3C-46%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T4(R=Y%DF=N%T=3C-46%TG=40%W=0%S=A%A=S%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=O|S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3C-46%TG=40%W=0%S=A%A=S%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3C-46%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# iPad 2
Fingerprint Apple iPad tablet computer (iOS 4)
Class Apple | iOS | 4.X | media device
CPE cpe:/o:apple:iphone_os:4 auto
SEQ(SP=EF-107%GCD=1-6%ISR=F9-10B%TI=RD%CI=RD%II=RI%TS=A)
OPS(O1=M5B4NW2NNT11SLL%O2=M5B4NW2NNT11SLL%O3=M5B4NW2NNT11%O4=M5B4NW2NNT11SLL%O5=M5B4NW2NNT11SLL%O6=M5B4NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=FA-104%TG=FF%W=FFFF%O=M5B4NW2SLL%CC=N)
T1(R=Y%DF=Y%T=FA-104%TG=FF%S=O%A=S+%F=AS%RD=0)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%RD=0)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=Z%A=S+%F=AR%RD=0)
T6(R=Y%DF=Y%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%RD=0)
T7(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=Z%A=S%F=AR%RD=0)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# iPad - iOS 4.3.2
Fingerprint Apple iPad tablet computer (iOS 4.3.2)
Class Apple | iOS | 4.X | media device
CPE cpe:/o:apple:iphone_os:4 auto
SEQ(SP=FE-10C%GCD=1-6%ISR=102-10E%TI=RD%CI=RD|RI%II=RI%TS=7)
OPS(O1=M5B4NW2NNT11SLL%O2=M5B4NW2NNT11SLL%O3=M5B4NW2NNT11%O4=M5B4NW2NNT11SLL%O5=M5B4NW2NNT11SLL%O6=M5B4NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M5B4NW2SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# iPad - iOS 4.3.2
Fingerprint Apple iPad tablet computer (iOS 4.3.2)
Class Apple | iOS | 4.X | media device
CPE cpe:/o:apple:iphone_os:4 auto
SEQ(SP=FE-10C%GCD=1-6%ISR=102-10E%TI=RD%CI=RD|RI%II=RI%TS=8)
OPS(O1=M5B4NW2NNT11SLL%O2=M5B4NW2NNT11SLL%O3=M5B4NW2NNT11%O4=M5B4NW2NNT11SLL%O5=M5B4NW2NNT11SLL%O6=M5B4NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M5B4NW2SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Apple iPad Wifi 16Gb iOS Ver. 4.3.3 (8J3) Model MB292B
Fingerprint Apple iPad tablet computer (iOS 4.3.3)
Class Apple | iOS | 4.X | media device
CPE cpe:/o:apple:iphone_os:4 auto
SEQ(SP=103-10D%GCD=1-6%ISR=104-10E%TI=RD%CI=RD%II=RI%TS=A|B)
OPS(O1=M5B4NW2NNT11%O2=M5B4NW2NNT11SLL%O3=M5B4NW2NNT11%O4=M5B4NW2NNT11SLL%O5=M5B4NW2NNT11SLL%O6=M5B4NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M5B4NW2SLL%CC=N)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=Z%A=S+%F=AS%RD=0)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%RD=0)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%RD=0)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%RD=0)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%RD=0)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# iPhone OS 4.3.3
# Darwin 11.3.0 Darwin Kernel Version 11.3.0
Fingerprint Apple Mac OS X 10.7.3 (Lion) (Darwin 11.3.0) or iOS 4.2 - 4.3.4
Class Apple | iOS | 4.X | media device
CPE cpe:/o:apple:iphone_os:4 auto
Class Apple | iOS | 4.X | phone
CPE cpe:/o:apple:iphone_os:4 auto
Class Apple | Mac OS X | 10.7.X | general purpose
CPE cpe:/o:apple:mac_os_x:10.7.3
SEQ(SP=EF-107%GCD=1-6%ISR=F7-10D%TI=RD%CI=RD|RI%II=RI%TS=A)
OPS(O1=M553NW2NNT11SLL%O2=M553NW2NNT11SLL%O3=M553NW2NNT11%O4=M553NW2NNT11SLL%O5=M553NW2NNT11SLL%O6=M553NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M553NW2SLL%CC=N)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%RD=0)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%RD=0)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%RD=0)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%RD=0)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# iOS 5
# iPad2 iOS 5 beta 5 (9A5274d)
# 3GS iPhone after iOS 5 update + RedSnow 0.9.9.b.5 Jailbreak, Darwin iPhone 11.0.0 Darwin Kernel Version 11.0.0: Thu Sep 15 23:32:27 PDT 2011; root:xnu-1878.4.43~2/RELEASE_ARM_S5L8920X iPhone2,1 arm N88AP Darwin
# 2nd Generation AppleTV running iOS 4.4.2
# iPad iOS v5.0 9A334
# iPhone 4S, iOS 5.0.1 not jailbroken
# IPHONE 3Gs IOS 5.1
# ipad 2, ios 5.1 (9b176)
# iPad 2 (WiFi-only, no GSM) running iOS 5.1 (release 9B176)
# AppleTV2 running Apple TV Software v4.4.4 (3330)
# OSX Mountain Lion 10.8.2
# Apple TV Model MC572LL/A, Software 5.1 (5201)
# Darwin 12.2.0 Darwin Kernel Version 12.2.0: Sat Aug 25 00:48:52 PDT 2012; root:xnu-2050.18.24~1/RELEASE_X86_64 x86_64
# Darwin 12.2.1 Darwin Kernel Version 12.2.1: Thu Oct 18 12:13:47 PDT 2012; root:xnu-2050.20.9~1/RELEASE_X86_64 x86_64
# iPad iOS 6.1 Jailbreaked
# iPad 3 (Model MC705LL/A), running iOS 6.1.2 (10B146)
# Darwin 12.3.0 Darwin Kernel Version 12.3.0: Sun Jan  6 22:37:10 PST 2013; root:xnu-2050.22.13~1/RELEASE_X86_64 x86_64
# iOS 6.1.3 (10B329) Model MC605DN/A Model F/W 04.12.05
Fingerprint Apple Mac OS X 10.8.0 - 10.8.3 (Mountain Lion) or iOS 4.4.2 - 6.1.3 (Darwin 11.0.0 - 12.3.0)
Class Apple | iOS | 4.X | media device
CPE cpe:/o:apple:iphone_os:4
CPE cpe:/a:apple:apple_tv:4
Class Apple | iOS | 4.X | phone
CPE cpe:/o:apple:iphone_os:4 auto
Class Apple | iOS | 5.X | media device
CPE cpe:/o:apple:iphone_os:5 auto
Class Apple | iOS | 5.X | phone
CPE cpe:/o:apple:iphone_os:5 auto
Class Apple | iOS | 6.X | media device
CPE cpe:/o:apple:iphone_os:6 auto
Class Apple | iOS | 6.X | phone
CPE cpe:/o:apple:iphone_os:6 auto
SEQ(SP=E1-109%GCD=1-6%ISR=E6-110%TI=RD|RI%CI=RD|RI%II=RI%TS=8|9|A|B)
OPS(O1=M5B4NW4NNT11SLL|M5B4NW5NNT11SLL%O2=M5B4NW4NNT11SLL|M5B4NW5NNT11SLL%O3=M5B4NW4NNT11|M5B4NW5NNT11%O4=M5B4NW4NNT11SLL|M5B4NW5NNT11SLL%O5=M5B4NW4NNT11SLL|M5B4NW5NNT11SLL%O6=M5B4NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M5B4NW4SLL|M5B4NW5SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# iOS 4
Fingerprint Apple iOS 4.0
Class Apple | iOS | 4.X | phone
CPE cpe:/o:apple:iphone_os:4 auto
SEQ(SP=F1-107%GCD=1-6%ISR=102-10E%TI=RD%CI=RD%II=RI%TS=3)
OPS(O1=M56ANW2NNT11SLL%O2=M56ANW2NNT11SLL%O3=M56ANW2NNT11%O4=M56ANW2NNT11SLL%O5=M56ANW2NNT11SLL%O6=M56ANNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M56ANW2SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# iPhone OS Version 4.1
# iOS 4.2.1 (8C148)
Fingerprint Apple iOS 4.1 - 4.2.1
Class Apple | iOS | 4.X | phone
CPE cpe:/o:apple:iphone_os:4 auto
SEQ(SP=EC-106%GCD=1-6%ISR=FC-108%TI=RD%II=RI%TS=4)
OPS(O1=M5B4NW2NNT11SLL%O2=M5B4NW2NNT11SLL%O3=M5B4NW2NNT11%O4=M5B4NW2NNT11SLL%O5=M5B4NW2NNT11SLL%O6=M5B4NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M5B4NW2SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=O|S+%F=AR%O=%RD=0%Q=)
T6(R=N)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# iPhone 3gs (model: MC637X) i0S 4.3.1 (8G4) (stable, release March 25 2011)
# iOS 4.3.5
Fingerprint Apple iOS 4.3.1 - 4.3.5
Class Apple | iOS | 4.X | phone
CPE cpe:/o:apple:iphone_os:4 auto
Class Apple | iOS | 4.X | media device
CPE cpe:/o:apple:iphone_os:4 auto
SEQ(SP=F2-10A%GCD=1-6%ISR=F8-10E%TI=RD%II=RI%TS=A|C)
OPS(O1=M5B4NW2NNT11SLL%O2=M5B4NW2NNT11SLL%O3=M5B4NW2NNT11%O4=M5B4NW2NNT11SLL%O5=M5B4NW2NNT11SLL%O6=M5B4NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=|M5B4NW2SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=N)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# 4.0 (8A293) on iPhone 3G
# Ipad
# 4.1
Fingerprint Apple iPad tablet computer or iPhone mobile phone (iOS 4.0 - 4.1)
Class Apple | iOS | 4.X | phone
CPE cpe:/o:apple:iphone_os:4 auto
SEQ(SP=F1-10B%GCD=1-6%ISR=FA-110%TI=RD%CI=RD|RI%II=RI%TS=5)
OPS(O1=M5B4NW2NNT11SLL%O2=M5B4NW2NNT11SLL%O3=M5B4NW2NNT11%O4=M5B4NW2NNT11SLL%O5=M5B4NW2NNT11SLL%O6=M5B4NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M5B4NW2SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# iPhone 4, iOS version 4.1(8B117)
Fingerprint Apple iPhone 4 mobile phone (iOS 4.1)
Class Apple | iOS | 4.X | phone
CPE cpe:/o:apple:iphone_os:4 auto
SEQ(SP=FD-107%GCD=1-6%ISR=102-10C%TI=RD%CI=RD|RI%II=RI%TS=3)
OPS(O1=M5B4NW2NNT11SLL%O2=M5B4NW2NNT11SLL%O3=M5B4NW2NNT11%O4=M5B4NW2NNT11SLL%O5=M5B4NW2NNT11SLL%O6=M5B4NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M5B4NW2SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=S%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=S%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# iOS 4.3.2 on iPhone 4
Fingerprint Apple iPhone mobile phone (iOS 4.3.2)
Class Apple | iOS | 4.X | phone
CPE cpe:/o:apple:iphone_os:4 auto
SEQ(SP=FA-108%GCD=1-6%ISR=F9-10F%TI=RD%CI=RD%II=RI%TS=C)
OPS(O1=M5B4NW2NNT11SLL%O2=M5B4NW2NNT11SLL%O3=M5B4NW2NNT11%O4=M5B4NW2NNT11SLL%O5=M5B4NW2NNT11SLL%O6=M5B4NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M5B4NW2SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# iPhone 4, OS 4.3.3 (8J2) accessed through the personal hotspot function.
# iOS 4.3.3
Fingerprint Apple iPhone mobile phone (iOS 4.3.3)
Class Apple | iOS | 4.X | phone
CPE cpe:/o:apple:iphone_os:4.3.3
SEQ(SP=ED-10B%GCD=1-6%ISR=ED-10B%TI=RD%CI=RI%II=RI%TS=A)
OPS(O1=M582NW2NNT11SLL|M582NW3NNT11SLL%O2=M582NW2NNT11SLL|M582NW3NNT11SLL%O3=M582NW2NNT11|M582NW3NNT11%O4=M582NW2NNT11SLL|M582NW3NNT11SLL%O5=M582NW2NNT11SLL|M582NW3NNT11SLL%O6=M582NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M582NW2SLL|M582NW3SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Darwin 9.0.0b5 Darwin Kernel Version 9.0.0b5: Fri Aug 17 17:24:24 PDT 2007; root:xnu-1182~1/RELEASE_I386 i386
# Darwin 9.0.0 Darwin Kernel Version 9.0.0: Tue Oct  9 21:35:55 PDT 2007; root:xnu-1228~1/RELEASE_I386 i386
# Darwin 9.1.0 Darwin Kernel Version 9.1.0: Wed Oct 31 17:48:21 PDT 2007; root:xnu-1228.0.2~1/RELEASE_PPC Power Macintosh
# Darwin 9.1.0 Darwin Kernel Version 9.1.0: Wed Oct 31 17:46:22 PDT 2007; root:xnu-1228.0.2~1/RELEASE_I386 i386
# Darwin 9.0.0 Darwin Kernel Version 9.0.0: Tue Oct  9 21:37:58 PDT 2007; root:xnu-1228~1/RELEASE_PPC Power Macintosh
# Darwin Kernel Version 9.2.0:  Tue Feb 5 16:13:22 PST 2008; root:xnu-1228.3.13~1/RELEASE_I386 i386, Mac OS X Version 10.5.2 (LEOPARD)
# Darwin 9.2.2 Darwin Kernel Version 9.2.2: Tue Mar 4 21:17:34 PST 2008; root:xnu-1228..31~1/RELEASE_I386 i386
# Darwin 9.3.0 Darwin Kernel Version 9.3.0: Fri May 23 00:49:16 PDT 2008; root:xnu-1228.5.18~1/RELEASE_I386 i386
# Darwin 9.4.0 Darwin Kernel Version 9.4.0: Mon Jun  9 19:36:17 PDT 2008; root:xnu-1228.5.20~1/RELEASE_PPC Power Macintosh
# Darwin 9.5.0 Darwin Kernel Version 9.5.0: Wed Sep  3 11:29:43 PDT 2008; root:xnu-1228.7.58~1/RELEASE_I386 i386
# Darwin 9.6.0 Darwin Kernel Version 9.6.0: Mon Nov 24 17:39:01 PST 2008; root:xnu-1228.9.59~1/RELEASE_PPC Power Macintosh
# Darwin 9.7.1 Darwin Kernel Version 9.7.1: Thu Apr 23 13:52:18 PDT 2009; root:xnu-1228.14.1~1/RELEASE_I386 i386
# Darwin 9.8.0 Darwin Kernel Version 9.8.0: Wed Jul 15 16:57:01 PDT 2009; root:xnu-1228.15.4~1/RELEASE_PPC Power Macintosh powerpc
# Darwin 10.0.0 Darwin Kernel Version 10.0.0: Fri Jul 31 22:47:34 PDT 2009; root:xnu-1456.1.25~1/RELEASE_I386 i386
# Darwin 10.2.0 Darwin Kernel Version 10.2.0: Tue Nov  3 10:37:10 PST 2009; root:xnu-1486.2.11~1/RELEASE_I386 i386
# jailbroken iphone ios4
# iPhone OS 4.02 (8A400 )
# Apple iPhone 3GS phone running Apple iOS 4.0.1 (8A306),
# Apple iPhone 4 16GB running Apple iOS 4.1 public release
# iPhone 4 running apple IOS 4.2
# iPod touch 3 with iOS 4.2.1
# OS X 10.6.6
# Darwin 10.8.0 Darwin Kernel Version 10.8.0: Tue Jun  7 16:33:36 PDT 2011; root:xnu-1504.15.3~1/RELEASE_I386 i386
Fingerprint Apple Mac OS X 10.5 - 10.6.8 (Leopard - Snow Leopard) (Darwin 9.0.0b5 - 10.8.0) or iOS 4.0 - 4.2.1
Class Apple | iOS | 4.X | phone
CPE cpe:/o:apple:iphone_os:4 auto
Class Apple | iOS | 4.X | media device
CPE cpe:/o:apple:iphone_os:4 auto
Class Apple | Mac OS X | 10.6.X | general purpose
CPE cpe:/o:apple:mac_os_x:10.6 auto
SEQ(SP=EA-10C%GCD=1-6%ISR=F8-10E%TI=RD|RI%CI=RD|RI%II=RI%TS=3|4)
OPS(O1=M5B4NW1NNT11SLL|M5B4NW2NNT11SLL|M5B4NW3NNT11SLL%O2=M5B4NW1NNT11SLL|M5B4NW2NNT11SLL|M5B4NW3NNT11SLL%O3=M5B4NW1NNT11|M5B4NW2NNT11|M5B4NW3NNT11%O4=M5B4NW1NNT11SLL|M5B4NW2NNT11SLL|M5B4NW3NNT11SLL%O5=M5B4NW1NNT11SLL|M5B4NW2NNT11SLL|M5B4NW3NNT11SLL%O6=M5B4NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M5B4NW1SLL|M5B4NW2SLL|M5B4NW3SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Apple iPhone iOS 5
Fingerprint Apple iOS 5.0
Class Apple | iOS | 5.X | media device
CPE cpe:/o:apple:iphone_os:5 auto
Class Apple | iOS | 5.X | phone
CPE cpe:/o:apple:iphone_os:5 auto
SEQ(SP=F3-109%GCD=1-6%ISR=F3-10B%TI=RD%CI=RD|RI%II=RI%TS=5)
OPS(O1=M5B4NW4NNT11SLL%O2=M5B4NW4NNT11SLL%O3=M5B4NW4NNT11%O4=M5B4NW4NNT11SLL%O5=M5B4NW4NNT11SLL%O6=M5B4NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M5B4NW4SLL%CC=N)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%RD=0)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%RD=0)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%RD=0)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%RD=0)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Apple iOS 5.0.1 for Iphone 4.
Fingerprint Apple iOS 5.0.1
Class Apple | iOS | 5.X | media device
CPE cpe:/o:apple:iphone_os:5 auto
Class Apple | iOS | 5.X | phone
CPE cpe:/o:apple:iphone_os:5 auto
SEQ(SP=E1-109%GCD=1-6%ISR=E6-110%TI=RD|RI%CI=RD|RI%II=RI%TS=9|A)
OPS(O1=M5B4NW4NNT11SLL%O2=M5B4NW4NNT11SLL%O3=M5B4NW4NNT11%O4=M5B4NW4NNT11SLL%O5=M5B4NW4NNT11SLL%O6=M5B4NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# version 5.0.1
Fingerprint Apple iOS 5.0.1
Class Apple | iOS | 5.X | media device
CPE cpe:/o:apple:iphone_os:5 auto
Class Apple | iOS | 5.X | phone
CPE cpe:/o:apple:iphone_os:5 auto
SEQ(SP=FD-107%GCD=1-6%ISR=F8-10A%TI=RD%CI=RD|RI%II=RI%TS=A)
OPS(O1=M550NW4NNT11SLL%O2=M550NW4NNT11SLL%O3=M550NW4NNT11%O4=M550NW4NNT11SLL%O5=M550NW4NNT11SLL%O6=M550NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M550NW4SLL%CC=N)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%RD=0)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%RD=0)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%RD=0)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%RD=0)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Apple iOS v. 5.0.1 (9A405)
# Version 5.1.1
# Apple TV Model MC572FD/A Apple TV Software Version: 5.0.1 (4224)
Fingerprint Apple iOS 5.0.1 - 5.1.1
Class Apple | iOS | 5.X | media device
CPE cpe:/o:apple:iphone_os:5
SEQ(SP=F1-109%GCD=1-6%ISR=FF-10B%TI=RD%II=RI%TS=8|A)
OPS(O1=M5B4NW4NNT11SLL%O2=M5B4NW4NNT11SLL%O3=M5B4NW4NNT11%O4=M5B4NW4NNT11SLL%O5=M5B4NW4NNT11SLL%O6=M5B4NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=N|Y%T=3B-45%TG=40%W=FFFF%O=M5B4NW4SLL%CC=N)
T1(R=Y%DF=N|Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%RD=0)
T6(R=N)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# iOS 5.1.1, jailbroken. Device is iPhone 4s.
Fingerprint Apple iOS 5.0.1 - 5.1.1
Class Apple | iOS | 5.X | media device
CPE cpe:/o:apple:iphone_os:5
SEQ(SP=FC-106%GCD=1-6%ISR=FD-10F%TI=RD%CI=RD%II=RI%TS=9|A)
OPS(O1=M56ANW4NNT11SLL%O2=M56ANW4NNT11SLL%O3=M56ANW4NNT11%O4=M56ANW4NNT11SLL%O5=M56ANW4NNT11SLL%O6=M56ANNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M56ANW4SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# iPad 3 (Verizon LTE) running iOS 5.1.1
Fingerprint Apple iOS 5.1.1
Class Apple | iOS | 5.X | media device
CPE cpe:/o:apple:iphone_os:5 auto
Class Apple | iOS | 5.X | phone
CPE cpe:/o:apple:iphone_os:5 auto
Class Apple | iOS | 5.X | media device
CPE cpe:/o:apple:iphone_os:5 auto
SEQ(SP=FE-108%GCD=1-6%ISR=104-10E%TI=RD%CI=RI%II=RI%TS=A)
OPS(O1=M56CNW4NNT11SLL%O2=M56CNW4NNT11SLL%O3=M56CNW4NNT11%O4=M56CNW4NNT11SLL%O5=M56CNW4NNT11SLL%O6=M56CNNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M56CNW4SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# iOS 5.1.1 on iphone running as wifi hotspot
# iOS 6.1
Fingerprint Apple iOS 5.1.1 - 6.1
Class Apple | iOS | 5.X | media device
CPE cpe:/o:apple:iphone_os:5 auto
Class Apple | iOS | 5.X | phone
CPE cpe:/o:apple:iphone_os:5 auto
Class Apple | iOS | 6.X | media device
CPE cpe:/o:apple:iphone_os:6 auto
Class Apple | iOS | 6.X | phone
CPE cpe:/o:apple:iphone_os:6 auto
SEQ(SP=F3-107%GCD=1-6%ISR=FE-10A%TI=RD%CI=RI%II=RI%TS=A)
OPS(O1=M582NW4NNT11SLL%O2=M582NW4NNT11SLL%O3=M582NW4NNT11%O4=M582NW4NNT11SLL%O5=M582NW4NNT11SLL%O6=M582NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M582NW4SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Apple TV Software 5.2.1 (6025)
Fingerprint Apple TV (iOS 5.2.1)
Class Apple | iOS | 5.X | media device
CPE cpe:/o:apple:iphone_os:5.2.1
SEQ(SP=102-10C%GCD=1-6%ISR=101-10B%TI=RD%CI=RD|RI%II=RI%TS=A)
OPS(R=N)
WIN(R=N)
ECN(R=N)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Apple iPad MC707LL/A (64GB, Wi-Fi, Black) 3rd Generation iOS version: 6.1.3 (10B329)
Fingerprint Apple iOS 6.1.3
Class Apple | iOS | 6.X | media device
CPE cpe:/o:apple:iphone_os:6 auto
SEQ(SP=101-10B%GCD=1-6%ISR=106-110%TI=RD%CI=RD%II=RI%TS=A)
OPS(O1=M5B4NW4NNT11SLL%O2=M5B4NW4NNT11SLL%O3=M5B4NW4NNT11%O4=M5B4NW4NNT11SLL%O5=M5B4NW4NNT11SLL%O6=M5B4NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M5B4NW4SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=I%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# iPhone 3GS old Boot ROM running iOS 6.0.1
Fingerprint Apple iOS 6.0.1
Class Apple | iOS | 6.X | phone
CPE cpe:/o:apple:iphone_os:6 auto
SEQ(SP=101-10B%GCD=1-6%ISR=107-111%TI=RD%CI=RD%II=RI%TS=A)
OPS(O1=M558NW4NNT11SLL%O2=M558NW4NNT11SLL%O3=M558NW4NNT11%O4=M558NW4NNT11SLL%O5=M558NW4NNT11SLL%O6=M558NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M558NW4SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# iPhone 4S, ver 6.1.2 (10B146)
Fingerprint Apple iOS 6.1.2
Class Apple | iOS | 6.X | phone
CPE cpe:/o:apple:iphone_os:6 auto
SEQ(SP=101-10B%GCD=1-6%ISR=108-112%TI=RD%CI=RD%II=RI%TS=A)
OPS(O1=M5B4NW4NNT11SLL%O2=M5B4NW4NNT11SLL%O3=M5B4NW4NNT11%O4=M5B4NW4NNT11SLL%O5=M5B4NW4NNT11SLL%O6=M5B4NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M5B4NW4SLL%CC=N)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=O%F=AS%RD=0)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%RD=0)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%RD=0)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%RD=0)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%RD=0)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Darwin 9.0.0d1 Darwin Kernel Version 9.0.0d1: Wed Oct 10 00:07:50 PDT 2007; root:xnu-933.0.0.204.obj~7/RELEASE_ARM_S5L8900XRB iPod1,1 Darwin, ipod touch 1.1.2 (jailbroken)
# Darwin 9.0.0d1 Darwin Kernel Version 9.0.0d1: Wed Dec 12 00:16:00 PST 2007; root:xnu-933.0.0.211.obj~2/RELEASE_ARM_S5L8900XRB iPod1,1 arm N45AP Darwin, ziphone 2.6b jailbroken ipod touch (1.1.4)
Fingerprint Apple iPod touch audio player (iPhone OS 1.1.2 - 1.1.4, Darwin 9.0.0d1)
Class Apple | iPhone OS | 1.X | media device
CPE cpe:/o:apple:iphone_os:1 auto
SEQ(SP=0-5%GCD=1-6%ISR=15-1F%TI=I%TS=1)
OPS(O1=M5B4NW0NNT11SLL%O2=M5B4NW0NNT11SLL%O3=M5B4NW0NNT11%O4=M5B4NW0NNT11SLL%O5=M5B4NW0NNT11SLL%O6=M5B4NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M5B4NW0SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=N)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Ipod Touch 16Gb. With 1.1.3 upgrade,BSD Subsystem, Openssh, and some other utils. Darwin 9.0.0d1 Darwin Kernel Version 9.0.0d1: Wed Oct 10 00:07:50 PDT 2007; root:xnu-933.0.0.204.obj~7/RELEASE_ARM_S5L8900XRB iPod1,1 unknown
Fingerprint Apple iPod touch audio player (iPhone OS 1.1.3, Darwin 9.0.0d1)
Class Apple | iPhone OS | 1.X | media device
CPE cpe:/o:apple:iphone_os:1 auto
SEQ(SP=0-5%GCD=1-6%ISR=15-1F%TS=1)
OPS(O1=M3FD8NW0NNT11SLL%O2=M3FD8NW0NNT11SLL%O3=M3FD8NW0NNT11%O4=M3FD8NW0NNT11SLL%O5=M3FD8NW0NNT11SLL%O6=M3FD8NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=N|Y%T=3B-45%TG=40%W=0|FFFF%O=|M3FD8NW0SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=Z%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# iPod touch Firmware 1.1.3, jailbroken, ssh installed
Fingerprint Apple iPod touch audio player (iPhone OS 1.1.3, Darwin 9.0.0d1)
Class Apple | iPhone OS | 1.X | media device
CPE cpe:/o:apple:iphone_os:1 auto
SEQ(SP=0-5%GCD=1-6%ISR=16-20%TI=I%II=I%SS=S%TS=1)
OPS(O1=M5B4NW0NNT11SLL%O2=M5B4NW0NNT11SLL%O3=M5B4NW0NNT11%O4=M5B4NW0NNT11SLL%O5=M5B4NW0NNT11SLL%O6=M5B4NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M5B4NW0SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# iPhone, O/S version 2.1 (5F136)
# iPhone Modem Firmware 02.11.07, Version 2.1 (5F136)
Fingerprint Apple iPhone mobile phone (iPhone OS 2.1)
Class Apple | iPhone OS | 1.X | phone
CPE cpe:/o:apple:iphone_os:1 auto
SEQ(SP=FB-107%GCD=1-6%ISR=FD-10B%TI=I%TS=3)
OPS(O1=M5B4NW2NNT11SLL%O2=M5B4NW2NNT11SLL%O3=M5B4NW2NNT11%O4=M5B4NW2NNT11SLL%O5=M5B4NW2NNT11SLL%O6=M5B4NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M5B4NW2SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=O|S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A|O%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=O|S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Darwin iPhone 9.0.0d1 Darwin Kernel Version 9.0.0d1: Fri Jun 22 00:38:56 PDT 2007; root:xnu-933.0.1.178.obj~1/RELEASE_ARM_S5L8900XRB iPhone1,1 Darwin
# This is the fingerprint of an iPhone as of 2007-08-14 (all updates applied)
# Apple iPhone running kernel: "Darwin Kernel Version 9.0.0d1" and DropBear SSH daemon
# Apple iPhone, 8GB model, firmware version 1.0.2, WiFi connection
# iPhone Firmware 1.1.1
# Jailbroken iPod touch running firmware 1.1.1
# Darwin 9.0.0d1 Darwin Kernel Version 9.0.0d1: Thu Sep 20 00:27:53 PDT 2007; root:xnu-933.0.0.203.obj~24/RELEASE_ARM_S5L8900XRBiPod1,1 Darwin
# Darwin iPod 9.0.0d1 Darwin Kernel Version 9.0.0d1: Wed Oct 10 00:07:50 PDT 2007; root:xnu-933.0.0.204.obj~7/RELEASE_ARM_S5L8900XRB iPod1,1 Darwin, iPod Touche firmware 1.1.2 jailbroken (obviously)
# iPod Touch firmware 1.1.3 (jailbreaked)
Fingerprint Apple iPhone mobile phone or iPod touch audio player (iPhone OS 1.0.2 - 1.1.3, Darwin 9.0.0d1)
Class Apple | iPhone OS | 1.X | phone
CPE cpe:/o:apple:iphone_os:1 auto
Class Apple | iPhone OS | 1.X | media device
CPE cpe:/o:apple:iphone_os:1 auto
SEQ(SP=0-5%GCD=1-6%ISR=15-1F%TI=I%II=I%SS=S%TS=1)
OPS(O1=M5B4NW0NNT11SLL%O2=M5B4NW0NNT11SLL%O3=M5B4NW0NNT11%O4=M5B4NW0NNT11SLL%O5=M5B4NW0NNT11SLL%O6=M5B4NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M5B4NW0SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# iPhone 3g, running firmware 2.1
# iPhone 3G, Firmware version 2.2
# Darwin Kernel Version 9.4.1: Mon Dec  8 20:59:30 PST 2008; root:xnu-1228.7.37~4/RELEASE_ARM_S5L8900X iPhone1,2 arm N82AP Darwin
Fingerprint Apple iPhone mobile phone (iPhone OS 2.1 - 2.2, Darwin 9.4.1)
Class Apple | iPhone OS | 2.X | media device
CPE cpe:/o:apple:iphone_os:2 auto
SEQ(SP=F2-108%GCD=1-6%ISR=F6-10A%TI=I%II=I%SS=S%TS=3)
OPS(O1=M3FD8NW2NNT11SLL%O2=M3FD8NW2NNT11SLL%O3=M3FD8NW2NNT11%O4=M3FD8NW2NNT11SLL%O5=M3FD8NW2NNT11SLL%O6=M3FD8NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M3FD8NW2SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=Z%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Apple iPod Touch Firmware 2.1
Fingerprint Apple iPod touch audio player (iPhone OS 2.1)
Class Apple | iPhone OS | 2.X | media device
CPE cpe:/o:apple:iphone_os:2 auto
SEQ(SP=0-5%GCD=1-6%ISR=15-1F%TI=I%II=I%SS=S%TS=3)
OPS(O1=M5B4NW2NNT11SLL%O2=M5B4NW2NNT11SLL%O3=M5B4NW2NNT11%O4=M5B4NW2NNT11SLL%O5=M5B4NW2NNT11SLL%O6=M5B4NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=N%T=41%TG=40%W=FFFF%O=M5B4NW2SLL%CC=N%Q=)
T1(R=Y%DF=N%T=41%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=41%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=41%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=41%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=N)
U1(DF=N%T=41%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=41%TG=40%CD=S)

# Apple iTouch First Gen, Model Number: MA623LL , running firmware version 2.1 (5F137)
Fingerprint Apple iPod touch audio player (iPhone OS 2.1)
Class Apple | iPhone OS | 2.X | media device
CPE cpe:/o:apple:iphone_os:2 auto
SEQ(SP=F4-FE%GCD=1-6%ISR=EE-F8%TI=I%II=I%SS=S%TS=A)
OPS(O1=M5B4NW0NNSNNT11%O2=M578NW0NNSNNT11%O3=M280NW0NNT11%O4=M5B4NW0NNSNNT11%O5=M218NW0NNSNNT11%O6=M109NNSNNT11)
WIN(W1=4988%W2=467C%W3=44B0%W4=4988%W5=4598%W6=4431)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=4470%O=M5B4NW0NNS%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=N)
T7(R=N)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=FA-104%TG=FF%CD=S)

# iPod touch 2nd generation, (Firmware) Version: 2.2 (5G77a), Model: MB528BT
Fingerprint Apple iPod touch audio player (iPhone OS 2.2)
Class Apple | iPhone OS | 2.X | media device
CPE cpe:/o:apple:iphone_os:2 auto
SEQ(R=N)
OPS(O1=%O2=%O3=%O4=%O5=%O6=)
WIN(W1=0%W2=0%W3=0%W4=0%W5=0%W6=0)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=0%O=%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=Z%A=S+%F=AR%RD=0%Q=)
T2(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# iPhone model MB500X firmware version 2.0.2 (5C1)
Fingerprint Apple iPhone mobile phone (iPhone OS 2.0.2)
Class Apple | iPhone OS | 2.X | phone
CPE cpe:/o:apple:iphone_os:2 auto
SEQ(SP=0-5%GCD=1-6%ISR=16-20%TI=I%II=I%SS=S%TS=3)
OPS(O1=M4D8NW2NNT11SLL%O2=M4D8NW2NNT11SLL%O3=M4D8NW2NNT11%O4=M4D8NW2NNT11SLL%O5=M4D8NW2NNT11SLL%O6=M4D8NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M4D8NW2SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# UK iPhone 1st gen (EDGE/non 3G) OS Ver 2.1 (5F136), Model MB213B, Carrier O2 2.6
# iPhone 3G
# iPhone no-3G, firmware 2.1 jailbroken & unlocked via QuickPwn.
Fingerprint Apple iPhone mobile phone (iPhone OS 2.1)
Class Apple | iPhone OS | 2.X | phone
CPE cpe:/o:apple:iphone_os:2 auto
SEQ(SP=F0-109%GCD=1-6%ISR=100-10E%TI=I%II=I%SS=S%TS=4)
OPS(O1=M5B4NW2NNT11SLL%O2=M5B4NW2NNT11SLL%O3=M5B4NW2NNT11%O4=M5B4NW2NNT11SLL%O5=M5B4NW2NNT11SLL%O6=M5B4NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M5B4NW2SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# iPhone OS version 2.2
Fingerprint Apple iPhone mobile phone (iPhone OS 2.2)
Class Apple | iPhone OS | 2.X | phone
CPE cpe:/o:apple:iphone_os:2 auto
SEQ(SP=FA-108%GCD=1-6%ISR=100-10A%TI=I%II=I%SS=S%TS=2)
OPS(O1=M5B4NW2NNT11SLL%O2=M5B4NW2NNT11SLL%O3=M5B4NW2NNT11%O4=M5B4NW2NNT11SLL%O5=M5B4NW2NNT11SLL%O6=M5B4NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M5B4NW2SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# iPhone 8 Gig, Version 2.2.1 (5H11), Model # MB629C, Modem Firmware 02.30.03
Fingerprint Apple iPhone mobile phone (iPhone OS 2.2.1)
Class Apple | iPhone OS | 2.X | phone
CPE cpe:/o:apple:iphone_os:2 auto
SEQ(SP=FC-10A%GCD=1-6%ISR=100-10A%TI=I%II=I%SS=S%TS=3)
OPS(O1=M5B4NW2NNT11SLL%O2=M5B4NW2NNT11SLL%O3=M5B4NW2NNT11%O4=M5B4NW2NNT11SLL%O5=M5B4NW2NNT11SLL%O6=M5B4NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M5B4NW2SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=N)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# iphone OS 2.x phone generation 1
Fingerprint Apple iPhone mobile phone (iPhone OS)
Class Apple | iPhone OS | 2.X | phone
CPE cpe:/o:apple:iphone_os:2 auto
SEQ(SP=F9-105%GCD=1-6%ISR=FA-104%TI=I%II=I%SS=S%TS=3)
OPS(O1=M5B4NW2NNT11SLL%O2=M5B4NW2NNT11SLL%O3=M5B4NW2NNT11%O4=M5B4NW2NNT11SLL%O5=M5B4NW2NNT11SLL%O6=M5B4NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=FA-104%TG=FF%W=FFFF%O=M5B4NW2SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=FA-104%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=Y%T=FA-104%TG=FF%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
T3(R=N)
T4(R=Y%DF=Y%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# iPhone 3G 16GB
# Apple iPhone running 2.0 firmware
# iPhone OS 2.0, jailbroken with iPhone Dev-Team's Pwnage Tool 2.0, running on an iPod Touch. Darwin 9.3.1 ARM
# Unlocked Iphone running 2.0 Firmware with SSH open.
# unlocked ipod touch 32gb, running openssh 2.0
# Darwin 9.3.1 Darwin Kernel Version 9.3.1: Sun Jun 15 21:37:01 PDT 2008; root:xnu-1228.6.76~45/RELEASE_ARM_S5L8900X iPhone1,2 arm N82AP Darwin
# iPod Touch running iPhone OS 2.0.1
# Running iPhoneOS 2.0.2
Fingerprint Apple iPhone mobile phone or iPod touch audio player (iPhone OS 2.0.1 - 2.0.2, Darwin 9.3.1)
Class Apple | iPhone OS | 2.X | phone
CPE cpe:/o:apple:iphone_os:2 auto
Class Apple | iPhone OS | 2.X | media device
CPE cpe:/o:apple:iphone_os:2 auto
SEQ(SP=0-5%GCD=1-6%ISR=15-1F%TI=I%II=I%SS=S%TS=3)
OPS(O1=M5B4NW2NNT11SLL%O2=M5B4NW2NNT11SLL%O3=M5B4NW2NNT11%O4=M5B4NW2NNT11SLL%O5=M5B4NW2NNT11SLL%O6=M5B4NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M5B4NW2SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# iPhone OS version 2.1
# iPhone 2G - OS 2.1
# 1st gen iPhone running 2.1 OS.
# iPhone 3G OS Version: 21 (5F136)
# iPod Touch 1st generation 2.1 firmware
# iphone 3G 2.1 software
# iPhone OS version 2.1 build 5F137 for iPod Touch 1st Gen
# iPod Touch First Generation (MA627ZO), iPhoneO OS 2.1 (5F137)
# Apple iPhone Model MB046LL version 2.1 (5F136) Modem Firmware 02.11.07
# iPod Touch second generation with firmware 2.1.1
# iPod Touch, second generation. OS Version 2.2 (5G77a)
# iPod Touch 1st Generation 16GB running Jailbreak 2.2 (5G77) Firmware.
# Darwin 9.4.1 Darwin Kernel Version 9.4.1: Sat Nov  1 19:09:48 PDT 2008; root:xnu-1228.7.36~2/RELEASE_ARM_S5L8900X iPhone1,2 arm N82AP Darwin
# iPhone 2.2.2_5G77 release (current)
# Darwin 9.4.1 Darwin Kernel Version 9.4.1: Mon Dec  8 20:59:30 PST 2008; root:xnu-1228.7.37~4/RELEASE_ARM_S5L8900X iPhone1,1 arm M68AP Darwin
# iPod touch 2.2
# iPhone OS 2.2.1 (5H11) release.
Fingerprint Apple iPhone mobile phone or iPod touch media player (iPhone OS 2.1 - 2.2.2, Darwin 9.4.1)
Class Apple | iPhone OS | 2.X | phone
CPE cpe:/o:apple:iphone_os:2 auto
Class Apple | iPhone OS | 2.X | media device
CPE cpe:/o:apple:iphone_os:2 auto
SEQ(SP=F1-109%GCD=1-6%ISR=FC-10E%TI=I%II=I%SS=S%TS=3)
OPS(O1=M5B4NW2NNT11SLL%O2=M5B4NW2NNT11SLL%O3=M5B4NW2NNT11%O4=M5B4NW2NNT11SLL%O5=M5B4NW2NNT11SLL%O6=M5B4NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M5B4NW2SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# iPod Touch - Software Version 2.1 - Original Apple
Fingerprint Apple iPod touch media player (iPhone OS 2.1)
Class Apple | iPhone OS | 2.X | phone
CPE cpe:/o:apple:iphone_os:2 auto
Class Apple | iPhone OS | 2.X | media device
CPE cpe:/o:apple:iphone_os:2 auto
SEQ(SP=F4-10C%GCD=1-6%ISR=102-10C%TI=I%II=I%SS=S%TS=1)
OPS(O1=M5B4NW2NNT11SLL%O2=M5B4NW2NNT11SLL%O3=M5B4NW2NNT11%O4=M5B4NW2NNT11SLL%O5=M5B4NW2NNT11SLL%O6=M5B4NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M5B4NW2SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# iPad Version 3.2 (7B367) Model MB292LL
Fingerprint Apple iPad tablet computer (iPhone OS 3.2)
Class Apple | iPhone OS | 3.X | general purpose
CPE cpe:/o:apple:iphone_os:3 auto
SEQ(SP=FB-109%GCD=1-6%ISR=FE-10A%TI=RD%CI=RD|RI%II=RI%TS=1)
OPS(O1=M5B4NW2NNT11SLL%O2=M5B4NW2NNT11SLL%O3=M5B4NW2NNT11%O4=M5B4NW2NNT11SLL%O5=M5B4NW2NNT11SLL%O6=M5B4NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M5B4NW2SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# 3.0 Beta 4 running on iPod Touch 1st generation
# iPhone 3gs, OS 3.1.2, Jailbroken w/ Blackra1n R3
Fingerprint Apple iPhone mobile phone or iPod touch media player (iPhone OS 3.0 - 3.1.2)
Class Apple | iPhone OS | 3.X | media device
CPE cpe:/o:apple:iphone_os:3 auto
Class Apple | iPhone OS | 3.X | phone
CPE cpe:/o:apple:iphone_os:3 auto
SEQ(SP=F5-FF%GCD=1-6%ISR=F2-10C%TI=RD%CI=RD|RI%II=RI%TS=3)
OPS(O1=M3FD8NW2NNT11SLL%O2=M3FD8NW2NNT11SLL%O3=M3FD8NW2NNT11%O4=M3FD8NW2NNT11SLL%O5=M3FD8NW2NNT11SLL%O6=M3FD8NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M3FD8NW2SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=Z%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# iPhone 3GS running OS 3.2
Fingerprint Apple iPhone 3GS mobile phone (iPhone OS 3.2)
Class Apple | iPhone OS | 3.X | phone
CPE cpe:/o:apple:iphone_os:3 auto
SEQ(SP=FA-104%GCD=1-6%ISR=FF-109%TI=RD%CI=RD%II=RI%TS=5)
OPS(O1=M5B4NW2NNT11SLL%O2=M5B4NW2NNT11SLL%O3=M5B4NW2NNT11%O4=M5B4NW2NNT11SLL%O5=M5B4NW2NNT11SLL%O6=M5B4NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M5B4NW2SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Apple iPhone OS 3.0 Beta
# Apple iPhone 3G S, MC134B, iPhone OS 3.0 (7A341), Released: Friday 19 June 2009 in the UK
# iPhone 2G, Unlocked and Jailbroken
# Darwin 10.0.0d3 Darwin Kernel Version 10.0.0d3: Fri Sep 25 23:35:35 PDT 2009; root:xnu-1357.5.30~3/RELEASE_ARM_S5L8920X iPhone2,1 arm N88AP Darwin, iPhone 3GS 32MB running iPhone OS 3.1.2 (Build 7D11)
Fingerprint Apple iPhone mobile phone (iPhone OS 3.0 - 3.1.2)
Class Apple | iPhone OS | 3.X | phone
CPE cpe:/o:apple:iphone_os:3 auto
SEQ(SP=F7-10B%GCD=1-6%ISR=F9-111%TI=RD%CI=RD%II=RI%TS=4)
OPS(O1=M5B4NW2NNT11SLL%O2=M5B4NW2NNT11SLL%O3=M5B4NW2NNT11%O4=M5B4NW2NNT11SLL%O5=M5B4NW2NNT11SLL%O6=M5B4NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M5B4NW2SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# iPhone OS 3.0 (7A341 on iPhone 3G)
# iPhone OS 3.1 beta 3 (build 7C116a)
# Darwin s-iPhone 10.0.0d3 Darwin Kernel Version 10.0.0d3: Wed May 13 22:16:49 PDT 2009; root:xnu-1357.2.89~4/RELEASE_ARM_S5L8920X iPhone2,1 arm N88AP Darwin, Iphone OS 3.0.1
# iPhone 3GS Firmware 3.1.3 16GB (3rd Generation) Internet Tethering using USB
# iPhone 3GS running 3.2.1
# iOS 4.2.1 (8C148)
Fingerprint Apple iPhone mobile phone (iPhone OS 3.0 - iOS 4.2.1)
Class Apple | iPhone OS | 3.X | phone
CPE cpe:/o:apple:iphone_os:3 auto
Class Apple | iOS | 3.X | phone
CPE cpe:/o:apple:iphone_os:3 auto
SEQ(SP=ED-10B%GCD=1-6%ISR=F6-10A%TI=RD%CI=RD|RI%II=RI%TS=3)
OPS(O1=M582NW2NNT11SLL%O2=M582NW2NNT11SLL%O3=M582NW2NNT11%O4=M582NW2NNT11SLL%O5=M582NW2NNT11SLL%O6=M582NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M582NW2SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# iPhone OS Version 3 Beta
# iphone 3.0 7A341
# Jailbroken with redsn0w, running OS 3.0.1
# Iphone Os 3.1(7c144)
# iPhone 3GS running OS 3.2
# iPhone 3GS version 3.0 (7S341) Model: MB715LL
# iPhone 2G (original iPhone) model nr. A1203, Darwin 10.0.0d3 Darwin Kernel Version 10.0.0d3: Wed May 13 22:11:58 PDT 2009; root:xnu-1357.2.89~4/RELEASE_ARM_S5L8900X iPhone1,1 arm M68AP Darwin, iPhone OS 3.0
# iPhone OS v. 3.1.2(7D11) running on iPod Touch (2nd Gen)
# Iphone OS 3.1.3
Fingerprint Apple iPhone mobile phone or iPod touch media player (iPhone OS 3.0 - 3.2, Darwin 10.0.0d3)
Class Apple | iPhone OS | 3.X | phone
CPE cpe:/o:apple:iphone_os:3 auto
Class Apple | iPhone OS | 3.X | media device
CPE cpe:/o:apple:iphone_os:3 auto
SEQ(SP=F3-109%GCD=1-6%ISR=FA-10C%TI=RD%CI=RD|RI%II=RI%TS=3)
OPS(O1=M5B4NW2NNT11SLL%O2=M5B4NW2NNT11SLL%O3=M5B4NW2NNT11%O4=M5B4NW2NNT11SLL%O5=M5B4NW2NNT11SLL%O6=M5B4NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M5B4NW2SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Apple iPhone OS 3, not connected via USB to iTunes for sychronization (affecting sync port)
Fingerprint Apple iPhone OS 3
Class Apple | iPhone OS | 3.X | phone
CPE cpe:/o:apple:iphone_os:3 auto
SEQ(SP=FD-107%GCD=1-6%ISR=101-10B%TI=RD%CI=RD|RI%II=RI%TS=3)
OPS(O1=M5B4NW2NNT11SLL%O2=M5B4NW2NNT11SLL%O3=M5B4NW2NNT11%O4=M5B4NW2NNT11SLL%O5=M5B4NW2NNT11SLL%O6=M5B4NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=FA-104%TG=FF%W=FFFF%O=M5B4NW2SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=FA-104%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=Y%T=FA-104%TG=FF%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
T3(R=N)
T4(R=Y%DF=Y%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# iPhone OS 3.01
Fingerprint Apple iPhone OS 3.0.1
Class Apple | iPhone OS | 3.X | phone
CPE cpe:/o:apple:iphone_os:3 auto
SEQ(SP=FF-109%GCD=1-6%ISR=FC-106%TI=RD%CI=RD|RI%II=RI%TS=3)
OPS(O1=M55CNW2NNT11SLL%O2=M55CNW2NNT11SLL%O3=M55CNW2NNT11%O4=M55CNW2NNT11SLL%O5=M55CNW2NNT11SLL%O6=M55CNNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M55CNW2SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# firmware 3.1.2
Fingerprint Apple iPhone OS 3.1.2
Class Apple | iPhone OS | 3.X | phone
CPE cpe:/o:apple:iphone_os:3 auto
SEQ(SP=F8-102%GCD=1-6%ISR=103-10D%TI=RD%CI=RD%II=RI%TS=4)
OPS(O1=M552NW2NNT11SLL%O2=M552NW2NNT11SLL%O3=M552NW2NNT11%O4=M552NW2NNT11SLL%O5=M552NW2NNT11SLL%O6=M552NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=0|FFFF%O=M552NW2SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# OS 3.1.2 Jailbreaked
# Apple iPad
# IOS 4.0
# Os Family: 4.0
# iPhone OS 4.2.1
# iphone os v4.2.1 (8C148)
# Apple TV 2 with iOS 4.2.1. Internal firmware version is 4.1.1
Fingerprint Apple iPhone OS 3.1.2 - iOS 4.2.1
Class Apple | iPhone OS | 3.X | phone
CPE cpe:/o:apple:iphone_os:3 auto
Class Apple | iOS | 4.X | phone
CPE cpe:/o:apple:iphone_os:4 auto
SEQ(SP=F6-108%GCD=1-6%ISR=FD-10B%TI=RD%II=RI%TS=3)
OPS(O1=M5B4NW2NNT11SLL%O2=M5B4NW2NNT11SLL%O3=M5B4NW2NNT11%O4=M5B4NW2NNT11SLL%O5=M5B4NW2NNT11SLL%O6=M5B4NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M5B4NW2SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=N)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Darwin 2gdev 9.3.1 Darwin Kernel Version 9.3.1: Sun Jun 15 21:37:01 PDT 2008; root:xnu-1228.6.76~45/RELEASE_ARM_S5L8900X iPhone1,1 arm M68AP Darwin, scanned from localhost using Cydia packaged Nmap 4.50
Fingerprint Apple iPhone mobile phone (iPhone OS, Darwin 9.3.1)
Class Apple | iPhone OS || phone
CPE cpe:/o:apple:iphone_os auto
SEQ(SP=0-5%GCD=1-6%ISR=15-1F%TI=I%II=I%SS=S%TS=3|4)
OPS(O1=M3FD8NW2NNT11SLL%O2=M3FD8NW2NNT11SLL%O3=M3FD8NW2NNT11%O4=M3FD8NW2NNT11SLL%O5=M3FD8NW2NNT11SLL%O6=M3FD8NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M3FD8NW2SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=Z%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Darwin 5.5 Darwin Kernel Version 5.5: Thu May 30 14:51:26 PDT 2002; root:xnu/xnu-201.42.3-obj~1/Release_PPC Power Macintosh powerpc
Fingerprint Apple Mac OS X Server 10.1 (Darwin 5.5)
Class Apple | Mac OS X | 10.1.X | general purpose
CPE cpe:/o:apple:mac_os_x:10.1 auto
SEQ(SP=F8-10A%GCD=1-6%ISR=FD-10F%TI=I%II=I%SS=S%TS=1)
OPS(O1=M5B4NW0NNT11%O2=M5B4NW0NNT11%O3=M5B4NW0NNT11%O4=M5B4NW0NNT11%O5=M5B4NW0NNT11%O6=M5B4NNT11)
WIN(W1=8218%W2=8220%W3=8204%W4=80E8%W5=80F4%W6=807A)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=832C%O=M5B4NW0%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=807A%S=O%A=S+%F=AS%O=M5B4NW0NNT11%RD=0%Q=)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# Darwin Kernel Version 6.8: Wed Sep 10 15:20:55 PDT 2003; root:xnu/xnu-344.49.obj~2/RELEASE_PPC  Power Macintosh powerpc
# Darwin 6.8 Darwin Kernel Version 6.8: Wed Sep 10 15:20:55 PDT 2003; root:xnu/xnu-344.49.obj~2/RELEASE_PPC  Power Macintosh powerpc
Fingerprint Apple Mac OS X Server 10.2.8 (Jaguar) (Darwin 6.8, PowerPC)
Class Apple | Mac OS X | 10.2.X | general purpose
CPE cpe:/o:apple:mac_os_x:10.2.8
SEQ(SP=FB-111%GCD=1-6%ISR=104-10E%TI=I%II=I%SS=S%TS=1)
OPS(O1=M5B4NW0NNT11%O2=M5B4NW0NNT11%O3=M5B4NW0NNT11%O4=M5B4NW0NNT11%O5=M5B4NW0NNT11%O6=M5B4NNT11)
WIN(W1=8218%W2=8220%W3=8204%W4=80E8%W5=80F4%W6=807A)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=832C%O=M5B4NW0%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=807A%S=O%A=S+%F=AS%O=M5B4NW0NNT11%RD=0%Q=)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# MAC OS X 10.3.9 (7W98) on PowerPC (Darwin Kernel 7.9.0)
Fingerprint Apple Mac OS X 10.3.9 (Panther) (Darwin 7.9.0, PowerPC)
Class Apple | Mac OS X | 10.3.X | general purpose
CPE cpe:/o:apple:mac_os_x:10.3.9
SEQ(R=N)
OPS(O1=%O2=%O3=%O4=%O5=%O6=)
WIN(W1=0%W2=0%W3=0%W4=0%W5=0%W6=0)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=0%O=%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45|7C-86%TG=40|80%S=Z%A=S+%F=AR%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=2B18%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Darwin version 7.9.0: Wed mar 30 20:11:1 7 PST 2005; root:xnu/xnu-571.12.7.obj~1/RELEASE_PPC Power Macintosh powerpc
Fingerprint Apple Mac OS X 10.3.9 (Panther) (Darwin 7.9.0, PowerPC)
Class Apple | Mac OS X | 10.3.X | general purpose
CPE cpe:/o:apple:mac_os_x:10.3.9
SEQ(SP=F8-108%GCD=1-6%ISR=F6-110%TI=I%II=I%SS=S%TS=1)
OPS(O1=M5B4NW0NNT11%O2=M5B4NW0NNT11%O3=M5B4NW0NNT11%O4=M5B4NW0NNT11%O5=M5B4NW0NNT11%O6=M5B4NNT11)
WIN(W1=8218%W2=8220%W3=8204%W4=80E8%W5=80F4%W6=807A)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=832C%O=M5B4NW0%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Darwin 7.9.0 Darwin Kernel Version 7.9.0: Wed Mar 30 20:11:17 PST 2005; root:xnu-517.12.7.obj~1/RELEASE_PPC Power Macintosh powerpc (Mac OS X v.10.3.9)
Fingerprint Apple Mac OS X 10.3.9 (Panther) (Darwin 7.9.0, PowerPC)
Class Apple | Mac OS X | 10.3.X | general purpose
CPE cpe:/o:apple:mac_os_x:10.3.9
SEQ(SP=FE-108%GCD=1-6%ISR=109-113%TI=I%II=I%SS=S%TS=1)
OPS(O1=M5B4NW0NNT11%O2=M5B4NW0NNT11%O3=M5B4NW0NNT11%O4=M5B4NW0NNT11%O5=M5B4NW0NNT11%O6=M5B4NNT11)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M5B4NW0%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Darwin 7.9.0 Darwin Kernel Version 7.9.0: Wed Mar 30 20:11:17 PST 2005; root:xnu/xnu-517.12.7.obj~1/RELEASE_PPC  Power Macintosh powerpc
Fingerprint Apple Mac OS X 10.3.9 (Panther) (Darwin 7.9.0, PowerPC)
Class Apple | Mac OS X | 10.3.X | general purpose
CPE cpe:/o:apple:mac_os_x:10.3.9
SEQ(SP=100-10A%GCD=1-6%ISR=106-110%TI=I%II=I%SS=S%TS=U)
OPS(O1=M3FD8%O2=M3FD8%O3=M3FD8%O4=M3FD8%O5=M3FD8%O6=M3FD8)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M3FD8%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Darwin 7.9.0 Darwin Kernel Version 7.9.0: Wed Mar 30 20:11:17 PST 2005; root:xnu/xnu-517.12.7.obj~1/RELEASE_PPC  Power Macintosh powerpc
Fingerprint Apple Mac OS X 10.3.9 (Panther) (Darwin 7.9.0, PowerPC)
Class Apple | Mac OS X | 10.3.X | general purpose
CPE cpe:/o:apple:mac_os_x:10.3.9
SEQ(SP=FE-108%GCD=1-6%ISR=FF-111%TI=I%CI=I%TS=U)
OPS(O1=M5B4%O2=M5B4%O3=M5B4%O4=M5B4%O5=M5B4%O6=M5B4)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M5B4%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Apple Mac OS X 10.3.9 (Panther) - Darwin Kernel Version 7.9.0 Wed Mar 30 20:11:17 PST 2005; root:xnu/xnu-517.12.7.obj~1/RELEASE_PPC  Power Macintosh powerpc
# Apple Mac OS X 10.4.5 on PPC
Fingerprint Apple Mac OS X 10.3.9 (Panther) - 10.4.5 (Tiger) (Darwin 7.9.0 - 8.5.0, PowerPC)
Class Apple | Mac OS X | 10.3.X | general purpose
CPE cpe:/o:apple:mac_os_x:10.3 auto
SEQ(SP=F9-10B%GCD=1-6%ISR=101-111%TI=I%II=I%SS=S%TS=1)
OPS(O1=M3FD8NW0NNT11%O2=M3FD8NW0NNT11%O3=M3FD8NW0NNT11%O4=M3FD8NW0NNT11%O5=M3FD8NW0NNT11%O6=M3FD8NNT11)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M3FD8NW0%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Apple eMac G4 1.25GHz, Mac OS X 10.4.7 (uname -a: Darwin 8.7.8 Darwin Kernel Version 8.7.8: Fri May 26 15:20:53 PDT 2006; root:xnu-792.6.76.obj~1/RELEASE_PPC Power Maciontosh powerpc)
# Apple Mac OS X 10.3.9 (PowerPC)
Fingerprint Apple Mac OS X 10.3.9 (Panther) - 10.4.7 (Tiger) (Darwin 7.9.0 - 8.7.8, PowerPC)
Class Apple | Mac OS X | 10.3.X | general purpose
CPE cpe:/o:apple:mac_os_x:10.3 auto
Class Apple | Mac OS X | 10.4.X | general purpose
CPE cpe:/o:apple:mac_os_x:10.4 auto
SEQ(SP=AC-108%GCD=1-6%ISR=EA-110%TI=I|RD%II=I%SS=S%TS=1)
OPS(O1=M5B4NW0NNT11%O2=M5B4NW0NNT11%O3=M5B4NW0NNT11%O4=M5B4NW0NNT11%O5=M5B4NW0NNT11%O6=M5B4NNT11)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=N|Y%T=3B-45%TG=40%W=FFFF%O=M5B4NW0%CC=N%Q=)
T1(R=Y%DF=N|Y%T=3B-45%TG=40%S=O|Z%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Darwin 7.9.0 Darwin Kernel Version 7.9.0: Wed Mar 30 20:11:17 PST 2005; root:xnu/xnu-517.12.7.obj~1/RELEASE_PPC  Power Macintosh powerpc (Mac OS X Server 10.3.9 (7W98))
Fingerprint Apple Mac OS X Server 10.3.9 (Panther) (Darwin 7.9.0, PowerPC)
Class Apple | Mac OS X | 10.3.X | general purpose
CPE cpe:/o:apple:mac_os_x_server:10.3.9
SEQ(SP=FC-10A%GCD=1-6%ISR=100-112%TI=I%II=I%SS=S%TS=0|1)
OPS(O1=M5B4NW0NNT11%O2=M5B4NW0NNT11%O3=M5B4NW0NNT11%O4=M5B4NW0NNT11%O5=M5B4NW0NNT11%O6=M5B4NNT11)
WIN(W1=8218%W2=8220%W3=8204%W4=80E8%W5=80F4%W6=807A)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=832C%O=M5B4NW0%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Darwin 8.0.0 Darwin Keynel Version 8.0.0: Sat Mar 26 14:15:22 PST 2005; root:xnu-792.obj~1/RELEASE_PPC Power Macintosh powerpc
Fingerprint Apple Mac OS X 10.4 (Tiger) (Darwin 8.0.0)
Class Apple | Mac OS X | 10.4.X | general purpose
CPE cpe:/o:apple:mac_os_x:10.4 auto
SEQ(SP=FD-10F%GCD=1-6%ISR=FE-10C%TI=I%II=I%SS=S%TS=1)
OPS(O1=M3FD8NW0NNT11%O2=M3FD8NW0NNT11%O3=M3FD8NW0NNT11%O4=M3FD8NW0NNT11%O5=M3FD8NW0NNT11%O6=M3FD8NNT11)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M3FD8NW0%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=Z%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Darwin 8.10.0 Darwin Kernel Version 8.10.0: Wed May 23 16:50:59 PDT 2007; root:xnu-792.21.3~1/RELEASE_PPC Power Macintosh powerpc
Fingerprint Apple Mac OS X 10.4.10 (Tiger) (Darwin 8.10.0, PowerPC)
Class Apple | Mac OS X | 10.4.X | general purpose
CPE cpe:/o:apple:mac_os_x:10.4 auto
SEQ(SP=C-16%GCD=1|>1000000%ISR=FA-104%TI=I|RD%II=I%TS=2)
OPS(O1=NNT11|M5B4NW0NNT11SLL%O2=NNT11|M5B4NW0NNT11SLL%O3=|NNT11|M5B4NW0NNT11%O4=|NNT11|M5B4NW0NNT11SLL%O5=|NNT11|M5B4NW0NNT11SLL%O6=|NNT11|M5B4NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=0|FFFF%W4=0|FFFF%W5=0|FFFF%W6=0|FFFF)
ECN(R=Y%DF=N|Y%T=3B-45%TG=40%W=0|FFFF%O=|M5B4NW0SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=A|AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Darwin 8.10.0 Darwin Kernel Version 8.10.0: Wed May 23 16:50:59 PDT 2007; root:xnu-792.21.3~1/RELEASE_PPC Power Macintosh powerpc
Fingerprint Apple Mac OS X 10.4.10 (Tiger) (Darwin 8.10.0, PowerPC)
Class Apple | Mac OS X | 10.4.X | general purpose
CPE cpe:/o:apple:mac_os_x:10.4.10
SEQ(SP=FA-10C%GCD=1-6%ISR=F7-105%TI=I%II=I%SS=S%TS=1|2)
OPS(O1=M5B4NW0NNT11SLL%O2=M5B4NW0NNT11SLL%O3=M5B4NW0NNT11%O4=M5B4NW0NNT11SLL%O5=M5B4NW0NNT11SLL%O6=M5B4NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M5B4NW0SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=N)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Darwin 8.10.0 Darwin Kernel Version 8.10.0: Wed May 23 16:50:59 PDT 2007; root:xnu-792.21.3~1/RELEASE_PPC Power Macintosh powerpc
Fingerprint Apple Mac OS X 10.4.10 (Tiger) (Darwin 8.10.0, PowerPC)
Class Apple | Mac OS X | 10.4.X | general purpose
CPE cpe:/o:apple:mac_os_x:10.4.10
SEQ(SP=C-16%GCD=1|>1000000%ISR=F1-103%TI=I%II=I%SS=S%TS=1)
OPS(O1=M5B4NW3NNT11SLL%O2=M5B4NW3NNT11SLL%O3=M5B4NW3NNT11%O4=M5B4NW3NNT11SLL%O5=M5B4NW3NNT11SLL%O6=M5B4NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M5B4NW3SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Darwin 8.10.1 Darwin Kernel Version 8.10.1: Wed May 23 16:33:00 PDT 2007; root:xnu-792.22.5~1/RELEASE_I386 i386 i386
Fingerprint Apple Mac OS X 10.4.10 (Tiger) (Darwin 8.10.1)
Class Apple | Mac OS X | 10.4.X | general purpose
CPE cpe:/o:apple:mac_os_x:10.4.10
SEQ(SP=B-15%GCD=1|>1000000%ISR=DF-103%TI=I%II=I%SS=S%TS=1)
OPS(O1=M5B4NW0NNT11SLL%O2=M5B4NW0NNT11SLL%O3=M5B4NW0NNT11%O4=M5B4NW0NNT11SLL%O5=M5B4NW0NNT11SLL%O6=M5B4NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M5B4NW0SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Darwin .8.10.0 Darwin Kernel  Version 8.10.0: Wed May 23 16:50:59 PDT 2007; root:xnu-792.21.3~1/RELEASE_PPC Power Macintosh powerpc
# Darwin 8.11.0 Darwin Kernel Version 8.11.0: Wed Oct 10 18:26:00 PDT 2007; root:xnu-792.24.17~1/RELEASE_PPC Power Macintosh powerpc (OS X 10.4.11)
Fingerprint Apple Mac OS X 10.4.10 - 10.4.11 (Tiger) (Darwin 8.10.0 - 8.11.0)
Class Apple | Mac OS X | 10.4.X | general purpose
CPE cpe:/o:apple:mac_os_x:10.4
SEQ(SP=7-17%GCD=1|>1000000%ISR=F2-102%TI=I%II=I%SS=S%TS=0|1)
OPS(O1=M5B4NW0NNT11SLL%O2=M5B4NW0NNT11SLL%O3=M5B4NW0NNT11%O4=M5B4NW0NNT11SLL%O5=M5B4NW0NNT11SLL%O6=M5B4NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=FA-104%TG=FF%W=FFFF%O=M5B4NW0SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=FA-104%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# Darwin 8.10.0 Darwin Kernel Version 8.10.0: Wed May 23 16:50:59 PDT 2007; root:xnu-792.21.3~1/RELEASE_PPC Power Macintosh powerpc
# Darwin 8.10.0 Darwin Kernel Version 8.10.0: Wed May 23 16:50:59 PDT 2007; root:xnu-792.21.3~1/RELEASE_PPC Power Macintosh powerpc
# Darwin 8.10.1 Darwin Kernel Version 8.10.1: Wed May 23 16:33:00 PDT 2007; root:xnu-792.22.5~1/RELEASE_I386 i386 i386
# Darwin 8.10.3 Darwin Kernel Version 8.10.3: Wed Jun 27 23:29:36 PDT 2007; root:xnu-792.23.3~1/RELEASE_I386 i386 i386
# Darwin 8.11.0 Darwin Kernel Version 8.11.0: Wed Oct 10 18:26:00 PDT 2007; root:xnu-792.24.17~1/RELEASE_PPC Power Macintosh powerpc
# Darwin 8.10.2 Darwin Kernel Version 8.10.2: Wed Jun 20 21:49:49 PDT 2007; root:xnu-792.22.6~1/RELEASE_I386 i386 i386
# Darwin 8.11.1 Darwin Kernel Version 8.11.1: Wed Oct 10 18:23:28 PDT 2007; root:xnu-792.25.20~1/RELEASE_I386 i386 i386
Fingerprint Apple Mac OS X 10.4.10 - 10.4.11 (Tiger) (Darwin 8.10.0 - 8.11.1)
Class Apple | Mac OS X | 10.4.X | general purpose
CPE cpe:/o:apple:mac_os_x:10.4.10
SEQ(SP=C-16%GCD=1|>1000000%ISR=E8-103%TI=I%II=I%SS=S%TS=1)
OPS(O1=M5B4NW0NNT11SLL%O2=M5B4NW0NNT11SLL%O3=M5B4NW0NNT11%O4=M5B4NW0NNT11SLL%O5=M5B4NW0NNT11SLL%O6=M5B4NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M5B4NW0SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Darwin 8.10.0 Darwin Kernel Version 8.10.0: Wed May 23 16:50:59 PDT 2007; root:xnu-792.21.3~1/RELEASE_PPC Power Macintosh
# Darwin 8.10.1 Darwin Kernel Version 8.10.1: Wed May 23 16:33:00 PDT 2007; root:xnu-792.22.5~1/RELEASE_I386 i386 i386
# Darwin 8.10.1 Darwin Kernel Version 8.10.1: Wed May 23 16:33:00 PDT 2007; root:xnu-792.22.5~1/RELEASE_I386 i386 i386 (OS X 10.4.10)
# Darwin 8.10.0 Darwin Kernel Version 8.10.0: Wed May 23 16:50:59 PDT 2007; root:xnu-792.21.3~1/RELEASE_PPC Power Macintosh powerpc
# Darwin 8.10.1 Darwin Kernel Version 8.10.1: Wed May 23 16:33:00 PDT 2007; root:xnu-792.22.5~1/RELEASE_I386 i386 i386
# Darwin 8.10.2 Darwin Kernel Version 8.10.2: Wed Jun 20 21:49:49 PDT 2007; root:xnu-792.22.6~1/RELEASE_I386 i386 i386
# Darwin 8.11.1 Darwin Kernel Version 8.11.1: Wed Oct 10 18:23:28 PDT 2007; root:xnu-792.25.20~1/RELEASE_I386 i386 i386
Fingerprint Apple Mac OS X 10.4.10 - 10.4.11 (Tiger) (Darwin 8.10.0 - 8.11.1)
Class Apple | Mac OS X | 10.4.X | general purpose
CPE cpe:/o:apple:mac_os_x:10.4.10
SEQ(SP=C-16%GCD=1|>1000000%ISR=D4-102%TI=I%II=I%SS=S%TS=1)
OPS(O1=M3FD8NW0NNT11SLL%O2=M3FD8NW0NNT11SLL%O3=M3FD8NW0NNT11%O4=M3FD8NW0NNT11SLL%O5=M3FD8NW0NNT11SLL%O6=M3FD8NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M3FD8NW0SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=Z%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Darwin 8.11.0 Darwin Kernel Version 8.11.0: Wed Oct 10 18:26:00 PDT 2007; root:xnu-792.24.17~1/RELEASE_PPC Power Macintosh powerpc
Fingerprint Apple Mac OS X 10.4.10 - 10.4.11 (Tiger) (Darwin 8.10.0 - 8.11.1)
Class Apple | Mac OS X | 10.4.X | general purpose
CPE cpe:/o:apple:mac_os_x:10.4
SEQ(SP=DC-E6%GCD=10|20|30|40|50%ISR=F8-102%TI=I%CI=I%II=I%SS=S%TS=1)
OPS(O1=M5B4NW0NNT11SLL%O2=M5B4NW0NNT11SLL%O3=M5B4NW0NNT11%O4=M5B4NW0NNT11SLL%O5=M5B4NW0NNT11SLL%O6=M5B4NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M5B4NW0SLL%CC=N)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%RD=0)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%RD=0)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%RD=0)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%RD=0)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Darwin 8.11.0 Darwin Kernel Version 8.11.0: Wed Oct 10 18:26:00 PDT 2007; root:xnu-792.24.17~1/RELEASE_PPC Power Macintosh powerpc
Fingerprint Apple Mac OS X 10.4.11 (Tiger) (Darwin 8.11.0)
Class Apple | Mac OS X | 10.4.X | general purpose
CPE cpe:/o:apple:mac_os_x:10.4.10
SEQ(SP=E-1F2%GCD=1-6|>1000000%ISR=F9-103%TI=I%CI=I%II=I%SS=S%TS=1)
OPS(O1=NNT11|M5B4NW0NNT11%O2=M5B4NW0NNT11SLL%O3=M5B4NW0NNT11%O4=M5B4NW0NNT11SLL%O5=M5B4NW0NNT11SLL%O6=M5B4NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M5B4NW0SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O|Z%A=O|S+%F=A|AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Darwin 8.11.0 Darwin Kernel Version 8.11.0: Wed Oct 10 18:26:00 PDT 2007; root:xnu-792.24.17~1/RELEASE_PPC Power Macintosh powerpc
Fingerprint Apple Mac OS X 10.4.11 (Tiger) (Darwin 8.11.0)
Class Apple | Mac OS X | 10.4.X | general purpose
CPE cpe:/o:apple:mac_os_x:10.4.11
SEQ(SP=B-15%GCD=>1000000%ISR=A1-FF%TI=I%CI=I%II=I%SS=S%TS=1)
OPS(O1=M5B4NW1NNT11SLL%O2=M5B4NW1NNT11SLL%O3=M5B4NW1NNT11%O4=M5B4NW1NNT11SLL%O5=M5B4NW1NNT11SLL%O6=M5B4NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M5B4NW1SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Darwin 8.11.0 Darwin Kernel Version 8.11.0: Wed Oct 10 18:26:00 PDT 2007; root:xnu-792.24.17~1/RELEASE_PPC Power Macintosh powerpc
Fingerprint Apple Mac OS X 10.4.11 (Tiger) (Darwin 8.11.0, PowerPC)
Class Apple | Mac OS X | 10.4.X | general purpose
CPE cpe:/o:apple:mac_os_x:10.4.11
SEQ(SP=FE-10C%GCD=1-6%ISR=F2-108%TI=I|RD%II=I%SS=O|S%TS=1)
OPS(O1=M538NW0NNT11SLL%O2=M538NW0NNT11SLL%O3=M538NW0NNT11%O4=M538NW0NNT11SLL%O5=M538NW0NNT11SLL%O6=M538NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=N|Y%T=3B-45%TG=40%W=0|FFFF%O=|M538NW0SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# 8.11.0 Darwin Kernel Version 8.11.0: Wed Oct 10 18:26:00 PDT 2007; root:xnu-792.24.17~1/RELEASE_PPC Power Macintosh powerpc
Fingerprint Apple Mac OS X 10.4.11 (Tiger) (Darwin 8.11.0, PowerPC)
Class Apple | Mac OS X | 10.4.X | general purpose
CPE cpe:/o:apple:mac_os_x:10.4.11
SEQ(SP=C-1DA%GCD=1-6|>1000000%ISR=D0-122%TI=I%CI=I%II=I%SS=S%TS=1)
OPS(O1=M5B4NW5NNT11SLL%O2=M5B4NW5NNT11SLL%O3=M5B4NW5NNT11%O4=M5B4NW5NNT11SLL%O5=M5B4NW5NNT11SLL%O6=M5B4NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M5B4NW5SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Darwin 8.10.0 Darwin Kernel Version 8.10.0: Wed May 23 16:50:59 PDT 2007; root:xnu-792.21.3~1/RELEASE_PPC Power Macintosh powerpc
# Darwin 8.11.1 Darwin Kernel Version 8.11.1: Wed Oct 10 18:23:28 PDT 2007; root:xnu-792.25.20~1/RELEASE_I386 i386 i386 (Mac OS X 10.4.11)
# Apple Mac OS X 10.4.8 (PowerPC)
# Darwin 8.10.1 Darwin Kernel Version 8.10.1: Wed May 23 16:33:00 PDT 2007; root:xnu-792.22.5~1/RELEASE_I386 i386 i386 (macmini running OSX 10.4.10)
# Darwin 8.11.0 Darwin Kernel Version 8.11.0: Wed Oct 10 18:26:00 PDT 2007; root:xnu-792.24.17~1/RELEASE_PPC Power Macintosh powerpc
Fingerprint Apple Mac OS X 10.4.8 - 10.4.11 (Tiger) (Darwin 8.8.0 - 8.11.0)
Class Apple | Mac OS X | 10.4.X | general purpose
CPE cpe:/o:apple:mac_os_x:10.4 auto
SEQ(SP=102-110%GCD=1-6%ISR=FE-10C%TI=I%II=I%SS=S%TS=1)
OPS(O1=M5B4NW1NNT11SLL|M5B4NW3NNT11SLL|M5B4NW4NNT11SLL|M5B4NW6NNT11SLL%O2=M5B4NW1NNT11SLL|M5B4NW3NNT11SLL|M5B4NW4NNT11SLL|M5B4NW6NNT11SLL%O3=M5B4NW1NNT11|M5B4NW3NNT11|M5B4NW4NNT11|M5B4NW6NNT11%O4=M5B4NW1NNT11SLL|M5B4NW3NNT11SLL|M5B4NW4NNT11SLL|M5B4NW6NNT11SLL%O5=M5B4NW1NNT11SLL|M5B4NW3NNT11SLL|M5B4NW4NNT11SLL|M5B4NW6NNT11SLL%O6=M5B4NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M5B4NW1SLL|M5B4NW3SLL|M5B4NW4SLL|M5B4NW6SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Apple Mac OS 10.4.8/ppc (Darwin 8.8.0 Darwin Kernel Version 8.8.0: Fri Sep  8 17:18:57 PDT
# Darwin 8.8.1 Darwin Kernel Version 8.8.1: Mon Sep 25 19:42:00 PDT 2006; root:xnu-792.13.8.obj~1/RELEASE_I386 i386 i386
# Apple Mac OS X 10.4.8 (Tiger) on x86 Core Duo
# Apple Mac OS X 10.4.9, Darwin Kernel Version 8.9.1: Thu Feb 22 20:55:00 PST 2007; root:xnu-792.18.15~1/RELEASE_I386 i386 i386
# Darwin 8.10.1 Darwin Kernel Version 8.10.1: Wed May 23 16:33:00 PDT 2007; root:xnu-792.22.5~1/RELEASE_I386 i386 i386 (OS X version 10.4.10, Intel version)
# Darwin 8.10.2 Darwin Kernel Version 8.10.2: RELEASE_I386 i386 i386 (Mac OS X 10.4.10)
# Darwin 8.11.0 Darwin Kernel Version 8.11.0: Wed Oct 10 18:26:00 PDT 2007; root:xnu-792.24.17~1/RELEASE_PPC Power Macintosh powerpc
Fingerprint Apple Mac OS X 10.4.8 - 10.4.11 (Tiger) (Darwin 8.8.0 - 8.11.0)
Class Apple | Mac OS X | 10.4.X | general purpose
CPE cpe:/o:apple:mac_os_x:10.4 auto
SEQ(SP=BC-109%GCD=1-6%ISR=F4-10F%TI=I%II=I%SS=S%TS=1)
OPS(O1=M3FD8NW0NNT11SLL%O2=M3FD8NW0NNT11SLL%O3=M3FD8NW0NNT11%O4=M3FD8NW0NNT11SLL%O5=M3FD8NW0NNT11SLL%O6=M3FD8NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M3FD8NW0SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=Z%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Power Mac G5 running OS X 10.4.8
# Darwin 8.11.0 Darwin Kernel Version 8.11.0: Wed Oct 10 18:26:00 PDT 2007; root:xnu-792.24.17~1/RELEASE_PPC Power Macintosh powerpc
Fingerprint Apple Mac OS X 10.4.8 - 10.4.11 (Tiger) (Darwin 8.8.0 - 8.11.0, PowerPC)
Class Apple | Mac OS X | 10.4.X | general purpose
CPE cpe:/o:apple:mac_os_x:10.4 auto
SEQ(SP=FA-104%GCD=1-6%ISR=FF-10D%TI=I%II=I%SS=S%TS=U)
OPS(O1=M3FD8SLL%O2=M3FD8SLL%O3=M3FD8%O4=M3FD8SLL%O5=M3FD8SLL%O6=M3FD8SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M3FD8SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=Z%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Apple Mac OS X 10.4.8 (Tiger) on x86 Core Duo (first-gen Intel iMac 17"/1.83): Darwin 8.8.1 Darwin Kernel Version 8.8.1: Mon Sep 25 19:42:00 PDT 2006 root:xnu-792.13.8.obj~1/RELEASE_I386 i386 i386)
# Darwin 8.8.0 Darwin Kernel Version 8.8.0: Fri Sep  8 17:18:57 PDT 2006; root:xnu-792.12.6.obj~1/RELEASE_PPC Power Macintosh powerpc
# Mac OS X Server 10.4.9 PowerPC Darwin 8.9.0
# Darwin 8.9.1 Darwin Kernel Version 8.9.1: Thu Feb 22 20:58:18 PST 2007; root:xnu-792.18.15~1/RELEASE_PPC Power Macintosh powerpc (MacOS 10.4.9 Server [PPC])
# OS X 10.4.8 (Intel)  -- Darwin 8.8.1 Darwin Kernel Version 8.8.1: Mon Sep 25 19:42:00 PDT 2006; root:xnu-792.13.8.obj~1/RELEASE_I386 i386 i386
# Mac OS X 10.4.10 (8R218) Darwin 8.10.0 Darwin Kernel Version 8.10.0 : Wed May 23 16:50:59 PDT 2007; root:xnu-792.21.3~1/RELEASE_PPC Power Macintosh powerpc
# Darwin 8.10.1 Darwin Kernel Version 8.10.1: Wed May 23 16:33:00 PDT 2007; root:xnu-792.22.5~1/RELEASE_I386 i386 i386
# Darwin 8.10.2 Darwin Kernel Version 8.10.2: Wed Jun 20 21:49:49 PDT 2007; root:xnu-792.22.6~1/RELEASE_I386 i386 i386
# Darwin 8.11.0 Darwin Kernel Version 8.11.0: Wed Oct 10 18:26:00 PDT 2007; root:xnu-792.24.17~1/RELEASE_PPC Power Macintosh powerpc
# Darwin 8.11.1 Darwin Kernel Version 8.11.1: Wed Oct 10 18:23:28 PDT 2007; root:xnu-792.25.20~1/RELEASE_I386 i386 i386
# AppleTV running v2.3.1
Fingerprint Apple Mac OS X 10.4.8 - 10.4.11 (Tiger) (Darwin 8.8.0 - 8.11.1)
Class Apple | Mac OS X | 10.4.X | general purpose
CPE cpe:/o:apple:mac_os_x:10.4 auto
SEQ(SP=BC-10C%GCD=1-6%ISR=C7-111%TI=I%II=I%SS=S%TS=1)
OPS(O1=M5B4NW0NNT11SLL%O2=M5B4NW0NNT11SLL%O3=M5B4NW0NNT11%O4=M5B4NW0NNT11SLL%O5=M5B4NW0NNT11SLL%O6=M5B4NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M5B4NW0SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Darwin 8.8.0 Darwin Kernel Version 8.8.0: Fri Sep  8 17:18:57 PDT 2006; root:xnu-792.12.6.obj~1/RELEASE_PPC Power Macintosh powerpc - Apple MacOS X 10.4.8 (Panther) on PPC
# Darwin 8.9.0 Darwin Kernel Version 8.9.0: Thu Feb 22 20:54:07 PST 2007; root:xnu-792.17.14~1/RELEASE_PPC Power Macintosh powerpc
Fingerprint Apple Mac OS X 10.4.8 - 10.4.9 (Tiger) (Darwin 8.8.0 - 8.9.0, PowerPC)
Class Apple | Mac OS X | 10.4.X | general purpose
CPE cpe:/o:apple:mac_os_x:10.4
SEQ(SP=FB-107%GCD=1-6%ISR=108-112%TI=I%II=I%SS=S%TS=1)
OPS(O1=M3FD8NW3NNT11SLL%O2=M3FD8NW3NNT11SLL%O3=M3FD8NW3NNT11%O4=M3FD8NW3NNT11SLL%O5=M3FD8NW3NNT11SLL%O6=M3FD8NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M3FD8NW3SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=Z%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Apple Mac OS X 10.4.9 on PowerPC G4 (1.5)
Fingerprint Apple Mac OS X 10.4.9 (Tiger) (PowerPC)
Class Apple | Mac OS X | 10.4.X | general purpose
CPE cpe:/o:apple:mac_os_x:10.4.9
SEQ(SP=103-10D%GCD=1-6%ISR=100-10E%TI=I%II=I%SS=S%TS=0|1)
OPS(O1=M3FD8NW0NNT11SLL%O2=M3FD8NW0NNT11SLL%O3=M3FD8NW0NNT11%O4=M3FD8NW0NNT11SLL%O5=M3FD8NW0NNT11SLL%O6=M3FD8NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M3FD8NW0SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Darwin 8.11.0 Darwin Kernel Version 8.11.0: Wed Oct 10 18:26:00 PDT 2007; root:xnu-792.24.17~1/RELEASE_PPC Power Macintosh powerpc
# Darwin 8.11.1 Darwin Kernel Version 8.11.1: Wed Oct 10 18:23:28 PDT 2007; root:xnu-792.25.20~1/RELEASE_I386 i386 i386
Fingerprint Apple Mac OS X 10.4.9 - 10.4.10 (Tiger) (Darwin 8.11.0 - 8.11.1, PowerPC)
Class Apple | Mac OS X | 10.4.X | general purpose
CPE cpe:/o:apple:mac_os_x:10.4 auto
SEQ(SP=F8-10A%GCD=1-6%ISR=F1-107%TI=I%TS=1)
OPS(O1=M5B4NW0NNT11SLL%O2=M5B4NW0NNT11SLL%O3=M5B4NW0NNT11%O4=M5B4NW0NNT11SLL%O5=M5B4NW0NNT11SLL%O6=M5B4NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M5B4NW0SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Mac OS X 10.5 Build 9A303
# Darwin 9.0.0 Darwin Kernel Version 9.0.0: Tue Oct  9 21:35:55 PDT 2007; root:xnu-1228~1/RELEASE_I386 i386
Fingerprint Apple Mac OS X 10.5 (Leopard) (Darwin 9.0.0)
Class Apple | Mac OS X | 10.5.X | general purpose
CPE cpe:/o:apple:mac_os_x:10.5 auto
SEQ(SP=EF-10D%GCD=1-6%ISR=101-10B%TI=I%II=I%SS=S%TS=1)
OPS(O1=M3FD8NW1NNT11SLL|M3FD8NW5NNT11SLL%O2=M3FD8NW1NNT11SLL|M3FD8NW5NNT11SLL%O3=M3FD8NW1NNT11|M3FD8NW5NNT11%O4=M3FD8NW1NNT11SLL|M3FD8NW5NNT11SLL%O5=M3FD8NW1NNT11SLL|M3FD8NW5NNT11SLL%O6=M3FD8NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M3FD8NW1SLL|M3FD8NW5SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=Z%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Darwin 9.0.0b4 Darwin Kernel Version 9.0.0b4: Wed Jul 18 23:23:23 PDT 2007; root:xnu-1155.2~1/RELEASE_I386 i386
Fingerprint Apple Mac OS X 10.5 (Leopard) (Darwin 9.0.0b4, x86)
Class Apple | Mac OS X | 10.5.X | general purpose
CPE cpe:/o:apple:mac_os_x:10.5 auto
SEQ(SP=F2-10A%GCD=1-6%ISR=FA-110%TI=RD%II=RI%TS=3)
OPS(O1=M5B4NW3NNT11SLL%O2=M5B4NW3NNT11SLL%O3=M5B4NW3NNT11%O4=M5B4NW3NNT11SLL%O5=M5B4NW3NNT11SLL%O6=M5B4NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=FFFF%O=M5B4NW3SLL%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=O%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=O%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Darwin 9.2.2 Darwin Kernel Version 9.2.2: Tue Mar  4 21:17:34 PST 2008; root:xnu-1228.4.31~1/RELEASE_I386 i386
Fingerprint Apple Mac OS X 10.5 (Leopard) (Darwin 9.2.2, x86)
Class Apple | Mac OS X | 10.5.X | general purpose
CPE cpe:/o:apple:mac_os_x:10.5 auto
SEQ(SP=FF-10B%GCD=1-6%ISR=FC-10C%TI=RD%II=RI%TS=3)
OPS(O1=M550NW2NNT11SLL%O2=M550NW2NNT11SLL%O3=M550NW2NNT11%O4=M550NW2NNT11SLL%O5=M550NW2NNT11SLL%O6=M550NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M550NW2SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=N)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Darwin 9.1.0 Darwin Kernel Version 9.1.0: Wed Oct 31 17:48:21 PDT 2007; root:xnu-1228.0.2~1/RELEASE_PPC Power Macintosh
# Darwin 9.0.0 Darwin Kernel Version 9.0.0: Tue Oct  9 21:35:55 PDT 2007; root:xnu-1228~1/RELEASE_I386 i386
# Mac OS 10.5 leopard 9A581
# Darwin 9.0.0 Darwin Kernel Version 9.0.0: Tue Oct  9 21:37:58 PDT 2007; root:xnu-1228~1/RELEASE_PPC Power Macintosh
# Darwin 9.1.0 Darwin Kernel Version 9.1.0: Wed Oct 31 17:46:22 PDT 2007; root:xnu-1228.0.2~1/RELEASE_I386 i386
# Darwin 9.2.0 Darwin Kernel Version 9.2.0: Tue Feb  5 16:15:19 PST 2008; root:xnu-1228.3.13~1/RELEASE_PPC Power Macintosh powerpc
# Darwin 9.2.0 Darwin Kernel Version 9.2.0: Tue Feb  5 16:13:22 PST 2008; root:xnu-1228.3.13~1/RELEASE_I386 i386, Mac OS X Version 10.5.2 Build 9C31
# Darwin 9.2.2 Darwin Kernel Version 9.2.2: Tue Mar  4 21:17:34 PST 2008; root:xnu-1228.4.31~1/RELEASE_I386 i386
# Darwin 9.3.0 Darwin Kernel Version 9.3.0: Fri May 23 00:49:16 PDT 2008; root:xnu-1228.5.18~1/RELEASE_I386 i386
# Darwin 9.4.0 Darwin Kernel Version 9.4.0: Mon Jun  9 19:30:53 PDT 2008; root:xnu-1228.5.20~1/RELEASE_I386 i386
# Darwin 9.5.0 Darwin Kernel Version 9.5.0: Wed Sep  3 11:29:43 PDT 2008; root:xnu-1228.7.58~1/RELEASE_I386 i386
# Darwin 9.6.0 Darwin Kernel Version 9.6.0: Mon Nov 24 17:37:00 PST 2008; root:xnu-1228.9.59~1/RELEASE_I386 i386
# 9.8.0 Darwin Kernel Version 9.8.0: Wed Jul 15 16:55:01 PDT 2009; root:xnu-1228.15.4~1/RELEASE_I386 i386
# Darwin 10.0.0 Darwin Kernel Version 10.0.0: Fri Jul 31 22:47:34 PDT 2009; root:xnu-1456.1.25~1/RELEASE_I386 i386
# Darwin 10.2.0 Darwin Kernel Version 10.2.0: Tue Nov  3 10:37:10 PST 2009; root:xnu-1486.2.11~1/RELEASE_I386 i386
# Darwin 10.3.0 Darwin Kernel Version 10.3.0: Fri Feb 26 11:58:09 PST 2010; root:xnu-1504.3.12~1/RELEASE_I386 i386, 10.6.3
# 10.6.7
Fingerprint Apple Mac OS X 10.5 - 10.6.7 (Leopard - Snow Leopard) (Darwin 9.0.0 - 10.7.0)
Class Apple | Mac OS X | 10.5.X | general purpose
CPE cpe:/o:apple:mac_os_x:10.5 auto
Class Apple | Mac OS X | 10.6.X | general purpose
CPE cpe:/o:apple:mac_os_x:10.6 auto
SEQ(SP=F1-107%GCD=1-6%ISR=F7-10C%TI=RD%CI=RD%II=RI%TS=3)
OPS(O1=M3FD8NW1NNT11SLL|M3FD8NW2NNT11SLL|M3FD8NW3NNT11SLL%O2=M3FD8NW1NNT11SLL|M3FD8NW2NNT11SLL|M3FD8NW3NNT11SLL%O3=M3FD8NW1NNT11|M3FD8NW2NNT11|M3FD8NW3NNT11%O4=M3FD8NW1NNT11SLL|M3FD8NW2NNT11SLL|M3FD8NW3NNT11SLL%O5=M3FD8NW1NNT11SLL|M3FD8NW2NNT11SLL|M3FD8NW3NNT11SLL%O6=M3FD8NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M3FD8NW1SLL|M3FD8NW2SLL|M3FD8NW3SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=Z%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Darwin 9.6.9: Darwin Kernel Version 9.6.0: date; root:xnu-1228.9~1/RELEASE_I386 i386
# Darwin 9.5.0 Darwin Kernel Version 9.5.0: Wed Sep 3 11:31:44 PDT 2008; root:xnu-1228.7.58~1/RELEASE_PPC Power Macintosh
# 9.2.0 Darwin Kernel Version 9.2.0
# Darwin <host> 10.2.0 Darwin Kernel Version 10.2.0: Tue Nov  3 10:37:10 PST 2009; root:xnu-1486.2.11~1/RELEASE_I386 i386
# Apple iOS 4.0.1
# iPad iOS 4.2.1
# Darwin 10.7.0 Darwin Kernel Version 10.7.0: Sat Jan 29 15:17:16 PST 2011; root:xnu-1504.9.37~1/RELEASE_I386 i386
Fingerprint Apple Mac OS X 10.5.2 - 10.6.7 (Leopard - Snow Leopard) (Darwin 9.2.0 - 10.7.0) or iOS 4.0.1 - 4.2.1
Class Apple | Mac OS X | 10.5.X | general purpose
CPE cpe:/o:apple:mac_os_x:10.5 auto
Class Apple | Mac OS X | 10.6.X | general purpose
CPE cpe:/o:apple:mac_os_x:10.6 auto
Class Apple | iOS | 4.X | general purpose
CPE cpe:/o:apple:iphone_os:4 auto
SEQ(SP=F3-107%GCD=1-6%ISR=FA-110%TI=RD%CI=RI%II=RI%TS=3)
OPS(O1=M5B4NW2NNT11SLL|M5B4NW3NNT11SLL%O2=M5B4NW2NNT11SLL|M5B4NW3NNT11SLL%O3=M5B4NW2NNT11|M5B4NW3NNT11%O4=M5B4NW2NNT11SLL|M5B4NW3NNT11SLL%O5=M5B4NW2NNT11SLL|M5B4NW3NNT11SLL%O6=M5B4NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M5B4NW2SLL|M5B4NW3SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Darwin 9.3.0 Darwin Kernel Version 9.3.0: Fri May 23 00:51:20 PDT 2008; root:xnu-1228.5.18~1/RELEASE_PPC Power Macintosh
Fingerprint Apple Mac OS X 10.5.3 (Leopard) (Darwin 9.3.0)
Class Apple | Mac OS X | 10.5.X | general purpose
CPE cpe:/o:apple:mac_os_x:10.5.3
SEQ(SP=FA-10A%GCD=1-6%ISR=FC-114%TI=RD%II=RI%TS=3)
OPS(O1=M3FD8NW3NNT11SLL%O2=M3FD8NW3NNT11SLL%O3=M3FD8NW3NNT11%O4=M3FD8NW3NNT11SLL%O5=M3FD8NW3NNT11SLL%O6=M3FD8NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M3FD8NW3SLL%CC=Y%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=Z%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Darwin 9.3.0 Darwin Kernel Version 9.3.0: Fri May 23 00:49:16 PDT 2008; root:xnu-1228.5.18~1/RELEASE_I386 i386
# Darwin 9.4.0 Darwin Kernel Version 9.4.0: Mon Jun  9 19:30:53 PDT 2008; root:xnu-1228.5.20~1/RELEASE_I386 i386
Fingerprint Apple Mac OS X 10.5.3 - 10.5.4 (Leopard) (Darwin 9.3.0 - 9.4.0)
Class Apple | Mac OS X | 10.5.X | general purpose
CPE cpe:/o:apple:mac_os_x:10.5 auto
SEQ(SP=ED-109%GCD=1-6%ISR=F5-10D%TI=RD%II=RI%TS=3)
OPS(O1=M5B4NW3NNT11SLL%O2=M5B4NW3NNT11SLL%O3=M5B4NW3NNT11%O4=M5B4NW3NNT11SLL%O5=M5B4NW3NNT11SLL%O6=M5B4NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M5B4NW3SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=Z%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Darwin 9.4.0 Darwin Kernel Version 9.4.0: Mon Jun  9 19:30:53 PDT 2008; root:xnu-1228.5.20~1/RELEASE_I386 i386, Mac OS X 10.5.4
Fingerprint Apple Mac OS X 10.5.4 (Leopard) (Darwin 9.4.0)
Class Apple | Mac OS X | 10.5.X | general purpose
CPE cpe:/o:apple:mac_os_x:10.5.4
SEQ(SP=F3-10D%GCD=1-6%ISR=100-10E%TI=RD%II=RI%TS=3)
OPS(O1=M5B4NW3NNT11SLL%O2=M5B4NW3NNT11SLL%O3=M5B4NW3NNT11%O4=M5B4NW3NNT11SLL%O5=M5B4NW3NNT11SLL%O6=M5B4NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M5B4NW3SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A|O%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=O|S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=O%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=O%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Darwin 9.4.0 Darwin Kernel Version 9.4.0: Mon Jun  9 19:30:53 PDT 2008; root:xnu-1228.5.20~1/RELEASE_I386 i386
Fingerprint Apple Mac OS X 10.5.4 (Leopard) (Darwin 9.4.0)
Class Apple | Mac OS X | 10.5.X | general purpose
CPE cpe:/o:apple:mac_os_x:10.5.4
SEQ(SP=F0-104%GCD=1-6%ISR=FC-10A%TI=RD%II=RI%TS=3)
OPS(O1=M3FD8NW3NNT11SLL%O2=M3FD8NW3NNT11SLL%O3=M3FD8NW3NNT11%O4=M3FD8NW3NNT11SLL%O5=M3FD8NW3NNT11SLL%O6=M3FD8NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=2F-39%TG=40%W=FFFF%O=M3FD8NW3SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=2F-39%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=2F-39%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=2F-39%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=2F-39%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=2F-39%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=2F-39%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=Z%RUCK=0%RUD=G)
IE(DFI=S%T=2F-39%TG=40%CD=S)

# Darwin Kernel Version 9.5.0: Wed Sep  3 11:29:43 PDT 2008; root:xnu-1228.7.58~1/RELEASE_I386 i386
Fingerprint Apple Mac OS X 10.5.5 (Leopard) (Darwin 9.5.0)
Class Apple | Mac OS X | 10.5.X | general purpose
CPE cpe:/o:apple:mac_os_x:10.5.5
SEQ(SP=FD-107%GCD=1-6%ISR=FE-108%TI=RD%TS=3)
OPS(O1=M5B4NW3NNT11SLL%O2=M5B4NW3NNT11SLL%O3=NNT11|M5B4NW3NNT11%O4=NNT11|M5B4NW3NNT11SLL%O5=M5B4NW3NNT11SLL%O6=NNT11|M5B4NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=|M5B4NW3SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=O|S+%F=A|AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=O|S+%F=AR%O=%RD=0%Q=)
T6(R=N)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=0-FFFF%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Darwin 9.5.0 Darwin Kernel Version 9.5.0: Wed Sep  3 11:29:43 PDT 2008; root:xnu-1228.7.58~1/RELEASE_I386 i386
# Darwin 9.6.0 Darwin Kernel Version 9.6.0: Mon Nov 24 17:37:00 PST 2008; root:xnu-1228.9.59~1/RELEASE_I386 i386
# Darwin 10.0.0 Darwin Kernel Version 10.0.0: Fri Jul 31 22:47:34 PDT 2009; root:xnu-1456.1.25~1/RELEASE_I386 i386
# Darwin 10.6.0 Darwin Kernel Version 10.6.0: Wed Nov 10 18:13:17 PST 2010; root:xnu-1504.9.26~3/RELEASE_I386 i386
Fingerprint Apple Mac OS X 10.5.5 - 10.6.6 (Leopard - Snow Leopard) (Darwin 9.5.0 - 10.6.0)
Class Apple | Mac OS X | 10.5.X | general purpose
CPE cpe:/o:apple:mac_os_x:10.5 auto
Class Apple | Mac OS X | 10.6.X | general purpose
CPE cpe:/o:apple:mac_os_x:10.6 auto
SEQ(SP=FA-108%GCD=1-6%ISR=FC-112%TI=RD%II=RI%TS=3)
OPS(O1=M5B4NW3NNT11SLL%O2=M5B4NW3NNT11SLL%O3=M5B4NW3NNT11%O4=M5B4NW3NNT11SLL%O5=M5B4NW3NNT11SLL%O6=M5B4NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M5B4NW3SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=N)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Darwin 9.5.0 Darwin Kernel Version 9.5.0: Wed Sep 3  11:31:33 PDT 2008; root:xnu-1228.7.58~1/RELEASE_PPC Power Macintosh
Fingerprint Apple Mac OS X 10.5.6 (Leopard) (Darwin 9.5.0)
Class Apple | Mac OS X | 10.5.X | general purpose
CPE cpe:/o:apple:mac_os_x:10.5.6
SEQ(SP=F5-109%GCD=1-6%ISR=F9-10D%TI=RD%II=RI%TS=3|5|6)
OPS(O1=M524NW2NNT11SLL%O2=M524NW2NNT11SLL%O3=M524NW2NNT11%O4=NNT11|M524NW2NNT11SLL%O5=M524NW2NNT11SLL%O6=M524NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M524NW2SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Darwin 9.6.0 Darwin Kernel Version 9.6.0: Mon Nov 24 17:39:01 PST 2008; root:xnu-1228.9.59~1/RELEASE_PPC Power Macintosh
Fingerprint Apple Mac OS X 10.5.6 (Leopard) (Darwin 9.6.0)
Class Apple | Mac OS X | 10.5.X | general purpose
CPE cpe:/o:apple:mac_os_x:10.5.6
SEQ(SP=F6-108%GCD=1-6%ISR=FF-10B%TI=RD%TS=3)
OPS(O1=M5B4NW1NNT11SLL%O2=M5B4NW1NNT11SLL%O3=M5B4NW1NNT11%O4=M5B4NW1NNT11SLL%O5=M5B4NW1NNT11SLL%O6=M5B4NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=5F-69%TG=80%W=FFFF%O=M5B4NW1SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=5F-69%TG=80%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=5F-69%TG=80%W=0%S=A|O%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=5F-69%TG=80%W=0%S=Z%A=O|S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=5F-69%TG=80%W=0%S=A|O%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=Y%T=5F-69%TG=80%W=0%S=Z%A=O|S%F=AR%O=%RD=0%Q=)
U1(DF=Y%T=5F-69%TG=80%IPL=38%UN=0%RIPL=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=Y%T=5F-69%TG=80%CD=S)

# Darwin 9.6.0 Darwin Kernel Version 9.6.0: Mon Nov 24 17:37:00 PST 2008; root:xnu-1228.9.59~1/RELEASE_I386 i386
# 9.7.0 Darwin Kernel Version 9.7.0: Tue Mar 31 22:52:17 PDT 2009; root:xnu-1228.12.14~1/RELEASE_I386 i386
# Darwin 10.2.0 Darwin Kernel Version 10.2.0: Tue Nov  3 10:37:10 PST 2009; root:xnu-1486.2.11~1/RELEASE_I386 i386
Fingerprint Apple Mac OS X 10.5.6 - 10.6.2 (Leopard - Snow Leopard) (Darwin 9.6.0 - 10.2.0)
Class Apple | Mac OS X | 10.5.X | general purpose
CPE cpe:/o:apple:mac_os_x:10.5 auto
Class Apple | Mac OS X | 10.6.X | general purpose
CPE cpe:/o:apple:mac_os_x:10.6 auto
SEQ(SP=F5-10B%GCD=1-6%ISR=F8-10C%TI=RD%II=RI%TS=3)
OPS(O1=M3FD8NW2NNT11SLL|M3FD8NW3NNT11SLL%O2=M3FD8NW2NNT11SLL|M3FD8NW3NNT11SLL%O3=M3FD8NW2NNT11|M3FD8NW3NNT11%O4=M3FD8NW2NNT11SLL|M3FD8NW3NNT11SLL%O5=M3FD8NW2NNT11SLL|M3FD8NW3NNT11SLL%O6=M3FD8NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M3FD8NW2SLL|M3FD8NW3SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Darwin Kernel Version 9.7.0: Tue Mar 31 22:52:17 PDT 2009; root:xnu-1228.12.14~1/RELEASE_I386 i386
Fingerprint Apple Mac OS X 10.5.7 (Leopard) (Darwin 9.7.0)
Class Apple | Mac OS X | 10.5.X | general purpose
CPE cpe:/o:apple:mac_os_x:10.5.7
SEQ(SP=F4-10E%GCD=1-6%ISR=FD-10D%TI=RD%II=RI%TS=3)
OPS(O1=M556NW3NNT11SLL%O2=M556NW3NNT11SLL%O3=M556NW3NNT11%O4=M556NW3NNT11SLL%O5=M556NW3NNT11SLL%O6=M556NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M556NW3SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Darwin 9.8.0 Darwin Kernel Version 9.8.0: Wed Jul 15 16:55:01 PDT 2009; root:xnu-1228.15.4~1/RELEASE_I386 i386
Fingerprint Apple Mac OS X 10.5.8 (Leopard) (Darwin 9.8.0)
Class Apple | Mac OS X | 10.5.X | general purpose
CPE cpe:/o:apple:mac_os_x:10.5 auto
SEQ(SP=F1-FB%GCD=1-6%ISR=F7-101%TI=RD%II=RI%TS=3)
OPS(O1=M5B4NW3NNT11SLL%O2=M5B4NW3NNT11SLL%O3=M5B4NW2NNT11%O4=M5B4NW3NNT11SLL%O5=M5B4NW3NNT11SLL%O6=M5B4NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M5B4NW2SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=N)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Darwin 9.8.0 Darwin Kernel Version 9.8.0: Wed Jul 15 16:55:01 PDT 2009; root:xnu-1228.15.4~1/RELEASE_I386 i386
Fingerprint Apple Mac OS X 10.5.8 (Leopard) (Darwin 9.8.0)
Class Apple | Mac OS X | 10.5.X | general purpose
CPE cpe:/o:apple:mac_os_x:10.5.8
SEQ(SP=F7-101%GCD=1-6%ISR=FE-10A%TI=RD%II=RI%TS=4)
OPS(O1=M3FD8NW3NNT11SLL%O2=M3FD8NW3NNT11SLL%O3=M3FD8NW3NNT11%O4=M3FD8NW3NNT11SLL%O5=M3FD8NW3NNT11SLL%O6=M3FD8NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M3FD8NW3SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=Z%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Darwin 9.8.0 Darwin Kernel Version 9.8.0: Wed Jul 15 16:55:01 PDT 2009; root:xnu-1228.15.4~1/RELEASE_I386 i386, 10.5.8
Fingerprint Apple Mac OS X 10.5.8 (Leopard) (Darwin 9.8.0)
Class Apple | Mac OS X | 10.5.X | general purpose
CPE cpe:/o:apple:mac_os_x:10.5.8
SEQ(SP=FF-109%GCD=1-6%ISR=FF-113%TI=RD%II=RI%TS=3)
OPS(O1=M57CNW3NNT11SLL%O2=M57CNW3NNT11SLL%O3=M57CNW3NNT11%O4=M57CNW3NNT11SLL%O5=M57CNW3NNT11SLL%O6=M57CNNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M57CNW3SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=N)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=0-FFFF%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Darwin 9.8.0 Darwin Kernel Version 9.8.0: Wed Jul 15 16:57:01 PDT 2009; root:xnu-1228.15.4~1/RELEASE_PPC Power Macintosh
Fingerprint Apple Mac OS X 10.5.8 (Leopard) (Darwin 9.8.0)
Class Apple | Mac OS X | 10.5.X | general purpose
CPE cpe:/o:apple:mac_os_x:10.5.8
SEQ(SP=EC-10A%GCD=1-6%ISR=FF-10D%TI=RD%CI=RD%II=RI%TS=3)
OPS(O1=M578NW3NNT11SLL%O2=M578NW3NNT11SLL%O3=M578NW3NNT11%O4=M578NW3NNT11SLL%O5=M578NW3NNT11SLL%O6=M578NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M578NW3SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# PowerMac G5 running OS X Server 10.5 build 9A284
Fingerprint Apple Mac OS X Server 10.5 (Leopard) pre-release build 9A284
Class Apple | Mac OS X | 10.5.X | general purpose
CPE cpe:/o:apple:mac_os_x_server:10.5
SEQ(SP=D6-100%GCD=1-6%ISR=102-10C%TI=I%II=I%SS=S%TS=1)
OPS(O1=M5B4NW5NNT11SLL%O2=M5B4NW5NNT11SLL%O3=M5B4NW5NNT11%O4=M5B4NW5NNT11SLL%O5=M5B4NW5NNT11SLL%O6=M5B4NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M5B4NW5SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Darwin 9.1.0 Darwin Kernel Version 9.1.0: Wed Oct 31 17:48:21 PDT 2007; root:xnu-1228.0.2~1/RELEASE_PPC Power Macintosh (Mac OS X Server 10.5.1)
Fingerprint Apple Mac OS X Server 10.5.1 (Leopard) (Darwin 9.1.0)
Class Apple | Mac OS X | 10.5.X | general purpose
CPE cpe:/o:apple:mac_os_x_server:10.5.1
SEQ(SP=FB-105%GCD=1-6%ISR=FD-10D%TI=RD%II=RI%TS=3|5)
OPS(O1=M57CNW2NNT11SLL%O2=M57CNW2NNT11SLL%O3=M57CNW2NNT11%O4=M57CNW2NNT11SLL%O5=M57CNW2NNT11SLL%O6=M57CNNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M57CNW2SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Darwin 10.2.0 Darwin Kernel Version 10.2.0: Tue Nov  3 10:37:10 PST 2009; root:xnu-1486.2.11~1/RELEASE_I386 i386
# Darwin 10.4.0 Darwin Kernel Version 10.4.0: Fri Apr 23 18:28:53 PDT 2010; root:xnu-1504.7.4~1/RELEASE_I386 i386
# Darwin 9.8.0 Darwin Kernel Version 9.8.0: Wed Jul 15 16:55:01 PDT 2009; root:xnu-1228.15.4~1/RELEASE_I386 i386, Mac OS 10.5.8 (9L31a)
Fingerprint Apple Mac OS X 10.5.8 - 10.6.4 (Leopard - Snow Leopard) (Darwin 9.8.0 - 10.4.0)
Class Apple | Mac OS X | 10.6.X | general purpose
CPE cpe:/o:apple:mac_os_x:10.6 auto
SEQ(SP=E7-105%GCD=1-6%ISR=F5-10D%TI=RD%II=RI%TS=U)
OPS(O1=M5B4SLL%O2=M5B4SLL%O3=M5B4%O4=M5B4SLL%O5=M5B4SLL%O6=M5B4SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M5B4SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Darwin 10.0.0 Darwin Kernel Version 10.0.0: Fri Jul 31 22:47:34 PDT 2009; root:xnu-1456.1.25~1/RELEASE_I386 i386
Fingerprint Apple Mac OS X 10.6 (Snow Leopard) (Darwin 10.0.0)
Class Apple | Mac OS X | 10.6.X | general purpose
CPE cpe:/o:apple:mac_os_x:10.6 auto
SEQ(SP=FC-10A%GCD=1-6%ISR=F7-111%TI=RD%CI=RD|RI%II=RI%TS=U)
OPS(O1=M3FD8SLL%O2=M3FD8SLL%O3=M3FD8%O4=M3FD8SLL%O5=M3FD8SLL%O6=M3FD8SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M3FD8SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=Z%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Darwin 10.0.0 Darwin Kernel Version 10.0.0: Fri Jul 31 22:47:34 PDT 2009; root:xnu-1456.1.25~1/RELEASE_I386 i386
Fingerprint Apple Mac OS X 10.6 (Snow Leopard) (Darwin 10.0.0)
Class Apple | Mac OS X | 10.6.X | general purpose
CPE cpe:/o:apple:mac_os_x:10.6 auto
SEQ(TI=RI%CI=RD|RI%II=RI%SS=S%TS=3)
OPS(O1=M3FD8NW3NNT11SLL%O2=M3FD8NW3NNT11SLL%O3=M3FD8NW3NNT11%O4=M3FD8NW3NNT11SLL%O5=M3FD8NW3NNT11SLL%O6=M3FD8NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M3FD8NW3SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=Z%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Darwin 10.2.0 Darwin Kernel Version 10.2.0: Tue Nov  3 10:35:19 PST 2009; root:xnu-1486.2.11~1/RELEASE_X86_64 x86_64
Fingerprint Apple Mac OS X 10.6.2 (Snow Leopard) (Darwin 10.2.0)
Class Apple | Mac OS X | 10.6.X | general purpose
CPE cpe:/o:apple:mac_os_x:10.6.2
SEQ(SP=FA-10A%GCD=1-6%ISR=102-10C%TI=RD|RI%II=RI%SS=O%TS=3)
OPS(O1=M5B4NW2NNT11SLL%O2=M5B4NW2NNT11SLL%O3=M5B4NW2NNT11%O4=M5B4NW2NNT11SLL%O5=M5B4NW2NNT11SLL%O6=M5B4NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M5B4NW2SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=O%A=Z%F=R%RD=0)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=O%F=AR%RD=0)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Darwin 10.2.0 Darwin Kernel Version 10.2.0: Tue Nov 3 10:37:10 PST 2009; root:xnu-1486.2.11~1/RELEASE_I386 i386
Fingerprint Apple Mac OS X 10.6.2 (Snow Leopard) (Darwin 10.2.0)
Class Apple | Mac OS X | 10.6.X | general purpose
CPE cpe:/o:apple:mac_os_x:10.6.2
SEQ(SP=100-10A%GCD=1-6%ISR=FD-10F%TI=RD%CI=RD%II=RI%TS=3)
OPS(O1=MF78NW3NNT11SLL%O2=MF78NW3NNT11SLL%O3=MF78NW3NNT11%O4=MF78NW3NNT11SLL%O5=MF78NW3NNT11SLL%O6=MF78NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=MF78NW3SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# 10.2.0 Darwin Kernel Version 10.2.0: Tue Nov  3 10:37:10 PST 2009; root:xnu-1486.2.11~1/RELEASE_I386 i386
Fingerprint Apple Mac OS X 10.6.2 (Snow Leopard) (Darwin 10.2.0)
Class Apple | Mac OS X | 10.6.X | general purpose
CPE cpe:/o:apple:mac_os_x:10.6.2
SEQ(SP=F7-109%GCD=1-6%ISR=F1-111%TI=RD%CI=RI%II=I%TS=3)
OPS(O1=M218NW3NNT11SLL%O2=M218NW3NNT11SLL%O3=M218NW3NNT11%O4=M218NW3NNT11SLL%O5=M218NW3NNT11SLL%O6=M218NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M218NW3SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
T7(R=N)
U1(R=N)
IE(DFI=N%T=3B-45%TG=40%CD=Z)

# Darwin 10.3.0 Darwin Kernel Version 10.3.0: Fri Feb 26 11:58:09 PST 2010; root:xnu-1504.3.12~1/RELEASE_I386 i386
Fingerprint Apple Mac OS X 10.6.3 (Snow Leopard) (Darwin 10.3.0)
Class Apple | Mac OS X | 10.6.X | general purpose
CPE cpe:/o:apple:mac_os_x:10.6.3
SEQ(SP=EB-10B%GCD=1-6%ISR=EE-10C%TI=RD%CI=RI%II=RI%TS=3)
OPS(O1=M5ACNW3NNT11SLL%O2=M5ACNW3NNT11SLL%O3=M5ACNW3NNT11%O4=M5ACNW3NNT11SLL%O5=M5ACNW3NNT11SLL%O6=M5ACNNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M5ACNW3SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=37EE%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Darwin 10.4.0 Darwin Kernel Version 10.4.0: Fri Apr 23 18:28:53 PDT 2010; root:xnu-1504.7.4~1/RELEASE_I386 i386
Fingerprint Apple Mac OS X 10.6.4 (Snow Leopard) (Darwin 10.4.0)
Class Apple | Mac OS X | 10.6.X | general purpose
CPE cpe:/o:apple:mac_os_x:10.6.4
SEQ(SP=102-10C%GCD=1-6%ISR=105-10F%TI=RD%CI=RD%II=RI%TS=3)
OPS(O1=M3FD8NW3NNT11SLL%O2=M3FD8NW3NNT11SLL%O3=M3FD8NW3NNT11%O4=M3FD8NW3NNT11SLL%O5=M3FD8NW3NNT11SLL%O6=M3FD8NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M3FD8NW3SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%S=O%A=S+%F=AS%O=M3FD8NW3NNT11SLL%RD=0%Q=)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Darwin 10.5.0 Darwin Kernel Version 10.5.0: Fri Nov  5 23:20:39 PDT 2010; root:xnu-1504.9.17~1/RELEASE_I386 i38
Fingerprint Apple Mac OS X 10.6.5 (Snow Leopard) (Darwin 10.5.0)
Class Apple | Mac OS X | 10.6.X | general purpose
CPE cpe:/o:apple:mac_os_x:10.6.5
SEQ(SP=F8-102%GCD=1-6%ISR=FD-10B%TI=RD%CI=RD|RI%II=RI%TS=3)
OPS(O1=M558NW2NNT11SLL%O2=M558NW2NNT11SLL%O3=M558NW2NNT11%O4=M558NW2NNT11SLL%O5=M558NW2NNT11SLL%O6=M558NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M558NW2SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Darwin 10.5.0 Darwin Kernel Version 10.5.0: Fri Nov  5 23:20:39 PDT 2010; root:xnu-1504.9.17~1/RELEASE_I386 i386
Fingerprint Apple Mac OS X 10.6.5 (Snow Leopard) (Darwin 10.5.0)
Class Apple | Mac OS X | 10.6.X | general purpose
CPE cpe:/o:apple:mac_os_x:10.6.5
SEQ(CI=RD%II=RI%TS=3)
OPS(O1=M5B4NW3NNT11SLL%O2=M5B4NW3NNT11SLL%O3=M5B4NW3NNT11%O4=M5B4NW3NNT11SLL%O5=M5B4NW3NNT11SLL%O6=M5B4NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=N)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%RD=0)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Darwin 10.6.0 Darwin Kernel Version 10.6.0: Sun Jan  9 16:31:48 EST 2011; legacy kernel v6 :xnu-1504.9.26/BUILD/obj/RELEASE_I386 i386, Mac OS X 10.6.6 (Hackintosh Build)
Fingerprint Apple Mac OS X 10.6.6 (Snow Leopard) (Darwin 10.6.0)
Class Apple | Mac OS X | 10.6.X | general purpose
CPE cpe:/o:apple:mac_os_x:10.6.6
SEQ(SP=C4-CE%GCD=1-6%ISR=CA-D4%TI=Z%CI=RD%II=I%TS=7)
OPS(O1=M5B4ST11NW0%O2=M5B4ST11NW0%O3=M5B4NNT11NW0%O4=M5B4ST11NW0%O5=M5B4ST11NW0%O6=M5B4ST11)
WIN(W1=16A0%W2=16A0%W3=16A0%W4=16A0%W5=16A0%W6=16A0)
ECN(R=Y%DF=Y%T=3C-46%TG=40%W=16D0%O=M5B4NNSNW0%CC=Y%Q=)
T1(R=Y%DF=Y%T=3C-46%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%T=3C-46%TG=40%W=16A0%S=O%A=S+%F=AS%O=M5B4ST11NW0%RD=0%Q=)
T4(R=Y%DF=Y%T=3C-46%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=N%T=3C-46%TG=40%CD=S)

# Darwin 10.7.0 Darwin Kernel Version 10.7.0: Sat Jan 29 15:17:16 PST 2011; root:xnu-1504.9.37~1/RELEASE_I386 i386
Fingerprint Apple Mac OS X 10.6.7 (Snow Leopard) (Darwin 10.7.0)
Class Apple | Mac OS X | 10.6.X | general purpose
CPE cpe:/o:apple:mac_os_x:10.6.7
SEQ(SP=F3-107%GCD=1-6%ISR=F7-10D%TI=RD%II=RI%TS=3)
OPS(O1=M3FD8NW3NNT11SLL%O2=M3FD8NW3NNT11SLL%O3=M3FD8NW3NNT11%O4=M3FD8NW3NNT11SLL%O5=M3FD8NW3NNT11SLL%O6=M3FD8NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=30-3A%TG=40%W=FFFF%O=M3FD8NW3SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=30-3A%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=30-3A%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=30-3A%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=30-3A%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=30-3A%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=30-3A%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=30-3A%TG=40%CD=S)

# Darwin 10.7.0 Darwin Kernel Version 10.7.0: Sat Jan 29 15:17:16 PST 2011; root:xnu-1504.9.37~1/RELEASE_I386 i386
Fingerprint Apple Mac OS X 10.6.7 (Snow Leopard) (Darwin 10.7.0)
Class Apple | Mac OS X | 10.6.X | general purpose
CPE cpe:/o:apple:mac_os_x:10.6.7
SEQ(SP=F7-101%GCD=1-6%ISR=F9-103%TI=RD%II=RI%TS=3)
OPS(O1=M5B4NW3NNT11SLL%O2=M5B4NW3NNT11SLL%O3=M5B4NW3NNT11%O4=M5B4NW3NNT11SLL%O5=M5B4NW3NNT11SLL%O6=M5B4NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M5B4NW2SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=N)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Darwin 10.8.0 Darwin Kernel Version 10.8.0: Tue Jun  7 16:32:41 PDT 2011; root:xnu-1504.15.3~1/RELEASE_X86_64 x86_64
Fingerprint Apple Mac OS X 10.6.8 (Leopard) (Darwin 10.8.0)
Class Apple | Mac OS X | 10.6.X | general purpose
CPE cpe:/o:apple:mac_os_x:10.6 auto
SEQ(SP=FB-109%GCD=1-6%ISR=100-10A%TI=RD%CI=RD%II=RI%TS=3)
OPS(O1=M2300NW3NNT11SLL%O2=M2300NW3NNT11SLL%O3=M2300NW3NNT11%O4=M2300NW3NNT11SLL%O5=M2300NW3NNT11SLL%O6=M2300NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M2300NW3SLL%CC=N)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%RD=0)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%RD=0)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%RD=0)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%RD=0)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Darwin 10.8.0 Darwin Kernel Version 10.8.0: Tue Jun  7 16:33:36 PDT 2011; root:xnu-1504.15.3~1/RELEASE_I386 i386, Mac OS X Server 10.6.8
Fingerprint Apple Mac OS X 10.6.8 (Snow Leopard) (Darwin 10.8.0)
Class Apple | Mac OS X | 10.6.X | general purpose
CPE cpe:/o:apple:mac_os_x:10.6 auto
SEQ(SP=FE-108%GCD=1-6%ISR=FF-10D%TI=RD%II=RI%TS=3)
OPS(O1=M5B4NW3NNT11SLL%O2=M578NW3NNT11SLL%O3=M280NW3NNT11%O4=M22CNW3NNT11SLL%O5=M218NW3NNT11SLL%O6=M109NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M5B4NW3SLL%CC=N)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%RD=0)
T6(R=N)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Darwin 10.8.0 Darwin Kernel Version 10.8.0: Tue Jun  7 16:33:36 PDT 2011; root:xnu-1504.15.3~1/RELEASE_I386 i386
Fingerprint Apple Mac OS X 10.6.8 (Snow Leopard) (Darwin 10.8.0)
Class Apple | Mac OS X | 10.6.X | general purpose
CPE cpe:/o:apple:mac_os_x:10.6.8
SEQ(SP=F0-104%GCD=1-6%ISR=F3-10B%TI=RD%CI=RI%II=RI%TS=3)
OPS(O1=M546NW3NNT11SLL%O2=M546NW3NNT11SLL%O3=M546NW3NNT11%O4=M546NW3NNT11SLL%O5=M546NW3NNT11SLL%O6=M546NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M546NW2SLL|M546NW3SLL%CC=N)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%RD=0)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%RD=0)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%RD=0)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Darwin 10.8.0 Darwin Kernel Version 10.8.0: Tue Jun 7 16:33:36 PDT 2011; root:xnu-1504.15.3~1/release_I386 i386
Fingerprint Apple Mac OS X 10.6.8 (Snow Leopard) (Darwin 10.8.0)
Class Apple | Mac OS X | 10.6.X | general purpose
CPE cpe:/o:apple:mac_os_x:10.6.8
SEQ(SP=F4-106%GCD=1-6%ISR=FD-10D%TI=RD%CI=RD%II=RI%TS=3|5|6)
OPS(O1=M5ACNW2NNT11SLL%O2=M5ACNW2NNT11SLL%O3=M5ACNW2NNT11%O4=M5ACNW2NNT11SLL%O5=M5ACNW2NNT11SLL%O6=M5ACNNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M5ACNW2SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Darwin 11.3.0 Darwin Kernel Version 11.3.0: Thu Jan 12 18:47:41 PST 2012; root:xnu-1699.24.23~1/RELEASE_X86_64 x86_64
Fingerprint Apple Mac OS X 10.7.0 - 10.7.3 (Lion) (Darwin 11.0.0 - 11.3.0)
Class Apple | Mac OS X | 10.7.X | general purpose
CPE cpe:/o:apple:mac_os_x:10.7
SEQ(SP=FC-106%GCD=1-6%ISR=FF-109%TI=RD%II=RI%TS=A|C)
OPS(O1=M4B0NW2NNT11SLL%O2=M4B0NW2NNT11SLL%O3=M4B0NW2NNT11%O4=M4B0NW2NNT11SLL%O5=M4B0NW2NNT11SLL%O6=M4B0NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M4B0NW2SLL%CC=N)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=O|S+%F=AS%RD=0)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=O%A=S+%F=AR%RD=0)
T6(R=N)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Darwin 11.0.0 Darwin Kernel Version 11.0.0: Fri May  6 22:16:19 PDT 2011; root:xnu-1699.22.53~1/RELEASE_X86_64 x86_64
# Darwin 11.0.0 Darwin Kernel Version 11.0.0: Sat Jun 18 12:56:35 PDT 2011; root:xnu-1699.22.73~1/RELEASE_X86_64 x86_64
# Darwin 11.0.1 Darwin Kernel Version 11.0.1: Wed Jun 29 19:53:22 PDT 2011; root:xnu-1699.23.2~1/RELEASE_X86_64 x86_64
# Darwin 11.2.0 Darwin Kernel Version 11.2.0: Tue Jul 19 17:39:08 PDT 2011; root:xnu-1699.24.3~1/RELEASE_X86_64 x86_64
# Darwin 11.2.0 Darwin Kernel Version 11.2.0: Tue Aug  9 20:54:00 PDT 2011; root:xnu-1699.24.8~1/RELEASE_X86_64 x86_64
# Darwin Kernel Version 11.3.0: Thu Jan 12 18:47:41 PST 2012; root:xnu-1699.24.23~1/RELEASE_X86_64 x86_64
# Darwin 11.4.0 Darwin Kernel Version 11.4.0: Mon Apr  9 19:32:15 PDT 2012; root:xnu-1699.26.8~1/RELEASE_X86_64 x86_64
Fingerprint Apple Mac OS X 10.7.0 - 10.7.4 (Lion) (Darwin 11.0.0 - 11.3.0)
Class Apple | Mac OS X | 10.7.X | general purpose
CPE cpe:/o:apple:mac_os_x:10.7
SEQ(SP=F7-10F%GCD=1-6%ISR=F9-10D%TI=RD%CI=RD|RI%TS=A)
OPS(O1=M3FD8NW1NNT11SLL|M3FD8NW3NNT11SLL%O2=M3FD8NW1NNT11SLL|M3FD8NW3NNT11SLL%O3=M3FD8NW1NNT11|M3FD8NW3NNT11%O4=M3FD8NW1NNT11SLL|M3FD8NW3NNT11SLL%O5=M3FD8NW1NNT11SLL|M3FD8NW3NNT11SLL%O6=M3FD8NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M3FD8NW1SLL|M3FD8NW2SLL|M3FD8NW3SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=Z%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# IOS 4.3.2 iPhone 4 FR
# Darwin 11.0.0 Darwin Kernel Version 11.0.0: Sat Jun 18 12:56:35 PDT 2011; root:xnu-1699.22.73~1/RELEASE_X86_64 x86_64
# Darwin 11.1.0 Darwin Kernel Version 11.1.0: Tue Jul 26 16:07:11 PDT 2011; root:xnu-1699.22.81~1/RELEASE_X86_64 x86_64
# Darwin 11.2.0 Darwin Kernel Version 11.2.0: Tue Aug  9 20:54:00 PDT 2011; root:xnu-1699.24.8~1/RELEASE_X86_64 x86_64
# iphone 3gs with iso 5.0
# Darwin 11.3.0 Darwin Kernel Version 11.3.0: Thu Jan 12 18:48:32 PST 2012; root:xnu-1699.24.23~1/RELEASE_I386 i386
# 11.4.0 Darwin Kernel Version 11.4.0: Mon Apr  9 19:32:15 PDT 2012; root:xnu-1699.26.8~1/RELEASE_X86_64 x86_64
Fingerprint Apple Mac OS X 10.7.0 - 10.7.4 (Lion) (Darwin 11.0.0 - 11.4.0) or iPhone mobile phone (iOS 4.3.2)
Class Apple | Mac OS X | 10.7.X | general purpose
CPE cpe:/o:apple:mac_os_x:10.7 auto
Class Apple | iOS | 4.X | phone
CPE cpe:/o:apple:iphone_os:4 auto
SEQ(SP=EB-109%GCD=1-6%ISR=EE-10C%TI=RD|RI%CI=RD|RI%II=RI%TS=A)
OPS(O1=M3FD8NW2NNT11SLL%O2=M3FD8NW2NNT11SLL%O3=M3FD8NW2NNT11%O4=M3FD8NW2NNT11SLL%O5=M3FD8NW2NNT11SLL%O6=M3FD8NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M3FD8NW2SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=Z%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Darwin 11.0.0 Darwin Kernel Version 11.0.0: <<date>; username:xnu-1699.22.64~1/RELEASE_x86_64 x86_64
# Darwin 11.1.0 Darwin Kernel Version 11.1.0: Tue Jul 26 16:07:11 PDT 2011; root:xnu-1699.22.81~1/RELEASE_X86_64 x86_64
# Darwin 11.2.0 Darwin Kernel Version 11.2.0: Tue Aug  9 20:54:00 PDT 2011; root:xnu-1699.24.8~1/RELEASE_X86_64 x86_64
# Darwin Kernel Version 11.3.0: Thu Jan 12 18:48:32 PST 2012; root:xnu-1699.24.23~1/RELEASE_I386 i386
# Apple Mac OS X 10.7.0 - 10.7.3 (Lion) (Darwin 11.0.0 - 11.3.0)
# Darwin 11.4.0 Darwin Kernel Version 11.4.0 : Mon Apr  9 19:32:15 PDT 2012; root :xnu-1699.26.8~1/RELEASE_X86_64x86_64
# Darwin 11.4.2 Darwin Kernel Version 11.4.2: Thu Aug 23 16:25:48 PDT 2012; root:xnu-1699.32.7~1/RELEASE_X86_64 x86_64, Apple 2007 MacBook running 10.7.5
Fingerprint Apple Mac OS X 10.7.0 - 10.7.5 (Lion) (Darwin 11.0.0 - 11.4.2)
Class Apple | Mac OS X | 10.7.X | general purpose
CPE cpe:/o:apple:mac_os_x:10.7 auto
SEQ(SP=EE-10A%GCD=1-6%ISR=F8-10E%TI=RD%CI=RD|RI%II=RI%TS=A)
OPS(O1=M5B4NW1NNT11SLL|M5B4NW3NNT11SLL|M5B4NW8NNT11SLL%O2=M5B4NW1NNT11SLL|M5B4NW3NNT11SLL|M5B4NW8NNT11SLL%O3=M5B4NW1NNT11|M5B4NW3NNT11|M5B4NW8NNT11%O4=M5B4NW1NNT11SLL|M5B4NW3NNT11SLL|M5B4NW8NNT11SLL%O5=M5B4NW1NNT11SLL|M5B4NW3NNT11SLL|M5B4NW8NNT11SLL%O6=M5B4NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-46%TG=40%W=FFFF%O=M5B4NW1SLL|M5B4NW3SLL|M5B4NW8SLL%CC=N)
T1(R=Y%DF=Y%T=3B-46%TG=40%S=O%A=S+%F=AS%RD=0)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-46%TG=40%W=0%S=A%A=Z%F=R%RD=0)
T5(R=Y%DF=N%T=3B-46%TG=40%W=0%S=Z%A=S+%F=AR%RD=0)
T6(R=Y%DF=Y%T=3B-46%TG=40%W=0%S=A%A=Z%F=R%RD=0)
T7(R=Y%DF=N%T=3B-46%TG=40%W=0%S=Z%A=S%F=AR%RD=0)
U1(DF=N%T=3B-46%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-46%TG=40%CD=S)

# Darwin 11.2.0 Darwin Kernel Version 11.2.0: Tue Aug  9 20:54:00 PDT 2011; root:xnu-1699.24.8~1/RELEASE_X86_64 x86_64
Fingerprint Apple Mac OS X 10.7.2 (Lion) (Darwin 11.2.0)
Class Apple | Mac OS X | 10.7.X | general purpose
CPE cpe:/o:apple:mac_os_x:10.7 auto
SEQ(SP=F5-107%GCD=1-6%ISR=F5-109%TI=RD%CI=RD%II=RI%TS=A)
OPS(O1=M4B0NW3NNT11SLL%O2=M4B0NW3NNT11SLL%O3=M4B0NW3NNT11%O4=M4B0NW3NNT11SLL%O5=M4B0NW3NNT11SLL%O6=M4B0NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M4B0NW3SLL%CC=N)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%RD=0)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%RD=0)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%RD=0)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%RD=0)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Darwin 11.2.0 Darwin Kernel Version 11.2.0: Tue Aug  9 20:54:00 PDT 2011; root:xnu-1699.24.8~1/RELEASE_X86_64 x86_64
Fingerprint Apple Mac OS X 10.7.2 (Lion) (Darwin 11.2.0)
Class Apple | Mac OS X | 10.7.X | general purpose
CPE cpe:/o:apple:mac_os_x:10.7 auto
SEQ(SP=F4-108%GCD=1-6%ISR=F6-10E%TI=RD%CI=RD%TS=A)
OPS(O1=M3FD8NW3NNT11SLL%O2=M3FD8NW3NNT11SLL%O3=M3FD8NW2NNT11%O4=M3FD8NW2NNT11SLL%O5=M3FD8NW2NNT11SLL%O6=M3FD8NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M3FD8NW2SLL%CC=N)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%RD=0)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%RD=0)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%RD=0)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%RD=0)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=Z%RUCK=0%RUD=G)
IE(R=N)

# Darwin 11.2.0 Darwin Kernel Version 11.2.0: Tue Aug  9 20:54:00 PDT 2011; root:xnu-1699.24.8~1/RELEASE_X86_64 x86_64
Fingerprint Apple Mac OS X 10.7.2 (Lion) (Darwin 11.2.0)
Class Apple | Mac OS X | 10.7.X | general purpose
CPE cpe:/o:apple:mac_os_x:10.7 auto
SEQ(CI=RD|RI%II=RI)
OPS()
WIN(W1=0%W2=0%W3=0%W4=0%W5=0%W6=0)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=0%CC=N)
T1(R=Y%DF=N%T=3B-45%TG=40%S=Z%A=S+%F=AR%RD=0)
T2(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%RD=0)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%RD=0)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%RD=0)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%RD=0)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%RD=0)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=Z%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Darwin Kernel Version 11.2.0: Tue Aug  9 20:54:00 PDT 2011; root:xnu-1699.24.8~1/RELEASE_X86_64 x86_64
Fingerprint Apple Mac OS X 10.7.2 (Lion) (Darwin 11.2.0)
Class Apple | Mac OS X | 10.7.X | general purpose
CPE cpe:/o:apple:mac_os_x:10.7 auto
SEQ(SP=BE-C8%GCD=1-6%ISR=C6-D0%TI=Z%CI=RD%II=RI%TS=U)
OPS(O1=M598NNS%O2=M578NNS%O3=M280%O4=M218NNS%O5=M218NNS%O6=M109NNS)
WIN(W1=16D0%W2=16D0%W3=16D0%W4=16D0%W5=16D0%W6=16D0)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=16D0%O=M598NNS%CC=N)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0)
T2(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%RD=0)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=16D0%S=O%A=O|S+%F=A|AS%O=|M109NNS%RD=0)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%RD=0)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%RD=0)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%RD=0)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%RD=0)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Darwin 11.2.0
Fingerprint Apple Mac OS X 10.7.2 (Lion) (Darwin 11.2.0)
Class Apple | Mac OS X | 10.7.X | general purpose
CPE cpe:/o:apple:mac_os_x:10.7 auto
SEQ(SP=F0-108%GCD=1-6%ISR=F2-108%TI=RD%CI=RD|RI%TS=A)
OPS(O1=M3FD8NW2NNT11SLL%O2=M3FD8NW2NNT11SLL%O3=M3FD8NW2NNT11%O4=M3FD8NW2NNT11SLL%O5=M3FD8NW3NNT11SLL%O6=M3FD8NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M3FD8NW3SLL%CC=N)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%RD=0)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%RD=0)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%RD=0)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%RD=0)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=Z%RUCK=0%RUD=G)
IE(R=N)

# Darwin 11.2.0 Darwin Kernel Version 11.2.0: Tue Aug  9 20:54:00 PDT 2011; root:xnu-1699.24.8~1/RELEASE_X86_64 x86_64
Fingerprint Apple Mac OS X 10.7.2 (Lion) (Darwin 11.2.0)
Class Apple | Mac OS X | 10.7.X | general purpose
CPE cpe:/o:apple:mac_os_x:10.7 auto
SEQ(SP=F8-10A%GCD=1-6%ISR=103-10D%TI=RD%CI=RD%TS=A)
OPS(O1=M3FD8NW2NNT11SLL%O2=M3FD8NW2NNT11SLL%O3=M3FD8NW2NNT11%O4=M3FD8NW2NNT11SLL%O5=M3FD8NW2NNT11SLL%O6=M3FD8NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M3FD8NW2SLL%CC=N)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%RD=0)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%RD=0)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%RD=0)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%RD=0)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(R=N)

# iOS 4.3.3
# 32gb ipod touch. iOS version is 4.3.5.
# Darwin 11.2.0 Darwin Kernel Version 11.2.0: Tue Aug  9 20:54:00 PDT 2011; root:xnu-1699.24.8~1/RELEASE_X86_64 x86_64
Fingerprint Apple Mac OS X 10.7.2 (Lion) (Darwin 11.2.0) or iOS 4.3.3 - 4.3.5
Class Apple | Mac OS X | 10.7.X | general purpose
CPE cpe:/o:apple:mac_os_x:10.7.2
Class Apple | iOS | 4.X | media device
CPE cpe:/o:apple:iphone_os:4 auto
Class Apple | iOS | 4.X | phone
CPE cpe:/o:apple:iphone_os:4 auto
SEQ(SP=F8-108%GCD=1-6%ISR=FF-10B%TI=RD%CI=RD|RI%II=RI%TS=9)
OPS(O1=M5B4NW2NNT11SLL%O2=M5B4NW2NNT11SLL%O3=M5B4NW2NNT11%O4=M5B4NW2NNT11SLL%O5=M5B4NW2NNT11SLL%O6=M5B4NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M5B4NW2SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Darwin 11.2.0 Darwin Kernel Version 11.2.0: Tue Aug  9 20:54:00 PDT 2011; root:xnu-1699.24.8~1/RELEASE_X86_64 x86_64
Fingerprint Apple Mac OS X 10.7.2 - 10.7.3 (Lion) (Darwin 11.2.0 - 11.3.0)
Class Apple | Mac OS X | 10.7.X | general purpose
CPE cpe:/o:apple:mac_os_x:10.7 auto
SEQ(SP=F6-10A%GCD=1-6%ISR=101-10D%TI=RD%CI=RD%II=RI%TS=A)
OPS(O1=M3FD8NW3NNT11SLL%O2=M3FD8NW3NNT11SLL%O3=M3FD8NW3NNT11%O4=M3FD8NW3NNT11SLL%O5=M3FD8NW2NNT11SLL%O6=M3FD8NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M3FD8NW2SLL%CC=N)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%RD=0)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%RD=0)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%RD=0)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%RD=0)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=Z%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Darwin 11.3.0 Darwin Kernel Version 11.3.0: Thu Jan 12 18:47:41 PST 2012; root:xnu-1699.24.23~1/RELEASE_X86_64 x86_64
Fingerprint Apple Mac OS X 10.7.3 (Lion) (Darwin 11.3.0)
Class Apple | Mac OS X | 10.7.X | general purpose
CPE cpe:/o:apple:mac_os_x:10.7
SEQ(SP=F2-108%GCD=1-6%ISR=FF-113%TI=RD%CI=RD%II=RI%TS=A)
OPS(O1=M3FD8NW3NNT11SLL%O2=M3FD8NW3NNT11SLL%O3=M3FD8NW3NNT11%O4=M3FD8NW3NNT11SLL%O5=M3FD8NW3NNT11SLL%O6=M3FD8NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M3FD8NW3SLL%CC=N)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%RD=0)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%RD=0)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%RD=0)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%RD=0)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Darwin 11.3.0 Darwin Kernel Version 11.3.0: Thu Jan 12 18:47:41 PST 2012; root:xnu-1699.24.23~1/RELEASE_X86_64 x86_64
Fingerprint Apple Mac OS X 10.7.3 (Lion) (Darwin 11.3.0)
Class Apple | Mac OS X | 10.7.X | general purpose
CPE cpe:/o:apple:mac_os_x:10.7
SEQ(SP=100-10A%GCD=1-6%ISR=101-10B%TI=RD%CI=RD%II=RI%TS=A)
OPS(O1=M57CNW1NNT11SLL%O2=M57CNW1NNT11SLL%O3=M57CNW1NNT11%O4=M57CNW1NNT11SLL%O5=M57CNW1NNT11SLL%O6=M57CNNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M57CNW1SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Apple's OS X 10.7.4
Fingerprint Apple Mac OS X 10.7.4 (Lion) (Darwin 11.4.0)
Class Apple | Mac OS X | 10.7.X | general purpose
CPE cpe:/o:apple:mac_os_x:10.7 auto
SEQ(SP=F1-FB%GCD=1-6%ISR=FF-109%TI=RD%CI=RI%II=RI%TS=A)
OPS(O1=M578NW3NNT11SLL%O2=M578NW3NNT11SLL%O3=M578NW3NNT11%O4=M578NW3NNT11SLL%O5=M578NW3NNT11SLL%O6=M578NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=FFFF%O=M578NW3SLL%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# Darwin 11.4.0 Darwin Kernel Version 11.4.0: Mon Apr  9 19:32:15 PDT 2012; root:xnu-1699.26.8~1/RELEASE_X86_64 x86_64
# Darwin Kernel Version 11.4.0 RELEASE_X86_64 x86_64
Fingerprint Apple Mac OS X 10.7.4 (Lion) (Darwin 11.4.0)
Class Apple | Mac OS X | 10.7.X | general purpose
CPE cpe:/o:apple:mac_os_x:10.7
SEQ(SP=F3-109%GCD=1-6%ISR=FC-110%TI=RD%CI=RI%TS=A)
OPS(O1=M3FD8NW1NNT11SLL|M3FD8NW2NNT11SLL|M3FD8NW3NNT11SLL%O2=M3FD8NW1NNT11SLL|M3FD8NW2NNT11SLL|M3FD8NW3NNT11SLL%O3=M3FD8NW1NNT11|M3FD8NW2NNT11|M3FD8NW3NNT11%O4=M3FD8NW1NNT11SLL|M3FD8NW2NNT11SLL|M3FD8NW3NNT11SLL%O5=M3FD8NW1NNT11SLL|M3FD8NW2NNT11SLL|M3FD8NW3NNT11SLL%O6=M3FD8NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M3FD8NW1SLL|M3FD8NW2SLL|M3FD8NW3SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=Z%RUCK=0%RUD=G)
IE(R=N)

# apple TV second generation
# Apple iPad 2 iOS 4.3
# Darwin 11.4.0 Darwin Kernel Version 11.4.0: Mon Apr  9 19:32:15 PDT 2012; root:xnu-1699.26.8~1/RELEASE_X86_64 x86_64
Fingerprint Apple Mac OS X 10.7.4 (Lion) (Darwin 11.4.0) or Apple TV (iOS 4.3)
Class Apple | Mac OS X | 10.7.X | general purpose
CPE cpe:/o:apple:mac_os_x:10.7 auto
Class Apple | iOS | 4.X | media device
CPE cpe:/o:apple:iphone_os:4 auto
SEQ(SP=F9-109%GCD=1-6%ISR=101-10B%TI=RD%CI=RI%II=RI%TS=A)
OPS(O1=M5B4NW2NNT11SLL%O2=M5B4NW2NNT11SLL%O3=M5B4NW2NNT11%O4=M5B4NW2NNT11SLL%O5=M5B4NW2NNT11SLL%O6=M5B4NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M5B4NW2SLL%CC=N)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%RD=0)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%RD=0)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%RD=0)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Darwin 11.4.2 Darwin Kernel Version 11.4.2: Thu Aug 23 16:25:48 PDT 2012; root:xnu-1699.32.7~1/RELEASE_X86_64 x86_64
Fingerprint Apple Mac OS X 10.7.4 (Lion) (Darwin 11.4.2)
Class Apple | Mac OS X | 10.7.X | general purpose
CPE cpe:/o:apple:mac_os_x:10.7 auto
SEQ(TI=RD|RI%CI=RI%II=RI%SS=S%TS=A)
OPS(O1=M5B4NW2NNT11SLL%O2=M5B4NW2NNT11SLL%O3=M5B4NW2NNT11%O4=M5B4NW2NNT11SLL%O5=M5B4NW2NNT11SLL%O6=M5B4NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=N)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Darwin 11.4.2 Darwin Kernel Version 11.4.2: Thu Aug 23 16:25:48 PDT 2012; root:xnu-1699.32.7~1/RELEASE_X86_64 x86_64
# 10.7.5
Fingerprint Apple Mac OS X 10.7.4 - 10.7.5 (Lion) (Darwin 11.4.2)
Class Apple | Mac OS X | 10.7.X | general purpose
CPE cpe:/o:apple:mac_os_x:10.7 auto
SEQ(SP=FC-108%GCD=1-6%ISR=100-110%TI=RD%CI=RD%II=RI%TS=A)
OPS(O1=M5B4NW3NNT11SLL%O2=M5B4NW3NNT11SLL%O3=M5B4NW3NNT11%O4=M5B4NW2NNT11SLL%O5=M5B4NW2NNT11SLL%O6=M5B4NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M5B4NW2SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Apple TV - 2nd Generation - OS Version 4.2 http://support.apple.com/kb/HT4448
# iOS 4.3 ezShare Pro 3.0.1 iPod touch
# Apple TV 2
# IPhone 3GS 32 GB, WLAN connected, iOS 4.3, Build 8F190
# iOS 4.3.1
# iPhone4 running iOS 4.3.2
# iPhone OS 4.3.2 on iPAD 1G (iPad1,1)
# Version 4.3.3
# ipod touch IOS 4.3.4
# Ipad 2 version 4.3.5 (8L1)
# Darwin 11.0.1 Darwin Kernel Version 11.0.1: Thu Jul 28 02:01:39 PDT 2011; root:xnu-1699.23.4~1/RELEASE_X86_64 x86_64, OSX Lion 10.7.1
# Darwin 11.2.0 Darwin Kernel Version 11.2.0: Tue Aug  9 20:56:15 PDT 2011; root:xnu-1699.24.8~1/RELEASE_I386 i386 10.7.2
# 5.0.1 JailBroken
# Darwin 11.3.0 Darwin Kernel Version 11.3.0: Thu Jan 12 18:48:32 PST 2012; root:xnu-1699.24.23~1/RELEASE_I386 i386
# Darwin 11.4.0 Darwin Kernel Version 11.4.0: Mon Apr  9 19:32:15 PDT 2012; root:xnu-1699.26.8~1/RELEASE_X86_64 x86_64
Fingerprint Apple Mac OS X 10.7.0 - 10.7.4 (Lion) (Darwin 11.0.0 - 11.4.0) or iOS 4.2 - 5.0.1
Class Apple | Mac OS X | 10.7.X | media device
CPE cpe:/o:apple:mac_os_x:10.7 auto
Class Apple | iOS | 4.X | media device
CPE cpe:/o:apple:iphone_os:4 auto
Class Apple | iOS | 4.X | phone
CPE cpe:/o:apple:iphone_os:4 auto
Class Apple | iOS | 5.X | phone
CPE cpe:/o:apple:iphone_os:5 auto
SEQ(SP=EF-10B%GCD=1-6%ISR=F5-111%TI=RD|RI%CI=RD|RI%II=RI%TS=A)
OPS(O1=M5B4NW2NNT11SLL|M5B4NW3NNT11SLL%O2=M5B4NW2NNT11SLL%O3=M5B4NW2NNT11%O4=M5B4NW2NNT11SLL%O5=M5B4NW2NNT11SLL%O6=M5B4NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M5B4NW2SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Darwin 12.0.0 Darwin Kernel Version 12.0.0: Sun Jun 24 23:00:16 PDT 2012; root:xnu-2050.7.9~1/RELEASE_X86_64 x86_64
Fingerprint Apple Mac OS X 10.8 (Mountain Lion) (Darwin 12.0.0)
Class Apple | Mac OS X | 10.8.X | general purpose
CPE cpe:/o:apple:mac_os_x:10.8
SEQ(SP=FF-109%GCD=1-6%ISR=FD-107%TI=RD%CI=RD%II=RI%TS=A)
OPS(O1=M3FD8NW4NNT11SLL%O2=M3FD8NW4NNT11SLL%O3=M3FD8NW4NNT11%O4=M3FD8NW4NNT11SLL%O5=M3FD8NW4NNT11SLL%O6=M3FD8NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M3FD8NW4SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# OSX Mountain Lion: Darwin 12.0.0 Darwin Kernel Version 12.0.0: Sun Jun 24 23:00:16 PDT 2012; root:xnu-2050.7.9~1/RELEASE_X86_64 x86_64
# Darwin 12.1.0 Darwin Kernel Version 12.1.0: Tue Aug 14 13:29:55 PDT 2012; root:xnu-2050.9.2~1/RELEASE_X86_64 x86_64
Fingerprint Apple Mac OS X 10.8 - 10.8.1 (Mountain Lion) (Darwin 12.0.0 - 12.1.0)
Class Apple | Mac OS X | 10.8.X | general purpose
CPE cpe:/o:apple:mac_os_x:10.8
SEQ(SP=FA-104%GCD=1-6%ISR=FD-109%TI=RD%CI=RD%II=RI%TS=A)
OPS(O1=M3FD8NW8NNT11SLL%O2=M3FD8NW8NNT11SLL%O3=M3FD8NW8NNT11%O4=M3FD8NW8NNT11SLL%O5=M3FD8NW8NNT11SLL%O6=M3FD8NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M3FD8NW8SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=Z%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# iPhone 4 running iOS 5.0.1
# Darwin 12.0.0 Darwin Kernel Version 12.0.0: Mon Jan 30 18:41:34 PST 2012; root:xnu-2050.1.12~1/RELEASE_X86_64 x86_64, Mac OS X 10.8 Preview 1
# Darwin 12.1.0 Darwin Kernel Version 12.1.0: Tue Aug 14 13:29:55 PDT 2012; root:xnu-2050.9.2~1/RELEASE_X86_64 x86_64
Fingerprint Apple Mac OS X 10.8 - 10.8.1 (Mountain Lion) (Darwin 12.0.0 - 12.1.0) or iOS 5.0.1
Class Apple | Mac OS X | 10.8.X | general purpose
CPE cpe:/o:apple:mac_os_x:10.8
Class Apple | iOS | 5.X | phone
CPE cpe:/o:apple:iphone_os:5 auto
Class Apple | iOS | 5.X | media device
CPE cpe:/o:apple:iphone_os:5 auto
SEQ(SP=F4-108%GCD=1-6%ISR=F2-10E%TI=RD%CI=RD|RI%II=RI%TS=A)
OPS(O1=M3FD8NW4NNT11SLL%O2=M3FD8NW4NNT11SLL%O3=M3FD8NW4NNT11%O4=M3FD8NW4NNT11SLL%O5=M3FD8NW4NNT11SLL%O6=M3FD8NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M3FD8NW4SLL%CC=N)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%RD=0)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%RD=0)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%RD=0)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%RD=0)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=Z%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# iPhone 4 running iOS 5.1.1 (9B206), tested via WiFi.
# Darwin 12.0.0 Darwin Kernel Version 12.0.0: Sun Jun 24 23:00:16 PDT 2012; root:xnu-2050.7.9~1/RELEASE_X86_64 x86_64
# iPad 2 running iOS 5.1.1
# Mac OS X 10.8.1 (Mountain Lion)
# Darwin 12.3.0 Darwin Kernel Version 12.3.0: Sun Jan  6 22:37:10 PST 2013; root:xnu-2050.22.13~1/RELEASE_X86_64 x86_64
Fingerprint Apple Mac OS X 10.8 - 10.8.3 (Mountain Lion) (Darwin 12.0.0 - 12.3.0) or iOS 5.1.1
Class Apple | Mac OS X | 10.8.X | general purpose
CPE cpe:/o:apple:mac_os_x:10.8 auto
Class Apple | iOS | 5.X | media device
CPE cpe:/o:apple:iphone_os:5 auto
Class Apple | iOS | 5.X | phone
CPE cpe:/o:apple:iphone_os:5 auto
SEQ(SP=F7-109%GCD=1-6%ISR=FE-10E%TI=RD%CI=RI%II=BI|RI%TS=A|C)
OPS(O1=M5B4NW4NNT11SLL%O2=M5B4NW4NNT11SLL%O3=M5B4NW4NNT11%O4=M5B4NW4NNT11SLL%O5=M5B4NW4NNT11SLL%O6=M5B4NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M5B4NW4SLL%CC=N)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%RD=0)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%RD=0)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%RD=0)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# 12.2.0 Darwin Kernel Version 12.2.0: Sat Aug 25 00:48:52 PDT 2012; root:xnu-2050.18.24~1/RELEASE_X86_64 x86_64
Fingerprint Apple Mac OS X 10.8.2 (Mountain Lion) (Darwin 12.2.0)
Class Apple | Mac OS X | 10.8.X | general purpose
CPE cpe:/o:apple:mac_os_x:10.8 auto
SEQ(SP=FF-109%GCD=1-6%ISR=106-110%TI=RD%CI=RD%II=RI%TS=A)
OPS(O1=M5B4NW4NNT11SLL%O2=M5B4NW4NNT11SLL%O3=M5B4NW4NNT11%O4=M5B4NW4NNT11SLL%O5=M5B4NW4NNT11SLL%O6=M5B4NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M5B4NW4SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Mac OS 8.6 on PPC
# Mac OS 8.1 running on Basilisk-II
# Mac OS 8.6 on PowerPC 8600/250
Fingerprint Apple Mac OS 8.1 - 8.6
Class Apple | Mac OS | 8.X | general purpose
CPE cpe:/o:apple:mac_os:8 auto
SEQ(SP=0-2D%GCD=FA00|1F400|2EE00|3E800|4E200%ISR=95-A1%TI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4W0L%O2=M578W0L%O3=M280W0L%O4=M218W0L%O5=M218W0L%O6=M109)
WIN(W1=4470%W2=4718%W3=4600%W4=4518%W5=4518%W6=455B)
ECN(R=Y%DF=Y%T=FA-104%TG=FF%W=4470%O=M5B4W0L%CC=N%Q=)
T1(R=Y%DF=Y%T=FA-104%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%T=FA-104%TG=FF%W=455B%S=O%A=S+%F=AS%O=M109W0L%RD=0%Q=)
T4(R=Y%DF=Y%T=21-3D%TG=40%W=0%S=A%A=Z%F=R%O=%RD=2AB5E05E%Q=)
T5(R=Y%DF=Y%T=1F-38%TG=20|40%W=0%S=Z%A=S+%F=AR%O=%RD=896A56EB%Q=)
T6(R=Y%DF=Y%T=1E-3D%TG=40%W=0%S=A%A=Z%F=R%O=%RD=8829FB5F%Q=)
T7(R=Y%DF=Y%T=1E-3D%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=896A56EB%Q=)
U1(DF=Y%T=FA-104%TG=FF%IPL=70%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=Y%T=FA-104%TG=FF%CD=S)

# Mac OS 9.0.4 on SheepShaver (on Red Hat)
# Airport Extreme 07 with software version 7.2.1
# Mac OS 9.2
Fingerprint Apple Mac OS 9.0.4 - 9.2
Class Apple | Mac OS | 9.X | general purpose
CPE cpe:/o:apple:mac_os:9 auto
SEQ(SP=4A-A0%GCD=1-6%ISR=9A-A8%TI=I%II=I%SS=S%TS=A)
OPS(O1=M5B4W0NNNT11%O2=M578W0NNNT11%O3=M280W0NNNT11%O4=M218W0NNNT11%O5=M218W0NNNT11%O6=M109NNT11)
WIN(W1=8000%W2=8000%W3=8000%W4=8000%W5=8000%W6=8000)
ECN(R=Y%DF=Y%T=FA-104%TG=FF%W=8000%O=M5B4W0N%CC=N%Q=)
T1(R=Y%DF=Y%T=FA-104%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=Y%T=FA-104%TG=FF%W=0%S=Z%A=S%F=AR%O=%RD=E44A4E43%Q=)
T3(R=Y%DF=Y%T=FA-104%TG=FF%W=8000%S=O%A=S+%F=AS%O=M109W0NNNT11%RD=0%Q=)
T4(R=Y%DF=Y%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=E44A4E43%Q=)
T5(R=Y%DF=Y%T=FA-104%TG=FF%W=0%S=Z%A=S+%F=AR%O=%RD=BD1AB510%Q=)
T6(R=Y%DF=Y%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=EA6C967D%Q=)
T7(R=Y%DF=Y%T=FA-104%TG=FF%W=0%S=Z%A=S%F=AR%O=%RD=EA6C967D%Q=)
U1(DF=Y%T=FA-104%TG=FF%IPL=70%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=Y%T=FA-104%TG=FF%CD=S)

# Mac OS 9.2
Fingerprint Apple Mac OS 9.2
Class Apple | Mac OS | 9.X | general purpose
CPE cpe:/o:apple:mac_os:9.2
SEQ(R=N)
OPS(O1=|M5B4W0NNNT11%O2=%O3=%O4=%O5=%O6=)
WIN(W1=0|8000%W2=0%W3=0%W4=0%W5=0%W6=0)
ECN(R=Y%DF=Y%T=FA-104%TG=FF%W=0%O=%CC=N%Q=U)
T1(R=Y%DF=Y%T=FA-104%TG=FF%S=O|Z%A=S+%F=AR|AS%RD=0|BD1AB510%Q=)
T2(R=Y%DF=Y%T=FA-104%TG=FF%W=0%S=Z%A=S%F=AR%O=%RD=EA6C967D%Q=)
T3(R=Y%DF=Y%T=FA-104%TG=FF%W=0%S=Z%A=S+%F=AR%O=%RD=BD1AB510%Q=)
T4(R=Y%DF=Y%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=EA6C967D%Q=)
T5(R=Y%DF=Y%T=FA-104%TG=FF%W=0%S=Z%A=S+%F=AR%O=%RD=BD1AB510%Q=)
T6(R=Y%DF=Y%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=EA6C967D%Q=)
T7(R=Y%DF=Y%T=FA-104%TG=FF%W=0%S=Z%A=S%F=AR%O=%RD=EA6C967D%Q=)
U1(DF=Y%T=FA-104%TG=FF%IPL=70%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=Y%T=FA-104%TG=FF%CD=S)

# Apple Airport Express embedded
Fingerprint Apple AirPort Express WAP (NetBSD)
Class Apple | NetBSD | 4.X | general purpose
CPE cpe:/h:apple:airport_express
CPE cpe:/o:apple:netbsd:4 auto
SEQ(SP=C6-E4%GCD=1-6%ISR=D7-E1%TI=I%CI=I%II=I%SS=S%TS=0)
OPS(O1=M5B4NW0NNT01SNN%O2=M5B4NW0NNT01SNN%O3=M5B4NW0NNT01%O4=M5B4NW0NNT01SNN%O5=M5B4NW0NNT01SNN%O6=M5B4NNT01SNN)
WIN(W1=8000%W2=8000%W3=8000%W4=8000%W5=8000%W6=8000)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=8000%O=M5B4NW0SNN%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=8000%S=O%A=S+%F=AS%O=M5B4NW0NNT01SNN%RD=0%Q=)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=FA-104%TG=FF%CD=S)

# Airport Extreme
Fingerprint Apple AirPort Extreme WAP (NetBSD 4.99)
Class Apple | NetBSD | 4.X | general purpose
CPE cpe:/h:apple:airport_extreme
CPE cpe:/o:apple:netbsd:4 auto
SEQ(SP=BF-DC%GCD=1-6%ISR=D6-E1%TI=I%CI=I%II=I%SS=S%TS=0)
OPS(O1=M5ACNW0NNT01SNN%O2=M5ACNW0NNT01SNN%O3=M5ACNW0NNT01%O4=M5ACNW0NNT01SNN%O5=M5ACNW0NNT01SNN%O6=M5ACNNT01SNN)
WIN(W1=8000%W2=8000%W3=8000%W4=8000%W5=8000%W6=8000)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=8000%O=M5ACNW0SNN%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=8000%S=O%A=S+%F=AS%O=M5ACNW0NNT01SNN%RD=0%Q=)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=FA-104%TG=FF%CD=S)

# Apple Time Capsule 1TB, first generation
Fingerprint Apple Time Capsule NAS device (NetBSD 4.99)
Class Apple | NetBSD | 4.X | storage-misc
CPE cpe:/o:apple:netbsd:4 auto
SEQ(SP=D0-DA%GCD=1-6%ISR=D5-DF%TI=I%CI=I%II=I%SS=S%TS=0)
OPS(O1=M5B4NW0NNT01SNN%O2=M5B4NW0NNT01SNN%O3=M5B4NW0NNT01%O4=M5B4NW0NNT01SNN%O5=M5B4NW0NNT01SNN%O6=M5B4NNT01SNN)
WIN(W1=8000%W2=8000%W3=8000%W4=8000%W5=8000%W6=8000)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=8000%O=M5B4NW0SNN%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
T3(R=N)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=FA-104%TG=FF%CD=S)

# Apple AirPort Extreme (802.11a/b/g/draft-n), Apple P/N A1143, S/W ver 7.0
# Apple Airport Extreme 7.1.1
# NetBSD 4.99.4 NetBSD 4.99.4 (E4500) #1: Tue Nov 28 10:25:20 EST 2006 i386
# Apple Airport Extreme base station 802.11n
# Apple Time Capsule NAS device
# QNX 6.5.0 2010/07/09-14:43:25EDT x86pc x86
Fingerprint Apple AirPort Extreme WAP or Time Capsule NAS device (NetBSD 4.99), or QNX 6.5.0
Class Apple | NetBSD | 4.X | WAP
CPE cpe:/h:apple:airport_extreme
CPE cpe:/o:apple:netbsd:4 auto
Class Apple | NetBSD | 4.X | storage-misc
CPE cpe:/o:apple:netbsd:4 auto
Class QNX | QNX | 6.X | general purpose
CPE cpe:/o:qnx:qnx:6 auto
SEQ(SP=BF-DC%GCD=1-6%ISR=D6-E1%TI=I%CI=I%II=I%SS=S%TS=0)
OPS(O1=M5B4NW0NNT01SNN%O2=M5B4NW0NNT01SNN%O3=M5B4NW0NNT01%O4=M5B4NW0NNT01SNN%O5=M5B4NW0NNT01SNN%O6=M5B4NNT01SNN)
WIN(W1=8000%W2=8000%W3=8000%W4=8000%W5=8000%W6=8000)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=8000%O=M5B4NW0SNN%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=8000%S=O%A=S+%F=AS%O=M5B4NW0NNT01SNN%RD=0%Q=)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=FA-104%TG=FF%CD=S)

# Arcor-Easy Box A300 WLAN, Firmware 1.00.624
Fingerprint Arcor-Easy Box A 300 WLAN wireless ADSL router
Class Arcor | embedded || broadband router
SEQ(SP=F-1D%GCD=1-6%ISR=4B-55%TI=I%II=I%SS=S%TS=U)
OPS(O1=M578%O2=M578%O3=M280%O4=M578%O5=M218%O6=M109)
WIN(W1=5000%W2=5000%W3=5000%W4=5000%W5=5000%W6=5000)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=5000%O=M578%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=5000%S=O%A=S+%F=AS%O=M109%RD=0%Q=)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=O%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=O%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=O|S|Y%T=3B-45%TG=40%CD=Z)

# Areca 1222 RAID controller.  It's version 1.47.
# Areca ARC-1212 4-Port Low Profile PCI-E x8 SAS RAID Controller
Fingerprint Areca ARC-1212 or ARC-1222 RAID controller
Class Areca | embedded || storage-misc
CPE cpe:/h:areca:arc-1212
CPE cpe:/h:areca:arc-1222
SEQ(SP=BE-C8%GCD=1-6%ISR=CD-D7%TI=I%CI=I%TS=U)
OPS(O1=M5A6%O2=M5A6%O3=M5A6%O4=M5A6%O5=M5A6%O6=M5A6)
WIN(W1=5A6%W2=5A6%W3=5A6%W4=5A6%W5=5A6%W6=5A6)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=5A6%O=M5A6%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=3B-45%TG=40%W=400%S=A%A=S+%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=3B-45%TG=40%W=5A6%S=O%A=S+%F=AS%O=M5A6%RD=0%Q=)
T4(R=Y%DF=N%T=3B-45%TG=40%W=400%S=A%A=S+%F=AR%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=400%S=A%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=400%S=A%A=S+%F=AR%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=400%S=A%A=S+%F=AR%O=%RD=0%Q=)
U1(R=N)
IE(R=N)

# Argosy Research HD363N Network HDD
Fingerprint Argosy HD363N NAS device
Class Argosy | embedded || storage-misc
CPE cpe:/h:argosy:hd363n auto
SEQ(SP=0-1D%GCD=1-6|6FC|DF8|14F4|1BF0|22EC%ISR=6C-76%II=I%TS=U)
OPS(O1=M5B4%O2=M578%O3=M280%O4=M5B4%O5=M218%O6=M109)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=N%T=1B-25%TG=20%W=FFFF%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=1B-25%TG=20%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=1B-25%TG=20%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=1B-25%TG=20%W=FFFF%S=O%A=S+%F=AS%O=M109%RD=0%Q=)
T4(R=Y%DF=N%T=1B-25%TG=20%W=0%S=A%A=S%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=1B-25%TG=20%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=1B-25%TG=20%W=0%S=A%A=S%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=1B-25%TG=20%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=1B-25%TG=20%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=I%RUCK=G%RUD=G)
IE(DFI=N%T=1B-25%TG=20%CD=S)

# External Hard Disk Argosy HD354N
# Freecom Network Drive. Firmware NAS2891-009T3 LOADER 3.2
# Iomega Home Network Hard Drive 500GB
Fingerprint Asmax NAS-USB print server; or Argosy HD354N, Freecom Network Drive, or Iomega Home Media Network Hard Drive NAS device
Class Argosy | embedded || storage-misc
Class Asmax | embedded || print server
Class Freecom | embedded || storage-misc
Class Iomega | embedded || storage-misc
SEQ(SP=0-9D%GCD=1-6%ISR=78-99%TI=I%CI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4%O2=M578%O3=M280%O4=M5B4%O5=M218%O6=M109)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=N%T=1B-25%TG=20%W=FFFF%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=1B-25%TG=20%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=1B-25%TG=20%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=1B-25%TG=20%W=FFFF%S=O%A=S+%F=AS%O=M109%RD=0%Q=)
T4(R=Y%DF=N%T=1B-25%TG=20%W=0%S=A%A=S%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=1B-25%TG=20%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=1B-25%TG=20%W=0%S=A%A=S%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=1B-25%TG=20%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=1B-25%TG=20%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=1B-25%TG=20%CD=S)

# Arris TM602B cable modem
# Arris TM502G BOOTR: 5.01 SW_REV: 6.1.120
Fingerprint Arris TM502G or TM602B cable modem
Class Arris | embedded || broadband router
CPE cpe:/h:arris:tm502b auto
CPE cpe:/h:arris:tm602b auto
SEQ(SP=FE-108%GCD=1-6%ISR=102-10C%TI=I%CI=I%II=I%SS=O|S%TS=8)
OPS(O1=M5B4NW0NNT11%O2=M5B4NW0NNT11%O3=M5B4NW0NNT11%O4=M5B4NW0NNT11%O5=M5B4NW0NNT11%O6=M5B4NNT11)
WIN(W1=4000%W2=4000%W3=4000%W4=4000%W5=4000%W6=4000)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=4000%O=M5B4NW0%CC=N)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=O|S+%F=AS%RD=0)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%RD=0)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%RD=0)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%RD=0)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=70%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Arris Cadant C3 cable modem termination system, Application image: 4.4.0.59, Apr 24 2007, 15:27:54, BootRom version 4.2.0.2, VxWorks5.4.2
Fingerprint Arris Cadant C3 cable modem terminator (VxWorks 5.4.2)
Class Arris | VxWorks | 5.X | router
CPE cpe:/o:arris:vxworks:5 auto
SEQ(SP=96-A0%GCD=1-6%ISR=9C-A6%TI=I%TS=1)
OPS(O1=M5B4NW0NNT11%O2=M5B4NW0NNT11%O3=M5B4NW0NNT11%O4=M5B4NW0NNT11%O5=M5B4NW0NNT11%O6=M5B4NNT11)
WIN(W1=2000%W2=2000%W3=2000%W4=2000%W5=2000%W6=2000)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=2000%O=M5B4NW0%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=2000%S=O%A=O%F=A%O=NNT11%RD=0%Q=)
T4(R=Y%DF=N%T=3B-45%TG=40%W=2000%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A|O%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=O|S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=Z%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# ArubaOS (MODEL: Aruba200-US), Version 3.3.2.5
Fingerprint Aruba 200 wireless LAN controller (ArubaOS 3.3.2.5)
Class Aruba | ArubaOS | 3.X | remote management
CPE cpe:/o:aruba:arubaos:3 auto
SEQ(SP=101-10B%GCD=1-6%ISR=103-10D%TI=Z%II=I%TS=7)
OPS(O1=M4F6ST11NW0%O2=M4F6ST11NW0%O3=M4F6NNT11NW0%O4=M4F6ST11NW0%O5=M4F6ST11NW0%O6=M4F6ST11)
WIN(W1=16A0%W2=16A0%W3=16A0%W4=16A0%W5=16A0%W6=16A0)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=16D0%O=M4F6NNSNW0%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=FA-104%TG=FF%CD=S)

# ArubaOS (MODEL: Aruba6000-US), Version 3.3.2.5
# Aruba 3400, ArubaOS 3.3.2.15
Fingerprint Aruba 3400 or 6000 wireless LAN controller (ArubaOS 3.3.2)
Class Aruba | ArubaOS | 3.X | remote management
CPE cpe:/o:aruba:arubaos:3 auto
SEQ(SP=F7-10D%GCD=1-6%ISR=107-111%TI=Z%CI=Z%II=I%TS=7)
OPS(O1=M5B4ST11NW2%O2=M5B4ST11NW2%O3=M5B4NNT11NW2%O4=M5B4ST11NW2%O5=M5B4ST11NW2%O6=M5B4ST11)
WIN(W1=16A0%W2=16A0%W3=16A0%W4=16A0%W5=16A0%W6=16A0)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=16D0%O=M5B4NNSNW2%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=16A0%S=O%A=S+%F=AS%O=M5B4ST11NW2%RD=0%Q=)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# ARUBA Wireless Networks Model 800
# Aruba Mobility Controller A800, Software: ArubaOS 3.3.1.16 (Linux-based)
Fingerprint Aruba A800 wireless LAN switch
Class Aruba | ArubaOS | 3.X | remote management
CPE cpe:/o:aruba:arubaos:3 auto
SEQ(SP=100-10A%GCD=1-6%ISR=107-111%TI=Z%II=I%TS=7)
OPS(O1=M5B4ST11NW0%O2=M5B4ST11NW0%O3=M5B4NNT11NW0%O4=M5B4ST11NW0%O5=M5B4ST11NW0%O6=M5B4ST11)
WIN(W1=16A0%W2=16A0%W3=16A0%W4=16A0%W5=16A0%W6=16A0)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=16D0%O=M5B4NNSNW0%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=FA-104%TG=FF%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=Y%T=FA-104%TG=FF%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=FA-104%TG=FF%CD=S)

# ArubaNetworks IAP 105
# Aruba Instant AP OS.  It is a different firmware chain than what they use in their controller based systems.
Fingerprint Aruba IAP-105 WAP
Class Aruba | embedded || WAP
CPE cpe:/h:aruba:iap-105 auto
SEQ(SP=101-10B%GCD=1-6%ISR=104-10E%TI=Z%CI=Z%II=I%TS=9)
OPS(O1=M5B4ST11NW2%O2=M5B4ST11NW2%O3=M5B4NNT11NW2%O4=M5B4ST11NW2%O5=M5B4ST11NW2%O6=M5B4ST11)
WIN(W1=16A0%W2=16A0%W3=16A0%W4=16A0%W5=16A0%W6=16A0)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=16D0%O=M5B4NNSNW2%CC=N)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0)
T2(R=N)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=16A0%S=O%A=S+%F=AS%O=M5B4ST11NW2%RD=0)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%RD=0)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%RD=0)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%RD=0)
T7(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%RD=0)
U1(DF=N%T=3B-45%TG=40%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# Aruba Instant IAP-93 Access Point
Fingerprint Aruba IAP-93 WAP
Class Aruba | embedded || WAP
CPE cpe:/h:aruba:iap-93 auto
SEQ(SP=104-10E%GCD=1-6%ISR=103-10D%TI=Z%CI=Z%TS=9)
OPS(O1=M5B4ST11NW1%O2=M5B4ST11NW1%O3=M5B4NNT11NW1%O4=M5B4ST11NW1%O5=M5B4ST11NW1%O6=NNT11|M5B4ST11)
WIN(W1=16A0%W2=16A0%W3=16A0%W4=16A0%W5=16A0%W6=16A0)
ECN(R=Y%DF=Y%T=3A-44%TG=40%W=16D0%O=M5B4NNSNW1%CC=N%Q=)
T1(R=Y%DF=Y%T=3A-44%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%T=3A-44%TG=40%W=16A0%S=O%A=S+%F=AS%O=M5B4ST11NW1%RD=0%Q=)
T4(R=Y%DF=Y%T=3A-44%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=3A-44%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3A-44%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=Y%T=3A-44%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(R=N)

# Trendnet TW-100-S4W1CA/RO router
# Model: Asus RX3041 Firmware: Runtime Code V2.1.2.114, Boot Code V0.1.5.24
Fingerprint Asus RX4031 or TRENDnet TW100-S4W1CA router
Class Asus | embedded || router
CPE cpe:/h:asus:rx4031
Class TRENDnet | embedded || router
CPE cpe:/h:trendnet:tw100-s4w1ca auto
SEQ(SP=8D-9F%GCD=1-6%ISR=98-A2%TI=I%CI=I%II=I%SS=S%TS=1)
OPS(O1=M5A8NW0NNT11%O2=M5A8NW0NNT11%O3=M5A8NW0NNT11%O4=M5A8NW0NNT11%O5=M5A8NW0NNT11%O6=M5A8NNT11)
WIN(W1=43E0%W2=4110%W3=423C%W4=43E0%W5=4180%W6=403D)
ECN(R=Y%DF=N%T=7B-85%TG=80%W=4470%O=M5B4NW0%CC=N%Q=)
T1(R=Y%DF=N%T=7B-85%TG=80%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=7B-85%TG=80%W=403D%S=O%A=S+%F=AS%O=M5A8NW0NNT11%RD=0%Q=)
T4(R=Y%DF=N%T=7B-85%TG=80%W=4000%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=7B-85%TG=80%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=7B-85%TG=80%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=7B-85%TG=80%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=134%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# DI-524, HW Rev: G2
# ASUS  RT-N11 EZ Wireless N Router
# Level One FBR-1415TX Firmware: R1.94p0v
Fingerprint ASUS RT-N11 EZ or D-Link DI-524 WAP, or LevelOne FBR-1415TX router
Class Asus | embedded || WAP
CPE cpe:/h:asus:rt-n11_ez
Class D-Link | embedded || WAP
CPE cpe:/h:dlink:di-524 auto
Class LevelOne | embedded || router
CPE cpe:/h:levelone:fbr-1415tx
SEQ(SP=0-1D%GCD=14|28|3C|50|64%ISR=4B-55%TI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4%O2=M5B4%O3=M5B4%O4=M5B4%O5=M5B4%O6=M5B4)
WIN(W1=16D0%W2=16D0%W3=16D0%W4=16D0%W5=16D0%W6=16D0)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=16D0%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# OS Linux for embedded systems, device ASUS WL500g.PremiumV2
Fingerprint Asus WL-500g WAP
Class Asus | embedded || WAP
CPE cpe:/h:asus:wl-500g auto
SEQ(SP=C2-CC%GCD=1-6%ISR=C6-D0%TI=Z%CI=Z%II=I%TS=7)
OPS(O1=M542ST11NW0%O2=M542ST11NW0%O3=M542NNT11NW0%O4=M542ST11NW0%O5=M542ST11NW0%O6=M542ST11)
WIN(W1=14D8%W2=14D8%W3=14D8%W4=14D8%W5=14D8%W6=14D8)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=1508%O=M542NNSNW0%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=14D8%S=O%A=S+%F=AS%O=M542ST11NW0%RD=0%Q=)
T4(R=N)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=N)
T7(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# Asus WL-500gp home router
Fingerprint Asus WL-500gP wireless broadband router
Class Asus | embedded || WAP
CPE cpe:/h:asus:wl-500gp auto
SEQ(R=N)
OPS(O1=M5B4ST11NW0%O2=M5B4ST11NW0%O3=M5B4NNT11NW0%O4=M5B4ST11NW0%O5=M5B4ST11NW0%O6=M5B4ST11)
WIN(W1=16A0%W2=16A0%W3=16A0%W4=16A0%W5=16A0%W6=16A0)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=16D0%O=M5B4NNSNW0%CC=Y%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=16A0%S=O%A=S+%F=AS%O=M5B4ST11NW0%RD=0%Q=)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=7B-85%TG=80%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=7B-85%TG=80%W=0%S=A%A=O%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=7B-85%TG=80%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(R=N)
IE(R=N)

# RT-AC66U Firmware Version: 3.0.0.4.354 (stock from Asus)
Fingerprint Asus RT-AC66U router (Linux 2.6)
Class Asus | Linux | 2.6.X | router
CPE cpe:/o:asus:linux_kernel:2.6 auto
SEQ(CI=Z%II=I)
OPS(R=N)
WIN(R=N)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=16D0%O=M5B4NNSNW7%CC=N%Q=)
T1(R=N)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# Axis 211 Network Camera
# ASUS router RT-N10 with firmware 1.0.2.1
Fingerprint Asus RT-N10 router or AXIS 211A Network Camera (Linux 2.6)
Class Asus | Linux | 2.6.X | router
CPE cpe:/h:asus:rt-n10
CPE cpe:/o:asus:linux_kernel:2.6 auto
Class AXIS | Linux | 2.6.X | webcam
CPE cpe:/h:axis:211_network_camera
CPE cpe:/o:axis:linux_kernel:2.6 auto
SEQ(CI=Z%II=I)
OPS(R=N)
WIN(R=N)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=16D0%O=M5B4NNSNW0%CC=N%Q=)
T1(R=N)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# router Asus RT-N16
# Linux 2.6.32-1-586-vyatta #1 SMP i686 GNU/Linux
Fingerprint Asus RT-N16 WAP (Linux 2.6)
Class Asus | Linux | 2.6.X | WAP
CPE cpe:/h:asus:rt-n16
CPE cpe:/o:asus:linux_kernel:2.6 auto
SEQ(CI=Z%II=I)
OPS(R=N)
WIN(R=N)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=16D0%O=M5B4NNSNW2%CC=N%Q=)
T1(R=N)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# Linux 2.6.22 #153 Thu Sep 2 11:07:59 CST 2010 mips unknown, Asus RT-N16 wireless switch firmware version Version:: 1.0.1.9
# ASUS RT-N16 wireless router Firmware Version 1.0.1.9
Fingerprint Asus RT-N16 WAP (Linux 2.6.22)
Class Asus | Linux | 2.6.X | WAP
CPE cpe:/h:asus:rt-n16
CPE cpe:/o:asus:linux_kernel:2.6 auto
SEQ(SP=C3-129%GCD=1-6%ISR=EA-100%TI=Z%CI=Z%II=I%TS=7|8)
OPS(O1=M5B4ST11NW2%O2=M5B4ST11NW2%O3=M5B4NNT11NW2%O4=M5B4ST11NW2%O5=M5B4ST11NW2%O6=M5B4ST11)
WIN(W1=16A0%W2=16A0%W3=16A0%W4=16A0%W5=16A0%W6=16A0)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=16D0%O=M5B4NNSNW2%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=16A0%S=O%A=S+%F=AS%O=M5B4ST11NW2%RD=0%Q=)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# Linux RT-N66U 2.6.22.19 #1 Wed Mar 21 12:15:36 CST 2012 mips GNU/Linux, Dualband Wireless Router (2.4 GHz and 5 GHz)
Fingerprint Asus RT-N66U WAP (Linux 2.6)
Class Asus | Linux | 2.6.X | WAP
CPE cpe:/o:asus:linux_kernel:2.6 auto
SEQ(CI=Z%II=I)
OPS(R=N)
WIN(R=N)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=16D0%O=M5B4NNSNW4%CC=N%Q=)
T1(R=N)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# Linux 3.1.10-g52027f9 #1 SMP PREEMPT Thu Jun 28 16:19:26 PDT 2012 armv71 GNU/Linux, Asus Nexus 7 Android Tablet
Fingerprint Linux 3.1
Class Asus | Linux | 3.X | general purpose
CPE cpe:/o:asus:linux_kernel:3 auto
SEQ(SP=102-10C%GCD=1-6%ISR=108-112%TI=Z%CI=Z%II=I%TS=6|7)
OPS(O1=M566ST11NW6%O2=M566ST11NW6%O3=M566NNT11NW6%O4=M566ST11NW6%O5=M566ST11NW6%O6=M566ST11)
WIN(W1=3890%W2=3890%W3=3890%W4=3890%W5=3890%W6=3890)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=3908%O=M566NNSNW6%CC=Y%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=3890%S=O%A=S+%F=AS%O=M566ST11NW6%RD=0%Q=)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# AT&T NetGate SG8100 Router
Fingerprint AT&T NetGate SG8100 router
Class AT&T | embedded || router
SEQ(SP=C5-CF%GCD=1-6%ISR=C6-D0%TI=Z%II=I%TS=7)
OPS(O1=M507ST11NW0%O2=M507ST11NW0%O3=M507NNT11NW0%O4=M507ST11NW0%O5=M507ST11NW0%O6=M507ST11)
WIN(W1=13EC%W2=13EC%W3=13EC%W4=13EC%W5=13EC%W6=13EC)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=141C%O=M507NNSNW0%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=13EC%S=O%A=S+%F=AS%O=M507ST11NW0%RD=0%Q=)
T4(R=N)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=N)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# AT&T 3G Microcell
Fingerprint AT&T 3G MicroCell WAP
Class AT&T | embedded || WAP
SEQ(SP=C6-D0%GCD=1-6%ISR=C8-D2%TI=I%CI=Z%II=I%SS=O%TS=A)
OPS(O1=M5ACST11NW1%O2=M5ACST11NW1%O3=M5ACNNT11NW1%O4=M5ACST11NW1%O5=M5ACST11NW1%O6=M5ACST11)
WIN(W1=1680%W2=1680%W3=1680%W4=1680%W5=1680%W6=1680)
ECN(R=Y%DF=N%T=3A-44%TG=40%W=16B0%O=M5ACNNSNW1%CC=N%Q=)
T1(R=Y%DF=N%T=3A-44%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=O%F=AR%O=%RD=0%Q=)
T4(R=Y%DF=Y%T=3A-44%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# Atari TT 030 running Atari System V Release 4.0 (1.0), UniSoft UNIX System V Release 4.0
Fingerprint Atari Unix System V Release 4.0
Class Atari | Unix | SVR4 | general purpose
CPE cpe:/o:atari:unix:svr4 auto
SEQ(SP=C-16%GCD=FA00|1F400|2EE00|3E800|4E200%ISR=97-A1%TI=I%CI=I%II=I%SS=S%TS=U)
OPS(O1=M400%O2=M400%O3=M400%O4=M400%O5=M400%O6=M400)
WIN(W1=1000%W2=1000%W3=1000%W4=1000%W5=1000%W6=1000)
ECN(R=Y%DF=N%T=19-23%TG=20%W=1000%O=M400%CC=N%Q=)
T1(R=Y%DF=N%T=19-23%TG=20%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=19-23%TG=20%W=1000%S=O%A=O%F=A%O=%RD=0%Q=)
T4(R=Y%DF=N%T=19-23%TG=20%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=19-23%TG=20%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=19-23%TG=20%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=19-23%TG=20%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=Z%RUCK=0%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# ATCOM AT-320 Ethernet Phone. Uses the PalmMicro PA168S chipset. H.323 firmware of version 1.53 from PalmMicro.
Fingerprint Atcom AT-320 VoIP phone
Class Atcom | embedded || VoIP phone
CPE cpe:/h:atcom:at-320 auto
SEQ(SP=F4-102%GCD=1-6%ISR=FD-117%TI=I%CI=I%II=I%SS=S%TS=U)
OPS(O1=M218%O2=M218%O3=M218%O4=M218%O5=M218%O6=M218)
WIN(W1=514%W2=514%W3=514%W4=514%W5=514%W6=514)
ECN(R=Y%DF=N%T=7B-85%TG=80%W=514%O=M218%CC=N%Q=)
T1(R=Y%DF=N%T=7B-85%TG=80%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=7B-85%TG=80%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=7B-85%TG=80%W=514%S=O%A=S+%F=AS%O=M218%RD=0%Q=)
T4(R=Y%DF=N%T=7B-85%TG=80%W=0%S=A%A=S%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=7B-85%TG=80%W=0%S=A%A=O%F=R%O=%RD=0%Q=)
T6(R=Y%DF=N%T=7B-85%TG=80%W=0%S=A%A=O%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=7B-85%TG=80%W=0%S=A%A=O%F=R%O=%RD=0%Q=)
U1(R=N)
IE(DFI=N%T=7B-85%TG=80%CD=Z)

# AudioCodes Mediant 1000
# AudioCodes MediaPack 118 VOIP gateway
Fingerprint AudioCodes MediaPack 118 or Mediant 1000 VoIP adapter
Class AudioCodes | embedded || VoIP adapter
CPE cpe:/h:audiocodes:mediapack_118
CPE cpe:/h:audiocodes:mediant_1000
SEQ(SP=C-16%GCD=1E848|3D090|5B8D8|7A120|98968%ISR=9F-A9%TI=I%II=I%SS=S%TS=A)
OPS(O1=M5B4NW1NNSNNT11%O2=M578NW1NNSNNT11%O3=M280NW1NNT11%O4=M5B4NW1NNSNNT11%O5=M218NW1NNSNNT11%O6=M109NNSNNT11)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=FFFF%O=M5B4NW1NNS%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=FA-104%TG=FF%CD=S)

# Audiocodes MP-118-4FXS4FXO VoIP Gate
# Audiocodes MP-114 FXO
Fingerprint Audiocodes MP-114 or MP-118 VoIP adapter
Class AudioCodes | embedded || VoIP adapter
SEQ(SP=C-16%GCD=1E848|3D090|5B8D8|7A120|98968%ISR=9F-A9%TS=A)
OPS(O1=M5B4NW0NNSNNT11%O2=M578NW0NNSNNT11%O3=M280NW0NNT11%O4=M5B4NW0NNSNNT11%O5=M218NW0NNSNNT11%O6=M109NNSNNT11)
WIN(W1=21F0%W2=2088%W3=2258%W4=21F0%W5=20C0%W6=209D)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=2238%O=M5B4NW0NNS%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=FA-104%TG=FF%CD=S)

# Avaya Edge Switch 4526-GTX
Fingerprint Avaya 4526GTX switch
Class Avaya | embedded || switch
CPE cpe:/h:avaya:4526gtx auto
SEQ(SP=FA-104%GCD=1-6%ISR=108-112%TI=I%II=I%SS=S%TS=7)
OPS(O1=M5B4NW0NNT11%O2=M5B4NW0NNT11%O3=M5B4NW0NNT11%O4=M5B4NW0NNT11%O5=M5B4NW0NNT11%O6=M5B4NNT11)
WIN(W1=4000%W2=4000%W3=4000%W4=4000%W5=4000%W6=4000)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=4000%O=M5B4NW0%CC=N)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0)
T2(R=N)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=4000%S=O%A=S+%F=AS%O=M5B4NW0NNT11%RD=0)
T4(R=N)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%RD=0)
T6(R=N)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=70%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Avaya P130 workgroup switch, SW version 2.11.3
Fingerprint Avaya P130 workgroup switch
Class Avaya | embedded || switch
SEQ(R=N)
OPS(O1=%O2=%O3=%O4=%O5=%O6=)
WIN(W1=0%W2=0%W3=0%W4=0%W5=0%W6=0)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=0%O=%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=Z%A=S+%F=AR%RD=0%Q=)
T2(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=Z%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Avaya Inc. - P330 Stackable Switch, SW version 4.1.6
Fingerprint Avaya P330 Stackable Switch
Class Avaya | embedded || switch
SEQ(SP=F-11%GCD=FA00|1F400|2EE00|3E800|4E200|5DC00%ISR=9B-9D%TI=I%II=I%SS=S%TS=U)
OPS(O1=%O2=%O3=%O4=%O5=%O6=)
WIN(W1=1000%W2=1000%W3=1000%W4=1000%W5=1000%W6=1000)
ECN(R=Y%DF=N%T=19-23%TG=20%W=1000%O=%CC=N%Q=)
T1(R=Y%DF=N%T=19-23%TG=20%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=19-23%TG=20%W=1000%S=O%A=O%F=A%O=%RD=0%Q=)
T4(R=Y%DF=N%T=19-23%TG=20%W=1000%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=19-23%TG=20%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=19-23%TG=20%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=19-23%TG=20%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=4210%RIPCK=Z%RUCK=0%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# Avaya Cajun Switch Agent v5.4.2 on P580 model
Fingerprint Avaya P580 switch running Cajun Switch Agent v5.4.2
Class Avaya | embedded || switch
CPE cpe:/h:avaya:p580 auto
SEQ(SP=0-92%GCD=9C4|1388|1D4C|2710|30D4|3A98|61A8|C350|124F8|186A0|1E848|249F0%ISR=8B-BB%TI=I%II=RI%SS=O|S%TS=U)
OPS(O1=M218%O2=M218%O3=M218%O4=M218%O5=M218%O6=M218)
WIN(W1=400%W2=400%W3=400%W4=400%W5=400%W6=400)
ECN(R=Y%DF=N%T=19-23%TG=20%W=400%O=M218%CC=N%Q=)
T1(R=Y%DF=N%T=19-23%TG=20%S=O%A=O|S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=Y%DF=N%T=19-23%TG=20%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=N)
T7(R=N)
U1(DF=N%T=19-23%TG=20%IPL=38%UN=D33|90CE|98BF|DA0A|FBF9%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=19-23%TG=20%CD=S)

# Lucent Technologies Cajun Switch Agent v5.3.2 on P880 model
Fingerprint Avaya P880 switch running Cajun Switch Agent v5.3.2
Class Avaya | embedded || switch
CPE cpe:/h:avaya:p880 auto
SEQ(SP=0-95%GCD=9C4|1388|1D4C|2710|30D4|3A98%ISR=8B-BB%TI=I%II=RI%SS=O|S%TS=U)
OPS(O1=M218%O2=M218%O3=M218%O4=M218%O5=M218%O6=M218)
WIN(W1=400%W2=400%W3=400%W4=400%W5=400%W6=400)
ECN(R=Y%DF=N%T=1A-24%TG=20%W=400%O=M218%CC=N%Q=)
T1(R=Y%DF=N%T=1A-24%TG=20%S=O%A=O|S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=Y%DF=N%T=1A-24%TG=20%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=N)
T7(R=N)
U1(DF=N%T=1A-24%TG=20%IPL=38%UN=293|977C|9A49|A984|F0E2%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=1A-24%TG=20%CD=S)

Fingerprint Avaya Intuity Audix Multimedia Messaging System
Class Avaya | embedded || telecom-misc
SEQ(SP=A3-BF%GCD=1-6%ISR=B6-BC%TI=I%II=I%SS=S%TS=U)
OPS(O1=M400%O2=M400%O3=M280%O4=M400%O5=%O6=M109)
WIN(W1=1000%W2=1000%W3=1000%W4=1000%W5=1000%W6=1000)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=1000%O=M400%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=3B-45%TG=40%W=1000%S=O%A=O%F=A%O=%RD=0%Q=)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=4210%RIPCK=Z%RUCK=G%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Avaya G360 Media Gateway running software version 26.36.0
Fingerprint Avaya G350 Media Gateway VoIP adapter
Class Avaya | embedded || VoIP adapter
SEQ(SP=94-9E%GCD=1-6%ISR=9B-A5%TI=I%II=RI%SS=O|S%TS=U)
OPS(O1=M550%O2=M550%O3=M550%O4=M550%O5=M550%O6=M550)
WIN(W1=2000%W2=2000%W3=2000%W4=2000%W5=2000%W6=2000)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=2000%O=M550%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=3B-45%TG=40%W=2000%S=O%A=O%F=A%O=%RD=0%Q=)
T4(R=N)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=N)
T7(R=N)
U1(R=N)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# Avaya IP Office IP403
Fingerprint Avaya Office IP403 VoIP adapter
Class Avaya | embedded || VoIP adapter
CPE cpe:/h:avaya:office_ip403 auto
SEQ(SP=11-2D%GCD=10000|20000|30000|40000|50000%ISR=CA-D4%TI=I%II=RI%SS=O%TS=U)
OPS(O1=M400%O2=M400%O3=M400%O4=M400%O5=M400%O6=M400)
WIN(W1=1111%W2=1111%W3=1111%W4=1111%W5=1111%W6=1111)
ECN(R=N)
T1(R=Y%DF=N%T=5E-68%TG=80%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=Y%DF=N%T=5E-68%TG=80%W=1111%S=Z%A=S+%F=R%O=%RD=0%Q=)
T6(R=Y%DF=N%T=5E-68%TG=80%W=1111%S=Z%A=S+%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=5E-68%TG=80%W=1111%S=Z%A=S+%F=R%O=%RD=0%Q=)
U1(DF=N%T=5E-68%TG=80%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=23-3D%TG=40%CD=S)

# Avaya IP500, Firmware 4.1 (9)
# avaya IP Office 500 . mixed-type PABX (analog + voip)
# IP Office 500
Fingerprint Avaya Office IP500 VoIP adapter
Class Avaya | embedded || VoIP adapter
CPE cpe:/h:avaya:office_ip500 auto
SEQ(SP=0-13%GCD=10000|20000|30000|40000|50000|650000|CA0000|12F0000|1940000|1F90000%ISR=CB-D5%TI=I%II=RI%SS=O|S%TS=U)
OPS(O1=M400%O2=M400%O3=M400%O4=M400%O5=M400%O6=M400)
WIN(W1=1111%W2=1111%W3=1111%W4=1111%W5=1111%W6=1111)
ECN(R=Y%DF=N%T=5E-68%TG=80%W=0%O=%CC=N%Q=)
T1(R=Y%DF=N%T=5E-68%TG=80%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=5E-68%TG=80%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=5E-68%TG=80%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
T4(R=Y%DF=N%T=5E-68%TG=80%W=0%S=A%A=S%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=5E-68%TG=80%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=5E-68%TG=80%W=0%S=A%A=S%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=5E-68%TG=80%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=5E-68%TG=80%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=20-3C|5E-68%TG=40|80%CD=S)

# Avaya IP Office500
Fingerprint Avaya Office IP500 VoIP adapter
Class Avaya | embedded || VoIP adapter
CPE cpe:/h:avaya:office_ip500 auto
SEQ(SP=17-35%GCD=10000|20000|30000|40000|50000%ISR=CB-D5%TI=I%CI=I%II=RI%SS=O|S%TS=U)
OPS(O1=M400%O2=M400%O3=M400%O4=M400%O5=M400%O6=M400)
WIN(W1=1111%W2=1111%W3=1111%W4=1111%W5=1111%W6=1111)
ECN(R=N)
T1(R=Y%DF=N%T=5E-68%TG=80%S=O%A=S+%F=AS%RD=0)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=Y%DF=N%T=5E-68%TG=80%W=0%S=Z%A=S%F=AR%RD=0)
T6(R=Y%DF=N%T=5E-68%TG=80%W=0%S=A%A=S%F=R%RD=0)
T7(R=Y%DF=N%T=5E-68%TG=80%W=0%S=Z%A=S%F=AR%RD=0)
U1(DF=N%T=5E-68%TG=80%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=5E-68%TG=80%CD=S)

# Avaya Communication Manager for the Avaya G350. It runs a customized Linux: Red Hat Enterprise Linux ES release 4 (Nahant) Kernel 2.6.11-AV18 on an i686
Fingerprint Avaya Communication Manager (Linux 2.6.11)
Class Avaya | Linux | 2.6.X | telecom-misc
CPE cpe:/o:avaya:linux_kernel:2.6 auto
SEQ(SP=C3-CD%GCD=1-6%ISR=C3-CD%TI=Z%II=I%TS=U)
OPS(O1=M550NW2%O2=M550NW2%O3=M550NW2%O4=M550NW2%O5=M550NW2%O6=M550)
WIN(W1=16D0%W2=16D0%W3=16D0%W4=16D0%W5=16D0%W6=16D0)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=16D0%O=M550NW2%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=N)
T7(R=N)
U1(R=N)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# Avaya G700 Telephony Media Gateway
# Konica Minolta 7145 printer
# Sun(tm) Advanced Lights Out Manager 1.5.2
Fingerprint Avaya G700 Telephony Media Gateway or Sun Advanced Lights Out Maganer 1.5.2 (VxWorks)
Class Avaya | VxWorks || VoIP adapter
CPE cpe:/o:avaya:vxworks auto
Class Sun | VxWorks || remote management
CPE cpe:/o:sun:vxworks auto
SEQ(SP=18-1C%GCD=FA00|1F400|2EE00|3E800|4E200|5DC00%ISR=9D-A2%TI=I%II=I%SS=S%TS=1)
OPS(O1=M200NW0NNT11%O2=M200NW0NNT11%O3=M200NW0NNT11%O4=M200NW0NNT11%O5=M200NW0NNT11%O6=M200NNT11)
WIN(W1=2000%W2=2000%W3=2000%W4=2000%W5=2000%W6=2000)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=2000%O=M200NW0%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=3B-45%TG=40%W=2000%S=O%A=O%F=A%O=NNT11%RD=0%Q=)
T4(R=Y%DF=N%T=3B-45%TG=40%W=2000%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=Z%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# AVM FRITZ!Box Fon 7170
Fingerprint AVM FRITZ!Box Fon 7170 ADSL modem
Class AVM | embedded || broadband router
CPE cpe:/h:avm:fritz%21box_fon_7170
SEQ(SP=FE-10E%GCD=1-6%ISR=108-112%TI=Z%II=RI%TS=7)
OPS(O1=M5A6ST11NW1%O2=M578ST11NW1%O3=M280NNT11NW1%O4=M22CST11NW1%O5=M218ST11NW1%O6=M109ST11)
WIN(W1=16A0%W2=16A0%W3=16A0%W4=16A0%W5=16A0%W6=16A0)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=16D0%O=M5A6NNSNW1%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=S%F=R%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=S%F=R%O=%RD=0%Q=)
T7(R=N)
U1(R=N)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Netgear router DG834GT Firmware: V1.01.28
# AVM Fritz!Box FON WLAN 7050
# LINKSYS WAG200G Firmware Version: 1.00.09
# Linksys WAG200G, Firmware Version: 1.01.06
# Linksys WAG200G firmware: 1.01.05
Fingerprint AVM FRITZ!Box FON WLAN 7050, Linksys WAG200G, or Netgear DG834GT wireless broadband router
Class AVM | embedded || WAP
CPE cpe:/h:avm:fritz%21box_fon_wlan_7050
Class Linksys | embedded || WAP
CPE cpe:/h:linksys:wag200g
Class Netgear | embedded || WAP
CPE cpe:/h:netgear:dg834gt
SEQ(SP=B6-CE%GCD=1-6%ISR=C7-D3%TI=Z%II=I%TS=7|8|9)
OPS(O1=NNT11|M5B4ST11NW0%O2=NNT11|M5B4ST11NW0%O3=NNT11|M5B4NNT11NW0%O4=NNT11|M5B4ST11NW0%O5=NNT11|M5B4ST11NW0%O6=NNT11|M5B4ST11)
WIN(W1=16A0%W2=16A0%W3=16A0%W4=16A0%W5=16A0%W6=16A0)
ECN(R=Y%DF=Y%T=3B-45|FA-104%TG=40|FF%W=16D0%O=|M5B4NNSNW0%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45|FA-104%TG=40|FF%S=O%A=O|S+%F=A|AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%T=3B-45|FA-104%TG=40|FF%W=16A0%S=O%A=O|S+%F=A|AS%O=NNT11|M5B4ST11NW0%RD=0%Q=)
T4(R=N)
T5(R=Y%DF=Y%T=FA-104%TG=FF%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=N)
T7(R=N)
U1(DF=N%T=FA-104%TG=FF%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=FA-104%TG=FF%CD=S)

# AVM Fritzbox Fon WLAN 7170
Fingerprint AVM FRITZ!Box FON WLAN 7170 WAP
Class AVM | embedded || WAP
CPE cpe:/h:avm:fritz%21box_fon_wlan_7170
SEQ(SP=BF-D1%GCD=1-6%ISR=C0-D8%TI=Z%II=I%TS=7)
OPS(O1=M578ST11NW1%O2=M578ST11NW1%O3=M578NNT11NW1%O4=M578ST11NW1%O5=M578ST11NW1%O6=M578ST11)
WIN(W1=16A0%W2=16A0%W3=16A0%W4=16A0%W5=16A0%W6=16A0)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=16D0%O=M578NNSNW1%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=N)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# Fritz!Box 7240.
Fingerprint AVM FRITZ!Box FON WLAN 7240 WAP
Class AVM | embedded || WAP
CPE cpe:/h:avm:fritz%21box_fon_wlan_7240
SEQ(SP=B9-C3%GCD=1-6%ISR=C7-D1%TI=Z%CI=Z%II=I%TS=6|7|8)
OPS(O1=NNT11|M55EST11NW1%O2=NNT11|M55EST11NW1%O3=NNT11|M55ENNT11NW1%O4=NNT11|M55EST11NW1%O5=NNT11|M55EST11NW1%O6=NNT11|M55EST11)
WIN(W1=16A0%W2=16A0%W3=16A0%W4=16A0%W5=16A0%W6=16A0)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=16D0%O=|M55ENNSNW1%CC=N|Y)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=O|S+%F=A|AS%RD=0)
T2(R=N)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=16A0%S=O%A=O|S+%F=A|AS%O=NNT11|M55EST11NW1%RD=0)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%RD=0)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%RD=0)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%RD=0)
T7(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%RD=0)
U1(DF=N%T=3B-45%TG=40%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# Linux 2.6.11 (ACS5000) (ttyp1) ACS5000 login: Connection closed by foreign host.
Fingerprint Avocent ACS 5000 console server (Linux 2.6.11)
Class Avocent | embedded || remote management
SEQ(SP=C6-D0%GCD=1-6%ISR=C8-D2%TI=I%CI=I%II=I%SS=S%TS=A)
OPS(O1=M5B4ST11NW2%O2=M5B4ST11NW2%O3=M5B4NNT11NW2%O4=M5B4ST11NW2%O5=M5B4ST11NW2%O6=M5B4ST11)
WIN(W1=16A0%W2=16A0%W3=16A0%W4=16A0%W5=16A0%W6=16A0)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=16D0%O=M5B4NNSNW2%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=3B-45%TG=40%W=16A0%S=O%A=S+%F=AS%O=M5B4ST11NW2%RD=0%Q=)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# DSR2020 Application     03.07.01.18
# Avocent AutoView 3100/3200
# Model DSR8020 02-DA-E3 Application  03.07.01.09
Fingerprint Avocent AutoView, DSR2020, or DSR8020 KVM switch
Class Avocent | embedded || remote management
CPE cpe:/h:avocent:autoview_3100
CPE cpe:/h:avocent:autoview_3200
CPE cpe:/h:avocent:dsr2020
CPE cpe:/h:avocent:dsr8020
SEQ(SP=C0-D0%GCD=1-6%ISR=C6-D4%TI=Z%CI=Z%II=I%TS=U)
OPS(O1=M58CNW0%O2=M58CNW0%O3=M58CNW0%O4=M58CNW0%O5=M58CNW0%O6=M58C)
WIN(W1=1630%W2=1630%W3=1630%W4=1630%W5=1630%W6=1630)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=1630%O=M58CNW0%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=1630%S=O%A=S+%F=AS%O=M58CNW0%RD=0%Q=)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# Avocent DSR1021
Fingerprint Avocent DSR1021 KVM switch
Class Avocent | embedded || remote management
SEQ(SP=C2-D0%GCD=1-6%ISR=C9-D3%TI=Z%CI=Z%II=I%TS=6|7|8|9)
OPS(O1=NNT11|M58CST11NW0%O2=NNT11|M58CST11NW0%O3=NNT11|M58CNNT11NW0%O4=NNT11|M58CST11NW0%O5=NNT11|M58CST11NW0%O6=NNT11|M58CST11)
WIN(W1=1600%W2=1600%W3=1600%W4=1600%W5=1600%W6=1600)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=1630%O=|M58CNNSNW0%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=O|S+%F=A|AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=1600%S=O%A=O|S+%F=A|AS%O=NNT11|M58CST11NW0%RD=0%Q=)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# Avocent DSR2035 - Appliance firmware version 03.05.01.16
Fingerprint Avocent DSR2035 KVM switch
Class Avocent | embedded || remote management
CPE cpe:/h:avocent:dsr2035
SEQ(SP=C0-CA%GCD=1-6%ISR=C5-CF%TI=Z%CI=Z%II=I%TS=U)
OPS(O1=M564NW0%O2=M564NW0%O3=M564NW0%O4=M564NW0%O5=M564NW0%O6=M564)
WIN(W1=1630%W2=1630%W3=1630%W4=1630%W5=1630%W6=1630)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=1630%O=M564NW0%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=1630%S=O%A=S+%F=AS%O=M564NW0%RD=0%Q=)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# Avocent SwitchView IP 1010
Fingerprint Avocent SwitchView 1010 remote access device
Class Avocent | embedded || remote management
SEQ(SP=CD-D7%GCD=1-6%ISR=D9-E3%TI=I%II=I%SS=S%TS=0)
OPS(O1=M5B4NW2NNT01%O2=M5B4NW2NNT01%O3=M5B4NW2NNT01%O4=M5B4NW2NNT01%O5=M5B4NW2NNT01%O6=M5B4NNT01)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M5B4NW2%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%S=O%A=S+%F=AS%O=M5B4NW2NNT01%RD=0%Q=)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=FA-104%TG=FF%CD=S)

# Avocent DSR1030 IP KVM
Fingerprint Avocent DSR1030 KVM over IP switch
Class Avocent | embedded || specialized
SEQ(SP=C4-CE%GCD=1-6%ISR=C8-D2%TI=Z%II=I%TS=U)
OPS(O1=M5B4NW0%O2=M5B4NW0%O3=M5B4NW0%O4=M5B4NW0%O5=M5B4NW0%O6=M5B4)
WIN(W1=16D0%W2=16D0%W3=16D0%W4=16D0%W5=16D0%W6=16D0)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=16D0%O=M5B4NW0%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=16D0%S=O%A=S+%F=AS%O=M5B4NW0%RD=0%Q=)
T4(R=Y%DF=Y%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=FA-104%TG=FF%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=Y%T=FA-104%TG=FF%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=FA-104%TG=FF%CD=S)

# AVTECH Room Alert 26W Firmware Version: v3.5.0
Fingerprint AVtech Room Alert 26W environmental monitor
Class AVtech | embedded || specialized
SEQ(SP=F7-10D%GCD=1-6%ISR=FC-10E%TI=I|RD%II=I%SS=O%TS=U)
OPS(R=N)
WIN(R=N)
ECN(R=N)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=O%A=S+%F=AR%RD=0)
T6(R=N)
T7(R=N)
U1(DF=Y%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# AV-TECH Digital Video Recorder (device connected to a surveillance camera), AVT AVC 773W 4CH Network DVR
Fingerprint AVtech AVC 773W digital video recorder
Class AVtech | embedded || webcam
SEQ(SP=C-1E%GCD=1-6%ISR=1B-6F%TI=I%II=RI%SS=O|S%TS=U)
OPS(O1=M59E%O2=M578%O3=M280%O4=M59E%O5=M218%O6=M109)
WIN(W1=FAF0%W2=FAF0%W3=FAF0%W4=FAF0%W5=FAF0%W6=FAF0)
ECN(R=Y%DF=Y%T=FA-104%TG=FF%W=FAF0%O=M59E%CC=N%Q=)
T1(R=Y%DF=Y%T=FA-104%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%T=FA-104%TG=FF%W=FAF0%S=O%A=S+%F=AS%O=M109%RD=0%Q=)
T4(R=Y%DF=Y%T=FA-104%TG=FF%W=FAF0%S=A+%A=S%F=AR%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=FA-104%TG=FF%W=FAF0%S=A%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=FA-104%TG=FF%W=FAF0%S=A%A=S%F=AR%O=%RD=0%Q=)
T7(R=Y%DF=Y%T=FA-104%TG=FF%W=FAF0%S=A%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=Y%T=FA-104%TG=FF%IPL=38%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=24-40%TG=40%CD=S)

# Axcient Uptiva backup appliance. On boot-up the system flashes "AxOS".
Fingerprint Axceint Uptiva backup appliance
Class Axcient | embedded || storage-misc
SEQ(SP=BB-CB%GCD=1-6%ISR=C5-CF%TI=Z%II=I%TS=7)
OPS(O1=M5B4ST11NW7%O2=M5B4ST11NW7%O3=M5B4NNT11NW7%O4=M5B4ST11NW7%O5=M5B4ST11NW7%O6=M5B4ST11)
WIN(W1=16A0%W2=16A0%W3=16A0%W4=16A0%W5=16A0%W6=16A0)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=16D0%O=M5B4NNSNW7%CC=Y%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=16A0%S=O%A=S+%F=AS%O=M5B4ST11NW7%RD=0%Q=)
T4(R=N)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=N)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# Axis 70U Network document server
Fingerprint AXIS 70U Network Document Server
Class AXIS | embedded || specialized
SEQ(SP=0-16%GCD=40000|80000|C0000|100000|140000%ISR=0-9D%TI=I%II=I%SS=S%TS=U)
OPS(O1=M5AC%O2=M578%O3=M218%O4=M218%O5=M218%O6=M109)
WIN(W1=4410%W2=4410%W3=4410%W4=4410%W5=4410%W6=4410)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=0|4410%O=M5AC%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=3B-45%TG=40%W=4410%S=O%A=O%F=A%O=%RD=0%Q=)
T4(R=Y%DF=N%T=3B-45%TG=40%W=4410%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=O|S+%F=AR%O=%RD=0%Q=)
U1(R=N)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# Buffalo TeraStation (NAS)
# Wireless-G Access Point (Model WAP54G), Firmware rev: 3.05
# Network Camera SNC-RZ50N
# Axis 205 IP Web Camera
Fingerprint AXIS 205 Network Camera, Buffalo TeraStation NAS device, Linksys WAP54G WAP, or Sony SNC-RZ50N network camera
Class AXIS | embedded || webcam
CPE cpe:/h:axis:205_network_camera
Class Buffalo | embedded || storage-misc
CPE cpe:/h:buffalo:terastation
Class Linksys | embedded || WAP
CPE cpe:/h:linksys:wap54g
Class Sony | embedded || webcam
CPE cpe:/h:sony:snc-rz50n
SEQ(SP=F8-107%GCD=1-6%ISR=FF-10F%TI=Z%II=I%TS=7)
OPS(O1=M564ST11NW0%O2=M564ST11NW0%O3=M564NNT11NW0%O4=M564ST11NW0%O5=M564ST11NW0%O6=M564ST11)
WIN(W1=16A0%W2=16A0%W3=16A0%W4=16A0%W5=16A0%W6=16A0)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=16D0%O=M564NNSNW0%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=O%A=S+%F=AR%O=%RD=0%Q=)
T6(R=N)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# Axis 206 Network Camera Firmware Version 4.40
Fingerprint AXIS 206 Network Camera
Class AXIS | embedded || webcam
CPE cpe:/h:axis:206_network_camera
SEQ(SP=C6-D0%GCD=1-6%ISR=CD-D7%TI=Z%CI=I%II=I%TS=7)
OPS(O1=M5B4ST11NW1%O2=M5B4ST11NW1%O3=M5B4NNT11NW1%O4=M5B4ST11NW1%O5=M5B4ST11NW1%O6=M5B4ST11)
WIN(W1=16A0%W2=16A0%W3=16A0%W4=16A0%W5=16A0%W6=16A0)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=16D0%O=M5B4NNSNW1%CC=Y%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=16A0%S=O%A=S+%F=AS%O=M5B4ST11NW1%RD=0%Q=)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# Axis 207W Network Camera
# Android 3.1 Honeycomb eeePad Transformer, Linux 2.6.36.3-00001-gf377a2b #1 SMP PREEMPT Fri May 27 11:58:50 CST 2011 armv7l GNU/Linux
Fingerprint AXIS 207W Network Camera
Class AXIS | embedded || webcam
CPE cpe:/h:axis:207w_network_camera
SEQ(SP=BD-E3%GCD=1-6%ISR=CB-DF%TI=Z%CI=Z%II=I%TS=7)
OPS(O1=M5B4ST11NW1%O2=M5B4ST11NW1%O3=M5B4NNT11NW1%O4=M5B4ST11NW1%O5=M5B4ST11NW1%O6=M5B4ST11)
WIN(W1=16A0%W2=16A0%W3=16A0%W4=16A0%W5=16A0%W6=16A0)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=16D0%O=M5B4NNSNW1%CC=Y%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=16A0%S=O%A=S+%F=AS%O=M5B4ST11NW1%RD=0%Q=)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=O%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# Described as axis 2100 network cam on its webpage (port 80).
Fingerprint AXIS 2100 Network Camera
Class AXIS | embedded || webcam
CPE cpe:/h:axis:2100_network_camera
SEQ(SP=100-10A%GCD=1-6%ISR=104-10E%TS=U)
OPS(O1=M5B4%O2=M578%O3=M280%O4=M218%O5=M218%O6=M109)
WIN(W1=3FE0%W2=3FE0%W3=3FE0%W4=3FE0%W5=3FE0%W6=3FE0)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=3FE0%O=M5B4%CC=S%Q=RU)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=3B-45%TG=40%W=3FE0%S=O%A=O|S+%F=ASF%O=M109%RD=0%Q=)
T4(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A|O%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=Z%A=O|S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A|O%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=Z%A=O|S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(R=N)

# Axis 2100 Network Camera
Fingerprint AXIS 2100 Network Camera
Class AXIS | embedded || webcam
CPE cpe:/h:axis:2100_network_camera
SEQ(SP=FB-108%GCD=1-6%ISR=102-10F%TI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4%O2=M578%O3=M280%O4=M218%O5=M218%O6=M109)
WIN(W1=3FE0%W2=3FE0%W3=3FE0%W4=3FE0%W5=3FE0%W6=3FE0)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=3FE0%O=M5B4%CC=N%Q=U)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=FA-104%TG=FF%W=3FE0%S=O%A=S+%F=ASF%O=M109%RD=0%Q=)
T4(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# AXIS model 2120 IP surveillance camera
Fingerprint AXIS 2120 Network Camera
Class AXIS | embedded || webcam
CPE cpe:/h:axis:2120_network_camera
SEQ(SP=FF-109%GCD=1-6%ISR=107-111%TI=I%CI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4%O2=M578%O3=M280%O4=M5B4%O5=M218%O6=M109)
WIN(W1=3FE0%W2=3FE0%W3=3FE0%W4=3FE0%W5=3FE0%W6=3FE0)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=3FE0%O=M5B4%CC=N%Q=U)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=3B-45%TG=40%W=3FE0%S=O%A=S+%F=ASF%O=M109%RD=0%Q=)
T4(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# Embeded Linux 2.6, AXIS 211 Network  Camera
Fingerprint AXIS 210A or 211 Network Camera (Linux 2.6)
Class AXIS | Linux | 2.6.X | webcam
CPE cpe:/h:axis:210a_network_camera
CPE cpe:/h:axis:211_network_camera
CPE cpe:/o:axis:linux_kernel:2.6 auto
SEQ(CI=Z%II=I)
OPS(R=N)
WIN(R=N)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=16D0%O=M5B4NNSNW1%CC=Y)
T1(R=N)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A|O%A=Z%F=R%RD=0)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=O|S+%F=AR%RD=0)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A|O%A=Z%F=R%RD=0)
T7(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=O|S+%F=AR%RD=0)
U1(DF=N%T=3B-45%TG=40%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# Axis 211A, 2.6.20
Fingerprint AXIS 211A Network Camera (Linux 2.6.20)
Class AXIS | Linux | 2.6.X | webcam
CPE cpe:/h:axis:211a_network_camera
CPE cpe:/o:axis:linux_kernel:2.6 auto
SEQ(CI=Z%II=I)
OPS(R=N)
WIN(R=N)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=16D0%O=M5B4NNSNW1%CC=N%Q=)
T1(R=N)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# Barracuda Networks v3.5.05.003 (2006-05-12 15:59:59) Model 400
Fingerprint Barracuda Spam Firewall model 400
Class Barracuda Networks | embedded || firewall
SEQ(SP=FF-109%GCD=1-6%ISR=106-110%TI=I%II=I%SS=S%TS=7)
OPS(O1=M5B4NW0NNT11%O2=M5B4NW0NNT11%O3=M5B4NW0NNT11%O4=M5B4NW0NNT11%O5=M5B4NW0NNT11%O6=M5B4NNT11)
WIN(W1=E000%W2=E000%W3=E000%W4=E000%W5=E000%W6=E000)
ECN(R=Y%DF=Y%T=34-3E%TG=40%W=E000%O=M5B4NW0%CC=N%Q=)
T1(R=Y%DF=Y%T=34-3E%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=34-3E%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=34-3E%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=34-3E%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=N)
U1(DF=N%T=34-3E%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=34-3E%TG=40%CD=S)

# Web Application Firewall 460
Fingerprint Barracuda Web Application Firewall 460
Class Barracuda Networks | embedded || firewall
SEQ(SP=C6-D0%GCD=1-6%ISR=CC-D6%TI=Z%II=I%TS=8)
OPS(O1=M546ST11NW7%O2=M546ST11NW7%O3=M546NNT11NW7%O4=M546ST11NW7%O5=M546ST11NW7%O6=M546ST11)
WIN(W1=16A0%W2=16A0%W3=16A0%W4=16A0%W5=16A0%W6=16A0)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=16D0%O=M546NNSNW7%CC=N)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%RD=0)
T6(R=N)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# Barracuda 340 Load Balancer
Fingerprint Barracuda 340 load balancer
Class Barracuda Networks | embedded || load balancer
SEQ(SP=C5-CF%GCD=1-6%ISR=C9-D3%TI=Z%CI=Z%II=I%TS=7)
OPS(O1=M5ACST11NW0%O2=M5ACST11NW0%O3=M5ACNNT11NW0%O4=M5ACST11NW0%O5=M5ACST11NW0%O6=M5ACST11)
WIN(W1=16A0%W2=16A0%W3=16A0%W4=16A0%W5=16A0%W6=16A0)
ECN(R=Y%DF=N%T=3D%TG=40%W=16D0%O=M5ACNNSNW0%CC=Y%Q=)
T1(R=Y%DF=N%T=3D%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=3D%TG=40%W=16A0%S=O%A=S+%F=AS%O=M5ACST11NW0%RD=0%Q=)
T4(R=Y%DF=N%T=3D%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3D%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3D%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3D%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3D%TG=40%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3D%TG=40%CD=S)

# barrelfish.org
Fingerprint Barrelfish before release2011-09-02
Class Barrelfish | Barrelfish || general purpose
CPE cpe:/o:barrelfish:barrelfish auto
SEQ(SP=0-A8%GCD=1-6%ISR=AC-B6%TI=I%CI=I%II=RI%SS=S%TS=U)
OPS(O1=M564%O2=M564%O3=M564%O4=M564%O5=M564%O6=M564)
WIN(W1=2DA0%W2=2DA0%W3=2DA0%W4=2DA0%W5=2DA0%W6=2DA0)
ECN(R=Y%DF=N%T=EE-F8%TG=FF%W=2DA0%O=M564%CC=N)
T1(R=Y%DF=N%T=EE-F8%TG=FF%S=O%A=S+%F=AS%RD=0)
T2(R=Y%DF=N%T=7A-84%TG=80%W=0%S=Z%A=S%F=AR%RD=0)
T3(R=Y%DF=N%T=7A-84%TG=80%W=0%S=Z%A=O%F=AR%RD=0)
T4(R=N)
T5(R=Y%DF=N%T=7A-84%TG=80%W=0%S=Z%A=S+%F=AR%RD=0%Q=R)
T6(R=Y%DF=N%T=7A-84%TG=80%W=0%S=A%A=Z%F=R%RD=0%Q=R)
T7(R=Y%DF=N%T=7A-84%TG=80%W=0%S=Z%A=S+%F=AR%RD=0%Q=R)
U1(DF=N%T=7A-84%TG=80%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=EE-F8%TG=FF%CD=S)

# Basler AG ruL2098-10gc GiGE Vision Ethernet Camera
Fingerprint Basler ruL 2098-10gc GigE Vision Ethernet camera
Class Basler | embedded || webcam
SEQ(SP=0-19%GCD=1-6|174|17E|2E8|2FC|45C|47A|5D0|5F8|744|776%ISR=5A-64%TI=I%II=I%SS=S%TS=U)
OPS(O1=M200%O2=M200%O3=M200%O4=M200%O5=M200%O6=M109)
WIN(W1=200%W2=200%W3=200%W4=200%W5=200%W6=200)
ECN(R=Y%DF=Y%T=FA-104%TG=FF%W=200%O=M200%CC=N%Q=)
T1(R=Y%DF=Y%T=FA-104%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%T=FA-104%TG=FF%W=200%S=O%A=S+%F=AS%O=M109%RD=0%Q=)
T4(R=Y%DF=Y%T=FA-104%TG=FF%W=200%S=A+%A=S%F=AR%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=FA-104%TG=FF%W=200%S=A%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=FA-104%TG=FF%W=200%S=A%A=S%F=AR%O=%RD=0%Q=)
T7(R=Y%DF=Y%T=FA-104%TG=FF%W=200%S=A%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=Y%T=FA-104%TG=FF%IPL=38%UN=24A2|301D|3BB6|477C|5365%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=24-39%TG=40%CD=S)

# Xerox DocuPrint N32
# Bay Networks Terminal Annex server. Converts serial connection to ethernet.
# ANNEX RA4000 Terminal server
Fingerprint Bay Networks Annex Ethernet-to-serial bridge or Xerox DocuPrint N32 printer
Class Bay Networks | embedded || bridge
Class Xerox | embedded || printer
CPE cpe:/h:xerox:docuprint_n32
SEQ(SP=C-16%GCD=FA00|1F400|2EE00|3E800|4E200%ISR=97-A1%II=I%TS=U)
OPS(O1=M5B4%O2=M5B4%O3=M5B4%O4=M5B4%O5=M5B4%O6=M5B4)
WIN(W1=1000%W2=1000%W3=1000%W4=1000%W5=1000%W6=1000)
ECN(R=Y%DF=N%T=19-23%TG=20%W=1000%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=19-23%TG=20%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=19-23%TG=20%W=1000%S=O%A=O%F=A%O=%RD=0%Q=)
T4(R=Y%DF=N%T=19-23%TG=20%W=1000%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=19-23%TG=20%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=19-23%TG=20%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=19-23%TG=20%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=4210%RIPCK=Z%RUCK=0%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# BayStack 450-24T, Versions: HW:RevD  FW:V1.47 SW:v3.1.0.22  ISVN:1
Fingerprint Bay Networks BayStack 450 switch (software version 3.1.0.22)
Class Bay Networks | embedded || switch
CPE cpe:/h:baynetworks:baystack_450 auto
SEQ(SP=20-BA%GCD=FA|1F4|2EE|3E8|4E2%ISR=8A-C0%TI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4%O2=M5B4%O3=M5B4%O4=M5B4%O5=M5B4%O6=M5B4)
WIN(W1=400%W2=400%W3=400%W4=400%W5=400%W6=400)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=0|400%O=|M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O|Z%A=O|S+%F=AR|AS%RD=0%Q=)
T2(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=3B-45%TG=40%W=0|400%S=O|Z%A=O|S+%F=AR|AS%O=|M5B4%RD=0%Q=)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# Bay Networks Switch BayStack 450-24T [FW:V1.48 SW:v4.2.0.16]
Fingerprint Bay Networks BayStack 450 switch (software version 4.2.0.16)
Class Bay Networks | embedded || switch
CPE cpe:/h:baynetworks:baystack_450 auto
SEQ(SP=63-E3%GCD=1-6%ISR=8A-B0%TI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4%O2=M5B4%O3=M5B4%O4=M5B4%O5=M5B4%O6=M5B4)
WIN(W1=400%W2=400%W3=400%W4=400%W5=400%W6=400)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=400%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=O|S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=3B-45%TG=40%W=0|400%S=O|Z%A=O|S+%F=AR|AS%O=|M5B4%RD=0%Q=)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# BeaconMedaes http://www.beaconmedaes.com, PIPELINE ALARMS, TOTALALERT Medical Gas Alarm, MedPlus TotalAlert Alarm Network
Fingerprint BeaconMedaes TotalAlert medical gas alarm
Class BeaconMedaes | embedded || specialized
SEQ(SP=0-16%GCD=FA7F|1F4FE|2EF7D|3E9FC|4E47B%ISR=97-A1%TI=I%II=I%SS=S%TS=U)
OPS(O1=M5B0%O2=M5B0%O3=M5B0%O4=M5B0%O5=M5B0%O6=M5B0)
WIN(W1=2000%W2=2000%W3=2000%W4=2000%W5=2000%W6=2000)
ECN(R=Y%DF=N%T=19-23%TG=20%W=2000%O=M5B0%CC=N%Q=)
T1(R=Y%DF=N%T=19-23%TG=20%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=19-23%TG=20%W=2000%S=O%A=O%F=A%O=%RD=0%Q=)
T4(R=Y%DF=N%T=19-23%TG=20%W=2000%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=19-23%TG=20%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=19-23%TG=20%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=19-23%TG=20%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=19-23%TG=20%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=19-23%TG=20%CD=S)

# BECK IPC Chip http://www.beck-ipc.com/en/products/index.asp
Fingerprint BECK IPC@CHIP
Class BECK | embedded || specialized
SEQ(SP=21-2B%GCD=61A8|C350|124F8|186A0|1E848%ISR=9F-A9%TI=I%CI=I%II=I%SS=S%TS=A)
OPS(O1=M5B4NW0NNT11%O2=M578NW0NNT11%O3=M280NW0NNT11%O4=M5B4NW0NNT11%O5=M218NW0NNT11%O6=M109NNT11)
WIN(W1=21F0%W2=2088%W3=2258%W4=21F0%W5=20C0%W6=209D)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=2238%O=M5B4NW0%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=3B-45%TG=40%W=209D%S=O%A=S+%F=AS%O=M109NW0NNT11%RD=0%Q=)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=N)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=FA-104%TG=FF%CD=S)

# Belkin Network USB Hub (F5L009)
Fingerprint Belkin F5L009 power adapter
Class Belkin | embedded || power-device
SEQ(SP=0-5%GCD=10001|20002|30003|40004|50005%ISR=96-A0%TI=I%CI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4NNS%O2=M5B4NNS%O3=M5B4NNS%O4=M5B4NNS%O5=M5B4NNS%O6=M5B4NNS)
WIN(W1=5B4%W2=5B4%W3=5B4%W4=5B4%W5=5B4%W6=5B4)
ECN(R=Y%DF=N%T=FA-104%TG=FF%W=5B4%O=M5B4NNS%CC=N)
T1(R=Y%DF=N%T=FA-104%TG=FF%S=O%A=S+%F=AS%RD=0)
T2(R=Y%DF=N%T=FA-104%TG=FF%W=5B4%S=A%A=S%F=AR%RD=0)
T3(R=Y%DF=N%T=FA-104%TG=FF%W=5B4%S=A%A=S+%F=AR%RD=0)
T4(R=Y%DF=N%T=FA-104%TG=FF%W=5B4%S=A%A=S%F=AR%RD=0)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S+%F=AR%RD=0)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=AR%RD=0)
T7(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=AR%RD=0)
U1(R=N)
IE(DFI=N%T=FA-104%TG=FF%CD=Z)

# Belkin OmniView SMB 8-Port IP KVM
# SMA Sunny Web Box monitoring solution for Solar Panel Inverters, Based on a Windows CE Firmware running version 1.5
Fingerprint Belkin OmniView KVM switch or SMA Sunny WebBox solar panel monitor
Class Belkin | embedded || specialized
Class SMA | embedded || power-device
SEQ(SP=7E-88%GCD=1-6%ISR=97-A1%TI=I%II=I%SS=S%TS=0)
OPS(O1=M5B4NW0NNT00NNS%O2=M5B4NW0NNT00NNS%O3=M5B4NW0NNT00%O4=M5B4NW0NNT00NNS%O5=M5B4NW0NNT00NNS%O6=M5B4NNT00NNS)
WIN(W1=8000%W2=8000%W3=8000%W4=8000%W5=8000%W6=8000)
ECN(R=Y%DF=Y%T=7B-85%TG=80%W=8000%O=M5B4NW0NNS%CC=N%Q=)
T1(R=Y%DF=Y%T=7B-85%TG=80%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=Y%DF=N%T=7B-85%TG=80%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=N)
T7(R=N)
U1(DF=N%T=7B-85%TG=80%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=7B-85%TG=80%CD=Z)

# Belkin F1DE101N aka digitalv6 Kaveman IPKVM, running Kaveman firmware 2.5-041224.1742
Fingerprint Belkin F1DR101N KVM console
Class Belkin | embedded || terminal
SEQ(SP=3A-44%GCD=9C4|1388|1D4C|2710|30D4%ISR=9F-A9%TI=I%CI=I%II=I%SS=S%TS=A)
OPS(O1=M5B4NW0NNSNNT11%O2=M578NW0NNSNNT11%O3=M280NW0NNT11%O4=M5B4NW0NNSNNT11%O5=M218NW0NNSNNT11%O6=M109NNSNNT11)
WIN(W1=21F0%W2=2088%W3=2258%W4=21F0%W5=20C0%W6=209D)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=2238%O=M5B4NW0NNS%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=3B-45%TG=40%W=209D%S=O%A=S+%F=AS%O=M109NW0NNSNNT11%RD=0%Q=)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=N)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=FA-104%TG=FF%CD=S)

# SMC7008ABR Barricade 8-port Broadband Router
# Belkin F5D7230-4 router
# Belkin Wireless G Router F5D7230-4
Fingerprint Belkin F5D7230-4 WAP or SMC SMC7008ABR router
Class Belkin | embedded || WAP
CPE cpe:/h:belkin:f5d7230-4 auto
Class SMC | embedded || router
CPE cpe:/h:smc:smc7008abr auto
SEQ(SP=0-16%GCD=1-6|A|14|1E|28|32%ISR=30-3A%TI=I%II=I%SS=O%TS=U)
OPS(O1=M578%O2=M578%O3=M280%O4=M578%O5=M218%O6=M109)
WIN(W1=1770%W2=1770%W3=1770%W4=1770%W5=1770%W6=1770)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=1770%O=M578%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=1770%S=O%A=S+%F=AS%O=M109%RD=0%Q=)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=O%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=O%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N|O%T=3B-45%TG=40%CD=Z)

# Belkin Woreless Router F5D8233-4v3(01) Firmware 3.01.17 (Nov 29 2007 17:48:13)
Fingerprint Belkin F5D8233 WAP
Class Belkin | embedded || WAP
CPE cpe:/h:belkin:f5d8233 auto
SEQ(SP=10-1C%GCD=1-6%ISR=4B-55%TI=I%II=I%SS=S%TS=U)
OPS(O1=M578%O2=M578%O3=M280%O4=M578%O5=M218%O6=M109)
WIN(W1=1770%W2=1770%W3=1770%W4=1770%W5=1770%W6=1770)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=1770%O=M578%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=1770%S=O%A=O|S+%F=AS%O=M109%RD=0%Q=)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=O%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=O%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=Y%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=Z)

# Belkin N 150 wireless router, firmware version F6D4230-4_WW_1.00.03
# Belkin N Wireless Router (Part # F5D8236-4, Version 3xxx Firmware), Linux, 2.6.21.x on a mipsel CPU.
Fingerprint Belkin F5D8236 or N150 WAP
Class Belkin | embedded || WAP
SEQ(SP=0-5%GCD=80|100|180|200|280%ISR=4E-58%TI=I%CI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4%O2=M564%O3=M5B4%O4=M5B4%O5=M204%O6=MF5)
WIN(W1=16D0%W2=16D0%W3=16D0%W4=16D0%W5=16D0%W6=16D0)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=16D0%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=3B-45%TG=40%W=16D0%S=O%A=S+%F=AS%O=M5B4%RD=0%Q=)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=S%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=S%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(R=N)
IE(DFI=N%T=3B-45%TG=40%CD=Z)

# Belkin advanced WAP F6D4630-4 v1
Fingerprint Belkin F6D4630-4 v1 WAP
Class Belkin | embedded || WAP
SEQ(SP=0-1D%GCD=1-6|64|C8|12C|190|1F4%ISR=4B-55%TI=I%II=I%SS=S%TS=U)
OPS(O1=M578%O2=M578%O3=M280%O4=M578%O5=M218%O6=M109)
WIN(W1=1770%W2=1770%W3=1770%W4=1770%W5=1770%W6=1770)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=1770%O=M578%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=1770%S=O%A=O|S+%F=AS%O=M109%RD=0%Q=)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=O%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=O%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N|Y%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N|S|Y%T=3B-45%TG=40%CD=Z)

# Philips ADSL Modem Multiservices PSTN Voice V2 Model: CIA6720NB/18
# Belkin Surf WAP Hardware Model F7D2301 Firmware Version 1.00.16 (Jul 2 2010 14:36:56)
Fingerprint Belkin F7D2301 WAP or Philips CIA6720NB ADSL modem
Class Belkin | embedded || WAP
CPE cpe:/h:belkin:f7d2301 auto
Class Philips | embedded || broadband router
CPE cpe:/h:philips:cia6720nb auto
SEQ(SP=41-4B%GCD=1-6%ISR=49-53%TI=I%CI=I%II=I%SS=S%TS=U)
OPS(O1=M578%O2=M578%O3=M280%O4=M578%O5=M218%O6=M109)
WIN(W1=1770%W2=1770%W3=1770%W4=1770%W5=1770%W6=1770)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=1770%O=M578%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=O|S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=O%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=O%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N|Y%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N|S|Y%T=3B-45%TG=40%CD=Z)

# belkin router running   1.00.09 (Jul 4 2011) Model is a Belkin N600 DB
Fingerprint Belkin N600 DB WAP
Class Belkin | embedded || WAP
CPE cpe:/h:belkin:n600_db
SEQ(SP=CF-123%GCD=1-6%ISR=EA-100%TI=Z%CI=Z%II=I%TS=7)
OPS(O1=M5B4ST11NW1%O2=M5B4ST11NW1%O3=M5B4NNT11NW1%O4=M5B4ST11NW1%O5=M5B4ST11NW1%O6=M5B4ST11)
WIN(W1=16A0%W2=16A0%W3=16A0%W4=16A0%W5=16A0%W6=16A0)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=16D0%O=M5B4NNSNW1%CC=N)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0)
T2(R=N)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=16A0%S=O%A=S+%F=AS%O=M5B4ST11NW1%RD=0)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%RD=0)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%RD=0)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%RD=0)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# Belkin Wireless Pre-N Router
# Firmware Version 1.01.03; Boot Version 2.01.08
Fingerprint Belkin Wireless Pre-N Router
Class Belkin | embedded || WAP
SEQ(SP=C2-CC%GCD=1-6%ISR=C9-D3%TI=Z%II=I%TS=7)
OPS(O1=%O2=NNT11|M5B4ST11NW0%O3=NNT11|M5B4NNT11NW0%O4=NNT11|M5B4ST11NW0%O5=NNT11|M5B4ST11NW0%O6=NNT11|M5B4ST11)
WIN(W1=16D0%W2=16A0%W3=16A0%W4=16A0%W5=16A0%W6=16A0)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=16D0%O=|M5B4NNSNW0%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=O%F=A%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=16A0%S=O%A=O|S+%F=A|AS%O=NNT11|M5B4ST11NW0%RD=0%Q=)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# Livebox Inventel  v5.05.5-fr ADSL firmware A2pBT009.d16m-1
# Livebox home ADSL router (wifi enabled). Manufactured by Inventel.
# US Robotics SureConnect 9105
# Broadcom MIPS32 based router (Belkin F5D7633uk4A) (Linux version 2.4.17 (root@JoshuaNotebook) (gcc version 3.1) #13 Wed Jul 20 10:22:55 CST 2005)
# ZXDSL 831 router, Linux version 2.4.17 (leon_zhou@localhost.localdomain) (gcc version 3.1) #1 Fri Feb 4 09:43:54 CST 2005
# Sinus 1054 DSL router, Boot Code Version: 1.0.37-5.6, Software Version: 2.1
# Belkin f5d7633-4 wireless router
# Sinus 1054 DSL (WLAN Router with built-in DSL-modem), Boot Code Version: 1.0.37-5.6, ADSL Modem Code Version: BA09b6e
Fingerprint Belkin F5D7633, Inventel Livebox, or T-Sinus 1054 wireless broadband router; or USRobotics SureConnect 9105 or ZTE ZXDSL 831 ADSL modem
Class Belkin | Linux | 2.4.X | WAP
CPE cpe:/h:belkin:f5d7633
CPE cpe:/o:belkin:linux_kernel:2.4 auto
Class Inventel | embedded || WAP
CPE cpe:/h:inventel:livebox
Class Telekom | embedded || WAP
CPE cpe:/h:telekom:sinus_1054
Class USRobotics | embedded || broadband router
CPE cpe:/h:usr:sureconnect_9105
Class ZTE | Linux | 2.4.X | broadband router
CPE cpe:/h:zte:zxdsl_831
CPE cpe:/o:zte:linux_kernel:2.4 auto
SEQ(SP=B0-CF%GCD=1-6%ISR=B5-D4%TI=Z%II=I%TS=8)
OPS(O1=M5B4ST11NW0%O2=M5B4ST11NW0%O3=M5B4NNT11NW0%O4=M5B4ST11NW0%O5=M5B4ST11NW0%O6=M5B4ST11)
WIN(W1=16A0%W2=16A0%W3=16A0%W4=16A0%W5=16A0%W6=16A0)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=16D0%O=M5B4NNSNW0%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=16A0%S=O%A=S+%F=AS%O=M5B4ST11NW0%RD=0%Q=)
T4(R=Y%DF=Y%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=FA-104%TG=FF%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=Y%T=FA-104%TG=FF%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=FA-104%TG=FF%CD=S)

# Plan 9 from Bell Labs (4th edition)
# 9front as a cpu server.
Fingerprint Bell Labs Plan 9 4th edition
Class Bell Labs | Plan 9 | 4th edition | general purpose
CPE cpe:/o:belllabs:plan_9:4th_edition auto
SEQ(SP=F8-10C%GCD=1-6%ISR=104-10F%TI=I%CI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4W1N|M5B4W2N|M5B4W3N%O2=M5B4W1N|M5B4W2N|M5B4W3N%O3=M5B4W1N|M5B4W2N|M5B4W3N%O4=M5B4W1N|M5B4W2N|M5B4W3N%O5=M5B4W1N|M5B4W2N|M5B4W3N%O6=M5B4)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=N%T=FA-104%TG=FF%W=FFFF%O=M5B4W1N|M5B4W2N|M5B4W3N%CC=N%Q=)
T1(R=Y%DF=N%T=FA-104%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=FA-104%TG=FF%W=FFFF%S=O%A=S+%F=AS%O=M5B4W1N|M5B4W2N|M5B4W3N%RD=0%Q=)
T4(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=FA-104%TG=FF%CD=S)

# Plan 9 from Bell Labs
Fingerprint Bell Labs Plan 9 edition
Class Bell Labs | Plan 9 || general purpose
CPE cpe:/o:belllabs:plan_9 auto
SEQ(SP=FA-10A%GCD=1-6%ISR=101-111%TI=I%CI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4W0N%O2=M5B4W0N%O3=M5B4W0N%O4=M5B4W0N%O5=M5B4W0N%O6=M5B4)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=N%T=FA-104%TG=FF%W=FFFF%O=M5B4W0N%CC=N%Q=)
T1(R=Y%DF=N%T=FA-104%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=FA-104%TG=FF%W=FFFF%S=O%A=S+%F=AS%O=M5B4W0N%RD=0%Q=)
T4(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=FA-104%TG=FF%CD=S)

# Billion Electric ADSL VoIP Router Modem (Model BiPAC 7402VGP)
Fingerprint Billion 7402VGP DSL router
Class Billion | embedded || broadband router
CPE cpe:/h:billion:7402vgp auto
SEQ(R=N)
OPS(R=N)
WIN(R=N)
ECN(R=N)
T1(R=N)
T2(R=Y%DF=Y%T=7B-85%TG=80%W=4000%S=A%A=Z%F=R%O=%RD=0%Q=)
T3(R=N)
T4(R=Y%DF=Y%T=7B-85%TG=80%W=4000%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=7B-85%TG=80%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=7B-85%TG=80%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=7B-85%TG=80%W=0%S=Z%A=Z%F=R%O=%RD=0%Q=)
U1(DF=N%T=96-A0%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(R=N)

# Billion 7404VGO-M DSL Router [Firmware 5.52d]
# Zoom ADSL X6 (5590 series)
# Siemens Vulcan BSP v0.01 / Vulcan CSP v0.01, DSL MODEM ADSL/2/2+ V55.1.03.06/E.37.7.37
# TeraCom Broadband modem ADSL
Fingerprint Billion 7404VGO-M or Zoom X6 DSL router
Class Billion | embedded || broadband router
CPE cpe:/h:billion:7474vgo-m
Class Zoom | embedded || broadband router
CPE cpe:/h:zoom:x6 auto
SEQ(SP=74-86%GCD=1-6%ISR=78-8E%TI=I%CI=I%TS=U)
OPS(R=N)
WIN(R=N)
ECN(R=N)
T1(R=Y%DF=Y%T=7B-85%TG=80%S=O%A=O|S+%F=AS%RD=0%Q=)
T2(R=Y%DF=Y%T=7B-85%TG=80%W=4000%S=A%A=Z%F=R%O=%RD=0%Q=)
T3(R=N)
T4(R=Y%DF=Y%T=7B-85%TG=80%W=4000%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=7B-85%TG=80%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=7B-85%TG=80%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=7B-85%TG=80%W=0%S=Z%A=Z%F=R%O=%RD=0%Q=)
U1(DF=N%T=96-A0%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(R=N)

# Billion 7404VGPM
Fingerprint Billion 7404VGP-M ADSL router
Class Billion | embedded || broadband router
CPE cpe:/h:billion:7404vgp-m auto
SEQ(SP=C7-D1%GCD=1-6%ISR=CB-D5%TI=Z%TS=7|9)
OPS(O1=M584ST11NW5%O2=M584ST11NW5%O3=M584NNT11NW5%O4=M584ST11NW5%O5=M584ST11NW5%O6=M584ST11)
WIN(W1=16A0%W2=16A0%W3=16A0%W4=16A0%W5=16A0%W6=16A0)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=16D0%O=M584NNSNW5%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=O|S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=1F59B3D4%Q=)
T5(R=Y%DF=Y%T=FA-104%TG=FF%W=0%S=Z%A=S+%F=AR%O=%RD=1F59B3D4%Q=)
T6(R=Y%DF=Y%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=1F59B3D4%Q=)
T7(R=N)
U1(R=N)
IE(R=N)

# Billion WRT610N running Firmware Version: 1.00.02 B10
Fingerprint Billion WRT610n WAP
Class Billion | embedded || WAP
CPE cpe:/h:billion:wrt610n auto
SEQ(SP=77-85%GCD=1-6%ISR=7F-8D%TI=I%CI=I%TS=U)
OPS(O1=M58C%O2=M578%O3=M280%O4=M218%O5=M218%O6=M109)
WIN(W1=4000%W2=4000%W3=4000%W4=4000%W5=4000%W6=4000)
ECN(R=Y%DF=Y%T=7B-85%TG=80%W=4000%O=M58C%CC=N%Q=)
T1(R=Y%DF=Y%T=7B-85%TG=80%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=7B-85%TG=80%W=4000%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=7B-85%TG=80%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=7B-85%TG=80%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=N)
U1(DF=N%T=96-A0%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(R=N)

# Funkwerk small office WAN Router RS232bw (Bintec hardware) Software RS232bw version V.7.9 Rev. 5 (Patch 6) IPSec from 2011/04/29 00:00:00
Fingerprint BinTec RS232bw ADSL modem
Class BinTec | embedded || broadband router
CPE cpe:/h:bintec:rs232bw auto
SEQ(SP=46-70%GCD=1-6%ISR=8A-94%TI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4%O2=M5B4%O3=M5B4%O4=M5B4%O5=M5B4%O6=M5B4)
WIN(W1=4000%W2=4000%W3=4000%W4=4000%W5=4000%W6=4000)
ECN(R=Y%DF=N%T=6E-78%TG=80%W=4000%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=6E-78%TG=80%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=Y%DF=N%T=6E-78%TG=80%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=N)
T7(R=N)
U1(DF=N%T=6E-78%TG=80%IPL=38%UN=D733%RIPL=G%RID=2%RIPCK=I%RUCK=G%RUD=G)
IE(DFI=S%T=6E-78%TG=80%CD=S)

# BinTec BinGO!
Fingerprint BinTec BinGO! ISDN router
Class BinTec | embedded || router
SEQ(SP=66-80%GCD=1-6%ISR=8D-97%TI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4%O2=M5B4%O3=M5B4%O4=M5B4%O5=M5B4%O6=M5B4)
WIN(W1=1000%W2=1000%W3=1000%W4=1000%W5=1000%W6=1000)
ECN(R=Y%DF=N%T=72-7C%TG=80%W=1000%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=71-7C%TG=80%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=72-7C%TG=80%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=72-7C%TG=80%W=0%S=Z%A=O%F=AR%O=%RD=0%Q=)
T4(R=Y%DF=N%T=72-7C%TG=80%W=0%S=A%A=S%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=72-7C%TG=80%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=72-7C%TG=80%W=0%S=A%A=S%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=72-7C%TG=80%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=72-7C%TG=80%IPL=38%UN=0%RIPL=G%RID=0%RIPCK=I%RUCK=G%RUD=G)
IE(DFI=S%T=72-7C%TG=80%CD=S)

# Bintec Brick-XM
Fingerprint BinTec Brick-XM router
Class BinTec | embedded || router
SEQ(SP=61-71%GCD=1-6%ISR=8D-97%TI=I%CI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4%O2=M5B4%O3=M5B4%O4=M5B4%O5=M5B4%O6=M5B4)
WIN(W1=1000%W2=1000%W3=1000%W4=1000%W5=1000%W6=1000)
ECN(R=Y%DF=N%T=4B-55%TG=80%W=1000%O=M5B4%CC=N)
T1(R=Y%DF=N%T=4B-55%TG=80%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=4B-55%TG=80%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=4B-55%TG=80%W=0%S=Z%A=O%F=AR%O=%RD=0%Q=)
T4(R=Y%DF=N%T=4B-55%TG=80%W=0%S=A%A=S%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=4B-55%TG=80%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=4B-55%TG=80%W=0%S=A%A=S%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=4B-55%TG=80%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=4B-55%TG=80%IPL=38%UN=0%RIPL=G%RID=0%RIPCK=I%RUCK=G%RUD=G)
IE(DFI=S%T=4B-55%TG=80%CD=S)

# funkwerk bintec R3400 gateway
Fingerprint BinTec R3400 WAP
Class BinTec | embedded || router
CPE cpe:/h:bintec:r3400 auto
SEQ(SP=27-6D%GCD=1-6%ISR=8A-94%TI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4%O2=M5B4%O3=M5B4%O4=M5B4%O5=M5B4%O6=M5B4)
WIN(W1=4000%W2=4000%W3=4000%W4=4000%W5=4000%W6=4000)
ECN(R=Y%DF=N%T=76-80%TG=80%W=4000%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=76-80%TG=80%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=76-80%TG=80%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=76-80%TG=80%W=0%S=Z%A=O%F=AR%O=%RD=0%Q=)
T4(R=Y%DF=N%T=76-80%TG=80%W=0%S=A%A=S%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=76-80%TG=80%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=76-80%TG=80%W=0%S=A%A=S%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=76-80%TG=80%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=46-50|76-80%TG=80%IPL=38%UN=4E07%RIPL=G%RID=0%RIPCK=I%RUCK=G%RUD=G)
IE(DFI=S%T=76-80%TG=80%CD=S)

# BINTEC-X4000 version V.7.1 Rev. 4 from 2004/10/06 00:00:00
Fingerprint BinTec X4000 access router
Class BinTec | embedded || router
SEQ(SP=64-6E%GCD=1-6%ISR=8A-94%TI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4%O2=M5B4%O3=M5B4%O4=M5B4%O5=M5B4%O6=M5B4)
WIN(W1=4000%W2=4000%W3=4000%W4=4000%W5=4000%W6=4000)
ECN(R=Y%DF=N%T=71-7B%TG=80%W=4000%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=71-7B%TG=80%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=71-7B%TG=80%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=71-7B%TG=80%W=0%S=Z%A=O%F=AR%O=%RD=0%Q=)
T4(R=Y%DF=N%T=71-7B%TG=80%W=0%S=A%A=S%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=71-7B%TG=80%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=71-7B%TG=80%W=0%S=A%A=S%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=71-7B%TG=80%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=71-7B%TG=80%IPL=38%UN=0%RIPL=G%RID=0%RIPCK=I%RUCK=G%RUD=G)
IE(DFI=S%T=71-7B%TG=80%CD=S)

# Funkwerk BinTec R1200
Fingerprint BinTec R1200 WAP
Class BinTec | embedded || WAP
CPE cpe:/h:bintec:r1200 auto
SEQ(SP=4C-7C%GCD=1-6%ISR=8A-94%TI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4%O2=M5B4%O3=M5B4%O4=M5B4%O5=M5B4%O6=M5B4)
WIN(W1=4000%W2=4000%W3=4000%W4=4000%W5=4000%W6=4000)
ECN(R=Y%DF=N%T=6E-78%TG=80%W=4000%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=6D-78%TG=80%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=Y%DF=N%T=6E-78%TG=80%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=N)
T7(R=N)
U1(DF=N%T=6E-78%TG=80%IPL=38%UN=0|128%RIPL=G%RID=0%RIPCK=I%RUCK=G%RUD=G)
IE(DFI=S%T=6E-78%TG=80%CD=S)

# BlackBoard Transaction System IP Converter (serial-to-IP converter). COM/IPCONV IP Converter V5.6.
Fingerprint Blackboard transaction system serial-to-IP converter
Class Blackboard | embedded || bridge
SEQ(SP=E6-F0%GCD=1-6%ISR=EA-F4%TS=A)
OPS(O1=M5B4NW0NNSNNT11%O2=M578NW0NNSNNT11%O3=M280NW0NNT11%O4=M5B4NW0NNSNNT11%O5=M218NW0NNSNNT11%O6=M109NNSNNT11)
WIN(W1=21F0%W2=2088%W3=2258%W4=21F0%W5=20C0%W6=209D)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=2238%O=M5B4NW0NNS%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=FA-104%TG=FF%CD=S)

# CacheFlow 5000 (exPacketeer)
Fingerprint Blue Coat CacheFlow 5000 proxy server
Class Blue Coat | embedded || proxy server
SEQ(SP=100-10A%GCD=1-6%ISR=102-110%TI=RI%TS=A)
OPS(O1=M5B4NW0ST11LLLL%O2=M5B4NW0ST11LLLL%O3=M5B4NW0NNT11%O4=M5B4NW0ST11LLLL%O5=M5B4NW0ST11LLLL%O6=M5B4ST11LLLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=FFFF%O=M5B4NW0SLL%CC=N)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0)
T2(R=N)
T3(R=Y%DF=N%T=3B-45%TG=40%W=FFFF%S=O%A=S+%F=AS%O=M5B4NW0ST11LLLL%RD=0)
T4(R=Y%DF=Y%T=3A-44%TG=40%W=0%S=A%A=Z%F=R%RD=0)
T5(R=Y%DF=N%T=3A-44%TG=40%W=0%S=Z%A=S+%F=AR%RD=0)
T6(R=Y%DF=Y%T=3A-44%TG=40%W=0%S=A%A=Z%F=R%RD=0)
T7(R=Y%DF=N%T=3A-44%TG=40%W=0%S=Z%A=S%F=AR%RD=0)
U1(DF=N%T=3A-44%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3A-44%TG=40%CD=S)

# Bluecoat CF-5000
Fingerprint Blue Coat CacheFlow 5000 proxy server
Class Blue Coat | embedded || proxy server
SEQ(SP=FF-10B%GCD=1-6%ISR=102-10C%TI=RI%CI=RI%II=RI%SS=S%TS=A)
OPS(O1=M5B4NW6ST11LLLL%O2=M5B4NW6ST11LLLL%O3=M5B4NW6NNT11%O4=M5B4NW6ST11LLLL%O5=M5B4NW6ST11LLLL%O6=M5B4ST11LLLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=FFFF%O=M5B4NW6SLL%CC=N)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0)
T2(R=N)
T3(R=Y%DF=N%T=3B-45%TG=40%W=FFFF%S=O%A=S+%F=AS%O=M5B4NW6ST11LLLL%RD=0)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%RD=0)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%RD=0)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%RD=0)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%RD=0)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Blue Coat proxy server running SGOS 3.2.4.8
Fingerprint Blue Coat proxy server (SGOS 3.2.4.8)
Class Blue Coat | SGOS | 3.X | proxy server
CPE cpe:/o:bluecoat:sgos:3 auto
SEQ(SP=94-A2%GCD=1-6%ISR=9E-A8%TI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4%O2=M578%O3=M280%O4=M5B4%O5=M218%O6=M109)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=FFFF%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=3B-45%TG=40%W=FFFF%S=O%A=S+%F=AS%O=M109%RD=0%Q=)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=15C%RID=4210%RIPCK=Z%RUCK=0%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# Blue Coat proxy server running SGOS 4.1.3.1, release 24075
# Blue Coat Proxy SG8000 w/ SGOS 4.2.3.12
Fingerprint Blue Coat proxy server (SGOS 4.1 - 4.2)
Class Blue Coat | SGOS | 4.X | proxy server
CPE cpe:/o:bluecoat:sgos:4 auto
SEQ(SP=A0-B1%GCD=1-6%ISR=A5-C2%TI=RD%TS=1)
OPS(O1=M5B4NW0NNT11%O2=M578NW0NNT11%O3=M280NW0NNT11%O4=M5B4NW0NNT11%O5=M218NW0NNT11%O6=M109NNT11)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=FFFF%O=M5B4NW0%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=O|S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=15C%RID=4210%RIPCK=Z%RUCK=0%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# Blue Coat SG200 Proxy - SGOS 4.2.2.8 release id: 26972
# SGOS 4.2.5.1, release 29951.
# Blue Coat SG200, Version: SGOS 4.2.6.1, Release id: 31079
Fingerprint Blue Coat SG200 proxy server (SGOS 4.2.2.8 - 4.2.6.1)
Class Blue Coat | SGOS | 4.X | proxy server
CPE cpe:/o:bluecoat:sgos:4 auto
SEQ(SP=94-A0%GCD=1-6%ISR=9C-A6%TI=I%II=I%SS=S%TS=1)
OPS(O1=M5B4NW0NNT11%O2=M578NW0NNT11%O3=M280NW0NNT11%O4=M5B4NW0NNT11%O5=M218NW0NNT11%O6=M109NNT11)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=FFFF%O=M5B4NW0%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=15C%RID=4210%RIPCK=Z%RUCK=0%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# Blue Coat SG810 Series Software SGOS 4.2.3.26
Fingerprint Blue Coat SG810 proxy server (SGOS 4.2.3.26)
Class Blue Coat | SGOS | 4.X | proxy server
CPE cpe:/o:bluecoat:sgos:4 auto
SEQ(SP=A0-B4%GCD=1-6%ISR=AB-BB%TS=1|2)
OPS(O1=M5B4NW0NNT11%O2=M578NW0NNT11%O3=M280NW0NNT11%O4=M5B4NW0NNT11%O5=M218NW0NNT11%O6=M109NNT11)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=FFFF%O=M5B4NW0%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=15C%RID=4210%RIPCK=I%RUCK=0%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# Blue Coat Director SGOS version 4.2.2.2
Fingerprint Blue Coat SGOS 4.2.2.2
Class Blue Coat | SGOS | 4.X | proxy server
CPE cpe:/o:bluecoat:sgos:4 auto
SEQ(SP=101-10B%GCD=1-6%ISR=106-110%TI=I%CI=I%TS=7)
OPS(O1=M5B4NNSNW0NNT11%O2=M5B4NNSNW0NNT11%O3=M5B4NW0NNT11%O4=M5B4NNSNW0NNT11%O5=M5B4NNSNW0NNT11%O6=M5B4NNSNNT11)
WIN(W1=4000%W2=4000%W3=4000%W4=4000%W5=4000%W6=4000)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=4000%O=M5B4NNSNW0%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=3B-45%TG=40%W=4000%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Model: Blue Coat SG200 Series,  Software SGOS 5.1.4.4,  Software Release ID: 28724
Fingerprint Blue Coat SG200 proxy server (SGOS 5.1.4.4)
Class Blue Coat | SGOS | 5.X | proxy server
CPE cpe:/o:bluecoat:sgos:5 auto
SEQ(SP=FF-109%GCD=1-6%ISR=104-112%TI=I%II=I%SS=S%TS=A)
OPS(O1=M5B4NW0ST11LLLL%O2=M5B4NW0ST11LLLL%O3=M5B4NW0NNT11%O4=M5B4NW0ST11LLLL%O5=M5B4NW0ST11LLLL%O6=M5B4ST11LLLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=FFFF%O=M5B4NW0SLL%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=N)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Blue Coat SG210-10. SGOS 5.2.3.9 Proxy edition software release 34077
# Blue Coat Proxy SG210 running SGOS 5.2.3.3
Fingerprint Blue Coat SG210 proxy server (SGOS 5.2.3.3 - 5.2.3.9)
Class Blue Coat | SGOS | 5.X | proxy server
CPE cpe:/o:bluecoat:sgos:5 auto
SEQ(SP=FD-109%GCD=1-6%ISR=103-10D%TI=I%II=I%SS=S%TS=A)
OPS(O1=M5B4NW0ST11LLLL%O2=M5B4NW0ST11LLLL%O3=M5B4NW0NNT11%O4=M5B4NW0ST11LLLL%O5=M5B4NW0ST11LLLL%O6=M5B4ST11LLLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=FFFF%O=M5B4NW0SLL%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=3B-45%TG=40%W=FFFF%S=O%A=S+%F=AS%O=M5B4NW0ST11LLLL%RD=0%Q=)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Blue Coat 510-10 SGOS 5.2.2.5 Proxy Edition, Software release ID: 31082
# Blue Coat SG9000-5 proxy server (SGOS 5.5.4.1)
Fingerprint Blue Coat SG510 or SG9000 proxy server (SGOS 5.2.2.5 - 5.5.4.1)
Class Blue Coat | SGOS | 5.X | proxy server
CPE cpe:/o:bluecoat:sgos:5 auto
SEQ(SP=FE-108%GCD=1-6%ISR=106-110%TI=I%CI=I%II=I%SS=S%TS=A)
OPS(O1=M5B4NW0ST11LLLL%O2=M5B4NW0ST11LLLL%O3=M5B4NW0NNT11%O4=M5B4NW0ST11LLLL%O5=M5B4NW0ST11LLLL%O6=M5B4ST11LLLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=FFFF%O=M5B4NW0SLL%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=3B-45%TG=40%W=FFFF%S=O%A=S+%F=AS%O=M5B4NW0ST11LLLL%RD=0%Q=)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Model: Blue Coat SG510 Series , Software: SGOS 5.1.3.7, Software Release ID: 27503
Fingerprint Blue Coat SG510-series proxy server (SGOS 5.1.3.7)
Class Blue Coat | SGOS | 5.X | proxy server
CPE cpe:/o:bluecoat:sgos:5 auto
SEQ(SP=100-10C%GCD=1-6%ISR=104-10E%TI=I%II=I%SS=S%TS=A)
OPS(O1=M5B4NW0NNT11SLL%O2=M5B4NW0NNT11SLL%O3=M5B4NW0NNT11%O4=M5B4NW0NNT11SLL%O5=M5B4NW0NNT11SLL%O6=M5B4NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=FFFF%O=M5B4NW0SLL%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=3B-45%TG=40%W=FFFF%S=O%A=S+%F=AS%O=M5B4NW0NNT11SLL%RD=0%Q=)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Blue Coat 810-10, SGOS 5.3.1.9 Proxy Edition
# Blue Coat SGOS Specific version 5.3.3.1
Fingerprint Blue Coat SG810 web proxy (SGOS 5.3.1.9 - 5.3.3.1)
Class Blue Coat | SGOS | 5.X | proxy server
CPE cpe:/o:bluecoat:sgos:5 auto
SEQ(SP=F4-10C%GCD=1-6%ISR=102-110%TI=I%II=I%SS=S%TS=A)
OPS(O1=M5B4NW6ST11LLLL%O2=M5B4NW6ST11LLLL%O3=M5B4NW6NNT11%O4=M5B4NW6ST11LLLL%O5=M5B4NW6ST11LLLL%O6=M5B4ST11LLLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=FFFF%O=M5B4NW6SLL%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=3B-45%TG=40%W=FFFF%S=O%A=S+%F=AS%O=M5B4NW6ST11LLLL%RD=0%Q=)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# SGOS 5.5.1.1 Proxy Edition 5.5.1.1 Build: 43412
Fingerprint Blue Coat SGOS 5.5.1.1
Class Blue Coat | SGOS | 5.X | proxy server
CPE cpe:/o:bluecoat:sgos:5 auto
SEQ(SP=101-10B%GCD=1-6%ISR=103-10F%TI=I%II=I%SS=S%TS=A)
OPS(O1=M5B4NW6ST11LLLL%O2=M5B4NW6ST11LLLL%O3=M5B4NW6NNT11%O4=M5B4NW6ST11LLLL%O5=M5B4NW6ST11LLLL%O6=M5B4ST11LLLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=FFFF%O=M5B4NW6SLL%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=N)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Version: SGOS 5.5.3.1 Proxy Edition Release id: 46382
Fingerprint Blue Coat SGOS 5.5.3.1
Class Blue Coat | SGOS | 5.X | proxy server
CPE cpe:/o:bluecoat:sgos:5 auto
SEQ(SP=FA-10A%GCD=1-6%ISR=103-10D%TI=I%CI=I%II=I%SS=S%TS=A)
OPS(O1=M5B4NW6ST11LLLL%O2=M5B4NW6ST11LLLL%O3=M5B4NW6NNT11%O4=M5B4NW6ST11LLLL%O5=M5B4NW6ST11LLLL%O6=M5B4ST11LLLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=FFFF%O=M5B4NW6SLL%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=3B-45%TG=40%W=FFFF%S=O%A=S+%F=AS%O=M5B4NW6ST11LLLL%RD=0%Q=)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Blue Coat running SGOS 6.2.5.1 Proxy Edition
# SGOS 6.2.8.1
Fingerprint Blue Coat proxy server (SGOS 6.2.5.1 - 6.2.8.1)
Class Blue Coat | SGOS | 6.X | proxy server
CPE cpe:/o:bluecoat:sgos:6 auto
SEQ(SP=FD-109%GCD=1-6%ISR=100-112%TI=I%CI=I%II=I%SS=S%TS=A)
OPS(O1=M5B4W0ST11LLLLL%O2=M5B4W0ST11LLLLL%O3=M5B4W0NNT11L%O4=M5B4W0ST11LLLLL%O5=M5B4W0ST11LLLLL%O6=M5B4ST11LLLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=FFFF%O=M5B4W0SLLL%CC=N)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0)
T2(R=N)
T3(R=Y%DF=N%T=3B-45%TG=40%W=FFFF%S=O%A=S+%F=AS%O=M5B4W0ST11LLLLL%RD=0)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%RD=0)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%RD=0)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%RD=0)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%RD=0)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# version 6.3.2.201 BlueCoat Proxy SG
Fingerprint Blue Coat proxy server (SGOS 6.3.2.201)
Class Blue Coat | SGOS | 6.X | proxy server
CPE cpe:/o:bluecoat:sgos:6 auto
SEQ(SP=103-10D%GCD=1-6%ISR=101-10B%TS=A)
OPS(O1=M5B4W0ST11LLLLL%O2=M5B4W0ST11LLLLL%O3=M5B4W0NNT11L%O4=M5B4W0ST11LLLLL%O5=M5B4W0ST11LLLLL%O6=M5B4ST11LLLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=FFFF%O=M5B4W0SLLL%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Bluecoat ProxySG 600-10
# SGOS 6.4.3.1 Proxy Edition
Fingerprint Blue Coat ProxySG 600 proxy server (SGOS 6.4)
Class Blue Coat | SGOS | 6.X | proxy server
CPE cpe:/o:bluecoat:sgos:6 auto
SEQ(SP=F3-103%GCD=1-6%ISR=104-10E%TI=I%CI=I%II=I%SS=S%TS=A)
OPS(O1=M5B4ST11W0LLLLL%O2=M5B4ST11W0LLLLL%O3=M5B4NNT11W0L%O4=M5B4ST11W0LLLLL%O5=M5B4ST11W0LLLLL%O6=M5B4ST11LLLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=FFFF%O=M5B4SW0LLL%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=3B-45%TG=40%W=FFFF%S=O%A=S+%F=AS%O=M5B4ST11W0LLLLL%RD=0%Q=)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# BlueArc Titan 2100 firmware version 4.2.944b
Fingerprint BlueArc Titan 2100 NAS device
Class BlueArc | embedded || storage-misc
CPE cpe:/h:bluearc:titan_2100 auto
SEQ(SP=1D-2D%GCD=1-6%ISR=8A-94%TI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4%O2=M5B4%O3=M5B4%O4=M5B4%O5=M5B4%O6=M5B4)
WIN(W1=FAF0%W2=FAF0%W3=FAF0%W4=FAF0%W5=FAF0%W6=FAF0)
ECN(R=Y%DF=N%T=7B-85%TG=80%W=FAF0%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=7B-85%TG=80%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=7B-85%TG=80%W=FAF0%S=O%A=S+%F=AS%O=M5B4%RD=0%Q=)
T4(R=Y%DF=N%T=7B-85%TG=80%W=FAF0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=7B-85%TG=80%W=FAF0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=7B-85%TG=80%W=FAF0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=7B-85%TG=80%W=FAF0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=FA-104%TG=FF%CD=S)

# SuperDOS - very old OS...but still working. Still sold by www.dccs.com.
Fingerprint Bluebird SuperDOS
Class Bluebird | SuperDOS || general purpose
CPE cpe:/o:bluebird:superdos auto
SEQ(SP=FA-104%GCD=1-6%ISR=F3-FD%TI=I%II=I%SS=S%TS=U)
OPS(O1=M5B0%O2=M578%O3=M200%O4=M5B0%O5=M5B0%O6=M5B0)
WIN(W1=1000%W2=1000%W3=1000%W4=1000%W5=1000%W6=1000)
ECN(R=Y%DF=N%T=76%TG=80%W=1000%O=M5B0%CC=N%Q=)
T1(R=Y%DF=N%T=76%TG=80%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=76%TG=80%W=1000%S=O%A=S+%F=AS%O=M109%RD=0%Q=)
T4(R=Y%DF=N%T=76%TG=80%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=76%TG=80%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=76%TG=80%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=76%TG=80%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=76%TG=80%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=4AA2%RUD=G)
IE(DFI=N%T=76%TG=80%CD=Z)

# Bluebird SuperDOS
Fingerprint Bluebird SuperDOS
Class Bluebird | SuperDOS || general purpose
CPE cpe:/o:bluebird:superdos auto
SEQ(SP=C7-D1%GCD=1-6%ISR=D6-E0%TI=I%CI=I%II=I%SS=S%TS=U)
OPS(O1=M5B0%O2=M578%O3=M200%O4=M5B0%O5=M5B0%O6=M5B0)
WIN(W1=1000%W2=1000%W3=1000%W4=1000%W5=1000%W6=1000)
ECN(R=Y%DF=N%T=78%TG=80%W=1000%O=M5B0%CC=N%Q=)
T1(R=Y%DF=N%T=78%TG=80%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=78%TG=80%W=1000%S=O%A=S+%F=AS%O=M109%RD=0%Q=)
T4(R=Y%DF=N%T=78%TG=80%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=78%TG=80%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=78%TG=80%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=78%TG=80%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=78%TG=80%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=5207%RUD=G)
IE(DFI=N%T=78%TG=80%CD=Z)

# Tracker 2740 (system which provides an interface for routers, infrastructure stuff like power, alarms etc.)
Fingerprint Bomara Tracker 2740 multipurpose server (Linux)
Class Bomara | Linux || specialized
CPE cpe:/o:bomara:linux_kernel auto
SEQ(SP=101-10B%GCD=1-6%ISR=103-10D%TI=I%CI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4%O2=M578%O3=M280%O4=M218%O5=M218%O6=M109)
WIN(W1=7FE0%W2=7FE0%W3=7FE0%W4=7FE0%W5=7FE0%W6=7FE0)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=7FE0%O=M5B4%CC=N%Q=U)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=150%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# Bosch Divar Security Systems embedded operating system
Fingerprint Bosch Divar security system
Class Bosch | embedded || security-misc
SEQ(SP=C-16%GCD=1E848|3D090|5B8D8|7A120|98968%ISR=9F-A9%TI=I%II=I%SS=S%TS=A)
OPS(O1=M5B4NW0NNT11%O2=M578NW0NNT11%O3=M280NW0NNT11%O4=M5B4NW0NNT11%O5=M218NW0NNT11%O6=M109NNT11)
WIN(W1=21F0%W2=2088%W3=2258%W4=21F0%W5=20C0%W6=209D)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=2238%O=M5B4NW0%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=3B-45%TG=40%W=209D%S=O%A=S+%F=AS%O=M109NW0NNT11%RD=0%Q=)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=FA-104%TG=FF%CD=S)

# http://s2soft.com/boundless/anetterm.html
Fingerprint Boundless Technologies NetTerminal text terminal
Class Boundless Technologies | embedded || terminal
SEQ(SP=C-16%GCD=FA00|1F400|2EE00|3E800|4E200%ISR=97-A1%TI=I%CI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4%O2=M5B4%O3=M5B4%O4=M5B4%O5=M5B4%O6=M5B4)
WIN(W1=111C%W2=1068%W3=1180%W4=1000%W5=10C0%W6=1090)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=111C%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=3B-45%TG=40%W=1090%S=O%A=S+%F=AS%O=M5B4%RD=0%Q=)
T4(R=Y%DF=N%T=3B-45%TG=40%W=1000%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=15C%RID=4210%RIPCK=Z%RUCK=0%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# AirPlay-Device
# Marantz NR-1602
# Denon AVR 1912
# Denon AVR 1920 receiver
# Pioneer VSX-921 AV-Receiver
Fingerprint Audio receiver: Bowers & Wilkins Zeppelin Air, Denon AVR-1900-series, Marantz NR1602, or Pioneer VSX-921
Class Bowers & Wilkins | embedded || media device
CPE cpe:/h:bowers_%26_wilkins:zeppelin_air
Class Denon | embedded || media device
CPE cpe:/h:denon:avr-1912
CPE cpe:/h:denon:avr-1920
Class Marantz | embedded || media device
CPE cpe:/h:marantz:nr1602
Class Pioneer | embedded || media device
CPE cpe:/h:pioneer:vsx-921
SEQ(SP=C-16%GCD=FA7F|1F4FE|2EF7D|3E9FC|4E47B%ISR=97-A1%TI=I%CI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4%O2=M5B4%O3=M5B4%O4=M5B4%O5=M5B4%O6=M5B4)
WIN(W1=2000%W2=2000%W3=2000%W4=2000%W5=2000%W6=2000)
ECN(R=Y%DF=N%T=7B-85%TG=80%W=2000%O=M5B4%CC=N)
T1(R=Y%DF=N%T=7B-85%TG=80%S=O%A=S+%F=AS%RD=0)
T2(R=N)
T3(R=Y%DF=N%T=7B-85%TG=80%W=2000%S=O%A=O%F=A%RD=0)
T4(R=Y%DF=N%T=7B-85%TG=80%W=2000%S=A%A=Z%F=R%RD=0)
T5(R=Y%DF=N%T=7B-85%TG=80%W=0%S=Z%A=S+%F=AR%RD=0)
T6(R=Y%DF=N%T=7B-85%TG=80%W=0%S=A%A=Z%F=R%RD=0)
T7(R=Y%DF=N%T=7B-85%TG=80%W=0%S=Z%A=S%F=AR%RD=0)
U1(DF=N%T=7B-85%TG=80%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=7B-85%TG=80%CD=S)

# GS-Z3 Data logger, connected to an Energy Display Meter offered by www.energydisplaymeter.co.uk. BGB WebRTU Z3. Firmware Version : 2.05.03 (19), Config Filename: BGBConfig_07_01.bin
Fingerprint British Gas GS-Z3 data logger
Class British Gas | embedded || storage-misc
SEQ(CI=I%II=RI)
OPS(R=N)
WIN(R=N)
ECN(R=N)
T1(R=N)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=FA-104%TG=FF%W=800%S=A+%A=S%F=AR%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=800%S=A%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=800%S=A%A=S%F=AR%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FA-104%TG=FF%W=800%S=A%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# BroadMax Technology Limited LinkMAX HSA300A-2
Fingerprint BroadMax LinkMAX HSA300A-2 ADSL modem
Class BroadMax Technology | embedded || broadband router
SEQ(SP=0-41%GCD=1388|2710|3A98|4E20|61A8%ISR=8A-94%TI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4%O2=M5B4%O3=M5B4%O4=M5B4%O5=M5B4%O6=M5B4)
WIN(W1=1FB0%W2=1FB0%W3=1FB0%W4=1FB0%W5=1FB0%W6=1FB0)
ECN(R=Y%DF=N%T=3B-3D%TG=40%W=1FB0%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=3B-3D%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=3B-3D%TG=40%W=1FB0%S=O%A=S+%F=AS%O=M5B4%RD=0%Q=)
T4(R=Y%DF=Y%T=3B-3D%TG=40%W=0%S=A%A=S%F=R%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=3B-3D%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-3D%TG=40%W=0%S=A%A=S%F=R%O=%RD=0%Q=)
T7(R=Y%DF=Y%T=3B-3D%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=19-23%TG=20%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=19-23%TG=20%CD=Z)

# Brocade Layer 2 switch OS
Fingerprint Brocade Layer 2 switch
Class Brocade | embedded || switch
SEQ(SP=5F-A5%GCD=1-6%ISR=7D-9D%TI=I%II=I%SS=S%TS=U)
OPS(O1=M59C%O2=M59C%O3=M59C%O4=M59C%O5=M59C%O6=M59C)
WIN(W1=4000%W2=4000%W3=4000%W4=4000%W5=4000%W6=4000)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=4000%O=M59C%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=U)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=U)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=U)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=U)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=U)
T7(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=U)
U1(DF=N%T=3B-45%TG=40%IPL=44%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=I)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# Brocade Silkworm Switches, Kernel: 2.4.19, Fabric OS: v4.4.0b
Fingerprint Brocade SilkWorm switch
Class Brocade | embedded || switch
SEQ(SP=C3-CD%GCD=1-6%ISR=CE-D8%TI=Z%II=I%TS=7)
OPS(O1=M5B4ST11NW0%O2=M5B4ST11NW0%O3=M5B4NNT11NW0%O4=M5B4ST11NW0%O5=M5B4ST11NW0%O6=M5B4ST11)
WIN(W1=16A0%W2=16A0%W3=16A0%W4=16A0%W5=16A0%W6=16A0)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=16D0%O=M5B4NNSNW0%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=16A0%S=O%A=S+%F=AS%O=M5B4ST11NW0%RD=0%Q=)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=78C0%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# SW: Version 07.3.00T203 Copyright (c) 1996-2011 Brocade Communications Systems, Inc. HW: Stackable TurboIron-X24
Fingerprint Brocade TurboIron 24X switch
Class Brocade | embedded || switch
CPE cpe:/h:brocade:turboiron_24x
SEQ(SP=7A-BA%GCD=1-6%ISR=86-A4%TI=I%CI=I%II=I%SS=S%TS=U)
OPS(O1=M59C%O2=M59C%O3=M59C%O4=M59C%O5=M59C%O6=M59C)
WIN(W1=4000%W2=4000%W3=4000%W4=4000%W5=4000%W6=4000)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=4000%O=M59C%CC=N)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0)
T2(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%RD=0%Q=U)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%RD=0%Q=U)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%RD=0%Q=U)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%RD=0%Q=U)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%RD=0%Q=U)
T7(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%RD=0%Q=U)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# Brother NC-130h Node OS
Fingerprint Brother NC-130h print server
Class Brother | embedded || print server
CPE cpe:/h:brother:nc-130h auto
SEQ(SP=C5-CF%GCD=1-6%ISR=D3-DD%TI=I%CI=I%II=I%SS=S%TS=U)
OPS(R=N)
WIN(R=N)
ECN(R=N)
T1(R=Y%DF=N%T=79|B0-BA%TG=80%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=79%TG=80%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=79%TG=80%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=79%TG=80%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=79%TG=80%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=79%TG=80%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=8562%RUD=G)
IE(DFI=N%T=79%TG=80%CD=Z)

# External 10/100BASE-TX Print Server NC-2100p
Fingerprint Brother NC-2100p print server
Class Brother | embedded || print server
CPE cpe:/h:brother:nc-2100p auto
SEQ(SP=0-5%GCD=0%ISR=0-5%TI=I%CI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4%O2=M5B4%O3=M5B4%O4=M5B4%O5=M5B4%O6=M5B4)
WIN(W1=80%W2=80%W3=80%W4=80%W5=80%W6=80)
ECN(R=Y%DF=N%T=FA-104%TG=FF%W=80%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=FA-104%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=APR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=FA-104%TG=FF%W=80%S=O%A=S+%F=AS%O=M5B4%RD=0%Q=)
T4(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=APR%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S+%F=APR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=APR%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=APR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0|11A6%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=FA-104%TG=FF%CD=S)

# Multiprotocol Print Server NC-3100h, Firmware Version: 3.20
Fingerprint Brother NC-3100h print server
Class Brother | embedded || print server
CPE cpe:/h:brother:nc-3100h auto
SEQ(SP=C5-CF%GCD=1-6%ISR=D5-DF%TI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4%O2=M578%O3=M200%O4=M5B4%O5=M5B4%O6=M5B4)
WIN(W1=1000%W2=1000%W3=1000%W4=1000%W5=1000%W6=1000)
ECN(R=Y%DF=N%T=71%TG=80%W=1000%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=71%TG=80%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=71%TG=80%W=1000%S=O%A=S+%F=AS%O=M109%RD=0%Q=)
T4(R=Y%DF=N%T=71%TG=80%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=71%TG=80%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=71%TG=80%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=71%TG=80%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=71%TG=80%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=1597%RUD=G)
IE(DFI=N%T=71%TG=80%CD=Z)

# Brother NC-3100h, Firmware Ver.3.20 (00.08.31)
Fingerprint Brother NC-3100h print server
Class Brother | embedded || print server
CPE cpe:/h:brother:nc-3100h auto
SEQ(SP=C8-D2%GCD=1-6%ISR=D5-DF%TI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4%O2=M578%O3=M200%O4=M5B4%O5=M5B4%O6=M5B4)
WIN(W1=1000%W2=1000%W3=1000%W4=1000%W5=1000%W6=1000)
ECN(R=Y%DF=N%T=74%TG=80%W=1000%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=74%TG=80%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=74%TG=80%W=1000%S=O%A=S+%F=AS%O=M109%RD=0%Q=)
T4(R=Y%DF=N%T=74%TG=80%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=74%TG=80%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=74%TG=80%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=74%TG=80%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=74%TG=80%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=1597%RUD=G)
IE(DFI=N%T=74%TG=80%CD=Z)

# Brother DCP-540CN printer, firmware ver.b
Fingerprint Brother DCP-540CN printer
Class Brother | embedded || printer
CPE cpe:/h:brother:dcp-540cn auto
SEQ(SP=C8-D2%GCD=1-6%ISR=D5-DF%TI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4%O2=M578%O3=M280%O4=M200%O5=M218%O6=M109)
WIN(W1=111C%W2=111C%W3=111C%W4=111C%W5=111C%W6=111C)
ECN(R=Y%DF=N%T=78%TG=80%W=111C%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=78%TG=80%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=78%TG=80%W=111C%S=O%A=S+%F=AS%O=M109%RD=0%Q=)
T4(R=Y%DF=N%T=78%TG=80%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=78%TG=80%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=78%TG=80%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=78%TG=80%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=78%TG=80%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=835F%RUD=G)
IE(DFI=N%T=78%TG=80%CD=Z)

# Brother DCP-540CN Printer
Fingerprint Brother DCP-540CN printer
Class Brother | embedded || printer
CPE cpe:/h:brother:dcp-540cn auto
SEQ(SP=CD-D7%GCD=1-6%ISR=D5-DF%TI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4%O2=M578%O3=M280%O4=M200%O5=M218%O6=M109)
WIN(W1=111C%W2=111C%W3=111C%W4=111C%W5=111C%W6=111C)
ECN(R=Y%DF=N%T=79%TG=80%W=111C%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=79%TG=80%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=79%TG=80%W=111C%S=O%A=S+%F=AS%O=M109%RD=0%Q=)
T4(R=Y%DF=N%T=79%TG=80%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=79%TG=80%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=79%TG=80%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=79%TG=80%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=79%TG=80%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=87B7%RUD=G)
IE(DFI=N%T=79%TG=80%CD=Z)

# DCP-8045D B/W Laser printer
Fingerprint Brother DCP-8045D printer
Class Brother | embedded || printer
CPE cpe:/h:brother:dcp-8045d auto
SEQ(SP=E0-EA%GCD=1-6%ISR=DD-E7%TI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4%O2=M578%O3=M200%O4=M5B4%O5=M5B4%O6=M5B4)
WIN(W1=1000%W2=1000%W3=1000%W4=1000%W5=1000%W6=1000)
ECN(R=Y%DF=N%T=76%TG=80%W=1000%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=76%TG=80%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=76%TG=80%W=1000%S=O%A=S+%F=AS%O=M109%RD=0%Q=)
T4(R=Y%DF=N%T=76%TG=80%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=76%TG=80%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=76%TG=80%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=76%TG=80%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=76%TG=80%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=899B%RUD=G)
IE(DFI=N%T=76%TG=80%CD=Z)

# Brother DCP8065 DN Printer-Copier-Scanner
Fingerprint Brother DCP-8065D printer
Class Brother | embedded || printer
CPE cpe:/h:brother:dcp-8065d
SEQ(SP=0-5%GCD=1E848|3D090|5B8D8|7A120|98968%ISR=9D-A7%TI=I%CI=I%II=I%SS=S%TS=A)
OPS(O1=M5B4NW0NNSNNT11%O2=M578NW0NNSNNT11%O3=M280NW0NNT11%O4=M5B4NW0NNSNNT11%O5=M218NW0NNSNNT11%O6=)
WIN(W1=21F0%W2=2088%W3=2258%W4=21F0%W5=20C0%W6=0)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=0%O=%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=O%F=AR%O=%RD=0%Q=)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=FA-104%TG=FF%CD=S)

# Brother NC-3100h Firmware Ver.3.20 (00.08.31), Brother NC-3100h Command Console
Fingerprint Brother HL-1270N printer
Class Brother | embedded || printer
CPE cpe:/h:brother:hl-1270n auto
SEQ(SP=C9-D3%GCD=1-6%ISR=D5-DF%TI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4%O2=M578%O3=M200%O4=M5B4%O5=M5B4%O6=M5B4)
WIN(W1=1000%W2=1000%W3=1000%W4=1000%W5=1000%W6=1000)
ECN(R=Y%DF=N%T=73-7D%TG=80%W=1000%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=73-7D%TG=80%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=73-7D%TG=80%W=1000%S=O%A=S+%F=AS%O=M109%RD=0%Q=)
T4(R=Y%DF=N%T=73-7D%TG=80%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=73-7D%TG=80%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=73-7D%TG=80%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=73-7D%TG=80%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=73-7D%TG=80%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=159C%RUD=G)
IE(DFI=N%T=73-7D%TG=80%CD=Z)

# Brother HL-1870N
Fingerprint Brother HL-1870N printer
Class Brother | embedded || printer
CPE cpe:/h:brother:hl-1870n auto
SEQ(SP=EB-F5%GCD=1-6%ISR=E6-F0%TI=I%CI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4%O2=M578%O3=M200%O4=M5B4%O5=M5B4%O6=M5B4)
WIN(W1=1000%W2=1000%W3=1000%W4=1000%W5=1000%W6=1000)
ECN(R=Y%DF=N%T=7A-7C%TG=80%W=1000%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=7A-7C%TG=80%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=7A-7C%TG=80%W=1000%S=O%A=S+%F=AS%O=M109%RD=0%Q=)
T4(R=Y%DF=N%T=7A-7C%TG=80%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=7A-7C%TG=80%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=7A-7C%TG=80%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=7A-7C%TG=80%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=7A-7C%TG=80%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=8705%RUD=G)
IE(DFI=N%T=7A-7C%TG=80%CD=Z)

# Brother HL-2070N Networked Laser Printer
# Brother MFC-5460CN
Fingerprint Brother HL-2070N or MFC-5460CN printer
Class Brother | embedded || printer
CPE cpe:/h:brother:hl-2070n
CPE cpe:/h:brother:mfc-5460cn
SEQ(SP=CC-DA%GCD=1-6%ISR=D6-E0%TI=I%CI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4%O2=M578%O3=M280%O4=M200%O5=M218%O6=M109)
WIN(W1=111C%W2=111C%W3=111C%W4=111C%W5=111C%W6=111C)
ECN(R=Y%DF=N%T=78%TG=80%W=111C%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=78%TG=80%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=78%TG=80%W=111C%S=O%A=S+%F=AS%O=M109%RD=0%Q=)
T4(R=Y%DF=N%T=78%TG=80%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=78%TG=80%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=78%TG=80%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=78%TG=80%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=78%TG=80%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUD=G)
IE(DFI=N%T=78%TG=80%CD=Z)

# Brother HL-2070N
Fingerprint Brother HL-2070N printer
Class Brother | embedded || printer
CPE cpe:/h:brother:hl-2070n auto
SEQ(SP=C3-CD%GCD=1-6%ISR=D6-E0%TI=I%CI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4%O2=M578%O3=M280%O4=M200%O5=M218%O6=M109)
WIN(W1=111C%W2=111C%W3=111C%W4=111C%W5=111C%W6=111C)
ECN(R=Y%DF=N%T=6F%TG=80%W=111C%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=6F%TG=80%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=6F%TG=80%W=111C%S=O%A=S+%F=AS%O=M109%RD=0%Q=)
T4(R=Y%DF=N%T=6F%TG=80%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=6F%TG=80%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=6F%TG=80%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=6F%TG=80%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=6F%TG=80%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=8390%RUD=G)
IE(DFI=N%T=6F%TG=80%CD=Z)

# Brother HL-2070N printer (node type Brother NC-6200h, firmware version 1.33 2006-07-21)
Fingerprint Brother HL-2070N printer
Class Brother | embedded || printer
CPE cpe:/h:brother:hl-2070n auto
SEQ(SP=F8-102%GCD=1-6%ISR=F0-FA%TI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4%O2=M578%O3=M280%O4=M200%O5=M218%O6=M109)
WIN(W1=111C%W2=111C%W3=111C%W4=111C%W5=111C%W6=111C)
ECN(R=Y%DF=N%T=76%TG=80%W=111C%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=76%TG=80%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=76%TG=80%W=111C%S=O%A=S+%F=AS%O=M109%RD=0%Q=)
T4(R=Y%DF=N%T=76%TG=80%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=76%TG=80%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=76%TG=80%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=76%TG=80%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=76%TG=80%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUD=G)
IE(DFI=N%T=76%TG=80%CD=Z)

# it is a brother HL-2070N network laster printer
Fingerprint Brother HL-2070N printer
Class Brother | embedded || printer
CPE cpe:/h:brother:hl-2070n auto
SEQ(SP=C6-D0%GCD=1-6%ISR=D5-DF%TI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4%O2=M578%O3=M280%O4=M200%O5=M218%O6=M109)
WIN(W1=111C%W2=111C%W3=111C%W4=111C%W5=111C%W6=111C)
ECN(R=Y%DF=N%T=74%TG=80%W=111C%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=74%TG=80%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=74%TG=80%W=111C%S=O%A=S+%F=AS%O=M109%RD=0%Q=)
T4(R=Y%DF=N%T=74%TG=80%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=74%TG=80%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=74%TG=80%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=74%TG=80%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=74%TG=80%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUD=G)
IE(DFI=N%T=74%TG=80%CD=Z)

# Brother HL-2070N Printer
Fingerprint Brother HL-2070N printer
Class Brother | embedded || printer
CPE cpe:/h:brother:hl-2070n auto
SEQ(SP=F8-102%GCD=1-6%ISR=EF-F9%TI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4%O2=M578%O3=M280%O4=M200%O5=M218%O6=M109)
WIN(W1=111C%W2=111C%W3=111C%W4=111C%W5=111C%W6=111C)
ECN(R=Y%DF=N%T=70%TG=80%W=111C%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=70%TG=80%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=70%TG=80%W=111C%S=O%A=S+%F=AS%O=M109%RD=0%Q=)
T4(R=Y%DF=N%T=70%TG=80%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=70%TG=80%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=70%TG=80%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=70%TG=80%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=70%TG=80%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUD=G)
IE(DFI=N%T=70%TG=80%CD=Z)

# Brother laser printer HL-2070N
Fingerprint Brother HL-2070N printer
Class Brother | embedded || printer
CPE cpe:/h:brother:hl-2070n auto
SEQ(SP=C8-D2%GCD=1-6%ISR=D7-E1%TI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4%O2=M578%O3=M280%O4=M200%O5=M218%O6=M109)
WIN(W1=111C%W2=111C%W3=111C%W4=111C%W5=111C%W6=111C)
ECN(R=Y%DF=N%T=78%TG=80%W=111C%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=78%TG=80%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=78%TG=80%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=78%TG=80%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=78%TG=80%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=N)
U1(DF=N%T=78%TG=80%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUD=G)
IE(DFI=N%T=78%TG=80%CD=Z)

# HL 2070N, Printer Firmware Version 1.38, Network Firmware Version 1.38
Fingerprint Brother HL-2070N printer
Class Brother | embedded || printer
CPE cpe:/h:brother:hl-2070n auto
SEQ(SP=D1-DB%GCD=1-6%ISR=D5-DF%TI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4%O2=M578%O3=M280%O4=M200%O5=M218%O6=M109)
WIN(W1=111C%W2=111C%W3=111C%W4=111C%W5=111C%W6=111C)
ECN(R=Y%DF=N%T=73%TG=80%W=111C%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=73%TG=80%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=73%TG=80%W=111C%S=O%A=S+%F=AS%O=M109%RD=0%Q=)
T4(R=Y%DF=N%T=73%TG=80%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=73%TG=80%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=73%TG=80%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=73%TG=80%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=73%TG=80%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUD=G)
IE(DFI=N%T=73%TG=80%CD=Z)

# Brother HL-2070N
Fingerprint Brother HL-2070N printer
Class Brother | embedded || printer
CPE cpe:/h:brother:hl-2070n auto
SEQ(SP=C9-DF%GCD=1-6%ISR=D5-DF%TI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4%O2=M578%O3=M280%O4=M200%O5=M218%O6=M109)
WIN(W1=111C%W2=111C%W3=111C%W4=111C%W5=111C%W6=111C)
ECN(R=Y%DF=N%T=71-7B%TG=80%W=111C%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=76%TG=80%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=76%TG=80%W=111C%S=O%A=S+%F=AS%O=M109%RD=0%Q=)
T4(R=Y%DF=N%T=76%TG=80%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=76%TG=80%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=76%TG=80%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=76%TG=80%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=76%TG=80%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUD=G)
IE(DFI=N%T=76%TG=80%CD=Z)

# Brother 2070N
Fingerprint Brother HL-2070N printer
Class Brother | embedded || printer
CPE cpe:/h:brother:hl-2070n auto
SEQ(SP=C5-CF%GCD=1-6%ISR=D6-E0%TI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4%O2=M578%O3=M280%O4=M200%O5=M218%O6=M109)
WIN(W1=111C%W2=111C%W3=111C%W4=111C%W5=111C%W6=111C)
ECN(R=Y%DF=N%T=72%TG=80%W=111C%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=72%TG=80%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=72%TG=80%W=111C%S=O%A=S+%F=AS%O=M109%RD=0%Q=)
T4(R=Y%DF=N%T=72%TG=80%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=72%TG=80%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=72%TG=80%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=72%TG=80%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=72%TG=80%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUD=G)
IE(DFI=N%T=72%TG=80%CD=Z)

# Brother HL-2070N series, Firmware Version 1.33
Fingerprint Brother HL-2070N printer
Class Brother | embedded || printer
CPE cpe:/h:brother:hl-2070n auto
SEQ(SP=D1-DB%GCD=1-6%ISR=D5-DF%TI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4%O2=M578%O3=M280%O4=M200%O5=M218%O6=M109)
WIN(W1=111C%W2=111C%W3=111C%W4=111C%W5=111C%W6=111C)
ECN(R=Y%DF=N%T=74%TG=80%W=111C%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=74%TG=80%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=74%TG=80%W=111C%S=O%A=S+%F=AS%O=M109%RD=0%Q=)
T4(R=Y%DF=N%T=74%TG=80%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=74%TG=80%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=74%TG=80%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=74%TG=80%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=74%TG=80%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUD=G)
IE(DFI=N%T=74%TG=80%CD=Z)

# Brother HL-2070N Laser Printer
Fingerprint Brother HL-2070N printer
Class Brother | embedded || printer
CPE cpe:/h:brother:hl-2070n auto
SEQ(SP=F8-102%GCD=1-6%ISR=F0-FA%TI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4%O2=M578%O3=M280%O4=M200%O5=M218%O6=M109)
WIN(W1=111C%W2=111C%W3=111C%W4=111C%W5=111C%W6=111C)
ECN(R=Y%DF=N%T=79%TG=80%W=111C%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=79%TG=80%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=79%TG=80%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=79%TG=80%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=79%TG=80%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=N)
U1(DF=N%T=79%TG=80%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=1615%RUD=G)
IE(DFI=N%T=79%TG=80%CD=Z)

# Brother HL-2070N
Fingerprint Brother HL-2070N printer
Class Brother | embedded || printer
CPE cpe:/h:brother:hl-2070n auto
SEQ(SP=CA-D4%GCD=1-6%ISR=D5-DF%TI=I%CI=I%II=I%SS=S%TS=U)
OPS(R=N)
WIN(R=N)
ECN(R=N)
T1(R=Y%DF=N%T=71%TG=80%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=71%TG=80%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=71%TG=80%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=71%TG=80%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=71%TG=80%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=71%TG=80%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=1932%RUD=G)
IE(DFI=N%T=71%TG=80%CD=Z)

# Brother HL-2250DN, Device Firmware 1.10, Network Firmware 1.06
Fingerprint Brother HL-2250DN printer
Class Brother | embedded || printer
CPE cpe:/h:brother:hl-2250dn
SEQ(SP=F-3D%GCD=1E848|3D090|5B8D8|7A120|98968%ISR=A0-B6%TI=I|RD%CI=I%II=I%SS=O%TS=A|C)
OPS(O1=M5B4NW0NNSNNT11%O2=M578NW0NNSNNT11%O3=M280NW0NNT11%O4=M5B4NW0NNSNNT11%O5=%O6=)
WIN(W1=21F0%W2=2088%W3=2258%W4=21F0%W5=0%W6=0)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=0%O=%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=O%F=AR%O=%RD=0%Q=)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=FA-104%TG=FF%CD=S)

# Brother HL-2270DW wired network interface.
Fingerprint Brother HL-2270DW printer
Class Brother | embedded || printer
CPE cpe:/h:brother:hl-2270dw auto
SEQ(SP=0-31%GCD=30D4|61A8|927C|C350|F424|1E848|3D090|5B8D8|7A120|98968%ISR=9F-A9%TI=I%CI=I%II=I%SS=S%TS=A)
OPS(O1=M5B4NW0NNSNNT11%O2=M578NW0NNSNNT11%O3=M280NW0NNT11%O4=M5B4NW0NNSNNT11%O5=M218NW0NNSNNT11%O6=M109NNSNNT11)
WIN(W1=21F0%W2=2088%W3=2258%W4=21F0%W5=20C0%W6=209D)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=2238%O=M5B4NW0NNS%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=3B-45%TG=40%W=209D%S=O%A=O%F=A%O=M109NW0NNSNNT11%RD=0%Q=)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=FA-104%TG=FF%CD=S)

# Brother HL-22270DW Printer Firmware Version : 1.16
Fingerprint Brother HL-2270DW printer
Class Brother | embedded || printer
CPE cpe:/h:brother:hl-2270dw auto
SEQ(SP=E-18%GCD=1E848|3D090|5B8D8|7A120|98968%ISR=A0-AA%TI=I%CI=I%II=I%SS=O%TS=A)
OPS(O1=M5B4NW0NNSNNT11%O2=M578NW0NNSNNT11%O3=M280NW0NNT11%O4=M5B4NW0NNSNNT11%O5=M218NW0NNSNNT11%O6=)
WIN(W1=21F0%W2=2088%W3=2258%W4=21F0%W5=20C0%W6=0)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=0%O=%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=O%F=AR%O=%RD=0%Q=)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=FA-104%TG=FF%CD=S)

# Brother HL-2700CN printer
Fingerprint Brother HL-2700CN printer
Class Brother | embedded || printer
CPE cpe:/h:brother:hl-2700cn auto
SEQ(SP=D1-DB%GCD=1-6%ISR=D7-E1%TI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4%O2=M578%O3=M200%O4=M5B4%O5=M5B4%O6=M5B4)
WIN(W1=1000%W2=1000%W3=1000%W4=1000%W5=1000%W6=1000)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=1000%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=3B-45%TG=40%W=1000%S=O%A=S+%F=AS%O=M109%RD=0%Q=)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(R=N)
IE(DFI=N%T=3B-45%TG=40%CD=Z)

# MFC-495CW Printer
Fingerprint Brother HL-495CW printer
Class Brother | embedded || printer
CPE cpe:/h:brother:hl-495cw auto
SEQ(SP=C-16%GCD=1E848|3D090|5B8D8|7A120|98968%ISR=9F-A9%TI=I%CI=I%II=I%SS=S%TS=A)
OPS(O1=M5B4NW0NNSNNT11%O2=M578NW0NNSNNT11%O3=M280NW0NNT11%O4=M5B4NW0NNSNNT11%O5=M218NW0NNSNNT11%O6=M109NNSNNT11)
WIN(W1=21F0%W2=2088%W3=2258%W4=21F0%W5=20C0%W6=209D)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=2238%O=M5B4NW0NNS%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=3B-45%TG=40%W=209D%S=O%A=S+%F=AS%O=M109NW0NNSNNT11%RD=0%Q=)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=N)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=FA-104%TG=FF%CD=S)

# Brother HL-5070N printer
Fingerprint Brother HL-5070N printer
Class Brother | embedded || printer
CPE cpe:/h:brother:hl-5070n auto
SEQ(SP=CC-D6%GCD=1-6%ISR=D6-E0%TI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4%O2=M578%O3=M200%O4=M5B4%O5=M5B4%O6=M5B4)
WIN(W1=1000%W2=1000%W3=1000%W4=1000%W5=1000%W6=1000)
ECN(R=Y%DF=N%T=70-7A%TG=80%W=1000%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=70-7A%TG=80%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=70-7A%TG=80%W=1000%S=O%A=S+%F=AS%O=M109%RD=0%Q=)
T4(R=Y%DF=N%T=70-7A%TG=80%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=70-7A%TG=80%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=70-7A%TG=80%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=70-7A%TG=80%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=70-7A%TG=80%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUD=G)
IE(DFI=N%T=70-7A%TG=80%CD=Z)

# Printer Model 5070N by Brother Industries, Ltd.
Fingerprint Brother HL-5070N printer
Class Brother | embedded || printer
CPE cpe:/h:brother:hl-5070n auto
SEQ(SP=D1-DB%GCD=1-6%ISR=D6-E0%TI=I%CI=I%II=I%SS=S%TS=U)
OPS(R=N)
WIN(R=N)
ECN(R=N)
T1(R=Y%DF=N%T=75%TG=80%S=O%A=O|S+%F=A|AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=75%TG=80%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=75%TG=80%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=75%TG=80%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=75%TG=80%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=75%TG=80%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUD=G)
IE(DFI=N%T=75%TG=80%CD=Z)

# Brother HL-5170DN printer, firmware 1.11
Fingerprint Brother HL-5170DN printer
Class Brother | embedded || printer
CPE cpe:/h:brother:hl-5170dn auto
SEQ(SP=C8-D2%GCD=1-6%ISR=D7-E1%TI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4%O2=M578%O3=M200%O4=M5B4%O5=M5B4%O6=M5B4)
WIN(W1=1000%W2=1000%W3=1000%W4=1000%W5=1000%W6=1000)
ECN(R=Y%DF=N%T=75%TG=80%W=1000%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=75%TG=80%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=75%TG=80%W=1000%S=O%A=S+%F=AS%O=M109%RD=0%Q=)
T4(R=Y%DF=N%T=75%TG=80%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=75%TG=80%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=75%TG=80%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=75%TG=80%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=75%TG=80%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=859E%RUD=G)
IE(DFI=N%T=75%TG=80%CD=Z)

# Brother HL-5170DN printer, firmware 1.50
Fingerprint Brother HL-5170DN printer
Class Brother | embedded || printer
CPE cpe:/h:brother:hl-5170dn auto
SEQ(SP=C2-CC%GCD=1-6%ISR=D5-DF%TI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4%O2=M578%O3=M200%O4=M5B4%O5=M5B4%O6=M5B4)
WIN(W1=1000%W2=1000%W3=1000%W4=1000%W5=1000%W6=1000)
ECN(R=Y%DF=N%T=75%TG=80%W=1000%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=75%TG=80%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=75%TG=80%W=1000%S=O%A=S+%F=AS%O=M109%RD=0%Q=)
T4(R=Y%DF=N%T=75%TG=80%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=75%TG=80%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=75%TG=80%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=75%TG=80%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=75%TG=80%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=8582%RUD=G)
IE(DFI=N%T=75%TG=80%CD=Z)

# Brother HL-5170DN Network-Ready Laser Printer with Duplex.
Fingerprint Brother HL-5170DN printer
Class Brother | embedded || printer
CPE cpe:/h:brother:hl-5170dn auto
SEQ(SP=C8-D2%GCD=1-6%ISR=D7-E1%TI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4%O2=M578%O3=M200%O4=M5B4%O5=M5B4%O6=M5B4)
WIN(W1=1000%W2=1000%W3=1000%W4=1000%W5=1000%W6=1000)
ECN(R=Y%DF=N%T=76%TG=80%W=1000%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=76%TG=80%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=76%TG=80%W=1000%S=O%A=S+%F=AS%O=M109%RD=0%Q=)
T4(R=Y%DF=N%T=76%TG=80%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=76%TG=80%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=76%TG=80%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=76%TG=80%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=76%TG=80%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=8582%RUD=G)
IE(DFI=N%T=76%TG=80%CD=Z)

# Brother HL-5170DN
Fingerprint Brother HL-5170DN printer
Class Brother | embedded || printer
CPE cpe:/h:brother:hl-5170dn auto
SEQ(SP=F8-102%GCD=1-6%ISR=F1-FB%TI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4%O2=M578%O3=M200%O4=M5B4%O5=M5B4%O6=M5B4)
WIN(W1=1000%W2=1000%W3=1000%W4=1000%W5=1000%W6=1000)
ECN(R=Y%DF=N%T=75%TG=80%W=1000%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=75%TG=80%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=75%TG=80%W=1000%S=O%A=S+%F=AS%O=M109%RD=0%Q=)
T4(R=Y%DF=N%T=75%TG=80%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=75%TG=80%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=75%TG=80%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=75%TG=80%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=75%TG=80%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=8582%RUD=G)
IE(DFI=N%T=75%TG=80%CD=Z)

# Brother HL-5170DN printer
Fingerprint Brother HL-5170DN printer
Class Brother | embedded || printer
CPE cpe:/h:brother:hl-5170dn auto
SEQ(SP=C5-D7%GCD=1-6%ISR=D4-DE%TI=I%II=I%SS=S%TS=U)
OPS(O1=|M5B4%O2=M578%O3=M200%O4=M5B4%O5=M5B4%O6=M5B4)
WIN(W1=1000%W2=1000%W3=1000%W4=1000%W5=1000%W6=1000)
ECN(R=Y%DF=N%T=71%TG=80%W=1000%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=71%TG=80%S=O%A=S+%F=A|AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=71%TG=80%W=1000%S=O%A=S+%F=AS%O=M109%RD=0%Q=)
T4(R=Y%DF=N%T=71%TG=80%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=71%TG=80%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=71%TG=80%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=71%TG=80%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=71%TG=80%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=8563%RUD=G)
IE(DFI=N%T=71%TG=80%CD=Z)

# Brother DCP-8065DN DCP  Firmware Version    Q NIC  Firmware Version    1.15
# Brother HL-5250DN Printer Firmware Version        1.19
Fingerprint Brother HL-5250DN or DCP-8065D printer
Class Brother | embedded || printer
CPE cpe:/h:brother:hl-5250dn
CPE cpe:/h:brother:dcp-8065d
SEQ(SP=E-18%GCD=1E848|3D090|5B8D8|7A120|98968%ISR=A0-AA%TI=I%CI=I%II=I%SS=S%TS=A)
OPS(O1=M5B4NW0NNSNNT11%O2=M578NW0NNSNNT11%O3=M280NW0NNT11%O4=M5B4NW0NNSNNT11%O5=M218NW0NNSNNT11)
WIN(W1=21F0%W2=2088%W3=2258%W4=21F0%W5=20C0%W6=0)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=0%CC=N)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%RD=0)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%RD=0)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%RD=0)
T7(R=N)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=FA-104%TG=FF%CD=S)

# Brother HL-5250DN Series Printer
Fingerprint Brother HL-5250DN printer
Class Brother | embedded || printer
CPE cpe:/h:brother:hl-5250dn auto
SEQ(SP=9-13%GCD=1E848|3D090|5B8D8|7A120|98968%ISR=9F-A9%TI=I%CI=I%II=I%SS=S%TS=A)
OPS(O1=M5B4NW0NNSNNT11%O2=M578NW0NNSNNT11%O3=M280NW0NNT11%O4=M5B4NW0NNSNNT11%O5=M218NW0NNSNNT11%O6=M109NNSNNT11)
WIN(W1=21F0%W2=2088%W3=2258%W4=21F0%W5=20C0%W6=209D)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=0%O=%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=O%F=AR%O=%RD=0%Q=)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=FA-104%TG=FF%CD=S)

# 5250DN Printer running Network Firmware Version : 1.11
Fingerprint Brother HL-5250DN printer
Class Brother | embedded || printer
CPE cpe:/h:brother:hl-5250dn auto
SEQ(SP=C-16%GCD=1E848|3D090|5B8D8|7A120|98968%ISR=9F-A9%TI=I%II=I%SS=S%TS=A)
OPS(O1=M554NW0NNSNNT11%O2=M554NW0NNSNNT11%O3=M280NW0NNT11%O4=M554NW0NNSNNT11%O5=M218NW0NNSNNT11%O6=M109NNSNNT11)
WIN(W1=24F8%W2=24F8%W3=2258%W4=21F0%W5=20C0%W6=209D)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=254C%O=M554NW0NNS%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=N)
T7(R=N)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=FA-104%TG=FF%CD=S)

# Brother MFC-7840W
# Brother HL-5370DW Printer
Fingerprint Brother HL-5370DW or MFC-7840W printer
Class Brother | embedded || printer
SEQ(SP=E-18%GCD=1E848|3D090|5B8D8|7A120|98968%ISR=9F-A9%TI=I%CI=I%II=I%SS=S%TS=A)
OPS(O1=M5B4NW0NNSNNT11%O2=M578NW0NNSNNT11%O3=M280NW0NNT11%O4=M5B4NW0NNSNNT11%O5=M218NW0NNSNNT11%O6=)
WIN(W1=21F0%W2=2088%W3=2258%W4=21F0%W5=20C0%W6=0)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=0%O=%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=O%F=AR%O=%RD=0%Q=)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=FA-104%TG=FF%CD=S)

# brother hl-5380dn Firmware Version : 1.18
Fingerprint Brother HL-5380dn printer
Class Brother | embedded || printer
CPE cpe:/h:brother:hl-5380dn auto
SEQ(SP=B-15%GCD=1E848|3D090|5B8D8|7A120|98968%ISR=9E-A8%TI=I%CI=I%II=I%SS=S%TS=A)
OPS(O1=M580NW0NNSNNT11%O2=M578NW0NNSNNT11%O3=M280NW0NNT11%O4=M580NW0NNSNNT11%O5=M218NW0NNSNNT11%O6=M109NNSNNT11)
WIN(W1=20B8%W2=2088%W3=2258%W4=21F0%W5=20C0%W6=209D)
ECN(R=Y%DF=Y%T=3A-44%TG=40%W=2100%O=M580NW0NNS%CC=N%Q=)
T1(R=Y%DF=Y%T=3A-44%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%T=3A-44%TG=40%W=209D%S=O%A=S+%F=AS%O=M109NW0NNSNNT11%RD=0%Q=)
T4(R=Y%DF=N%T=3A-44%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3A-44%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3A-44%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3A-44%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=F9-103%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=F9-103%TG=FF%CD=S)

# Brother Multifunction Printer, model MFC-420CN
# Brother MFC-420CN
Fingerprint Brother MFC-420CN printer
Class Brother | embedded || printer
CPE cpe:/h:brother:mfc-420cn auto
SEQ(SP=D0-DA%GCD=1-6%ISR=D5-DF%TI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4%O2=M578%O3=M280%O4=M200%O5=M218%O6=M109)
WIN(W1=1000%W2=1000%W3=1000%W4=1000%W5=1000%W6=1000)
ECN(R=Y%DF=N%T=70|72%TG=80%W=1000%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=70|72%TG=80%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=70|72%TG=80%W=1000%S=O%A=S+%F=AS%O=M109%RD=0%Q=)
T4(R=Y%DF=N%T=70|72%TG=80%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=70|72%TG=80%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=70|72%TG=80%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=70|72%TG=80%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=70|72%TG=80%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUD=G)
IE(DFI=N%T=70|72%TG=80%CD=Z)

# Brother MFC-420CN
Fingerprint Brother MFC-420CN printer
Class Brother | embedded || printer
CPE cpe:/h:brother:mfc-420cn auto
SEQ(SP=CC-D6%GCD=1-6%ISR=D5-DF%TI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4%O2=M578%O3=M280%O4=M200%O5=M218%O6=M109)
WIN(W1=1000%W2=1000%W3=1000%W4=1000%W5=1000%W6=1000)
ECN(R=Y%DF=N%T=7B-7D%TG=80%W=1000%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=7B-7D%TG=80%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=Y%DF=N%T=7B-7D%TG=80%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=N)
T7(R=N)
U1(DF=N%T=7B-7D%TG=80%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=84B3%RUD=G)
IE(DFI=N%T=7B-7D%TG=80%CD=Z)

# Brother MFC425CN
Fingerprint Brother MFC-425CN printer
Class Brother | embedded || printer
CPE cpe:/h:brother:mfc-425cn auto
SEQ(SP=CF-D9%GCD=1-6%ISR=D8-E2%TI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4%O2=M578%O3=M280%O4=M200%O5=M218%O6=M109)
WIN(W1=111C%W2=111C%W3=111C%W4=111C%W5=111C%W6=111C)
ECN(R=Y%DF=N%T=74%TG=80%W=111C%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=74%TG=80%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=74%TG=80%W=111C%S=O%A=S+%F=AS%O=M109%RD=0%Q=)
T4(R=Y%DF=N%T=74%TG=80%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=74%TG=80%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=74%TG=80%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=74%TG=80%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=74%TG=80%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUD=G)
IE(DFI=N%T=74%TG=80%CD=Z)

# Brother MFC-5840CN Multi-Function Center (print, scan, copy, fax)
Fingerprint Brother MFC-5840CN printer
Class Brother | embedded || printer
CPE cpe:/h:brother:mfc-5840cn auto
SEQ(SP=D1-DB%GCD=1-6%ISR=D7-E1%TI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4%O2=M578%O3=M280%O4=M200%O5=M218%O6=M109)
WIN(W1=1000%W2=1000%W3=1000%W4=1000%W5=1000%W6=1000)
ECN(R=Y%DF=N%T=74%TG=80%W=1000%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=74%TG=80%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=74%TG=80%W=1000%S=O%A=S+%F=AS%O=M109%RD=0%Q=)
T4(R=Y%DF=N%T=74%TG=80%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=74%TG=80%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=74%TG=80%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=74%TG=80%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=74%TG=80%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUD=G)
IE(DFI=N%T=74%TG=80%CD=Z)

# Brother MFC-5860CN, F/W version = "E"
Fingerprint Brother MFC-5860CN printer
Class Brother | embedded || printer
CPE cpe:/h:brother:mfc-5860cn auto
SEQ(SP=C7-D1%GCD=1-6%ISR=D7-E1%TI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4%O2=M578%O3=M280%O4=M200%O5=M218%O6=M109)
WIN(W1=111C%W2=111C%W3=111C%W4=111C%W5=111C%W6=111C)
ECN(R=Y%DF=N%T=70%TG=80%W=111C%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=70%TG=80%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=70%TG=80%W=111C%S=O%A=S+%F=AS%O=M109%RD=0%Q=)
T4(R=Y%DF=N%T=70%TG=80%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=70%TG=80%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=70%TG=80%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=70%TG=80%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=70%TG=80%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUD=G)
IE(DFI=N%T=70%TG=80%CD=Z)

# Brother MFC-640CW (via 802.11g)
# Sony Bravia KDL 40W5800 LDC-TV
Fingerprint Brother MFC-640CW printer
Class Brother | embedded || printer
CPE cpe:/h:brother:mfc-640cw auto
SEQ(SP=CF-D9%GCD=1-6%ISR=D7-E1%TI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4%O2=M578%O3=M280%O4=M200%O5=M218%O6=M109)
WIN(W1=111C%W2=111C%W3=111C%W4=111C%W5=111C%W6=111C)
ECN(R=Y%DF=N%T=7B%TG=80%W=111C%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=7B%TG=80%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=7B%TG=80%W=111C%S=O%A=S+%F=AS%O=M109%RD=0%Q=)
T4(R=Y%DF=N%T=7B%TG=80%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=7B%TG=80%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=7B%TG=80%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=7B%TG=80%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=7B%TG=80%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUD=G)
IE(DFI=N%T=7B%TG=80%CD=Z)

# Brother MFC-7820N
# Brother MFC9420CN printer/fax/scanner
Fingerprint Brother MFC-7820N or MFC-9420CN printer
Class Brother | embedded || printer
CPE cpe:/h:brother:mfc-7820n
CPE cpe:/h:brother:mfc-9420n
SEQ(SP=BE-D4%GCD=1-6%ISR=D5-DF%TI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4%O2=M578%O3=M280%O4=M200%O5=M218%O6=M109)
WIN(W1=1000%W2=1000%W3=1000%W4=1000%W5=1000%W6=1000)
ECN(R=Y%DF=N%T=71%TG=40|80%W=1000%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=71%TG=40|80%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=71%TG=40|80%W=1000%S=O%A=S+%F=AS%O=M109%RD=0%Q=)
T4(R=Y%DF=N%T=71%TG=40|80%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=71%TG=40|80%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=71%TG=40|80%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=71%TG=40|80%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=71%TG=40|80%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUD=G)
IE(DFI=N%T=71%TG=40|80%CD=Z)

# Brother MFC-7820N
Fingerprint Brother MFC-7820N printer
Class Brother | embedded || printer
CPE cpe:/h:brother:mfc-7820n auto
SEQ(SP=CB-D5%GCD=1-6%ISR=D5-DF%TI=I%II=I%SS=S%TS=U)
OPS(R=N)
WIN(R=N)
ECN(R=N)
T1(R=Y%DF=N%T=3B-45|7B-85%TG=40|80%S=O%A=S+%F=A|AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(R=N)
IE(DFI=N%T=3B-45%TG=40%CD=Z)

# Brother MFC-7820N
Fingerprint Brother MFC-7820N printer
Class Brother | embedded || printer
CPE cpe:/h:brother:mfc-7820n auto
SEQ(SP=CB-D5%GCD=1-6%ISR=D4-DE%TI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4%O2=M578%O3=M280%O4=M200%O5=M218%O6=M109)
WIN(W1=1000%W2=1000%W3=1000%W4=1000%W5=1000%W6=1000)
ECN(R=Y%DF=N%T=7C%TG=80%W=1000%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=7C%TG=80%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=7C%TG=80%W=1000%S=O%A=S+%F=AS%O=M109%RD=0%Q=)
T4(R=Y%DF=N%T=7C%TG=80%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=7C%TG=80%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=7C%TG=80%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=7C%TG=80%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=7C%TG=80%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUD=G)
IE(DFI=N%T=7C%TG=80%CD=Z)

# Brother MFC-7820N all-in-one laser printer (NC-6200h firmware version K)
Fingerprint Brother MFC-7820N printer
Class Brother | embedded || printer
CPE cpe:/h:brother:mfc-7820n auto
SEQ(SP=CC-D6%GCD=1-6%ISR=D5-DF%TI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4%O2=M578%O3=M280%O4=M200%O5=M218%O6=M109)
WIN(W1=1000%W2=1000%W3=1000%W4=1000%W5=1000%W6=1000)
ECN(R=Y%DF=N%T=7C%TG=80%W=1000%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=7C%TG=80%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=7C%TG=80%W=1000%S=O%A=S+%F=AS%O=M109%RD=0%Q=)
T4(R=Y%DF=N%T=7C%TG=80%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=7C%TG=80%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=7C%TG=80%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=7C%TG=80%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=7C%TG=80%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUD=G)
IE(DFI=N%T=7C%TG=80%CD=Z)

# Brother MFC-7820N
Fingerprint Brother MFC-7820N printer
Class Brother | embedded || printer
CPE cpe:/h:brother:mfc-7820n auto
SEQ(SP=D1-DB%GCD=1-6%ISR=D4-DE%TI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4%O2=M578%O3=M280%O4=M200%O5=M218%O6=M109)
WIN(W1=1000%W2=1000%W3=1000%W4=1000%W5=1000%W6=1000)
ECN(R=Y%DF=N%T=75%TG=80%W=1000%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=75%TG=80%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=75%TG=80%W=1000%S=O%A=S+%F=AS%O=M109%RD=0%Q=)
T4(R=Y%DF=N%T=75%TG=80%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=75%TG=80%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=75%TG=80%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=75%TG=80%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=75%TG=80%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUD=G)
IE(DFI=N%T=75%TG=80%CD=Z)

# Brother MFC-7820N, MFC Firmware Version E
Fingerprint Brother MFC-7820N printer
Class Brother | embedded || printer
CPE cpe:/h:brother:mfc-7820n auto
SEQ(SP=C8-D8%GCD=1-6%ISR=D3-DD%TI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4%O2=M578%O3=M280%O4=M200%O5=M218%O6=M109)
WIN(W1=1000%W2=1000%W3=1000%W4=1000%W5=1000%W6=1000)
ECN(R=Y%DF=N%T=79%TG=80%W=1000%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=79%TG=80%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=79%TG=80%W=1000%S=O%A=S+%F=AS%O=M109%RD=0%Q=)
T4(R=Y%DF=N%T=79%TG=80%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=79%TG=80%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=79%TG=80%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=79%TG=80%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=79%TG=80%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUD=G)
IE(DFI=N%T=79%TG=80%CD=Z)

# Brother MFC-7820N
Fingerprint Brother MFC-7820N printer
Class Brother | embedded || printer
CPE cpe:/h:brother:mfc-7820n auto
SEQ(SP=C3-CD%GCD=1-6%ISR=D2-DC%TI=I%CI=I%II=I%SS=S%TS=U)
OPS(R=N)
WIN(R=N)
ECN(R=N)
T1(R=Y%DF=N%T=79%TG=80%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=79%TG=80%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=79%TG=80%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=79%TG=80%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=79%TG=80%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=79%TG=80%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUD=G)
IE(DFI=N%T=79%TG=80%CD=Z)

# Brother MFC-7820N
Fingerprint Brother MFC-7820N printer
Class Brother | embedded || printer
CPE cpe:/h:brother:mfc-7820n auto
SEQ(CI=I%II=I)
OPS(R=N)
WIN(R=N)
ECN(R=N)
T1(R=N)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=6B-75%TG=80%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=6B-75%TG=80%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=6B-75%TG=80%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=6B-75%TG=80%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=6B-75%TG=80%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUD=G)
IE(DFI=N%T=6B-75%TG=80%CD=Z)

# Brother MFC-7820N
Fingerprint Brother MFC-7820N printer
Class Brother | embedded || printer
CPE cpe:/h:brother:mfc-7820n auto
SEQ(SP=F9-103%GCD=1-6%ISR=F1-FB%TI=I%CI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4%O2=M578%O3=M280%O4=M200%O5=M218%O6=M109)
WIN(W1=1000%W2=1000%W3=1000%W4=1000%W5=1000%W6=1000)
ECN(R=Y%DF=N%T=75%TG=80%W=1000%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=75%TG=80%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=75%TG=80%W=1000%S=O%A=S+%F=AS%O=M109%RD=0%Q=)
T4(R=Y%DF=N%T=75%TG=80%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=75%TG=80%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=75%TG=80%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=75%TG=80%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=75%TG=80%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUD=G)
IE(DFI=N%T=75%TG=80%CD=Z)

# Brother HL-2070N series
Fingerprint Brother MFC-7820N printer
Class Brother | embedded || printer
CPE cpe:/h:brother:mfc-7820n auto
SEQ(SP=A4-102%GCD=1-6%ISR=C4-FA%TI=I%CI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4%O2=M578%O3=M280%O4=M200%O5=M218%O6=M109)
WIN(W1=111C%W2=111C%W3=111C%W4=111C%W5=111C%W6=111C)
ECN(R=Y%DF=N%T=7A%TG=80%W=111C%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=7A%TG=80%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=7A%TG=80%W=111C%S=O%A=S+%F=AS%O=M109%RD=0%Q=)
T4(R=Y%DF=N%T=7A%TG=80%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=7A%TG=80%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=7A%TG=80%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=7A%TG=80%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=7A%TG=80%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUD=G)
IE(DFI=N%T=7A%TG=80%CD=Z)

# Ricoh SF210C Color Laser Printer
# Brother MFC-7820N
Fingerprint Brother MFC-7820N printer
Class Brother | embedded || printer
CPE cpe:/h:brother:mfc-7820n auto
SEQ(SP=F9-103%GCD=1-6%ISR=F1-FB%TI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4%O2=M578%O3=M280%O4=M200%O5=M218%O6=M109)
WIN(W1=1000%W2=1000%W3=1000%W4=1000%W5=1000%W6=1000)
ECN(R=Y%DF=N%T=76-80%TG=80%W=1000%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=76-80%TG=80%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=76-80%TG=80%W=1000%S=O%A=S+%F=AS%O=M109%RD=0%Q=)
T4(R=Y%DF=N%T=76-80%TG=80%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=76-80%TG=80%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=76-80%TG=80%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=76-80%TG=80%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=76-80%TG=80%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=1-FFFF%RUD=G)
IE(DFI=N%T=76-80%TG=80%CD=Z)

# HP LaserJet 3055 printer, firmware date 20060117
# HP Color LaserJet 2600n
# HP LaserJet P2015 Series
# Sony Network Camerea model SNC-Z20N
# Brother MFC-8460N
Fingerprint Brother MFC-8460N or HP LaserJet P2015, 2600n, or 3055 printer; or Sony SNC-Z20N network camera
Class Brother | embedded || printer
Class HP | embedded || printer
Class Sony | embedded || webcam
SEQ(SP=B-15%GCD=1E848|3D090|5B8D8|7A120|98968%ISR=9E-A8%TI=I%II=I%SS=S%TS=A)
OPS(O1=M5B4NW0NNSNNT11%O2=M578NW0NNSNNT11%O3=M280NW0NNT11%O4=M5B4NW0NNSNNT11%O5=M218NW0NNSNNT11%O6=M109NNSNNT11)
WIN(W1=21F0%W2=2088%W3=2258%W4=21F0%W5=20C0%W6=209D)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=2238%O=M5B4NW0NNS%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=209D%S=O%A=O|S+%F=A|AS%O=NNT11|M109NW0NNSNNT11%RD=0%Q=)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=FA-104%TG=FF%CD=S)

# brother MFC-8480DN
Fingerprint Brother MFC-8480DN printer
Class Brother | embedded || printer
CPE cpe:/h:brother:mfc-8480dn auto
SEQ(SP=C-16%GCD=1E848|3D090|5B8D8|7A120|98968%ISR=9F-A9%TI=RD%II=I%TS=A)
OPS(O1=M564NW0NNST11LL%O2=M564NW0NNST11LL%O3=M280NW0T11LL%O4=M564NW0NNST11LL%O5=M218NW0NNST11LL%O6=M109NNST11LL)
WIN(W1=2010%W2=2010%W3=2258%W4=21F0%W5=20C0%W6=209D)
ECN(R=Y%DF=Y%T=3A-44%TG=40%W=2058%O=M564NW0NNS%CC=N%Q=)
T1(R=Y%DF=Y%T=3A-44%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=Y%DF=N%T=3A-44%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=N)
T7(R=N)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=FA-104%TG=FF%CD=S)

# Brother MFC-9420CN
Fingerprint Brother MFC-9420CN printer
Class Brother | embedded || printer
CPE cpe:/h:brother:mfc-9420cn auto
SEQ(SP=C1-CB%GCD=1-6%ISR=D5-DF%TI=I%CI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4%O2=M578%O3=M280%O4=M200%O5=M218%O6=M109)
WIN(W1=1000%W2=1000%W3=1000%W4=1000%W5=1000%W6=1000)
ECN(R=Y%DF=N%T=6F%TG=80%W=1000%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=6F%TG=80%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=6F%TG=80%W=1000%S=O%A=S+%F=AS%O=M109%RD=0%Q=)
T4(R=Y%DF=N%T=6F%TG=80%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=6F%TG=80%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=6F%TG=80%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=6F%TG=80%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=6F%TG=80%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=164B%RUD=G)
IE(DFI=N%T=6F%TG=80%CD=Z)

# 4.3 BSD UNIX #3: Sat Feb 14 20:31:03 PST 2004. This is UC Berkeley's 4.3BSD on VAX/SimH.
Fingerprint 4.3BSD
Class BSD | BSD | 4.3 | general purpose
CPE cpe:/o:bsd:bsd:4.3
SEQ(SP=C-16%GCD=FA00|1F400|2EE00|3E800|4E200%ISR=97-A1%TI=I%CI=I%II=I%SS=S%TS=U)
OPS(O1=M400%O2=M400%O3=M400%O4=M400%O5=M400%O6=M400)
WIN(W1=1000%W2=1000%W3=1000%W4=1000%W5=1000%W6=1000)
ECN(R=Y%DF=N%T=19-23%TG=20%W=1000%O=M400%CC=N%Q=)
T1(R=Y%DF=N%T=19-23%TG=20%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=19-23%TG=20%W=1000%S=O%A=O%F=A%O=%RD=0%Q=)
T4(R=Y%DF=N%T=19-23%TG=20%W=1000%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=19-23%TG=20%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=19-23%TG=20%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=19-23%TG=20%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=4210%RIPCK=Z%RUCK=0%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# BSD/OS 4.2 BSDI BSD/OS 4.2 Kernel #25: Mon Dec 16 13:09:15 PST 2002 i386
Fingerprint BSDI BSD/OS 4.2
Class BSDI | BSD/OS | 4.X | general purpose
CPE cpe:/o:bsdi:bsd_os:4 auto
SEQ(SP=8C-9E%GCD=1-6%ISR=99-A3%TI=I%II=I%SS=S%TS=1)
OPS(O1=M5B4NW4NNT11%O2=M5B4NW0NNT11%O3=M5B4NW4NNT11%O4=M5B4NW4NNT11%O5=M5B4NW4NNT11%O6=M5B4NNT11)
WIN(W1=2238%W2=20D0%W3=2080%W4=2000%W5=2180%W6=2017)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=2238%O=M5B4NW4%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=2017%S=O%A=S+%F=AS%O=M5B4NW4NNT11%RD=0%Q=)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# BT Vision+ set top box. Platform OS/Version: WinCE/5.0.1400. Bootstrap ROM version:2.8025.
# BT Vision+ box.  Manufactured by Pace (France).
Fingerprint BT Vision+ set-top box (Windows CE 5.0.1400)
Class BT | Windows | PocketPC/CE | media device
CPE cpe:/h:btvision:btvision%2b_box
CPE cpe:/o:bt:windows_ce auto
SEQ(SP=77-85%GCD=1-6%ISR=93-9D%TI=I%II=I%SS=S%TS=0)
OPS(O1=M5B2NW0NNT00NNS%O2=M5B2NW0NNT00NNS%O3=M5B2NW0NNT00%O4=M5B2NW0NNT00NNS%O5=M5B2NW0NNT00NNS%O6=M5B2NNT00NNS)
WIN(W1=8000%W2=8000%W3=8000%W4=8000%W5=8000%W6=8000)
ECN(R=Y%DF=N%T=7B-85%TG=80%W=8000%O=M5B2NW0NNS%CC=N%Q=)
T1(R=Y%DF=N%T=7B-85%TG=80%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=7B-85%TG=80%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=7B-85%TG=80%W=8000%S=O%A=S+%F=AS%O=M5B2NW0NNT00NNS%RD=0%Q=)
T4(R=Y%DF=N%T=7B-85%TG=80%W=0%S=A%A=O%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=7B-85%TG=80%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=7B-85%TG=80%W=0%S=A%A=O%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=7B-85%TG=80%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=7B-85%TG=80%IPL=B0%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=7B-85%TG=80%CD=Z)

# Buffalo "Cloudstor" NAS.  I think it is running some version of Linux.
Fingerprint Buffalo Cloudstor NAS device
Class Buffalo | embedded || storage-misc
SEQ(SP=C7-D1%GCD=1-6%ISR=C6-D0%TI=Z%II=I%TS=7)
OPS(O1=M5B4ST11NW2%O2=M5B4ST11NW2%O3=M5B4NNT11NW2%O4=M5B4ST11NW2%O5=M5B4ST11NW2%O6=M5B4ST11)
WIN(W1=16A0%W2=16A0%W3=16A0%W4=16A0%W5=16A0%W6=16A0)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=16D0%O=M5B4NNSNW2%CC=Y%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=16A0%S=O%A=S+%F=AS%O=M5B4ST11NW2%RD=0%Q=)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A|O%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=O%F=AR%RD=0)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=O%A=Z%F=R%RD=0)
T7(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=O%F=AR%RD=0)
U1(DF=N%T=3B-45%TG=40%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# Buffalo DriveStation FlexNet model HD-CE1.0TLU2
Fingerprint Buffalo DriveStation HD-CE1.0TLU2 NAS device
Class Buffalo | embedded || storage-misc
SEQ(SP=0-19%GCD=1-6|78E|F1C|16AA|1E38|25C6%ISR=6D-77%TI=I%CI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4%O2=M578%O3=M280%O4=M5B4%O5=M218%O6=M109)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=N%T=1B-25%TG=20%W=FFFF%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=1B-25%TG=20%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=1B-25%TG=20%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=1B-25%TG=20%W=FFFF%S=O%A=S+%F=AS%O=M109%RD=0%Q=)
T4(R=Y%DF=N%T=1B-25%TG=20%W=0%S=A%A=S%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=1B-25%TG=20%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=1B-25%TG=20%W=0%S=A%A=S%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=1B-25%TG=20%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=1B-25%TG=20%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=1B-25%TG=20%CD=S)

# Buffalo Linkstation Live and the OS is linux based
Fingerprint Buffalo LinkStation Live NAS device
Class Buffalo | embedded || storage-misc
SEQ(SP=9B-103%GCD=1-6%ISR=E9-FF%TI=Z%CI=Z%II=I%TS=7)
OPS(O1=M1CC4ST11NW2%O2=M1CC4ST11NW2%O3=M1CC4NNT11NW2%O4=M1CC4ST11NW2%O5=M1CC4ST11NW2%O6=M1CC4ST11)
WIN(W1=3970%W2=3970%W3=3970%W4=3970%W5=3970%W6=3970)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=3988%O=M1CC4NNSNW2%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=3970%S=O%A=S+%F=AS%O=M1CC4ST11NW2%RD=0%Q=)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A|O%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=O|S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=O%A=Z%F=R%RD=0)
T7(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=O%F=AR%RD=0)
U1(DF=N%T=3B-45%TG=40%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# Linux (Linkstation) Buffalo
Fingerprint Buffalo LinkStation NAS device
Class Buffalo | embedded || storage-misc
SEQ(SP=C7-D1%GCD=1-6%ISR=C9-D3%TI=Z%CI=Z%II=I%TS=7)
OPS(O1=M1CC4ST11NW4%O2=M1CC4ST11NW4%O3=M1CC4NNT11NW4%O4=M1CC4ST11NW4%O5=M1CC4ST11NW4%O6=M1CC4ST11)
WIN(W1=3970%W2=3970%W3=3970%W4=3970%W5=3970%W6=3970)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=3988%O=M1CC4NNSNW4%CC=Y)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0)
T2(R=N)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=3970%S=O%A=S+%F=AS%O=M1CC4ST11NW4%RD=0)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%RD=0)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%RD=0)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%RD=0)
T7(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%RD=0)
U1(DF=N%T=3B-45%TG=40%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# Link Station LS-V3.0TL-EU
Fingerprint Buffalo LinkStation NAS device
Class Buffalo | embedded || storage-misc
SEQ(SP=D1-DB%GCD=1-6%ISR=CF-D9%TI=Z%CI=Z%II=I%TS=7)
OPS(O1=M25A4ST11NW4%O2=M25A4ST11NW4%O3=M25A4NNT11NW4%O4=M25A4ST11NW4%O5=M25A4ST11NW4%O6=M25A4ST11)
WIN(W1=4B30%W2=4B30%W3=4B30%W4=4B30%W5=4B30%W6=4B30)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=4B48%O=M25A4NNSNW4%CC=Y%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=4B30%S=O%A=S+%F=AS%O=M25A4ST11NW4%RD=0%Q=)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# LinkStation - LS-QL (LS-QL079)
Fingerprint Buffalo LinkStation Quad LS-QL
Class Buffalo | embedded || storage-misc
CPE cpe:/h:buffalo:ls-ql
SEQ(SP=C7-12B%GCD=1-6%ISR=EA-100%TI=Z%CI=Z%II=I%TS=7)
OPS(O1=MFCCST11NW2%O2=MFCCST11NW2%O3=MFCCNNT11NW2%O4=MFCCST11NW2%O5=MFCCST11NW2%O6=MFCCST11)
WIN(W1=2F40%W2=2F40%W3=2F40%W4=2F40%W5=2F40%W6=2F40)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=2F64%O=MFCCNNSNW2%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=2F40%S=O%A=S+%F=AS%O=MFCCST11NW2%RD=0%Q=)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# Buffalo Link Station LS-WXL 926 1TB SAN
Fingerprint Buffalo LS-WXL NAS device
Class Buffalo | embedded || storage-misc
CPE cpe:/h:buffalo:ls-wxl
SEQ(SP=AD-103%GCD=1-6%ISR=E9-FF%TI=Z%CI=Z%II=I%TS=7)
OPS(O1=MFCCST11NW2%O2=MFCCST11NW2%O3=MFCCNNT11NW2%O4=MFCCST11NW2%O5=MFCCST11NW2%O6=MFCCST11)
WIN(W1=2F40%W2=2F40%W3=2F40%W4=2F40%W5=2F40%W6=2F40)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=2F64%O=MFCCNNSNW2%CC=N)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%RD=0)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%RD=0)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%RD=0)
T7(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%RD=0)
U1(DF=N%T=3B-45%TG=40%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# Buffalo Terastation File Server Model# HD-H1.0TGL/R5 Firmware Version 1.12
Fingerprint Buffalo TeraStation NAS device
Class Buffalo | embedded || storage-misc
SEQ(SP=C7-D1%GCD=1-6%ISR=CC-D6%TI=Z%II=I%TS=7)
OPS(O1=M1CC0ST11NW0%O2=M1CC0ST11NW0%O3=M1CC0NNT11NW0%O4=M1CC0ST11NW0%O5=M1CC0ST11NW0%O6=M1CC0ST11)
WIN(W1=3968%W2=3968%W3=3968%W4=3968%W5=3968%W6=3968)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=3980%O=M1CC0NNSNW0%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=3968%S=O%A=S+%F=AS%O=M1CC0ST11NW0%RD=0%Q=)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# Buffalo Terastation Pro II 2TB NAS, Model Name TS-RHTGL/R5 F/W 1.23
Fingerprint Buffalo TeraStation Pro II NAS device
Class Buffalo | embedded || storage-misc
SEQ(SP=C7-D1%GCD=1-6%ISR=CA-D4%TI=Z%II=I%TS=7)
OPS(O1=M25A4ST11NW2%O2=M25A4ST11NW2%O3=M25A4NNT11NW2%O4=M25A4ST11NW2%O5=M25A4ST11NW2%O6=M25A4ST11)
WIN(W1=4B30%W2=4B30%W3=4B30%W4=4B30%W5=4B30%W6=4B30)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=4B48%O=M25A4NNSNW2%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=4B30%S=O%A=S+%F=AS%O=M25A4ST11NW2%RD=0%Q=)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# TS-RHTGL/R5 with firmware version 1.33 (latest), Terastation PRO II Rack (4GB model)
Fingerprint Buffalo TeraStation Pro II NAS device
Class Buffalo | embedded || storage-misc
SEQ(SP=BC-C6%GCD=1-6%ISR=C6-D0%TI=Z%II=I%TS=7)
OPS(O1=NNT11|M1CC4ST11NW2%O2=NNT11|M1CC4ST11NW2%O3=NNT11|M1CC4NNT11NW2%O4=NNT11|M1CC4ST11NW2%O5=NNT11|M1CC4ST11NW2%O6=NNT11|M1CC4ST11)
WIN(W1=3970%W2=3970%W3=3970%W4=3970%W5=3970%W6=3970)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=3988%O=|M1CC4NNSNW2%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=O|S+%F=A|AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=3970%S=O%A=O|S+%F=A|AS%O=NNT11|M1CC4ST11NW2%RD=0%Q=)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# Buffalo Terra-Station Pro II
Fingerprint Buffalo TeraStation Pro II NAS device
Class Buffalo | embedded || storage-misc
SEQ(SP=C7-D1%GCD=1-6%ISR=CE-D8%TI=RD%II=RI%TS=7)
OPS(O1=M4FEST11NW2%O2=M4FEST11NW2%O3=M4FENNT11NW2%O4=M4FEST11NW2%O5=M4FEST11NW2%O6=M4FEST11)
WIN(W1=16A0%W2=16A0%W3=16A0%W4=16A0%W5=16A0%W6=16A0)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=16D0%O=M4FENNSNW2%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=N)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=164%UN=0%RIPL=G%RID=0-FFFF%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# Buffalo TeraStation III Pro, Firmware 1.10
Fingerprint Buffalo TeraStation Pro III NAS device
Class Buffalo | embedded || storage-misc
SEQ(SP=F9-103%GCD=1-6%ISR=F5-FF%TI=Z%CI=Z%II=I%TS=7)
OPS(O1=M25A4ST11NW5%O2=M25A4ST11NW5%O3=M25A4NNT11NW5%O4=M25A4ST11NW5%O5=M25A4ST11NW5%O6=M25A4ST11)
WIN(W1=4B30%W2=4B30%W3=4B30%W4=4B30%W5=4B30%W6=4B30)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=4B48%O=M25A4NNSNW5%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=4B30%S=O%A=S+%F=AS%O=M25A4ST11NW5%RD=0%Q=)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# http://www.burny.com/pc-based_cnc_controls.asp, Windows embedded
Fingerprint Burny CNC controller (Microsoft Windows XP Embedded)
Class Burny | Windows | XP | specialized
CPE cpe:/o:burny:windows_xp auto
SEQ(SP=FE-108%GCD=1-6%ISR=105-10F%TI=I%CI=RD%II=I%SS=S%TS=0)
OPS(O1=M546NW0NNT00NNS%O2=M546NW0NNT00NNS%O3=M546NW0NNT00%O4=M546NW0NNT00NNS%O5=M546NW0NNT00NNS%O6=M546NNT00NNS)
WIN(W1=448E%W2=448E%W3=4100%W4=40E8%W5=40E8%W6=402E)
ECN(R=Y%DF=Y%T=7B-85%TG=80%W=448E%O=M546NW0NNS%CC=N%Q=)
T1(R=Y%DF=Y%T=7B-85%TG=80%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=3C-46%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=3C-46%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T4(R=Y%DF=N%T=3C-46%TG=40%W=0%S=A%A=S%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=7B-85%TG=80%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3C-46%TG=40%W=0%S=A%A=S%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3C-46%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=7B-85%TG=80%IPL=B0%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=7B-85%TG=80%CD=Z)

# Bush Freesat HD receiver - BFSAT01HD
Fingerprint Bush BFSAT01HD satellite receiver
Class Bush | embedded || media device
SEQ(SP=0-85%GCD=1-6|2293|4526|67B9|8A4C|ACDF%ISR=7D-87%TI=I%CI=I%II=RI%SS=O%TS=U)
OPS(O1=M53C%O2=M53C%O3=M280%O4=M53C%O5=M218%O6=M109)
WIN(W1=53C0%W2=53C0%W3=53C0%W4=53C0%W5=53C0%W6=53C0)
ECN(R=Y%DF=Y%T=FA-104%TG=FF%W=53C0%O=M53C%CC=N%Q=)
T1(R=Y%DF=Y%T=FA-104%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%T=FA-104%TG=FF%W=53C0%S=O%A=O|S+%F=AS%O=M109%RD=0%Q=)
T4(R=Y%DF=Y%T=FA-104%TG=FF%W=53C0%S=A+%A=S%F=AR%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=FA-104%TG=FF%W=53C0%S=A%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=FA-104%TG=FF%W=53C0%S=A%A=S%F=AR%O=%RD=0%Q=)
T7(R=Y%DF=Y%T=FA-104%TG=FF%W=53C0%S=A%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=Y%T=FA-104%TG=FF%IPL=38%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=21-3C%TG=40%CD=S)

# industrial label printer for marking (brand name "A4+/300") by company "cab Produkttechnik GmbH & Co KG", Firmware V3.19 (Apr 27 2009), Bootloader V1.19 (Mar 13 2008)
Fingerprint cab A4+/300 label printer
Class cab | embedded || printer
SEQ(SP=8B-FD%GCD=1-6|7|E|15|1C|23%ISR=96-E4%TI=I%CI=I%II=I%SS=S%TS=7)
OPS(O1=M5B4SW0T10L%O2=M5B4SW0T10L%O3=M5B4SW0T10L%O4=M5B4SW0T10L%O5=M5B4SW0T10L%O6=M5B4ST10)
WIN(W1=2000%W2=8000%W3=2000%W4=2000%W5=2000%W6=2000)
ECN(R=Y%DF=N%T=19-23%TG=20%W=2000%O=M5B4SW0LLL%CC=N%Q=)
T1(R=Y%DF=N%T=19-23%TG=20%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=19-23%TG=20%W=2000%S=O%A=O%F=A%O=T10LL%RD=0%Q=)
T4(R=Y%DF=N%T=19-23%TG=20%W=2000%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=19-23%TG=20%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=19-23%TG=20%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=19-23%TG=20%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=19-23%TG=20%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=19-23%TG=20%CD=S)

# Cabletron ELS100-24TXM
# 3Com Corporation HiPer Access Router, Dialup-MODEM concentrador
Fingerprint Cabletron ELS100-24TXM switch
Class Cabletron | embedded || switch
CPE cpe:/h:cabletron:els100-24txm auto
SEQ(SP=0-87%GCD=9C4|1388|1D4C|2710|30D4%ISR=8A-B0%TI=I%CI=I%II=I%SS=S%TS=U)
OPS(O1=M218%O2=M218%O3=M218%O4=M218%O5=M218%O6=M218)
WIN(W1=400%W2=400%W3=400%W4=400%W5=400%W6=400)
ECN(R=Y%DF=N%T=FA-104%TG=FF%W=400%O=M218%CC=N%Q=)
T1(R=Y%DF=N%T=FA-104%TG=FF%S=O%A=O|S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=FA-104%TG=FF%W=400%S=O%A=S+%F=AS%O=M218%RD=0%Q=)
T4(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=FA-104%TG=FF%CD=S)

# Cabletron Systems ELS100-24TXM, Switch
# IC-7800 radio, Ver 2.20
Fingerprint Cabletron ELS100-24TXM Switch or Icom IC-7800 radio transceiver
Class Cabletron | embedded || switch
CPE cpe:/h:cabletron:els100-24txm auto
Class Icom | embedded || specialized
CPE cpe:/h:icom:ic-7800
SEQ(SP=0-63%GCD=61A8|C350|124F8|186A0|1E848|249F0%ISR=8A-B0%TI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4%O2=M5B4%O3=M5B4%O4=M5B4%O5=M5B4%O6=M5B4)
WIN(W1=400%W2=400%W3=400%W4=400%W5=400%W6=400)
ECN(R=Y%DF=N%T=FA-104%TG=FF%W=400%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=FA-104%TG=FF%S=O%A=O|S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=FA-104%TG=FF%W=400%S=O%A=S+%F=AS%O=M5B4%RD=0%Q=)
T4(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=FA-104%TG=FF%CD=S)

# Enterasys Networks 6G306-06 Rev 05.06.04  10/27/03--13:35 ofc
# Cabletron Systems, Inc. 6H258-17 Rev 05.08.18  12/06/05--12:41 ofc
# Cabletron Systems, Inc. 6H262-18 Rev 05.08.09  01/18/05--15:19 ofc
# Enterasys Networks 6H302-48 Rev 05.07.12  04/27/04--17:19 ofc
Fingerprint Cabletron or Enterasys switch (6G- or 6H-series)
Class Cabletron | embedded || switch
Class Enterasys | embedded || switch
SEQ(SP=77-91%GCD=200|400|600|800|A00|C00%ISR=BF-D1%TI=I%CI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4%O2=M5B4%O3=M5B4%O4=M5B4%O5=M5B4%O6=M5B4)
WIN(W1=1000%W2=1000%W3=1000%W4=1000%W5=1000%W6=1000)
ECN(R=Y%DF=N%T=FA-104%TG=FF%W=1000%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=FA-104%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=FA-104%TG=FF%W=1000%S=O%A=S+%F=AS%O=M5B4%RD=0%Q=)
T4(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=Z)

# CAEN Sy2527 High Voltage Power Supply, Software Version 2.01.00 (used, for example, in physics experiments). Uses some DOS-based embedded system I know no details about.
Fingerprint CAEN SY2527 high voltage power supply
Class CAEN | embedded || power-device
SEQ(SP=103-10D%GCD=1-6%ISR=105-10F%TI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4%O2=M578%O3=M280%O4=M218%O5=M218%O6=M109)
WIN(W1=7FE0%W2=7FE0%W3=7FE0%W4=7FE0%W5=7FE0%W6=7FE0)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=7FE0%O=M5B4%CC=S%Q=RU)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=3B-45%TG=40%W=7FE0%S=O%A=S+%F=ASF%O=M109%RD=0%Q=)
T4(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# Caldera Open UNIX 7.1.0 (SBCSA1) (pts/3)
Fingerprint Caldera Open Unix 7.1.0
Class Caldera | Open Unix | 7.X | general purpose
CPE cpe:/o:caldera:open_unix:7 auto
SEQ(SP=B1-BB%GCD=1-6%ISR=B5-BF%TI=I%CI=I%II=I%SS=S%TS=7)
OPS(O1=M5B4NW0NNT11%O2=M5B4NW0NNT11%O3=M5B4NW0NNT11%O4=M5B4NW0NNT11%O5=M5B4NW0NNT11%O6=M5B4NNT11)
WIN(W1=111C%W2=111C%W3=111C%W4=111C%W5=111C%W6=111C)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=111C%O=M5B4NW0%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=108C%S=O%A=O%F=A%O=NNT11%RD=0%Q=)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=1000%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=Y%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=Y%T=3B-45%TG=40%CD=S)

# This is a Calix C7 cabinet.  It's running R5.0.71
# Calix C7 shelf running 5.0.43
Fingerprint Calix C7 switch (R5.0)
Class Calix | embedded || switch
CPE cpe:/h:calix:c7 auto
SEQ(SP=0-5%GCD=FA01|1F402|2EE03|3E804|4E205%ISR=95-9F%TI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4NW0%O2=M5B4NW0%O3=M5B4NW0%O4=M5B4NW0%O5=M5B4NW0%O6=M5B4)
WIN(W1=2710%W2=2710%W3=2710%W4=2710%W5=2710%W6=2710)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=2710%O=M5B4NW0%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T3(R=N)
T4(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S+%F=AR%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S+%F=AR%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(R=N)
IE(DFI=S%T=FA-104%TG=FF%CD=Z)

# Linksys WAP11
# SMCWBR14-G, Boot Code Version: V0.00.08, Current Firmware Version: [V1.00.024 2004.1215]
# SOHO-IS104A HW Ver: B4 Firmware Date: 2004.03.05
# SMC2804WBR router of SMC
Fingerprint Linksys WAP11 WAP; or Cameo SOHO-IS104A or SMC SMCWBR14-G or SMC2804WBR broadband router
Class Cameo | embedded || WAP
CPE cpe:/h:cameo:soho-is104a
Class Linksys | embedded || WAP
CPE cpe:/h:linksys:wap11 auto
Class SMC | embedded || broadband router
CPE cpe:/h:smc:smcwbr14-g
CPE cpe:/h:smc:smc2804wbr
SEQ(SP=92-9C%GCD=1-6%ISR=96-A0%TI=I%II=I%SS=S%TS=1)
OPS(O1=M5B4NW0NNT11%O2=M5B4NW0NNT11%O3=M5B4NW0NNT11%O4=M5B4NW0NNT11%O5=M5B4NW0NNT11%O6=M5B4NNT11)
WIN(W1=2238%W2=20D0%W3=2080%W4=2000%W5=2180%W6=2017)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=2238%O=M5B4NW0%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=3B-45%TG=40%W=2017%S=O%A=O%F=A%O=NNT11%RD=0%Q=)
T4(R=Y%DF=N%T=3B-45%TG=40%W=2000%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=15C%RID=4210%RIPCK=Z%RUCK=0%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# Canon CLC4040
Fingerprint Canon CLC4040 printer
Class Canon | embedded || printer
CPE cpe:/h:canon:clc4040 auto
SEQ(SP=FD-107%GCD=1-6%ISR=FE-110%TI=I%CI=Z%II=I%SS=S%TS=6)
OPS(O1=M5B4NW0NNT11%O2=M5B4NW0NNT11%O3=M5B4NW0NNT11%O4=M5B4NW0NNT11%O5=M5B4NW0NNT11%O6=M5B4NNT11)
WIN(W1=4000%W2=4000%W3=4000%W4=4000%W5=4000%W6=4000)
ECN(R=Y%DF=Y%T=3A-44%TG=40%W=4000%O=M5B4NW0%CC=N%Q=)
T1(R=Y%DF=Y%T=3A-44%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=O%F=AR%O=%RD=0%Q=)
T4(R=Y%DF=N%T=3A-44%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# Canon ImageClass MF4570dw Monochrome Laser Printer
Fingerprint Canon imageCLASS MF4570dw printer
Class Canon | embedded || printer
CPE cpe:/h:canon:imageclass_mf4570dw auto
SEQ(SP=CD-D7%GCD=1-6%ISR=D5-DF%TI=I%CI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4W0L%O2=M5B4W0L%O3=M5B4W0L%O4=M5B4W0L%O5=M5B4W0L%O6=M5B4)
WIN(W1=2000%W2=2000%W3=2000%W4=2000%W5=2000%W6=2000)
ECN(R=Y%DF=N%T=132-13C%TG=FF%W=2000%O=M5B4W0L%CC=N%Q=)
T1(R=Y%DF=N%T=132-13C%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=132-13C%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=132-13C%TG=FF%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=132-13C%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=132-13C%TG=FF%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=132-13C%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=83EA%RUD=G)
IE(DFI=N%T=132-13C%TG=FF%CD=Z)

# iR1024
Fingerprint Canon imageRUNNER 1024 laser printer
Class Canon | embedded || printer
CPE cpe:/h:canon:imagerunner_1024
SEQ(SP=0-69%GCD=1-6|10001|20002|30003|40004|50005%ISR=95-9F%TI=RD%II=RI%TS=U)
OPS(O1=M5B4%O2=M5B4%O3=M5B4%O4=M5B4%O5=M5B4%O6=M5B4)
WIN(W1=5B4%W2=5B4%W3=5B4%W4=5B4%W5=5B4%W6=5B4)
ECN(R=Y%DF=N%T=FA-104%TG=FF%W=5B4%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=FA-104%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=FA-104%TG=FF%W=5B4%S=A%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=FA-104%TG=FF%W=5B4%S=A%A=S+%F=AR%O=%RD=0%Q=)
T4(R=Y%DF=N%T=FA-104%TG=FF%W=5B4%S=A%A=S%F=AR%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
U1(R=N)
IE(DFI=N%T=FA-104%TG=FF%CD=Z)

# Canon iR2020n department printer
# Kyocera FS-4000DN, System Firmware: 2F9_3000.010.004, Engine Firmware: 2GA_1000.010.001
Fingerprint Canon imageRUNNER 2020 or Kyocera FS-4000DN printer
Class Canon | embedded || printer
CPE cpe:/h:canon:imagerunner_2020
Class Kyocera | embedded || printer
CPE cpe:/h:kyocera:fs-4000dn
SEQ(SP=0-5%GCD=10001|20002|30003|40004|50005%ISR=96-A0%TI=I%CI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4%O2=M5B4%O3=M5B4%O4=M5B4%O5=M5B4%O6=M5B4)
WIN(W1=5B4%W2=5B4%W3=5B4%W4=5B4%W5=5B4%W6=5B4)
ECN(R=Y%DF=N%T=FA-104%TG=FF%W=5B4%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=FA-104%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=FA-104%TG=FF%W=5B4%S=A%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=FA-104%TG=FF%W=5B4%S=A%A=S+%F=AR%O=%RD=0%Q=)
T4(R=Y%DF=N%T=FA-104%TG=FF%W=5B4%S=A%A=S%F=AR%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
U1(R=N)
IE(DFI=N%T=FA-104%TG=FF%CD=Z)

# Canon iR6570 laser printer
# Canon iR2270 Laser Printer
# Canon iR4570 Laser Printer
# ReactOS Operating System, version 0.3.11-20091212-r44553
Fingerprint Canon imageRUNNER 2270, 4570, or 6570 laser printer (VxWorks)
Class Canon | embedded || printer
CPE cpe:/h:canon:imagerunner_2270
CPE cpe:/h:canon:imagerunner_4570
CPE cpe:/h:canon:imagerunner_6570
Class Wind River | VxWorks || general purpose
CPE cpe:/o:windriver:vxworks auto
SEQ(SP=97-A1%GCD=1-6%ISR=9D-A7%TI=I%TS=1|2)
OPS(O1=M5B4NW0NNT11%O2=M5B4NW0NNT11%O3=M5B4NW0NNT11%O4=M5B4NW0NNT11%O5=M5B4NW0NNT11%O6=M5B4NNT11)
WIN(W1=4000%W2=4000%W3=4000%W4=4000%W5=4000%W6=4000)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=4000%O=M5B4NW0%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=4000%S=O%A=O|S+%F=AS%O=M5B4NW0NNT11%RD=0%Q=)
T4(R=Y%DF=N%T=3B-45%TG=40%W=4000%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=Z%RUCK=0%RUD=G)
IE(R=N)

# Canon imageRunner 2525
Fingerprint Canon imageRUNNER 2525 printer (VxWorks)
Class Canon | embedded || printer
CPE cpe:/h:canon:imagerunner_2525
Class Wind River | VxWorks || general purpose
CPE cpe:/o:windriver:vxworks auto
SEQ(SP=FB-10F%GCD=1-6%ISR=106-110%TI=RD%CI=RD|RI%II=RI%TS=6)
OPS(O1=M5B4NW0NNT11%O2=M5B4NW0NNT11%O3=M5B4NW0NNT11%O4=M5B4NW0NNT11%O5=M5B4NW0NNT11%O6=M5B4NNT11)
WIN(W1=4000%W2=4000%W3=4000%W4=4000%W5=4000%W6=4000)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=4000%O=M5B4NW0%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=4000%S=O%A=S+%F=AS%O=M5B4NW0NNT11%RD=0%Q=)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=70%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Canon Image Runner 3300
# Motorola SBG900 Cable Modem
Fingerprint Canon imageRUNNER 3300 printer or Motorola SURFboard SBG900 wireless cable modem
Class Canon | embedded || printer
CPE cpe:/h:canon:imagerunner_3300
Class Motorola | embedded || WAP
CPE cpe:/h:motorola:surfboard_sbg900 auto
SEQ(SP=14-1E%GCD=FA00|1F400|2EE00|3E800|4E200%ISR=99-A3%TI=I%II=I%SS=S%TS=U)
OPS(O1=M200NW0%O2=M200NW0%O3=M200NW0%O4=M200NW0%O5=M200NW0%O6=M200)
WIN(W1=4000%W2=4000%W3=4000%W4=4000%W5=4000%W6=4000)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=4000%O=M200NW0%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=3B-45%TG=40%W=4000%S=O%A=O%F=A%O=%RD=0%Q=)
T4(R=Y%DF=N%T=3B-45%TG=40%W=4000%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=Z%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Canon iRC2880i printer
# canon ir c2380
Fingerprint Canon imageRUNNER C2380 or C2880i printer
Class Canon | embedded || printer
CPE cpe:/h:canon:imagerunner_c2380
CPE cpe:/h:canon:imagerunner_c2880i
SEQ(SP=FB-105%GCD=1-6%ISR=105-10F%TI=I%II=I%SS=O|S%TS=6)
OPS(O1=M5B4NW0NNT11%O2=M5B4NW0NNT11%O3=M5B4NW0NNT11%O4=M5B4NW0NNT11%O5=M5B4NW0NNT11%O6=M5B4NNT11)
WIN(W1=4000%W2=4000%W3=4000%W4=4000%W5=4000%W6=4000)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=4000%O=M5B4NW0%CC=N)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=O|S+%F=AS%RD=0)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%RD=0)
T6(R=N)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=70%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Canon net printer/scanner/fax IR3100C
Fingerprint Canon imageRUNNER C3100 printer
Class Canon | embedded || printer
CPE cpe:/h:canon:imagerunner_c3100
SEQ(SP=13-1D%GCD=FA00|1F400|2EE00|3E800|4E200|5DC00%ISR=98-A2%TI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4%O2=M5B4%O3=M5B4%O4=M5B4%O5=M5B4%O6=M5B4)
WIN(W1=4000%W2=4000%W3=4000%W4=4000%W5=4000%W6=4000)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=4000%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=3B-45%TG=40%W=4000%S=O%A=O%F=A%O=%RD=0%Q=)
T4(R=Y%DF=N%T=3B-45%TG=40%W=4000%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=Z%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

Fingerprint Canon imageRUNNER C3200 printer
Class Canon | embedded || printer
CPE cpe:/h:canon:imagerunner_c3200
SEQ(SP=16-20%GCD=FA00|1F400|2EE00|3E800|4E200%ISR=9B-A5%TI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4%O2=M5B4%O3=M5B4%O4=M5B4%O5=M5B4%O6=M5B4)
WIN(W1=2000%W2=2000%W3=2000%W4=2000%W5=2000%W6=2000)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=2000%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=3B-45%TG=40%W=2000%S=O%A=O%F=A%O=%RD=0%Q=)
T4(R=Y%DF=N%T=3B-45%TG=40%W=2000%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=Z%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Canon iRC3580 colour photocopier
Fingerprint Canon imageRUNNER C3580 printer
Class Canon | embedded || printer
CPE cpe:/h:canon:imagerunner_c3580
SEQ(SP=F5-109%GCD=1-6%ISR=FF-10F%TI=I%CI=I%II=I%SS=S%TS=6)
OPS(O1=M514NW0NNT11%O2=M514NW0NNT11%O3=M514NW0NNT11%O4=M514NW0NNT11%O5=M514NW0NNT11%O6=M514NNT11)
WIN(W1=4000%W2=4000%W3=4000%W4=4000%W5=4000%W6=4000)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=4000%O=M514NW0%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=4000%S=O%A=S+%F=AS%O=M514NW0NNT11%RD=0%Q=)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3C-46%TG=40%IPL=70%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Canon ImageRunner C5185 Printer
Fingerprint Canon imageRUNNER C5185 printer
Class Canon | embedded || printer
CPE cpe:/h:canon:imagerunner_c5185
SEQ(SP=F9-103%GCD=1-6%ISR=100-10A%TI=I%CI=I%II=I%SS=S%TS=6)
OPS(O1=M5B4NW0NNT11%O2=M5B4NW0NNT11%O3=M5B4NW0NNT11%O4=M5B4NW0NNT11%O5=M5B4NW0NNT11%O6=M5B4NNT11)
WIN(W1=4000%W2=4000%W3=4000%W4=4000%W5=4000%W6=4000)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=4000%O=M5B4NW0%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=4000%S=O%A=S+%F=AS%O=M5B4NW0NNT11%RD=0%Q=)
T4(R=N)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=70%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Canon iR6800C EUR printer/scanner/copier
Fingerprint Canon imageRUNNER C6800 printer
Class Canon | embedded || printer
CPE cpe:/h:canon:imagerunner_c6800
SEQ(SP=14-1E%GCD=FA00|1F400|2EE00|3E800|4E200%ISR=99-A3%TI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4%O2=M5B4%O3=M5B4%O4=M5B4%O5=M5B4%O6=M5B4)
WIN(W1=4000%W2=4000%W3=4000%W4=4000%W5=4000%W6=4000)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=4000%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=3B-45%TG=40%W=4000%S=O%A=O%F=A%O=%RD=0%Q=)
T4(R=Y%DF=N%T=3B-45%TG=40%W=4000%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=Z%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Canon MF4360-4390 Printer
# Canon 4370dn network laser all-in-one printer
Fingerprint Canon MF4360-4390 or 4370dn printer
Class Canon | embedded || printer
SEQ(SP=0-5%GCD=FA01|1F402|2EE03|3E804|4E205%ISR=95-9F%TI=BI%CI=BI%II=BI%SS=S%TS=U)
OPS(O1=M5B4NW0%O2=M5B4NW0%O3=M5B4NW0%O4=M5B4NW0%O5=M5B4NW0%O6=M5B4)
WIN(W1=2710%W2=2710%W3=2710%W4=2710%W5=2710%W6=2710)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=2710%O=M5B4NW0%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=Z%A=S+%F=R%O=%RD=0%Q=)
T3(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T4(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S+%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S+%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=Z%A=S+%F=R%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=Z)

# Canon PIXMA iX7000
# Canon Pixma MP980 This is Canon's MFU (printer/scanner) device with LAN and WiFi
Fingerprint Canon PIXMA iX7000 or NP-980 printer
Class Canon | embedded || printer
SEQ(SP=0-1D%GCD=3200|6400|9600|C800|FA00|BB800%ISR=B0-BC%TI=RD%II=RI%TS=U)
OPS(O1=M5B4%O2=M578%O3=M280%O4=M5B4%O5=M218%O6=M109)
WIN(W1=2D00%W2=2D00%W3=2D00%W4=2D00%W5=2D00%W6=2D00)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=2D00%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=3B-45%TG=40%W=2D00%S=O%A=S+%F=AS%O=M109%RD=0%Q=)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=S%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=S%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# Canon Pixma MG6150
# Photo printer over WiFi. Canon MP495 series.
Fingerprint Canon PIXMA MP495 or MG6150 printer
Class Canon | embedded || printer
CPE cpe:/h:canon:pixma_mp495 auto
CPE cpe:/h:canon:pixma_mg6150 auto
SEQ(SP=0-5%GCD=>B00000%ISR=D2-DC%TI=RD%CI=RD%II=RI%TS=U)
OPS(O1=M5B4%O2=M578%O3=M280%O4=M5B4%O5=M218%O6=M109)
WIN(W1=2D00%W2=2D00%W3=2D00%W4=2D00%W5=2D00%W6=2D00)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=2D00%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=3B-45%TG=40%W=2D00%S=O%A=S+%F=AS%O=M109%RD=0%Q=)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=S%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=S%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# multifunction printer Canon Pixma MP620
# Canon MX860 Multifunction Device
# Canon MP876 MFP
# Canon MP560 series, Firmware Version:       1.040
# Canon MX870 Series, FW 1.010, Canon Pixma IP4000R printer
Fingerprint Canon PIXMA MP560, MP620, or MX800-series printer
Class Canon | embedded || printer
SEQ(SP=0-5C%GCD=3200|6400|9600|C800|FA00%ISR=C0-11E%TI=RD%II=RI%TS=U)
OPS(O1=M5B4%O2=M578%O3=M280%O4=M5B4%O5=M218%O6=M109)
WIN(W1=2D00%W2=2D00%W3=2D00%W4=2D00%W5=2D00%W6=2D00)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=2D00%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=3B-45%TG=40%W=2D00%S=O%A=S+%F=AS%O=M109%RD=0%Q=)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=S%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=S%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# Canon mp600r
# Canon Pixma MX700 printer
Fingerprint Canon PIXMA MP600R or MX700 printer
Class Canon | embedded || printer
SEQ(SP=E-2A%GCD=10000|20000|30000|40000|50000%ISR=C5-CF%TI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4%O2=M578%O3=M5B4%O4=M5B4%O5=M218%O6=M109)
WIN(W1=F800%W2=F800%W3=F800%W4=F800%W5=F800%W6=F800)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=F800%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=3B-45%TG=40%W=F800%S=O%A=S+%F=AS%O=M5B4%RD=0%Q=)
T4(R=Y%DF=N%T=3B-45%TG=40%W=F800%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=Z)

# Canon 4000r printer
# Canon MP800R printer
Fingerprint Canon PIXMA MP800R or 4000R printer
Class Canon | embedded || printer
SEQ(SP=E-2A%GCD=10000|20000|30000|40000|50000|60000%ISR=C6-D0%TI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4%O2=M578%O3=M5B4%O4=M5B4%O5=M218%O6=M109)
WIN(W1=2000%W2=2000%W3=2000%W4=2000%W5=2000%W6=2000)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=2000%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=3B-45%TG=40%W=2000%S=O%A=O|S+%F=A|AS%O=|M5B4%RD=0%Q=)
T4(R=Y%DF=N%T=3B-45%TG=40%W=2000%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=Z)

# Canon MP980 printer/copier
# Cannon Mg6100 printer
# Canon MX410 series Firmware Version: 1.000
# Cannon Pixma 882
# Printer Canon Pixma MP495
Fingerprint Canon PIXMA MS410, MP495, MP980, MX870, MX882, or MG6100 printer
Class Canon | embedded || printer
CPE cpe:/h:canon:pixma_ms410
CPE cpe:/h:canon:pixma_mp495
CPE cpe:/h:canon:pixma_mp980
CPE cpe:/h:canon:pixma_mx870
CPE cpe:/h:canon:pixma_mx882
CPE cpe:/h:canon:pixma_mg6100
SEQ(SP=0-23%GCD=>1000000%ISR=DD-115%TI=RD%CI=RD%II=RI%TS=U)
OPS(O1=M5B4%O2=M578%O3=M280%O4=M5B4%O5=M218%O6=M109)
WIN(W1=2D00%W2=2D00%W3=2D00%W4=2D00%W5=2D00%W6=2D00)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=2D00%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=3B-45%TG=40%W=2D00%S=O%A=S+%F=AS%O=M109%RD=0%Q=)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=S%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=S%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# Canon Pixma MX860 network printer/scanner/fax.
# Canon Pixma MX870.
# Canon Pixma MP-495
# Canon MX340 series Firmware Version:               1.020
# Canon MX890 series Firmware Version:               3.020
Fingerprint Canon PIXMA MX340, MP495, MP620, MX860, MX870, or MX890 printer
Class Canon | embedded || printer
CPE cpe:/h:canon:pixma_mx340
CPE cpe:/h:canon:pixma_mp495
CPE cpe:/h:canon:pixma_mg620
CPE cpe:/h:canon:pixma_mx860
CPE cpe:/h:canon:pixma_mx870
SEQ(SP=0-D3%GCD=200|400|600|800|A00%ISR=E4-112%TI=RD%CI=RD|RI%II=RI%TS=U)
OPS(O1=M5B4%O2=M578%O3=M280%O4=M5B4%O5=M218%O6=M109)
WIN(W1=2D00%W2=2D00%W3=2D00%W4=2D00%W5=2D00%W6=2D00)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=2D00%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=3B-45%TG=40%W=2D00%S=O%A=S+%F=AS%O=M109%RD=0%Q=)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=S%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=S%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# PIXMA MX850 multi function printer
Fingerprint Canon PIXMA MX850 printer
Class Canon | embedded || printer
CPE cpe:/h:canon:pixma_mx850 auto
SEQ(SP=0-1D%GCD=388|710|A98|E20|11A8%ISR=64-7A%TI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4%O2=M5B4%O3=M5B4%O4=M5B4%O5=M5B4%O6=M5B4)
WIN(W1=2000%W2=2000%W3=2000%W4=2000%W5=2000%W6=2000)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=2000%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=3B-45%TG=40%W=2000%S=O%A=S+%F=AS%O=M5B4%RD=0%Q=)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=S%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=S%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=Z)

# Casio QT600/QT6100 cash registering machine
Fingerprint Casio QT-6000 or QT-6100 point-of-sale machine
Class Casio | embedded || specialized
SEQ(CI=I%II=I%TS=U)
OPS(O1=M5B4%O2=%O3=%O4=%O5=%O6=)
WIN(W1=1000%W2=0%W3=0%W4=0%W5=0%W6=0)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=0%O=%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=O%F=AR%O=%RD=0%Q=)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=S%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=S%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=Z)

# Linux 2.6.23.17 #28 Thu May 14 12:28:51 MYT 2009 ppc unknown, CT-730 WiMAX-WiFi Wireless Router
Fingerprint Ceedtec CD-730 WiMAX WAP (Linux 2.6.23)
Class Ceedtec | Linux | 2.6.X | WAP
CPE cpe:/o:ceedtec:linux_kernel:2.6 auto
SEQ(SP=C2-CC%GCD=1-6%ISR=C5-CF%TI=Z%CI=Z%TS=7|9)
OPS(O1=M5B4NNT11%O2=M5B4NNT11%O3=M5B4NNT11%O4=M5B4NNT11%O5=M5B4NNT11%O6=M5B4NNT11)
WIN(W1=16A0%W2=16A0%W3=16A0%W4=16A0%W5=16A0%W6=16A0)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=16D0%O=M5B4%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=16A0%S=O%A=S+%F=AS%O=M5B4NNT11%RD=0%Q=)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# Check Point SBox-200, Version: 1.2G, Running: 8.0.34x
Fingerprint Check Point SBox-200 firewall
Class Check Point | embedded || firewall
SEQ(SP=C7-D1%GCD=1-6%ISR=CD-D7%TI=Z%CI=Z%II=I%TS=7)
OPS(O1=M5B4ST11NW0%O2=M5B4ST11NW0%O3=M5B4NNT11NW0%O4=M5B4ST11NW0%O5=M5B4ST11NW0%O6=M5B4ST11)
WIN(W1=1A3A%W2=1A3A%W3=1A3A%W4=1A3A%W5=1A3A%W6=1A3A)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=1A5E%O=M5B4NNSNW0%CC=Y%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# CheckPoint UTM-1 Edge X, Firmware Version 7.5.42x, Hardware Type SBox-200
Fingerprint Check Point UTM-1 Edge X firewall
Class Check Point | embedded || firewall
SEQ(SP=C5-CF%GCD=1-6%ISR=CA-D4%TI=Z%II=I%TS=7)
OPS(O1=M564ST11NW0%O2=M564ST11NW0%O3=M564NNT11NW0%O4=M564ST11NW0%O5=M564ST11NW0%O6=M564ST11)
WIN(W1=16A0%W2=16A0%W3=16A0%W4=16A0%W5=16A0%W6=16A0)
ECN(R=Y%DF=Y%T=3C-46%TG=40%W=16D0%O=M564NNSNW0%CC=Y%Q=)
T1(R=Y%DF=Y%T=3C-46%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=Y%DF=Y%T=3C-46%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=N)
T7(R=N)
U1(DF=N%T=3C-46%TG=40%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3C-46%TG=40%CD=S)

# VPN-1 Edge X ADSL, Embedded NGX, Firmware version: 7.0.34x
Fingerprint Check Point VPN-1 UTM appliance
Class Check Point | embedded || firewall
SEQ(SP=BA-CE%GCD=1-6%ISR=C3-D7%TI=Z%CI=Z%II=I%TS=9|A|B)
OPS(O1=M5B4ST11NW0%O2=M5B4ST11NW0%O3=M5B4NNT11NW0%O4=M5B4ST11NW0%O5=M5B4ST11NW0%O6=M5B4ST11)
WIN(W1=16A0%W2=16A0%W3=16A0%W4=16A0%W5=16A0%W6=16A0)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=16D0%O=M5B4NNSNW0%CC=Y)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%RD=0)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%RD=0)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%RD=0)
T7(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%RD=0)
U1(DF=N%T=3B-45%TG=40%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# Zonealarm Z100G Firewall/wireless router. (checkpoint)
Fingerprint Check Point ZoneAlarm Z100G firewall
Class Check Point | embedded || firewall
SEQ(SP=BE-C8%GCD=1-6%ISR=D0-DA%TI=Z%II=I%TS=7)
OPS(O1=M5B4ST11NW0%O2=M5B4ST11NW0%O3=M5B4NNT11NW0%O4=M5B4ST11NW0%O5=M5B4ST11NW0%O6=M5B4ST11)
WIN(W1=16A0%W2=16A0%W3=16A0%W4=16A0%W5=16A0%W6=16A0)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=16D0%O=M5B4NNSNW0%CC=Y%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=N)
T7(R=N)
U1(R=N)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# IPSO 4.2 Build 106a04 running R65 HFA_60
Fingerprint Check Point NGX R65 firewall (IPSO 4.2)
Class Check Point | IPSO | 4.X | firewall
CPE cpe:/o:checkpoint:ipso:4 auto
SEQ(SP=FD-10B%GCD=1-6%ISR=107-113%TI=I%II=I%SS=S%TS=1)
OPS(O1=M400NW0NNT11%O2=M400NW0NNT11%O3=M400NW0NNT11%O4=M400NW0NNT11%O5=M400NW0NNT11%O6=M400NNT11)
WIN(W1=43E0%W2=4110%W3=423C%W4=4334%W5=4180%W6=403D)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=4470%O=M400NW0%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=N)
T7(R=N)
U1(DF=N%T=FA-104%TG=FF%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# Check Point VPN-1(TM) & FireWall-1(R) NGX (R60) HFA_03, Hotfix 603 - Build 015  & IPSO fw-001 4.1-BUILD016 releng 1515  05.19.2006-052320 i386
# This is Check Point VPN-1(TM) & FireWall-1(R) NGX (R60) HFA_03, Hotfix 603 - Build 015
# IPSO fw-001 4.1-BUILD016 releng 1515  05.19.2006-052320 i386
Fingerprint Check Point VPN-1 firewall (IPSO 4.1)
Class Check Point | IPSO | 4.X | firewall
CPE cpe:/o:checkpoint:ipso:4 auto
SEQ(SP=C0-10C%GCD=1-6%ISR=107-10B%TI=I%II=I%SS=S%TS=1)
OPS(O1=M5B4NW0NNT11%O2=M5B4NW0NNT11%O3=M5B4NW0NNT11%O4=M5B4NW0NNT11%O5=M5B4NW0NNT11%O6=M5B4NNT11)
WIN(W1=43E0%W2=4110%W3=423C%W4=4110%W5=4180%W6=403D)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=4470%O=M5B4NW0%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=3B-45%TG=40%W=4000%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=N)
U1(DF=N%T=FA-104%TG=FF%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# Linux 2.4.21-21cpsmp #1 SMP Sun Feb 11 18:18:33 IST 2007 i686 i686 i386 GNU/Linux (Check Point SecurePlatform NGX (R65) Build 123 (ClusterXL))
Fingerprint Check Point firewall (Linux 2.4.21)
Class Check Point | Linux | 2.4.X | firewall
CPE cpe:/o:checkpoint:linux_kernel:2.4 auto
SEQ(SP=BF-C9%GCD=1-6%ISR=C6-D0%TI=Z%II=I%TS=U)
OPS(O1=M5B4NNSNW0%O2=M5B4NNSNW0%O3=M5B4NW0%O4=M5B4NNSNW0%O5=M5B4NNSNW0%O6=M5B4NNS)
WIN(W1=16D0%W2=16D0%W3=16D0%W4=16D0%W5=16D0%W6=16D0)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=16D0%O=M5B4NNSNW0%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=16D0%S=O%A=S+%F=AS%O=M5B4NNSNW0%RD=0%Q=)
T4(R=N)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=N)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=B732%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# Linux CP-1 2.4.21-21cpsmp #1 SMP Thu Sep 11 17:01:25 IDT 2008 i686 i686 i386 GNU/Linux, Checkpoint Secure Platform R65
Fingerprint Check Point NGX R65 firewall (Linux 2.4.21)
Class Check Point | Linux | 2.4.X | firewall
CPE cpe:/o:checkpoint:linux_kernel:2.4 auto
SEQ(SP=F1-107%GCD=1-6%ISR=106-110%TI=Z%CI=Z%II=I%TS=U)
OPS(O1=M5B4NNSNW0%O2=M578NNSNW0%O3=M280NW0%O4=M22CNNSNW0%O5=M218NNSNW0%O6=M109NNS)
WIN(W1=16D0%W2=16D0%W3=16D0%W4=16D0%W5=16D0%W6=16D0)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=16D0%O=M5B4NNSNW0%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=S%F=R%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=S%F=R%O=%RD=0%Q=)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# Check Point Edge X Appliance, firmware 6.5.43x
# Check Point VPN-1 Edge
# Check Point VPN-1 Edge, Firmware Version 6.5.43x
Fingerprint Check Point VPN-1 UTM appliance
Class Check Point | Linux | 2.4.X | firewall
CPE cpe:/o:checkpoint:linux_kernel:2.4 auto
SEQ(SP=BA-CE%GCD=1-6%ISR=C3-D7%TI=Z%CI=Z%II=I%TS=7)
OPS(O1=M5B4ST11NW0%O2=M5B4ST11NW0%O3=M5B4NNT11NW0%O4=M5B4ST11NW0%O5=M5B4ST11NW0%O6=M5B4ST11)
WIN(W1=16A0%W2=16A0%W3=16A0%W4=16A0%W5=16A0%W6=16A0)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=16D0%O=M5B4NNSNW0%CC=Y%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# Gaia http://www.checkpoint.com/gaia/index.html
# Linux FW 2.6.18-92cp #1 SMP Tue Dec 4 21:44:22 IST 2012 i686 i686 i386 GNU/Linux, Checkpoint Gaia
Fingerprint Check Point GAiA (Linux 2.6.18)
Class Check Point | Linux | 2.6.X | firewall
CPE cpe:/o:linux:linux_kernel:2.6.18
SEQ(SP=FC-106%GCD=1-6%ISR=102-10C%TI=Z%II=I%TS=A)
OPS(O1=M5B4ST11NW3|M5B4ST11NW7%O2=M5B4ST11NW3|M5B4ST11NW7%O3=M5B4NNT11NW3|M5B4NNT11NW7%O4=M5B4ST11NW3|M5B4ST11NW7%O5=M5B4ST11NW3|M5B4ST11NW7%O6=M5B4ST11)
WIN(W1=16A0%W2=16A0%W3=16A0%W4=16A0%W5=16A0%W6=16A0)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=16D0%O=M5B4NNSNW3|M5B4NNSNW7%CC=N)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0)
T2(R=N)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=16A0%S=O%A=S+%F=AS%O=M5B4ST11NW3|M5B4ST11NW7%RD=0)
T4(R=N)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%RD=0)
T6(R=N)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# Linux 2.6.18-92cp #1 SMP Wed Feb 4 17:35:21 IST 2009 i686 i686 i386 GNU/Linux, Check Point VPN-1(TM) & FireWall-1(R) R70 - Build 143
Fingerprint Check Point VPN-1 firewall (Linux 2.6.18)
Class Check Point | Linux | 2.6.X | firewall
CPE cpe:/o:checkpoint:linux_kernel:2.6 auto
SEQ(SP=CA-D4%GCD=1-6%ISR=CD-D7%TI=Z%II=I%TS=U)
OPS(O1=M5B4NNSNW7%O2=M5B4NNSNW7%O3=M5B4NW7%O4=M5B4NNSNW7%O5=M5B4NNSNW7%O6=M5B4NNS)
WIN(W1=16D0%W2=16D0%W3=16D0%W4=16D0%W5=16D0%W6=16D0)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=16D0%O=M5B4NNSNW7%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=16D0%S=O%A=S+%F=AS%O=M5B4NNSNW7%RD=0%Q=)
T4(R=N)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=N)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# Embedded Linux on a XtremePC. http://www.chippc.com/thin-clients/xtreme-pc/
Fingerprint Chip PC XtremePC thin client
Class Chip PC | Linux || terminal
CPE cpe:/o:chippc:linux_kernel auto
SEQ(SP=C0-CA%GCD=1-6%ISR=C5-CF%TI=Z%CI=Z%II=I%TS=6)
OPS(O1=M5B4ST11NW4%O2=M5B4ST11NW4%O3=M5B4NNT11NW4%O4=M5B4ST11NW4%O5=M5B4ST11NW4%O6=M5B4ST11)
WIN(W1=16A0%W2=16A0%W3=16A0%W4=16A0%W5=16A0%W6=16A0)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=16D0%O=M5B4NNSNW4%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# Ciperlab 5100 Programmable Data Terminal. http://www.cipherlab.com/catalog.asp?CatID=59&ProdID=41
# Ciperlab A5100 Time and Attendance terminal.
Fingerprint CipherLab 5100 time and attendance terminal
Class CipherLab | embedded || specialized
SEQ(SP=0-2B%GCD=1-6|64|C8|12C|190|1F4%ISR=4B-55%TI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4%O2=M5B4%O3=M5B4%O4=M5B4%O5=M5B4%O6=M5B4)
WIN(W1=16D0%W2=16D0%W3=16D0%W4=16D0%W5=16D0%W6=16D0)
ECN(R=N)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=Y%DF=N%T=3B-45%TG=40%W=7A69%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=8000%S=A%A=S%F=AR%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=FFFF%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=A346|900D%RID=G%RIPCK=I%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# Cisco CE590 running Application and Content Networking System Software Release 5.5.5 (build b4 Dec 27 2006)
Fingerprint Cisco Content Engine CE590 running Application and Content Networking System Software 5.5.5
Class Cisco | ACNS | 5.X | proxy server
CPE cpe:/o:cisco:acns:5 auto
SEQ(SP=C6-D0%GCD=1-6%ISR=C7-D1%TI=Z%II=I%TS=U)
OPS(O1=M5B4NNS%O2=M578NNS%O3=M280%O4=M218NNS%O5=M218NNS%O6=M109NNS)
WIN(W1=16D0%W2=16D0%W3=16D0%W4=16D0%W5=16D0%W6=16D0)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=16D0%O=M5B4NNS%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=16D0%S=O%A=S+%F=AS%O=M109NNS%RD=0%Q=)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=Y%T=3B-45%TG=40%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=Y%T=3B-45%TG=40%CD=S)

# Cisco Wide Area Engine WAE-512 running ACNS 5.5.5.4
Fingerprint Cisco WAE-512 Wide Area Application Engine (ACNS 5.5.5.4)
Class Cisco | ACNS | 5.X | proxy server
CPE cpe:/o:cisco:acns:5 auto
SEQ(SP=C3-CD%GCD=1-6%ISR=C7-D1%TI=Z%II=I%TS=U)
OPS(O1=|M5B4NNS%O2=|M578NNS%O3=|M280%O4=|M218NNS%O5=|M218NNS%O6=|M109NNS)
WIN(W1=16D0%W2=16D0%W3=16D0%W4=16D0%W5=16D0%W6=16D0)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=16D0%O=|M5B4NNS%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=O|S+%F=A|AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=16D0%S=O%A=O|S+%F=A|AS%O=|M109NNS%RD=0%Q=)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=Y%T=3B-45%TG=40%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=Y%T=3B-45%TG=40%CD=S)

# Cisco IronPort C650 running AsyncOS v7.0.1-010.
Fingerprint Cisco IronPort C650 email security appliance (AsyncOS 7.0.1)
Class Cisco | AsyncOS | 7.X | firewall
CPE cpe:/h:cisco:ironport_c650
CPE cpe:/o:cisco:asyncos:7.0.1
SEQ(SP=FA-10C%GCD=1-6%ISR=107-111%TS=U)
OPS(O1=M5B4SLL%O2=M5B4SLL%O3=M5B4%O4=M5B4SLL%O5=M5B4SLL%O6=M5B4SLL)
WIN(W1=4000%W2=4000%W3=4000%W4=4000%W5=4000%W6=4000)
ECN(R=Y%DF=Y%T=3A-44%TG=40%W=4000%O=M5B4SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3A-44%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3A-44%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=3A-44%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3A-44%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=Y%T=3A-44%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3A-44%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=3A-44%TG=40%CD=S)

# Cisco Catalyst WS-C5000 Software, Version McpSW: 4.5(1) NmpSW: 4.5(1)
Fingerprint Cisco Catalyst WS-C5000 switch (CatOS 4.5(1))
Class Cisco | CatOS | 4.X | switch
CPE cpe:/h:cisco:catalyst_ws-c5000
CPE cpe:/o:cisco:catos:4 auto
SEQ(SP=C-16%GCD=FA00|1F400|2EE00|3E800|4E200%ISR=97-A1%TI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4%O2=M5B4%O3=M5B4%O4=M5B4%O5=M5B4%O6=M5B4)
WIN(W1=1000%W2=1000%W3=1000%W4=1000%W5=1000%W6=1000)
ECN(R=Y%DF=N%T=19-23%TG=20%W=1000%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=19-23%TG=20%S=O%A=O|S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=Y%DF=N%T=19-23%TG=20%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=19-23%TG=20%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=19-23%TG=20%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-3D%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=Z%RUCK=0%RUD=G)
IE(DFI=S%T=3B-3D%TG=40%CD=S)

# WS-C2948 Software, Version NmpSW: 6.3(5)
Fingerprint Cisco 2948G switch (CatOS 6.3)
Class Cisco | CatOS | 6.X | switch
CPE cpe:/h:cisco:catalyst_2948g
CPE cpe:/o:cisco:catos:6.3
SEQ(SP=FE-10A%GCD=1-6%ISR=105-10F%TI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4%O2=M5B4%O3=M5B4%O4=M5B4%O5=M5B4%O6=M5B4)
WIN(W1=1000%W2=1000%W3=1000%W4=1000%W5=1000%W6=1000)
ECN(R=Y%DF=N%T=19-23%TG=20%W=1000%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=19-23%TG=20%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=19-23%TG=20%W=1000%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=19-23%TG=20%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=19-23%TG=20%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=N)
U1(DF=N%T=3B-3D%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=Z%RUCK=0%RUD=G)
IE(DFI=S%T=3B-3D%TG=40%CD=S)

# Cisco 2820 Switch w/ OS v5.37
Fingerprint Cisco Catalyst 2820 switch (CatOS 5.37)
Class Cisco | CatOS | 6.X | switch
CPE cpe:/h:cisco:catalyst_2820
CPE cpe:/o:cisco:catos:5.37
SEQ(SP=42-6A%GCD=1-6%ISR=46-5E%TI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4%O2=M5B4%O3=M5B4%O4=M5B4%O5=M5B4%O6=M5B4)
WIN(W1=400%W2=400%W3=400%W4=400%W5=400%W6=400)
ECN(R=Y%DF=N%T=FA-104%TG=FF%W=400%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=FA-104%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=U)
T3(R=Y%DF=N%T=FA-104%TG=FF%W=400%S=O%A=S+%F=AS%O=M5B4%RD=0%Q=)
T4(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=U)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=U)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=U)
T7(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=U)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=FA-104%TG=FF%CD=S)

# Cisco Catalyst  Model WS-C6509 with WS-X6K-SUP1A-2GE running CatOS 6.3(3)
Fingerprint Cisco Catalyst WS-C6509 switch (CatOS 6.3)
Class Cisco | CatOS | 6.X | switch
CPE cpe:/h:cisco:catalyst_ws-c6509
CPE cpe:/o:cisco:catos:6.3
SEQ(SP=F5-FF%GCD=1-6%ISR=108-112%TI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4%O2=M5B4%O3=M5B4%O4=M5B4%O5=M5B4%O6=M5B4)
WIN(W1=1000%W2=1000%W3=1000%W4=1000%W5=1000%W6=1000)
ECN(R=Y%DF=N%T=19-23%TG=20%W=1000%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=19-23%TG=20%S=O%A=O|S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=19-23%TG=20%W=1000%S=O%A=O%F=A%O=%RD=0%Q=)
T4(R=N)
T5(R=Y%DF=N%T=19-23%TG=20%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=19-23%TG=20%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=19-23%TG=20%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-3D%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=Z%RUCK=0%RUD=G)
IE(DFI=S%T=3B-3D%TG=40%CD=S)

# WS-C6509 Software, Version NmpSW: 8.4(3)
# Cisco Catalyst 4003 CatOS 7.6(17) WS-C4003 Software, Version NmpSW: 7.6(17)
# Cisco Catalyst 4006 CatOS 7.6(17) WS-C4006 Software, Version NmpSW: 7.6(17)
# WS-C2948G with cat4000-k9.8-4-11-GLX
Fingerprint Cisco Catalyst 2948G, 4003, 4006, or 6509 switch (CatOS 7.6(17) - 8.4(3))
Class Cisco | CatOS | 7.X | switch
CPE cpe:/h:cisco:catalyst_4003
CPE cpe:/h:cisco:catalyst_4006
CPE cpe:/o:cisco:catos:7 auto
Class Cisco | CatOS | 8.X | switch
CPE cpe:/h:cisco:catalyst_2948g
CPE cpe:/h:cisco:catalyst_6509
CPE cpe:/o:cisco:catos:8 auto
SEQ(SP=FC-108%GCD=1-6%ISR=FA-112%TI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4%O2=M5B4%O3=M5B4%O4=M5B4%O5=M5B4%O6=M5B4)
WIN(W1=1000%W2=1000%W3=1000%W4=1000%W5=1000%W6=1000)
ECN(R=Y%DF=N%T=FA-104%TG=FF%W=1000%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=FA-104%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=FA-104%TG=FF%W=1000%S=O%A=S+%F=AS%O=M5B4%RD=0%Q=)
T4(R=Y%DF=N%T=FA-104%TG=FF%W=1000%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=Z%RUCK=0%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# WS-C6506 Software, Version NmpSW: 7.6(16)
Fingerprint Cisco Catalyst WS-C6506 switch (CatOS 7.6(16))
Class Cisco | CatOS | 7.X | switch
CPE cpe:/h:cisco:catalyst_ws-c6506
CPE cpe:/o:cisco:catos:7 auto
SEQ(SP=E5-109%GCD=1-6%ISR=107-111%TI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4%O2=M5B4%O3=M5B4%O4=M5B4%O5=M5B4%O6=M5B4)
WIN(W1=1000%W2=1000%W3=1000%W4=1000%W5=1000%W6=1000)
ECN(R=Y%DF=N%T=FA-104%TG=FF%W=1000%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=FA-104%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=FA-104%TG=FF%W=1000%S=O%A=S+%F=AS%O=M5B4%RD=0%Q=)
T4(R=Y%DF=N%T=FA-104%TG=FF%W=1000%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-3D%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=Z%RUCK=0%RUD=G)
IE(DFI=S%T=3B-3D%TG=40%CD=S)

# Cisco WS-C4506, Cisco Catalyst Operating System Software, Version 8.1(1)
Fingerprint Cisco Catalyst WS-C4506 switch (CatOS 8.1(1))
Class Cisco | CatOS | 8.X | switch
CPE cpe:/h:cisco:catalyst_ws-c4506
CPE cpe:/o:cisco:catos:8 auto
SEQ(SP=EB-FC%GCD=1-6%ISR=109-10E%TI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4%O2=M5B4%O3=M5B4%O4=M5B4%O5=M5B4%O6=M5B4)
WIN(W1=1000%W2=1000%W3=1000%W4=1000%W5=1000%W6=1000)
ECN(R=Y%DF=N%T=FA-104%TG=FF%W=1000%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=FA-104%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=FA-104%TG=FF%W=1000%S=O%A=S+%F=AS%O=M5B4%RD=0%Q=)
T4(R=Y%DF=N%T=FA-104%TG=FF%W=1000%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=Z%RUCK=0%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# Cisco Catalist WS-C2950G-24-EI, Software: 12.1(22)EA4a
Fingerprint Cisco Catalyst WS-C2950G switch
Class Cisco | CatOS || switch
CPE cpe:/h:cisco:catalyst_ws-c2950g
CPE cpe:/o:cisco:catos auto
SEQ(SP=FB-107%GCD=1-6%ISR=FF-109%TI=Z%II=I|RI%TS=U)
OPS(O1=M218LLNL|M218LLNN|M218NLNL|M218NNLL%O2=M218LLNL|M218LNLL|M218NNLL%O3=M218LLNL|M218NLLN|M218NLNL%O4=M218LLLL|M218LLNL|M218NLLL%O5=M218LLLL|M218LLNN|M218NLLL|M218NNLL%O6=M109LLNL|M109LLNN|M109NLNL|M109NNLL)
WIN(W1=1020%W2=1020%W3=1020%W4=1020%W5=1020%W6=1020)
ECN(R=Y%DF=N%T=FA-104%TG=FF%W=1020%O=M218LLNN|M218NLNL|M218NNLL%CC=N%Q=)
T1(R=Y%DF=N%T=FA-104%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=FA-104%TG=FF%W=1020%S=O%A=S+%F=AS%O=M218LLS|M218LLNL|M218NNLL%RD=0%Q=)
T4(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# CISCO 827H
Fingerprint Cisco 827H ADSL router (IOS 12.2)
Class Cisco | embedded || broadband router
CPE cpe:/o:cisco:ios:12.2
SEQ(SP=EF-113%GCD=1-6%ISR=102-114%TI=Z%II=RI%TS=U)
OPS(O1=M5B4%O2=M578%O3=M280%O4=M218%O5=M218%O6=M109)
WIN(W1=1020%W2=1020%W3=1020%W4=1020%W5=1020%W6=1020)
ECN(R=Y%DF=N%T=100%TG=FF%W=1020%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=100%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=100%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=100%TG=FF%W=0%S=A%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=100%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=N)
U1(DF=N%T=100%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=100%TG=FF%CD=S)

# CISCO C827H (MPC855T) ADSL ROUTER, IOS (tm) C820 Software (C820-Y6-M), Version 12.2(15)T5,  RELEASE SOFTWARE (fc1)
Fingerprint Cisco 827H ADSL router (IOS 12.2)
Class Cisco | embedded || broadband router
CPE cpe:/o:cisco:ios:12.2
SEQ(SP=FE-108%GCD=1-6%ISR=106-110%TI=Z%TS=U)
OPS(O1=M5B4%O2=M578%O3=M280%O4=M218%O5=M218%O6=M109)
WIN(W1=1020%W2=1020%W3=1020%W4=1020%W5=1020%W6=1020)
ECN(R=Y%DF=N%T=100%TG=FF%W=1020%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=100%TG=FF%S=O%A=O|S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=100%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=100%TG=FF%W=0%S=A%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=100%TG=FF%W=0%S=A|O%A=Z%F=R%O=%RD=0%Q=)
T7(R=N)
U1(DF=N%T=100%TG=FF%IPL=38%UN=0%RIPL=G%RID=0-FFFF%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=100%TG=FF%CD=S)

# Cisco EPC3212, Firmware Name:  epc3212-ESIP-16-v302r12901-100908cs.bin
Fingerprint Cisco EPC3212 cable modem
Class Cisco | embedded || broadband router
CPE cpe:/h:cisco:epc3212
SEQ(SP=FC-108%GCD=1-6%ISR=FF-10F%TI=I%CI=I%II=I%SS=S%TS=7)
OPS(O1=M5B4NW0NNT11%O2=M5B4NW0NNT11%O3=M5B4NW0NNT11%O4=M5B4NW0NNT11%O5=M5B4NW0NNT11%O6=M5B4NNT11)
WIN(W1=43E0%W2=4110%W3=423C%W4=43E0%W5=4180%W6=403D)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=4470%O=M5B4NW0%CC=N)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%RD=0)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%RD=0)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%RD=0)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Scientific Atlanta WebSTAR EPX2203 cable modem
# WebSTAR EPX2203 (Hardware Version: v2.0) (Software Version: v2.0.2r1152-060125epx2203-v202r1152-060125c-us-5-358.bin)
# Webstar EPX2203 Series cable modem
# ZyXEL ES-1528 Switch Firmware Version V1.12(ARD.3) Not ZynOS as it is not a layer 3 switch, only layer 2.
# Cisco EPC3212, Bootloader Version  2.3.0_R1
Fingerprint Cisco EPC3212 or Scientific Atlanta WebSTAR EPX2203 cable modem
Class Cisco | embedded || broadband router
CPE cpe:/h:cisco:epc3212
Class Scientific Atlanta | embedded || broadband router
CPE cpe:/h:sciatl:webstar_epx2203
SEQ(SP=CE-106%GCD=1-6%ISR=F6-10E%TI=I%II=I%SS=S%TS=7)
OPS(O1=M5B4NW0NNT11%O2=M5B4NW0NNT11%O3=M5B4NW0NNT11%O4=M5B4NW0NNT11%O5=M5B4NW0NNT11%O6=M5B4NNT11)
WIN(W1=43E0%W2=4110%W3=423C%W4=43E0%W5=4180%W6=403D)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=4470%O=M5B4NW0%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=403D%S=O%A=S+%F=AS%O=M5B4NW0NNT11%RD=0%Q=)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Cisco EPC3925 Bootloader Revision:    2.3.0_R1 Current Software Revision:      EPC3925-ESIP-12-v302r12911-100930c_upc
Fingerprint Cisco EPC3925 cable modem
Class Cisco | embedded || broadband router
CPE cpe:/h:cisco:epc3925
SEQ(SP=F8-102%GCD=1-6%ISR=F7-101%TI=I%TS=7)
OPS(O1=M5B4NW0NNT11%O2=M5B4NW0NNT11%O3=M5B4NW0NNT11%O4=M5B4NW0NNT11%O5=M5B4NW0NNT11%O6=M5B4NNT11)
WIN(W1=43E0%W2=4110%W3=423C%W4=4074%W5=4180%W6=403D)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=4470%O=M5B4NW0%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=403D%S=O%A=S+%F=AS%O=M5B4NW0NNT11%RD=0%Q=)
T4(R=N)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=N)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(R=N)

# Scientific-Atlanta, EPC2203 cable modem
# Motorola Surfboard SB5101E
# Cisco EPC3925
Fingerprint Cisco EPC3925, Motorola SURFboard SB5101E, or Scientific Atlanta EPC2203 cable modem
Class Cisco | embedded || broadband router
CPE cpe:/h:cisco:epc3925
Class Motorola | embedded || broadband router
CPE cpe:/h:motorola:sb5101e
Class Scientific Atlanta | embedded || broadband router
CPE cpe:/h:scientific_atlanta:epc2203
SEQ(SP=ED-10B%GCD=1-6%ISR=F9-10D%TI=I%CI=I%II=I%SS=S%TS=7)
OPS(O1=M5B4NW0NNT11%O2=M5B4NW0NNT11%O3=M5B4NW0NNT11%O4=M5B4NW0NNT11%O5=M5B4NW0NNT11%O6=M5B4NNT11)
WIN(W1=43E0%W2=4110%W3=423C%W4=4074%W5=4180%W6=403D)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=4470%O=M5B4NW0%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=O|S+%F=A|AR|AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Cisco Intrusion Prevention System, Version 7.0(4)E4, Platform: IPS4270-20-K9, Firmware: IPS-K9-7.0-4-E4
Fingerprint Cisco IPS 4270 intrusion prevention system
Class Cisco | embedded || firewall
CPE cpe:/h:cisco:ips_4270
SEQ(SP=FC-106%GCD=1-6%ISR=FC-106%TI=Z%CI=RD%II=I%TS=7|9)
OPS(O1=M564ST11NW0%O2=M564ST11NW0%O3=M564NNT11NW0%O4=M564ST11NW0%O5=M564ST11NW0%O6=M564ST11)
WIN(W1=16A0%W2=16A0%W3=16A0%W4=16A0%W5=16A0%W6=16A0)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=16D0%O=M564NNSNW0%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=O|S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=FA-104%TG=FF%W=80%S=Z%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=FA-104%TG=FF%W=100%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T4(R=Y%DF=N%T=FA-104%TG=FF%W=400%S=A%A=S%F=AR%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=O%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=8000%S=A%A=S%F=AR%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FA-104%TG=FF%W=FFFF%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# Cisco MARS 50, some type of Linux OS
Fingerprint Cisco MARS 50 firewall version 4.2.1
Class Cisco | embedded || firewall
CPE cpe:/h:cisco:mars_50:4.2.1
SEQ(SP=C4-CE%GCD=1-6%ISR=C2-CC%TI=Z%II=I%TS=7)
OPS(O1=M55CST11NW0%O2=M55CST11NW0%O3=M55CNNT11NW0%O4=M55CST11NW0%O5=M55CST11NW0%O6=M55CST11)
WIN(W1=16A0%W2=16A0%W3=16A0%W4=16A0%W5=16A0%W6=16A0)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=16D0%O=M55CNNSNW0%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=FA-104%TG=FF%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=Y%T=FA-104%TG=FF%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=FA-104%TG=FF%CD=S)

# HP WP110 print server, Firmware Version: 02.00, Firmware Build Date: 2001-09-14, Boot+Version: 01.00, Boot Build Date: 2001-07-23
# The printer is a XEROX Document Centre 405
# Cisco Micro Webserver 200, Cisco MicroWeb II, Software Version: Eclipse 1.0.1(100)
# Tektronix oscilloscope model TDS-3034B, Firmware V3.29. (c) 2001
# Tektronix os.350 on a XP350
Fingerprint Cisco Micro Webserver 200, HP WP110 print server, Tektronix TDS3034B oscilloscope or XP350 terminal, or Xerox Document Centre 405 printer
Class Cisco | embedded || general purpose
CPE cpe:/h:micro_webserver_200
Class HP | embedded || print server
CPE cpe:/h:hp:wp110 auto
Class Tektronix | os.350 || specialized
CPE cpe:/h:tektronix:tds3034b
CPE cpe:/o:tektronix:os_350
Class Tektronix | os.350 || terminal
CPE cpe:/h:tektronix:xp350
CPE cpe:/o:tektronix:os_350
Class Xerox | embedded || printer
CPE cpe:/h:xerox:document_centre_405
SEQ(SP=B-15%GCD=FA00|1F400|2EE00|3E800|4E200|5DC00%ISR=97-A1%TI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4%O2=M5B4%O3=M5B4%O4=M5B4%O5=M5B4%O6=M5B4)
WIN(W1=1000%W2=1000%W3=1000%W4=1000%W5=1000%W6=1000)
ECN(R=Y%DF=N%T=19-23%TG=20%W=1000%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=19-23%TG=20%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=19-23%TG=20%W=1000%S=O%A=O%F=A%O=%RD=0%Q=)
T4(R=Y%DF=N%T=19-23%TG=20%W=1000%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=19-23%TG=20%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=19-23%TG=20%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=19-23%TG=20%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=Z%RUCK=0%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# Cisco Application Control Software (ACSW), loader:    Version 12.2[123], system:    Version A2(1.6a)
Fingerprint Cisco ACE load balancer
Class Cisco | embedded || load balancer
SEQ(SP=F5-FF%GCD=1-6%ISR=FC-106%TI=Z%CI=RD%II=I%TS=U)
OPS(O1=M564%O2=M564%O3=M564%O4=M564%O5=M564%O6=M564)
WIN(W1=16D0%W2=16D0%W3=16D0%W4=16D0%W5=16D0%W6=16D0)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=16D0%O=M564%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=O|S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=FA-104%TG=FF%W=80%S=Z%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=FA-104%TG=FF%W=100%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T4(R=Y%DF=N%T=FA-104%TG=FF%W=400%S=A%A=S%F=AR%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=7A69%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=8000%S=A%A=S%F=AR%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FA-104%TG=FF%W=FFFF%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(R=N)
IE(DFI=N%T=7B-85%TG=80%CD=S)

# Cisco ACE proxy
Fingerprint Cisco ACE load balancer
Class Cisco | embedded || load balancer
SEQ(SP=100-10A%GCD=1-6%ISR=103-10D%TI=RD%TS=U)
OPS(O1=M5B4%O2=M5B4%O3=M5B4%O4=M5B4%O5=M5B4%O6=M5B4)
WIN(W1=8000%W2=8000%W3=8000%W4=8000%W5=8000%W6=8000)
ECN(R=Y%DF=N%T=FA-104%TG=FF%W=8000%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=FA-104%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=7A69%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=N)
T7(R=N)
U1(R=N)
IE(R=N)

# cisco proxy - ACE http://www.cisco.com/en/US/products/ps6906/index.html
Fingerprint Cisco ACE load balancer
Class Cisco | embedded || load balancer
SEQ(SP=FF-109%GCD=2|4|6|8|A%ISR=106-110%TI=RD%TS=U)
OPS(O1=M5B4%O2=M5B4%O3=M5B4%O4=M5B4%O5=M5B4%O6=M5B4)
WIN(W1=4000%W2=4000%W3=4000%W4=4000%W5=4000%W6=4000)
ECN(R=Y%DF=N%T=7B-85%TG=80%W=4000%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=7B-85%TG=80%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=7A69%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=N)
T7(R=N)
U1(R=N)
IE(R=N)

# Cisco ACE appliance proxy
Fingerprint Cisco ACE load balancer
Class Cisco | embedded || load balancer
SEQ(SP=FD-109%GCD=1-6%ISR=104-10E%TI=I%TS=U)
OPS(O1=M5B4%O2=M5B4%O3=M5B4%O4=M5B4%O5=M5B4%O6=M5B4)
WIN(W1=2000%W2=2000%W3=2000%W4=2000%W5=2000%W6=2000)
ECN(R=Y%DF=Y%T=7B-85%TG=80%W=2000%O=M5B4%CC=N%Q=)
T1(R=Y%DF=Y%T=7B-85%TG=80%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=7A69%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=N)
T7(R=N)
U1(R=N)
IE(R=N)

# Cisco SCE (Service Control Engine) 2020 (It runs VxWorks (unknown version) internally) Version 3.1.0 Build 108
Fingerprint Cisco SCE 2020 Service Control Engine load balancer
Class Cisco | embedded || load balancer
SEQ(SP=14-1E%GCD=FA00|1F400|2EE00|3E800|4E200%ISR=99-A3%TI=I%II=I%SS=S%TS=U)
OPS(O1=M200%O2=M200%O3=M200%O4=M200%O5=M200%O6=M200)
WIN(W1=A000%W2=A000%W3=A000%W4=A000%W5=A000%W6=A000)
ECN(R=Y%DF=N%T=3A-44%TG=40%W=A000%O=M200%CC=N%Q=)
T1(R=Y%DF=N%T=3A-44%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=3A-44%TG=40%W=A000%S=O%A=O%F=A%O=%RD=0%Q=)
T4(R=Y%DF=N%T=3A-44%TG=40%W=A000%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3A-44%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3A-44%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3A-44%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3A-44%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=Z%RUCK=0%RUD=G)
IE(DFI=S%T=3A-44%TG=40%CD=S)

# Cisco Systems, Inc./VPN 3000 Concentrator Version 4.1.7.O
Fingerprint Cisco VPN 3000 Concentrator VPN platform (software version 4.1.7.O)
Class Cisco | embedded || proxy server
CPE cpe:/h:cisco:vpn_3000_concentrator:4.1.7.0
SEQ(SP=D3-DD%GCD=1-6%ISR=DB-E5%TI=RD%II=RI%TS=1)
OPS(O1=M5B4NW0NNT11%O2=M5B4NW0NNT11%O3=M5B4NW0NNT11%O4=M5B4NW0NNT11%O5=M5B4NW0NNT11%O6=M5B4NNT11)
WIN(W1=2000%W2=2000%W3=2000%W4=2000%W5=2000%W6=2000)
ECN(R=Y%DF=N%T=7B-85%TG=80%W=2000%O=M5B4NW0%CC=N%Q=)
T1(R=Y%DF=N%T=7B-85%TG=80%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=7B-85%TG=80%W=2000%S=O%A=S+%F=AS%O=M5B4NW0NNT11%RD=0%Q=)
T4(R=Y%DF=N%T=7B-85%TG=80%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=7B-85%TG=80%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=7B-85%TG=80%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=7B-85%TG=80%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=7B-85%TG=80%IPL=38%UN=A05|41CF|41D1|5108|D8A5%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=7B-85%TG=80%CD=S)

# Cisco VPN Concentrator, software revision: "Cisco Systems, Inc./VPN 3000 Concentrator Version 4.7.2.D Dec 20 2005 15:26:54"
# VPN Concentrator Type: 3005 Cisco Systems, Inc./VPN 3000 Concentrator Version 4.7.Rel Mar 10 2005 14:58:16
Fingerprint Cisco VPN 3000 Concentrator VPN platform (software version 4.7)
Class Cisco | embedded || proxy server
CPE cpe:/h:cisco:vpn_3000_concentrator:4.7
SEQ(SP=CC-DA%GCD=1-6%ISR=CC-E4%TI=I%CI=I%II=RI%SS=O|S%TS=1|2)
OPS(O1=M5B4NW0NNT11%O2=M5B4NW0NNT11%O3=M5B4NW0NNT11%O4=M5B4NW0NNT11%O5=M5B4NW0NNT11%O6=M5B4NNT11)
WIN(W1=2000%W2=2000%W3=2000%W4=2000%W5=2000%W6=2000)
ECN(R=Y%DF=N%T=7B-85%TG=80%W=2000%O=M5B4NW0%CC=N%Q=)
T1(R=Y%DF=N%T=7B-85%TG=80%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=7B-85%TG=80%W=2000%S=O%A=S+%F=AS%O=M5B4NW0NNT11%RD=0%Q=)
T4(R=Y%DF=N%T=7B-85%TG=80%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=7B-85%TG=80%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=7B-85%TG=80%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=7B-85%TG=80%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=7B-85%TG=80%IPL=38%UN=127%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=7B-85%TG=80%CD=S)

# Cisco Concentrator 3030
Fingerprint Cisco VPN 3030 Concentrator VPN platform
Class Cisco | embedded || proxy server
CPE cpe:/h:cisco:vpn_3030_concentrator
SEQ(SP=D6-E0%GCD=1-6%ISR=D8-E2%TI=RD%II=RI%TS=1)
OPS(O1=M5B4NW0NNT11%O2=M5B4NW0NNT11%O3=M5B4NW0NNT11%O4=M5B4NW0NNT11%O5=M5B4NW0NNT11%O6=M5B4NNT11)
WIN(W1=2000%W2=2000%W3=2000%W4=2000%W5=2000%W6=2000)
ECN(R=Y%DF=N%T=7B-85%TG=80%W=2000%O=M5B4NW0%CC=N%Q=)
T1(R=Y%DF=N%T=7B-85%TG=80%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=7B-85%TG=80%W=2000%S=O%A=S+%F=AS%O=M5B4NW0NNT11%RD=0%Q=)
T4(R=Y%DF=N%T=7B-85%TG=80%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=7B-85%TG=80%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=7B-85%TG=80%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=7B-85%TG=80%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=7B-85%TG=80%IPL=38%UN=245F|7B1F|AC10%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=7B-85%TG=80%CD=S)

# Cisco Systems, Inc./VPN 3000 Concentrator Version 4.7.2.F (VPN Concentrator Type: 3030)
Fingerprint Cisco VPN 3030 Concentrator VPN platform (software 4.7.2.F)
Class Cisco | embedded || proxy server
CPE cpe:/h:cisco:vpn_3030_concentrator:4.7.2.f
SEQ(SP=CE-D8%GCD=1-6%ISR=CF-D9%TI=RD%II=RI%TS=1)
OPS(O1=M5B4NW0NNT11%O2=M5B4NW0NNT11%O3=M5B4NW0NNT11%O4=M5B4NW0NNT11%O5=M5B4NW0NNT11%O6=M5B4NNT11)
WIN(W1=2000%W2=2000%W3=2000%W4=2000%W5=2000%W6=2000)
ECN(R=Y%DF=N%T=7B-85%TG=80%W=2000%O=M5B4NW0%CC=N%Q=)
T1(R=Y%DF=N%T=7B-85%TG=80%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=7B-85%TG=80%W=2000%S=O%A=S+%F=AS%O=M5B4NW0NNT11%RD=0%Q=)
T4(R=Y%DF=N%T=7B-85%TG=80%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=7B-85%TG=80%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=7B-85%TG=80%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=7B-85%TG=80%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=7B-85%TG=80%IPL=38%UN=127|4B53|4BD7%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=7B-85%TG=80%CD=S)

# Cisco Wireless LAN Controller model 4402 (management port). sw version is 5.0.148.0.
# Cisco 4400 Series Wireless LAN Controller, AIR-WLC4402-25-K9
Fingerprint Cisco 4402 wireless LAN controller
Class Cisco | embedded || remote management
CPE cpe:/h:cisco:4402_wireless_lan_controller
SEQ(SP=C4-CE%GCD=1-6%ISR=C3-D1%TI=Z%TS=A)
OPS(O1=M56EST11NW2%O2=M56EST11NW2%O3=M56ENNT11NW2%O4=M56EST11NW2%O5=M56EST11NW2%O6=M56EST11)
WIN(W1=1588%W2=1588%W3=1588%W4=1588%W5=1588%W6=1588)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=15B8%O=M56ENNSNW2%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(R=N)

# c1700-k9o3sy7-mz.124-8.bin
Fingerprint Cisco 1700 router
Class Cisco | embedded || router
CPE cpe:/h:cisco:1700_router
SEQ(SP=F9-107%GCD=1-6%ISR=103-10D%TI=RD%II=RI%TS=U)
OPS(O1=M514%O2=M514%O3=M514%O4=M514%O5=M514%O6=M514)
WIN(W1=1020%W2=1020%W3=1020%W4=1020%W5=1020%W6=1020)
ECN(R=Y%DF=N%T=100%TG=FF%W=1020%O=M514%CC=N%Q=)
T1(R=Y%DF=N%T=100%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=100%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
T3(R=N)
T4(R=Y%DF=N%T=100%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=100%TG=FF%W=0%S=A%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=100%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=100%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=100%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=100%TG=FF%CD=S)

# Cisco 1700 series router
Fingerprint Cisco 1700-series router
Class Cisco | embedded || router
CPE cpe:/h:cisco:1700_router
SEQ(SP=FD-10B%GCD=1-6%ISR=FE-10E%TI=Z%CI=I%II=RI%TS=U)
OPS(O1=M5B4%O2=M578%O3=M280%O4=M5B4%O5=M218%O6=M109)
WIN(W1=1020%W2=1020%W3=1020%W4=1020%W5=1020%W6=1020)
ECN(R=Y%DF=N%T=100%TG=FF%W=1020%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=100%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=100%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=100%TG=FF%W=0%S=A%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=100%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=N)
U1(DF=N%T=100%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=100%TG=FF%CD=S)

# Cisco ASR 9010
Fingerprint Cisco ASR 9010 router
Class Cisco | embedded || router
CPE cpe:/h:cisco:asr_9010_router
SEQ(CI=I%II=RI%TS=U)
OPS(O1=M4D8W0L%O2=M4D8W0L%O3=M280W0L%O4=M4D8W0L%O5=M218W0L%O6=M109)
WIN(W1=4000%W2=4000%W3=4000%W4=4000%W5=4000%W6=4000)
ECN(R=Y%DF=N%T=FA-104%TG=FF%W=4000%O=M4D8W0L%CC=N)
T1(R=Y%DF=N%T=FA-104%TG=FF%S=O%A=S+%F=AS%RD=0)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%RD=0)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=Z%A=S+%F=AR%RD=0)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%RD=0)
T7(R=N)
U1(DF=N%T=FA-104%TG=FF%IPL=60%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# Cisco Network Analysis Module (NME-NAM-80S) Software version 4.1(1) RELEASE SOFTWARE [fc2] (Probably Linux --Ed.)
Fingerprint Cisco NME-NAM-80S network analysis module
Class Cisco | embedded || specialized
SEQ(SP=C5-CF%GCD=1-6%ISR=C2-CC%TI=Z%II=I%TS=U)
OPS(O1=M5B4%O2=M5B4%O3=M5B4%O4=M5B4%O5=M5B4%O6=M5B4)
WIN(W1=16D0%W2=16D0%W3=16D0%W4=16D0%W5=16D0%W6=16D0)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=16D0%O=M5B4%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=16D0%S=O%A=S+%F=AS%O=M5B4%RD=0%Q=)
T4(R=N)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=N)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# Cisco RFGW-1-D Universal Edge QAM Release 02.02.15
Fingerprint Cisco RFGW-1-D radio
Class Cisco | embedded || specialized
SEQ(SP=F2-10A%GCD=1-6%ISR=103-10D%TI=I%II=I%SS=S%TS=U)
OPS(O1=NNM564SNW0%O2=NNM564SNW0%O3=M564NW0%O4=NNM564SNW0%O5=NNM564SNW0%O6=NNM564S)
WIN(W1=2710%W2=2710%W3=2710%W4=2710%W5=2710%W6=2710)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=2710%O=NNM564SNW0%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=FA-104%TG=FF%W=80%S=Z%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=FA-104%TG=FF%W=100%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T4(R=Y%DF=N%T=FA-104%TG=FF%W=400%S=A%A=S%F=AR%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=O%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=8000%S=A%A=S%F=AR%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FA-104%TG=FF%W=FFFF%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=138%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=Z)

# Cisco 1900 switch
Fingerprint Cisco Catalyst 1900 switch
Class Cisco | embedded || switch
CPE cpe:/h:cisco:catalyst_1900
SEQ(SP=E-18%GCD=9C4|1388|1D4C|2710|30D4%ISR=8A-94%TI=I%II=I%SS=S%TS=U)
OPS(R=N)
WIN(R=N)
ECN(R=N)
T1(R=N)
T2(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=FA-104%TG=FF%W=400%S=O%A=O|S+%F=AS%O=M5B4%RD=0%Q=)
T4(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=FA-104%TG=FF%CD=S)

# Cisco Catalyst 1900 running Cisco Catalyst 1900/2820 Enterprise Edition Software Version V8.01.01
# This device is a Cisco 1900 Series Switch, running IOS v 9.00.04
# RAD (http://www.rad.com) TDM OVER IP MULTIPLEXER IPMUX-1/DC/E1/UPT/STC-E1, Boot version - 1.21, Application version - 4.07
Fingerprint Cisco Catalyst 1900 switch or RAD IPMUX-1 TDM-over-IP multiplexer
Class Cisco | embedded || switch
CPE cpe:/h:cisco:catalyst_1900
Class RAD Data Communications | embedded || switch
SEQ(SP=10-84%GCD=9C4|1388|1D4C|2710|30D4|6B6C|D6D8|14244|1ADB0|2191C%ISR=8A-AE%TI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4%O2=M5B4%O3=M5B4%O4=M5B4%O5=M5B4%O6=M5B4)
WIN(W1=400%W2=400%W3=400%W4=400%W5=400%W6=400)
ECN(R=Y%DF=N%T=FA-104%TG=FF%W=400%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=FA-104%TG=FF%S=O%A=O|S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=FA-104%TG=FF%W=400%S=O%A=S+%F=AS%O=M5B4%RD=0%Q=)
T4(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=FA-104%TG=FF%CD=S)

# Cisco Systems Catalyst 1900,V9.00.03, 19XX's runs neither IOS nor CatOS
Fingerprint Cisco Catalyst 1900 Switch, Software v9.00.03
Class Cisco | embedded || switch
CPE cpe:/h:cisco:catalyst_1900
SEQ(SP=F2-F6%GCD=1-6%ISR=106-108%TI=I|RD%II=I%SS=S%TS=U)
OPS(O1=M218%O2=M218%O3=M218%O4=M218%O5=M218%O6=M218)
WIN(W1=400%W2=400%W3=400%W4=400%W5=400%W6=400)
ECN(R=Y%DF=N%T=FA-104%TG=FF%W=400%O=M218%CC=N%Q=)
T1(R=Y%DF=N%T=FA-104%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=O%A=S+%F=AR%O=%RD=0%Q=)
T6(R=N)
T7(R=N)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=FA-104%TG=FF%CD=S)

# Cisco Catalyst 1912 A Switch (FW: V9.00.04)
# It runs neither IOS nor CatOS.
# The MIB says :
# RFC1213-MIB::sysDescr.0 = STRING: "Cisco Systems Catalyst 1900,V9.00.04    "
# RFC1213-MIB::sysObjectID.0 = OID: CISCO-SMI::workgroup.31
# Firmware is: V9.00.04    : Standard Edition
Fingerprint Cisco Catalyst 1912 switch
Class Cisco | embedded || switch
CPE cpe:/h:cisco:catalyst_1912
SEQ(SP=13-29%GCD=9C4|1388|1D4C|2710|30D4|3A98%ISR=8A-94%TI=I|RD%II=I%SS=S%TS=U)
OPS(O1=M218%O2=M218%O3=M218%O4=M218%O5=M218%O6=M218)
WIN(W1=400%W2=400%W3=400%W4=400%W5=400%W6=400)
ECN(R=Y%DF=N%T=FA-104%TG=FF%W=400%O=M218%CC=N%Q=)
T1(R=Y%DF=N%T=FA-104%TG=FF%S=O%A=O|S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=FA-104%TG=FF%W=400%S=O%A=O|S+%F=AS%O=M218%RD=0%Q=)
T4(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=FA-104%TG=FF%CD=S)

# Cisco Switch CE500
Fingerprint Cisco Catalyst Express 500 switch
Class Cisco | embedded || switch
CPE cpe:/h:cisco:catalyst_express_500
SEQ(SP=FF-109%GCD=1-6%ISR=103-10F%TI=RD%CI=RD%II=RI%TS=U)
OPS(O1=M5B4%O2=M578%O3=M280%O4=M218%O5=M218%O6=M109)
WIN(W1=1020%W2=1020%W3=1020%W4=1020%W5=1020%W6=1020)
ECN(R=Y%DF=N%T=FA-104%TG=FF%W=1020%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=FA-104%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=FA-104%TG=FF%W=1020%S=O%A=S+%F=AS%O=M7A6%RD=0%Q=)
T4(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# CSS11501 Software v.8.20.3.03
Fingerprint Cisco CSS 11501 switch
Class Cisco | embedded || switch
CPE cpe:/h:cisco:css_11501 auto
SEQ(CI=RD%II=I)
OPS()
WIN(W1=0%W2=0%W3=0%W4=0%W5=0%W6=0)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=0%CC=N)
T1(R=Y%DF=N%T=3B-45%TG=40%S=Z%A=S+%F=AR%RD=0)
T2(R=Y%DF=N%T=3E-48%TG=40%W=0%S=Z%A=S%F=AR%RD=0)
T3(R=Y%DF=N%T=3E-48%TG=40%W=0%S=Z%A=S+%F=AR%RD=0)
T4(R=Y%DF=N%T=3E-48%TG=40%W=0%S=A%A=S%F=R%RD=0)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%RD=0)
T6(R=Y%DF=N%T=3E-48%TG=40%W=0%S=A%A=S%F=R%RD=0)
T7(R=Y%DF=N%T=3E-48%TG=40%W=0%S=Z%A=S+%F=AR%RD=0)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=N%T=7A-84%TG=80%CD=Z)

# cisco MDS 9000
Fingerprint Cisco MDS 9000 switch
Class Cisco | embedded || switch
CPE cpe:/h:cisco:mds_9000
SEQ(SP=C5-CF%GCD=1-6%ISR=C8-D2%TI=I%CI=I%II=I%SS=S%TS=7)
OPS(O1=M5B4ST11NW6%O2=M5B4ST11NW6%O3=M5B4NNT11NW6%O4=M5B4ST11NW6%O5=M5B4ST11NW6%O6=M5B4ST11)
WIN(W1=16A0%W2=16A0%W3=16A0%W4=16A0%W5=16A0%W6=16A0)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=16D0%O=M5B4NNSNW6%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=3B-45%TG=40%W=16A0%S=O%A=S+%F=AS%O=M5B4ST11NW6%RD=0%Q=)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# Cisco Nexus 5000
Fingerprint Cisco Nexus 5000 switch
Class Cisco | embedded || switch
CPE cpe:/o:cisco:nexus_5000
SEQ(SP=F3-10B%GCD=1-6%ISR=FC-110%TI=I%CI=I%II=RI%SS=O|S%TS=3)
OPS(O1=M218NNT11%O2=M218NNT11%O3=M218NNT11%O4=M218NNT11%O5=M218NNT11%O6=M109NNT11)
WIN(W1=4884|4E18|5940|6468|69FC%W2=4BE8|5154|5C2C|6704|6C70%W3=4C0C|5368|5D38|6708|6E64%W4=4DC8|53EC|5E28|6864|6E88%W5=4DC8|53EC|5E28|6864|6E88%W6=4E13|5401|5EE0|68C2|6EB0)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=4E18|5940|6468|69FC|6F90%O=M218%CC=N)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%RD=0)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%RD=0)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%RD=0)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%RD=0)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# SG300-10 10 Port Gigabit PoE Managed Switch Firmware Ver. 1.1.1.8
# Cisco SG 300
# SG-200-26
Fingerprint Cisco SG 200 or SG 300 switch
Class Cisco | embedded || switch
CPE cpe:/h:cisco:sg_200
CPE cpe:/h:cisco:sg_300
SEQ(SP=F6-10C%GCD=1-6%ISR=102-116%TI=RD%CI=RD|RI%II=RI%TS=U)
OPS(O1=M596%O2=M596%O3=M596%O4=M596%O5=M596%O6=M596)
WIN(W1=1000%W2=1000%W3=1000%W4=1000%W5=1000%W6=1000)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=1000%O=M596%CC=N)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=O|S+%F=AS%RD=0)
T2(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%RD=0)
T3(R=Y%DF=N%T=3B-45%TG=40%W=1000%S=O%A=O|S+%F=AS%O=M596%RD=0)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%RD=0)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%RD=0)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%RD=0)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%RD=0)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Cisco SG300-10 10-Port Gigabit Managed Switch
# Cisco Small Business 200 Series Gigabit Smart Switch SLM2048T-EU in this case Firmware version 1.2.9.44
# Cisco SG200-5 50-Port Gigabit Smart Switch
Fingerprint Cisco SG 200 or SG 300 switch
Class Cisco | embedded || switch
CPE cpe:/h:cisco:sg_300
SEQ(SP=FE-108%GCD=1-6%ISR=106-110%TI=RD%CI=RD|RI%II=RI%TS=U)
OPS(O1=M596%O2=M596%O3=M596%O4=M596%O5=M596%O6=M596)
WIN(W1=1000%W2=1000%W3=1000%W4=1000%W5=1000%W6=1000)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=1000%O=M596%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
T3(R=N)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# HP ProCurve Switch 1810G-8 running P.1.17 version
# Cisco SG 200-08 8-Port Gigabit Smart Switch
Fingerprint Cisco SG 200-08 or HP ProCurve 1810G switch
Class Cisco | embedded || switch
CPE cpe:/h:cisco:sg_200-08
Class HP | embedded || switch
CPE cpe:/h:hp:procurve_switch_1810g
SEQ(SP=F5-109%GCD=1-6%ISR=F7-111%TI=I%CI=I%II=I%SS=S%TS=7)
OPS(O1=M5B4NW0NNT11%O2=M5B4NW0NNT11%O3=M5B4NW0NNT11%O4=M5B4NW0NNT11%O5=M5B4NW0NNT11%O6=M5B4NNT11)
WIN(W1=10F8%W2=1044%W3=112C%W4=1194%W5=1060%W6=10CD)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=111C%O=M5B4NW0%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Netgear GS724TP (PoE 24port gigabit switch)
# Dell PowerConnect 2748, Firmware Version 1.0.0.33, Boot Version 1.0.0.05
# Linksys SLM224P switch, Boot Version   1.0.4, Firmware Version   1.0.1
# Netgear FS728TP switch
# SLM2048
# APC SNMP Adapter
# SLM2024 Gigabit switch (24 port)
# FS728TP Smart Switch
# Cisco SG 300-10 Switch
Fingerprint Cisco SG 300-10, Dell PowerConnect 2748, Linksys SLM2024, SLM2048, or SLM224P, or Netgear FS728TP or GS724TP switch
Class Cisco | embedded || switch
CPE cpe:/h:cisco:sg_300-10
Class Dell | embedded || switch
CPE cpe:/h:dell:powerconnect_2748
Class Linksys | embedded || switch
CPE cpe:/h:linksys:slm2024
CPE cpe:/h:linksys:slm2048
CPE cpe:/h:linksys:slm224p
Class Netgear | embedded || switch
CPE cpe:/h:netgear:fs728tp
CPE cpe:/h:netgear:gs724tp
SEQ(SP=FB-10D%GCD=1-6%ISR=103-113%TI=RD%II=RI%TS=U)
OPS(O1=%O2=%O3=%O4=%O5=%O6=)
WIN(W1=1000%W2=1000%W3=1000%W4=1000%W5=1000%W6=1000)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=1000%O=%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=O|S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=3B-45%TG=40%W=1000%S=O%A=S+%F=AS%O=%RD=0%Q=)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# HP Switch: "PROCURVE J9028B" adm Software version PB.02.09, Hardware version R01
# HP ProCurve 1800-24G J9028B running firmware version PB.03.02
# Cisco Small Business Switch SLM2008 Firmware Revision 2.0.0.10
Fingerprint Cisco SLM2008 or HP ProCurve 1800 switch
Class Cisco | embedded || switch
CPE cpe:/h:cisco:slm2008
Class HP | embedded || switch
CPE cpe:/h:hp:procurve_1800 auto
SEQ(SP=C-16%GCD=A|14|1E|28|32%ISR=1E-28%TI=I%CI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4%O2=M5B4%O3=M5B4%O4=M5B4%O5=M5B4%O6=M5B4)
WIN(W1=600%W2=600%W3=600%W4=600%W5=600%W6=600)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=600%O=M5B4%CC=N%Q=|U)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=O|S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=3B-45%TG=40%W=80%S=A%A=S+%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=3B-45%TG=40%W=100%S=A%A=S+%F=AR%O=%RD=0%Q=)
T4(R=Y%DF=N%T=3B-45%TG=40%W=400%S=A%A=S+%F=AR%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=7A69%S=A%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=8000%S=A%A=S+%F=AR%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=FFFF%S=A%A=S+%F=AR%O=%RD=0%Q=)
U1(R=N)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# Cisco SLM-2008
Fingerprint Cisco SLM2008 switch
Class Cisco | embedded || switch
CPE cpe:/h:cisco:slm2008
SEQ(SP=C-16%GCD=A|14|1E|28|32%ISR=1D-27%TI=I%CI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4%O2=M5B4%O3=M5B4%O4=M5B4%O5=M5B4%O6=M5B4)
WIN(W1=600%W2=600%W3=600%W4=600%W5=600%W6=600)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=600%O=M5B4%CC=N%Q=U)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=3B-45%TG=40%W=80%S=A%A=S+%F=AR%O=%RD=0%Q=)
T3(R=N)
T4(R=Y%DF=N%T=3B-45%TG=40%W=400%S=A%A=S+%F=AR%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=7A69%S=A%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=8000%S=A%A=S+%F=AR%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=FFFF%S=A%A=S+%F=AR%O=%RD=0%Q=)
U1(R=N)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# Cisco SRW2008-K9 aka SG300-10 (this is the new Cisco re-packaged model and not the Linksys SRW2008 which doesn't have the K9 designation). (Sx300_FW-1.1.2.0.ros).
Fingerprint Cisco SRW2008-K9 switch
Class Cisco | embedded || switch
CPE cpe:/h:cisco:srw2008-k9 auto
SEQ(SP=FE-108%GCD=1-6%ISR=104-10E%TI=RD%CI=RD%II=RI%TS=U)
OPS(O1=M596%O2=M596%O3=M596%O4=M596%O5=M596%O6=M596)
WIN(W1=800%W2=800%W3=800%W4=800%W5=800%W6=800)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=800%O=M596%CC=N)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=O|S+%F=AS%RD=0)
T2(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%RD=0)
T3(R=Y%DF=N%T=3B-45%TG=40%W=800%S=O%A=O|S+%F=AS%O=M596%RD=0)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%RD=0)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%RD=0)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%RD=0)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%RD=0)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Cisco ATA 188 (SIP), S/W Version     3.02.01(050616A), Firmware        ATA030201SIP050616A.zup
Fingerprint Cisco ATA 188 VoIP adapter
Class Cisco | embedded || VoIP adapter
CPE cpe:/h:cisco:ata_188_voip_gateway
SEQ(CI=I%II=I)
OPS(R=N)
WIN(R=N)
ECN(R=N)
T1(R=N)
T2(R=Y%DF=N%T=F5-FF%TG=FF%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T3(R=N)
T4(R=Y%DF=N%T=F5-FF%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=F5-FF%TG=FF%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=F5-FF%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=F5-FF%TG=FF%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=F5-FF%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=F5-FF%TG=FF%CD=S)

# Cisco Communications Manager 7.1.1
Fingerprint Cisco Unified Communications Manager VoIP adapter
Class Cisco | embedded || VoIP adapter
CPE cpe:/a:cisco:unified_communications_manager:7.1.1
SEQ(SP=FE-10A%GCD=1-6%ISR=104-112%TI=Z%CI=RD%II=I%TS=A)
OPS(O1=M564ST11NW2%O2=M564ST11NW2%O3=M564NNT11NW2%O4=M564ST11NW2%O5=M564ST11NW2%O6=M564ST11)
WIN(W1=16A0%W2=16A0%W3=16A0%W4=16A0%W5=16A0%W6=16A0)
ECN(R=N)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=Y%T=22-3C%TG=40%W=80%S=A%A=S%F=AR%O=WANM109T10S%RD=0%Q=)
T3(R=Y%DF=N%T=21-3D%TG=40%W=100%S=A%A=S%F=AR%O=WANM109T10S%RD=0%Q=)
T4(R=Y%DF=Y%T=1F-3E%TG=20|40%W=400%S=A%A=S%F=AR%O=WANM109T10S%RD=0%Q=)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=O%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=1E-3E%TG=20|40%W=8000%S=A%A=S%F=AR%O=WANM109T10S%RD=0%Q=)
T7(R=Y%DF=N%T=1E-3E%TG=20|40%W=FFFF%S=A%A=S%F=AR%O=WFNM109T10S%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# Cisco Unified Call Manager 7.1.3.32900-4
# UNITY Connection
Fingerprint Cisco Unified Communications Manager VoIP adapter
Class Cisco | embedded || VoIP adapter
CPE cpe:/h:cisco:unified_call_manager
SEQ(SP=C6-D0%GCD=1-6%ISR=C9-D3%TI=Z%II=I%TS=A)
OPS(O1=M5B4ST11NW2%O2=M5B4ST11NW2%O3=M5B4NNT11NW2%O4=M5B4ST11NW2%O5=M5B4ST11NW2%O6=M5B4ST11)
WIN(W1=16A0%W2=16A0%W3=16A0%W4=16A0%W5=16A0%W6=16A0)
ECN(R=N)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=N)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# 7936 Cisco IP Conference Station
# CISCO Unified IP Conference Station 7935. Polycom hardware with CISCO software.
Fingerprint Cisco 7935 or 7936 IP Conference Station VoIP phone
Class Cisco | embedded || VoIP phone
CPE cpe:/h:cisco:unified_ip_conference_station_7935
CPE cpe:/h:cisco:unified_ip_conference_station_7936
SEQ(SP=13-1D%GCD=FA00|1F400|2EE00|3E800|4E200%ISR=98-A2%TI=I%CI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4%O2=M5B4%O3=M5B4%O4=M5B4%O5=M5B4%O6=M5B4)
WIN(W1=1000%W2=1000%W3=1000%W4=1000%W5=1000%W6=1000)
ECN(R=N)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=3B-45%TG=40%W=1000%S=O%A=O%F=A%O=%RD=0%Q=)
T4(R=Y%DF=N%T=3B-45%TG=40%W=1000%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=Z%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Cisco IP Conference Station Model 7936
Fingerprint Cisco 7936 IP Conference Station VoIP phone
Class Cisco | embedded || VoIP phone
CPE cpe:/h:cisco:unified_ip_conference_station_7936
SEQ(SP=17-21%GCD=FA00|1F400|2EE00|3E800|4E200%ISR=9C-A6%TI=I%CI=I%II=I%SS=S%TS=U)
OPS(O1=M200%O2=M200%O3=M200%O4=M200%O5=M200%O6=M200)
WIN(W1=2000%W2=2000%W3=2000%W4=2000%W5=2000%W6=2000)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=2000%O=M200%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=3B-45%TG=40%W=2000%S=O%A=O%F=A%O=%RD=0%Q=)
T4(R=Y%DF=N%T=3B-45%TG=40%W=2000%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=Z%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Cisco CP-7936G
Fingerprint Cisco 7936G IP Conference Station VoIP phone
Class Cisco | embedded || VoIP phone
CPE cpe:/h:cisco:unified_ip_conference_station_7936g
SEQ(SP=14-1E%GCD=FA00|1F400|2EE00|3E800|4E200%ISR=99-A3%TI=I%CI=I%II=I%SS=S%TS=U)
OPS(O1=M200%O2=M200%O3=M200%O4=M200%O5=M200%O6=M200)
WIN(W1=1000%W2=1000%W3=1000%W4=1000%W5=1000%W6=1000)
ECN(R=N)
T1(R=Y%DF=N%T=3D-47%TG=40%S=O%A=S+%F=AS%RD=0)
T2(R=N)
T3(R=Y%DF=N%T=3D-47%TG=40%W=1000%S=O%A=O%F=A%RD=0)
T4(R=Y%DF=N%T=3D-47%TG=40%W=1000%S=A%A=Z%F=R%RD=0)
T5(R=Y%DF=N%T=3D-47%TG=40%W=0%S=Z%A=S+%F=AR%RD=0)
T6(R=Y%DF=N%T=3D-47%TG=40%W=0%S=A%A=Z%F=R%RD=0)
T7(R=Y%DF=N%T=3D-47%TG=40%W=0%S=Z%A=S%F=AR%RD=0)
U1(DF=N%T=3D-47%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=Z%RUCK=0%RUD=G)
IE(DFI=S%T=3D-47%TG=40%CD=S)

# Cisco CP 8945 Phone
Fingerprint Cisco CP 8945 VoIP phone
Class Cisco | embedded || VoIP phone
CPE cpe:/h:cisco:cp_8945 auto
SEQ(SP=C1-CB%GCD=1-6%ISR=C1-CB%TI=Z%CI=Z%II=I%TS=7)
OPS(O1=M5B0ST11NW2%O2=M5B0ST11NW2%O3=M5B0NNT11NW2%O4=M5B0ST11NW2%O5=M5B0ST11NW2%O6=M5B0ST11)
WIN(W1=1690%W2=1690%W3=1690%W4=1690%W5=1690%W6=1690)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=16C0%O=M5B0NNSNW2%CC=N)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0)
T2(R=N)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=1690%S=O%A=S+%F=AS%O=M5B0ST11NW2%RD=0)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%RD=0)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%RD=0)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%RD=0)
T7(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%RD=0)
U1(DF=N%T=3B-45%TG=40%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# Cisco IP Phone 7941/7961 Phone,       uname -a reports:      CNU-OS  8.2(1.19) 3.3(0.2) CP-7941G BCM1100-C1(MIPS32)
# Cisco IP Phone 7941 Series
# Cisco IP Phone CP-7911G
# Cisco IP Phone CP-7970G, Version SCCP70.8-2-2SR2S
Fingerprint Cisco IP Phone (7911, 7941, 7961, or 7970)
Class Cisco | embedded || VoIP phone
CPE cpe:/h:cisco:unified_ip_phone_7911
CPE cpe:/h:cisco:unified_ip_phone_7941
CPE cpe:/h:cisco:unified_ip_phone_7961
CPE cpe:/h:cisco:unified_ip_phone_7970
SEQ(SP=FF-10B%GCD=1-8%ISR=101-111%TI=I%II=I%SS=S%TS=U)
OPS(O1=M578%O2=M578%O3=M578%O4=M578%O5=M578%O6=M578)
WIN(W1=2000%W2=2000%W3=2000%W4=2000%W5=2000%W6=2000)
ECN(R=N)
T1(R=Y%DF=N%T=1B-25%TG=20%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=1B-25%TG=20%W=2000%S=A%A=S%F=AR%O=%RD=0%Q=)
T5(R=Y%DF=N%T=1B-25%TG=20%W=2000%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=1B-25%TG=20%W=2000%S=A%A=S%F=AR%O=%RD=0%Q=)
T7(R=Y%DF=N%T=1B-25%TG=20%W=2000%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# Cisco IP Phone 7910
Fingerprint Cisco IP Phone 7910
Class Cisco | embedded || VoIP phone
CPE cpe:/h:cisco:unified_ip_phone_7910
SEQ(SP=0-5%GCD=5800|B000|10800|16000|1B800%ISR=88-92%TI=I%II=I%SS=S%TS=U)
OPS(O1=M578%O2=M578%O3=M578%O4=M578%O5=M578%O6=M578)
WIN(W1=578%W2=578%W3=578%W4=578%W5=578%W6=578)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=578%O=M578%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=3B-45%TG=40%W=578%S=O%A=S+%F=AS%O=M578%RD=0%Q=)
T4(R=Y%DF=N%T=3B-45%TG=40%W=578%S=Z%A=O%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=578%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=578%S=A%A=S%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=578%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# Cisco IP Phone 7911
Fingerprint Cisco IP Phone 7911
Class Cisco | embedded || VoIP phone
CPE cpe:/h:cisco:unified_ip_phone_7911
SEQ(SP=E5-EF%GCD=C|18|24|30|3C%ISR=105-10F%TI=I%CI=I%II=I%SS=S%TS=U)
OPS(O1=M578%O2=M578%O3=M578%O4=M578%O5=M578%O6=M578)
WIN(W1=2000%W2=2000%W3=2000%W4=2000%W5=2000%W6=2000)
ECN(R=N)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=3B-45%TG=40%W=2000%S=A%A=S%F=AR%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=2000%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=2000%S=A%A=S%F=AR%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=2000%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# Cisco IP Phone 7912 Series
Fingerprint Cisco IP Phone 7912-series
Class Cisco | embedded || VoIP phone
CPE cpe:/h:cisco:unified_ip_phone_7912
SEQ(SP=0-35%GCD=1000|2000|3000|4000|5000|B000|16000|21000|2C000|37000%ISR=90-9A%TI=I%CI=I%II=I%SS=S%TS=U)
OPS(O1=M5B0%O2=M5B0%O3=M5B0%O4=M5B0%O5=M5B0%O6=M5B0)
WIN(W1=578%W2=578%W3=578%W4=578%W5=578%W6=578)
ECN(R=Y%DF=N%T=F5-FF%TG=FF%W=578%O=M5B0%CC=N%Q=)
T1(R=Y%DF=N%T=F5-FF%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=F5-FF%TG=FF%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=F5-FF%TG=FF%W=578%S=O%A=S+%F=AS%O=M5B0%RD=0%Q=)
T4(R=Y%DF=N%T=F5-FF%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=F5-FF%TG=FF%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=F5-FF%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=F5-FF%TG=FF%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=F5-FF%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=F5-FF%TG=FF%CD=S)

# Cisco IP Phone 7912
Fingerprint Cisco IP Phone 7912-series
Class Cisco | embedded || VoIP phone
CPE cpe:/h:cisco:unified_ip_phone_7912
SEQ(CI=I%II=I%TS=U)
OPS(R=N)
WIN(R=N)
ECN(R=N)
T1(R=Y%DF=N%T=F5-FF%TG=FF%S=O%A=O|S+%F=A|AS%RD=0%Q=)
T2(R=Y%DF=N%T=F5-FF%TG=FF%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T3(R=N)
T4(R=Y%DF=N%T=F5-FF%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=F5-FF%TG=FF%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=F5-FF%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=F5-FF%TG=FF%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=F5-FF%TG=FF%IPL=38)
IE(R=N)

# Cisco IP Phone 7912G (SCCP) Software Version        6.01.00(051208A)
Fingerprint Cisco IP Phone 7912G
Class Cisco | embedded || VoIP phone
CPE cpe:/h:cisco:unified_ip_phone_7912g
SEQ(SP=FC-106%GCD=1-6%ISR=102-10C%TI=I%II=I%SS=S%TS=U)
OPS(O1=M564%O2=M564%O3=M564%O4=M564%O5=M564%O6=M564)
WIN(W1=578%W2=578%W3=578%W4=578%W5=578%W6=578)
ECN(R=Y%DF=N%T=F6-100%TG=FF%W=578%O=M564%CC=N%Q=)
T1(R=Y%DF=N%T=F6-100%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=Y%T=23-3D%TG=40%W=80%S=A%A=S%F=AR%O=WANM109T10S%RD=0%Q=)
T3(R=Y%DF=N%T=23-35%TG=40%W=100%S=A%A=S+%F=AR%O=WANM109T10S%RD=0%Q=)
T4(R=Y%DF=Y%T=21-2D|33-3E%TG=40%W=400%S=A%A=S%F=AR%O=WANM109T10S%RD=0%Q=)
T5(R=Y%DF=N%T=F6-100%TG=FF%W=0%S=O%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=21-3D%TG=40%W=8000%S=A%A=S%F=AR%O=WANM109T10S%RD=0%Q=)
T7(R=Y%DF=N%T=2B-3F%TG=40%W=FFFF%S=A%A=S+%F=AR%O=WFNM109T10S%RD=0%Q=)
U1(DF=N%T=F6-100%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=F6-100%TG=FF%CD=S)

# Cisco IP Phone 7941
Fingerprint Cisco IP Phone 7941
Class Cisco | embedded || VoIP phone
CPE cpe:/h:cisco:unified_ip_phone_7941
SEQ(SP=101-10B%GCD=1-6%ISR=107-111%TI=I%II=I%SS=S%TS=U)
OPS(O1=M564%O2=M564%O3=M564%O4=M564%O5=M564%O6=M564)
WIN(W1=2000%W2=2000%W3=2000%W4=2000%W5=2000%W6=2000)
ECN(R=N)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=O|S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=Y%DF=N%T=3B-45%TG=40%W=2000%S=O%A=S+%F=AR%O=%RD=0%Q=)
T6(R=N)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# Cisco 7941 phone running SIP firmware 8.3(3)SR2
# Cisco CP-7961G-GE, SCCP41.8-3-3SR2S
# Cisco CP-7941G, SCCP41.8-3-4SR1S
# Cisco IP Phone 7975
# Cisco Unified IP Phone 7965G, Global, Gig Ethernet, Color, Version         SCCP45.8-5-2SR1S
Fingerprint Cisco IP Phone 7941, 7961, 7965G, or 7975
Class Cisco | embedded || VoIP phone
CPE cpe:/h:cisco:unified_ip_phone_7941
CPE cpe:/h:cisco:unified_ip_phone_7961
CPE cpe:/h:cisco:unified_ip_phone_7965g
CPE cpe:/h:cisco:unified_ip_phone_7975
CPE cpe:/h:cisco:unified_ip_phone
SEQ(SP=C9-109%GCD=1-6%ISR=FE-112%TI=I%CI=I%II=I%SS=S%TS=U)
OPS(O1=M578%O2=M578%O3=M578%O4=M578%O5=M578%O6=M578)
WIN(W1=2000%W2=2000%W3=2000%W4=2000%W5=2000%W6=2000)
ECN(R=N)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=3B-45%TG=40%W=2000%S=A%A=S%F=AR%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=2000%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=2000%S=A%A=S%F=AR%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=2000%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# Cisco Unified IP Phone 7942G Version         SCCP42.8-5-2SR1S
Fingerprint Cisco IP Phone 7942G
Class Cisco | embedded || VoIP phone
CPE cpe:/h:cisco:unified_ip_phone_7942g
SEQ(SP=F6-10A%GCD=2|4|6|8|A%ISR=105-10F%TI=I%II=I%SS=S%TS=U)
OPS(O1=M546%O2=M546%O3=M546%O4=M546%O5=M546%O6=M546)
WIN(W1=2000%W2=2000%W3=2000%W4=2000%W5=2000%W6=2000)
ECN(R=N)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=Y%DF=N%T=3B-45%TG=40%W=2000%S=Z%A=S+%F=AR%RD=0)
T6(R=N)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# Cisco Unified IP Phone 7961G Version 9.3(1.1S)
Fingerprint Cisco IP Phone 7961G
Class Cisco | embedded || VoIP phone
CPE cpe:/h:cisco:unified_ip_phone_7961g
SEQ(SP=FA-104%GCD=1-6%ISR=102-10C%TI=I%II=I%SS=S%TS=U)
OPS(O1=M53C%O2=M53C%O3=M53C%O4=M53C%O5=M53C%O6=M53C)
WIN(W1=2000%W2=2000%W3=2000%W4=2000%W5=2000%W6=2000)
ECN(R=N)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=Y%DF=N%T=3B-45%TG=40%W=2000%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=N)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# Cisco IP Phone CP-7961G Version  7.0(3.0S)
Fingerprint Cisco IP Phone 7961G
Class Cisco | embedded || VoIP phone
CPE cpe:/h:cisco:unified_ip_phone_7961g
SEQ(SP=101-10B%GCD=2|4|6|8|A%ISR=105-10F%TI=I%CI=I%II=I%SS=S%TS=U)
OPS(O1=M578%O2=M578%O3=M578%O4=M578%O5=M578%O6=M578)
WIN(W1=2000%W2=2000%W3=2000%W4=2000%W5=2000%W6=2000)
ECN(R=Y%DF=N%T=1B-25%TG=20%W=2000%O=M578%CC=N%Q=)
T1(R=Y%DF=N%T=1B-25%TG=20%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=1B-25%TG=20%W=2000%S=A%A=S%F=AR%O=%RD=0%Q=)
T5(R=Y%DF=N%T=1B-25%TG=20%W=2000%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=1B-25%TG=20%W=2000%S=A%A=S%F=AR%O=%RD=0%Q=)
T7(R=Y%DF=N%T=1B-25%TG=20%W=2000%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# Cisco CP-7971G-GE
Fingerprint Cisco IP Phone 7971G-GE
Class Cisco | embedded || VoIP phone
CPE cpe:/h:cisco:unified_ip_phone_7971g-ge
SEQ(SP=FC-106%GCD=1-6%ISR=FE-108%TI=I%CI=I%II=I%SS=S%TS=U)
OPS(O1=M550%O2=M550%O3=M550%O4=M550%O5=M550%O6=M550)
WIN(W1=2000%W2=2000%W3=2000%W4=2000%W5=2000%W6=2000)
ECN(R=N)
T1(R=Y%DF=N%T=3D-47%TG=40%S=O%A=S+%F=AS%RD=0)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=3D-47%TG=40%W=2000%S=A%A=S%F=AR%RD=0)
T5(R=Y%DF=N%T=3D-47%TG=40%W=2000%S=Z%A=S+%F=AR%RD=0)
T6(R=Y%DF=N%T=3D-47%TG=40%W=2000%S=A%A=S%F=AR%RD=0)
T7(R=Y%DF=N%T=3D-47%TG=40%W=2000%S=Z%A=S+%F=AR%RD=0)
U1(DF=N%T=3D-47%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3D-47%TG=40%CD=S)

# Cisco Unified IP Phone CP-7975G
Fingerprint Cisco IP Phone 7975G
Class Cisco | embedded || VoIP phone
CPE cpe:/h:cisco:unified_ip_phone_7975g
SEQ(SP=FC-106%GCD=1-6%ISR=108-112%TI=I%CI=I%II=I%SS=S%TS=U)
OPS(O1=M53C%O2=M53C%O3=M53C%O4=M53C%O5=M53C%O6=M53C)
WIN(W1=2000%W2=2000%W3=2000%W4=2000%W5=2000%W6=2000)
ECN(R=N)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=3B-45%TG=40%W=2000%S=A%A=S%F=AR%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=2000%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=2000%S=A%A=S%F=AR%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=2000%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# Cisco CP-7970G running software SCCP70.8-2-2SR1S
Fingerprint Cisco IP Phone CP-7970G
Class Cisco | embedded || VoIP phone
CPE cpe:/h:cisco:unified_ip_phone_7970g
SEQ(SP=C9-DB%GCD=40|80|C0|100|140%ISR=102-10C%TI=I%II=I%SS=S%TS=U)
OPS(O1=M578%O2=M578%O3=M578%O4=M578%O5=M578%O6=M578)
WIN(W1=2000%W2=2000%W3=2000%W4=2000%W5=2000%W6=2000)
ECN(R=N)
T1(R=Y%DF=N%T=1B-25%TG=20%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=1B-25%TG=20%W=2000%S=A%A=S%F=AR%O=%RD=0%Q=)
T5(R=Y%DF=N%T=1B-25%TG=20%W=2000%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=1B-25%TG=20%W=2000%S=A%A=S%F=AR%O=%RD=0%Q=)
T7(R=Y%DF=N%T=1B-25%TG=20%W=2000%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# Cisco SPA303 VoIP phone
Fingerprint Cisco SPA 303 VoIP phone
Class Cisco | embedded || VoIP phone
CPE cpe:/h:cisco:spa303_3-line_ip_phone_with_2-port_switch
SEQ(SP=EF-F9%GCD=1-6%ISR=104-10E%TI=RD%II=I%TS=22)
OPS(O1=M5B4NNSNW3NNT11%O2=M5B4NNSNW3NNT11%O3=M5B4NW3NNT11%O4=M5B4NNSNW3NNT11%O5=M5B4NNSNW3NNT11%O6=M5B4NNSNNT11)
WIN(W1=4000%W2=4000%W3=4000%W4=4000%W5=4000%W6=4000)
ECN(R=Y%DF=Y%T=3C-46%TG=40%W=4000%O=M5B4NNSNW3%CC=N%Q=)
T1(R=Y%DF=Y%T=3C-46%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=N)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=Z%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# *** Ethernet Routing Switch 5520-48T-PWR                    ***
# *** BOSS 5.0 SSH                                            ***
#  *** HW:31       FW:5.0.0.2   SW:v5.0.0.011                  ***
# Nortel v5.0.1.0 Ethernet routing switch
# Sun StorageTek 6140 Array
# CISCO IP PHONE 303 (SPA303) SW.version: 7.4.8a
Fingerprint Cisco SPA 303 VoIP phone, Nortel 5520 Ethernet Routing Switch, or Sun StorageTek 6140 NAS device
Class Cisco | embedded || VoIP phone
CPE cpe:/h:cisco:spa303_3-line_ip_phone_with_2-port_switch
Class Nortel | embedded || switch
CPE cpe:/h:nortel:ethernet_routing_switch_5520
Class Sun | embedded || storage-misc
CPE cpe:/h:sun:storagetek_6140 auto
SEQ(SP=95-9F%GCD=1-6%ISR=9B-A5%TI=I%II=I%SS=S%TS=1)
OPS(O1=M5B4NW0NNT11%O2=M5B4NW0NNT11%O3=M5B4NW0NNT11%O4=M5B4NW0NNT11%O5=M5B4NW0NNT11%O6=M5B4NNT11)
WIN(W1=2000%W2=2000%W3=2000%W4=2000%W5=2000%W6=2000)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=2000%O=M5B4NW0%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=3B-45%TG=40%W=2000%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=Z%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# SPA 502G
Fingerprint Cisco SPA 502G VoIP phone
Class Cisco | embedded || VoIP phone
CPE cpe:/h:cisco:small_business_ip_phone:spa505g
SEQ(SP=100-10A%GCD=1-6%ISR=106-110%TI=I%II=I%SS=S%TS=1)
OPS(O1=M5B4NW0NNT11%O2=M578NW0NNT11%O3=M280NW0NNT11%O4=M22CNW0NNT11%O5=M218NW0NNT11%O6=M109NNT11)
WIN(W1=2000%W2=2000%W3=2000%W4=2000%W5=2000%W6=2000)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=2000%O=M5B4NW0%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=N)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=Z%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Cisco IP Phone 7905G, SIP Firmware 8.0.0
# Cisco IP Phone 7960 series phone
# Cisco ATA phone adapter
Fingerprint Cisco Unified IP Phone 7905G or 7960
Class Cisco | embedded || VoIP phone
CPE cpe:/h:cisco:unified_ip_phone_7905g
CPE cpe:/h:cisco:unified_ip_phone_7960
SEQ(SP=0-1B%GCD=1000|2000|3000|4000|5000|A000|14000|1E000|28000|32000%ISR=90-9A%TI=I%II=I%SS=S%TS=U)
OPS(O1=M5B0%O2=M5B0%O3=M5B0%O4=M5B0%O5=M5B0%O6=M5B0)
WIN(W1=3E80%W2=3E80%W3=3E80%W4=3E80%W5=3E80%W6=3E80)
ECN(R=Y%DF=N%T=F5-FF%TG=FF%W=3E80%O=M5B0%CC=N%Q=)
T1(R=Y%DF=N%T=F5-FF%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=F5-FF%TG=FF%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=F5-FF%TG=FF%W=3E80%S=O%A=O|S+%F=A|AS%O=|M5B0%RD=0%Q=)
T4(R=Y%DF=N%T=F5-FF%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=F5-FF%TG=FF%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=F5-FF%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=F5-FF%TG=FF%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=F5-FF%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=F5-FF%TG=FF%CD=S)

Fingerprint Cisco Unified IP Phone 7960
Class Cisco | embedded || VoIP phone
CPE cpe:/h:cisco:unified_ip_phone_7960
SEQ(SP=102-10C%GCD=1-6%ISR=104-10E%TI=I%II=I%SS=S%TS=U)
OPS(O1=M578%O2=M578%O3=M578%O4=M578%O5=M578%O6=M578)
WIN(W1=578%W2=578%W3=578%W4=578%W5=578%W6=578)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=578%O=M578%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=3B-45%TG=40%W=578%S=O%A=S+%F=AS%O=M578%RD=0%Q=)
T4(R=Y%DF=N%T=3B-45%TG=40%W=578%S=Z%A=O%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=578%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=578%S=A%A=S%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=578%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# Cisco Wireless IP Phone 7920-ETSI
Fingerprint Cisco Wireless IP Phone 7920-ETSI
Class Cisco | embedded || VoIP phone
CPE cpe:/h:cisco:unified_wireless_ip_phone_7920
SEQ(R=N)
OPS(R=N)
WIN(R=N)
ECN(R=N)
T1(R=N)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=3B-45%TG=40%W=4000%S=A|O%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=O|S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A|O%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=O|S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=4210%RIPCK=Z%RUCK=G%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# ASR1002 IOS XE 2.6.2
# SOL-AKL1006-B bootflash:/asr1000rp1-advipservicesk9.03.02.00.S.151-1.S.bin
Fingerprint Cisco ASR 1002 router
Class Cisco | IOS XE | 2.X | router
CPE cpe:/h:cisco:asr_1002_router
CPE cpe:/o:cisco:ios_xe:2 auto
SEQ(SP=F2-10A%GCD=1-6%ISR=FC-10E%TI=RD%CI=RD%II=RI%TS=U)
OPS(O1=M218%O2=M218%O3=M218%O4=M218%O5=M218%O6=M109)
WIN(W1=1020%W2=1020%W3=1020%W4=1020%W5=1020%W6=1020)
ECN(R=Y%DF=N%T=FB-105%TG=FF%W=1020%O=M218%CC=N%Q=)
T1(R=Y%DF=N%T=FB-105%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=FB-105%TG=FF%W=1020%S=O%A=S+%F=AS%O=M109%RD=0%Q=)
T4(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FB-105%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=FB-105%TG=FF%CD=S)

# Cisco IOS XR Software, Version 3.4.1[00]
# Cisco IOS XR Software, Version 3.6.2[00] cisco CRS-16/S (7457) processor
Fingerprint Cisco CRS-1 router (IOS XR 3.4.1 - 3.6.2)
Class Cisco | IOS XR | 3.X | router
CPE cpe:/o:cisco:ios_xr:3 auto
SEQ(SP=F9-109%GCD=1-6%ISR=100-110%TI=Z%II=RI%TS=U)
OPS(O1=M4D8W0L%O2=M4D8W0L%O3=M280W0L%O4=M218W0L%O5=M218W0L%O6=M109)
WIN(W1=4000%W2=4000%W3=4000%W4=4000%W5=4000%W6=4000)
ECN(R=Y%DF=N%T=FA-104%TG=FF%W=4000%O=M4D8W0L%CC=N%Q=)
T1(R=Y%DF=N%T=FA-104%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# Cisco IOS XR 4.1.1
Fingerprint Cisco IOS XR 4.1.1
Class Cisco | IOS XR | 4.X | router
CPE cpe:/o:cisco:ios_xr:4 auto
SEQ(CI=I%II=RI%TS=U)
OPS(O1=M5B4W0L%O2=M578W0L%O3=M280W0L%O4=M4D8W0L%O5=M218W0L%O6=M109)
WIN(W1=4000%W2=4000%W3=4000%W4=4000%W5=4000%W6=4000)
ECN(R=Y%DF=N%T=FB-105%TG=FF%W=4000%O=M5B4W0L%CC=N)
T1(R=Y%DF=N%T=FB-105%TG=FF%S=O%A=S+%F=AS%RD=0)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=Z%F=R%RD=0)
T5(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=Z%A=S+%F=AR%RD=0)
T6(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=Z%F=R%RD=0)
T7(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=Z%A=S+%F=AR%RD=0)
U1(DF=N%T=FB-105%TG=FF%IPL=60%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=FB-105%TG=FF%CD=S)

# IOS (tm) 3000 Software (IGS-I-L), Version 10.3(7), RELEASE SOFTWARE (fc1)
Fingerprint Cisco 3000 switch (IOS 10.3)
Class Cisco | IOS | 10.X | switch
CPE cpe:/h:cisco:catalyst_3000
CPE cpe:/o:cisco:ios:10.3
SEQ(R=N)
OPS(R=N)
WIN(R=N)
ECN(R=N)
T1(R=N)
T2(R=Y%DF=N%T=100%TG=FF%W=0%S=Z%A=O|S%F=AR%O=%RD=0%Q=)
T3(R=N)
T4(R=Y%DF=N%T=100%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=N)
T6(R=Y%DF=N%T=100%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=100%TG=FF%W=0%S=Z%A=O|S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=100%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=100%TG=FF%CD=S)

# Cisco 2500 (68030) IGS-I-L, Version 11.1(24)
Fingerprint Cisco 2500 router (IOS 11.1)
Class Cisco | IOS | 11.X | router
CPE cpe:/h:cisco:2500_router
CPE cpe:/o:cisco:ios:11.1
SEQ(SP=3B-51%GCD=1-6%ISR=9A-A4%TI=Z%II=RI%TS=U)
OPS(O1=M218%O2=M218%O3=M218%O4=M218%O5=M218%O6=M218)
WIN(W1=860%W2=860%W3=860%W4=860%W5=860%W6=860)
ECN(R=Y%DF=N%T=100%TG=FF%W=860%O=M218%CC=N%Q=)
T1(R=Y%DF=N%T=100%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=100%TG=FF%W=0%S=Z%A=O|S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=100%TG=FF%W=860%S=O%A=S+%F=AS%O=M218%RD=0%Q=)
T4(R=Y%DF=N%T=100%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=100%TG=FF%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=100%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=100%TG=FF%W=0%S=Z%A=O|S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=100%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=100%TG=FF%CD=S)

# IOS (tm) C2600 Software (C2600-IS-M), Version 11.3(4)T1,  RELEASE SOFTWARE (fc1)
Fingerprint Cisco 2600 router (IOS 11.3)
Class Cisco | IOS | 11.X | router
CPE cpe:/h:cisco:2600_router
CPE cpe:/o:cisco:ios:11.3
SEQ(SP=5C-66%GCD=1-6%ISR=9A-A4%TI=Z%II=RI%TS=U)
OPS(O1=M5B4%O2=M5B4%O3=M5B4%O4=M5B4%O5=M5B4%O6=M5B4)
WIN(W1=1020%W2=1020%W3=1020%W4=1020%W5=1020%W6=1020)
ECN(R=Y%DF=N%T=FB-105%TG=FF%W=1020%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=FB-105%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=S+%F=AR%O=%RD=0%Q=)
T6(R=N)
T7(R=N)
U1(DF=N%T=FB-105%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=FB-105%TG=FF%CD=S)

# Cisco Internetwork Operating System Software  IOS (tm) C2900XL Software (C2900XL-H-M), Version 11.2(8)SA5, RELEASE SOFTWARE (fc1)
# IOS (tm) C2900XL Software (C2900XL-HS-M), Version 11.2(8.11)SA6, MAINTENANCE INTERIM SOFTWARE
Fingerprint Cisco 2900XL switch (IOS 11.2)
Class Cisco | IOS | 11.X | switch
CPE cpe:/h:cisco:catalyst_2900xl
CPE cpe:/o:cisco:ios:11.2
SEQ(SP=64-94%GCD=1-6%ISR=9A-A4%TI=Z%II=RI%TS=U)
OPS(O1=M5B4%O2=M5B4%O3=M5B4%O4=M5B4%O5=M5B4%O6=M5B4)
WIN(W1=10C0%W2=10C0%W3=10C0%W4=10C0%W5=10C0%W6=10C0)
ECN(R=Y%DF=N%T=FA-104%TG=FF%W=10C0%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=FA-104%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=O|S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=FA-104%TG=FF%W=10C0%S=O%A=S+%F=AS%O=M5B4%RD=0%Q=)
T4(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=O|S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# IOS (tm) C2900XL Software (C2900XL-HS-M), Version 11.2(8.6)SA6
Fingerprint Cisco 2900XL switch (IOS 11.2)
Class Cisco | IOS | 11.X | switch
CPE cpe:/h:cisco:catalyst_2900xl
CPE cpe:/o:cisco:ios:11.2
SEQ(SP=3F-8D%GCD=1-6%ISR=9A-A4%TI=Z%II=RI%TS=U)
OPS(O1=M218%O2=M218%O3=M218%O4=M218%O5=M218%O6=M218)
WIN(W1=10C0%W2=10C0%W3=10C0%W4=10C0%W5=10C0%W6=10C0)
ECN(R=Y%DF=N%T=FA-104%TG=FF%W=10C0%O=M218%CC=N%Q=)
T1(R=Y%DF=N%T=FA-104%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=O%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=FA-104%TG=FF%W=10C0%S=O%A=S+%F=AS%O=M218%RD=0%Q=)
T4(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# Cisco WS-C3512-XL
# Cisco IOS (tm) C3500XL Software (C3500XL-C3H2S-M), Version 12.0(5)WC10
# IOS (tm) C2900XL Software (C2900XL-C3H2S-M), Version 12.0(5)WC17, RELEASE SOFTWARE (fc1)
# IOS (tm) C3500XL Software (C3500XL-C3H2S-M), Version 12.0(5)WC17, RELEASE SOFTWARE (fc1)
# Cisco 3548XL switch, IOS 12.0(5)WC16 Enterprise Edition
# IOS (tm) C2600 Software (C2600-I-M), Version 11.3(11b)T5,  RELEASE SOFTWARE (fc1)
# IOS (tm) C2950 Software (C2950-C3H2S-M), Version 12.0(5.3)WC(1)
Fingerprint Cisco Catalyst 2600-, 2900- or 3500 XL-series switch (IOS 11.3 - 12.0)
Class Cisco | IOS | 11.X | switch
CPE cpe:/h:cisco:catalyst_2600
CPE cpe:/o:cisco:ios:11 auto
Class Cisco | IOS | 12.X | switch
CPE cpe:/h:cisco:catalyst_2900
CPE cpe:/h:cisco:catalyst_3500_xl
CPE cpe:/o:cisco:ios:12 auto
SEQ(SP=ED-10B%GCD=1-6%ISR=102-10E%TI=Z%II=RI%TS=U)
OPS(O1=M5B4%O2=M5B4%O3=M5B4%O4=M5B4%O5=M5B4%O6=M5B4)
WIN(W1=1020%W2=1020%W3=1020%W4=1020%W5=1020%W6=1020)
ECN(R=Y%DF=N%T=FA-104%TG=FF%W=1020%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=FA-104%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=FA-104%TG=FF%W=1020%S=O%A=S+%F=AS%O=M5B4%RD=0%Q=)
T4(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# Cisco IOS Software, SOHO97 Software (SOHO97-K9OY1-M), Version 12.4(25a)
Fingerprint Cisco SOHO 97 ADSL router
Class Cisco | IOS | 12.X | broadband router
CPE cpe:/o:cisco:ios:12 auto
SEQ(SP=FD-109%GCD=1-6%ISR=102-10C%TI=RD%CI=RD%II=RI%TS=A)
OPS(O1=M5B4SNNT11LL%O2=M578SNNT11LL%O3=M280T11LL%O4=M218SNNT11LL%O5=M218SNNT11LL%O6=M109SNNT11LL)
WIN(W1=1020%W2=1020%W3=1020%W4=1020%W5=1020%W6=1020)
ECN(R=Y%DF=N%T=100%TG=FF%W=1020%O=M5B4SLL%CC=N%Q=)
T1(R=Y%DF=N%T=100%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=100%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=100%TG=FF%W=0%S=A%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=100%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=100%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=100%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=100%TG=FF%CD=S)

# Cisco ubr10012 DOCSIS router
Fingerprint Cisco uBR10012 broadband router
Class Cisco | IOS | 12.X | broadband router
CPE cpe:/o:cisco:ios:12 auto
SEQ(SP=100-10A%GCD=1-6%ISR=103-10D%TI=RD%CI=RD%II=RI%TS=U)
OPS(O1=M5B4%O2=M578%O3=M280%O4=M218%O5=M218%O6=M109)
WIN(W1=1020%W2=1020%W3=1020%W4=1020%W5=1020%W6=1020)
ECN(R=Y%DF=Y%T=FB-105%TG=FF%W=1020%O=M5B4%CC=N%Q=)
T1(R=Y%DF=Y%T=FB-105%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%T=FB-105%TG=FF%W=1020%S=O%A=S+%F=AS%O=M109%RD=0%Q=)
T4(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FB-105%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=FB-105%TG=FF%CD=S)

# IOS (tm) 10000 Software (UBR10K2-K8P6U2-M), Version 12.3(23)BC4
Fingerprint Cisco 10000 router (IOS 12.3)
Class Cisco | IOS | 12.X | router
CPE cpe:/h:cisco:10000_router
CPE cpe:/o:cisco:ios:12.3
SEQ(SP=F9-109%GCD=1-6%ISR=FF-10F%TI=Z%CI=I%II=RI%TS=U)
OPS(O1=M5B4%O2=M578%O3=M280%O4=M5B4%O5=M218%O6=M109)
WIN(W1=1020%W2=1020%W3=1020%W4=1020%W5=1020%W6=1020)
ECN(R=Y%DF=N%T=100%TG=FF%W=1020%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=100%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=100%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=100%TG=FF%W=0%S=A%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=100%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=100%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=100%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=100%TG=FF%CD=S)

# IOS (tm) C1700 Software (C1700-BNR2SY-M), Version 12.0(0.18)PI, BETA TEST SOFTWARE
Fingerprint Cisco 1700 router (IOS 12.0)
Class Cisco | IOS | 12.X | router
CPE cpe:/h:cisco:router_1700
CPE cpe:/o:cisco:ios:12.0
SEQ(SP=33-5D%GCD=1-6%ISR=9A-A4%TI=Z%II=RI%TS=U)
OPS(O1=M5B4%O2=M5B4%O3=M5B4%O4=M5B4%O5=M5B4%O6=M5B4)
WIN(W1=1020%W2=1020%W3=1020%W4=1020%W5=1020%W6=1020)
ECN(R=Y%DF=N%T=FA-104%TG=FF%W=1020%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=FA-104%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=FA-104%TG=FF%W=1020%S=O%A=S+%F=AS%O=M5B4%RD=0%Q=)
T4(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# Cisco 3640 IOS ver 12.4.12
# Cisco 1812 router
# Cisco IOS Software, 3700 Software (C3725-ADVENTERPRISEK9-M), Version 12.4(7), RELEASE SOFTWARE (fc6)
Fingerprint Cisco 1812, 3640, or 3700 router (IOS 12.4)
Class Cisco | IOS | 12.X | router
CPE cpe:/h:cisco:c1812
CPE cpe:/h:cisco:c3640
CPE cpe:/h:cisco:c3700
CPE cpe:/o:cisco:ios:12.4
SEQ(SP=FA-10A%GCD=1-6%ISR=103-10D%TI=RD%II=RI%TS=U)
OPS(O1=M5B4%O2=M578%O3=M280%O4=M218%O5=M218%O6=M109)
WIN(W1=1020%W2=1020%W3=1020%W4=1020%W5=1020%W6=1020)
ECN(R=Y%DF=N%T=FA-104%TG=FF%W=1020%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=FA-104%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
T3(R=N)
T4(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
U1(R=N)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# c1841-adventerprisek9-mz.124-24.T2.bin Router Cisco model 1841
Fingerprint Cisco 1841 router (IOS 12)
Class Cisco | IOS | 12.X | router
CPE cpe:/h:cisco:1841_integrated_services_router
CPE cpe:/o:cisco:ios:12 auto
SEQ(SP=101-10B%GCD=1-6%ISR=105-10F%TI=RD%CI=RD%II=RI%TS=U)
OPS(O1=M55C%O2=M55C%O3=M280%O4=M218%O5=M218%O6=M109)
WIN(W1=1020%W2=1020%W3=1020%W4=1020%W5=1020%W6=1020)
ECN(R=Y%DF=N%T=FB-105%TG=FF%W=1020%O=M55C%CC=N%Q=)
T1(R=Y%DF=N%T=FB-105%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FB-105%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=FB-105%TG=FF%CD=S)

# Cisco 1841 IOS 12.4(15)
Fingerprint Cisco 1841 router (IOS 12.4)
Class Cisco | IOS | 12.X | router
CPE cpe:/h:cisco:1841_integrated_services_router
CPE cpe:/o:cisco:ios:12.4
SEQ(SP=F4-10C%GCD=1-6%ISR=ED-111%TI=RD%CI=RD|RI%II=RI%TS=U)
OPS(O1=M5B4%O2=M578%O3=M280%O4=M5B4%O5=M218%O6=M109)
WIN(W1=1020%W2=1020%W3=1020%W4=1020%W5=1020%W6=1020)
ECN(R=Y%DF=N%T=FB-105%TG=FF%W=1020%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=FB-105%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FB-105%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=FB-105%TG=FF%CD=S)

# Cisco IOS (tm) 2500 Software (C2500-P7-L), Version 12.1(27b), RELEASE SOFTWARE (fc1)
Fingerprint Cisco 2500 router (IOS 12.1)
Class Cisco | IOS | 12.X | router
CPE cpe:/h:cisco:2500_router
CPE cpe:/o:cisco:ios:12.1
SEQ(SP=F0-10A%GCD=1-6%ISR=100-110%TI=Z%II=RI%TS=U)
OPS(O1=M5B4%O2=M578%O3=M280%O4=M218%O5=M218%O6=M109)
WIN(W1=1020%W2=1020%W3=1020%W4=1020%W5=1020%W6=1020)
ECN(R=Y%DF=N%T=100%TG=FF%W=1020%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=100%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=100%TG=FF%W=1020%S=O%A=S+%F=AS%O=M5B4%RD=0%Q=)
T4(R=N)
T5(R=Y%DF=N%T=100%TG=FF%W=0%S=A%A=S+%F=AR%O=%RD=0%Q=)
T6(R=N)
T7(R=N)
U1(DF=N%T=100%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=100%TG=FF%CD=S)

# Cisco IOS 12.3(24) IP-PLUS featureset on a Cisco 2509 Router
Fingerprint Cisco 2509 router (IOS 12.3)
Class Cisco | IOS | 12.X | router
CPE cpe:/h:cisco:2509_router
CPE cpe:/o:cisco:ios:12.3
SEQ(SP=FF-109%GCD=1-6%ISR=106-110%TI=Z%II=RI%TS=U)
OPS(O1=M5B4SLL%O2=M578SLL%O3=M280%O4=M218SLL%O5=M218SLL%O6=M109SLL)
WIN(W1=1020%W2=1020%W3=1020%W4=1020%W5=1020%W6=1020)
ECN(R=Y%DF=N%T=100%TG=FF%W=1020%O=M5B4SLL%CC=N%Q=)
T1(R=Y%DF=N%T=100%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=100%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
T3(R=N)
T4(R=Y%DF=N%T=100%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=100%TG=FF%W=0%S=A%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=100%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=100%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=100%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=100%TG=FF%CD=S)

# Cisco 2514 router running IOS 12.1(2)
Fingerprint Cisco 2514 router (IOS 12.1)
Class Cisco | IOS | 12.X | router
CPE cpe:/h:cisco:2514_router
CPE cpe:/o:cisco:ios:12.1
SEQ(SP=76-80%GCD=1-6%ISR=9A-A4%TI=Z%II=RI%TS=U)
OPS(O1=M5B4%O2=M5B4%O3=M5B4%O4=M5B4%O5=M5B4%O6=M5B4)
WIN(W1=1020%W2=1020%W3=1020%W4=1020%W5=1020%W6=1020)
ECN(R=Y%DF=N%T=100%TG=FF%W=1020%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=100%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=100%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=100%TG=FF%W=1020%S=O%A=S+%F=AS%O=M5B4%RD=0%Q=)
T4(R=Y%DF=N%T=100%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=100%TG=FF%W=0%S=A%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=100%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=100%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=100%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=100%TG=FF%CD=S)

# IOS (tm) C2600 Software (C2600-K4P-M), Version 12.0(13.5)S, EARLY DEPLOYMENT MAINTENANCE INTERIM SOFTWARE
Fingerprint Cisco 2600 router (IOS 12.0)
Class Cisco | IOS | 12.X | router
CPE cpe:/h:cisco:2600_router
CPE cpe:/o:cisco:ios:12.0
SEQ(SP=4B-79%GCD=1-6%ISR=9A-A4%TI=Z%CI=I%II=RI%TS=U)
OPS(O1=M5B4%O2=M578%O3=M280%O4=M218%O5=M218%O6=M109)
WIN(W1=10C0%W2=10C0%W3=10C0%W4=10C0%W5=10C0%W6=10C0)
ECN(R=Y%DF=N%T=100%TG=FF%W=10C0%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=100%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=100%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=100%TG=FF%W=10C0%S=O%A=S+%F=AS%O=M5B4%RD=0%Q=)
T4(R=Y%DF=N%T=100%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=100%TG=FF%W=0%S=A%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=100%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=100%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=100%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=100%TG=FF%CD=S)

# Cisco IOS C2600 Software (C2600-IS-M) Version 12.1(3a)T4 release software (fc1)
Fingerprint Cisco 2600 router (IOS 12.1)
Class Cisco | IOS | 12.X | router
CPE cpe:/h:cisco:2600_router
CPE cpe:/o:cisco:ios:12.1
SEQ(SP=49-57%GCD=1-6%ISR=9A-A4%TI=Z%II=RI%TS=U)
OPS(O1=M5B4%O2=M5B4%O3=M5B4%O4=M5B4%O5=M5B4%O6=M5B4)
WIN(W1=1020%W2=1020%W3=1020%W4=1020%W5=1020%W6=1020)
ECN(R=Y%DF=N%T=100%TG=FF%W=1020%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=100%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=100%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=100%TG=FF%W=1020%S=O%A=S+%F=AS%O=M5B4%RD=0%Q=)
T4(R=Y%DF=N%T=100%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=100%TG=FF%W=0%S=A%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=100%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=100%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=100%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=100%TG=FF%CD=S)

# Cisco 2611 IOS 12.3(15a)
Fingerprint Cisco 2611 router (IOS 12.3)
Class Cisco | IOS | 12.X | router
CPE cpe:/h:cisco:2611_router
CPE cpe:/o:cisco:ios:12.3
SEQ(SP=C7-D1%GCD=1-6%ISR=C6-D0%TI=Z%CI=RD|RI%II=RI%TS=A)
OPS(O1=M5B4ST11%O2=M5B4ST11%O3=M5B4NNT11%O4=M5B4ST11%O5=M5B4ST11%O6=)
WIN(W1=16A0%W2=16A0%W3=16A0%W4=16A0%W5=16A0%W6=0)
ECN(R=Y%DF=N%T=23-3A%TG=40%W=0%O=%CC=N%Q=R)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
T3(R=N)
T4(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=25-39%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
U1(DF=Y%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# Cisco IOS C2600 Software (C2600-I-M), Version 12.3(19) running on a Cisco 2620 router
# Cisco-3620 Cisco Internetwork Operating System Software IOS (tm) 3600 Software (C3620-I-M), Version 12.1(1)
Fingerprint Cisco 2620 or 3620 router (IOS 12.1 - 12.3)
Class Cisco | IOS | 12.X | router
CPE cpe:/h:cisco:2620_router
CPE cpe:/h:cisco:3620_router
CPE cpe:/o:cisco:ios:12 auto
SEQ(SP=100-10A%GCD=1-6%ISR=FE-112%TI=Z%II=RI%TS=U)
OPS(O1=M218%O2=M218%O3=M218%O4=M218%O5=M218%O6=M109)
WIN(W1=1020%W2=1020%W3=1020%W4=1020%W5=1020%W6=1020)
ECN(R=Y%DF=N%T=100%TG=FF%W=1020%O=M218%CC=N%Q=)
T1(R=Y%DF=N%T=100%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=100%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
T3(R=N)
T4(R=Y%DF=N%T=100%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=100%TG=FF%W=0%S=A%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=100%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=100%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=100%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=100%TG=FF%CD=S)

# IOS (tm) C2600 Software (C2600-I-M), Version 12.0(7)T,  RELEASE SOFTWARE (fc2), cisco 2620 (MPC860), ROM: System Bootstrap, Version 12.1(3r)T2, RELEASE SOFTWARE (fc1)
Fingerprint Cisco 2620 router (IOS 12.0)
Class Cisco | IOS | 12.X | router
CPE cpe:/h:cisco:2620_router
CPE cpe:/o:cisco:ios:12.0
SEQ(SP=4F-59%GCD=1-6%ISR=9A-A4%TI=Z%CI=I%II=RI%TS=U)
OPS(O1=M22C%O2=M22C%O3=M22C%O4=M22C%O5=M22C%O6=M22C)
WIN(W1=1020%W2=1020%W3=1020%W4=1020%W5=1020%W6=1020)
ECN(R=Y%DF=N%T=FB-105%TG=FF%W=1020%O=M22C%CC=N%Q=)
T1(R=Y%DF=N%T=FB-105%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=FB-105%TG=FF%W=1020%S=O%A=S+%F=AS%O=M22C%RD=0%Q=)
T4(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FB-105%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=FB-105%TG=FF%CD=S)

# Cisco IOS Software, 2800 Software (C2800NM-ADVSECURITYK9-M), Version 12.4(15)T7, RELEASE SOFTWARE (fc3)
Fingerprint Cisco 2800 router (IOS 12.4)
Class Cisco | IOS | 12.X | router
CPE cpe:/h:cisco:2800_router
CPE cpe:/o:cisco:ios:12.4
SEQ(R=N)
OPS(O1=%O2=%O3=%O4=%O5=%O6=)
WIN(W1=0%W2=0%W3=0%W4=0%W5=0%W6=0)
ECN(R=Y%DF=N%T=100%TG=FF%W=0%O=%CC=N%Q=)
T1(R=Y%DF=N%T=100%TG=FF%S=A%A=S+%F=AR%RD=0%Q=)
T2(R=Y%DF=N%T=100%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
T3(R=N)
T4(R=Y%DF=N%T=100%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=100%TG=FF%W=0%S=A%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=100%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=100%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=100%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=100%TG=FF%CD=S)

# Cisco IOS Software, 2801 Software (C2801-ADVSECURITYK9-M), Version 12.4(22)T,
Fingerprint Cisco 2801 router (IOS 12.4)
Class Cisco | IOS | 12.X | router
CPE cpe:/o:cisco:ios:12 auto
SEQ(SP=F3-109%GCD=1-6%ISR=106-110%TI=RD%CI=RD%II=RI%TS=U)
OPS(O1=M5B4%O2=M5B4%O3=M5B4%O4=M218%O5=M5B4%O6=M5B4)
WIN(W1=1020%W2=1020%W3=1020%W4=1020%W5=1020%W6=1020)
ECN(R=Y%DF=N%T=FA-105%TG=FF%W=1020%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=FA-105%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=FA-105%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
T3(R=N)
T4(R=Y%DF=N%T=FA-105%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FA-105%TG=FF%W=0%S=A%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FA-105%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FA-105%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FB-105%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=FA-105%TG=FF%CD=S)

# Cisco IOS Software, 2800 Software (C2800NM-IPBASEK9-M), Version 12.4(25c), RELEASE SOFTWARE (fc2), Cisco 2811 (revision 53.51) with 512000K/12288K bytes of memory.
# IOS (tm) s222_rp Software (s222_rp-IPSERVICESK9_WAN-M), Version 12.2(18)SXF6, RELEASE SOFTWARE (fc1)
Fingerprint Cisco 2811 router (IOS 12.2 - 12.4)
Class Cisco | IOS | 12.X | router
CPE cpe:/h:cisco:2811_router
CPE cpe:/o:cisco:ios:12
SEQ(SP=101-10B%GCD=1-6%ISR=108-112%TI=RD%CI=RD%II=RI%TS=U)
OPS(O1=M218%O2=M218%O3=M218%O4=M218%O5=M218%O6=M109)
WIN(W1=1020%W2=1020%W3=1020%W4=1020%W5=1020%W6=1020)
ECN(R=Y%DF=N%T=FB-105%TG=FF%W=1020%O=M218%CC=N%Q=)
T1(R=Y%DF=N%T=FB-105%TG=FF%S=O%A=O|S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=FB-105%TG=FF%W=80%S=Z%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=FB-105%TG=FF%W=100%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T4(R=Y%DF=N%T=FB-105%TG=FF%W=400%S=A%A=S%F=AR%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=O%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FB-105%TG=FF%W=8000%S=A%A=S%F=AR%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FB-105%TG=FF%W=FFFF%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FB-105%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=FB-105%TG=FF%CD=S)

# Cisco 2811 Router
Fingerprint Cisco 2811 router (IOS 12.X)
Class Cisco | IOS | 12.X | router
CPE cpe:/h:cisco:2811_router
CPE cpe:/o:cisco:ios:12 auto
SEQ(SP=FA-10C%GCD=1-6%ISR=FD-10F%TI=RD%II=RI%TS=U)
OPS(O1=M218%O2=M218%O3=M218%O4=M218%O5=M218%O6=M109)
WIN(W1=1020%W2=1020%W3=1020%W4=1020%W5=1020%W6=1020)
ECN(R=Y%DF=N%T=FB-105%TG=FF%W=1020%O=M218%CC=N%Q=)
T1(R=Y%DF=N%T=FB-105%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=S+%F=AR%O=%RD=0%Q=)
T6(R=N)
T7(R=N)
U1(DF=N%T=FB-105%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=FB-105%TG=FF%CD=S)

# Cisco WS-C2960G-24TC-L, Version 12.2(25)SEE1
# Cisco IOS 12.2(2)XA1, EARLY DEPLOYMENT; Running on Cisco cable modem
# Cisco WS-C3750G-48TS-S  Version 12.2(25r)SE1
# Cisco 3750 running Version 12.2(25r)SE1
# Cisco IOS Software, C3560 Software (C3560-IPBASE-M), Version 12.2(25)SEB4, RELEASE SOFTWARE (fc1)
# IOS (tm) C2950 Software (C2950-I6K2L2Q4-M), Version 12.1(22)EA8a, RELEASE SOFTWARE (fc1)
# cisco WS-C2950T-24, System image file is "flash:c2950-i6k2l2q4-mz.121-22.EA9.bin"
# 7200 Software (C7200-BOOT-M), Version 12.0(17)S, EARLY DEPLOYMENT RELEASE SOFTWARE (fc1) (7206VXR router)
# Cisco uBR7111 (CMTS)
# Cisco Cat6509, IOS (tm) MSFC2 Software (C6MSFC2-PK2SV-M), Version 12.1(8a)E5
Fingerprint Cisco 2900-series, 3650, or 3750 switch; 6509 or 7206VXR router; or uBR925 or uBR7111 cable modem (IOS 12.1 - 12.2)
Class Cisco | IOS | 12.X | router
CPE cpe:/h:cisco:6506_router
CPE cpe:/h:cisco:7206vxr_router
CPE cpe:/o:cisco:ios:12 auto
Class Cisco | IOS | 12.X | switch
CPE cpe:/h:cisco:catalyst_2900
CPE cpe:/h:cisco:catalyst_3650
CPE cpe:/h:cisco:catalyst_3750
CPE cpe:/o:cisco:ios:12 auto
Class Cisco | IOS | 12.X | broadband router
CPE cpe:/h:cisco:ubr925
CPE cpe:/h:cisco:ubr7111
CPE cpe:/o:cisco:ios:12 auto
SEQ(SP=F7-10D%GCD=1-6%ISR=FF-111%TI=Z%II=RI%TS=U)
OPS(O1=M218%O2=M218%O3=M218%O4=M218%O5=M218%O6=M109)
WIN(W1=1020%W2=1020%W3=1020%W4=1020%W5=1020%W6=1020)
ECN(R=Y%DF=N%T=FA-104%TG=FF%W=1020%O=M218%CC=N%Q=)
T1(R=Y%DF=N%T=FA-104%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=FA-104%TG=FF%W=1020%S=O%A=S+%F=AS%O=M218%RD=0%Q=)
T4(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# IOS (tm) C2940 Software (C2940-I6Q4L2-M), Version 12.1(22)EA8a, RELEASE SOFTWARE (fc1)
# Cisco C3750
# cisco WS-C2940-8TT-S
Fingerprint Cisco 2940 router or 3750 switch (IOS 12.1)
Class Cisco | IOS | 12.X | router
CPE cpe:/h:cisco:2940_router
CPE cpe:/o:cisco:ios:12.1
Class Cisco | IOS | 12.X | switch
CPE cpe:/h:cisco:3750_switch
CPE cpe:/o:cisco:ios:12.1
SEQ(SP=FB-109%GCD=1-6%ISR=100-114%TI=Z%CI=I%II=RI%TS=U)
OPS(O1=M5B4%O2=M578%O3=M280%O4=M218%O5=M218%O6=M109)
WIN(W1=1020%W2=1020%W3=1020%W4=1020%W5=1020%W6=1020)
ECN(R=Y%DF=N%T=FA-104%TG=FF%W=1020%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=FA-104%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=FA-104%TG=FF%W=1020%S=O%A=S+%F=AS%O=M5B4%RD=0%Q=)
T4(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# IOS (tm) 2500 Software (C2500-I-L), Version 12.1(27b), RELEASE SOFTWARE (fc1)
# cisco 2509  IOS 12.1(21)
# cisco 2509 IOS 12.1(27a)
# Cisco Catalyst 4948-10GE
# Cisco Catalyst Express 500 with IOS 12.2(25)FY
# Cisco Router 2500 series - IOS (tm) 2500 Software (C2500-IK8S-L), Version 12.2(5), RELEASE SOFTWARE (fc1)
# Cisco Catalyst 3560 Layer3 Switch
# Cisco IOS 12.1 mainline: Cisco Catalyst 5000/5500 RSFC
# cisco WS-C2950C-24 running IOS (tm) C2950 Software (C2950-I6K2L2Q4-M), Version 12.1(22)EA9, RELEASE SOFTWARE (fc1)
# Cisco Router 4500 - IOS (tm) 4500 Software (C4500-JK9S-M), Version 12.2(27), RELEASE SOFTWARE (fc3)
# IOS (tm) C3750 Software (C3750-I9-M), Version 12.2(20)SE4, RELEASE SOFTWARE (fc1)
# C2960 Boot Loader (C2960-HBOOT-M) Version 12.2(25r)SEE1
# Cisco WS-C3550-24-PWR (PowerPC) C3550-I5K2L2Q3-M, Version 12.1(22)EA6
# Catalyst 3550 Series WS-C3550-24-SMI IOS VERSION: 12.2(25)SEB4
# Cisco 4506 Sup 4 running: Catalyst 4000 L3 Switch Software (cat4000-I5K91S-M), Version 12.2(25)EW, RELEASE SOFTWARE (fc1)
# Cisco Catalyst 6506 (IOS 12.2)
# IOS (tm) Catalyst 4000 L3 Switch Software (cat4000-IS-M), Version 12.1(12c)EW1
Fingerprint Cisco 500, 2000-, 3000-, 4000-, 5000-series, or 6506 switch; or 2500- or 4500-series router (IOS 12.1 - 12.2)
Class Cisco | IOS | 12.X | router
CPE cpe:/h:cisco:router_2500
CPE cpe:/h:cisco:router_4500
CPE cpe:/o:cisco:ios:12 auto
Class Cisco | IOS | 12.X | switch
CPE cpe:/h:cisco:catalyst_500
CPE cpe:/h:cisco:catalyst_2000
CPE cpe:/h:cisco:catalyst_3000
CPE cpe:/h:cisco:catalyst_4000
CPE cpe:/h:cisco:catalyst_5000
CPE cpe:/h:cisco:catalyst_6506
CPE cpe:/o:cisco:ios:12 auto
SEQ(SP=F6-107%GCD=1-6%ISR=F5-115%TI=Z%II=RI%TS=U)
OPS(O1=M5B4%O2=M578%O3=M280%O4=M218%O5=M218%O6=M109)
WIN(W1=1020%W2=1020%W3=1020%W4=1020%W5=1020%W6=1020)
ECN(R=Y%DF=N%T=100%TG=FF%W=1020%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=100%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=100%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=100%TG=FF%W=1020%S=O%A=S+%F=AS%O=M5B4%RD=0%Q=)
T4(R=Y%DF=N%T=100%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=100%TG=FF%W=0%S=A%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=100%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=100%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=100%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=100%TG=FF%CD=S)

# IOS (tm) 5300 Software (C5300-I-M), Version 12.1(5)T15,  RELEASE SOFTWARE (fc2)
Fingerprint Cisco 5300 router (IOS 12.1)
Class Cisco | IOS | 12.X | router
CPE cpe:/h:cisco:5300_router
CPE cpe:/o:cisco:ios:12.1
SEQ(TI=Z%CI=I%II=RI%TS=U)
OPS(R=N)
WIN(R=N)
ECN(R=N)
T1(R=Y%DF=N%T=FB-105%TG=FF%S=O%A=O|S+%F=A|AS%RD=0)
T2(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=S%F=AR%RD=0)
T3(R=N)
T4(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=Z%F=R%RD=0)
T5(R=N)
T6(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=Z%F=R%RD=0)
T7(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=S%F=AR%RD=0)
U1(DF=N%T=FB-105%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=FB-105%TG=FF%CD=S)

# cisco 5300 12.3 IOS
Fingerprint Cisco 5300 router (IOS 12.3)
Class Cisco | IOS | 12.X | router
CPE cpe:/h:cisco:5300_router
CPE cpe:/o:cisco:ios:12.3
SEQ(SP=FD-107%GCD=1-6%ISR=108-112%TI=Z%II=RI%TS=U)
OPS(O1=M218%O2=M218%O3=M218%O4=M218%O5=M218%O6=M109)
WIN(W1=1020%W2=1020%W3=1020%W4=1020%W5=1020%W6=1020)
ECN(R=Y%DF=N%T=FB-105%TG=FF%W=1020%O=M218%CC=N%Q=)
T1(R=Y%DF=N%T=FB-105%TG=FF%S=O%A=O|S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=S+%F=AR%O=%RD=0%Q=)
T6(R=N)
T7(R=N)
U1(DF=N%T=FB-105%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=FB-105%TG=FF%CD=S)

# Cisco IOS Software, s72033_rp Software (s72033_rp-IPSERVICESK9_WAN-VM), Version 12.2(33)SXI4a, RELEASE SOFTWARE (fc2), cisco WS-C6506-E
Fingerprint Cisco 6506 router (IOS 12.2)
Class Cisco | IOS | 12.X | router
CPE cpe:/h:cisco:6506_router
CPE cpe:/o:cisco:ios:12.2
SEQ(SP=FA-104%GCD=1-6%ISR=108-112%TI=RD%CI=RD|RI%II=RI%TS=U)
OPS(O1=M564%O2=M564%O3=M280%O4=M218%O5=M218%O6=M109)
WIN(W1=8000%W2=8000%W3=8000%W4=8000%W5=8000%W6=8000)
ECN(R=Y%DF=N%T=38-42%TG=40%W=8000%O=M564%CC=N%Q=)
T1(R=Y%DF=N%T=38-42%TG=40%S=O%A=O|S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=FB-105%TG=FF%W=80%S=Z%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=FB-105%TG=FF%W=100%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T4(R=Y%DF=N%T=FB-105%TG=FF%W=400%S=A%A=S%F=AR%O=%RD=0%Q=)
T5(R=Y%DF=N%T=38-42%TG=40%W=0%S=O%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FB-105%TG=FF%W=8000%S=A%A=S%F=AR%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FB-105%TG=FF%W=FFFF%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FB-105%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=FB-105%TG=FF%CD=S)

# Cisco 7206VXR (NPE-G2) router running 12.4(11)T
Fingerprint Cisco 7206VXR router (IOS 12.4)
Class Cisco | IOS | 12.X | router
CPE cpe:/h:cisco:7206vxr_router
CPE cpe:/o:cisco:ios:12.4
SEQ(SP=FD-107%GCD=1-6%ISR=104-10E%TI=RD%II=RI%TS=A)
OPS(O1=M5A8SNNT11LL%O2=M578SNNT11LL%O3=M280T11LL%O4=M218SNNT11LL%O5=M218SNNT11LL%O6=M109SNNT11LL)
WIN(W1=1020%W2=1020%W3=1020%W4=1020%W5=1020%W6=1020)
ECN(R=Y%DF=N%T=100%TG=FF%W=1020%O=M5B4SLL%CC=N%Q=)
T1(R=Y%DF=N%T=100%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=100%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
T3(R=N)
T4(R=Y%DF=N%T=100%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=100%TG=FF%W=0%S=A%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=100%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=100%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=100%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=100%TG=FF%CD=S)

# Cisco 7600 router running IOS 12.2(33)SRE
# Cisco IOS Software, IOS-XE Software (PPC_LINUX_IOSD-ADVENTERPRISEK9-M), Version 15.1(1)S2, RELEASE SOFTWARE (fc1) ASR1002 router
Fingerprint Cisco 7600 router (IOS 12.2)
Class Cisco | IOS | 12.X | router
CPE cpe:/h:cisco:7600_router
CPE cpe:/o:cisco:ios:12.2
SEQ(SP=F2-108%GCD=1-6%ISR=101-111%TI=RD%CI=RD|RI%II=RI%TS=U)
OPS(O1=M5B4%O2=M578%O3=M280%O4=M218%O5=M218%O6=M109)
WIN(W1=1020%W2=1020%W3=1020%W4=1020%W5=1020%W6=1020)
ECN(R=Y%DF=N%T=100%TG=FF%W=1020%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=100%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=100%TG=FF%W=1020%S=O%A=S+%F=AS%O=M109%RD=0%Q=)
T4(R=Y%DF=N%T=100%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=100%TG=FF%W=0%S=A%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=100%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=100%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=100%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=100%TG=FF%CD=S)

# Cisco 857W CISCO857W-G-A-K9 Cisco IOS Software, C850 Software (C850-ADVSECURITYK9-M), Version 12.4(6)T7, RELEASE SOFTWARE (fc5)
# Cisco IOS 12.X version 12.4 Cisco 7301 (NPE)
# Cisco IOS Software, C2600 Software (C2600-ADVSECURITYK9-M), Version 12.4(17)
# Cisco IOS Software, C870 Software (C870-ADVSECURITYK9-M), Version 12.4(4)T7
# Cisco 3825 Version 12.4(13r)T
# Cisco IOS Software, 2800 Software (C2800NM-ADVIPSERVICESK9-M), Version 12.4(9)T1
# Cisco IOS Software, C837 Software (C837-K9O3Y6-M), Version 12.4(16), RELEASE SOFTWARE (fc1)
# Cisco 1801, ios: c180x-advipservicesk9-mz.124-15.T1.bin
# Cisco 2651XM router running 12.4(12a) Advanced Enterprise Services.
# Cisco IOS Software, 3800 Software (C3825-ADVIPSERVICESK9-M), Version 12.4(16b), RELEASE SOFTWARE (fc3)
# Cisco 857 ADSL router running IOS 12.4(6)T8
# Cisco IOS Software, 7200 Software (C7200-ADVIPSERVICESK9-M), Version 12.4(11)T3
# Cisco IOS Software, Catalyst 4000 L3 Switch Software (cat4000-I9S-M), Version 12.2(25)EWA8, RELEASE SOFTWARE (fc1)
# cisco AIR-AP1121G-A-K9 C1100 Software (C1100-K9W7-M), Version 12.3(8)JEB1
# Cisco Aironet 1242AG wireless access point running IOS 12.4(3g)JA
# Cisco 871 (C870-ADVSECURITYK9-M), Version 12.4(4)T7.
Fingerprint Cisco 800-series, 1801, 2000-series, 3800, 4000, or 7000-series router; or 1100 or 1242G WAP (IOS 12.2 - 12.4)
Class Cisco | IOS | 12.X | router
CPE cpe:/h:cisco:800_router
CPE cpe:/h:cisco:1801_router
CPE cpe:/h:cisco:2000_router
CPE cpe:/h:cisco:3800_router
CPE cpe:/h:cisco:4000_router
CPE cpe:/h:cisco:7000_router
CPE cpe:/o:cisco:ios:12 auto
Class Cisco | IOS | 12.X | WAP
CPE cpe:/h:cisco:aironet_ap1100
CPE cpe:/h:cisco:aironet_ap1242g
CPE cpe:/o:cisco:ios:12 auto
SEQ(SP=FD-109%GCD=1-6%ISR=103-111%TI=RD%II=RI%TS=U)
OPS(O1=M5B4%O2=M578%O3=M280%O4=M218%O5=M218%O6=M109)
WIN(W1=1020%W2=1020%W3=1020%W4=1020%W5=1020%W6=1020)
ECN(R=Y%DF=N%T=100%TG=FF%W=1020%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=100%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=100%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
T3(R=N)
T4(R=Y%DF=N%T=100%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=100%TG=FF%W=0%S=A%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=100%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=100%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=100%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=100%TG=FF%CD=S)

# Cisco 1712 router running IOS 12.2(15)
# Cisco 806 <IOS (tm) C806 Software (C806-OY6-M), Version 12.2(8)T5,RELEASE SOFTWARE (fc1)>
# Cisco 1721 router IOS (tm) C1700 Software (C1700-Y-M), Version 12.2(4)YA2, EARLY DEPLOYMENT RELEASE SOFTWARE (fc1)
# IOS (tm) C2600 Software (C2600-IPVOICE-M), Version 12.3(3)
Fingerprint Cisco 806, 1712, 1721, or 2600 router (IOS 12.2 - 12.3)
Class Cisco | IOS | 12.X | router
CPE cpe:/h:cisco:806_router
CPE cpe:/h:cisco:1712_router
CPE cpe:/h:cisco:1721_router
CPE cpe:/h:cisco:2600_router
CPE cpe:/o:cisco:ios:12 auto
SEQ(SP=F6-10A%GCD=1-6%ISR=FD-10F%TI=Z%II=RI%TS=U)
OPS(O1=M5B4%O2=M578%O3=M280%O4=M218%O5=M218%O6=M109)
WIN(W1=1020%W2=1020%W3=1020%W4=1020%W5=1020%W6=1020)
ECN(R=Y%DF=N%T=FA-105%TG=FF%W=1020%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=FA-105%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=FA-105%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=FA-105%TG=FF%W=1020%S=O%A=S+%F=AS%O=M109%RD=0%Q=)
T4(R=Y%DF=N%T=FA-105%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FA-105%TG=FF%W=0%S=A%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FA-105%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FA-105%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-105%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=FA-105%TG=FF%CD=S)

# IOS (tm) C820 Software (C820-K9OSV6Y6-M), Version 12.3(20), RELEASE SOFTWARE (fc2)
# IOS (tm) 2500 Software (C2500-IS-L), Version 12.3(23), RELEASE SOFTWARE (fc5)
# Cisco 1721 router running IOS version 12.3(6c)
# Cisco 1751 router with IOS 12.3(14)T6.
# Cisco 1750 router (IOS 12.3)
Fingerprint Cisco 820, 1721, 1750, 1751, or 2514 router (IOS 12.3)
Class Cisco | IOS | 12.X | router
CPE cpe:/h:cisco:820_router
CPE cpe:/h:cisco:1721_router
CPE cpe:/h:cisco:1750_router
CPE cpe:/h:cisco:1751_router
CPE cpe:/h:cisco:2514_router
CPE cpe:/o:cisco:ios:12.3
SEQ(SP=E2-107%GCD=1-6%ISR=108-10C%TI=Z%II=RI%TS=U)
OPS(O1=M5B4%O2=M578%O3=M280%O4=M218%O5=M218%O6=M109)
WIN(W1=1020%W2=1020%W3=1020%W4=1020%W5=1020%W6=1020)
ECN(R=Y%DF=N%T=100%TG=FF%W=1020%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=100%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=100%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
T3(R=N)
T4(R=Y%DF=N%T=100%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=100%TG=FF%W=0%S=A%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=100%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=100%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=100%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=100%TG=FF%CD=S)

# Cisco IOS Software, C831 Software (C831-K9O3SY6-M), Version 12.4(15)T10
# Cisco IOS 12.4(25b) on a 1760 router
Fingerprint Cisco 831 switch or 1760 router (IOS 12.4)
Class Cisco | IOS | 12.X | router
CPE cpe:/h:cisco:1760_router
CPE cpe:/o:cisco:ios:12.4
Class Cisco | IOS | 12.X | switch
CPE cpe:/h:cisco:831_switch
CPE cpe:/o:cisco:ios:12.4
SEQ(SP=F8-108%GCD=1-6%ISR=100-112%TI=RD%CI=RD|RI%II=RI%TS=U)
OPS(O1=M218%O2=M218%O3=M218%O4=M218%O5=M218%O6=M109)
WIN(W1=1020%W2=1020%W3=1020%W4=1020%W5=1020%W6=1020)
ECN(R=Y%DF=N%T=100%TG=FF%W=1020%O=M218%CC=N%Q=)
T1(R=Y%DF=N%T=100%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=100%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=100%TG=FF%W=0%S=A%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=100%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=100%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=100%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=100%TG=FF%CD=S)

# Cisco IOS Software, C836 Software (C836-K9O3S8Y6-M), Version 12.4(23), RELEASE SOFTWARE (fc1), ROM: System Bootstrap, Version 12.2(11r)YV, RELEASE SOFTWARE (fc1)
# Cisco IOS Software, 1841 Software (C1841-ADVENTERPRISEK9-M), Version 12.4(24)T, RELEASE SOFTWARE (fc1)
# Cisco IOS Software, 2800 Software (C2800NM-ADVENTERPRISEK9-M), Version 12.4(23), RELEASE SOFTWARE (fc1)
# Cisco 1751 router running IOS 12.4.23 with ADSL feature set.
# Cisco IOS Software, 1841 Software (C1841-ADVENTERPRISEK9-M), Version 15.0(1)M
# Cisco IOS Software, C890 Software (C890-UNIVERSALK9-M), Version 12.4(22)YB, RELEASE SOFTWARE (fc2), Cisco 891 (MPC8300) processor (revision 1.0)
# Cisco IOS Software, 2801 Software (C2801-ADVENTERPRISEK9-M), Version 12.4(25a), RELEASE SOFTWARE (fc2)
# Cisco IOS Software, 1841 Software (C1841-ADVENTERPRISEK9-M), Version 15.1(3)T1, RELEASE SOFTWARE (fc2)
# Cisco IOS Software, C2900 Software (C2900-UNIVERSALK9-M), Version 15.1(1)T, RELEASE SOFTWARE (fc1)
Fingerprint Cisco 836, 890, 1751, 1841, 2800, or 2900 router (IOS 12.4 - 15.1)
Class Cisco | IOS | 12.X | router
CPE cpe:/h:cisco:836_router
CPE cpe:/h:cisco:890_router
CPE cpe:/h:cisco:1751_router
CPE cpe:/h:cisco:2800_router
CPE cpe:/o:cisco:ios:12 auto
Class Cisco | IOS | 15.X | router
CPE cpe:/h:cisco:1841_router
CPE cpe:/h:cisco:2900_router
CPE cpe:/o:cisco:ios:15 auto
SEQ(SP=F6-10C%GCD=1-6%ISR=FF-111%TI=RD%CI=RD|RI%II=RI%TS=U)
OPS(O1=M5B4%O2=M578%O3=M280%O4=M218%O5=M218%O6=M109)
WIN(W1=1020%W2=1020%W3=1020%W4=1020%W5=1020%W6=1020)
ECN(R=Y%DF=N%T=100%TG=FF%W=1020%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=100%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=100%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=100%TG=FF%W=0%S=A%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=100%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=100%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=100%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=100%TG=FF%CD=S)

# Cisco IOS Software, C860 Software (C860-UNIVERSALK9-M), Version 12.4(15)XZ2
# Cisco IOS Software, C870 Software (C870-ADVSECURITYK9-M), Version 12.4(24)T
Fingerprint Cisco 860 or 870 router (IOS 12.4)
Class Cisco | IOS | 12.X | router
CPE cpe:/h:cisco:860_router
CPE cpe:/h:cisco:870_router
CPE cpe:/o:cisco:ios:12.4
SEQ(SP=F4-10A%GCD=1-6%ISR=104-112%TI=RD%CI=RD|RI%II=RI%TS=U)
OPS(O1=M218%O2=M218%O3=M218%O4=M218%O5=M218%O6=M218)
WIN(W1=1020%W2=1020%W3=1020%W4=1020%W5=1020%W6=1020)
ECN(R=Y%DF=N%T=100%TG=FF%W=1020%O=M218%CC=N%Q=)
T1(R=Y%DF=N%T=100%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=100%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=100%TG=FF%W=0%S=A%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=100%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=100%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=100%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=100%TG=FF%CD=S)

# Cisco IOS Software, C870 Software (C870-ADVIPSERVICESK9-M), Version 12.4(15)T1, RELEASE SOFTWARE (fc2)
Fingerprint Cisco 870 router (IOS 12.4)
Class Cisco | IOS | 12.X | router
CPE cpe:/h:cisco:870_router
CPE cpe:/o:cisco:ios:12.4
SEQ(SP=FA-104%GCD=1-6%ISR=FA-104%TI=RD%CI=RD%II=RI%SS=S%TS=U)
OPS(O1=M578%O2=M578%O3=M280%O4=M218%O5=M218%O6=M109)
WIN(W1=1020%W2=1020%W3=1020%W4=1020%W5=1020%W6=1020)
ECN(R=Y%DF=N%T=100%TG=FF%W=1020%O=M578%CC=N%Q=)
T1(R=Y%DF=N%T=100%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=100%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
T3(R=N)
T4(R=Y%DF=N%T=100%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=100%TG=FF%W=0%S=A%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=100%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=100%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=100%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=100%TG=FF%CD=S)

# Cisco sw2960 + IOS 12.2(46)SE
# Cisco IOS Software, C870 Software (C870-ADVIPSERVICESK9-M), Version 12.4(4)T8, RELEASE SOFTWARE (fc3)
Fingerprint Cisco 870 router or 2960 switch (IOS 12.2 - 12.4)
Class Cisco | IOS | 12.X | router
CPE cpe:/h:cisco:870_router
CPE cpe:/o:cisco:ios:12 auto
Class Cisco | IOS | 12.X | switch
CPE cpe:/h:cisco:2960_switch
CPE cpe:/o:cisco:ios:12 auto
SEQ(SP=FF-109%GCD=1-6%ISR=100-112%TI=RD|RI%II=RI%SS=O%TS=U)
OPS(O1=M5B4%O2=M578%O3=M280%O4=M218%O5=M218%O6=M109)
WIN(W1=1020%W2=1020%W3=1020%W4=1020%W5=1020%W6=1020)
ECN(R=Y%DF=N%T=FA-104%TG=FF%W=1020%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=FA-104%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=N)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# Cisco 2821 ISR which is running Call Manager Express
# Cisco 7206 Series VXR router.
# IOS (tm) s72033_rp Software (s72033_rp-IPSERVICESK9-M), Version 12.2(18)SXF6, cisco WS-C6506 (R7000) processor
# Cisco IOS Software, C870 Software (C870-ADVIPSERVICESK9-M), Version 15.1(4)M2, RELEASE SOFTWARE (fc1)
Fingerprint Cisco 870, 2821, 6506, or 7206VXR router (IOS 12.2 - 15.1)
Class Cisco | IOS | 12.X | router
CPE cpe:/h:cisco:870_router
CPE cpe:/h:cisco:2821_router
CPE cpe:/h:cisco:6506_router
CPE cpe:/h:cisco:7206vxr_router
CPE cpe:/o:cisco:ios:12
CPE cpe:/o:cisco:ios:15
SEQ(SP=F5-109%GCD=1-6%ISR=FD-10F%TI=RD%II=RI%TS=U)
OPS(O1=M5B4%O2=M578%O3=M280%O4=M218%O5=M218%O6=M109)
WIN(W1=1020%W2=1020%W3=1020%W4=1020%W5=1020%W6=1020)
ECN(R=Y%DF=N%T=FC-106%TG=FF%W=1020%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=FC-106%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=Y%DF=N%T=FC-106%TG=FF%W=0%S=A%A=S+%F=AR%O=%RD=0%Q=)
T6(R=N)
T7(R=N)
U1(DF=N%T=FC-106%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=FC-106%TG=FF%CD=S)

# Cisco Router 877, 124-15.T11
Fingerprint Cisco 877 router (IOS 12.4)
Class Cisco | IOS | 12.X | router
CPE cpe:/h:cisco:877_router
CPE cpe:/o:cisco:ios:12.4
SEQ(SP=FD-10B%GCD=1-6%ISR=105-10F%TI=RD%II=RI%TS=U)
OPS(O1=M591%O2=M578%O3=M280%O4=M218%O5=M218%O6=M109)
WIN(W1=1020%W2=1020%W3=1020%W4=1020%W5=1020%W6=1020)
ECN(R=Y%DF=N%T=FB-105%TG=FF%W=1020%O=M591%CC=N%Q=)
T1(R=Y%DF=N%T=FB-105%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FB-105%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=FB-105%TG=FF%CD=S)

# Cisco 2610XM IOS 12.4(19b) Advanced Security Feature Set c2600-advsecurityk9-mz.124-19b.bin
# Cisco Aironet 1200 Series (AIR-LAP-1232AG-E-K9)
# Cisco Aironet 1250 Series (AIR-AP1252AG-A-K9) Software version: 12.4(10b)JDA3
Fingerprint Cisco Aironet 1200-series WAP or 2610XM router (IOS 12.4)
Class Cisco | IOS | 12.X | router
CPE cpe:/h:cisco:2610xm_router
CPE cpe:/o:cisco:ios:12.4
Class Cisco | IOS | 12.X | WAP
CPE cpe:/h:cisco:aironet_ap1200
CPE cpe:/o:cisco:ios:12.4
SEQ(SP=FE-108%GCD=1-6%ISR=FC-112%TI=RD%CI=RD|RI%II=RI%TS=U)
OPS(O1=M5B4%O2=M578%O3=M280%O4=M218%O5=M218%O6=M109)
WIN(W1=1020%W2=1020%W3=1020%W4=1020%W5=1020%W6=1020)
ECN(R=Y%DF=N%T=FA-104%TG=FF%W=1020%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=FA-104%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
T3(R=N)
T4(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# Cisco 1811 Router, IOS 12.4(6)T6
# Cisco IOS Software, 2800 Software (C2800NM-ADVIPSERVICESK9-M), Version 12.4(11)T2
# Cisco IOS Software, C1250 Software (C1250-K9W7-M), Version 12.4(10b)JA1, RELEASE SOFTWARE (fc2)
# Cisco Aironet 1240AG Series Access Point
# Cisco VG 224 Analog Phone Gateway
Fingerprint Cisco Aironet 1240AG or 1250 WAP, 1811 or 2800 router, or VG 224 VoIP adapter (IOS 12.4)
Class Cisco | IOS | 12.X | router
CPE cpe:/h:cisco:1811_router
CPE cpe:/h:cisco:2800_router
CPE cpe:/o:cisco:ios:12.4
Class Cisco | embedded || VoIP adapter
CPE cpe:/h:cisco:vg_224
CPE cpe:/o:cisco:ios:12.4
Class Cisco | IOS | 12.X | WAP
CPE cpe:/h:cisco:aironet_ap1240ag
CPE cpe:/h:cisco:aironet_ap1250
CPE cpe:/o:cisco:ios:12.4
SEQ(SP=F7-10D%GCD=1-6%ISR=FE-110%TI=RD%CI=RD|RI%II=RI%TS=U)
OPS(O1=M218%O2=M218%O3=M218%O4=M218%O5=M218%O6=M109)
WIN(W1=1020%W2=1020%W3=1020%W4=1020%W5=1020%W6=1020)
ECN(R=Y%DF=N%T=100%TG=FF%W=1020%O=M218%CC=N%Q=)
T1(R=Y%DF=N%T=100%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=100%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
T3(R=N)
T4(R=Y%DF=N%T=100%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=100%TG=FF%W=0%S=A%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=100%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=100%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=100%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=100%TG=FF%CD=S)

# Cisco Aironet 1200 Air-AP1220
# Cisco IOS Software, C831 Software (C831-K9O3Y6-M), Version 12.3(2)XE3, RELEASE SOFTWARE (fc1)
Fingerprint Cisco Aironet 350 or 1200 WAP or 831 router (IOS 12.3)
Class Cisco | IOS | 12.X | router
CPE cpe:/h:cisco:831_router
CPE cpe:/o:cisco:ios:12.3
Class Cisco | IOS | 12.X | WAP
CPE cpe:/h:cisco:aironet_ap350
CPE cpe:/h:cisco:aironet_ap1200
CPE cpe:/o:cisco:ios:12.3
SEQ(SP=102-10E%GCD=1-6%ISR=103-10D%TI=Z%II=RI%TS=U)
OPS(O1=M218%O2=M218%O3=M218%O4=M218%O5=M218%O6=M109)
WIN(W1=1020%W2=1020%W3=1020%W4=1020%W5=1020%W6=1020)
ECN(R=Y%DF=N%T=FA-104%TG=FF%W=1020%O=M218%CC=N%Q=)
T1(R=Y%DF=N%T=FA-104%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=FA-104%TG=FF%W=1020%S=O%A=S+%F=AS%O=M109%RD=0%Q=)
T4(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# Cisco IOS (tm) 3600 Software (C3620-IK9O3S6-M), Version 12.3(16), RELEASE SOFTWARE (fc 4)
Fingerprint Cisco C3620 router (IOS 12.3)
Class Cisco | IOS | 12.X | router
CPE cpe:/h:cisco:3620_router
CPE cpe:/o:cisco:ios:12.3
SEQ(SP=FD-107%GCD=1-6%ISR=103-10F%TI=Z%II=RI%TS=U)
OPS(O1=M5B4%O2=M578%O3=M280%O4=M218%O5=M218%O6=M109)
WIN(W1=1020%W2=1020%W3=1020%W4=1020%W5=1020%W6=1020)
ECN(R=Y%DF=N%T=FA-104%TG=FF%W=1020%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=FA-104%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S+%F=AR%O=%RD=0%Q=)
T6(R=N)
T7(R=N)
U1(DF=N%T=7B-85%TG=80%IPL=70%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# Cisco 2821 running ios c2800nm-advipservicesk9-mz.124-20.YA2.bin
# Cisco IOS Software, C860 Software (C860-UNIVERSALK9-M), Version 12.4(24)T4, RELEASE SOFTWARE (fc2)
# Cisco IOS Software, C880 Software (C880DATA-UNIVERSALK9-M), Version 15.0(1)M4, RELEASE SOFTWARE (fc1)
Fingerprint Cisco C860, C880, or 2821 router (IOS 12.4 - 15.0)
Class Cisco | IOS | 12.X | router
CPE cpe:/h:cisco:860_router
CPE cpe:/h:cisco:880_router
CPE cpe:/o:cisco:ios:12.4
Class Cisco | IOS | 15.X | router
CPE cpe:/h:cisco:880_router
CPE cpe:/o:cisco:ios:15.0
SEQ(SP=F0-10C%GCD=1-6%ISR=102-112%TI=RD|RI%CI=RD%II=RI%SS=S%TS=U)
OPS(O1=M5B4%O2=M5B4%O3=M5B4%O4=M218%O5=M5B4%O6=M5B4)
WIN(W1=1020%W2=1020%W3=1020%W4=1020%W5=1020%W6=1020)
ECN(R=Y%DF=N%T=100%TG=FF%W=1020%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=100%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=100%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=100%TG=FF%W=0%S=A%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=100%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=100%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=100%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=100%TG=FF%CD=S)

# Cisco IOS Software, C870 Software (C870-ADVSECURITYK9-M), Version 12.4(15)T5, RELEASE SOFTWARE (fc4)
Fingerprint Cisco C870 router (IOS 12.4)
Class Cisco | IOS | 12.X | router
CPE cpe:/h:cisco:870_router
CPE cpe:/o:cisco:ios:12.4
SEQ(SP=FC-106%GCD=1-6%ISR=107-111%TI=RD%CI=RD%TS=A)
OPS(O1=T11LL|M5A8SNNW2NT11LLLLLL%O2=T11LL|M578SNNW2NT11LLLLLL%O3=T11LL|M280W2NT11LLLLS|M280W2NT11LLLLLL%O4=T11LL|M218SNNW2NT11LLLLLL%O5=T11LL|M218SNNW2NT11LLLLLL%O6=T11LL|M109SNNT11LL)
WIN(W1=FF3C|FFFF%W2=FF3C|FFFF%W3=FF3C|FFFF%W4=FF3C|FFFF%W5=FF3C|FFFF%W6=FFFF)
ECN(R=Y%DF=N%T=FB-105%TG=FF%W=FF3C|FFFF%O=|M5B4SNNW2LLLLL%CC=N|Y%Q=)
T1(R=Y%DF=N%T=FB-105%TG=FF%S=O%A=O|S+%F=A|AS%RD=0%Q=)
T2(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A|O%A=O|S%F=AR%O=%RD=0%Q=)
T3(R=N)
T4(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A|O%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A|O%A=O|S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A|O%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A|O%A=O|S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FB-105%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=FB-105%TG=FF%CD=S)

# Cisco DOCSIS CMTS running IOS 12.1  (this is a cable modem termination server)
# IOS (tm) 7200 Software (UBR7200-IK1S-M), Version 12.1(8.5)EC, EARLY DEPLOYMENT MAINTENANCE INTERIM SOFTWARE
Fingerprint Cisco DOCSIS cable modem termination server (IOS 12.1)
Class Cisco | IOS | 12.X | specialized
CPE cpe:/o:cisco:ios:12.1
SEQ(SP=F8-FF%GCD=1-6%ISR=107-109%TI=Z%II=RI%TS=U)
OPS(O1=M218%O2=M218%O3=M218%O4=M218%O5=M218%O6=M109)
WIN(W1=1020%W2=1020%W3=1020%W4=1020%W5=1020%W6=1020)
ECN(R=Y%DF=N%T=FA-104%TG=FF%W=1020%O=M218%CC=N%Q=)
T1(R=Y%DF=N%T=FA-104%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=FA-104%TG=FF%W=1020%S=O%A=S+%F=AS%O=M218%RD=0%Q=)
T4(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
U1(R=N)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# Cisco 2924-XL Switch running IOS C2900XL Software (C2900XL-C3H2S-M), Version 12.0(5)XU, RELEASE SOFTWARE (fc1)
# IOS (tm) 2500 Software (C2500-D-L), Version 12.0(10), RELEASE SOFTWARE (fc1)
Fingerprint Cisco 2500 or 2924XL switch (IOS 12.0)
Class Cisco | IOS | 12.X | switch
CPE cpe:/h:cisco:catalyst_ws-c2924-xl
CPE cpe:/h:cisco:catalyst_2500
CPE cpe:/o:cisco:ios:12.0
SEQ(SP=7D-9D%GCD=1-6%ISR=9A-A4%TI=Z%II=RI%TS=U)
OPS(O1=M5B4%O2=M5B4%O3=M5B4%O4=M5B4%O5=M5B4%O6=M5B4)
WIN(W1=1020%W2=1020%W3=1020%W4=1020%W5=1020%W6=1020)
ECN(R=Y%DF=N%T=FA-104%TG=FF%W=1020%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=FA-104%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=FA-104%TG=FF%W=1020%S=O%A=S+%F=AS%O=M5B4%RD=0%Q=)
T4(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# IOS (tm) C2900XL Software (C2900XL-C3H2S-M), Version 12.0(5)WC17, RELEASE SOFTWARE (fc1)
Fingerprint Cisco 2900XL switch (IOS 12.0)
Class Cisco | IOS | 12.X | switch
CPE cpe:/h:cisco:catalyst_2900xl
CPE cpe:/o:cisco:ios:12.0
SEQ(SP=100-10A%GCD=1-6%ISR=104-112%TI=Z%II=RI%TS=U)
OPS(O1=M22CSLL%O2=M22CSLL%O3=M22CSLL%O4=M22CSLL%O5=M22CSLL%O6=M22CSLL)
WIN(W1=1020%W2=1020%W3=1020%W4=1020%W5=1020%W6=1020)
ECN(R=Y%DF=N%T=FA-104%TG=FF%W=1020%O=M22CSLL%CC=N%Q=)
T1(R=Y%DF=N%T=FA-104%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=FA-104%TG=FF%W=1020%S=O%A=S+%F=AS%O=M22CSLL%RD=0%Q=)
T4(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# Cisco WS-C2924M-XL (PowerPC403GA) C2900XL-C3H2S-M, Version 12.0(5)WC16
# IOS (tm) C3500XL Software (C3500XL-C3H2S-M), Version 12.0(5)WC16, Release Software (fc1)
# WS-C2924-XL-A Version 12.0(5)WC17
# IOS (tm) C2950 Software (C2950-C3H2S-M), Version 12.0(5.3)WC(1), MAINTENANCE INTERIM SOFTWARE
Fingerprint Cisco 2924M XL, 2950, or 3500XL switch (IOS 12.0)
Class Cisco | IOS | 12.X | switch
CPE cpe:/h:cisco:catalyst_ws-c2924m-xl
CPE cpe:/h:cisco:catalyst_2950
CPE cpe:/h:cisco:catalyst_3500xl
CPE cpe:/o:cisco:ios:12.0
SEQ(SP=FE-10A%GCD=1-6%ISR=FA-110%TI=Z%II=RI%TS=U)
OPS(O1=M22C%O2=M22C%O3=M22C%O4=M22C%O5=M22C%O6=M22C)
WIN(W1=1020%W2=1020%W3=1020%W4=1020%W5=1020%W6=1020)
ECN(R=Y%DF=N%T=FA-104%TG=FF%W=1020%O=M22C%CC=N%Q=)
T1(R=Y%DF=N%T=FA-104%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=FA-104%TG=FF%W=1020%S=O%A=S+%F=AS%O=M22C%RD=0%Q=)
T4(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# C2950 software (C2950-I6Q4L2-M) Version 12.1(22)EA4a
Fingerprint Cisco 2950 switch (IOS 12.1)
Class Cisco | IOS | 12.X | switch
CPE cpe:/h:cisco:catalyst_2950
CPE cpe:/o:cisco:ios:12.1
SEQ(SP=FD-107%GCD=1-6%ISR=104-112%TI=Z%II=RI%TS=U)
OPS(O1=M5B4LLNN%O2=M578LLNN%O3=M280LLNN%O4=M218LLNN%O5=M218LLNN%O6=M109LLNL|M109LLNN|M109NNLL)
WIN(W1=1020%W2=1020%W3=1020%W4=1020%W5=1020%W6=1020)
ECN(R=Y%DF=N%T=FA-104%TG=FF%W=1020%O=M5B4LLNN%CC=N%Q=)
T1(R=Y%DF=N%T=FA-104%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=FA-104%TG=FF%W=1020%S=O%A=S+%F=AS%O=M5B4LLNN%RD=0%Q=)
T4(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# IOS (tm) C2950 Software (C2950-I6Q4L2-M), Version 12.1(22)EA4, RELEASE SOFTWARE (fc1)
Fingerprint Cisco 2950 switch (IOS 12.1)
Class Cisco | IOS | 12.X | switch
CPE cpe:/h:cisco:catalyst_2950
CPE cpe:/o:cisco:ios:12.1
SEQ(SP=FB-105%GCD=1-6%ISR=104-10E%TI=Z%CI=I%II=RI%TS=U)
OPS(O1=M5B4LLLL%O2=M578LLNN%O3=M280LLNN%O4=M218LLLN%O6=M109LLNN)
WIN(W1=1020%W2=1020%W3=1020%W4=1020%W5=1020%W6=1020)
ECN(R=Y%DF=N%T=FB-105%TG=FF%W=1020%O=M5B4LLNN%CC=N)
T1(R=Y%DF=N%T=FB-105%TG=FF%S=O%A=S+%F=AS%RD=0)
T2(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=S%F=AR%RD=0)
T3(R=Y%DF=N%T=FB-105%TG=FF%W=1020%S=O%A=S+%F=AS%O=M5B4NNS%RD=0)
T4(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=Z%F=R%RD=0)
T5(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=S+%F=AR%RD=0)
T6(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=Z%F=R%RD=0)
T7(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=S%F=AR%RD=0)
U1(DF=N%T=FB-105%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=FB-105%TG=FF%CD=S)

# IOS (tm) C2950 Software (C2950-I6Q4L2-M), Version 12.1(22)EA4a
Fingerprint Cisco 2950 switch (IOS 12.1)
Class Cisco | IOS | 12.X | switch
CPE cpe:/h:cisco:catalyst_2950
CPE cpe:/o:cisco:ios:12.1
SEQ(SP=FF-109%GCD=1-6%ISR=105-10F%TI=Z%CI=I%II=RI%TS=U)
OPS(O1=M218LLLL|M218LLLN%O2=M218LLLL|M218LNLL%O3=M218LSL|M218LLLL|M218LNLL%O4=M218LSL|M218LLLL|M218LLLN%O5=M218LSL|M218LLLL|M218LLLN%O6=M109LLLL|M109LLLN)
WIN(W1=1020%W2=1020%W3=1020%W4=1020%W5=1020%W6=1020)
ECN(R=Y%DF=N%T=FA-104%TG=FF%W=1020%O=M218LLLN|M218LNLL%CC=N%Q=)
T1(R=Y%DF=N%T=FA-104%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=FA-104%TG=FF%W=1020%S=O%A=S+%F=AS%O=M218LLLN|M218LNLL%RD=0%Q=)
T4(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# cisco 2950-24 IOS 12.1(22)EA13, Standard Image
Fingerprint Cisco 2950 switch (IOS 12.1)
Class Cisco | IOS | 12.X | switch
CPE cpe:/h:cisco:catalyst_2950
CPE cpe:/o:cisco:ios:12.1
SEQ(SP=FD-107%GCD=1-6%ISR=10A-114%TI=RD%CI=RD%II=RI%TS=U)
OPS(O1=M5B4%O2=M578%O3=M280%O4=M218%O5=M218%O6=M109)
WIN(W1=1020%W2=1020%W3=1020%W4=1020%W5=1020%W6=1020)
ECN(R=Y%DF=N%T=FA-104%TG=FF%W=1020%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=FA-104%TG=FF%S=O%A=O%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=FA-104%TG=FF%W=1020%S=O%A=S+%F=AS%O=M5B4%RD=0%Q=)
T4(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# IOS (tm) C2950 Software (C2950-I6Q4L2-M), Version 12.1(22)EA4
Fingerprint Cisco 2950 switch (IOS 12.1)
Class Cisco | IOS | 12.X | switch
CPE cpe:/h:cisco:catalyst_2950
CPE cpe:/o:cisco:ios:12.1
SEQ(SP=FC-106%GCD=1-6%ISR=100-10A%TI=Z%CI=I%II=RI%TS=U)
OPS(O1=M5B4LLLL%O2=M578LLLL%O3=M280LLLL|M280LLNN%O4=M218LLLL%O5=M218LLLL|M218LLNN%O6=M109LLLL)
WIN(W1=1020%W2=1020%W3=1020%W4=1020%W5=1020%W6=1020)
ECN(R=Y%DF=N%T=FA-104%TG=FF%W=1020%O=M5B4LLLL%CC=N%Q=)
T1(R=Y%DF=N%T=FA-104%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=FA-104%TG=FF%W=1020%S=O%A=S+%F=AS%O=M5B4LLLL%RD=0%Q=)
T4(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# IOS (tm) C2950 Software (C2950-I6Q4L2-M), Version 12.1(22)EA4a, RELEASE SOFTWARE (fc1)
Fingerprint Cisco 2950 switch (IOS 12.1)
Class Cisco | IOS | 12.X | switch
CPE cpe:/h:cisco:catalyst_2950
CPE cpe:/o:cisco:ios:12.1
SEQ(SP=F4-10A%GCD=1-6%ISR=F8-112%TI=Z%CI=I%II=RI%TS=U)
OPS(O1=M5B4LLLL|M5B4LLNL%O2=M578LLLN|M578LLNL%O3=M280LLLL|M280LLLN|M280LLNL%O4=M218LLLN|M218LLNL|M218NLLL%O5=M218LLLL|M218LLLN|M218LLNL%O6=M109LLLN|M109LLNL)
WIN(W1=1020%W2=1020%W3=1020%W4=1020%W5=1020%W6=1020)
ECN(R=Y%DF=N%T=FA-104%TG=FF%W=1020%O=M5B4LLLN|M5B4LLNL%CC=N%Q=)
T1(R=Y%DF=N%T=FA-104%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=FA-104%TG=FF%W=1020%S=O%A=S+%F=AS%O=M5B4LLLN|M5B4LLNL%RD=0%Q=)
T4(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# IOS (tm) C2950 Software (C2950-I6Q4L2-M), Version 12.1(22)EA4a, RELEASE SOFTWARE (fc1)
Fingerprint Cisco 2950 switch (IOS 12.1)
Class Cisco | IOS | 12.X | switch
CPE cpe:/h:cisco:catalyst_2950
CPE cpe:/o:cisco:ios:12.1
SEQ(SP=FD-10B%GCD=1-6%ISR=103-10D%TI=Z%CI=I%II=RI%TS=U)
OPS(O1=M218LLLN|M218LLNL%O2=M218LLLN|M218LLNL%O3=|M218LLLN|M218LLNL%O4=|M218LLLN|M218LLNL%O5=|M218LLLN|M218LLNL%O6=|M109LLNL)
WIN(W1=1020%W2=1020%W3=1020%W4=1020%W5=1020%W6=1020)
ECN(R=Y%DF=N%T=FA-104%TG=FF%W=1020%O=M218LLNL|M218NLLL%CC=N%Q=)
T1(R=Y%DF=N%T=FA-104%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=N)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# Cisco Catalyst WS-C3750G-12S-E IOS 12.2(35)SE2
# cisco WS-C2950C-24 IOS (tm) C2950 Software (C2950-I6K2L2Q4-M), Version 12.1(22)EA10a
# IOS (tm) C2950 Software (C2950-I6K2L2Q4-M), Version 12.1(22)EA10a, RELEASE SOFTWARE (fc2)
# cisco 6509 IOS 122-18.SXF1
# Cisco IOS Software, C3750 Software (C3750-ADVIPSERVICESK9-M), Version 12.2(35)SE2, RELEASE SOFTWARE (fc1)
# 6500 Switch
# Cisco Catalyst 4510R Switch
# Cisco IOS 12.1E: Catalyst 6000
# Cisco IOS Software, C3560 Software (C3560-ADVIPSERVICESK9-M), Version 12.2(44)SE, RELEASE SOFTWARE (fc1)
# Cisco IOS Software, C3550 Software (C3550-IPSERVICESK9-M), Version 12.2(44)SE2
# NME-16ES-1G, IOS 12.2(25)SEE4, C3750-IPSERVICESK9-M
# cisco WS-C2960-8TC-L (PowerPC405) processor (revision A0)
Fingerprint Cisco 2950, 2960, 3000-series, 4510R, 6000-series, or 6500-series switch (IOS 12.1 or 12.2)
Class Cisco | IOS | 12.X | switch
CPE cpe:/h:cisco:catalyst_2950
CPE cpe:/h:cisco:catalyst_2960
CPE cpe:/h:cisco:catalyst_3000
CPE cpe:/h:cisco:catalyst_4510r
CPE cpe:/h:cisco:catalyst_6000
CPE cpe:/h:cisco:catalyst_6500
CPE cpe:/o:cisco:ios:12 auto
SEQ(SP=FA-108%GCD=1-6%ISR=100-110%TI=RD%II=RI%TS=U)
OPS(O1=M5B4%O2=M578%O3=M280%O4=M218%O5=M218%O6=M109)
WIN(W1=1020%W2=1020%W3=1020%W4=1020%W5=1020%W6=1020)
ECN(R=Y%DF=N%T=100%TG=FF%W=1020%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=100%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=100%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=100%TG=FF%W=1020%S=O%A=S+%F=AS%O=M5B4%RD=0%Q=)
T4(R=Y%DF=N%T=100%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=100%TG=FF%W=0%S=A%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=100%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=100%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=100%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=100%TG=FF%CD=S)

# model: WS-C2960G-24TC-L sw version: 12.2(50)SE1
# IOS (tm) C2950 Software (C2950-I6K2L2Q4-M), Version 12.1(22)EA13
# Cisco IOS Software, C3550 Software (C3550-IPSERVICESK9-M), Version 12.2(50)SE3
# Cisco IOS Software, C3560 Software (C3560-IPSERVICESK9-M), Version 12.2(50)SE3
# 4500 series catalyst core switch IOS Version 12.2(54)SG1
# WS-C3560G-48TS     15.0(2)SE
# Cisco Adaptive Security Appliance Software Version 9.0(2)
Fingerprint Cisco 2950, 2960, 3550, 3560, 3750, or 4500 switch (IOS 12.1 - 15.0); or Adaptive Security Appliance firewall
Class Cisco | IOS | 12.X | switch
CPE cpe:/h:cisco:catalyst_2950
CPE cpe:/h:cisco:catalyst_2960
CPE cpe:/h:cisco:catalyst_3550
CPE cpe:/h:cisco:catalyst_3560
CPE cpe:/h:cisco:catalyst_3750
CPE cpe:/h:cisco:catalyst_4500
CPE cpe:/o:cisco:ios:12
CPE cpe:/o:cisco:ios:15
Class Cisco | embedded || firewall
SEQ(SP=F1-10F%GCD=1-6%ISR=FE-110%TI=RD%CI=RD|RI%II=RI%TS=U)
OPS(O1=M5B4%O2=M578%O3=M280%O4=M218%O5=M218%O6=M109)
WIN(W1=1020%W2=1020%W3=1020%W4=1020%W5=1020%W6=1020)
ECN(R=Y%DF=N%T=FA-104%TG=FF%W=1020%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=FA-104%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=FA-104%TG=FF%W=1020%S=O%A=S+%F=AS%O=M5B4%RD=0%Q=)
T4(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# Cisco IOS Software, C3750 Software (C3750-IPSERVICESK9-M), Version 12.2(50)SE2, RELEASE SOFTWARE (fc2)
# Cisco IOS (tm) C2950 Software (C2950-I6K2L2Q4-M), Version 12.1(22)EA12, RELEASE SOFTWARE (fc1)
# Cisco IOS Software, C3560 Software (C3560-IPBASEK9-M), Version 12.2(46)SE, RELEASE SOFTWARE (fc2)
# Cisco IOS Software, C3550 Software (C3550-IPBASEK9-M), Version 12.2(46)SE, RELEASE SOFTWARE (fc2)
# Cisco IOS Software, C2960 Software (C2960-LANBASEK9-M), Version 12.2(46)SE, RELEASE SOFTWARE (fc2)
Fingerprint Cisco 2950, 2960, 3550, 3560, or 3750 switch (IOS 12.1 - 12.2)
Class Cisco | IOS | 12.X | switch
CPE cpe:/h:cisco:catalyst_2950
CPE cpe:/h:cisco:catalyst_2960
CPE cpe:/h:cisco:catalyst_3550
CPE cpe:/h:cisco:catalyst_3560
CPE cpe:/h:cisco:catalyst_3750
CPE cpe:/o:cisco:ios:12 auto
SEQ(SP=F2-10C%GCD=1-6%ISR=FE-10E%TI=RD%II=RI%TS=U)
OPS(O1=M5B4%O2=M578%O3=M280%O4=M218%O5=M218%O6=M109)
WIN(W1=1020%W2=1020%W3=1020%W4=1020%W5=1020%W6=1020)
ECN(R=Y%DF=N%T=FB-105%TG=FF%W=1020%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=FB-105%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=FB-105%TG=FF%W=1020%S=O%A=S+%F=AS%O=M5B4%RD=0%Q=)
T4(R=N)
T5(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=S+%F=AR%O=%RD=0%Q=)
T6(R=N)
T7(R=N)
U1(DF=N%T=FB-105%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=FB-105%TG=FF%CD=S)

# Cisco catalyst 3500 XL
Fingerprint Cisco 3500 XL switch
Class Cisco | IOS | 12.X | switch
CPE cpe:/h:cisco:catalyst_3500xl
CPE cpe:/o:cisco:ios:12 auto
SEQ(SP=F6-108%GCD=1-6%ISR=FE-10E%TI=Z%II=RI%TS=A)
OPS(R=N)
WIN(R=N)
ECN(R=Y%DF=N%T=100%TG=FF%W=1020%O=M5B4SNN%CC=N%Q=)
T1(R=Y%DF=N%T=100%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=100%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=100%TG=FF%W=1020%S=O%A=S+%F=AS%O=M109SNNT11LL%RD=0%Q=)
T4(R=Y%DF=N%T=100%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=100%TG=FF%W=0%S=A%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=100%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=100%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=100%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=100%TG=FF%CD=S)

# Cisco IOS Software, C3550 Software (C3550-IPBASEK9-M), Version 12.2(44)SE6, RELEASE SOFTWARE (fc1)
Fingerprint Cisco 3550 switch (IOS 12.1)
Class Cisco | IOS | 12.X | switch
CPE cpe:/h:cisco:catalyst_3550
CPE cpe:/o:cisco:ios:12 auto
SEQ(SP=F8-10E%GCD=1-6%ISR=106-110%TI=RD%CI=RD%II=RI%TS=U)
OPS(O1=M5B4%O2=M578%O3=M280%O4=M218%O5=M218%O6=M109)
WIN(W1=1020%W2=1020%W3=1020%W4=1020%W5=1020%W6=1020)
ECN(R=Y%DF=N%T=FA-104%TG=FF%W=1020%O=M5B4%CC=N)
T1(R=Y%DF=N%T=FA-104%TG=FF%S=O%A=S+%F=AS%RD=0)
T2(R=N)
T3(R=Y%DF=N%T=FA-104%TG=FF%W=1020%S=O%A=S+%F=AS%O=M7A8%RD=0)
T4(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%RD=0)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S+%F=AR%RD=0)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%RD=0)
T7(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=AR%RD=0)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# Cisco IOS Software, C3550 Software (C3550-IPBASEK9-M), Version 12.2(44)SE6, RELEASE SOFTWARE (fc1)
Fingerprint Cisco 3550 switch (IOS 12.2)
Class Cisco | IOS | 12.X | switch
CPE cpe:/h:cisco:3550_switch
CPE cpe:/o:cisco:ios:12.2
SEQ(SP=F7-10D%GCD=1-6%ISR=FE-110%TI=RD|RI%II=RI%SS=O%TS=U)
OPS(O1=M5B4%O2=M578%O3=M280%O4=M218%O5=M218%O6=M109)
WIN(W1=1020%W2=1020%W3=1020%W4=1020%W5=1020%W6=1020)
ECN(R=Y%DF=Y%T=FA-104%TG=FF%W=1020%O=M5B4%CC=N)
T1(R=Y%DF=Y%T=FA-104%TG=FF%S=O%A=S+%F=AS%RD=0)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S+%F=AR%RD=0)
T6(R=N)
T7(R=N)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# Cisco IOS Software, C3560 Software (C3560-IPBASEK9-M), Version 12.2(25)SEE3, RELEASE SOFTWARE (fc2)
Fingerprint Cisco 3560 switch (IOS 12.2)
Class Cisco | IOS | 12.X | switch
CPE cpe:/h:cisco:catalyst_3560
CPE cpe:/o:cisco:ios:12.2
SEQ(SP=100-10A%GCD=1-6%ISR=104-110%TI=Z%II=RI%TS=U)
OPS(O1=M218%O2=M218%O3=M218%O4=M218%O5=M218%O6=M109)
WIN(W1=1020%W2=1020%W3=1020%W4=1020%W5=1020%W6=1020)
ECN(R=Y%DF=N%T=100%TG=FF%W=1020%O=M218%CC=N%Q=)
T1(R=Y%DF=N%T=100%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=100%TG=FF%W=1020%S=O%A=S+%F=AS%O=M218%RD=0%Q=)
T4(R=N)
T5(R=Y%DF=N%T=100%TG=FF%W=0%S=A%A=S+%F=AR%O=%RD=0%Q=)
T6(R=N)
T7(R=N)
U1(DF=N%T=100%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=100%TG=FF%CD=S)

# Cisco 3560G-24TS
Fingerprint Cisco 3560G switch (IOS 12.2)
Class Cisco | IOS | 12.X | switch
CPE cpe:/h:cisco:catalyst_3560g
CPE cpe:/o:cisco:ios:12.2
SEQ(SP=FB-105%GCD=1-6%ISR=104-10E%TI=Z%II=RI%TS=U)
OPS(O1=M218%O2=M218%O3=M218%O4=M218%O5=M218%O6=M109)
WIN(W1=1020%W2=1020%W3=1020%W4=1020%W5=1020%W6=1020)
ECN(R=Y%DF=N%T=FA-104%TG=FF%W=1020%O=M218%CC=N%Q=)
T1(R=Y%DF=N%T=FA-104%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=O%A=S+%F=AR%O=%RD=0%Q=)
T6(R=N)
T7(R=N)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# Catalyst 3560-E Series Device Manager
Fingerprint Cisco 3650 switch
Class Cisco | IOS | 12.X | switch
CPE cpe:/h:cisco:catalyst_3650
SEQ(SP=FC-106%GCD=1-6%ISR=106-110%TI=RD|RI%II=RI%SS=O%TS=U)
OPS(O1=M564%O2=M564%O3=M280%O4=M218%O5=M218%O6=M109)
WIN(W1=1020%W2=1020%W3=1020%W4=1020%W5=1020%W6=1020)
ECN(R=Y%DF=Y%T=FA-104%TG=FF%W=1020%O=M564%CC=N%Q=)
T1(R=Y%DF=Y%T=FA-104%TG=FF%S=O%A=O|S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=O%A=S+%F=AR%O=%RD=0%Q=)
T6(R=N)
T7(R=N)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# Cisco IOS Software, C3750E Software (C3750E-UNIVERSALK9-M), Version 12.2(44)
# Cisco 6500 supervisor 720 IOS ver 12.2(33)
Fingerprint Cisco 3750 or 6500 switch (IOS 12.2)
Class Cisco | IOS | 12.X | switch
CPE cpe:/h:cisco:catalyst_3750
CPE cpe:/h:cisco:catalyst_6500
CPE cpe:/o:cisco:ios:12.2
SEQ(SP=102-10C%GCD=1-6%ISR=103-10D%TI=RD%CI=RD|RI%II=RI%TS=U)
OPS(O1=M5B4%O2=M578%O3=M280%O4=M218%O5=M218%O6=M109)
WIN(W1=1020%W2=1020%W3=1020%W4=1020%W5=1020%W6=1020)
ECN(R=Y%DF=Y%T=100%TG=FF%W=1020%O=M5B4%CC=N%Q=)
T1(R=Y%DF=Y%T=100%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=100%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=Y%T=100%TG=FF%W=1020%S=O%A=S+%F=AS%O=M5B4%RD=0%Q=)
T4(R=Y%DF=N%T=100%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=100%TG=FF%W=0%S=A%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=100%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=100%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=100%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=100%TG=FF%CD=S)

# Cisco IOS Software, C3750 Software (C3750-IPBASE-M), Version 12.2(25)SEB4
Fingerprint Cisco 3750 switch (IOS 12.2)
Class Cisco | IOS | 12.X | switch
CPE cpe:/h:cisco:catalyst_3750
CPE cpe:/o:cisco:ios:12.2
SEQ(SP=FB-107%GCD=1-6%ISR=FE-112%TI=Z%II=RI%TS=U)
OPS(O1=M5B4%O2=M578%O3=M280%O4=M218%O5=M218%O6=M109)
WIN(W1=1020%W2=1020%W3=1020%W4=1020%W5=1020%W6=1020)
ECN(R=Y%DF=N%T=100%TG=FF%W=1020%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=100%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=Y%DF=N%T=100%TG=FF%W=0%S=A%A=S+%F=AR%O=%RD=0%Q=)
T6(R=N)
T7(R=N)
U1(DF=N%T=100%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=100%TG=FF%CD=S)

# IOS Version 12.2.33SXI6 6509-E chassis running Supervisor 720 - 3B
Fingerprint Cisco 6509 switch (IOS 12.2)
Class Cisco | IOS | 12.X | switch
CPE cpe:/h:cisco:catalyst_6509:e
CPE cpe:/o:cisco:ios:12 auto
SEQ(SP=FE-108%GCD=1-6%ISR=104-10E%TI=RD%II=RI%TS=U)
OPS(O1=M5B4%O2=M578%O3=M280%O4=M218%O5=M218%O6=M109)
WIN(W1=1020%W2=1020%W3=1020%W4=1020%W5=1020%W6=1020)
ECN(R=Y%DF=Y%T=FA-104%TG=FF%W=1020%O=M5B4%CC=N)
T1(R=Y%DF=Y%T=FA-104%TG=FF%S=O%A=S+%F=AS%RD=0)
T2(R=N)
T3(R=Y%DF=Y%T=FA-104%TG=FF%W=1020%S=O%A=S+%F=AS%O=M5B4%RD=0)
T4(R=N)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S+%F=AR%RD=0)
T6(R=N)
T7(R=N)
U1(R=N)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# Cisco IOS Software, C3750 Software (C3750-IPSERVICESK9-M), Version 12.2(46)SE, RELEASE SOFTWARE (fc2)
# Cisco IOS Software, C880 Software (C880DATA-UNIVERSALK9-M), Version 15.0(1)XA2, RELEASE SOFTWARE (fc2)
Fingerprint Cisco 880 router (IOS 15.0) or 3750 switch (IOS 12.2)
Class Cisco | IOS | 12.X | switch
CPE cpe:/h:cisco:catalyst_3750
CPE cpe:/o:cisco:ios:12.2
Class Cisco | IOS | 15.X | router
CPE cpe:/h:cisco:880_router
CPE cpe:/o:cisco:ios:15.0
SEQ(SP=FF-109%GCD=1-6%ISR=FC-10E%TI=RD%II=RI%TS=U)
OPS(O1=M564%O2=M564%O3=M280%O4=M218%O5=M218%O6=M109)
WIN(W1=1020%W2=1020%W3=1020%W4=1020%W5=1020%W6=1020)
ECN(R=Y%DF=N%T=100%TG=FF%W=1020%O=M564%CC=N%Q=)
T1(R=Y%DF=N%T=100%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=FC-106%TG=FF%W=80%S=Z%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=FC-106%TG=FF%W=100%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T4(R=Y%DF=N%T=FC-106%TG=FF%W=400%S=A%A=S%F=AR%O=%RD=0%Q=)
T5(R=Y%DF=N%T=100%TG=FF%W=0%S=O%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FC-106%TG=FF%W=8000%S=A%A=S%F=AR%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FC-106%TG=FF%W=FFFF%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=100%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=100%TG=FF%CD=S)

# Cisco IOS Software, C2960S Software (C2960S-UNIVERSALK9-M), Version 12.2(53)SE2, RELEASE SOFTWARE (fc3)
# 3750-x
Fingerprint Cisco C2960 switch (IOS 12.2)
Class Cisco | IOS | 12.X | switch
CPE cpe:/h:cisco:catalyst_2960
CPE cpe:/o:cisco:ios:12.2
SEQ(SP=101-10B%GCD=1-6%ISR=103-10D%TI=RD%CI=RD|RI%II=RI%TS=U)
OPS(O1=M564%O2=M564%O3=M280%O4=M218%O5=M218%O6=M109)
WIN(W1=1020%W2=1020%W3=1020%W4=1020%W5=1020%W6=1020)
ECN(R=Y%DF=Y%T=FA-104%TG=FF%W=1020%O=M564%CC=N%Q=)
T1(R=Y%DF=Y%T=FA-104%TG=FF%S=O%A=O|S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=FA-104%TG=FF%W=80%S=Z%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=FA-104%TG=FF%W=100%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T4(R=Y%DF=N%T=FA-104%TG=FF%W=400%S=A%A=S%F=AR%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=O%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=8000%S=A%A=S%F=AR%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FA-104%TG=FF%W=FFFF%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# WS-C3560G-48TS IOS release - 12.2(53)SE2
Fingerprint Cisco C3560 switch (IOS 12.2)
Class Cisco | IOS | 12.X | switch
CPE cpe:/h:cisco:catalyst_3560
CPE cpe:/o:cisco:ios:12.2
SEQ(SP=102-10C%GCD=1-6%ISR=FD-10F%TI=RD%CI=RD|RI%II=RI%TS=U)
OPS(O1=M5B4%O2=M578%O3=M280%O4=M218%O5=M218%O6=M109)
WIN(W1=5B4%W2=578%W3=280%W4=218%W5=218%W6=109)
ECN(R=Y%DF=Y%T=FA-104%TG=FF%W=5B4%O=M5B4%CC=N%Q=)
T1(R=Y%DF=Y%T=FA-104%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%T=FA-104%TG=FF%W=5B4%S=O%A=S+%F=AS%O=M5B4%RD=0%Q=)
T4(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=E8FD%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# 6513-core-switch# Cisco IOS Software, s72033_rp Software (s72033_rp-ADVENTERPRISEK9_WAN-M), Version 12.2(33)SXI
# Cisco IOS Software, Catalyst 4500 L3 Switch Software (cat4500e-IPBASEK9-M), Version 12.2(52)XO, RELEASE SOFTWARE (fc1)
# WS-C3560X-48       12.2(53)SE2           C3560E-UNIVERSALK9-M
# Cisco WS-C3750-48P - Version 12.2(55)SE1
# Cisco Catalyst 1900/2820 Enterprise Edition Software Version V9.00.06
Fingerprint Cisco Catalyst 1900, 2820, 2960, 3560, 3750, 4500, or 6513 switch (IOS 12.2)
Class Cisco | IOS | 12.X | switch
CPE cpe:/h:cisco:catalyst_1900
CPE cpe:/h:cisco:catalyst_2820
CPE cpe:/h:cisco:catalyst_2960
CPE cpe:/h:cisco:catalyst_3560
CPE cpe:/h:cisco:catalyst_4500
CPE cpe:/h:cisco:catalyst_6513
CPE cpe:/o:cisco:ios:12.2
SEQ(SP=F8-10C%GCD=1-6%ISR=100-110%TI=RD%CI=RD|RI%II=RI%TS=U)
OPS(O1=M5B4%O2=M578%O3=M280%O4=M218%O5=M218%O6=M109)
WIN(W1=1020%W2=1020%W3=1020%W4=1020%W5=1020%W6=1020)
ECN(R=Y%DF=Y%T=FA-104%TG=FF%W=1020%O=M5B4%CC=N%Q=)
T1(R=Y%DF=Y%T=FA-104%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%T=FA-104%TG=FF%W=1020%S=O%A=S+%F=AS%O=M5B4%RD=0%Q=)
T4(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# C3500XL Software (C3500XL-C3H2S-M), Version 12.0(5)WC15
# IOS (tm) C2900XL Software (C2900XL-C3H2S-M), Version 12.0(5)WC17, RELEASE SOFTWARE (fc1)
Fingerprint Cisco Catalyst 2900XL or 3500XL switch (IOS 12.0)
Class Cisco | IOS | 12.X | switch
CPE cpe:/h:cisco:catalyst_2900xl
CPE cpe:/h:cisco:catalyst_3500xl
CPE cpe:/o:cisco:ios:12.0
SEQ(SP=DE-108%GCD=1-6%ISR=101-10F%TI=Z%II=RI%TS=U)
OPS(O1=M22C%O2=M22C%O3=M22C%O4=M22C%O5=M22C%O6=M22C)
WIN(W1=1020%W2=1020%W3=1020%W4=1020%W5=1020%W6=1020)
ECN(R=Y%DF=N%T=FA-104%TG=FF%W=1020%O=M22C%CC=N%Q=)
T1(R=Y%DF=N%T=FA-104%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=O%A=S+%F=AR%O=%RD=0%Q=)
T6(R=N)
T7(R=N)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# WS-C2912-XL-A Version 12.0(5)XU
Fingerprint Cisco Catalyst 2912 switch (IOS 12.0)
Class Cisco | IOS | 12.X | switch
CPE cpe:/h:cisco:catalyst_2912
CPE cpe:/o:cisco:ios:12.0
SEQ(SP=65-8F%GCD=1-6%ISR=9A-A4%TI=Z%II=RI%TS=U)
OPS(O1=M22C%O2=M22C%O3=M22C%O4=M22C%O5=M22C%O6=M22C)
WIN(W1=1020%W2=1020%W3=1020%W4=1020%W5=1020%W6=1020)
ECN(R=Y%DF=N%T=FA-104%TG=FF%W=1020%O=M22C%CC=N%Q=)
T1(R=Y%DF=N%T=FA-104%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=FA-104%TG=FF%W=1020%S=O%A=S+%F=AS%O=M22C%RD=0%Q=)
T4(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# Cisco WS-C2912-XL
Fingerprint Cisco Catalyst 2912 switch (IOS 12.0)
Class Cisco | IOS | 12.X | switch
CPE cpe:/h:cisco:catalyst_2912
CPE cpe:/o:cisco:ios:12.0
SEQ(SP=FB-105%GCD=1-6%ISR=105-10F%TI=Z%II=RI%TS=U)
OPS(O1=M22C%O2=M22C%O3=M22C%O4=M22C%O5=M22C%O6=M22C)
WIN(W1=1020%W2=1020%W3=1020%W4=1020%W5=1020%W6=1020)
ECN(R=Y%DF=N%T=FA-104%TG=FF%W=1020%O=|M22C%CC=N)
T1(R=Y%DF=N%T=FA-104%TG=FF%S=O%A=O|S+%F=AS%RD=0)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S+%F=AR%RD=0)
T6(R=N)
T7(R=N)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# Catalyst 2950 series 48 Port
Fingerprint Cisco Catalyst 2950 switch
Class Cisco | IOS | 12.X | switch
CPE cpe:/h:cisco:catalyst_2950
CPE cpe:/o:cisco:ios:12 auto
SEQ(SP=FE-108%GCD=1-6%ISR=102-114%TI=Z%II=RI%TS=U)
OPS(O1=M5B4LLLL|M5B4LLNL%O2=M578LLLL|M578LLNL%O3=M280LLLL|M280LLNL%O4=M218LLLL|M218LLNL|M218NLLL%O5=M218LLLL|M218LLNL%O6=M109LLLL|M109LLNL|M109NLLL)
WIN(W1=1020%W2=1020%W3=1020%W4=1020%W5=1020%W6=1020)
ECN(R=Y%DF=N%T=FA-104%TG=FF%W=1020%O=M5B4LLNL%CC=N%Q=)
T1(R=Y%DF=N%T=FA-104%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S+%F=AR%O=%RD=0%Q=)
T6(R=N)
T7(R=N)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# WS-C2950-24, Version 12.1(22)EA13
# IOS (tm) C2950 Software (C2950-I6K2L2Q4-M), Version 12.1(22)EA13
Fingerprint Cisco Catalyst 2950 switch (IOS 12.1)
Class Cisco | IOS | 12.X | switch
CPE cpe:/h:cisco:catalyst_2950
CPE cpe:/o:cisco:ios:12.1
SEQ(SP=FD-10B%GCD=1-6%ISR=102-112%TI=RD%CI=RD|RI%II=RI%TS=U)
OPS(O1=M218%O2=M218%O3=M218%O4=M218%O5=M218%O6=M109)
WIN(W1=1020%W2=1020%W3=1020%W4=1020%W5=1020%W6=1020)
ECN(R=Y%DF=N%T=FA-104%TG=FF%W=1020%O=M218%CC=N%Q=)
T1(R=Y%DF=N%T=FA-104%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=FA-104%TG=FF%W=1020%S=O%A=S+%F=AS%O=M218%RD=0%Q=)
T4(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# Cisco Catalyst 2950 Series WS-C2950-12
Fingerprint Cisco Catalyst 2950-series switch
Class Cisco | IOS | 12.X | switch
CPE cpe:/h:cisco:catalyst_2950
CPE cpe:/o:cisco:ios:12 auto
SEQ(SP=100-10A%GCD=1-6%ISR=103-10D%TI=Z%II=RI%TS=U)
OPS(O1=%O2=M578LLLN%O3=M280LLLN%O4=%O5=M218LLLN%O6=M109LLLL)
WIN(W1=1020%W2=1020%W3=1020%W4=1020%W5=1020%W6=1020)
ECN(R=Y%DF=N%T=FA-104%TG=FF%W=1020%O=M5B4LLLN%CC=N%Q=)
T1(R=Y%DF=N%T=FA-104%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=FA-104%TG=FF%W=1020%S=O%A=S+%F=AS%O=M5B4LLLN%RD=0%Q=)
T4(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# Cisco IOS Software, C3560 Software (C3560-IPBASE-M), Version 12.2(35)SE5, RELEASE SOFTWARE (fc1)
Fingerprint Cisco Catalyst 2960 or 3560 switch (IOS 12.2)
Class Cisco | IOS | 12.X | switch
CPE cpe:/h:cisco:catalyst_2960
CPE cpe:/h:cisco:catalyst_3560
CPE cpe:/o:cisco:ios:12.2
SEQ(SP=F3-10B%GCD=1-6%ISR=100-112%TI=RD%CI=I%II=RI%TS=U)
OPS(O1=M218%O2=M218%O3=M218%O4=M218%O5=M218%O6=M109)
WIN(W1=1020%W2=1020%W3=1020%W4=1020%W5=1020%W6=1020)
ECN(R=Y%DF=N%T=FA-104%TG=FF%W=1020%O=M218%CC=N)
T1(R=Y%DF=N%T=FA-104%TG=FF%S=O%A=S+%F=AS%RD=0)
T2(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=AR%RD=0)
T3(R=Y%DF=N%T=FA-104%TG=FF%W=1020%S=O%A=S+%F=AS%O=M218%RD=0)
T4(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%RD=0)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S+%F=AR%RD=0)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%RD=0)
T7(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=AR%RD=0)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# CIsco 2960
# IOS (tm) 3600 Software (C3640-IK9S-M), Version 12.3(20), RELEASE SOFTWARE (fc2)
Fingerprint Cisco Catalyst 2960 or 3600 switch (IOS 12.3)
Class Cisco | IOS | 12.X | switch
CPE cpe:/h:cisco:catalyst_2960
CPE cpe:/h:cisco:catalyst_3600
CPE cpe:/o:cisco:ios:12.3
SEQ(SP=FE-108%GCD=1-6%ISR=102-10C%TI=Z%II=RI%TS=U)
OPS(O1=M5B4%O2=M578%O3=M280%O4=M218%O5=M218%O6=M109)
WIN(W1=1020%W2=1020%W3=1020%W4=1020%W5=1020%W6=1020)
ECN(R=Y%DF=N%T=FA-104%TG=FF%W=1020%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=FA-104%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S+%F=AR%O=%RD=0%Q=)
T6(R=N)
T7(R=N)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# Cisco IOS 12.2(44)SE running on a Cisco Catalyst 2960 switch
Fingerprint Cisco Catalyst 2960 switch (IOS 12.2)
Class Cisco | IOS | 12.X | switch
CPE cpe:/h:cisco:catalyst_2960
CPE cpe:/o:cisco:ios:12.2
SEQ(SP=F9-109%GCD=1-6%ISR=107-111%TI=RD%II=RI%TS=U)
OPS(O1=M5A8SNNT11LL%O2=M578SNNT11LL%O3=|M280SNNLLLLLLLL|M280SNNNLLLLLLL%O4=M218SNNT11LL%O5=M218SNNT11LL%O6=M109SNNT11LL)
WIN(W1=1020%W2=1020%W3=1020%W4=1020%W5=1020%W6=1020)
ECN(R=Y%DF=N%T=FA-104%TG=FF%W=1020%O=M5B4SNN%CC=N%Q=)
T1(R=Y%DF=N%T=FA-104%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=FA-104%TG=FF%W=1020%S=O%A=S+%F=AS%O=M5B4%RD=0%Q=)
T4(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# 12.2(55)SE on Cisco Switch WS-X2960-24TT-L
Fingerprint Cisco Catalyst 2960 switch (IOS 12.2)
Class Cisco | IOS | 12.X | switch
CPE cpe:/h:cisco:catalyst_2960
CPE cpe:/o:cisco:ios:12.2
SEQ(SP=F5-109%GCD=1-6%ISR=106-112%TI=RD%CI=RD%II=RI%TS=A|U)
OPS(O1=M5B4SNNT11LL%O2=M578SNNT11LL%O3=M280SNNLLLLLLLL%O4=M218SNNT11LL%O5=M218SNNT11LL%O6=M109SNNT11LL)
WIN(W1=1020%W2=1020%W3=1020%W4=1020%W5=1020%W6=1020)
ECN(R=Y%DF=N%T=FA-104%TG=FF%W=1020%O=M5B4SNN%CC=N%Q=)
T1(R=Y%DF=N%T=FA-104%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=FA-104%TG=FF%W=1020%S=O%A=S+%F=AS%O=M5E2%RD=0%Q=)
T4(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# Cisco IOS Software, C2960 Software (C2960-LANLITEK9-M), Version 12.2(50)SE5, RELEASE SOFTWARE (fc1)
Fingerprint Cisco Catalyst 2960 switch (IOS 12.2)
Class Cisco | IOS | 12.X | switch
CPE cpe:/h:cisco:catalyst_2960
CPE cpe:/o:cisco:ios:12.2
SEQ(SP=F9-109%GCD=1-6%ISR=106-112%TI=RD%CI=RD|RI%II=RI%TS=U)
OPS(O1=M550%O2=M550%O3=M280%O4=M218%O5=M218%O6=M109)
WIN(W1=1020%W2=1020%W3=1020%W4=1020%W5=1020%W6=1020)
ECN(R=Y%DF=Y%T=FB-105%TG=FF%W=1020%O=M550%CC=N)
T1(R=Y%DF=Y%T=FB-105%TG=FF%S=O%A=S+%F=AS%RD=0)
T2(R=N)
T3(R=Y%DF=Y%T=FB-105%TG=FF%W=1020%S=O%A=S+%F=AS%O=M550%RD=0)
T4(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=Z%F=R%RD=0)
T5(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=S+%F=AR%RD=0)
T6(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=Z%F=R%RD=0)
T7(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=S%F=AR%RD=0)
U1(DF=N%T=FB-105%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=FB-105%TG=FF%CD=S)

# WS-C3550-24-SMI, Version 12.2(50)SE
# Cisco IOS Software, C3560 Software (C3560-IPSERVICESK9-M), Version 12.2(50)SE
# cisco catalyst c2960
Fingerprint Cisco Catalyst 2960, 3550, or 3560 switch (IOS 12.2)
Class Cisco | IOS | 12.X | switch
CPE cpe:/h:cisco:catalyst_2960
CPE cpe:/h:cisco:catalyst_3550
CPE cpe:/h:cisco:catalyst_3560
CPE cpe:/o:cisco:ios:12.2
SEQ(SP=FD-107%GCD=1-6%ISR=103-113%TI=RD|RI%II=RI%SS=O%TS=U)
OPS(O1=M5B4%O2=M578%O3=M280%O4=M218%O5=M218%O6=M109)
WIN(W1=1020%W2=1020%W3=1020%W4=1020%W5=1020%W6=1020)
ECN(R=Y%DF=Y%T=FA-104%TG=FF%W=1020%O=M5B4%CC=N%Q=)
T1(R=Y%DF=Y%T=FA-104%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=Y%T=FA-104%TG=FF%W=1020%S=O%A=S+%F=AS%O=M5B4%RD=0%Q=)
T4(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# Cisco Catalyst 2960 IOS 12.2(35)SE5
# cisco 2960 8 port switch
# Cisco IOS Software, C3560 Software (C3560-IPBASE-M), Version 12.2(35)SE5, RELEASE SOFTWARE (fc1)
# Cisco IOS Software, C3750E Software (C3750E-UNIVERSAL-M), Version 12.2(35)SE5, RELEASE SOFTWARE (fc1)
Fingerprint Cisco Catalyst 2960, 3560, or 3750 switch (IOS 12.2)
Class Cisco | IOS | 12.X | switch
CPE cpe:/h:cisco:catalyst_2960
CPE cpe:/h:cisco:catalyst_3560
CPE cpe:/h:cisco:catalyst_3750
CPE cpe:/o:cisco:ios:12.2
SEQ(SP=F8-10C%GCD=1-6%ISR=102-112%TI=RD%CI=I%II=RI%TS=U)
OPS(O1=M5B4%O2=M578%O3=M280%O4=M218%O5=M218%O6=M109)
WIN(W1=1020%W2=1020%W3=1020%W4=1020%W5=1020%W6=1020)
ECN(R=Y%DF=N%T=FA-104%TG=FF%W=1020%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=FA-104%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=FA-104%TG=FF%W=1020%S=O%A=S+%F=AS%O=M5B4%RD=0%Q=)
T4(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# Cisco IOS Software, C2960 Software (C2960-LANBASE-M), Version 12.2(35)SE5, RELEASE SOFTWARE (fc1)
# Cisco IOS Version 12.2(18)SXF8 running on Supervisor II / MSFC II module in a Cisco Catalyst 6500 switch
# Cisco WS-C3560-48PS
# Cisco IOS Software, C3560 Software (C3560-ADVIPSERVICESK9-M), Version 12.2(25)SEE4
Fingerprint Cisco Catalyst 2960, 3560, or 6500 switch (IOS 12.2)
Class Cisco | IOS | 12.X | switch
CPE cpe:/h:cisco:catalyst_2960
CPE cpe:/h:cisco:catalyst_3560
CPE cpe:/h:cisco:catalyst_6500
CPE cpe:/o:cisco:ios:12.2
SEQ(SP=FF-109%GCD=1-6%ISR=100-10E%TI=RD%CI=RD|RI%II=RI%TS=U)
OPS(O1=M218%O2=M218%O3=M218%O4=M218%O5=M218%O6=M109)
WIN(W1=1020%W2=1020%W3=1020%W4=1020%W5=1020%W6=1020)
ECN(R=Y%DF=N%T=100%TG=FF%W=1020%O=M218%CC=N%Q=)
T1(R=Y%DF=N%T=100%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=100%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=100%TG=FF%W=1020%S=O%A=S+%F=AS%O=M218%RD=0%Q=)
T4(R=Y%DF=N%T=100%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=100%TG=FF%W=0%S=A%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=100%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=100%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=100%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=100%TG=FF%CD=S)

# IOS (tm) C3500XL Software (C3500XL-C3H2S-M), Version 12.0(5)WC17, RELEASE SOFTWARE (fc1)
Fingerprint Cisco Catalyst 3500 XL-series switch (12.0)
Class Cisco | IOS | 12.X | switch
CPE cpe:/h:cisco:catalyst_2900
CPE cpe:/h:cisco:catalyst_3500_xl
SEQ(SP=FA-10A%GCD=1-6%ISR=FF-113%TI=Z%CI=I%II=RI%TS=U)
OPS(O1=M5B4%O2=M5B4%O3=M5B4%O4=M5B4%O5=M5B4%O6=M5B4)
WIN(W1=1020%W2=1020%W3=1020%W4=1020%W5=1020%W6=1020)
ECN(R=Y%DF=N%T=FA-104%TG=FF%W=1020%O=M5B4%CC=N)
T1(R=Y%DF=N%T=FA-104%TG=FF%S=O%A=S+%F=AS%RD=0)
T2(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=AR%RD=0)
T3(R=N)
T4(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%RD=0)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S+%F=AR%RD=0)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%RD=0)
T7(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=AR%RD=0)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# IOS (tm) C3550 Software (C3550-I9Q3L2-M), Version 12.1(22)EA1a
Fingerprint Cisco Catalyst 3550 switch (IOS 12.1)
Class Cisco | IOS | 12.X | switch
CPE cpe:/h:cisco:catalyst_3550
CPE cpe:/o:cisco:ios:12.2
SEQ(SP=FB-10B%GCD=1-6%ISR=108-112%TI=Z%TS=U)
OPS(O1=M218%O2=M218%O3=M218%O4=M218%O5=M218%O6=M109)
WIN(W1=1020%W2=1020%W3=1020%W4=1020%W5=1020%W6=1020)
ECN(R=Y%DF=N%T=100%TG=FF%W=1020%O=M218%CC=N%Q=)
T1(R=Y%DF=N%T=100%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=100%TG=FF%W=1020%S=O%A=S+%F=AS%O=M218%RD=0%Q=)
T4(R=Y%DF=N%T=100%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=100%TG=FF%W=0%S=A%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=100%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=100%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=100%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(R=N)

# Cisco IOS Software, C3550 Software (C3550-IPBASEK9-M), Version 12.2(44)SE2, RELEASE SOFTWARE (fc2)
Fingerprint Cisco Catalyst 3550 switch (IOS 12.2)
Class Cisco | IOS | 12.X | switch
CPE cpe:/h:cisco:catalyst_3550
CPE cpe:/o:cisco:ios:12.2
SEQ(SP=FA-108%GCD=1-6%ISR=103-10D%TI=RD%CI=RD|RI%II=RI%TS=U)
OPS(O1=M5B4%O2=M578%O3=M280%O4=M218%O5=M218%O6=M109)
WIN(W1=1020%W2=1020%W3=1020%W4=1020%W5=1020%W6=1020)
ECN(R=Y%DF=Y%T=FA-104%TG=FF%W=1020%O=M5B4%CC=N%Q=)
T1(R=Y%DF=Y%T=FA-104%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
T3(R=N)
T4(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# Cisco Catalyst 6509 (setup to perform routing)
# IOS (tm) c6sup2_rp Software (c6sup2_rp-JK2S-M), Version 12.1(26)E4, RELEASE SOFTWARE (fc1)
# Cisco Catalyst 6500 running 12.1(11r)E1, RELEASE SOFTWARE (fc1)
# Cisco Catalyst 3560 switch [WS-C3560-48PS] running IOS 12.2(35)SE1.
Fingerprint Cisco Catalyst 3560 or 6500-series switch (IOS 12.1 - 12.2)
Class Cisco | IOS | 12.X | switch
CPE cpe:/h:cisco:catalyst_3560
CPE cpe:/h:cisco:catalyst_6500
CPE cpe:/o:cisco:ios:12 auto
SEQ(SP=E6-107%GCD=1-6%ISR=105-114%TI=RD%II=RI%TS=U)
OPS(O1=M218%O2=M218%O3=M218%O4=M218%O5=M218%O6=M109)
WIN(W1=1020%W2=1020%W3=1020%W4=1020%W5=1020%W6=1020)
ECN(R=Y%DF=N%T=FA-104%TG=FF%W=1020%O=M218%CC=N%Q=)
T1(R=Y%DF=N%T=FA-104%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=FA-104%TG=FF%W=1020%S=O%A=S+%F=AS%O=M218%RD=0%Q=)
T4(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
U1(R=N)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# ipbase 12.2(17r)SX7 fc1 cisco 6509 sup720-10g
Fingerprint Cisco Catalyst 6509 switch (IOS 12.2)
Class Cisco | IOS | 12.X | switch
CPE cpe:/h:cisco:catalyst_6509
CPE cpe:/o:cisco:ios:12.2
SEQ(SP=FE-108%GCD=1-6%ISR=FD-107%TI=RD%CI=RD%II=RI%TS=U)
OPS(O1=M5B4%O2=M578%O3=M280%O4=M218%O5=M218%O6=M109)
WIN(W1=8000%W2=8000%W3=8000%W4=8000%W5=8000%W6=8000)
ECN(R=Y%DF=N%T=38-42%TG=40%W=8000%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=38-42%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=38-42%TG=40%W=8000%S=O%A=S+%F=AS%O=M109%RD=0%Q=)
T4(R=Y%DF=N%T=38-42%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=38-42%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=38-42%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=38-42%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FB-105%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=FB-105%TG=FF%CD=S)

# IOS 12.2(33)SXI3 running on 6509-E
Fingerprint Cisco Catalyst 6509-E switch (IOS 12.2)
Class Cisco | IOS | 12.X | switch
CPE cpe:/h:cisco:catalyst_6509:e
CPE cpe:/o:cisco:ios:12.2
SEQ(SP=FB-105%GCD=1-6%ISR=102-10C%TI=RD%CI=RD%II=RI%TS=U)
OPS(O1=M5B4%O2=M578%O3=M280%O4=M218%O5=M218%O6=M109)
WIN(W1=8000%W2=8000%W3=8000%W4=8000%W5=8000%W6=8000)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=8000%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=3B-45%TG=40%W=8000%S=O%A=S+%F=AS%O=M109%RD=0%Q=)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(R=N)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# Cisco LS1010 Cat8510MSR WA5-5 Software (Cat8510M-WP-M), Version 12.0(10)W5(18b)
Fingerprint Cisco Catalyst 8510MSR switch (IOS 12.0)
Class Cisco | IOS | 12.X | switch
CPE cpe:/h:cisco:catalyst_8510msr
CPE cpe:/o:cisco:ios:12.0
SEQ(SP=48-5C%GCD=1-6%ISR=9A-A4%TI=Z%II=RI%TS=U)
OPS(O1=M218%O2=M218%O3=M218%O4=M218%O5=M218%O6=M218)
WIN(W1=1020%W2=1020%W3=1020%W4=1020%W5=1020%W6=1020)
ECN(R=Y%DF=N%T=100%TG=FF%W=1020%O=M218%CC=N%Q=)
T1(R=Y%DF=N%T=100%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=100%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=100%TG=FF%W=1020%S=O%A=S+%F=AS%O=M218%RD=0%Q=)
T4(R=Y%DF=N%T=100%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=100%TG=FF%W=0%S=A%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=100%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=100%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=100%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=100%TG=FF%CD=S)

# Cisco IOS Software, CBS30X0 Software (CBS30X0-IPBASEK9-M), Version 12.2(46)SE, R
Fingerprint Cisco Catalyst Blade Switch 3020 (IOS 12.2)
Class Cisco | IOS | 12.X | switch
CPE cpe:/h:cisco:catalyst_blade_switch_3020
CPE cpe:/o:cisco:ios:12.2
SEQ(SP=FA-10A%GCD=1-6%ISR=103-111%TI=RD%CI=RD%II=RI%TS=U)
OPS(O1=M514%O2=M514%O3=M280%O4=M218%O5=M218%O6=M109)
WIN(W1=1020%W2=1020%W3=1020%W4=1020%W5=1020%W6=1020)
ECN(R=Y%DF=Y%T=FA-104%TG=FF%W=1020%O=M514%CC=N%Q=)
T1(R=Y%DF=Y%T=FA-104%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=Y%T=FA-104%TG=FF%W=1020%S=O%A=S+%F=AS%O=M514%RD=0%Q=)
T4(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# Catalyst Express 500
Fingerprint Cisco Catalyst Express 500 switch
Class Cisco | IOS | 12.X | switch
CPE cpe:/h:cisco:catalyst_express_500
CPE cpe:/o:cisco:ios:12 auto
SEQ(SP=FA-108%GCD=1-6%ISR=103-10D%TI=Z%CI=I%II=RI%TS=U)
OPS(O1=M5B4%O2=M578%O3=M280%O4=M218%O5=M218%O6=M109)
WIN(W1=1020%W2=1020%W3=1020%W4=1020%W5=1020%W6=1020)
ECN(R=Y%DF=N%T=FA-104%TG=FF%W=1020%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=FA-104%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=FA-104%TG=FF%W=1020%S=O%A=S+%F=AS%O=M7A6%RD=0%Q=)
T4(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# Cisco Catalyst Express 500, IOS 12.2(25)SEG
Fingerprint Cisco Catalyst Express 500 switch (IOS 12.2)
Class Cisco | IOS | 12.X | switch
CPE cpe:/h:cisco:catalyst_express_500
CPE cpe:/o:cisco:ios:12.2
SEQ(SP=100-10A%GCD=1-6%ISR=109-113%TI=Z%CI=I%II=RI%TS=U)
OPS(O1=M218%O2=M218%O3=M218%O4=M218%O5=M218%O6=M109)
WIN(W1=1020%W2=1020%W3=1020%W4=1020%W5=1020%W6=1020)
ECN(R=Y%DF=N%T=FA-104%TG=FF%W=1020%O=M218%CC=N%Q=)
T1(R=Y%DF=N%T=FA-104%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=N)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# Catalyst Express 520
Fingerprint Cisco Catalyst Express 520 switch
Class Cisco | IOS | 12.X | switch
CPE cpe:/h:cisco:catalyst_express_520
CPE cpe:/o:cisco:ios:12 auto
SEQ(SP=100-10A%GCD=1-6%ISR=104-10E%TI=RD%CI=I%II=RI%TS=U)
OPS(O1=M5B4%O2=M578%O3=M280%O4=M218%O5=M218%O6=M109)
WIN(W1=1020%W2=1020%W3=1020%W4=1020%W5=1020%W6=1020)
ECN(R=Y%DF=N%T=FA-104%TG=FF%W=1020%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=FA-104%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=FA-104%TG=FF%W=1020%S=O%A=S+%F=AS%O=M7A6%RD=0%Q=)
T4(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# cisco 1131AG wireless access point running IOS 12.3(8)JA2
Fingerprint Cisco 1131AG WAP (IOS 12.3)
Class Cisco | IOS | 12.X | WAP
CPE cpe:/h:cisco:aironet_ap1131ag
CPE cpe:/o:cisco:ios:12.3
SEQ(SP=FF-109%GCD=1-6%ISR=109-113%TI=Z%II=RI%TS=U)
OPS(O1=M218%O2=M218%O3=M218%O4=M218%O5=M218%O6=M109)
WIN(W1=1020%W2=1020%W3=1020%W4=1020%W5=1020%W6=1020)
ECN(R=Y%DF=N%T=FA-104%TG=FF%W=1020%O=M218%CC=N%Q=)
T1(R=Y%DF=N%T=FA-104%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=AR|EAR%O=%RD=0%Q=)
T3(R=N)
T4(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R|ER%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S+%F=AR|EAR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=AR|EAR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# Aironet 1130 (AIR-AP1131AG-A-K9) rinning IOS 12.4(3g)JA (c1130-k9w7-tar.124-3g.JA)
Fingerprint Cisco Aironet 1130 WAP (IOS 12.4)
Class Cisco | IOS | 12.X | WAP
CPE cpe:/h:cisco:aironet_ap1131ag
CPE cpe:/o:cisco:ios:12.4
SEQ(SP=101-10B%GCD=1-6%ISR=107-111%TI=RD%CI=I%II=RI%TS=U)
OPS(O1=M5B4%O2=M578%O3=M280%O4=M218%O5=M218%O6=M109)
WIN(W1=1020%W2=1020%W3=1020%W4=1020%W5=1020%W6=1020)
ECN(R=Y%DF=N%T=FA-104%TG=FF%W=1020%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=FA-104%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
T3(R=N)
T4(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# Cisco IOS Software Product/Model Number: AIR-AP1262N-E-K9 System Software Version: 12.4(25d)JA1
# Cisco IAD2430 (R527x) processor (rev 4.1) Cisco IOS Software, 2400 Software (C2430-I6S-M) Version 12.4(15)T10, Release Software (fc3)
# Cisco Wireless Access Point (AIR-LAP1142N-A-K9 V01)
Fingerprint Cisco Aironet 1140 or 1262 WAP, or IAD 2430 router (IOS 12.4)
Class Cisco | IOS | 12.X | WAP
CPE cpe:/h:cisco:aironet_ap1140
CPE cpe:/h:cisco:aironet_ap1262
Class Cisco | IOS | 12.X | router
CPE cpe:/h:cisco:iad_2430
SEQ(SP=FB-10B%GCD=1-6%ISR=102-110%TI=RD%CI=RD%II=RI%TS=U)
OPS(O1=M218%O2=M218%O3=M218%O4=M218%O5=M218%O6=M109)
WIN(W1=1020%W2=1020%W3=1020%W4=1020%W5=1020%W6=1020)
ECN(R=Y%DF=N%T=F7-101%TG=FF%W=1020%O=M218%CC=N)
T1(R=Y%DF=N%T=F7-101%TG=FF%S=O%A=S+%F=AS%RD=0)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=F7-101%TG=FF%W=0%S=A%A=Z%F=R%RD=0)
T5(R=Y%DF=N%T=F7-101%TG=FF%W=0%S=A%A=S+%F=AR%RD=0)
T6(R=Y%DF=N%T=F7-101%TG=FF%W=0%S=A%A=Z%F=R%RD=0)
T7(R=Y%DF=N%T=F7-101%TG=FF%W=0%S=A%A=S%F=AR%RD=0)
U1(DF=N%T=F7-101%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=F7-101%TG=FF%CD=S)

# Cisco Aironet 1200 IOS Version  12.3(2)JA4
Fingerprint Cisco Aironet 1200 WAP (IOS 12.3)
Class Cisco | IOS | 12.X | WAP
CPE cpe:/h:cisco:aironet_ap1200
CPE cpe:/o:cisco:ios:12.3
SEQ(SP=F9-109%GCD=1-6%ISR=106-110%TI=Z%II=RI%TS=U)
OPS(O1=M218%O2=M218%O3=M218%O4=M218%O5=M218%O6=M109)
WIN(W1=1020%W2=1020%W3=1020%W4=1020%W5=1020%W6=1020)
ECN(R=Y%DF=N%T=FA-104%TG=FF%W=1020%O=M218%CC=N%Q=)
T1(R=Y%DF=N%T=FA-104%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
T3(R=N)
T4(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# Cisco Aironet 1200 Series (AIR-LAP-1232AG-E-K9)
Fingerprint Cisco Aironet 1200 WAP (IOS 12.3)
Class Cisco | IOS | 12.X | WAP
CPE cpe:/h:cisco:aironet_ap1200
CPE cpe:/o:cisco:ios:12.3
SEQ(SP=100-10A%GCD=1-6%ISR=101-10F%TI=RD%CI=RD|RI%II=RI%TS=U)
OPS(O1=M5B4%O2=M578%O3=M280%O4=M218%O5=M218%O6=M109)
WIN(W1=1020%W2=1020%W3=1020%W4=1020%W5=1020%W6=1020)
ECN(R=Y%DF=N%T=FA-104%TG=FF%W=1020%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=FA-104%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
T3(R=N)
T4(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S+%F=EAR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=ER%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=EAR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# Cisco IOS Software, C1200 Software (C1200-K9W7-M), Version 12.3(8)JEB1, RELEASE SOFTWARE (fc1)
# Cisco IOS Software, C1240 Software (C1240-K9W7-M), Version 12.4(10b)JDA3, RELEASE SOFTWARE (fc1)
Fingerprint Cisco Aironet 1200-series WAP router (IOS 12.3 - 12.4)
Class Cisco | IOS | 12.X | WAP
CPE cpe:/h:cisco:aironet_ap1200
CPE cpe:/o:cisco:ios:12
SEQ(SP=FE-108%GCD=1-6%ISR=105-10F%TI=RD%CI=RD|RI%II=RI%TS=U)
OPS(O1=M218%O2=M218%O3=M218%O4=M218%O5=M218%O6=M109)
WIN(W1=1020%W2=1020%W3=1020%W4=1020%W5=1020%W6=1020)
ECN(R=Y%DF=N%T=FA-104%TG=FF%W=1020%O=M218%CC=N%Q=)
T1(R=Y%DF=N%T=FA-104%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
T3(R=N)
T4(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# Cisco AP1231G 12.3(8)JEC2 IOS Filename: c1200-k9w7-mx.123-8.JEC2
Fingerprint Cisco Aironet 1231G WAP (IOS 12.3)
Class Cisco | IOS | 12.X | WAP
CPE cpe:/h:cisco:aironet_ap1231g
CPE cpe:/o:cisco:ios:12.3
SEQ(SP=FC-106%GCD=1-6%ISR=103-10F%TI=Z%II=RI%TS=U)
OPS(O1=M218%O2=M218%O3=M218%O4=M218%O5=M218%O6=M109)
WIN(W1=1020%W2=1020%W3=1020%W4=1020%W5=1020%W6=1020)
ECN(R=Y%DF=N%T=FA-104%TG=FF%W=1020%O=M218%CC=N%Q=)
T1(R=Y%DF=N%T=FA-104%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=FA-104%TG=FF%W=80%S=Z%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=FA-104%TG=FF%W=100%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T4(R=Y%DF=N%T=FA-104%TG=FF%W=400%S=A%A=S%F=AR%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=O%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=8000%S=A%A=S%F=AR%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FA-104%TG=FF%W=FFFF%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# Cisco Aironet 1240AG Access Point running system software 12.4(10b)JA
# Cisco 1240AG, IOS 12.4
# Cisco IOS Software, C2600 Software (C2600-ADVENTERPRISEK9_IVS-M), Version 12.4(4)XC7, RELEASE SOFTWARE (fc1)
# Cat 3560 IOS 12.2(35)SE5
# Cisco IOS Software, 2800 Software (C2800NM-SPSERVICESK9-M), Version 12.4(10b), RELEASE SOFTWARE (fc3), Cisco 2811 (revision 53.51) with 251904K/10240K bytes of memory.
Fingerprint Cisco Aironet 1240AG WAP, C2600 or C2800 router, or C3560 switch (IOS 12.2 - 12.4)
Class Cisco | IOS | 12.X | WAP
CPE cpe:/h:cisco:aironet_ap1240ag
CPE cpe:/o:cisco:ios:12.4
Class Cisco | IOS | 12.X | router
CPE cpe:/h:cisco:router_2600
CPE cpe:/h:cisco:router_2800
CPE cpe:/o:cisco:ios:12.4
Class Cisco | IOS | 12.X | switch
CPE cpe:/h:cisco:catalyst_3560
CPE cpe:/o:cisco:ios:12.2
SEQ(SP=F3-10D%GCD=1-6%ISR=F7-10F%TI=RD|RI%CI=I%II=RI%SS=O%TS=U)
OPS(O1=M218%O2=M218%O3=M218%O4=M218%O5=M218%O6=M109)
WIN(W1=1020%W2=1020%W3=1020%W4=1020%W5=1020%W6=1020)
ECN(R=Y%DF=N%T=FA-104%TG=FF%W=1020%O=M218%CC=N%Q=)
T1(R=Y%DF=N%T=FA-104%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
T3(R=N)
T4(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# Aironet 1250 series running IOS 12.4
Fingerprint Cisco Aironet 1250 WAP (IOS 12.4)
Class Cisco | IOS | 12.X | WAP
CPE cpe:/h:cisco:aironet_ap1250
CPE cpe:/o:cisco:ios:12.4
SEQ(SP=FB-105%GCD=1-6%ISR=FE-10E%TI=RD%CI=RD|RI%II=RI%TS=U)
OPS(O1=M218%O2=M218%O3=M218%O4=M218%O5=M218%O6=M109)
WIN(W1=1020%W2=1020%W3=1020%W4=1020%W5=1020%W6=1020)
ECN(R=Y%DF=N%T=FA-104%TG=FF%W=1020%O=M218%CC=N%Q=)
T1(R=Y%DF=N%T=FA-104%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=N)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# Cisco IOS Software, C350 Software (C350-K9W7-M), Version 12.3(8)JA2, RELEASE SOFTWARE (fc1) / Cisco Aironet 350
# IOS 12.3(7)JA2 on a Cisco Aironet model AIR-AP1131AG-E-K9
# Cisco Aironet AIR-AP1200 running IOS 12.3(8)JA
# Cisco Aironet 1100
# C2600 Software (C2600-I-M), Version 12.3(20)
# Model: AIR-AP-1131AG-A-K9, Firmware Version:12.3(7) IOS
Fingerprint Cisco Aironet 350, 1100, 1200, or 1131AG WAP; or Cisco 2600 router (IOS 12.3)
Class Cisco | IOS | 12.X | WAP
CPE cpe:/h:cisco:aironet_ap350
CPE cpe:/h:cisco:aironet_ap1100
CPE cpe:/h:cisco:aironet_ap1200
CPE cpe:/o:cisco:ios:12.3
Class Cisco | IOS | 12.X | router
CPE cpe:/h:cisco:catalyst_2600
CPE cpe:/o:cisco:ios:12.3
SEQ(SP=DF-10D%GCD=1-6%ISR=107-10F%TI=Z%II=RI%TS=U)
OPS(O1=M5B4%O2=M578%O3=M280%O4=M218%O5=M218%O6=M109)
WIN(W1=1020%W2=1020%W3=1020%W4=1020%W5=1020%W6=1020)
ECN(R=Y%DF=N%T=FA-104%TG=FF%W=1020%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=FA-104%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
T3(R=N)
T4(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# Cisco AIR-AP1141N-E-K9 running IOS 12.4(21a)JA1
Fingerprint Cisco Aironet AIR-AP1141N WAP (IOS 12.4)
Class Cisco | IOS | 12.X | WAP
CPE cpe:/h:cisco:aironet_ap1241n
CPE cpe:/o:cisco:ios:12.4
SEQ(SP=F8-10A%GCD=1-6%ISR=106-110%TI=RD%CI=RD%II=RI%TS=U)
OPS(O1=M5B4%O2=M578%O3=M280%O4=M218%O5=M218%O6=M109)
WIN(W1=1020%W2=1020%W3=1020%W4=1020%W5=1020%W6=1020)
ECN(R=Y%DF=N%T=FA-104%TG=FF%W=1020%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=FA-104%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# cisco AIR-AP1232AG-E-K9 Cisco IOS Software, C1200 Software (C1200-K9W7-M), Version 12.3(7)JA2, RELEASE SOFTWARE (fc1)
# Cisco IOS Software, C1240 Software (C1240-K9W7-M), Version 12.3(8)JA2, RELEASE SOFTWARE (fc1)
# Cisco 5350 Media Gateway
Fingerprint Cisco AS5350 VoIP gateway, or Aironet 1230 or 1240-series WAP (IOS 12.3)
Class Cisco | IOS | 12.X | WAP
CPE cpe:/h:cisco:as5350
CPE cpe:/h:cisco:aironet_ap1230
CPE cpe:/h:cisco:aironet_ap1240
CPE cpe:/o:cisco:ios:12.3
SEQ(SP=CF-10D%GCD=1-6%ISR=F5-10D%TI=Z%CI=I%II=RI%TS=U)
OPS(O1=M218%O2=M218%O3=M218%O4=M218%O5=M218%O6=M109)
WIN(W1=1020%W2=1020%W3=1020%W4=1020%W5=1020%W6=1020)
ECN(R=Y%DF=N%T=FA-104%TG=FF%W=1020%O=M218%CC=N%Q=)
T1(R=Y%DF=N%T=FA-104%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
T3(R=N)
T4(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# Cisco 1921 running IOS 15.1(4)M4
Fingerprint Cisco 1921 router (IOS 15.1)
Class Cisco | IOS | 15.X | router
CPE cpe:/h:cisco:1921_integrated_services_router
CPE cpe:/o:cisco:ios:15 auto
SEQ(SP=F2-10A%GCD=1-6%ISR=FD-10F%TI=RD%CI=RD|RI%II=RI%TS=U)
OPS(O1=M5B4SNNW1LLLS|M5B4SNNW1LLLLL%O2=M578SNNW1LLLS|M578SNNW1LLSL|M578SNNW1LW5N|M578SNNW1LLLLL%O3=|M280W1LLLS|M280W1LLSL|M280W1LW1L%O4=M218SNNW1LLLS|M218SNNW1LLSL|M218SNNW1LLLLL%O5=M218SNNW1LLLS|M218SNNW1LLSL|M218SNNW1LLLLL|M218SNNW1LNLLL%O6=M109SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=N%T=FB-105%TG=FF%W=FFFF%O=M5B4SNNW1LLLS|M5B4SNNW1LLLLL%CC=N%Q=)
T1(R=Y%DF=N%T=FB-105%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FB-105%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=FB-105%TG=FF%CD=S)

# Cisco 2811 Router, running C2800NM-ADVENTERPRISEK9-M Version 15.1(2)T1
Fingerprint Cisco 2811 router (IOS 15.1)
Class Cisco | IOS | 15.X | router
CPE cpe:/h:cisco:catalyst_2811
CPE cpe:/o:cisco:ios:15.1
SEQ(SP=FF-10B%GCD=1-6%ISR=10A-114%TI=RD%CI=RD%II=RI%TS=U)
OPS(O1=M5B4SLL%O2=M578SLL%O3=M280%O4=M218SLL%O5=M218SLL%O6=M109SLL)
WIN(W1=1020%W2=1020%W3=1020%W4=1020%W5=1020%W6=1020)
ECN(R=Y%DF=N%T=FB-105%TG=FF%W=1020%O=M5B4SLL%CC=Y%Q=)
T1(R=Y%DF=N%T=FB-105%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FB-105%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=FB-105%TG=FF%CD=S)

# Cisco 887 VA router (VDSL/ADSL one) running IOS 15.1(3)T1
Fingerprint Cisco 887 router (IOS 15.1)
Class Cisco | IOS | 15.X | router
CPE cpe:/o:cisco:ios:15 auto
SEQ(SP=100-10A%GCD=1-6%ISR=108-112%TI=RD%CI=RD%II=RI%TS=A)
OPS(O1=M5B4SNNT11LL%O2=M5B4SNNT11LL%O3=M5B4T11LL%O4=M218SNNT11LL%O5=M5B4SNNT11LL%O6=M5B4SNNT11LL)
WIN(W1=1020%W2=1020%W3=1020%W4=1020%W5=1020%W6=1020)
ECN(R=Y%DF=N%T=FB-105%TG=FF%W=1020%O=M5B4SLL%CC=N)
T1(R=Y%DF=N%T=FB-105%TG=FF%S=O%A=S+%F=AS%RD=0)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=Z%F=R%RD=0)
T5(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=S+%F=AR%RD=0)
T6(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=Z%F=R%RD=0)
T7(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=S%F=AR%RD=0)
U1(DF=N%T=FB-105%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=FB-105%TG=FF%CD=S)

# Cisco c7200 router running in GNS3 on Windows XP 
Fingerprint Cisco C7200 router (IOS 15)
Class Cisco | IOS | 15.X | router
CPE cpe:/h:cisco:catalyst_7200
CPE cpe:/o:cisco:ios:15 auto
SEQ(SP=100-10A%GCD=1-6%ISR=FD-107%TI=I%CI=RI%II=RI%SS=O|S%TS=0)
OPS(O1=M5B4NW0NNT00NNS%O2=M5B4NW0NNT00NNS%O3=M5B4NW0NNT00%O4=M5B4NW0NNT00NNS%O5=M5B4NW0NNT00NNS%O6=M5B4NNT00NNS)
WIN(W1=4470%W2=41A0%W3=4100%W4=40E8%W5=40E8%W6=402E)
ECN(R=Y%DF=N%T=7D-87%TG=80%W=4470%O=M5B4NW0NNS%CC=N%Q=)
T1(R=Y%DF=N%T=7D-87%TG=80%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=Y%DF=N%T=100%TG=FF%W=0%S=A%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=100%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=N)
U1(DF=N%T=100%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=C3B4%RUD=G)
IE(DFI=S%T=100%TG=FF%CD=S)

# Cisco IOS Software, 7200 Software (C7200-ADVENTERPRISEK9-M), Version 15.2(4)S2
Fingerprint Cisco C7200 router (IOS 15.2)
Class Cisco | IOS | 15.X | router
CPE cpe:/h:cisco:catalyst_7200
CPE cpe:/o:cisco:ios:15 auto
SEQ(SP=104-10E%GCD=1-6%ISR=105-10F%TI=RD%CI=RD%II=RI%TS=U)
OPS(O1=M5B4%O2=M578%O3=M280%O4=M218%O5=M218%O6=M109)
WIN(W1=1020%W2=1020%W3=1020%W4=1020%W5=1020%W6=1020)
ECN(R=Y%DF=N%T=FB-105%TG=FF%W=1020%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=FB-105%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=FB-105%TG=FF%W=1020%S=O%A=S+%F=AS%O=M109%RD=0%Q=)
T4(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FB-105%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=FB-105%TG=FF%CD=S)

# Cisco IOS Software, C860 Software (C860-UNIVERSALK9-M), Version 15.2(2)T, RELEASE SOFTWARE (fc1)
Fingerprint Cisco C860 router (IOS 15.2)
Class Cisco | IOS | 15.X | router
CPE cpe:/h:cisco:860_router
CPE cpe:/o:cisco:ios:15.2
SEQ(SP=FA-106%GCD=1-6%ISR=F9-10F%TI=RD%CI=RD%II=RI%TS=U)
OPS(O1=M5B4%O2=M5B4%O3=M5B4%O4=M5B4%O5=M5B4%O6=M5B4)
WIN(W1=1020%W2=1020%W3=1020%W4=1020%W5=1020%W6=1020)
ECN(R=Y%DF=N%T=FB-105%TG=FF%W=1020%O=M5B4%CC=N)
T1(R=Y%DF=N%T=FB-105%TG=FF%S=O%A=S+%F=AS%RD=0)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=Z%F=R%RD=0)
T5(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=S+%F=AR%RD=0)
T6(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=Z%F=R%RD=0)
T7(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=S%F=AR%RD=0)
U1(DF=N%T=FB-105%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=FB-105%TG=FF%CD=S)

# Cisco SA520 Security Appliance Version ID:     V01
# Cisco SA520 Security Appliance, firmware version 2.1.71, the appliance uses Linux 2.6.16.26
Fingerprint Cisco SA520 firewall (Linux 2.6)
Class Cisco | Linux | 2.6.X | firewall
CPE cpe:/o:cisco:linux_kernel:2.6 auto
SEQ(SP=C3-D1%GCD=1-6%ISR=C7-D3%TI=Z%II=I%TS=A)
OPS(O1=M564ST11NW2%O2=M564ST11NW2%O3=M564NNT11NW2%O4=M564ST11NW2%O5=M564ST11NW2%O6=M564ST11)
WIN(W1=16A0%W2=16A0%W3=16A0%W4=16A0%W5=16A0%W6=16A0)
ECN(R=Y%DF=Y%T=3C-46%TG=40%W=16D0%O=M564NNSNW2%CC=N%Q=)
T1(R=Y%DF=Y%T=3C-46%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=Y%DF=Y%T=3C-46%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=N)
T7(R=N)
U1(DF=N%T=3C-46%TG=40%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3C-46%TG=40%CD=S)

# Linux Cisco-NAC 2.6.11-perfigo #1 Mon Jun 11 17:01:41 PDT 2007 i686 i686 i386 GNU/Linux
Fingerprint Linux 2.6.11
Class Cisco | Linux | 2.6.X | firewall
CPE cpe:/o:linux:linux_kernel:2.6.11
SEQ(SP=B7-C1%GCD=1-6%ISR=BE-C8%TI=Z%II=I%TS=A)
OPS(O1=M564ST11NW2%O2=M564ST11NW2%O3=M564NNT11NW2%O4=M564ST11NW2%O5=M564ST11NW2%O6=M564ST11)
WIN(W1=16A0%W2=16A0%W3=16A0%W4=16A0%W5=16A0%W6=16A0)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=16D0%O=M564NNSNW2%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=N)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=BB16%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# Cisco UC320 (It is a PBX for SMB)
Fingerprint Cisco UC320 PBX (Linux 2.6)
Class Cisco | Linux | 2.6.X | PBX
CPE cpe:/o:cisco:linux_kernel:2.6 auto
SEQ(SP=AE-104%GCD=1-6%ISR=E8-100%TI=Z%CI=Z%II=I%TS=A)
OPS(O1=M5B4ST11NW2%O2=M5B4ST11NW2%O3=M5B4NNT11NW2%O4=M5B4ST11NW2%O5=M5B4ST11NW2%O6=M5B4ST11)
WIN(W1=16A0%W2=16A0%W3=16A0%W4=16A0%W5=16A0%W6=16A0)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=16D0%O=M5B4NNSNW2%CC=N)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%RD=0)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%RD=0)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%RD=0)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# UC320W, Cisco SMB Wireless ADSL Router with integrated ASTERISK and POTS
Fingerprint Cisco UC320W PBX (Linux 2.6)
Class Cisco | Linux | 2.6.X | PBX
CPE cpe:/o:cisco:linux_kernel:2.6 auto
SEQ(SP=F8-102%GCD=1-6%ISR=F5-FF%TI=Z%II=I%TS=A)
OPS(O1=M5B4ST11NW2%O2=M5B4ST11NW2%O3=M5B4NNT11NW2%O4=M5B4ST11NW2%O5=M5B4ST11NW2%O6=M5B4ST11)
WIN(W1=16A0%W2=16A0%W3=16A0%W4=16A0%W5=16A0%W6=16A0)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=16D0%O=M5B4NNSNW2%CC=N)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%RD=0)
T6(R=N)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# Linux AP541N-E-K9 2.6.21.5 #1 Thu Sep 10 13:14:03 EDT 2009 mips64 unknown, Cisco AP541N access point
Fingerprint Cisco AP541N WAP (Linux 2.6.21, MIPS)
Class Cisco | Linux | 2.6.X | WAP
CPE cpe:/o:cisco:linux_kernel:2.6 auto
SEQ(SP=FD-107%GCD=1-6%ISR=104-10E%TI=I%CI=I%II=I%SS=S%TS=7)
OPS(O1=M5B4NW0NNT11%O2=M5B4NW0NNT11%O3=M5B4NW0NNT11%O4=M5B4NW0NNT11%O5=M5B4NW0NNT11%O6=M5B4NNT11)
WIN(W1=4000%W2=4000%W3=4000%W4=4000%W5=4000%W6=4000)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=4000%O=M5B4NW0%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=70%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Cisco RV042 Router
# Cisco RV042 with firmware v4.0.4.02-tm (Jul 4 2011 13:30:56)
Fingerprint Cisco RV042 WAP (Linux 2.6)
Class Cisco | Linux | 2.6.X | WAP
CPE cpe:/h:cisco:rv042
CPE cpe:/o:cisco:linux_kernel:2.6 auto
SEQ(SP=C2-D0%GCD=1-6%ISR=C7-D5%TI=Z%CI=Z%II=I%TS=A)
OPS(O1=M5B4ST11NW2%O2=M5B4ST11NW2%O3=M5B4NNT11NW2%O4=M5B4ST11NW2%O5=M5B4ST11NW2%O6=M5B4ST11)
WIN(W1=16A0%W2=16A0%W3=16A0%W4=16A0%W5=16A0%W6=16A0)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=16D0%O=M5B4NNSNW2%CC=N)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0)
T2(R=N)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=16A0%S=O%A=S+%F=AS%O=M5B4ST11NW2%RD=0)
T4(R=N)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%RD=0)
T6(R=N)
T7(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%RD=0)
U1(DF=N%T=3B-45%TG=40%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# Cisco Small Business PRO SRP 521W.
Fingerprint Cisco SRP 521W WAP (Linux 2.6)
Class Cisco | Linux | 2.6.X | WAP
CPE cpe:/h:cisco:srp_521w
CPE cpe:/o:cisco:linux_kernel:2.6 auto
SEQ(SP=EF-103%GCD=1-6%ISR=F5-FF%TI=Z%CI=Z%II=I%TS=6|7|8)
OPS(O1=M5B4ST11NW1%O2=M5B4ST11NW1%O3=M5B4NNT11NW1%O4=M5B4ST11NW1%O5=M5B4ST11NW1%O6=M5B4ST11)
WIN(W1=16A0%W2=16A0%W3=16A0%W4=16A0%W5=16A0%W6=16A0)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=16D0%O=M5B4NNSNW1%CC=N)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%RD=0)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%RD=0)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%RD=0)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# Cisco SRP 527W
Fingerprint Cisco SRP 527 WAP (Linux 2.6)
Class Cisco | Linux | 2.6.X | WAP
CPE cpe:/h:cisco:srp_527
CPE cpe:/o:cisco:linux_kernel:2.6 auto
SEQ(SP=A7-103%GCD=1-6%ISR=E9-FF%TI=Z%CI=Z%II=I%TS=A)
OPS(O1=M5B4ST11NW1%O2=M5B4ST11NW1%O3=M5B4NNT11NW1%O4=M5B4ST11NW1%O5=M5B4ST11NW1%O6=M5B4ST11)
WIN(W1=16A0%W2=16A0%W3=16A0%W4=16A0%W5=16A0%W6=16A0)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=16D0%O=M5B4NNSNW1%CC=N)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0)
T2(R=N)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=16A0%S=O%A=S+%F=AS%O=M5B4ST11NW1%RD=0)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%RD=0)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%RD=0)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%RD=0)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# Cisco Nexus Operating System (NX-OS), kickstart: version 4.2(1a), cisco MDS 9509
Fingerprint Cisco MDS 9509 switch (NX-OS 4.2)
Class Cisco | NX-OS | 4.X | switch
CPE cpe:/o:cisco:mds_9509
CPE cpe:/o:cisco:nx_os:4 auto
SEQ(SP=FA-104%GCD=1-6%ISR=FC-10A%TI=I|RD%CI=RD%II=I%SS=S%TS=7|8|9)
OPS(O1=M564ST11NW6%O2=M564ST11NW6%O3=M564NNT11NW6%O4=M564ST11NW6%O5=M564ST11NW6%O6=M564ST11)
WIN(W1=16A0%W2=16A0%W3=16A0%W4=16A0%W5=16A0%W6=16A0)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=16D0%O=M564NNSNW6%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=O|S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=FA-104%TG=FF%W=80%S=Z%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=FA-104%TG=FF%W=100%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T4(R=Y%DF=N%T=FA-104%TG=FF%W=400%S=A%A=S%F=AR%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=O%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=8000%S=A%A=S%F=AR%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FA-104%TG=FF%W=FFFF%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# Cisco Nexus 5010, NX-OS Version 4.1(3)N1(1)
# Cisco Nexus 5010 Switch, system:    version 4.1(3)N2(1)
# Cisco Nexus Operating System (NX-OS) Software, cisco Nexus5010 Chassis ("20x10GE/Supervisor"), System version: 4.1(3)N2(1)
Fingerprint Cisco Nexus 5010 switch (NX-OS 4.1)
Class Cisco | NX-OS | 4.X | switch
CPE cpe:/o:cisco:nexus_5010
CPE cpe:/o:cisco:nx_os:4 auto
SEQ(SP=F3-10B%GCD=1-6%ISR=105-10F%TI=I%CI=I%II=RI%SS=O|S%TS=3)
OPS(O1=M200NNT11%O2=M200NNT11%O3=M200NNT11%O4=M200NNT11%O5=M200NNT11%O6=M200NNT11)
WIN(W1=4334%W2=4334%W3=44B0%W4=4650%W5=47A4%W6=4825)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=4B1C%O=M200%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=I%RUCK=0%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# Cisco NX-OS(tm) n7000, Software (n7000-s1-dk9), Version 4.2(4), RELEASE SOFTWARE
Fingerprint Cisco Nexus 7000 switch (NX-OS 4.2(4))
Class Cisco | NX-OS | 4.X | switch
CPE cpe:/o:cisco:nexus_7000
CPE cpe:/o:cisco:nx_os:4 auto
SEQ(SP=FF-109%GCD=1-6%ISR=107-111%TI=I%CI=I%II=RI%SS=O|S%TS=3)
OPS(O1=M218NNT11%O2=M218NNT11%O3=M218NNT11%O4=M218NNT11%O5=M218NNT11%O6=M109NNT11)
WIN(W1=9E20|A214|A608|A9FC|ADF0%W2=9E20|A214|A608|A9FC|ADF0%W3=9F74|A45C|A6D0|ABB8|AE2C%W4=9FA8|A5CC|A7D8|ABF0|B008%W5=9FA8|A5CC|A7D8|ABF0|B008%W6=A01A|A608|A802|ABF6|B0E7)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=A214|A608|A9FC|ADF0|B1E4%O=M218%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# Cisco Nexus Operating System (NX-OS) Software, cisco Nexus7000 C7010, kickstart image file is: bootflash:/n7000-s1-kickstart.4.2.6.bin
Fingerprint Cisco Nexus 7000 switch (NX-OS 4.2.6)
Class Cisco | NX-OS | 4.X | switch
CPE cpe:/o:cisco:nexus_7000
CPE cpe:/o:cisco:nx_os:4 auto
SEQ(SP=FA-104%GCD=1-6%ISR=109-113%TI=I%CI=RD%II=RI%SS=O%TS=3)
OPS(O1=M218NNT11%O2=M218NNT11%O3=M218NNT11%O4=M218NNT11%O5=M218NNT11%O6=M109NNT11)
WIN(W1=4334|4728%W2=4334|4728%W3=44B0|4998%W4=4598|49B0%W5=4598|49B0%W6=462B|4A1F)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=4728%O=M218%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=O|S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=FA-104%TG=FF%W=80%S=Z%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=FA-104%TG=FF%W=100%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T4(R=Y%DF=N%T=FA-104%TG=FF%W=400%S=A%A=S%F=AR%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=O%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=8000%S=A%A=S%F=AR%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FA-104%TG=FF%W=FFFF%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# NX-OS 4.0(1a) image on a Cisco Nexus 7000-series switch supervisor module
Fingerprint Cisco Nexus 7000-series switch (NX-OS 4.0(1a))
Class Cisco | NX-OS | 4.X | switch
CPE cpe:/o:cisco:nexus_7000
CPE cpe:/o:cisco:nx_os:4 auto
SEQ(SP=FD-10D%GCD=1-6%ISR=FA-10F%TI=I%II=RI%SS=O|S%TS=3)
OPS(O1=M200NNT11%O2=M200NNT11%O3=M200NNT11%O4=M200NNT11%O5=M200NNT11%O6=M200NNT11)
WIN(W1=5EE0|62D4|66C8|6ABC|6EB0%W2=5EE0|62D4|66C8|6ABC|6EB0%W3=5FAC|6494|6708|6BF0|70D8%W4=5FB4|6590|6784|6D60|7148%W5=6034|6658|6864|6E88|72A0%W6=60DA|66C8|68C2|6EB0|72A4)
ECN(R=Y%DF=N%T=41%TG=40%W=62D4|66C8|6ABC|6EB0|72A4%O=M200%CC=N%Q=)
T1(R=Y%DF=N%T=41%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=41%TG=40%W=62D4|66C8|6ABC|6EB0|72A4%S=O%A=S+%F=AS%O=M200NNT11%RD=0%Q=)
T4(R=Y%DF=N%T=41%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=41%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=41%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=41%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=100%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=I%RUCK=0%RUD=G)
IE(DFI=S%T=100%TG=FF%CD=S)

# Nexus 7010 running 4.0(4)
Fingerprint Cisco Nexus 7010 switch (NX-OS 4.0(4))
Class Cisco | NX-OS | 4.X | switch
CPE cpe:/o:cisco:nexus_7010
CPE cpe:/o:cisco:nx_os:4 auto
SEQ(SP=F9-109%GCD=1-6%ISR=FB-10D%TI=I%CI=I%II=RI%SS=S%TS=3|4)
OPS(O1=M200NNT11%O2=M200NNT11%O3=M200NNT11%O4=M200NNT11%O5=M200NNT11%O6=M200NNT11)
WIN(W1=4728|4F10|56F8|5AEC|5EE0%W2=4728|4F10|56F8|5AEC|5EE0%W3=4998|50F4|5850|5D38|5FAC%W4=4A38|5208|59D8|5DC0|5FB4%W5=4BBC|53EC|5A10|5E28|6034%W6=4C19|5401|5AEC|5EE0|60DA)
ECN(R=Y%DF=N%T=3C-46%TG=40%W=4F10|56F8|5AEC|5EE0|62D4%O=M200%CC=N%Q=)
T1(R=Y%DF=N%T=3C-46%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=3C-46%TG=40%W=4F10%S=O%A=S+%F=AS%O=M200NNT11%RD=0%Q=)
T4(R=Y%DF=N%T=3C-46%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3C-46%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3C-46%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3C-46%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FB-105%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=I%RUCK=0%RUD=G)
IE(DFI=S%T=FB-105%TG=FF%CD=S)

# Cisco NX-OS 4.2(1) on an 7010 Chassis
Fingerprint Cisco Nexus 7010 switch (NX-OS 4.2(1))
Class Cisco | NX-OS | 4.X | switch
CPE cpe:/o:cisco:nexus_7010
CPE cpe:/o:cisco:nx_os:4 auto
SEQ(SP=F4-FE%GCD=1-6%ISR=109-113%CI=I%II=RI%TS=3|4)
OPS(O1=M5B4NNT11%O2=M578NNT11%O3=M280NNT11%O4=M5B4NNT11%O5=M218NNT11%O6=M109NNT11)
WIN(W1=4334%W2=4334%W3=44B0%W4=4598%W5=4598%W6=462B)
ECN(R=Y%DF=N%T=41%TG=40%W=4728%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=41%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=41%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=41%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=41%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=41%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=100%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=I%RUCK=0%RUD=G)
IE(DFI=S%T=100%TG=FF%CD=S)

# Software 4.0(1a)N1(1)
Fingerprint Cisco NX-OS 4.0(1a)N1(1)
Class Cisco | NX-OS | 4.X | switch
CPE cpe:/o:cisco:nx_os:4 auto
SEQ(SP=F8-10A%GCD=1-6%ISR=100-10E%TI=I%CI=RD|RI%II=RI%SS=S%TS=3)
OPS(O1=M200NNT11%O2=M200NNT11%O3=M200NNT11%O4=M200NNT11%O5=M200NNT11%O6=M200NNT11)
WIN(W1=A214|A9FC|ADF0|B1E4|B5D8%W2=A214|A9FC|ADF0|B1E4|B5D8%W3=A45C|ABB8|AE2C|B314|B7FC%W4=A604|ABE0|AFC8|B3B0|B98C%W5=A7D8|ABF0|B008|B420|BA44%W6=A802|ABF6|B0E7|B4DB|BAC9)
ECN(R=Y%DF=N%T=41%TG=40%W=A9FC|ADF0|B1E4|B5D8|BDC0%O=M200%CC=N%Q=)
T1(R=Y%DF=N%T=41%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=100%TG=FF%W=80%S=Z%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=100%TG=FF%W=100%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T4(R=Y%DF=N%T=100%TG=FF%W=400%S=A%A=S%F=AR%O=%RD=0%Q=)
T5(R=Y%DF=N%T=41%TG=40%W=0%S=O%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=100%TG=FF%W=8000%S=A%A=S%F=AR%O=%RD=0%Q=)
T7(R=Y%DF=N%T=100%TG=FF%W=FFFF%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=100%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=I%RUCK=0%RUD=G)
IE(DFI=S%T=100%TG=FF%CD=S)

# cisco Nexus5548 Chassis ("O2 32X10GE/Modular Supervisor") system:    version 5.2(1)N1(1)
Fingerprint Cisco Nexus 5548 switch (NX-OS 5.2)
Class Cisco | NX-OS | 5.X | switch
CPE cpe:/o:cisco:nexus_5548
CPE cpe:/o:cisco:nx_os:5 auto
SEQ(SP=FF-109%GCD=1-6%ISR=107-111%TI=I%CI=I%II=RI%SS=S%TS=3)
OPS(O1=M218NNT11%O2=M218NNT11%O3=M218NNT11%O4=M218NNT11%O5=M218NNT11%O6=M109NNT11)
WIN(W1=5FF0%W2=5FF0%W3=6220%W4=6240%W5=6240%W6=62D4)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=6988%O=M218%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=I%RUCK=0%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# cisco Nexus5548 Chassis ("O2 32X10GE/Modular Universal Platform Supervisor") System version: 5.1(3)N1(1)
Fingerprint Cisco Nexus 5548P switch (NX-OS 5.1)
Class Cisco | NX-OS | 5.X | switch
CPE cpe:/o:cisco:nexus_5548p
CPE cpe:/o:cisco:nx_os:5 auto
SEQ(SP=FC-106%GCD=1-6%ISR=103-10F%TI=I%II=RI%SS=O%TS=3)
OPS(O1=M218NNT11%O2=M218NNT11%O3=M218NNT11%O4=M218NNT11%O5=M218NNT11%O6=M109NNT11)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=FFFF%O=M218%CC=N)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=N)
T6(R=N)
T7(R=N)
U1(R=N)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# This is a cisco Nexus7000 C7009 NX-OS 5.2(4)
Fingerprint Cisco Nexus 7000 switch (NX-OS 5.2(4))
Class Cisco | NX-OS | 5.X | switch
CPE cpe:/o:cisco:nexus_7000
CPE cpe:/o:cisco:nx_os:5 auto
SEQ(SP=F4-10A%GCD=1-6%ISR=107-113%TI=I%CI=I%II=RI%SS=O%TS=3)
OPS(O1=M218NNT11%O2=M218NNT11%O3=M218NNT11%O4=M218NNT11%O5=M218NNT11%O6=M109NNT11)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=FFFF%O=M218%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=I%RUCK=0%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# Cisco Nexus 7010
Fingerprint Cisco Nexus 7010 switch (NX-OS 5)
Class Cisco | NX-OS | 5.X | switch
CPE cpe:/o:cisco:nexus_7010
CPE cpe:/o:cisco:nx_os:5 auto
SEQ(SP=101-10B%GCD=1-6%ISR=100-112%TI=I%II=RI%SS=O|S%TS=3)
OPS(O1=M218NNT11%O2=M218NNT11%O3=M218NNT11%O4=M218NNT11%O5=M218NNT11%O6=M109NNT11)
WIN(W1=4884|4E18|5940|6468|69FC%W2=4BE8|5154|5C2C|6704|6C70%W3=4C0C|5368|5D38|6708|6E64%W4=4DC8|53EC|5E28|6864|6E88%W5=4DC8|53EC|5E28|6864|6E88%W6=4E13|5401|5EE0|68C2|6EB0)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=4E18|5940|6468|69FC|6F90%O=M218%CC=N)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=N)
T6(R=N)
T7(R=N)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# Cisco Nexus System version: 5.1(2) on Nesus 7010 BIOS:      version 3.22.0
Fingerprint Cisco Nexus 7010 switch (NX-OS 5.1(2))
Class Cisco | NX-OS | 5.X | switch
CPE cpe:/o:cisco:nexus_7010
CPE cpe:/o:cisco:nx_os:5 auto
SEQ(SP=103-10D%GCD=1-6%ISR=102-110%TI=I%II=RI%SS=S%TS=3)
OPS(O1=M5B4NNT11%O2=M578NNT11%O3=M280NNT11%O4=M5B4NNT11%O5=M218NNT11%O6=M109NNT11)
WIN(W1=A758|ACEC|B280|B814|BDA8%W2=A814|AD80|B2EC|B858|BDC4%W3=A944|AE2C|B314|BA70|BF58%W4=A9E4|B008|B420|BC50|C068%W5=A9E4|B008|B420|BC50|C068%W6=A9FC|B0E7|B4DB|BCC3|C0B7)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=ACEC|B280|B814|BDA8|C33C%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=N)
T6(R=N)
T7(R=N)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# system:    version 6.1(2) cisco Nexus7000 C7010
Fingerprint Cisco Nexus 7000-series switch (NX-OS 6.1(2))
Class Cisco | NX-OS | 6.X | switch
CPE cpe:/o:cisco:nexus_7000
CPE cpe:/o:cisco:nx_os:6 auto
SEQ(SP=100-10A%GCD=1-6%ISR=101-10B%TI=I%CI=I%II=RI%SS=S%TS=3)
OPS(O1=M5B4NNT11%O2=M578NNT11%O3=M280NNT11%O4=M5B4NNT11%O5=M218NNT11%O6=M109NNT11)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=N%T=3C-46%TG=40%W=FFFF%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=3C-46%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=3C-46%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3C-46%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3C-46%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3C-46%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FB-105%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=I%RUCK=0%RUD=G)
IE(DFI=S%T=FB-105%TG=FF%CD=S)

# Cisco Nexus V1000 Virtual Switch
Fingerprint Cisco Nexus V1000 switch (NX-OS)
Class Cisco | NX-OS || switch
CPE cpe:/o:cisco:nexus_v1000
CPE cpe:/o:cisco:nx_os auto
SEQ(SP=FC-106%GCD=1-6%ISR=103-111%TI=I%CI=I%II=RI%SS=O%TS=3)
OPS(O1=M200NNT11%O2=M200NNT11%O3=M200NNT11%O4=M200NNT11%O5=M200NNT11%O6=M200NNT11)
WIN(W1=9244|9638|9A2C|9E20|A214%W2=9244|9638|9A2C|9E20|A214%W3=9330|9818|9A8C|9F74|A45C%W4=9470|9858|9C40|A028|A604%W5=956C|9984|9D9C|A1B4|A7D8%W6=9638|9A2C|9E20|A214|A802)
ECN(R=Y%DF=N%T=3C-46%TG=40%W=9638|9A2C|9E20|A214|A9FC%O=M200%CC=N%Q=)
T1(R=Y%DF=N%T=3C-46%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=3C-46%TG=40%W=9638%S=O%A=O|S+%F=AS%O=M200NNT11%RD=0%Q=)
T4(R=Y%DF=N%T=3C-46%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3C-46%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3C-46%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3C-46%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FB-105%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=I%RUCK=0%RUD=G)
IE(DFI=S%T=FB-105%TG=FF%CD=S)

# Cisco Nexus V1000 Virtual Switch
Fingerprint Cisco Nexus V1000 switch (NX-OS)
Class Cisco | NX-OS || switch
CPE cpe:/o:cisco:nexus_v1000
CPE cpe:/o:cisco:nx_os auto
SEQ(SP=FF-109%GCD=1-6%ISR=107-111%TI=I%CI=I%II=RI%SS=O%TS=3)
OPS(O1=M200NNT11%O2=M200NNT11%O3=M200NNT11%O4=M200NNT11%O5=M200NNT11%O6=M200NNT11)
WIN(W1=7698|7E80|8274|8668|8A5C%W2=7698|7E80|8274|8668|8A5C%W3=7834|7F90|8478|86EC|8BD4%W4=7918|80E8|84D0|88B8|8CA0%W5=7AD0|80F4|850C|8924|8D3C%W6=7B89|8177|856B|895F|8D53)
ECN(R=Y%DF=N%T=3C-46%TG=40%W=7E80|8274|8668|8A5C|8E50%O=M200%CC=N%Q=)
T1(R=Y%DF=N%T=3C-46%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=3C-46%TG=40%W=7E80%S=O%A=O|S+%F=AS%O=M200NNT11%RD=0%Q=)
T4(R=Y%DF=N%T=3C-46%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3C-46%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3C-46%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3C-46%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FB-105%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=I%RUCK=0%RUD=G)
IE(DFI=S%T=FB-105%TG=FF%CD=S)

# Cisco 5510 with ASA 8.2(1) OS.
Fingerprint Cisco ASA 5510 firewall (PIX OS 8.2)
Class Cisco | PIX OS | 6.X | firewall
CPE cpe:/o:cisco:pix_os:6 auto
SEQ(SP=101-10B%GCD=1-6%ISR=101-10B%TI=RD%CI=RD|RI%II=RI%TS=U)
OPS(O1=M564%O2=M564%O3=M564%O4=M564%O5=M564%O6=M564)
WIN(W1=2000%W2=2000%W3=2000%W4=2000%W5=2000%W6=2000)
ECN(R=Y%DF=N%T=FA-104%TG=FF%W=2000%O=M564%CC=N%Q=)
T1(R=Y%DF=N%T=FA-104%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=FA-104%TG=FF%W=80%S=Z%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=FA-104%TG=FF%W=100%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T4(R=Y%DF=N%T=FA-104%TG=FF%W=400%S=A%A=S%F=AR%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=7A69%S=O%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=8000%S=A%A=S%F=AR%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FA-104%TG=FF%W=FFFF%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(R=N)
IE(DFI=N%T=FA-104%TG=FF%CD=S)

# Cisco PIX firewall running verios 6.3(5) software
# Cisco PIX Firewall Version 6.3(3). Hardware:   PIX-515E, 64 MB RAM, CPU Pentium II 433 MHz
Fingerprint Cisco PIX firewall (PIX OS 6.3(5))
Class Cisco | PIX OS | 6.X | firewall
CPE cpe:/o:cisco:pix_os:6 auto
SEQ(SP=FA-106%GCD=1-6%ISR=108-114%TI=I%CI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4%O2=M5B4%O3=M5B4%O4=M5B4%O5=M5B4%O6=M5B4)
WIN(W1=1000%W2=1000%W3=1000%W4=1000%W5=1000%W6=1000)
ECN(R=Y%DF=N%T=FA-104%TG=FF%W=1000%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=FA-104%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=FA-104%TG=FF%W=80%S=A%A=S%F=AR%O=WANM109T10S%RD=0%Q=)
T3(R=Y%DF=N%T=FA-104%TG=FF%W=1000%S=O%A=S+%F=AS%O=M5B4%RD=0%Q=)
T4(R=N)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=7A69%S=A%A=S+%F=AR%O=WANM109T10S%RD=0%Q=)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=8000%S=A%A=S%F=AR%O=WANM109T10S%RD=0%Q=)
T7(R=Y%DF=N%T=FA-104%TG=FF%W=FFFF%S=A%A=S+%F=UAPR%O=WFNM109T10S%RD=0%Q=)
U1(R=N)
IE(DFI=N%T=FA-104%TG=FF%CD=S)

# Cisco Adaptive Security Appliance Software (ASA) Version 7.2(4)
Fingerprint Cisco Adaptive Security Appliance (PIX OS 7.2)
Class Cisco | PIX OS | 7.X | firewall
CPE cpe:/o:cisco:pix_os:7 auto
SEQ(SP=FF-109%GCD=1-6%ISR=100-10A%TI=RD%II=RI%TS=U)
OPS(O1=M218%O2=M218%O3=M218%O4=M218%O5=M218%O6=M218)
WIN(W1=2000%W2=2000%W3=2000%W4=2000%W5=2000%W6=2000)
ECN(R=Y%DF=N%T=FA-104%TG=FF%W=2000%O=M218%CC=N%Q=)
T1(R=Y%DF=N%T=FA-104%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=Y%DF=Y%T=7B-85%TG=80%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=N)
T7(R=N)
U1(DF=N%T=7B-85%TG=80%IPL=70%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=FA-104%TG=FF%CD=S)

# Cisco ASA 5540. ASA version 8.0(4)
# Cisco ASA 5510.
Fingerprint Cisco Adaptive Security Appliance 5510 or 5540 firewall (PIX OS 8.0)
Class Cisco | PIX OS | 8.X | firewall
CPE cpe:/o:cisco:pix_os:8 auto
SEQ(SP=100-10A%GCD=1-6%ISR=101-10B%TI=RD%CI=RD%II=RI%TS=U)
OPS(O1=M564%O2=M564%O3=M564%O4=M564%O5=M564%O6=M564)
WIN(W1=2000%W2=2000%W3=2000%W4=2000%W5=2000%W6=2000)
ECN(R=Y%DF=N%T=FA-104%TG=FF%W=2000%O=M564%CC=N%Q=)
T1(R=Y%DF=N%T=FA-104%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=FA-104%TG=FF%W=80%S=Z%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=FA-104%TG=FF%W=100%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T4(R=Y%DF=N%T=FA-104%TG=FF%W=400%S=A%A=S%F=AR%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=7A69%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=8000%S=A%A=S%F=AR%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FA-104%TG=FF%W=FFFF%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(R=N)
IE(DFI=N%T=FA-104%TG=FF%CD=S)

# Cisco AP340 (First-Generation WAP), Code Release: 12.05, VxWorks version 5.4 (Circa 2002)
Fingerprint Cisco AP340 WAP (VxWorks 5.4)
Class Cisco | VxWorks | 5.X | WAP
CPE cpe:/o:cisco:vxworks:5 auto
SEQ(SP=13-1D%GCD=FA00|1F400|2EE00|3E800|4E200%ISR=98-A2%TI=I%CI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4NW0%O2=M5B4NW0%O3=M5B4NW0%O4=M5B4NW0%O5=M5B4NW0%O6=M5B4)
WIN(W1=2000%W2=2000%W3=2000%W4=2000%W5=2000%W6=2000)
ECN(R=N)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=O|S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=3B-45%TG=40%W=2000%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=Z%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# cisco isb2230 tv device os: windows ce 5.0.1400
Fingerprint Cisco ISB2230 set-top box (Windows CE 5.0.1400)
Class Cisco | Windows | PocketPC/CE | media device
CPE cpe:/h:cisco:isb2230
CPE cpe:/o:cisco:windows_ce:5.0.1400
SEQ(SP=75-EF%GCD=1-6%ISR=93-C1%TI=I%TS=0)
OPS(O1=M5B2NW2NNT00NNS%O2=M5B2NW2NNT00NNS%O3=M5B2NW2NNT00%O4=M5B2NW2NNT00NNS%O5=M5B2NW2NNT00NNS%O6=M5B2NNT00NNS)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=N%T=7B-85%TG=80%W=FFFF%O=M5B2NW2NNS%CC=N)
T1(R=Y%DF=N%T=7B-85%TG=80%S=O%A=O|S+%F=AS%RD=0)
T2(R=N)
T3(R=Y%DF=N%T=7B-85%TG=80%W=FFFF%S=O%A=O|S+%F=AS%O=M5B2NW2NNT00NNS%RD=0)
T4(R=N)
T5(R=Y%DF=N%T=7B-85%TG=80%W=0%S=Z%A=S+%F=AR%RD=0)
T6(R=N)
T7(R=N)
U1(DF=N%T=7B-85%TG=80%IPL=B0%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(R=N)

# Citrix NetScaler load balancer
Fingerprint Citrix NetScaler load balancer
Class Citrix | embedded || load balancer
SEQ(SP=101-10B%GCD=1-6%ISR=107-111%CI=BI%II=RI%TS=U)
OPS(O1=M5B4%O2=M564%O3=M218%O4=M218%O5=M218%O6=M80)
WIN(W1=1FFE%W2=1FFE%W3=1FFE%W4=1FFE%W5=1FFE%W6=1FFE)
ECN(R=Y%DF=N%T=FA-104%TG=FF%W=1FFE%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=FA-104%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=FA-104%TG=FF%W=2009%S=A%A=S%F=R%O=%RD=0%Q=)
T3(R=Y%DF=N%T=FA-104%TG=FF%W=2014%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T4(R=N)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=2014%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=2009%S=A%A=S%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FA-104%TG=FF%W=2009%S=A%A=S+%F=R%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=Z)

# Citrix Net Scaler
Fingerprint Citrix NetScaler load balancer
Class Citrix | embedded || load balancer
SEQ(SP=F1-10D%GCD=1-6%ISR=101-10F%TI=RD%II=RI%TS=U)
OPS(O1=M564%O2=M564%O3=M218%O4=M218%O5=M218%O6=M80)
WIN(W1=1FFE%W2=1FFE%W3=1FFE%W4=1FFE%W5=1FFE%W6=1FFE)
ECN(R=Y%DF=Y%T=FA-104%TG=FF%W=1FFE%O=M564%CC=N%Q=)
T1(R=Y%DF=Y%T=FA-104%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=Y%DF=Y%T=FA-104%TG=FF%W=2014%S=O%A=S+%F=AR%O=%RD=0%Q=)
T6(R=N)
T7(R=N)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=188F|235B|39B0|4F96|E4F7%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=Z)

# Citrix Access Gateway model 2000, software release 4.5.8. Rebadged Supermicro 5013C-M. The operating system itself is some form of Linux.
Fingerprint Citrix Access Gateway VPN gateway
Class Citrix | embedded || proxy server
SEQ(SP=C6-D0%GCD=1-6%ISR=CC-D6%TI=Z%II=I%TS=U)
OPS(O1=M586NNSNW0%O2=M586NNSNW0%O3=M586NW0%O4=M586NNSNW0%O5=M586NNSNW0%O6=M586NNS)
WIN(W1=1618%W2=1618%W3=1618%W4=1618%W5=1618%W6=1618)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=1618%O=M586NNSNW0%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(R=N)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# Citrix Access Gateway Appliance, Standard Edition, v4.6.3
Fingerprint Citrix Access Gateway VPN gateway
Class Citrix | embedded || proxy server
SEQ(SP=C4-CE%GCD=1-6%ISR=CC-D6%TI=Z%II=I%TS=U)
OPS(O1=M5B4NNSNW6%O2=M5B4NNSNW6%O3=M5B4NW6%O4=M5B4NNSNW6%O5=M5B4NNSNW6%O6=M5B4NNS)
WIN(W1=16D0%W2=16D0%W3=16D0%W4=16D0%W5=16D0%W6=16D0)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=16D0%O=M5B4NNSNW6%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=N)
T7(R=N)
U1(R=N)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# Citrix XenServer Version : 5.5.0 Build number : 25727p
# 2.6.18-128.1.6.el5.xs5.5.0.505.1024xen #1 SMP Mon Nov 16 09:08:33 EST 2009 i686 i686 i386 GNU/Linux, XenServer release 5.5.0-15119p (xenenterprise)
Fingerprint Citrix XenServer (Linux 2.6.18)
Class Citrix | Linux | 2.6.X | general purpose
CPE cpe:/o:citrix:linux_kernel:2.6 auto
SEQ(SP=BE-CE%GCD=1-6%ISR=C7-D1%TI=Z%CI=Z%II=I%TS=7)
OPS(O1=M5B4ST11NW7%O2=M5B4ST11NW7%O3=M5B4NNT11NW7%O4=M5B4ST11NW7%O5=M5B4ST11NW7%O6=M5B4ST11)
WIN(W1=16A0%W2=16A0%W3=16A0%W4=16A0%W5=16A0%W6=16A0)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=16D0%O=M5B4NNSNW7%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# Linux 2.6.32.43-0.4.1.xs1.6.10.734.170748xen #1 SMP Mon Sep 10 13:28:39 EDT 2012 i686 i686 i386 GNU/Linux
Fingerprint Linux 2.6.32
Class Citrix | Linux | 2.6.X | general purpose
CPE cpe:/o:citrix:linux_kernel:2.6 auto
SEQ(SP=F9-103%GCD=4|8|C|10|14%ISR=FF-109%TI=Z%CI=Z%II=I%TS=7|9)
OPS(O1=M5B4ST11NW6%O2=M5B4ST11NW6%O3=M5B4NNT11NW6%O4=M5B4ST11NW6%O5=M5B4ST11NW6%O6=M5B4ST11)
WIN(W1=16A0%W2=16A0%W3=16A0%W4=16A0%W5=16A0%W6=16A0)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=16D0%O=M5B4NNSNW6%CC=Y%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# CMI's Genus NEMA runs on a license-free Linux operating system
Fingerprint CMI Genus NEMA terminal
Class CMI | embedded || terminal
SEQ(SP=FB-109%GCD=1-6%ISR=109-113%TI=I%II=I%SS=S%TS=U)
OPS(O1=M564%O2=M564%O3=M564%O4=M564%O5=M564%O6=M564)
WIN(W1=3E80%W2=3E80%W3=3E80%W4=3E80%W5=3E80%W6=3E80)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=3E80%O=M564%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=O%A=S+%F=AR%O=%RD=0%Q=)
T6(R=N)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# Cobalt Cube1 / 2700WG (Cobalt Linux release 2.2 (Fargo) Kernel 2.0.34C52_SK on a mips)
Fingerprint Cobalt Qube 1 2700WG (Linux 2.0.34)
Class Cobalt | Linux | 2.0.X | general purpose
CPE cpe:/o:cobalt:linux_kernel:2.0 auto
SEQ(SP=FB-107%GCD=1-6%ISR=102-10C%TI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4%O2=M578%O3=M280%O4=M218%O5=M218%O6=M109)
WIN(W1=7FE0%W2=7FE0%W3=7FE0%W4=7FE0%W5=7FE0%W6=7FE0)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=7FE0%O=M5B4%CC=N%Q=U)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=3B-45%TG=40%W=7FE0%S=O%A=S+%F=ASF%O=M109%RD=0%Q=)
T4(R=N)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=N)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=I%RUCK=EF2D%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# Cognex DataMan 200 (running http://www.sics.se/~adam/lwip/)
Fingerprint Cognex DataMan 200 ID reader (lwIP TCP/IP stack)
Class Cognex | embedded || specialized
SEQ(SP=0-59%GCD=1-6|CE|19C|26A|338|406%ISR=55-5F%TI=I%CI=I%II=RI%SS=O%TS=U)
OPS(O1=M5B4%O2=M5B4%O3=M5B4%O4=M5B4%O5=M5B4%O6=M5B4)
WIN(W1=800%W2=800%W3=800%W4=800%W5=800%W6=800)
ECN(R=Y%DF=N%T=FA-104%TG=FF%W=800%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=FA-104%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=FA-104%TG=FF%W=800%S=O%A=S+%F=AS%O=M5B4%RD=0%Q=)
T4(R=Y%DF=N%T=FA-104%TG=FF%W=800%S=O|A+%A=O|S%F=AR%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=800%S=A|O%A=O|S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=800%S=A|O%A=O|S%F=AR%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FA-104%TG=FF%W=800%S=A|O%A=O|S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=128|7CBB|B4CA|B518%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# Comau Robotics Smart Six C4G controller
Fingerprint Comau C4G robot control unit
Class Comau | embedded || specialized
SEQ(SP=FC-108%GCD=1-6%ISR=102-112%TI=RD%II=RI%TS=21|22)
OPS(O1=M5B4NW4ST11%O2=M578NW4ST11%O3=M280NW4NNT11%O4=M5B4NW4ST11%O5=M218NW4ST11%O6=M109ST11)
WIN(W1=FECC%W2=FECC%W3=FECC%W4=FECC%W5=FECC%W6=FECC)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FECC%O=M5B4NW4SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=N)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=0-FFFF%RIPCK=I%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# iPAQ Connection Point CP-2W 4 port + 802.11b router, Hardware Version 1.01, Software Version 2.09 Jan 21, 2003
Fingerprint Compaq iPAQ CP-2W Connection Point WAP
Class Compaq | embedded || WAP
SEQ(R=N)
OPS(O1=|M578%O2=|M578%O3=|M578%O4=|M578%O5=|M578%O6=|M578)
WIN(W1=0|800%W2=0|800%W3=0|800%W4=0|800%W5=0|800%W6=0|800)
ECN(R=Y%DF=N%T=FA-104%TG=FF%W=0|800%O=|M578%CC=N%Q=)
T1(R=Y%DF=N%T=FA-104%TG=FF%S=Z%A=S+%F=AR|AS%RD=0%Q=)
T2(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=FA-104%TG=FF%W=800%S=Z%A=O|S+%F=AS%O=M578%RD=0%Q=)
T4(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=AR%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=AR%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(R=N)
IE(DFI=N%T=FA-104%TG=FF%CD=S)

# Compaq Tru64 4.0F
Fingerprint Compaq Tru64 UNIX V4.0F
Class Compaq | Tru64 UNIX | 4.X | general purpose
CPE cpe:/o:compaq:tru64:4 auto
SEQ(SP=E2-EC%GCD=10|20|30|40|50%ISR=104-10E%TI=I%TS=U)
OPS(O1=M5B4NW0%O2=M5B4NW0%O3=M5B4NW0%O4=M5B4NW0%O5=M5B4NW0%O6=M5B4)
WIN(W1=832C%W2=8340%W3=8200%W4=8000%W5=81D0%W6=805C)
ECN(R=Y%DF=Y%T=3B-3D%TG=40%W=832C%O=M5B4NW0%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-3D%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%T=3B-3D%TG=40%W=805C%S=O%A=S+%F=AS%O=M5B4NW0%RD=0%Q=)
T4(R=Y%DF=N%T=3B-3D%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-3D%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-3D%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-3D%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# /etc/motd: Compaq Tru64 UNIX V5.1 (Rev. 732); Sat Mar 20 11:57:19 EST 2004
Fingerprint Compaq Tru64 UNIX 5.1
Class Compaq | Tru64 UNIX | 5.X | general purpose
CPE cpe:/o:compaq:tru64:5 auto
SEQ(SP=E3-ED%GCD=10|20|30|40|50%ISR=107-111%TI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4NW0%O2=M5B4NW0%O3=M5B4NW0%O4=M5B4NW0%O5=M5B4NW0%O6=M5B4)
WIN(W1=F000%W2=F000%W3=F000%W4=F000%W5=F000%W6=F000)
ECN(R=Y%DF=N%T=3B-3D%TG=40%W=F000%O=M5B4NW0%CC=N%Q=)
T1(R=Y%DF=N%T=3B-3D%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=3B-3D%TG=40%W=F000%S=O%A=S+%F=AS%O=M5B4NW0%RD=0%Q=)
T4(R=Y%DF=N|Y%T=3B-3D%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N|Y%T=3B-3D%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N|Y%T=3B-3D%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N|Y%T=3B-3D%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# OSF1 tru64 V5.1 1885 alpha
Fingerprint Compaq Tru64 UNIX 5.1
Class Compaq | Tru64 UNIX | 5.X | general purpose
CPE cpe:/o:compaq:tru64:5 auto
SEQ(SP=8D-99%GCD=1-6%ISR=98-A2%TI=I%CI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4NW0%O2=M5B4NW0%O3=M5B4NW0%O4=M5B4NW0%O5=M5B4NW0%O6=M5B4)
WIN(W1=F000%W2=F000%W3=F000%W4=F000%W5=F000%W6=F000)
ECN(R=Y%DF=N%T=37-41%TG=40%W=F000%O=M5B4NW0%CC=N%Q=)
T1(R=Y%DF=N%T=37-41%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=37-41%TG=40%W=F000%S=O%A=O%F=A%O=%RD=0%Q=)
T4(R=Y%DF=N|Y%T=37-41%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N|Y%T=37-41%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N|Y%T=37-41%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N|Y%T=37-41%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Compaq Tru64 UNIX V5.1 (Rev. 732)
# VMS v7.3-1
# VMS 7.3-1 on a VAX
Fingerprint Compaq Tru64 UNIX 5.1 or HP OpenVMS 7.3-1
Class Compaq | Tru64 UNIX | 5.X | general purpose
CPE cpe:/o:compaq:tru64:5 auto
Class HP | OpenVMS | 7.X | general purpose
CPE cpe:/o:hp:openvms:7 auto
SEQ(SP=91-9D%GCD=1-6%ISR=99-A3%TI=I%CI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4NW0%O2=M5B4NW0%O3=M5B4NW0%O4=M5B4NW0%O5=M5B4NW0%O6=M5B4)
WIN(W1=F000%W2=F000%W3=F000%W4=F000%W5=F000%W6=F000)
ECN(R=Y%DF=N%T=3B-3D%TG=40%W=F000%O=M5B4NW0%CC=N%Q=)
T1(R=Y%DF=N%T=3B-3D%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=3B-3D%TG=40%W=F000%S=O%A=O%F=A%O=%RD=0%Q=)
T4(R=N)
T5(R=Y%DF=N%T=3B-3D%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-3D%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-3D%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# HP OpenVMS V7.3-2 on AlphaServer ES45 Model 2
# Compaq Tru64 UNIX V5.1B (Rev. 2650)
Fingerprint Compaq Tru64 UNIX 5.1 or HP OpenVMS 7.3-2
Class Compaq | Tru64 UNIX | 5.X | general purpose
CPE cpe:/o:compaq:tru64:5 auto
Class HP | OpenVMS | 7.X | general purpose
CPE cpe:/o:hp:openvms:7 auto
SEQ(SP=DC-E9%GCD=10|20|30|40|50|60%ISR=107-111%TI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4NW0%O2=M5B4NW0%O3=M5B4NW0%O4=M5B4NW0%O5=M5B4NW0%O6=M5B4)
WIN(W1=F000%W2=F000%W3=F000%W4=F000%W5=F000%W6=F000)
ECN(R=Y%DF=N%T=3B-3D%TG=40%W=F000%O=M5B4NW0%CC=N%Q=)
T1(R=Y%DF=N%T=3B-3D%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=3B-3D%TG=40%W=F000%S=O%A=S+%F=AS%O=M5B4NW0%RD=0%Q=)
T4(R=Y%DF=N|Y%T=3B-3D%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N|Y%T=3B-3D%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N|Y%T=3B-3D%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N|Y%T=3B-3D%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Compaq Tru64 UNIX V5.1B
# OpenVMS/Alpha V8.2
# OpenVMS (TM) Alpha Operating System, Version V8.3
# OpenVMS v8.3 box runs the MultiNet TCP/IP stack (from Process Software) v5.2, rather than HP's native TCP/IP stack for OpenVMS.
Fingerprint Compaq Tru64 UNIX 5.1B or HP OpenVMS 8.2 - 8.3
Class Compaq | Tru64 UNIX | 5.X | general purpose
CPE cpe:/o:compaq:tru64:5 auto
Class HP | OpenVMS | 8.X | general purpose
CPE cpe:/o:hp:openvms:8 auto
SEQ(SP=FB-109%GCD=1-6%ISR=FF-10D%TI=I%CI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4NW0%O2=M5B4NW0%O3=M5B4NW0%O4=M5B4NW0%O5=M5B4NW0%O6=M5B4)
WIN(W1=F53C%W2=F0A0%W3=F000%W4=F000%W5=F0C8%W6=F028)
ECN(R=Y%DF=N%T=7B-85%TG=80%W=F53C%O=M5B4NW0%CC=N%Q=)
T1(R=Y%DF=N%T=7B-85%TG=80%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=7B-85%TG=80%W=F028%S=O%A=S+%F=AS%O=M5B4NW0%RD=0%Q=)
T4(R=Y%DF=N|Y%T=7B-85%TG=80%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N|Y%T=7B-85%TG=80%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N|Y%T=7B-85%TG=80%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N|Y%T=7B-85%TG=80%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Ethernet to wall socket connector provided by BT. Runs 10Mbps ethernet through house electrics.
# Acbel Polytech Ethernet over Powerline 200Mbit/sec bridge
Fingerprint AcBel or Comtrend powerline Ethernet adapter
Class Comtrend | embedded || bridge
Class AcBel | embedded || bridge
SEQ(SP=0-16%GCD=9C4|1388|1D4C|2710|30D4%ISR=0-67%TI=I%TS=U)
OPS(O1=M578%O2=M578%O3=M578%O4=M578%O5=M578%O6=M578)
WIN(W1=7805%W2=7805%W3=7805%W4=7805%W5=7805%W6=7805)
ECN(R=Y%DF=N%T=22-38%TG=40%W=7805%O=M578%CC=N%Q=)
T1(R=Y%DF=N%T=22-36%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=23-3A%TG=40%W=7805%S=O%A=S+%F=AS%O=M578%RD=0%Q=)
T4(R=Y%DF=N%T=20-2E|31-3E%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=21-38%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=N)
T7(R=Y%DF=N%T=22-2E|35-3F%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(R=N)

# Router Comtrend 5361 RoHS
Fingerprint Comtrend 5361 ADSL router
Class Comtrend | embedded || broadband router
CPE cpe:/h:comtrend:5361 auto
SEQ(SP=C1-CB%GCD=1-6%ISR=C7-D1%TI=Z%II=I%TS=8)
OPS(O1=M5ACST11NW0%O2=M5ACST11NW0%O3=M5ACNNT11NW0%O4=M5ACST11NW0%O5=M5ACST11NW0%O6=M5ACST11)
WIN(W1=1680%W2=1680%W3=1680%W4=1680%W5=1680%W6=1680)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=16B0%O=M5ACNNSNW0%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=1680%S=O%A=S+%F=AS%O=M5ACST11NW0%RD=0%Q=)
T4(R=Y%DF=Y%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=FA-104%TG=FF%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=Y%T=FA-104%TG=FF%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=FA-104%TG=FF%CD=S)

# Comtrend CT-800 SIP gateway
Fingerprint Comtrend CT-800 VoIP adapter
Class Comtrend | embedded || VoIP adapter
CPE cpe:/h:comtrend:ct-800 auto
SEQ(SP=14-1E%GCD=7A00|F400|16E00|1E800|26200%ISR=91-9B%TI=I%II=I%SS=S%TS=1)
OPS(O1=M5B4NW0NNT11%O2=M5B4NW0NNT11%O3=M5B4NW0NNT11%O4=M5B4NW0NNT11%O5=M5B4NW0NNT11%O6=M5B4NNT11)
WIN(W1=43E0%W2=4110%W3=423C%W4=4074%W5=4180%W6=403D)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=4470%O=M5B4NW0%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=3B-45%TG=40%W=403D%S=O%A=O%F=A%O=NNT11%RD=0%Q=)
T4(R=Y%DF=N%T=3B-45%TG=40%W=4000%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# COMTREND CT536 Router
Fingerprint Comtrend CT536 wireless ADSL router
Class Comtrend | embedded || WAP
CPE cpe:/h:comtrend:ct536 auto
SEQ(SP=C8-D2%GCD=1-6%ISR=CC-D6%TI=Z%CI=Z%II=I%TS=8)
OPS(R=N)
WIN(R=N)
ECN(R=Y%DF=Y%T=3B-45|FA-104%TG=40|FF%W=16B0%O=|M5ACNW0%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45|FA-104%TG=40|FF%S=O%A=O|S+%F=A|AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%T=3B-45|FA-104%TG=40|FF%W=1680%S=O%A=O|S+%F=A|AS%O=NNT11|M5ACNNT11NW0%RD=0%Q=)
T4(R=Y%DF=Y%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=FA-104%TG=FF%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=Y%T=FA-104%TG=FF%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=FA-104%TG=FF%CD=S)

# conceptronic CHD3NET
Fingerprint Conceptronic CHD3NET NAS device
Class Conceptronic | embedded || storage-misc
CPE cpe:/h:conceptronic:chd3net auto
SEQ(SP=0-5%GCD=596B|B2D6|10C41|165AC|1BF17%ISR=89-93%TI=RD%TS=U)
OPS(O1=M5B4%O2=M578%O3=M280%O4=M5B4%O5=M218%O6=M109)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=N%T=1B-25%TG=20%W=FFFF%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=1B-25%TG=20%S=O%A=O|S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=1B-25%TG=20%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=1B-25%TG=20%W=FFFF%S=O%A=O|S+%F=AS%O=M109%RD=0%Q=)
T4(R=Y%DF=N%T=1B-25%TG=20%W=0%S=A%A=S%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=1B-25%TG=20%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=1B-25%TG=20%W=0%S=A%A=S%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=1B-25%TG=20%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=1B-25%TG=20%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=1B-25%TG=20%CD=S)

# Control4 HC-300 home controller
Fingerprint Control4 HC-300 home controller
Class Control4 | embedded || remote management
SEQ(SP=C1-CB%GCD=1-6%ISR=C7-D1%TI=Z%CI=I%II=I%TS=7)
OPS(O1=M5B4ST11NW2%O2=M5B4ST11NW2%O3=M5B4NNT11NW2%O4=M5B4ST11NW2%O5=M5B4ST11NW2%O6=M5B4ST11)
WIN(W1=16A0%W2=16A0%W3=16A0%W4=16A0%W5=16A0%W6=16A0)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=16D0%O=M5B4NNSNW2%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# Coraid Linux NAS v. 6, debian based Storage System, made by CoRAID
Fingerprint CoRAID NAS device
Class CoRAID | embedded || storage-misc
SEQ(SP=BE-CE%GCD=1-6%ISR=C8-D2%TI=Z%II=I%TS=8)
OPS(O1=M1040ST11NW2%O2=M1040ST11NW2%O3=M1040NNT11NW2%O4=M1040ST11NW2%O5=M1040ST11NW2%O6=M1040ST11)
WIN(W1=309C%W2=309C%W3=309C%W4=309C%W5=309C%W6=309C)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=30C0%O=M1040NNSNW2%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=309C%S=O%A=S+%F=AS%O=M1040ST11NW2%RD=0%Q=)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# CoyotePoint load balancer E250GX
Fingerprint Coyote Point E250GX Equalizer load balancer
Class Coyote Point | embedded || load balancer
CPE cpe:/h:coyote_point:e250gx
SEQ(SP=FF-109%GCD=1-6%ISR=109-113%TI=I%CI=I%II=I%SS=S%TS=B)
OPS(O1=M5B4NW0NNT11%O2=M5B4NW0NNT11%O3=M5B4NW0NNT11%O4=M5B4NW0NNT11%O5=M5B4NW0NNT11%O6=M5B4NNT11)
WIN(W1=8000%W2=8000%W3=8000%W4=8000%W5=8000%W6=8000)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=8000%O=M5B4NW0%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=8000%S=O%A=S+%F=AS%O=M5B4NW0NNT11%RD=0%Q=)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Coyote Point Systems Equalizer version: 7.2.0h platform: e350si
Fingerprint Coyote Point E350SI Equalizer load balancer
Class Coyote Point | embedded || load balancer
CPE cpe:/h:coyote_point:e350si
SEQ(SP=102-10C%GCD=1-6%ISR=104-10E%TI=I%CI=RI%II=I%SS=O|S%TS=B)
OPS(O1=M5B4NW0NNT11%O2=M578NW0NNT11%O3=M280NW0NNT11%O4=M22CNW0NNT11%O5=M218NW0NNT11%O6=M109NNT11)
WIN(W1=E000%W2=E000%W3=E000%W4=E000%W5=E000%W6=E000)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=E000%O=M5B4NW0%CC=N)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=O|S+%F=AS%RD=0)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=S%F=R%RD=0)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%RD=0)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=S%F=R%RD=0)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# 2.0.5.60 unicosmk CRAY T3E, Vendor: Cray, OS: Unicos/mk
Fingerprint Cray UNICOS/mk 2.0.5.60
Class Cray | UNICOS | 2.X | general purpose
CPE cpe:/o:cray:unicos:2 auto
SEQ(SP=98-A2%GCD=1-6%ISR=9F-A9%TI=I%CI=I%II=I%SS=S%TS=A)
OPS(O1=M10D8WANT11LL%O2=M10D8W0NT11LL%O3=M10D8W5NT11LL%O4=M10D8WANT11LL%O5=M10D8WANT11LL%O6=M10D8T11LL)
WIN(W1=8000%W2=8000%W3=8000%W4=8000%W5=8000%W6=8000)
ECN(R=Y%DF=Y%T=3B-3D%TG=40%W=8000%O=M10D8WAN%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-3D%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=3B-3D%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=Y%T=3B-3D%TG=40%W=20%S=O%A=O%F=A%O=NNT11%RD=0%Q=)
T4(R=Y%DF=N%T=3B-3D%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-3D%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-3D%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-3D%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=Z%RUCK=0%RUD=G)
IE(DFI=N%T=FA-104%TG=FF%CD=S)

# Dedicated Micros Digital Sprite 2, Version 4.4 (029)
# Crestron AV2 with a C2ENET-2 card, firmware 3.155.1240
# Crestron CP2e and firmware 3.155.1240
# Crestron TPS-6x touchpanel with firmware 3.001.0030
Fingerprint Crestron AV2 or CP2E automation system or TPS-6x touchpanel (2-Series), or Dedicated Micros Digital Sprite 2 DVR
Class Crestron | 2-Series || specialized
CPE cpe:/o:crestron:2_series auto
Class Dedicated Micros | embedded || media device
SEQ(SP=FE-10A%GCD=1-6%ISR=103-111%TI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4%O2=M5B4%O3=M5B4%O4=M5B4%O5=M5B4%O6=M5B4)
WIN(W1=3E80%W2=3E80%W3=3E80%W4=3E80%W5=3E80%W6=3E80)
ECN(R=Y%DF=N%T=1B-25%TG=20%W=3E80%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=1B-25%TG=20%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=1B-25%TG=20%W=0%S=Z%A=S%F=ARF%O=%RD=0%Q=)
T3(R=Y%DF=N%T=1B-25%TG=20%W=3E80%S=O%A=S+%F=AS%O=M5B4%RD=0%Q=)
T4(R=Y%DF=N%T=1B-25%TG=20%W=0%S=A%A=Z%F=RF%O=%RD=0%Q=)
T5(R=Y%DF=N%T=1B-25%TG=20%W=0%S=Z%A=S+%F=ARF%O=%RD=0%Q=)
T6(R=Y%DF=N%T=1B-25%TG=20%W=0%S=A%A=Z%F=RF%O=%RD=0%Q=)
T7(R=Y%DF=N%T=1B-25%TG=20%W=0%S=Z%A=S%F=ARF%O=%RD=0%Q=)
U1(R=N)
IE(DFI=N%T=1B-25%TG=20%CD=S)

# Crestron Xpanel Series 2 unit
Fingerprint Crestron XPanel control system
Class Crestron | 2-Series || specialized
CPE cpe:/o:crestron:2_series auto
SEQ(CI=I%II=I)
OPS(R=N)
WIN(R=N)
ECN(R=N)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=O|S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# Crestron CNMSX-AV with expansion CNX-ENET+ Ethernet card.
Fingerprint Crestron CNMSX-AV control and automation system
Class Crestron | embedded || specialized
SEQ(SP=CF-D9%GCD=1-6%ISR=D5-DF%TI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4%O2=M5B4%O3=M5B4%O4=M5B4%O5=M5B4%O6=M5B4)
WIN(W1=1000%W2=1000%W3=1000%W4=1000%W5=1000%W6=1000)
ECN(R=Y%DF=N%T=38-42%TG=40%W=1000%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=38-42%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=38-42|74-7E%TG=40|80%W=1000%S=O%A=O|S+%F=A|AS%O=|M5B4%RD=0%Q=)
T4(R=Y%DF=N%T=38-42%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=38-42%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=38-42%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=38-42%TG=40%W=0%S=A%A=S+%F=A%O=%RD=0%Q=)
U1(DF=N%T=38-42%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=38-42%TG=40%CD=Z)

# Crestron Electronics, Product: MC2E, Firmware: v4.000.0226
# Crestron Pro2 processor
# MP2e firmware 4.000.0226
# Crestron QM-RMC with firmware 4.000.0226
# Crestron Pro2 with optional ethernet interface C2ENET-1
# HP StorageWorks MSL4048 Tape Library, Product ID MSL G3, Library Firmware 6.00 / 2.60e
Fingerprint Crestron MC2E, MP2E, PRO2, or QM-RMC control and automation system, or HP StorageWorks MSL4048 tape library
Class Crestron | embedded || specialized
Class HP | embedded || storage-misc
SEQ(SP=EE-10C%GCD=1-6%ISR=FF-10F%TI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4%O2=M5B4%O3=M5B4%O4=M5B4%O5=M5B4%O6=M5B4)
WIN(W1=3E80%W2=3E80%W3=3E80%W4=3E80%W5=3E80%W6=3E80)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=3E80%O=M5B4%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=3E80%S=O%A=S+%F=AS%O=M5B4%RD=0%Q=)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# CybeRoam Unified Threat Management -> Application Firewall
Fingerprint Cyberoam UTM firewall
Class Cyberoam | embedded || firewall
SEQ(SP=BE-CC%GCD=1-6%ISR=CB-D9%TI=Z%TS=U)
OPS(O1=M58C%O2=M58C%O3=M58C%O4=M58C%O5=M58C%O6=M58C)
WIN(W1=16D0%W2=16D0%W3=16D0%W4=16D0%W5=16D0%W6=16D0)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=16D0%O=M58C%CC=N)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%RD=0)
T6(R=N)
T7(R=N)
U1(R=N)
IE(R=N)

# "XLi" appears to be Linux --Ed.
# Cymphonix EX 550, XLi Operating System Version 9 http://www.cymphonix.com/XLiVersion9.html
Fingerprint Cymphonix EX550 firewall
Class Cymphonix | embedded || firewall
CPE cpe:/h:cymphonix:ex550 auto
SEQ(SP=C9-D3%GCD=1-6%ISR=D1-DB%TI=Z%II=I%TS=U)
OPS(O1=M5B4NNS%O2=M5B4NNS%O3=M5B4%O4=M5B4NNS%O5=M5B4NNS%O6=M5B4NNS)
WIN(W1=16D0%W2=16D0%W3=16D0%W4=16D0%W5=16D0%W6=16D0)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=16D0%O=M5B4NNS%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=N)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# D-Link DI-704P
# Dlink dl-604 router
# D-Link DI-524 wireless 802.11g broadband router
Fingerprint D-Link DI-504 or DI-704P broadband router, or DI-524 WAP
Class D-Link | embedded || broadband router
Class D-Link | embedded || WAP
SEQ(SP=0-1B%GCD=32|64|96|C8|FA%ISR=4A-54%TI=BI%II=BI%SS=S%TS=U)
OPS(O1=|M5B4%O2=|M5B4%O3=|M5B4%O4=|M5B4%O5=|M5B4%O6=|M5B4)
WIN(W1=0|16D0%W2=0|16D0%W3=0|16D0%W4=0|16D0%W5=0|16D0%W6=0|16D0)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=0|16D0%O=|M5B4%CC=N%Q=U)
T1(R=Y%DF=N%T=3B-45%TG=40%S=Z%A=S+%F=AR%RD=0%Q=)
T2(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A|O%A=O|S%F=AR%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=O|S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# CANOPY CMM 2.2 Build 2a Oct 12 2006 15:14:19
# D-Link DIR-100 Router with switch firmware 2.00_b5_sw
Fingerprint D-Link DIR-100 DSL router or Motorola Canopy cluster management module 2.2
Class D-Link | embedded || broadband router
CPE cpe:/h:dlink:dir-100 auto
Class Motorola | embedded || specialized
SEQ(SP=8B-99%GCD=1-6%ISR=97-A3%TI=I%II=I%SS=S%TS=1|2)
OPS(O1=M5A8NW0NNT11%O2=M5A8NW0NNT11%O3=M5A8NW0NNT11%O4=M5A8NW0NNT11%O5=M5A8NW0NNT11%O6=M5A8NNT11)
WIN(W1=43E0%W2=4110%W3=423C%W4=43E0%W5=4180%W6=403D)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=4470%O=M5B4NW0%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=3B-45%TG=40%W=403D|4431|4A1F|500D|54FE%S=O%A=O|S+%F=AS%O=M5A8NW0NNT11%RD=0%Q=)
T4(R=Y%DF=N%T=3B-45%TG=40%W=4000%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=134%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# D-Link DSL-2640B ADSL2+ + Wi-Fi Router + 4-Port Switch
Fingerprint D-Link DSL-2640B ADSL router
Class D-Link | embedded || broadband router
CPE cpe:/h:dlink:dsl-2640b auto
SEQ(SP=C3-CD%GCD=1-6%ISR=CA-D4%TI=Z%CI=Z%II=I%TS=A|B|C)
OPS(O1=M5B0ST11NW1%O2=M5B0ST11NW1%O3=M5B0NNT11NW1%O4=M5B0ST11NW1%O5=M5B0ST11NW1%O6=M5B0ST11)
WIN(W1=1690%W2=1690%W3=1690%W4=1690%W5=1690%W6=1690)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=16C0%O=M5B0NNSNW1%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=1690%S=O%A=S+%F=AS%O=M5B0ST11NW1%RD=0%Q=)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# D-Link DSL-500 firmware R2.21.002.03.b13au
Fingerprint D-Link DSL-500 ADSL router
Class D-Link | embedded || broadband router
CPE cpe:/h:dlink:dsl-500 auto
SEQ(R=N)
OPS(O1=%O2=%O3=%O4=%O5=%O6=)
WIN(W1=0%W2=0%W3=0%W4=0%W5=0%W6=0)
ECN(R=Y%DF=Y%T=3B-3D%TG=40%W=0%O=%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-3D%TG=40%S=Z%A=S%F=AR%RD=0%Q=)
T2(R=Y%DF=Y%T=3B-3D%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=Y%T=3B-3D%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T4(R=Y%DF=Y%T=3B-3D%TG=40%W=0%S=A%A=S%F=R%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=3B-3D%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-3D%TG=40%W=0%S=A%A=S%F=R%O=%RD=0%Q=)
T7(R=Y%DF=Y%T=3B-3D%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=19-23%TG=20%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=19-23%TG=20%CD=Z)

# D-Link ADSL router, model DSL-500G
# D-Link DSL-500G Generation IV ADSL Router
# D-LINK DSL-500G, Generation II, Ver.: C5
Fingerprint D-Link DSL-500G ADSL router
Class D-Link | embedded || broadband router
CPE cpe:/h:dlink:dsl-500g auto
SEQ(SP=F7-10D%GCD=1-6%ISR=FA-110%TI=I%II=I%SS=S%TS=U)
OPS(O1=M584%O2=M584%O3=M584%O4=M584%O5=M584%O6=M584)
WIN(W1=3E80%W2=3E80%W3=3E80%W4=3E80%W5=3E80%W6=3E80)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=3E80%O=M584%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=3B-45%TG=40%W=3E80%S=O%A=S+%F=AS%O=M584%RD=0%Q=)
T4(R=N)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=ARF%O=%RD=0%Q=)
T6(R=N)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# D-Link DSL-504 ADLS modem/router
Fingerprint D-Link DSL-504 ADSL modem
Class D-Link | embedded || broadband router
CPE cpe:/h:dlink:dsl-504 auto
SEQ(SP=0-29%GCD=9C4|1388|1D4C|2710|30D4|61A8|C350|124F8|186A0|1E848%ISR=8A-94%TI=I%II=I%SS=S%TS=U)
OPS(O1=MFD8%O2=MFD8%O3=MFD8%O4=MFD8%O5=MFD8%O6=MFD8)
WIN(W1=5DC%W2=5DC%W3=5DC%W4=5DC%W5=5DC%W6=5DC)
ECN(R=Y%DF=N%T=3B-3D%TG=40%W=5DC%O=MFD8%CC=N%Q=)
T1(R=Y%DF=N%T=3B-3D%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=3B-3D%TG=40%W=5DC%S=O%A=S+%F=AS%O=MFD8%RD=0%Q=)
T4(R=Y%DF=Y%T=3B-3D%TG=40%W=0%S=A%A=S%F=R%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=3B-3D%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-3D%TG=40%W=0%S=A%A=S%F=R%O=%RD=0%Q=)
T7(R=Y%DF=Y%T=3B-3D%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=19-23%TG=20%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=19-23%TG=20%CD=Z)

# D-Link Modem DSL2-300G, Hardware revision: A1, Firmware: R7.00.b1.TQ.t7, The firmware is a special revision for Telus Québec (*.TQ.*).
Fingerprint D-Link DSL2-300G DSL modem
Class D-Link | embedded || broadband router
CPE cpe:/h:dlink:dsl2-300g auto
SEQ(SP=70-88%GCD=1-6%ISR=7C-90%TI=I%TS=U)
OPS(O1=M5B4%O2=M578%O3=M280%O4=M218%O5=M218%O6=M109)
WIN(W1=4000%W2=4000%W3=4000%W4=4000%W5=4000%W6=4000)
ECN(R=Y%DF=Y%T=7B-85%TG=80%W=4000%O=M5B4%CC=N%Q=)
T1(R=Y%DF=Y%T=7B-85%TG=80%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=7B-85%TG=80%W=4000%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=7B-85%TG=80%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=7B-85%TG=80%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=7B-85%TG=80%W=0%S=Z%A=Z%F=R%O=%RD=0%Q=)
U1(DF=N%T=96-A0%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(R=N)

# D-Link DFL-200 firmware v1.34.0
Fingerprint D-Link DFL-200 firewall
Class D-Link | embedded || firewall
CPE cpe:/h:dlink:dfl-200 auto
SEQ(SP=FE-10A%GCD=1-6%ISR=105-10F%TI=RD%CI=RI%II=RI%TS=U)
OPS(O1=M5AC%O2=M5AC%O3=M5AC%O4=M5AC%O5=M5AC%O6=M5AC)
WIN(W1=8000%W2=8000%W3=8000%W4=8000%W5=8000%W6=8000)
ECN(R=Y%DF=N%T=FA-104%TG=FF%W=8000%O=M5AC%CC=N%Q=)
T1(R=Y%DF=N%T=FA-104%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=N)
U1(R=N)
IE(DFI=N%T=FA-104%TG=FF%CD=S)

# D-Link DFL 700 Router/Firewall
Fingerprint D-Link DFL-700 firewall
Class D-Link | embedded || firewall
CPE cpe:/h:dlink:dfl-700 auto
SEQ(SP=102-10C%GCD=1-6%ISR=104-10E%TI=RD%TS=U)
OPS(O1=M564%O2=M564%O3=M564%O4=M564%O5=M564%O6=M564)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=FFFF%O=M564%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=N)
U1(R=N)
IE(R=N)

# D-Link NetDefend OS
Fingerprint D-Link NetDefend firewall
Class D-Link | embedded || firewall
SEQ(SP=F4-FE%GCD=1-6%ISR=106-110%TI=RD%TS=U)
OPS(O1=M5B4%O2=M5B4%O3=M5B4%O4=M5B4%O5=M5B4%O6=M5B4)
WIN(W1=8000%W2=8000%W3=8000%W4=8000%W5=8000%W6=8000)
ECN(R=Y%DF=N%T=FA-104%TG=FF%W=8000%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=FA-104%TG=FF%S=O%A=O|S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=N)
U1(R=N)
IE(DFI=N%T=FA-104%TG=FF%CD=S)

# D-Link DP-G310 wireless print server (hardware version A1, firmware version 1.40)
# Hamlet HPS01UU USB Print Server
Fingerprint D-Link DP-300U, DP-G310, or Hamlet HPS01UU print server
Class D-Link | embedded || print server
CPE cpe:/h:dlink:dp-300u
CPE cpe:/h:dlink:dp-g310
Class Hamlet | embedded || print server
CPE cpe:/h:hamlet:hps01uu auto
SEQ(SP=0-1D%GCD=37|6E|A5|DC|113%ISR=4B-55%TI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4%O2=M5B4%O3=M5B4%O4=M5B4%O5=M5B4%O6=M5B4)
WIN(W1=B68%W2=B68%W3=B68%W4=B68%W5=B68%W6=B68)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=B68%O=M5B4%CC=N%Q=U)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=3B-45%TG=40%W=B68%S=O%A=S+%F=ASF%O=M5B4%RD=0%Q=)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(R=N)
IE(DFI=N%T=FA-104%TG=FF%CD=Z)

# D-Link DPR-1260 Firmware:1.20
# Dlink Gamer Lounge  DGL-4300
# DLink DIR-655, running Ubicom's ipOS operarating system.
# Tranzeo TR-5a 5GHz Client radio with built-in antenna
# DGL-4300 - Wireless 108G Gaming Router, Firmware version: 1.8,    2007/03/01
# DLINK DIR-615 wireless access router Firmware Version: 2.25RU
# D-LINK DIR-855 Wireless N Quadband Gigabit Router
# D-Link Systems DGL-4500.
# DIR-628 Router
Fingerprint D-Link DPR-1260 print server; or DGL-4300, DGL-4500, DIR-615, DIR-625, DIR-628, DIR-655, or DIR-855 WAP
Class D-Link | embedded || print server
CPE cpe:/h:dlink:dpr-1260
Class D-Link | embedded || WAP
CPE cpe:/h:dlink:dgl-4300
CPE cpe:/h:dlink:dgl-4500
CPE cpe:/h:dlink:dir-615
CPE cpe:/h:dlink:dir-625
CPE cpe:/h:dlink:dir-628
CPE cpe:/h:dlink:dir-655
CPE cpe:/h:dlink:dir-855
SEQ(SP=95-B5%GCD=1-6%ISR=A9-BB%TI=I%II=I%SS=S%TS=U)
OPS(O1=|M5B4%O2=|M5B4%O3=|M5B4%O4=|M5B4%O5=|M5B4%O6=|M5B4)
WIN(W1=1000%W2=1000%W3=1000%W4=1000%W5=1000%W6=1000)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=1000%O=|M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=O|S+%F=A|AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=3B-45%TG=40%W=1000%S=O%A=O|S+%F=A|AS%O=|M5B4%RD=0%Q=)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=Z)

# D-Link DNS-321 NAS
Fingerprint D-Link DNS-321 NAS device
Class D-Link | embedded || storage-misc
CPE cpe:/h:dlink:dns-321 auto
SEQ(SP=CA-D4%GCD=1-6%ISR=EA-F4%TI=Z%CI=Z%II=I%TS=6|7)
OPS(O1=M2304ST11NW1%O2=M2304ST11NW1%O3=M2304NNT11NW1%O4=M2304ST11NW1%O5=M2304ST11NW1%O6=M2304ST11)
WIN(W1=45F0%W2=45F0%W3=45F0%W4=45F0%W5=45F0%W6=45F0)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=4608%O=M2304NNSNW1%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=45F0%S=O%A=S+%F=AS%O=M2304ST11NW1%RD=0%Q=)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# D-Link DGS-1210-24 switch
# DES-1210-52
# DGS-1210-24
Fingerprint D-Link DES-1210 or DGS-1210 switch
Class D-Link | embedded || switch
CPE cpe:/h:dlink:des-1210
CPE cpe:/h:dlink:dgs-1210
SEQ(SP=0-5%GCD=388|710|A98|E20|11A8%ISR=64-6E%TI=I%CI=I%II=I%SS=S%TS=7)
OPS(O1=M109NNT11|M578NNT11%O2=M578NNT11%O3=M578NNT11%O4=M578NNT11%O5=M218NNT11%O6=M109NNT11)
WIN(W1=2400%W2=2400%W3=2400%W4=2400%W5=2400%W6=2400)
ECN(R=Y%DF=N%T=37-41%TG=40%W=0%O=%CC=N%Q=)
T1(R=Y%DF=N%T=37-41%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=37-41%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=37-41%TG=40%W=0%S=Z%A=O%F=AR%O=%RD=0%Q=)
T4(R=Y%DF=N%T=37-41%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=37-41%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=37-41%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=37-41%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# D-LINK DES-3010G L2 managed switch
# Linksys DES-3010G Fast Ethernet Switch, Firmware Version: Build 3.00.036
# Switch: DES-3010F, Boot PROM: Build 1.01.007, Firmware Version: Build 4.00.018
Fingerprint D-Link DES-3010F or DES-3010G switch
Class D-Link | embedded || switch
CPE cpe:/h:dlink:des-3010f
CPE cpe:/h:dlink:dgs-3010g
SEQ(SP=8D-97%GCD=1-6%ISR=92-9C%TI=I%II=RI%SS=O|S%TS=1)
OPS(O1=M5A4NW0NNT11%O2=M5A4NW0NNT11%O3=M5A4NW0NNT11%O4=M5A4NW0NNT11%O5=M5A4NW0NNT11%O6=M5A4NNT11)
WIN(W1=2000%W2=2000%W3=2000%W4=2000%W5=2000%W6=2000)
ECN(R=Y%DF=N%T=19-23%TG=20%W=2000%O=M5A4NW0%CC=N%Q=)
T1(R=Y%DF=N%T=19-23%TG=20%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=19-23%TG=20%W=0|2000%S=O|Z%A=O|S+%F=A|AR|AS%O=|NNT11NNLLLLLLLLLL|M5A4NW0NNT11NNLLLLLLLLLL%RD=0%Q=)
T4(R=Y%DF=N%T=19-23%TG=20%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=19-23%TG=20%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=19-23%TG=20%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=19-23%TG=20%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=19-23%TG=20%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=19-23%TG=20%CD=S)

# D-Link DGS-3200-10 Gigabit Ethernet Switch
Fingerprint D-Link DES-3010G switch
Class D-Link | embedded || switch
CPE cpe:/h:dlink:des-3010g auto
SEQ(SP=8C-98%GCD=1-6%ISR=92-9C%TI=I%II=RI%SS=S%TS=1)
OPS(O1=M5A4NW0NNT11%O2=M5A4NW0NNT11%O3=M5A4NW0NNT11%O4=M5A4NW0NNT11%O5=M5A4NW0NNT11%O6=M5A4NNT11)
WIN(W1=2000%W2=2000%W3=2000%W4=2000%W5=2000%W6=2000)
ECN(R=Y%DF=N%T=19-23%TG=20%W=2000%O=M5A4NW0%CC=N%Q=)
T1(R=Y%DF=N%T=19-23%TG=20%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=19-23%TG=20%W=2000%S=O%A=S+%F=AS%O=M5A4NW0NNT11NNLLLLLLLLLL%RD=0%Q=)
T4(R=Y%DF=N%T=19-23%TG=20%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=19-23%TG=20%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=19-23%TG=20%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=19-23%TG=20%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=19-23%TG=20%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# DES-3016 Fast Ethernet Switch Command Line Interface Firmware version: "Build 1.00B007"
Fingerprint D-Link DES-3016 switch
Class D-Link | embedded || switch
CPE cpe:/h:dlink:des-3010f
CPE cpe:/h:dlink:dgs-3010g
SEQ(SP=8B-95%GCD=1-6%ISR=91-9B%TI=I%II=RI%SS=O%TS=1)
OPS(O1=M5A4NW0NNT11%O2=M5A4NW0NNT11%O3=M5A4NW0NNT11%O4=M5A4NW0NNT11%O5=M5A4NW0NNT11%O6=M5A4NNT11)
WIN(W1=2000%W2=2000%W3=2000%W4=2000%W5=2000%W6=2000)
ECN(R=Y%DF=N%T=19-23%TG=20%W=2000%O=M5A4NW0%CC=N)
T1(R=Y%DF=N%T=19-23%TG=20%S=O%A=S+%F=AS%RD=0)
T2(R=N)
T3(R=Y%DF=N%T=19-23%TG=20%W=2000%S=O%A=S+%F=AS%O=M5A4NW0NNT11NNLLLLLLLLLL|M5A4NW0NNT11W27W27NNLLLL%RD=0)
T4(R=N)
T5(R=Y%DF=N%T=19-23%TG=20%W=0%S=Z%A=S+%F=AR%RD=0)
T6(R=N)
T7(R=N)
U1(DF=N%T=19-23%TG=20%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=19-23%TG=20%CD=S)

# DES-3200-26 Fast Ethernet Switch
Fingerprint D-Link DES-3200 switch
Class D-Link | embedded || switch
CPE cpe:/h:dlink:des-3200 auto
SEQ(SP=0-5%GCD=0%ISR=0-5%TI=I%CI=I%II=RI%SS=O|S%TS=1)
OPS(O1=M5A4NW0NNT11%O2=M5A4NW0NNT11%O3=M5A4NW0NNT11%O4=M5A4NW0NNT11%O5=M5A4NW0NNT11%O6=M5A4NNT11)
WIN(W1=2000%W2=2000%W3=2000%W4=2000%W5=2000%W6=2000)
ECN(R=Y%DF=N%T=19-23%TG=20%W=2000%O=M5A4NW0%CC=N)
T1(R=Y%DF=N%T=19-23%TG=20%S=O%A=S+%F=AS%RD=0)
T2(R=N)
T3(R=Y%DF=N%T=19-23%TG=20%W=2000%S=O%A=S+%F=AS%O=M5A4NW0NNT11T11LL|M5A4NW0NNT11NNLLLLLLLLLL%RD=0)
T4(R=Y%DF=N%T=19-23%TG=20%W=0%S=A%A=Z%F=R%RD=0)
T5(R=Y%DF=N%T=19-23%TG=20%W=0%S=Z%A=S+%F=AR%RD=0)
T6(R=Y%DF=N%T=19-23%TG=20%W=0%S=A%A=Z%F=R%RD=0)
T7(R=Y%DF=N%T=19-23%TG=20%W=0%S=Z%A=S%F=AR%RD=0)
U1(DF=N%T=19-23%TG=20%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=19-23%TG=20%CD=S)

# D-Link DES-3326 Switch
Fingerprint D-Link DES-3326 switch
Class D-Link | embedded || switch
CPE cpe:/h:dlink:des-3326 auto
SEQ(SP=8D-97%GCD=1-6%ISR=91-9B%TI=I%II=RI%SS=S%TS=1)
OPS(O1=M5B4NW0NNT11%O2=M5B4NW0NNT11%O3=M5B4NW0NNT11%O4=M5B4NW0NNT11%O5=M5B4NW0NNT11%O6=M5B4NNT11)
WIN(W1=2000%W2=2000%W3=2000%W4=2000%W5=2000%W6=2000)
ECN(R=Y%DF=N%T=19-23%TG=20%W=2000%O=M5B4NW0%CC=N%Q=)
T1(R=Y%DF=N%T=19-23%TG=20%S=Z%A=S+%F=A|AR|AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=19-23%TG=20%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=19-23%TG=20%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=19-23%TG=20%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=19-23%TG=20%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=19-23%TG=20%IPL=38%UN=128%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=19-23%TG=20%CD=S)

# DES-3526 Fast-Ethernet Switch, Firmware Version  : Build 5.01-B21
# DES-3550 Fast Ethernet Switch Command Line Interface Firmware: Build 5.01.B65
Fingerprint D-Link DES-3526 or DES-3550 switch
Class D-Link | embedded || switch
SEQ(SP=8D-97%GCD=1-6%ISR=92-9C%TI=I%CI=I%II=RI%SS=O|S%TS=1)
OPS(O1=M5A4NW0NNT11%O2=M5A4NW0NNT11%O3=M5A4NW0NNT11%O4=M5A4NW0NNT11%O5=M5A4NW0NNT11%O6=M5A4NNT11)
WIN(W1=2000%W2=2000%W3=2000%W4=2000%W5=2000%W6=2000)
ECN(R=Y%DF=N%T=19-23%TG=20%W=2000%O=M5A4NW0%CC=N%Q=)
T1(R=Y%DF=N%T=19-23%TG=20%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=19-23%TG=20%W=2000%S=O%A=S+%F=AS%O=M5A4NW0NNT11NNLLLLLLLLLL%RD=0%Q=)
T4(R=Y%DF=N%T=19-23%TG=20%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=19-23%TG=20%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=19-23%TG=20%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=19-23%TG=20%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=19-23%TG=20%IPL=38%UN=128%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=19-23%TG=20%CD=S)

# d-link des 3526, Firmware Version 5.00-B28
Fingerprint D-Link DES-3526 switch
Class D-Link | embedded || switch
CPE cpe:/h:dlink:des-3526 auto
SEQ(SP=8D-97%GCD=1-6%ISR=92-9C%TI=I|RD%II=RI%SS=S%TS=1)
OPS(O1=M5A4NW0NNT11%O2=M5A4NW0NNT11%O3=M5A4NW0NNT11%O4=M5A4NW0NNT11%O5=M5A4NW0NNT11%O6=M5A4NNT11)
WIN(W1=2000%W2=2000%W3=2000%W4=2000%W5=2000%W6=2000)
ECN(R=Y%DF=N%T=19-23%TG=20%W=2000%O=M5A4NW0%CC=N%Q=)
T1(R=Y%DF=N%T=19-23%TG=20%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=19-23%TG=20%W=2000%S=O%A=S+%F=AS%O=M5A4NW0NNT11NNLLLLLM800L|M5A4NW0NNT11NNNNLLLM800L%RD=0%Q=)
T4(R=Y%DF=N%T=19-23%TG=20%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=19-23%TG=20%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=19-23%TG=20%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=19-23%TG=20%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=19-23%TG=20%IPL=38%UN=100|128%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=19-23%TG=20%CD=S)

# D-Link DES-3256 switch
Fingerprint D-Link DES-3526 switch
Class D-Link | embedded || switch
CPE cpe:/h:dlink:des-3526 auto
SEQ(SP=8E-98%GCD=1-6%ISR=92-9C%TI=I%CI=I%II=RI%SS=O%TS=1)
OPS(O1=M5A4NW0NNT11%O2=M5A4NW0NNT11%O3=M5A4NW0NNT11%O4=M5A4NW0NNT11%O5=M5A4NW0NNT11%O6=M5A4NNT11)
WIN(W1=2000%W2=2000%W3=2000%W4=2000%W5=2000%W6=2000)
ECN(R=Y%DF=N%T=19-23%TG=20%W=2000%O=M5A4NW0%CC=N%Q=)
T1(R=Y%DF=N%T=19-23%TG=20%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=19-23%TG=20%W=0|2000%S=O|Z%A=O|S+%F=AR|AS%O=|M5A4NW0NNT11NNLLLLLLLLLL%RD=0%Q=)
T4(R=Y%DF=N%T=19-23%TG=20%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=19-23%TG=20%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=19-23%TG=20%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=19-23%TG=20%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=19-23%TG=20%IPL=38%UN=3204|6BAE|D31F|E000|F562%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=19-23%TG=20%CD=S)

# DES-3526 Fast Ethernet Switch Firmware: Build 4.01-B19
Fingerprint D-Link DES-3526 switch
Class D-Link | embedded || switch
CPE cpe:/h:dlink:des-3526
SEQ(SP=8E-98%GCD=1-6%ISR=92-9C%TI=I|RD%CI=I%II=RI%SS=O%TS=1)
OPS(O1=M5A4NW0NNT11%O2=M5A4NW0NNT11%O3=M5A4NW0NNT11%O4=M5A4NW0NNT11%O5=M5A4NW0NNT11%O6=M5A4NNT11)
WIN(W1=2000%W2=2000%W3=2000%W4=2000%W5=2000%W6=2000)
ECN(R=Y%DF=N%T=19-23%TG=20%W=2000%O=M5A4NW0%CC=N)
T1(R=Y%DF=N%T=19-23%TG=20%S=O%A=S+%F=AS%RD=0)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=19-23%TG=20%W=0%S=A%A=Z%F=R%RD=0)
T5(R=Y%DF=N%T=19-23%TG=20%W=0%S=Z%A=S+%F=AR%RD=0)
T6(R=Y%DF=N%T=19-23%TG=20%W=0%S=A%A=Z%F=R%RD=0)
T7(R=N)
U1(DF=N%T=19-23%TG=20%IPL=38%UN=128%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=19-23%TG=20%CD=S)

# D-Link DES-3550 Firmware: Build 5.01.B52
Fingerprint D-Link DES-3550 switch
Class D-Link | embedded || switch
CPE cpe:/h:dlink:des-3550 auto
SEQ(SP=8B-95%GCD=1-6%ISR=91-9B%TI=I%CI=I%II=RI%SS=S%TS=1)
OPS(O1=M5A4NW0NNT11%O2=M5A4NW0NNT11%O3=M5A4NW0NNT11%O4=M5A4NW0NNT11%O5=M5A4NW0NNT11%O6=M5A4NNT11)
WIN(W1=2000%W2=2000%W3=2000%W4=2000%W5=2000%W6=2000)
ECN(R=Y%DF=N%T=19-23%TG=20%W=2000%O=M5A4NW0%CC=N%Q=)
T1(R=Y%DF=N%T=19-23%TG=20%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=19-23%TG=20%W=2000%S=O%A=S+%F=AS%O=%RD=0%Q=)
T4(R=Y%DF=N%T=19-23%TG=20%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=19-23%TG=20%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=19-23%TG=20%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=19-23%TG=20%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=19-23%TG=20%IPL=38%UN=128%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=19-23%TG=20%CD=S)

# DES-7210 Modular Layer 3 Chassis Ethernet Switch, System hardware version: A1.0, System software version: v10.3(5), Release(67526)
Fingerprint D-Link DES-7210 switch
Class D-Link | embedded || switch
CPE cpe:/h:dlink:des-7210 auto
SEQ(SP=0-5%GCD=388|710|A98|E20|11A8%ISR=64-6E%TI=I%CI=I%II=I%SS=S%TS=U)
OPS(O1=M218%O2=M218%O3=M218%O4=M218%O5=M218%O6=M109)
WIN(W1=1000%W2=1000%W3=1000%W4=1000%W5=1000%W6=1000)
ECN(R=Y%DF=N%T=3A-44%TG=40%W=1000%O=M218%CC=N%Q=)
T1(R=Y%DF=N%T=3A-44%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=3A-44%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
T3(R=N)
T4(R=Y%DF=N%T=3A-44%TG=40%W=0%S=A%A=S%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3A-44%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3A-44%TG=40%W=0%S=A%A=S%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3A-44%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=164%UN=5002%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# D-Link DGS-3024
Fingerprint D-Link DGS-3024 switch
Class D-Link | embedded || switch
CPE cpe:/h:dlink:dgs-3024 auto
SEQ(SP=8E-98%GCD=1-6%ISR=92-9C%TI=I%II=RI%SS=O|S%TS=1)
OPS(O1=M5B4NW0NNT11%O2=M5B4NW0NNT11%O3=M5B4NW0NNT11%O4=M5B4NW0NNT11%O5=M5B4NW0NNT11%O6=M5B4NNT11)
WIN(W1=2000%W2=2000%W3=2000%W4=2000%W5=2000%W6=2000)
ECN(R=Y%DF=N%T=19-23%TG=20%W=2000%O=M5B4NW0%CC=N%Q=)
T1(R=Y%DF=N%T=19-23%TG=20%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=19-23%TG=20%W=2000%S=O%A=S+%F=AS%O=|M5B4NW0NNT11NNLLLLLLLLLL%RD=0%Q=)
T4(R=Y%DF=N%T=19-23%TG=20%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=19-23%TG=20%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=19-23%TG=20%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=19-23%TG=20%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=19-23%TG=20%IPL=38%UN=127|128%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=19-23%TG=20%CD=S)

# D-Link DGS-3324SR xStack 24-Port Layer3 Gigabit Stack Switch
# D-Link DES-3828 switch
Fingerprint D-Link DGS-3324SR, DSG-3612G, or DES-3828 switch
Class D-Link | embedded || switch
SEQ(SP=8B-95%GCD=1-6%ISR=91-9B%TI=I%II=RI%SS=O|S%TS=1)
OPS(O1=M5A4NW0NNT11%O2=M5A4NW0NNT11%O3=M5A4NW0NNT11%O4=M5A4NW0NNT11%O5=M5A4NW0NNT11%O6=M5A4NNT11)
WIN(W1=2000%W2=2000%W3=2000%W4=2000%W5=2000%W6=2000)
ECN(R=Y%DF=N%T=1A-24%TG=20%W=2000%O=M5A4NW0%CC=N%Q=)
T1(R=Y%DF=N%T=1A-24%TG=20%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=1A-24%TG=20%W=2000%S=O%A=S+%F=AS%O=M5A4NW0NNT11NNLLLLLLLLLL%RD=0%Q=)
T4(R=Y%DF=N%T=1A-24%TG=20%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=1A-24%TG=20%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=1A-24%TG=20%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=1A-24%TG=20%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=1A-24%TG=20%IPL=38%UN=128%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=100%TG=FF%CD=S)

# DGS-3450 switch; firmware 2.62B15
Fingerprint D-Link DGS-3450 switch
Class D-Link | embedded || switch
CPE cpe:/h:dlink:dgs-3450 auto
SEQ(SP=8D-97%GCD=1-6%ISR=92-9C%TI=RD%CI=I%II=RI%TS=1)
OPS(O1=NNT11|M5A4NW0NNT11%O2=NNT11|M5A4NW0NNT11%O3=NNT11|M5A4NW0NNT11%O4=NNT11|M5A4NW0NNT11%O5=NNT11|M5A4NW0NNT11%O6=NNT11|M5A4NNT11)
WIN(W1=2000%W2=2000%W3=2000%W4=2000%W5=2000%W6=2000)
ECN(R=Y%DF=N%T=1A-24%TG=20%W=2000%O=|M5A4NW0%CC=N%Q=)
T1(R=Y%DF=N%T=1A-24%TG=20%S=O%A=O|S+%F=A|AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=1A-24%TG=20%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=1A-24%TG=20%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=1A-24%TG=20%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=1A-24%TG=20%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=1A-24%TG=20%IPL=38%UN=128|45C%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=FB-105%TG=FF%CD=S)

# DGS-3610-26. OS is RGOS.
Fingerprint D-Link DGS-3610 switch
Class D-Link | embedded || switch
CPE cpe:/h:dlink:dgs-3610 auto
SEQ(SP=0-5%GCD=388|710|A98|E20|11A8%ISR=64-6E%TI=I%CI=I%II=I%SS=O|S%TS=U)
OPS(O1=M218%O2=M218%O3=M218%O4=M218%O5=M218%O6=M109)
WIN(W1=1000%W2=1000%W3=1000%W4=1000%W5=1000%W6=1000)
ECN(R=Y%DF=N%T=39-43%TG=40%W=1000%O=M218%CC=N%Q=)
T1(R=Y%DF=N%T=39-43%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=39-43%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
T3(R=N)
T4(R=Y%DF=N%T=39-43%TG=40%W=0%S=A%A=S%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=39-43%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=39-43%TG=40%W=0%S=A%A=S%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=39-43%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3A-44%TG=40%IPL=164%UN=FD28%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3A-44%TG=40%CD=S)

# DGS-3627G Gigabit Ethernet Switch, Firmware: Build 2.50.T31
Fingerprint D-Link DGS-3627G stack
Class D-Link | embedded || switch
SEQ(SP=8E-98%GCD=1-6%ISR=92-9C%TI=I|RD%II=RI%SS=O%TS=1)
OPS(O1=M5C2NW0NNT11%O2=M5C2NW0NNT11%O3=M5C2NW0NNT11%O4=M5C2NW0NNT11%O5=M5C2NW0NNT11%O6=M5C2NNT11)
WIN(W1=2000%W2=2000%W3=2000%W4=2000%W5=2000%W6=2000)
ECN(R=Y%DF=N%T=1A-24%TG=20%W=2000%O=M5C2NW0%CC=N%Q=)
T1(R=Y%DF=N%T=1A-24%TG=20%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=1A-24%TG=20%W=2000%S=O%A=S+%F=AS%O=M5C2NW0NNT11NNLLLLLLLLLL%RD=0%Q=)
T4(R=Y%DF=N%T=1A-24%TG=20%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=1A-24%TG=20%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=1A-24%TG=20%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=1A-24%TG=20%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=1A-24%TG=20%IPL=38%UN=128%RIPL=G%RID=G%RIPCK=G%RUCK=61F5%RUD=G)
IE(DFI=S%T=100%TG=FF%CD=S)

# DXS-3326GSR Stackable Ethernet Switch Firmware: Build 4.41-B16
Fingerprint D-Link DXS-3326GSR switch
Class D-Link | embedded || switch
CPE cpe:/h:dlink:dxs-3326gsr auto
SEQ(SP=8D-97%GCD=1-6%ISR=9F-A9%TI=I%II=RI%SS=S%TS=1)
OPS(O1=M5A4NW0NNT11%O2=M5A4NW0NNT11%O3=M5A4NW0NNT11%O4=M5A4NW0NNT11%O5=M5A4NW0NNT11%O6=M5A4NNT11)
WIN(W1=2000%W2=2000%W3=2000%W4=2000%W5=2000%W6=2000)
ECN(R=Y%DF=N%T=1A-24%TG=20%W=2000%O=M5A4NW0%CC=N)
T1(R=Y%DF=N%T=1A-24%TG=20%S=O%A=S+%F=AS%RD=0)
T2(R=N)
T3(R=Y%DF=N%T=1A-24%TG=20%W=2000%S=O%A=S+%F=AS%O=M5A4NW0NNT11NNLLLLLLLLLL%RD=0)
T4(R=Y%DF=N%T=1A-24%TG=20%W=0%S=A%A=Z%F=R%RD=0)
T5(R=Y%DF=N%T=1A-24%TG=20%W=0%S=Z%A=S+%F=AR%RD=0)
T6(R=Y%DF=N%T=1A-24%TG=20%W=0%S=A%A=Z%F=R%RD=0)
T7(R=Y%DF=N%T=1A-24%TG=20%W=0%S=Z%A=S%F=AR%RD=0)
U1(DF=N%T=1A-24%TG=20%IPL=38%UN=128%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=FB-105%TG=FF%CD=S)

# D-Link VoIP Gateway DVG-4022S
Fingerprint D-Link DVG-4022S VoIP adapter
Class D-Link | embedded || VoIP adapter
CPE cpe:/h:dlink:dvg-4022s auto
SEQ(SP=8F-99%GCD=1-6%ISR=92-9C%TI=I%II=RI%SS=O%TS=1)
OPS(O1=M5B4NW0NNT11%O2=M5B4NW0NNT11%O3=M5B4NW0NNT11%O4=M5B4NW0NNT11%O5=M5B4NW0NNT11%O6=M5B4NNT11)
WIN(W1=2000%W2=2000%W3=2000%W4=2000%W5=2000%W6=2000)
ECN(R=Y%DF=N%T=19-23%TG=20%W=2000%O=M5B4NW0%CC=N%Q=)
T1(R=Y%DF=N%T=19-23%TG=20%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=19-23%TG=20%W=2000%S=O%A=O|S+%F=A|AS%O=NNT11NNLLLLLLLLLN|M5B4NW0NNT11NNLLLLLLLLLN%RD=0%Q=)
T4(R=Y%DF=N%T=19-23%TG=20%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=19-23%TG=20%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=19-23%TG=20%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=19-23%TG=20%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=19-23%TG=20%IPL=38%UN=128%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=19-23%TG=20%CD=S)

# D-Link VoIP Router DVG-5112S, Firmware Version: GE_1.00
# D-Link DVG-6004S FXO VoIP Router Software Version No. [1.02.38.28]
Fingerprint D-Link DVG-5112S or DVG-6004S VoIP adapter
Class D-Link | embedded || VoIP adapter
SEQ(SP=BF-DB%GCD=1-6%ISR=CB-D5%TI=Z%CI=Z%II=RI%TS=7)
OPS(O1=M5B4ST11NW0%O2=M5B4ST11NW0%O3=M5B4NNT11NW0%O4=M5B4ST11NW0%O5=M5B4ST11NW0%O6=M5B4ST11)
WIN(W1=16A0%W2=16A0%W3=16A0%W4=16A0%W5=16A0%W6=16A0)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=16D0%O=M5B4NNSNW0%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=16A0%S=O%A=S+%F=AS%O=M5B4ST11NW0%RD=0%Q=)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=7B-85%TG=80%CD=S)

# D-Link DPH-150S VoIP phone
Fingerprint D-Link DPH-150S VoIP phone
Class D-Link | embedded || VoIP phone
CPE cpe:/h:dlink:dph-150s auto
SEQ(CI=Z)
OPS(O1=%O2=%O3=%O4=%O5=%O6=)
WIN(W1=0%W2=0%W3=0%W4=0%W5=0%W6=0)
ECN(R=Y%DF=Y%T=FA-104%TG=FF%W=0%O=%CC=N%Q=)
T1(R=Y%DF=Y%T=FA-104%TG=FF%S=Z%A=S+%F=AR%RD=0%Q=)
T2(R=Y%DF=Y%T=FA-104%TG=FF%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=Y%T=FA-104%TG=FF%W=0%S=Z%A=O%F=AR%O=%RD=0%Q=)
T4(R=Y%DF=Y%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=FA-104%TG=FF%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=FA-104%TG=FF%W=0%S=A|O%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=Y%T=FA-104%TG=FF%W=0%S=Z%A=O|S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=FA-104%TG=FF%CD=S)

# MFU: WorkCenter Pro 245
# D-Link DAP-1522
# XEROX WorkCentre 5665, system software 21.113.2.0, Net Controller Software 050.060.50812.
Fingerprint D-Link DAP-1522 WAP, or Xerox WorkCentre Pro 245 or 6556 printer
Class D-Link | embedded || WAP
CPE cpe:/h:dlink:dap-1522
Class Xerox | embedded || printer
CPE cpe:/h:xerox:workcentre_pro_245
CPE cpe:/h:xerox:workcentre_5665
SEQ(SP=C3-CF%GCD=1-6%ISR=C6-D0%TI=Z%CI=Z%II=I%TS=7)
OPS(O1=M5B4ST11NW0%O2=M5B4ST11NW0%O3=M5B4NNT11NW0%O4=M5B4ST11NW0%O5=M5B4ST11NW0%O6=M5B4ST11)
WIN(W1=16A0%W2=16A0%W3=16A0%W4=16A0%W5=16A0%W6=16A0)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=16D0%O=M5B4NNSNW0%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# D-Link WBR-2310 Hardware: A1 Firmware: 1.04
# D-Link DI-524
Fingerprint D-Link DI-524 or WBR-2310 wireless broadband router
Class D-Link | embedded || WAP
SEQ(SP=C-7E%GCD=FA7F|1F4FE|2EF7D|3E9FC|4E47B%ISR=97-E3%TI=I%II=I%SS=S%TS=U)
OPS(O1=M5B0%O2=M5B0%O3=M5B0%O4=M5B0%O5=M5B0%O6=M5B0)
WIN(W1=2000%W2=2000%W3=2000%W4=2000%W5=2000%W6=2000)
ECN(R=Y%DF=N%T=7F%TG=80%W=2000%O=M5B0%CC=N%Q=)
T1(R=Y%DF=N%T=7F%TG=80%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=7F%TG=80%W=2000%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=7F%TG=80%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=7F%TG=80%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=7F%TG=80%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=7F%TG=80%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=7F%TG=80%CD=S)

# D-Link DI-524 Wifi router
Fingerprint D-Link DI-524 WAP
Class D-Link | embedded || WAP
CPE cpe:/h:dlink:di-524 auto
SEQ(SP=0-3B%GCD=32|64|96|C8|FA%ISR=4B-55%TI=BI%CI=BI%II=BI%SS=S%TS=U)
OPS(O1=M5B4%O2=M5B4%O3=M5B4%O4=M5B4%O5=M5B4%O6=M5B4)
WIN(W1=16D0%W2=16D0%W3=16D0%W4=16D0%W5=16D0%W6=16D0)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=16D0%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# d-link Di-524
Fingerprint D-Link DI-524 wireless broadband router
Class D-Link | embedded || WAP
CPE cpe:/h:dlink:di-524 auto
SEQ(SP=0-5%GCD=64|C8|12C|190|1F4%ISR=4B-55%TI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4%O2=M5B4%O3=M5B4%O4=M5B4%O5=M5B4%O6=M5B4)
WIN(W1=16D0%W2=16D0%W3=16D0%W4=16D0%W5=16D0%W6=16D0)
ECN(R=Y%DF=N%T=7B-85%TG=80%W=16D0%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=7B-85%TG=80%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=7B-85%TG=80%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=7B-85%TG=80%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T4(R=Y%DF=N%T=7B-85%TG=80%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
T5(R=Y%DF=N%T=7B-85%TG=80%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=7B-85%TG=80%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
T7(R=Y%DF=N%T=7B-85%TG=80%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=7B-85%TG=80%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=7B-85%TG=80%CD=S)

# DI-524 wireless router running Firmware Version: 3.23 , Wed, 28 Jun 2006
Fingerprint D-Link DI-524 wireless broadband router
Class D-Link | embedded || WAP
CPE cpe:/h:dlink:di-524 auto
SEQ(SP=C-16%GCD=FA7F|1F4FE|2EF7D|3E9FC|4E47B%ISR=97-A1%TI=I%CI=RI%TS=U)
OPS(O1=M5B0%O2=M5B0%O3=M5B0%O4=M5B0%O5=M5B0%O6=M5B0)
WIN(W1=2000%W2=2000%W3=2000%W4=2000%W5=2000%W6=2000)
ECN(R=Y%DF=N%T=7B-85%TG=80%W=2000%O=M5B0%CC=N%Q=)
T1(R=Y%DF=N%T=7B-85%TG=80%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=7A69%S=A%A=S+%F=AR%O=WANM109T10S%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A|O%A=O|S%F=AR%O=%RD=0%Q=)
T7(R=N)
U1(R=N)
IE(R=N)

# Model: D-Link DI-604 Hardware version: D1 Firmware: V3.02
Fingerprint D-Link DI-604 wireless broadband router
Class D-Link | embedded || WAP
CPE cpe:/h:dlink:di-604 auto
SEQ(SP=0-5%GCD=64|C8|12C|190|1F4%ISR=4B-55%TI=BI%CI=BI%II=BI%SS=S%TS=U)
OPS(O1=M5B4%O2=M5B4%O3=M5B4%O4=M5B4%O5=M5B4%O6=M5B4)
WIN(W1=16D0%W2=16D0%W3=16D0%W4=16D0%W5=16D0%W6=16D0)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=0%O=%CC=N%Q=U)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# D-Link DI-604 Hardware Version: B2 Firmware Version: 1.80 (Apr 10, 2003)
Fingerprint D-Link DI-604 wireless broadband router
Class D-Link | embedded || WAP
CPE cpe:/h:dlink:di-604 auto
SEQ(SP=0-5%GCD=64|C8|12C|190|1F4%ISR=4B-55%TI=BI%CI=BI%II=BI%SS=S%TS=U)
OPS(O1=M5AC%O2=M5AC%O3=M5AC%O4=M5AC%O5=M5AC%O6=M5AC)
WIN(W1=16B0%W2=16B0%W3=16B0%W4=16B0%W5=16B0%W6=16B0)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=3%O=%CC=N%Q=U)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=3B-45%TG=40%W=80%S=Z%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=3B-45%TG=40%W=100%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T4(R=Y%DF=N%T=3B-45%TG=40%W=400%S=A%A=S%F=AR%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=7A69%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=8000%S=A%A=S%F=AR%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=FFFF%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# D-Link DI-604 provided by Verizon in about 2007 for residential FIOS.
Fingerprint D-Link DI-604 wireless broadband router
Class D-Link | embedded || WAP
CPE cpe:/h:dlink:di-604 auto
SEQ(SP=C-16%GCD=FA7F|1F4FE|2EF7D|3E9FC|4E47B%ISR=97-A1%TI=I%II=I%SS=S%TS=U)
OPS(O1=M5B0%O2=M5B0%O3=M5B0%O4=M5B0%O5=M5B0%O6=M5B0)
WIN(W1=2000%W2=2000%W3=2000%W4=2000%W5=2000%W6=2000)
ECN(R=Y%DF=N%T=7F%TG=80%W=2000%O=M5B0%CC=N%Q=)
T1(R=Y%DF=N%T=7F%TG=80%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=7F%TG=80%W=2000%S=O%A=O%F=A%O=%RD=0%Q=)
T4(R=N)
T5(R=Y%DF=N%T=7F%TG=80%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=N)
T7(R=N)
U1(DF=N%T=7F%TG=80%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=91CD%RUD=G)
IE(DFI=N%T=7F%TG=80%CD=S)

# D-Link Wireless Router / Access Point DI-714P+, firmware Version: V1.33
Fingerprint D-Link DI-714P+ wireless broadband router
Class D-Link | embedded || WAP
SEQ(SP=C-16%GCD=1F4|3E8|5DC|7D0|9C4%ISR=4B-55%TI=I%TS=U)
OPS(O1=M5B4%O2=M5B4%O3=M5B4%O4=M5B4%O5=M5B4%O6=M5B4)
WIN(W1=16D0%W2=16D0%W3=16D0%W4=16D0%W5=16D0%W6=16D0)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=16D0%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(R=N)

# D-Link DI-824VUP Wireless VPN Router Firmware Version: v1.05, Mon, Apr 25 2005
Fingerprint D-Link DI-824VUP Wireless VPN Router
Class D-Link | embedded || WAP
SEQ(SP=F-11%GCD=32|64|96|C8|FA|12C%ISR=4F-51%TI=I%TS=U)
OPS(O1=M5B4%O2=M5B4%O3=M5B4%O4=M5B4%O5=M5B4%O6=M5B4)
WIN(W1=16D0%W2=16D0%W3=16D0%W4=16D0%W5=16D0%W6=16D0)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=16D0%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(R=N)

# router D-Link Dir-300
Fingerprint D-Link DIR-300 WAP
Class D-Link | embedded || WAP
CPE cpe:/h:dlink:dir-300 auto
SEQ(SP=C9-D3%GCD=1-6%ISR=CA-D4%TI=Z%II=I%TS=8)
OPS(O1=M618ST11NW1%O2=M618ST11NW1%O3=M618NNT11NW1%O4=M618ST11NW1%O5=M618ST11NW1%O6=M618ST11)
WIN(W1=1224%W2=1224%W3=1224%W4=1224%W5=1224%W6=1224)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=1248%O=M618NNSNW1%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=N)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# D-Link DIR-300/NRU, Firmware v.2.05
Fingerprint D-Link DIR-300 WAP
Class D-Link | embedded || WAP
CPE cpe:/h:dlink:dir-300 auto
SEQ(SP=EC-10A%GCD=1-6%ISR=105-111%CI=Z%II=I%TS=21|22)
OPS(O1=M5B4NW3ST11%O2=M578NW3ST11%O3=M280NW3NNT11%O4=M5B4NW3ST11%O5=M218NW3ST11%O6=M109ST11)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M5B4NW3SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=16A0%S=O%A=S+%F=AS%O=M5B4ST11NW1%RD=0%Q=)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# Seano/EnGenius ESR-9752 wireless router with stock v1.1.3 firmware
# ENCORE 3G Wireless Router Hardware version: 1.1.0 Kernel version: 1.0.5
# Senao ESR-9752 300Mbps 802.11n Wireless SOHO Router
# D-Link DIR-615
Fingerprint D-Link DIR-615, Encore 3G, or EnGenius ESR-9752 WAP
Class D-Link | embedded || WAP
CPE cpe:/h:dlink:dir-615
Class Encore | embedded || WAP
CPE cpe:/h:encore:3g
Class EnGenius | embedded || WAP
CPE cpe:/h:engenius:esr-9752
SEQ(SP=C1-CB%GCD=1-6%ISR=C3-D5%TI=Z%CI=Z%II=I%TS=U)
OPS(O1=M5B4%O2=M5B4%O3=M5B4%O4=M5B4%O5=M5B4%O6=M5B4)
WIN(W1=5B4%W2=5B4%W3=5B4%W4=5B4%W5=5B4%W6=5B4)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=5B4%O=M5B4%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# D-Link DSR-1000N Firmware Version: 1.03B43_WW
Fingerprint D-Link DSR-1000N WAP
Class D-Link | embedded || WAP
CPE cpe:/h:dlink:dsr-1000n auto
SEQ(SP=C4-CE%GCD=1-6%ISR=C0-CA%TI=Z%CI=Z%II=I%TS=8)
OPS(O1=M5B4ST11NW4%O2=M5B4ST11NW4%O3=M5B4NNT11NW4%O4=M5B4ST11NW4%O5=M5B4ST11NW4%O6=M5B4ST11)
WIN(W1=16A0%W2=16A0%W3=16A0%W4=16A0%W5=16A0%W6=16A0)
ECN(R=Y%DF=Y%T=3C-46%TG=40%W=16D0%O=M5B4NNSNW4%CC=N)
T1(R=Y%DF=Y%T=3C-46%TG=40%S=O%A=S+%F=AS%RD=0)
T2(R=N)
T3(R=Y%DF=Y%T=3C-46%TG=40%W=16A0%S=O%A=S+%F=AS%O=M5B4ST11NW4%RD=0)
T4(R=Y%DF=Y%T=3C-46%TG=40%W=0%S=A%A=Z%F=R%RD=0)
T5(R=Y%DF=Y%T=3C-46%TG=40%W=0%S=Z%A=S+%F=AR%RD=0)
T6(R=Y%DF=Y%T=3C-46%TG=40%W=0%S=A%A=Z%F=R%RD=0)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# D-Link DWL-2100AP
Fingerprint D-Link DWL-2100AP wireless access point
Class D-Link | embedded || WAP
SEQ(SP=14-1E%GCD=FA00|1F400|2EE00|3E800|4E200%ISR=99-A3%TI=I%TS=1)
OPS(O1=M5B4NW0NNT11%O2=M5B4NW0NNT11%O3=M5B4NW0NNT11%O4=M5B4NW0NNT11%O5=M5B4NW0NNT11%O6=M5B4NNT11)
WIN(W1=2000%W2=2000%W3=2000%W4=2000%W5=2000%W6=2000)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=2000%O=M5B4NW0%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=7B-85%TG=80%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=7B-85%TG=80%W=0%S=Z%A=O%F=AR%O=%RD=0%Q=)
T4(R=Y%DF=N%T=7B-85%TG=80%W=0%S=A|O%A=O|S%F=AR%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=7B-85%TG=80%W=0%S=A|O%A=O|S%F=AR%O=%RD=0%Q=)
T7(R=Y%DF=N%T=7B-85%TG=80%W=0%S=Z%A=O|S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=I%RUCK=0%RUD=G)
IE(R=N)

# D-Link DWL-624+ WAN Router (Connected thru Wi-FI, default network configurations, no cryptography.)
#  d-link vdi-624 Airplus XtremeG 2.4GHz Wireless Router, firmware 2.43DDM 1/12/2005 (Wireless broadband router produced by D-Link for Verizon FIOS customers.  D-Link calls it a 'di-624' but this version (for Verizon FIOS customers) is called a 'vdi-624'.)
# TrendNet Wireless AP tew-432brp
# DI-624revD2 w/firmware 4.03
# D-Link DWL-2000AP, firmware 3.13, 16 Jun 2004
Fingerprint D-Link DWL-624+ or DWL-2000AP, or TRENDnet TEW-432BRP WAP
Class D-Link | embedded || WAP
CPE cpe:/h:dlink:dwl-624%2b
CPE cpe:/h:dlink:dwl-2000ap
Class TRENDnet | embedded || WAP
CPE cpe:/h:trendnet:tew-432brp auto
SEQ(R=N)
OPS(R=N)
WIN(R=N)
ECN(R=N)
T1(R=Y%DF=N%T=7A-84%TG=80%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=Y%DF=N%T=7A-84%TG=80%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=7A-84%TG=80%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=7A-84%TG=80%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=7A-84%TG=80%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=7A-84%TG=80%CD=S)

# d-link dwl 900ap access point
Fingerprint D-Link DWL-900AP WAP
Class D-Link | embedded || WAP
CPE cpe:/h:dlink:dwl-900ap auto
SEQ(SP=C9-D3%GCD=1-6%ISR=CD-D7%TI=Z%CI=Z%II=I%TS=7)
OPS(O1=M500ST11NW0%O2=M500ST11NW0%O3=M500NNT11NW0%O4=M500ST11NW0%O5=M500ST11NW0%O6=M500ST11)
WIN(W1=16A0%W2=16A0%W3=16A0%W4=16A0%W5=16A0%W6=16A0)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=16D0%O=M500NNSNW0%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=16A0%S=O%A=S+%F=AS%O=M500ST11NW0%RD=0%Q=)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# DWL-900AP+ Wireless Access Point
# USRobotics USR5450 802.11g Wireless Turbo Multi-Function Access Point. Running firmware version 1.53b10.
# PLANET WAP-1966
Fingerprint D-Link DWL-900AP+, Planet WAP-1966, or USRobotics USR5450 WAP
Class D-Link | embedded || WAP
CPE cpe:/h:dlink:dwl-9000ap%2b
Class Planet | embedded || WAP
CPE cpe:/h:planet:wap-1966
Class USRobotics | embedded || WAP
CPE cpe:/h:usrobotics:usr5450 auto
SEQ(SP=B-15%GCD=FA7F|1F4FE|2EF7D|3E9FC|4E47B|5DEFA%ISR=96-A0%TI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4%O2=M5B4%O3=M5B4%O4=M5B4%O5=M5B4%O6=M5B4)
WIN(W1=2000%W2=2000%W3=2000%W4=2000%W5=2000%W6=2000)
ECN(R=Y%DF=N%T=7F%TG=80%W=2000%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=7F%TG=80%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=7F%TG=80%W=2000%S=O%A=O%F=A%O=%RD=0%Q=)
T4(R=Y%DF=N%T=7F%TG=80%W=2000%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=7F%TG=80%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=7F%TG=80%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=7F%TG=80%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=7F%TG=80%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=7F%TG=80%CD=S)

# DWL-G710
Fingerprint D-Link DWL-G710 WAP
Class D-Link | embedded || WAP
CPE cpe:/h:dlink:dwl-g710 auto
SEQ(CI=1%II=1)
OPS(O1=M5A8NW0NNT11%O2=M5A8NW0NNT11%O3=M5A8NW0NNT11%O4=M5A8NW0NNT11%O5=M5A8NW0NNT11%O6=M5A8NNT11)
WIN(W1=43E0%W2=4110%W3=423C%W4=43E0%W5=4180%W6=403D)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=4470%O=M5B4NW0%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=3B-45%TG=40%W=403D%S=O%A=S+%F=AS%O=M5A8NW0NNT11%RD=0%Q=)
T4(R=Y%DF=N%T=3B-45%TG=40%W=4000%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=3401%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# D-Link DWL-G810 Wlan/Ethernet Bridge
Fingerprint D-Link DWL-G810 WAP
Class D-Link | embedded || WAP
CPE cpe:/h:dlink:dwl-g810 auto
SEQ(SP=C-16%GCD=FA7F|1F4FE|2EF7D|3E9FC|4E47B%ISR=97-A1%TI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4%O2=M5B4%O3=M5B4%O4=M5B4%O5=M5B4%O6=M5B4)
WIN(W1=2000%W2=2000%W3=2000%W4=2000%W5=2000%W6=2000)
ECN(R=Y%DF=N%T=7A-84%TG=80%W=2000%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=7A-84%TG=80%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=7A-84%TG=80%W=2000%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=7A-84%TG=80%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=7A-84%TG=80%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=7A-84%TG=80%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=7A-84%TG=80%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=7A-84%TG=80%CD=S)

# D-Link DCS-2103
Fingerprint D-Link DCS-2103 webcam
Class D-Link | embedded || webcam
CPE cpe:/h:dlink:dcs-2103 auto
SEQ(SP=B1-D1%GCD=1-6%ISR=B8-D4%TI=Z%II=I%TS=7)
OPS(O1=M400CST11NW7%O2=M400CST11NW7%O3=M400CNNT11NW7%O4=M400CST11NW7%O5=M400CST11NW7%O6=M400CST11)
WIN(W1=8000%W2=8000%W3=8000%W4=8000%W5=8000%W6=8000)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=8018%O=M400CNNSNW7%CC=Y%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=N)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=6C53%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# DCS-5300G  >  High Speed 2.4GHz (802.11g) Wireless Internet Camera
# D-Link DCS-3220
Fingerprint D-Link DCS-3220 or DCS-5300G webcam
Class D-Link | embedded || webcam
SEQ(SP=0-21%GCD=A|14|1E|28|32|64|C8|12C|190|1F4%ISR=4B-55%TI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4%O2=M5B4%O3=M5B4%O4=M5B4%O5=M5B4%O6=M5B4)
WIN(W1=16D0%W2=16D0%W3=16D0%W4=16D0%W5=16D0%W6=16D0)
ECN(R=N)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=Y%DF=N%T=3B-45%TG=40%W=7A69%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=8000%S=A%A=S%F=AR%O=%RD=0%Q=)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# D-LINK DCS-3220 2-way Audio Internet Camera
Fingerprint D-Link DCS-3220 webcam
Class D-Link | embedded || webcam
CPE cpe:/h:dlink:dcs-3220 auto
SEQ(SP=0-16%GCD=A|14|1E|28|32|64|C8|12C|190|1F4%ISR=4B-55%TI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4%O2=M5B4%O3=M5B4%O4=M5B4%O5=M5B4%O6=M5B4)
WIN(W1=16D0%W2=16D0%W3=16D0%W4=16D0%W5=16D0%W6=16D0)
ECN(R=N)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=3B-45%TG=40%W=100%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T4(R=N)
T5(R=Y%DF=N%T=3B-45%TG=40%W=7A69%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=8000%S=A%A=S%F=AR%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=FFFF%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# Linksys BEFSR41 V3 Cable/DSL Router (Firmware Version: 1.05.00)
# it is actually a DCS-6620G wireless IP camera
Fingerprint D-Link DCS-6620G webcam or Linksys BEFSR41 EtherFast router
Class D-Link | embedded || webcam
CPE cpe:/h:dlink:dcs-6620g auto
Class Linksys | embedded || router
CPE cpe:/h:linksys:befsr41
SEQ(R=N)
OPS(R=N)
WIN(R=N)
ECN(R=N)
T1(R=Y%DF=N%T=91-9B%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=91-9B%TG=FF%W=100%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T4(R=N)
T5(R=Y%DF=N%T=91-9B%TG=FF%W=7A69%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=91-9B%TG=FF%W=8000%S=A%A=S%F=AR%O=%RD=0%Q=)
T7(R=Y%DF=N%T=91-9B%TG=FF%W=FFFF%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=91-9B%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=91-9B%TG=FF%CD=S)

# D-Link DSL-G624T ADSL Router, Linux version 2.4.17_mvl21-malta-mips_fp_le (root@Jackal) (gcc version 2.95.3 20010315 (release/MontaVista))
# DG834G V4.01.19
# ADSL Modem Router Netgear DG834Bv3 V4.01.27
Fingerprint D-Link DSL-G624T wireless ADSL router (MontaVista embedded Linux 2.4.17), or Netgear DG834Bv3 ADSL router or DG834G WAP
Class D-Link | Linux | 2.4.X | WAP
CPE cpe:/o:dlink:linux_kernel:2.4 auto
Class Netgear | embedded || broadband router
CPE cpe:/h:netgear:dg834bv3 auto
Class Netgear | embedded || WAP
CPE cpe:/h:netgear:dg834bv3 auto
SEQ(SP=C4-CE%GCD=1-6%ISR=C9-D3%TI=Z%II=I%TS=7|8|9)
OPS(O1=NNT11|M5B4ST11NW0%O2=NNT11|M5B4ST11NW0%O3=NNT11|M5B4NNT11NW0%O4=NNT11|M5B4ST11NW0%O5=NNT11|M5B4ST11NW0%O6=NNT11|M5B4ST11)
WIN(W1=16A0%W2=16A0%W3=16A0%W4=16A0%W5=16A0%W6=16A0)
ECN(R=Y%DF=Y%T=3B-45|FA-104%TG=40|FF%W=16D0%O=|M5B4NNSNW0%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45|FA-104%TG=40|FF%S=O%A=O|S+%F=A|AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%T=3B-45|FA-104%TG=40|FF%W=16A0%S=O%A=O|S+%F=A|AS%O=NNT11|M5B4ST11NW0%RD=0%Q=)
T4(R=Y%DF=Y%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=FA-104%TG=FF%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=Y%T=FA-104%TG=FF%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=I%RUCK=G%RUD=G)
IE(DFI=N%T=FA-104%TG=FF%CD=S)

# Linux 2.4.18-MIPS-01.00 (davidhsu@LNX103) (gcc version 3.3.3) #8 Mon Mar 20 14:34:57 CST 2006, D-Link DWL-G700AP wireless access point, with firmware version v2.13.
Fingerprint D-Link DWL-G700AP WAP (Linux 2.4.18)
Class D-Link | Linux | 2.4.X | WAP
CPE cpe:/o:dlink:linux_kernel:2.4 auto
SEQ(SP=C3-CD%GCD=1-6%ISR=C6-D0%TI=Z%CI=Z%TS=7)
OPS(O1=M5B4ST11NW0%O2=M5B4ST11NW0%O3=M5B4NNT11NW0%O4=M5B4ST11NW0%O5=M5B4ST11NW0%O6=M5B4ST11)
WIN(W1=16A0%W2=16A0%W3=16A0%W4=16A0%W5=16A0%W6=16A0)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=16D0%O=M5B4NNSNW0%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=16A0%S=O%A=O|S+%F=AS%O=M5B4ST11NW0%RD=0%Q=)
T4(R=Y%DF=Y%T=FA-104%TG=FF%W=0%S=A|O%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=FA-104%TG=FF%W=0%S=Z%A=O|S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=FA-104%TG=FF%W=0%S=A|O%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=Y%T=FA-104%TG=FF%W=0%S=Z%A=O|S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=6401%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=I)
IE(DFI=N%T=FA-104%TG=FF%CD=S)

# DNS-323 NAS
# Linux 2.6.12.6-arm1 #32 Wed Jun 24 15:19:48 CST 2009 armv5tejl unknown
Fingerprint D-Link DNS-323 NAS device (Linux 2.6.12)
Class D-Link | Linux | 2.6.X | storage-misc
CPE cpe:/o:dlink:linux_kernel:2.6 auto
SEQ(SP=C3-CF%GCD=1-6%ISR=C9-D3%TI=Z%CI=I%II=I%TS=7)
OPS(O1=MB94ST11NW1%O2=MB94ST11NW1%O3=MB94NNT11NW1%O4=MB94ST11NW1%O5=MB94ST11NW1%O6=MB94ST11)
WIN(W1=2298%W2=2298%W3=2298%W4=2298%W5=2298%W6=2298)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=22BC%O=MB94NNSNW1%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=2298%S=O%A=S+%F=AS%O=MB94ST11NW1%RD=0%Q=)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# DNS-323 Network Attached Storage
# Linux 2.6.12.6-arm1 #30 Mon Aug 18 14:19:14 CST 2008 armv5tejl unknown, D-Link DNS-323 NAS enclosure running firmware 1.0.6
# Linux 2.6.12.6-arm1 #47 Mon Nov 30 12:06:02 CST 2009 armv5tejl unknown, DNS-323 Firmware 1.09
Fingerprint D-Link DNS-323 NAS device (Linux 2.6.12)
Class D-Link | Linux | 2.6.X | storage-misc
CPE cpe:/o:dlink:linux_kernel:2.6 auto
SEQ(SP=BD-D5%GCD=1-6%ISR=C3-CF%TI=Z%CI=I|RD%II=I%TS=7)
OPS(O1=M2304ST11NW1%O2=M2304ST11NW1%O3=M2304NNT11NW1%O4=M2304ST11NW1%O5=M2304ST11NW1%O6=M2304ST11)
WIN(W1=45F0%W2=45F0%W3=45F0%W4=45F0%W5=45F0%W6=45F0)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=4608%O=M2304NNSNW1%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=45F0%S=O%A=S+%F=AS%O=M2304ST11NW1%RD=0%Q=)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# D-Link DIR-645 router/switch/AP
# D-Link DIR-645 broadband router/access point/ethernet switch, Linux 2.6.33.2, Firmware 1.02b12
Fingerprint Linux 2.6.33 (D-Link DIR-645 WAP)
Class D-Link | Linux | 2.6.X | WAP
CPE cpe:/o:dlink:dir-645
CPE cpe:/o:dlink:linux:2.6.33
SEQ(SP=BA-D0%GCD=1-6%ISR=C5-DB%TI=Z%CI=Z%II=I%TS=8)
OPS(O1=M5B4ST11NW1%O2=M5B4ST11NW1%O3=M5B4NNT11NW1%O4=M5B4ST11NW1%O5=M5B4ST11NW1%O6=M5B4ST11)
WIN(W1=16A0%W2=16A0%W3=16A0%W4=16A0%W5=16A0%W6=16A0)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=16D0%O=M5B4NNSNW1%CC=Y)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0)
T2(R=N)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=16A0%S=O%A=S+%F=AS%O=M5B4ST11NW1%RD=0)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%RD=0)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%RD=0)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%RD=0)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# dgux agaviion R4.11MU06 generic AViiON mc88110, Data General 8540 running the following operating system "DG/UX Release R4.11MU06"
Fingerprint Data General DG/UX 4.11MU06
Class Data General | DG/UX | 4.X | general purpose
CPE cpe:/o:data_general:dg%2fux:4.11mu06
SEQ(SP=C-42%GCD=10000|20000|30000|40000|50000%ISR=98-AC%TI=I|RD%CI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4%O2=M5B4%O3=M5B4%O4=M5B4%O5=M5B4%O6=M5B4)
WIN(W1=2238%W2=20D0%W3=2080%W4=2238%W5=2180%W6=2229)
ECN(R=Y%DF=N%T=FA-104%TG=FF%W=2238%O=M5B4%CC=N)
T1(R=Y%DF=N%T=FA-104%TG=FF%S=O%A=S+%F=AS%RD=0)
T2(R=N)
T3(R=Y%DF=N%T=FA-104%TG=FF%W=2225%S=O%A=O%F=A%RD=0)
T4(R=Y%DF=N%T=FA-104%TG=FF%W=2238%S=A%A=Z%F=R%RD=0)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=Z%A=S+%F=AR%RD=0)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%RD=0)
T7(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=Z%A=S%F=AR%RD=0)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=Z%RUCK=0%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# barcode pistol (datalogic kyman) with windows CE 5.0
# Symbol, Mobile computer used in warehouse environments, Windows CE 5.0
Fingerprint Datalogic Kyman barcode scanner (Windows CE 5.0)
Class Datalogic | Windows | PocketPC/CE | specialized
CPE cpe:/o:datalogic:windows_ce auto
SEQ(SP=74-94%GCD=1-6%ISR=93-9D%TI=I%CI=I%II=I%SS=S%TS=0)
OPS(O1=M5B4NW0NNT00NNS%O2=M5B4NW0NNT00NNS%O3=M5B4NW0NNT00%O4=M5B4NW0NNT00NNS%O5=M5B4NW0NNT00NNS%O6=)
WIN(W1=832C%W2=8340%W3=8200%W4=81D0%W5=81D0%W6=0)
ECN(R=Y%DF=N%T=7B-85%TG=80%W=0%O=%CC=N%Q=)
T1(R=Y%DF=Y%T=7B-85%TG=80%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=7B-85%TG=80%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=7B-85%TG=80%W=0%S=Z%A=O%F=AR%O=%RD=0%Q=)
T4(R=Y%DF=N%T=7B-85%TG=80%W=0%S=A%A=O%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=7B-85%TG=80%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=7B-85%TG=80%W=0%S=A%A=O%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=7B-85%TG=80%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=7B-85%TG=80%IPL=B0%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=7B-85%TG=80%CD=Z)

# DECserver716, Network Access SW V3.6 BL01 , HW=V1.2 , RO=V7.3-0, LAT V5.1, LOAD IMAGE: WWENG2
Fingerprint DECserver716 (DNAS 3.6)
Class DEC | DECserver | 3.X | general purpose
CPE cpe:/h:dec:decserver716
CPE cpe:/o:dec:dnas:3.6
SEQ(SP=10-1A%GCD=FA00|1F400|2EE00|3E800|4E200%ISR=97-A1%TI=I%CI=I%II=I%SS=S%TS=U)
OPS(O1=M200%O2=M200%O3=M200%O4=M200%O5=M200%O6=M200)
WIN(W1=600%W2=600%W3=600%W4=600%W5=600%W6=600)
ECN(R=Y%DF=N%T=19-23%TG=20%W=600%O=M200%CC=N%Q=)
T1(R=Y%DF=N%T=19-23%TG=20%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=19-23%TG=20%W=600%S=O%A=O%F=A%O=%RD=0%Q=)
T4(R=Y%DF=N%T=19-23%TG=20%W=600%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=19-23%TG=20%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=19-23%TG=20%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=19-23%TG=20%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=Z%RUCK=0%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# OSF1 v4.0 1229 on DEC ALPHA
Fingerprint DEC Digital UNIX OSF1 v4.0 1229
Class DEC | Digital UNIX | 4.X | general purpose
CPE cpe:/o:dec:digital_unix:4 auto
SEQ(SP=E4-EE%GCD=1-6%ISR=FE-108%TI=I%II=I%SS=S%TS=0)
OPS(O1=M5B4NW0NNT00NNS%O2=M5B4NW0NNT00NNS%O3=M5B4NW0NNT00%O4=M5B4NW0NNT00NNS%O5=M5B4NW0NNT00NNS%O6=M5B4NNT00NNS)
WIN(W1=4470%W2=41A0%W3=4100%W4=40E8%W5=40E8%W6=402E)
ECN(R=Y%DF=N%T=7C-86%TG=80%W=4470%O=M5B4NW0NNS%CC=N%Q=|U)
T1(R=Y%DF=N%T=7C-86%TG=80%S=O%A=S+%F=AS%RD=0%Q=|U)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=Y%DF=N%T=3B-3D%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-3D%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=25A3%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# DEC Digital UNIX 4.X
# DEC Digital UNIX 4.X (AlphaServer 1000A 5/400 Digital UNIX V4.0F (Rev. 1229))
Fingerprint DEC Digital UNIX v4.0F
Class DEC | Digital UNIX | 4.X | general purpose
CPE cpe:/o:dec:digital_unix:4 auto
SEQ(SP=91-9B%GCD=1-6%ISR=98-A2%TI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4NW0%O2=M5B4NW0%O3=M5B4NW0%O4=M5B4NW0%O5=M5B4NW0%O6=M5B4)
WIN(W1=832C%W2=8340%W3=8200%W4=8000%W5=81D0%W6=805C)
ECN(R=Y%DF=Y%T=3B-3D%TG=40%W=832C%O=M5B4NW0%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-3D%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%T=3B-3D%TG=40%W=805C%S=O%A=O%F=A%O=%RD=0%Q=)
T4(R=Y%DF=N%T=3B-3D%TG=40%W=8000%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-3D%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-3D%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-3D%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# DEC Digital UNIX 5.X
Fingerprint DEC Digital UNIX 5.X
Class DEC | Digital UNIX | 5.X | general purpose
CPE cpe:/o:dec:digital_unix:5 auto
SEQ(SP=DB-E9%GCD=10|20|30|40|50%ISR=103-10D%II=I%TS=U)
OPS(O1=M5B4NW0%O2=M5B4NW0%O3=M5B4NW0%O4=M5B4NW0%O5=M5B4NW0%O6=M5B4)
WIN(W1=F000%W2=F000%W3=F000%W4=F000%W5=F000%W6=F000)
ECN(R=N)
T1(R=Y%DF=N%T=3B-3D%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=3D-47%TG=40%W=400%S=A%A=S%F=AR%O=%RD=0%Q=)
T5(R=Y%DF=N|Y%T=3B-3D%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3D-47%TG=40%W=8000%S=A%A=S%F=AR%O=%RD=0%Q=)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# OSF1 V5.0 910 alpha, DEC 3000/600 workstation/server with 175MHz alpha CPU, 96MB RAM
# OpenVMS 7.2 for Alpha processors
Fingerprint DEC Digital UNIX OSF1 v5.0 910 or OpenVMS 7.2
Class DEC | Digital UNIX | 5.X | general purpose
CPE cpe:/o:dec:digital_unix:5 auto
Class DEC | OpenVMS | 7.X | general purpose
CPE cpe:/o:dec:openvms:7 auto
SEQ(SP=91-9B%GCD=1-6%ISR=99-A3%TI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4NW0%O2=M5B4NW0%O3=M5B4NW0%O4=M5B4NW0%O5=M5B4NW0%O6=M5B4)
WIN(W1=832C%W2=8340%W3=8200%W4=8000%W5=81D0%W6=805C)
ECN(R=Y%DF=N%T=3B-3D%TG=40%W=832C%O=M5B4NW0%CC=N%Q=)
T1(R=Y%DF=N%T=3B-3D%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=3B-3D%TG=40%W=805C%S=O%A=O%F=A%O=%RD=0%Q=)
T4(R=Y%DF=N%T=3B-3D%TG=40%W=8000%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-3D%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-3D%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-3D%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# DEC OpenVMS V7.1-2
# DEC OpenVMS V7.1
Fingerprint DEC OpenVMS 7.1
Class DEC | OpenVMS | 7.X | general purpose
CPE cpe:/o:dec:openvms:7 auto
SEQ(SP=E-18%GCD=FA00|1F400|2EE00|3E800|4E200%ISR=98-A2%TI=I%II=I%SS=S%TS=U)
OPS(O1=%O2=%O3=%O4=%O5=%O6=)
WIN(W1=1000%W2=1000%W3=1000%W4=1000%W5=1000%W6=1000)
ECN(R=Y%DF=N%T=7B-85%TG=80%W=1000%O=%CC=N%Q=)
T1(R=Y%DF=N%T=7B-85%TG=80%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=7B-85%TG=80%W=1000%S=O%A=O%F=A%O=%RD=0%Q=)
T4(R=Y%DF=N%T=7B-85%TG=80%W=1000%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=7B-85%TG=80%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=7B-85%TG=80%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=7B-85%TG=80%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=4210%RIPCK=Z%RUCK=G%RUD=G)
IE(DFI=N%T=FA-104%TG=FF%CD=S)

# OpenVMS (TM) VAX Operating System, Version V7.1
Fingerprint DEC OpenVMS 7.1
Class DEC | OpenVMS | 7.X | general purpose
CPE cpe:/o:dec:openvms:7 auto
SEQ(SP=C-36%GCD=FA00|1F400|2EE00|3E800|4E200%ISR=97-AD%TI=I%II=I%SS=S%TS=U)
OPS(O1=M5B0W0N%O2=M5B0W0N%O3=M5B0W0N%O4=M5B0W0N%O5=M5B0W0N%O6=M5B0)
WIN(W1=1000%W2=1000%W3=1000%W4=1000%W5=1000%W6=1000)
ECN(R=Y%DF=N%T=7B-85%TG=80%W=1000%O=M5B0W0N%CC=N)
T1(R=Y%DF=N%T=7B-85%TG=80%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=7B-85%TG=80%W=1000%S=O%A=O%F=A%RD=0)
T4(R=Y%DF=N%T=7B-85%TG=80%W=1000%S=A%A=Z%F=R%RD=0)
T5(R=Y%DF=N%T=7B-85%TG=80%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=7B-85%TG=80%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=7B-85%TG=80%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=1042%RIPCK=Z%RUCK=G%RUD=G)
IE(DFI=N%T=FA-104%TG=FF%CD=S)

# OpenVMS (TM) Alpha Operating System, Version V7.1-1H2
Fingerprint DEC OpenVMS 7.1
Class DEC | OpenVMS | 7.X | general purpose
CPE cpe:/o:dec:openvms:7 auto
SEQ(SP=C-16%GCD=FA00|1F400|2EE00|3E800|4E200%ISR=97-A1%TI=I%II=I%SS=S%TS=U)
OPS(O1=M5B0W0N%O2=M5B0W0N%O3=M5B0W0N%O4=M5B0W0N%O5=M5B0W0N%O6=M5B0)
WIN(W1=1000%W2=1000%W3=1000%W4=1000%W5=1000%W6=1000)
ECN(R=Y%DF=N%T=7B-85%TG=80%W=1000%O=M5B0W0N%CC=N)
T1(R=Y%DF=N%T=7B-85%TG=80%S=O%A=O|S+%F=AS%RD=0)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=7B-85%TG=80%W=1000%S=A%A=Z%F=R%RD=0)
T5(R=Y%DF=N%T=7B-85%TG=80%W=0%S=Z%A=S+%F=AR%RD=0)
T6(R=Y%DF=N%T=7B-85%TG=80%W=0%S=A%A=Z%F=R%RD=0)
T7(R=N)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=1042%RIPCK=Z%RUCK=G%RUD=G)
IE(DFI=N%T=FA-104%TG=FF%CD=S)

# OpenVMS/VAX V7.3-1 on a DEC VAXstation 4000 Model 60
Fingerprint DEC OpenVMS 7.3-1
Class DEC | OpenVMS | 7.X | general purpose
CPE cpe:/o:dec:openvms:7 auto
SEQ(SP=33-87%GCD=20|40|60|80|A0%ISR=95-9F%TI=I%CI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4NW0%O2=M5B4NW0%O3=M5B4NW0%O4=M5B4NW0%O5=M5B4NW0%O6=M5B4)
WIN(W1=111C%W2=1068%W3=C80%W4=BB8%W5=C90%W6=C6C)
ECN(R=Y%DF=N%T=37-41%TG=40%W=111C%O=M5B4NW0%CC=N%Q=)
T1(R=Y%DF=N%T=37-41%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=37-41%TG=40%W=C6C%S=O%A=O%F=A%O=%RD=0%Q=)
T4(R=N)
T5(R=Y%DF=Y%T=37-41%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=37-41%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=Y%T=37-41%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# OSF1 V4.0 1229 alpha
Fingerprint DEC OSF/1 V4.0
Class DEC | OSF/1 | 4.X | general purpose
CPE cpe:/o:dec:osf_1:4 auto
SEQ(SP=8E-9E%GCD=1-6%ISR=99-A3%TI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4NW0%O2=M5B4NW0%O3=M5B4NW0%O4=M5B4NW0%O5=M5B4NW0%O6=M5B4)
WIN(W1=832C%W2=8340%W3=8200%W4=8000%W5=81D0%W6=805C)
ECN(R=Y%DF=Y%T=37-41%TG=40%W=832C%O=M5B4NW0%CC=N%Q=)
T1(R=Y%DF=Y%T=37-41%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=Y%DF=N%T=37-41%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=N)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# OSF1 V5.1 2650 alpha
Fingerprint DEC OSF/1 V5.1
Class DEC | OSF/1 | 5.X | general purpose
CPE cpe:/o:dec:osf_1:5 auto
SEQ(SP=DA-E4%GCD=10|20|30|40|50%ISR=106-110%TI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4NW0%O2=M5B4NW0%O3=M5B4NW0%O4=M5B4NW0%O5=M5B4NW0%O6=M5B4)
WIN(W1=F000%W2=F000%W3=F000%W4=F000%W5=F000%W6=F000)
ECN(R=Y%DF=N%T=7B-85%TG=80%W=F000%O=M5B4NW0%CC=N%Q=)
T1(R=Y%DF=N%T=7B-85%TG=80%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=Y%DF=N%T=7B-85%TG=80%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=N)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# ESX-11M-PLUS V4.6
Fingerprint DEC RSX-11M-PLUS 4.6
Class DEC | RSX-11M-PLUS | 4.X | general purpose
CPE cpe:/o:dec:rsx_11m_plus:4 auto
SEQ(SP=EA-102%GCD=1-6%ISR=F3-FD%TI=BI%CI=BI%II=BI%SS=S%TS=U)
OPS(O1=M5B4%O2=M5B4%O3=M5B4%O4=M5B4%O5=M5B4%O6=M5B4)
WIN(W1=16D0%W2=16D0%W3=16D0%W4=16D0%W5=16D0%W6=16D0)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=16D0%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=3B-45%TG=40%W=16D0%S=O%A=S+%F=AS%O=M5B4%RD=0%Q=)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=FA-104%TG=FF%CD=Z)

# OS name is "RSX-11M-PLUS"
Fingerprint DEC RSX-11M-PLUS
Class DEC | RSX-11M-PLUS || general purpose
CPE cpe:/o:dec:rsx-11m-plus
SEQ(SP=0-1D%GCD=10001|20002|30003|40004|50005%ISR=A8-B2%TI=BI%CI=BI%II=BI%SS=S%TS=U)
OPS(O1=M5B4%O2=M578%O3=M280%O4=M5B4%O5=M218%O6=M109)
WIN(W1=FDD%W2=FDD%W3=FDD%W4=FDD%W5=FDD%W6=FDD)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=FDD%O=M5B4%CC=N)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0)
T2(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%RD=0)
T3(R=Y%DF=N%T=3B-45%TG=40%W=FDD%S=O%A=S+%F=AS%O=M109%RD=0)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=S%F=AR%RD=0)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%RD=0)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=S%F=AR%RD=0)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%RD=0)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=FA-104%TG=FF%CD=Z)

# tops-20 running in emulation on klh
Fingerprint DEC TOPS-20
Class DEC | TOPS-20 || general purpose
CPE cpe:/o:dec:tops_20 auto
SEQ(SP=E-18%GCD=30000|60000|90000|C0000|F0000%ISR=97-A1%TI=I%II=RI%SS=O|S%TS=U)
OPS(O1=|M5B4%O2=|M5B4%O3=|M5B4%O4=|M5B4%O5=|M5B4%O6=M5B4)
WIN(W1=0|5B4%W2=0|5B4%W3=0|5B4%W4=0|5B4%W5=0|5B4%W6=5B4)
ECN(R=Y%DF=N%T=FA-104%TG=FF%W=5B4%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=FA-104%TG=FF%S=O|Z%A=S+%F=AR|AS%RD=0%Q=)
T2(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=FA-104%TG=FF%W=5B4%S=O%A=O|S+%F=AS%O=M5B4%RD=0%Q=)
T4(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=914|915|916|918|919%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# ULTRIX 4.0 on VAX (Running on emulated microVAX 3900 using simh-vax)
Fingerprint DEC Ultrix 4.0
Class DEC | Ultrix | 4.X | general purpose
CPE cpe:/o:dec:ultrix:4 auto
SEQ(SP=2-32%GCD=FA00|1F400|2EE00|3E800|4E200%ISR=99-AD%TI=I|RD%CI=I%II=I%SS=S%TS=U)
OPS(O1=M400%O2=M400%O3=M400%O4=M400%O5=M400%O6=|M400)
WIN(W1=1000%W2=1000%W3=1000%W4=1000%W5=1000%W6=1000)
ECN(R=Y%DF=N%T=37-41%TG=40%W=1000%O=|M400%CC=N%Q=)
T1(R=Y%DF=N%T=37-41%TG=40%S=O%A=O|S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=37-41%TG=40%W=1000%S=O%A=O%F=A|AR%O=%RD=0%Q=)
T4(R=Y%DF=N%T=37-41%TG=40%W=1000%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=37-41%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=37-41%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=37-41%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=4210%RIPCK=Z%RUCK=0%RUD=G)
IE(DFI=N%T=FA-104%TG=FF%CD=S)

# ULTRIX 4.5 for VAX (running on an emulated MicroVAX 3900, using simh-vax)
Fingerprint DEC Ultrix 4.5
Class DEC | Ultrix | 4.X | general purpose
CPE cpe:/o:dec:ultrix:4 auto
SEQ(SP=0-32%GCD=FA00|1F400|2EE00|3E800|4E200%ISR=96-A8%TI=I%CI=I%II=I%SS=S%TS=U)
OPS(O1=M400%O2=M400%O3=M400%O4=M400%O5=M400%O6=M400)
WIN(W1=4000%W2=4000%W3=4000%W4=4000%W5=4000%W6=4000)
ECN(R=Y%DF=N%T=37-41%TG=40%W=4000%O=M400%CC=N%Q=)
T1(R=Y%DF=N%T=37-41%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=37-41%TG=40%W=4000%S=O%A=O%F=A|AR%O=%RD=0%Q=)
T4(R=Y%DF=N%T=37-41%TG=40%W=4000%S=A|O%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=37-41%TG=40%W=0%S=Z%A=O|S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=37-41%TG=40%W=0%S=A|O%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=37-41%TG=40%W=0%S=Z%A=O|S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=4210%RIPCK=Z%RUCK=0%RUD=G)
IE(DFI=N%T=FA-104%TG=FF%CD=S)

# ULTRIX/VAX V4.5 (Rev. 47)
Fingerprint DEC Ultrix 4.5
Class DEC | Ultrix | 4.X | general purpose
CPE cpe:/o:dec:ultrix:4 auto
SEQ(SP=C-16%GCD=FA00|1F400|2EE00|3E800|4E200%ISR=97-A1%TI=I%CI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4%O2=M5B4%O3=M5B4%O4=M5B4%O5=M5B4%O6=M5B4)
WIN(W1=4000%W2=4000%W3=4000%W4=4000%W5=4000%W6=4000)
ECN(R=Y%DF=N%T=37-41%TG=40%W=4000%O=M5B4%CC=N)
T1(R=Y%DF=N%T=37-41%TG=40%S=O%A=S+%F=AS%RD=0)
T2(R=N)
T3(R=Y%DF=N%T=37-41%TG=40%W=4000%S=O%A=O%F=A%RD=0)
T4(R=Y%DF=N%T=37-41%TG=40%W=4000%S=A%A=Z%F=R%RD=0)
T5(R=Y%DF=N%T=37-41%TG=40%W=0%S=Z%A=S+%F=AR%RD=0)
T6(R=Y%DF=N%T=37-41%TG=40%W=0%S=A%A=Z%F=R%RD=0)
T7(R=Y%DF=N%T=37-41%TG=40%W=0%S=Z%A=S%F=AR%RD=0)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=4210%RIPCK=Z%RUCK=0%RUD=G)
IE(DFI=N%T=FA-104%TG=FF%CD=S)

# Decru Datafort FW version 3.0P1
Fingerprint Decru Datafort firewall
Class Decru | embedded || firewall
SEQ(SP=EE-10A%GCD=1-6%ISR=106-110%TI=I%II=I%SS=S%TS=7)
OPS(O1=M5B4NW0NNT11NNS%O2=M5B4NW0NNT11NNS%O3=M5B4NW0NNT11%O4=M5B4NW0NNT11NNS%O5=M5B4NW0NNT11NNS%O6=M5B4NNT11NNS)
WIN(W1=E000%W2=E000%W3=E000%W4=E000%W5=E000%W6=E000)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=E000%O=M5B4NW0NNS%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N|Y%T=3B-45%TG=40%W=E000%S=O%A=O|S+%F=AS%O=M5B4NW0NNT11NNS%RD=0%Q=)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Dell Color Laser 1320c
Fingerprint Dell 1320c printer
Class Dell | embedded || printer
CPE cpe:/h:dell:1320c auto
SEQ(SP=B-15%GCD=FA00|1F400|2EE00|3E800|4E200%ISR=96-A0%TI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4%O2=M5B4%O3=M5B4%O4=M5B4%O5=M5B4%O6=M5B4)
WIN(W1=3000%W2=3000%W3=3000%W4=3000%W5=3000%W6=3000)
ECN(R=Y%DF=N%T=1B-25%TG=20%W=3000%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=1B-25%TG=20%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=1B-25%TG=20%W=3000%S=O%A=O%F=A%O=%RD=0%Q=)
T4(R=Y%DF=N%T=1B-25%TG=20%W=3000%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=1B-25%TG=20%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=1B-25%TG=20%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=1B-25%TG=20%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(R=N)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# Dell Laser Printer 1600n
Fingerprint Dell 1600n printer
Class Dell | embedded || printer
CPE cpe:/h:dell:1600n auto
SEQ(SP=0-5%GCD=FA00|1F400|2EE00|3E800|4E200%ISR=95-9F%TI=I%II=I%SS=O%TS=U)
OPS(O1=M5B4%O2=M5B4%O3=M5B4%O4=M5B4%O5=%O6=)
WIN(W1=1000%W2=1000%W3=1000%W4=1000%W5=1000%W6=1000)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=1000%O=%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=O|S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=3B-45%TG=40%W=1000%S=Z%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=3B-45%TG=40%W=1000%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T4(R=Y%DF=N%T=3B-45%TG=40%W=1000%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=Z%RUCK=0%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# Dell Laser Printer 1720dn
Fingerprint Dell 1720dn printer
Class Dell | embedded || printer
CPE cpe:/h:dell:1720dn auto
SEQ(SP=C3-CD%GCD=1-6%ISR=C9-D3%TI=Z%II=I%TS=A)
OPS(O1=M5B4ST11NW1%O2=M5B4ST11NW1%O3=M5B4NNT11NW1%O4=M5B4ST11NW1%O5=M5B4ST11NW1%O6=M5B4ST11)
WIN(W1=B50%W2=B50%W3=B50%W4=B50%W5=B50%W6=B50)
ECN(R=Y%DF=Y%T=F9-103%TG=FF%W=B68%O=M5B4NNSNW1%CC=N%Q=)
T1(R=Y%DF=Y%T=F9-103%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=Y%DF=Y%T=F9-103%TG=FF%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=N)
T7(R=N)
U1(DF=N%T=F9-103%TG=FF%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=F9-103%TG=FF%CD=S)

# Lexmark E250dn, Kernel  EC.KA.K127b-0
# Dell Laser Printer 1720dn
# Lexmark E352dn
Fingerprint Dell 1720dn, or Lexmark E250dn or E352dn printer
Class Dell | embedded || printer
CPE cpe:/h:dell:1720dn
Class Lexmark | embedded || printer
CPE cpe:/h:lexmark:e250dn auto
CPE cpe:/h:lexmark:e352dn auto
SEQ(SP=AE-D2%GCD=1-6%ISR=C1-D7%TI=Z%CI=I%II=I%TS=A)
OPS(O1=M5B4ST11NW1%O2=M5B4ST11NW1%O3=M5B4NNT11NW1%O4=M5B4ST11NW1%O5=M5B4ST11NW1%O6=M5B4ST11)
WIN(W1=B50%W2=B50%W3=B50%W4=B50%W5=B50%W6=B50)
ECN(R=Y%DF=Y%T=FE%TG=FF%W=B68%O=M5B4NNSNW1%CC=N%Q=)
T1(R=Y%DF=Y%T=FE%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%T=FE%TG=FF%W=B50%S=O%A=S+%F=AS%O=M5B4ST11NW1%RD=0%Q=)
T4(R=Y%DF=Y%T=FE%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=FE%TG=FF%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=FE%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=Y%T=FE%TG=FF%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FE%TG=FF%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=FE%TG=FF%CD=S)

# Dell 1815dn Printer
Fingerprint Dell 1815dn printer
Class Dell | embedded || printer
CPE cpe:/h:dell:1815dn auto
SEQ(SP=C-16%GCD=FA00|1F400|2EE00|3E800|4E200|5DC00%ISR=97-A1%TI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4%O2=M5B4%O3=M5B4%O4=M5B4%O5=M5B4%O6=M5B4)
WIN(W1=1000%W2=1000%W3=1000%W4=1000%W5=1000%W6=1000)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=1000%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=3B-45%TG=40%W=1000%S=O%A=O%F=A%O=%RD=0%Q=)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=Z%RUCK=0%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# Dell Laser Printer 2335dn, Network Firmware Version is V4.01.24(2335dn MFP) 11-21-2008.
# Dell 2335dn mono laser printer
# dell MFP 2335dn Printer.
Fingerprint Dell 2335dn printer
Class Dell | embedded || printer
CPE cpe:/h:dell:2335dn auto
SEQ(SP=0-5%GCD=FA01|1F402|2EE03|3E804|4E205%ISR=95-9F%TI=I%II=I%SS=S%TS=U)
OPS(O1=NNM5B4SNW0%O2=NNM5B4SNW0%O3=M5B4NW0%O4=NNM5B4SNW0%O5=NNM5B4SNW0%O6=NNM5B4S)
WIN(W1=4000%W2=4000%W3=4000%W4=4000%W5=4000%W6=4000)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=4000%O=NNM5B4SNW0%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S+%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S+%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=Z%A=S+%F=R%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=138%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=Z)

# InfoPrint 1832
# Lexmark T-612 printer
# Lexmark C544dn Printer
# Lexmark T650
# Lexmark X464de network printer
# Dell 2350dn
Fingerprint Dell 2350dn, IBM InfoPrint 1832; or Lexmark C544dn, T612, T650, or X464de printer
Class Dell | embedded || printer
CPE cpe:/h:dell:2350dn
Class IBM | embedded || printer
CPE cpe:/h:ibm:infoprint_1832
Class Lexmark | embedded || printer
SEQ(SP=BB-CD%GCD=1-6%ISR=C0-D8%TI=Z%CI=Z%II=I%TS=A)
OPS(O1=M5B4ST11NW1%O2=M5B4ST11NW1%O3=M5B4NNT11NW1%O4=M5B4ST11NW1%O5=M5B4ST11NW1%O6=M5B4ST11)
WIN(W1=B50%W2=B50%W3=B50%W4=B50%W5=B50%W6=B50)
ECN(R=Y%DF=Y%T=FE%TG=FF%W=B68%O=M5B4NNSNW1%CC=N%Q=)
T1(R=Y%DF=Y%T=FE%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%T=FE%TG=FF%W=B50%S=O%A=S+%F=AS%O=M5B4ST11NW1%RD=0%Q=)
T4(R=Y%DF=Y%T=FE%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=FE%TG=FF%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=FE%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=Y%T=FE%TG=FF%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FE%TG=FF%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=FE%TG=FF%CD=S)

# Dell 3000 Printer
Fingerprint Dell 3000 printer
Class Dell | embedded || printer
CPE cpe:/h:dell:3000 auto
SEQ(R=N)
OPS(O1=M5B4%O2=|M5B4%O3=%O4=%O5=%O6=)
WIN(W1=3000%W2=3000%W3=3000%W4=3000%W5=3000%W6=3000)
ECN(R=Y%DF=N%T=19-23%TG=20%W=3000%O=%CC=N%Q=)
T1(R=Y%DF=N%T=19-23%TG=20%S=O%A=O|S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=19-23%TG=20%W=3000%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T4(R=Y%DF=N%T=19-23%TG=20%W=3000%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=19-23%TG=20%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=19-23%TG=20%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=19-23%TG=20%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=4E4%RID=G%RIPCK=Z%RUCK=G%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# Dell 3100cn Laser Printer
Fingerprint Dell 3100cn printer
Class Dell | embedded || printer
CPE cpe:/h:dell:3100cn auto
SEQ(SP=C-16%GCD=FA00|1F400|2EE00|3E800|4E200%ISR=97-A1%TI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4%O2=M5B4%O3=M5B4%O4=M5B4%O5=M5B4%O6=M5B4)
WIN(W1=3000%W2=3000%W3=3000%W4=3000%W5=3000%W6=3000)
ECN(R=Y%DF=N%T=19-23%TG=20%W=3000%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=19-23%TG=20%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=19-23%TG=20%W=3000%S=O%A=O%F=A%O=%RD=0%Q=)
T4(R=Y%DF=N%T=19-23%TG=20%W=3000%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=19-23%TG=20%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=19-23%TG=20%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=19-23%TG=20%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=4E4%RID=G%RIPCK=I%RUCK=G%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# Dell Laser Printer 3100cn V6.26
# Dell Color Laser 3110cn printer.
# Xerox Phaser 6180DN
# Dell MFP Laser 3115cn
Fingerprint Dell 3100cn-series or Xerox Phaser 6180DN printer
Class Dell | embedded || printer
CPE cpe:/h:dell:3100cn
CPE cpe:/h:dell:3110cn
CPE cpe:/h:dell:3115cn
Class Xerox | embedded || printer
CPE cpe:/h:xerox:phaser_6180dn
SEQ(SP=0-16%GCD=FA00|1F400|2EE00|3E800|4E200|5DC00%ISR=97-A1%TI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4%O2=M5B4%O3=M5B4%O4=M5B4%O5=M5B4%O6=M5B4)
WIN(W1=3000%W2=3000%W3=3000%W4=3000%W5=3000%W6=3000)
ECN(R=Y%DF=N%T=19-23%TG=20%W=3000%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=19-23%TG=20%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=19-23%TG=20%W=3000%S=O%A=O%F=A%O=%RD=0%Q=)
T4(R=Y%DF=N%T=19-23%TG=20%W=3000%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=19-23%TG=20%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=19-23%TG=20%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=19-23%TG=20%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=4E4%RID=G%RIPCK=Z%RUCK=G%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# Lexmark T642 Printer
# Lexmark T644 (Network Printer)
# Lexmark T640
# Dell 5210n laser printer
# Lexmark C534dn color laser printer
# Lexmark C530, Firmware Version: NSF.NP.N016
Fingerprint Dell 5210n or Lexmark C530-series, T640, T642, or T644 printer
Class Dell | embedded || printer
CPE cpe:/h:dell:5210n
Class Lexmark | embedded || printer
CPE cpe:/h:lexmark:c530
CPE cpe:/h:lexmark:t640
CPE cpe:/h:lexmark:t642
CPE cpe:/h:lexmark:t644
SEQ(SP=BA-D1%GCD=1-6%ISR=CB-D5%TI=Z%II=I%TS=A)
OPS(O1=M5B4ST11NW0%O2=M5B4ST11NW0%O3=M5B4NNT11NW0%O4=M5B4ST11NW0%O5=M5B4ST11NW0%O6=M5B4ST11)
WIN(W1=B50%W2=B50%W3=B50%W4=B50%W5=B50%W6=B50)
ECN(R=Y%DF=Y%T=FE%TG=FF%W=B68%O=M5B4NNSNW0%CC=N%Q=)
T1(R=Y%DF=Y%T=FE%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%T=FE%TG=FF%W=B50%S=O%A=S+%F=AS%O=M5B4ST11NW0%RD=0%Q=)
T4(R=Y%DF=Y%T=FE%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=FE%TG=FF%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=FE%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=Y%T=FE%TG=FF%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FE%TG=FF%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=FE%TG=FF%CD=S)

# Dell Remote Access Controller 4/I
# Remote Access Controller (RAC) Version 3.38
Fingerprint Dell Embedded Remote Access (ERA) Controller 3.38 or 4/I
Class Dell | embedded || remote management
CPE cpe:/h:dell:remote_access_card:3.38
CPE cpe:/h:dell:remote_access_card:4
SEQ(SP=FD-109%GCD=1-6%ISR=FF-10D%TI=RD|RI%II=RI%SS=S%TS=U)
OPS(O1=M5B4%O2=M5B4%O3=M5B4%O4=M5B4%O5=M5B4%O6=M5B4)
WIN(W1=1000%W2=1000%W3=1000%W4=1000%W5=1000%W6=1000)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=1000%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=3B-45%TG=40%W=1000%S=O%A=O%F=A%O=%RD=0%Q=)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=Z%RUCK=G%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# Dell Remote Access Controller 4/I (DRAC 4/I) Version 1.35 (Build 09.27)
# Dell Remote Access Controller 4/I (DRAC 4/I) Version 1.33 (Build 08.04)
Fingerprint Dell Embedded Remote Access (ERA) Controller 4/I
Class Dell | embedded || remote management
CPE cpe:/h:dell:remote_access_card:4
SEQ(SP=F9-10A%GCD=1-6%ISR=102-110%TI=RD|RI%CI=RD|RI%II=RI%SS=S%TS=U)
OPS(O1=%O2=%O3=%O4=%O5=%O6=)
WIN(W1=1000%W2=1000%W3=1000%W4=1000%W5=1000%W6=1000)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=1000%O=%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=3B-45%TG=40%W=1000%S=O%A=O%F=A%O=%RD=0%Q=)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=Z%RUCK=G%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# Dell Remote access Controller (DRAC) 5.0
Fingerprint Dell Integrated Remote Access Controller (iDRAC5)
Class Dell | embedded || remote management
CPE cpe:/h:dell:remote_access_card:5
SEQ(SP=BE-C8%GCD=1-6%ISR=C5-CF%TI=Z%CI=Z%II=I%TS=7)
OPS(O1=M578ST11NW0%O2=M578ST11NW0%O3=M578NNT11NW0%O4=M578ST11NW0%O5=M578ST11NW0%O6=M578ST11)
WIN(W1=16A0%W2=16A0%W3=16A0%W4=16A0%W5=16A0%W6=16A0)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=16D0%O=M578NNSNW0%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# Dell iDRAC6 Express remote access controller firmware revision 1.20 (Probably Linux --Ed.)
Fingerprint Dell Integrated Remote Access Controller (iDRAC6)
Class Dell | embedded || remote management
CPE cpe:/h:dell:remote_access_card:6
SEQ(SP=B5-E1%GCD=1-6%ISR=C7-DD%TI=Z%CI=Z%II=I%TS=7)
OPS(O1=M45FST11NW2%O2=M45FST11NW2%O3=M45FNNT11NW2%O4=M45FST11NW2%O5=M45FST11NW2%O6=M45FST11)
WIN(W1=16A0%W2=16A0%W3=16A0%W4=16A0%W5=16A0%W6=16A0)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=16D0%O=M45FNNSNW2%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# Dell iDRAC 6 Enterprise, firmware 1.90 (Build 09).
Fingerprint Dell Integrated Remote Access Controller (iDRAC6)
Class Dell | embedded || remote management
CPE cpe:/h:dell:remote_access_card:6
SEQ(SP=FD-107%GCD=1-6%ISR=FF-113%TI=Z%CI=RD%II=I%TS=7)
OPS(O1=M564ST11NW2%O2=M564ST11NW2%O3=M564NNT11NW2%O4=M564ST11NW2%O5=M564ST11NW2%O6=M564ST11)
WIN(W1=16A0%W2=16A0%W3=16A0%W4=16A0%W5=16A0%W6=16A0)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=16D0%O=M564NNSNW2%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=Y%T=3B-45%TG=40%W=80%S=A%A=S+%F=AR%O=WANM109T10S%RD=0%Q=)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=400%S=A%A=S+%F=AR%O=WANM109T10S%RD=0%Q=)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=O%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=8000%S=A%A=S+%F=AR%O=WANM109T10S%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=FFFF%S=A%A=S+%F=AR%O=WFNM109T10S%RD=0%Q=)
U1(R=N)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# DELL DRAC 6 Enterprise controller
Fingerprint Dell Integrated Remote Access Controller (iDRAC6)
Class Dell | embedded || remote management
SEQ(SP=CA-D4%GCD=1-6%ISR=D0-DA%TI=Z%CI=Z%II=I%TS=7)
OPS(O1=M555ST11NW2%O2=M555ST11NW2%O3=M555NNT11NW2%O4=M555ST11NW2%O5=M555ST11NW2%O6=M555ST11)
WIN(W1=16A0%W2=16A0%W3=16A0%W4=16A0%W5=16A0%W6=16A0)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=16D0%O=M555NNSNW2%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=16A0%S=O%A=S+%F=AS%O=M555ST11NW2%RD=0%Q=)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# Dell iDRAC 7 Enterprise, firmware 1.20.20 (Build 24)
Fingerprint Dell Integrated Remote Access Controller (iDRAC7)
Class Dell | embedded || remote management
CPE cpe:/h:dell:remote_access_card:7
SEQ(SP=FD-107%GCD=1-6%ISR=105-10F%TI=Z%CI=RD%II=I%TS=7)
OPS(O1=M564ST11NW4%O2=M564ST11NW4%O3=M564NNT11NW4%O4=M564ST11NW4%O5=M564ST11NW4%O6=M564ST11)
WIN(W1=16A0%W2=16A0%W3=16A0%W4=16A0%W5=16A0%W6=16A0)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=16D0%O=M564NNSNW4%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=Y%T=3B-45%TG=40%W=80%S=A%A=S+%F=AR%O=WANM109T10S%RD=0%Q=)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=400%S=A%A=S+%F=AR%O=WANM109T10S%RD=0%Q=)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=O%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=8000%S=A%A=S+%F=AR%O=WANM109T10S%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=FFFF%S=A%A=S+%F=AR%O=WFNM109T10S%RD=0%Q=)
U1(R=N)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# PowerEdge 2650
Fingerprint Dell PowerEdge 2650 server Embedded Remote Access (ERA)
Class Dell | embedded || remote management
CPE cpe:/h:dell:poweredge_2650
SEQ(SP=F8-108%GCD=1-6%ISR=FC-110%TI=RD|RI%II=RI%SS=O|S%TS=U)
OPS(O1=%O2=%O3=%O4=%O5=%O6=)
WIN(W1=1000%W2=1000%W3=1000%W4=1000%W5=1000%W6=1000)
ECN(R=Y%DF=N%T=41%TG=40%W=1000%O=%CC=N%Q=)
T1(R=Y%DF=N%T=41%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=41%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
T3(R=N)
T4(R=Y%DF=N%T=41%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=41%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=41%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=41%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=100%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=Z%RUCK=G%RUD=G)
IE(DFI=S%T=100%TG=FF%CD=S)

# Dell Remote Access Controller 5 (DRAC 5), Firmware Version 1.40 (Build 08.08.22)
Fingerprint Dell Remote Access Controller (DRAC 5)
Class Dell | embedded || remote management
CPE cpe:/h:dell:remote_access_card:6
SEQ(SP=C4-CE%GCD=1-6%ISR=C5-D3%TI=Z%CI=RD%II=I%TS=7)
OPS(O1=M578ST11NW0|M5B4ST11NW4%O2=M578ST11NW0|M5B4ST11NW4%O3=M578NNT11NW0|M5B4NNT11NW4%O4=M578ST11NW0|M5B4ST11NW4%O5=M578ST11NW0|M5B4ST11NW4%O6=M578ST11|M5B4ST11)
WIN(W1=16A0%W2=16A0%W3=16A0%W4=16A0%W5=16A0%W6=16A0)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=16D0%O=M578NNSNW0|M5B4NNSNW4%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=3C-46%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=3C-46%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T4(R=Y%DF=N%T=3C-46%TG=40%W=0%S=A%A=S%F=R%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3C-46%TG=40%W=0%S=A%A=S%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3C-46%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# Integrated Dell Remote Access Controller 6 - Enterprise"
Fingerprint Dell Remote Access Controller (DRAC 6)
Class Dell | embedded || remote management
CPE cpe:/h:dell:remote_access_card:6
SEQ(SP=CF-105%GCD=1-6%ISR=DB-103%TI=Z%II=I%TS=7|9)
OPS(O1=M564NNT11NW2%O2=M564NNT11NW2%O3=M564NNT11NW2%O4=M564NNT11NW2%O5=M564NNT11NW2%O6=M564NNT11)
WIN(W1=16A0%W2=16A0%W3=16A0%W4=16A0%W5=16A0%W6=16A0)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=16D0%O=M564NW2%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=O%A=S+%F=AR%O=%RD=0%Q=)
T6(R=N)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# Dell Integrated Dell Remote Access Controller 6 - Enterprise Version 1.95
Fingerprint Dell Remote Access Controller (DRAC 6)
Class Dell | embedded || remote management
CPE cpe:/h:dell:remote_access_card:6
SEQ(SP=FB-105%GCD=1-6%ISR=FA-104%TI=Z%II=I%TS=7)
OPS(O1=M564ST11NW2%O2=M564ST11NW2%O3=M564NNT11NW2%O4=M564ST11NW2%O5=M564ST11NW2%O6=M564ST11)
WIN(W1=16A0%W2=16A0%W3=16A0%W4=16A0%W5=16A0%W6=16A0)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=16D0%O=M564NNSNW2%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=O%A=S+%F=AR%O=%RD=0%Q=)
T6(R=N)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# 'Dell Remote Assistance Card 4' or 'DRAC4' in short, running firmware version 1.60.
# Dell Remote Access Controller 4/I
Fingerprint Dell Remote Access Controller 4 (DRAC 4)
Class Dell | embedded || remote management
CPE cpe:/h:dell:remote_access_card:4
SEQ(SP=102-10C%GCD=1-6%ISR=100-10E%TI=RD|RI%II=RI%TS=U)
OPS(O1=M5B4%O2=M5B4%O3=M5B4%O4=M5B4%O5=M5B4%O6=M5B4)
WIN(W1=1000%W2=1000%W3=1000%W4=1000%W5=1000%W6=1000)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=1000%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
T3(R=N)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=Z%RUCK=G%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# Dell Remote Access Controller 4/I, on a PowerEdge 2850 server.
Fingerprint Dell Remote Access Controller 4/I
Class Dell | embedded || remote management
CPE cpe:/h:dell:remote_access_card:4
SEQ(SP=FC-108%GCD=1-6%ISR=FA-10E%TI=RD|RI%II=RI%SS=O|S%TS=U)
OPS(O1=%O2=%O3=%O4=%O5=%O6=)
WIN(W1=1000%W2=1000%W3=1000%W4=1000%W5=1000%W6=1000)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=1000%O=%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=3B-45%TG=40%W=1000%S=O%A=O%F=A%O=%RD=0%Q=)
T4(R=N)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=N)
T7(R=N)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=Z%RUCK=G%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# DRAC 4
Fingerprint Dell Remote Access Controller 4/I
Class Dell | embedded || remote management
CPE cpe:/h:dell:remote_access_card:4
SEQ(SP=FE-108%GCD=1-6%ISR=107-111%TI=RD|RI%TS=U)
OPS(O1=M5B4%O2=M5B4%O3=M5B4%O4=M5B4%O5=M5B4%O6=M5B4)
WIN(W1=1000%W2=1000%W3=1000%W4=1000%W5=1000%W6=1000)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=1000%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=O|S+%F=AR%O=%RD=0%Q=)
T6(R=N)
T7(R=N)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=Z%RUCK=G%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# Dell DRAC 5/i remote management card
Fingerprint Dell Remote Access Controller 5/I (DRAC 5/I)
Class Dell | embedded || remote management
CPE cpe:/h:dell:remote_access_card:5
SEQ(SP=B9-C9%GCD=1-6%ISR=C4-D0%TI=Z%II=I%TS=7)
OPS(O1=M56CST11NW0%O2=M56CST11NW0%O3=M56CNNT11NW0%O4=M56CST11NW0%O5=M56CST11NW0%O6=M56CST11)
WIN(W1=16A0%W2=16A0%W3=16A0%W4=16A0%W5=16A0%W6=16A0)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=16D0%O=M56CNNSNW0%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=N)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# Remote Access Controller 5 (DRAC 5) Version 1.60
Fingerprint Dell Remote Access Controller 5/I (DRAC 5/I)
Class Dell | embedded || remote management
CPE cpe:/h:dell:remote_access_card:5
SEQ(SP=BD-C7%GCD=1-6%ISR=C5-CF%TI=Z%II=I%TS=7)
OPS(O1=M574ST11NW0%O2=M574ST11NW0%O3=M574NNT11NW0%O4=M574ST11NW0%O5=M574ST11NW0%O6=M574ST11)
WIN(W1=16A0%W2=16A0%W3=16A0%W4=16A0%W5=16A0%W6=16A0)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=16D0%O=M574NNSNW0%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=N)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# Dell Equallogic PS4000XV
# PS3000 SAN
Fingerprint Dell EqualLogic PeerStorage PS3000 or PS4000 NAS device
Class Dell | embedded || storage-misc
CPE cpe:/h:dell:equallogic_ps3000
CPE cpe:/h:dell:equallogic_ps4000
SEQ(SP=CE-DE%GCD=1-6%ISR=E0-EA%TI=I%CI=I%II=I%SS=S%TS=0)
OPS(O1=M5B4NW0NNT01%O2=M578NW0NNT01%O3=M280NW0NNT01%O4=M5B4NW0NNT01%O5=M218NW0NNT01%O6=M109NNT01)
WIN(W1=4000%W2=4000%W3=4000%W4=4000%W5=4000%W6=4000)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=4000%O=M5B4NW0%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=4000%S=O%A=S+%F=AS%O=M109NW0NNT01%RD=0%Q=)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# Dell Equallogic PS4000X iSCSI storage controller
Fingerprint Dell EqualLogic PeerStorage PS4000X NAS device
Class Dell | embedded || storage-misc
CPE cpe:/h:dell:equallogic_ps4000x
SEQ(SP=C5-D3%GCD=1-6%ISR=E4-EE%TI=I%CI=I%II=I%SS=S%TS=0)
OPS(O1=M5B4NW5NNT01%O2=M578NW5NNT01%O3=M280NW5NNT01%O4=M2300NW5NNT01%O5=M218NW5NNT01%O6=M109NNT01)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M5B4NW5%CC=N)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0)
T2(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%RD=0)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%S=O%A=S+%F=AS%O=M109NW5NNT01%RD=0)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%RD=0)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%RD=0)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%RD=0)
T7(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%RD=0)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# Dell PowerVault 124T LTO-3 Autoloader
# Dell PowerVault 124T (LTO3 tape device with autoloader)
Fingerprint Dell PowerVault 124T LTO-3 tape autoloader
Class Dell | embedded || storage-misc
CPE cpe:/h:dell:powervault_124t
SEQ(SP=C-16%GCD=FA7F|1F4FE|2EF7D|3E9FC|4E47B%ISR=97-A1%TI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4%O2=M5B4%O3=M5B4%O4=M5B4%O5=M5B4%O6=M5B4)
WIN(W1=2000%W2=2000%W3=2000%W4=2000%W5=2000%W6=2000)
ECN(R=Y%DF=N%T=19-23%TG=20%W=2000%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=19-23%TG=20%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=19-23%TG=20%W=2000%S=O%A=O%F=A%O=%RD=0%Q=)
T4(R=Y%DF=N%T=19-23%TG=20%W=2000%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=19-23%TG=20%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=19-23%TG=20%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=19-23%TG=20%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=19-23%TG=20%IPL=38%UN=50|2AE2|A930|FFFF%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=19-23%TG=20%CD=S)

# Dell Powervault 132T tape library
Fingerprint Dell PowerVault 132T tape library
Class Dell | embedded || storage-misc
CPE cpe:/h:dell:powervault_132t
SEQ(SP=14-1E%GCD=FA00|1F400|2EE00|3E800|4E200%ISR=99-A3%TI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4NW0%O2=M5B4NW0%O3=M5B4NW0%O4=M5B4NW0%O5=M5B4NW0%O6=M5B4)
WIN(W1=578%W2=578%W3=578%W4=578%W5=578%W6=578)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=578%O=M5B4NW0%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=3B-45%TG=40%W=578%S=O%A=O%F=A%O=%RD=0%Q=)
T4(R=Y%DF=N%T=3B-45%TG=40%W=578%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=4210%RIPCK=Z%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Dell PowerVault 705N (NAS Appliance)
Fingerprint Dell PowerVault 705N NAS appliance
Class Dell | embedded || storage-misc
CPE cpe:/h:dell:powervault_705n
SEQ(SP=C-16%GCD=3200|6400|9600|C800|FA00%ISR=97-A1%TI=I%TS=U)
OPS(O1=M5B4%O2=M5B4%O3=M5B4%O4=M5B4%O5=M5B4%O6=M5B4)
WIN(W1=2238%W2=2238%W3=2238%W4=2238%W5=2238%W6=2238)
ECN(R=Y%DF=N%T=19-23%TG=20%W=2238%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=19-23%TG=20%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=19-23%TG=20%W=2238%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=19-23%TG=20%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=19-23%TG=20%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=N)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=4210%RIPCK=Z%RUCK=0%RUD=G)
IE(R=N)

# Dell MD3000i
# TP-Link TL-WR340GD router 4.3.3 Build 090812 Rel.61475n
Fingerprint Dell PowerVault MD3000i NAS appliance or TP-Link TL-WR340GD WAP
Class Dell | embedded || storage-misc
CPE cpe:/h:dell:powervault_md3000i
Class TP-Link | embedded || WAP
CPE cpe:/h:tp-link:tl-wr340gd
SEQ(SP=94-9E%GCD=1-6%ISR=9B-A5%TI=I%CI=I%TS=1)
OPS(O1=M5B4NW0NNT11%O2=M5B4NW0NNT11%O3=M5B4NW0NNT11%O4=M5B4NW0NNT11%O5=M5B4NW0NNT11%O6=M5B4NNT11)
WIN(W1=2000%W2=2000%W3=2000%W4=2000%W5=2000%W6=2000)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=2000%O=M5B4NW0%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=3B-45%TG=40%W=2000%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=Z%RUCK=0%RUD=G)
IE(R=N)

# IBM TS3200 Tape Library.
# Dell PowerVault 2000 TL2000 Tape Library
Fingerprint Dell PowerVault TL2000 or IBM System Storage TS3200 Express Model tape library
Class Dell | embedded || storage-misc
CPE cpe:/h:dell:tl2000
Class IBM | embedded || storage-misc
CPE cpe:/h:ibm:ts3200
SEQ(SP=FC-10C%GCD=1-6%ISR=104-112%TI=I%CI=I%II=I%SS=S%TS=7)
OPS(O1=M5A8SW0T11N%O2=M5A8SW0T11N%O3=M5A8W0T11NNN%O4=M5A8SW0T11N%O5=M5A8SW0T11N%O6=M5A8ST11)
WIN(W1=3E80%W2=3E80%W3=3E80%W4=3E80%W5=3E80%W6=3E80)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=3E80%O=M5B4SW0NNN%CC=N)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0)
T2(R=N)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=3E80%S=O%A=S+%F=AS%O=M5A8SW0T11N%RD=0)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%RD=0)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%RD=0)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%RD=0)
T7(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%RD=0)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# PowerConnect 2708
Fingerprint Dell PowerConnect 2708 switch
Class Dell | embedded || switch
CPE cpe:/h:dell:powerconnect_2708 auto
SEQ(SP=C-16%GCD=A|14|1E|28|32%ISR=1D-27%TI=I%CI=I%II=RI%SS=O%TS=U)
OPS(O1=M5B4%O2=M5B4%O3=M5B4%O4=M5B4%O5=M5B4%O6=M5B4)
WIN(W1=8000%W2=8000%W3=8000%W4=8000%W5=8000%W6=8000)
ECN(R=Y%DF=N%T=FA-104%TG=FF%W=8000%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=FA-104%TG=FF%S=O%A=O|S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=FA-104%TG=FF%W=80%S=A%A=S+%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=FA-104%TG=FF%W=100%S=A%A=S+%F=AR%O=%RD=0%Q=)
T4(R=Y%DF=N%T=FA-104%TG=FF%W=400%S=A%A=S+%F=AR%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=7A69%S=A%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=8000%S=A%A=S+%F=AR%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FA-104%TG=FF%W=FFFF%S=A%A=S+%F=AR%O=%RD=0%Q=)
U1(R=N)
IE(DFI=S%T=1B-25|3B-45%TG=20|40%CD=S)

# DELL PowerConnect 2724, firmware 1.0.0.44
Fingerprint Dell PowerConnect 2724 switch
Class Dell | embedded || switch
CPE cpe:/h:dell:powerconnect_2724
SEQ(SP=C-16%GCD=A|14|1E|28|32%ISR=1E-28%TI=I%CI=I%II=RI%SS=O|S%TS=U)
OPS(O1=M5CA%O2=M5CA%O3=M5CA%O4=M5CA%O5=M5CA%O6=M5CA)
WIN(W1=8000%W2=8000%W3=8000%W4=8000%W5=8000%W6=8000)
ECN(R=Y%DF=N%T=FA-104%TG=FF%W=8000%O=M5CA%CC=N)
T1(R=Y%DF=N%T=FA-104%TG=FF%S=O%A=S+%F=AS%RD=0)
T2(R=Y%DF=N%T=FA-104%TG=FF%W=80%S=A%A=S+%F=AR%RD=0)
T3(R=Y%DF=N%T=FA-104%TG=FF%W=100%S=A%A=S+%F=AR%RD=0)
T4(R=Y%DF=N%T=FA-104%TG=FF%W=400%S=A%A=S+%F=AR%RD=0)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=7A69%S=A%A=S+%F=AR%RD=0)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=8000%S=A%A=S+%F=AR%RD=0)
T7(R=Y%DF=N%T=FA-104%TG=FF%W=FFFF%S=A%A=S+%F=AR%RD=0)
U1(R=N)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Dell PowerConnect 3024, Hardware Version: PC-3024-00, Boot ROM Version: 4.2, Software Version: 5.1.4
Fingerprint Dell PowerConnect 3024 switch
Class Dell | embedded || switch
CPE cpe:/h:dell:powerconnect_3024 auto
SEQ(SP=0-1C%GCD=FA00|1F400|2EE00|3E800|4E200%ISR=97-A1%TI=I%II=I%SS=S%TS=1)
OPS(O1=M400NW0NNT11%O2=M400NW0NNT11%O3=M400NW0NNT11%O4=M400NW0NNT11%O5=M400NW0NNT11%O6=M400NNT11)
WIN(W1=2000%W2=2000%W3=2080%W4=2000%W5=2180%W6=2017)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=2000%O=M400NW0%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=3B-45%TG=40%W=2017%S=O%A=O%F=A%O=NNT11%RD=0%Q=)
T4(R=Y%DF=N%T=3B-45%TG=40%W=2000%S=A|O%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=O|S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A|O%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=O|S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=15C%RID=G%RIPCK=Z%RUCK=0%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# Dell Powerconnect 3248 Switch 2.0.0.21
Fingerprint Dell PowerConnect 3248 switch
Class Dell | embedded || switch
CPE cpe:/h:dell:powerconnect_3248 auto
SEQ(SP=8B-95%GCD=1-6%ISR=91-9B%TI=I%CI=I%II=RI%SS=O|S%TS=1)
OPS(O1=M5B4NW0NNT11%O2=M5B4NW0NNT11%O3=M5B4NW0NNT11%O4=M5B4NW0NNT11%O5=M5B4NW0NNT11%O6=M5B4NNT11)
WIN(W1=2000%W2=2000%W3=2000%W4=2000%W5=2000%W6=2000)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=2000%O=M5B4NW0%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=3B-45%TG=40%W=2000%S=O%A=S+%F=AS%O=%RD=0%Q=)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Dell PowerConnect 3324
Fingerprint Dell PowerConnect 3324 switch
Class Dell | embedded || switch
CPE cpe:/h:dell:powerconnect_3324 auto
SEQ(SP=FF-109%GCD=1-6%ISR=104-10E%TI=I%CI=I%II=I%SS=S%TS=U)
OPS(O1=%O2=%O3=%O4=%O5=%O6=)
WIN(W1=800%W2=800%W3=800%W4=800%W5=800%W6=800)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=800%O=%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=3B-45%TG=40%W=800%S=O%A=S+%F=AS%O=%RD=0%Q=)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Dell PowerConnect 3348
Fingerprint Dell PowerConnect 3348 switch
Class Dell | embedded || switch
CPE cpe:/h:dell:powerconnect_3348 auto
SEQ(SP=FD-107%GCD=1-6%ISR=FE-110%TI=I%II=I%SS=S%TS=U)
OPS(O1=%O2=%O3=%O4=%O5=%O6=)
WIN(W1=100%W2=100%W3=100%W4=100%W5=100%W6=100)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=100%O=%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=O|S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=3B-45%TG=40%W=100%S=O%A=S+%F=AS%O=%RD=0%Q=)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Dell PowerConnect 5316M
Fingerprint Dell PowerConnect 5316M switch
Class Dell | embedded || switch
CPE cpe:/h:dell:powerconnect_5316m auto
SEQ(SP=0-75%GCD=14|28|3C|50|64%ISR=4B-6F%TI=RD%II=RI%TS=U)
OPS(O1=%O2=%O3=%O4=%O5=%O6=)
WIN(W1=200%W2=200%W3=200%W4=200%W5=200%W6=200)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=200%O=%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=3B-45%TG=40%W=200%S=O%A=S+%F=AS%O=%RD=0%Q=)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Dell PowerConnect 5324
# Linux 2.4.21-37.0.1.ELsmp #1 SMP Wed Jan 11 18:44:17 EST 2006 i686 i686 i386 GNU/Linux, Red Hat Enterprise Linux ES release 3 (Taroon Update 6).
Fingerprint Dell PowerConnect 5324 switch
Class Dell | embedded || switch
CPE cpe:/h:dell:powerconnect_5324 auto
SEQ(SP=0-8B%GCD=14|28|3C|50|64%ISR=4B-71%TI=I%II=I%SS=S%TS=U)
OPS(O1=%O2=%O3=%O4=%O5=%O6=)
WIN(W1=200%W2=200%W3=200%W4=200%W5=200%W6=200)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=200%O=%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=O|S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=3B-45%TG=40%W=200%S=O%A=S+%F=AS%O=%RD=0%Q=)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# PowerConnect 3324, Unit No.: Unit 1, Software Version 1.1.0.42, Boot Version 1.0.0.13, Hardware Version: 00.00.02.
Fingerprint Dell PowerConnect 5324 switch
Class Dell | embedded || switch
CPE cpe:/h:dell:powerconnect_5324 auto
SEQ(SP=F5-FF%GCD=1-6%ISR=FF-109%TI=I%CI=I%II=I%SS=S%TS=U)
OPS(O1=%O2=%O3=%O4=%O5=%O6=)
WIN(W1=200%W2=200%W3=200%W4=200%W5=200%W6=200)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=200%O=%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=3B-45%TG=40%W=200%S=O%A=S+%F=AS%O=%RD=0%Q=)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# PowerConnect 6200 series
Fingerprint Dell PowerConnect 6200-series switch
Class Dell | embedded || switch
CPE cpe:/h:dell:powerconnect_6200
SEQ(SP=8A-94%GCD=1-6%ISR=97-A1%TI=I%CI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4NW0%O2=M5B4NW0%O3=M5B4NW0%O4=M5B4NW0%O5=M5B4NW0%O6=M5B4)
WIN(W1=1000%W2=1000%W3=1000%W4=1000%W5=1000%W6=1000)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=1000%O=M5B4NW0%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S+%F=AR%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S+%F=AR%O=%RD=0%Q=)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=11C%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=Z)

# Enterasys Networks, Inc. B3G124-48P Rev 06.03.02.0006
# Enterasys Networks, Inc. B3G124-24P Rev 06.03.02.0006
# Enterasys Networks, Inc. D2G124-12P Rev 06.03.02.0006
# Dell Powerconnect 6248 Firmware 3.2.0.7
Fingerprint Dell PowerConnect 6248, or Enterasys B3 BG3124 or D2 D2G124 switch
Class Dell | embedded || switch
CPE cpe:/h:dell:powerconnect_6248
Class Enterasys | embedded || switch
CPE cpe:/h:enterasys:bg3124
CPE cpe:/h:enterasys:d2g124
SEQ(SP=0-B8%GCD=1-7|FA01|1F402|2EE03|3E804|4E205%ISR=96-AE%TI=I%CI=I%II=I%SS=S%TS=U)
OPS(O1=NNM5B4SNW0%O2=NNM5B4SNW0%O3=M5B4NW0%O4=NNM5B4SNW0%O5=NNM5B4SNW0%O6=NNM5B4S)
WIN(W1=2710%W2=2710%W3=2710%W4=2710%W5=2710%W6=2710)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=2710%O=NNM5B4SNW0%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S+%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S+%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=Z%A=S+%F=R%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=138%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=Z)

# Dell 8024F Firmware version 4.2.1.3
Fingerprint Dell PowerConnect 8024F switch
Class Dell | embedded || switch
CPE cpe:/h:dell:powerconnect_8024f
SEQ(SP=C1-CB%GCD=1-6%ISR=B9-C3%TI=I%CI=I%II=I%SS=S%TS=U)
OPS(O1=NNM592SNW0%O2=NNM592SNW0%O3=M592NW0%O4=NNM592SNW0%O5=NNM592SNW0%O6=NNM592S)
WIN(W1=1000%W2=1000%W3=1000%W4=1000%W5=1000%W6=1000)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=1000%O=NNM592SNW0%CC=N)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=Z%F=R%RD=0)
T5(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=Z%A=S+%F=AR%RD=0)
T6(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=Z%F=R%RD=0)
T7(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=Z%A=Z%F=R%RD=0)
U1(DF=N%T=3B-45%TG=40%IPL=138%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=Z)

# Dell PowerConnect 6248P
# Dell PowerConnect M6220
# Enterasys SecureStack C2 router switch C2H124-48
# Enterasys Networks, Inc. G3G124-24 Rev 01.00.03.0002 (router switch)
# Enterasys Networks, Inc. B2H124-48 Rev 04.02.06.0004
# Enterasys Networks, Inc. B3G124-48 Rev 01.02.04.0005
# Enterasys Networks, Inc. C3G124-48 Rev 01.02.02.0009
# VxWorks? --Ed.
Fingerprint Dell PowerConnect or Enterasys switch
Class Dell | embedded || switch
Class Enterasys | embedded || switch
SEQ(SP=8C-D2%GCD=1-6%ISR=9B-BF%TI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4NW0%O2=M5B4NW0%O3=M5B4NW0%O4=M5B4NW0%O5=M5B4NW0%O6=M5B4)
WIN(W1=1000%W2=1000%W3=1000%W4=1000%W5=1000%W6=1000)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=1000%O=M5B4NW0%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T4(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S+%F=AR%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S+%F=AR%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=11C%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=Z)

# Dell Remote Access Controller 5, Hardware Version A03, Firmware Version 1.40 (08.08.22) (Probably Linux --Ed.)
Fingerprint Dell Remote Access Controller 5 (DRAC 5, Linux 2.6)
Class Dell | Linux | 2.6 | remote management
CPE cpe:/h:dell:remote_access_card:5
SEQ(SP=F1-10B%GCD=1-6%ISR=FF-111%TI=Z%CI=Z%II=I%TS=7)
OPS(O1=M57EST11NW0%O2=M578ST11NW0%O3=M280NNT11NW0%O4=M22CST11NW0%O5=M218ST11NW0%O6=M109ST11)
WIN(W1=16A0%W2=16A0%W3=16A0%W4=16A0%W5=16A0%W6=16A0)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=16D0%O=M57ENNSNW0%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=S%F=R%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=S%F=R%O=%RD=0%Q=)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# EqualLogic PeerStorage PS100E iSCSI storage array, firmware version "2.2.3 (R75)", uname is NetBSD 1.6.2 NetBSD 1.6.2 (EQL.PSS) #0: Thu Sep  1 20:15:43 EDT 2005 ps.release/EQL.PSS sbmips
Fingerprint Dell EqualLogic PeerStorage PS100E NAS device (NetBSD 1.6.2)
Class Dell | NetBSD | 1.X | general purpose
CPE cpe:/h:dell:equallogic_peerstorage_ps100e
CPE cpe:/o:dell:netbsd:1 auto
SEQ(SP=CC-DE%GCD=1-6%ISR=D8-E8%TI=I%CI=I%II=I%SS=S%TS=0)
OPS(O1=M5B4NW0NNT01%O2=M578NW0NNT01%O3=M280NW0NNT01%O4=M0NW0NNT01%O5=M218NW0NNT01%O6=M109NNT01)
WIN(W1=4000%W2=4000%W3=4000%W4=4000%W5=4000%W6=4000)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=4000%O=M5B4NW0%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=4000%S=O%A=S+%F=AS%O=M109NW0NNT01%RD=0%Q=)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# Dell Equilogic iscsi SAN, product Family PS5000, model 70-0115
# NetBSD vmeql1 1.6.2 NetBSD 1.6.2 (EQL.PSS) #0: Wed Mar 25 13:59:08 EDT 2009 build@m58:/buildarea/V4.1.4__Wed_Mar_25_2009_13_40_04_EDT/bin/destdir.sbmips.rel ease/EQL.PSS sbmips, EqualLogic PeerStorage PS100E iSCSI storage array running firmware v4.1.4.
# Dell Equallogic PS4000XV
Fingerprint Dell EqualLogic NAS device (NetBSD 1.6.2)
Class Dell | NetBSD | 1.X | storage-misc
CPE cpe:/h:dell:equallogic
CPE cpe:/o:dell:netbsd:1 auto
SEQ(SP=C9-DB%GCD=1-6%ISR=DB-F1%TI=RI%II=I%SS=S%TS=0)
OPS(O1=M5B4NW0NNT01%O2=M578NW0NNT01%O3=M280NW0NNT01%O4=M5B4NW0NNT01%O5=M218NW0NNT01%O6=M109NNT01)
WIN(W1=4000%W2=4000%W3=4000%W4=4000%W5=4000%W6=4000)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=4000%O=M5B4NW0%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=4000%S=O%A=S+%F=AS%O=M109NW0NNT01%RD=0%Q=)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# Denon AVR-2312
# Denon Integrated Network AV Receiver AVR-1912
Fingerprint Denon AVR-1912 or AVR-2312 audio receiver
Class Denon | embedded || media device
CPE cpe:/h:denon:avr-1912
CPE cpe:/h:denon:avr-2312
SEQ(SP=C-16%GCD=FA7F|1F4FE|2EF7D|3E9FC|4E47B%ISR=97-A1%TI=I%CI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4%O2=M5B4%O3=M5B4%O4=M5B4%O5=M5B4%O6=M5B4)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=N%T=7B-85%TG=80%W=FFFF%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=7B-85%TG=80%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=7B-85%TG=80%W=FFFF%S=O%A=O%F=A%O=%RD=0%Q=)
T4(R=Y%DF=N%T=7B-85%TG=80%W=FFFF%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=7B-85%TG=80%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=7B-85%TG=80%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=7B-85%TG=80%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=7B-85%TG=80%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=7B-85%TG=80%CD=S)

# DENON AVR-2113
Fingerprint Denon AVR-2113 audio receiver
Class Denon | embedded || media device
CPE cpe:/h:denon:avr-2113
SEQ(SP=C-16%GCD=FA7F|1F4FE|2EF7D|3E9FC|4E47B%ISR=97-A1%TI=I%CI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4%O2=M5B4%O3=M5B4%O4=M5B4%O5=M5B4%O6=M5B4)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=N%T=7B-85%TG=80%W=FFFF%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=7B-85%TG=80%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=7B-85%TG=80%W=FFFF%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=7B-85%TG=80%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=7B-85%TG=80%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=N)
U1(DF=N%T=7B-85%TG=80%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=7B-85%TG=80%CD=S)

# Denon AVR-3808Ci
Fingerprint Denon AVR-3808CI audio/video receiver
Class Denon | embedded || media device
CPE cpe:/h:denon:avr-3808ci
SEQ(SP=C-16%GCD=FA7F|1F4FE|2EF7D|3E9FC|4E47B%ISR=97-A1%TI=I%II=I%SS=O|S%TS=U)
OPS(O1=M5B4%O2=M5B4%O3=M5B4%O4=M5B4%O5=M5B4%O6=M5B4)
WIN(W1=2000%W2=2000%W3=2000%W4=2000%W5=2000%W6=2000)
ECN(R=Y%DF=N%T=1A-24%TG=20%W=2000%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=1A-24%TG=20%S=O%A=O|S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=Y%DF=N%T=1A-24%TG=20%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=1A-24%TG=20%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=1A-24%TG=20%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=1A-24%TG=20%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=1A-24%TG=20%CD=S)

# Denon AVR 3808 Surround Receiver
Fingerprint Denon AVR-3808CI audio/video receiver
Class Denon | embedded || media device
CPE cpe:/h:denon:avr-3808ci
SEQ(SP=C-16%GCD=FA7F|1F4FE|2EF7D|3E9FC|4E47B%ISR=97-A1%TI=I%CI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4%O2=M5B4%O3=M5B4%O4=M5B4%O5=M5B4%O6=M5B4)
WIN(W1=2000%W2=2000%W3=2000%W4=2000%W5=2000%W6=2000)
ECN(R=Y%DF=N%T=19-23%TG=20%W=2000%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=19-23%TG=20%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=19-23%TG=20%W=2000%S=O%A=O%F=A%O=%RD=0%Q=)
T4(R=N)
T5(R=Y%DF=N%T=19-23%TG=20%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=19-23%TG=20%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=19-23%TG=20%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=19-23%TG=20%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=19-23%TG=20%CD=S)

# Philips Wireless Music Adapter SLA5500, Firmwareversion 2.0.11.6416
# This is a Philips WAK3300 Alarm clock !
# Terratec NOXON Audio system. (http://entertainen.terratec.net/modules.php?op=modload&name=News&file=article&sid=228)
# Terratec Noxon2Audio Streaming Client
# Terratec Noxon iRadio (standalone ethernet+wifi internet radio)
# Denon AVR-3808CI, a high-end home theater receiver
# Philips SLA5520 Wireless Music Adapter
Fingerprint Denon AVR-3808CI audio/video receiver, Philips SLA5500 or SLA5520 Wireless Music Adapter or WAK3300 wireless alarm clock, or Terratec NOXON audio system
Class Denon | embedded || media device
CPE cpe:/h:denon:avr-3808ci
Class Philips | embedded || media device
Class Terratec | embedded || media device
SEQ(SP=C-16%GCD=FA7F|1F4FE|2EF7D|3E9FC%ISR=97-A1%TI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4%O2=M5B4%O3=M5B4%O4=M5B4%O5=M5B4%O6=M5B4)
WIN(W1=2000%W2=2000%W3=2000%W4=2000%W5=2000%W6=2000)
ECN(R=Y%DF=N%T=19-23%TG=20%W=2000%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=19-23%TG=20%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=19-23%TG=20%W=2000%S=O%A=O%F=A%O=%RD=0%Q=)
T4(R=Y%DF=N%T=19-23%TG=20%W=2000%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=19-23%TG=20%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=19-23%TG=20%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=19-23%TG=20%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=19-23%TG=20%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=19-23%TG=20%CD=S)

# Develop Ineo 350. Develop is a Konica Minolta reseller with it's own brands / marketing names. (The 250 and 350 builds seem to be identical.)
Fingerprint Develop ineo 250 or 350 printer
Class Develop | embedded || printer
SEQ(SP=14-1E%GCD=FA00|1F400|2EE00|3E800|4E200%ISR=99-A3%TI=I%II=I%SS=S%TS=1)
OPS(O1=M5B4NW1NNT11%O2=M5B4NW1NNT11%O3=M5B4NW1NNT11%O4=M5B4NW1NNT11%O5=M5B4NW1NNT11%O6=M5B4NNT11)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=FFFF%O=M5B4NW1%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=3B-45%TG=40%W=FFFF%S=O%A=S+%F=AS%O=M5B4NW1NNT11%RD=0%Q=)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=Z%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Develop Ineo 600. Develop is a Konica Minolta reseller with it's own brands / marketing names. (The 600 and 700 builds seem to be identical.)
Fingerprint Develop ineo 600 or 700 printer
Class Develop | embedded || printer
SEQ(SP=14-1E%GCD=FA00|1F400|2EE00|3E800|4E200%ISR=99-A3%TI=I%TS=1)
OPS(O1=M5B4NW0NNT11%O2=M5B4NW0NNT11%O3=M5B4NW0NNT11%O4=M5B4NW0NNT11%O5=M5B4NW0NNT11%O6=M5B4NNT11)
WIN(W1=2000%W2=2000%W3=2000%W4=2000%W5=2000%W6=2000)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=2000%O=M5B4NW0%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=3B-45%TG=40%W=2000%S=O%A=S+%F=AS%O=M5B4NW0NNT11%RD=0%Q=)
T4(R=Y%DF=N%T=3B-45%TG=40%W=2000%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=4210%RIPCK=Z%RUCK=0%RUD=G)
IE(R=N)

# Dick Smith Electronics XH1169 USB & 4x LAN ADSL Router
# Vendor: Ambit. modem-router provided by neuf telecom in france known as neufbox trio3c
# Netgear WGR614v6. VxWorks: http://forum.openwrt.org/viewtopic.php?id=3843 http://www.dd-wrt.com/phpBB2/viewtopic.php?t=44439&highlight=wgr614v6
Fingerprint Broadband router (VxWorks): Dick Smith Electronics XH1169, Netgear WGR614v6, or Neuf Box Trio 3C
Class Dick Smith Electronics | VxWorks || broadband router
CPE cpe:/o:dicksmithelectronics:vxworks auto
Class Netgear | VxWorks || WAP
CPE cpe:/o:netgear:vxworks auto
Class Neuf | VxWorks || broadband router
CPE cpe:/o:neuf:vxworks auto
SEQ(SP=14-1E%GCD=FA00|1F400|2EE00|3E800|4E200%ISR=99-A3%TI=I%II=I%SS=S%TS=1)
OPS(O1=M5B4NW0NNT11%O2=M5B4NW0NNT11%O3=M5B4NW0NNT11%O4=M5B4NW0NNT11%O5=M5B4NW0NNT11%O6=M5B4NNT11)
WIN(W1=2000%W2=2000%W3=2000%W4=2000%W5=2000%W6=2000)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=2000%O=M5B4NW0%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=3B-45%TG=40%W=2000%S=O%A=O%F=A%O=NNT11%RD=0%Q=)
T4(R=Y%DF=N%T=3B-45%TG=40%W=2000%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=4210%RIPCK=I%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# DIGI ethernet module integrated into one device (an ethernet - zigbee gateway). "Digi Connect ME Configuration and Management"
Fingerprint Digi Connect ME serial-to-Ethernet bridge
Class Digi | embedded || bridge
CPE cpe:/h:digi:connect_me
SEQ(CI=I%II=I)
OPS(R=N)
WIN(R=N)
ECN(R=N)
T1(R=N)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=75-7F%TG=80%W=0%S=A%A=Z%F=R%RD=0)
T5(R=Y%DF=N%T=75-7F%TG=80%W=0%S=Z%A=S+%F=AR%RD=0)
T6(R=Y%DF=N%T=75-7F%TG=80%W=0%S=A%A=Z%F=R%RD=0)
T7(R=Y%DF=N%T=75-7F%TG=80%W=0%S=Z%A=S+%F=AR%RD=0)
U1(DF=N%T=75-7F%TG=80%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=4781%RUD=G)
IE(DFI=N%T=75-7F%TG=80%CD=Z)

# DIGI One SP RS232-Ethernet Bridge
Fingerprint Digi One SP serial-to-Ethernet bridge
Class Digi | embedded || bridge
SEQ(SP=D-17%GCD=1-6%ISR=4B-55%TI=1%CI=RI%II=RI%TS=U)
OPS(O1=M218%O2=M218%O3=M218%O4=M218%O5=M218%O6=M109)
WIN(W1=2000%W2=2000%W3=2000%W4=2000%W5=2000%W6=2000)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=2000%O=M218%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=21-3B%TG=40%W=0%S=A%A=O%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=23-3E%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=25-3E%TG=40%W=0%S=A%A=O%F=R%O=%RD=0%Q=)
T7(R=N)
U1(DF=Y%T=3B-45%TG=40%IPL=8E%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# digi PortServer TS 16 Rack Firmware Version: Version 82000684_U1
Fingerprint Digi PortServer TS 16 Rack serial-to-Ethernet bridge
Class Digi | embedded || bridge
SEQ(CI=RD%II=RI%TS=U)
OPS(O1=M5B4%O2=M578%O3=M280%O4=M218%O5=M218%O6=M109)
WIN(W1=2000%W2=2000%W3=2000%W4=2000%W5=2000%W6=2000)
ECN(R=Y%DF=N%T=27-45%TG=40%W=2000%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=24-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=2A-3D%TG=40%W=0%S=A%A=O%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=23-3B%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=24-3D%TG=40%W=0%S=A%A=O%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=28-3F%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=Y%T=3B-45%TG=40%IPL=104%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# PortServer TS4; PortServer  TS 4(55000629-03)
Fingerprint Digi PortServer TS 4 H MEI serial-to-Ethernet bridge
Class Digi | embedded || bridge
SEQ(R=N)
OPS(O1=M5B4%O2=M578%O3=M280%O4=M218%O5=M218%O6=M109)
WIN(W1=2000%W2=2000%W3=2000%W4=2000%W5=2000%W6=2000)
ECN(R=Y%DF=N%T=33-45%TG=40%W=2000%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=29-36|3B-45%TG=40%S=Z%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=27-38|3B-45%TG=40%W=2000%S=Z%A=S+%F=AS%O=M109%RD=0%Q=)
T4(R=Y%DF=Y%T=22-40%TG=40%W=0%S=A%A=O%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=29-3D%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=2E-3F%TG=40%W=0%S=A%A=O%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=20-39%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=Y%T=3B-45%TG=40%IPL=8E%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# Digi PortServer TS 4 w/ Firmware 82000747_U2
# Digi PortServer TS 4 MEI, release_82000747_U3
Fingerprint Digi PortServer TS 4 serial-to-Ethernet bridge
Class Digi | embedded || bridge
SEQ(SP=C-42%GCD=1-6|A|14|1E|28|32%ISR=4B-55%TI=1%CI=RD|RI%II=RI%TS=U)
OPS(O1=M218%O2=M218%O3=M218%O4=M218%O5=M218%O6=M109)
WIN(W1=2000%W2=2000%W3=2000%W4=2000%W5=2000%W6=2000)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=2000%O=M218%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=21-3D%TG=40%W=0%S=A%A=O%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=26-39%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=26-3F%TG=40%W=0%S=A%A=O%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=20-3C%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=Y%T=3B-45%TG=40%IPL=8E%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# Digi Portserver TS RS232 to Etherenet connector
Fingerprint Digi PortServer TS serial-to-Ethernet bridge
Class Digi | embedded || bridge
SEQ(R=N)
OPS(O1=|M5B4%O2=|M578%O3=|M280%O4=|M218%O5=|M218%O6=|M109)
WIN(W1=0|2000%W2=0|2000%W3=0|2000%W4=0|2000%W5=0|2000%W6=0|2000)
ECN(R=Y%DF=N%T=25-30|34-45%TG=40%W=0|2000%O=|M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=20-2C|31-45%TG=40%S=O|Z%A=S+%F=AR|AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=23-40%TG=40%W=0%S=A%A=O%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=22-3A%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=23-3E%TG=40%W=0%S=A%A=O%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=23-39%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=Y%T=3B-45%TG=40%IPL=8E%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# Digi WR44 - Sarian OS
# Digi DR64 MKII
Fingerprint Digi TransPort DR64 or WR44 wireless router
Class Digi | embedded || WAP
SEQ(SP=102-10C%GCD=1-6%ISR=105-10F%TI=I%CI=I%TS=U)
OPS(O1=M578%O2=M578%O3=M280%O4=M578%O5=M218%O6=M109)
WIN(W1=2000%W2=2000%W3=2000%W4=2000%W5=2000%W6=2000)
ECN(R=Y%DF=N%T=F5-FF%TG=FF%W=2000%O=M578%CC=N%Q=)
T1(R=Y%DF=N%T=F5-FF%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=F5-FF%TG=FF%W=0%S=Z%A=O%F=R%O=%RD=0%Q=)
T3(R=Y%DF=N%T=F5-FF%TG=FF%W=2000%S=O%A=S+%F=AS%O=M109%RD=0%Q=)
T4(R=Y%DF=N%T=F5-FF%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=F5-FF%TG=FF%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=F5-FF%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=F5-FF%TG=FF%W=0%S=Z%A=O%F=R%O=%RD=0%Q=)
U1(DF=N%T=F5-FF%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(R=N)

# NET+OS7 ( http://www.digi.com/products/embeddedsolutions/devkits/digiconnectmewimedevkitdocs.jsp )
Fingerprint Digi NET+OS 7
Class Digi | NET+OS | 7 | specialized
CPE cpe:/o:digi:net_os:7 auto
SEQ(SP=CC-D6%GCD=1-6%ISR=D4-DE%TI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4W0L%O2=M5B4W0L%O3=M5B4W0L%O4=M5B4W0L%O5=M5B4W0L%O6=M5B4)
WIN(W1=2000%W2=2000%W3=2000%W4=2000%W5=2000%W6=2000)
ECN(R=Y%DF=N%T=6F%TG=80%W=2000%O=M5B4W0L%CC=N%Q=)
T1(R=Y%DF=N%T=6F%TG=80%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=6F%TG=80%W=2000%S=O%A=S+%F=AS%O=M5B4W0L%RD=0%Q=)
T4(R=Y%DF=N%T=6F%TG=80%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=6F%TG=80%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=6F%TG=80%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=6F%TG=80%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=6F%TG=80%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=855D%RUD=G)
IE(DFI=N%T=6F%TG=80%CD=Z)

# Regular NET+OS from Digi. Digi based its NET+OS on ThreadX and this NET+OS can be changed/reprogrammed.
# NetOS 7.x
Fingerprint Digi NET+OS 7
Class Digi | NET+OS | 7 | specialized
CPE cpe:/o:digi:net_os:7 auto
SEQ(SP=7E-8A%GCD=1-6%ISR=97-A1%TI=I%II=I%SS=S%TS=A)
OPS(O1=M5B4NW0NNSNNT11%O2=M578NW0NNSNNT11%O3=M280NW0NNT11%O4=M5B4NW0NNSNNT11%O5=M218NW0NNSNNT11%O6=M109NNSNNT11)
WIN(W1=43E0%W2=4110%W3=423C%W4=43E0%W5=4180%W6=403D)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=4470%O=M5B4NW0NNS%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=FA-104%TG=FF%CD=S)

# Digitus DN-13008 USB MFP Server, Firmware Version: 2.50
# Sitecom MFP-Server
Fingerprint Digitus DN-13008 or Sitecom print server
Class Digitus | embedded || print server
Class Sitecom | embedded || print server
SEQ(SP=8C-9C%GCD=1-6%ISR=96-A0%TI=I%CI=I%II=I%SS=S%TS=1)
OPS(O1=M5A8NW0NNT11%O2=M56CNW0NNT11%O3=M274NW0NNT11%O4=M5A8NW0NNT11%O5=M20CNW0NNT11%O6=MFDNNT11)
WIN(W1=43E0%W2=4110%W3=423C%W4=43E0%W5=4180%W6=403D)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=4470%O=M5B4NW0%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=3B-45%TG=40%W=403D%S=O%A=S+%F=AS%O=MFDNW0NNT11%RD=0%Q=)
T4(R=Y%DF=N%T=3B-45%TG=40%W=4000%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=3401%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# directv HR34 system.It seems to be running Linux 2.6.22 based on the output of the pnp service.
Fingerprint DirecTV HR34 DVR (Linux 2.6.22)
Class DirecTV | Linux | 2.6.X | media device
CPE cpe:/h:directv:hr34
SEQ(SP=C3-CD%GCD=1-6%ISR=C7-D1%TI=Z%CI=Z%II=I%TS=A|B)
OPS(O1=M5B4ST11NW1%O2=M5B4ST11NW1%O3=M5B4NNT11NW1%O4=M5B4ST11NW1%O5=M5B4ST11NW1%O6=M5B4ST11)
WIN(W1=16A0%W2=16A0%W3=16A0%W4=16A0%W5=16A0%W6=16A0)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=16D0%O=M5B4NNSNW1%CC=Y%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# Dish Network Hopper with Wi-Fi adapter (http://www.dish.com/technology/hopper/)
Fingerprint Dish Network Hopper media device
Class Dish | embedded || media device
CPE cpe:/h:dish:hopper
SEQ(SP=B9-CD%GCD=1-6%ISR=C9-D3%TI=Z%CI=Z%II=I%TS=A|B|C)
OPS(O1=NNT11|M5B4ST11NW5%O2=NNT11|M5B4ST11NW5%O3=NNT11|M5B4NNT11NW5%O4=NNT11|M5B4ST11NW5%O5=NNT11|M5B4ST11NW5%O6=NNT11|M5B4ST11)
WIN(W1=10F8%W2=10F8%W3=10F8%W4=10F8%W5=10F8%W6=10F8)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=111C%O=|M5B4NNSNW5%CC=N|Y%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=O|S+%F=A|AS%RD=0%Q=)
T2(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=O%F=AR%O=%RD=0%Q=)
T4(R=N)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=N)
T7(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# Digital Monitoring Products (DMP) XR500
# DMP XR500 remote alarm monitor
Fingerprint DMP XR500 remote alarm monitor
Class DMP | embedded || security-misc
SEQ(SP=0-1E7%GCD=1-6|>1000000%ISR=B4-100%TI=I|RD%II=RI%SS=O|S%TS=U)
OPS(O1=M580%O2=M578%O3=M280%O4=M580%O5=M218%O6=M109)
WIN(W1=B00%W2=B00%W3=B00%W4=B00%W5=B00%W6=B00)
ECN(R=Y%DF=Y%T=FE%TG=FF%W=B00%O=M580%CC=N%Q=)
T1(R=Y%DF=Y%T=FE%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%T=FE%TG=FF%W=B00%S=O%A=S+%F=AS%O=M109%RD=0%Q=)
T4(R=Y%DF=Y%T=FE%TG=FF%W=B00%S=A+%A=S%F=AR%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=FE%TG=FF%W=B00%S=A%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=FE%TG=FF%W=B00%S=A%A=S%F=AR%O=%RD=0%Q=)
T7(R=Y%DF=Y%T=FE%TG=FF%W=B00%S=A%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=Y%T=FE%TG=FF%IPL=38%UN=0-FFFF%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=23-38%TG=40%CD=S)

Fingerprint DragonFly BSD 1.10.1
Class DragonFly BSD | DragonFly BSD | 1.X | general purpose
CPE cpe:/o:dragonflybsd:dragonfly_bsd:1 auto
SEQ(SP=FF-109%GCD=1-6%ISR=103-10F%TI=I%TS=7)
OPS(O1=M3FD8NW0NNT11NNS%O2=M3FD8NW0NNT11NNS%O3=M3FD8NW0NNT11%O4=M3FD8NW0NNT11NNS%O5=M3FD8NW0NNT11NNS%O6=M3FD8NNT11NNS)
WIN(W1=E000%W2=E000%W3=E000%W4=E000%W5=E000%W6=E000)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=E000%O=M3FD8NW0NNS%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=3B-45%TG=40%W=E000%S=O%A=O|S+%F=AS%O=M3FD8NW0NNT11NNS%RD=0%Q=)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A|O%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=O|S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A|O%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=O|S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# DragonFly BSD 1.8.0-RELEASE on i386
# DragonflyBSD 1.10.1 installed on vmware server
Fingerprint DragonFly BSD 1.8.0-RELEASE - 1.10.1 (x86)
Class DragonFly BSD | DragonFly BSD | 1.X | general purpose
CPE cpe:/o:dragonflybsd:dragonfly_bsd:1 auto
SEQ(SP=FB-105%GCD=1-6%ISR=10A-114%TI=I%II=I%SS=O|S%TS=7)
OPS(O1=M5B4NW0NNT11NNS%O2=M5B4NW0NNT11NNS%O3=M5B4NW0NNT11%O4=M5B4NW0NNT11NNS%O5=M5B4NW0NNT11NNS%O6=M5B4NNT11NNS)
WIN(W1=E000%W2=E000%W3=E000%W4=E000%W5=E000%W6=E000)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=E000%O=M5B4NW0NNS%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=O|S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=3B-45%TG=40%W=E000%S=O%A=O|S+%F=AS%O=M5B4NW0NNT11NNS%RD=0%Q=)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# DragonFly 2.11-DEVELOPMENT DragonFly v2.11.0.395.g15891-DEVELOPMENT #1: Wed Jun 15 17:58:04 CEST 2011     YY@XX:/usr/obj/usr/src/sys/X86_64_GENERIC  x86_64
Fingerprint DragonFly BSD 2.11
Class DragonFly BSD | DragonFly BSD | 2.X | general purpose
CPE cpe:/o:dragonflybsd:dragonfly_bsd:2 auto
SEQ(SP=FE-108%GCD=1-6%ISR=103-10D%TI=RD%CI=RD|RI%II=RI%TS=7)
OPS(O1=M5B4NW5NNT11NNS%O2=M5B4NW5NNT11NNS%O3=M5B4NW5NNT11%O4=M5B4NW5NNT11NNS%O5=M5B4NW5NNT11NNS%O6=M5B4NNT11NNS)
WIN(W1=E000%W2=E000%W3=E000%W4=E000%W5=E000%W6=E000)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=E000%O=M5B4NW5NNS%CC=N)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0)
T2(R=N)
T3(R=Y%DF=N%T=3B-45%TG=40%W=E000%S=O%A=S+%F=AS%O=M5B4NW5NNT11NNS%RD=0)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%RD=0)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%RD=0)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%RD=0)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%RD=0)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# DragonFly-2.3.2, soon to be DragonFly-2.4
Fingerprint DragonFly BSD 2.3.2
Class DragonFly BSD | DragonFly BSD | 2.X | general purpose
CPE cpe:/o:dragonflybsd:dragonfly_bsd:2 auto
SEQ(SP=FB-10B%GCD=1-6%ISR=109-113%TI=RD%CI=RD|RI%TS=7)
OPS(O1=M3FD8NW5NNT11NNS%O2=M3FD8NW5NNT11NNS%O3=M3FD8NW5NNT11%O4=M3FD8NW5NNT11NNS%O5=M3FD8NW5NNT11NNS%O6=M3FD8NNT11NNS)
WIN(W1=E000%W2=E000%W3=E000%W4=E000%W5=E000%W6=E000)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=E000%O=M3FD8NW5NNS%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=3B-45%TG=40%W=E000%S=O%A=S+%F=AS%O=M3FD8NW5NNT11NNS%RD=0%Q=)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=Z%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# DragonFly BSD 2.9
Fingerprint DragonFly BSD 2.9
Class DragonFly BSD | DragonFly BSD | 2.X | general purpose
CPE cpe:/o:dragonflybsd:dragonfly_bsd:2 auto
SEQ(SP=FE-10C%GCD=1-6%ISR=102-10E%TI=RD%CI=RI%II=RI%TS=7)
OPS(O1=M538NW5NNT11NNS%O2=M538NW5NNT11NNS%O3=M538NW5NNT11%O4=M538NW5NNT11NNS%O5=M538NW5NNT11NNS%O6=M538NNT11NNS)
WIN(W1=E000%W2=E000%W3=E000%W4=E000%W5=E000%W6=E000)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=E000%O=M538NW5NNS%CC=N)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%RD=0)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%RD=0)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%RD=0)
T7(R=N)
U1(R=N)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# DragonflyBSD 2.9.1 x64
# DragonFly 3.1-DEVELOPMENT DragonFly v3.1.0.47.ge2743-DEVELOPMENT #0: Tue Jan 24 06:53:53 UTC 2012 i386
# DragonFly BSD 3.0.2
Fingerprint DragonFly BSD 2.9.1 - 3.1
Class DragonFly BSD | DragonFly BSD | 2.X | general purpose
CPE cpe:/o:dragonflybsd:dragonfly_bsd:2 auto
Class DragonFly BSD | DragonFly BSD | 3.X | general purpose
CPE cpe:/o:dragonflybsd:dragonfly_bsd:3 auto
SEQ(SP=FD-109%GCD=1-6%ISR=103-111%TI=RD%CI=RD%II=RI%TS=7)
OPS(O1=M5B4NW5NNT11NNS%O2=M5B4NW5NNT11NNS%O3=M5B4NW5NNT11%O4=M5B4NW5NNT11NNS%O5=M5B4NW5NNT11NNS%O6=M5B4NNT11NNS)
WIN(W1=E000%W2=E000%W3=E000%W4=E000%W5=E000%W6=E000)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=E000%O=M5B4NW5NNS%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=3B-45%TG=40%W=E000%S=O%A=S+%F=AS%O=M5B4NW5NNT11NNS%RD=0%Q=)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Mitel 5212 SIP Phone
# DragonWave Horizon 24GHz radio: get sw version -> Bootloader software: NCC 1.1.0
Fingerprint DragonWave Horizon WAP or Mitel 5212 SIP Phone
Class DragonWave | embedded || WAP
Class Mitel | embedded || VoIP phone
SEQ(SP=102-10C%GCD=1-6%ISR=106-110%TI=I%II=I%SS=S%TS=U)
OPS(O1=%O2=%O3=%O4=%O5=%O6=)
WIN(W1=111C%W2=111C%W3=111C%W4=111C%W5=111C%W6=111C)
ECN(R=Y%DF=N%T=3B-3D%TG=40%W=111C%O=%CC=N%Q=)
T1(R=Y%DF=N%T=3B-3D%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=3B-3D%TG=40%W=111C%S=O%A=S+%F=AS%O=%RD=0%Q=)
T4(R=Y%DF=N%T=3B-3D%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-3D%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-3D%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-3D%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-3D%TG=40%IPL=150%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-3D%TG=40%CD=Z)

# KWGR614: http://www.netgear.de/Produkte/Router/Wireless/KWGR614/
# Netgear Firewall Router RT614
# D-link DIR-100 router
# Tomato 1.27 Operating system (Linux)
# Netgear WG602 Wireless Access Point
# Draytek Vigor3300 'security router'
Fingerprint D-Link DIR-100; DrayTek Vigor3300; or Netgear KWRGR614, RT614, or WG602 router (Linux 2.4)
Class DrayTek | Linux | 2.4.X | WAP
CPE cpe:/h:draytek:vigor3300
CPE cpe:/o:draytek:linux_kernel:2.4 auto
Class D-Link | Linux | 2.4.X | WAP
CPE cpe:/h:dlink:dir-100
CPE cpe:/o:dlink:linux_kernel:2.4 auto
Class Netgear | Linux | 2.4.X | router
CPE cpe:/h:netgear:kwrgr614
CPE cpe:/h:netgear:rt614
CPE cpe:/h:netgear:wg602
CPE cpe:/o:netgear:linux_kernel:2.4 auto
SEQ(SP=BE-D4%GCD=1-6%ISR=C4-D8%TI=Z%CI=Z%II=I%TS=7)
OPS(O1=M5B4ST11NW0%O2=M5B4ST11NW0%O3=M5B4NNT11NW0%O4=M5B4ST11NW0%O5=M5B4ST11NW0%O6=M5B4ST11)
WIN(W1=16A0%W2=16A0%W3=16A0%W4=16A0%W5=16A0%W6=16A0)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=16D0%O=M5B4NNSNW0%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=16A0%S=O%A=S+%F=AS%O=M5B4ST11NW0%RD=0%Q=)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# DVTel DVT-9540DW Network Camera
Fingerprint DVTel DVT-9540DW network camera
Class DVTel | embedded || webcam
SEQ(SP=CC-122%GCD=1-6%ISR=D4-10E%TI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4%O2=M5B4%O3=M5B4%O4=M5B4%O5=M5B4%O6=M5B4)
WIN(W1=4000%W2=4000%W3=4000%W4=4000%W5=4000%W6=4000)
ECN(R=Y%DF=N%T=6B-75%TG=80%W=4000%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=6B-75%TG=80%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=6B-75%TG=80%W=4000%S=O%A=S+%F=AS%O=M5B4%RD=0%Q=)
T4(R=Y%DF=N%T=6B-75%TG=80%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=6B-75%TG=80%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=6B-75%TG=80%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=6B-75%TG=80%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=6B-75%TG=80%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=1CAC%RUD=G)
IE(DFI=N%T=6B-75%TG=80%CD=Z)

# Efficient 5930 DMT Router (5930-001) v6.1.020
Fingerprint Efficient Networks 5930 ADSL router
Class Efficient Networks | embedded || broadband router
SEQ(R=N)
OPS(O1=M400%O2=|M400%O3=|M400%O4=%O5=%O6=)
WIN(W1=1000%W2=0|1000%W3=0|1000%W4=0%W5=0%W6=0)
ECN(R=Y%DF=N%T=38-42%TG=40%W=0%O=%CC=N%Q=)
T1(R=Y%DF=N%T=38-42%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=Y%DF=N%T=38-42%TG=40%W=0%S=Z%A=O|S+%F=AR%O=%RD=0%Q=)
T6(R=N)
T7(R=N)
U1(DF=N%T=100%TG=FF%IPL=38%UN=0%RIPL=15C%RIPCK=I%RUCK=0%RUD=G)
IE(DFI=S%T=100%TG=FF%CD=S)

# Siemens SpeedStream 4100 ADSL modem
Fingerprint Efficient Networks SpeedStream 4100 ADSL router
Class Efficient Networks | embedded || broadband router
CPE cpe:/h:efficientnetworks:speedstream_4100 auto
SEQ(SP=101-10B%GCD=1-6%ISR=F8-102%TI=I%II=I%SS=S%TS=U)
OPS(O1=M5AC%O2=M5AC%O3=M5AC%O4=M5AC%O5=M5AC%O6=M5AC)
WIN(W1=2000%W2=2000%W3=2000%W4=2000%W5=2000%W6=2000)
ECN(R=N)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=N)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# Efficient Networks ADSL modem, Speedstream 5100
Fingerprint Efficient Networks SpeedStream 5100 ADSL router
Class Efficient Networks | embedded || broadband router
CPE cpe:/h:efficientnetworks:speedstream_5100 auto
SEQ(SP=FB-107%GCD=1-6%ISR=F2-FE%TI=I%II=I%SS=S%TS=U)
OPS(O1=M5AC%O2=M5AC%O3=M5AC%O4=M5AC%O5=M5AC%O6=M5AC)
WIN(W1=2000%W2=2000%W3=2000%W4=2000%W5=2000%W6=2000)
ECN(R=N)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=O|S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# Eicon Shiva series VPN gateway. Running an embedded Linux-based operating system.
Fingerprint Eicon Shiva VPN gateway
Class Eicon | embedded || proxy server
SEQ(SP=101-10B%GCD=1-6%ISR=105-10F%TI=I%II=RI%SS=S%TS=U)
OPS(O1=WAN%O2=M578%O3=%O4=%O5=M218%O6=M109)
WIN(W1=1000%W2=1000%W3=1000%W4=1000%W5=1000%W6=1000)
ECN(R=N)
T1(R=Y%DF=N%T=12D-137%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=Y%DF=N%T=5C-70%TG=80%W=0%S=Z%A=S+%F=AR%O=WANM109T10S%RD=0%Q=)
T6(R=Y%DF=N%T=6B-75%TG=80%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=6B-75%TG=80%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=6B-75%TG=80%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=CCF1%RUD=G)
IE(DFI=S%T=12D-137%TG=FF%CD=S)

# Elfiq (Vendor) Link Load Balancer 550B (LB-550B) EOS 3.5.2
Fingerprint Elfiq LB-550B load balancer (EOS 3.5.2)
Class Elfiq | EOS | 3.X | load balancer
CPE cpe:/o:elfiq:eos:3 auto
SEQ(SP=C5-CF%GCD=1-6%ISR=C6-D0%TI=Z%CI=Z%II=I%TS=8)
OPS(O1=M550ST11NW0%O2=M550ST11NW0%O3=M550NNT11NW0%O4=M550ST11NW0%O5=M550ST11NW0%O6=M550ST11)
WIN(W1=1510%W2=1510%W3=1510%W4=1510%W5=1510%W6=1510)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=1540%O=M550NNSNW0%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=1510%S=O%A=S+%F=AS%O=M550ST11NW0%RD=0%Q=)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# ELK-M1EXP Ethernet interface to an Elk Products M1 Gold alarm system
Fingerprint Elk ELK-M1EXP Ethernet-to-serial bridge
Class Elk | embedded || bridge
CPE cpe:/h:elk:elk-m1exp
SEQ(SP=C7-D7%GCD=1-6%ISR=D5-DF%TI=I%CI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4W0L%O2=M5B4W0L%O3=M5B4W0L%O4=M5B4W0L%O5=M5B4W0L%O6=M5B4)
WIN(W1=4000%W2=4000%W3=4000%W4=4000%W5=4000%W6=4000)
ECN(R=Y%DF=N%T=70-7A%TG=80%W=4000%O=M5B4W0L%CC=N%Q=)
T1(R=Y%DF=N%T=70-7A%TG=80%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=70-7A%TG=80%W=0%S=Z%A=O%F=AR%O=%RD=0%Q=)
T4(R=Y%DF=N%T=70-7A%TG=80%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=70-7A%TG=80%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=70-7A%TG=80%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=70-7A%TG=80%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=70-7A%TG=80%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUD=G)
IE(DFI=N%T=70-7A%TG=80%CD=Z)

# Model: ELK-M1XEP http://www.elkproducts.com/product-catalog/elk-m1xep-m1-ethernet-interface
Fingerprint Elk ELK-M1EXP Ethernet-to-serial bridge
Class Elk | embedded || bridge
CPE cpe:/h:elk:elk-m1exp
SEQ(SP=104-10E%GCD=1-6%ISR=FB-105%TI=I%CI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4W0L%O2=M5B4W0L%O3=M5B4W0L%O4=M5B4W0L%O5=M5B4W0L%O6=M5B4)
WIN(W1=4000%W2=4000%W3=4000%W4=4000%W5=4000%W6=4000)
ECN(R=Y%DF=N%T=70-7A%TG=80%W=4000%O=M5B4W0L%CC=N%Q=)
T1(R=Y%DF=N%T=70-7A%TG=80%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=70-7A%TG=80%W=0%S=Z%A=O%F=AR%O=%RD=0%Q=)
T4(R=Y%DF=N%T=70-7A%TG=80%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=70-7A%TG=80%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=70-7A%TG=80%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=70-7A%TG=80%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=70-7A%TG=80%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=C31C%RUD=G)
IE(DFI=N%T=70-7A%TG=80%CD=Z)

# Elsag datamat sas200 italian adsl router
Fingerprint Elsag Datamat SAS-200 ADSL modem
Class Elsag Datamat | embedded || broadband router
CPE cpe:/h:elsagdatamat:sas-200 auto
SEQ(SP=0-5%GCD=388|710|A98|E20|11A8%ISR=64-6E%TI=I%II=I%SS=S%TS=U)
OPS(O1=M578%O2=M564%O3=M26C%O4=M578%O5=M204%O6=MF5)
WIN(W1=200%W2=200%W3=200%W4=200%W5=200%W6=200)
ECN(R=Y%DF=N%T=FA-104%TG=FF%W=200%O=M578%CC=N%Q=)
T1(R=Y%DF=N%T=FA-104%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=Z%A=S+%F=AR|EAR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=Z%A=S+%F=AR|EAR%O=%RD=0%Q=)
T4(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S+%F=R|ER%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=Z%A=S+%F=AR|EAR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S+%F=R|ER%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=Z%A=S+%F=AR|EAR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# Ember InSight Adapter EM2XX chip programmer/debugger
Fingerprint Ember InSight Adapter for programming EM2XX-family embedded devices
Class Ember | embedded || specialized
SEQ(SP=0%GCD=FFF7|1FFEE|2FFE5|3FFDC|4FFD3|5FFCA%ISR=95-9F%TS=U)
OPS(O1=M5B4%O2=M5B4%O3=M5B4%O4=M5B4%O5=M5B4%O6=M5B4)
WIN(W1=2000%W2=2000%W3=2000%W4=2000%W5=2000%W6=2000)
ECN(R=N)
T1(R=Y%DF=N%T=7B-85%TG=80%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=7B-85%TG=80%W=0%S=A|O%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=7B-85%TG=80%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=7B-85%TG=80%W=0%S=A|O%A=Z%F=R%O=%RD=0%Q=)
T7(R=N)
U1(DF=N%T=7B-85%TG=80%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(R=N)

# EMC Celerra SAN 
Fingerprint EMC Celerra NAS device
Class EMC | embedded || storage-misc
SEQ(SP=C-16%GCD=FA00|1F400|2EE00|3E800|4E200%ISR=97-A1%TI=RI%TS=1|3)
OPS(O1=M5B4NNSNW3NNT11%O2=M5B4NNSNW3NNT11%O3=M5B4NW3NNT11%O4=M5B4NNSNW3NNT11%O5=M5B4NNSNW3NNT11%O6=M5B4NNSNNT11)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=FFFF%O=M5B4NNSNW3%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=N)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=4210%RIPCK=I%RUCK=G%RUD=G)
IE(DFI=N%T=FA-104%TG=FF%CD=S)

# EMC Celerra NS350 version 5.5.25-2
# EMC Celerra File Server
# EMC Celerra File Server  Version: T5.5.29.1
Fingerprint EMC Celerra NS350 NAS device
Class EMC | embedded || storage-misc
CPE cpe:/h:emc:celerra_ns350 auto
SEQ(SP=C-16%GCD=FA00|1F400|2EE00|3E800|4E200%ISR=97-A1%II=I%TS=1|2|3)
OPS(O1=M5B4NNSNW3NNT11%O2=M5B4NNSNW3NNT11%O3=M5B4NW3NNT11%O4=M5B4NNSNW3NNT11%O5=M5B4NNSNW3NNT11%O6=M5B4NNSNNT11)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=FFFF%O=M5B4NNSNW3%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=3B-45%TG=40%W=FFFF%S=O%A=O%F=A%O=NNT11%RD=0%Q=)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N|Y%T=3B-45|FA-104%TG=40|FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=4210%RIPCK=I%RUCK=G%RUD=G)
IE(DFI=N%T=FA-104%TG=FF%CD=S)

# EMC Celerra File Serrver, Build: T5.6.44.408 Version 4.0
# EMC Celerra File Serrver, Build: T5.6.44.408 Version 5.0
# EMC Clariion NS700G DataMover running OS (DART Version) 5.6.44
# Celerra (NFS addon for EMC arrays) control station.
Fingerprint EMC Celerra or Clarion NAS device
Class EMC | embedded || storage-misc
SEQ(SP=F-19%GCD=FA00|1F400|2EE00|3E800|4E200%ISR=99-A3%TI=RI%CI=I|RI%II=I%TS=1|2|3)
OPS(O1=M5B4NNSNW3NNT11%O2=M5B4NNSNW3NNT11%O3=M5B4NW3NNT11%O4=M5B4NNSNW3NNT11%O5=M5B4NNSNW3NNT11%O6=M5B4NNSNNT11)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=FFFF%O=M5B4NNSNW3%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=3B-45%TG=40%W=FFFF%S=O%A=S+%F=AS%O=M5B4NNSNW3NNT11%RD=0%Q=)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=4210%RIPCK=I%RUCK=G%RUD=G)
IE(DFI=N%T=FA-104%TG=FF%CD=S)

# IPCop V1.4.11 (1.4.10 updated to 1.4.11)
# Linux 2.4.34 #1 Tue Jan 9 01:40:56 GMT 2007 i586 GenuineIntel unknown GNU/Linux (IPCop firewall v1.4.15)
# IPCOP 1.4.15; Linux 2.4.34 #1 Fri Mar 9 23:51:29 GMT 2007 i586 pentium-mmx i386 GNU/Linux running IPCOP v. 1.4.15 w/ Copfilter v. 0.82.1
# Ipcop 1.4.18
# IPcop firewall1.4.21, Linux 2.4.36 #1 Tue Jul 22 13:13:24 GMT 2008 i686 pentium2 i386 GNU/Linux      IPCOP1.4.21
# Linux 2.6.22.19-72.e19 #1 SMP Thu Nov 26 12:12:03 EST 2009 i686 i686 i386 GNU/Linux, gui indicates Endian Firewall Appliance release 2.3-1 (Deployset #0) (c) 2004-2009
Fingerprint Endian 2.3 or IPCop firewall 1.4.10 - 1.4.21 (Linux 2.4.31 - 2.6.22)
Class Endian | Linux | 2.6.X | firewall
CPE cpe:/o:endian:linux_kernel:2.6 auto
Class IPCop | Linux | 2.4.X | firewall
CPE cpe:/o:ipcop:linux_kernel:2.4 auto
SEQ(SP=BA-D2%GCD=1-6%ISR=C0-DA%TI=Z%II=I%TS=U)
OPS(O1=M5B4%O2=M5B4%O3=M5B4%O4=M5B4%O5=M5B4%O6=M5B4)
WIN(W1=16D0%W2=16D0%W3=16D0%W4=16D0%W5=16D0%W6=16D0)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=16D0%O=M5B4%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=N)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# Enerium 200; Energy monitoring device
# Mitsubishi Electric Projector XD1000
Fingerprint Enerdis Enerium 200 energy monitoring device or Mitsubishi XD1000 projector
Class Enerdis | embedded || power-device
Class Mitsubishi | embedded || media device
SEQ(SP=F8-10C%GCD=1-6%ISR=100-114%TI=I%II=I%SS=S%TS=U)
OPS(O1=M400%O2=M400%O3=M400%O4=M400%O5=M400%O6=M400)
WIN(W1=1FF%W2=1FF%W3=1FF%W4=1FF%W5=1FF%W6=1FF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=1FF%O=M400%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=1FF%S=O%A=S+%F=AS%O=M400%RD=0%Q=)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=Y%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# EnGenius Wireless N Range Extender Model: ERB9250 Firmware: v2.0.2
Fingerprint EnGenius ESR-9250 WAP
Class EnGenius | embedded || WAP
CPE cpe:/h:engenius:esr-9250 auto
SEQ(SP=C6-D0%GCD=1-6%ISR=CE-D8%TI=Z%CI=Z%II=I%TS=U)
OPS(O1=M5B4%O2=M5B4%O3=M5B4%O4=M5B4%O5=M5B4%O6=M5B4)
WIN(W1=5B4%W2=5B4%W3=5B4%W4=5B4%W5=5B4%W6=5B4)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=5B4%O=M5B4%CC=N)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0)
T2(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%RD=0)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=O%F=AR%RD=0)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%RD=0)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%RD=0)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%RD=0)
T7(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%RD=0)
U1(DF=N%T=3B-45%TG=40%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# enistic.com power zone controller
Fingerprint Enistic Zone Controller WAP
Class Enistic | embedded || WAP
SEQ(SP=C9-D3%GCD=1-6%ISR=CF-D9%TI=I%CI=I%II=I%SS=S%TS=U)
OPS(O1=M400%O2=M400%O3=M400%O4=M400%O5=M400%O6=M400)
WIN(W1=7F%W2=7F%W3=7F%W4=7F%W5=7F%W6=7F)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=7F%O=M400%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=N)
U1(DF=Y%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Enterasys XSR Security Router
Fingerprint Enterasys XSR firewall
Class Enterasys | embedded || firewall
SEQ(SP=8D-9B%GCD=1-6%ISR=95-9F%TI=I%II=I%SS=S%TS=1)
OPS(O1=M5B4NW0NNT11%O2=M5B4NW0NNT11%O3=M5B4NW0NNT11%O4=M5B4NW0NNT11%O5=M5B4NW0NNT11%O6=M5B4NNT11)
WIN(W1=43E0%W2=4110%W3=423C%W4=4074%W5=4180%W6=403D)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=4470%O=M5B4NW0%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=403D%S=O%A=S+%F=AS%O=M5B4NW0NNT11%RD=0%Q=)
T4(R=Y%DF=N%T=3B-45%TG=40%W=4000%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=134%RID=G%RIPCK=I%RUCK=0%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# XP-8000 System Software, Version E9.1.8.0
Fingerprint Enterasys XP-8000 switch
Class Enterasys | embedded || router
CPE cpe:/h:enterasys:xp-8000 auto
SEQ(SP=92-9C%GCD=1-6%ISR=98-A2%TI=I%II=I%SS=S%TS=1)
OPS(O1=M5B4NW0NNT11%O2=M5B4NW0NNT11%O3=M5B4NW0NNT11%O4=M5B4NW0NNT11%O5=M5B4NW0NNT11%O6=M5B4NNT11)
WIN(W1=43E0%W2=4110%W3=423C%W4=4074%W5=4180%W6=403D)
ECN(R=Y%DF=Y%T=3A-44%TG=40%W=4470%O=M5B4NW0%CC=N)
T1(R=Y%DF=Y%T=3A-44%TG=40%S=O%A=S+%F=AS%RD=0)
T2(R=N)
T3(R=Y%DF=Y%T=3A-44%TG=40%W=403D%S=O%A=S+%F=AS%O=M5B4NW0NNT11%RD=0)
T4(R=N)
T5(R=Y%DF=N%T=3A-44%TG=40%W=0%S=Z%A=S+%F=AR%RD=0)
T6(R=N)
T7(R=N)
U1(DF=N%T=F9-103%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=F9-103%TG=FF%CD=S)

# Enterasys C3G124-24
# netgear GSM7358Sv2 ethernet switch
# PowerConnect 6248
# NetGear GSM7224 switch with firmware version 8.0.1.4.
Fingerprint Dell PowerConnect 6248, Enterasys C3 C3G124 or Netgear GSM7328Sv2 switch
Class Enterasys | embedded || switch
CPE cpe:/h:enterasys:c3_c3g124
Class Netgear | embedded || switch
CPE cpe:/h:netgear:gsm7328sv2
Class Dell | embedded || switch
CPE cpe:/h:dell:powerconnect_6248
SEQ(SP=0-13B%GCD=1-7|FA01|1F402|2EE03|3E804|4E205%ISR=95-A3%TI=I%CI=I%II=I%SS=S%TS=U)
OPS(O1=NNM5B4SNW0%O2=NNM5B4SNW0%O3=M5B4NW0%O4=NNM5B4SNW0%O5=NNM5B4SNW0%O6=NNM5B4S)
WIN(W1=1000%W2=1000%W3=1000%W4=1000%W5=1000%W6=1000)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=1000%O=NNM5B4SNW0%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S+%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S+%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=Z%A=S+%F=R%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=138%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=Z)

# Enterasys S4
# Enterasys Networks K6 Router/Switch Firmware 07
Fingerprint Enterasys K6 or S4 switch
Class Enterasys | embedded || switch
CPE cpe:/h:enterasys:k6
CPE cpe:/h:enterasys:s4
SEQ(SP=95-AD%GCD=1-6%ISR=94-AA%TI=I%CI=I%TS=U)
OPS(O1=NNM57ESNW0%O2=NNM57ESNW0%O3=M57ENW0%O4=NNM57ESNW0%O5=NNM57ESNW0%O6=NNM57ES)
WIN(W1=2710%W2=2710%W3=2710%W4=2710%W5=2710%W6=2710)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=2710%O=NNM57ESNW0%CC=N)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%RD=0)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=Z%A=S+%F=AR%RD=0)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%RD=0)
T7(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=Z%A=Z%F=R%RD=0)
U1(DF=N%T=3B-45%TG=40%IPL=138%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(R=N)

# HP Color LaserJet 3600 JetDirect Model Number: J7973E Firmware Version: V.30.31.BA
# Enterasys Networks, Inc. Matrix C1 C1H124-48 Rev 02.00.19 04/28/2005--09:00 ofc
Fingerprint Enterasys Matrix C1 switch or HP LaserJet 3600 printer
Class Enterasys | embedded || switch
CPE cpe:/h:enterasys:matrix_c1 auto
Class HP | embedded || printer
CPE cpe:/h:hp:laserjet_3600 auto
SEQ(SP=93-9D%GCD=1-6%ISR=9A-A4%TI=I%II=I%SS=S%TS=1|2)
OPS(O1=M5B4NW0NNT11%O2=M5B4NW0NNT11%O3=M5B4NW0NNT11%O4=M5B4NW0NNT11%O5=M5B4NW0NNT11%O6=M5B4NNT11)
WIN(W1=2000%W2=2000%W3=2000%W4=2000%W5=2000%W6=2000)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=2000%O=M5B4NW0%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=3B-45%TG=40%W=2000%S=O%A=O%F=A%O=NNT11%RD=0%Q=)
T4(R=Y%DF=N%T=3B-45%TG=40%W=2000%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=Z%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Matrix 1H582-51
Fingerprint Enterasys Matrix E1 switch
Class Enterasys | embedded || switch
CPE cpe:/h:enterasys:matrix_e1 auto
SEQ(SP=F0-104%GCD=1-6%ISR=F4-108%TI=I%II=I%SS=S%TS=1)
OPS(O1=M200NW0NNT11%O2=M200NW0NNT11%O3=M200NW0NNT11%O4=M200NW0NNT11%O5=M200NW0NNT11%O6=M200NNT11)
WIN(W1=2000%W2=2000%W3=2000%W4=2000%W5=2000%W6=2000)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=2000%O=M200NW0%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=O%A=S+%F=AR%O=%RD=0%Q=)
T6(R=N)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=I%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# It's an Enterasys E1 router switch Matrix 1G587-09
# Enterasys E1 1H582-51  Rev 03.07.31 0000 08/21/2008--17:21 ofc
Fingerprint Enterasys Matrix E1 switch (VxWorks)
Class Enterasys | embedded || switch
CPE cpe:/h:enterasys:matrix_e1 auto
Class Wind River | VxWorks || general purpose
CPE cpe:/o:windriver:vxworks auto
SEQ(SP=93-9F%GCD=1-6%ISR=9C-A6%TI=I%CI=I%II=I%SS=S%TS=1)
OPS(O1=M5B4NW0NNT11%O2=M5B4NW0NNT11%O3=M5B4NW0NNT11%O4=M5B4NW0NNT11%O5=M5B4NW0NNT11%O6=M5B4NNT11)
WIN(W1=2000%W2=2000%W3=2000%W4=2000%W5=2000%W6=2000)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=2000%O=M5B4NW0%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=3B-45%TG=40%W=2000%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=Z%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Enterasys N7 switch with routing functionality.
Fingerprint Enterasys Matrix N7 switch
Class Enterasys | embedded || switch
CPE cpe:/h:enterasys:matrix_n7 auto
SEQ(SP=96-A0%GCD=1-6%ISR=9C-A6%TI=I%CI=I%II=RI%SS=S%TS=1)
OPS(O1=M5B4NW0NNT11%O2=M5B4NW0NNT11%O3=M5B4NW0NNT11%O4=M5B4NW0NNT11%O5=M5B4NW0NNT11%O6=M5B4NNT11)
WIN(W1=2000%W2=2000%W3=2000%W4=2000%W5=2000%W6=2000)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=2000%O=M5B4NW0%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=3B-45%TG=40%W=2000%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Enterasys SecureStack C2, Chassis Firmware Revision:  05.00.28
Fingerprint Enterasys SecureStack C2 switch
Class Enterasys | embedded || switch
CPE cpe:/h:enterasys:securestack_c2 auto
SEQ(SP=0-5%GCD=FA01|1F402|2EE03|3E804|4E205%ISR=95-9F%TI=I%CI=I%II=I%SS=S%TS=A)
OPS(O1=NNT11M5B4NW0%O2=NNT11M578NW0%O3=NNT11M280NW0%O4=NNT11M218NW0%O5=NNT11M218NW0%O6=NNT11M109NW0)
WIN(W1=1000%W2=1000%W3=1000%W4=1000%W5=1000%W6=1000)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=1000%O=M5B4NW0%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T4(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S+%F=AR%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S+%F=AR%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=11C%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=Z)

# Enterasys XP 8600 SSR 8600 router switch
# XP-8000 - Enterasys Networks Firmware Version: E10.0.0.13 PROM Version: prom-E3.3.0.0
# SSR 2000 - Enterasys Networks Firmware Version: E10.0.0.16 PROM Version: prom-E3.2.0.0
# XP 2400 - Enterasys Networks Firmware Version: E10.0.0.16 PROM Version: prom-E3.3.0.0
# RAD Data Communications Milkymist One and Operating systems is Flickernoise (RTEMS)
Fingerprint Enterasys SSR router or XP switch
Class Enterasys | embedded || switch
Class Enterasys | embedded || router
SEQ(SP=92-9E%GCD=1-6%ISR=97-A3%TI=I%CI=I%II=I%SS=S%TS=1)
OPS(O1=M5B4NW0NNT11%O2=M5B4NW0NNT11%O3=M5B4NW0NNT11%O4=M5B4NW0NNT11%O5=M5B4NW0NNT11%O6=M5B4NNT11)
WIN(W1=43E0%W2=4110%W3=423C%W4=4074%W5=4180%W6=403D)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=4470%O=M5B4NW0%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=403D%S=O%A=S+%F=AS%O=M5B4NW0NNT11%RD=0%Q=)
T4(R=Y%DF=N%T=3B-45%TG=40%W=4000%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# Enterasys Wireless AP3620-1 External
Fingerprint Enterasys AP3620 WAP
Class Enterasys | embedded || WAP
CPE cpe:/h:enterasys:ap3620 auto
SEQ(SP=BB-C5%GCD=1-6%ISR=C4-CE%TI=Z%CI=I%II=I%TS=A)
OPS(O1=M584ST11NW2%O2=M584ST11NW2%O3=M584NNT11NW2%O4=M584ST11NW2%O5=M584ST11NW2%O6=M584ST11)
WIN(W1=16A0%W2=16A0%W3=16A0%W4=16A0%W5=16A0%W6=16A0)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=16D0%O=M584NNSNW2%CC=N)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0)
T2(R=N)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=16A0%S=O%A=S+%F=AS%O=M584ST11NW2%RD=0)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%RD=0)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%RD=0)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%RD=0)
T7(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%RD=0)
U1(DF=N%T=3B-45%TG=40%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# Version 01.07.04.0000 02/26/09 15:08:34 Enterasys Networks MATRIX X
Fingerprint Enterasys Matrix X router (Linux 2.4)
Class Enterasys | Linux | 2.4.X | router
CPE cpe:/o:enterasys:linux_kernel:2.4 auto
SEQ(SP=C8-D2%GCD=1-6%ISR=C9-D3%TI=I%CI=Z%II=I%SS=S%TS=7)
OPS(O1=M5B4ST11NW0%O2=M5B4ST11NW0%O3=M5B4NNT11NW0%O4=M5B4ST11NW0%O5=M5B4ST11NW0%O6=M5B4ST11)
WIN(W1=16A0%W2=16A0%W3=16A0%W4=16A0%W5=16A0%W6=16A0)
ECN(R=Y%DF=N%T=FA-104%TG=FF%W=16D0%O=M5B4NNSNW0%CC=N%Q=)
T1(R=Y%DF=N%T=FA-104%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=FA-104%TG=FF%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=N)
U1(DF=N%T=FA-104%TG=FF%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=FA-104%TG=FF%CD=S)

# Epson Colour AcuLaser C1100
Fingerprint Epson AcuLaser C1100 or CX11NF printer
Class Epson | embedded || printer
SEQ(SP=97-A1%GCD=1-6%ISR=9B-A5%TI=I%TS=1)
OPS(O1=M5C8NW0NNT11%O2=M5C8NW0NNT11%O3=M5C8NW0NNT11%O4=M5C8NW0NNT11%O5=M5C8NW0NNT11%O6=M5C8NNT11)
WIN(W1=2000%W2=2000%W3=2000%W4=2000%W5=2000%W6=2000)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=2000%O=M5C8NW0%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=2000%S=O%A=O%F=AS%O=M5C8NW0NNT11%RD=0%Q=)
T4(R=Y%DF=N%T=3B-45%TG=40%W=2000%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=Z%RUCK=0%RUD=G)
IE(R=N)

# Epson AcuLaser C1100N laser printer. Software version: Ver. 02.30.
Fingerprint Epson AcuLaser C1100N printer
Class Epson | embedded || printer
CPE cpe:/h:epson:aculaser_c1100n auto
SEQ(SP=94-9E%GCD=1-6%ISR=9B-A5%TI=I%II=I%SS=S%TS=1)
OPS(O1=M5C8NW0NNT11%O2=M5C8NW0NNT11%O3=M5C8NW0NNT11%O4=M5C8NW0NNT11%O5=M5C8NW0NNT11%O6=M5C8NNT11)
WIN(W1=2000%W2=2000%W3=2000%W4=2000%W5=2000%W6=2000)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=2000%O=M5C8NW0%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=2000%S=O%A=O%F=AS%O=M5C8NW0NNT11%RD=0%Q=)
T4(R=Y%DF=N%T=3B-45%TG=40%W=2000%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=Z%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Epson Artisan 810 Printer
Fingerprint Epson Artisan 810 printer
Class Epson | embedded || printer
CPE cpe:/h:epson:artisan_810 auto
SEQ(SP=BE-C8%GCD=1-6%ISR=C2-CC%TI=Z%CI=Z%TS=7)
OPS(O1=M5ACST11NW1%O2=M5ACST11NW1%O3=M5ACNNT11NW1%O4=M5ACST11NW1%O5=M5ACST11NW1%O6=M5ACST11)
WIN(W1=16A0%W2=16A0%W3=16A0%W4=16A0%W5=16A0%W6=16A0)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=16D0%O=M5ACNNSNW1%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(R=N)

# ELPE7 interface card installed in a Epson Stylus Pro 4900.
Fingerprint Epson Stylus Pro 400 printer
Class Epson | embedded || printer
CPE cpe:/h:epson:stylus_pro_400 auto
SEQ(CI=I%II=I)
OPS(R=N)
WIN(R=N)
ECN(R=N)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=3B-45%TG=40%W=2000%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Epson TM-TMV printer Model M244A
Fingerprint Epson TM-T88V M244A printer
Class Epson | embedded || printer
CPE cpe:/h:epson:tm-t88v_m244a
SEQ(SP=C5-CF%GCD=3|6|9|C|F%ISR=D4-DE%TI=I%CI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4W0L%O2=M5B4W0L%O3=M5B4W0L%O4=M5B4W0L%O5=M5B4W0L%O6=M5B4)
WIN(W1=2000%W2=2000%W3=2000%W4=2000%W5=2000%W6=2000)
ECN(R=Y%DF=N%T=130-13A%TG=FF%W=2000%O=M5B4W0L%CC=N%Q=)
T1(R=Y%DF=N%T=130-13A%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=130-13A%TG=FF%W=0%S=Z%A=O%F=AR%O=%RD=0%Q=)
T4(R=Y%DF=N%T=130-13A%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=130-13A%TG=FF%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=130-13A%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=130-13A%TG=FF%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=130-13A%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=2BA8%RUD=G)
IE(DFI=N%T=130-13A%TG=FF%CD=Z)

# World Wide Packets LightningEdge (tm) LE-427 Access Distributor
# World Wide Packets LightningEdge (tm) LE-311 Access Concentrator
# World Wide Packets LightningEdge (tm) LE-327 Access Concentrator
# Ericsson BusinessPhone telephone exchange
Fingerprint Ericsson BusinessPhone PBX, or World Wide Packets LE-311, LE-327, or LE-427 LightningEdge switch
Class Ericsson | embedded || PBX
Class World Wide Packets | embedded || switch
SEQ(SP=44-4E%GCD=3E8|7D0|BB8|FA0|1388%ISR=99-A3%TI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4%O2=M5B4%O3=M5B4%O4=M5B4%O5=M5B4%O6=M5B4)
WIN(W1=2000%W2=2000%W3=2000%W4=2000%W5=2000%W6=2000)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=2000%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=3B-45%TG=40%W=2000%S=O%A=S+%F=AS%O=M5B4%RD=0%Q=)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# ESI Estech Systems Inc Network Services Processor (NSP) ESI 100 Communications Server
Fingerprint ESI ESI-100 VoIP adapter
Class ESI | embedded || VoIP adapter
CPE cpe:/h:esi:esi-100 auto
SEQ(SP=0-5%GCD=1-6%ISR=15-1F%TI=I%CI=I%II=I%SS=S%TS=U)
OPS(R=N)
WIN(R=N)
ECN(R=N)
T1(R=Y%DF=N%T=3B-3D%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=3B-3D%TG=40%W=0%S=Z%A=S%F=R%O=%RD=0%Q=)
T3(R=N)
T4(R=Y%DF=N%T=3B-3D%TG=40%W=0%S=A%A=S%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-3D%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-3D%TG=40%W=0%S=A%A=S%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-3D%TG=40%W=0%S=Z%A=S%F=R%O=%RD=0%Q=)
U1(DF=N%T=3B-3D%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=3B-3D%TG=40%CD=S)

# www.oberon.ethz.ch Bluebottle / Oberon OS created by ETH Zurich, http://en.wikipedia.org/wiki/Bluebottle_OS
Fingerprint Bluebottle OS
Class ETH Zurich | Bluebottle || general purpose
CPE cpe:/o:ethzurich:bluebottle auto
SEQ(SP=102-10C%GCD=1-6%ISR=102-10C%TI=RD%CI=RI%TS=U)
OPS(O1=M5B4%O2=M5B4%O3=M5B4%O4=M5B4%O5=M5B4%O6=M5B4)
WIN(W1=8000%W2=8000%W3=8000%W4=8000%W5=8000%W6=8000)
ECN(R=Y%DF=N%T=FA-104%TG=FF%W=8000%O=M5B4%CC=N)
T1(R=Y%DF=N%T=FA-104%TG=FF%S=O%A=S+%F=AS%RD=0)
T2(R=Y%DF=Y%T=1B-25%TG=20%W=80%S=A%A=S+%F=AR%O=WANM109T10S%RD=0)
T3(R=N)
T4(R=Y%DF=Y%T=1B-25%TG=20%W=400%S=A%A=S+%F=AR%O=WANM109T10S%RD=0)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=7A69%S=Z%A=S+%F=AR%RD=0)
T6(R=Y%DF=Y%T=1B-25%TG=20%W=8000%S=A%A=S+%F=AR%O=WANM109T10S%RD=0)
T7(R=N)
U1(R=N)
IE(R=N)

# EtherWerX PT-1000 PPPoE Terminator
Fingerprint EtherWerX PT-1000 PPPoE terminator
Class EtherWerX | embedded || router
SEQ(SP=CB-DD%GCD=1-6%ISR=D9-E3%TI=I%II=I%SS=S%TS=0)
OPS(O1=M5B4NW3NNT01%O2=M5B4NW3NNT01%O3=M5B4NW3NNT01%O4=M5B4NW3NNT01%O5=M5B4NW3NNT01%O6=M5B4NNT01)
WIN(W1=1000%W2=1000%W3=1000%W4=1000%W5=1000%W6=1000)
ECN(R=N)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=N)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=FA-104%TG=FF%CD=S)

# Exabyte 221L LTO3 Backup Device, Firmware Version : 11.6.1
Fingerprint Exabyte 221L LTO-3 tape library
Class Exabyte | embedded || storage-misc
SEQ(SP=FF-109%GCD=1-6%ISR=101-10D%TI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4%O2=M5B4%O3=M5B4%O4=M5B4%O5=M5B4%O6=M5B4)
WIN(W1=111C%W2=111C%W3=111C%W4=111C%W5=111C%W6=111C)
ECN(R=Y%DF=N%T=3B-3D%TG=40%W=111C%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=3B-3D%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=3B-3D%TG=40%W=111C%S=O%A=S+%F=AS%O=M5B4%RD=0%Q=)
T4(R=Y%DF=N%T=3B-3D%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-3D%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-3D%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-3D%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-3D%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-3D%TG=40%CD=Z)

# Linux bubba 2.6.32.6 #1 Thu Jan 28 13:58:17 CET 2010 ppc GNU/Linux, running Debian Linux for PPC: http://www.excito.com/bubba/products/technical-specifications.html
Fingerprint Excito Bubba|Two file server (Linux 2.6.32)
Class Excito | Linux | 2.6.X | general purpose
CPE cpe:/o:excito:linux_kernel:2.6 auto
SEQ(SP=B9-C3%GCD=1-6%ISR=C8-D2%TI=Z%II=I%TS=8)
OPS(O1=M5B4ST11NW4%O2=M5B4ST11NW4%O3=M5B4NNT11NW4%O4=M5B4ST11NW4%O5=M5B4ST11NW4%O6=M5B4ST11)
WIN(W1=16A0%W2=16A0%W3=16A0%W4=16A0%W5=16A0%W6=16A0)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=16D0%O=M5B4NNSNW4%CC=Y%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=16A0%S=O%A=S+%F=AS%O=M5B4ST11NW4%RD=0%Q=)
T4(R=N)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=N)
T7(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# Linux 2.6.32.6 #1 Thu Jan 28 13:58:17 CET 2010 ppc GNU/Linux
Fingerprint Linux 2.6.32
Class Excito | Linux | 2.6.X | general purpose
CPE cpe:/o:linux:linux_kernel:2.6.32
SEQ(SP=C5-CF%GCD=1-6%ISR=C8-D2%TI=Z%CI=Z%II=I%TS=8)
OPS(O1=M400CST11NW4%O2=M400CST11NW4%O3=M400CNNT11NW4%O4=M400CST11NW4%O5=M400CST11NW4%O6=M400CST11)
WIN(W1=8000%W2=8000%W3=8000%W4=8000%W5=8000%W6=8000)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=8018%O=M400CNNSNW4%CC=Y%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=8000%S=O%A=S+%F=AS%O=M400CST11NW4%RD=0%Q=)
T4(R=N)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=N)
T7(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# Linux 2.6.35.4 #5 Tue Sep 7 16:06:15 CEST 2010 armv5tel GNU/Linux / Debian
Fingerprint Linux 2.6.35
Class Excito | Linux | 2.6.X | general purpose
CPE cpe:/o:linux:linux_kernel:2.6.35
SEQ(SP=B6-C0%GCD=1-6%ISR=C0-CA%TI=Z%CI=Z%II=I%TS=7)
OPS(O1=M5B4ST11NW5%O2=M5B4ST11NW5%O3=M5B4NNT11NW5%O4=M5B4ST11NW5%O5=M5B4ST11NW5%O6=M5B4ST11)
WIN(W1=16A0%W2=16A0%W3=16A0%W4=16A0%W5=16A0%W6=16A0)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=16D0%O=M5B4NNSNW5%CC=Y%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=16A0%S=O%A=S+%F=AS%O=M5B4ST11NW5%RD=0%Q=)
T4(R=N)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=N)
T7(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# SMCWBR14S-N2 - SMC Barricade N Wireless Broadband Router
# SMC7004VWBR (v2) broadband router. "Copyright (c) 1996-2000 Express Logic Inc. * ThreadX THUMB-F/ARM Version G3.0f.3.0b"
# T-Sinus 154 DSL
Fingerprint Express Logic ThreadX G3.0 (broadband router)
Class Express Logic | ThreadX | G3.X | broadband router
CPE cpe:/o:expresslogic:threadx:g3 auto
SEQ(SP=12-1C%GCD=1-6%ISR=1F-55%TI=I%CI=I%II=I%SS=S%TS=U)
OPS(O1=M578%O2=M578%O3=M280%O4=M578%O5=M218%O6=M109)
WIN(W1=1770%W2=1770%W3=1770%W4=1770%W5=1770%W6=1770)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=1770%O=M578%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=O|S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=O%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=O%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N|Y%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N|S%T=3B-45%TG=40%CD=Z)

# Linux 2.4 --Ed.
# Exterity IPTV MPEG2 VD1001 video encoder
Fingerprint Exterity IPTV MPEG2 video encoder
Class Exterity | embedded || media device
SEQ(SP=C4-CE%GCD=1-6%ISR=C6-D0%TI=Z%CI=Z%II=Z%TS=7)
OPS(O1=M5B4ST11NW0%O2=M5B4ST11NW0%O3=M5B4NNT11NW0%O4=M5B4ST11NW0%O5=M5B4ST11NW0%O6=M5B4ST11)
WIN(W1=16A0%W2=16A0%W3=16A0%W4=16A0%W5=16A0%W6=16A0)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=16D0%O=M5B4NNSNW0%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=16A0%S=O%A=S+%F=AS%O=M5B4ST11NW0%RD=0%Q=)
T4(R=Y%DF=Y%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=FA-104%TG=FF%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=Y%T=FA-104%TG=FF%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=Y%T=FA-104%TG=FF%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=Y%T=FA-104%TG=FF%CD=S)

# Summit48i switch running ExtremeWare 7.3
# Extremeware Version 7.1.1
Fingerprint Extreme Networks Summit48si switch (ExtremeWare 7.1 - 7.8)
Class Extreme Networks | ExtremeWare | 7.X | switch
CPE cpe:/o:extremenetworks:extremeware:7 auto
SEQ(SP=80-8E%GCD=1-6%ISR=88-92%TI=I%CI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4%O2=M5B4%O3=M5B4%O4=M5B4%O5=M5B4%O6=M5B4)
WIN(W1=1000%W2=1000%W3=1000%W4=1000%W5=1000%W6=1000)
ECN(R=Y%DF=N%T=19-23%TG=20%W=1000%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=19-23%TG=20%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=19-23%TG=20%W=1000%S=O%A=O%F=A%O=%RD=0%Q=)
T4(R=Y%DF=N%T=19-23%TG=20%W=1000%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=19-23%TG=20%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=19-23%TG=20%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=19-23%TG=20%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=7B-85%TG=80%IPL=38%UN=0%RIPL=134%RID=G%RIPCK=I%RUCK=0%RUD=G)
IE(DFI=S%T=7B-85%TG=80%CD=S)

# Extreme Networks summit48si switch running ExtremeWare 7.6
# Software Version 7.8.2b1
# Extremeware  Version 7.4.3.5 [ssh] [base] by Release_Master on 12/12/05 13:34:02
Fingerprint Extreme Networks Summit48si switch (ExtremeWare 7.4 - 7.8)
Class Extreme Networks | ExtremeWare | 7.X | switch
CPE cpe:/o:extremenetworks:extremeware:7 auto
SEQ(SP=64-8C%GCD=1-6%ISR=83-91%TI=I%CI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4%O2=M5B4%O3=M5B4%O4=M5B4%O5=M5B4%O6=M5B4)
WIN(W1=1000%W2=1000%W3=1000%W4=1000%W5=1000%W6=1000)
ECN(R=Y%DF=N%T=1A-24%TG=20%W=1000%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=1A-24%TG=20%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=1A-24%TG=20%W=1000%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=1A-24%TG=20%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=1A-24%TG=20%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=1A-24%TG=20%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=7C-86%TG=80%IPL=38%UN=0%RIPL=134%RID=G%RIPCK=I%RUCK=0%RUD=G)
IE(DFI=S%T=7C-86%TG=80%CD=S)

# Extreme Networks x250e-48p layer 3 switch, ExtremeXOS version 12.0.1.11
# Extreme Networks Summit x350-48lt, ExtremeXOS version 12.0.3.16 v1203b16
Fingerprint Extreme Networks x250e or x350 switch (ExtremeXOS 12.0.1 - 12.0.3)
Class Extreme Networks | ExtremeXOS | 12.X | switch
CPE cpe:/o:extremenetworks:extremexos:12 auto
SEQ(SP=C3-CD%GCD=1-6%ISR=C5-D3%TI=Z%CI=Z%II=I%TS=7)
OPS(O1=M5B4NNT11NW0%O2=M5B4NNT11NW0%O3=M5B4NNT11NW0%O4=M5B4NNT11NW0%O5=M5B4NNT11NW0%O6=M5B4NNT11)
WIN(W1=16A0%W2=16A0%W3=16A0%W4=16A0%W5=16A0%W6=16A0)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=16D0%O=M5B4NW0%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=16A0%S=O%A=S+%F=AS%O=M5B4NNT11NW0%RD=0%Q=)
T4(R=Y%DF=Y%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=FA-104%TG=FF%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=Y%T=FA-104%TG=FF%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=FA-104%TG=FF%CD=S)

# SysName: X450e-48p, Primary ver: 12.0.3.16, Secondary ver: 15.3.1.4, primary.cfg Created by ExtremeXOS version 15.3.1.4
Fingerprint Extreme Networks Summit X450e switch (ExtremeXOS 15.3)
Class Extreme Networks | ExtremeXOS | 15.X | switch
CPE cpe:/o:extremenetworks:extremexos:15 auto
SEQ(SP=C6-D0%GCD=1-6%ISR=C7-D1%TI=Z%CI=Z%II=I%TS=7)
OPS(O1=M5B4NNT11NW5%O2=M5B4NNT11NW5%O3=M5B4NNT11NW5%O4=M5B4NNT11NW5%O5=M5B4NNT11NW5%O6=M5B4NNT11)
WIN(W1=16A0%W2=16A0%W3=16A0%W4=16A0%W5=16A0%W6=16A0)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=16D0%O=M5B4NW5%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=16A0%S=O%A=O|S+%F=A|AS%O=NNT11|M5B4NNT11NW5%RD=0%Q=)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# BIG-IP Kernel 4.5.14, customized version of WindRiver BSD/OS version 4.5
Fingerprint F5 BIG-IP load balancer (BSD/OS 4.5)
Class F5 Networks | BSD/OS | 4.X | load balancer
CPE cpe:/o:f5:bsd_os:4 auto
SEQ(SP=FC-10A%GCD=1-6%ISR=FC-10E%TI=RI%CI=RD%TS=1)
OPS(O1=M514NW4NNT11%O2=M514NW0NNT11%O3=M514NW4NNT11%O4=M514NW4NNT11%O5=M514NW4NNT11%O6=M514NNT11)
WIN(W1=4204%W2=4204%W3=4100%W4=4000%W5=40E8%W6=402E)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=4204%O=M514NW4%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=3D-47%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=3D-47%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T4(R=Y%DF=N%T=3D-47%TG=40%W=0%S=A%A=S%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3D-47%TG=40%W=0%S=A%A=S%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3D-47%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=4210%RIPCK=I%RUCK=G%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# F5 BIG-IP ASM Virtual Edition
Fingerprint F5 BIG-IP Application Security Manager firewall
Class F5 Networks | embedded || firewall
SEQ(SP=FB-105%GCD=1-6%ISR=104-10E%TI=Z%CI=I%II=I%TS=A)
OPS(O1=M5C8ST11NW7%O2=M5C8ST11NW7%O3=M5C8NNT11NW7%O4=M5C8ST11NW7%O5=M5C8ST11NW7%O6=M5C8ST11)
WIN(W1=4774%W2=4774%W3=4774%W4=4774%W5=4774%W6=4774)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=478C%O=M5C8NNSNW7%CC=Y%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=Y%T=FA-104%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=4774%S=O%A=S+%F=AS%O=M5C8ST11NW7%RD=0%Q=)
T4(R=Y%DF=Y%T=FA-104%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=FA-104%TG=FF%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=FA-104%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
T7(R=Y%DF=Y%T=FA-104%TG=FF%W=0%S=A%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=Y%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=Y%T=FA-104%TG=FF%CD=S)

# f5 3650 big ip ltm
Fingerprint F5 BIG-IP 3650 Local Traffic Manager load balancer
Class F5 Networks | embedded || load balancer
SEQ(SP=FF-109%GCD=1-6%ISR=F7-10F%TI=RD%CI=RD%II=I%TS=A)
OPS(O1=M5B4NW0NNT11SLL%O2=M5B4NW0NNT11SLL%O3=M5B4NW0NNT11%O4=M5B4NW0NNT11SLL%O5=M5B4NW0NNT11SLL%O6=M5B4NNT11SLL)
WIN(W1=111C%W2=1068%W3=780%W4=648%W5=648%W6=31B)
ECN(R=Y%DF=Y%T=FA-104%TG=FF%W=111C%O=M5B4NW0SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=FA-104%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=Y%T=FA-104%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
T3(R=N)
T4(R=Y%DF=Y%T=FA-104%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=FA-104%TG=FF%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=FA-104%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
T7(R=Y%DF=Y%T=FA-104%TG=FF%W=0%S=A%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=Y%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=Y%T=FA-104%TG=FF%CD=S)

# BIG-IP 6400, "BIG-IP 9.4.4 Build 73.1 Hotfix HF1"
Fingerprint F5 BIG-IP 6400 load balancer
Class F5 Networks | embedded || load balancer
SEQ(SP=C1-CB%GCD=1-6%ISR=C2-CC%TI=Z%II=I%TS=7)
OPS(O1=M5B4ST11NW0%O2=M5B4ST11NW0%O3=M5B4NNT11NW0%O4=M5B4ST11NW0%O5=M5B4ST11NW0%O6=M5B4ST11)
WIN(W1=16A0%W2=16A0%W3=16A0%W4=16A0%W5=16A0%W6=16A0)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=16D0%O=M5B4NNSNW0%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=Y%T=FA-104%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=16A0%S=O%A=S+%F=AS%O=M5B4ST11NW0%RD=0%Q=)
T4(R=Y%DF=Y%T=FA-104%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=FA-104%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
T7(R=Y%DF=Y%T=FA-104%TG=FF%W=0%S=A%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=Y%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=269E%RUD=G)
IE(DFI=Y%T=FA-104%TG=FF%CD=S)

# BIG-IP 10.2.0 Build 1789.0 Hotfix HF2
Fingerprint F5 BIG-IP load balancer
Class F5 Networks | embedded || load balancer
SEQ(SP=F0-10E%GCD=1-6%ISR=FF-10F%TI=Z%CI=RD%II=I|RI%TS=A)
OPS(O1=M564ST11NW7%O2=M564ST11NW7%O3=M564NNT11NW7%O4=M564ST11NW7%O5=M564ST11NW7%O6=M564ST11)
WIN(W1=16A0%W2=16A0%W3=16A0%W4=16A0%W5=16A0%W6=16A0)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=16D0%O=M564NNSNW7%CC=N)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0)
T2(R=Y%DF=N%T=FA-104%TG=FF%W=80%S=Z%A=S%F=AR%RD=0)
T3(R=Y%DF=N%T=FA-104%TG=FF%W=100%S=Z%A=S+%F=AR%RD=0)
T4(R=Y%DF=N%T=FA-104%TG=FF%W=400%S=A%A=S%F=AR%RD=0)
T5(R=Y%DF=Y%T=FA-104%TG=FF%W=0%S=O%A=S+%F=AR%RD=0)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=8000%S=A%A=S%F=AR%RD=0)
T7(R=Y%DF=N%T=FA-104%TG=FF%W=FFFF%S=Z%A=S+%F=AR%RD=0)
U1(DF=Y%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=Y%T=FA-104%TG=FF%CD=S)

# F5 BigIP.  Base OS is RedHat linux 2.4.
Fingerprint F5 BIG-IP load balancer
Class F5 Networks | embedded || load balancer
SEQ(SP=C0-D0%GCD=1-6%ISR=C8-D4%TI=Z%II=I%TS=U)
OPS(O1=M5B4NNSNW0%O2=M5B4NNSNW0%O3=M5B4NW0%O4=M5B4NNSNW0%O5=M5B4NNSNW0%O6=M5B4NNS)
WIN(W1=16D0%W2=16D0%W3=16D0%W4=16D0%W5=16D0%W6=16D0)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=16D0%O=M5B4NNSNW0%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=Y%T=FA-104%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=16D0%S=O%A=S+%F=AS%O=M5B4NNSNW0%RD=0%Q=)
T4(R=Y%DF=Y%T=FA-104%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=FA-104%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
T7(R=Y%DF=Y%T=FA-104%TG=FF%W=0%S=A%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=Y%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=29F9%RUD=G)
IE(DFI=Y%T=FA-104%TG=FF%CD=S)

# BIG-IP Kernel 4.2PTF-10 Build95
Fingerprint F5 BIG-IP load balancer
Class F5 Networks | embedded || load balancer
SEQ(SP=F7-10B%GCD=1-6%ISR=FD-10B%TI=I%CI=I%II=I%SS=S%TS=1)
OPS(O1=M5B4NW4NNT11%O2=M5B4NW0NNT11%O3=M5B4NW4NNT11%O4=M5B4NW4NNT11%O5=M5B4NW4NNT11%O6=M5B4NNT11)
WIN(W1=4470%W2=41A0%W3=4100%W4=4000%W5=40E8%W6=402E)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=4470%O=M5B4NW4%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=402E%S=O%A=S+%F=AS%O=M5B4NW4NNT11%RD=0%Q=)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=4210%RIPCK=I%RUCK=G%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# BIG-IP Version 10.0.0 5400.0 Final Edition
# BIG-IP 10.0.1 Build 283.0 Final
Fingerprint F5 BIG-IP load balancer
Class F5 Networks | embedded || load balancer
SEQ(SP=C5-D9%GCD=1-6%ISR=C9-D3%TI=I%II=I%SS=O%TS=7)
OPS(O1=M5B4ST11NW0%O2=M5B4ST11NW0%O3=M5B4NNT11NW0%O4=M5B4ST11NW0%O5=M5B4ST11NW0%O6=M5B4ST11)
WIN(W1=16A0%W2=16A0%W3=16A0%W4=16A0%W5=16A0%W6=16A0)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=16D0%O=M5B4NNSNW0%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=Y%T=FA-104%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=16A0%S=O%A=S+%F=AS%O=M5B4ST11NW0%RD=0%Q=)
T4(R=Y%DF=Y%T=FA-104%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=FA-104%TG=FF%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=FA-104%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
T7(R=Y%DF=Y%T=FA-104%TG=FF%W=0%S=A%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=Y%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=Y%T=FA-104%TG=FF%CD=S)

# F5 Networks Big IP device running TMOS (proprietary Linux)with LTM and SSL offload modules.
Fingerprint F5 BIG-IP load balancer
Class F5 Networks | embedded || load balancer
SEQ(SP=FA-104%GCD=1-6%ISR=FC-106%TI=Z%II=I%TS=U)
OPS(O1=M564NNSNW0%O2=M564NNSNW0%O3=M564NW0%O4=M564NNSNW0%O5=M564NNSNW0%O6=M564NNS)
WIN(W1=16D0%W2=16D0%W3=16D0%W4=16D0%W5=16D0%W6=16D0)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=16D0%O=M564NNSNW0%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=O|S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=O%A=S+%F=AR%O=%RD=0%Q=)
T6(R=N)
T7(R=N)
U1(DF=Y%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=8AA1%RUD=G)
IE(DFI=Y%T=FA-104%TG=FF%CD=S)

# F5 BIG IP LTM load balancer running OS version 9.1.0.3.0, Linux kernel version 2.4.21.
Fingerprint F5 BIG-IP Local Traffic Manager load balancer
Class F5 Networks | embedded || load balancer
SEQ(SP=C1-CB%GCD=1-6%ISR=C4-CE%TI=Z%II=I%TS=7)
OPS(O1=M5B4ST11NW0%O2=M5B4ST11NW0%O3=M5B4NNT11NW0%O4=M5B4ST11NW0%O5=M5B4ST11NW0%O6=M5B4ST11)
WIN(W1=16A0%W2=16A0%W3=16A0%W4=16A0%W5=16A0%W6=16A0)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=16D0%O=M5B4NNSNW0%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=Y%DF=Y%T=FA-104%TG=FF%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=N)
T7(R=N)
U1(DF=Y%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=Y%T=FA-104%TG=FF%CD=S)

# http://www.firebrick.co.uk/products_2700.php
Fingerprint FireBrick FB2700 firewall
Class FireBrick | embedded || firewall
CPE cpe:/h:firebrick:fb2700 auto
SEQ(SP=6F-9D%GCD=5|A|F|14|19%ISR=E5-EF%TI=I%TS=U)
OPS(O1=M5B4%O2=M5B4%O3=M5B4%O4=M5B4%O5=M5B4%O6=M5B4)
WIN(W1=8000%W2=8000%W3=8000%W4=8000%W5=8000%W6=8000)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=8000%O=M5B4%CC=N)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0)
T2(R=N)
T3(R=Y%DF=N%T=3B-45%TG=40%W=8000%S=O%A=S+%F=AS%O=M5B4%RD=0)
T4(R=N)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=Z%A=S+%F=AR%RD=0)
T6(R=N)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(R=N)

# Firebrick 2700 manufactured by Firebrick http://www.firebrick.co.uk/products_2700.php
Fingerprint FireBrick FB2700 firewall
Class FireBrick | embedded || firewall
CPE cpe:/h:firebrick:fb2700 auto
SEQ(SP=104-10E%GCD=1-6%ISR=103-10F%TI=I%TS=U)
OPS(O1=M5B4%O2=M5B4%O3=M5B4%O4=M5B4%O5=M5B4%O6=M5B4)
WIN(W1=8000%W2=8000%W3=8000%W4=8000%W5=8000%W6=8000)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=8000%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=3B-45%TG=40%W=8000%S=O%A=S+%F=AS%O=M5B4%RD=0%Q=)
T4(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(R=N)

# Force10 Operating System Version: 1.0, Force10 Application Software Version: 8.3.1.1, System Type: S50N
Fingerprint Force10 S50N switch (FTOS 1.0)
Class Force10 | FTOS | 1.X | switch
CPE cpe:/o:force10:ftos:1 auto
SEQ(SP=D1-DB%GCD=1-6%ISR=D8-E2%TI=I%CI=I%II=I%SS=S%TS=0)
OPS(O1=M564NW0NNT01%O2=M564NW0NNT01%O3=M564NW0NNT01%O4=M564NW0NNT01%O5=M564NW0NNT01%O6=M564NNT01)
WIN(W1=4000%W2=4000%W3=4000%W4=4000%W5=4000%W6=4000)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=4000%O=M564NW0%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=3B-45%TG=40%W=4000%S=O%A=S+%F=AS%O=M564NW0NNT01%RD=0%Q=)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(R=N)
IE(DFI=N%T=FA-104%TG=FF%CD=S)

# Force10 Networks S-Series switch running SFTOS 2.5.1.3
Fingerprint Force10 Networks S-Series switch (SFTOS 2.5.1.3)
Class Force10 | SFTOS | 2.X | switch
CPE cpe:/o:force10:sftos:2 auto
SEQ(SP=0-5%GCD=FA01|1F402|2EE03|3E804|4E205%ISR=95-9F%TI=I%II=I%SS=S%TS=A)
OPS(O1=NNT11M5B4NW0%O2=NNT11M578NW0%O3=NNT11M280NW0%O4=NNT11M218NW0%O5=NNT11M218NW0%O6=NNT11M109NW0)
WIN(W1=2710%W2=2710%W3=2710%W4=2710%W5=2710%W6=2710)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=2710%O=M5B4NW0%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T3(R=N)
T4(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S+%F=AR%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S+%F=AR%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=11C%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=Z)

# FORE Systems ForeThought 4.1.0 1.76
Fingerprint FORE Systems ForeThought ATM switch
Class FORE Systems | embedded || switch
SEQ(SP=0-16%GCD=FA00|1F400|2EE00|3E800|4E200%ISR=97-A1%TI=I%II=I%SS=S%TS=U)
OPS(O1=M400%O2=M400%O3=M400%O4=M400%O5=M400%O6=M400)
WIN(W1=1000%W2=1000%W3=F00%W4=1000%W5=EA8%W6=F87)
ECN(R=Y%DF=N%T=3B-3D%TG=40%W=1000%O=M400%CC=N%Q=)
T1(R=Y%DF=N%T=3B-3D%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=3B-3D%TG=40%W=F87%S=O%A=O%F=A%O=%RD=0%Q=)
T4(R=Y%DF=N%T=3B-3D%TG=40%W=1000%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-3D%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-3D%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-3D%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=15C%RID=4210%RIPCK=Z%RUCK=0%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# Fortinet Fortigate FGT-50B - OS Version : 4.0 MR2
# Fortigate 310B
Fingerprint Fortinet FortiGate-50B or 310B firewall
Class Fortinet | embedded || firewall
SEQ(SP=F9-10B%GCD=1-6%ISR=105-10F%TI=BI|RD%TS=7|9)
OPS(O1=M5B4ST11NW1%O2=M5B4ST11NW1%O3=M5B4NNT11NW1%O4=M5B4ST11NW1%O5=M5B4ST11NW1%O6=M5B4ST11)
WIN(W1=16A0%W2=16A0%W3=16A0%W4=16A0%W5=16A0%W6=16A0)
ECN(R=N)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=O|S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=Y%DF=N%T=1B-25%TG=20%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=N)
T7(R=N)
U1(R=N)
IE(R=N)

# Fortinet 100A
# FortiGate 60B, firmware: v4.0,build0192,091222 (MR1 Patch 2)
Fingerprint Fortinet FortiGate-60B or -100A firewall
Class Fortinet | embedded || firewall
SEQ(SP=102-10C%GCD=1-6%ISR=105-10F%TI=BI%TS=7)
OPS(O1=M5B4ST11NW0%O2=M5B4ST11NW0%O3=M5B4NNT11NW0%O4=M5B4ST11NW0%O5=M5B4ST11NW0%O6=M5B4ST11)
WIN(W1=16A0%W2=16A0%W3=16A0%W4=16A0%W5=16A0%W6=16A0)
ECN(R=N)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=O|S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=Y%DF=N%T=1B-25%TG=20%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=N)
T7(R=N)
U1(DF=N%T=FA-104%TG=FF%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(R=N)

# Fortinet Fortiswitch-124B-POE
Fingerprint Fortinet FortiSwitch-124B-POE switch
Class Fortinet | embedded || switch
CPE cpe:/h:fortinet:fortiswitch-124b-poe
SEQ(SP=C-16%GCD=A|14|1E|28|32%ISR=1E-28%TI=I%II=RI%SS=O|S%TS=U)
OPS(O1=M5B4%O2=M578%O3=M5B4%O4=M5B4%O5=M218%O6=M109)
WIN(W1=1800%W2=1800%W3=1800%W4=1800%W5=1800%W6=1800)
ECN(R=Y%DF=Y%T=FA-104%TG=FF%W=3%O=%CC=N%Q=U)
T1(R=Y%DF=Y%T=FA-104%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=Y%DF=Y%T=FA-104%TG=FF%W=7A69%S=A%A=S+%F=AR%O=%RD=0%Q=)
T6(R=N)
T7(R=N)
U1(R=N)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Fortianalyzer 400B, running OS: v4.0,build0552 (MR3 Patch 1)
Fingerprint Fortinet FortiAnalyzer 400B firewall (Linux 2.6)
Class Fortinet | Linux | 2.6.X | firewall
CPE cpe:/o:fortinet:linux_kernel:2.6 auto
SEQ(SP=C4-CE%GCD=1-6%ISR=C4-CE%TI=Z%II=I%TS=A)
OPS(O1=M55CST11NW6%O2=M55CST11NW6%O3=M55CNNT11NW6%O4=M55CST11NW6%O5=M55CST11NW6%O6=M55CST11)
WIN(W1=16A0%W2=16A0%W3=16A0%W4=16A0%W5=16A0%W6=16A0)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=16D0%O=M55CNNSNW6%CC=Y)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%RD=0)
T6(R=N)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# Foscam FI8908W (old model). Foscam firmware 11.14.2.28. Linux version 2.4.20-uc0 (root@maverick-linux) (gcc version 3.0) #1334.
Fingerprint Foscam FI8908W surveillance camera (Linux 2.4.20)
Class Foscam | Linux | 2.4.X | webcam
CPE cpe:/h:foscam:fi8908w
SEQ(SP=C5-CF%GCD=1-6%ISR=CD-D7%TI=Z%CI=Z%II=I%TS=6)
OPS(O1=M5B4ST11NW0%O2=M5B4ST11NW0%O3=M5B4NNT11NW0%O4=M5B4ST11NW0%O5=M5B4ST11NW0%O6=M5B4ST11)
WIN(W1=5A8%W2=5A8%W3=5A8%W4=5A8%W5=5A8%W6=5A8)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=5B4%O=M5B4NNSNW0%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=5A8%S=O%A=S+%F=AS%O=M5B4ST11NW0%RD=0%Q=)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# Foundry Networks EdgeIron ethernet switch
Fingerprint Foundry EdgeIron switch
Class Foundry | embedded || switch
SEQ(SP=8F-99%GCD=1-6%ISR=92-9C%TI=I%II=RI%SS=O%TS=1)
OPS(O1=M5B4NW0NNT11%O2=M5B4NW0NNT11%O3=M5B4NW0NNT11%O4=M5B4NW0NNT11%O5=M5B4NW0NNT11%O6=M5B4NNT11)
WIN(W1=2000%W2=2000%W3=2000%W4=2000%W5=2000%W6=2000)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=2000%O=M5B4NW0%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=3B-45%TG=40%W=2000%S=O%A=S+%F=AS%O=M5B4NW0NNT11SSNNLLLLLL|M5B4NW0NNT11NNLLLLLLLLLL%RD=0%Q=)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# foundry FastIron 400 Router, SYSIF version 21
Fingerprint Foundry FastIron 400 switch
Class Foundry | embedded || switch
CPE cpe:/h:foundrynet:fastiron_400 auto
SEQ(SP=74-96%GCD=1-6%ISR=7F-93%TI=I%CI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4%O2=M5B4%O3=M5B4%O4=M5B4%O5=M5B4%O6=M5B4)
WIN(W1=4000%W2=4000%W3=4000%W4=4000%W5=4000%W6=4000)
ECN(R=Y%DF=N%T=FA-104%TG=FF%W=4000%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=FA-104%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=Y%T=FA-104%TG=FF%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=U)
T3(R=Y%DF=Y%T=FA-104%TG=FF%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=U)
T4(R=Y%DF=Y%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=U)
T5(R=Y%DF=Y%T=FA-104%TG=FF%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=U)
T6(R=Y%DF=Y%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=U)
T7(R=Y%DF=Y%T=FA-104%TG=FF%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=U)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=FA-104%TG=FF%CD=S)

# Foundry MLX-16 (mpls router)
Fingerprint Foundry NetIron MLX-16 switch (IronWare)
Class Foundry | embedded || switch
CPE cpe:/h:foundrynet:netiron_mlx-16 auto
SEQ(SP=7E-92%GCD=1-6%ISR=88-94%TI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4%O2=M5B4%O3=M5B4%O4=M5B4%O5=M5B4%O6=M5B4)
WIN(W1=FDE8%W2=FDE8%W3=FDE8%W4=FDE8%W5=FDE8%W6=FDE8)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=FDE8%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=U)
T4(R=N)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=1%S=Z%A=S+%F=AR%O=%RD=0%Q=U)
T6(R=N)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# Foundry FES2402
# Foundry Server Iron 4G
# Foundry ServerIron GT EGx2 load balancer, SW: Version 11.0.00aTD2 Copyright (c) 1996-2007 Foundry Networks, Inc.
Fingerprint Foundry Networks FES2402 switch, ServerIron 4G proxy server, or ServerIron GT EGx2 load balancer
Class Foundry | embedded || switch
CPE cpe:/h:foundrynet:networks_fes2402
Class Foundry | embedded || proxy server
CPE cpe:/h:foundrynet:serveriron_4g
Class Foundry | embedded || load balancer
CPE cpe:/h:foundrynet:serveriron_gt_egx2
SEQ(SP=79-95%GCD=1-6%ISR=79-91%TI=I%CI=I%II=I%TS=U)
OPS(O1=M5B4%O2=M5B4%O3=M5B4%O4=M5B4%O5=M5B4%O6=M5B4)
WIN(W1=4000%W2=4000%W3=4000%W4=4000%W5=4000%W6=4000)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=4000%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=U)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=U)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=U)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=U)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=U)
T7(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=U)
U1(DF=N%T=3B-45%TG=40%IPL=44%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=I)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# ServerIron Switch SW: Version 07.5.00bT12 Copyright (c) 1996-2002 Foundry Networks, Inc.
Fingerprint Foundry Networks ServerIron switch
Class Foundry | embedded || switch
CPE cpe:/h:foundrynet:serveriron
SEQ(SP=6F-97%GCD=1-6%ISR=7C-96%TI=I%CI=I%II=I%SS=S%TS=U)
OPS(O1=M528%O2=M528%O3=M528%O4=M528%O5=M528%O6=M528)
WIN(W1=4000%W2=4000%W3=4000%W4=4000%W5=4000%W6=4000)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=4000%O=M528%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=U)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=U)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=U)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=U)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=U)
T7(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=U)
U1(DF=N%T=3B-45%TG=40%IPL=44%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=I)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# BigIron RX Router IronWare : Version 2.2.1pT143
Fingerprint Foundry BigIron RX switch (IronWare 2.2.1)
Class Foundry | IronWare | 2.X | switch
CPE cpe:/o:foundrynet:ironware:2 auto
SEQ(SP=78-94%GCD=1-6%ISR=78-92%TI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4%O2=M5B4%O3=M5B4%O4=M5B4%O5=M5B4%O6=M5B4)
WIN(W1=FDE8%W2=FDE8%W3=FDE8%W4=FDE8%W5=FDE8%W6=FDE8)
ECN(R=Y%DF=N%T=41%TG=40%W=FDE8%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=41%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=Y%T=41%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=U)
T3(R=Y%DF=Y%T=41%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=U)
T4(R=Y%DF=Y%T=41%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=U)
T5(R=Y%DF=Y%T=41%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=U)
T6(R=Y%DF=Y%T=41%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=U)
T7(R=Y%DF=Y%T=41%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=U)
U1(DF=N%T=41%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=41%TG=40%CD=S)

# Foundry BigIronRX IronWare Version 2.2.1lT157
Fingerprint Foundry BigIron RX switch (IronWare 2.2.1lT157)
Class Foundry | IronWare | 2.X | switch
CPE cpe:/o:foundrynet:ironware:2 auto
SEQ(SP=8C-96%GCD=1-6%ISR=8A-94%TI=I%TS=U)
OPS(O1=M5B4%O2=M5B4%O3=M5B4%O4=M5B4%O5=M5B4%O6=M5B4)
WIN(W1=FDE8%W2=FDE8%W3=FDE8%W4=FDE8%W5=FDE8%W6=FDE8)
ECN(R=Y%DF=N%T=41%TG=40%W=FDE8%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=41%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=Y%T=41%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=U)
T3(R=Y%DF=Y%T=41%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=U)
T4(R=Y%DF=Y%T=41%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=U)
T5(R=Y%DF=Y%T=41%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=U)
T6(R=Y%DF=Y%T=41%TG=40%W=0%S=A|O%A=Z%F=R%O=%RD=0%Q=U)
T7(R=Y%DF=Y%T=41%TG=40%W=0%S=Z%A=O|S%F=AR%O=%RD=0%Q=U)
U1(DF=N%T=41%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=41%TG=40%CD=S)

# Foundry BigIron RX (Image Version 2.2.1)
# Netiron 4000 XMR IronWare : Version 3.6.0aT177
# Foundry Networks BigIron RX IronWare 2.4.0cT143
# Foundry BigIron RX version 2.4.0cT145
Fingerprint Foundry BigIron RX switch, NetIron MLX switch, or NetIron 4000 XMR switch (IronWare 2.2.1 - 3.6.0)
Class Foundry | IronWare | 2.X | switch
CPE cpe:/o:foundrynet:ironware:2 auto
Class Foundry | IronWare | 3.X | switch
CPE cpe:/o:foundrynet:ironware:3 auto
SEQ(SP=7B-95%GCD=1-6%ISR=7D-9B%TI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4%O2=M5B4%O3=M5B4%O4=M5B4%O5=M5B4%O6=M5B4)
WIN(W1=FDE8%W2=FDE8%W3=FDE8%W4=FDE8%W5=FDE8%W6=FDE8)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=FDE8%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=U)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=U)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=U)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=U)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=U)
T7(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=U)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# Foundry FI-4802 L2/L3 switch running version 08.0.00bT53
# Foundry FastIron 4802 running 08.0.00bT53
# Foundry FastIron FESX (Image Version 3.1.0)
# HP ProCurve 9304 HP J4139A
# Foundry Networks FastIron II Plus running SW Version 07.2.06T51
# 4.x of the code and is a FastIron GS 648p
# Foundry Workgroug Switch Model FX448
Fingerprint Foundry FastIron switch (4802, FESX, GS 648P, X448, or II Plus) (IronWare)
Class Foundry | IronWare | 3.X | switch
CPE cpe:/o:foundrynet:ironware:3 auto
Class Foundry | IronWare | 4.X | switch
CPE cpe:/o:foundrynet:ironware:4 auto
SEQ(SP=6E-A2%GCD=1-6%ISR=6C-92%TI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4%O2=M5B4%O3=M5B4%O4=M5B4%O5=M5B4%O6=M5B4)
WIN(W1=4000%W2=4000%W3=4000%W4=4000%W5=4000%W6=4000)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=4000%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=U)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=U)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=U)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=U)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=U)
T7(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=U)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# Netiron XMR, IronWare : Version 3.8.0fT177
Fingerprint Foundry NetIron MLX switch (IronWare 3.8.0)
Class Foundry | IronWare | 3.X | switch
CPE cpe:/o:foundrynet:ironware:3 auto
SEQ(SP=7A-9C%GCD=1-6%ISR=7F-8F%TI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4%O2=M5B4%O3=M5B4%O4=M5B4%O5=M5B4%O6=M5B4)
WIN(W1=FDE8%W2=FDE8%W3=FDE8%W4=FDE8%W5=FDE8%W6=FDE8)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=FDE8%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=U)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=U)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=U)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=1%S=Z%A=S+%F=AR%O=%RD=0%Q=U)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=U)
T7(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=U)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# System: NetIron CER Boot     : Version 5.1.0T185 Copyright (c) 1996-2009 Brocade Communications Systems, Inc.
Fingerprint Foundry NetIron CER router
Class Foundry | IronWare | 5.X | router
CPE cpe:/o:foundrynet:ironware:5 auto
SEQ(SP=63-A5%GCD=1-6%ISR=71-9F%TI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4%O2=M5B4%O3=M5B4%O4=M5B4%O5=M5B4%O6=M5B4)
WIN(W1=FDE8%W2=FDE8%W3=FDE8%W4=FDE8%W5=FDE8%W6=FDE8)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=FDE8%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=U)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=U)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=U)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=1%S=Z%A=S+%F=AR%O=%RD=0%Q=U)
T6(R=N)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# Foundry Networks BigIron 8000 router, IronWare 07.8.02eT53
Fingerprint Foundry Networks BigIron 8000 switch (IronWare 07.8.02eT53)
Class Foundry | IronWare | 7.X | switch
CPE cpe:/o:foundrynet:ironware:7 auto
SEQ(SP=FE-108%GCD=1-6%ISR=104-10E%TI=I|RD%II=I%SS=O|S%TS=U)
OPS(O1=M564%O2=M564%O3=M564%O4=M564%O5=M564%O6=M564)
WIN(W1=4000%W2=4000%W3=4000%W4=4000%W5=4000%W6=4000)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=4000%O=M564%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=O|S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=FA-104%TG=FF%W=80%S=A%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=FA-104%TG=FF%W=100%S=A+%A=S+%F=AR%O=%RD=0%Q=)
T4(R=Y%DF=N%T=FA-104%TG=FF%W=400%S=A%A=S%F=AR%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=O%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=8000%S=A%A=S%F=AR%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FA-104%TG=FF%W=FFFF%S=A+%A=S+%F=AR%O=%RD=0%Q=)
U1(R=N)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# Free Freebox V5
Fingerprint Free Freebox V5 ADSL modem
Class Free | Linux || broadband router
CPE cpe:/h:free:freebox:v5
CPE cpe:/o:free:linux_kernel auto
SEQ(SP=BC-C6%GCD=1-6%ISR=C6-D0%TI=Z%II=I%TS=7)
OPS(O1=M564ST11NW2%O2=M564ST11NW2%O3=M564NNT11NW2%O4=M564ST11NW2%O5=M564ST11NW2%O6=M564ST11)
WIN(W1=16A0%W2=16A0%W3=16A0%W4=16A0%W5=16A0%W6=16A0)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=16D0%O=M564NNSNW2%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=16A0%S=O%A=S+%F=AS%O=M564ST11NW2%RD=0%Q=)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# FreeBSD 2.2.9 (default everything, vmware)
# 2.2.8-STABLE FreeBSD 2.2.8-STABLE  i386
Fingerprint FreeBSD 2.2.8-STABLE - 2.2.9 (x86)
Class FreeBSD | FreeBSD | 2.X | general purpose
CPE cpe:/o:freebsd:freebsd:2 auto
SEQ(SP=92-9E%GCD=1-6%ISR=98-A2%TI=I%II=I%SS=S%TS=1)
OPS(O1=M5B4NW0NNT11%O2=M5B4NW0NNT11%O3=M5B4NW0NNT11%O4=M5B4NW0NNT11%O5=M5B4NW0NNT11%O6=M5B4NNT11)
WIN(W1=43E0%W2=4110%W3=423C%W4=4074%W5=4180%W6=403D)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=4470%O=M5B4NW0%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=403D%S=O%A=S+%F=AS%O=M5B4NW0NNT11%RD=0%Q=)
T4(R=Y%DF=N%T=3B-45%TG=40%W=4000%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=4210%RIPCK=I%RUCK=0%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# FreeBSD 3.5.1
Fingerprint FreeBSD 3.5.1 (x86)
Class FreeBSD | FreeBSD | 3.X | general purpose
CPE cpe:/o:freebsd:freebsd:3.5.1
SEQ(SP=8F-99%GCD=1-6%ISR=97-A1%TI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4%O2=M5B4%O3=M5B4%O4=M5B4%O5=M5B4%O6=M5B4)
WIN(W1=4470%W2=41A0%W3=4100%W4=4000%W5=40E8%W6=402E)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=4470%O=M5B4%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=402E%S=O%A=S+%F=AS%O=M5B4%RD=0%Q=)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=4210%RIPCK=I%RUCK=0%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# FreeBSD 4.10-RELEASE-p2 FreeBSD 4.10-RELEASE-p2 #2: Mon Apr 18 16:45:47 CEST 2005       i386
Fingerprint FreeBSD 4.10-RELEASE
Class FreeBSD | FreeBSD | 4.X | general purpose
CPE cpe:/o:freebsd:freebsd:4.10
SEQ(SP=101-10B%GCD=1-6%ISR=108-112%CI=I%II=I%TS=7)
OPS(O1=M5ACNW0NNT11%O2=M5ACNW0NNT11%O3=M5ACNW0NNT11%O4=M5ACNW0NNT11%O5=M5ACNW0NNT11%O6=M5ACNNT11)
WIN(W1=E000%W2=E000%W3=E000%W4=E000%W5=E000%W6=E000)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=E000%O=M5ACNW0%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=E000%S=O%A=S+%F=AS%O=M5ACNW0NNT11%RD=0%Q=)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# FreeBSD 4.10-RELEASE FreeBSD 4.10-RELEASE #0: Mon Oct 16 10:57:47 GMT 2006 i386
Fingerprint FreeBSD 4.10-RELEASE
Class FreeBSD | FreeBSD | 4.X | general purpose
CPE cpe:/o:freebsd:freebsd:4 auto
SEQ(SP=101-10B%GCD=1-6%ISR=105-10F%TI=I%CI=I%TS=U)
OPS(O1=M5B4%O2=M5B4%O3=M5B4%O4=M5B4%O5=M5B4%O6=M5B4)
WIN(W1=E000%W2=E000%W3=E000%W4=E000%W5=E000%W6=E000)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=E000%O=M5B4%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=E000%S=O%A=S+%F=AS%O=M5B4%RD=0%Q=)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# FreeBSD 4.10-RELEASE FreeBSD 4.10-RELEASE #0: Tue May 25 22:47:12 GMT 2004 i386
Fingerprint FreeBSD 4.10-RELEASE (x86)
Class FreeBSD | FreeBSD | 4.X | general purpose
CPE cpe:/o:freebsd:freebsd:4.10
SEQ(SP=FC-10A%GCD=1-6%ISR=100-110%TI=I%II=I%SS=S%TS=7)
OPS(O1=M564NW0NNT11%O2=M564NW0NNT11%O3=M564NW0NNT11%O4=M564NW0NNT11%O5=M564NW0NNT11%O6=M564NNT11)
WIN(W1=E000%W2=E000%W3=E000%W4=E000%W5=E000%W6=E000)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=E000%O=M564NW0%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=O%A=S+%F=AR%O=%RD=0%Q=)
T6(R=N)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Submitted on Wed, 13 Sep 2006 04:04:14 -0700
# uname -a: FreeBSD 4.11-RELEASE-p25 FreeBSD 4.11-RELEASE-p25 #0: Wed Oct  4 10:47:27 CEST 2006 i386
# FreeBSD 5.4-SECURITY FreeBSD 5.4-SECURITY #0: Tue Apr 18 06:15:11 UTC 2006 i386
Fingerprint FreeBSD 4.10-RELEASE - 5.4-SECURITY
Class FreeBSD | FreeBSD | 4.X | general purpose
CPE cpe:/o:freebsd:freebsd:4 auto
Class FreeBSD | FreeBSD | 5.X | general purpose
CPE cpe:/o:freebsd:freebsd:5 auto
SEQ(SP=DF-10D%GCD=1-6%ISR=107-10D%TI=I%II=I%SS=S%TS=7)
OPS(O1=M5B4NW0NNT11%O2=M5B4NW0NNT11%O3=M5B4NW0NNT11%O4=M5B4NW0NNT11%O5=M5B4NW0NNT11%O6=M5B4NNT11)
WIN(W1=E000%W2=E000%W3=E000%W4=E000%W5=E000%W6=E000)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=E000%O=M5B4NW0%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=E000%S=O%A=O|S+%F=AS%O=M5B4NW0NNT11%RD=0%Q=)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# FreeBSD 4.10-STABLE FreeBSD 4.10-STABLE #2: Wed Jun 16 16:44:09 PDT 2004 i386
# FreeBSD 4.11-SECURITY (i386)
# 4.10-SECURITY FreeBSD 4.10-SECURITY #0: Wed Jun 29 20:49:39 GMT 2005
Fingerprint FreeBSD 4.10-STABLE - 4.11-SECURITY
Class FreeBSD | FreeBSD | 4.X | general purpose
CPE cpe:/o:freebsd:freebsd:4 auto
SEQ(SP=F7-105%GCD=1-6%ISR=FB-10F%TI=I%II=I%SS=S%TS=7)
OPS(O1=M3FD8NW0NNT11%O2=M3FD8NW0NNT11%O3=M3FD8NW0NNT11%O4=M3FD8NW0NNT11%O5=M3FD8NW0NNT11%O6=M3FD8NNT11)
WIN(W1=E000%W2=E000%W3=E000%W4=E000%W5=E000%W6=E000)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=E000%O=M3FD8NW0%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=E000%S=O%A=S+%F=AS%O=M3FD8NW0NNT11%RD=0%Q=)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# FreeBSD 4.11-RELEASE FreeBSD 4.11-RELEASE #5: Tue Sep  6 13:34:07 PDT 2005 i386
Fingerprint FreeBSD 4.11-RELEASE
Class FreeBSD | FreeBSD | 4.X | general purpose
CPE cpe:/o:freebsd:freebsd:4.11
SEQ(SP=FA-10A%GCD=1-6%ISR=106-110%TI=RD%II=RI%TS=7)
OPS(O1=M5B4NW0NNT11%O2=M5B4NW0NNT11%O3=M5B4NW0NNT11%O4=M5B4NW0NNT11%O5=M5B4NW0NNT11%O6=M5B4NNT11)
WIN(W1=E000%W2=E000%W3=E000%W4=E000%W5=E000%W6=E000)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=E000%O=M5B4NW0%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=E000%S=O%A=S+%F=AS%O=M5B4NW0NNT11%RD=0%Q=)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# FreeBSD 4.11-RELEASE-p26 FreeBSD 4.11-RELEASE-p26 #1: Tue Jun 26 12:53:19 NOVST 2007 i386
Fingerprint FreeBSD 4.11-RELEASE
Class FreeBSD | FreeBSD | 4.X | general purpose
CPE cpe:/o:freebsd:freebsd:4.11
SEQ(SP=F0-10A%GCD=1-6%ISR=108-112%TI=RD%II=RI%TS=8)
OPS(O1=M5B4NW0NNT11%O2=M5B4NW0NNT11%O3=M5B4NW0NNT11%O4=M5B4NW0NNT11%O5=M5B4NW0NNT11%O6=M5B4NNT11)
WIN(W1=E000%W2=E000%W3=E000%W4=E000%W5=E000%W6=E000)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=E000%O=M5B4NW0%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=E000%S=O%A=S+%F=AS%O=M5B4NW0NNT11%RD=0%Q=)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# FreeBSD 4.11 (vmware)
# FreeBSD 4.11-RELEASE-p26 FreeBSD 4.11-RELEASE-p26 #0: Fri Jan 19 19:10:38 EST 2007  i386
Fingerprint FreeBSD 4.11-RELEASE (x86)
Class FreeBSD | FreeBSD | 4.X | general purpose
CPE cpe:/o:freebsd:freebsd:4.11
SEQ(SP=DE-110%GCD=1-6%ISR=102-110%TI=I%II=I%SS=S%TS=7)
OPS(O1=M586NW0NNT11|M5B4NW0NNT11%O2=M586NW0NNT11|M5B4NW0NNT11%O3=M586NW0NNT11|M5B4NW0NNT11%O4=M586NW0NNT11|M5B4NW0NNT11%O5=M586NW0NNT11|M5B4NW0NNT11%O6=M586NNT11|M5B4NNT11)
WIN(W1=E000%W2=E000%W3=E000%W4=E000%W5=E000%W6=E000)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=E000%O=M586NW0|M5B4NW0%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=E000%S=O%A=O|S+%F=AS%O=M586NW0NNT11|M5B4NW0NNT11%RD=0%Q=)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A|O%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=O|S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A|O%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=O|S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# FreeBSD 4.11-STABLE FreeBSD 4.11-STABLE #19: Tue Aug  8 01:35:43 JST 2006 i386
Fingerprint FreeBSD 4.11-STABLE
Class FreeBSD | FreeBSD | 4.X | general purpose
CPE cpe:/o:freebsd:freebsd:4.11
SEQ(SP=F2-106%GCD=1-6%ISR=100-10E%TI=RD%II=RI%TS=7)
OPS(O1=M3FD8NW0NNT11%O2=M3FD8NW0NNT11%O3=M3FD8NW0NNT11%O4=M3FD8NW0NNT11%O5=M3FD8NW0NNT11%O6=M3FD8NNT11)
WIN(W1=E000%W2=E000%W3=E000%W4=E000%W5=E000%W6=E000)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=E000%O=M3FD8NW0%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=E000%S=O%A=S+%F=AS%O=M3FD8NW0NNT11%RD=0%Q=)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# FreeBSD 4.11-STABLE FreeBSD 4.11-STABLE #7: Thu Jul 19 02:04:40 CEST 2007 i386
Fingerprint FreeBSD 4.11-STABLE
Class FreeBSD | FreeBSD | 4.X | general purpose
CPE cpe:/o:freebsd:freebsd:4.11
SEQ(SP=FF-109%GCD=1-6%ISR=107-111%TI=I%II=I%SS=S%TS=7)
OPS(O1=M5B4NW0NNT11%O2=M5B4NW0NNT11%O3=M5B4NW0NNT11%O4=M5B4NW0NNT11%O5=M5B4NW0NNT11%O6=M5B4NNT11)
WIN(W1=E000%W2=E000%W3=E000%W4=E000%W5=E000%W6=E000)
ECN(R=Y%DF=Y%T=41%TG=40%W=E000%O=M5B4NW0%CC=N%Q=)
T1(R=Y%DF=Y%T=41%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%T=41%TG=40%W=E000%S=O%A=O|S+%F=AS%O=M5B4NW0NNT11%RD=0%Q=)
T4(R=Y%DF=Y%T=41%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=41%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=41%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=41%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=41%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=41%TG=40%CD=S)

# FreeBSD 4.3-RELEASE FreeBSD 4.3-RELEASE #0: Sat Apr 21 10:54:49 GMT 2001
# AIX 3 5 0002EBEF4C00, AIX 5.3 on System P machine
# AIX oslevel: 5300-08-01-0819 (Version 5.3, Technology Level 8, Service Pack 1 / 2008 Week 19)
# AIX 1 6 00C1636E4C00
Fingerprint FreeBSD 4.3-RELEASE or IBM AIX 5.3 - 6.1
Class FreeBSD | FreeBSD | 4.X | general purpose
CPE cpe:/o:freebsd:freebsd:4.3
Class IBM | AIX | 5.X | general purpose
CPE cpe:/o:ibm:aix:5 auto
SEQ(SP=F6-108%GCD=1-6%ISR=101-10D%TI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4%O2=M5B4%O3=M5B4%O4=M5B4%O5=M5B4%O6=M5B4)
WIN(W1=4470%W2=41A0%W3=4100%W4=4000%W5=40E8%W6=402E)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=4470%O=M5B4%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=402E%S=O%A=S+%F=AS%O=M5B4%RD=0%Q=)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# FreeBSD 4.6.2-RELEASE FreeBSD 4.6.2-RELEASE #0: Wed Aug 14 21:23:26 GMT 2002 i386
Fingerprint FreeBSD 4.6.2-RELEASE
Class FreeBSD | FreeBSD | 4.X | general purpose
CPE cpe:/o:freebsd:freebsd:4.6.2
SEQ(SP=102-10C%GCD=1-6%ISR=106-112%TI=I%II=I%SS=S%TS=7)
OPS(O1=M5B4NW0NNT11%O2=M5B4NW0NNT11%O3=M5B4NW0NNT11%O4=M5B4NW0NNT11%O5=M5B4NW0NNT11%O6=M5B4NNT11)
WIN(W1=E000%W2=E000%W3=E000%W4=E000%W5=E000%W6=E000)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=E000%O=M5B4NW0%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=3B-45%TG=40%W=E000%S=O%A=S+%F=AS%O=M5B4NW0NNT11%RD=0%Q=)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# FreeBSD 4.7-STABLE FreeBSD 4.7-STABLE #0: Mon Feb  3 00:57:16 PST 2003 i386
Fingerprint FreeBSD 4.7-STABLE
Class FreeBSD | FreeBSD | 4.X | general purpose
CPE cpe:/o:freebsd:freebsd:4.7
SEQ(R=N)
OPS(O1=%O2=%O3=%O4=%O5=%O6=)
WIN(W1=0%W2=0%W3=0%W4=0%W5=0%W6=0)
ECN(R=Y%DF=N%T=41%TG=40%W=0%O=%CC=N%Q=)
T1(R=Y%DF=N%T=41%TG=40%S=Z%A=S+%F=AR%RD=0%Q=)
T2(R=Y%DF=N%T=41%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=41%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T4(R=Y%DF=N%T=41%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=41%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=41%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=41%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=41%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=41%TG=40%CD=S)

# FreeBSD 4.9-RELEASE-p7
Fingerprint FreeBSD 4.9-RELEASE
Class FreeBSD | FreeBSD | 4.X | general purpose
CPE cpe:/o:freebsd:freebsd:4.9
SEQ(SP=FB-10B%GCD=1-6%ISR=FF-10D%TI=I%II=I%SS=S%TS=7)
OPS(O1=M5B4NW0NNT11%O2=M5B4NW0NNT11%O3=M5B4NW0NNT11%O4=M5B4NW0NNT11%O5=M5B4NW0NNT11%O6=M5B4NNT11)
WIN(W1=E000%W2=E000%W3=E000%W4=E000%W5=E000%W6=E000)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=E000%O=M5B4NW0%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=N)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# FreeBSD 4.9-RELEASE FreeBSD 4.9-RELEASE #0: Mon Oct 27 17:51:09 GMT 2003 i386
Fingerprint FreeBSD 4.9-RELEASE
Class FreeBSD | FreeBSD | 4.X | general purpose
CPE cpe:/o:freebsd:freebsd:4.9
SEQ(SP=F7-107%GCD=1-6%ISR=103-111%TI=I%CI=RI%II=I%SS=S%TS=7)
OPS(O1=M5B4NW0NNT11%O2=M5B4NW0NNT11%O3=M5B4NW0NNT11%O4=M5B4NW0NNT11%O5=M5B4NW0NNT11%O6=M5B4NNT11)
WIN(W1=E000%W2=E000%W3=E000%W4=E000%W5=E000%W6=E000)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=E000%O=M5B4NW0%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# FreeBSD 5.1
Fingerprint FreeBSD 5.1
Class FreeBSD | FreeBSD | 5.X | general purpose
CPE cpe:/o:freebsd:freebsd:5.1
SEQ(SP=FA-104%GCD=1-6%ISR=100-10E%TI=I%II=I%SS=S%TS=7)
OPS(O1=M5B4NW1NNT11%O2=M5B4NW1NNT11%O3=M5B4NW1NNT11%O4=M5B4NW1NNT11%O5=M5B4NW1NNT11%O6=M5B4NNT11)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M5B4NW1%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%S=O%A=S+%F=AS%O=M5B4NW1NNT11%RD=0%Q=)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# FreeBSD 5.2.1-RC2 FreeBSD 5.2.1
Fingerprint FreeBSD 5.2.1-RC2
Class FreeBSD | FreeBSD | 5.X | general purpose
CPE cpe:/o:freebsd:freebsd:5.2.1:rc2
SEQ(SP=101-10B%GCD=1-6%ISR=103-10F%TI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4%O2=M5B4%O3=M5B4%O4=M5B4%O5=M5B4%O6=M5B4)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M5B4%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%S=O%A=S+%F=AS%O=M5B4%RD=0%Q=)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# FreeBSD 5.2.1-RELEASE FreeBSD 5.2.1-RELEASE #0
Fingerprint FreeBSD 5.2.1-RELEASE
Class FreeBSD | FreeBSD | 5.X | general purpose
CPE cpe:/o:freebsd:freebsd:5.2.1
SEQ(SP=FC-106%GCD=1-6%ISR=FD-10F%TI=I%II=I%SS=S%TS=7)
OPS(O1=M5B4NW1NNT11%O2=M5B4NW1NNT11%O3=M5B4NW1NNT11%O4=M5B4NW1NNT11%O5=M5B4NW1NNT11%O6=M5B4NNT11)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M5B4NW1%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%S=O%A=S+%F=AS%O=M5B4NW1NNT11%RD=0%Q=)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# FreeBSD 5.5-RELEASE
# FreeBSD 5.4 on VMware (x86)
# FreeBSD 5.4-RELEASE FreeBSD 5.4-RELEASE #0: Wed Aug 31 15:36:36 MSD 2005 i386
# Kylin v2.1, derived from FreeBSD 5.3
# FreeBSD 5.3-RELEASE FreeBSD 5.3-RELEASE #1: Thu Dec 23 00:27:47 CST 2004     root@mydomain.com:/usr/obj/usr/src/sys/NS  i386
Fingerprint FreeBSD 5.3 or 5.5 (x86)
Class FreeBSD | FreeBSD | 5.X | general purpose
CPE cpe:/o:freebsd:freebsd:5 auto
SEQ(SP=D6-10C%GCD=1-6%ISR=105-111%TI=I%II=I%SS=S%TS=7)
OPS(O1=M5B4NW1NNT11NNS%O2=M5B4NW1NNT11NNS%O3=M5B4NW1NNT11%O4=M5B4NW1NNT11NNS%O5=M5B4NW1NNT11NNS%O6=M5B4NNT11NNS)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M5B4NW1NNS%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%S=O%A=S+%F=AS%O=M5B4NW1NNT11NNS%RD=0%Q=)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# FreeBSD 5.4-RELEASE FreeBSD 5.4-RELEASE #1: Sat Oct  8 12:26:06 SAST 2005 i386
Fingerprint FreeBSD 5.4-RELEASE
Class FreeBSD | FreeBSD | 5.X | general purpose
CPE cpe:/o:freebsd:freebsd:5.4
SEQ(SP=F7-105%GCD=1-6%ISR=105-113%TI=I%TS=U)
OPS(O1=M5B4NNS%O2=M5B4NNS%O3=M5B4%O4=M5B4NNS%O5=M5B4NNS%O6=M5B4NNS)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M5B4NNS%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%S=O%A=O|S+%F=AS%O=M5B4NNS%RD=0%Q=)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A|O%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=O|S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A|O%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=O|S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# FreeBSD 5.4-RELEASE-p12 FreeBSD 5.4-RELEASE-p12 #1: Wed Mar 29 08:16:11 EST 2006
Fingerprint FreeBSD 5.4-RELEASE
Class FreeBSD | FreeBSD | 5.X | general purpose
CPE cpe:/o:freebsd:freebsd:5.4
SEQ(SP=101-10B%GCD=1-6%ISR=104-10E%TS=7)
OPS(O1=M5B4NW0NNT11NNS%O2=M5B4NW0NNT11NNS%O3=M5B4NW0NNT11%O4=M5B4NW0NNT11NNS%O5=M5B4NW0NNT11NNS%O6=M5B4NNT11NNS)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M5B4NW0NNS%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# FreeBSD 5.4-RELEASE FreeBSD 5.4-RELEASE #0: Sun May  8 10:21:06 UTC 2005 i386
Fingerprint FreeBSD 5.4-RELEASE
Class FreeBSD | FreeBSD | 5.X | general purpose
CPE cpe:/o:freebsd:freebsd:5.4
SEQ(SP=F8-102%GCD=1-6%ISR=108-112%II=I%TS=7)
OPS(O1=M5B4NW1NNT11NNS%O2=M5B4NW1NNT11NNS%O3=M5B4NW1NNT11%O4=M5B4NW1NNT11NNS%O5=M5B4NW1NNT11NNS%O6=M5B4NNT11NNS)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=FFFF%O=M5B4NW1NNS%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A|O%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A|O%A=Z%F=R%O=%RD=0%Q=)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# FreeBSD 5.4-RELEASE-p7 FreeBSD 5.4-RELEASE-p7 #0: Sun Oct  2 08:13:15 EDT 2005 amd64
Fingerprint FreeBSD 5.4-RELEASE
Class FreeBSD | FreeBSD | 5.X | general purpose
CPE cpe:/o:freebsd:freebsd:5.4
SEQ(SP=EB-109%GCD=1-6%ISR=105-10F%TI=I%CI=I%II=I%SS=S%TS=A)
OPS(O1=M5B4NW1NNT11NNS%O2=M5B4NW1NNT11NNS%O3=M5B4NW1NNT11%O4=M5B4NW1NNT11NNS%O5=M5B4NW1NNT11NNS%O6=M5B4NNT11NNS)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M5B4NW1NNS%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%S=O%A=S+%F=AS%O=M5B4NW1NNT11NNS%RD=0%Q=)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# FreeBSD 5.4-STABLE FreeBSD 5.4-STABLE #1: Sun Aug 20 15:55:44 CEST 2006 i386
Fingerprint FreeBSD 5.4-STABLE
Class FreeBSD | FreeBSD | 5.X | general purpose
CPE cpe:/o:freebsd:freebsd:5.4
SEQ(SP=FE-108%GCD=1-6%ISR=104-10E%TI=I%TS=7)
OPS(O1=M3FD8NW0NNT11NNS%O2=M3FD8NW0NNT11NNS%O3=M3FD8NW0NNT11%O4=M3FD8NW0NNT11NNS%O5=M3FD8NW0NNT11NNS%O6=M3FD8NNT11NNS)
WIN(W1=8000%W2=8000%W3=8000%W4=8000%W5=8000%W6=8000)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=8000%O=M3FD8NW0NNS%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=8000%S=O%A=O|S+%F=AS%O=M3FD8NW0NNT11NNS%RD=0%Q=)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A|O%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=O|S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A|O%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=O|S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# FreeBSD 5.4-STABLE FreeBSD 5.4-STABLE #1: Fri Jul 15 21:00:42 EEST 2005
Fingerprint FreeBSD 5.4-STABLE
Class FreeBSD | FreeBSD | 5.X | general purpose
CPE cpe:/o:freebsd:freebsd:5.4
SEQ(CI=I)
OPS(O1=%O2=%O3=%O4=%O5=%O6=)
WIN(W1=0%W2=0%W3=0%W4=0%W5=0%W6=0)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=0%O=%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=Z%A=S+%F=AR%RD=0%Q=)
T2(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=O|S%F=AR%O=%RD=0%Q=)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A|O%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=O|S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A|O%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=O|S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# FreeBSD 5.5-RELEASE-p11 FreeBSD 5.5-RELEASE-p11 #1: Thu Mar  1 18:33:17 CET 2007 i386
Fingerprint FreeBSD 5.5-RELEASE
Class FreeBSD | FreeBSD | 5.X | general purpose
CPE cpe:/o:freebsd:freebsd:5 auto
SEQ(SP=100-10A%GCD=1-6%ISR=103-10F%II=I%TS=7)
OPS(O1=M5B4NW1NNT11NNS%O2=M5B4NW1NNT11NNS%O3=M5B4NW1NNT11%O4=M5B4NW1NNT11NNS%O5=M5B4NW1NNT11NNS%O6=M5B4NNT11NNS)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M5B4NW1NNS%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=N)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# FreeBSD 5.5-STABLE FreeBSD 5.5-STABLE #0: Fri Aug 25 18:10:37 CEST 2006
Fingerprint FreeBSD 5.5-STABLE
Class FreeBSD | FreeBSD | 5.X | general purpose
CPE cpe:/o:freebsd:freebsd:5.5
SEQ(SP=101-10B%GCD=1-6%ISR=108-112%TI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4%O2=M5B4%O3=M5B4%O4=M5B4%O5=M5B4%O6=M5B4)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M5B4%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# FreeBSD 5.5-STABLE FreeBSD 5.5-STABLE #0: Sat Feb 21 01:12:59 CET 2009 amd64
Fingerprint FreeBSD 5.5-STABLE
Class FreeBSD | FreeBSD | 5.X | general purpose
CPE cpe:/o:freebsd:freebsd:5.5
SEQ(SP=102-10C%GCD=1-6%ISR=106-112%TI=I%CI=I|RD%TS=A)
OPS(O1=M5B4NW1NNT11NNS%O2=M5B4NW1NNT11NNS%O3=M5B4NW1NNT11%O4=M5B4NW1NNT11NNS%O5=M5B4NW1NNT11NNS%O6=M5B4NNT11NNS)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=7B-85%TG=80%W=FFFF%O=M5B4NW1NNS%CC=N%Q=)
T1(R=Y%DF=Y%T=7B-85%TG=80%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%T=7B-85%TG=80%W=FFFF%S=O%A=S+%F=AS%O=M5B4NW1NNT11NNS%RD=0%Q=)
T4(R=Y%DF=Y%T=7B-85%TG=80%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=7B-85%TG=80%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=7B-85%TG=80%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=Y%T=7B-85%TG=80%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=7B-85%TG=80%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=7B-85%TG=80%CD=S)

# FreeBSD 6.0-RELEASE FreeBSD 6.0-RELEASE #0: Wed Dec 28 10:43:37 UTC 2005 i386
Fingerprint FreeBSD 6.0-RELEASE
Class FreeBSD | FreeBSD | 6.X | general purpose
CPE cpe:/o:freebsd:freebsd:6.0
SEQ(SP=F8-10E%GCD=1-6%ISR=104-10E%TI=I%II=I%SS=S%TS=A)
OPS(O1=M5B4NW1NNT11%O2=M5B4NW1NNT11%O3=M5B4NW1NNT11%O4=M5B4NW1NNT11%O5=M5B4NW1NNT11%O6=M5B4NNT11)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M5B4NW1%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%S=O%A=S+%F=AS%O=M5B4NW1NNT11%RD=0%Q=)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# FreeBSD 6.0-RELEASE (x86, custom compiled)
# FreeBSD 6.2-RELEASE-p1 FreeBSD 6.2-RELEASE-p1 #2: Thu Feb 15 04:32:59 CET 2007 i386
Fingerprint FreeBSD 6.0-RELEASE - 6.2-RELEASE
Class FreeBSD | FreeBSD | 6.X | general purpose
CPE cpe:/o:freebsd:freebsd:6 auto
SEQ(SP=FB-107%GCD=1-6%ISR=FF-10F%TI=I%II=I%SS=S%TS=A)
OPS(O1=M3FD8NW1NNT11SLL%O2=M3FD8NW1NNT11SLL%O3=M3FD8NW1NNT11%O4=M3FD8NW1NNT11SLL%O5=M3FD8NW1NNT11SLL%O6=M3FD8NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M3FD8NW1SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%S=O%A=S+%F=AS%O=M3FD8NW1NNT11SLL%RD=0%Q=)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# FreeBSD 6.0-SECURITY FreeBSD 6.0-SECURITY #0: Tue Feb 28 22:53:43 UTC 2006  i386
Fingerprint FreeBSD 6.0-SECURITY (x86)
Class FreeBSD | FreeBSD | 6.X | general purpose
CPE cpe:/o:freebsd:freebsd:6 auto
SEQ(SP=ED-101%GCD=1-6%ISR=102-114%TI=I%TS=A)
OPS(O1=M5B4NW1NNT11SLL%O2=M5B4NW1NNT11SLL%O3=M5B4NW1NNT11%O4=M5B4NW1NNT11SLL%O5=M5B4NW1NNT11SLL%O6=M5B4NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=91-9B%TG=FF%W=FFFF%O=M5B4NW1SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=91-9B%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%T=91-9B%TG=FF%W=FFFF%S=O%A=O|S+%F=AS%O=M5B4NW1NNT11SLL%RD=0%Q=)
T4(R=Y%DF=Y%T=91-9B%TG=FF%W=0%S=A|O%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=91-9B%TG=FF%W=0%S=Z%A=O|S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=91-9B%TG=FF%W=0%S=A|O%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=Y%T=91-9B%TG=FF%W=0%S=Z%A=O|S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=91-9B%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=91-9B%TG=FF%CD=S)

# 6.0-STABLE FreeBSD 6.0-STABLE #2: Fri Mar 31 19:33:47 CST 2006  :/usr/obj/usr/src/sys/SECUREFILE  amd6
# FreeBSD 6.2-RELEASE #2: Wed Feb  7 14:48:24 PST 2007, custom kernel, i386.
Fingerprint FreeBSD 6.0-STABLE - 6.2-RELEASE
Class FreeBSD | FreeBSD | 6.X | general purpose
CPE cpe:/o:freebsd:freebsd:6 auto
SEQ(SP=FF-10D%GCD=1-6%ISR=104-10E%TI=RI%TS=A)
OPS(O1=M5B4NW1NNT11SLL%O2=M5B4NW1NNT11SLL%O3=M5B4NW1NNT11%O4=M5B4NW1NNT11SLL%O5=M5B4NW1NNT11SLL%O6=M5B4NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M5B4NW1SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%S=O%A=O|S+%F=AS%O=M5B4NW1NNT11SLL%RD=0%Q=)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A|O%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=O|S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A|O%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=O|S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# FreeBSD 6.1-RELEASE FreeBSD 6.1-RELEASE #0: Tue May  9 23:24:39 MDT 2006 i386
Fingerprint FreeBSD 6.1-RELEASE
Class FreeBSD | FreeBSD | 6.X | general purpose
CPE cpe:/o:freebsd:freebsd:6.1
SEQ(SP=104-10E%GCD=1-6%ISR=100-10A%II=I%TS=21)
OPS(O1=M5B4NW1NNT11SLL%O2=M5B4NW1NNT11SLL%O3=M5B4NW1NNT11%O4=M5B4NW1NNT11SLL%O5=M5B4NW1NNT11SLL%O6=M5B4NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=FFFF%O=M5B4NW1SLL%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=O|S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=O%A=S+%F=AR%O=%RD=0%Q=)
T6(R=N)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# FreeBSD 6.1-RELEASE FreeBSD 6.1-RELEASE #0: Thu Jul  6 03:22:03 MSD 2006 i386
Fingerprint FreeBSD 6.1-RELEASE
Class FreeBSD | FreeBSD | 6.X | general purpose
CPE cpe:/o:freebsd:freebsd:6.1
SEQ(SP=EF-10D%GCD=1-6%ISR=103-10D%II=I%TS=U)
OPS(O1=M5B4SLL%O2=M5B4SLL%O3=M5B4%O4=M5B4SLL%O5=M5B4SLL%O6=M5B4SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=7B-85%TG=80%W=FFFF%O=M5B4SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=7B-85%TG=80%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=7B-85%TG=80%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=7B-85%TG=80%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=7B-85%TG=80%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=Y%T=7B-85%TG=80%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=7B-85%TG=80%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=7B-85%TG=80%CD=S)

# FreeBSD 6.1-RELEASE-p1 FreeBSD 6.1-RELEASE-p1 #6: Thu Jun  8 18:52:03 UTC 2006 i386
Fingerprint FreeBSD 6.1-RELEASE
Class FreeBSD | FreeBSD | 6.X | general purpose
CPE cpe:/o:freebsd:freebsd:6.1
SEQ(SP=FA-10A%GCD=1-6%ISR=104-10E%TI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4SLL%O2=M5B4SLL%O3=M5B4%O4=M5B4SLL%O5=M5B4SLL%O6=M5B4SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M5B4SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# FreeBSD 6.1-RELEASE FreeBSD 6.1-RELEASE #0: Sun May  7 04:32:43 UTC 2006 i386
Fingerprint FreeBSD 6.1-RELEASE
Class FreeBSD | FreeBSD | 6.X | general purpose
CPE cpe:/o:freebsd:freebsd:6.1
SEQ(SP=F5-107%GCD=1-6%ISR=108-112%TI=I%CI=I%II=I%SS=S%TS=8|9)
OPS(O1=M4BENW1NNT11SLL%O2=M4BENW1NNT11SLL%O3=M4BENW1NNT11%O4=M4BENW1NNT11SLL%O5=M4BENW1NNT11SLL%O6=M4BENNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M4BENW1SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# FreeBSD 6.1-RELEASE FreeBSD 6.1-RELEASE #0: Sun May  7 04:42:56 UTC 2006
# 6.2-BETA3
# FreeBSD 6.2-PRERELEASE FreeBSD 6.2-PRERELEASE #0: Mon Dec 11 11:43:36 GMT 2006  sparc64
# FreeBSD 6.2-STABLE FreeBSD 6.2-STABLE #3: Mon Apr  2 17:12:55 MSD 2007  i386
# FreeBSD/i386 6.2-RELEASE-p2
# FreeBSD 6.2-PRERELEASE FreeBSD 6.2-PRERELEASE #10: Sun Oct  1 19:30:52 NZDT 2006 i386
# FreeBSD 6.2-RELEASE FreeBSD 6.2-RELEASE #0: Fri Jan 12 11:05:30 UTC 2007 i386
# Sandvine PTS8210, unknown OS release, but based on FreeBSD.
Fingerprint FreeBSD 6.1-RELEASE - 6.2
Class FreeBSD | FreeBSD | 6.X | general purpose
CPE cpe:/o:freebsd:freebsd:6 auto
SEQ(SP=FA-10A%GCD=1-6%ISR=FE-116%TI=I%CI=I%II=I%SS=S%TS=A|B)
OPS(O1=M5B4NW1NNT11SLL%O2=M5B4NW1NNT11SLL%O3=M5B4NW1NNT11%O4=M5B4NW1NNT11SLL%O5=M5B4NW1NNT11SLL%O6=M5B4NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M5B4NW1SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%S=O%A=O|S+%F=AS%O=M5B4NW1NNT11SLL%RD=0%Q=)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3A-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3A-45%TG=40%CD=S)

# FreeBSD 6.1-RELEASE FreeBSD 6.1-RELEASE #0: Sun May  7 04:32:43 UTC 2006 i386
# FreeBSD 6.2-RELEASE FreeBSD 6.2-RELEASE #0: Mon Feb 26 23:28:44 EET 2007 i386
Fingerprint FreeBSD 6.1-RELEASE - 6.2-RELEASE
Class FreeBSD | FreeBSD | 6.X | general purpose
CPE cpe:/o:freebsd:freebsd:6 auto
SEQ(SP=FE-10A%GCD=1-6%ISR=FF-113%TI=I%II=I%SS=S%TS=9)
OPS(O1=M5B4NW1NNT11SLL%O2=M5B4NW1NNT11SLL%O3=M5B4NW1NNT11%O4=M5B4NW1NNT11SLL%O5=M5B4NW1NNT11SLL%O6=M5B4NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M5B4NW1SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%S=O%A=S+%F=AS%O=M5B4NW1NNT11SLL%RD=0%Q=)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# FreeBSD 6.1-RELEASE-p10 FreeBSD 6.1-RELEASE-p10 #1: Wed Oct 18 23:33:34 CEST 2006 amd64
Fingerprint FreeBSD 6.1-RELEASE-p10 (x86_64)
Class FreeBSD | FreeBSD | 6.X | general purpose
CPE cpe:/o:freebsd:freebsd:6 auto
SEQ(SP=B7-FF%GCD=1-6%ISR=106-110%TI=I%II=I%SS=S%TS=A)
OPS(O1=M5ACNW1NNT11SLL%O2=M5ACNW1NNT11SLL%O3=M5ACNW1NNT11%O4=M5ACNW1NNT11SLL%O5=M5ACNW1NNT11SLL%O6=M5ACNNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3A-44%TG=40%W=FFFF%O=M5ACNW1SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3A-44%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%T=3A-44%TG=40%W=FFFF%S=O%A=S+%F=AS%O=M5ACNW1NNT11SLL%RD=0%Q=)
T4(R=Y%DF=Y%T=3A-44%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=3A-44%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3A-44%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=Y%T=3A-44%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3A-44%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3A-44%TG=40%CD=S)

# FreeBSD 6.1-STABLE FreeBSD 6.1-STABLE #1: Thu Aug  3 15:45:50 OMSST 2006 i386
Fingerprint FreeBSD 6.1-STABLE
Class FreeBSD | FreeBSD | 6.X | general purpose
CPE cpe:/o:freebsd:freebsd:6.1
SEQ(SP=FD-109%GCD=1-6%ISR=108-112%TS=U)
OPS(O1=M5B4SLL%O2=M5B4SLL%O3=M5B4%O4=M5B4SLL%O5=M5B4SLL%O6=M5B4SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M5B4SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%S=O%A=O|S+%F=AS%O=M5B4SLL%RD=0%Q=)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A|O%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=O|S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A|O%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=O|S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# FreeBSD 6.2-RELEASE FreeBSD 6.2-RELEASE #0: Fri Jan 12 10:40:27 UTC 2007 i386
# FreeBSD 6.1-STABLE FreeBSD 6.1-STABLE #0: Thu Nov 30 12:23:06 EST 2006     <LocalID>  i386
Fingerprint FreeBSD 6.1-STABLE - 6.2-RELEASE
Class FreeBSD | FreeBSD | 6.X | general purpose
CPE cpe:/o:freebsd:freebsd:6 auto
SEQ(SP=FE-108%GCD=1-6%ISR=102-10C%TI=I%II=I%SS=S%TS=A)
OPS(O1=M5B4NW1NNT11SLL%O2=M5B4NW1NNT11SLL%O3=M5B4NW1NNT11%O4=M5B4NW1NNT11SLL%O5=M5B4NW1NNT11SLL%O6=M5B4NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M5B4NW1SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%S=O%A=S+%F=AS%O=M5B4NW1NNT11SLL%RD=0%Q=)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=I%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

Fingerprint FreeBSD 6.2-RC1
Class FreeBSD | FreeBSD | 6.X | general purpose
CPE cpe:/o:freebsd:freebsd:6.2:rc1
SEQ(SP=FB-105%GCD=1-6%ISR=107-111%TI=I%II=I%SS=O|S%TS=C)
OPS(O1=M5B4NW1NNT11SLL%O2=M5B4NW1NNT11SLL%O3=M5B4NW1NNT11%O4=M5B4NW1NNT11SLL%O5=M5B4NW1NNT11SLL%O6=M5B4NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M5B4NW1SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=O|S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%S=O%A=O|S+%F=AS%O=M5B4NW1NNT11SLL%RD=0%Q=)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# FreeBSD 6.2-RELEASE FreeBSD 6.2-RELEASE #0: Fri Jan 12 10:40:27 UTC 2007 i386
# FreeBSD 6.2-RELEASE FreeBSD 6.2-RELEASE #1: Tue Oct 30 20:56:32 UTC 2007 i386 (running pf with scrub in all fragment reassemble and sysctl set net.inet.tcp.rfc1323=0)
Fingerprint FreeBSD 6.2-RELEASE
Class FreeBSD | FreeBSD | 6.X | general purpose
CPE cpe:/o:freebsd:freebsd:6.2
SEQ(SP=F5-10B%GCD=1-6%ISR=FF-10F%TI=I%II=I%SS=S%TS=A)
OPS(O1=M5B4NW1NNT11SLL%O2=M5B4NW1NNT11SLL%O3=M5B4NW1NNT11%O4=M5B4NW1NNT11SLL%O5=M5B4NW1NNT11SLL%O6=M5B4NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M5B4NW1SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# FreeBSD 6.2-RELEASE FreeBSD 6.2-RELEASE #0: Fri Jan 12 10:40:27 UTC 2007 i386
Fingerprint FreeBSD 6.2-RELEASE
Class FreeBSD | FreeBSD | 6.X | general purpose
CPE cpe:/o:freebsd:freebsd:6.2
SEQ(SP=100-10A%GCD=1-6%ISR=107-111%TI=I%TS=A)
OPS(R=N)
WIN(R=N)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M5B4NW1SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=O|S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=N)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# FreeBSD  6.2-RELEASE FreeBSD 6.2-RELEASE #0: Fri Jan 12 11:05:30 UTC 2007 i386
Fingerprint FreeBSD 6.2-RELEASE
Class FreeBSD | FreeBSD | 6.X | general purpose
CPE cpe:/o:freebsd:freebsd:6.2
SEQ(SP=FF-109%GCD=1-6%ISR=107-111%TI=I%TS=A)
OPS(O1=M5B4NW1NNT11SLL%O2=M5B4NW1NNT11SLL%O3=M5B4NW1NNT11%O4=M5B4NW1NNT11SLL%O5=M5B4NW1NNT11SLL%O6=M5B4NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M5B4NW1SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A|O%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=O|S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# FreeBSD 6.2-RELEASE FreeBSD 6.2-RELEASE #0: Fri Jan 12 11:05:30 UTC 2007 i386
Fingerprint FreeBSD 6.2-RELEASE (x86)
Class FreeBSD | FreeBSD | 6.X | general purpose
CPE cpe:/o:freebsd:freebsd:6.2
SEQ(SP=FF-109%GCD=1-6%ISR=105-113%TI=I%TS=A)
OPS(O1=M5B4NW1NNT11SLL%O2=M5B4NW1NNT11SLL%O3=M5B4NW1NNT11%O4=M5B4NW1NNT11SLL%O5=M5B4NW1NNT11SLL%O6=M5B4NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M5B4NW1SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=Y%T=3B-45%TG=40%W=1%S=Z%A=O|S%F=AR%O=%RD=0%Q=U)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A|O%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=O|S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A|O%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=Y%T=3B-45%TG=40%W=1%S=Z%A=O|S%F=AR%O=%RD=0%Q=U)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# FreeBSD 6.2-RELEASE-p2 #1: Wed Mar  7 18:04:02 CET 2007 i386 SMP with pf (+scrub in all) enabled
Fingerprint FreeBSD 6.2-RELEASE-p2 (pf with scrub enabled)
Class FreeBSD | FreeBSD | 6.X | general purpose
CPE cpe:/o:freebsd:freebsd:6 auto
SEQ(SP=100-10A%GCD=1-6%ISR=106-110%TI=I%TS=7)
OPS(O1=M5B4NW1NNT11NNS%O2=M5B4NW1NNT11NNS%O3=M5B4NW1NNT11%O4=M5B4NW1NNT11NNS%O5=M5B4NW1NNT11NNS%O6=M5B4NNT11NNS)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3A-44%TG=40%W=FFFF%O=M5B4NW1NNS%CC=N%Q=)
T1(R=Y%DF=Y%T=3A-44%TG=40%S=O%A=O|S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A|O%A=O|S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A|O%A=O|S%F=AR%O=%RD=0%Q=)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# FreeBSD 6.2-STABLE FreeBSD 6.2-STABLE #0: Fri Sep 14 23:02:01 CEST 2007 i386
# FreeBSD 6.2-STABLE FreeBSD 6.2-STABLE #3: Wed Aug 22 18:13:08 CEST 2007 i386
# FreeBSD 6.3-PRERELEASE FreeBSD 6.3-PRERELEASE #2: Wed Nov  7 13:58:41 NOVT 2007
# FreeBSD 6.3-RELEASE FreeBSD 6.3-RELEASE #1: Mon Feb  4 11:40:47 UTC 2008 /CUSTOM  i386
# FreeBSD 6.4-STABLE FreeBSD 6.4-STABLE #0: Tue Mar 31 05:47:32 YEKST 2009 i386
# Sandvine NDS, unknown OS release.
Fingerprint FreeBSD 6.2-STABLE - 6.4-STABLE
Class FreeBSD | FreeBSD | 6.X | general purpose
CPE cpe:/o:freebsd:freebsd:6 auto
SEQ(SP=FA-10A%GCD=1-6%ISR=104-1A0%TI=I%TS=A)
OPS(O1=M5B4NW1NNT11SLL|M5B4NW7NNT11SLL%O2=M5B4NW1NNT11SLL|M5B4NW7NNT11SLL%O3=M5B4NW1NNT11|M5B4NW7NNT11%O4=M5B4NW1NNT11SLL|M5B4NW7NNT11SLL%O5=M5B4NW1NNT11SLL|M5B4NW7NNT11SLL%O6=M5B4NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M5B4NW1SLL|M5B4NW7SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%S=O%A=S+%F=AS%O=M5B4NW1NNT11SLL|M5B4NW7NNT11SLL%RD=0%Q=)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# FreeBSD 6.3-PRERELEASE FreeBSD 6.3-PRERELEASE #0
Fingerprint FreeBSD 6.3-PRERELEASE
Class FreeBSD | FreeBSD | 6.X | general purpose
CPE cpe:/o:freebsd:freebsd:6 auto
SEQ(SP=F2-FC%GCD=1-6%ISR=10B-115%TI=I%II=I%SS=O|S%TS=U)
OPS(O1=M5B4SLL%O2=M5B4SLL%O3=M5B4%O4=M5B4SLL%O5=M5B4SLL%O6=M5B4SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M5B4SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=O|S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%S=O%A=O|S+%F=AS%O=M5B4SLL%RD=0%Q=)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# FreeBSD 6.3-PRERELEASE FreeBSD 6.3-PRERELEASE #2: Wed Nov  7 10:54:48 EST 2007 i386
Fingerprint FreeBSD 6.3-PRERELEASE
Class FreeBSD | FreeBSD | 6.X | general purpose
CPE cpe:/o:freebsd:freebsd:6 auto
SEQ(SP=F9-10B%GCD=1-6%ISR=106-110%TI=RD%II=RI%TS=A)
OPS(O1=M5B4NW1NNT11SLL%O2=M5B4NW1NNT11SLL%O3=M5B4NW1NNT11%O4=M5B4NW1NNT11SLL%O5=M5B4NW1NNT11SLL%O6=M5B4NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M5B4NW1SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%S=O%A=S+%F=AS%O=M5B4NW1NNT11SLL%RD=0%Q=)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# FreeBSD 6.3-RELEASE FreeBSD 6.3-RELEASE #8: Fri Jan 18 14:12:55 PST 2008 i386
Fingerprint FreeBSD 6.3-RELEASE
Class FreeBSD | FreeBSD | 6.X | general purpose
CPE cpe:/o:freebsd:freebsd:6.3
SEQ(SP=103-10D%GCD=1-6%ISR=101-10B%II=I%TS=A)
OPS(O1=M5B4NW1NNT11SLL%O2=M5B4NW1NNT11SLL%O3=M5B4NW1NNT11%O4=M5B4NW1NNT11SLL%O5=M5B4NW1NNT11SLL%O6=M5B4NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M5B4NW1SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=O|S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# FreeBSD 6.3-RELEASE-p11 FreeBSD 6.3-RELEASE-p11 #0: Wed Jun 10 02:41:41 UTC 2009 i386
Fingerprint FreeBSD 6.3-RELEASE
Class FreeBSD | FreeBSD | 6.X | general purpose
CPE cpe:/o:freebsd:freebsd:6.3
SEQ(SP=F8-10C%GCD=1-6%ISR=105-10F%TI=I%CI=I%TS=A)
OPS(O1=M3FD8NW1NNT11SLL%O2=M3FD8NW1NNT11SLL%O3=M3FD8NW1NNT11%O4=M3FD8NW1NNT11SLL%O5=M3FD8NW1NNT11SLL%O6=M3FD8NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M3FD8NW1SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# FreeBSD 6.3-RELEASE-p2 FreeBSD 6.3-RELEASE-p2 #2: Fri Jul 11 14:00:55 PDT 2008 i386
Fingerprint FreeBSD 6.3-RELEASE
Class FreeBSD | FreeBSD | 6.X | general purpose
CPE cpe:/o:freebsd:freebsd:6.3
SEQ(SP=FE-108%GCD=1-6%ISR=100-10A%TI=I%II=I%SS=S%TS=21)
OPS(R=N)
WIN(R=N)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M558NW1SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=N)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# 6.3-RELEASE-p1 FreeBSD 6.3-RELEASE-p1 #0: Fri Feb 15 17:27:45 EET 2008 i386
Fingerprint FreeBSD 6.3-RELEASE-p1
Class FreeBSD | FreeBSD | 6.X | general purpose
CPE cpe:/o:freebsd:freebsd:6 auto
SEQ(SP=FB-10B%GCD=1-6%ISR=107-111%TI=I%TS=A)
OPS(O1=M3FD8NW1NNT11SLL%O2=M3FD8NW1NNT11SLL%O3=M3FD8NW1NNT11%O4=M3FD8NW1NNT11SLL%O5=M3FD8NW1NNT11SLL%O6=M3FD8NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M3FD8NW1SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%S=O%A=O|S+%F=AS%O=M3FD8NW1NNT11SLL%RD=0%Q=)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A|O%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=O|S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A|O%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=O|S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# FreeBSD 6.3-STABLE FreeBSD 6.3-STABLE #4: Tue Aug  5 15:43:22 CEST 2008 i386
Fingerprint FreeBSD 6.3-STABLE
Class FreeBSD | FreeBSD | 6.X | general purpose
CPE cpe:/o:freebsd:freebsd:6.3
SEQ(SP=100-10A%GCD=1-6%ISR=104-10E%TS=A)
OPS(O1=M550NW1NNT11SLL%O2=M550NW1NNT11SLL%O3=M550NW1NNT11%O4=M550NW1NNT11SLL%O5=M550NW1NNT11SLL%O6=M550NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M550NW1SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%S=O%A=S+%F=AS%O=M550NW1NNT11SLL%RD=0%Q=)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# FreeBSD 6.2-RELEASE-p11 FreeBSD 6.2-RELEASE-p11 #0: Sun Feb 17 09:52:57 CET 2008     root@pcbsd62:/usr/obj/freenas/usr/src/sys/FREENAS-i386  i386
Fingerprint FreeNAS (FreeBSD 6.2-RELEASE)
Class FreeBSD | FreeBSD | 6.X | storage-misc
CPE cpe:/o:freebsd:freebsd:6.2
SEQ(SP=EA-10C%GCD=1-6%ISR=103-10F%TI=I%II=I%SS=S%TS=9)
OPS(O1=M5B4NW1NNT11SLL%O2=M5B4NW1NNT11SLL%O3=M5B4NW1NNT11%O4=M5B4NW1NNT11SLL%O5=M5B4NW1NNT11SLL%O6=M5B4NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=FFFF%O=M5B4NW1SLL%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=3B-45%TG=40%W=FFFF%S=O%A=S+%F=AS%O=M5B4NW1NNT11SLL%RD=0%Q=)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# FreeBSD 6.4-RELEASE-p3 (revision 199506)
Fingerprint FreeNAS (FreeBSD 6.4-RELEASE-p3)
Class FreeBSD | FreeBSD | 6.X | storage-misc
CPE cpe:/o:freebsd:freebsd:6 auto
SEQ(SP=FC-10A%GCD=1-6%ISR=106-110%TI=I%II=I%SS=S%TS=7)
OPS(O1=M5B4NW0NNT11SLL%O2=M5B4NW0NNT11SLL%O3=M5B4NW0NNT11%O4=M5B4NW0NNT11SLL%O5=M5B4NW0NNT11SLL%O6=M5B4NNT11SLL)
WIN(W1=4000%W2=4000%W3=4000%W4=4000%W5=4000%W6=4000)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=4000%O=M5B4NW0SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=4000%S=O%A=S+%F=AS%O=M5B4NW0NNT11SLL%RD=0%Q=)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# FreeBSD 6.4-RELEASE-p3 FreeBSD 6.4-RELEASE-p3 #0: Fri Jan 16 22:41:42 UTC 2009 i386, FreeNAS
Fingerprint FreeNAS (FreeBSD 6.4-RELEASE-p3)
Class FreeBSD | FreeBSD | 6.X | storage-misc
CPE cpe:/o:freebsd:freebsd:6 auto
SEQ(SP=FE-108%GCD=1-6%ISR=102-10C%TI=I%CI=I%II=I%SS=S%TS=7)
OPS(O1=M5B4NW1NNT11SLL%O2=M5B4NW1NNT11SLL%O3=M5B4NW1NNT11%O4=M5B4NW1NNT11SLL%O5=M5B4NW1NNT11SLL%O6=M5B4NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=FFFF%O=M5B4NW1SLL%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=3B-45%TG=40%W=FFFF%S=O%A=S+%F=AS%O=M5B4NW1NNT11SLL%RD=0%Q=)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# FreeNAS 0.671, OS Version: FreeBSD 6.1-STABLE (revison 199506), Platform: generic-pc on Intel Pentium III
Fingerprint FreeNAS 0.671 (FreeBSD 6.1-STABLE)
Class FreeBSD | FreeBSD | 6.X | storage-misc
CPE cpe:/o:freebsd:freebsd:6.1
SEQ(SP=F5-F6%GCD=1-6%ISR=105-107%TI=I%II=I%SS=S%TS=A)
OPS(O1=M5B4NW1NNT11SLL%O2=M5B4NW1NNT11SLL%O3=M5B4NW1NNT11%O4=M5B4NW1NNT11SLL%O5=M5B4NW1NNT11SLL%O6=M5B4NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M5B4NW1SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=O|S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%S=O%A=O|S+%F=AS%O=M5B4NW1NNT11SLL%RD=0%Q=)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# FreeNAS 0.686 running FreeBSD 6.2-RELEASE-p9 (revison 199506)
Fingerprint FreeNAS 0.686 (FreeBSD 6.2-RELEASE)
Class FreeBSD | FreeBSD | 6.X | storage-misc
CPE cpe:/o:freebsd:freebsd:6.2
SEQ(SP=100-10A%GCD=1-6%ISR=105-10F%TI=RI%TS=7|9)
OPS(O1=M5B4NW1NNT11SLL%O2=M5B4NW1NNT11SLL%O3=M5B4NW1NNT11%O4=M5B4NW1NNT11SLL%O5=M5B4NW1NNT11SLL%O6=M5B4NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=FFFF%O=M5B4NW1SLL%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=O|S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=3B-45%TG=40%W=FFFF%S=O%A=O|S+%F=AS%O=M5B4NW1NNT11SLL%RD=0%Q=)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A|O%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=O|S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=O%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=O%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# FreeNAS v0.686. It is built on FreeBSD 6.2-RELEASE-p9 (revison 199506),
# VMware ESX Server 3i (The version that boots from a usb key), IPv4 stack only
# FreeBSD 6.2-RELEASE-p9 FreeBSD 6.2-RELEASE-p9 #0: Tue Dec 25 11:18:29 CET 2007 FREENAS-i386  i386
# VMware ESXi 4.0
# ESXi Server 4.0.0 build 181792
# VMWares ESXi 4.0 64bit hyperserver.  Take note that ESX != ESXi.
# VMware ESXi 4.0.0 build-193498
Fingerprint FreeNAS 0.686 (FreeBSD 6.2-RELEASE) or VMware ESXi Server 3.0 - 4.0
Class FreeBSD | FreeBSD | 6.X | storage-misc
CPE cpe:/o:freebsd:freebsd:6.2
Class VMware | ESX Server | 3.X | specialized
CPE cpe:/o:vmware:esx:3
Class VMware | ESX Server | 4.X | specialized
CPE cpe:/o:vmware:esx:4
SEQ(SP=F0-10A%GCD=1-6%ISR=100-110%TI=I%CI=I%II=I%SS=S%TS=7)
OPS(O1=M5B4NW1NNT11SLL%O2=M5B4NW1NNT11SLL%O3=M5B4NW1NNT11%O4=M5B4NW1NNT11SLL%O5=M5B4NW1NNT11SLL%O6=M5B4NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M5B4NW1SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%S=O%A=S+%F=AS%O=M5B4NW1NNT11SLL%RD=0%Q=)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# FreeBSD 6.2-RELEASE-p8 (revison 199506), FreeNas server 0.686b1
# FreeBSD 6.2-RELEASE-p8 FreeBSD 6.2-RELEASE-p8 #0: Mon Oct 29 20:21:28 CET 2007 i386, FreeNAS Network Attached Storage
Fingerprint FreeNAS 0.686b (FreeBSD 6.2-RELEASE)
Class FreeBSD | FreeBSD | 6.X | storage-misc
CPE cpe:/o:freebsd:freebsd:6.2
SEQ(SP=FA-106%GCD=1-6%ISR=E9-111%TI=I%II=I%SS=S%TS=7)
OPS(O1=M5B4NW1NNT11SLL%O2=M5B4NW1NNT11SLL%O3=M5B4NW1NNT11%O4=M5B4NW1NNT11SLL%O5=M5B4NW1NNT11SLL%O6=M5B4NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=FFFF%O=M5B4NW1SLL%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=3B-45%TG=40%W=FFFF%S=O%A=S+%F=AS%O=M5B4NW1NNT11SLL%RD=0%Q=)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# FreeBSD 6.4-RELEASE-p3 FreeBSD 6.4-RELEASE-p3 #0: Sat Apr 18 22:17:59 UTC 2009 i386, FreeNAS 0.69.1 Omnius (revision 4554)
Fingerprint FreeNAS 0.69.1 (FreeBSD 6.4-RELEASE-p3)
Class FreeBSD | FreeBSD | 6.X | storage-misc
CPE cpe:/o:freebsd:freebsd:6 auto
SEQ(SP=F4-10A%GCD=1-6%ISR=FF-111%TI=I%II=I%SS=S%TS=9)
OPS(O1=M5B4NW1NNT11SLL%O2=M5B4NW1NNT11SLL%O3=M5B4NW1NNT11%O4=M5B4NW1NNT11SLL%O5=M5B4NW1NNT11SLL%O6=M5B4NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M5B4NW1SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%S=O%A=O|S+%F=AS%O=M5B4NW1NNT11SLL%RD=0%Q=)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# FreeBSD 6.3-STABLE FreeBSD 6.3-STABLE #0: Mon May  5 20:02:53 CEST 2008 i386
# FreeBSD 6.3-STABLE FreeBSD 6.3-STABLE #0: Sun Aug  3 17:53:28 CEST 2008 i386
# FreeBSD 6.4-RELEASE-p5 (revision 199506), FreeNAS 0.69.2
Fingerprint FreeNAS 0.69.2 (FreeBSD 6.3-STABLE - 6.4-RELEASE)
Class FreeBSD | FreeBSD | 6.X | storage-misc
CPE cpe:/o:freebsd:freebsd:6 auto
SEQ(SP=FF-10B%GCD=1-6%ISR=101-10F%TI=I%II=I%SS=S%TS=7)
OPS(O1=M5B4NW1NNT11SLL%O2=M5B4NW1NNT11SLL%O3=M5B4NW1NNT11%O4=M5B4NW1NNT11SLL%O5=M5B4NW1NNT11SLL%O6=M5B4NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M5B4NW1SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%S=O%A=S+%F=AS%O=M5B4NW1NNT11SLL%RD=0%Q=)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# FreeBSD 6.4-RELEASE-p5 FreeBSD 6.4-RELEASE-p5 #0: Wed Jun 10 23:45:29 UTC 2009 i386, FreeNAS 0.69.2 Muad'Dib (revision 4700)
Fingerprint FreeNAS 0.69.2 (FreeBSD 6.4-RELEASE)
Class FreeBSD | FreeBSD | 6.X | storage-misc
CPE cpe:/o:freebsd:freebsd:6 auto
SEQ(SP=F9-103%GCD=1-6%ISR=105-113%CI=I%II=I%TS=7)
OPS(O1=M5B4NW1NNT11SLL%O2=M5B4NW1NNT11SLL%O3=M5B4NW1NNT11%O4=M5B4NW1NNT11SLL%O5=M5B4NW1NNT11SLL%O6=M5B4NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=FFFF%O=M5B4NW1SLL%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=3B-45%TG=40%W=FFFF%S=O%A=S+%F=AS%O=M5B4NW1NNT11SLL%RD=0%Q=)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# FreeBSD 6.4-RELEASE FreeBSD 6.4-RELEASE #0: Sun Nov 30 10:41:35 UTC 2008 i386, FreeNAS 0.69RC2 Rev. 4084
# FreeBSD 6.4-RELEASE-p5 FreeBSD 6.4-RELEASE-p5 #0: Wed Jun 10 23:45:29 UTC 2009 i386
Fingerprint FreeNAS 0.69RC2 (FreeBSD 6.4-RELEASE)
Class FreeBSD | FreeBSD | 6.X | storage-misc
CPE cpe:/o:freebsd:freebsd:6 auto
SEQ(SP=FB-10B%GCD=1-6%ISR=FF-10F%TI=I%II=I%SS=S%TS=A)
OPS(O1=M5B4NW1NNT11SLL%O2=M5B4NW1NNT11SLL%O3=M5B4NW1NNT11%O4=M5B4NW1NNT11SLL%O5=M5B4NW1NNT11SLL%O6=M5B4NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=FFFF%O=M5B4NW1SLL%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=3B-45%TG=40%W=FFFF%S=O%A=S+%F=AS%O=M5B4NW1NNT11SLL%RD=0%Q=)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# FreeBSD 6.4-RELEASE-p3 FreeBSD 6.4-RELEASE-p3 #0: Fri Jan 16 22:41:42 UTC 2009 i386, FreeNAS 0.69 Kwisatz Haderach (revision 4276)
# FreeBSD 6.4-RELEASE-p3 FreeBSD 6.4-RELEASE-p3 #0: Sat Apr 18 22:20:57 UTC 2009, amd64FreeNAS 0.69.1 (build 4554-AMD64)
Fingerprint FreeNAS 0.69RC2 (FreeBSD 6.4-RELEASE-p3)
Class FreeBSD | FreeBSD | 6.X | storage-misc
CPE cpe:/o:freebsd:freebsd:6 auto
SEQ(SP=FC-10A%GCD=1-6%ISR=F6-112%TI=I%CI=I%II=I%SS=S%TS=A)
OPS(O1=M5B4NW1NNT11SLL%O2=M5B4NW1NNT11SLL%O3=M5B4NW1NNT11%O4=M5B4NW1NNT11SLL%O5=M5B4NW1NNT11SLL%O6=M5B4NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=FFFF%O=M5B4NW1SLL%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=3B-45%TG=40%W=FFFF%S=O%A=S+%F=AS%O=M5B4NW1NNT11SLL%RD=0%Q=)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# FreeBSD 7.0-CURRENT FreeBSD 7.0-CURRENT #19: Thu Aug  2 07:59:58 CST 2007 i386
# FreeBSD 7.0-STABLE FreeBSD 7.0-STABLE #222: Fri Sep 28 07:48:47 CST 2007 amd64
# FreeBSD 7.0-PRERELEASE FreeBSD 7.0-PRERELEASE #0: Mon Oct 15 20:12:38 PDT 2007 i386
# FreeBSD 7.0-RELEASE-p3 FreeBSD 7.0-RELEASE-p3 #2: Thu Jul 24 22:06:36 EDT 2008 i386
Fingerprint FreeBSD 7.0
Class FreeBSD | FreeBSD | 7.X | general purpose
CPE cpe:/o:freebsd:freebsd:7.0
SEQ(SP=100-10A%GCD=1-6%ISR=108-112%TI=I%II=I%SS=S%TS=21|22)
OPS(O1=M5B4NW3NNT11|M5B4NW8NNT11%O2=M578NW3NNT11|M578NW8NNT11%O3=M280NW3NNT11|M280NW8NNT11%O4=M5B4NW3NNT11|M5B4NW8NNT11%O5=M218NW3NNT11|M218NW8NNT11%O6=M109NNT11)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M5B4NW3|M5B4NW8%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%S=O%A=S+%F=AS%O=M109NW3NNT11|M109NW8NNT11%RD=0%Q=)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# FreeBSD 7.0-BETA2 FreeBSD 7.0-BETA2 #0: Sun Nov 11 14:51:01 SAST 2007 i386
Fingerprint FreeBSD 7.0-BETA2 (custom compiled)
Class FreeBSD | FreeBSD | 7.X | general purpose
CPE cpe:/o:freebsd:freebsd:7.0:beta2
SEQ(SP=F9-10B%GCD=1-6%ISR=106-110%TI=I%TS=20|21)
OPS(O1=M5B4NW3NNT11%O2=M578NW3NNT11%O3=M280NW3NNT11%O4=M3FD8NW3NNT11%O5=M218NW3NNT11%O6=M109NNT11)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M5B4NW3%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%S=O%A=S+%F=AS%O=M109NW3NNT11%RD=0%Q=)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# FreeBSD 7.0-BETA4 FreeBSD 7.0-BETA4 #3: Fri Dec 14 01:02:11 CET 2007
Fingerprint FreeBSD 7.0-BETA4
Class FreeBSD | FreeBSD | 7.X | general purpose
CPE cpe:/o:freebsd:freebsd:7.0:beta4
SEQ(SP=FF-109%GCD=1-6%ISR=106-110%TI=RD%TS=21)
OPS(O1=M5B4NW3ST11%O2=M578NW3ST11%O3=M280NW3NNT11%O4=M5B4NW3ST11%O5=M218NW3ST11%O6=M109ST11)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M5B4NW3SLN%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(R=N)

# FreeBSD 7.0-BETA4 FreeBSD 7.0-BETA4 #7: Fri Dec 21 20:15:13 CET 2007 i386
# FreeBSD 7.0-RC1 FreeBSD 7.0-RC1  #0: Mon Dec 24 12:18:24 UTC 2007 i386 (VMWare)
# FreeBSD 7.0-PRERELEASE FreeBSD 7.0-PRERELEASE #7: Sat Jan 26 12:48:51 CST 2008 amd64
# FreeBSD 7.0-STABLE FreeBSD 7.0-STABLE #9: Fri Feb 29 19:59:08 CET 2008 i386
# FreeBSD 7.0-RELEASE FreeBSD 7.0-RELEASE #0: Sun Feb 24 19:59:52 UTC 2008 i386
# FreeBSD 7.0-RELEASE-p1 FreeBSD 7.0-RELEASE-p1
# FreeBSD 7.0-PRERELEASE FreeBSD 7.0-PRERELEASE #6: Fri Jan 25 10:44:09 BRST 2008 i386
# FreeBSD 7.0-RELEASE FreeBSD 7.0-RELEASE #0: Sun Feb 24 19:59:52 UTC 2008 i386
# FreeBSD 7.0-RELEASE-p4 FreeBSD 7.0-RELEASE-p4 #0: Tue Sep  219:32:35 UTC 2008 i386
Fingerprint FreeBSD 7.0-BETA4 - 7.0
Class FreeBSD | FreeBSD | 7.X | general purpose
CPE cpe:/o:freebsd:freebsd:7 auto
SEQ(SP=F1-10B%GCD=1-6%ISR=FD-10F%TI=I%II=I%SS=S%TS=20|21|22)
OPS(O1=M5B4NW3ST11|M5B4NW4ST11|M5B4NW6ST11%O2=M578NW3ST11|M578NW4ST11|M578NW6ST11%O3=M280NW3NNT11|M280NW4NNT11|M280NW6NNT11%O4=M5B4NW3ST11|M5B4NW4ST11|M5B4NW6ST11%O5=M218NW3ST11|M218NW4ST11|M218NW6ST11%O6=M109ST11)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M5B4NW3SLN|M5B4NW4SLN|M5B4NW6SLN%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%S=O%A=S+%F=AS%O=M109NW3ST11|M109NW4ST11|M109NW6ST11%RD=0%Q=)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# FreeBSD 7.0-CURRENT-200702 FreeBSD 7.0-CURRENT-200702 #0: Tue Feb  6 15:23:17 UTC 2007 sparc64
Fingerprint FreeBSD 7.0-CURRENT
Class FreeBSD | FreeBSD | 7.X | general purpose
CPE cpe:/o:freebsd:freebsd:7.0
SEQ(SP=FA-10A%GCD=1-6%ISR=104-10E%TI=I%TS=21|22)
OPS(O1=M5B4NW8NNT11SLL%O2=M578NW8NNT11SLL%O3=M280NW8NNT11%O4=M5B4NW8NNT11SLL%O5=M218NW8NNT11SLL%O6=M109NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M5B4NW8SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%S=O%A=S+%F=AS%O=M109NW8NNT11SLL%RD=0%Q=)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=O|S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A|O%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=O|S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# FreeBSD 7.0-CURRENT FreeBSD 7.0-CURRENT #2: Thu Aug  9 08:08:02 CEST 2007 i386
Fingerprint FreeBSD 7.0-CURRENT
Class FreeBSD | FreeBSD | 7.X | general purpose
CPE cpe:/o:freebsd:freebsd:7.0
SEQ(SP=101-10D%GCD=1-6%ISR=108-112%TI=RD%II=RI%TS=20|21|22)
OPS(O1=M5B4NW8NNT11%O2=M578NW8NNT11%O3=M280NW8NNT11%O4=M5B4NW8NNT11%O5=M218NW8NNT11%O6=M109NNT11)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M5B4NW8%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%S=O%A=S+%F=AS%O=M109NW8NNT11%RD=0%Q=)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# FreeBSD 7.0-CURRENT FreeBSD 7.0-CURRENT #0: Sat Aug 11 11:33:14 CEST 2007 i386
Fingerprint FreeBSD 7.0-CURRENT
Class FreeBSD | FreeBSD | 7.X | general purpose
CPE cpe:/o:freebsd:freebsd:7.0
SEQ(SP=EC-106%GCD=1-6%ISR=FF-113%TI=I%TS=21|22)
OPS(O1=M5B4NW8NNT11%O2=M578NW8NNT11%O3=M280NW8NNT11%O4=M3FD8NW8NNT11%O5=M218NW8NNT11%O6=M109NNT11)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M5B4NW8%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%S=O%A=O|S+%F=AS%O=M109NW8NNT11%RD=0%Q=)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A|O%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=O|S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A|O%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=O|S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# FreeBSD 7.0-CURRENT FreeBSD 7.0-CURRENT #2: Wed Oct 25 10:28:40 UTC 2006 i386
Fingerprint FreeBSD 7.0-CURRENT
Class FreeBSD | FreeBSD | 7.X | general purpose
CPE cpe:/o:freebsd:freebsd:7.0
SEQ(SP=F2-110%GCD=1-6%ISR=108-114%TI=I%II=I%SS=S%TS=A)
OPS(O1=M5B4NW1NNT11SLL%O2=M578NW1NNT11SLL%O3=M280NW1NNT11%O4=M5B4NW1NNT11SLL%O5=M218NW1NNT11SLL%O6=M109NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M5B4NW1SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# FreeBSD 7.0-CURRENT #52: Wed Dec 13 11:33:08 CET 2006
Fingerprint FreeBSD 7.0-CURRENT (pre-release)
Class FreeBSD | FreeBSD | 7.X | general purpose
CPE cpe:/o:freebsd:freebsd:7 auto
SEQ(SP=F6-10A%GCD=1-6|8|10|18|20|28|30%ISR=F1-111%TI=I%TS=20|21|22)
OPS(O1=M5B4NW1NNT11SLL%O2=M578NW1NNT11SLL%O3=M280NW1NNT11%O4=M3FD8NW1NNT11SLL%O5=M218NW1NNT11SLL%O6=M109NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M5B4NW1SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=O|S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%S=O%A=O|S+%F=AS%O=M109NW1NNT11SLL%RD=0%Q=)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A|O%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=O|S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A|O%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=O|S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# FreeBSD 7.0-RC1 FreeBSD 7.0-RC1 #4: Wed Jan  2 11:46:18 MST 2008
Fingerprint FreeBSD 7.0-RC1
Class FreeBSD | FreeBSD | 7.X | general purpose
CPE cpe:/o:freebsd:freebsd:7.0:rc1
SEQ(SP=101-10B%GCD=1-6%ISR=108-112%TI=I%TS=21)
OPS(O1=M5B4NW3ST11%O2=M578NW3ST11%O3=M280NW3NNT11%O4=M3FD8NW3ST11%O5=M218NW3ST11%O6=M109ST11)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M5B4NW3SLN%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%S=O%A=S+%F=AS%O=M109NW3ST11%RD=0%Q=)
T4(R=N)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=N)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# FreeBSD 7.0-RELEASE FreeBSD 7.0-RELEASE #0: Mon Feb 25 09:35:41 UTC 2008 sparc64, PF firewall running.
# FreeBSD 7.0-RELEASE FreeBSD 7.0-RELEASE #0: Sun Feb 24 19:59:52 UTC 2008 i386
Fingerprint FreeBSD 7.0-RELEASE
Class FreeBSD | FreeBSD | 7.X | general purpose
CPE cpe:/o:freebsd:freebsd:7.0
SEQ(SP=FF-109%GCD=1-6%ISR=106-110%TI=I%II=I%SS=S%TS=21|22)
OPS(O1=M5B4NW3ST11%O2=M578NW3ST11%O3=M280NW3NNT11%O4=M5B4NW3ST11%O5=M218NW3ST11%O6=M109ST11)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M5B4NW3SLN%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=N)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# FreeBSD 7.0-RELEASE-p2 FreeBSD 7.0-RELEASE-p2 #0: Wed Jun 18 07:33:20 UTC 2008 i386
Fingerprint FreeBSD 7.0-RELEASE
Class FreeBSD | FreeBSD | 7.X | general purpose
CPE cpe:/o:freebsd:freebsd:7.0
SEQ(SP=F5-10D%GCD=1-6%ISR=109-113%TI=I%II=I%SS=S%TS=21)
OPS(O1=M5B4NW3ST11%O2=M578NW3ST11%O3=M280NW3NNT11%O4=M5B4NW3ST11%O5=M218NW3ST11%O6=M109ST11)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M5B4NW3SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=N)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# FreeBSD 7.0-RELEASE FreeBSD 7.0-RELEASE #0 : Sun Feb 24 10:35:36 UTC 2008:/usr/obj/usr/src/sys/GENERIC  amd64
Fingerprint FreeBSD 7.0-RELEASE
Class FreeBSD | FreeBSD | 7.X | general purpose
CPE cpe:/o:freebsd:freebsd:7.0
SEQ(SP=FC-106%GCD=1-6%ISR=106-110%TS=21)
OPS(O1=M5B4NW3ST11%O2=M578NW3ST11%O3=M280NW3NNT11%O4=M5B4NW3ST11%O5=M218NW3ST11%O6=M109ST11)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M5B4NW3SLN%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=O|S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A|O%A=O|S%F=AR%O=%RD=0%Q=)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# FreeBSD 7.0-RELEASE FreeBSD 7.0-RELEASE #0: Wed Dec 17 04:23:19 BRST 2008 i386
Fingerprint FreeBSD 7.0-RELEASE
Class FreeBSD | FreeBSD | 7.X | general purpose
CPE cpe:/o:freebsd:freebsd:7.0
SEQ(SP=FA-104%GCD=1-6%ISR=102-10C%TI=RD%II=RI%TS=21)
OPS(O1=M5B4NW3ST11%O2=M578NW3ST11%O3=M280NW3NNT11%O4=M5B4NW3ST11%O5=M218NW3ST11%O6=M109ST11)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M5B4NW3SLN%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=O%F=AR%O=%RD=0%Q=)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
T7(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# FreeBSD 7.0-RELEASE FreeBSD 7.0-RELEASE #1
Fingerprint FreeBSD 7.0-RELEASE
Class FreeBSD | FreeBSD | 7.X | general purpose
CPE cpe:/o:freebsd:freebsd:7.0
SEQ(SP=FD-107%GCD=1-6%ISR=101-10D%TI=I%II=I%SS=S%TS=21)
OPS(O1=M5B4NW3ST11%O2=M578NW3ST11%O3=M280NW3NNT11%O4=M5B4NW3ST11%O5=M218NW3ST11%O6=M109ST11)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M5B4NW3SLN%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=N)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# FreeBSD 7.0-RELEASE FreeBSD 7.0-RELEASE #0: Wed May 21 10:13:51 UTC 2008 amd64
Fingerprint FreeBSD 7.0-RELEASE
Class FreeBSD | FreeBSD | 7.X | general purpose
CPE cpe:/o:freebsd:freebsd:7.0
SEQ(SP=F9-107%GCD=1-6%ISR=103-111%CI=I%TS=21)
OPS(O1=M5B4NW3ST11%O2=M578NW3ST11%O3=M280NW3NNT11%O4=M3FD8NW3ST11%O5=M218NW3ST11%O6=M109ST11)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M5B4NW3SLN%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=O|S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%S=O%A=O|S+%F=AS%O=M109NW3ST11%RD=0%Q=)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A|O%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=O|S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A|O%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=O|S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# FreeBSD 7.0-RELEASE FreeBSD 7.0-RELEASE #1: Mon Dec  1 15:22:47 MSK 2008 amd64
Fingerprint FreeBSD 7.0-RELEASE
Class FreeBSD | FreeBSD | 7.X | general purpose
CPE cpe:/o:freebsd:freebsd:7.0
SEQ(SP=FC-10A%GCD=2|4|6|8|A%ISR=101-111%TI=I%CI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4SLN%O2=M578SLN%O3=M280%O4=M5B4SLN%O5=M218SLN%O6=M109SLN)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M5B4SLN%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%S=O%A=S+%F=AS%O=M109SLN%RD=0%Q=)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# FreeBSD 7.0-RELEASE FreeBSD 7.0-RELEASE #0: Sun Feb 24 19:59:52 UTC 2008     root@logan.cse.buffalo.edu:/usr/obj/usr/src/sys/GENERIC  i386
Fingerprint FreeBSD 7.0-RELEASE
Class FreeBSD | FreeBSD | 7.X | general purpose
CPE cpe:/o:freebsd:freebsd:7.0
SEQ(SP=102-10C%GCD=1-6%ISR=FF-109%TI=RD%CI=RI%II=RI%TS=21)
OPS(O1=M5B4NW3ST11%O2=M578NW3ST11%O3=M280NW3NNT11%O4=M5B4NW3ST11%O5=M218NW3ST11%O6=M109ST11)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M5B4NW3SLN%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# FreeBSD 7.0-RELEASE-p11 FreeBSD 7.0-RELEASE-p11 #0: Sun Mar 22 07:08:52 UTC 2009 i386
# FreeBSD 7.1-RELEASE-p5 FreeBSD 7.1-RELEASE-p5 #5: Tue May  5 11:40:07 PDT 2009 i386
# FreeBSD 7.2-RELEASE-p1 FreeBSD 7.2-RELEASE-p1 #6: Mon Jun 15 01:46:37 PDT 2009 i386
# FreeBSD 8.0-STABLE
# FreeBSD edward-pc-freebsd 9.0-RELEASE FreeBSD 9.0-RELEASE #0: Tue Jan  3 07:15:25 UTC 2012     i386
Fingerprint FreeBSD 7.0-RELEASE - 9.0-RELEASE
Class FreeBSD | FreeBSD | 7.X | general purpose
CPE cpe:/o:freebsd:freebsd:7 auto
Class FreeBSD | FreeBSD | 8.X | general purpose
CPE cpe:/o:freebsd:freebsd:8 auto
Class FreeBSD | FreeBSD | 9.X | general purpose
CPE cpe:/o:freebsd:freebsd:9 auto
SEQ(SP=F7-111%GCD=1-6%ISR=107-111%TI=I%II=I%SS=S%TS=21|22)
OPS(O1=M5B4NW3ST11|M5B4NW4ST11|M5B4NW5ST11|M5B4NW6ST11%O2=M578NW3ST11|M578NW4ST11|M578NW5ST11|M578NW6ST11%O3=M280NW3NNT11|M280NW4NNT11|M280NW5NNT11|M280NW6NNT11%O4=M5B4NW3ST11|M5B4NW4ST11|M5B4NW5ST11|M5B4NW6ST11%O5=M218NW3ST11|M218NW4ST11|M218NW5ST11|M218NW6ST11%O6=M109ST11)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M5B4NW3SLL|M5B4NW4SLL|M5B4NW5SLL|M5B4NW6SLL|M5B4NW4SLL|M5B4NW5SLL|M5B4NW6SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%S=O%A=S+%F=AS%O=M109NW3ST11|M109NW4ST11|M109NW5ST11|M109NW6ST11%RD=0%Q=)
T4(R=N)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=N)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# FreeBSD 7.0-RELEASE-p1 FreeBSD 7.0-RELEASE-p1 #0: Thu Jun  5 22:12:06 CDT 2008 amd64
Fingerprint FreeBSD 7.0-RELEASE-p1
Class FreeBSD | FreeBSD | 7.X | general purpose
CPE cpe:/o:freebsd:freebsd:7 auto
SEQ(SP=100-10A%GCD=1-6%ISR=108-112%TI=I%II=I%SS=S%TS=21)
OPS(O1=M5B4NW3ST11%O2=M578NW3ST11%O3=M280NW3NNT11%O4=M5B4NW3ST11%O5=M218NW3ST11%O6=M109ST11)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M5B4NW3SLN%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%S=O%A=S+%F=AS%O=M109NW3ST11%RD=0%Q=)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
T7(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# FreeBSD 7.0-RELEASE-p1 FreeBSD 7.0-RELEASE-p1 #0: Sun Apr 27 21:47:56 EDT 2008 i386
# FreeBSD 7.0-STABLE FreeBSD 7.0-STABLE #8: Tue Apr 29 11:35:56 CEST 2008 i386
# FreeBSD 7.0-RELEASE-p3 FreeBSD 7.0-RELEASE-p3 #7: Sun Jul 13 21:02:29 PDT 2008 i386
# FreeBSD 7.1-PRERELEASE FreeBSD 7.1-PRERELEASE #1: Thu Sep 11 19:53:15 UTC 2008
# FreeBSD 7.1-PRERELEASE FreeBSD 7.1-PRERELEASE #0: Wed Oct  1 20:54:06 MSD 2008 i386
# FreeBSD 7.0-RELEASE-p5 FreeBSD 7.0-RELEASE-p5 #0: Wed Oct  1 10:10:12 UTC 2008 i386
# FreeBSD 7.1-RELEASE FreeBSD 7.1-RELEASE #0: Thu Jan  1 14:37:25 UTC 2009 i386
# FreeBSD 7.2-RELEASE FreeBSD 7.2-RELEASE #0: Fri May  1 08:49:13 UTC 2009 i386
# FreeBSD 7.2-STABLE FreeBSD 7.2-STABLE #0: Thu Jun 11 21:55:32 CEST 2009 i386
# FreeBSD 7.3-RELEASE FreeBSD 7.3-RELEASE #0: Mon May 17 19:49:57 EEST 2010 sparc64
# FreeBSD 8.0-CURRENT
# FreeBSD 8.0-RELEASE-p1 FreeBSD 8.0-RELEASE-p1 #10: Wed Dec 16 13:38:00 PST 2009 i386
# FreeBSD 7.3 x64
# FreeBSD 8.1-RC2
# FreeBSD 8.1-RELEASE-p1 FreeBSD 8.1-RELEASE-p1 #0: Sat Oct 16 23:26:34 CEST 2010 arm, Seagate FreeAgent Dockstar
# FreeBSD 8.2-RELEASE
# FreeBSD 9.0-PRERELEASE FreeBSD 9.0-PRERELEASE #0 r228245+9be8be8: Sat Dec 10 08:00:23 CET 2011 amd64
# FreeBSD 9.0-RELEASE FreeBSD 9.0-RELEASE #0: Tue Jan  3 07:15:25 UTC 2012 i386
# FreeBSD 10.0-CURRENT FreeBSD 10.0-CURRENT #7 r232945: [...]  mips mips64eb
# Panasonic TV "VIERA GT30 Series" running "FreeBSD/8.0 UPnP/1.0 Panasonic-MIL-DLNA-SV/1.0"
Fingerprint FreeBSD 7.0-RELEASE-p1 - 10.0-CURRENT
Class FreeBSD | FreeBSD | 7.X | general purpose
CPE cpe:/o:freebsd:freebsd:7 auto
Class FreeBSD | FreeBSD | 8.X | general purpose
CPE cpe:/o:freebsd:freebsd:8 auto
Class FreeBSD | FreeBSD | 9.X | general purpose
CPE cpe:/o:freebsd:freebsd:9 auto
Class FreeBSD | FreeBSD | 10.X | general purpose
CPE cpe:/o:freebsd:freebsd:10 auto
SEQ(SP=EC-10E%GCD=1-6%ISR=FC-112%TI=I%CI=I%II=I%SS=S%TS=20|21|22)
OPS(O1=M5B4NW1ST11|M5B4NW2ST11|M5B4NW3ST11|M5B4NW4ST11|M5B4NW5|M5B4NW6ST11|M5B4NW9ST11%O2=M578NW1ST11|M578NW2ST11|M578NW3ST11|M578NW4ST11|M578NW5|M578NW6ST11|M578NW9ST11%O3=M280NW1NNT11|M280NW2NNT11|M280NW3NNT11|M280NW4NNT11|M280NW5|M280NW6NNT11|M280NW9NNT11%O4=M5B4NW1ST11|M5B4NW2ST11|M5B4NW3ST11|M5B4NW4ST11|M5B4NW5|M5B4NW6ST11|M5B4NW9ST11%O5=M218NW1ST11|M218NW2ST11|M218NW3ST11|M218NW4ST11|M218NW5|M218NW6ST11|M218NW9ST11%O6=M109ST11)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M5B4NW1SLL|M5B4NW2SLL|M5B4NW3SLL|M5B4NW4SLL|M5B4NW5|M5B4NW6SLL|M5B4NW9SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%S=O%A=S+%F=AS%O=M109NW1ST11|M109NW2ST11|M109NW3ST11|M109NW4ST11|M109NW5|M109NW6ST11|M109NW9ST11%RD=0%Q=)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# FreeBSD 7.0-RELEASE-p2 FreeBSD 7.0-RELEASE-p2 #0: Thu Jun 19 22:57:42 CEST 2008 i386
# FreeBSD 7.0-STABLE FreeBSD 7.0-STABLE #12: Wed Aug  6 17:22:12 EEST 2008 i386
# FreeBSD 7.1-PRERELEASE FreeBSD 7.1-PRERELEASE #0: Thu Sep 11 14:26:13 CEST 2008 i386
Fingerprint FreeBSD 7.0-RELEASE-p2 - 7.1-PRERELEASE
Class FreeBSD | FreeBSD | 7.X | general purpose
CPE cpe:/o:freebsd:freebsd:7 auto
SEQ(SP=FA-108%GCD=1-6%ISR=105-10F%TI=I%TS=21|22)
OPS(O1=M5B4NW3ST11%O2=M578NW3ST11%O3=M280NW3NNT11%O4=M3FD8NW3ST11%O5=M218NW3ST11%O6=M109ST11)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M5B4NW3SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%S=O%A=O|S+%F=AS%O=M109NW3ST11%RD=0%Q=)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A|O%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=O|S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A|O%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=O|S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# FreeBSD 7.0-RELEASE-p5 FreeBSD 7.0-RELEASE-p5 #0: Wed Oct  1 10:10:12 UTC 2008 i386
Fingerprint FreeBSD 7.0-RELEASE-p5
Class FreeBSD | FreeBSD | 7.X | general purpose
CPE cpe:/o:freebsd:freebsd:7 auto
SEQ(SP=100-10A%GCD=1-6%ISR=100-10A%TI=RD%II=RI%TS=21)
OPS(O1=M5B4NW3ST11%O2=M578NW3ST11%O3=M280NW3NNT11%O4=M5B4NW3ST11%O5=M218NW3ST11%O6=M109ST11)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M5B4NW3SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=N)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=0-FFFF%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# FreeBSD 7.0-STABLE FreeBSD 7.0-STABLE #0: Wed Apr  2 14:42:45 MSD 2008 amd64
Fingerprint FreeBSD 7.0-STABLE
Class FreeBSD | FreeBSD | 7.X | general purpose
CPE cpe:/o:freebsd:freebsd:7.0
SEQ(SP=DC-10A%GCD=1-6|12|24|36|48|5A%ISR=108-112%TI=I%TS=20|21)
OPS(O1=M5B4NW3NNT11SLL%O2=M578NW3NNT11SLL%O3=M280NW3NNT11%O4=M3FD8NW3NNT11SLL%O5=M218NW3NNT11SLL%O6=M109NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M5B4NW3SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%S=O%A=O|S+%F=AS%O=M109NW3NNT11SLL%RD=0%Q=)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A|O%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=O|S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A|O%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=O|S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# FreeBSD 7.0-STABLE FreeBSD 7.0-STABLE #4: Wed Apr 30 20:04:35 MSD 2008 amd64
Fingerprint FreeBSD 7.0-STABLE
Class FreeBSD | FreeBSD | 7.X | general purpose
CPE cpe:/o:freebsd:freebsd:7.0
SEQ(SP=FA-10C%GCD=1-6%ISR=106-110%TS=21|22)
OPS(O1=M5B4NW3NNT11SLL%O2=M578NW3NNT11SLL%O3=M280NW3NNT11%O4=M5B4NW3NNT11SLL%O5=M218NW3NNT11SLL%O6=M109NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=8D-97%TG=FF%W=FFFF%O=M5B4NW3SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=8D-97%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%T=8D-97%TG=FF%W=FFFF%S=O%A=S+%F=AS%O=M109NW3NNT11SLL%RD=0%Q=)
T4(R=Y%DF=Y%T=8D-97%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=8D-97%TG=FF%W=0%S=Z%A=O|S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=8D-97%TG=FF%W=0%S=A|O%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=Y%T=8D-97%TG=FF%W=0%S=Z%A=O|S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=8D-97%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=8D-97%TG=FF%CD=S)

# FreeBSD 7.0-STABLE FreeBSD 7.0-STABLE #6: Thu Aug  7 05:11:38 EDT 2008   i386
Fingerprint FreeBSD 7.0-STABLE
Class FreeBSD | FreeBSD | 7.X | general purpose
CPE cpe:/o:freebsd:freebsd:7.0
SEQ(SP=100-10A%GCD=1-6%ISR=109-113%TS=22)
OPS(O1=M5B4NW3ST11%O2=M578NW3ST11%O3=M280NW3NNT11%O4=M3FD8NW3ST11%O5=M218NW3ST11%O6=M109ST11)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M5B4NW3SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# 7.0-STABLE FreeBSD 7.0-STABLE #2: Tue Mar 11 07:28:04 CDT 2008   amd64
Fingerprint FreeBSD 7.0-STABLE
Class FreeBSD | FreeBSD | 7.X | general purpose
CPE cpe:/o:freebsd:freebsd:7.0
SEQ(SP=102-10C%GCD=1-6%ISR=104-10E%TS=21)
OPS(O1=M5B4NW3ST11%O2=M578NW3ST11%O3=M280NW3NNT11%O4=M5B4NW3ST11%O5=M218NW3ST11%O6=M109ST11)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M5B4NW3SLN%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=O|S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%S=O%A=O|S+%F=AS%O=M109NW3ST11%RD=0%Q=)
T4(R=N)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=O|S+%F=AR%O=%RD=0%Q=)
T6(R=N)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# FreeBSD 7.1-PRERELEASE FreeBSD 7.1-PRERELEASE #42: Thu Sep 11 09:07:25 EDT 2008 i386
# FreeBSD 7.3-RELEASE-p5 FreeBSD 7.3-RELEASE-p5 #0: Fri Apr 22 18:18:19 EEST 2011 i386
Fingerprint FreeBSD 7.1-PRERELEASE - 7.3-RELEASE
Class FreeBSD | FreeBSD | 7.X | general purpose
CPE cpe:/o:freebsd:freebsd:7 auto
SEQ(SP=F6-10C%GCD=1-6%ISR=FE-112%TI=I%II=I%SS=S%TS=21|22)
OPS(O1=M5B4NW3ST11%O2=M578NW3ST11%O3=M280NW3NNT11%O4=M5B4NW3ST11%O5=M218NW3ST11%O6=M109ST11)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M5B4NW3SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# FreeBSD 7.1-PRERELEASE FreeBSD 7.1-PRERELEASE #8: Tue Nov 18 20:28:43 MST 2008 i386
# FreeBSD 7.2-STABLE FreeBSD 7.2-STABLE #6: Wed Jun 10 17:45:09 CDT 2009 amd64
# FreeNAS v8.0
Fingerprint FreeBSD 7.1-PRERELEASE 7.2-STABLE
Class FreeBSD | FreeBSD | 7.X | general purpose
CPE cpe:/o:freebsd:freebsd:7 auto
SEQ(SP=100-10C%GCD=1-6%ISR=106-110%TI=I%II=I%SS=S%TS=21|22)
OPS(O1=M5B4NW3ST11%O2=M578NW3ST11%O3=M280NW3NNT11%O4=M5B4NW3ST11%O5=M218NW3ST11%O6=M109ST11)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M5B4NW3SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=O|S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=N)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# 7.1-RELEASE FreeBSD 7.1-RELEASE #0: Thu Jan  1 14:37:25 UTC 2009 i386
Fingerprint FreeBSD 7.1-RELEASE
Class FreeBSD | FreeBSD | 7.X | general purpose
CPE cpe:/o:freebsd:freebsd:7.1
SEQ(SP=F5-10D%GCD=1-6%ISR=105-10F%TI=I%II=I%SS=S%TS=22)
OPS(O1=M5ACNW3ST11%O2=M578NW3ST11%O3=M280NW3NNT11%O4=M5B4NW3ST11%O5=M218NW3ST11%O6=M109ST11)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M5ACNW3SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=N)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=0-FFFF%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# FreeBSD 7.1-RELEASE FreeBSD 7.1-RELEASE #0: Thu Jan  1 14:37:25 UTC 2009 i386
Fingerprint FreeBSD 7.1-RELEASE
Class FreeBSD | FreeBSD | 7.X | general purpose
CPE cpe:/o:freebsd:freebsd:7.1
SEQ(SP=EF-F9%GCD=2|4|6|8|A%ISR=105-10F%TI=I%II=I%SS=O|S%TS=21)
OPS(O1=M538NW3ST11%O2=M538NW3ST11%O3=M280NW3NNT11%O4=M538NW3ST11%O5=M218NW3ST11%O6=M109ST11)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M538NW3SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%S=O%A=S+%F=AS%O=M109NW3ST11%RD=0%Q=)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# FreeBSD 7.1-RELEASE
Fingerprint FreeBSD 7.1-RELEASE
Class FreeBSD | FreeBSD | 7.X | general purpose
CPE cpe:/o:freebsd:freebsd:7.1
SEQ(SP=EE-108%GCD=1-6%ISR=F3-10F%TI=I%II=I%SS=S%TS=21|22)
OPS(O1=M58ANW3ST11%O2=M578NW3ST11%O3=M280NW3NNT11%O4=M58ANW3ST11%O5=M218NW3ST11%O6=M109ST11)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M58ANW3SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%S=O%A=S+%F=AS%O=M109NW3ST11%RD=0%Q=)
T4(R=N)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=N)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# FreeBSD 7.1-RELEASE FreeBSD 7.1-RELEASE #0: Thu Jan  1 14:37:25 UTC 2009 i386
Fingerprint FreeBSD 7.1-RELEASE
Class FreeBSD | FreeBSD | 7.X | general purpose
CPE cpe:/o:freebsd:freebsd:7.1
SEQ(SP=FD-107%GCD=1-6%ISR=105-111%TI=I%CI=I%II=I%SS=S%TS=21|22)
OPS(O1=M5ACNW3ST11%O2=M578NW3ST11%O3=M280NW3NNT11%O4=M5ACNW3ST11%O5=M218NW3ST11%O6=M109ST11)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M5ACNW3SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N|Y%T=3B-45%TG=40%W=FFFF%S=O%A=O|S+%F=AS%O=M109NW3ST11%RD=0%Q=)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# FreeBSD 8.0-BETA2 [...] GENERIC sparc64
# FreeBSD 7.2-STABLE FreeBSD 7.2-STABLE #8: Sat May 30 17:26:18 MSD 2009 i386
# FreeBSD 7.1-RELEASE FreeBSD 7.1-RELEASE #0: Thu Jan  1 14:37:25 UTC 2009 i386
# FreeBSD 8.0 RELEASE i386
# FreeBSD 9.0-CURRENT-201011 FreeBSD 9.0-CURRENT-201011 #0: Wed Nov  3 17:44:48 UTC 2010     amd64
# FreeBSD 9.1-RC1 FreeBSD 9.1-RC1 #0: Tue Aug 14 03:56:40 UTC 2012     i386
Fingerprint FreeBSD 7.1-RELEASE - 9.0-CURRENT
Class FreeBSD | FreeBSD | 7.X | general purpose
CPE cpe:/o:freebsd:freebsd:7 auto
Class FreeBSD | FreeBSD | 8.X | general purpose
CPE cpe:/o:freebsd:freebsd:8 auto
SEQ(SP=E7-113%GCD=1-6%ISR=FF-117%TI=I%CI=I%II=I%SS=S%TS=20|21|22)
OPS(O1=M5B4NW3ST11|M5B4NW6ST11%O2=M578NW3ST11|M578NW6ST11%O3=M280NW3NNT11|M280NW6NNT11%O4=M5B4NW3ST11|M5B4NW6ST11%O5=M218NW3ST11|M218NW6ST11%O6=M109ST11)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M5B4NW3SLL|M5B4NW6SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# FreeBSD 7.2-RELEASE-p2 FreeBSD 7.2-RELEASE-p2 #0: Thu Jul 23 20:31:34 EDT 2009 i386
Fingerprint FreeBSD 7.2-RELEASE
Class FreeBSD | FreeBSD | 7.X | general purpose
CPE cpe:/o:freebsd:freebsd:7.2
SEQ(SP=FD-109%GCD=1-6%ISR=FE-112%TI=I%II=I%SS=S%TS=21|22)
OPS(O1=M5A0NW3ST11%O2=M578NW3ST11%O3=M280NW3NNT11%O4=M5A0NW3ST11%O5=M218NW3ST11%O6=M109ST11)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3A-44%TG=40%W=FFFF%O=M5A0NW3SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3A-44%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%T=3A-44%TG=40%W=FFFF%S=O%A=S+%F=AS%O=M109NW3ST11%RD=0%Q=)
T4(R=Y%DF=Y%T=3A-44%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# FreeBSD 7.2-RELEASE FreeBSD 7.2-RELEASE #1: Mon Sep 21 10:32:35 CEST 2009 i386
Fingerprint FreeBSD 7.2-RELEASE
Class FreeBSD | FreeBSD | 7.X | general purpose
CPE cpe:/o:freebsd:freebsd:7.2
SEQ(SP=FB-10B%GCD=2|4|6|8|A%ISR=100-10E%TI=I%II=I%SS=S%TS=21|22)
OPS(O1=M5B4NW3ST11%O2=M578NW3ST11%O3=M280NW3NNT11%O4=M5B4NW3ST11%O5=M218NW3ST11%O6=M109ST11)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M5B4NW3SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%S=O%A=S+%F=AS%O=M109NW3ST11%RD=0%Q=)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
T7(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# FreeBSD 7.2-RELEASE-p4 FreeBSD 7.2-RELEASE-p4 #0: Tue Nov 10 15:34:04 CST 2009 i386
# FreeBSD freenas.local 7.2-RELEASE-p6 FreeBSD 7.2-RELEASE-p6 #0: Tue Jan  5 23:20:02 UTC 2010 root@vmbsd72i386:/usr/obj/freenas/usr/src/sys/FREENAS-i386 i386
Fingerprint FreeBSD 7.2-RELEASE
Class FreeBSD | FreeBSD | 7.X | general purpose
CPE cpe:/o:freebsd:freebsd:7.2
SEQ(SP=F4-10A%GCD=1-6%ISR=F6-110%TI=RD%CI=RD|RI%II=RI%TS=21|22)
OPS(O1=M5B4NW3ST11%O2=M578NW3ST11%O3=M280NW3NNT11%O4=M5B4NW3ST11%O5=M218NW3ST11%O6=M109ST11)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M5B4NW3SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%S=O%A=S+%F=AS%O=M109NW3ST11%RD=0%Q=)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# FreeBSD 7.2-RELEASE-p4 FreeBSD 7.2-RELEASE-p4 #0: Mon Oct  5 22:37:41 UTC 2009 i386
# FreeBSD 8.0-RELEASE-p1 FreeBSD 8.0-RELEASE-p1 #0: Tue Jan  5 09:17:26 EST 2010 sullrich@FreeBSD_8.0_pfSense_2.0-snaps.pfsense.org:/usr/obj.pfSense/usr/pfSensesrc/src/sys/pfSense.8  i386
Fingerprint FreeBSD 7.2-RELEASE - 8.0-RELEASE
Class FreeBSD | FreeBSD | 7.X | general purpose
CPE cpe:/o:freebsd:freebsd:7 auto
SEQ(SP=FD-107%GCD=2|4|6|8|A%ISR=FA-112%TI=I%TS=21)
OPS(O1=M5B4NW3ST11%O2=M578NW3ST11%O3=M280NW3NNT11%O4=M5B4NW3ST11%O5=M218NW3ST11%O6=M109ST11)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M5B4NW3SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=O|S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=O|S+%F=AR%O=%RD=0%Q=)
T6(R=N)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=0-FFFF%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# FreeBSD 7.2-STABLE FreeBSD 7.2-STABLE #0: Tue Jun  9 14:38:09 MSD 2009 amd64
Fingerprint FreeBSD 7.2-STABLE
Class FreeBSD | FreeBSD | 7.X | general purpose
CPE cpe:/o:freebsd:freebsd:7.2
SEQ(SP=FE-10C%GCD=2|4|6|8|A%ISR=106-110%TI=I%TS=21|22)
OPS(O1=M55CNW3ST11%O2=M55CNW3ST11%O3=M280NW3NNT11%O4=M55CNW3ST11%O5=M218NW3ST11%O6=M109ST11)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M55CNW3SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%S=O%A=S+%F=AS%O=M109NW3ST11%RD=0%Q=)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A|O%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=O|S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A|O%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=O|S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# FreeBSD 7.2-RELEASE-p1 FreeBSD 7.2-RELEASE-p1 #0: Fri Jun 19 20:56:48 UTC 2009 i386, Freenas embedded 0.7RC1 Sardaukar (revision 4735)
# FreeNAS 0.7, FreeBSD 7.2-RELEASE (revision 199506)
# Freenas server  Version 0.7.1 Shere (revision 4967) FreeBSD 7.2-RELEASE-p5 (revision 199506)
Fingerprint FreeNAS 0.7 (FreeBSD 7.2-RELEASE)
Class FreeBSD | FreeBSD | 7.X | storage-misc
CPE cpe:/o:freebsd:freebsd:7.2
SEQ(SP=F5-10B%GCD=1-6%ISR=104-110%TI=I%II=I%SS=S%TS=20|21|22)
OPS(O1=M5B4NW6ST11%O2=M578NW6ST11%O3=M280NW6NNT11%O4=M5B4NW