# Nmap OS Fingerprinting 2nd Generation DB. -*- mode: fundamental; -*-
# $Id$
#
# Contributions to this database are welcome.  If Nmap obtains a new
# fingerprint (and test conditions are favorable), it will print out a
# URL you can use to submit the fingerprint.  If Nmap guesses wrong,
# please see https://nmap.org/submit/ .
#
# By submitting fingerprints you are transfering any and all copyright
# interest in the data to Nmap Software LLC so it can modified,
# incorporated into Nmap, relicensed, etc.
#
# This collection of data is (C) 1996-2024 by Nmap Software LLC.  It
# is distributed under the Nmap Public Source license as provided in
# the LICENSE file of the source distribution or at
# https://nmap.org/npsl/.  Note that this free license does not allow
# incorporation of Nmap or its data files within proprietary
# software. We sell a separate Nmap OEM for that as described
# (including pricing) at https://nmap.org/npsl/.
#
# For a complete description of Nmap OS detection and the format of
# fingerprints in this file, see https://nmap.org/book/osdetect.html.
This nmap-os-db is only valid for Nmap 7.94.2 and later

# This first element provides the number of points every fingerprint
# test is worth.  Tests like TTL or Don't fragment are worth less
# (individually) because there are so many of them and the values are
# often correlated with each other.  Meanwhile, elements such as TS
# (TCP timestamp) which are only used once, get more points.  Points
# are used when there are no perfect matches to determine which OS
# fingerprint matches a target machine most closely.
MatchPoints
SEQ(SP=25%GCD=75%ISR=25%TI=100%CI=50%II=100%SS=80%TS=100)
OPS(O1=20%O2=20%O3=20%O4=20%O5=20%O6=20)
WIN(W1=15%W2=15%W3=15%W4=15%W5=15%W6=15)
ECN(R=100%DF=20%T=15%TG=15%W=15%O=15%CC=100%Q=20)
T1(R=100%DF=20%T=15%TG=15%S=20%A=20%F=30%RD=20%Q=20)
T2(R=80%DF=20%T=15%TG=15%W=25%S=20%A=20%F=30%O=10%RD=20%Q=20)
T3(R=80%DF=20%T=15%TG=15%W=25%S=20%A=20%F=30%O=10%RD=20%Q=20)
T4(R=100%DF=20%T=15%TG=15%W=25%S=20%A=20%F=30%O=10%RD=20%Q=20)
T5(R=100%DF=20%T=15%TG=15%W=25%S=20%A=20%F=30%O=10%RD=20%Q=20)
T6(R=100%DF=20%T=15%TG=15%W=25%S=20%A=20%F=30%O=10%RD=20%Q=20)
T7(R=80%DF=20%T=15%TG=15%W=25%S=20%A=20%F=30%O=10%RD=20%Q=20)
U1(R=50%DF=20%T=15%TG=15%IPL=100%UN=100%RIPL=100%RID=100%RIPCK=100%RUCK=50%RUD=100)
IE(R=50%DFI=40%T=15%TG=15%CD=100)

# 2N VOIP doorbell
Fingerprint 2N Helios IP VoIP doorbell
Class 2N | embedded || specialized
CPE cpe:/h:2n:helios
SEQ(SP=0-5%GCD=51E80C|A3D018|F5B824|147A030|199883C%ISR=C8-D2%TI=I|RD%CI=I%II=RI%SS=S%TS=U)
OPS(O1=M5B4%O2=M5B4%O3=M5B4%O4=M5B4%O5=M5B4%O6=M5B4)
WIN(W1=8000%W2=8000%W3=8000%W4=8000%W5=8000%W6=8000)
ECN(R=Y%DF=N%T=FA-104%TG=FF%W=8000%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=FA-104%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=FA-104%TG=FF%W=8000%S=O%A=S+%F=AS%O=M5B4%RD=0%Q=)
T4(R=Y%DF=N%T=FA-104%TG=FF%W=8000%S=A+%A=S%F=AR%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=8000%S=A%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=8000%S=A%A=S%F=AR%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FA-104%TG=FF%W=8000%S=A%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# BT2700HGV DSL Router version 5.29.107.19
Fingerprint 2Wire BT2700HG-V ADSL modem
Class 2Wire | embedded || broadband router
CPE cpe:/h:2wire:bt2700hg-v
SEQ(SP=6A-BE%GCD=1-6%ISR=96-A0%TI=I%CI=I%II=I%SS=S%TS=A)
OPS(O1=M5B4NNSW0NNNT11%O2=M578NNSW0NNNT11%O3=M280W0NNNT11%O4=M218NNSW0NNNT11%O5=M218NNSW0NNNT11%O6=M109NNSNNT11)
WIN(W1=8000%W2=8000%W3=8000%W4=8000%W5=8000%W6=8000)
ECN(R=Y%DF=Y%T=FA-104%TG=FF%W=8000%O=M5B4NNSW0N%CC=N%Q=)
T1(R=Y%DF=Y%T=FA-104%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=E44A4E43%Q=)
T5(R=Y%DF=Y%T=FA-104%TG=FF%W=0%S=Z%A=S+%F=AR%O=%RD=1F59B3D4%Q=)
T6(R=Y%DF=Y%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=1F59B3D4%Q=)
T7(R=N)
U1(DF=Y%T=FA-104%TG=FF%IPL=70%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=Y%T=FA-104%TG=FF%CD=S)

# 2wire 1701HG Gateway 3.17.5
Fingerprint 2Wire 1701HG wireless ADSL modem
Class 2Wire | embedded || WAP
CPE cpe:/h:2wire:1701hg
SEQ(SP=7E-9A%GCD=1-6%ISR=9E-A8%TI=I%TS=A)
OPS(O1=M5ACNNSW0NNNT11%O2=M578NNSW0NNNT11%O3=M280W0NNNT11%O4=M218NNSW0NNNT11%O5=M218NNSW0NNNT11%O6=M109NNSNNT11)
WIN(W1=8000%W2=8000%W3=8000%W4=8000%W5=8000%W6=8000)
ECN(R=Y%DF=Y%T=FA-104%TG=FF%W=8000%O=M5ACNNSW0N%CC=N%Q=)
T1(R=Y%DF=Y%T=FA-104%TG=FF%S=O%A=O|S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=E44A4E43%Q=)
T5(R=Y%DF=Y%T=FA-104%TG=FF%W=0%S=Z%A=S+%F=AR%O=%RD=BD1AB510%Q=)
T6(R=Y%DF=Y%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=EA6C967D%Q=)
T7(R=N)
U1(DF=Y%T=FA-104%TG=FF%IPL=70%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(R=N)

# 1701HG Gateway, Software Version: 3.17.5
# 2Wire 2700HG
# 2 Wire RG2701HG-00
# 2Wire 2701HG-B
# 2700HG-B 2Wire gateway
# 2Wire, Inc. 3800HGV-B Software Version        6.1.9.24-enh.tm
Fingerprint 2Wire 1701HG, 2700HG, 2700HG-B, 2701HG-B, RG2701HG, or 3800HGV-B wireless ADSL modem
Class 2Wire | embedded || WAP
CPE cpe:/h:2wire:1701hg
CPE cpe:/h:2wire:2700hg
CPE cpe:/h:2wire:2700hg-b
CPE cpe:/h:2wire:2701hg-b
CPE cpe:/h:2wire:rg2701hg
CPE cpe:/h:2wire:3800hgv-b
SEQ(SP=5A-A0%GCD=1-6%ISR=98-A9%TI=I%TS=A)
OPS(O1=M5B4NNSW0NNNT11%O2=M578NNSW0NNNT11%O3=M280W0NNNT11%O4=M218NNSW0NNNT11%O5=M218NNSW0NNNT11%O6=M109NNSNNT11)
WIN(W1=8000%W2=8000%W3=8000%W4=8000%W5=8000%W6=8000)
ECN(R=Y%DF=Y%T=FA-104%TG=FF%W=8000%O=M5B4NNSW0N%CC=N%Q=)
T1(R=Y%DF=Y%T=FA-104%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=E44A4E43%Q=)
T5(R=Y%DF=Y%T=FA-104%TG=FF%W=0%S=Z%A=S+%F=AR%O=%RD=BD1AB510%Q=)
T6(R=Y%DF=Y%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=EA6C967D%Q=)
T7(R=N)
U1(DF=Y%T=FA-104%TG=FF%IPL=70%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(R=N)

# Version 6.0 (Build 6002: Service Pack 2)
# 2Wire 2701HG-B Gateway running version 5.29.47
Fingerprint 2Wire 2700HG-B wireless ADSL modem
Class 2Wire | embedded || WAP
CPE cpe:/h:2wire:2700hg-b
SEQ(SP=7C-AA%GCD=1-6%ISR=94-9E%TI=I%TS=A)
OPS(O1=M5B4NNSW0NNNT11%O2=M578NNSW0NNNT11%O3=M280W0NNNT11%O4=M218NNSW0NNNT11%O5=M218NNSW0NNNT11%O6=M109NNSNNT11)
WIN(W1=8000%W2=8000%W3=8000%W4=8000%W5=8000%W6=8000)
ECN(R=Y%DF=Y%T=FA-104%TG=FF%W=8000%O=M5B4NNSW0N%CC=N%Q=)
T1(R=Y%DF=Y%T=FA-104%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=Y%DF=Y%T=FA-104%TG=FF%W=0%S=Z%A=S+%F=AR%O=%RD=BD1AB510%Q=)
T6(R=N)
T7(R=N)
U1(DF=Y%T=FA-104%TG=FF%IPL=70%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(R=N)

# 2wire 2701 HG router
Fingerprint 2Wire 2701HG wireless ADSL modem
Class 2Wire | embedded || WAP
CPE cpe:/h:2wire:2701hg
SEQ(SP=6D-C3%GCD=1-6%ISR=96-A0%TI=I%CI=I%TS=E)
OPS(O1=M5B4NNSW0NNNT11%O2=M578NNSW0NNNT11%O3=M280W0NNNT11%O4=M218NNSW0NNNT11%O5=M218NNSW0NNNT11%O6=M109NNSNNT11)
WIN(W1=8000%W2=8000%W3=8000%W4=8000%W5=8000%W6=8000)
ECN(R=Y%DF=Y%T=FA-104%TG=FF%W=8000%O=M5B4NNSW0N%CC=N%Q=)
T1(R=Y%DF=Y%T=FA-104%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=E44A4E43%Q=)
T5(R=Y%DF=Y%T=FA-104%TG=FF%W=0%S=Z%A=S+%F=AR%O=%RD=BD1AB510%Q=)
T6(R=Y%DF=Y%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=EA6C967D%Q=)
T7(R=N)
U1(DF=Y%T=FA-104%TG=FF%IPL=70%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(R=N)

# 2wire router/WAP/DSL-modem is model# 2701HG-B
Fingerprint 2Wire 2701HG-B wireless ADSL modem
Class 2Wire | embedded || WAP
CPE cpe:/h:2wire:2701hg-b
SEQ(SP=84-DA%GCD=1-6%ISR=95-CD%TI=I|RD%II=I%SS=S%TS=A)
OPS(O1=M5B4NNSW0NNNT11%O2=M578NNSW0NNNT11%O3=M280W0NNNT11%O4=M218NNSW0NNNT11%O5=M218NNSW0NNNT11%O6=M109NNSNNT11)
WIN(W1=8000%W2=8000%W3=8000%W4=8000%W5=8000%W6=8000)
ECN(R=Y%DF=Y%T=FA-104%TG=FF%W=8000%O=M5B4NNSW0N%CC=N%Q=)
T1(R=Y%DF=Y%T=FA-104%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=Y%T=FA-104%TG=FF%W=0%S=Z%A=S%F=AR%O=%RD=E44A4E43%Q=)
T3(R=Y%DF=Y%T=FA-104%TG=FF%W=8000%S=O%A=S+%F=AS%O=M109NNSW0NNNT11%RD=0%Q=)
T4(R=Y%DF=Y%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=E44A4E43%Q=)
T5(R=Y%DF=Y%T=FA-104%TG=FF%W=0%S=Z%A=S+%F=AR%O=%RD=BD1AB510%Q=)
T6(R=Y%DF=Y%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=EA6C967D%Q=)
T7(R=Y%DF=Y%T=FA-104%TG=FF%W=0%S=Z%A=S%F=AR%O=%RD=EA6C967D%Q=)
U1(DF=Y%T=FA-104%TG=FF%IPL=70%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=Y%T=FA-104%TG=FF%CD=S)

# 2Wire 2701HG-B Gateway AT&T DSL Wireless Access Point
Fingerprint 2Wire 2701HG-B wireless ADSL modem
Class 2Wire | embedded || WAP
CPE cpe:/h:2wire:2701hg-b
SEQ(SP=62-9E%GCD=1-6%ISR=99-A3%TI=I%CI=I%TS=A)
OPS(O1=M5B4NNSW0NNNT11%O2=M578NNSW0NNNT11%O3=M280W0NNNT11%O4=M5B4NNSW0NNNT11%O5=M218NNSW0NNNT11%O6=M109NNSNNT11)
WIN(W1=8000%W2=8000%W3=8000%W4=8000%W5=8000%W6=8000)
ECN(R=Y%DF=Y%T=FA-104%TG=FF%W=8000%O=M5B4NNSW0N%CC=N%Q=)
T1(R=Y%DF=Y%T=FA-104%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=E44A4E43%Q=)
T5(R=Y%DF=Y%T=FA-104%TG=FF%W=0%S=Z%A=S+%F=AR%O=%RD=BD1AB510%Q=)
T6(R=Y%DF=Y%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=EA6C967D%Q=)
T7(R=N)
U1(DF=Y%T=FA-104%TG=FF%IPL=70%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(R=N)

# 2-Wire 2701HG-G Gateway Software:  5.29.133.27
Fingerprint 2Wire 2701HG-G wireless ADSL modem
Class 2Wire | embedded || WAP
CPE cpe:/h:2wire:2701hg-g
SEQ(SP=7B-85%GCD=1-6%ISR=95-9F%TI=I%II=I%SS=S%TS=A)
OPS(O1=M5B4NNSW0NNNT11%O2=M578NNSW0NNNT11%O3=M280W0NNNT11%O4=M218NNSW0NNNT11%O5=M218NNSW0NNNT11%O6=M109NNSNNT11)
WIN(W1=8000%W2=8000%W3=8000%W4=8000%W5=8000%W6=8000)
ECN(R=Y%DF=Y%T=FA-104%TG=FF%W=8000%O=M5B4NNSW0N%CC=N%Q=)
T1(R=Y%DF=Y%T=FA-104%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%T=FA-104%TG=FF%W=8000%S=O%A=S+%F=AS%O=M109NNSW0NNNT11%RD=0%Q=)
T4(R=N)
T5(R=Y%DF=Y%T=FA-104%TG=FF%W=0%S=Z%A=S+%F=AR%O=%RD=BD1AB510%Q=)
T6(R=N)
T7(R=N)
U1(DF=Y%T=FA-104%TG=FF%IPL=70%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=Y%T=FA-104%TG=FF%CD=S)

# 2wire wireless Broadband router version 3.5.55
# 2wire 1000SW Shasta 3.5.12
Fingerprint 2Wire Shasta wireless broadband router
Class 2Wire | embedded || WAP
CPE cpe:/h:2wire:1000sw
SEQ(SP=76-A2%GCD=1-6%ISR=A0-AD%TI=I%TS=7)
OPS(O1=M5B4NNSW0NNNT11%O2=M578NNSW0NNNT11%O3=M280W0NNNT11%O4=M218NNSW0NNNT11%O5=M218NNSW0NNNT11%O6=M109NNSNNT11)
WIN(W1=8000%W2=8000%W3=8000%W4=8000%W5=8000%W6=8000)
ECN(R=Y%DF=Y%T=FA-104%TG=FF%W=8000%O=M5B4NNSW0N%CC=N%Q=)
T1(R=Y%DF=Y%T=FA-104%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=E44A4E43%Q=)
T5(R=Y%DF=Y%T=FA-104%TG=FF%W=0%S=Z%A=S+%F=AR%O=%RD=BD1AB510%Q=)
T6(R=Y%DF=Y%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=EA6C967D%Q=)
T7(R=N)
U1(DF=Y%T=FA-104%TG=FF%IPL=70%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(R=N)

# 3com OfficeConnect 812 ADSL Router
# 3Com OfficeConnect Remote ADSL 812 V2.1.5, Built on Aug 23 2002 at 11:10:56.
Fingerprint 3com OfficeConnect 812 ADSL router
Class 3Com | embedded || broadband router
CPE cpe:/h:3com:officeconnect_812 auto
SEQ(SP=0-63%GCD=61A8|C350|124F8|186A0|1E848%ISR=8A-B0%TI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4%O2=M5B4%O3=M5B4%O4=M5B4%O5=M5B4%O6=M5B4)
WIN(W1=400%W2=400%W3=400%W4=400%W5=400%W6=400)
ECN(R=Y%DF=N%T=FA-104%TG=FF%W=400%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=FA-104%TG=FF%S=O%A=O|S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=U)
T3(R=Y%DF=N%T=FA-104%TG=FF%W=400%S=O%A=S+%F=AS%O=M5B4%RD=0%Q=)
T4(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=|U)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=|U)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=|U)
T7(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=|U)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=FA-104%TG=FF%CD=S)

# 3Com X5 Unified Security Platform 3CRTPX5-U-96 with TOS Version X3.1. 1.2109
Fingerprint 3Com X5 Unified Security Platform firewall
Class 3Com | embedded || firewall
SEQ(II=I%TS=3)
OPS(O1=M5B4NW0NNT11%O2=M5B4NW0NNT11%O3=M5B4NW0NNT11%O4=M5B4NW0NNT11%O5=M5B4NW0NNT11%O6=M5B4NNT11)
WIN(W1=2000%W2=2000%W3=2000%W4=2000%W5=2000%W6=2000)
ECN(R=Y%DF=N%T=3A-44%TG=40%W=2000%O=M5B4NW0%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=O|S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=Y%DF=N%T=3A-44%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=N)
T7(R=N)
U1(DF=N%T=3A-44%TG=40%IPL=38%UN=0%RIPL=G%RID=4210%RIPCK=Z%RUCK=0%RUD=G)
IE(DFI=N%T=3A-44%TG=40%CD=Z)

# 3com 3016 T1 Router 3Com Router Software Extended_V1.30
Fingerprint 3Com 3016 router
Class 3Com | embedded || router
CPE cpe:/h:3com:3016 auto
SEQ(SP=C-16%GCD=F402|1E804|2DC06|3D008|4C40A%ISR=97-A1%TI=I%II=I%SS=S%TS=1)
OPS(O1=M5B4NW0NNT11%O2=M5B4NW0NNT11%O3=M5B4NW0NNT11%O4=M5B4NW0NNT11%O5=M5B4NW0NNT11%O6=M5B4NNT11)
WIN(W1=111C%W2=1068%W3=1180%W4=1000%W5=10C0%W6=1090)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=111C%O=M5B4NW0%CC=N)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0)
T2(R=N)
T3(R=Y%DF=N%T=3B-45%TG=40%W=1090%S=O%A=O%F=A%O=NNT11%RD=0)
T4(R=Y%DF=N%T=3B-45%TG=40%W=1000%S=A%A=Z%F=R%RD=0)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%RD=0)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%RD=0)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%RD=0)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=15C%RID=G%RIPCK=I%RUCK=0%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# 3Com OfficeConnect 3CR858-91 Software version V1.13-168 (Mar 21 2008 11:57:49)
Fingerprint 3Com OfficeConnect 3CR858-91 router
Class 3Com | embedded || router
CPE cpe:/h:3com:officeconnect_3cr858-91 auto
SEQ(SP=0-5%GCD=B|16|21|2C|37%ISR=30-3A%TI=I%CI=I%II=I%SS=S%TS=U)
OPS(O1=M578%O2=M578%O3=M280%O4=M578%O5=M218%O6=M109)
WIN(W1=1770%W2=1770%W3=1770%W4=1770%W5=1770%W6=1770)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=1770%O=M578%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=O|S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=O%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=O%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=Y%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N|S%T=3B-45%TG=40%CD=Z)

# 3Com 3924
Fingerprint 3Com 3924 switch
Class 3Com | embedded || switch
CPE cpe:/h:3com:3924 auto
SEQ(SP=8E-98%GCD=1-6%ISR=92-9C%TI=I%CI=I%II=RI%SS=S%TS=1)
OPS(O1=M5B4NW0NNT11%O2=M5B4NW0NNT11%O3=M5B4NW0NNT11%O4=M5B4NW0NNT11%O5=M5B4NW0NNT11%O6=M5B4NNT11)
WIN(W1=2000%W2=2000%W3=2000%W4=2000%W5=2000%W6=2000)
ECN(R=Y%DF=N%T=19-23%TG=20%W=2000%O=M5B4NW0%CC=N%Q=)
T1(R=Y%DF=N%T=19-23%TG=20%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=19-23%TG=20%W=2000%S=O%A=S+%F=AS%O=%RD=0%Q=)
T4(R=Y%DF=N%T=19-23%TG=20%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=19-23%TG=20%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=19-23%TG=20%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=19-23%TG=20%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=19-23%TG=20%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=19-23%TG=20%CD=S)

# 3Com Switch 4200G 24-Port Software Version 3Com OS V3.01.00s56
# Quadway s5600 series, VRP software, Version 3.10, Release 1510P02
Fingerprint 3Com 4200G or Huawei Quidway S5600 switch
Class 3Com | embedded || switch
Class Huawei | VRP | 3.X | switch
CPE cpe:/o:huawei:vrp:3 auto
SEQ(SP=FB-107%GCD=1-6%ISR=100-110%TI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4%O2=M5B4%O3=M5B4%O4=M5B4%O5=M5B4%O6=M5B4)
WIN(W1=2000%W2=2000%W3=2000%W4=2000%W5=2000%W6=2000)
ECN(R=Y%DF=N%T=FA-104%TG=FF%W=2000%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=FA-104%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=FA-104%TG=FF%W=1FC4%S=O%A=O%F=A%O=%RD=0%Q=)
T4(R=Y%DF=N%T=FA-104%TG=FF%W=2000%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# Huawei S3928P-EI switch VRP software, Version 3.10
# 3Com Switch 4210 26-Port Software Version 3Com OS V3.01.01s56, Bootrom Version is 4.01
# Quidway S5624F, VRP software, Version 3.10, Release 1510P02
Fingerprint 3Com 4210, or Huawei Quidway S3928P-EI or S5624F switch (VRP 3.10)
Class 3Com | embedded || switch
Class Huawei | VRP | 3.X | switch
CPE cpe:/o:huawei:vrp:3.10 auto
SEQ(SP=FF-109%GCD=1-6%ISR=105-111%TI=I%II=I%SS=S%TS=U)
OPS(O1=M200%O2=M200%O3=M200%O4=M200%O5=M200%O6=M200)
WIN(W1=2000%W2=2000%W3=2000%W4=2000%W5=2000%W6=2000)
ECN(R=Y%DF=N%T=FB-105%TG=FF%W=2000%O=M200%CC=N%Q=)
T1(R=Y%DF=N%T=FB-105%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=FB-105%TG=FF%W=1FC4%S=O%A=O%F=A%O=%RD=0%Q=)
T4(R=Y%DF=N%T=FB-105%TG=FF%W=2000%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FB-105%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=FB-105%TG=FF%CD=S)

# 3com 4500G P.O.E switch
Fingerprint 3Com 4500G switch
Class 3Com | embedded || switch
CPE cpe:/h:3com:4500g auto
SEQ(SP=C1-CD%GCD=1-6%ISR=CD-D9%TI=I%CI=I%TS=U)
OPS(O1=M5B4%O2=M5B4%O3=M5B4%O4=M5B4%O5=M5B4%O6=M5B4)
WIN(W1=2000%W2=2000%W3=2000%W4=2000%W5=2000%W6=2000)
ECN(R=Y%DF=N%T=FA-104%TG=FF%W=2000%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=FA-104%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=FA-104%TG=FF%W=1FC4%S=O%A=O%F=A%O=%RD=0%Q=)
T4(R=Y%DF=N%T=FA-104%TG=FF%W=2000%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(R=N)

# 3Com Switch 5500-EI 28-Port Software Version 3Com OS V3.03.02s168ep05
# 3Com SuperStack 4 Switch 5500G-EI 24-Port Software Version 3Com OS V3.02.04s56
Fingerprint 3Com 5500-EI switch
Class 3Com | embedded || switch
CPE cpe:/h:3com:5500-ei auto
SEQ(SP=FC-106%GCD=1-6%ISR=100-10F%TI=I%II=I%SS=S%TS=U)
OPS(O1=M200%O2=M200%O3=M200%O4=M200%O5=M200%O6=M200)
WIN(W1=2000%W2=2000%W3=2000%W4=2000%W5=2000%W6=2000)
ECN(R=Y%DF=N%T=FA-104%TG=FF%W=2000%O=M200%CC=N%Q=)
T1(R=Y%DF=N%T=FA-104%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=N)
T7(R=N)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# 3COM 5500-ei switch
Fingerprint 3Com 5500-EI switch
Class 3Com | embedded || switch
CPE cpe:/h:3com:5500-ei auto
SEQ(SP=B-15%GCD=FA00|1F400|2EE00|3E800|4E200%ISR=96-A0%TI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4%O2=M5B4%O3=M5B4%O4=M5B4%O5=M5B4%O6=M5B4)
WIN(W1=2000%W2=2000%W3=2000%W4=2000%W5=2000%W6=2000)
ECN(R=Y%DF=N%T=FB-105%TG=FF%W=2000%O=M5B4%CC=N)
T1(R=Y%DF=N%T=FB-105%TG=FF%S=O%A=O|S+%F=AS%RD=0)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=Z%A=S+%F=AR%RD=0)
T6(R=N)
T7(R=N)
U1(DF=N%T=FB-105%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=FB-105%TG=FF%CD=S)

# 3Com 8810 with 3Com 3C17508 360GB Fabric. SW Version: 3.01.31r. Also known as: Huawei Quidway S8500.
# 3Com SuperStack 3 Switch 4500 PWR 26-Port, Software Version:  3.01.00s56op01, Bootrom Version:  1.01, Hardware Version:  00.00.00
# Huawei Quidway 18-32 ADSL Router, Versatile Routing Platform Software VRP(R) software, Version 3.30, Release 002
Fingerprint 3Com 8810 or SuperStack 3 Switch 4500 or Huawei Quidway AR 18-32 ADSL router
Class 3Com | embedded || switch
Class Huawei | VRP | 3.X | broadband router
CPE cpe:/o:huawei:vrp:3 auto
SEQ(SP=B-16%GCD=FA00|1F400|2EE00|3E800|4E200%ISR=97-A1%TI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4%O2=M5B4%O3=M5B4%O4=M5B4%O5=M5B4%O6=M5B4)
WIN(W1=2000%W2=2000%W3=2000%W4=2000%W5=2000%W6=2000)
ECN(R=Y%DF=N%T=FB-105%TG=FF%W=2000%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=FB-105%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=FB-105%TG=FF%W=1FC4%S=O%A=O%F=A%O=%RD=0%Q=)
T4(R=Y%DF=N%T=FB-105%TG=FF%W=2000%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FB-105%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=FB-105%TG=FF%CD=S)

# 3Com Baseline Switch 2226-SFP Plus / 3CBLSF26
Fingerprint 3Com Baseline Switch 2226-SFP Plus
Class 3Com | embedded || switch
CPE cpe:/h:3com:baseline_switch_2226-sfp_plus
SEQ(SP=8C-96%GCD=1-6%ISR=92-9C%TI=I%II=RI%SS=O|S%TS=1)
OPS(O1=M5B4NW0NNT11%O2=M5B4NW0NNT11%O3=M5B4NW0NNT11%O4=M5B4NW0NNT11%O5=M5B4NW0NNT11%O6=M5B4NNT11)
WIN(W1=3908%W2=3908%W3=3908%W4=3908%W5=3908%W6=3908)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=3908%O=M5B4NW0%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=3B-45%TG=40%W=3908%S=O%A=S+%F=AS%O=M5B4NW0NNT11NNLLLLLLLLLL|M5B4NW0NNT11W2DW2DNNLLLL%RD=0%Q=)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Baseline Switch 2250-SFP Plus
# Baseline Switch 2250-SFP Plus
Fingerprint 3Com Baseline Switch 2250-SFP Plus
Class 3Com | embedded || switch
CPE cpe:/h:3com:baseline_switch_2250-sfp_plus
SEQ(SP=90-A0%GCD=1-6%ISR=97-A1%TI=I%CI=I%II=I%SS=S%TS=1)
OPS(O1=M5A8NW0NNT11%O2=M5A8NW0NNT11%O3=M5A8NW0NNT11%O4=M5A8NW0NNT11%O5=M5A8NW0NNT11%O6=M5A8NNT11)
WIN(W1=43E0%W2=4110%W3=423C%W4=43E0%W5=4180%W6=403D)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=4470%O=M5B4NW0%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=3B-45%TG=40%W=403D%S=O%A=S+%F=AS%O=M5A8NW0NNT11%RD=0%Q=)
T4(R=Y%DF=N%T=3B-45%TG=40%W=4000%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=3401%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# Baseline Switch 2924-SFP Plus
# Cisco ESW 520 "Small Business Pro" managed switch. OS Version: 2.0.3
# Allied Telesis Series 8000
Fingerprint 3Com Baseline Switch 2924-SFP or Cisco ESW-520 switch or Allied Telesis AT-8000 series switch
Class 3Com | embedded || switch
CPE cpe:/h:3com:baseline_switch_2924-sfp
Class Cisco | embedded || switch
CPE cpe:/h:cisco:esw-520
Class Allied Telesis | embedded || switch
SEQ(SP=FD-10D%GCD=1-6%ISR=FA-112%TI=RD%CI=RD|RI%II=RI%TS=U)
OPS(O1=%O2=%O3=%O4=%O5=%O6=)
WIN(W1=100%W2=100%W3=100%W4=100%W5=100%W6=100)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=100%O=%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=3B-45%TG=40%W=100%S=O%A=S+%F=AS%O=%RD=0%Q=)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# 3Com SuperStack 3 Switch 3300
Fingerprint 3Com SuperStack 3 Switch 3300
Class 3Com | embedded || switch
CPE cpe:/h:3com:superstack_3_switch_3300 auto
SEQ(SP=0-5%GCD=0%ISR=0-5%TI=I%CI=I%II=I%SS=S%TS=U)
OPS(O1=M218%O2=M218%O3=M218%O4=M218%O5=M218%O6=M218)
WIN(W1=400%W2=400%W3=400%W4=400%W5=400%W6=400)
ECN(R=Y%DF=N%T=FA-104%TG=FF%W=400%O=M218%CC=N%Q=)
T1(R=Y%DF=N%T=FA-104%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=APR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=FA-104%TG=FF%W=400%S=O%A=S+%F=AS%O=M218%RD=0%Q=)
T4(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=APR%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S+%F=APR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=APR%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=APR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=5493%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=FA-104%TG=FF%CD=S)

# Device type: switch.   Running: 3Com embedded.
# OS details: 3Com Superstack 3, 3300XM switch , Boot PROM Version:  1.00, Software Version:  2.69, Hardware Version:  0
# Switch 3300TM, Software Version: 2.69, Boot PROM Version: 1.00
# Switch 3300SM 3C16987A
Fingerprint 3Com SuperStack 3 Switch 3300
Class 3Com | embedded || switch
CPE cpe:/h:3com:superstack_3_switch_3300 auto
SEQ(SP=0-5%GCD=0%ISR=0-5%TI=I%CI=I%II=I%SS=S%TS=U)
OPS(O1=M59C%O2=M59C%O3=M59C%O4=M59C%O5=M59C%O6=M59C)
WIN(W1=400%W2=400%W3=400%W4=400%W5=400%W6=400)
ECN(R=Y%DF=N%T=FA-104%TG=FF%W=400%O=M59C%CC=N%Q=)
T1(R=Y%DF=N%T=FA-104%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=APR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=FA-104%TG=FF%W=400%S=O%A=S+%F=AS%O=M59C%RD=0%Q=)
T4(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=APR%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S+%F=APR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=APR%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=APR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=>0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=FA-104%TG=FF%CD=S)

# 3Com SuperStack 3 Switch 3300XM
Fingerprint 3Com SuperStack 3 Switch 3300 XM
Class 3Com | embedded || switch
CPE cpe:/h:3com:superstack_3_switch_3300_xm auto
SEQ(SP=0-5%GCD=0%ISR=0-5%TI=I%CI=I%II=I%SS=S%TS=U)
OPS(O1=M218%O2=M218%O3=M218%O4=M218%O5=M218%O6=M218)
WIN(W1=400%W2=400%W3=400%W4=400%W5=400%W6=400)
ECN(R=Y%DF=N%T=FA-104%TG=FF%W=400%O=M218%CC=N%Q=)
T1(R=Y%DF=N%T=FA-104%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=APR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=FA-104%TG=FF%W=400%S=O%A=S+%F=AS%O=M218%RD=0%Q=)
T4(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=APR%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S+%F=APR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=APR%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=APR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=B2D%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=FA-104%TG=FF%CD=S)

# 3300 XM 24 Port
Fingerprint 3Com SuperStack 3 Switch 3300 XM
Class 3Com | embedded || switch
CPE cpe:/h:3com:superstack_3_switch_3300_xm auto
SEQ(SP=0-5%GCD=0%ISR=0-5%TI=I%CI=I%II=I%SS=S%TS=U)
OPS(O1=M218%O2=M218%O3=M218%O4=M218%O5=M218%O6=M218)
WIN(W1=400%W2=400%W3=400%W4=400%W5=400%W6=400)
ECN(R=Y%DF=N%T=FA-104%TG=FF%W=400%O=M218%CC=N%Q=)
T1(R=Y%DF=N%T=FA-104%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=APR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=FA-104%TG=FF%W=400%S=O%A=S+%F=AS%O=M218%RD=0%Q=)
T4(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=APR%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S+%F=APR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=APR%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=APR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=BABA%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=FA-104%TG=FF%CD=S)

# 3Com SuperStack 3, Operational Version: 3.04, Boot Version: 2.03
# SuperStack Switch 4200
# 3Com SuperStack 3 Switch 4400 SE
Fingerprint 3Com SuperStack 3 Switch 3300 XM, 4200, or 4400 SE
Class 3Com | embedded || switch
CPE cpe:/h:3com:superstack_3_switch_3300_xm
CPE cpe:/h:3com:superstack_3_switch_4200
CPE cpe:/h:3com:superstack_3_switch_4200_se
SEQ(SP=1E-6A%GCD=1-6%ISR=4B-55%TI=I%CI=I%II=I%SS=S%TS=U)
OPS(O1=M218%O2=M218%O3=M218%O4=M218%O5=M218%O6=M218)
WIN(W1=400%W2=400%W3=400%W4=400%W5=400%W6=400)
ECN(R=Y%DF=N%T=FA-104%TG=FF%W=400%O=M218%CC=N%Q=)
T1(R=Y%DF=N%T=FA-104%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=APR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=FA-104%TG=FF%W=400%S=O%A=S+%F=AS%O=M218%RD=0%Q=)
T4(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=APR%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S+%F=APR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=APR%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=APR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=BABA%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=FA-104%TG=FF%CD=S)

# 3Com Switch 3812; Software Version  1.10
Fingerprint 3Com SuperStack 3 Switch 3812
Class 3Com | embedded || switch
CPE cpe:/h:3com:superstack_3_switch_3812 auto
SEQ(SP=8E-98%GCD=1-6%ISR=92-9C%TI=I%CI=I%II=RI%SS=S%TS=1)
OPS(O1=M5B4NW0NNT11%O2=M5B4NW0NNT11%O3=M5B4NW0NNT11%O4=M5B4NW0NNT11%O5=M5B4NW0NNT11%O6=M5B4NNT11)
WIN(W1=2000%W2=2000%W3=2000%W4=2000%W5=2000%W6=2000)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=2000%O=M5B4NW0%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=3B-45%TG=40%W=2000%S=O%A=S+%F=AS%O=M5B4NW0NNT11NNLLLLLLLLLL|M5B4NW0NNT11NNLLLLLLLNLL%RD=0%Q=)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# 3Com 3870 Switch 3CR17451-91
Fingerprint 3Com SuperStack 3 Switch 3870
Class 3Com | embedded || switch
CPE cpe:/h:3com:superstack_3_switch_3870 auto
SEQ(SP=88-92%GCD=1-6%ISR=90-9A%TI=I%CI=I%II=RI%SS=O)
OPS(R=N)
WIN(R=N)
ECN(R=N)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# 3Com SuperStack 3 4226T, Hardware Version: 01.01.00, Software Version: 3.00, Boot Version: 1.00
# 3Com Super Stack Switch 4200
# 3Com SuperStack 3, Hardware Version: 04.01.01, Boot Version: 2.03
# 3COM 3C17302A switch
# 3Com SuperStack 3, Operational Version: 3.00
Fingerprint 3Com SuperStack 3 Switch 4200 or 4226T
Class 3Com | embedded || switch
CPE cpe:/h:3com:superstack_3_switch_4200
CPE cpe:/h:3com:superstack_3_switch_4200t
SEQ(SP=2E-50%GCD=1-8|5C|B8|114|170|1CC%ISR=4A-54%TI=I%II=I%SS=S%TS=U)
OPS(O1=M598%O2=M598%O3=M598%O4=M598%O5=M598%O6=M598)
WIN(W1=400%W2=400%W3=400%W4=400%W5=400%W6=400)
ECN(R=Y%DF=N%T=FA-104%TG=FF%W=400%O=M598%CC=N%Q=)
T1(R=Y%DF=N%T=FA-104%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=APR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=FA-104%TG=FF%W=400%S=O%A=S+%F=AS%O=M598%RD=0%Q=)
T4(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=APR%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S+%F=APR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=APR%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=APR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=BABA%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=FA-104%TG=FF%CD=S)

# 3Com SuperStack3 4400 switch
Fingerprint 3Com SuperStack 3 Switch 4400
Class 3Com | embedded || switch
CPE cpe:/h:3com:superstack_3_switch_4400 auto
SEQ(SP=0-8D%GCD=1-6|8|10|18|20|28|58|B0|108|160|1B8%ISR=48-52%TI=I%II=I%SS=S%TS=U)
OPS(O1=M594%O2=M594%O3=M594%O4=M594%O5=M594%O6=M594)
WIN(W1=400%W2=400%W3=400%W4=400%W5=400%W6=400)
ECN(R=Y%DF=N%T=FA-104%TG=FF%W=400%O=M594%CC=N%Q=)
T1(R=Y%DF=N%T=FA-104%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=APR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=FA-104%TG=FF%W=400%S=O%A=S+%F=AS%O=M594%RD=0%Q=)
T4(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=APR%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S+%F=APR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=APR%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=APR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=BABA%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=FA-104%TG=FF%CD=S)

# 3Com SuperStack 3 Switch 4400 SE
Fingerprint 3Com SuperStack 3 Switch 4400 SE
Class 3Com | embedded || switch
CPE cpe:/h:3com:superstack_3_switch_4400_se auto
SEQ(SP=0-5%GCD=0%ISR=0-5%TI=I%II=I%SS=S%TS=U)
OPS(O1=M594%O2=M594%O3=M594%O4=M594%O5=M594%O6=M594)
WIN(W1=400%W2=400%W3=400%W4=400%W5=400%W6=400)
ECN(R=Y%DF=N%T=FA-104%TG=FF%W=400%O=M594%CC=N%Q=)
T1(R=Y%DF=N%T=FA-104%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=APR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=FA-104%TG=FF%W=400%S=O%A=S+%F=AS%O=M594%RD=0%Q=)
T4(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=APR%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S+%F=APR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=APR%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=APR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=BABA%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=FA-104%TG=FF%CD=S)

# 3Com SuperStack 3 Switch 4400 SE
Fingerprint 3Com SuperStack 3 Switch 4400 SE
Class 3Com | embedded || switch
CPE cpe:/h:3com:superstack_3_switch_4400_se auto
SEQ(SP=45-4F%GCD=1-6%ISR=4B-55%TI=I%II=I%SS=S%TS=U)
OPS(O1=M218%O2=M218%O3=M218%O4=M218%O5=M218%O6=M218)
WIN(W1=400%W2=400%W3=400%W4=400%W5=400%W6=400)
ECN(R=Y%DF=N%T=FA-104%TG=FF%W=400%O=M218%CC=N%Q=)
T1(R=Y%DF=N%T=FA-104%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S+%F=APR%O=%RD=0%Q=)
T6(R=N)
T7(R=N)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=BABA%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=FA-104%TG=FF%CD=S)

# 3Com 5500G-EI 48 Port
# super stack 3 4500  50 port managed switch
Fingerprint 3Com SuperStack 3 Switch 4500
Class 3Com | embedded || switch
CPE cpe:/h:3com:superstack_3_switch_4500 auto
SEQ(SP=FB-10D%GCD=1-6%ISR=107-111%TI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4%O2=M5B4%O3=M5B4%O4=M5B4%O5=M5B4%O6=M5B4)
WIN(W1=2000%W2=2000%W3=2000%W4=2000%W5=2000%W6=2000)
ECN(R=Y%DF=N%T=FB-105%TG=FF%W=2000%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=FB-105%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=FB-105%TG=FF%W=1FC4%S=O%A=O%F=A%O=%RD=0%Q=)
T4(R=Y%DF=N%T=FB-105%TG=FF%W=2000%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FB-105%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=FB-105%TG=FF%CD=S)

# 3Com SuperStack 3 Switch 4500 Software Version 3Com OS V3.01.00s168
Fingerprint 3Com SuperStack 3 Switch 4500
Class 3Com | embedded || switch
CPE cpe:/h:3com:superstack_3_switch_4500 auto
SEQ(SP=B-1B%GCD=FA00|1F400|2EE00|3E800|4E200%ISR=96-A0%TI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4%O2=M5B4%O3=M5B4%O4=M5B4%O5=M5B4%O6=M5B4)
WIN(W1=2000%W2=2000%W3=2000%W4=2000%W5=2000%W6=2000)
ECN(R=Y%DF=N%T=FB-105%TG=FF%W=2000%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=FB-105%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=FB-105%TG=FF%W=1FC4%S=O%A=O%F=A%O=%RD=0%Q=)
T4(R=N)
T5(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=N)
T7(R=N)
U1(DF=N%T=FB-105%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=FB-105%TG=FF%CD=S)

# 3Com SuperStack II Switch 3300
Fingerprint 3Com SuperStack II Switch 3300
Class 3Com | embedded || switch
CPE cpe:/h:3com:superstack_ii_3300 auto
SEQ(SP=0-5%GCD=0%ISR=0-5%TI=I%CI=I%II=I%SS=S%TS=U)
OPS(O1=M218%O2=M218%O3=M218%O4=M218%O5=M218%O6=M218)
WIN(W1=400%W2=400%W3=400%W4=400%W5=400%W6=400)
ECN(R=Y%DF=N%T=FA-104%TG=FF%W=400%O=M218%CC=N%Q=)
T1(R=Y%DF=N%T=FA-104%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=APR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=FA-104%TG=FF%W=400%S=O%A=S+%F=AS%O=M218%RD=0%Q=)
T4(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=APR%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S+%F=APR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=APR%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=APR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=99DF%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=FA-104%TG=FF%CD=S)

# 3Com SuperStack II Switch 3900-36 version 3.0.1
# 3com SuperStack II Switch 3900-36 (rev CA) firmware version: 3.0.5-7
Fingerprint 3Com SuperStack II Switch 3900-36
Class 3Com | embedded || switch
CPE cpe:/h:3com:superstack_ii_3900-36 auto
SEQ(SP=B-15%GCD=FA00|1F400|2EE00|3E800|4E200%ISR=97-A1%TI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4%O2=M5B4%O3=M5B4%O4=M5B4%O5=M5B4%O6=M5B4)
WIN(W1=1000%W2=1000%W3=1000%W4=1000%W5=1000%W6=1000)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=1000%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=3B-45%TG=40%W=1000%S=O%A=O%F=A%O=%RD=0%Q=)
T4(R=Y%DF=N%T=3B-45%TG=40%W=1000%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=Z%RUCK=0%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# 3com SuperStack Switch 4200 (PN 3C17302), Software Version 02.10, Hardware Version 02.07.00, Boot Version 1.02
Fingerprint 3Com SuperStack Switch 4200
Class 3Com | embedded || switch
CPE cpe:/h:3com:superstack_switch_4200 auto
SEQ(SP=0-5%GCD=1-6%ISR=0-5%TI=I%II=I%SS=S%TS=U)
OPS(O1=M598%O2=M598%O3=M598%O4=M598%O5=M598%O6=M598)
WIN(W1=400%W2=400%W3=400%W4=400%W5=400%W6=400)
ECN(R=Y%DF=N%T=FA-104%TG=FF%W=400%O=M598%CC=N%Q=)
T1(R=Y%DF=N%T=FA-104%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=APR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=FA-104%TG=FF%W=400%S=O%A=S+%F=AS%O=M598%RD=0%Q=)
T4(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=APR%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S+%F=APR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=APR%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=APR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=BABA%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=FA-104%TG=FF%CD=S)

# 3Com Switch 4200, Software Version: 02.03
Fingerprint 3Com Switch 4200
Class 3Com | embedded || switch
CPE cpe:/h:3com:switch_4200 auto
SEQ(SP=0-5%GCD=0%ISR=0-5%TI=I%CI=I%II=I%SS=S%TS=U)
OPS(O1=M598%O2=M598%O3=M598%O4=M598%O5=M598%O6=M598)
WIN(W1=400%W2=400%W3=400%W4=400%W5=400%W6=400)
ECN(R=Y%DF=N%T=FA-104%TG=FF%W=400%O=M598%CC=N%Q=)
T1(R=Y%DF=N%T=FA-104%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=APR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=FA-104%TG=FF%W=400%S=O%A=S+%F=AS%O=M598%RD=0%Q=)
T4(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=APR%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S+%F=APR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=APR%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=APR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=BABA%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=FA-104%TG=FF%CD=S)

# Lanswitch Platform Software Version COMWAREV300R002B16D019SP11 Switch 4200G PWR 24-Port Software Version V200R002B61D005SP01
Fingerprint 3Com Switch 4200G
Class 3Com | embedded || switch
CPE cpe:/h:3com:switch_4200g auto
SEQ(SP=F9-103%GCD=1-6%ISR=109-113%TI=I%CI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4%O2=M5B4%O3=M5B4%O4=M5B4%O5=M5B4%O6=M5B4)
WIN(W1=2000%W2=2000%W3=2000%W4=2000%W5=2000%W6=2000)
ECN(R=Y%DF=N%T=FA-104%TG=FF%W=2000%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=FA-104%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# Wireless 7760 11a/b/g Access Point, Firmware Version  :         AP software 1.6.44 Built on Apr 17, 2009
Fingerprint 3Com 7760 WAP
Class 3Com | embedded || WAP
CPE cpe:/h:3com:7760 auto
SEQ(SP=14-1E%GCD=FA00|1F400|2EE00|3E800|4E200%ISR=99-A3%TI=I%II=I%SS=S%TS=1)
OPS(O1=M5B4NW0NNT11%O2=M5B4NW0NNT11%O3=M5B4NW0NNT11%O4=M5B4NW0NNT11%O5=M5B4NW0NNT11%O6=M5B4NNT11)
WIN(W1=2000%W2=2000%W3=2000%W4=2000%W5=2000%W6=2000)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=2000%O=M5B4NW0%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=N)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=I%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# 3CRWDR100A-72, Software version 2.06T13 (Apr 25 2007 17:06:30), Boot loader version 0.67.3, ADSL modem version 07.00.04.00A
Fingerprint 3Com OfficeConnect 3CRWDR100A-72 wireless ADSL modem
Class 3Com | embedded || WAP
CPE cpe:/h:3com:officeconnect_3crwdr100a-72 auto
SEQ(SP=0-5%GCD=A|14|1E|28|32%ISR=30-3A%TI=I|RD%II=I%SS=S%TS=U)
OPS(O1=M578%O2=M578%O3=M280%O4=M578%O5=M218%O6=M109)
WIN(W1=1770%W2=1770%W3=1770%W4=1770%W5=1770%W6=1770)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=1770%O=M578%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=O|S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=O%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=O%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N|Y%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N|S%T=3B-45%TG=40%CD=Z)

# 3Com OfficeConnect Wireless 11g Cable/DSL Router (3CRWE554G72T/3CRWE554G72TU), Version 2.01.05
Fingerprint 3Com OfficeConnect 3CRWE554G72T wireless broadband router
Class 3Com | embedded || WAP
CPE cpe:/h:3com:officeconnect_3crwe554g72t auto
SEQ(SP=8F-99%GCD=1-6%ISR=94-9E%TI=I|RD%II=I%SS=S%TS=1)
OPS(O1=M5B4NW0NNT11%O2=M5B4NW0NNT11%O3=M5B4NW0NNT11%O4=M5B4NW0NNT11%O5=M5B4NW0NNT11%O6=M5B4NNT11)
WIN(W1=2238%W2=20D0%W3=2080%W4=2000%W5=2180%W6=2017)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=2238%O=M5B4NW0%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=O|S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=3B-45%TG=40%W=2000%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=15C%RID=4210%RIPCK=Z%RUCK=0%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# 3Com 3CRWER100-75 firmware 1.3
# 2.6.30.9 Kernel running on RTL8196C
Fingerprint 3Com OfficeConnect 3CRWER100-75 wireless broadband router
Class 3Com | embedded || WAP
CPE cpe:/h:3com:officeconnect_3crwer100-75 auto
SEQ(SP=C3-D1%GCD=1-6%ISR=C0-DA%TI=Z%CI=Z%II=I%TS=7)
OPS(O1=M5ACST11%O2=M5ACST11%O3=M5ACNNT11%O4=M5ACST11%O5=M5ACST11%O6=M5ACST11)
WIN(W1=1680%W2=1680%W3=1680%W4=1680%W5=1680%W6=1680)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=16B0%O=M5ACNNS%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=1680%S=O%A=S+%F=AS%O=M5ACST11%RD=0%Q=)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# 3com OfficeConnect wirless router 3CRWER100-75 firmware 1.2.0
Fingerprint 3Com OfficeConnect 3CRWER100-75 wireless router
Class 3Com | embedded || WAP
CPE cpe:/h:3com:officeconnect_3crwer100-75 auto
SEQ(SP=B1-BB%GCD=1-6%ISR=C4-CE%TI=Z%II=I%TS=7)
OPS(O1=M5B4ST11%O2=M5B4ST11%O3=M5B4NNT11%O4=M5B4ST11%O5=M5B4ST11%O6=M5B4ST11)
WIN(W1=16A0%W2=16A0%W3=16A0%W4=16A0%W5=16A0%W6=16A0)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=16D0%O=M5B4NNS%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=16A0%S=O%A=S+%F=AS%O=M5B4ST11%RD=0%Q=)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# 3Com Wireless LAN Switch (3Com WX1200).
Fingerprint 3Com WX1200 Wireless LAN Switch
Class 3Com | embedded || WAP
SEQ(SP=C7-D1%GCD=1-6%ISR=DA-E4%TI=Z%CI=Z%II=Z%TS=U)
OPS(O1=M5B4%O2=M578%O3=M280%O4=M5B4%O5=M218%O6=M109)
WIN(W1=2DA0%W2=2DA0%W3=2DA0%W4=2DA0%W5=2DA0%W6=2DA0)
ECN(R=Y%DF=N%T=FA-104%TG=FF%W=2DA0%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=FA-104%TG=FF%S=A%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S+%F=AR%O=%RD=0%Q=)
T4(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=FA-104%TG=FF%CD=Z)

# Enterasys Wireless Switch RBT-8400, 7.0.9.8 REL
# 3Com WX2200 running firmware 7.0.5.6.0
# Trapeze Networks Mobility Exchange (MX) Wireless Security Switch, now called the Juniper Wireless LAN Controller (WLC)
Fingerprint 3Com WX2200, Enterasys RBT-8400, or Trapeze Networks MX WAP
Class 3Com | embedded || WAP
Class Enterasys | embedded || WAP
Class Trapeze Networks | embedded || WAP
SEQ(SP=C4-D0%GCD=1-6%ISR=DC-E6%TI=Z%CI=Z%II=Z%TS=U)
OPS(O1=M5B4%O2=M578%O3=M280%O4=M5B4%O5=M218%O6=M109)
WIN(W1=2DA0%W2=2DA0%W3=2DA0%W4=2DA0%W5=2DA0%W6=2DA0)
ECN(R=Y%DF=N%T=FA-104%TG=FF%W=2DA0%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=FA-104%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A+%A=S%F=AR%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=FA-104%TG=FF%CD=Z)

# Philips SNB6500 wireless router - Runtime Code Version V1.09 (Dec 6 2005 14:30:34)
# 3Com OfficeConnect ADSL Wireless 11g Firewall Router, 3Com code 3CRWDR100A-72, software version 2.06
# Sinus 154 DSL Basic 3 router (German Telekom)
# SMCWEBT-G, access point with SMC firmware V1.07.2 (English, 09/18/2006)
# SMCWBR14-G2
# 3Com OfficeConnect ADSL router, wireless 54Mbit
Fingerprint Wireless broadband router (3Com OfficeConnect 3CRWDR100A-72, Philips SNB6500, Sinus 154, SMC SMCWEBT-G, or SMC SMCWBR14-G2)
Class 3Com | embedded || WAP
Class Philips | embedded || WAP
Class Sinus | embedded || WAP
Class SMC | embedded || WAP
SEQ(SP=0-1F%GCD=1-6|A|14|1E|28|32%ISR=30-3A%TI=I%II=I%SS=S%TS=U)
OPS(O1=M578%O2=M578%O3=M280%O4=M578%O5=M218%O6=M109)
WIN(W1=1770%W2=1770%W3=1770%W4=1770%W5=1770%W6=1770)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=1770%O=M578%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=1770%S=O%A=S+%F=AS%O=M109%RD=0%Q=)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=O%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=O%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N|Y%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N|O|S|Y%T=3B-45%TG=40%CD=Z)

# 3M CT-30 HVAC Thermostat
Fingerprint 3M CT-30 thermostat
Class 3M | embedded || specialized
CPE cpe:/h:3m:ct-30
SEQ(SP=DF-103%GCD=1-6%ISR=EC-FE%TI=I|RD%CI=I%II=I%SS=O%TS=A|D)
OPS(O1=M5B4NW0NNSNNT11%O2=M578NW0NNSNNT11%O3=M280NW0NNT11%O4=M5B4NW0NNSNNT11%O5=%O6=)
WIN(W1=B50%W2=AD8%W3=9D0%W4=B50%W5=0%W6=0)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=B68%O=M5B4NW0NNS%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=FA-104%TG=FF%CD=S)

# Radio Thermostat from Filtrete model CT50 V1.92 API version 113 Firmware version 1.04.72 www.radiothermostat.com
# 3M Radio Thermostat Company of America - Filterete 3m-50
Fingerprint 3M Filtrete 3M-50 thermostat
Class 3M | embedded || specialized
SEQ(SP=E9-101%GCD=1-6%ISR=E7-FB%TI=I%CI=I%II=I%SS=S%TS=A)
OPS(O1=M5B4NW0NNSNNT11%O2=M578NW0NNSNNT11%O3=M280NW0NNT11%O4=M5B4NW0NNSNNT11%O5=M218NW0NNSNNT11%O6=M109NNSNNT11)
WIN(W1=B50%W2=AD8%W3=9D0%W4=B50%W5=830%W6=8E5)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=B68%O=M5B4NW0NNS%CC=N)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%RD=0)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%RD=0)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%RD=0)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%RD=0)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=FA-104%TG=FF%CD=S)

# XSBoxGo+. The vendor is 4G Systems. 3G/WLAN router.
Fingerprint 4G Systems XSBoxGO+ WAP
Class 4G Systems | embedded || WAP
SEQ(SP=0-1C%GCD=1000|2000|3000|4000|5000|65000|CA000|12F000|194000|1F9000%ISR=AB-B5%TI=I%CI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4|M5B4W0L%O2=M578W0L%O3=M280W0L%O4=M5B4W0L%O5=M218W0L%O6=M109)
WIN(W1=4000%W2=4000%W3=4000%W4=4000%W5=4000%W6=4000)
ECN(R=Y%DF=N%T=FA-104%TG=FF%W=4000%O=M5B4%CC=N)
T1(R=Y%DF=N%T=FA-104%TG=FF%S=O%A=S+%F=AS%RD=0)
T2(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=Z%A=S%F=AR%O=T00LL%RD=0)
T3(R=Y%DF=N%T=FA-104%TG=FF%W=4000%S=O%A=S+%F=AS%O=M109|M109W0L%RD=0)
T4(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=T00LL%RD=0)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=Z%A=S+%F=AR%O=T00LL%RD=0)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=T00LL%RD=0)
T7(R=N)
U1(DF=N%T=FA-104%TG=FF%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=FA-104%TG=FF%CD=S)

# MS347S : see http://www.a-tecsubsystem.com/websys/atec/web/products.jsp?prodId=1191910612953
# Mapower KC 31N, usb/nas diskbox
Fingerprint A-Tec MS347S or Mapower KC31N NAS device
Class A-Tec | embedded || storage-misc
CPE cpe:/h:a-tec:ms347s
Class Mapower | embedded || storage-misc
CPE cpe:/h:mapower:kc31n auto
SEQ(SP=0-19%GCD=1-6%ISR=57-63%TI=I%CI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4%O2=M578%O3=M280%O4=M5B4%O5=M218%O6=M109)
WIN(W1=8000%W2=8000%W3=8000%W4=8000%W5=8000%W6=8000)
ECN(R=Y%DF=N%T=1B-25%TG=20%W=8000%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=1B-25%TG=20%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=1B-25%TG=20%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=1B-25%TG=20%W=8000%S=O%A=S+%F=AS%O=M109%RD=0%Q=)
T4(R=Y%DF=N%T=1B-25%TG=20%W=0%S=A%A=S%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=1B-25%TG=20%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=1B-25%TG=20%W=0%S=A%A=S%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=1B-25%TG=20%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=1B-25%TG=20%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=1B-25%TG=20%CD=S)

# BL_AIP6500_7.9.6
Fingerprint Aastra AIP6500 interface card
Class Aastra | embedded || telecom-misc
CPE cpe:/h:aastra:aip6500
SEQ(SP=0-5%GCD=0%ISR=0-5%TI=I%CI=I|RD%II=I%SS=S%TS=U)
OPS(O1=M5B4%O2=M5B4%O3=M5B4%O4=M5B4%O5=M5B4%O6=M5B4)
WIN(W1=2000%W2=2000%W3=2000%W4=2000%W5=2000%W6=2000)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=2000%O=M5B4%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=Y%T=3B-45%TG=40%W=1%S=Z%A=S%F=AR%O=%RD=0%Q=U)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=1%S=A%A=Z%F=R%O=%RD=0%Q=U)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=1%S=Z%A=S+%F=AR%O=%RD=0%Q=U)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=1%S=A%A=Z%F=R%O=%RD=0%Q=U)
T7(R=Y%DF=Y%T=3B-45%TG=40%W=1%S=Z%A=S%F=AR%O=%RD=0%Q=U)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# Sun RSC Version 2.2.3, bootmon 2.0.0
# aastra 480i
Fingerprint Aastra 480i IP Phone or Sun Remote System Control (RSC)
Class Aastra | embedded || VoIP phone
Class Sun | embedded || remote management
SEQ(CI=I%II=I)
OPS(R=N)
WIN(R=N)
ECN(R=N)
T1(R=N)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=3B-45%TG=40%W=2000%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=Z%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# VoIP Deskphone. CT-57i
Fingerprint Aastra 57i VoIP phone
Class Aastra | embedded || VoIP phone
CPE cpe:/h:aastra:57i
SEQ(CI=RD%II=I)
OPS(O1=%O2=%O3=%O4=%O5=%O6=)
WIN(W1=0%W2=0%W3=0%W4=0%W5=0%W6=0)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=0%O=%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=Z%A=S+%F=AR%RD=0%Q=)
T2(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=70%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# AirPort Express, firmware 6.3
# Aastra 6731i Revision 0, Firmware Version 2.5.0.82
Fingerprint Aastra 6731i VoIP phone or Apple AirPort Express WAP
Class Aastra | embedded || VoIP phone
CPE cpe:/h:aastra:6731i
Class Apple | embedded || WAP
CPE cpe:/h:apple:airport_express
SEQ(CI=I%II=I)
OPS(R=N)
WIN(R=N)
ECN(R=N)
T1(R=N)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=70%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Aastra 6739i VoIP phone
Fingerprint Aastra 6739i VoIP phone
Class Aastra | embedded || VoIP phone
CPE cpe:/h:aastra:6739i
SEQ(SP=8C-96%GCD=1-6%ISR=98-A2%TI=I%CI=I%II=I%SS=S%TS=U)
OPS(O1=NNM5B4SNW0%O2=NNM5B4SNW0%O3=M5B4NW0%O4=NNM5B4SNW0%O5=NNM5B4SNW0%O6=NNM5B4S)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=NNM5B4SNW0%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S+%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S+%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=Z%A=S+%F=R%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=138%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=Z)

# Aastra A150 telephone system.
Fingerprint Aastra A510 VoIP phone
Class Aastra | embedded || VoIP phone
CPE cpe:/h:aastra:a510 auto
SEQ(SP=0-5%GCD=FA00|1F400|2EE00|3E800|4E200%ISR=94-9E%TI=I%CI=I%II=I%SS=O|S%TS=U)
OPS(R=N)
WIN(R=N)
ECN(R=N)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=O|S+%F=AS%RD=0)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%RD=0)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%RD=0)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%RD=0)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%RD=0)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Aastra Dialog 4425 VoIP Phone, firmware RK7
Fingerprint Aastra Dialog 4425 IP phone
Class Aastra | embedded || VoIP phone
SEQ(SP=FF-109%GCD=1-6%ISR=107-111%TI=I%CI=I%II=I%SS=S%TS=9)
OPS(O1=M5B4NW0NNT11%O2=M5B4NW0NNT11%O3=M5B4NW0NNT11%O4=M5B4NW0NNT11%O5=M5B4NW0NNT11%O6=M5B4NNT11)
WIN(W1=4000%W2=4000%W3=4000%W4=4000%W5=4000%W6=4000)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=4000%O=M5B4NW0%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=4000%S=O%A=S+%F=AS%O=M5B4NW0NNT11%RD=0%Q=)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=70%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Aastra/DeTeWe RFP L32 IP Poe DECT Basis Station. Software is Open Mobility Manager 1.1.4.
Fingerprint Aastra RFP L32 IP DECT WAP
Class Aastra | embedded || WAP
SEQ(SP=C2-CC%GCD=1-6%ISR=C8-D2%TI=Z%II=I%TS=8)
OPS(O1=M5B4ST11NW0%O2=M5B4ST11NW0%O3=M5B4NNT11NW0%O4=M5B4ST11NW0%O5=M5B4ST11NW0%O6=M5B4ST11)
WIN(W1=16A0%W2=16A0%W3=16A0%W4=16A0%W5=16A0%W6=16A0)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=16D0%O=M5B4NNSNW0%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=16A0%S=O%A=S+%F=AS%O=M5B4ST11NW0%RD=0%Q=)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# Aceex BR41 Broadband Router Firmware Version 2.2f
Fingerprint Aceex BR41 broadband router
Class Aceex | embedded || broadband router
CPE cpe:/h:aceex:br41 auto
SEQ(SP=0-35%GCD=1-6|B|16|21|2C|37%ISR=30-3A%TI=I%II=I%SS=S%TS=U)
OPS(O1=M578%O2=M578%O3=M280%O4=M578%O5=M218%O6=M109)
WIN(W1=800%W2=800%W3=800%W4=800%W5=800%W6=800)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=800%O=M578%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=800%S=O%A=S+%F=AS%O=M109%RD=0%Q=)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=O%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=O%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=Z)

# ACER Projector S5200
Fingerprint Acer S5200 projector
Class Acer | embedded || media device
SEQ(CI=I%II=I%TS=U)
OPS(O1=M5B4%O2=M5B4%O3=%O4=%O5=%O6=)
WIN(W1=7D0%W2=7D0%W3=0%W4=0%W5=0%W6=0)
ECN(R=Y%DF=N%T=63-65%TG=80%W=0%O=%CC=N%Q=)
T1(R=Y%DF=N%T=63-65%TG=80%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=63-65%TG=80%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=63-65%TG=80%W=0%S=A%A=S+%F=AR%O=%RD=0%Q=)
T4(R=Y%DF=N%T=63-65%TG=80%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
T5(R=Y%DF=N%T=63-65%TG=80%W=0%S=A%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=63-65%TG=80%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
T7(R=Y%DF=N%T=63-65%TG=80%W=0%S=A%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=63-65%TG=80%IPL=38%UN=8AFD%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=63-65%TG=80%CD=S)

# ACME Packet SBC Net-Net 4250 Firmware: SC6.2.0 MR-3
Fingerprint Acme Packet Net-Net 4250 VoIP session border controller
Class Acme Packet | embedded || firewall
SEQ(SP=FD-109%GCD=1-6%ISR=108-112%TI=I%CI=I%II=I%SS=S%TS=A)
OPS(O1=M5ACNW1NNT11%O2=M5ACNW1NNT11%O3=M5ACNW1NNT11%O4=M5ACNW1NNT11%O5=M5ACNW1NNT11%O6=M5ACNNT11)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M5ACNW1%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%S=O%A=S+%F=AS%O=M5ACNW1NNT11%RD=0%Q=)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(R=N)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Acorp-W422G, wireless ADSL router.
# Linux 2.4.17_mvl21-malta-mips_fp_le (root@home1.homework) (gcc version 2.95.3 20010315 (release/MontaVista)) #1 Sat Sep 8 00:03:33 MSD 2007, Acorp-W400G ADSL and Wi-Fi router,
Fingerprint Acorp W400G or W422G wireless ADSL modem (MontaVista embedded Linux 2.4.17)
Class Acorp | embedded || WAP
SEQ(SP=C2-CC%GCD=1-6%ISR=C7-D1%TI=Z%II=I%TS=7)
OPS(O1=M5B4ST11%O2=M5B4ST11%O3=M5B4NNT11%O4=M5B4ST11%O5=M5B4ST11%O6=M5B4ST11)
WIN(W1=16A0%W2=16A0%W3=16A0%W4=16A0%W5=16A0%W6=16A0)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=16D0%O=M5B4NNS%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=Y%DF=Y%T=FA-104%TG=FF%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=N)
T7(R=N)
U1(DF=N%T=FA-104%TG=FF%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=FA-104%TG=FF%CD=S)

# This is a GT701, which is issued by QWEST.
Fingerprint Actiontec GT701 DSL modem
Class Actiontec | embedded || broadband router
CPE cpe:/h:actiontec:gt701 auto
SEQ(SP=C8-D2%GCD=1-6%ISR=CC-D6%TI=Z%II=I%TS=7)
OPS(O1=M5B4ST11NW0%O2=M5B4ST11NW0%O3=M5B4NNT11NW0%O4=M5B4ST11NW0%O5=M5B4ST11NW0%O6=M5B4ST11)
WIN(W1=16A0%W2=16A0%W3=16A0%W4=16A0%W5=16A0%W6=16A0)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=16D0%O=M5B4NNSNW0%CC=Y%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=Y%DF=Y%T=FA-104%TG=FF%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=N)
T7(R=N)
U1(DF=N%T=FA-104%TG=FF%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=FA-104%TG=FF%CD=S)

# Actiontec MI424WR-GEN3I
Fingerprint Actiontec MI424WR-GEN3I WAP
Class Actiontec | embedded || WAP
CPE cpe:/h:actiontec:mi424wr-gen3i auto
Class Linux | Linux || WAP
CPE cpe:/o:linux:linux_kernel auto
SEQ(SP=FC-108%GCD=1-6%ISR=F9-109%TI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4%O2=M5B4%O3=M5B4%O4=M5B4%O5=M5B4%O6=M5B4)
WIN(W1=FAF0%W2=FAF0%W3=FAF0%W4=FAF0%W5=FAF0%W6=FAF0)
ECN(R=Y%DF=N%T=7B-85%TG=80%W=FAF0%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=7B-85%TG=80%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=7B-85%TG=80%W=FAF0%S=O%A=S+%F=AS%O=M5B4%RD=0%Q=)
T4(R=Y%DF=N%T=7B-85%TG=80%W=7FFF%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=7B-85%TG=80%W=FAF0%S=O%A=O%F=AR%RD=0)
T6(R=Y%DF=N%T=7B-85%TG=80%W=7FFF%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=N)
U1(R=N)
IE(DFI=N%T=7B-85%TG=80%CD=S)

# Actiontec Wireless Cable/DSL Router Model: R3010UW Firmware version: 1.0.10.0.76-R3010UW
Fingerprint Actiontec R3010UW wireless broadband router
Class Actiontec | embedded || WAP
CPE cpe:/h:actiontec:r3010uw auto
SEQ(SP=71-87%GCD=1-6%ISR=75-8F%TI=I%II=I%SS=S%TS=U)
OPS(O1=M109|M5A0%O2=M109|M578%O3=M109|M280%O4=M109|M280%O5=M109|M218%O6=M109)
WIN(W1=1194%W2=1194%W3=1194%W4=1194%W5=1194%W6=1194)
ECN(R=Y%DF=N%T=96-A0%TG=FF%W=1194%O=M109%CC=N%Q=)
T1(R=Y%DF=N%T=96-A0%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=96-A0%TG=FF%W=1194%S=A%A=Z%F=R%O=%RD=0%Q=)
T3(R=N)
T4(R=Y%DF=N%T=96-A0%TG=FF%W=1194%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=96-A0%TG=FF%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=96-A0%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=96-A0%TG=FF%W=0%S=Z%A=Z%F=R%O=%RD=0%Q=)
U1(DF=N%T=96-A0%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=96-A0%TG=FF%CD=S)

# Adaptec Model: 4000 series, Software: 3.1.603 (US), Hardware: 2.2.1, BIOS: 2.4.437
Fingerprint Adaptec RAID 4000 I/O controller
Class Adaptec | embedded || storage-misc
SEQ(SP=0-17%GCD=3200|6400|9600|C800|FA00%ISR=97-A1%TI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4%O2=M5B4%O3=M5B4%O4=M5B4%O5=M5B4%O6=M5B4)
WIN(W1=2238%W2=2238%W3=2238%W4=2238%W5=2238%W6=2238)
ECN(R=Y%DF=N%T=19-23%TG=20%W=2238%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=19-23%TG=20%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=19-23%TG=20%W=2238%S=O%A=O%F=A|AR%O=%RD=0%Q=)
T4(R=Y%DF=N%T=19-23%TG=20%W=2238%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=19-23%TG=20%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=19-23%TG=20%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=19-23%TG=20%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=4210%RIPCK=Z%RUCK=0%RUD=G)
IE(DFI=N%T=FA-104%TG=FF%CD=S)

# "Snap! Server" model 100
Fingerprint Adaptec Snap Server 100 NAS device
Class Adaptec | embedded || storage-misc
CPE cpe:/h:adaptec:snap_server_100 auto
SEQ(SP=C-16%GCD=3200|6400|9600|C800|FA00%ISR=96-A0%TI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4%O2=M5B4%O3=M5B4%O4=M5B4%O5=M5B4%O6=M5B4)
WIN(W1=2238%W2=2238%W3=2238%W4=2238%W5=2238%W6=2238)
ECN(R=Y%DF=N%T=1B-25%TG=20%W=2238%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=1B-25%TG=20%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=1B-25%TG=20%W=2238%S=O%A=O%F=A%O=%RD=0%Q=)
T4(R=Y%DF=N%T=1B-25%TG=20%W=2238%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=1B-25%TG=20%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=1B-25%TG=20%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=1B-25%TG=20%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(R=N)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# Snap Appliance Snap Server 1100
Fingerprint Adaptec Snap Server 100 NAS device
Class Adaptec | embedded || storage-misc
CPE cpe:/h:adaptec:snap_server_100 auto
SEQ(SP=D-17%GCD=3200|6400|9600|C800|FA00%ISR=97-A1%TI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4%O2=M5B4%O3=M5B4%O4=M5B4%O5=M5B4%O6=M5B4)
WIN(W1=2238%W2=2238%W3=2238%W4=2238%W5=2238%W6=2238)
ECN(R=Y%DF=N%T=19-23%TG=20%W=2238%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=19-23%TG=20%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=19-23%TG=20%W=2238%S=O%A=O%F=A%O=%RD=0%Q=)
T4(R=Y%DF=N%T=19-23%TG=20%W=2238%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=19-23%TG=20%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=19-23%TG=20%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=19-23%TG=20%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=4210%RIPCK=Z%RUCK=0%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# ADIC Scalar 1000 tape library remote management unit, firmware 161A.00005
Fingerprint ADIC Scalar 1000 tape library remote management unit
Class ADIC | embedded || storage-misc
SEQ(SP=14-1E%GCD=FA00|1F400|2EE00|3E800|4E200%ISR=99-A3%II=I%TS=U)
OPS(O1=M200NW0%O2=M200NW0%O3=M200NW0%O4=M200NW0%O5=M200NW0%O6=M200)
WIN(W1=578%W2=578%W3=578%W4=578%W5=578%W6=578)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=578%O=M200NW0%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=3B-45%TG=40%W=578%S=O%A=O%F=A%O=%RD=0%Q=)
T4(R=Y%DF=N%T=3B-45%TG=40%W=578%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=4210%RIPCK=Z%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Adtran NetVanta 1638P ethernet switch running AOS 10.4.0A.
# ADTRAN, Inc. OS version R10.9.3, Platform: NetVanta 3200, part number 1203860G1
Fingerprint Adtran NetVanta switch (AOS 10.4 - 10.9)
Class Adtran | AOS | 10.X | switch
CPE cpe:/o:adtran:aos:10 auto
SEQ(SP=E1-EB%GCD=1-6%ISR=E6-F4%TI=I%CI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4%O2=M5B4%O3=M5B4%O4=M5B4%O5=M5B4%O6=M5B4)
WIN(W1=DAC%W2=DAC%W3=DAC%W4=DAC%W5=DAC%W6=DAC)
ECN(R=N)
T1(R=Y%DF=N%T=FB-105%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
T3(R=N)
T4(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=S%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=S%F=R%O=%RD=0%Q=)
T7(R=N)
U1(DF=N%T=FB-105%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=FB-105%TG=FF%CD=Z)

# 18.02.01.00.E
Fingerprint Adtran AOS 18.02.01.00.E
Class Adtran | AOS | 18.X | switch
CPE cpe:/o:adtran:aos:18.02.01.00.e auto
SEQ(SP=E8-F2%GCD=1-6%ISR=EB-F5%TI=I%CI=I%II=I%SS=O%TS=U)
OPS(R=N)
WIN(R=N)
ECN(R=N)
T1(R=Y%DF=N%T=FB-105%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
T3(R=N)
T4(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=S%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=S%F=R%O=%RD=0%Q=)
T7(R=N)
U1(DF=N%T=FB-105%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=I%RUCK=G%RUD=G)
IE(DFI=N%T=FB-105%TG=FF%CD=Z)

# Adtran NetVanta 1224R; ADTRAN, Inc. OS version 13.14.00
Fingerprint Adtran NetVanta 1224R or 3430 router
Class Adtran | embedded || router
CPE cpe:/h:adtran:netvanta_3430
CPE cpe:/h:adtran:netvanta_1224r auto
SEQ(SP=D2-DC%GCD=1-6%ISR=DF-E9%TI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4%O2=M5B4%O3=M5B4%O4=M5B4%O5=M5B4%O6=M5B4)
WIN(W1=DAC%W2=DAC%W3=DAC%W4=DAC%W5=DAC%W6=DAC)
ECN(R=N)
T1(R=Y%DF=N%T=FA-104%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=N)
T7(R=N)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=FA-104%TG=FF%CD=Z)

# NetVanta 3200 Firmware Version  10.01.00.E Part Number  1202860L1
# ADTRAN Total Access 908, Second Generation. ! ADTRAN, Inc. OS version A2.04.00.E ! Boot ROM version 14.04.00
Fingerprint Adtran NetVanta 3200 or Total Access 908 ADSL router
Class Adtran | embedded || router
SEQ(SP=E1-F1%GCD=1-6%ISR=E4-F8%TI=I|RD%II=I%SS=O|S%TS=U)
OPS(O1=%O2=%O3=M5B4%O4=M5B4%O5=M5B4%O6=M5B4)
WIN(W1=DAC%W2=DAC%W3=DAC%W4=DAC%W5=DAC%W6=DAC)
ECN(R=N)
T1(R=Y%DF=N%T=FA-104%TG=FF%S=O%A=O|S+%F=A|AS%RD=0%Q=)
T2(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
T3(R=N)
T4(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=R%O=%RD=0%Q=)
T7(R=N)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=FA-104%TG=FF%CD=Z)

# Adtran Total Access 5000, Adtran Operating System
Fingerprint Adtran Total Access 5000 router
Class Adtran | embedded || router
CPE cpe:/h:adtran:total_access_5000
SEQ(SP=13-1D%GCD=1F4|3E8|5DC|7D0|9C4%ISR=8A-94%TI=I%CI=I%II=I%SS=S%TS=U)
OPS(O1=M218%O2=M218%O3=M218%O4=M218%O5=M218%O6=M218)
WIN(W1=400%W2=400%W3=400%W4=400%W5=400%W6=400)
ECN(R=Y%DF=N%T=FA-104%TG=FF%W=400%O=M218%CC=N%Q=)
T1(R=Y%DF=N%T=FA-104%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=FA-104%TG=FF%W=400%S=O%A=S+%F=AS%O=M218%RD=0%Q=)
T4(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=FA-104%TG=FF%CD=S)

# Adtran Total Access 624
Fingerprint Adtran Total Access 624 router
Class Adtran | embedded || router
CPE cpe:/h:adtran:total_access_624 auto
SEQ(SP=0-5%GCD=388|710|A98|E20|11A8%ISR=64-6E%TI=I%II=I%SS=S%TS=U)
OPS(O1=M3F1%O2=M3F1%O3=M3EE%O4=M5B4%O5=M3EE%O6=M3ED)
WIN(W1=1000%W2=1000%W3=1000%W4=1000%W5=1000%W6=1000)
ECN(R=Y%DF=N%T=9E-A8|C6-E1%TG=FF%W=1000%O=M3F1%CC=N%Q=)
T1(R=Y%DF=N%T=83-8D|C5-D9|DD-E7%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=A7-B9|CE-DE|E1-EB%TG=FF%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=86-90|B0-BA|C5-CF|DA-E4|EA-F4%TG=FF%W=1000%S=O%A=S+%F=AS%O=M3ED%RD=0%Q=)
T4(R=Y%DF=N%T=9D-A7|C5-E0|E9-F3%TG=FF%W=0%S=A%A=S%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=85-8F|AF-B9|C4-CE|D9-E3|E9-F3%TG=FF%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=9C-A6|C4-DF|E8-F2%TG=FF%W=0%S=A%A=S%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=A1-B5|C3-CD|D8-E2|E8-F2%TG=FF%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=F9-103%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=F9-103%TG=FF%CD=Z)

# Adtran Total Access 904 (Router)
Fingerprint Adtran Total Access 904 router
Class Adtran | embedded || router
CPE cpe:/h:adtran:total_access_904 auto
SEQ(II=I)
OPS(O1=%O2=%O3=%O4=%O5=%O6=)
WIN(W1=0%W2=0%W3=0%W4=0%W5=0%W6=0)
ECN(R=N)
T1(R=Y%DF=N%T=FA-104%TG=FF%S=Z%A=S+%F=AR%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=N)
T7(R=N)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=FA-104%TG=FF%CD=Z)

# Adtran 424RG
Fingerprint Adtran 424RG FTTH gateway
Class Adtran | embedded || specialized
CPE cpe:/h:adtran:424rg
SEQ(SP=FF-109%GCD=1-6%ISR=FF-109%TI=Z%CI=Z%II=I%TS=A|C)
OPS(O1=M7A8ST11NW5%O2=M7A8ST11NW5%O3=M7A8NNT11NW5%O4=M7A8ST11NW5%O5=M7A8ST11NW5%O6=M7A8ST11)
WIN(W1=3544%W2=3544%W3=3544%W4=3544%W5=3544%W6=3544)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=3598%O=M7A8NNSNW5%CC=Y%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# Adtran MX2800 M13 Mux (ds1's in ds3), Code Version = 3.42A, Boot Version = 2.10A
Fingerprint Adtran MX2800 multiplexer
Class Adtran | embedded || specialized
SEQ(SP=2D-9F%GCD=FA|1F4|2EE|3E8|4E2%ISR=8A-B4%TI=I%II=I%SS=S%TS=U)
OPS(O1=M218%O2=M218%O3=M218%O4=M218%O5=M218%O6=M218)
WIN(W1=1000%W2=1000%W3=1000%W4=1000%W5=1000%W6=1000)
ECN(R=Y%DF=N%T=FA-104%TG=FF%W=1000%O=M218%CC=N%Q=)
T1(R=Y%DF=N%T=FA-104%TG=FF%S=O%A=O|S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=FA-104%TG=FF%W=1000%S=O%A=O|S+%F=AS%O=M218%RD=0%Q=)
T4(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=FA-104%TG=FF%CD=S)

# Advanced Illumination DCS-100E industrial lighting controller.
Fingerprint Advanced Illumination DCS-100E lighting controller
Class Advanced Illumination | embedded || specialized
CPE cpe:/h:advanced_illumination:dcs-100e
SEQ(SP=0-5%GCD=6E|DC|14A|1B8|226%ISR=4C-56%TI=I|RD%CI=I%II=RI%SS=O%TS=U)
OPS(O1=M5B4%O2=M5B4%O3=M5B4%O4=M5B4%O5=M5B4%O6=M5B4)
WIN(W1=1000%W2=1000%W3=1000%W4=1000%W5=1000%W6=1000)
ECN(R=Y%DF=N%T=FA-104%TG=FF%W=1000%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=FA-104%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=FA-104%TG=FF%W=1000%S=O%A=S+%F=AS%O=M5B4%RD=0%Q=)
T4(R=Y%DF=N%T=FA-104%TG=FF%W=1000%S=A%A=S%F=AR%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=1000%S=A%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=1000%S=A%A=S%F=AR%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FA-104%TG=FF%W=1000%S=A%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# Platform: HiveAP320_n, HiveOS 3.4r1 release
Fingerprint Aerohive HiveOS 3.4
Class Aerohive | HiveOS | 3.X | WAP
CPE cpe:/o:aerohive:hiveos:3.4 auto
SEQ(SP=C7-D1%GCD=1-6%ISR=CB-D5%TI=I%CI=Z%II=I%SS=S%TS=A)
OPS(O1=M5B4ST11NW2%O2=M5B4ST11NW2%O3=M5B4NNT11NW2%O4=M5B4ST11NW2%O5=M5B4ST11NW2%O6=M5B4ST11)
WIN(W1=16A0%W2=16A0%W3=16A0%W4=16A0%W5=16A0%W6=16A0)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=16D0%O=M5B4NNSNW2%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=3B-45%TG=40%W=16A0%S=O%A=S+%F=AS%O=M5B4ST11NW2%RD=0%Q=)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# HiveOS 5.1r5
Fingerprint Aerohive HiveOS 5.1
Class Aerohive | HiveOS | 5.X | WAP
CPE cpe:/o:aerohive:hiveos:5.1 auto
SEQ(SP=C3-CD%GCD=1-6%ISR=C5-DA%TI=I%CI=Z%II=I%SS=S%TS=A)
OPS(O1=M5B4ST11NW2%O2=M5B4ST11NW2%O3=M5B4NNT11NW2%O4=M5B4ST11NW2%O5=M5B4ST11NW2%O6=M5B4ST11)
WIN(W1=16A0%W2=16A0%W3=16A0%W4=16A0%W5=16A0%W6=16A0)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=16D0%O=M5B4NNSNW2%CC=Y%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=3B-45%TG=40%W=16A0%S=O%A=S+%F=AS%O=M5B4ST11NW2%RD=0%Q=)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# BR200-WP HiveOS 6.1r1 release build1247
Fingerprint Aerohive HiveOS 6.1
Class Aerohive | HiveOS | 6.X | WAP
CPE cpe:/o:aerohive:hiveos:6.1 auto
SEQ(SP=BD-C7%GCD=1-6%ISR=C5-CF%TI=I%CI=Z%II=I%SS=S%TS=A)
OPS(O1=M5B4ST11NW4%O2=M5B4ST11NW4%O3=M5B4NNT11NW4%O4=M5B4ST11NW4%O5=M5B4ST11NW4%O6=M5B4ST11)
WIN(W1=16A0%W2=16A0%W3=16A0%W4=16A0%W5=16A0%W6=16A0)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=16D0%O=M5B4NNSNW4%CC=Y%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# HiveOS 6.8r1 Jakarta build-130440
Fingerprint Aerohive HiveOS 6.8
Class Aerohive | HiveOS | 6.X | WAP
CPE cpe:/o:aerohive:hiveos:6.8 auto
SEQ(SP=C5-CF%GCD=1-6%ISR=C3-CD%TI=I%II=I%SS=S%TS=A)
OPS(O1=M5B4ST11NW4%O2=M5B4ST11NW4%O3=M5B4NNT11NW4%O4=M5B4ST11NW4%O5=M5B4ST11NW4%O6=M5B4ST11)
WIN(W1=16A0%W2=16A0%W3=16A0%W4=16A0%W5=16A0%W6=16A0)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=16D0%O=M5B4NNSNW4%CC=Y%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=N)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# 7.1r1
Fingerprint Aerohive HiveOS 7.1
Class Aerohive | HiveOS | 7.X | WAP
CPE cpe:/o:aerohive:hiveos:7.1 auto
SEQ(SP=C4-CE%GCD=1-6%ISR=C6-D0%TI=I%CI=Z%II=I%SS=S%TS=A)
OPS(O1=M5B4ST11NW5%O2=M5B4ST11NW5%O3=M5B4NNT11NW5%O4=M5B4ST11NW5%O5=M5B4ST11NW5%O6=M5B4ST11)
WIN(W1=16A0%W2=16A0%W3=16A0%W4=16A0%W5=16A0%W6=16A0)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=16D0%O=M5B4NNSNW5%CC=Y%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=3B-45%TG=40%W=16A0%S=O%A=S+%F=AS%O=M5B4ST11NW5%RD=0%Q=)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# router adsl Aetra Starvoice 1042
Fingerprint Aethra Starvoice 1042 ADSL router
Class Aethra | embedded || broadband router
CPE cpe:/h:aethra:starvoice_1042 auto
SEQ(SP=EA-F4%GCD=1-6%ISR=E4-EE%TI=I%CI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4%O2=M578%O3=M200%O4=M5B4%O5=M5B4%O6=M5B4)
WIN(W1=2000%W2=2000%W3=2000%W4=2000%W5=2000%W6=2000)
ECN(R=Y%DF=N%T=72-7C%TG=80%W=2000%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=72-7C%TG=80%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=72-7C%TG=80%W=2000%S=O%A=S+%F=AS%O=M109%RD=0%Q=)
T4(R=Y%DF=N%T=72-7C%TG=80%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=72-7C%TG=80%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=72-7C%TG=80%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=72-7C%TG=80%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=72-7C%TG=80%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=8299%RUD=G)
IE(DFI=N%T=72-7C%TG=80%CD=Z)

# Aethra Vega X3
Fingerprint Aethra Vega X3 teleconference system
Class Aethra | embedded || media device
CPE cpe:/h:aethra:vega_x3
SEQ(SP=0-5%GCD=3D090|7A120|B71B0|F4240|1312D0%ISR=A5-AF%TI=I%CI=I|RD%II=I%SS=S%TS=U)
OPS(O1=M5B4%O2=M5B4%O3=M5B4%O4=M5B4%O5=M5B4%O6=M5B4)
WIN(W1=16D0%W2=16D0%W3=16D0%W4=16D0%W5=16D0%W6=16D0)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=16D0%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
T3(R=N)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=S%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=S%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=4801%RID=4210%RIPCK=I%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=Z)

# AGFA DryStar 5500 Printer
Fingerprint Agfa DryStar 5500 printer
Class Agfa | embedded || printer
CPE cpe:/h:agfa:drystar_5500 auto
SEQ(SP=0-15%GCD=3200|6400|9600|C800|FA00%ISR=8B-95%TI=I%CI=I%II=I%SS=S%TS=U)
OPS(O1=M218%O2=M218%O3=M218%O4=M218%O5=M218%O6=M109)
WIN(W1=2238%W2=2238%W3=2238%W4=2238%W5=2238%W6=2238)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=2238%O=M218%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=3B-45%TG=40%W=2238%S=O%A=S+%F=AS%O=M218%RD=0%Q=)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=FA-104%TG=FF%CD=Z)

# This is an Airaya brand microwave radio (AI108-4958-O) which has an http and a telnet interface. https://secure.airaya.com/proddetail.asp?prod=AI108-4958-O-300
Fingerprint Airaya AI108-4958-O-300 wireless Ethernet bridge
Class Airaya | embedded || bridge
SEQ(SP=13-1D%GCD=FA00|1F400|2EE00|3E800|4E200%ISR=98-A2%TI=I%II=I%SS=S%TS=1)
OPS(O1=M5B4NW0NNT11%O2=M5B4NW0NNT11%O3=M5B4NW0NNT11%O4=M5B4NW0NNT11%O5=M5B4NW0NNT11%O6=M5B4NNT11)
WIN(W1=2000%W2=2000%W3=2000%W4=2000%W5=2000%W6=2000)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=2000%O=M5B4NW0%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=3B-45%TG=40%W=2000%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=Z%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# This is an Airlink 101 1 port USB 2.0 Multi-functional Printer Server, Model APS MFP210 (www.airlink101.com).
Fingerprint Airlink101 APS MFP210 multi-functional print server
Class Airlink101 | embedded || print server
SEQ(SP=C-16%GCD=3000|6000|9000|C000|F000%ISR=AB-B5%TI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4%O2=M5B4%O3=M5B4%O4=M5B4%O5=M5B4%O6=M5B4)
WIN(W1=5B4%W2=5B4%W3=5B4%W4=5B4%W5=5B4%W6=5B4)
ECN(R=Y%DF=N%T=1B-25%TG=20%W=5B4%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=1B-25%TG=20%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=1B-25%TG=20%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=1B-25%TG=20%W=5B4%S=O%A=O%F=AS%O=M5B4%RD=0%Q=)
T4(R=Y%DF=N%T=1B-25%TG=20%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=1B-25%TG=20%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=1B-25%TG=20%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=1B-25%TG=20%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=1B-25%TG=20%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=1B-25%TG=20%CD=S)

# D-Link DI-604 Ethernet Broadband Router, Firmware Version: V3.15b05
# D-Link DI-524 Airplus G Wireless Router Firmware Version: V2.03, Fri, Dec 09 2005
# SMC 7004 VBR EU (european edition)
# DI-604 Ethernet Broadband Router, Firmware Version: V3.10
# DI-524, Firmware Version: V2.05
# DI 524 H/W revision B4: Current Firmware Version: V2.06
# DI-604 Firmware Version : V3.14, Thu, Dec 15 2005
# ZyXEL Prestige 320W, P-320W 802.11g
# Airlive WT-2000R
Fingerprint AirLive WT-2000R, D-Link DI-524 or DI-604, SMC SMC7004VBR, or ZyXEL Prestige 320W broadband router
Class AirLive | embedded || WAP
CPE cpe:/h:airlive:wt-2000r
Class D-Link | embedded || WAP
CPE cpe:/h:dlink:di-524
CPE cpe:/h:dlink:di-604
Class SMC | embedded || broadband router
CPE cpe:/h:smc:smc7004vbr
Class ZyXEL | embedded || broadband router
CPE cpe:/h:zyxel:prestige_320w auto
SEQ(SP=0-5D%GCD=32|64|96|C8|FA%ISR=4B-6F%TI=BI%CI=BI%II=BI%SS=S%TS=U)
OPS(O1=M5B4%O2=M5B4%O3=M5B4%O4=M5B4%O5=M5B4%O6=M5B4)
WIN(W1=16D0%W2=16D0%W3=16D0%W4=16D0%W5=16D0%W6=16D0)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=16D0%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# AirMagnet SmartEdge Sensor, SW Version: 8.0.0-11510
# INSTAR CAM IN-3010
# FOSCAM FI8904/FI8904W   IP camera model
# Foscam F18918W Device Firmware Version        11.22.2.36
# Foscam FI8910W
Fingerprint AirMagnet SmartEdge wireless sensor; or Foscam FI8904W, FI8910W, or FI8918W, or Instar IN-3010 surveillance camera (Linux 2.4)
Class AirMagnet | embedded || specialized
CPE cpe:/h:airmagnet:smartedge
Class Foscam | embedded || webcam
CPE cpe:/h:foscam:fi8904w
CPE cpe:/h:foscam:f18910w
CPE cpe:/h:foscam:f18918w
Class Instar | embedded || webcam
CPE cpe:/h:instar:in-3010
Class Linux | Linux | 2.4.X | specialized
CPE cpe:/o:linux:linux_kernel:2.4 auto
SEQ(SP=BB-D5%GCD=1-6%ISR=C1-D3%TI=Z%CI=Z%II=I%TS=7)
OPS(O1=M5B4ST11NW0%O2=M5B4ST11NW0%O3=M5B4NNT11NW0%O4=M5B4ST11NW0%O5=M5B4ST11NW0%O6=M5B4ST11)
WIN(W1=5A8%W2=5A8%W3=5A8%W4=5A8%W5=5A8%W6=5A8)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=5B4%O=M5B4NNSNW0%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=5A8%S=O%A=S+%F=AS%O=M5B4ST11NW0%RD=0%Q=)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# AirSpan ProST WiMAX CPE (Outdoor Version)
Fingerprint AirSpan ProST WiMAX access point
Class AirSpan | embedded || WAP
SEQ(II=I)
OPS(O1=M5B4NW0NNT11%O2=M5B4NW0NNT11%O3=M5B4NW0NNT11%O4=M5B4NW0NNT11%O5=M5B4NW0NNT11%O6=M5B4NNT11)
WIN(W1=2000%W2=2000%W3=2000%W4=2000%W5=2000%W6=2000)
ECN(R=Y%DF=Y%T=3A-44%TG=40%W=2000%O=M5B4NW0%CC=N%Q=)
T1(R=Y%DF=Y%T=3A-44%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=Y%DF=N%T=3A-44%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=N)
T7(R=N)
U1(DF=N%T=3A-44%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3A-44%TG=40%CD=S)

# Linux version 2.6.21.7-hrt1-WR2.0bl_standard on PowerPC (MPC83XX), Airvana HubBub C1-600-RT
Fingerprint Airvana C1-600-RT signal booster (Linux 2.6.21)
Class Airvana | embedded || specialized
CPE cpe:/h:airvana:c1-600-rt
Class Linux | Linux | 2.6.X | specialized
CPE cpe:/o:linux:linux_kernel:2.6.21 auto
SEQ(SP=0-5%GCD=FA01|1F402|2EE03|3E804|4E205%ISR=95-9F%TI=I%CI=I%II=I%SS=S%TS=U)
OPS(O1=NNM460SNW0%O2=NNM460SNW0%O3=M460NW0%O4=NNM460SNW0%O5=NNM460SNW0%O6=NNM460S)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=NNM460SNW0%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S+%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S+%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=Z%A=S+%F=R%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=138%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=Z)

# AKCP sensorProbe2, www.AKCP.com. Firmware SP2388, dated 090608
Fingerprint AKCP sensorProbe2 remote sensor device
Class AKCP | embedded || specialized
SEQ(SP=0-5%GCD=1388|2710|3A98|4E20|61A8%ISR=78-82%TI=I%II=I%SS=S%TS=U)
OPS(O1=M3F4%O2=M3F4%O3=M3F4%O4=M3F4%O5=M3F4%O6=M3F4)
WIN(W1=2000%W2=2000%W3=2000%W4=2000%W5=2000%W6=2000)
ECN(R=Y%DF=N%T=7B-85%TG=80%W=2000%O=M3F4%CC=N%Q=)
T1(R=Y%DF=N%T=7B-85%TG=80%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=7B-85%TG=80%W=2000%S=A%A=S+%F=AS%O=M3F4%RD=0%Q=)
T4(R=N)
T5(R=Y%DF=N%T=7B-85%TG=80%W=2000%S=A%A=S%F=AR%O=M3F4%RD=0%Q=)
T6(R=Y%DF=N%T=7B-85%TG=80%W=2000%S=A%A=S%F=AR%O=M3F4%RD=0%Q=)
T7(R=Y%DF=N%T=7B-85%TG=80%W=2000%S=A%A=S+%F=AR%O=M3F4%RD=0%Q=)
U1(R=N)
IE(DFI=S%T=7B-85%TG=80%CD=Z)

# Alaxala AX2430S-24T, OS-L2 Ver. 11.4.D (Looks like NetBSD --ed.)
Fingerprint Alaxala AX2400S-series switch
Class Alaxala | embedded || switch
SEQ(SP=D1-DB%GCD=1-6%ISR=D8-E2%TI=I%CI=I%TS=0)
OPS(O1=M5B4NW0NNT01%O2=M5B4NW0NNT01%O3=M5B4NW0NNT01%O4=M5B4NW0NNT01%O5=M5B4NW0NNT01%O6=M5B4NNT01)
WIN(W1=8000%W2=8000%W3=8000%W4=8000%W5=8000%W6=8000)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=8000%O=M5B4NW0%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=8000%S=O%A=S+%F=AS%O=M5B4NW0NNT01%RD=0%Q=)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# Alcatel Speedtouch 510 ADSL router
Fingerprint Alcatel SpeedTouch 510 DSL modem
Class Alcatel | embedded || broadband router
CPE cpe:/h:alcatel:speedtouch_510 auto
SEQ(SP=C-16%GCD=FA00|1F400|2EE00|3E800|4E200%ISR=97-A1%TI=I%II=I%SS=S%TS=1)
OPS(O1=M200NW0NNT11%O2=M200NW0NNT11%O3=M200NW0NNT11%O4=M200NW0NNT11%O5=M200NW0NNT11%O6=M200NNT11)
WIN(W1=1000%W2=1000%W3=1000%W4=1000%W5=1000%W6=1000)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=1000%O=M200NW0%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=3B-45%TG=40%W=1000%S=O%A=O%F=A%O=NNT11%RD=0%Q=)
T4(R=Y%DF=N%T=3B-45%TG=40%W=1000%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=391F%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# Alcatel SpeedTouch Pro ADSL Modem (Firmware: Khdsaa3.270  (1003194))
Fingerprint Alcatel SpeedTouch Pro ADSL Modem
Class Alcatel | embedded || broadband router
SEQ(SP=B-15%GCD=FA00|1F400|2EE00|3E800|4E200%ISR=96-A0%TI=I%II=I%SS=S%TS=1)
OPS(O1=M200NW0NNT11%O2=M200NW0NNT11%O3=M200NW0NNT11%O4=M200NW0NNT11%O5=M200NW0NNT11%O6=M200NNT11)
WIN(W1=1000%W2=1000%W3=1000%W4=1000%W5=1000%W6=1000)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=1000%O=M200NW0%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=3B-45%TG=40%W=1000%S=O%A=O%F=A%O=NNT11%RD=0%Q=)
T4(R=Y%DF=N%T=3B-45%TG=40%W=1000%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=Z%RUCK=G%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# Alcatel PBX 4400 running (Chorus MiX V.3.2 r4.1.5 COMP-386)
Fingerprint Alcatel 4400 PBX (Chorus MiX V.3.2 r4.1.5 COMP-386)
Class Alcatel | embedded || PBX
SEQ(SP=94-9E%GCD=1-6%ISR=95-9F%TI=I|RD%II=I%SS=S%TS=U)
OPS(O1=|M5B4%O2=|M5B4%O3=|M5B4%O4=|M5B4%O5=|M5B4%O6=|M5B4)
WIN(W1=111C%W2=1068%W3=1180%W4=1000%W5=10C0%W6=1090)
ECN(R=Y%DF=Y%T=3C-46%TG=40%W=111C%O=|M5B4%CC=N%Q=)
T1(R=Y%DF=Y%T=3C-46%TG=40%S=O%A=O|S+%F=A|AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%T=3C-46%TG=40%W=1090%S=O%A=O|S+%F=A|AS%O=|M5B4%RD=0%Q=)
T4(R=Y%DF=N%T=3C-46%TG=40%W=1000%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3C-46%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3C-46%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3C-46%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FB-105%TG=FF%IPL=38%UN=0%RIPL=G%RID=4210%RIPCK=I%RUCK=0%RUD=G)
IE(DFI=S%T=FB-105%TG=FF%CD=S)

# VxWorks --Ed.
# Enterasys Vertical Horizon VH-2402S2
# Alcatel OmniStack 6024 switch
# Dell Laser MFP 1815dn
# Samsung SCX-6x22 Series printer
Fingerprint Alcatel OmniStack 6024 or Enterasys Vertical Horizon VH-2402S2 switch, or Dell 1815dn or Samsung SCX-6x22 printer
Class Alcatel | embedded || switch
CPE cpe:/h:alcatel:omnistack_6024
Class Enterasys | embedded || switch
CPE cpe:/h:enterasys:vh-2402s2
Class Dell | embedded || printer
CPE cpe:/h:dell:1815dn
Class Samsung | embedded || printer
CPE cpe:/h:samsung:scx-6x22
SEQ(SP=C-16%GCD=FA00|1F400|2EE00|3E800|4E200%ISR=97-A1%TI=I%CI=I%II=I%SS=S%TS=U)
OPS(O1=%O2=%O3=%O4=%O5=%O6=)
WIN(W1=1000%W2=1000%W3=1000%W4=1000%W5=1000%W6=1000)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=1000%O=%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=3B-45%TG=40%W=1000%S=O%A=O%F=A%O=%RD=0%Q=)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=Z%RUCK=G%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# Alcatel OmniSwitch 7000 Software Version 5.4.1.591.R01 Service Release, June 20, 2011.
Fingerprint Alcatel OmniSwitch 7000
Class Alcatel | embedded || switch
SEQ(SP=102-10C%GCD=1-6%ISR=101-10B%TI=RD%CI=RD%II=RI%TS=U)
OPS(O1=M5B4%O2=M5B4NW0%O3=M5B4NW0%O4=M5B4%O5=M5B4%O6=M5B4)
WIN(W1=2000%W2=2000%W3=2000%W4=2000%W5=2000%W6=2000)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=2000%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=3B-45%TG=40%W=2000%S=O%A=O%F=A%O=%RD=0%Q=)
T4(R=Y%DF=N%T=3B-45%TG=40%W=2000%S=A%A=S%F=A%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=Z%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Alcatel 4035 IP Phone
Fingerprint Alcatel 4035 VoIP phone
Class Alcatel | embedded || VoIP phone
CPE cpe:/h:alcatel:4035 auto
SEQ(SP=F4-10A%GCD=1-6%ISR=FE-110%TI=I%CI=I%II=I%SS=S%TS=U)
OPS(O1=M5B0%O2=M5B0%O3=M5B0%O4=M5B0%O5=M5B0%O6=M5B0)
WIN(W1=3E80%W2=3E80%W3=3E80%W4=3E80%W5=3E80%W6=3E80)
ECN(R=Y%DF=N%T=19-23%TG=20%W=3E80%O=M5B0%CC=N%Q=)
T1(R=Y%DF=N%T=19-23%TG=20%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=19-23%TG=20%W=0%S=Z%A=S%F=ARF%O=%RD=0%Q=)
T3(R=Y%DF=N%T=19-23%TG=20%W=3E80%S=O%A=S+%F=AS%O=M5B0%RD=0%Q=)
T4(R=Y%DF=N%T=19-23%TG=20%W=0%S=A%A=Z%F=RF%O=%RD=0%Q=)
T5(R=Y%DF=N%T=19-23%TG=20%W=0%S=Z%A=S+%F=ARF%O=%RD=0%Q=)
T6(R=Y%DF=N%T=19-23%TG=20%W=0%S=A%A=Z%F=RF%O=%RD=0%Q=)
T7(R=Y%DF=N%T=19-23%TG=20%W=0%S=Z%A=S%F=ARF%O=%RD=0%Q=)
U1(DF=N%T=19-23%TG=20%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=19-23%TG=20%CD=S)

# Alcatel One Touch Y580D Mobile Broadband router, software version YX171UEBXX
Fingerprint Alcatel OneTouch Y580D Wireless hotspot
Class Alcatel | embedded || WAP
SEQ(SP=12-1C%GCD=1000|2000|3000|4000|5000%ISR=AB-B5%TI=I%CI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4W0L%O2=M578W0L%O3=M280W0L%O4=M5B4W0L%O5=M218W0L%O6=M109)
WIN(W1=4000%W2=4000%W3=4000%W4=4000%W5=4000%W6=4000)
ECN(R=Y%DF=N%T=FA-104%TG=FF%W=4000%O=M5B4W0L%CC=N%Q=)
T1(R=Y%DF=N%T=FA-104%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=Z%A=S%F=AR%O=T00LL%RD=0%Q=)
T3(R=Y%DF=N%T=FA-104%TG=FF%W=4000%S=O%A=S+%F=AS%O=M109W0L%RD=0%Q=)
T4(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=T00LL%RD=0%Q=)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=Z%A=S+%F=AR%O=T00LL%RD=0%Q=)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=T00LL%RD=0%Q=)
T7(R=N)
U1(DF=N%T=FA-104%TG=FF%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=FA-104%TG=FF%CD=S)

# Alcatel OmniPCX A4400, Chorus pbx1 MiX V.3.2 r4.1.5 COMP-386
Fingerprint Alcatel-Lucent OmniPCX Enterprise A4400 PBX
Class Alcatel-Lucent | embedded || PBX
SEQ(SP=92-9C%GCD=1-6%ISR=96-A6%TI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4%O2=M5B4%O3=M5B4%O4=M5B4%O5=M5B4%O6=M5B4)
WIN(W1=111C%W2=1068%W3=1180%W4=1000%W5=10C0%W6=1090)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=111C%O=M5B4%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=1090%S=O%A=S+%F=AS%O=M5B4%RD=0%Q=)
T4(R=Y%DF=N%T=3B-45%TG=40%W=1000%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=4210%RIPCK=I%RUCK=0%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# Alcatel-Lucent OmniPCX Enterprise
# OmniPCX Enterprise R8.0.1-g1.503-12-a-nl-c80s1 (Linux 2.4.17-ll-dhs3)
Fingerprint Alcatel-Lucent OmniPCX Enterprise PBX (Linux 2.4.17)
Class Alcatel-Lucent | embedded || PBX
CPE cpe:/h:alcatel-lucent:omnipcx
Class Linux | Linux | 2.4.X | PBX
CPE cpe:/o:linux:linux_kernel:2.4.17 auto
SEQ(SP=C5-D3%GCD=1-6%ISR=CC-D6%TI=Z%II=I%TS=U)
OPS(O1=M5B4NNSNW0%O2=M5B4NNSNW0%O3=M5B4NW0%O4=M5B4NNSNW0%O5=M5B4NNSNW0%O6=M5B4NNS)
WIN(W1=16D0%W2=16D0%W3=16D0%W4=16D0%W5=16D0%W6=16D0)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=16D0%O=M5B4NNSNW0%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=16D0%S=O%A=S+%F=AS%O=M5B4NNSNW0%RD=0%Q=)
T4(R=Y%DF=Y%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=FA-104%TG=FF%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=Y%T=FA-104%TG=FF%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=FA-104%TG=FF%CD=S)

# ALCATEL-LUCENT OmniPCX GD-3 GATEWAY DRIVER
Fingerprint Alcatel-Lucent OmniPCX GD3 PBX (Linux 2.6.23)
Class Alcatel-Lucent | embedded || PBX
CPE cpe:/h:alcatel-lucent:gd3
Class Linux | Linux | 2.6.X | general purpose
CPE cpe:/o:linux:linux_kernel:2.6.23 auto
SEQ(SP=BD-C7%GCD=1-6%ISR=C3-CD%TI=I%CI=Z%II=I%SS=S%TS=U)
OPS(O1=M5B4NNSNW4%O2=M5B4NNSNW4%O3=M5B4NW4%O4=M5B4NNSNW4%O5=M5B4NNSNW4%O6=M5B4NNS)
WIN(W1=16D0%W2=16D0%W3=16D0%W4=16D0%W5=16D0%W6=16D0)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=16D0%O=M5B4NNSNW4%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=3B-45%TG=40%W=16D0%S=O%A=S+%F=AS%O=M5B4NNSNW4%RD=0%Q=)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# Alcatel-Lucent OmniSwitch 6000 Software Version 6.3.1.1052.R01 Service Release, December 11, 2008.
Fingerprint Alcatel-Lucent OmniSwitch 6000 switch (firmware 6.3.1)
Class Alcatel-Lucent | embedded || switch
CPE cpe:/h:alcatel-lucent:omniswitch_6000 auto
SEQ(SP=102-10C%GCD=1-6%ISR=101-10B%TI=RD%CI=RD|RI%II=RI%TS=1)
OPS(O1=M5B4NNT11%O2=M5B4NW0NNT11%O3=M5B4NW0NNT11%O4=M5B4NNT11%O5=M5B4NNT11%O6=M5B4NNT11)
WIN(W1=2000%W2=2000%W3=2000%W4=2000%W5=2000%W6=2000)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=2000%O=M5B4%CC=N)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0)
T2(R=N)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=2000%S=O%A=S+%F=AS%O=M5B4NNT11%RD=0)
T4(R=Y%DF=N%T=3B-45%TG=40%W=2000%S=A%A=S%F=A%RD=0)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%RD=0)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%RD=0)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%RD=0)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=Z%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Alcatel-Lucent OmniSwitch 6000 Software Version 6.4.2.807.R01 GA, August 27, 2009.
# Quantum DXi8500 System Version = 2.1.1 Kernel Version = 2.6.18-164.15.1.qtm.4
Fingerprint Alcatel-Lucent OmniSwitch 6000 switch or Quantum DXi8500 NAS device
Class Alcatel-Lucent | embedded || switch
CPE cpe:/h:alcatel-lucent:omniswitch_6000 auto
Class Quantum | embedded || storage-misc
CPE cpe:/h:quantum:dxi8500
SEQ(SP=103-10D%GCD=1-6%ISR=101-10B%TI=RD%CI=RD|RI%II=RI%TS=1)
OPS(O1=M5B4NNT11%O2=M5B4NW0NNT11%O3=M5B4NW0NNT11%O4=M5B4NNT11%O5=M5B4NNT11%O6=M5B4NNT11)
WIN(W1=2000%W2=2000%W3=2000%W4=2000%W5=2000%W6=2000)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=2000%O=M5B4%CC=N)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0)
T2(R=N)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=2000%S=O%A=S+%F=AS%O=M5B4NNT11%RD=0)
T4(R=Y%DF=N%T=3B-45%TG=40%W=2000%S=A%A=Z%F=R%RD=0)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%RD=0)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%RD=0)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%RD=0)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=Z%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Omniswitch 6850
Fingerprint Alcatel-Lucent OmniSwitch 6850 switch
Class Alcatel-Lucent | embedded || switch
CPE cpe:/h:alcatel-lucent:omniswitch_6850 auto
SEQ(SP=100-10A%GCD=1-6%ISR=106-110%TI=RD%II=RI%TS=1)
OPS(O1=M5B4NW0NNT11%O2=M5B4NW0NNT11%O3=M5B4NW0NNT11%O4=M5B4NW0NNT11%O5=M5B4NW0NNT11%O6=M5B4NNT11)
WIN(W1=2000%W2=2000%W3=2000%W4=2000%W5=2000%W6=2000)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=2000%O=M5B4NW0%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=2000%S=O%A=S+%F=AS%O=M5B4NW0NNT11%RD=0%Q=)
T4(R=Y%DF=N%T=3B-45%TG=40%W=2000%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=Z%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Alcatel-Lucent Omniswitch 6850
Fingerprint Alcatel-Lucent OmniSwitch 6850 switch
Class Alcatel-Lucent | embedded || switch
CPE cpe:/h:alcatel-lucent:omniswitch_6850 auto
SEQ(SP=102-10C%GCD=1-6%ISR=FF-109%TI=RD%CI=RD|RI%II=RI%TS=1)
OPS(O1=M200NNT11%O2=M200NW0NNT11%O3=M200NW0NNT11%O4=M200NNT11%O5=M200NNT11%O6=M200NNT11)
WIN(W1=2000%W2=2000%W3=2000%W4=2000%W5=2000%W6=2000)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=2000%O=M200%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=2000%S=O%A=S+%F=AS%O=M200NNT11%RD=0%Q=)
T4(R=Y%DF=N%T=3B-45%TG=40%W=2000%S=A%A=S%F=A%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=Z%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Alcatel-Lucent 7750 Router running SR-OS 9.0.R9
# TiMOS-C-10.0.R7
Fingerprint Alcatel-Lucent 7750 Service Router (SR OS 9.0.R9)
Class Alcatel-Lucent | SR OS | 9.X | router
CPE cpe:/o:alcatel-lucent:sr_os:9.0.r9 auto
SEQ(SP=F7-10F%GCD=1-6%ISR=105-113%TI=I|RD%CI=I%II=RI%SS=O|S%TS=1)
OPS(O1=M400NW0NNT11%O2=M400NW0NNT11%O3=M400NW0NNT11%O4=M400NW0NNT11%O5=M400NW0NNT11%O6=M400NNT11)
WIN(W1=2000%W2=2000%W3=2000%W4=2000%W5=2000%W6=2000)
ECN(R=Y%DF=N%T=3A-44%TG=40%W=2000%O=M400NW0%CC=N%Q=)
T1(R=Y%DF=N%T=3A-44%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=3A-44%TG=40%W=2000%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3A-44%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3A-44%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3A-44%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3A-44%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=3A-44%TG=40%CD=S)

# Sirio by Alice, voip telephone used by Telecom Italia
Fingerprint Sirio by Alice VoIP phone
Class Alice | embedded || VoIP phone
SEQ(SP=C3-CD%GCD=1-6%ISR=CB-D5%TI=I%II=I%SS=S%TS=7)
OPS(O1=M5B4ST11NW1%O2=M5B4ST11NW1%O3=M5B4NNT11NW1%O4=M5B4ST11NW1%O5=M5B4ST11NW1%O6=M5B4ST11)
WIN(W1=16A0%W2=16A0%W3=16A0%W4=16A0%W5=16A0%W6=16A0)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=16D0%O=M5B4NNSNW1%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=3B-45%TG=40%W=16A0%S=O%A=S+%F=AS%O=M5B4ST11NW1%RD=0%Q=)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# Allen Bradley MicroLogix 1100 PLC
Fingerprint Allen Bradley MicroLogix 1100 PLC
Class Allen-Bradley | embedded || specialized
CPE cpe:/h:allen-bradley:micrologix_1100
SEQ(SP=82-8C%GCD=1-6%ISR=99-A3%TI=I%CI=I%II=I%SS=S%TS=U)
OPS(O1=M4000NNS%O2=M4000NNS%O3=M4000NNS%O4=M4000NNS%O5=M4000NNS%O6=M4000NNS)
WIN(W1=800%W2=800%W3=800%W4=800%W5=800%W6=800)
ECN(R=Y%DF=N%T=7B-85%TG=80%W=800%O=M4000NNS%CC=N%Q=)
T1(R=Y%DF=N%T=7B-85%TG=80%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=7B-85%TG=80%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T3(R=Y%DF=N%T=7B-85%TG=80%W=800%S=O%A=S+%F=AS%O=M4000NNS%RD=0%Q=)
T4(R=Y%DF=N%T=7B-85%TG=80%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=7B-85%TG=80%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T6(R=Y%DF=N%T=7B-85%TG=80%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=7B-85%TG=80%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
U1(R=N)
IE(DFI=N%T=7B-85%TG=80%CD=Z)

# Allen-Bradley 1756-ENBT card in ControlLogix 5000-series PLC
Fingerprint Allen-Bradley 1756 ControlLogix programmable automation controller
Class Allen-Bradley | embedded || specialized
SEQ(SP=15-1F%GCD=FA00|1F400|2EE00|3E800|4E200%ISR=9B-A5%TI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4NW0%O2=M5B4NW0%O3=M5B4NW0%O4=M5B4NW0%O5=M5B4NW0%O6=M5B4)
WIN(W1=1000%W2=1000%W3=1000%W4=1000%W5=1000%W6=1000)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=1000%O=M5B4NW0%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=3B-45%TG=40%W=1000%S=O%A=O%F=A%O=%RD=0%Q=)
T4(R=Y%DF=N%T=3B-45%TG=40%W=1000%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=Z%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Allen Bradley 1756-EN2T/C
Fingerprint Allen-Bradley 1756-EN2T/C programmable logic controller
Class Allen-Bradley | embedded || specialized
SEQ(SP=85-8F%GCD=1-6%ISR=94-9E%CI=I%II=I%TS=U)
OPS(O1=NNM5B4SNW0%O2=NNM5B4SNW0%O3=M5B4NW0%O4=NNM5B4SNW0%O5=NNM5B4SNW0%O6=NNM5B4S)
WIN(W1=2710%W2=2710%W3=2710%W4=2710%W5=2710%W6=2710)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=2710%O=NNM5B4SNW0%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=Z%A=Z%F=R%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=138%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=Z)

# Allen Bradley PLC-5
Fingerprint Allen-Bradley PLC-5 programmable logic controller
Class Allen-Bradley | embedded || specialized
SEQ(SP=B-15%GCD=FA00|1F400|2EE00|3E800|4E200%ISR=96-A0%TI=I%CI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4%O2=M5B4%O3=M5B4%O4=M5B4%O5=M5B4%O6=M5B4)
WIN(W1=B68%W2=AF0%W3=F00%W4=1000%W5=EA8%W6=F87)
ECN(R=Y%DF=N%T=37-41%TG=40%W=B68%O=M5B4%CC=N)
T1(R=Y%DF=N%T=37-41%TG=40%S=O%A=S+%F=AS%RD=0)
T2(R=N)
T3(R=Y%DF=N%T=37-41%TG=40%W=F87%S=O%A=O%F=A%RD=0)
T4(R=Y%DF=N%T=37-41%TG=40%W=1000%S=A%A=Z%F=R%RD=0)
T5(R=Y%DF=N%T=37-41%TG=40%W=0%S=Z%A=S+%F=AR%RD=0)
T6(R=Y%DF=N%T=37-41%TG=40%W=0%S=A%A=Z%F=R%RD=0)
T7(R=Y%DF=N%T=37-41%TG=40%W=0%S=Z%A=S%F=AR%RD=0)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=15C%RID=G%RIPCK=Z%RUCK=0%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# Belkin F5D7632-4 v1000UK, firmware AR.0.01.08UK (Oct 27 2004 01:03:29)
# Intracom Jetspeed 500i ADSL router
# Iskratel Proteus 932 VDSL Modem, Firmware version: 1.66.31
# Allied Data Technologies CopperJet 816-2P Router VoATM, Software Version: 6.02 SR4
# Iskratel Sinope568+
# Allied Data Copperjet 1616-2P
# Adva Optical FSP150CC-825
Fingerprint Broadband router (Allied Data CopperJet, Belkin F5D7632-4, Intracom Jetspeed 500i, or Iskratel Sinope568 or Proteus932); or Adva Optical FSP 150CC-825 router
Class Allied Data | embedded || broadband router
Class Adva Optical | embedded || router
CPE cpe:/h:advaoptical:fsp_150cc-825 auto
Class Belkin | embedded || WAP
Class Intracom | embedded || broadband router
Class Iskratel | embedded || broadband router
SEQ(SP=6F-87%GCD=1-6%ISR=71-8D%TI=I%TS=U)
OPS(O1=M5B4%O2=M578%O3=M280%O4=M218%O5=M218%O6=M109)
WIN(W1=4000%W2=4000%W3=4000%W4=4000%W5=4000%W6=4000)
ECN(R=Y%DF=Y%T=7B-85%TG=80%W=4000%O=M5B4%CC=N%Q=)
T1(R=Y%DF=Y%T=7B-85%TG=80%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=Y%T=7B-85%TG=80%W=4000%S=A%A=Z%F=R%O=%RD=0%Q=)
T3(R=N)
T4(R=Y%DF=Y%T=7B-85%TG=80%W=4000%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=7B-85%TG=80%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=7B-85%TG=80%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=7B-85%TG=80%W=0%S=Z%A=Z%F=R%O=%RD=0%Q=)
U1(DF=N%T=96-A0%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(R=N)

# AlliedWare OS version 54291-05
Fingerprint Allied Telesis AlliedWare version 54291-05
Class Allied Telesis | AlliedWare || router
CPE cpe:/o:alliedtelesis:alliedware:54291-05
SEQ(SP=F7-107%GCD=1-6%ISR=F9-115%TI=I%II=RI%SS=S%TS=U)
OPS(O1=M400%O2=M400%O3=M280%O4=M400%O5=M218%O6=M109)
WIN(W1=400%W2=400%W3=400%W4=400%W5=400%W6=400)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=400%O=M400%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=3B-45%TG=40%W=400%S=O%A=S+%F=AS%O=M109%RD=0%Q=)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=S%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=S%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(R=N)
IE(DFI=S%T=3B-45%TG=40%CD=Z)

# Linksys Switch SRW2048 (Firmware 1.2.1)
# Linksys SRW2024 24-port 10/100/1000 Gigabit Switch, Hardware Version: 00.03.11, Boot Version:  1.0.1, Firmware Version:  1.2.1
# Linksys SRW-224G4-EU
# Allied Telesyn Switch 8000S 48Ports
# Dell PowerConnect 3448
# Dell Blade chassis switch module: Powerconnect 5316M
# PowerConnect 5324, Software Version 2.0.0.40, Boot Version 1.0.2.02
# TP-LINK TL-SL3428 switch
# DELL POWECONNECT 2824 Switch
Fingerprint Allied Telesis AT-8000S; Dell PowerConnect 2824, 3448, 5316M, or 5324; Linksys SFE2000P, SRW2024, SRW2048, or SRW224G4; or TP-LINK TL-SL3428 switch
Class Allied Telesis | embedded || switch
CPE cpe:/h:alliedtelesis:at-8000s
Class Dell | embedded || switch
CPE cpe:/h:dell:powerconnect_2824
CPE cpe:/h:dell:powerconnect_3448
CPE cpe:/h:dell:powerconnect_5316m
CPE cpe:/h:dell:powerconnect_5324
Class Linksys | embedded || switch
CPE cpe:/h:linksys:sfe2000p
CPE cpe:/h:linksys:srw2024
CPE cpe:/h:linksys:srw2048
CPE cpe:/h:linksys:srw224g4
Class TP-LINK | embedded || switch
CPE cpe:/h:tp-link:tl-sl3428
SEQ(SP=F4-10A%GCD=1-6%ISR=FA-10E%TI=RD%CI=RD%II=RI%TS=U)
OPS(O1=%O2=%O3=%O4=%O5=%O6=)
WIN(W1=200%W2=200%W3=200%W4=200%W5=200%W6=200)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=200%O=%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=O|S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=3B-45%TG=40%W=200%S=O%A=S+%F=AS%O=%RD=0%Q=)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Allied Telesis AT-9000/24, Software Release AT-S84 1.1.1
Fingerprint Allied Telesis AT-9000 switch
Class Allied Telesis | embedded || switch
CPE cpe:/h:alliedtelesis:at-9000
SEQ(SP=0-5%GCD=0%ISR=0-5%TI=I%II=I%SS=S%TS=U)
OPS(O1=M218%O2=M218%O3=M218%O4=M218%O5=M218%O6=M218)
WIN(W1=2000%W2=2000%W3=2000%W4=2000%W5=2000%W6=2000)
ECN(R=Y%DF=N%T=FA-104%TG=FF%W=2000%O=M218%CC=N%Q=)
T1(R=Y%DF=N%T=FA-104%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=APR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=FA-104%TG=FF%W=0|2000%S=A|O%A=O|S+%F=AS|APR%O=|M218%RD=0%Q=)
T4(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=APR%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S+%F=APR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=APR%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=APR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0|4212|8433|AE74%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=FA-104%TG=FF%CD=S)

# Allied Telesis AT-9000/24 Gigabit Ethernet Switch, Runtime Image: Version 1.1.0.28
# AT-FS750/16 Fast Ethernet WebSmart Switch,  Version AT-S80 V2.3.1 [1.1.1.92], Boot Loader: Version 1.00.07
# Allied Telesis GS950 Runtime Image : Version AT-S79 V2.3.1 [1.1.1.92]
Fingerprint Allied Telesis AT-9000, AT-FS750, or GS950 switch
Class Allied Telesis | embedded || switch
SEQ(SP=0-5%GCD=0%ISR=0-5%TI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4%O2=M5B4%O3=M5B4%O4=M5B4%O5=M5B4%O6=M5B4)
WIN(W1=2000%W2=2000%W3=2000%W4=2000%W5=2000%W6=2000)
ECN(R=Y%DF=N%T=FA-104%TG=FF%W=2000%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=FA-104%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=APR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=FA-104%TG=FF%W=2000%S=O%A=S+%F=AS%O=M5B4%RD=0%Q=)
T4(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=APR%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S+%F=APR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=APR%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=APR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0-FFFF%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=FA-104%TG=FF%CD=S)

# Allied Telesyn CentreCOM AR300L v1 Access Router
Fingerprint Allied Telesyn AT-AR300L CentreCOM router
Class Allied Telesyn | AlliedWare || router
CPE cpe:/h:alliedtelesyn:at-ar300l
CPE cpe:/o:alliedtelesyn:alliedware auto
SEQ(SP=EF-113%GCD=1-6%ISR=F2-11C%TI=I%II=RI%SS=S%TS=U)
OPS(O1=M3EC%O2=M3EC%O3=M3EC%O4=M3EC%O5=M3EC%O6=M3EC)
WIN(W1=400%W2=400%W3=400%W4=400%W5=400%W6=400)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=400%O=M3EC%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=3B-45%TG=40%W=400%S=O%A=O|S+%F=A|AS%O=|M3EC%RD=0%Q=)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=S%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=S%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=Z)

# AT-AR410 router
Fingerprint Allied Telesyn AT-AR410 router
Class Allied Telesyn | AlliedWare || router
CPE cpe:/h:alliedtelesyn:at-ar410
CPE cpe:/o:alliedtelesyn:alliedware auto
SEQ(SP=F3-107%GCD=1-6%ISR=F8-114%TI=I|RD%II=RI%SS=O%TS=U)
OPS(O1=M109%O2=M109%O3=M109%O4=M109%O5=M109%O6=M109)
WIN(W1=400%W2=400%W3=400%W4=400%W5=400%W6=400)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=400%O=|M109%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=3B-45%TG=40%W=0|400%S=O|Z%A=O|S+%F=AR|AS%O=|M109%RD=0%Q=)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=S%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=S%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(R=N)
IE(DFI=S%T=3B-45%TG=40%CD=Z)

# Allied Telesyn AT-AR750s
Fingerprint Allied Telesyn AT-AR750s router
Class Allied Telesyn | AlliedWare || router
CPE cpe:/h:alliedtelesyn:at-ar750s
CPE cpe:/o:alliedtelesyn:alliedware auto
SEQ(SP=FA-106%GCD=1-6%ISR=101-10D%TI=I%II=RI%SS=O%TS=U)
OPS(O1=M400%O2=M400%O3=M280%O4=M400%O5=M218%O6=M109)
WIN(W1=400%W2=400%W3=400%W4=400%W5=400%W6=400)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=400%O=M400%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=3B-45%TG=40%W=400%S=O%A=S+%F=AS%O=M109%RD=0%Q=)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=S%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=S%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=Z)

# Allied Telesyn 8326GB switch
Fingerprint Allied Telesyn 8326GB switch
Class Allied Telesyn | embedded || switch
CPE cpe:/h:alliedtelesyn:at-8326gb
SEQ(SP=0-5%GCD=1-6%ISR=0-5%TI=I%TS=U)
OPS(O1=M5B4%O2=M5B4%O3=M5B4%O4=M5B4%O5=M5B4%O6=M5B4)
WIN(W1=400%W2=400%W3=400%W4=400%W5=400%W6=400)
ECN(R=Y%DF=N%T=FA-104%TG=FF%W=400%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=FA-104%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=APR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=FA-104%TG=FF%W=400%S=O%A=S+%F=AS%O=M5B4%RD=0%Q=)
T4(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A|O%A=O|S%F=APR%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A|O%A=O|S+%F=APR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A|O%A=O|S%F=APR%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A|O%A=O|S%F=APR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=106B|119F|1AFE|568B|FCB7%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=FA-104%TG=FF%CD=S)

# AlliedTelesyn AT-8326GB Switch. It has embedded "AT-S41 Switch OS" V 1.1.6 with boot loader 1.01L
# AT - 8326GB Fast Ethernet Switch
# Allied Telesyn AT-8326GB switch.
# AT-8350GB switch, management system version 1.1.8
Fingerprint Allied Telesyn AT-8326GB or AT8350GB switch.
Class Allied Telesyn | embedded || switch
SEQ(SP=0-5%GCD=0%ISR=0-5%TI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4%O2=M5B4%O3=M5B4%O4=M5B4%O5=M5B4%O6=M5B4)
WIN(W1=400%W2=400%W3=400%W4=400%W5=400%W6=400)
ECN(R=Y%DF=N%T=FA-104%TG=FF%W=400%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=FA-104%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=APR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=FA-104%TG=FF%W=400%S=O%A=S+%F=AS%O=M5B4%RD=0%Q=)
T4(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=APR%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S+%F=APR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=APR%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=APR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=FA-104%TG=FF%CD=S)

# Allied Telesyn AT-8350GB Management System Version 1.1.6
Fingerprint Allied Telesyn AT-8350GB switch
Class Allied Telesyn | embedded || switch
CPE cpe:/h:alliedtelesyn:at-8350gb
SEQ(SP=0-5%GCD=0%ISR=0-5%TI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4%O2=M5B4%O3=M5B4%O4=M5B4%O5=M5B4%O6=M5B4)
WIN(W1=400%W2=400%W3=400%W4=400%W5=400%W6=400)
ECN(R=Y%DF=N%T=FA-104%TG=FF%W=400%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=FA-104%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=FA-104%TG=FF%W=400%S=O%A=S+%F=AS%O=M5B4%RD=0%Q=)
T4(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=APR%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S+%F=APR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=APR%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=APR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=237|1001|57D1|5A0E|E806%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=FA-104%TG=FF%CD=S)

# Allied Telesyn AT-9006SX/SC Ethernet Switch, AT-S26 Ethernet Switch Software: Version 1.0.3 000517
Fingerprint Allied Telesyn AT-9006SX/SC switch
Class Allied Telesyn | embedded || switch
CPE cpe:/h:alliedtelesyn:at-9006
SEQ(SP=13-B5%GCD=FA|1F4|2EE|3E8|4E2%ISR=8A-B0%TI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4%O2=M5B4%O3=M5B4%O4=M5B4%O5=M5B4%O6=M5B4)
WIN(W1=400%W2=400%W3=400%W4=400%W5=400%W6=400)
ECN(R=Y%DF=N%T=FA-104%TG=FF%W=400%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=FA-104%TG=FF%S=O%A=O|S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=FA-104%TG=FF%W=400%S=O%A=S+%F=AS%O=M5B4%RD=0%Q=)
T4(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=FA-104%TG=FF%CD=S)

# Allied Telesyn switch AT-9448Ts/XP (ATS63), firmware v2.1.0
Fingerprint Allied Telesyn AT-9448Ts/XP switch
Class Allied Telesyn | embedded || switch
CPE cpe:/h:alliedtelesyn:at-9448ts
SEQ(SP=F3-109%GCD=1-6%ISR=FE-114%TI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4%O2=M5B4%O3=M5B4%O4=M5B4%O5=M5B4%O6=M5B4)
WIN(W1=3E80%W2=3E80%W3=3E80%W4=3E80%W5=3E80%W6=3E80)
ECN(R=Y%DF=N%T=7C-86%TG=80%W=3E80%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=7C-86%TG=80%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=7C-86%TG=80%W=0%S=A%A=Z%F=RF%O=%RD=0%Q=)
T5(R=Y%DF=N%T=7C-86%TG=80%W=0%S=Z%A=S+%F=ARF%O=%RD=0%Q=)
T6(R=Y%DF=N%T=7C-86%TG=80%W=0%S=A%A=Z%F=RF%O=%RD=0%Q=)
T7(R=N)
U1(DF=N%T=7C-86%TG=80%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=7C-86%TG=80%CD=S)

# Allied Telesyn AT-GS950/24 Gigabit Ethernet Switch with Firmware Version 1.0.0.26
Fingerprint Allied Telesyn AT-GS950 Gigabit Ethernet Switch
Class Allied Telesyn | embedded || switch
CPE cpe:/h:alliedtelesyn:at-gs950
SEQ(SP=0-5%GCD=1-6%ISR=0-5%TI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4%O2=M5B4%O3=M5B4%O4=M5B4%O5=M5B4%O6=M5B4)
WIN(W1=400%W2=400%W3=400%W4=400%W5=400%W6=400)
ECN(R=Y%DF=N%T=FA-104%TG=FF%W=400%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=FA-104%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=APR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=FA-104%TG=FF%W=400%S=O%A=S+%F=AS%O=M5B4%RD=0%Q=)
T4(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=APR%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S+%F=APR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=APR%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=APR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=2C5E%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=FA-104%TG=FF%CD=S)

# D-Link Model:DES-3226L
# Allied Telesyn AT-GS950/8 switch.
Fingerprint Allied Telesyn AT-GS950 or D-Link DES-3226L switch or D-Link DSL-2750U router
Class Allied Telesyn | embedded || switch
CPE cpe:/h:alliedtelesyn:at-gs950
Class D-Link | embedded || switch
CPE cpe:/h:dlink:des-3226l
CPE cpe:/h:dlink:dsl-2750u
SEQ(SP=0-DA%GCD=1-6|80|100|180|200|280|C581|18B02|25083|31604|3DB85%ISR=93-A5%TI=I|RD%CI=I%II=RI%SS=O%TS=1)
OPS(O1=M5B4NW0NNT11%O2=M5B4NW0NNT11%O3=M5B4NW0NNT11%O4=M5B4NW0NNT11%O5=M5B4NW0NNT11%O6=M5B4NNT11)
WIN(W1=2000%W2=2000%W3=2000%W4=2000%W5=2000%W6=2000)
ECN(R=Y%DF=N%T=19-23%TG=20%W=2000%O=M5B4NW0%CC=N%Q=)
T1(R=Y%DF=N%T=19-23%TG=20%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=19-23%TG=20%W=2000%S=O%A=S+%F=AS%O=M5B4NW0NNT11NNLLLLLLLLLL%RD=0%Q=)
T4(R=Y%DF=N%T=19-23%TG=20%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=19-23%TG=20%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=19-23%TG=20%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=19-23%TG=20%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=19-23%TG=20%IPL=38%UN=0|128%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=19-23%TG=20%CD=S)

# Allied Telesyn Rapier 24i
Fingerprint Allied Telesyn Rapier 24i switch
Class Allied Telesyn | embedded || switch
CPE cpe:/h:alliedtelesyn:rapier_24i
SEQ(SP=F9-103%GCD=1-6%ISR=FC-106%TI=I%CI=I%II=RI%SS=O%TS=U)
OPS(O1=M109%O2=M109%O3=M109%O4=M109%O5=M109%O6=M109)
WIN(W1=400%W2=400%W3=400%W4=400%W5=400%W6=400)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=400%O=M109%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=3B-45%TG=40%W=400%S=O%A=S+%F=AS%O=M109%RD=0%Q=)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=S%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=S%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=Z)

# Allied Telesyn Rapier G6 Switch Version 2.7.3
Fingerprint Allied Telesyn Rapier G6 switch
Class Allied Telesyn | embedded || switch
CPE cpe:/h:alliedtelesyn:rapier_g6
SEQ(SP=FC-108%GCD=1-6%ISR=FD-10B%TI=I%II=RI%SS=S%TS=U)
OPS(O1=M109%O2=M109%O3=M109%O4=M109%O5=M109%O6=M109)
WIN(W1=400%W2=400%W3=400%W4=400%W5=400%W6=400)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=400%O=M109%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=N)
T7(R=N)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=Z)

# Cisco MDS 9216i SAN Switch OS version 3.1(3)
# Webcam Allnet 2210
# cisco san-os 3.2(1a) Hardware: Cisco MDS 9124
# Nortel IP Phone 1535
# Linux 2.4.24 #1 Mon Jan 3 15:37:16 EET 2005 i686 unknown, Debian GNU/Linux 3.0
Fingerprint Allnet 2210 webcam, Cisco MDS 9124 or 9216i switch (SAN-OS 3.1 - 3.2), or Nortel IP Phone 1535
Class Allnet | embedded || webcam
CPE cpe:/h:allnet:2210 auto
Class Cisco | SAN-OS | 3.X | switch
CPE cpe:/h:cisco:mds_9124
CPE cpe:/h:cisco:mds_9216i
CPE cpe:/o:cisco:san_os:3 auto
Class Nortel | embedded || VoIP phone
CPE cpe:/h:nortel:ip_phone_1535
SEQ(SP=B4-CF%GCD=1-6%ISR=BE-D4%TI=I%CI=Z%II=I%SS=S%TS=7)
OPS(O1=M5B4ST11NW0%O2=M5B4ST11NW0%O3=M5B4NNT11NW0%O4=M5B4ST11NW0%O5=M5B4ST11NW0%O6=M5B4ST11)
WIN(W1=16A0%W2=16A0%W3=16A0%W4=16A0%W5=16A0%W6=16A0)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=16D0%O=M5B4NNSNW0%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=3B-45%TG=40%W=16A0%S=O%A=S+%F=AS%O=M5B4ST11NW0%RD=0%Q=)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# Allworx 9212 phone
Fingerprint Allworx 9212 VoIP phone
Class Allworx | embedded || VoIP phone
CPE cpe:/h:allworx:9212 auto
SEQ(SP=EC-FC%GCD=1-6%ISR=F4-100%TI=I%II=I%SS=S%TS=7)
OPS(O1=M5BCNW0NNT11%O2=M5BCNW0NNT11%O3=M5BCNW0NNT11%O4=M5BCNW0NNT11%O5=M5BCNW0NNT11%O6=M5BCNNT11)
WIN(W1=4380%W2=4110%W3=423C%W4=4074%W5=4180%W6=403D)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=4410%O=M5BCNW0%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=403D%S=O%A=S+%F=AS%O=M5BCNW0NNT11%RD=0%Q=)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Alvarion BreezeACCESS II  Association Unit Official Release Version - 4.5.17
Fingerprint Alvarion BreezeACCESS II broadband wireless access system 4.5.17
Class Alvarion | embedded || WAP
SEQ(SP=47-51%GCD=1-6%ISR=65-6F%TI=I%II=I%SS=O|S%TS=U)
OPS(O1=%O2=%O3=%O4=%O5=%O6=)
WIN(W1=5DC%W2=5DC%W3=5DC%W4=5DC%W5=5DC%W6=5DC)
ECN(R=N)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=O|S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=5DC%S=O%A=O|S+%F=AS%O=%RD=0%Q=)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=Y%T=3B-45%TG=40%IPL=38%UN=6B33|AD02|D0C3%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# Alvarion BreezeMax CPE Si E 2.3 WiMAX Access Point
Fingerprint Alvarion CPE-Si-E-2.3 BreezeMAX WiMAX WAP
Class Alvarion | embedded || WAP
SEQ(SP=96-A0%GCD=1-6%ISR=9B-A5%TI=I%TS=1)
OPS(O1=M5D8NW1NNT11%O2=M5D8NW1NNT11%O3=M5D8NW1NNT11%O4=M5D8NW1NNT11%O5=M5D8NW1NNT11%O6=M5D8NNT11)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M5D8NW1%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%S=O%A=O%F=AS%O=M5D8NW1NNT11%RD=0%Q=)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=Z%RUCK=0%RUD=G)
IE(R=N)

# Fire TV (3rd Gen)
Fingerprint Amazon Fire TV
Class Amazon | embedded || media device
SEQ(SP=F7-101%GCD=1-6%ISR=107-111%TI=Z%CI=I%II=I%TS=8)
OPS(O1=M5B4NNT11NW6%O2=M5B4NNT11NW6%O3=M5B4NNT11NW6%O4=M5B4NNT11NW6%O5=M5B4NNT11NW6%O6=M5B4NNT11)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M5B4NW6%CC=Y%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# Amazon Fire TV Cube (2nd Gen), Fire OS 7.2.4.2(PS7242/2896)
# Amazon Fire TV Stick
Fingerprint Amazon Fire TV
Class Amazon | embedded || media device
SEQ(SP=FF-109%GCD=1-6%ISR=107-111%TI=Z%CI=I%II=I%TS=8|A)
OPS(O1=M5B4ST11NW6%O2=M5B4ST11NW6%O3=M5B4NNT11NW6%O4=M5B4ST11NW6%O5=M5B4ST11NW6%O6=M5B4ST11)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M5B4NNSNW6%CC=Y%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# Fire TV
Fingerprint Amazon Fire TV
Class Amazon | embedded || media device
SEQ(SP=100-10A%GCD=1-6%ISR=108-112%TI=Z%CI=RD%II=I%TS=8)
OPS(O1=M5B4NNT11NW6%O2=M5B4NNT11NW6%O3=M5B4NNT11NW6%O4=M5B4NNT11NW6%O5=M5B4NNT11NW6%O6=M5B4NNT11)
WIN(W1=A9B0%W2=A9B0%W3=A9B0%W4=A9B0%W5=A9B0%W6=A9B0)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=A564%O=M5B4NW6%CC=Y%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# Amazon Kindle Paperwhite
# Amazon Fire TV Lite
# Amazon firestick
Fingerprint Amazon Fire TV or Kindle Paperwhite
Class Amazon | embedded || media device
SEQ(SP=EA-10B%GCD=1-6%ISR=102-10E%TI=Z%CI=I%II=I%TS=7)
OPS(O1=M5B4ST11NW6%O2=M5B4ST11NW6%O3=M5B4NNT11NW6%O4=M5B4ST11NW6%O5=M5B4ST11NW6%O6=M5B4ST11)
WIN(W1=A9B0%W2=A9B0%W3=A9B0%W4=A9B0%W5=A9B0%W6=A9B0)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=A564%O=M5B4NNSNW6%CC=Y%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# AMBIT DOCSIS 2.0 Cable Modem :: Boot Code Version : 2.1.5 / Software Version : 5.11.1130 / Hardware version 4.7
# Xerox Phaser 6350DT Network Printer
# OS: 5.78; Engine 3.1.0;
# Xerox Phaser 8560MFP, Operating System: 8.26, Networking: 33.16.05.04.2007
Fingerprint Ambit DOCSIS 2.0 cable modem, or Xerox Phaser 6250N, 6350DT, or 8560MFP printer
Class Ambit | embedded || broadband router
Class Xerox | embedded || printer
CPE cpe:/h:xerox:phaser_6250n
CPE cpe:/h:xerox:phaser_6350dt
CPE cpe:/h:xerox:phaser_8560mfp
SEQ(SP=E-52%GCD=FA00|1F400|2EE00|3E800|4E200%ISR=98-C4%TI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4NW0%O2=M5B4NW0%O3=M5B4NW0%O4=M5B4NW0%O5=M5B4NW0%O6=M5B4)
WIN(W1=2000%W2=2000%W3=2000%W4=2000%W5=2000%W6=2000)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=2000%O=M5B4NW0%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=3B-45%TG=40%W=2000%S=O%A=O%F=A%O=%RD=0%Q=)
T4(R=Y%DF=N%T=3B-45%TG=40%W=2000%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=I%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Tandberg video conferencing system, might be this OS: http://www.ecoscentric.com/ecos/examples.shtml
# Ubee (ambit) U10C018 Software Version : 2.105.3004 Hardware Version : 1.20
# Cisco EPC3925 EuroDocsis 3.0 2-PORT Voice Gateway
Fingerprint Ambit U10C018 or Cisco EPC3925 cable modem, or Tandberg video conferencing system
Class Ambit | embedded || broadband router
CPE cpe:/h:ambit:u10c018
Class Cisco | embedded || broadband router
CPE cpe:/h:cisco:epc3925
Class Tandberg | embedded || webcam
SEQ(SP=EB-107%GCD=1-6%ISR=E9-10D%TI=I%II=I%SS=S%TS=7)
OPS(O1=M5B4NW0NNT11%O2=M5B4NW0NNT11%O3=M5B4NW0NNT11%O4=M5B4NW0NNT11%O5=M5B4NW0NNT11%O6=M5B4NNT11)
WIN(W1=43E0%W2=4110%W3=423C%W4=4074%W5=4180%W6=403D)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=4470%O=M5B4NW0%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=N)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# AmigaOS 3.1 and EASYNET 0.172 (2009) TCP/IP stack
# AmigaOS GENESiS/AmiTCP TCP/IP stack v45.7
# AmigaOS 3.9 with AmiTCP/IP 4.5 stack
Fingerprint AmigaOS 3.1 - 3.9
Class Amiga | AmigaOS | 3.X | general purpose
CPE cpe:/o:amiga:amigaos:3 auto
SEQ(SP=B-15%GCD=FA00|1F400|2EE00|3E800|4E200%ISR=96-A0%TI=I%CI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4%O2=M5B4%O3=M5B4%O4=M5B4%O5=M5B4%O6=M5B4)
WIN(W1=1C84%W2=1B58%W3=1E00%W4=1C84|2000%W5=1F68%W6=1F0E)
ECN(R=Y%DF=N%T=37-41%TG=40%W=1C84%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=37-41%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=37-41%TG=40%W=1F0E%S=O%A=O%F=A%O=%RD=0%Q=)
T4(R=Y%DF=N%T=37-41%TG=40%W=2000%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=37-41%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=37-41%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=37-41%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=15C%RID=G%RIPCK=Z%RUCK=0%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# Amiga OS 3.9 BB2 68060 Mediator 1200
# BB2 is BoingBag 2, something like a service pack?
Fingerprint AmigaOS 3.9 BB2
Class Amiga | AmigaOS | 3.X | general purpose
CPE cpe:/o:amiga:amigaos:3.9 auto
SEQ(SP=C-16%GCD=FA00|1F400|2EE00|3E800|4E200%ISR=97-A1%TI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4%O2=M5B4%O3=M5B4%O4=M5B4%O5=M5B4%O6=M5B4)
WIN(W1=1C84%W2=1B58%W3=1E00%W4=2000%W5=1F68%W6=1F0E)
ECN(R=Y%DF=N%T=3B-3D%TG=40%W=1C84%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=3B-3D%TG=40%S=O%A=O|S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=Y%DF=N%T=3B-3D%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-3D%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-3D%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=15C%RID=G%RIPCK=Z%RUCK=0%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# AMX DXLINK-HDMI-RX, it runs a proprietary operating system. http://www.amx.com/products/AVB-RX-DXLINK-HDMI.asp
Fingerprint AMX AVB-RX-DXLINK-HDMI audio/video receiver
Class AMX | embedded || media device
SEQ(SP=FF-109%GCD=1-6%ISR=107-111%TI=I|RD%CI=I%II=I%SS=S%TS=U)
OPS(O1=%O2=%O3=%O4=%O5=%O6=)
WIN(W1=111C%W2=111C%W3=111C%W4=111C%W5=111C%W6=111C)
ECN(R=Y%DF=N%T=3A-44%TG=40%W=111C%O=%CC=N%Q=)
T1(R=Y%DF=N%T=3A-44%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=3A-44%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3A-44%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3A-44%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3A-44%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3A-44%TG=40%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3A-44%TG=40%CD=Z)

# Anue X/GEM controller version v3.3.1
Fingerprint Anue X/GEM ethernet network simulator
Class Anue | embedded || specialized
SEQ(SP=0-96%GCD=1-6%ISR=0-8D%TI=I%II=I%SS=O|S%TS=U)
OPS(O1=%O2=%O3=%O4=%O5=%O6=)
WIN(W1=0%W2=0%W3=0%W4=0%W5=0%W6=0)
ECN(R=Y%DF=N%T=3B-3D%TG=40%W=0%O=%CC=N%Q=)
T1(R=Y%DF=N%T=3B-3D%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=3B-3D%TG=40%W=0%S=Z%A=S%F=R%O=%RD=0%Q=)
T3(R=Y%DF=N%T=3B-3D%TG=40%W=0%S=O%A=S+%F=AS%O=%RD=0%Q=)
T4(R=Y%DF=N%T=3B-3D%TG=40%W=0%S=A%A=S%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-3D%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-3D%TG=40%W=0%S=A%A=S%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-3D%TG=40%W=0%S=Z%A=S%F=R%O=%RD=0%Q=)
U1(DF=N%T=3B-3D%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=3B-3D%TG=40%CD=S)

# Network Management Card AOS v.1.1.6 Rack PDU app v.1.0.2
Fingerprint APC power distribution unit (AOS 2.7.0)
Class APC | AOS | 1.X | power-device
CPE cpe:/o:apc:aos:1 auto
SEQ(SP=0-32%GCD=30D4|61A8|927C|C350|F424%ISR=9F-A9%TI=I%II=I%SS=S%TS=A)
OPS(O1=M564NW0NNT11%O2=M564NW0NNT11%O3=M280NW0NNT11%O4=M5B4NW0NNT11%O5=M218NW0NNT11%O6=M109NNT11)
WIN(W1=1008%W2=1008%W3=112C%W4=10F8%W5=1060%W6=10CD)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=102C%O=M564NW0%CC=N)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%RD=0)
T6(R=N)
T7(R=N)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=FA-104%TG=FF%CD=S)

# APC Metered Rack PDU AP7851 running aos_270
Fingerprint APC AP7851 power distribution unit (AOS 2.7.0)
Class APC | AOS | 2.X | power-device
CPE cpe:/o:apc:aos:2.7.0 auto
SEQ(SP=8-1D%GCD=1E848|3D090|5B8D8|7A120|98968%ISR=9C-A6%TI=I%II=I%SS=S%TS=A)
OPS(O1=M5B4NW0NNSNNT11%O2=M578NW0NNSNNT11%O3=M280NW0NNT11%O4=M5B4NW0NNSNNT11%O5=M218NW0NNSNNT11%O6=M109NNSNNT11)
WIN(W1=10F8%W2=1044%W3=112C%W4=10F8%W5=1060%W6=10CD)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=111C%O=M5B4NW0NNS%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=10CD%S=O%A=S+%F=AS%O=M109NW0NNSNNT11%RD=0%Q=)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=FA-104%TG=FF%CD=S)

# Model Number: AP7920, Type: APC OS, Version: 270, Hardware Revision: B2, Date: 10/12/2005
Fingerprint APC AP7920 rack PDU (AOS 2.7.0)
Class APC | AOS | 2.X | power-device
CPE cpe:/o:apc:aos:2.7.0 auto
SEQ(SP=C-16%GCD=1E848|3D090|5B8D8|7A120|98968%ISR=9F-A9%TI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4%O2=M578%O3=M280%O4=M5B4%O5=M218%O6=M109)
WIN(W1=111C%W2=1068%W3=1180%W4=111C%W5=10C0%W6=1090)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=111C%O=M5B4%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=N)
T7(R=N)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=FA-104%TG=FF%CD=S)

# Model Number:   AP9606, AOS v2.5.4, aos254.bin
# APC PN: AP9606, Web/SNMP Management Card AOS   v3.2.6.b, Smart-UPS & Matrix-UPS APP v3.2.6.a
Fingerprint APC AP9606 Network Management Card (AOS 2.5.4 - 3.2.6)
Class APC | AOS | 2.X | power-device
CPE cpe:/o:apc:aos:2 auto
SEQ(SP=E2-EC%GCD=1-6%ISR=DE-E8%TI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4%O2=M578%O3=M280%O4=M200%O5=M218%O6=M109)
WIN(W1=640%W2=640%W3=640%W4=640%W5=640%W6=640)
ECN(R=Y%DF=N%T=73-7D%TG=80%W=640%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=73-7D%TG=80%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=73-7D%TG=80|FF%W=640%S=O%A=S+%F=AS%O=M109%RD=0%Q=)
T4(R=Y%DF=N%T=73-7D%TG=80%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=73-7D%TG=80%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=73-7D%TG=80%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=73-7D%TG=80%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=73-7D%TG=80%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=AB52|D22B%RUD=G)
IE(DFI=N%T=73-7D%TG=80%CD=Z)

# American Power Conversion Network Management Card AOS v3.7.3, Model Number: AP7940
# American Power Conversion Network Management Card AOS v3.7.4, Model Number: AP7723
Fingerprint APC 7940 or 7723 Network Management Card (AOS 3.7.3 - 3.7.4)
Class APC | AOS | 3.X | power-device
CPE cpe:/o:apc:aos:3.7
SEQ(SP=E8-F4%GCD=1-6%ISR=E6-F6%TI=RI%II=RI%SS=S%TS=A)
OPS(O1=M5B4NW0NNSNNT11%O2=M578NW0NNSNNT11%O3=M280NW0NNT11%O4=M5B4NW0NNSNNT11%O5=M218NW0NNSNNT11%O6=|M109NNSNNT11)
WIN(W1=10F8%W2=1044%W3=112C%W4=10F8%W5=1060%W6=0|10CD)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=0|111C%O=|M5B4NW0NNS%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=FA-104%TG=FF%CD=S)

# APC Environmental Manager model APC9340 v3.5.6, with embedded Network Management Card AOS v3.5.7
Fingerprint APC 9340 Network Management Card (AOS 3.5.7)
Class APC | AOS | 3.X | power-device
CPE cpe:/o:apc:aos:3.5.7 auto
SEQ(SP=DE-E8%GCD=1-6%ISR=E6-F0%TI=RI%TS=A)
OPS(O1=M5B4NW0NNSNNT11%O2=M578NW0NNSNNT11%O3=M280NW0NNT11%O4=M5B4NW0NNSNNT11%O5=M218NW0NNSNNT11%O6=|M109NNSNNT11)
WIN(W1=10F8%W2=1044%W3=112C%W4=10F8%W5=1060%W6=0|10CD)
ECN(R=Y%DF=N%T=3C-46%TG=40%W=0|111C%O=|M5B4NW0NNS%CC=N%Q=)
T1(R=Y%DF=N%T=3C-46%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=3C-46%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3C-46%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3C-46%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3C-46%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=FA-104%TG=FF%CD=S)

# APC Power Transfer Switch v3.7.4
Fingerprint APC AOS 3.7.4
Class APC | AOS | 3.X | power-device
CPE cpe:/o:apc:aos:3.7.4 auto
SEQ(SP=E9-F3%GCD=1-6%ISR=E7-F1%TI=RD%CI=I%II=I%TS=A)
OPS(O1=M5B4NW0NNSNNT11%O2=M578NW0NNSNNT11%O3=M280NW0NNT11%O4=M5B4NW0NNSNNT11%O5=M218NW0NNSNNT11%O6=M109NNSNNT11)
WIN(W1=10F8%W2=1044%W3=112C%W4=10F8%W5=1060%W6=10CD)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=111C%O=M5B4NW0NNS%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=N)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=FA-104%TG=FF%CD=S)

# APC AP79xx metered rack power distribution unit (AOS 3.x)
# AOS v3.6.1
Fingerprint APC AP7900-series power distribution unit (AOS 3.x)
Class APC | AOS | 3.X | power-device
CPE cpe:/o:apc:aos:3.x auto
SEQ(SP=E9-FB%GCD=1-6%ISR=E6-F2%TI=RI%CI=RI%TS=A)
OPS(O1=M5B4NW0NNSNNT11%O2=M578NW0NNSNNT11%O3=M280NW0NNT11%O4=M5B4NW0NNSNNT11%O5=M218NW0NNSNNT11%O6=M109NNSNNT11)
WIN(W1=10F8%W2=1044%W3=112C%W4=10F8%W5=1060%W6=10CD)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=111C%O=M5B4NW0NNS%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=FA-104%TG=FF%CD=S)

# APC PDU - AP7930, Version: v3.3.4
Fingerprint APC AP7930 power distribution unit (AOS 3.3.4)
Class APC | AOS | 3.X | power-device
CPE cpe:/o:apc:aos:3.3.4 auto
SEQ(SP=73-B7%GCD=1-6%ISR=DE-E8%TI=I%II=I%SS=S%TS=A)
OPS(O1=M5B4NW0NNSNNT11%O2=M578NW0NNSNNT11%O3=M280NW0NNT11%O4=M5B4NW0NNSNNT11%O5=M218NW0NNSNNT11%O6=M109NNSNNT11)
WIN(W1=10F8%W2=1044%W3=112C%W4=10F8%W5=1060%W6=10CD)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=111C%O=M5B4NW0NNS%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=FA-104%TG=FF%CD=S)

# American Power Conversion Network Management Card AOS v3.3.1
# APC PN: AP9619, Network Management Card AOS v3.6.1, Smart-UPS & Matrix-UPS APP v3.5.8
# APC UPS Network Management Card, AOS v 3.3.4
# APC UPS Network Management Card, AOS v3.5.5
# Rack PDU AP7920 v3.5.8, AOS v3.5.9
Fingerprint APC AP9619 Network Management Card (AOS 3.3.1 - 3.6.1)
Class APC | AOS | 3.X | power-device
CPE cpe:/o:apc:aos:3 auto
SEQ(SP=DE-104%GCD=1-6%ISR=E3-FE%TI=I%II=I%SS=S%TS=A)
OPS(O1=M5B4NW0NNSNNT11%O2=M578NW0NNSNNT11%O3=M280NW0NNT11%O4=M5B4NW0NNSNNT11%O5=M218NW0NNSNNT11%O6=M109NNSNNT11)
WIN(W1=10F8%W2=1044%W3=112C%W4=10F8%W5=1060%W6=10CD)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=111C%O=M5B4NW0NNS%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=FA-104%TG=FF%CD=S)

# aos303.bin APC Masterswitch
Fingerprint APC MasterSwitch power distribution unit (AOS 3.0.3)
Class APC | AOS | 3.X | power-device
CPE cpe:/o:apc:aos:3.0.3 auto
SEQ(SP=CA-D4%GCD=1-6%ISR=D5-DF%TI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4%O2=M578%O3=M280%O4=M200%O5=M218%O6=M109)
WIN(W1=640%W2=640%W3=640%W4=640%W5=640%W6=640)
ECN(R=Y%DF=N%T=6B-75%TG=80%W=640%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=6B-75%TG=80%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=6B-75%TG=80%W=640%S=O%A=S+%F=AS%O=M109%RD=0%Q=)
T4(R=Y%DF=N%T=6B-75%TG=80%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=6B-75%TG=80%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=6B-75%TG=80%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=6B-75%TG=80%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=6B-75%TG=80%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=96A9%RUD=G)
IE(DFI=N%T=6B-75%TG=80%CD=Z)

# APC | AOS | 3.X | power-device
Fingerprint APC Network Management Card
Class APC | AOS | 3.X | power-device
CPE cpe:/o:apc:aos:3 auto
SEQ(SP=100-10A%GCD=1-6%ISR=F8-102%TI=RI%TS=A)
OPS(O1=M5B4NW0NNSNNT11%O2=M578NW0NNSNNT11%O3=M280NW0NNT11%O4=M5B4NW0NNSNNT11%O5=M218NW0NNSNNT11%O6=M109NNSNNT11)
WIN(W1=10F8%W2=1044%W3=112C%W4=10F8%W5=1060%W6=10CD)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=111C%O=M5B4NW0NNS%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=FA-104%TG=FF%CD=S)

# APC Network Management Card AOS v3.5.5
# APC aos v3.3.4, Date: 01/05/2007
# APC UPS device with a AP9619 network management card installed. The full AOS version number on this device is 3.5.5.
Fingerprint APC Network Management Card (AOS 3.3.4 - 3.5.5)
Class APC | AOS | 3.X | power-device
CPE cpe:/o:apc:aos:3 auto
SEQ(SP=E8-104%GCD=1-6%ISR=E9-FD%TI=I%CI=I%II=I%SS=S%TS=A)
OPS(O1=M5B4NW0NNSNNT11%O2=M578NW0NNSNNT11%O3=M280NW0NNT11%O4=M5B4NW0NNSNNT11%O5=M218NW0NNSNNT11%O6=M109NNSNNT11)
WIN(W1=10F8%W2=1044%W3=112C%W4=10F8%W5=1060%W6=10CD)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=111C%O=M5B4NW0NNS%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=FA-104%TG=FF%CD=S)

# Network Management Card AOS v3.5.7, Rack PDU APP v3.5.6
Fingerprint APC Network Management Card (AOS 3.5.7 - 3.5.8)
Class APC | AOS | 3.X | power-device
CPE cpe:/o:apc:aos:3 auto
SEQ(SP=5E-BA%GCD=1-6%ISR=DD-E7%TI=RI%TS=A)
OPS(O1=M5B4NW0NNSNNT11%O2=M578NW0NNSNNT11%O3=M280NW0NNT11%O4=M5B4NW0NNSNNT11%O5=M218NW0NNSNNT11%O6=M109NNSNNT11)
WIN(W1=10F8%W2=1044%W3=112C%W4=10F8%W5=1060%W6=10CD)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=111C%O=M5B4NW0NNS%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=FA-104%TG=FF%CD=S)

# APC Web/SNMP Management Card (MB:v3.8.6 PF:v3.3.4 PN:apc_hw02_aos_334.bin AF1:v3.3.1 AN1:apc_hw02_sumx_331.bin MN:AP9619 HR:A10 SN: X MD:01/31/2005)
Fingerprint APC Smart-UPS (AOS 3.3.4)
Class APC | AOS | 3.X | power-device
CPE cpe:/o:apc:aos:3.3.4 auto
SEQ(SP=7A-A8%GCD=1-6%ISR=DD-E7%TI=I%CI=I|RD%II=I%SS=S%TS=A)
OPS(O1=M4ECNW0NNSNNT11%O2=M4ECNW0NNSNNT11%O3=M280NW0NNT11%O4=M4ECNW0NNSNNT11%O5=M218NW0NNSNNT11%O6=M109NNSNNT11)
WIN(W1=1380%W2=1380%W3=112C%W4=10F8%W5=1060%W6=10CD)
ECN(R=Y%DF=Y%T=3A-44%TG=40%W=13B0%O=M4ECNW0NNS%CC=N%Q=)
T1(R=Y%DF=Y%T=3A-44%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=3A-44%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3A-44%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3A-44%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3A-44%TG=40%W=0%S=Z%A=O|S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=FA-104%TG=FF%CD=S)

# APC AOS 5.X
Fingerprint APC AOS 5
Class APC | AOS | 5.X | power-device
CPE cpe:/o:apc:aos:5 auto
SEQ(SP=E1-EB%GCD=1-6%ISR=DF-E9%TI=I%CI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4%O2=M578%O3=M280%O4=M200%O5=M218%O6=M109)
WIN(W1=640%W2=640%W3=640%W4=640%W5=640%W6=640)
ECN(R=Y%DF=N%T=6A-74%TG=80%W=640%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=6A-74%TG=80%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=6A-74%TG=80%W=640%S=O%A=S+%F=AS%O=M109%RD=0%Q=)
T4(R=Y%DF=N%T=6A-74%TG=80%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=6A-74%TG=80%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=6A-74%TG=80%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=6A-74%TG=80%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=6A-74%TG=80%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=82AE%RUD=G)
IE(DFI=N%T=6A-74%TG=80%CD=Z)

# APC UPS3000
Fingerprint APC Smart-UPS (AOS 5)
Class APC | AOS | 5.X | power-device
CPE cpe:/o:apc:aos:5 auto
SEQ(CI=I|RD%II=I)
OPS(O1=M550NNSNNT11%O2=M550NNSNNT11%O3=M280NNT11%O4=M58CNNSNNT11%O5=M218NNSNNT11%O6=M109NNSNNT11)
WIN(W1=1510%W2=1510%W3=112C%W4=10F8%W5=1060%W6=10CD)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=1540%O=M550NNS%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=FA-104%TG=FF%CD=S)

# APC AOS Version 5.1.1
# APC 5000
# Smart-UPS X 1000
Fingerprint APC Smart-UPS (AOS 5.1.1)
Class APC | AOS | 5.X | power-device
CPE cpe:/h:apc:smart-ups_rt_5000va
CPE cpe:/h:apc:smart-ups_x_1000va
CPE cpe:/o:apc:aos:5.1.1 auto
SEQ(R=N)
OPS(O1=M5B4NNSNNT11%O2=M578NNSNNT11%O3=M280NNT11%O4=M5B4NNSNNT11%O5=M218NNSNNT11%O6=M109NNSNNT11)
WIN(W1=10F8%W2=1044%W3=112C%W4=10F8%W5=1060%W6=10CD)
ECN(R=Y%DF=N|Y%T=3B-45%TG=40%W=111C%O=M5B4NNS%CC=N%Q=)
T1(R=Y%DF=N|Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=FA-104%TG=FF%CD=S)

# 6.5.6
Fingerprint APC Network Management Card (AOS 6.5.6)
Class APC | AOS | 6.X | power-device
CPE cpe:/o:apc:aos:6.5.6 auto
SEQ(SP=100-10A%GCD=1-6%ISR=107-111%TI=I%TS=A)
OPS(O1=M546NW0NNSNNT11%O2=M546NW0NNSNNT11%O3=M280NW0NNT11%O4=M54ENW0NNSNNT11%O5=M218NW0NNSNNT11%O6=M109NNSNNT11)
WIN(W1=14E8%W2=14E8%W3=112C%W4=10F8%W5=1060%W6=10CD)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=1518%O=M546NW0NNS%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=O%A=S+%F=AR%O=%RD=0%Q=)
T6(R=N)
T7(R=N)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(R=N)

# APC AP7921B PDU, 6.8.0
Fingerprint APC Network Management Card (AOS 6.8.0)
Class APC | AOS | 6.X | power-device
CPE cpe:/o:apc:aos:6.8.0 auto
SEQ(SP=101-10B%GCD=1-6%ISR=107-111%TI=I%CI=I%II=I|RI%SS=O%TS=A)
OPS(O1=M5B4NW0NNSNNT11%O2=M578NW0NNSNNT11%O3=M280NW0NNT11%O4=M5B4NW0NNSNNT11%O5=M218NW0NNSNNT11%O6=M109NNSNNT11)
WIN(W1=10F8%W2=1044%W3=112C%W4=10F8%W5=1060%W6=10CD)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=111C%O=M5B4NW0NNS%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=FA-104%TG=FF%CD=S)

# v7.0.4
Fingerprint APC Network Management Card (AOS 7.0.4)
Class APC | AOS | 7.X | power-device
CPE cpe:/o:apc:aos:7.0.4 auto
SEQ(SP=101-10B%GCD=1-6%ISR=105-10F%TI=I%CI=I%II=I%TS=A)
OPS(O1=M5B4NW0NNT11%O2=M578NW0NNSNNT11%O3=M280NW0NNT11%O4=M5B4NW0NNSNNT11%O5=M218NW0NNSNNT11%O6=M109NNSNNT11)
WIN(W1=10F8%W2=1044%W3=112C%W4=10F8%W5=1060%W6=10CD)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=111C%O=M5B4NW0NNS%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=FA-104%TG=FF%CD=S)

# AP9641, APC OS (AOS) v1.3.3.1
Fingerprint APC Network Management Card (AOS)
Class APC | AOS || power-device
CPE cpe:/o:apc:aos auto
SEQ(SP=FF-109%GCD=1-6%ISR=104-10E%TI=I%CI=I%II=I%TS=A)
OPS(O1=M5B4NW0NNT11%O2=M578NW0NNSNNT11%O3=M280NW0NNT11%O4=M5B4NW0NNSNNT11%O5=M218NW0NNSNNT11%O6=M109NNSNNT11)
WIN(W1=54D8%W2=56C0%W3=55DC%W4=54D8%W5=53EC%W6=5401)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=558C%O=M5B4NW0NNS%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=FA-104%TG=FF%CD=S)

# APC NetBotz 200 Rack Monitor (NBRK0200)
Fingerprint APC NetBotz 200 rack monitor
Class APC | embedded || power-device
SEQ(SP=5F-A9%GCD=1-6%ISR=DD-E7%CI=RD|RI%TS=A)
OPS(O1=M5B4NW0NNSNNT11%O2=M578NW0NNSNNT11%O3=M280NW0NNT11%O4=M5B4NW0NNSNNT11%O5=M218NW0NNSNNT11%O6=M109NNSNNT11)
WIN(W1=10F8%W2=1044%W3=112C%W4=10F8%W5=1060%W6=10CD)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=111C%O=M5B4NW0NNS%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=FA-104%TG=FF%CD=S)

# SmartUPS 2200
Fingerprint APC Network Management Card (AOS)
Class APC | embedded || power-device
SEQ(SP=C-16%GCD=1E848|3D090|5B8D8|7A120|98968%ISR=9F-A9%TI=I%II=I%SS=S%TS=A)
OPS(O1=M5B4NW0NNSNNT11%O2=M578NW0NNSNNT11%O3=M280NW0NNT11%O4=M5B4NW0NNSNNT11%O5=M218NW0NNSNNT11%O6=M109NNSNNT11)
WIN(W1=10F8%W2=1044%W3=112C%W4=10F8%W5=1060%W6=10CD)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=111C%O=M5B4NW0NNS%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=N)
T7(R=N)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=FA-104%TG=FF%CD=S)

# Schneider Electric (formerly APC) Network Management Card 3 in a UPS
Fingerprint APC Network Management Card 3
Class APC | embedded || power-device
SEQ(SP=FF-109%GCD=1-6%ISR=106-110%TI=I%CI=RD%TS=U)
OPS(O1=M5B4NW0NNS%O2=M578NW0NNS%O3=M280NW0%O4=M5B4NW0NNS%O5=M218NW0NNS%O6=M109NNS)
WIN(W1=558C%W2=5780%W3=5500%W4=558C%W5=53C0%W6=53D9)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=558C%O=M5B4NW0NNS%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=FA-104%TG=FF%W=80%S=Z%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=FA-104%TG=FF%W=100%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T4(R=Y%DF=N%T=FA-104%TG=FF%W=400%S=A%A=S%F=AR%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=O%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=8000%S=A%A=S%F=AR%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FA-104%TG=FF%W=FFFF%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(R=N)
IE(R=N)

# APC Silcon DP320E
Fingerprint APC Silicon DP320E UPS
Class APC | embedded || power-device
CPE cpe:/h:apc:silicon_dp320e
SEQ(SP=28-32%GCD=30D4|61A8|927C|C350|F424%ISR=9F-A9%TI=I%CI=I%II=I%SS=S%TS=A)
OPS(O1=M5B4NW0NNT11%O2=M578NW0NNT11%O3=M280NW0NNT11%O4=M5B4NW0NNT11%O5=M218NW0NNT11%O6=M109NNT11)
WIN(W1=10F8%W2=1044%W3=112C%W4=10F8%W5=1060%W6=10CD)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=111C%O=M5B4NW0%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=N)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=FA-104%TG=FF%CD=S)

# APC Smart-UPS 3000 RM, APC AOS ftpd  2.6.4  on APC AP9617 network management card
Fingerprint APC Smart-UPS 3000 RM UPS
Class APC | embedded || power-device
SEQ(CI=I%II=I)
OPS(O1=M5B4NW0NNSNNT11%O2=%O3=%O4=%O5=%O6=)
WIN(W1=10F8%W2=0%W3=0%W4=0%W5=0%W6=0)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=0%O=%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=O%F=AR%O=%RD=0%Q=)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=FA-104%TG=FF%CD=S)

# APC Smart-UPS RT 8000 RM XL 8kVA With Link3 network management card.
Fingerprint APC Smart-UPS RT 8000 RM XL UPS
Class APC | embedded || power-device
SEQ(SP=EE-F8%GCD=1-6%ISR=EE-F8%TI=I%CI=I%II=I%SS=S%TS=A)
OPS(O1=M5B4NW0NNSNNT11%O2=M578NW0NNSNNT11%O3=M280NW0NNT11%O4=M5B4NW0NNSNNT11%O5=M218NW0NNSNNT11%O6=M109NNSNNT11)
WIN(W1=10F8%W2=1044%W3=112C%W4=10F8%W5=1060%W6=10CD)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=111C%O=M5B4NW0NNS%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=N)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=FA-104%TG=FF%CD=S)

# APC Environmental Monitoring Unit, model AP9319
# APC Smart-UPS 1000 RM, Firmware 157.4.I, Network Management Card
# APC Environmental Monitoring Unit
Fingerprint APC AP9319 Environmental Monitoring Unit or Smart-UPS 1000 RM UPS
Class APC | embedded || specialized
Class APC | embedded || power-device
SEQ(SP=C-16%GCD=1E848|3D090|5B8D8|7A120|98968%ISR=9F-A9%TI=I%II=I%SS=S%TS=A)
OPS(O1=M5B4NW0NNSNNT11%O2=M578NW0NNSNNT11%O3=M280NW0NNT11%O4=|M5B4NW0NNSNNT11%O5=|M218NW0NNSNNT11%O6=|M109NNSNNT11)
WIN(W1=10F8%W2=1044%W3=112C%W4=0|10F8%W5=0|1060%W6=0|10CD)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=111C%O=M5B4NW0NNS%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=3B-45%TG=40%W=10CD%S=O%A=S+%F=AS%O=M109NW0NNSNNT11%RD=0%Q=)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=FA-104%TG=FF%CD=S)

# A/UX 3.0.2 SVR2 mc68030
# A/UX 3.1.1 SVR2 mc68040
# Apple's A/UX 3.0.1, PING okay, ftp/telnet/uucp: no answer
Fingerprint Apple A/UX 3.0.1 - 3.1.1 SVR2
Class Apple | A/UX | 3.X | general purpose
CPE cpe:/o:apple:a_ux:3 auto
SEQ(SP=0-15%GCD=FA00|1F400|2EE00|3E800|4E200%ISR=96-A0%TI=I%II=I%SS=S%TS=U)
OPS(O1=M400%O2=M400%O3=M400%O4=M400%O5=M400%O6=M400)
WIN(W1=1000%W2=1000%W3=F00%W4=1000%W5=EA8%W6=F87)
ECN(R=Y%DF=N%T=19-23%TG=20%W=1000%O=M400%CC=N%Q=)
T1(R=Y%DF=N%T=19-23%TG=20%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=19-23%TG=20%W=F87%S=O%A=O%F=A%O=%RD=0%Q=)
T4(R=Y%DF=N%T=19-23%TG=20%W=1000%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=19-23%TG=20%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=19-23%TG=20%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=19-23%TG=20%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=Z%RUCK=0%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# Apple A/UX 3.1.1 SVR2 mc68040
Fingerprint Apple A/UX 3.1.1 SVR2
Class Apple | A/UX | 3.X | general purpose
CPE cpe:/o:apple:a_ux:3.1.1 auto
SEQ(SP=C-16%GCD=FA00|1F400|2EE00|3E800|4E200%ISR=97-A1%TI=I%II=I%SS=S%TS=U)
OPS(O1=M400%O2=M400%O3=M400%O4=M400%O5=M400%O6=M400)
WIN(W1=1000%W2=1000%W3=F00%W4=1000%W5=EA8%W6=F87)
ECN(R=Y%DF=N%T=19-23%TG=20%W=1000%O=M400%CC=N%Q=)
T1(R=Y%DF=N%T=19-23%TG=20%S=O%A=O|S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=Y%DF=N%T=19-23%TG=20%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=19-23%TG=20%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=19-23%TG=20%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=Z%RUCK=0%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# tvOS
Fingerprint Apple TV 5
Class Apple | Apple TV | 5.X | media device
CPE cpe:/o:apple:apple_tv:5 auto
SEQ(SP=F2-FC%GCD=1-6%ISR=109-113%TI=Z%CI=RD%II=RI%TS=A)
OPS(O1=M5B4NW6NNT11SLL%O2=M5B4NW6NNT11SLL%O3=M5B4NW6NNT11%O4=M5B4NW6NNT11SLL%O5=M5B4NW6NNT11SLL%O6=M5B4NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M5B4NW6SLL%CC=Y%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Apple TV Software 5.2.1 (6025)
# Apple TV 5.3
Fingerprint Apple TV 5.2.1 or 5.3
Class Apple | Apple TV | 5.X | media device
CPE cpe:/a:apple:apple_tv:5.2.1
CPE cpe:/a:apple:apple_tv:5.3
SEQ(SP=F3-10C%GCD=1-6%ISR=101-10B%TI=RD%CI=RD|RI%II=RI%TS=A)
OPS(R=N)
WIN(R=N)
ECN(R=N)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Apple Time Capsule, firmware 7.3.1
# Apple Airport Extreme
# Linux 2.6.25.18-0.2-default #1 SMP 2008-10-21 16:30:26 +0200 x86_64 x86_64 x86_64 GNU/Linux
Fingerprint Apple AirPort Extreme WAP or Time Capsule NAS device (NetBSD)
Class Apple | embedded || storage-misc
Class Apple | embedded || WAP
CPE cpe:/h:apple:airport_extreme
SEQ(SP=CC-D8%GCD=1-6%ISR=D7-E1%TI=I%II=I%SS=S%TS=0)
OPS(O1=M5B4NW0NNT01SNN%O2=M5B4NW0NNT01SNN%O3=M5B4NW0NNT01%O4=M5B4NW0NNT01SNN%O5=M5B4NW0NNT01SNN%O6=M5B4NNT01SNN)
WIN(W1=8000%W2=8000%W3=8000%W4=8000%W5=8000%W6=8000)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=8000%O=M5B4NW0SNN%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=8000%S=O%A=S+%F=AS%O=M5B4NW0NNT01SNN%RD=0%Q=)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=I%RUCK=G%RUD=G)
IE(DFI=N%T=FA-104%TG=FF%CD=S)

# Apple TimeCapsule 500Gb.
Fingerprint Apple Time Capsule NAS device
Class Apple | embedded || storage-misc
SEQ(CI=I%II=I)
OPS(R=N)
WIN(R=N)
ECN(R=N)
T1(R=N)
T2(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
T3(R=N)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=FA-104%TG=FF%CD=S)

# Airport Express with firmware 6.3.
Fingerprint Apple AirPort Express WAP
Class Apple | embedded || WAP
CPE cpe:/h:apple:airport_express
SEQ(SP=CD-DB%GCD=1-6%ISR=D8-E2%TI=I%CI=I%II=I%SS=S%TS=0)
OPS(O1=M5B4NW1NNT01SNN%O2=M5B4NW1NNT01SNN%O3=M5B4NW1NNT01%O4=M5B4NW1NNT01SNN%O5=M5B4NW1NNT01SNN%O6=M5B4NNT01SNN)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M5B4NW1SNN%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%S=O%A=S+%F=AS%O=M5B4NW1NNT01SNN%RD=0%Q=)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=FA-104%TG=FF%CD=S)

# Apple Airport Express (with Airtunes), using firmware version 6.3.
# AMX NI-3100 controller http://www.amx.com/products/NI-3100.asp
Fingerprint Apple AirPort Express WAP or AMX NI-3100 controller (VxWorks)
Class Apple | embedded || WAP
CPE cpe:/h:apple:airport_express
SEQ(SP=FC-106%GCD=1-6%ISR=105-10F%TI=I%II=I%SS=S%TS=6)
OPS(O1=M5B4NW0NNT11%O2=M5B4NW0NNT11%O3=M5B4NW0NNT11%O4=M5B4NW0NNT11%O5=M5B4NW0NNT11%O6=M5B4NNT11)
WIN(W1=4000%W2=4000%W3=4000%W4=4000%W5=4000%W6=4000)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=4000%O=M5B4NW0%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=70%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Airport Extreme new 802.11ac WAP
# Apple AirPort Time Capsule 7.7.2 Firmware, Believed to be running some variant of NetBSD
# NetBSD 6.1_STABLE NetBSD 6.1_STABLE (GENERIC) #0: Sat Feb 15 16:08:49 CET 2014  root@build.netbsd.org:/usr/obj/sys/arch/amd64/compile/GENERIC amd64
Fingerprint Apple AirPort Extreme 802.11ac WAP or Time Capsule NAS device or NetBSD 6.1
Class Apple | embedded || WAP
CPE cpe:/h:apple:airport_extreme
Class Apple | embedded || storage-misc
CPE cpe:/h:apple:time_capsule:7.7.2
Class NetBSD | NetBSD | 6.X | general purpose
CPE cpe:/o:netbsd:netbsd:6.1
SEQ(SP=D2-DC%GCD=1-6%ISR=D7-E1%TI=Z%II=I)
OPS(O1=M5B4NW3NNT11SNN%O2=M5B4NW3NNT11SNN%O3=M5B4NW3NNT11%O4=M5B4NW3NNT11SNN%O5=M5B4NW3NNT11SNN%O6=M5B4NNT11SNN)
WIN(W1=8000%W2=8000%W3=8000%W4=8000%W5=8000%W6=8000)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=8000%O=M5B4NW3SNN%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=8000%S=O%A=S+%F=AS%O=M5B4NW3NNT11SNN%RD=0%Q=)
T4(R=N)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=N)
T7(R=N)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=FA-104%TG=FF%CD=S)

# Apple Airport Extreme Dual Band firmware version 7.4.2 (Probably NetBSD --Ed.)
Fingerprint Apple AirPort Extreme WAP
Class Apple | embedded || WAP
CPE cpe:/h:apple:airport_extreme
SEQ(SP=CD-DB%GCD=1-6%ISR=D9-E3%TI=I%II=I%SS=S%TS=0)
OPS(O1=M5B4NW0NNT01SNN%O2=M5B4NW0NNT01SNN%O3=M5B4NW0NNT01%O4=M5B4NW0NNT01SNN%O5=M5B4NW0NNT01SNN%O6=M5B4NNT01SNN)
WIN(W1=8000%W2=8000%W3=8000%W4=8000%W5=8000%W6=8000)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=8000%O=M5B4NW0SNN%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=N)
T7(R=N)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=FA-104%TG=FF%CD=S)

# AirPort Extreme (802.11n)
Fingerprint Apple AirPort Extreme WAP
Class Apple | embedded || WAP
CPE cpe:/h:apple:airport_extreme
SEQ(SP=CE-D8%GCD=1-6%ISR=D7-E1%TI=I%II=I%SS=S%TS=0)
OPS(O1=M5B4NW0NNT01SNN%O2=M5B4NW0NNT01SNN%O3=M5B4NW0NNT01%O4=M5B4NW0NNT01SNN%O5=M5B4NW0NNT01SNN%O6=M5B4NNT01SNN)
WIN(W1=8000%W2=8000%W3=8000%W4=8000%W5=8000%W6=8000)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=8000%O=M5B4NW0SNN%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
T7(R=N)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=FA-104%TG=FF%CD=S)

# Apple Airport Extreme (Simultaneous Dual-Band II) router running version 7.5.1 (75100.14) of the operating system.
Fingerprint Apple AirPort Extreme WAP
Class Apple | embedded || WAP
CPE cpe:/h:apple:airport_extreme
SEQ(SP=EF-F9%GCD=1-6%ISR=FA-104%TI=RD%CI=I%II=I%TS=3|6)
OPS(O1=M5B4NW3NNT11SLL%O2=M5B4NW3NNT11SLL%O3=M5B4NW3NNT11%O4=M5B4NW3NNT11SLL%O5=M5B4NW3NNT11SLL%O6=M5B4NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M5B4NW3SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=FA-104%TG=FF%CD=S)

# Apple Airport Extreme Base station, Firmware 7.3.2
Fingerprint Apple AirPort Extreme WAP
Class Apple | embedded || WAP
CPE cpe:/h:apple:airport_extreme
SEQ(SP=D7-E1%GCD=1-6%ISR=D7-E1%TI=I%TS=0)
OPS(R=N)
WIN(R=N)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=8000%O=M5B4NW0SNN%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=O|S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=N)
T7(R=N)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=>0%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=FA-104%TG=FF%CD=S)

# Japanese Apple Airport extreme, dual radios, 802.11a/b/g/n, 2.4 GHz and 5GHz
# Apple Time Capsule 2TB (A1409) with firmware version 7.5.2.
Fingerprint Apple AirPort Extreme WAP or Time Capsule NAS device
Class Apple | embedded || WAP
CPE cpe:/h:apple:airport_extreme
Class Apple | embedded || storage-misc
SEQ(SP=CE-DA%GCD=1-6%ISR=D6-E0%TI=I%CI=I%II=I%SS=O|S%TS=0)
OPS(O1=M5B4NW0NNT01SNN|M5B4NW0NNT11SNN%O2=M5B4NW0NNT01SNN|M5B4NW0NNT11SNN%O3=M5B4NW0NNT01|M5B4NW0NNT11%O4=M5B4NW0NNT01SNN|M5B4NW0NNT11SNN%O5=M5B4NW0NNT01SNN|M5B4NW0NNT11SNN%O6=M5B4NNT01SNN|M5B4NNT11SNN)
WIN(W1=8000%W2=8000%W3=8000%W4=8000%W5=8000%W6=8000)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=8000%O=M5B4NW0SNN%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=O|S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=N)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=FA-104%TG=FF%CD=S)

# Apple Airport Extreme/Time Capsule AFP (protocol 3.2 WAP)
Fingerprint Apple AirPort Extreme WAP or Time Capsule NAS device (NetBSD 4.99)
Class Apple | embedded || WAP
CPE cpe:/h:apple:airport_extreme
Class Apple | embedded || storage-misc
SEQ(SP=CB-D7%GCD=1-6%ISR=D9-E3%TI=I%II=I%SS=S%TS=0)
OPS(O1=M5B4NW0NNT01SNN|M5B4NW0NNT11SNN%O2=M5B4NW0NNT01SNN|M5B4NW0NNT11SNN%O3=M5B4NW0NNT01|M5B4NW0NNT11%O4=M5B4NW0NNT01SNN|M5B4NW0NNT11SNN%O5=M5B4NW0NNT01SNN|M5B4NW0NNT11SNN%O6=M5B4NNT01SNN|M5B4NNT11SNN)
WIN(W1=8000%W2=8000%W3=8000%W4=8000%W5=8000%W6=8000)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=8000%O=M5B4NW0SNN%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=8000%S=O%A=S+%F=AS%O=M5B4NW0NNT01SNN|M5B4NW0NNT11SNN%RD=0%Q=)
T4(R=N)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=N)
T7(R=N)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=FA-104%TG=FF%CD=S)

# iOS 10
Fingerprint Apple iOS 10
Class Apple | iOS | 10.X | phone
CPE cpe:/o:apple:iphone_os:10 auto
SEQ(SP=F0-10A%GCD=1-6%ISR=FF-10D%TI=RD%II=RI%TS=A)
OPS(O1=M5B4NW5NNT11SLL%O2=M5B4NW5NNT11SLL%O3=M5B4NW5NNT11%O4=M5B4NW5NNT11SLL%O5=M5B4NW5NNT11SLL%O6=M5B4NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M5B4NW5SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=N)
T6(R=N)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# iOS 11.0 beta
# Darwin Kernel Version 18.6.0: Thu Apr 25 23:16:27 PDT 2019; root:xnu-4903.261.4~2/RELEASE_X86_64 x86_64
# Apple 10.14.6 macOS Mojave(  Darwin Kernel version 18.7.0)
# iOS 12.1.1
# Darwin Kernel Version 18.2.0
# iOS 13.4
# macOS 10.15.1
# Darwin Kernel Version 19.2.0: Sat Nov  9 03:47:04 PST 2019; root:xnu-6153.61.1~20/RELEASE_X86_64 x86_64
# Darwin Kernel Version 19.6.0: Sun Jul  5 00:43:10 PDT 2020; root:xnu-6153.141.1~9/RELEASE_X86_64 x86_64
# iOS 12.4.1
# iOS 13.0
# Darwin Kernel Version 19.6.0: Sat Jun 27 04:35:37 PDT 2020; root:xnu-6153.142.1~4/RELEASE_ARM64_T8010 iPad7,5
Fingerprint Apple macOS 10.13 (High Sierra) - 10.15 (Catalina) or iOS 11.0 - 14.3 (Darwin 17.0.0 - 20.2.0)
Class Apple | iOS | 11.X | phone
CPE cpe:/o:apple:iphone_os:11 auto
Class Apple | iOS | 12.X | phone
CPE cpe:/o:apple:iphone_os:12 auto
Class Apple | iOS | 13.X | phone
CPE cpe:/o:apple:iphone_os:13 auto
Class Apple | macOS | 10.13.X | general purpose
CPE cpe:/o:apple:mac_os_x:10.13 auto
Class Apple | macOS | 10.14.X | general purpose
CPE cpe:/o:apple:mac_os_x:10.14 auto
Class Apple | macOS | 10.15.X | general purpose
CPE cpe:/o:apple:mac_os_x:10.15 auto
SEQ(SP=F8-10A%GCD=1-6%ISR=FF-112%TI=Z%CI=RD%II=RI%TS=1|A-C)
OPS(O1=M[4E2-5B4]NW6NNT11SLL%O2=M[4E2-5B4]NW6NNT11SLL%O3=M[4E2-5B4]NW6NNT11%O4=M[4E2-5B4]NW6NNT11SLL%O5=M[4E2-5B4]NW6NNT11SLL%O6=M[4E2-5B4]NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M[4E2-5B4]NW6SLL%CC=N|Y%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# 13.7
Fingerprint Apple iOS 13.7 (Darwin 19.6.0)
Class Apple | iOS | 13.X | phone
CPE cpe:/o:apple:iphone_os:13.7 auto
SEQ(SP=FB-105%GCD=1-6%ISR=109-113%TI=Z%CI=RI%II=RI%TS=A)
OPS(O1=M582NW6NNT11SLL%O2=M582NW6NNT11SLL%O3=M582NW6NNT11%O4=M582NW6NNT11SLL%O5=M582NW6NNT11SLL%O6=M582NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=FFFF%O=M582NW6SLL%CC=Y%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# Darwin Kernel Version 20.0.0: Fri Aug 28 23:07:15 PDT 2020; root:xnu-7195.0.46~9/RELEASE_ARM64_T8030 iPhone 12,8
# 14.4.2
Fingerprint Apple iOS 14.0 - 14.4 (Darwin 20.0.0 - 20.4.0)
Class Apple | iOS | 14.X | phone
CPE cpe:/o:apple:iphone_os:14 auto
SEQ(SP=FA-10C%GCD=1-6%ISR=100-114%TI=Z%CI=RI%II=RI%TS=A)
OPS(O1=M[4EC-5B4]NW5NNT11SLL%O2=M[4EC-5B4]NW5NNT11SLL%O3=M[4EC-5B4]NW5NNT11%O4=M[4EC-5B4]NW5NNT11SLL%O5=M[4EC-5B4]NW5NNT11SLL%O6=M[4EC-5B4]NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=FFFF%O=M[4EC-5B4]NW5SLL%CC=Y%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# 14.2
# 14.5.1
Fingerprint Apple iOS 14.0 - 14.6 (Darwin 20.0.0 - 20.5.0)
Class Apple | iOS | 14.X | phone
CPE cpe:/o:apple:iphone_os:14 auto
SEQ(SP=F5-10B%GCD=1-6%ISR=100-110%TI=Z%CI=RD%II=RI%TS=A|B)
OPS(O1=M5B4NW5NNT11SLL%O2=M5B4NW5NNT11SLL%O3=M5B4NW5NNT11%O4=M5B4NW5NNT11SLL%O5=M5B4NW5NNT11SLL%O6=M5B4NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M5B4NW5SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# 14.7.1
# 14.8.1
# 14.5.1
# 14.2 (TS=A)
# 15.6
# 15.5 (TS=20)
# TvOS 16.1 (20K71)
# tvOS 14.3 (18K561)
Fingerprint Apple iOS 14.0 - 15.6 or tvOS 14.3 - 16.1 (Darwin 20.0.0 - 22.1.0)
Class Apple | iOS | 14.X | phone
CPE cpe:/o:apple:iphone_os:14 auto
Class Apple | iOS | 15.X | phone
CPE cpe:/o:apple:iphone_os:15 auto
Class Apple | tvOS | 14.X | media device
CPE cpe:/o:apple:tvos:14 auto
Class Apple | tvOS | 16.X | media device
CPE cpe:/o:apple:tvos:16 auto
SEQ(SP=FB-10B%GCD=1-6%ISR=102-110%TI=Z%CI=RD%II=I|RI%TS=A|20-22)
OPS(O1=M[500-5B4]NW5NNT11SLL%O2=M[500-5B4]NW5NNT11SLL%O3=M[500-5B4]NW5NNT11%O4=M[500-5B4]NW5NNT11SLL%O5=M[500-5B4]NW5NNT11SLL%O6=M[500-5B4]NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M[500-5B4]NW5SLL%CC=Y|N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# 14.2
Fingerprint Apple iOS 14.2 (Darwin 20.1.0)
Class Apple | iOS | 14.X | phone
CPE cpe:/o:apple:iphone_os:14.2 auto
SEQ(SP=F9-107%GCD=1-6%ISR=109-113%TI=Z%CI=RI%II=RI%TS=A)
OPS(O1=M5B4NW5NNT11SLL%O2=M5B4NW5NNT11SLL%O3=M5B4NW5NNT11%O4=M5B4NW5NNT11SLL%O5=M5B4NW5NNT11SLL%O6=M5B4NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=FFFF%O=M5B4NW5SLL%CC=Y%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# 14.2
Fingerprint Apple iOS 14.2 (Darwin 20.1.0)
Class Apple | iOS | 14.X | phone
CPE cpe:/o:apple:iphone_os:14.2 auto
SEQ(SP=100-10A%GCD=1-6%ISR=105-10F%TI=Z%CI=RI%II=RI%TS=A)
OPS(O1=M5B4NW6NNT11SLL%O2=M5B4NW6NNT11SLL%O3=M5B4NW6NNT11%O4=M5B4NW6NNT11SLL%O5=M5B4NW6NNT11SLL%O6=M5B4NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M5B4NW6SLL%CC=Y%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# ios ipad 14.7.1 (18g82)
Fingerprint Apple iOS 14.7
Class Apple | iOS | 14.X | phone
CPE cpe:/o:apple:iphone_os:14.7 auto
SEQ(SP=EC-10A%GCD=1-6%ISR=102-112%TI=Z%CI=RD%II=RI%TS=21)
OPS(O1=M5B4NW5NNT11SLL%O2=M5B4NW5NNT11SLL%O3=M5B4NW5NNT11%O4=M5B4NW5NNT11SLL%O5=M5B4NW5NNT11SLL%O6=M5B4NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%W=FFFF%O=M5B4NW5SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%W=0%S=O%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%W=0%S=Z%A=O%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%W=0%S=O%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%W=0%S=Z%A=O%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%CD=S)

# 14.7.1
Fingerprint Apple iOS 14.7 (Darwin 20.6.0)
Class Apple | iOS | 14.X | phone
CPE cpe:/o:apple:iphone_os:14.7 auto
SEQ(SP=100-10A%GCD=1-6%ISR=FE-108%TI=Z%CI=RI%II=RI%TS=21)
OPS(O1=M5B4NW6NNT11SLL%O2=M5B4NW6NNT11SLL%O3=M5B4NW6NNT11%O4=M5B4NW6NNT11SLL%O5=M5B4NW6NNT11SLL%O6=M5B4NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M5B4NW6SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# 15.1
# 15.2.1
# 15.3.1
# iphone 13 ios 15.4
# iOS 15.6
# 15.5
# 15.0 (19A5307g)
# W1 & W2 are correlated to MSS, but this range works to match accurately
Fingerprint Apple iOS 15.0 - 15.6 (Darwin 21.1.0 - 21.6.0)
Class Apple | iOS | 15.X | phone
CPE cpe:/o:apple:iphone_os:15 auto
SEQ(SP=F8-10C%GCD=1-6%ISR=100-112%TI=Z%CI=RD%II=I|RI%TS=20-22)
OPS(O1=M[4D8-5B4]NW[5|6]NNT11SLL%O2=M[4D8-5B4]NW[5|6]NNT11SLL%O3=M[4D8-5B4]NW[5|6]NNT11%O4=M[4D8-5B4]NW[5|6]NNT11SLL%O5=M[4D8-5B4]NW[5|6]NNT11SLL%O6=M[4D8-5B4]NNT11SLL)
WIN(W1=998-B50%W2=998-AD8%W3=4E8%W4=FFFF%W5=418%W6=1FA)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=0%O=M[4D8-5B4]NW[5|6]SLL%CC=N|Y%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# 15.1
# 15.0.2
# 16.1 (20B79)
Fingerprint Apple iOS 15.0 - 16.1 (Darwin 21.1.0 - 22.1.0)
Class Apple | iOS | 15.X | phone
CPE cpe:/o:apple:iphone_os:15 auto
Class Apple | iOS | 16.X | phone
CPE cpe:/o:apple:iphone_os:16 auto
SEQ(SP=FD-109%GCD=1-6%ISR=105-10F%TI=Z%CI=RI%II=RI%TS=20|22)
OPS(O1=M[582-5B4]NW6NNT11SLL%O2=M[582-5B4]NW6NNT11SLL%O3=M[582-5B4]NW6NNT11%O4=M[582-5B4]NW6NNT11SLL%O5=M[582-5B4]NW6NNT11SLL%O6=M[582-5B4]NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=FFFF%O=M[582-5B4]NW6SLL%CC=Y%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# 15.1.1
Fingerprint Apple iOS 15.1 (Darwin 21.1.0)
Class Apple | iOS | 15.X | phone
CPE cpe:/o:apple:iphone_os:15.1 auto
SEQ(SP=101-10B%GCD=1-6%ISR=107-111%TI=Z%CI=RI%II=RI%TS=22)
OPS(O1=M5B4NW6NNT11SLL%O2=M5B4NW6NNT11SLL%O3=M5B4NW6NNT11%O4=M5B4NW6NNT11SLL%O5=M5B4NW6NNT11SLL%O6=M5B4NNT11SLL)
WIN(W1=B50%W2=AD8%W3=4E8%W4=FFFF%W5=418%W6=1FA)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=0%O=M5B4NW6SLL%CC=Y%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# 15.2.1
Fingerprint Apple iOS 15.2 (Darwin 21.2.0)
Class Apple | iOS | 15.X | phone
CPE cpe:/o:apple:iphone_os:15.2 auto
SEQ(SP=102-10C%GCD=1-6%ISR=103-10D%TI=Z%II=RI%TS=21)
OPS(O1=M5B4NW5NNT11SLL%O2=M5B4NW5NNT11SLL%O3=M5B4NW5NNT11%O4=M5B4NW5NNT11SLL%O5=M5B4NW5NNT11SLL%O6=M5B4NNT11SLL)
WIN(W1=B50%W2=AD8%W3=4E8%W4=FFFF%W5=418%W6=1FA)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=0%O=M5B4NW5SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=N)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# iOS 15.2.1
Fingerprint Apple iOS 15.2 (Darwin 21.2.0)
Class Apple | iOS | 15.X | phone
CPE cpe:/o:apple:iphone_os:15.2 auto
SEQ(SP=F5-FF%GCD=1-6%ISR=100-10A%TI=Z%CI=RI%II=RI%TS=20)
OPS(O1=M5B4NW5NNT11SLL%O2=M5B4NW5NNT11SLL%O3=M5B4NW5NNT11%O4=M5B4NW5NNT11SLL%O5=M5B4NW5NNT11SLL%O6=M5B4NNT11SLL)
WIN(W1=B50%W2=AD8%W3=4E8%W4=FFFF%W5=418%W6=1FA)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=0%O=M5B4NW5SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# 15.3.1
Fingerprint Apple iOS 15.3 (Darwin 21.3.0)
Class Apple | iOS | 15.X | phone
CPE cpe:/o:apple:iphone_os:15.3 auto
SEQ(SP=FF-109%GCD=1-6%ISR=105-10F%TI=Z%CI=RI%II=RI%TS=22)
OPS(O1=M5B4NW6NNT11SLL%O2=M5B4NW6NNT11SLL%O3=M5B4NW6NNT11%O4=M5B4NW6NNT11SLL%O5=M5B4NW6NNT11SLL%O6=M5B4NNT11SLL)
WIN(W1=B50%W2=AD8%W3=4E8%W4=FFFF%W5=418%W6=1FA)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=0%O=M5B4NW6SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# 15.3.1
Fingerprint Apple iOS 15.3 (Darwin 21.3.0)
Class Apple | iOS | 15.X | phone
CPE cpe:/o:apple:iphone_os:15.3 auto
SEQ(SP=FF-109%GCD=1-6%ISR=103-10D%TI=Z%CI=RI%II=RI%TS=21)
OPS(O1=M5B4NW5NNT11SLL%O2=M5B4NW5NNT11SLL%O3=M5B4NW5NNT11%O4=M5B4NW5NNT11SLL%O5=M5B4NW5NNT11SLL%O6=M5B4NNT11SLL)
WIN(W1=B50%W2=AD8%W3=4E8%W4=FFFF%W5=418%W6=1FA)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=0%O=M5B4NW5SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# iOS 15.4.1
Fingerprint Apple iOS 15.4 (Darwin 21.4.0)
Class Apple | iOS | 15.X | phone
CPE cpe:/o:apple:iphone_os:15.4 auto
SEQ(SP=FE-108%GCD=1-6%ISR=103-10D%TI=Z%CI=RI%II=RI%TS=22)
OPS(O1=M582NW5NNT11SLL%O2=M582NW5NNT11SLL%O3=M582NW5NNT11%O4=M582NW5NNT11SLL%O5=M582NW5NNT11SLL%O6=M582NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=FFFF%O=M582NW5SLL%CC=Y%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# 15.6
Fingerprint Apple iOS 15.6
Class Apple | iOS | 15.X | phone
CPE cpe:/o:apple:iphone_os:15.6 auto
SEQ(SP=FF-109%GCD=1-6%ISR=101-10B%TI=Z%CI=RI%II=RI%TS=21)
OPS(O1=M5B4NW6NNT11SLL%O2=M5B4NW6NNT11SLL%O3=M5B4NW6NNT11%O4=M5B4NW6NNT11SLL%O5=M5B4NW6NNT11SLL%O6=M5B4NNT11SLL)
WIN(W1=B50%W2=AD8%W3=4E8%W4=FFFF%W5=418%W6=1FA)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=0%O=M5B4NW6SLL%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# 15.7
Fingerprint Apple iOS 15.7 (Darwin 21.7.0)
Class Apple | iOS | 15.X | phone
CPE cpe:/o:apple:iphone_os:15.7 auto
SEQ(SP=FD-107%GCD=1-6%ISR=107-111%TI=Z%CI=RI%II=RI%TS=21)
OPS(O1=M5B4NW6NNT11SLL%O2=M5B4NW6NNT11SLL%O3=M5B4NW6NNT11%O4=M5B4NW6NNT11SLL%O5=M5B4NW6NNT11SLL%O6=M5B4NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M5B4NW6SLL%CC=Y%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# IOS -16.0.2(20A380)
Fingerprint Apple iOS 16.0
Class Apple | iOS | 16.X | phone
CPE cpe:/o:apple:iphone_os:16.0 auto
SEQ(SP=100-10A%GCD=1-6%ISR=107-111%TI=Z%CI=RI%II=RI%TS=21)
OPS(O1=M[4EC-5B4]NW5NNT11SLL%O2=M[4EC-5B4]NW5NNT11SLL%O3=M[4EC-5B4]NW5NNT11%O4=M[4EC-5B4]NW5NNT11SLL%O5=M[4EC-5B4]NW5NNT11SLL%O6=M[4EC-5B4]NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=FFFF%O=M[4EC-5B4]NW5SLL%CC=Y%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# iPad 2
Fingerprint Apple iOS 4
Class Apple | iOS | 4.X | media device
CPE cpe:/o:apple:iphone_os:4 auto
SEQ(SP=EF-107%GCD=1-6%ISR=F9-10B%TI=RD%CI=RD%II=RI%TS=A)
OPS(O1=M5B4NW2NNT11SLL%O2=M5B4NW2NNT11SLL%O3=M5B4NW2NNT11%O4=M5B4NW2NNT11SLL%O5=M5B4NW2NNT11SLL%O6=M5B4NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=FA-104%TG=FF%W=FFFF%O=M5B4NW2SLL%CC=N)
T1(R=Y%DF=Y%T=FA-104%TG=FF%S=O%A=S+%F=AS%RD=0)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%RD=0)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=Z%A=S+%F=AR%RD=0)
T6(R=Y%DF=Y%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%RD=0)
T7(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=Z%A=S%F=AR%RD=0)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# iPad - iOS 4.3.2
Fingerprint Apple iOS 4.3.2
Class Apple | iOS | 4.X | media device
CPE cpe:/o:apple:iphone_os:4.3.2 auto
SEQ(SP=FE-10C%GCD=1-6%ISR=102-10E%TI=RD%CI=RD|RI%II=RI%TS=7|8)
OPS(O1=M5B4NW2NNT11SLL%O2=M5B4NW2NNT11SLL%O3=M5B4NW2NNT11%O4=M5B4NW2NNT11SLL%O5=M5B4NW2NNT11SLL%O6=M5B4NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M5B4NW2SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# iPhone OS 4.3.3
Fingerprint Apple iOS 4.3.3
Class Apple | iOS | 4.X | media device
CPE cpe:/o:apple:iphone_os:4.3.3 auto
Class Apple | iOS | 4.X | phone
CPE cpe:/o:apple:iphone_os:4.3.3 auto
SEQ(SP=FB-105%GCD=1-6%ISR=FE-108%TI=RD%CI=RD|RI%II=RI%TS=A)
OPS(O1=M5B4NW2NNT11SLL%O2=M5B4NW2NNT11SLL%O3=M5B4NW2NNT11%O4=M5B4NW2NNT11SLL%O5=M5B4NW2NNT11SLL%O6=M5B4NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M5B4NW2SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=O|S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=3C-46%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=3C-46%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T4(R=Y%DF=N%T=3C-46%TG=40%W=0%S=A%A=S%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=O|S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3C-46%TG=40%W=0%S=A%A=S%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3C-46%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Apple iPad Wifi 16Gb iOS Ver. 4.3.3 (8J3) Model MB292B
Fingerprint Apple iOS 4.3.3
Class Apple | iOS | 4.X | media device
CPE cpe:/o:apple:iphone_os:4.3.3 auto
SEQ(SP=103-10D%GCD=1-6%ISR=104-10E%TI=RD%CI=RD%II=RI%TS=A|B)
OPS(O1=M5B4NW2NNT11%O2=M5B4NW2NNT11SLL%O3=M5B4NW2NNT11%O4=M5B4NW2NNT11SLL%O5=M5B4NW2NNT11SLL%O6=M5B4NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M5B4NW2SLL%CC=N)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=Z%A=S+%F=AS%RD=0)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%RD=0)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%RD=0)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%RD=0)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%RD=0)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# iPhone OS 4.3.3
# Darwin 11.3.0 Darwin Kernel Version 11.3.0
Fingerprint Apple Mac OS X 10.7.3 (Lion) or iOS 4.2.1 - 4.3.4 (Darwin 10.4.0 - 11.3.0)
Class Apple | iOS | 4.X | media device
CPE cpe:/o:apple:iphone_os:4 auto
Class Apple | iOS | 4.X | phone
CPE cpe:/o:apple:iphone_os:4 auto
Class Apple | Mac OS X | 10.7.X | general purpose
CPE cpe:/o:apple:mac_os_x:10.7.3
SEQ(SP=EF-107%GCD=1-6%ISR=F7-10D%TI=RD%CI=RD|RI%II=RI%TS=A)
OPS(O1=M553NW2NNT11SLL%O2=M553NW2NNT11SLL%O3=M553NW2NNT11%O4=M553NW2NNT11SLL%O5=M553NW2NNT11SLL%O6=M553NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M553NW2SLL%CC=N)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%RD=0)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%RD=0)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%RD=0)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%RD=0)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# iOS 4
Fingerprint Apple iOS 4.0
Class Apple | iOS | 4.X | phone
CPE cpe:/o:apple:iphone_os:4.0 auto
SEQ(SP=F1-107%GCD=1-6%ISR=102-10E%TI=RD%CI=RD%II=RI%TS=3)
OPS(O1=M56ANW2NNT11SLL%O2=M56ANW2NNT11SLL%O3=M56ANW2NNT11%O4=M56ANW2NNT11SLL%O5=M56ANW2NNT11SLL%O6=M56ANNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M56ANW2SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# 4.0 (8A293) on iPhone 3G
# Ipad
# 4.1
Fingerprint Apple iOS 4.0 - 4.1
Class Apple | iOS | 4.X | phone
CPE cpe:/o:apple:iphone_os:4 auto
SEQ(SP=F1-10B%GCD=1-6%ISR=FA-110%TI=RD%CI=RD|RI%II=RI%TS=5)
OPS(O1=M5B4NW2NNT11SLL%O2=M5B4NW2NNT11SLL%O3=M5B4NW2NNT11%O4=M5B4NW2NNT11SLL%O5=M5B4NW2NNT11SLL%O6=M5B4NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M5B4NW2SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# iPhone 4, iOS version 4.1(8B117)
Fingerprint Apple iOS 4.1
Class Apple | iOS | 4.X | phone
CPE cpe:/o:apple:iphone_os:4.1 auto
SEQ(SP=FD-107%GCD=1-6%ISR=102-10C%TI=RD%CI=RD|RI%II=RI%TS=3)
OPS(O1=M5B4NW2NNT11SLL%O2=M5B4NW2NNT11SLL%O3=M5B4NW2NNT11%O4=M5B4NW2NNT11SLL%O5=M5B4NW2NNT11SLL%O6=M5B4NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M5B4NW2SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=S%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=S%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# iPhone OS Version 4.1
# iOS 4.2.1 (8C148)
Fingerprint Apple iOS 4.1 - 4.2.1
Class Apple | iOS | 4.X | phone
CPE cpe:/o:apple:iphone_os:4 auto
SEQ(SP=EC-106%GCD=1-6%ISR=FC-108%TI=RD%II=RI%TS=4)
OPS(O1=M5B4NW2NNT11SLL%O2=M5B4NW2NNT11SLL%O3=M5B4NW2NNT11%O4=M5B4NW2NNT11SLL%O5=M5B4NW2NNT11SLL%O6=M5B4NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M5B4NW2SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=O|S+%F=AR%O=%RD=0%Q=)
T6(R=N)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# iPhone 3gs (model: MC637X) i0S 4.3.1 (8G4) (stable, release March 25 2011)
# iOS 4.3.5
Fingerprint Apple iOS 4.3.1 - 4.3.5
Class Apple | iOS | 4.X | phone
CPE cpe:/o:apple:iphone_os:4 auto
Class Apple | iOS | 4.X | media device
CPE cpe:/o:apple:iphone_os:4 auto
SEQ(SP=F2-10A%GCD=1-6%ISR=F8-10E%TI=RD%II=RI%TS=A|C)
OPS(O1=M5B4NW2NNT11SLL%O2=M5B4NW2NNT11SLL%O3=M5B4NW2NNT11%O4=M5B4NW2NNT11SLL%O5=M5B4NW2NNT11SLL%O6=M5B4NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M5B4NW2SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=N)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# iOS 4.3.2 on iPhone 4
Fingerprint Apple iOS 4.3.2
Class Apple | iOS | 4.X | phone
CPE cpe:/o:apple:iphone_os:4.3.2 auto
SEQ(SP=FA-108%GCD=1-6%ISR=F9-10F%TI=RD%CI=RD%II=RI%TS=C)
OPS(O1=M5B4NW2NNT11SLL%O2=M5B4NW2NNT11SLL%O3=M5B4NW2NNT11%O4=M5B4NW2NNT11SLL%O5=M5B4NW2NNT11SLL%O6=M5B4NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M5B4NW2SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# iPhone 4, OS 4.3.3 (8J2) accessed through the personal hotspot function.
# iOS 4.3.3
Fingerprint Apple iOS 4.3.3
Class Apple | iOS | 4.X | phone
CPE cpe:/o:apple:iphone_os:4.3.3
SEQ(SP=ED-10B%GCD=1-6%ISR=ED-10B%TI=RD%CI=RI%II=RI%TS=A)
OPS(O1=M582NW2NNT11SLL|M582NW3NNT11SLL%O2=M582NW2NNT11SLL|M582NW3NNT11SLL%O3=M582NW2NNT11|M582NW3NNT11%O4=M582NW2NNT11SLL|M582NW3NNT11SLL%O5=M582NW2NNT11SLL|M582NW3NNT11SLL%O6=M582NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M582NW2SLL|M582NW3SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Darwin 9.0.0b5 Darwin Kernel Version 9.0.0b5: Fri Aug 17 17:24:24 PDT 2007; root:xnu-1182~1/RELEASE_I386 i386
# Darwin 9.0.0 Darwin Kernel Version 9.0.0: Tue Oct  9 21:35:55 PDT 2007; root:xnu-1228~1/RELEASE_I386 i386
# Darwin 9.1.0 Darwin Kernel Version 9.1.0: Wed Oct 31 17:48:21 PDT 2007; root:xnu-1228.0.2~1/RELEASE_PPC Power Macintosh
# Darwin 9.1.0 Darwin Kernel Version 9.1.0: Wed Oct 31 17:46:22 PDT 2007; root:xnu-1228.0.2~1/RELEASE_I386 i386
# Darwin 9.0.0 Darwin Kernel Version 9.0.0: Tue Oct  9 21:37:58 PDT 2007; root:xnu-1228~1/RELEASE_PPC Power Macintosh
# Darwin Kernel Version 9.2.0:  Tue Feb 5 16:13:22 PST 2008; root:xnu-1228.3.13~1/RELEASE_I386 i386, Mac OS X Version 10.5.2 (LEOPARD)
# Darwin 9.2.2 Darwin Kernel Version 9.2.2: Tue Mar 4 21:17:34 PST 2008; root:xnu-1228..31~1/RELEASE_I386 i386
# Darwin 9.3.0 Darwin Kernel Version 9.3.0: Fri May 23 00:49:16 PDT 2008; root:xnu-1228.5.18~1/RELEASE_I386 i386
# Darwin 9.4.0 Darwin Kernel Version 9.4.0: Mon Jun  9 19:36:17 PDT 2008; root:xnu-1228.5.20~1/RELEASE_PPC Power Macintosh
# Darwin 9.5.0 Darwin Kernel Version 9.5.0: Wed Sep  3 11:29:43 PDT 2008; root:xnu-1228.7.58~1/RELEASE_I386 i386
# Darwin 9.6.0 Darwin Kernel Version 9.6.0: Mon Nov 24 17:39:01 PST 2008; root:xnu-1228.9.59~1/RELEASE_PPC Power Macintosh
# Darwin 9.7.1 Darwin Kernel Version 9.7.1: Thu Apr 23 13:52:18 PDT 2009; root:xnu-1228.14.1~1/RELEASE_I386 i386
# Darwin 9.8.0 Darwin Kernel Version 9.8.0: Wed Jul 15 16:57:01 PDT 2009; root:xnu-1228.15.4~1/RELEASE_PPC Power Macintosh powerpc
# Darwin 10.0.0 Darwin Kernel Version 10.0.0: Fri Jul 31 22:47:34 PDT 2009; root:xnu-1456.1.25~1/RELEASE_I386 i386
# Darwin 10.2.0 Darwin Kernel Version 10.2.0: Tue Nov  3 10:37:10 PST 2009; root:xnu-1486.2.11~1/RELEASE_I386 i386
# jailbroken iphone ios4
# iPhone OS 4.02 (8A400 )
# Apple iPhone 3GS phone running Apple iOS 4.0.1 (8A306),
# Apple iPhone 4 16GB running Apple iOS 4.1 public release
# iPhone 4 running apple IOS 4.2
# iPod touch 3 with iOS 4.2.1
# OS X 10.6.6
# Darwin 10.8.0 Darwin Kernel Version 10.8.0: Tue Jun  7 16:33:36 PDT 2011; root:xnu-1504.15.3~1/RELEASE_I386 i386
Fingerprint Apple Mac OS X 10.5 (Leopard) - 10.6.8 (Snow Leopard) or iOS 4.0 - 4.2.1 (Darwin 9.0.0b5 - 10.8.0)
Class Apple | iOS | 4.X | phone
CPE cpe:/o:apple:iphone_os:4 auto
Class Apple | iOS | 4.X | media device
CPE cpe:/o:apple:iphone_os:4 auto
Class Apple | Mac OS X | 10.6.X | general purpose
CPE cpe:/o:apple:mac_os_x:10.6 auto
SEQ(SP=EA-10C%GCD=1-6%ISR=F2-10E%TI=RD|RI%CI=RD|RI%II=RI%TS=3|4)
OPS(O1=M5B4NW[1-3]NNT11SLL%O2=M5B4NW[1-3]NNT11SLL%O3=M5B4NW[1-3]NNT11%O4=M5B4NW[1-3]NNT11SLL%O5=M5B4NW[1-3]NNT11SLL%O6=M5B4NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M5B4NW[1-3]SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Apple iPhone iOS 5
Fingerprint Apple iOS 5.0
Class Apple | iOS | 5.X | media device
CPE cpe:/o:apple:iphone_os:5.0 auto
Class Apple | iOS | 5.X | phone
CPE cpe:/o:apple:iphone_os:5.0 auto
SEQ(SP=F3-109%GCD=1-6%ISR=F3-10B%TI=RD%CI=RD|RI%II=RI%TS=5)
OPS(O1=M5B4NW4NNT11SLL%O2=M5B4NW4NNT11SLL%O3=M5B4NW4NNT11%O4=M5B4NW4NNT11SLL%O5=M5B4NW4NNT11SLL%O6=M5B4NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M5B4NW4SLL%CC=N)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%RD=0)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%RD=0)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%RD=0)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%RD=0)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Apple iOS 5.0.1 for Iphone 4.
Fingerprint Apple iOS 5.0.1
Class Apple | iOS | 5.X | media device
CPE cpe:/o:apple:iphone_os:5.0.1 auto
Class Apple | iOS | 5.X | phone
CPE cpe:/o:apple:iphone_os:5.0.1 auto
SEQ(SP=E1-109%GCD=1-6%ISR=E6-110%TI=RD|RI%CI=RD|RI%II=RI%TS=9|A)
OPS(O1=M5B4NW4NNT11SLL%O2=M5B4NW4NNT11SLL%O3=M5B4NW4NNT11%O4=M5B4NW4NNT11SLL%O5=M5B4NW4NNT11SLL%O6=M5B4NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# version 5.0.1
Fingerprint Apple iOS 5.0.1
Class Apple | iOS | 5.X | media device
CPE cpe:/o:apple:iphone_os:5.0.1 auto
Class Apple | iOS | 5.X | phone
CPE cpe:/o:apple:iphone_os:5.0.1 auto
SEQ(SP=FD-107%GCD=1-6%ISR=F8-10A%TI=RD%CI=RD|RI%II=RI%TS=A)
OPS(O1=M550NW4NNT11SLL%O2=M550NW4NNT11SLL%O3=M550NW4NNT11%O4=M550NW4NNT11SLL%O5=M550NW4NNT11SLL%O6=M550NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M550NW4SLL%CC=N)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%RD=0)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%RD=0)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%RD=0)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%RD=0)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# iOS 5.1.1, jailbroken. Device is iPhone 4s.
Fingerprint Apple iOS 5.0.1 - 5.1.1
Class Apple | iOS | 5.X | media device
CPE cpe:/o:apple:iphone_os:5
SEQ(SP=FC-106%GCD=1-6%ISR=FD-10F%TI=RD%CI=RD%II=RI%TS=9|A)
OPS(O1=M56ANW4NNT11SLL%O2=M56ANW4NNT11SLL%O3=M56ANW4NNT11%O4=M56ANW4NNT11SLL%O5=M56ANW4NNT11SLL%O6=M56ANNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M56ANW4SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# iPad 3 (Verizon LTE) running iOS 5.1.1
Fingerprint Apple iOS 5.1.1
Class Apple | iOS | 5.X | media device
CPE cpe:/o:apple:iphone_os:5.1.1 auto
SEQ(SP=FE-108%GCD=1-6%ISR=104-10E%TI=RD%CI=RI%II=RI%TS=A)
OPS(O1=M56CNW4NNT11SLL%O2=M56CNW4NNT11SLL%O3=M56CNW4NNT11%O4=M56CNW4NNT11SLL%O5=M56CNW4NNT11SLL%O6=M56CNNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M56CNW4SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# iOS 5.1.1 on iphone running as wifi hotspot
# iOS 6.1
Fingerprint Apple iOS 5.1.1 - 6.1
Class Apple | iOS | 5.X | media device
CPE cpe:/o:apple:iphone_os:5 auto
Class Apple | iOS | 5.X | phone
CPE cpe:/o:apple:iphone_os:5 auto
Class Apple | iOS | 6.X | media device
CPE cpe:/o:apple:iphone_os:6 auto
Class Apple | iOS | 6.X | phone
CPE cpe:/o:apple:iphone_os:6 auto
SEQ(SP=F3-107%GCD=1-6%ISR=FE-10A%TI=RD%CI=RI%II=RI%TS=A)
OPS(O1=M582NW4NNT11SLL%O2=M582NW4NNT11SLL%O3=M582NW4NNT11%O4=M582NW4NNT11SLL%O5=M582NW4NNT11SLL%O6=M582NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M582NW4SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Apple iOS v. 5.0.1 (9A405)
# Version 5.1.1
# Apple TV Model MC572FD/A Apple TV Software Version: 5.0.1 (4224)
# Darwin 12.4.0 Darwin Kernel Version 12.4.0: Wed May  1 17:57:12 PDT 2013; root:xnu-2050.24.15~1/RELEASE_X86_64 x86_64
# Darwin 13.2.0 Darwin Kernel Version 13.2.0: Thu Apr 17 23:03:13 PDT 2014; root:xnu-2422.100.13~1/RELEASE_X86_64 x86_64
Fingerprint Apple OS X 10.8 (Mountain Lion) - 10.9 (Mavericks) or iOS 5.0.1 - 5.1.1 (Darwin 11.0.0 - 13.2.0)
Class Apple | iOS | 5.X | media device
CPE cpe:/o:apple:iphone_os:5
Class Apple | OS X | 10.8.X | general purpose
CPE cpe:/o:apple:mac_os_x:10.8
Class Apple | OS X | 10.9.X | general purpose
CPE cpe:/o:apple:mac_os_x:10.9
SEQ(SP=F1-109%GCD=1-6%ISR=FF-111%TI=RD%II=RI%TS=8|A|C)
OPS(O1=M5B4NW4NNT11SLL%O2=M5B4NW4NNT11SLL%O3=M5B4NW4NNT11%O4=M5B4NW4NNT11SLL%O5=M5B4NW4NNT11SLL%O6=M5B4NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=N|Y%T=3B-45%TG=40%W=FFFF%O=M5B4NW4SLL%CC=N)
T1(R=Y%DF=N|Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%RD=0)
T6(R=N)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Apple iPad version 3
Fingerprint Apple iOS 6
Class Apple | iOS | 6.X | media device
CPE cpe:/o:apple:iphone_os:6 auto
SEQ(SP=FD-107%GCD=1-6%ISR=107-111%TI=RD|RI%II=RI%SS=S%TS=A|C)
OPS(O1=M554NW4NNT11SLL%O2=M554NW4NNT11SLL%O3=M554NW4NNT11%O4=M554NW4NNT11SLL%O5=M554NW4NNT11SLL%O6=M554NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M554NW4SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=N)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Apple iPad MC707LL/A (64GB, Wi-Fi, Black) 3rd Generation iOS version: 6.1.3 (10B329)
Fingerprint Apple iOS 6.1.3
Class Apple | iOS | 6.X | media device
CPE cpe:/o:apple:iphone_os:6.1.3 auto
SEQ(SP=101-10B%GCD=1-6%ISR=106-110%TI=RD%CI=RD%II=RI%TS=A)
OPS(O1=M5B4NW4NNT11SLL%O2=M5B4NW4NNT11SLL%O3=M5B4NW4NNT11%O4=M5B4NW4NNT11SLL%O5=M5B4NW4NNT11SLL%O6=M5B4NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M5B4NW4SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=I%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# iPhone 3GS old Boot ROM running iOS 6.0.1
Fingerprint Apple iOS 6.0.1
Class Apple | iOS | 6.X | phone
CPE cpe:/o:apple:iphone_os:6.0.1 auto
SEQ(SP=101-10B%GCD=1-6%ISR=107-111%TI=RD%CI=RD%II=RI%TS=A)
OPS(O1=M558NW4NNT11SLL%O2=M558NW4NNT11SLL%O3=M558NW4NNT11%O4=M558NW4NNT11SLL%O5=M558NW4NNT11SLL%O6=M558NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M558NW4SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# iPhone 4S, ver 6.1.2 (10B146)
Fingerprint Apple iOS 6.1.2
Class Apple | iOS | 6.X | phone
CPE cpe:/o:apple:iphone_os:6.1.2 auto
SEQ(SP=101-10B%GCD=1-6%ISR=108-112%TI=RD%CI=RD%II=RI%TS=A)
OPS(O1=M5B4NW4NNT11SLL%O2=M5B4NW4NNT11SLL%O3=M5B4NW4NNT11%O4=M5B4NW4NNT11SLL%O5=M5B4NW4NNT11SLL%O6=M5B4NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M5B4NW4SLL%CC=N)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=O%F=AS%RD=0)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%RD=0)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%RD=0)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%RD=0)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%RD=0)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# iPhone 5, 32 GB Version: 6.1.4 (10B350)
Fingerprint Apple iOS 6.1.4 (Darwin 13.0.0)
Class Apple | iOS | 6.X | phone
CPE cpe:/o:apple:iphone_os:6.1.4 auto
SEQ(SP=E3-10D%GCD=1-6%ISR=106-110%TI=RD%CI=RD|RI%II=RI%TS=7|A|C)
OPS(O1=M57CNW4NNT11SLL%O2=M57CNW4NNT11SLL%O3=M57CNW4NNT11%O4=M57CNW4NNT11SLL%O5=M57CNW4NNT11SLL%O6=M57CNNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M57CNW4SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=O|S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A|O%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=O|S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A|O%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=O|S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Apple iOS 7
Fingerprint Apple iOS 7
Class Apple | iOS | 7.X | media device
CPE cpe:/o:apple:iphone_os:7 auto
SEQ(SP=103-10D%GCD=1-6%ISR=108-112%TI=RD%CI=RD%II=RI%TS=A)
OPS(O1=M550NW4NNT11SLL%O2=M550NW4NNT11SLL%O3=M550NW4NNT11%O4=M550NW4NNT11SLL%O5=M550NW4NNT11SLL%O6=M550NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M550NW4SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# iPhone 4 running iOS 7.1.2 (11D257)
# iPad 2 running iOS 9.3.1 (13E238)
Fingerprint Apple iOS 7.1 or 9.3 (Darwin 14.0.0 - 15.4.0)
Class Apple | iOS | 7.X | phone
CPE cpe:/o:apple:iphone_os:7 auto
SEQ(SP=FB-10B%GCD=1-6%ISR=104-10E%TI=RD%CI=RI%II=RI%TS=A)
OPS(O1=M5B4NW4NNT11SLL%O2=M5B4NW4NNT11SLL%O3=M5B4NW4NNT11%O4=M5B4NW4NNT11SLL%O5=M5B4NW4NNT11SLL%O6=M5B4NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M5B4NW4SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# iOS 7.1.1
Fingerprint Apple iOS 7.1.1
Class Apple | iOS | 7.X | phone
CPE cpe:/o:apple:iphone_os:7.1.1 auto
SEQ(SP=FE-108%GCD=1-6%ISR=106-110%TI=RD%CI=RI%II=RI%TS=A)
OPS(O1=M582NW4NNT11SLL%O2=M582NW4NNT11SLL%O3=M582NW4NNT11%O4=M582NW4NNT11SLL%O5=M582NW4NNT11SLL%O6=M582NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M582NW4SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# used as a USB network adapter.
# iOS 8.1.4
# iOS 8.1.2
Fingerprint Apple iOS 8.0 - 8.1 (Darwin 14.0.0)
Class Apple | iOS | 8.X | phone
CPE cpe:/o:apple:iphone_os:8 auto
SEQ(SP=FB-109%GCD=1-6%ISR=101-111%TI=RD%CI=RI%II=RI%TS=A)
OPS(O1=M[55A-5B4]NW5NNT11SLL%O2=M[55A-5B4]NW5NNT11SLL%O3=M[55A-5B4]NW5NNT11%O4=M[55A-5B4]NW5NNT11SLL%O5=M[55A-5B4]NW5NNT11SLL%O6=M[55A-5B4]NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=FFFF%O=M[55A-5B4]NW5SLL%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# Apple iPad Air 2 iOS 8.2
Fingerprint Apple iOS 8.2 (Darwin 14.0.0)
Class Apple | iOS | 8.X | phone
CPE cpe:/o:apple:iphone_os:8.2 auto
SEQ(SP=C4-CE%GCD=1-6%ISR=D2-DC%TI=Z%CI=RD%II=RI%TS=U)
OPS(O1=M5B4NNSNW1%O2=M5B4NNSNW1%O3=M5B4NW1%O4=M5B4NNSNW1%O5=M5B4NNSNW1%O6=M5B4NNS)
WIN(W1=16D0%W2=16D0%W3=16D0%W4=16D0%W5=16D0%W6=16D0)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=16D0%O=M5B4NNSNW1%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# iOS version 8.2
Fingerprint Apple iOS 8.2 (Darwin 14.0.0)
Class Apple | iOS | 8.X | phone
CPE cpe:/o:apple:iphone_os:8.2 auto
SEQ(SP=FF-10D%GCD=1-6%ISR=104-112%TI=RD%II=RI%TS=A)
OPS(O1=M550NW5NNT11SLL%O2=M550NW5NNT11SLL%O3=M550NW5NNT11%O4=M550NW5NNT11SLL%O5=M550NW5NNT11SLL%O6=M550NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M550NW5SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=N)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# iPhone 6 running iOS 8.3 - used as hotspot
Fingerprint Apple iOS 8.3 (Darwin 14.0.0)
Class Apple | iOS | 8.X | phone
CPE cpe:/o:apple:iphone_os:8.3 auto
SEQ(SP=FB-105%GCD=1-6%ISR=101-10B%TI=RD%CI=RI%II=RI%TS=A)
OPS(O1=M56CNW5NNT11SLL%O2=M56CNW5NNT11SLL%O3=M56CNW5NNT11%O4=M56CNW5NNT11SLL%O5=M56CNW5NNT11SLL%O6=M56CNNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=FFFF%O=M56CNW5SLL%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# iPhone 5s iOS 8.4.1 (12H321)
# 9.3.4
Fingerprint Apple iOS 8.4 - 9.3 (Darwin 14.0.0 - 15.6.0)
Class Apple | iOS | 8.X | phone
CPE cpe:/o:apple:iphone_os:8 auto
Class Apple | iOS | 9.X | phone
CPE cpe:/o:apple:iphone_os:9 auto
SEQ(SP=FF-10B%GCD=1-6%ISR=104-10E%TI=RD%CI=RI%II=RI%TS=A)
OPS(O1=M5B4NW5NNT11SLL%O2=M5B4NW5NNT11SLL%O3=M5B4NW5NNT11%O4=M5B4NW5NNT11SLL%O5=M5B4NW5NNT11SLL%O6=M5B4NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M5B4NW5SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# iOS 8.3 on iPad mini
# Darwin 14.3.0 Darwin Kernel Version 14.3.0: Mon Mar 23 11:59:05 PDT 2015; root:xnu-2782.20.48~5/RELEASE_X86_64 x86_64
# iOS 9.0.1
# Darwin 14.5.0 Darwin Kernel Version 14.5.0: Mon Jan 11 18:48:35 PST 2016; root:xnu-2782.50.2~1/RELEASE_X86_64 x86_64
Fingerprint Apple OS X 10.10 (Yosemite) or iOS 8.3 - 9.0.1 (Darwin 14.0.0 - 15.0.0)
Class Apple | iOS | 8.X | phone
CPE cpe:/o:apple:iphone_os:8 auto
Class Apple | iOS | 9.X | phone
CPE cpe:/o:apple:iphone_os:9 auto
Class Apple | OS X | 10.10.X | general purpose
CPE cpe:/o:apple:mac_os_x:10.10 auto
SEQ(SP=FE-10C%GCD=1-6%ISR=109-113%TI=RD%II=RI%TS=A)
OPS(O1=M5B4NW5NNT11SLL%O2=M5B4NW5NNT11SLL%O3=M5B4NW5NNT11%O4=M5B4NW5NNT11SLL%O5=M5B4NW5NNT11SLL%O6=M5B4NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M5B4NW5SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=N)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# iOS 9 - used as hotspot
Fingerprint Apple iOS 9 (Darwin 15.0.0)
Class Apple | iOS | 9.X | phone
CPE cpe:/o:apple:iphone_os:9 auto
SEQ(SP=FD-107%GCD=1-6%ISR=105-10F%TI=RD%CI=RI%TS=A)
OPS(O1=M58CNW5NNT11SLL%O2=M58CNW5NNT11SLL%O3=M58CNW5NNT11%O4=M58CNW5NNT11SLL%O5=M58CNW5NNT11SLL%O6=M58CNNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=FFFF%O=M58CNW5SLL%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# iOS 9
Fingerprint Apple iOS 9 (Darwin 15.0.0)
Class Apple | iOS | 9.X | phone
CPE cpe:/o:apple:iphone_os:9 auto
SEQ(SP=100-10A%GCD=1-6%ISR=105-10F%TI=RD%CI=RD%II=RI%TS=A)
OPS(O1=M43ENW5NNT11SLL%O2=M43ENW5NNT11SLL%O3=M43ENW5NNT11%O4=M43ENW5NNT11SLL%O5=M43ENW5NNT11SLL%O6=M43ENNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M43ENW5SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# iOS 9
# iPad Pro iOS 9
Fingerprint Apple iOS 9 (Darwin 15.0.0)
Class Apple | iOS | 9.X | phone
CPE cpe:/o:apple:iphone_os:9 auto
SEQ(SP=FC-10A%GCD=1-6%ISR=106-110%TI=RD%CI=RD%II=RI%TS=9|A)
OPS(O1=M56ANW5NNT11SLL%O2=M56ANW5NNT11SLL%O3=M56ANW5NNT11%O4=M56ANW5NNT11SLL%O5=M56ANW5NNT11SLL%O6=M56ANNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M56ANW5SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# iOS 9.0
Fingerprint Apple iOS 9.0 (Darwin 15.0.0)
Class Apple | iOS | 9.X | phone
CPE cpe:/o:apple:iphone_os:9.0 auto
SEQ(SP=102-10C%GCD=1-6%ISR=108-112%TI=RD%CI=RD%TS=A)
OPS(O1=M5B4NW5NNT11SLL%O2=M5B4NW5NNT11SLL%O3=M5B4NW5NNT11%O4=M5B4NW5NNT11SLL%O5=M5B4NW5NNT11SLL%O6=M5B4NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=0%CC=N)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%RD=0)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%RD=0)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%RD=0)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%RD=0)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# iOS 9.3.2
Fingerprint Apple iOS 9.3.2 (Darwin 15.5.0)
Class Apple | iOS | 9.X | phone
CPE cpe:/o:apple:iphone_os:9.3.2 auto
SEQ(SP=FF-109%GCD=1-6%ISR=107-111%TI=RD%II=RI%TS=A)
OPS(O1=M5B4NW4NNT11SLL%O2=M5B4NW4NNT11SLL%O3=M5B4NW4NNT11%O4=M5B4NW4NNT11SLL%O5=M5B4NW4NNT11SLL%O6=M5B4NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M5B4NW4SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=N)
T6(R=N)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Darwin 9.0.0d1 Darwin Kernel Version 9.0.0d1: Wed Oct 10 00:07:50 PDT 2007; root:xnu-933.0.0.204.obj~7/RELEASE_ARM_S5L8900XRB iPod1,1 Darwin, ipod touch 1.1.2 (jailbroken)
# Darwin 9.0.0d1 Darwin Kernel Version 9.0.0d1: Wed Dec 12 00:16:00 PST 2007; root:xnu-933.0.0.211.obj~2/RELEASE_ARM_S5L8900XRB iPod1,1 arm N45AP Darwin, ziphone 2.6b jailbroken ipod touch (1.1.4)
Fingerprint Apple iPod touch audio player (iPhone OS 1.1.2 - 1.1.4, Darwin 9.0.0d1)
Class Apple | iPhone OS | 1.X | media device
CPE cpe:/o:apple:iphone_os:1 auto
SEQ(SP=0-5%GCD=1-6%ISR=15-1F%TI=I%TS=1)
OPS(O1=M5B4NW0NNT11SLL%O2=M5B4NW0NNT11SLL%O3=M5B4NW0NNT11%O4=M5B4NW0NNT11SLL%O5=M5B4NW0NNT11SLL%O6=M5B4NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M5B4NW0SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=N)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Ipod Touch 16Gb. With 1.1.3 upgrade,BSD Subsystem, Openssh, and some other utils. Darwin 9.0.0d1 Darwin Kernel Version 9.0.0d1: Wed Oct 10 00:07:50 PDT 2007; root:xnu-933.0.0.204.obj~7/RELEASE_ARM_S5L8900XRB iPod1,1 unknown
Fingerprint Apple iPod touch audio player (iPhone OS 1.1.3, Darwin 9.0.0d1)
Class Apple | iPhone OS | 1.X | media device
CPE cpe:/o:apple:iphone_os:1.1.3 auto
SEQ(SP=0-5%GCD=1-6%ISR=15-1F%TS=1)
OPS(O1=M3FD8NW0NNT11SLL%O2=M3FD8NW0NNT11SLL%O3=M3FD8NW0NNT11%O4=M3FD8NW0NNT11SLL%O5=M3FD8NW0NNT11SLL%O6=M3FD8NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=N|Y%T=3B-45%TG=40%W=0|FFFF%O=|M3FD8NW0SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=Z%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# iPod touch Firmware 1.1.3, jailbroken, ssh installed
Fingerprint Apple iPod touch audio player (iPhone OS 1.1.3, Darwin 9.0.0d1)
Class Apple | iPhone OS | 1.X | media device
CPE cpe:/o:apple:iphone_os:1.1.3 auto
SEQ(SP=0-5%GCD=1-6%ISR=16-20%TI=I%II=I%SS=S%TS=1)
OPS(O1=M5B4NW0NNT11SLL%O2=M5B4NW0NNT11SLL%O3=M5B4NW0NNT11%O4=M5B4NW0NNT11SLL%O5=M5B4NW0NNT11SLL%O6=M5B4NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M5B4NW0SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Darwin iPhone 9.0.0d1 Darwin Kernel Version 9.0.0d1: Fri Jun 22 00:38:56 PDT 2007; root:xnu-933.0.1.178.obj~1/RELEASE_ARM_S5L8900XRB iPhone1,1 Darwin
# This is the fingerprint of an iPhone as of 2007-08-14 (all updates applied)
# Apple iPhone running kernel: "Darwin Kernel Version 9.0.0d1" and DropBear SSH daemon
# Apple iPhone, 8GB model, firmware version 1.0.2, WiFi connection
# iPhone Firmware 1.1.1
# Jailbroken iPod touch running firmware 1.1.1
# Darwin 9.0.0d1 Darwin Kernel Version 9.0.0d1: Thu Sep 20 00:27:53 PDT 2007; root:xnu-933.0.0.203.obj~24/RELEASE_ARM_S5L8900XRBiPod1,1 Darwin
# Darwin iPod 9.0.0d1 Darwin Kernel Version 9.0.0d1: Wed Oct 10 00:07:50 PDT 2007; root:xnu-933.0.0.204.obj~7/RELEASE_ARM_S5L8900XRB iPod1,1 Darwin, iPod Touche firmware 1.1.2 jailbroken (obviously)
# iPod Touch firmware 1.1.3 (jailbreaked)
Fingerprint Apple iPhone OS 1.0.2 - 1.1.3 (Darwin 9.0.0d1)
Class Apple | iPhone OS | 1.X | phone
CPE cpe:/o:apple:iphone_os:1 auto
Class Apple | iPhone OS | 1.X | media device
CPE cpe:/o:apple:iphone_os:1 auto
SEQ(SP=0-5%GCD=1-6%ISR=15-1F%TI=I%II=I%SS=S%TS=1)
OPS(O1=M5B4NW0NNT11SLL%O2=M5B4NW0NNT11SLL%O3=M5B4NW0NNT11%O4=M5B4NW0NNT11SLL%O5=M5B4NW0NNT11SLL%O6=M5B4NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M5B4NW0SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# iPhone, O/S version 2.1 (5F136)
# iPhone Modem Firmware 02.11.07, Version 2.1 (5F136)
Fingerprint Apple iPhone OS 2.1
Class Apple | iPhone OS | 1.X | phone
CPE cpe:/o:apple:iphone_os:1 auto
SEQ(SP=FB-107%GCD=1-6%ISR=FD-10B%TI=I%TS=3)
OPS(O1=M5B4NW2NNT11SLL%O2=M5B4NW2NNT11SLL%O3=M5B4NW2NNT11%O4=M5B4NW2NNT11SLL%O5=M5B4NW2NNT11SLL%O6=M5B4NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M5B4NW2SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=O|S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A|O%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=O|S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# iPhone 3g, running firmware 2.1
# iPhone 3G, Firmware version 2.2
# Darwin Kernel Version 9.4.1: Mon Dec  8 20:59:30 PST 2008; root:xnu-1228.7.37~4/RELEASE_ARM_S5L8900X iPhone1,2 arm N82AP Darwin
Fingerprint Apple iPhone OS 2.1 - 2.2 (Darwin 9.4.1)
Class Apple | iPhone OS | 2.X | media device
CPE cpe:/o:apple:iphone_os:2 auto
SEQ(SP=F2-108%GCD=1-6%ISR=F6-10A%TI=I%II=I%SS=S%TS=3)
OPS(O1=M3FD8NW2NNT11SLL%O2=M3FD8NW2NNT11SLL%O3=M3FD8NW2NNT11%O4=M3FD8NW2NNT11SLL%O5=M3FD8NW2NNT11SLL%O6=M3FD8NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M3FD8NW2SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=Z%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Apple iPod Touch Firmware 2.1
Fingerprint Apple iPod touch audio player (iPhone OS 2.1)
Class Apple | iPhone OS | 2.X | media device
CPE cpe:/o:apple:iphone_os:2.1 auto
SEQ(SP=0-5%GCD=1-6%ISR=15-1F%TI=I%II=I%SS=S%TS=3)
OPS(O1=M5B4NW2NNT11SLL%O2=M5B4NW2NNT11SLL%O3=M5B4NW2NNT11%O4=M5B4NW2NNT11SLL%O5=M5B4NW2NNT11SLL%O6=M5B4NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=N%T=3C-46%TG=40%W=FFFF%O=M5B4NW2SLL%CC=N%Q=)
T1(R=Y%DF=N%T=3C-46%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3C-46%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3C-46%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3C-46%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=N)
U1(DF=N%T=3C-46%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3C-46%TG=40%CD=S)

# Apple iTouch First Gen, Model Number: MA623LL , running firmware version 2.1 (5F137)
Fingerprint Apple iPod touch audio player (iPhone OS 2.1)
Class Apple | iPhone OS | 2.X | media device
CPE cpe:/o:apple:iphone_os:2.1 auto
SEQ(SP=F4-FE%GCD=1-6%ISR=EE-F8%TI=I%II=I%SS=S%TS=A)
OPS(O1=M5B4NW0NNSNNT11%O2=M578NW0NNSNNT11%O3=M280NW0NNT11%O4=M5B4NW0NNSNNT11%O5=M218NW0NNSNNT11%O6=M109NNSNNT11)
WIN(W1=4988%W2=467C%W3=44B0%W4=4988%W5=4598%W6=4431)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=4470%O=M5B4NW0NNS%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=N)
T7(R=N)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=FA-104%TG=FF%CD=S)

# iPod touch 2nd generation, (Firmware) Version: 2.2 (5G77a), Model: MB528BT
Fingerprint Apple iPod touch audio player (iPhone OS 2.2)
Class Apple | iPhone OS | 2.X | media device
CPE cpe:/o:apple:iphone_os:2.2 auto
SEQ(R=N)
OPS(O1=%O2=%O3=%O4=%O5=%O6=)
WIN(W1=0%W2=0%W3=0%W4=0%W5=0%W6=0)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=0%O=%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=Z%A=S+%F=AR%RD=0%Q=)
T2(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# iphone OS 2.x phone generation 1
Fingerprint Apple iPhone OS
Class Apple | iPhone OS | 2.X | phone
CPE cpe:/o:apple:iphone_os:2 auto
SEQ(SP=F9-105%GCD=1-6%ISR=FA-104%TI=I%II=I%SS=S%TS=3)
OPS(O1=M5B4NW2NNT11SLL%O2=M5B4NW2NNT11SLL%O3=M5B4NW2NNT11%O4=M5B4NW2NNT11SLL%O5=M5B4NW2NNT11SLL%O6=M5B4NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=FA-104%TG=FF%W=FFFF%O=M5B4NW2SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=FA-104%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=Y%T=FA-104%TG=FF%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
T3(R=N)
T4(R=Y%DF=Y%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# iPhone 3G 16GB
# Apple iPhone running 2.0 firmware
# iPhone OS 2.0, jailbroken with iPhone Dev-Team's Pwnage Tool 2.0, running on an iPod Touch. Darwin 9.3.1 ARM
# Unlocked Iphone running 2.0 Firmware with SSH open.
# unlocked ipod touch 32gb, running openssh 2.0
# Darwin 9.3.1 Darwin Kernel Version 9.3.1: Sun Jun 15 21:37:01 PDT 2008; root:xnu-1228.6.76~45/RELEASE_ARM_S5L8900X iPhone1,2 arm N82AP Darwin
# iPod Touch running iPhone OS 2.0.1
# Running iPhoneOS 2.0.2
# iPhone model MB500X firmware version 2.0.2 (5C1)
Fingerprint Apple iPhone OS 2.0 (Darwin 9.3.1)
Class Apple | iPhone OS | 2.X | phone
CPE cpe:/o:apple:iphone_os:2.0 auto
SEQ(SP=0-5%GCD=1-6%ISR=15-1F%TI=I%II=I%SS=S%TS=3)
OPS(O1=M[4D8-5B4]NW2NNT11SLL%O2=M[4D8-5B4]NW2NNT11SLL%O3=M[4D8-5B4]NW2NNT11%O4=M[4D8-5B4]NW2NNT11SLL%O5=M[4D8-5B4]NW2NNT11SLL%O6=M[4D8-5B4]NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M[4D8-5B4]NW2SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# UK iPhone 1st gen (EDGE/non 3G) OS Ver 2.1 (5F136), Model MB213B, Carrier O2 2.6
# iPhone 3G
# iPhone no-3G, firmware 2.1 jailbroken & unlocked via QuickPwn.
Fingerprint Apple iPhone OS 2.1
Class Apple | iPhone OS | 2.X | phone
CPE cpe:/o:apple:iphone_os:2.1 auto
SEQ(SP=F0-109%GCD=1-6%ISR=100-10E%TI=I%II=I%SS=S%TS=4)
OPS(O1=M5B4NW2NNT11SLL%O2=M5B4NW2NNT11SLL%O3=M5B4NW2NNT11%O4=M5B4NW2NNT11SLL%O5=M5B4NW2NNT11SLL%O6=M5B4NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M5B4NW2SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# iPhone OS version 2.1
# iPhone 2G - OS 2.1
# 1st gen iPhone running 2.1 OS.
# iPhone 3G OS Version: 21 (5F136)
# iPod Touch 1st generation 2.1 firmware
# iphone 3G 2.1 software
# iPhone OS version 2.1 build 5F137 for iPod Touch 1st Gen
# iPod Touch First Generation (MA627ZO), iPhoneO OS 2.1 (5F137)
# Apple iPhone Model MB046LL version 2.1 (5F136) Modem Firmware 02.11.07
# iPod Touch second generation with firmware 2.1.1
# iPod Touch, second generation. OS Version 2.2 (5G77a)
# iPod Touch 1st Generation 16GB running Jailbreak 2.2 (5G77) Firmware.
# Darwin 9.4.1 Darwin Kernel Version 9.4.1: Sat Nov  1 19:09:48 PDT 2008; root:xnu-1228.7.36~2/RELEASE_ARM_S5L8900X iPhone1,2 arm N82AP Darwin
# iPhone 2.2.2_5G77 release (current)
# Darwin 9.4.1 Darwin Kernel Version 9.4.1: Mon Dec  8 20:59:30 PST 2008; root:xnu-1228.7.37~4/RELEASE_ARM_S5L8900X iPhone1,1 arm M68AP Darwin
# iPod touch 2.2
# iPhone OS 2.2.1 (5H11) release.
Fingerprint Apple iPhone OS 2.1 - 2.2.2 (Darwin 9.4.1)
Class Apple | iPhone OS | 2.X | phone
CPE cpe:/o:apple:iphone_os:2 auto
Class Apple | iPhone OS | 2.X | media device
CPE cpe:/o:apple:iphone_os:2 auto
SEQ(SP=F1-109%GCD=1-6%ISR=FC-10E%TI=I%II=I%SS=S%TS=3)
OPS(O1=M5B4NW2NNT11SLL%O2=M5B4NW2NNT11SLL%O3=M5B4NW2NNT11%O4=M5B4NW2NNT11SLL%O5=M5B4NW2NNT11SLL%O6=M5B4NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M5B4NW2SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# iPhone OS version 2.2
Fingerprint Apple iPhone OS 2.2
Class Apple | iPhone OS | 2.X | phone
CPE cpe:/o:apple:iphone_os:2.2 auto
SEQ(SP=FA-108%GCD=1-6%ISR=100-10A%TI=I%II=I%SS=S%TS=2)
OPS(O1=M5B4NW2NNT11SLL%O2=M5B4NW2NNT11SLL%O3=M5B4NW2NNT11%O4=M5B4NW2NNT11SLL%O5=M5B4NW2NNT11SLL%O6=M5B4NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M5B4NW2SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# iPhone 8 Gig, Version 2.2.1 (5H11), Model # MB629C, Modem Firmware 02.30.03
Fingerprint Apple iPhone OS 2.2.1
Class Apple | iPhone OS | 2.X | phone
CPE cpe:/o:apple:iphone_os:2.2.1 auto
SEQ(SP=FC-10A%GCD=1-6%ISR=100-10A%TI=I%II=I%SS=S%TS=3)
OPS(O1=M5B4NW2NNT11SLL%O2=M5B4NW2NNT11SLL%O3=M5B4NW2NNT11%O4=M5B4NW2NNT11SLL%O5=M5B4NW2NNT11SLL%O6=M5B4NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M5B4NW2SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=N)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# iPod Touch - Software Version 2.1 - Original Apple
Fingerprint Apple iPod touch media player (iPhone OS 2.1)
Class Apple | iPhone OS | 2.X | phone
CPE cpe:/o:apple:iphone_os:2.1 auto
Class Apple | iPhone OS | 2.X | media device
CPE cpe:/o:apple:iphone_os:2.1 auto
SEQ(SP=F4-10C%GCD=1-6%ISR=102-10C%TI=I%II=I%SS=S%TS=1)
OPS(O1=M5B4NW2NNT11SLL%O2=M5B4NW2NNT11SLL%O3=M5B4NW2NNT11%O4=M5B4NW2NNT11SLL%O5=M5B4NW2NNT11SLL%O6=M5B4NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M5B4NW2SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# iPad Version 3.2 (7B367) Model MB292LL
Fingerprint Apple iPhone OS 3.2
Class Apple | iPhone OS | 3.X | general purpose
CPE cpe:/o:apple:iphone_os:3.2 auto
SEQ(SP=FB-109%GCD=1-6%ISR=FE-10A%TI=RD%CI=RD|RI%II=RI%TS=1)
OPS(O1=M5B4NW2NNT11SLL%O2=M5B4NW2NNT11SLL%O3=M5B4NW2NNT11%O4=M5B4NW2NNT11SLL%O5=M5B4NW2NNT11SLL%O6=M5B4NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M5B4NW2SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# 3.0 Beta 4 running on iPod Touch 1st generation
# iPhone 3gs, OS 3.1.2, Jailbroken w/ Blackra1n R3
Fingerprint Apple iPhone OS 3.0 - 3.1.2
Class Apple | iPhone OS | 3.X | media device
CPE cpe:/o:apple:iphone_os:3 auto
Class Apple | iPhone OS | 3.X | phone
CPE cpe:/o:apple:iphone_os:3 auto
SEQ(SP=F5-FF%GCD=1-6%ISR=F2-10C%TI=RD%CI=RD|RI%II=RI%TS=3)
OPS(O1=M3FD8NW2NNT11SLL%O2=M3FD8NW2NNT11SLL%O3=M3FD8NW2NNT11%O4=M3FD8NW2NNT11SLL%O5=M3FD8NW2NNT11SLL%O6=M3FD8NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M3FD8NW2SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=Z%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Apple iPhone OS 3, not connected via USB to iTunes for sychronization (affecting sync port)
Fingerprint Apple iPhone OS 3
Class Apple | iPhone OS | 3.X | phone
CPE cpe:/o:apple:iphone_os:3 auto
SEQ(SP=FD-107%GCD=1-6%ISR=101-10B%TI=RD%CI=RD|RI%II=RI%TS=3)
OPS(O1=M5B4NW2NNT11SLL%O2=M5B4NW2NNT11SLL%O3=M5B4NW2NNT11%O4=M5B4NW2NNT11SLL%O5=M5B4NW2NNT11SLL%O6=M5B4NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=FA-104%TG=FF%W=FFFF%O=M5B4NW2SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=FA-104%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=Y%T=FA-104%TG=FF%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
T3(R=N)
T4(R=Y%DF=Y%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# Apple iPhone OS 3.0 Beta
# Apple iPhone 3G S, MC134B, iPhone OS 3.0 (7A341), Released: Friday 19 June 2009 in the UK
# iPhone 2G, Unlocked and Jailbroken
# Darwin 10.0.0d3 Darwin Kernel Version 10.0.0d3: Fri Sep 25 23:35:35 PDT 2009; root:xnu-1357.5.30~3/RELEASE_ARM_S5L8920X iPhone2,1 arm N88AP Darwin, iPhone 3GS 32MB running iPhone OS 3.1.2 (Build 7D11)
Fingerprint Apple iPhone OS 3.0 - 3.1.2
Class Apple | iPhone OS | 3.X | phone
CPE cpe:/o:apple:iphone_os:3 auto
SEQ(SP=F7-10B%GCD=1-6%ISR=F9-111%TI=RD%CI=RD%II=RI%TS=4)
OPS(O1=M5B4NW2NNT11SLL%O2=M5B4NW2NNT11SLL%O3=M5B4NW2NNT11%O4=M5B4NW2NNT11SLL%O5=M5B4NW2NNT11SLL%O6=M5B4NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M5B4NW2SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# iPhone OS Version 3 Beta
# iphone 3.0 7A341
# Jailbroken with redsn0w, running OS 3.0.1
# Iphone Os 3.1(7c144)
# iPhone 3GS running OS 3.2
# iPhone 3GS version 3.0 (7S341) Model: MB715LL
# iPhone 2G (original iPhone) model nr. A1203, Darwin 10.0.0d3 Darwin Kernel Version 10.0.0d3: Wed May 13 22:11:58 PDT 2009; root:xnu-1357.2.89~4/RELEASE_ARM_S5L8900X iPhone1,1 arm M68AP Darwin, iPhone OS 3.0
# iPhone OS v. 3.1.2(7D11) running on iPod Touch (2nd Gen)
# Iphone OS 3.1.3
Fingerprint Apple iPhone OS 3.0 - 3.2 (Darwin 10.0.0d3)
Class Apple | iPhone OS | 3.X | phone
CPE cpe:/o:apple:iphone_os:3 auto
Class Apple | iPhone OS | 3.X | media device
CPE cpe:/o:apple:iphone_os:3 auto
SEQ(SP=F3-109%GCD=1-6%ISR=FA-10C%TI=RD%CI=RD|RI%II=RI%TS=3)
OPS(O1=M5B4NW2NNT11SLL%O2=M5B4NW2NNT11SLL%O3=M5B4NW2NNT11%O4=M5B4NW2NNT11SLL%O5=M5B4NW2NNT11SLL%O6=M5B4NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M5B4NW2SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# iPhone OS 3.0 (7A341 on iPhone 3G)
# iPhone OS 3.1 beta 3 (build 7C116a)
# Darwin s-iPhone 10.0.0d3 Darwin Kernel Version 10.0.0d3: Wed May 13 22:16:49 PDT 2009; root:xnu-1357.2.89~4/RELEASE_ARM_S5L8920X iPhone2,1 arm N88AP Darwin, Iphone OS 3.0.1
# iPhone 3GS Firmware 3.1.3 16GB (3rd Generation) Internet Tethering using USB
# iPhone 3GS running 3.2.1
# iOS 4.2.1 (8C148)
Fingerprint Apple iPhone OS 3.0 - iOS 4.2.1
Class Apple | iPhone OS | 3.X | phone
CPE cpe:/o:apple:iphone_os:3 auto
Class Apple | iOS | 4.X | phone
CPE cpe:/o:apple:iphone_os:4
SEQ(SP=ED-10B%GCD=1-6%ISR=F6-10A%TI=RD%CI=RD|RI%II=RI%TS=3)
OPS(O1=M582NW2NNT11SLL%O2=M582NW2NNT11SLL%O3=M582NW2NNT11%O4=M582NW2NNT11SLL%O5=M582NW2NNT11SLL%O6=M582NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M582NW2SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# iPhone OS 3.01
Fingerprint Apple iPhone OS 3.0.1
Class Apple | iPhone OS | 3.X | phone
CPE cpe:/o:apple:iphone_os:3.0.1 auto
SEQ(SP=FF-109%GCD=1-6%ISR=FC-106%TI=RD%CI=RD|RI%II=RI%TS=3)
OPS(O1=M55CNW2NNT11SLL%O2=M55CNW2NNT11SLL%O3=M55CNW2NNT11%O4=M55CNW2NNT11SLL%O5=M55CNW2NNT11SLL%O6=M55CNNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M55CNW2SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# firmware 3.1.2
Fingerprint Apple iPhone OS 3.1.2
Class Apple | iPhone OS | 3.X | phone
CPE cpe:/o:apple:iphone_os:3.1.2 auto
SEQ(SP=F8-102%GCD=1-6%ISR=103-10D%TI=RD%CI=RD%II=RI%TS=4)
OPS(O1=M552NW2NNT11SLL%O2=M552NW2NNT11SLL%O3=M552NW2NNT11%O4=M552NW2NNT11SLL%O5=M552NW2NNT11SLL%O6=M552NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=0|FFFF%O=M552NW2SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# OS 3.1.2 Jailbreaked
# Apple iPad
# IOS 4.0
# Os Family: 4.0
# iPhone OS 4.2.1
# iphone os v4.2.1 (8C148)
# Apple TV 2 with iOS 4.2.1. Internal firmware version is 4.1.1
Fingerprint Apple iPhone OS 3.1.2 - iOS 4.2.1
Class Apple | iPhone OS | 3.X | phone
CPE cpe:/o:apple:iphone_os:3 auto
Class Apple | iOS | 4.X | phone
CPE cpe:/o:apple:iphone_os:4.2.1 auto
SEQ(SP=F6-108%GCD=1-6%ISR=FD-10B%TI=RD%II=RI%TS=3)
OPS(O1=M5B4NW2NNT11SLL%O2=M5B4NW2NNT11SLL%O3=M5B4NW2NNT11%O4=M5B4NW2NNT11SLL%O5=M5B4NW2NNT11SLL%O6=M5B4NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M5B4NW2SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=N)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# iPhone 3GS running OS 3.2
Fingerprint Apple iPhone OS 3.2
Class Apple | iPhone OS | 3.X | phone
CPE cpe:/o:apple:iphone_os:3.2 auto
SEQ(SP=FA-104%GCD=1-6%ISR=FF-109%TI=RD%CI=RD%II=RI%TS=5)
OPS(O1=M5B4NW2NNT11SLL%O2=M5B4NW2NNT11SLL%O3=M5B4NW2NNT11%O4=M5B4NW2NNT11SLL%O5=M5B4NW2NNT11SLL%O6=M5B4NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M5B4NW2SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Darwin 2gdev 9.3.1 Darwin Kernel Version 9.3.1: Sun Jun 15 21:37:01 PDT 2008; root:xnu-1228.6.76~45/RELEASE_ARM_S5L8900X iPhone1,1 arm M68AP Darwin, scanned from localhost using Cydia packaged Nmap 4.50
Fingerprint Apple iPhone OS (Darwin 9.3.1)
Class Apple | iPhone OS || phone
CPE cpe:/o:apple:iphone_os auto
SEQ(SP=0-5%GCD=1-6%ISR=15-1F%TI=I%II=I%SS=S%TS=3|4)
OPS(O1=M3FD8NW2NNT11SLL%O2=M3FD8NW2NNT11SLL%O3=M3FD8NW2NNT11%O4=M3FD8NW2NNT11SLL%O5=M3FD8NW2NNT11SLL%O6=M3FD8NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M3FD8NW2SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=Z%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Darwin 5.5 Darwin Kernel Version 5.5: Thu May 30 14:51:26 PDT 2002; root:xnu/xnu-201.42.3-obj~1/Release_PPC Power Macintosh powerpc
Fingerprint Apple Mac OS X Server 10.1 (Darwin 5.5)
Class Apple | Mac OS X | 10.1.X | general purpose
CPE cpe:/o:apple:mac_os_x:10.1 auto
SEQ(SP=F8-10A%GCD=1-6%ISR=FD-10F%TI=I%II=I%SS=S%TS=1)
OPS(O1=M5B4NW0NNT11%O2=M5B4NW0NNT11%O3=M5B4NW0NNT11%O4=M5B4NW0NNT11%O5=M5B4NW0NNT11%O6=M5B4NNT11)
WIN(W1=8218%W2=8220%W3=8204%W4=80E8%W5=80F4%W6=807A)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=832C%O=M5B4NW0%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=807A%S=O%A=S+%F=AS%O=M5B4NW0NNT11%RD=0%Q=)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# Darwin Kernel Version 6.8: Wed Sep 10 15:20:55 PDT 2003; root:xnu/xnu-344.49.obj~2/RELEASE_PPC  Power Macintosh powerpc
# Darwin 6.8 Darwin Kernel Version 6.8: Wed Sep 10 15:20:55 PDT 2003; root:xnu/xnu-344.49.obj~2/RELEASE_PPC  Power Macintosh powerpc
Fingerprint Apple Mac OS X Server 10.2.8 (Jaguar) (Darwin 6.8, PowerPC)
Class Apple | Mac OS X | 10.2.X | general purpose
CPE cpe:/o:apple:mac_os_x:10.2.8
SEQ(SP=FB-111%GCD=1-6%ISR=104-10E%TI=I%II=I%SS=S%TS=1)
OPS(O1=M5B4NW0NNT11%O2=M5B4NW0NNT11%O3=M5B4NW0NNT11%O4=M5B4NW0NNT11%O5=M5B4NW0NNT11%O6=M5B4NNT11)
WIN(W1=8218%W2=8220%W3=8204%W4=80E8%W5=80F4%W6=807A)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=832C%O=M5B4NW0%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=807A%S=O%A=S+%F=AS%O=M5B4NW0NNT11%RD=0%Q=)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# MAC OS X 10.3.9 (7W98) on PowerPC (Darwin Kernel 7.9.0)
Fingerprint Apple Mac OS X 10.3.9 (Panther) (Darwin 7.9.0, PowerPC)
Class Apple | Mac OS X | 10.3.X | general purpose
CPE cpe:/o:apple:mac_os_x:10.3.9
SEQ(R=N)
OPS(O1=%O2=%O3=%O4=%O5=%O6=)
WIN(W1=0%W2=0%W3=0%W4=0%W5=0%W6=0)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=0%O=%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45|7C-86%TG=40|80%S=Z%A=S+%F=AR%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=2B18%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Darwin version 7.9.0: Wed mar 30 20:11:1 7 PST 2005; root:xnu/xnu-571.12.7.obj~1/RELEASE_PPC Power Macintosh powerpc
Fingerprint Apple Mac OS X 10.3.9 (Panther) (Darwin 7.9.0, PowerPC)
Class Apple | Mac OS X | 10.3.X | general purpose
CPE cpe:/o:apple:mac_os_x:10.3.9
SEQ(SP=F8-108%GCD=1-6%ISR=F6-110%TI=I%II=I%SS=S%TS=1)
OPS(O1=M5B4NW0NNT11%O2=M5B4NW0NNT11%O3=M5B4NW0NNT11%O4=M5B4NW0NNT11%O5=M5B4NW0NNT11%O6=M5B4NNT11)
WIN(W1=8218%W2=8220%W3=8204%W4=80E8%W5=80F4%W6=807A)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=832C%O=M5B4NW0%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Darwin 7.9.0 Darwin Kernel Version 7.9.0: Wed Mar 30 20:11:17 PST 2005; root:xnu-517.12.7.obj~1/RELEASE_PPC Power Macintosh powerpc (Mac OS X v.10.3.9)
Fingerprint Apple Mac OS X 10.3.9 (Panther) (Darwin 7.9.0, PowerPC)
Class Apple | Mac OS X | 10.3.X | general purpose
CPE cpe:/o:apple:mac_os_x:10.3.9
SEQ(SP=FE-108%GCD=1-6%ISR=109-113%TI=I%II=I%SS=S%TS=1)
OPS(O1=M5B4NW0NNT11%O2=M5B4NW0NNT11%O3=M5B4NW0NNT11%O4=M5B4NW0NNT11%O5=M5B4NW0NNT11%O6=M5B4NNT11)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M5B4NW0%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Darwin 7.9.0 Darwin Kernel Version 7.9.0: Wed Mar 30 20:11:17 PST 2005; root:xnu/xnu-517.12.7.obj~1/RELEASE_PPC  Power Macintosh powerpc
Fingerprint Apple Mac OS X 10.3.9 (Panther) (Darwin 7.9.0, PowerPC)
Class Apple | Mac OS X | 10.3.X | general purpose
CPE cpe:/o:apple:mac_os_x:10.3.9
SEQ(SP=100-10A%GCD=1-6%ISR=106-110%TI=I%II=I%SS=S%TS=U)
OPS(O1=M3FD8%O2=M3FD8%O3=M3FD8%O4=M3FD8%O5=M3FD8%O6=M3FD8)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M3FD8%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Darwin 7.9.0 Darwin Kernel Version 7.9.0: Wed Mar 30 20:11:17 PST 2005; root:xnu/xnu-517.12.7.obj~1/RELEASE_PPC  Power Macintosh powerpc
Fingerprint Apple Mac OS X 10.3.9 (Panther) (Darwin 7.9.0, PowerPC)
Class Apple | Mac OS X | 10.3.X | general purpose
CPE cpe:/o:apple:mac_os_x:10.3.9
SEQ(SP=FE-108%GCD=1-6%ISR=FF-111%TI=I%CI=I%TS=U)
OPS(O1=M5B4%O2=M5B4%O3=M5B4%O4=M5B4%O5=M5B4%O6=M5B4)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M5B4%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Apple Mac OS X 10.3.9 (Panther) - Darwin Kernel Version 7.9.0 Wed Mar 30 20:11:17 PST 2005; root:xnu/xnu-517.12.7.obj~1/RELEASE_PPC  Power Macintosh powerpc
# Apple Mac OS X 10.4.5 on PPC
Fingerprint Apple Mac OS X 10.3.9 (Panther) - 10.4.5 (Tiger) (Darwin 7.9.0 - 8.5.0, PowerPC)
Class Apple | Mac OS X | 10.3.X | general purpose
CPE cpe:/o:apple:mac_os_x:10.3 auto
SEQ(SP=F9-10B%GCD=1-6%ISR=101-111%TI=I%II=I%SS=S%TS=1)
OPS(O1=M3FD8NW0NNT11%O2=M3FD8NW0NNT11%O3=M3FD8NW0NNT11%O4=M3FD8NW0NNT11%O5=M3FD8NW0NNT11%O6=M3FD8NNT11)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M3FD8NW0%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Apple eMac G4 1.25GHz, Mac OS X 10.4.7 (uname -a: Darwin 8.7.8 Darwin Kernel Version 8.7.8: Fri May 26 15:20:53 PDT 2006; root:xnu-792.6.76.obj~1/RELEASE_PPC Power Maciontosh powerpc)
# Apple Mac OS X 10.3.9 (PowerPC)
Fingerprint Apple Mac OS X 10.3.9 (Panther) - 10.4.7 (Tiger) (Darwin 7.9.0 - 8.7.8, PowerPC)
Class Apple | Mac OS X | 10.3.X | general purpose
CPE cpe:/o:apple:mac_os_x:10.3 auto
Class Apple | Mac OS X | 10.4.X | general purpose
CPE cpe:/o:apple:mac_os_x:10.4 auto
SEQ(SP=AC-108%GCD=1-6%ISR=EA-110%TI=I|RD%II=I%SS=S%TS=1)
OPS(O1=M5B4NW0NNT11%O2=M5B4NW0NNT11%O3=M5B4NW0NNT11%O4=M5B4NW0NNT11%O5=M5B4NW0NNT11%O6=M5B4NNT11)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=N|Y%T=3B-45%TG=40%W=FFFF%O=M5B4NW0%CC=N%Q=)
T1(R=Y%DF=N|Y%T=3B-45%TG=40%S=O|Z%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Darwin 7.9.0 Darwin Kernel Version 7.9.0: Wed Mar 30 20:11:17 PST 2005; root:xnu/xnu-517.12.7.obj~1/RELEASE_PPC  Power Macintosh powerpc (Mac OS X Server 10.3.9 (7W98))
Fingerprint Apple Mac OS X Server 10.3.9 (Panther) (Darwin 7.9.0, PowerPC)
Class Apple | Mac OS X | 10.3.X | general purpose
CPE cpe:/o:apple:mac_os_x_server:10.3.9
SEQ(SP=FC-10A%GCD=1-6%ISR=100-112%TI=I%II=I%SS=S%TS=0|1)
OPS(O1=M5B4NW0NNT11%O2=M5B4NW0NNT11%O3=M5B4NW0NNT11%O4=M5B4NW0NNT11%O5=M5B4NW0NNT11%O6=M5B4NNT11)
WIN(W1=8218%W2=8220%W3=8204%W4=80E8%W5=80F4%W6=807A)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=832C%O=M5B4NW0%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Darwin 8.0.0 Darwin Keynel Version 8.0.0: Sat Mar 26 14:15:22 PST 2005; root:xnu-792.obj~1/RELEASE_PPC Power Macintosh powerpc
Fingerprint Apple Mac OS X 10.4 (Tiger) (Darwin 8.0.0)
Class Apple | Mac OS X | 10.4.X | general purpose
CPE cpe:/o:apple:mac_os_x:10.4 auto
SEQ(SP=FD-10F%GCD=1-6%ISR=FE-10C%TI=I%II=I%SS=S%TS=1)
OPS(O1=M3FD8NW0NNT11%O2=M3FD8NW0NNT11%O3=M3FD8NW0NNT11%O4=M3FD8NW0NNT11%O5=M3FD8NW0NNT11%O6=M3FD8NNT11)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M3FD8NW0%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=Z%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Darwin 8.11.0 Darwin Kernel Version 8.11.0: Wed Oct 10 18:26:00 PDT 2007; root:xnu-792.24.17~1/RELEASE_PPC Power Macintosh powerpc
Fingerprint Apple Mac OS X 10.4 (Tiger) (Darwin 8.11.0)
Class Apple | Mac OS X | 10.4.X | general purpose
CPE cpe:/o:apple:mac_os_x:10.4 auto
SEQ(SP=100-10A%GCD=1-6%ISR=105-10F%TI=I%CI=I%II=I%SS=S%TS=1)
OPS(O1=M5B4NW0NNT11SLL%O2=M5B4NW0NNT11SLL%O3=M5B4NW0NNT11%O4=M5B4NW0NNT11SLL%O5=M5B4NW0NNT11SLL%O6=M5B4NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M5B4NW0SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# Darwin 8.10.0 Darwin Kernel Version 8.10.0: Wed May 23 16:50:59 PDT 2007; root:xnu-792.21.3~1/RELEASE_PPC Power Macintosh powerpc
Fingerprint Apple Mac OS X 10.4.10 (Tiger) (Darwin 8.10.0, PowerPC)
Class Apple | Mac OS X | 10.4.X | general purpose
CPE cpe:/o:apple:mac_os_x:10.4.10 auto
SEQ(SP=C-16%GCD=1-6|>1000000%ISR=FA-104%TI=I|RD%II=I%TS=2)
OPS(O1=NNT11|M5B4NW0NNT11SLL%O2=NNT11|M5B4NW0NNT11SLL%O3=|NNT11|M5B4NW0NNT11%O4=|NNT11|M5B4NW0NNT11SLL%O5=|NNT11|M5B4NW0NNT11SLL%O6=|NNT11|M5B4NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=0|FFFF%W4=0|FFFF%W5=0|FFFF%W6=0|FFFF)
ECN(R=Y%DF=N|Y%T=3B-45%TG=40%W=0|FFFF%O=|M5B4NW0SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=A|AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Darwin 8.10.0 Darwin Kernel Version 8.10.0: Wed May 23 16:50:59 PDT 2007; root:xnu-792.21.3~1/RELEASE_PPC Power Macintosh powerpc
Fingerprint Apple Mac OS X 10.4.10 (Tiger) (Darwin 8.10.0, PowerPC)
Class Apple | Mac OS X | 10.4.X | general purpose
CPE cpe:/o:apple:mac_os_x:10.4.10
SEQ(SP=FA-10C%GCD=1-6%ISR=F7-105%TI=I%II=I%SS=S%TS=1|2)
OPS(O1=M5B4NW0NNT11SLL%O2=M5B4NW0NNT11SLL%O3=M5B4NW0NNT11%O4=M5B4NW0NNT11SLL%O5=M5B4NW0NNT11SLL%O6=M5B4NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M5B4NW0SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=N)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Darwin 8.10.0 Darwin Kernel Version 8.10.0: Wed May 23 16:50:59 PDT 2007; root:xnu-792.21.3~1/RELEASE_PPC Power Macintosh powerpc
Fingerprint Apple Mac OS X 10.4.10 (Tiger) (Darwin 8.10.0, PowerPC)
Class Apple | Mac OS X | 10.4.X | general purpose
CPE cpe:/o:apple:mac_os_x:10.4.10
SEQ(SP=C-16%GCD=1-6|>1000000%ISR=F1-103%TI=I%II=I%SS=S%TS=1)
OPS(O1=M5B4NW3NNT11SLL%O2=M5B4NW3NNT11SLL%O3=M5B4NW3NNT11%O4=M5B4NW3NNT11SLL%O5=M5B4NW3NNT11SLL%O6=M5B4NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M5B4NW3SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Darwin 8.10.1 Darwin Kernel Version 8.10.1: Wed May 23 16:33:00 PDT 2007; root:xnu-792.22.5~1/RELEASE_I386 i386 i386
Fingerprint Apple Mac OS X 10.4.10 (Tiger) (Darwin 8.10.1)
Class Apple | Mac OS X | 10.4.X | general purpose
CPE cpe:/o:apple:mac_os_x:10.4.10
SEQ(SP=B-15%GCD=1-6|>1000000%ISR=DF-103%TI=I%II=I%SS=S%TS=1)
OPS(O1=M5B4NW0NNT11SLL%O2=M5B4NW0NNT11SLL%O3=M5B4NW0NNT11%O4=M5B4NW0NNT11SLL%O5=M5B4NW0NNT11SLL%O6=M5B4NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M5B4NW0SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Darwin .8.10.0 Darwin Kernel  Version 8.10.0: Wed May 23 16:50:59 PDT 2007; root:xnu-792.21.3~1/RELEASE_PPC Power Macintosh powerpc
# Darwin 8.11.0 Darwin Kernel Version 8.11.0: Wed Oct 10 18:26:00 PDT 2007; root:xnu-792.24.17~1/RELEASE_PPC Power Macintosh powerpc (OS X 10.4.11)
Fingerprint Apple Mac OS X 10.4.10 - 10.4.11 (Tiger) (Darwin 8.10.0 - 8.11.0)
Class Apple | Mac OS X | 10.4.X | general purpose
CPE cpe:/o:apple:mac_os_x:10.4
SEQ(SP=7-17%GCD=1-6|>1000000%ISR=F2-102%TI=I%II=I%SS=S%TS=0|1)
OPS(O1=M5B4NW0NNT11SLL%O2=M5B4NW0NNT11SLL%O3=M5B4NW0NNT11%O4=M5B4NW0NNT11SLL%O5=M5B4NW0NNT11SLL%O6=M5B4NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=FA-104%TG=FF%W=FFFF%O=M5B4NW0SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=FA-104%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# Darwin 8.10.0 Darwin Kernel Version 8.10.0: Wed May 23 16:50:59 PDT 2007; root:xnu-792.21.3~1/RELEASE_PPC Power Macintosh powerpc
# Darwin 8.10.0 Darwin Kernel Version 8.10.0: Wed May 23 16:50:59 PDT 2007; root:xnu-792.21.3~1/RELEASE_PPC Power Macintosh powerpc
# Darwin 8.10.1 Darwin Kernel Version 8.10.1: Wed May 23 16:33:00 PDT 2007; root:xnu-792.22.5~1/RELEASE_I386 i386 i386
# Darwin 8.10.3 Darwin Kernel Version 8.10.3: Wed Jun 27 23:29:36 PDT 2007; root:xnu-792.23.3~1/RELEASE_I386 i386 i386
# Darwin 8.11.0 Darwin Kernel Version 8.11.0: Wed Oct 10 18:26:00 PDT 2007; root:xnu-792.24.17~1/RELEASE_PPC Power Macintosh powerpc
# Darwin 8.10.2 Darwin Kernel Version 8.10.2: Wed Jun 20 21:49:49 PDT 2007; root:xnu-792.22.6~1/RELEASE_I386 i386 i386
# Darwin 8.11.1 Darwin Kernel Version 8.11.1: Wed Oct 10 18:23:28 PDT 2007; root:xnu-792.25.20~1/RELEASE_I386 i386 i386
Fingerprint Apple Mac OS X 10.4.10 - 10.4.11 (Tiger) (Darwin 8.10.0 - 8.11.1)
Class Apple | Mac OS X | 10.4.X | general purpose
CPE cpe:/o:apple:mac_os_x:10.4.10
SEQ(SP=C-16%GCD=1-6|>1000000%ISR=E8-103%TI=I%II=I%SS=S%TS=1)
OPS(O1=M5B4NW0NNT11SLL%O2=M5B4NW0NNT11SLL%O3=M5B4NW0NNT11%O4=M5B4NW0NNT11SLL%O5=M5B4NW0NNT11SLL%O6=M5B4NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M5B4NW0SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Darwin 8.10.0 Darwin Kernel Version 8.10.0: Wed May 23 16:50:59 PDT 2007; root:xnu-792.21.3~1/RELEASE_PPC Power Macintosh
# Darwin 8.10.1 Darwin Kernel Version 8.10.1: Wed May 23 16:33:00 PDT 2007; root:xnu-792.22.5~1/RELEASE_I386 i386 i386
# Darwin 8.10.1 Darwin Kernel Version 8.10.1: Wed May 23 16:33:00 PDT 2007; root:xnu-792.22.5~1/RELEASE_I386 i386 i386 (OS X 10.4.10)
# Darwin 8.10.0 Darwin Kernel Version 8.10.0: Wed May 23 16:50:59 PDT 2007; root:xnu-792.21.3~1/RELEASE_PPC Power Macintosh powerpc
# Darwin 8.10.1 Darwin Kernel Version 8.10.1: Wed May 23 16:33:00 PDT 2007; root:xnu-792.22.5~1/RELEASE_I386 i386 i386
# Darwin 8.10.2 Darwin Kernel Version 8.10.2: Wed Jun 20 21:49:49 PDT 2007; root:xnu-792.22.6~1/RELEASE_I386 i386 i386
# Darwin 8.11.1 Darwin Kernel Version 8.11.1: Wed Oct 10 18:23:28 PDT 2007; root:xnu-792.25.20~1/RELEASE_I386 i386 i386
Fingerprint Apple Mac OS X 10.4.10 - 10.4.11 (Tiger) (Darwin 8.10.0 - 8.11.1)
Class Apple | Mac OS X | 10.4.X | general purpose
CPE cpe:/o:apple:mac_os_x:10.4.10
SEQ(SP=C-16%GCD=1-6|>1000000%ISR=D4-102%TI=I%II=I%SS=S%TS=1)
OPS(O1=M3FD8NW0NNT11SLL%O2=M3FD8NW0NNT11SLL%O3=M3FD8NW0NNT11%O4=M3FD8NW0NNT11SLL%O5=M3FD8NW0NNT11SLL%O6=M3FD8NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M3FD8NW0SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=Z%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Darwin 8.11.0 Darwin Kernel Version 8.11.0: Wed Oct 10 18:26:00 PDT 2007; root:xnu-792.24.17~1/RELEASE_PPC Power Macintosh powerpc
Fingerprint Apple Mac OS X 10.4.10 - 10.4.11 (Tiger) (Darwin 8.10.0 - 8.11.1)
Class Apple | Mac OS X | 10.4.X | general purpose
CPE cpe:/o:apple:mac_os_x:10.4
SEQ(SP=DC-E6%GCD=10|20|30|40|50%ISR=F8-102%TI=I%CI=I%II=I%SS=S%TS=1)
OPS(O1=M5B4NW0NNT11SLL%O2=M5B4NW0NNT11SLL%O3=M5B4NW0NNT11%O4=M5B4NW0NNT11SLL%O5=M5B4NW0NNT11SLL%O6=M5B4NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M5B4NW0SLL%CC=N)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%RD=0)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%RD=0)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%RD=0)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%RD=0)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Darwin 8.11.0 Darwin Kernel Version 8.11.0: Wed Oct 10 18:26:00 PDT 2007; root:xnu-792.24.17~1/RELEASE_PPC Power Macintosh powerpc
Fingerprint Apple Mac OS X 10.4.11 (Tiger) (Darwin 8.11.0)
Class Apple | Mac OS X | 10.4.X | general purpose
CPE cpe:/o:apple:mac_os_x:10.4.10
SEQ(SP=E-1F2%GCD=1-6|>1000000%ISR=F9-103%TI=I%CI=I%II=I%SS=S%TS=1)
OPS(O1=NNT11|M5B4NW0NNT11%O2=M5B4NW0NNT11SLL%O3=M5B4NW0NNT11%O4=M5B4NW0NNT11SLL%O5=M5B4NW0NNT11SLL%O6=M5B4NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M5B4NW0SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O|Z%A=O|S+%F=A|AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Darwin 8.11.0 Darwin Kernel Version 8.11.0: Wed Oct 10 18:26:00 PDT 2007; root:xnu-792.24.17~1/RELEASE_PPC Power Macintosh powerpc
Fingerprint Apple Mac OS X 10.4.11 (Tiger) (Darwin 8.11.0)
Class Apple | Mac OS X | 10.4.X | general purpose
CPE cpe:/o:apple:mac_os_x:10.4.11
SEQ(SP=B-15%GCD=>1000000%ISR=A1-FF%TI=I%CI=I%II=I%SS=S%TS=1)
OPS(O1=M5B4NW1NNT11SLL%O2=M5B4NW1NNT11SLL%O3=M5B4NW1NNT11%O4=M5B4NW1NNT11SLL%O5=M5B4NW1NNT11SLL%O6=M5B4NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M5B4NW1SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Darwin 8.11.0 Darwin Kernel Version 8.11.0: Wed Oct 10 18:26:00 PDT 2007; root:xnu-792.24.17~1/RELEASE_PPC Power Macintosh powerpc
Fingerprint Apple Mac OS X 10.4.11 (Tiger) (Darwin 8.11.0, PowerPC)
Class Apple | Mac OS X | 10.4.X | general purpose
CPE cpe:/o:apple:mac_os_x:10.4.11
SEQ(SP=FE-10C%GCD=1-6%ISR=F2-108%TI=I|RD%II=I%SS=O|S%TS=1)
OPS(O1=M538NW0NNT11SLL%O2=M538NW0NNT11SLL%O3=M538NW0NNT11%O4=M538NW0NNT11SLL%O5=M538NW0NNT11SLL%O6=M538NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=N|Y%T=3B-45%TG=40%W=0|FFFF%O=|M538NW0SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# 8.11.0 Darwin Kernel Version 8.11.0: Wed Oct 10 18:26:00 PDT 2007; root:xnu-792.24.17~1/RELEASE_PPC Power Macintosh powerpc
Fingerprint Apple Mac OS X 10.4.11 (Tiger) (Darwin 8.11.0, PowerPC)
Class Apple | Mac OS X | 10.4.X | general purpose
CPE cpe:/o:apple:mac_os_x:10.4.11
SEQ(SP=C-1DA%GCD=1-6|>1000000%ISR=D0-122%TI=I%CI=I%II=I%SS=S%TS=1)
OPS(O1=M5B4NW5NNT11SLL%O2=M5B4NW5NNT11SLL%O3=M5B4NW5NNT11%O4=M5B4NW5NNT11SLL%O5=M5B4NW5NNT11SLL%O6=M5B4NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M5B4NW5SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Darwin 8.10.0 Darwin Kernel Version 8.10.0: Wed May 23 16:50:59 PDT 2007; root:xnu-792.21.3~1/RELEASE_PPC Power Macintosh powerpc
# Darwin 8.11.1 Darwin Kernel Version 8.11.1: Wed Oct 10 18:23:28 PDT 2007; root:xnu-792.25.20~1/RELEASE_I386 i386 i386 (Mac OS X 10.4.11)
# Apple Mac OS X 10.4.8 (PowerPC)
# Darwin 8.10.1 Darwin Kernel Version 8.10.1: Wed May 23 16:33:00 PDT 2007; root:xnu-792.22.5~1/RELEASE_I386 i386 i386 (macmini running OSX 10.4.10)
# Darwin 8.11.0 Darwin Kernel Version 8.11.0: Wed Oct 10 18:26:00 PDT 2007; root:xnu-792.24.17~1/RELEASE_PPC Power Macintosh powerpc
Fingerprint Apple Mac OS X 10.4.8 - 10.4.11 (Tiger) (Darwin 8.8.0 - 8.11.0)
Class Apple | Mac OS X | 10.4.X | general purpose
CPE cpe:/o:apple:mac_os_x:10.4 auto
SEQ(SP=102-110%GCD=1-6%ISR=FE-10C%TI=I%II=I%SS=S%TS=1)
OPS(O1=M5B4NW[1|3|4|6]NNT11SLL%O2=M5B4NW[1|3|4|6]NNT11SLL%O3=M5B4NW[1|3|4|6]NNT11%O4=M5B4NW[1|3|4|6]NNT11SLL%O5=M5B4NW[1|3|4|6]NNT11SLL%O6=M5B4NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M5B4NW[1|3|4|6]SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Apple Mac OS 10.4.8/ppc (Darwin 8.8.0 Darwin Kernel Version 8.8.0: Fri Sep  8 17:18:57 PDT
# Darwin 8.8.1 Darwin Kernel Version 8.8.1: Mon Sep 25 19:42:00 PDT 2006; root:xnu-792.13.8.obj~1/RELEASE_I386 i386 i386
# Apple Mac OS X 10.4.8 (Tiger) on x86 Core Duo
# Apple Mac OS X 10.4.9, Darwin Kernel Version 8.9.1: Thu Feb 22 20:55:00 PST 2007; root:xnu-792.18.15~1/RELEASE_I386 i386 i386
# Darwin 8.10.1 Darwin Kernel Version 8.10.1: Wed May 23 16:33:00 PDT 2007; root:xnu-792.22.5~1/RELEASE_I386 i386 i386 (OS X version 10.4.10, Intel version)
# Darwin 8.10.2 Darwin Kernel Version 8.10.2: RELEASE_I386 i386 i386 (Mac OS X 10.4.10)
# Darwin 8.11.0 Darwin Kernel Version 8.11.0: Wed Oct 10 18:26:00 PDT 2007; root:xnu-792.24.17~1/RELEASE_PPC Power Macintosh powerpc
Fingerprint Apple Mac OS X 10.4.8 - 10.4.11 (Tiger) (Darwin 8.8.0 - 8.11.0)
Class Apple | Mac OS X | 10.4.X | general purpose
CPE cpe:/o:apple:mac_os_x:10.4 auto
SEQ(SP=BC-109%GCD=1-6%ISR=F4-10F%TI=I%II=I%SS=S%TS=1)
OPS(O1=M3FD8NW0NNT11SLL%O2=M3FD8NW0NNT11SLL%O3=M3FD8NW0NNT11%O4=M3FD8NW0NNT11SLL%O5=M3FD8NW0NNT11SLL%O6=M3FD8NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M3FD8NW0SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=Z%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Power Mac G5 running OS X 10.4.8
# Darwin 8.11.0 Darwin Kernel Version 8.11.0: Wed Oct 10 18:26:00 PDT 2007; root:xnu-792.24.17~1/RELEASE_PPC Power Macintosh powerpc
Fingerprint Apple Mac OS X 10.4.8 - 10.4.11 (Tiger) (Darwin 8.8.0 - 8.11.0, PowerPC)
Class Apple | Mac OS X | 10.4.X | general purpose
CPE cpe:/o:apple:mac_os_x:10.4 auto
SEQ(SP=FA-104%GCD=1-6%ISR=FF-10D%TI=I%II=I%SS=S%TS=U)
OPS(O1=M3FD8SLL%O2=M3FD8SLL%O3=M3FD8%O4=M3FD8SLL%O5=M3FD8SLL%O6=M3FD8SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M3FD8SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=Z%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Apple Mac OS X 10.4.8 (Tiger) on x86 Core Duo (first-gen Intel iMac 17"/1.83): Darwin 8.8.1 Darwin Kernel Version 8.8.1: Mon Sep 25 19:42:00 PDT 2006 root:xnu-792.13.8.obj~1/RELEASE_I386 i386 i386)
# Darwin 8.8.0 Darwin Kernel Version 8.8.0: Fri Sep  8 17:18:57 PDT 2006; root:xnu-792.12.6.obj~1/RELEASE_PPC Power Macintosh powerpc
# Mac OS X Server 10.4.9 PowerPC Darwin 8.9.0
# Darwin 8.9.1 Darwin Kernel Version 8.9.1: Thu Feb 22 20:58:18 PST 2007; root:xnu-792.18.15~1/RELEASE_PPC Power Macintosh powerpc (MacOS 10.4.9 Server [PPC])
# OS X 10.4.8 (Intel)  -- Darwin 8.8.1 Darwin Kernel Version 8.8.1: Mon Sep 25 19:42:00 PDT 2006; root:xnu-792.13.8.obj~1/RELEASE_I386 i386 i386
# Mac OS X 10.4.10 (8R218) Darwin 8.10.0 Darwin Kernel Version 8.10.0 : Wed May 23 16:50:59 PDT 2007; root:xnu-792.21.3~1/RELEASE_PPC Power Macintosh powerpc
# Darwin 8.10.1 Darwin Kernel Version 8.10.1: Wed May 23 16:33:00 PDT 2007; root:xnu-792.22.5~1/RELEASE_I386 i386 i386
# Darwin 8.10.2 Darwin Kernel Version 8.10.2: Wed Jun 20 21:49:49 PDT 2007; root:xnu-792.22.6~1/RELEASE_I386 i386 i386
# Darwin 8.11.0 Darwin Kernel Version 8.11.0: Wed Oct 10 18:26:00 PDT 2007; root:xnu-792.24.17~1/RELEASE_PPC Power Macintosh powerpc
# Darwin 8.11.1 Darwin Kernel Version 8.11.1: Wed Oct 10 18:23:28 PDT 2007; root:xnu-792.25.20~1/RELEASE_I386 i386 i386
# AppleTV running v2.3.1
Fingerprint Apple Mac OS X 10.4.8 - 10.4.11 (Tiger) (Darwin 8.8.0 - 8.11.1)
Class Apple | Mac OS X | 10.4.X | general purpose
CPE cpe:/o:apple:mac_os_x:10.4 auto
SEQ(SP=BC-10C%GCD=1-6%ISR=C7-111%TI=I%II=I%SS=S%TS=1)
OPS(O1=M5B4NW0NNT11SLL%O2=M5B4NW0NNT11SLL%O3=M5B4NW0NNT11%O4=M5B4NW0NNT11SLL%O5=M5B4NW0NNT11SLL%O6=M5B4NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M5B4NW0SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Darwin 8.8.0 Darwin Kernel Version 8.8.0: Fri Sep  8 17:18:57 PDT 2006; root:xnu-792.12.6.obj~1/RELEASE_PPC Power Macintosh powerpc - Apple MacOS X 10.4.8 (Panther) on PPC
# Darwin 8.9.0 Darwin Kernel Version 8.9.0: Thu Feb 22 20:54:07 PST 2007; root:xnu-792.17.14~1/RELEASE_PPC Power Macintosh powerpc
Fingerprint Apple Mac OS X 10.4.8 - 10.4.9 (Tiger) (Darwin 8.8.0 - 8.9.0, PowerPC)
Class Apple | Mac OS X | 10.4.X | general purpose
CPE cpe:/o:apple:mac_os_x:10.4
SEQ(SP=FB-107%GCD=1-6%ISR=108-112%TI=I%II=I%SS=S%TS=1)
OPS(O1=M3FD8NW3NNT11SLL%O2=M3FD8NW3NNT11SLL%O3=M3FD8NW3NNT11%O4=M3FD8NW3NNT11SLL%O5=M3FD8NW3NNT11SLL%O6=M3FD8NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M3FD8NW3SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=Z%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Apple Mac OS X 10.4.9 on PowerPC G4 (1.5)
Fingerprint Apple Mac OS X 10.4.9 (Tiger) (PowerPC)
Class Apple | Mac OS X | 10.4.X | general purpose
CPE cpe:/o:apple:mac_os_x:10.4.9
SEQ(SP=103-10D%GCD=1-6%ISR=100-10E%TI=I%II=I%SS=S%TS=0|1)
OPS(O1=M3FD8NW0NNT11SLL%O2=M3FD8NW0NNT11SLL%O3=M3FD8NW0NNT11%O4=M3FD8NW0NNT11SLL%O5=M3FD8NW0NNT11SLL%O6=M3FD8NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M3FD8NW0SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Darwin 8.11.0 Darwin Kernel Version 8.11.0: Wed Oct 10 18:26:00 PDT 2007; root:xnu-792.24.17~1/RELEASE_PPC Power Macintosh powerpc
# Darwin 8.11.1 Darwin Kernel Version 8.11.1: Wed Oct 10 18:23:28 PDT 2007; root:xnu-792.25.20~1/RELEASE_I386 i386 i386
Fingerprint Apple Mac OS X 10.4.9 - 10.4.10 (Tiger) (Darwin 8.11.0 - 8.11.1, PowerPC)
Class Apple | Mac OS X | 10.4.X | general purpose
CPE cpe:/o:apple:mac_os_x:10.4 auto
SEQ(SP=F8-10A%GCD=1-6%ISR=F1-107%TI=I%TS=1)
OPS(O1=M5B4NW0NNT11SLL%O2=M5B4NW0NNT11SLL%O3=M5B4NW0NNT11%O4=M5B4NW0NNT11SLL%O5=M5B4NW0NNT11SLL%O6=M5B4NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M5B4NW0SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Mac OS X 10.5 Build 9A303
# Darwin 9.0.0 Darwin Kernel Version 9.0.0: Tue Oct  9 21:35:55 PDT 2007; root:xnu-1228~1/RELEASE_I386 i386
Fingerprint Apple Mac OS X 10.5 (Leopard) (Darwin 9.0.0)
Class Apple | Mac OS X | 10.5.X | general purpose
CPE cpe:/o:apple:mac_os_x:10.5 auto
SEQ(SP=EF-10D%GCD=1-6%ISR=101-10B%TI=I%II=I%SS=S%TS=1)
OPS(O1=M3FD8NW1NNT11SLL|M3FD8NW5NNT11SLL%O2=M3FD8NW1NNT11SLL|M3FD8NW5NNT11SLL%O3=M3FD8NW1NNT11|M3FD8NW5NNT11%O4=M3FD8NW1NNT11SLL|M3FD8NW5NNT11SLL%O5=M3FD8NW1NNT11SLL|M3FD8NW5NNT11SLL%O6=M3FD8NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M3FD8NW1SLL|M3FD8NW5SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=Z%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Darwin 9.0.0b4 Darwin Kernel Version 9.0.0b4: Wed Jul 18 23:23:23 PDT 2007; root:xnu-1155.2~1/RELEASE_I386 i386
Fingerprint Apple Mac OS X 10.5 (Leopard) (Darwin 9.0.0b4, x86)
Class Apple | Mac OS X | 10.5.X | general purpose
CPE cpe:/o:apple:mac_os_x:10.5 auto
SEQ(SP=F2-10A%GCD=1-6%ISR=FA-110%TI=RD%II=RI%TS=3)
OPS(O1=M5B4NW3NNT11SLL%O2=M5B4NW3NNT11SLL%O3=M5B4NW3NNT11%O4=M5B4NW3NNT11SLL%O5=M5B4NW3NNT11SLL%O6=M5B4NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=FFFF%O=M5B4NW3SLL%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=O%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=O%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Darwin 9.2.2 Darwin Kernel Version 9.2.2: Tue Mar  4 21:17:34 PST 2008; root:xnu-1228.4.31~1/RELEASE_I386 i386
Fingerprint Apple Mac OS X 10.5 (Leopard) (Darwin 9.2.2, x86)
Class Apple | Mac OS X | 10.5.X | general purpose
CPE cpe:/o:apple:mac_os_x:10.5 auto
SEQ(SP=FF-10B%GCD=1-6%ISR=FC-10C%TI=RD%II=RI%TS=3)
OPS(O1=M550NW2NNT11SLL%O2=M550NW2NNT11SLL%O3=M550NW2NNT11%O4=M550NW2NNT11SLL%O5=M550NW2NNT11SLL%O6=M550NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M550NW2SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=N)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Darwin 9.1.0 Darwin Kernel Version 9.1.0: Wed Oct 31 17:48:21 PDT 2007; root:xnu-1228.0.2~1/RELEASE_PPC Power Macintosh
# Darwin 9.0.0 Darwin Kernel Version 9.0.0: Tue Oct  9 21:35:55 PDT 2007; root:xnu-1228~1/RELEASE_I386 i386
# Mac OS 10.5 leopard 9A581
# Darwin 9.0.0 Darwin Kernel Version 9.0.0: Tue Oct  9 21:37:58 PDT 2007; root:xnu-1228~1/RELEASE_PPC Power Macintosh
# Darwin 9.1.0 Darwin Kernel Version 9.1.0: Wed Oct 31 17:46:22 PDT 2007; root:xnu-1228.0.2~1/RELEASE_I386 i386
# Darwin 9.2.0 Darwin Kernel Version 9.2.0: Tue Feb  5 16:15:19 PST 2008; root:xnu-1228.3.13~1/RELEASE_PPC Power Macintosh powerpc
# Darwin 9.2.0 Darwin Kernel Version 9.2.0: Tue Feb  5 16:13:22 PST 2008; root:xnu-1228.3.13~1/RELEASE_I386 i386, Mac OS X Version 10.5.2 Build 9C31
# Darwin 9.2.2 Darwin Kernel Version 9.2.2: Tue Mar  4 21:17:34 PST 2008; root:xnu-1228.4.31~1/RELEASE_I386 i386
# Darwin 9.3.0 Darwin Kernel Version 9.3.0: Fri May 23 00:49:16 PDT 2008; root:xnu-1228.5.18~1/RELEASE_I386 i386
# Darwin 9.4.0 Darwin Kernel Version 9.4.0: Mon Jun  9 19:30:53 PDT 2008; root:xnu-1228.5.20~1/RELEASE_I386 i386
# Darwin 9.5.0 Darwin Kernel Version 9.5.0: Wed Sep  3 11:29:43 PDT 2008; root:xnu-1228.7.58~1/RELEASE_I386 i386
# Darwin 9.6.0 Darwin Kernel Version 9.6.0: Mon Nov 24 17:37:00 PST 2008; root:xnu-1228.9.59~1/RELEASE_I386 i386
# 9.8.0 Darwin Kernel Version 9.8.0: Wed Jul 15 16:55:01 PDT 2009; root:xnu-1228.15.4~1/RELEASE_I386 i386
# Darwin 10.0.0 Darwin Kernel Version 10.0.0: Fri Jul 31 22:47:34 PDT 2009; root:xnu-1456.1.25~1/RELEASE_I386 i386
# Darwin 10.2.0 Darwin Kernel Version 10.2.0: Tue Nov  3 10:37:10 PST 2009; root:xnu-1486.2.11~1/RELEASE_I386 i386
# Darwin 10.3.0 Darwin Kernel Version 10.3.0: Fri Feb 26 11:58:09 PST 2010; root:xnu-1504.3.12~1/RELEASE_I386 i386, 10.6.3
# 10.6.7
Fingerprint Apple Mac OS X 10.5 (Leopard) - 10.6.7 (Snow Leopard) (Darwin 9.0.0 - 10.7.0)
Class Apple | Mac OS X | 10.5.X | general purpose
CPE cpe:/o:apple:mac_os_x:10.5 auto
Class Apple | Mac OS X | 10.6.X | general purpose
CPE cpe:/o:apple:mac_os_x:10.6 auto
SEQ(SP=F1-107%GCD=1-6%ISR=F7-10C%TI=RD%CI=RD%II=RI%TS=3)
OPS(O1=M3FD8NW[1-3]NNT11SLL%O2=M3FD8NW[1-3]NNT11SLL%O3=M3FD8NW[1-3]NNT11%O4=M3FD8NW[1-3]NNT11SLL%O5=M3FD8NW[1-3]NNT11SLL%O6=M3FD8NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M3FD8NW[1-3]SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=Z%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Darwin 9.6.9: Darwin Kernel Version 9.6.0: date; root:xnu-1228.9~1/RELEASE_I386 i386
# Darwin 9.5.0 Darwin Kernel Version 9.5.0: Wed Sep 3 11:31:44 PDT 2008; root:xnu-1228.7.58~1/RELEASE_PPC Power Macintosh
# 9.2.0 Darwin Kernel Version 9.2.0
# Darwin <host> 10.2.0 Darwin Kernel Version 10.2.0: Tue Nov  3 10:37:10 PST 2009; root:xnu-1486.2.11~1/RELEASE_I386 i386
# Apple iOS 4.0.1
# iPad iOS 4.2.1
# Darwin 10.7.0 Darwin Kernel Version 10.7.0: Sat Jan 29 15:17:16 PST 2011; root:xnu-1504.9.37~1/RELEASE_I386 i386
Fingerprint Apple Mac OS X 10.5.2 (Leopard) - 10.6.7 (Snow Leopard) or iOS 4.0.1 - 4.2.1 (Darwin 9.2.0 - 10.7.0)
Class Apple | Mac OS X | 10.5.X | general purpose
CPE cpe:/o:apple:mac_os_x:10.5 auto
Class Apple | Mac OS X | 10.6.X | general purpose
CPE cpe:/o:apple:mac_os_x:10.6 auto
Class Apple | iOS | 4.X | general purpose
CPE cpe:/o:apple:iphone_os:4 auto
SEQ(SP=F3-107%GCD=1-6%ISR=FA-110%TI=RD%CI=RI%II=RI%TS=3)
OPS(O1=M5B4NW2NNT11SLL|M5B4NW3NNT11SLL%O2=M5B4NW2NNT11SLL|M5B4NW3NNT11SLL%O3=M5B4NW2NNT11|M5B4NW3NNT11%O4=M5B4NW2NNT11SLL|M5B4NW3NNT11SLL%O5=M5B4NW2NNT11SLL|M5B4NW3NNT11SLL%O6=M5B4NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M5B4NW2SLL|M5B4NW3SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Darwin 9.3.0 Darwin Kernel Version 9.3.0: Fri May 23 00:51:20 PDT 2008; root:xnu-1228.5.18~1/RELEASE_PPC Power Macintosh
Fingerprint Apple Mac OS X 10.5.3 (Leopard) (Darwin 9.3.0)
Class Apple | Mac OS X | 10.5.X | general purpose
CPE cpe:/o:apple:mac_os_x:10.5.3
SEQ(SP=FA-10A%GCD=1-6%ISR=FC-114%TI=RD%II=RI%TS=3)
OPS(O1=M3FD8NW3NNT11SLL%O2=M3FD8NW3NNT11SLL%O3=M3FD8NW3NNT11%O4=M3FD8NW3NNT11SLL%O5=M3FD8NW3NNT11SLL%O6=M3FD8NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M3FD8NW3SLL%CC=Y%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=Z%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Darwin 9.3.0 Darwin Kernel Version 9.3.0: Fri May 23 00:49:16 PDT 2008; root:xnu-1228.5.18~1/RELEASE_I386 i386
# Darwin 9.4.0 Darwin Kernel Version 9.4.0: Mon Jun  9 19:30:53 PDT 2008; root:xnu-1228.5.20~1/RELEASE_I386 i386
Fingerprint Apple Mac OS X 10.5.3 - 10.5.4 (Leopard) (Darwin 9.3.0 - 9.4.0)
Class Apple | Mac OS X | 10.5.X | general purpose
CPE cpe:/o:apple:mac_os_x:10.5 auto
SEQ(SP=ED-109%GCD=1-6%ISR=F5-10D%TI=RD%II=RI%TS=3)
OPS(O1=M5B4NW3NNT11SLL%O2=M5B4NW3NNT11SLL%O3=M5B4NW3NNT11%O4=M5B4NW3NNT11SLL%O5=M5B4NW3NNT11SLL%O6=M5B4NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M5B4NW3SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=Z%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Darwin 9.4.0 Darwin Kernel Version 9.4.0: Mon Jun  9 19:30:53 PDT 2008; root:xnu-1228.5.20~1/RELEASE_I386 i386, Mac OS X 10.5.4
Fingerprint Apple Mac OS X 10.5.4 (Leopard) (Darwin 9.4.0)
Class Apple | Mac OS X | 10.5.X | general purpose
CPE cpe:/o:apple:mac_os_x:10.5.4
SEQ(SP=F3-10D%GCD=1-6%ISR=100-10E%TI=RD%II=RI%TS=3)
OPS(O1=M5B4NW3NNT11SLL%O2=M5B4NW3NNT11SLL%O3=M5B4NW3NNT11%O4=M5B4NW3NNT11SLL%O5=M5B4NW3NNT11SLL%O6=M5B4NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M5B4NW3SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A|O%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=O|S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=O%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=O%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Darwin 9.4.0 Darwin Kernel Version 9.4.0: Mon Jun  9 19:30:53 PDT 2008; root:xnu-1228.5.20~1/RELEASE_I386 i386
Fingerprint Apple Mac OS X 10.5.4 (Leopard) (Darwin 9.4.0)
Class Apple | Mac OS X | 10.5.X | general purpose
CPE cpe:/o:apple:mac_os_x:10.5.4
SEQ(SP=F0-104%GCD=1-6%ISR=FC-10A%TI=RD%II=RI%TS=3)
OPS(O1=M3FD8NW3NNT11SLL%O2=M3FD8NW3NNT11SLL%O3=M3FD8NW3NNT11%O4=M3FD8NW3NNT11SLL%O5=M3FD8NW3NNT11SLL%O6=M3FD8NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=2F-39%TG=40%W=FFFF%O=M3FD8NW3SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=2F-39%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=2F-39%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=2F-39%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=2F-39%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=2F-39%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=2F-39%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=Z%RUCK=0%RUD=G)
IE(DFI=S%T=2F-39%TG=40%CD=S)

# Darwin Kernel Version 9.5.0: Wed Sep  3 11:29:43 PDT 2008; root:xnu-1228.7.58~1/RELEASE_I386 i386
Fingerprint Apple Mac OS X 10.5.5 (Leopard) (Darwin 9.5.0)
Class Apple | Mac OS X | 10.5.X | general purpose
CPE cpe:/o:apple:mac_os_x:10.5.5
SEQ(SP=FD-107%GCD=1-6%ISR=FE-108%TI=RD%TS=3)
OPS(O1=M5B4NW3NNT11SLL%O2=M5B4NW3NNT11SLL%O3=NNT11|M5B4NW3NNT11%O4=NNT11|M5B4NW3NNT11SLL%O5=M5B4NW3NNT11SLL%O6=NNT11|M5B4NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=|M5B4NW3SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=O|S+%F=A|AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=O|S+%F=AR%O=%RD=0%Q=)
T6(R=N)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=0-FFFF%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Darwin 9.5.0 Darwin Kernel Version 9.5.0: Wed Sep  3 11:29:43 PDT 2008; root:xnu-1228.7.58~1/RELEASE_I386 i386
# Darwin 9.6.0 Darwin Kernel Version 9.6.0: Mon Nov 24 17:37:00 PST 2008; root:xnu-1228.9.59~1/RELEASE_I386 i386
# Darwin 10.0.0 Darwin Kernel Version 10.0.0: Fri Jul 31 22:47:34 PDT 2009; root:xnu-1456.1.25~1/RELEASE_I386 i386
# Darwin 10.6.0 Darwin Kernel Version 10.6.0: Wed Nov 10 18:13:17 PST 2010; root:xnu-1504.9.26~3/RELEASE_I386 i386
Fingerprint Apple Mac OS X 10.5.5 (Leopard) - 10.6.6 (Snow Leopard) (Darwin 9.5.0 - 10.6.0)
Class Apple | Mac OS X | 10.5.X | general purpose
CPE cpe:/o:apple:mac_os_x:10.5 auto
Class Apple | Mac OS X | 10.6.X | general purpose
CPE cpe:/o:apple:mac_os_x:10.6 auto
SEQ(SP=FA-108%GCD=1-6%ISR=FC-112%TI=RD%II=RI%TS=3)
OPS(O1=M5B4NW3NNT11SLL%O2=M5B4NW3NNT11SLL%O3=M5B4NW3NNT11%O4=M5B4NW3NNT11SLL%O5=M5B4NW3NNT11SLL%O6=M5B4NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M5B4NW3SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=N)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Darwin 9.5.0 Darwin Kernel Version 9.5.0: Wed Sep 3  11:31:33 PDT 2008; root:xnu-1228.7.58~1/RELEASE_PPC Power Macintosh
Fingerprint Apple Mac OS X 10.5.6 (Leopard) (Darwin 9.5.0)
Class Apple | Mac OS X | 10.5.X | general purpose
CPE cpe:/o:apple:mac_os_x:10.5.6
SEQ(SP=F5-109%GCD=1-6%ISR=F9-10D%TI=RD%II=RI%TS=3|5|6)
OPS(O1=M524NW2NNT11SLL%O2=M524NW2NNT11SLL%O3=M524NW2NNT11%O4=NNT11|M524NW2NNT11SLL%O5=M524NW2NNT11SLL%O6=M524NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M524NW2SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Darwin 9.6.0 Darwin Kernel Version 9.6.0: Mon Nov 24 17:39:01 PST 2008; root:xnu-1228.9.59~1/RELEASE_PPC Power Macintosh
Fingerprint Apple Mac OS X 10.5.6 (Leopard) (Darwin 9.6.0)
Class Apple | Mac OS X | 10.5.X | general purpose
CPE cpe:/o:apple:mac_os_x:10.5.6
SEQ(SP=F6-108%GCD=1-6%ISR=FF-10B%TI=RD%TS=3)
OPS(O1=M5B4NW1NNT11SLL%O2=M5B4NW1NNT11SLL%O3=M5B4NW1NNT11%O4=M5B4NW1NNT11SLL%O5=M5B4NW1NNT11SLL%O6=M5B4NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=5F-69%TG=80%W=FFFF%O=M5B4NW1SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=5F-69%TG=80%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=5F-69%TG=80%W=0%S=A|O%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=5F-69%TG=80%W=0%S=Z%A=O|S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=5F-69%TG=80%W=0%S=A|O%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=Y%T=5F-69%TG=80%W=0%S=Z%A=O|S%F=AR%O=%RD=0%Q=)
U1(DF=Y%T=5F-69%TG=80%IPL=38%UN=0%RIPL=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=Y%T=5F-69%TG=80%CD=S)

# Darwin 9.6.0 Darwin Kernel Version 9.6.0: Mon Nov 24 17:37:00 PST 2008; root:xnu-1228.9.59~1/RELEASE_I386 i386
# 9.7.0 Darwin Kernel Version 9.7.0: Tue Mar 31 22:52:17 PDT 2009; root:xnu-1228.12.14~1/RELEASE_I386 i386
# Darwin 10.2.0 Darwin Kernel Version 10.2.0: Tue Nov  3 10:37:10 PST 2009; root:xnu-1486.2.11~1/RELEASE_I386 i386
Fingerprint Apple Mac OS X 10.5.6 (Leopard) - 10.6.2 (Snow Leopard) (Darwin 9.6.0 - 10.2.0)
Class Apple | Mac OS X | 10.5.X | general purpose
CPE cpe:/o:apple:mac_os_x:10.5 auto
Class Apple | Mac OS X | 10.6.X | general purpose
CPE cpe:/o:apple:mac_os_x:10.6 auto
SEQ(SP=F5-10B%GCD=1-6%ISR=F8-10C%TI=RD%II=RI%TS=3)
OPS(O1=M3FD8NW2NNT11SLL|M3FD8NW3NNT11SLL%O2=M3FD8NW2NNT11SLL|M3FD8NW3NNT11SLL%O3=M3FD8NW2NNT11|M3FD8NW3NNT11%O4=M3FD8NW2NNT11SLL|M3FD8NW3NNT11SLL%O5=M3FD8NW2NNT11SLL|M3FD8NW3NNT11SLL%O6=M3FD8NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M3FD8NW2SLL|M3FD8NW3SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Darwin Kernel Version 9.7.0: Tue Mar 31 22:52:17 PDT 2009; root:xnu-1228.12.14~1/RELEASE_I386 i386
Fingerprint Apple Mac OS X 10.5.7 (Leopard) (Darwin 9.7.0)
Class Apple | Mac OS X | 10.5.X | general purpose
CPE cpe:/o:apple:mac_os_x:10.5.7
SEQ(SP=F4-10E%GCD=1-6%ISR=FD-10D%TI=RD%II=RI%TS=3)
OPS(O1=M556NW3NNT11SLL%O2=M556NW3NNT11SLL%O3=M556NW3NNT11%O4=M556NW3NNT11SLL%O5=M556NW3NNT11SLL%O6=M556NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M556NW3SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Darwin 9.8.0 Darwin Kernel Version 9.8.0: Wed Jul 15 16:55:01 PDT 2009; root:xnu-1228.15.4~1/RELEASE_I386 i386
Fingerprint Apple Mac OS X 10.5.8 (Leopard) (Darwin 9.8.0)
Class Apple | Mac OS X | 10.5.X | general purpose
CPE cpe:/o:apple:mac_os_x:10.5.8 auto
SEQ(SP=F1-FB%GCD=1-6%ISR=F7-101%TI=RD%II=RI%TS=3)
OPS(O1=M5B4NW3NNT11SLL%O2=M5B4NW3NNT11SLL%O3=M5B4NW2NNT11%O4=M5B4NW3NNT11SLL%O5=M5B4NW3NNT11SLL%O6=M5B4NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M5B4NW2SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=N)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Darwin 9.8.0 Darwin Kernel Version 9.8.0: Wed Jul 15 16:55:01 PDT 2009; root:xnu-1228.15.4~1/RELEASE_I386 i386
Fingerprint Apple Mac OS X 10.5.8 (Leopard) (Darwin 9.8.0)
Class Apple | Mac OS X | 10.5.X | general purpose
CPE cpe:/o:apple:mac_os_x:10.5.8
SEQ(SP=F7-101%GCD=1-6%ISR=FE-10A%TI=RD%II=RI%TS=4)
OPS(O1=M3FD8NW3NNT11SLL%O2=M3FD8NW3NNT11SLL%O3=M3FD8NW3NNT11%O4=M3FD8NW3NNT11SLL%O5=M3FD8NW3NNT11SLL%O6=M3FD8NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M3FD8NW3SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=Z%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Darwin 9.8.0 Darwin Kernel Version 9.8.0: Wed Jul 15 16:55:01 PDT 2009; root:xnu-1228.15.4~1/RELEASE_I386 i386, 10.5.8
Fingerprint Apple Mac OS X 10.5.8 (Leopard) (Darwin 9.8.0)
Class Apple | Mac OS X | 10.5.X | general purpose
CPE cpe:/o:apple:mac_os_x:10.5.8
SEQ(SP=FF-109%GCD=1-6%ISR=FF-113%TI=RD%II=RI%TS=3)
OPS(O1=M57CNW3NNT11SLL%O2=M57CNW3NNT11SLL%O3=M57CNW3NNT11%O4=M57CNW3NNT11SLL%O5=M57CNW3NNT11SLL%O6=M57CNNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M57CNW3SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=N)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=0-FFFF%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Darwin 9.8.0 Darwin Kernel Version 9.8.0: Wed Jul 15 16:57:01 PDT 2009; root:xnu-1228.15.4~1/RELEASE_PPC Power Macintosh
Fingerprint Apple Mac OS X 10.5.8 (Leopard) (Darwin 9.8.0)
Class Apple | Mac OS X | 10.5.X | general purpose
CPE cpe:/o:apple:mac_os_x:10.5.8
SEQ(SP=EC-10A%GCD=1-6%ISR=FF-10D%TI=RD%CI=RD%II=RI%TS=3)
OPS(O1=M578NW3NNT11SLL%O2=M578NW3NNT11SLL%O3=M578NW3NNT11%O4=M578NW3NNT11SLL%O5=M578NW3NNT11SLL%O6=M578NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M578NW3SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Darwin ww8.welcomeclient.com 9.8.0 Darwin Kernel Version 9.8.0: Wed Jul 15 16:55:01 PDT 2009; root:xnu-1228.15.4~1/RELEASE_I386 i386
Fingerprint Apple Mac OS X 10.5.8 (Leopard) (Darwin 9.8.0)
Class Apple | Mac OS X | 10.5.X | general purpose
CPE cpe:/o:apple:mac_os_x:10.5.8 auto
SEQ(SP=100-10A%GCD=1-6%ISR=105-10F%TI=RD%II=RI%TS=U)
OPS(O1=M574SLL%O2=M574SLL%O3=M574%O4=M574SLL%O5=M574SLL%O6=M574SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M574SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=N)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Darwin 9.8.0 Darwin Kernel Version 9.8.0: Wed Jul 15 16:57:01 PDT 2009; root:xnu-1228.15.4~1/RELEASE_PPC Power Macintosh
Fingerprint Apple Mac OS X 10.5.8 (Leopard) (Darwin 9.8.0)
Class Apple | Mac OS X | 10.5.X | general purpose
CPE cpe:/o:apple:mac_os_x:10.5.8 auto
SEQ(SP=F7-101%GCD=1-6%ISR=F8-102%TI=RD%CI=RI%II=RI%TS=3)
OPS(O1=M5B4NW1NNT11SLL%O2=M5B4NW1NNT11SLL%O3=M5B4NW1NNT11%O4=M5B4NW1NNT11SLL%O5=M5B4NW1NNT11SLL%O6=M5B4NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M5B4NW1SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# PowerMac G5 running OS X Server 10.5 build 9A284
Fingerprint Apple Mac OS X Server 10.5 (Leopard) pre-release build 9A284
Class Apple | Mac OS X | 10.5.X | general purpose
CPE cpe:/o:apple:mac_os_x_server:10.5
SEQ(SP=D6-100%GCD=1-6%ISR=102-10C%TI=I%II=I%SS=S%TS=1)
OPS(O1=M5B4NW5NNT11SLL%O2=M5B4NW5NNT11SLL%O3=M5B4NW5NNT11%O4=M5B4NW5NNT11SLL%O5=M5B4NW5NNT11SLL%O6=M5B4NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M5B4NW5SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Darwin 9.1.0 Darwin Kernel Version 9.1.0: Wed Oct 31 17:48:21 PDT 2007; root:xnu-1228.0.2~1/RELEASE_PPC Power Macintosh (Mac OS X Server 10.5.1)
Fingerprint Apple Mac OS X Server 10.5.1 (Leopard) (Darwin 9.1.0)
Class Apple | Mac OS X | 10.5.X | general purpose
CPE cpe:/o:apple:mac_os_x_server:10.5.1
SEQ(SP=FB-105%GCD=1-6%ISR=FD-10D%TI=RD%II=RI%TS=3|5)
OPS(O1=M57CNW2NNT11SLL%O2=M57CNW2NNT11SLL%O3=M57CNW2NNT11%O4=M57CNW2NNT11SLL%O5=M57CNW2NNT11SLL%O6=M57CNNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M57CNW2SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Darwin 10.2.0 Darwin Kernel Version 10.2.0: Tue Nov  3 10:37:10 PST 2009; root:xnu-1486.2.11~1/RELEASE_I386 i386
# Darwin 10.4.0 Darwin Kernel Version 10.4.0: Fri Apr 23 18:28:53 PDT 2010; root:xnu-1504.7.4~1/RELEASE_I386 i386
# Darwin 9.8.0 Darwin Kernel Version 9.8.0: Wed Jul 15 16:55:01 PDT 2009; root:xnu-1228.15.4~1/RELEASE_I386 i386, Mac OS 10.5.8 (9L31a)
Fingerprint Apple Mac OS X 10.5.8 (Leopard) - 10.6.4 (Snow Leopard) (Darwin 9.8.0 - 10.4.0)
Class Apple | Mac OS X | 10.6.X | general purpose
CPE cpe:/o:apple:mac_os_x:10.6 auto
SEQ(SP=E7-105%GCD=1-6%ISR=F5-10D%TI=RD%II=RI%TS=U)
OPS(O1=M5B4SLL%O2=M5B4SLL%O3=M5B4%O4=M5B4SLL%O5=M5B4SLL%O6=M5B4SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M5B4SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# 10.6
# Darwin Kernel Version 10.8.0: Tue Jun  7 16:33:36 PDT 2011; root:xnu-1504.15.3~1/RELEASE_I386 i386
Fingerprint Apple Mac OS X 10.6 (Snow Leopard) (Darwin 10.0.0 - 10.8.0)
Class Apple | Mac OS X | 10.6.X | general purpose
CPE cpe:/o:apple:mac_os_x:10.6 auto
SEQ(SP=FC-108%GCD=1-6%ISR=100-10E%TI=RD%CI=RD%II=RI%TS=3)
OPS(O1=M[56A-5B4]NW3NNT11SLL%O2=M[56A-5B4]NW3NNT11SLL%O3=M[56A-5B4]NW3NNT11%O4=M[56A-5B4]NW3NNT11SLL%O5=M[56A-5B4]NW3NNT11SLL%O6=M[56A-5B4]NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M[56A-5B4]NW3SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Darwin 10.0.0 Darwin Kernel Version 10.0.0: Fri Jul 31 22:47:34 PDT 2009; root:xnu-1456.1.25~1/RELEASE_I386 i386
Fingerprint Apple Mac OS X 10.6 (Snow Leopard) (Darwin 10.0.0)
Class Apple | Mac OS X | 10.6.X | general purpose
CPE cpe:/o:apple:mac_os_x:10.6 auto
SEQ(SP=FC-10A%GCD=1-6%ISR=F7-111%TI=RD%CI=RD|RI%II=RI%TS=U)
OPS(O1=M3FD8SLL%O2=M3FD8SLL%O3=M3FD8%O4=M3FD8SLL%O5=M3FD8SLL%O6=M3FD8SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M3FD8SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=Z%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Darwin 10.0.0 Darwin Kernel Version 10.0.0: Fri Jul 31 22:47:34 PDT 2009; root:xnu-1456.1.25~1/RELEASE_I386 i386
Fingerprint Apple Mac OS X 10.6 (Snow Leopard) (Darwin 10.0.0)
Class Apple | Mac OS X | 10.6.X | general purpose
CPE cpe:/o:apple:mac_os_x:10.6 auto
SEQ(TI=RI%CI=RD|RI%II=RI%SS=S%TS=3)
OPS(O1=M3FD8NW3NNT11SLL%O2=M3FD8NW3NNT11SLL%O3=M3FD8NW3NNT11%O4=M3FD8NW3NNT11SLL%O5=M3FD8NW3NNT11SLL%O6=M3FD8NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M3FD8NW3SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=Z%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Darwin 10.2.0 Darwin Kernel Version 10.2.0: Tue Nov  3 10:35:19 PST 2009; root:xnu-1486.2.11~1/RELEASE_X86_64 x86_64
Fingerprint Apple Mac OS X 10.6.2 (Snow Leopard) (Darwin 10.2.0)
Class Apple | Mac OS X | 10.6.X | general purpose
CPE cpe:/o:apple:mac_os_x:10.6.2
SEQ(SP=FA-10A%GCD=1-6%ISR=102-10C%TI=RD|RI%II=RI%SS=O%TS=3)
OPS(O1=M5B4NW2NNT11SLL%O2=M5B4NW2NNT11SLL%O3=M5B4NW2NNT11%O4=M5B4NW2NNT11SLL%O5=M5B4NW2NNT11SLL%O6=M5B4NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M5B4NW2SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=O%A=Z%F=R%RD=0)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=O%F=AR%RD=0)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Darwin 10.2.0 Darwin Kernel Version 10.2.0: Tue Nov 3 10:37:10 PST 2009; root:xnu-1486.2.11~1/RELEASE_I386 i386
Fingerprint Apple Mac OS X 10.6.2 (Snow Leopard) (Darwin 10.2.0)
Class Apple | Mac OS X | 10.6.X | general purpose
CPE cpe:/o:apple:mac_os_x:10.6.2
SEQ(SP=100-10A%GCD=1-6%ISR=FD-10F%TI=RD%CI=RD%II=RI%TS=3)
OPS(O1=MF78NW3NNT11SLL%O2=MF78NW3NNT11SLL%O3=MF78NW3NNT11%O4=MF78NW3NNT11SLL%O5=MF78NW3NNT11SLL%O6=MF78NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=MF78NW3SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# 10.2.0 Darwin Kernel Version 10.2.0: Tue Nov  3 10:37:10 PST 2009; root:xnu-1486.2.11~1/RELEASE_I386 i386
Fingerprint Apple Mac OS X 10.6.2 (Snow Leopard) (Darwin 10.2.0)
Class Apple | Mac OS X | 10.6.X | general purpose
CPE cpe:/o:apple:mac_os_x:10.6.2
SEQ(SP=F7-109%GCD=1-6%ISR=F1-111%TI=RD%CI=RI%II=I%TS=3)
OPS(O1=M218NW3NNT11SLL%O2=M218NW3NNT11SLL%O3=M218NW3NNT11%O4=M218NW3NNT11SLL%O5=M218NW3NNT11SLL%O6=M218NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M218NW3SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
T7(R=N)
U1(R=N)
IE(DFI=N%T=3B-45%TG=40%CD=Z)

# Darwin 10.3.0 Darwin Kernel Version 10.3.0: Fri Feb 26 11:58:09 PST 2010; root:xnu-1504.3.12~1/RELEASE_I386 i386
Fingerprint Apple Mac OS X 10.6.3 (Snow Leopard) (Darwin 10.3.0)
Class Apple | Mac OS X | 10.6.X | general purpose
CPE cpe:/o:apple:mac_os_x:10.6.3
SEQ(SP=EB-10B%GCD=1-6%ISR=EE-10C%TI=RD%CI=RI%II=RI%TS=3)
OPS(O1=M5ACNW3NNT11SLL%O2=M5ACNW3NNT11SLL%O3=M5ACNW3NNT11%O4=M5ACNW3NNT11SLL%O5=M5ACNW3NNT11SLL%O6=M5ACNNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M5ACNW3SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=37EE%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Darwin 10.4.0 Darwin Kernel Version 10.4.0: Fri Apr 23 18:28:53 PDT 2010; root:xnu-1504.7.4~1/RELEASE_I386 i386
Fingerprint Apple Mac OS X 10.6.4 (Snow Leopard) (Darwin 10.4.0)
Class Apple | Mac OS X | 10.6.X | general purpose
CPE cpe:/o:apple:mac_os_x:10.6.4
SEQ(SP=102-10C%GCD=1-6%ISR=105-10F%TI=RD%CI=RD%II=RI%TS=3)
OPS(O1=M3FD8NW3NNT11SLL%O2=M3FD8NW3NNT11SLL%O3=M3FD8NW3NNT11%O4=M3FD8NW3NNT11SLL%O5=M3FD8NW3NNT11SLL%O6=M3FD8NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M3FD8NW3SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%S=O%A=S+%F=AS%O=M3FD8NW3NNT11SLL%RD=0%Q=)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Darwin 10.5.0 Darwin Kernel Version 10.5.0: Fri Nov  5 23:20:39 PDT 2010; root:xnu-1504.9.17~1/RELEASE_I386 i38
Fingerprint Apple Mac OS X 10.6.5 (Snow Leopard) (Darwin 10.5.0)
Class Apple | Mac OS X | 10.6.X | general purpose
CPE cpe:/o:apple:mac_os_x:10.6.5
SEQ(SP=F8-102%GCD=1-6%ISR=FD-10B%TI=RD%CI=RD|RI%II=RI%TS=3)
OPS(O1=M558NW2NNT11SLL%O2=M558NW2NNT11SLL%O3=M558NW2NNT11%O4=M558NW2NNT11SLL%O5=M558NW2NNT11SLL%O6=M558NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M558NW2SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Darwin 10.5.0 Darwin Kernel Version 10.5.0: Fri Nov  5 23:20:39 PDT 2010; root:xnu-1504.9.17~1/RELEASE_I386 i386
Fingerprint Apple Mac OS X 10.6.5 (Snow Leopard) (Darwin 10.5.0)
Class Apple | Mac OS X | 10.6.X | general purpose
CPE cpe:/o:apple:mac_os_x:10.6.5
SEQ(CI=RD%II=RI%TS=3)
OPS(O1=M5B4NW3NNT11SLL%O2=M5B4NW3NNT11SLL%O3=M5B4NW3NNT11%O4=M5B4NW3NNT11SLL%O5=M5B4NW3NNT11SLL%O6=M5B4NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=N)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%RD=0)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Darwin 10.6.0 Darwin Kernel Version 10.6.0: Sun Jan  9 16:31:48 EST 2011; legacy kernel v6 :xnu-1504.9.26/BUILD/obj/RELEASE_I386 i386, Mac OS X 10.6.6 (Hackintosh Build)
Fingerprint Apple Mac OS X 10.6.6 (Snow Leopard) (Darwin 10.6.0)
Class Apple | Mac OS X | 10.6.X | general purpose
CPE cpe:/o:apple:mac_os_x:10.6.6
SEQ(SP=C4-CE%GCD=1-6%ISR=CA-D4%TI=Z%CI=RD%II=I%TS=7)
OPS(O1=M5B4ST11NW0%O2=M5B4ST11NW0%O3=M5B4NNT11NW0%O4=M5B4ST11NW0%O5=M5B4ST11NW0%O6=M5B4ST11)
WIN(W1=16A0%W2=16A0%W3=16A0%W4=16A0%W5=16A0%W6=16A0)
ECN(R=Y%DF=Y%T=3C-46%TG=40%W=16D0%O=M5B4NNSNW0%CC=Y%Q=)
T1(R=Y%DF=Y%T=3C-46%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%T=3C-46%TG=40%W=16A0%S=O%A=S+%F=AS%O=M5B4ST11NW0%RD=0%Q=)
T4(R=Y%DF=Y%T=3C-46%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=N%T=3C-46%TG=40%CD=S)

# Darwin 10.7.0 Darwin Kernel Version 10.7.0: Sat Jan 29 15:17:16 PST 2011; root:xnu-1504.9.37~1/RELEASE_I386 i386
Fingerprint Apple Mac OS X 10.6.7 (Snow Leopard) (Darwin 10.7.0)
Class Apple | Mac OS X | 10.6.X | general purpose
CPE cpe:/o:apple:mac_os_x:10.6.7
SEQ(SP=F3-107%GCD=1-6%ISR=F7-10D%TI=RD%II=RI%TS=3)
OPS(O1=M3FD8NW3NNT11SLL%O2=M3FD8NW3NNT11SLL%O3=M3FD8NW3NNT11%O4=M3FD8NW3NNT11SLL%O5=M3FD8NW3NNT11SLL%O6=M3FD8NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=30-3A%TG=40%W=FFFF%O=M3FD8NW3SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=30-3A%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=30-3A%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=30-3A%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=30-3A%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=30-3A%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=30-3A%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=30-3A%TG=40%CD=S)

# Darwin 10.7.0 Darwin Kernel Version 10.7.0: Sat Jan 29 15:17:16 PST 2011; root:xnu-1504.9.37~1/RELEASE_I386 i386
Fingerprint Apple Mac OS X 10.6.7 (Snow Leopard) (Darwin 10.7.0)
Class Apple | Mac OS X | 10.6.X | general purpose
CPE cpe:/o:apple:mac_os_x:10.6.7
SEQ(SP=F7-101%GCD=1-6%ISR=F9-103%TI=RD%II=RI%TS=3)
OPS(O1=M5B4NW3NNT11SLL%O2=M5B4NW3NNT11SLL%O3=M5B4NW3NNT11%O4=M5B4NW3NNT11SLL%O5=M5B4NW3NNT11SLL%O6=M5B4NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M5B4NW2SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=N)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Darwin 10.8.0 Darwin Kernel Version 10.8.0: Tue Jun  7 16:32:41 PDT 2011; root:xnu-1504.15.3~1/RELEASE_X86_64 x86_64
Fingerprint Apple Mac OS X 10.6.8 (Leopard) (Darwin 10.8.0)
Class Apple | Mac OS X | 10.6.X | general purpose
CPE cpe:/o:apple:mac_os_x:10.6.8 auto
SEQ(SP=FB-109%GCD=1-6%ISR=100-10A%TI=RD%CI=RD%II=RI%TS=3)
OPS(O1=M2300NW3NNT11SLL%O2=M2300NW3NNT11SLL%O3=M2300NW3NNT11%O4=M2300NW3NNT11SLL%O5=M2300NW3NNT11SLL%O6=M2300NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M2300NW3SLL%CC=N)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%RD=0)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%RD=0)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%RD=0)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%RD=0)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Darwin 10.8.0 Darwin Kernel Version 10.8.0: Tue Jun  7 16:33:36 PDT 2011; root:xnu-1504.15.3~1/RELEASE_I386 i386, Mac OS X Server 10.6.8
Fingerprint Apple Mac OS X 10.6.8 (Snow Leopard) (Darwin 10.8.0)
Class Apple | Mac OS X | 10.6.X | general purpose
CPE cpe:/o:apple:mac_os_x:10.6.8 auto
SEQ(SP=FE-108%GCD=1-6%ISR=FF-10D%TI=RD%II=RI%TS=3)
OPS(O1=M5B4NW3NNT11SLL%O2=M578NW3NNT11SLL%O3=M280NW3NNT11%O4=M22CNW3NNT11SLL%O5=M218NW3NNT11SLL%O6=M109NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M5B4NW3SLL%CC=N)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%RD=0)
T6(R=N)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Darwin 10.8.0 Darwin Kernel Version 10.8.0: Tue Jun  7 16:33:36 PDT 2011; root:xnu-1504.15.3~1/RELEASE_I386 i386
Fingerprint Apple Mac OS X 10.6.8 (Snow Leopard) (Darwin 10.8.0)
Class Apple | Mac OS X | 10.6.X | general purpose
CPE cpe:/o:apple:mac_os_x:10.6.8
SEQ(SP=F0-104%GCD=1-6%ISR=F3-10B%TI=RD%CI=RI%II=RI%TS=3)
OPS(O1=M546NW3NNT11SLL%O2=M546NW3NNT11SLL%O3=M546NW3NNT11%O4=M546NW3NNT11SLL%O5=M546NW3NNT11SLL%O6=M546NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M546NW2SLL|M546NW3SLL%CC=N)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%RD=0)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%RD=0)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%RD=0)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Darwin 10.8.0 Darwin Kernel Version 10.8.0: Tue Jun 7 16:33:36 PDT 2011; root:xnu-1504.15.3~1/release_I386 i386
Fingerprint Apple Mac OS X 10.6.8 (Snow Leopard) (Darwin 10.8.0)
Class Apple | Mac OS X | 10.6.X | general purpose
CPE cpe:/o:apple:mac_os_x:10.6.8
SEQ(SP=F4-106%GCD=1-6%ISR=FD-10D%TI=RD%CI=RD%II=RI%TS=3|5|6)
OPS(O1=M5ACNW2NNT11SLL%O2=M5ACNW2NNT11SLL%O3=M5ACNW2NNT11%O4=M5ACNW2NNT11SLL%O5=M5ACNW2NNT11SLL%O6=M5ACNNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M5ACNW2SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Darwin Kernel Version 10.8.0: Tue Jun  7 16:33:36 PDT 2011; root:xnu-1504.15.3~1/RELEASE_I386 i386
Fingerprint Apple Mac OS X 10.6.8 (Snow Leopard) (Darwin 10.8.0)
Class Apple | Mac OS X | 10.6.X | general purpose
CPE cpe:/o:apple:mac_os_x:10.6.8 auto
SEQ(SP=FC-106%GCD=1-6%ISR=FC-10E%TI=RD%CI=RD%II=RI%TS=3)
OPS(O1=M56ANW3NNT11SLL%O2=M56ANW3NNT11SLL%O3=M56ANW3NNT11%O4=M56ANW3NNT11SLL%O5=M56ANW3NNT11SLL%O6=M56ANNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M56ANW3SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Deletion candidate: too broad
# iOS 5
# iPad2 iOS 5 beta 5 (9A5274d)
# 3GS iPhone after iOS 5 update + RedSnow 0.9.9.b.5 Jailbreak, Darwin iPhone 11.0.0 Darwin Kernel Version 11.0.0: Thu Sep 15 23:32:27 PDT 2011; root:xnu-1878.4.43~2/RELEASE_ARM_S5L8920X iPhone2,1 arm N88AP Darwin
# 2nd Generation AppleTV running iOS 4.4.2
# iPad iOS v5.0 9A334
# iPhone 4S, iOS 5.0.1 not jailbroken
# IPHONE 3Gs IOS 5.1
# ipad 2, ios 5.1 (9b176)
# iPad 2 (WiFi-only, no GSM) running iOS 5.1 (release 9B176)
# AppleTV2 running Apple TV Software v4.4.4 (3330)
# OSX Mountain Lion 10.8.2
# Apple TV Model MC572LL/A, Software 5.1 (5201)
# Darwin 12.2.0 Darwin Kernel Version 12.2.0: Sat Aug 25 00:48:52 PDT 2012; root:xnu-2050.18.24~1/RELEASE_X86_64 x86_64
# Darwin 12.2.1 Darwin Kernel Version 12.2.1: Thu Oct 18 12:13:47 PDT 2012; root:xnu-2050.20.9~1/RELEASE_X86_64 x86_64
# iPad iOS 6.1 Jailbreaked
# iPad 3 (Model MC705LL/A), running iOS 6.1.2 (10B146)
# Darwin 12.3.0 Darwin Kernel Version 12.3.0: Sun Jan  6 22:37:10 PST 2013; root:xnu-2050.22.13~1/RELEASE_X86_64 x86_64
# iOS 6.1.3 (10B329) Model MC605DN/A Model F/W 04.12.05
# Darwin 12.4.0 Darwin Kernel Version 12.4.0: Wed May  1 17:57:12 PDT 2013; root:xnu-2050.24.15~1/RELEASE_X86_64 x86_64
# iMac running OSX10.8.5.
# iOS 7.0.3
# iOS 4.1
# iOS 7.1
# Darwin 12.5.0 Darwin Kernel Version 12.5.0: Sun Sep 29 13:33:47 PDT 2013; root:xnu-2050.48.12~1/RELEASE_X86_64 x86_64
# 10.9.2
# iphone 6 iOS 8.1.2
# MAC OS X 10.9.3
# Darwin 13.3.0 Darwin Kernel Version 13.3.0: Tue Jun  3 21:27:35 PDT 2014; root:xnu-2422.110.17~1/RELEASE_X86_64 x86_64
# Darwin 14.0.0 Darwin Kernel Version 14.0.0: Fri Sep 19 00:26:44 PDT 2014; root:xnu-2782.1.97~2/RELEASE_X86_64 x86_64
# iOS 8.1.3, running on an iPhone 5S.
# iOS 8.2 on an iPhone 5s
# iOS Version 8.3 (12F70)
# Darwin imac 14.1.0 Darwin Kernel Version 14.1.0: Thu Feb 26 19:26:47 PST 2015; root:xnu-2782.10.73~1/RELEASE_X86_64 x86_64
# Darwin 14.5.0 Darwin Kernel Version 14.5.0: Wed Jul 29 02:26:53 PDT 2015; root:xnu-2782.40.9~1/RELEASE_X86_64 x86_64
# iOS 9.3.2
# Darwin 16.1.0 Darwin Kernel Version 16.1.0: Mon Oct  3 14:03:15 PDT 2016; root:xnu-3789.21.3~20/RELEASE_X86_64 x86_64
# Darwin Kernel Version 16.4.0: Thu Dec 22 22:53:21 PST 2016; root:xnu-3789.41.3~3/RELEASE_X86_64 x86_64
# tvOS 7.7 (iOS 8.4.4)
Fingerprint Apple Mac OS X 10.7.0 (Lion) - 10.12 (Sierra) or iOS 4.1 - 9.3.3 (Darwin 10.0.0 - 16.4.0)
Class Apple | Mac OS X | 10.7.X | general purpose
CPE cpe:/o:apple:mac_os_x:10.7
Class Apple | OS X | 10.8.X | general purpose
CPE cpe:/o:apple:mac_os_x:10.8
Class Apple | OS X | 10.9.X | general purpose
CPE cpe:/o:apple:mac_os_x:10.9
Class Apple | OS X | 10.10.X | general purpose
CPE cpe:/o:apple:mac_os_x:10.10
Class Apple | OS X | 10.11.X | general purpose
CPE cpe:/o:apple:mac_os_x:10.11
Class Apple | macOS | 10.12.X | general purpose
CPE cpe:/o:apple:mac_os_x:10.12
Class Apple | iOS | 4.X | media device
CPE cpe:/o:apple:iphone_os:4
CPE cpe:/a:apple:apple_tv:4
Class Apple | iOS | 4.X | phone
CPE cpe:/o:apple:iphone_os:4 auto
Class Apple | iOS | 5.X | phone
CPE cpe:/o:apple:iphone_os:5 auto
Class Apple | iOS | 6.X | phone
CPE cpe:/o:apple:iphone_os:6 auto
Class Apple | iOS | 7.X | phone
CPE cpe:/o:apple:iphone_os:7 auto
Class Apple | iOS | 8.X | phone
CPE cpe:/o:apple:iphone_os:8 auto
Class Apple | iOS | 9.X | phone
CPE cpe:/o:apple:iphone_os:9 auto
SEQ(SP=E1-109%GCD=1-6%ISR=E6-112%TI=RD|RI%CI=RD|RI%II=RI%TS=8-C)
OPS(O1=M5B4NW4NNT11SLL|M5B4NW5NNT11SLL%O2=M5B4NW4NNT11SLL|M5B4NW5NNT11SLL%O3=M5B4NW4NNT11|M5B4NW5NNT11%O4=M5B4NW4NNT11SLL|M5B4NW5NNT11SLL%O5=M5B4NW4NNT11SLL|M5B4NW5NNT11SLL%O6=M5B4NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M5B4NW4SLL|M5B4NW5SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Darwin 11.3.0 Darwin Kernel Version 11.3.0: Thu Jan 12 18:47:41 PST 2012; root:xnu-1699.24.23~1/RELEASE_X86_64 x86_64
Fingerprint Apple Mac OS X 10.7.0 - 10.7.3 (Lion) (Darwin 11.0.0 - 11.3.0)
Class Apple | Mac OS X | 10.7.X | general purpose
CPE cpe:/o:apple:mac_os_x:10.7
SEQ(SP=FC-106%GCD=1-6%ISR=FF-109%TI=RD%II=RI%TS=A|C)
OPS(O1=M4B0NW2NNT11SLL%O2=M4B0NW2NNT11SLL%O3=M4B0NW2NNT11%O4=M4B0NW2NNT11SLL%O5=M4B0NW2NNT11SLL%O6=M4B0NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M4B0NW2SLL%CC=N)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=O|S+%F=AS%RD=0)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=O%A=S+%F=AR%RD=0)
T6(R=N)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Darwin 11.0.0 Darwin Kernel Version 11.0.0: Fri May  6 22:16:19 PDT 2011; root:xnu-1699.22.53~1/RELEASE_X86_64 x86_64
# Darwin 11.0.0 Darwin Kernel Version 11.0.0: Sat Jun 18 12:56:35 PDT 2011; root:xnu-1699.22.73~1/RELEASE_X86_64 x86_64
# Darwin 11.0.1 Darwin Kernel Version 11.0.1: Wed Jun 29 19:53:22 PDT 2011; root:xnu-1699.23.2~1/RELEASE_X86_64 x86_64
# Darwin 11.2.0 Darwin Kernel Version 11.2.0: Tue Jul 19 17:39:08 PDT 2011; root:xnu-1699.24.3~1/RELEASE_X86_64 x86_64
# Darwin 11.2.0 Darwin Kernel Version 11.2.0: Tue Aug  9 20:54:00 PDT 2011; root:xnu-1699.24.8~1/RELEASE_X86_64 x86_64
# Darwin Kernel Version 11.3.0: Thu Jan 12 18:47:41 PST 2012; root:xnu-1699.24.23~1/RELEASE_X86_64 x86_64
# Darwin 11.4.0 Darwin Kernel Version 11.4.0: Mon Apr  9 19:32:15 PDT 2012; root:xnu-1699.26.8~1/RELEASE_X86_64 x86_64
Fingerprint Apple Mac OS X 10.7.0 - 10.7.4 (Lion) (Darwin 11.0.0 - 11.3.0)
Class Apple | Mac OS X | 10.7.X | general purpose
CPE cpe:/o:apple:mac_os_x:10.7
SEQ(SP=F7-10F%GCD=1-6%ISR=F9-10D%TI=RD%CI=RD|RI%TS=A)
OPS(O1=M3FD8NW1NNT11SLL|M3FD8NW3NNT11SLL%O2=M3FD8NW1NNT11SLL|M3FD8NW3NNT11SLL%O3=M3FD8NW1NNT11|M3FD8NW3NNT11%O4=M3FD8NW1NNT11SLL|M3FD8NW3NNT11SLL%O5=M3FD8NW1NNT11SLL|M3FD8NW3NNT11SLL%O6=M3FD8NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M3FD8NW1SLL|M3FD8NW2SLL|M3FD8NW3SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=Z%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# IOS 4.3.2 iPhone 4 FR
# Darwin 11.0.0 Darwin Kernel Version 11.0.0: Sat Jun 18 12:56:35 PDT 2011; root:xnu-1699.22.73~1/RELEASE_X86_64 x86_64
# Darwin 11.1.0 Darwin Kernel Version 11.1.0: Tue Jul 26 16:07:11 PDT 2011; root:xnu-1699.22.81~1/RELEASE_X86_64 x86_64
# Darwin 11.2.0 Darwin Kernel Version 11.2.0: Tue Aug  9 20:54:00 PDT 2011; root:xnu-1699.24.8~1/RELEASE_X86_64 x86_64
# iphone 3gs with iso 5.0
# Darwin 11.3.0 Darwin Kernel Version 11.3.0: Thu Jan 12 18:48:32 PST 2012; root:xnu-1699.24.23~1/RELEASE_I386 i386
# 11.4.0 Darwin Kernel Version 11.4.0: Mon Apr  9 19:32:15 PDT 2012; root:xnu-1699.26.8~1/RELEASE_X86_64 x86_64
Fingerprint Apple Mac OS X 10.7.0 - 10.7.4 (Lion) (Darwin 11.0.0 - 11.4.0) or iPhone mobile phone (iOS 4.3.2)
Class Apple | Mac OS X | 10.7.X | general purpose
CPE cpe:/o:apple:mac_os_x:10.7 auto
Class Apple | iOS | 4.X | phone
CPE cpe:/o:apple:iphone_os:4.3.2 auto
SEQ(SP=EB-109%GCD=1-6%ISR=EE-10C%TI=RD|RI%CI=RD|RI%II=RI%TS=A)
OPS(O1=M3FD8NW2NNT11SLL%O2=M3FD8NW2NNT11SLL%O3=M3FD8NW2NNT11%O4=M3FD8NW2NNT11SLL%O5=M3FD8NW2NNT11SLL%O6=M3FD8NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M3FD8NW2SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=Z%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Darwin 11.0.0 Darwin Kernel Version 11.0.0: <<date>; username:xnu-1699.22.64~1/RELEASE_x86_64 x86_64
# Darwin 11.1.0 Darwin Kernel Version 11.1.0: Tue Jul 26 16:07:11 PDT 2011; root:xnu-1699.22.81~1/RELEASE_X86_64 x86_64
# Darwin 11.2.0 Darwin Kernel Version 11.2.0: Tue Aug  9 20:54:00 PDT 2011; root:xnu-1699.24.8~1/RELEASE_X86_64 x86_64
# Darwin Kernel Version 11.3.0: Thu Jan 12 18:48:32 PST 2012; root:xnu-1699.24.23~1/RELEASE_I386 i386
# Apple Mac OS X 10.7.0 - 10.7.3 (Lion) (Darwin 11.0.0 - 11.3.0)
# Darwin 11.4.0 Darwin Kernel Version 11.4.0 : Mon Apr  9 19:32:15 PDT 2012; root :xnu-1699.26.8~1/RELEASE_X86_64x86_64
# Darwin 11.4.2 Darwin Kernel Version 11.4.2: Thu Aug 23 16:25:48 PDT 2012; root:xnu-1699.32.7~1/RELEASE_X86_64 x86_64, Apple 2007 MacBook running 10.7.5
Fingerprint Apple Mac OS X 10.7.0 - 10.7.5 (Lion) (Darwin 11.0.0 - 11.4.2)
Class Apple | Mac OS X | 10.7.X | general purpose
CPE cpe:/o:apple:mac_os_x:10.7 auto
SEQ(SP=EE-10A%GCD=1-6%ISR=F8-10E%TI=RD%CI=RD|RI%II=RI%TS=A)
OPS(O1=M5B4NW[1|3|8]NNT11SLL%O2=M5B4NW[1|3|8]NNT11SLL%O3=M5B4NW[1|3|8]NNT11%O4=M5B4NW[1|3|8]NNT11SLL%O5=M5B4NW[1|3|8]NNT11SLL%O6=M5B4NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-46%TG=40%W=FFFF%O=M5B4NW[1|3|8]SLL%CC=N)
T1(R=Y%DF=Y%T=3B-46%TG=40%S=O%A=S+%F=AS%RD=0)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-46%TG=40%W=0%S=A%A=Z%F=R%RD=0)
T5(R=Y%DF=N%T=3B-46%TG=40%W=0%S=Z%A=S+%F=AR%RD=0)
T6(R=Y%DF=Y%T=3B-46%TG=40%W=0%S=A%A=Z%F=R%RD=0)
T7(R=Y%DF=N%T=3B-46%TG=40%W=0%S=Z%A=S%F=AR%RD=0)
U1(DF=N%T=3B-46%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-46%TG=40%CD=S)

# Darwin 11.2.0 Darwin Kernel Version 11.2.0: Tue Aug  9 20:54:00 PDT 2011; root:xnu-1699.24.8~1/RELEASE_X86_64 x86_64
Fingerprint Apple Mac OS X 10.7.2 (Lion) (Darwin 11.2.0)
Class Apple | Mac OS X | 10.7.X | general purpose
CPE cpe:/o:apple:mac_os_x:10.7.2 auto
SEQ(SP=F5-107%GCD=1-6%ISR=F5-109%TI=RD%CI=RD%II=RI%TS=A)
OPS(O1=M4B0NW3NNT11SLL%O2=M4B0NW3NNT11SLL%O3=M4B0NW3NNT11%O4=M4B0NW3NNT11SLL%O5=M4B0NW3NNT11SLL%O6=M4B0NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M4B0NW3SLL%CC=N)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%RD=0)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%RD=0)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%RD=0)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%RD=0)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Darwin 11.2.0 Darwin Kernel Version 11.2.0: Tue Aug  9 20:54:00 PDT 2011; root:xnu-1699.24.8~1/RELEASE_X86_64 x86_64
Fingerprint Apple Mac OS X 10.7.2 (Lion) (Darwin 11.2.0)
Class Apple | Mac OS X | 10.7.X | general purpose
CPE cpe:/o:apple:mac_os_x:10.7.2 auto
SEQ(SP=F4-108%GCD=1-6%ISR=F6-10E%TI=RD%CI=RD%TS=A)
OPS(O1=M3FD8NW3NNT11SLL%O2=M3FD8NW3NNT11SLL%O3=M3FD8NW2NNT11%O4=M3FD8NW2NNT11SLL%O5=M3FD8NW2NNT11SLL%O6=M3FD8NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M3FD8NW2SLL%CC=N)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%RD=0)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%RD=0)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%RD=0)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%RD=0)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=Z%RUCK=0%RUD=G)
IE(R=N)

# Darwin 11.2.0 Darwin Kernel Version 11.2.0: Tue Aug  9 20:54:00 PDT 2011; root:xnu-1699.24.8~1/RELEASE_X86_64 x86_64
Fingerprint Apple Mac OS X 10.7.2 (Lion) (Darwin 11.2.0)
Class Apple | Mac OS X | 10.7.X | general purpose
CPE cpe:/o:apple:mac_os_x:10.7.2 auto
SEQ(CI=RD|RI%II=RI)
OPS(R=N)
WIN(W1=0%W2=0%W3=0%W4=0%W5=0%W6=0)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=0%CC=N)
T1(R=Y%DF=N%T=3B-45%TG=40%S=Z%A=S+%F=AR%RD=0)
T2(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%RD=0)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%RD=0)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%RD=0)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%RD=0)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%RD=0)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=Z%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Darwin Kernel Version 11.2.0: Tue Aug  9 20:54:00 PDT 2011; root:xnu-1699.24.8~1/RELEASE_X86_64 x86_64
Fingerprint Apple Mac OS X 10.7.2 (Lion) (Darwin 11.2.0)
Class Apple | Mac OS X | 10.7.X | general purpose
CPE cpe:/o:apple:mac_os_x:10.7.2 auto
SEQ(SP=BE-C8%GCD=1-6%ISR=C6-D0%TI=Z%CI=RD%II=RI%TS=U)
OPS(O1=M598NNS%O2=M578NNS%O3=M280%O4=M218NNS%O5=M218NNS%O6=M109NNS)
WIN(W1=16D0%W2=16D0%W3=16D0%W4=16D0%W5=16D0%W6=16D0)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=16D0%O=M598NNS%CC=N)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0)
T2(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%RD=0)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=16D0%S=O%A=O|S+%F=A|AS%O=|M109NNS%RD=0)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%RD=0)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%RD=0)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%RD=0)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%RD=0)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Darwin 11.2.0
Fingerprint Apple Mac OS X 10.7.2 (Lion) (Darwin 11.2.0)
Class Apple | Mac OS X | 10.7.X | general purpose
CPE cpe:/o:apple:mac_os_x:10.7.2 auto
SEQ(SP=F0-108%GCD=1-6%ISR=F2-108%TI=RD%CI=RD|RI%TS=A)
OPS(O1=M3FD8NW2NNT11SLL%O2=M3FD8NW2NNT11SLL%O3=M3FD8NW2NNT11%O4=M3FD8NW2NNT11SLL%O5=M3FD8NW3NNT11SLL%O6=M3FD8NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M3FD8NW3SLL%CC=N)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%RD=0)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%RD=0)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%RD=0)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%RD=0)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=Z%RUCK=0%RUD=G)
IE(R=N)

# Darwin 11.2.0 Darwin Kernel Version 11.2.0: Tue Aug  9 20:54:00 PDT 2011; root:xnu-1699.24.8~1/RELEASE_X86_64 x86_64
Fingerprint Apple Mac OS X 10.7.2 (Lion) (Darwin 11.2.0)
Class Apple | Mac OS X | 10.7.X | general purpose
CPE cpe:/o:apple:mac_os_x:10.7.2 auto
SEQ(SP=F8-10A%GCD=1-6%ISR=103-10D%TI=RD%CI=RD%TS=A)
OPS(O1=M3FD8NW2NNT11SLL%O2=M3FD8NW2NNT11SLL%O3=M3FD8NW2NNT11%O4=M3FD8NW2NNT11SLL%O5=M3FD8NW2NNT11SLL%O6=M3FD8NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M3FD8NW2SLL%CC=N)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%RD=0)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%RD=0)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%RD=0)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%RD=0)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(R=N)

# iOS 4.3.3
# 32gb ipod touch. iOS version is 4.3.5.
# Darwin 11.2.0 Darwin Kernel Version 11.2.0: Tue Aug  9 20:54:00 PDT 2011; root:xnu-1699.24.8~1/RELEASE_X86_64 x86_64
Fingerprint Apple Mac OS X 10.7.2 (Lion) (Darwin 11.2.0) or iOS 4.3.3 - 4.3.5
Class Apple | Mac OS X | 10.7.X | general purpose
CPE cpe:/o:apple:mac_os_x:10.7.2
Class Apple | iOS | 4.X | media device
CPE cpe:/o:apple:iphone_os:4 auto
Class Apple | iOS | 4.X | phone
CPE cpe:/o:apple:iphone_os:4 auto
SEQ(SP=F8-108%GCD=1-6%ISR=FF-10B%TI=RD%CI=RD|RI%II=RI%TS=9)
OPS(O1=M5B4NW2NNT11SLL%O2=M5B4NW2NNT11SLL%O3=M5B4NW2NNT11%O4=M5B4NW2NNT11SLL%O5=M5B4NW2NNT11SLL%O6=M5B4NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M5B4NW2SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Darwin 11.2.0 Darwin Kernel Version 11.2.0: Tue Aug  9 20:54:00 PDT 2011; root:xnu-1699.24.8~1/RELEASE_X86_64 x86_64
Fingerprint Apple Mac OS X 10.7.2 - 10.7.3 (Lion) (Darwin 11.2.0 - 11.3.0)
Class Apple | Mac OS X | 10.7.X | general purpose
CPE cpe:/o:apple:mac_os_x:10.7 auto
SEQ(SP=F6-10A%GCD=1-6%ISR=101-10D%TI=RD%CI=RD%II=RI%TS=A)
OPS(O1=M3FD8NW3NNT11SLL%O2=M3FD8NW3NNT11SLL%O3=M3FD8NW3NNT11%O4=M3FD8NW3NNT11SLL%O5=M3FD8NW2NNT11SLL%O6=M3FD8NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M3FD8NW2SLL%CC=N)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%RD=0)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%RD=0)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%RD=0)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%RD=0)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=Z%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Darwin 11.3.0 Darwin Kernel Version 11.3.0: Thu Jan 12 18:47:41 PST 2012; root:xnu-1699.24.23~1/RELEASE_X86_64 x86_64
Fingerprint Apple Mac OS X 10.7.3 (Lion) (Darwin 11.3.0)
Class Apple | Mac OS X | 10.7.X | general purpose
CPE cpe:/o:apple:mac_os_x:10.7
SEQ(SP=F2-108%GCD=1-6%ISR=FF-113%TI=RD%CI=RD%II=RI%TS=A)
OPS(O1=M3FD8NW3NNT11SLL%O2=M3FD8NW3NNT11SLL%O3=M3FD8NW3NNT11%O4=M3FD8NW3NNT11SLL%O5=M3FD8NW3NNT11SLL%O6=M3FD8NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M3FD8NW3SLL%CC=N)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%RD=0)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%RD=0)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%RD=0)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%RD=0)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Darwin 11.3.0 Darwin Kernel Version 11.3.0: Thu Jan 12 18:47:41 PST 2012; root:xnu-1699.24.23~1/RELEASE_X86_64 x86_64
Fingerprint Apple Mac OS X 10.7.3 (Lion) (Darwin 11.3.0)
Class Apple | Mac OS X | 10.7.X | general purpose
CPE cpe:/o:apple:mac_os_x:10.7
SEQ(SP=100-10A%GCD=1-6%ISR=101-10B%TI=RD%CI=RD%II=RI%TS=A)
OPS(O1=M57CNW1NNT11SLL%O2=M57CNW1NNT11SLL%O3=M57CNW1NNT11%O4=M57CNW1NNT11SLL%O5=M57CNW1NNT11SLL%O6=M57CNNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M57CNW1SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Apple's OS X 10.7.4
Fingerprint Apple Mac OS X 10.7.4 (Lion) (Darwin 11.4.0)
Class Apple | Mac OS X | 10.7.X | general purpose
CPE cpe:/o:apple:mac_os_x:10.7.4 auto
SEQ(SP=F1-FB%GCD=1-6%ISR=FF-109%TI=RD%CI=RI%II=RI%TS=A)
OPS(O1=M578NW3NNT11SLL%O2=M578NW3NNT11SLL%O3=M578NW3NNT11%O4=M578NW3NNT11SLL%O5=M578NW3NNT11SLL%O6=M578NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=FFFF%O=M578NW3SLL%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# Darwin 11.4.0 Darwin Kernel Version 11.4.0: Mon Apr  9 19:32:15 PDT 2012; root:xnu-1699.26.8~1/RELEASE_X86_64 x86_64
# Darwin Kernel Version 11.4.0 RELEASE_X86_64 x86_64
Fingerprint Apple Mac OS X 10.7.4 (Lion) (Darwin 11.4.0)
Class Apple | Mac OS X | 10.7.X | general purpose
CPE cpe:/o:apple:mac_os_x:10.7
SEQ(SP=F3-109%GCD=1-6%ISR=FC-110%TI=RD%CI=RI%TS=A)
OPS(O1=M3FD8NW[1-3]NNT11SLL%O2=M3FD8NW[1-3]NNT11SLL%O3=M3FD8NW[1-3]NNT11%O4=M3FD8NW[1-3]NNT11SLL%O5=M3FD8NW[1-3]NNT11SLL%O6=M3FD8NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M3FD8NW[1-3]SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=Z%RUCK=0%RUD=G)
IE(R=N)

# apple TV second generation
# Apple iPad 2 iOS 4.3
# Darwin 11.4.0 Darwin Kernel Version 11.4.0: Mon Apr  9 19:32:15 PDT 2012; root:xnu-1699.26.8~1/RELEASE_X86_64 x86_64
Fingerprint Apple Mac OS X 10.7.4 (Lion) (Darwin 11.4.0) or Apple TV (iOS 4.3)
Class Apple | Mac OS X | 10.7.X | general purpose
CPE cpe:/o:apple:mac_os_x:10.7.4 auto
Class Apple | iOS | 4.X | media device
CPE cpe:/o:apple:iphone_os:4.3 auto
SEQ(SP=F9-109%GCD=1-6%ISR=101-10B%TI=RD%CI=RI%II=RI%TS=A)
OPS(O1=M5B4NW2NNT11SLL%O2=M5B4NW2NNT11SLL%O3=M5B4NW2NNT11%O4=M5B4NW2NNT11SLL%O5=M5B4NW2NNT11SLL%O6=M5B4NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M5B4NW2SLL%CC=N)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%RD=0)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%RD=0)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%RD=0)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Darwin 11.4.2 Darwin Kernel Version 11.4.2: Thu Aug 23 16:25:48 PDT 2012; root:xnu-1699.32.7~1/RELEASE_X86_64 x86_64
Fingerprint Apple Mac OS X 10.7.4 (Lion) (Darwin 11.4.2)
Class Apple | Mac OS X | 10.7.X | general purpose
CPE cpe:/o:apple:mac_os_x:10.7.4 auto
SEQ(TI=RD|RI%CI=RI%II=RI%SS=S%TS=A)
OPS(O1=M5B4NW2NNT11SLL%O2=M5B4NW2NNT11SLL%O3=M5B4NW2NNT11%O4=M5B4NW2NNT11SLL%O5=M5B4NW2NNT11SLL%O6=M5B4NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=N)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Darwin 11.4.2 Darwin Kernel Version 11.4.2: Thu Aug 23 16:25:48 PDT 2012; root:xnu-1699.32.7~1/RELEASE_X86_64 x86_64
# 10.7.5
Fingerprint Apple Mac OS X 10.7.4 - 10.7.5 (Lion) (Darwin 11.4.2)
Class Apple | Mac OS X | 10.7.X | general purpose
CPE cpe:/o:apple:mac_os_x:10.7 auto
SEQ(SP=FC-108%GCD=1-6%ISR=100-110%TI=RD%CI=RD%II=RI%TS=A)
OPS(O1=M5B4NW3NNT11SLL%O2=M5B4NW3NNT11SLL%O3=M5B4NW3NNT11%O4=M5B4NW2NNT11SLL%O5=M5B4NW2NNT11SLL%O6=M5B4NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M5B4NW2SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Darwin 11.4.2 Darwin Kernel Version 11.4.2: Thu Aug 23 16:26:45 PDT 2012; root:xnu-1699.32.7~1/RELEASE_I386 i386
Fingerprint Apple Mac OS X 10.7.5 (Lion) (Darwin 11.4.2)
Class Apple | Mac OS X | 10.7.X | general purpose
CPE cpe:/o:apple:mac_os_x:10.7.5 auto
SEQ(SP=F5-FF%GCD=1-6%ISR=FC-106%TI=RD%CI=RD%II=RI%TS=U)
OPS(O1=M1B30SLL%O2=M1B30SLL%O3=M1B30%O4=M1B30SLL%O5=M1B30SLL%O6=M1B30SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M1B30SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Darwin Kernel Version 11.4.2: Thur Aug 23 16:25:48 PDT 2012; root:xnu-1699.21.7~1/RELEASE_X86_64 x86_64
Fingerprint Apple Mac OS X 10.7.5 (Lion) (Darwin 11.4.2)
Class Apple | Mac OS X | 10.7.X | general purpose
CPE cpe:/o:apple:mac_os_x:10.7.5 auto
SEQ(SP=100-10A%GCD=1-6%ISR=106-110%TI=RD%CI=RD|RI%II=RI%TS=A|E)
OPS(O1=M566NW3NNT11SLL%O2=M566NW3NNT11SLL%O3=M566NW3NNT11%O4=M566NW3NNT11SLL%O5=M566NW3NNT11SLL%O6=M566NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M566NW3SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# local 11.4.2 Darwin Kernel Version 11.4.2: Thu Aug 23 16:25:48 PDT 2012; root:xnu-1699.32.7~1/RELEASE_X86_64 x86_64
Fingerprint Apple Mac OS X 10.7.5 (Mountain Lion) (Darwin 11.4.2)
Class Apple | Mac OS X | 10.7.X | general purpose
CPE cpe:/o:apple:mac_os_x:10.7.5 auto
SEQ(SP=FE-108%GCD=1-6%ISR=101-10B%TI=RD%CI=RD%II=RI%TS=A)
OPS(O1=M3FD8NW3NNT11SLL%O2=M3FD8NW3NNT11SLL%O3=M3FD8NW2NNT11%O4=M3FD8NW2NNT11SLL%O5=M3FD8NW2NNT11SLL%O6=M3FD8NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M3FD8NW2SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=Z%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Apple TV - 2nd Generation - OS Version 4.2 http://support.apple.com/kb/HT4448
# iOS 4.3 ezShare Pro 3.0.1 iPod touch
# Apple TV 2
# IPhone 3GS 32 GB, WLAN connected, iOS 4.3, Build 8F190
# iOS 4.3.1
# iPhone4 running iOS 4.3.2
# iPhone OS 4.3.2 on iPAD 1G (iPad1,1)
# Version 4.3.3
# ipod touch IOS 4.3.4
# Ipad 2 version 4.3.5 (8L1)
# Darwin 11.0.1 Darwin Kernel Version 11.0.1: Thu Jul 28 02:01:39 PDT 2011; root:xnu-1699.23.4~1/RELEASE_X86_64 x86_64, OSX Lion 10.7.1
# Darwin 11.2.0 Darwin Kernel Version 11.2.0: Tue Aug  9 20:56:15 PDT 2011; root:xnu-1699.24.8~1/RELEASE_I386 i386 10.7.2
# 5.0.1 JailBroken
# Darwin 11.3.0 Darwin Kernel Version 11.3.0: Thu Jan 12 18:48:32 PST 2012; root:xnu-1699.24.23~1/RELEASE_I386 i386
# Darwin 11.4.0 Darwin Kernel Version 11.4.0: Mon Apr  9 19:32:15 PDT 2012; root:xnu-1699.26.8~1/RELEASE_X86_64 x86_64
# Darwin 11.4.2 Darwin Kernel Version 11.4.2: Thu Aug 23 16:25:48 PDT 2012; root:xnu-1699.32.7~1/RELEASE_X86_64 x86_64
Fingerprint Apple Mac OS X 10.7.0 - 10.7.5 (Lion) or iOS 4.2 - 5.0.1 (Darwin 10.4.0 - 11.4.2)
Class Apple | Mac OS X | 10.7.X | media device
CPE cpe:/o:apple:mac_os_x:10.7 auto
Class Apple | iOS | 4.X | media device
CPE cpe:/o:apple:iphone_os:4 auto
Class Apple | iOS | 4.X | phone
CPE cpe:/o:apple:iphone_os:4 auto
Class Apple | iOS | 5.X | phone
CPE cpe:/o:apple:iphone_os:5 auto
SEQ(SP=EF-10B%GCD=1-6%ISR=F5-111%TI=RD|RI%CI=RD|RI%II=RI%TS=A)
OPS(O1=M5B4NW2NNT11SLL|M5B4NW3NNT11SLL%O2=M5B4NW2NNT11SLL%O3=M5B4NW2NNT11%O4=M5B4NW2NNT11SLL%O5=M5B4NW2NNT11SLL%O6=M5B4NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M5B4NW2SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Mac OS 8.6 on PPC
# Mac OS 8.1 running on Basilisk-II
# Mac OS 8.6 on PowerPC 8600/250
Fingerprint Apple Mac OS 8.1 - 8.6
Class Apple | Mac OS | 8.X | general purpose
CPE cpe:/o:apple:mac_os:8 auto
SEQ(SP=0-2D%GCD=FA00|1F400|2EE00|3E800|4E200%ISR=95-A1%TI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4W0L%O2=M578W0L%O3=M280W0L%O4=M218W0L%O5=M218W0L%O6=M109)
WIN(W1=4470%W2=4718%W3=4600%W4=4518%W5=4518%W6=455B)
ECN(R=Y%DF=Y%T=FA-104%TG=FF%W=4470%O=M5B4W0L%CC=N%Q=)
T1(R=Y%DF=Y%T=FA-104%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%T=FA-104%TG=FF%W=455B%S=O%A=S+%F=AS%O=M109W0L%RD=0%Q=)
T4(R=Y%DF=Y%T=21-3D%TG=40%W=0%S=A%A=Z%F=R%O=%RD=2AB5E05E%Q=)
T5(R=Y%DF=Y%T=1F-38%TG=20|40%W=0%S=Z%A=S+%F=AR%O=%RD=896A56EB%Q=)
T6(R=Y%DF=Y%T=1E-3D%TG=40%W=0%S=A%A=Z%F=R%O=%RD=8829FB5F%Q=)
T7(R=Y%DF=Y%T=1E-3D%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=896A56EB%Q=)
U1(DF=Y%T=FA-104%TG=FF%IPL=70%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=Y%T=FA-104%TG=FF%CD=S)

# Mac OS 9.0.4 on SheepShaver (on Red Hat)
# Airport Extreme 07 with software version 7.2.1
# Mac OS 9.2
Fingerprint Apple Mac OS 9.0.4 - 9.2
Class Apple | Mac OS | 9.X | general purpose
CPE cpe:/o:apple:mac_os:9 auto
SEQ(SP=4A-A0%GCD=1-6%ISR=9A-A8%TI=I%II=I%SS=S%TS=A)
OPS(O1=M5B4W0NNNT11%O2=M578W0NNNT11%O3=M280W0NNNT11%O4=M218W0NNNT11%O5=M218W0NNNT11%O6=M109NNT11)
WIN(W1=8000%W2=8000%W3=8000%W4=8000%W5=8000%W6=8000)
ECN(R=Y%DF=Y%T=FA-104%TG=FF%W=8000%O=M5B4W0N%CC=N%Q=)
T1(R=Y%DF=Y%T=FA-104%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=Y%T=FA-104%TG=FF%W=0%S=Z%A=S%F=AR%O=%RD=E44A4E43%Q=)
T3(R=Y%DF=Y%T=FA-104%TG=FF%W=8000%S=O%A=S+%F=AS%O=M109W0NNNT11%RD=0%Q=)
T4(R=Y%DF=Y%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=E44A4E43%Q=)
T5(R=Y%DF=Y%T=FA-104%TG=FF%W=0%S=Z%A=S+%F=AR%O=%RD=BD1AB510%Q=)
T6(R=Y%DF=Y%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=EA6C967D%Q=)
T7(R=Y%DF=Y%T=FA-104%TG=FF%W=0%S=Z%A=S%F=AR%O=%RD=EA6C967D%Q=)
U1(DF=Y%T=FA-104%TG=FF%IPL=70%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=Y%T=FA-104%TG=FF%CD=S)

# Mac OS 9.2
Fingerprint Apple Mac OS 9.2
Class Apple | Mac OS | 9.X | general purpose
CPE cpe:/o:apple:mac_os:9.2
SEQ(R=N)
OPS(O1=|M5B4W0NNNT11%O2=%O3=%O4=%O5=%O6=)
WIN(W1=0|8000%W2=0%W3=0%W4=0%W5=0%W6=0)
ECN(R=Y%DF=Y%T=FA-104%TG=FF%W=0%O=%CC=N%Q=U)
T1(R=Y%DF=Y%T=FA-104%TG=FF%S=O|Z%A=S+%F=AR|AS%RD=0|BD1AB510%Q=)
T2(R=Y%DF=Y%T=FA-104%TG=FF%W=0%S=Z%A=S%F=AR%O=%RD=EA6C967D%Q=)
T3(R=Y%DF=Y%T=FA-104%TG=FF%W=0%S=Z%A=S+%F=AR%O=%RD=BD1AB510%Q=)
T4(R=Y%DF=Y%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=EA6C967D%Q=)
T5(R=Y%DF=Y%T=FA-104%TG=FF%W=0%S=Z%A=S+%F=AR%O=%RD=BD1AB510%Q=)
T6(R=Y%DF=Y%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=EA6C967D%Q=)
T7(R=Y%DF=Y%T=FA-104%TG=FF%W=0%S=Z%A=S%F=AR%O=%RD=EA6C967D%Q=)
U1(DF=Y%T=FA-104%TG=FF%IPL=70%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=Y%T=FA-104%TG=FF%CD=S)

# Localhost
# 16.0.0 Darwin Kernel Version 16.0.0: Tue Aug 23 17:02:44 PDT 2016
# 16.1.0 Darwin Kernel Version 16.1.0: Mon Oct  3 14:03:15 PDT 2016; root:xnu-3789.21.3~20/RELEASE_X86_64 x86_64
# 16.3.0 Darwin Kernel Version 16.3.0: Thu Nov 17 20:23:58 PST 2016; root:xnu-3789.31.2~1/RELEASE_X86_64 x86_64
# 16.5.0 Darwin Kernel Version 16.5.0: Fri Mar  3 16:52:33 PST 2017; root:xnu-3789.51.2~3/RELEASE_X86_64 x86_64
# Darwin Kernel Version 16.6.0: Fri Apr 14 16:21:16 PDT 2017; root:xnu-3789.60.24~6/RELEASE_X86_64 x86_64
Fingerprint Apple macOS 10.12 (Sierra) (Darwin 16.0.0 - 16.6.0)
Class Apple | macOS | 10.12.X | general purpose
CPE cpe:/o:apple:mac_os_x:10.12 auto
SEQ(SP=FA-106%GCD=1-6%ISR=104-112%TI=RD%CI=RD%II=RI%TS=A)
OPS(O1=M3FD8NW5NNT11SLL%O2=M3FD8NW5NNT11SLL%O3=M3FD8NW5NNT11%O4=M3FD8NW5NNT11SLL%O5=M3FD8NW5NNT11SLL%O6=M3FD8NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M3FD8NW5SLL%CC=Y%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=Z%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Darwin Kernel Version 16.1.0: Thu Oct 13 21:26:57 PDT 2016; root:xnu-3789.21.3~60/RELEASE_X86_64 x86_64
Fingerprint Apple macOS 10.12 (Sierra) (Darwin 16.1.0)
Class Apple | macOS | 10.12.X | general purpose
CPE cpe:/o:apple:mac_os_x:10.12 auto
SEQ(SP=FE-108%GCD=1-6%ISR=103-10D%TI=RD%CI=RD%II=RI%TS=A)
OPS(O1=M3FD8NW3NNT11SLL%O2=M3FD8NW3NNT11SLL%O3=M3FD8NW3NNT11%O4=M3FD8NW3NNT11SLL%O5=M3FD8NW3NNT11SLL%O6=M3FD8NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M3FD8NW3SLL%CC=Y%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=Z%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Darwin Kernel Version 16.4.0: Thu Dec 22 22:53:21 PST 2016; root:xnu-3789.41.3~3/RELEASE_X86_64 x86_64
Fingerprint Apple macOS 10.12 (Sierra) (Darwin 16.4.0)
Class Apple | macOS | 10.12.X | general purpose
CPE cpe:/o:apple:mac_os_x:10.12 auto
SEQ(SP=103-10D%GCD=1-6%ISR=104-10E%TI=RD%CI=RI%TS=A)
OPS(O1=M3FD8NW5NNT11SLL%O2=M3FD8NW5NNT11SLL%O3=M3FD8NW5NNT11%O4=M3FD8NW5NNT11SLL%O5=M3FD8NW5NNT11SLL%O6=M3FD8NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M3FD8NW5SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(R=N)

# Darwin Kernel Version 16.6.0: Fri Apr 14 16:21:16 PDT 2017; root:xnu-3789.60.24~6/RELEASE_X86_64 x86_64
Fingerprint Apple macOS 10.12 (Sierra) (Darwin 16.6.0)
Class Apple | macOS | 10.12.X | general purpose
CPE cpe:/o:apple:mac_os_x:10.12 auto
SEQ(SP=F0-FA%GCD=1-6%ISR=FE-108%TI=RD%CI=RD%II=RI%TS=1)
OPS(O1=M550NW5NNT11SLL%O2=M550NW5NNT11SLL%O3=M550NW5NNT11%O4=M550NW5NNT11SLL%O5=M550NW5NNT11SLL%O6=M550NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M550NW5SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Darwin Kernel Version 16.1.0: Thu Oct 13 21:26:57 PDT 2016; root:xnu-3789.21.3~60/RELEASE_X86_64 x86_64
Fingerprint Apple macOS 10.12.1 (Sierra) (Darwin 16.1.0)
Class Apple | macOS | 10.12.X | general purpose
CPE cpe:/o:apple:mac_os_x:10.12.1 auto
SEQ(SP=100-10A%GCD=1-6%ISR=106-110%TI=RD%CI=RI%TS=A)
OPS(O1=M3FD8NW5NNT11SLL%O2=M3FD8NW5NNT11SLL%O3=M3FD8NW5NNT11%O4=M3FD8NW5NNT11SLL%O5=M3FD8NW5NNT11SLL%O6=M3FD8NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M3FD8NW5SLL%CC=Y%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=Z%RUCK=0%RUD=G)
IE(R=N)

# Mac OS Sierra 10.12.5
Fingerprint Apple macOS 10.12.5 (Sierra)
Class Apple | macOS | 10.12.X | general purpose
CPE cpe:/o:apple:mac_os_x:10.12.5 auto
SEQ(SP=100-10A%GCD=1-6%ISR=107-111%TI=RD%CI=RI%II=RI%TS=A)
OPS(O1=M3FD8NW5NNT11SLL%O2=M3FD8NW5NNT11SLL%O3=M3FD8NW5NNT11%O4=M3FD8NW5NNT11SLL%O5=M3FD8NW5NNT11SLL%O6=M3FD8NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M3FD8NW5SLL%CC=Y%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Darwin 17.0.0 Darwin Kernel Version 17.0.0: Tue Jun 13 21:06:15 PDT 2017; root:xnu-4481.0.0.1.1~1/RELEASE_X86_64 x86_64
Fingerprint Apple macOS 10.13 (High Sierra) (Darwin 17.0.0)
Class Apple | macOS | 10.13.X | general purpose
CPE cpe:/o:apple:mac_os_x:10.13 auto
SEQ(SP=FB-107%GCD=1-6%ISR=109-113%TI=Z%CI=RI%TS=A)
OPS(O1=M3FD8NW5NNT11SLL%O2=M3FD8NW5NNT11SLL%O3=M3FD8NW5NNT11%O4=M3FD8NW5NNT11SLL%O5=M3FD8NW5NNT11SLL%O6=M3FD8NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M3FD8NW5SLL%CC=Y%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=Z%RUCK=0%RUD=G)
IE(R=N)

# iMac 18,3 running macOS 10.13.6
Fingerprint Apple macOS 10.13 (High Sierra) (Darwin 17.7.0)
Class Apple | macOS | 10.13.X | general purpose
CPE cpe:/o:apple:mac_os_x:10.13 auto
SEQ(SP=FD-107%GCD=1-6%ISR=104-10E%TI=Z%CI=RD%II=RI%TS=9|A)
OPS(O1=M5B4NW5NNT11SLL%O2=M5B4NW5NNT11SLL%O3=M5B4NW5NNT11%O4=M5B4NW5NNT11SLL%O5=M5B4NW5NNT11SLL%O6=M5B4NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M5B4NW5SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Darwin Kernel Version 17.7.0: Fri Oct 30 13:34:27 PDT 2020; root:xnu-4570.71.82.8~1/RELEASE_X86_64 x86_64
Fingerprint Apple macOS 10.13 (High Sierra) (Darwin 17.7.0)
Class Apple | macOS | 10.13.X | general purpose
CPE cpe:/o:apple:mac_os_x:10.13 auto
SEQ(SP=101-10B%GCD=1-6%ISR=107-111%TI=Z%CI=RD%II=RI%TS=A)
OPS(O1=M5B4NWCNNT11SLL%O2=M5B4NWCNNT11SLL%O3=M5B4NWCNNT11%O4=M5B4NWCNNT11SLL%O5=M5B4NWCNNT11SLL%O6=M5B4NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M5B4NWCSLL%CC=Y%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Darwin Kernel Version 17.7.0: Wed May 27 17:00:02 PDT 2020; root:xnu-4570.71.80.1~1/RELEASE_X86_64 x86_64
Fingerprint Apple macOS 10.13.6 (High Sierra) (Darwin 17.7.0)
Class Apple | macOS | 10.13.X | general purpose
CPE cpe:/o:apple:mac_os_x:10.13.6 auto
SEQ(SP=FE-10A%GCD=1-6%ISR=101-10D%TI=Z%CI=RD%II=RI%TS=A)
OPS(O1=M3FD8NW5NNT11SLL%O2=M3FD8NW5NNT11SLL%O3=M3FD8NW5NNT11%O4=M3FD8NW5NNT11SLL%O5=M3FD8NW5NNT11SLL%O6=M3FD8NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M3FD8NW5SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=Z%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# macOS Mojave
Fingerprint Apple macOS 10.14 (Mojave) (Darwin 18.0.0)
Class Apple | macOS | 10.14.X | general purpose
CPE cpe:/o:apple:mac_os_x:10.14 auto
SEQ(SP=FE-108%GCD=1-6%ISR=108-112%TI=Z%CI=RD%II=RI%TS=A|E)
OPS(O1=M5B4NW5NNT11SLL%O2=M5B4NW5NNT11SLL%O3=M5B4NW5NNT11%O4=M5B4NW5NNT11SLL%O5=M5B4NW5NNT11SLL%O6=M5B4NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M5B4NW5SLL%CC=Y%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Darwin Kernel Version 18.7.0: Tue Aug 20 16:57:14 PDT 2019; root:xnu-4903.271.2~2/RELEASE_X86_64 x86_64
Fingerprint Apple macOS 10.14 (Mojave) (Darwin 18.7.0)
Class Apple | macOS | 10.14.X | general purpose
CPE cpe:/o:apple:mac_os_x:10.14 auto
SEQ(SP=FC-106%GCD=1-6%ISR=105-10F%TI=Z%CI=RD%II=RI%TS=9)
OPS(O1=M5B4NW6NNT11SLL%O2=M5B4NW6NNT11SLL%O3=M5B4NW6NNT11%O4=M5B4NW6NNT11SLL%O5=M5B4NW6NNT11SLL%O6=M5B4NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M5B4NW6SLL%CC=Y%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Localhost
# Darwin Kernel Version 18.2.0: Thu Dec 20 21:58:48 PST 2018; root:xnu-4903.241.1~2/RELEASE_X86_64 x86_64
# Darwin Kernel Version 18.6.0: Thu Apr 25 23:16:27 PDT 2019; root:xnu-4903.261.4~2/RELEASE_X86_64 x86_64
# Darwin Kernel Version 19.5.0: Tue May 26 20:41:44 PDT 2020; root:xnu-6153.121.2~2/RELEASE_X86_64 x86_64
# Darwin Kernel Version 19.6.0: Sun Jul  5 00:43:10 PDT 2020; root:xnu-6153.141.1~9/RELEASE_X86_64 x86_64
# Darwin Kernel Version 18.7.0: Tue Jun 22 19:37:08 PDT 2021; root:xnu-4903.278.70~1/RELEASE_X86_64 x86_64
# macOS 11.1 Big Sur.
Fingerprint Apple macOS 10.14 (Mojave) - 11 (Big Sur) (Darwin 18.2.0 - 20.6.0)
Class Apple | macOS | 10.14.X | general purpose
CPE cpe:/o:apple:mac_os_x:10.14 auto
Class Apple | macOS | 10.15.X | general purpose
CPE cpe:/o:apple:mac_os_x:10.15 auto
Class Apple | macOS | 11.X | general purpose
CPE cpe:/o:apple:mac_os_x:11 auto
SEQ(SP=F8-10A%GCD=1-6%ISR=FD-111%TI=Z%CI=RD%II=I|RI%TS=A)
OPS(O1=M3FD8NW6NNT11SLL%O2=M3FD8NW6NNT11SLL%O3=M3FD8NW6NNT11%O4=M3FD8NW6NNT11SLL%O5=M3FD8NW6NNT11SLL%O6=M3FD8NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M3FD8NW6SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G|Z%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# macOS Catalina 10.15.x
Fingerprint Apple macOS 10.15 (Catalina)
Class Apple | macOS | 10.15.X | general purpose
CPE cpe:/o:apple:mac_os_x:10.15 auto
SEQ(SP=FD-107%GCD=1-6%ISR=104-110%TI=Z%II=RI%TS=A)
OPS(O1=M5B4NW6NNT11SLL%O2=M5B4NW6NNT11SLL%O3=M5B4NW6NNT11%O4=M5B4NW6NNT11SLL%O5=M5B4NW6NNT11SLL%O6=M5B4NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%W=FFFF%O=M5B4NW6SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=N)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Darwin Kernel Version 19.6.0: Tue Jun 21 21:18:39 PDT 2022; root:xnu-6153.141.66~1/RELEASE_X86_64 x86_64
Fingerprint Apple macOS 10.15 (Catalina) (Darwin 19.6.0)
Class Apple | macOS | 10.15.X | general purpose
CPE cpe:/o:apple:mac_os_x:10.15 auto
SEQ(SP=100-10A%GCD=1-6%ISR=103-10D%TI=Z%CI=RI%TS=A)
OPS(O1=M3FD8NW6NNT11SLL%O2=M3FD8NW6NNT11SLL%O3=M3FD8NW6NNT11%O4=M3FD8NW6NNT11SLL%O5=M3FD8NW6NNT11SLL%O6=M3FD8NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M3FD8NW6SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=Z%RUCK=0%RUD=G)
IE(R=N)

# Darwin Kernel Version 19.6.0: Sat Jul  4 23:52:31 PDT 2020; root:xnu-6153.141.1~8/RELEASE_X86_64 x86_64
Fingerprint Apple macOS 10.15 (Catalina) (Darwin 19.6.0)
Class Apple | macOS | 10.15.X | general purpose
CPE cpe:/o:apple:mac_os_x:10.15 auto
SEQ(SP=101-10D%GCD=1-6%ISR=103-10D%TI=Z%CI=RD%II=RI%TS=9)
OPS(O1=M5B4NW6NNT11SLL%O2=M5B4NW6NNT11SLL%O3=M5B4NW6NNT11%O4=M5B4NW6NNT11SLL%O5=M5B4NW6NNT11SLL%O6=M5B4NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M5B4NW6SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Darwin Kernel Version 19.6.0: Thu Jun 18 20:49:00 PDT 2020; root:xnu-6153.141.1~1/RELEASE_X86_64 x86_64
# Darwin Kernel Version 20.1.0: Thu Sep 24 20:22:06 PDT 2020; root:xnu-7195.40.89.100.3~1/RELEASE_X86_64 x86_64
Fingerprint Apple macOS 10.15 (Catalina) - 11 (Big Sur) (Darwin 19.6.0 - 20.1.0)
Class Apple | macOS | 10.15.X | general purpose
CPE cpe:/o:apple:mac_os_x:10.15 auto
Class Apple | macOS | 11.X | general purpose
CPE cpe:/o:apple:mac_os_x:11 auto
SEQ(SP=F5-105%GCD=1-6%ISR=106-110%TI=Z%CI=RI%II=RI%TS=A)
OPS(O1=M5B4NW6NNT11SLL%O2=M5B4NW6NNT11SLL%O3=M5B4NW6NNT11%O4=M5B4NW6NNT11SLL%O5=M5B4NW6NNT11SLL%O6=M5B4NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=FFFF%O=M5B4NW6SLL%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# ._device-info._tcp.local. TXT "model=MacBookPro15,2" "osxvers=20"
Fingerprint Apple macOS 11 (Big Sur) (Darwin 20.0.0 - 20.6.0)
Class Apple | macOS | 11.X | general purpose
CPE cpe:/o:apple:mac_os_x:11 auto
SEQ(SP=FE-108%GCD=1-6%ISR=106-110%TI=Z%CI=RD%TS=21)
OPS(O1=M56ANW6NNT11SLL%O2=M56ANW6NNT11SLL%O3=M56ANW6NNT11%O4=M56ANW6NNT11SLL%O5=M56ANW6NNT11SLL%O6=M56ANNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M56ANW6SLL%CC=Y%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Darwin Kernel Version 20.3.0: Thu Jan 21 00:07:06 PST 2021; root:xnu-7195.81.3~1/RELEASE_X86_64 x86_64
Fingerprint Apple macOS 11 (Big Sur) (Darwin 20.3.0)
Class Apple | macOS | 11.X | general purpose
CPE cpe:/o:apple:mac_os_x:11 auto
SEQ(SP=F8-102%GCD=1-6%ISR=10B-115%TI=Z%II=RI%TS=A)
OPS(O1=M5B4NW6NNT11SLL%O2=M5B4NW6NNT11SLL%O3=M5B4NW6NNT11%O4=M5B4NW6NNT11SLL%O5=M5B4NW6NNT11SLL%O6=M5B4NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M5B4NW6SLL%CC=Y%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=N)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Darwin Kernel Version 20.6.0: Wed Jun 23 00:26:27 PDT 2021; root:xnu-7195.141.2~5/RELEASE_ARM64_T8101 arm64
Fingerprint Apple macOS 11 (Big Sur) (Darwin 20.6.0)
Class Apple | macOS | 11.X | general purpose
CPE cpe:/o:apple:mac_os_x:11 auto
SEQ(SP=103-10D%GCD=1-6%ISR=10B-115%TI=Z%CI=RI%TS=22)
OPS(O1=M3FD8NW6NNT11SLL%O2=M3FD8NW6NNT11SLL%O3=M3FD8NW6NNT11%O4=M3FD8NW6NNT11SLL%O5=M3FD8NW6NNT11SLL%O6=M3FD8NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M3FD8NW6SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=Z%RUCK=0%RUD=G)
IE(R=N)

# Darwin Kernel Version 20.6.0: Mon Aug 30 06:12:21 PDT 2021; root:xnu-7195.141.6~3/RELEASE_X86_64 x86_64
Fingerprint Apple macOS 11 (Big Sur) (Darwin 20.6.0)
Class Apple | macOS | 11.X | general purpose
CPE cpe:/o:apple:mac_os_x:11 auto
SEQ(SP=FF-109%GCD=1-6%ISR=108-112%TI=Z%CI=RI%II=RI%TS=21)
OPS(O1=M5B4NW6NNT11SLL%O2=M5B4NW6NNT11SLL%O3=M5B4NW6NNT11%O4=M5B4NW6NNT11SLL%O5=M5B4NW6NNT11SLL%O6=M5B4NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=FFFF%O=M5B4NW6SLL%CC=Y%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# Darwin Kernel Version 20.6.0: Mon Aug 30 06:12:21 PDT 2021; root:xnu-7195.141.6~3/RELEASE_X86_64 x86_64
Fingerprint Apple macOS 11 (Big Sur) (Darwin 20.6.0)
Class Apple | macOS | 11.X | general purpose
CPE cpe:/o:apple:mac_os_x:11 auto
SEQ(SP=100-10A%GCD=1-6%ISR=102-10E%TI=Z%II=RI%TS=21)
OPS(O1=M5B4NW6NNT11SLL%O2=M5B4NW6NNT11SLL%O3=M5B4NW6NNT11%O4=M5B4NW6NNT11SLL%O5=M5B4NW6NNT11SLL%O6=M5B4NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M5B4NW6SLL%CC=Y%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=N)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Darwin Kernel Version 20.5.0: Sat May  8 05:10:33 PDT 2021; root:xnu-7195.121.3~9/RELEASE_X86_64 x86_64
# Darwin Kernel Version 20.6.0
# Darwin Kernel Version 21.5.0: Tue Apr 26 21:08:37 PDT 2022; root:xnu-8020.121.3~4/RELEASE_ARM64_T6000 arm64
# Darwin Kernel Version 21.6.0: Mon Aug 22 20:20:05 PDT 2022; root:xnu-8020.140.49~2/RELEASE_ARM64_T8101 arm64
Fingerprint Apple macOS 11 (Big Sur) - 12 (Monterey) (Darwin 20.5.0 - 21.6.0)
Class Apple | macOS | 11.X | general purpose
CPE cpe:/o:apple:mac_os_x:11 auto
Class Apple | macOS | 12.X | general purpose
CPE cpe:/o:apple:mac_os_x:12 auto
SEQ(SP=FE-10C%GCD=1-6%ISR=105-10F%TI=Z%CI=RD%II=RI%TS=20|22)
OPS(O1=M3FD8NW6NNT11SLL%O2=M3FD8NW6NNT11SLL%O3=M3FD8NW6NNT11%O4=M3FD8NW6NNT11SLL%O5=M3FD8NW6NNT11SLL%O6=M3FD8NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M3FD8NW6SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=Z%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# 21.3.0 Darwin Kernel Version 21.3.0: Wed Jan  5 21:37:58 PST 2022; root:xnu-8019.80.24~20/RELEASE_X86_64 x86_64
# Darwin Kernel Version 21.1.0: Wed Oct 13 17:33:23 PDT 2021; root:xnu-8019.41.5~1/RELEASE_X86_64 x86_64
# Darwin Kernel Version 20.6.0: Wed Jun 23 00:26:31 PDT 2021; root:xnu-7195.141.2~5/RELEASE_X86_64 x86_6
Fingerprint Apple macOS 11 (Big Sur) - 12 (Monterey) (Darwin 20.6.0 - 21.3.0)
Class Apple | macOS | 11.X | general purpose
CPE cpe:/o:apple:mac_os_x:11 auto
Class Apple | macOS | 12.X | general purpose
CPE cpe:/o:apple:mac_os_x:12 auto
SEQ(SP=FD-107%GCD=1-6%ISR=101-10D%TI=Z%II=RI%TS=21)
OPS(O1=M5B4NW6NNT11SLL%O2=M5B4NW6NNT11SLL%O3=M5B4NW6NNT11%O4=M5B4NW6NNT11SLL%O5=M5B4NW6NNT11SLL%O6=M5B4NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M5B4NW6SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=N)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Darwin Kernel Version 22.1.0: Mon Aug 15 20:06:40 PDT 2022; root:xnu-8792.40.29.161.2~1/RELEASE_ARM64_T8103 arm64
# Darwin Kernel Version 22.1.0: Sun Oct  2 22:39:24 PDT 2022; root:xnu-8792.41.7~13/RELEASE_X86_64 x86_64
# Darwin Kernel Version 22.1.0: Sun Oct  9 20:14:30 PDT 2022; root:xnu-8792.41.9~2/RELEASE_ARM64_T8103 arm64
# Darwin Kernel Version 21.2.0: root:xnu-8091.61.5~1/RELEASE_ARM64_T8101 arm64
# Darwin Kernel Version 20.6.0: Wed Jun 23 00:26:27 PDT 2021; root:xnu-7195.141.2~5/RELEASE_ARM64_T8101 arm 64
# Apple iPhone 12 (iOS 16.4.1)
Fingerprint Apple macOS 11 (Big Sur) - 13 (Ventura) or iOS 16 (Darwin 20.6.0 - 22.4.0)
Class Apple | macOS | 11.X | general purpose
CPE cpe:/o:apple:mac_os_x:11 auto
Class Apple | macOS | 12.X | general purpose
CPE cpe:/o:apple:mac_os_x:12 auto
Class Apple | macOS | 13.X | general purpose
CPE cpe:/o:apple:mac_os_x:13 auto
SEQ(SP=F6-10A%GCD=1-6%ISR=FF-114%TI=Z%CI=RD%II=I|RI%TS=21|22)
OPS(O1=M5B4NW6NNT11SLL%O2=M5B4NW6NNT11SLL%O3=M5B4NW6NNT11%O4=M5B4NW6NNT11SLL%O5=M5B4NW6NNT11SLL%O6=M5B4NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M5B4NW6SLL%CC=N|Y%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# MacOS 12.6 "Monterey"
Fingerprint Apple macOS 12 (Monterey)
Class Apple | macOS | 12.X | general purpose
CPE cpe:/o:apple:mac_os_x:12 auto
SEQ(SP=100-10A%GCD=1-6%ISR=107-111%TI=Z%CI=RD%II=RI%TS=21)
OPS(O1=M5B4NW6NNT11SLL%O2=M5B4NW6NNT11SLL%O3=M5B4NW6NNT11%O4=M5B4NW6NNT11SLL%O5=M5B4NW6NNT11SLL%O6=M5B4NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M5B4NW6SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=O%F=AR%O=%RD=0%Q=)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Darwin Kernel Version 21.1.0: Wed Oct 13 17:33:24 PDT 2021; root:xnu-8019.41.5~1/RELEASE_ARM64_T8101 arm64
# Darwin Kernel Version 21.3.0: Wed Jan  5 21:37:58 PST 2022; root:xnu-8019.80.24~20/RELEASE_X86_64 x86_64
Fingerprint Apple macOS 12 (Monterey) (Darwin 21.1.0 - 21.3.0)
Class Apple | macOS | 12.X | general purpose
CPE cpe:/o:apple:mac_os_x:12 auto
SEQ(SP=101-10B%GCD=1-6%ISR=105-10F%TI=Z%CI=RI%TS=21)
OPS(O1=M3FD8NW6NNT11SLL%O2=M3FD8NW6NNT11SLL%O3=M3FD8NW6NNT11%O4=M3FD8NW6NNT11SLL%O5=M3FD8NW6NNT11SLL%O6=M3FD8NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M3FD8NW6SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=Z%RUCK=0%RUD=G)
IE(R=N)

# Darwin Kernel Version 21.6.0: Wed Aug 10 14:28:23 PDT 2022; root:xnu-8020.141.5~2/RELEASE_ARM64_T6000 arm64
# Darwin Kernel Version 21.1.0: Wed Oct 13 17:33:24 PDT 2021; root:xnu-8019.41.5~1/RELEASE_ARM64_T8101 arm64
# Darwin Kernel Version 21.3.0: Wed Jan  5 21:37:58 PST 2022; root:xnu-8019.80.24~20/RELEASE_ARM64_T8101 arm64
Fingerprint Apple macOS 12 (Monterey) (Darwin 21.1.0 - 21.6.0)
Class Apple | macOS | 12.X | general purpose
CPE cpe:/o:apple:mac_os_x:12 auto
SEQ(SP=FA-10A%GCD=1-6%ISR=FA-110%TI=Z%CI=RD%II=RI%TS=21|22)
OPS(O1=M3FD8NW6NNT11SLL%O2=M3FD8NW6NNT11SLL%O3=M3FD8NW6NNT11%O4=M3FD8NW6NNT11SLL%O5=M3FD8NW6NNT11SLL%O6=M3FD8NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M3FD8NW6SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=Z%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Darwin Kernel Version 21.2.0: Sun Nov 28 20:28:41 PST 2021; root:xnu-8019.61.5~1/RELEASE_ARM64_T6000 x86_64 i386 MacBookPro18,3 Darwin
Fingerprint Apple macOS 12 (Monterey) (Darwin 21.2.0)
Class Apple | macOS | 12.X | general purpose
CPE cpe:/o:apple:mac_os_x:12 auto
SEQ(SP=FB-105%GCD=1-6%ISR=108-112%TI=Z%CI=RD%II=RI%TS=21)
OPS(O1=M564NW6NNT11SLL%O2=M564NW6NNT11SLL%O3=M564NW6NNT11%O4=M564NW6NNT11SLL%O5=M564NW6NNT11SLL%O6=M564NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M564NW6SLL%CC=Y%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Darwin Kernel Version 21.5.0: Tue Apr 26 21:08:37 PDT 2022; root:xnu-8020.121.3~4/RELEASE_ARM64_T6000 arm64
Fingerprint Apple macOS 12 (Monterey) (Darwin 21.5.0)
Class Apple | macOS | 12.X | general purpose
CPE cpe:/o:apple:mac_os_x:12 auto
SEQ(SP=F1-FB%GCD=1-6%ISR=105-10F%TI=Z%CI=RI%II=RI%TS=22)
OPS(O1=M3FD8NW6NNT11SLL%O2=M3FD8NW6NNT11SLL%O3=M3FD8NW6NNT11%O4=M3FD8NW6NNT11SLL%O5=M3FD8NW6NNT11SLL%O6=M3FD8NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M3FD8NW6SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=Z%RUCK=0%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# Darwin Kernel Version 21.6.0: Wed Aug 10 14:25:27 PDT 2022; root:xnu-8020.141.5~2/RELEASE_X86_64 x86_64
Fingerprint Apple macOS 12 (Monterey) (Darwin 21.6.0)
Class Apple | macOS | 12.X | general purpose
CPE cpe:/o:apple:mac_os_x:12 auto
SEQ(SP=103-10D%GCD=1-6%ISR=108-112%TI=Z%CI=RD%II=RI%TS=21)
OPS(O1=M4E2NW6NNT11SLL%O2=M4E2NW6NNT11SLL%O3=M4E2NW6NNT11%O4=M4E2NW6NNT11SLL%O5=M4E2NW6NNT11SLL%O6=M4E2NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M4E2NW6SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Darwin Kernel Version 21.6.0: Mon Aug 22 20:17:10 PDT 2022; root:xnu-8020.140.49~2/RELEASE_X86_64 x86_64
Fingerprint Apple macOS 12 (Monterey) (Darwin 21.6.0)
Class Apple | macOS | 12.X | general purpose
CPE cpe:/o:apple:mac_os_x:12 auto
SEQ(SP=FC-106%GCD=1-6%ISR=109-113%TI=Z%CI=RI%II=RI%TS=21)
OPS(O1=M5B4NW6NNT11SLL%O2=M5B4NW6NNT11SLL%O3=M5B4NW6NNT11%O4=M5B4NW6NNT11SLL%O5=M5B4NW6NNT11SLL%O6=M5B4NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=FFFF%O=M5B4NW6SLL%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# Darwin Kernel Version 22.0.0: Mon Aug  1 06:32:26 PDT 2022; root:xnu-8792.0.207.0.6~26/RELEASE_ARM64_T8103 arm64
# Darwin Kernel Version 21.2.0: Thu Nov 11 00:10:17 PST 2021; root:xnu-8019.60.69~7/RELEASE_ARM64_T8101 arm64
# Darwin Kernel Version 21.6.0: Mon Aug 22 20:20:05 PDT 2022; root:xnu-8020.140.49~2/RELEASE_ARM64_T8101 arm64
Fingerprint Apple macOS 12 (Monterey) - 13 (Ventura) (Darwin 21.2.0 - 22.0.0)
Class Apple | macOS | 12.X | general purpose
CPE cpe:/o:apple:mac_os_x:12 auto
Class Apple | macOS | 13.X | general purpose
CPE cpe:/o:apple:mac_os_x:13 auto
SEQ(SP=F6-10B%GCD=1-6%ISR=104-10E%TI=Z%CI=RI%TS=22)
OPS(O1=M3FD8NW6NNT11SLL%O2=M3FD8NW6NNT11SLL%O3=M3FD8NW6NNT11%O4=M3FD8NW6NNT11SLL%O5=M3FD8NW6NNT11SLL%O6=M3FD8NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M3FD8NW6SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=Z%RUCK=0%RUD=G)
IE(R=N)

# macOS Monterey 12.2.1
# iOS 14.5.1
# iOS 16.7.2
Fingerprint Apple macOS 12 (Monterey) or iOS 14.5 - 16.7 (Darwin 20.4.0 - 22.7.0)
Class Apple | macOS | 12.X | general purpose
CPE cpe:/o:apple:mac_os_x:12 auto
Class Apple | iOS | 14.X | phone
CPE cpe:/o:apple:iphone_os:14 auto
Class Apple | iOS | 15.X | phone
CPE cpe:/o:apple:iphone_os:15 auto
Class Apple | iOS | 16.X | phone
CPE cpe:/o:apple:iphone_os:16 auto
SEQ(SP=FB-10D%GCD=1-6%ISR=102-10D%TI=Z%CI=RD%II=RI%TS=20)
OPS(O1=M5B4NW6NNT11SLL%O2=M5B4NW6NNT11SLL%O3=M5B4NW6NNT11%O4=M5B4NW6NNT11SLL%O5=M5B4NW6NNT11SLL%O6=M5B4NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M5B4NW6SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Darwin Kernel Version 22.0.0: Tue Jun 28 20:48:02 PDT 2022; root:xnu-8792.0.134.131.2~1/RELEASE_ARM64_T8103 arm64
Fingerprint Apple macOS 13 (Ventura) (Darwin 22.0.0)
Class Apple | macOS | 13.X | general purpose
CPE cpe:/o:apple:mac_os_x:13 auto
SEQ(SP=F7-109%GCD=1-6%ISR=105-10F%TI=Z%CI=RD%II=RI%TS=21)
OPS(O1=M4D8NW6NNT11SLL%O2=M4D8NW6NNT11SLL%O3=M4D8NW6NNT11%O4=M4D8NW6NNT11SLL%O5=M4D8NW6NNT11SLL%O6=M4D8NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M4D8NW6SLL%CC=Y%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Darwin Kernel Version 22.1.0: Sun Oct  9 20:14:30 PDT 2022; root:xnu-8792.41.9~2/RELEASE_ARM64_T8103 x86_64
Fingerprint Apple macOS 13 (Ventura) (Darwin 22.1.0)
Class Apple | macOS | 13.X | general purpose
CPE cpe:/o:apple:mac_os_x:13 auto
SEQ(SP=101-10B%GCD=1-6%ISR=107-111%TI=Z%CI=RI%II=RI%TS=21)
OPS(O1=M3FD8NW6NNT11SLL%O2=M3FD8NW6NNT11SLL%O3=M3FD8NW6NNT11%O4=M3FD8NW6NNT11SLL%O5=M3FD8NW6NNT11SLL%O6=M3FD8NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M3FD8NW6SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=Z%RUCK=0%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# Apple Airport Express embedded
Fingerprint Apple AirPort Express WAP (NetBSD)
Class Apple | NetBSD | 4.X | general purpose
CPE cpe:/h:apple:airport_express
CPE cpe:/o:apple:netbsd:4 auto
SEQ(SP=C6-E4%GCD=1-6%ISR=D7-E1%TI=I%CI=I%II=I%SS=S%TS=0)
OPS(O1=M5B4NW0NNT01SNN%O2=M5B4NW0NNT01SNN%O3=M5B4NW0NNT01%O4=M5B4NW0NNT01SNN%O5=M5B4NW0NNT01SNN%O6=M5B4NNT01SNN)
WIN(W1=8000%W2=8000%W3=8000%W4=8000%W5=8000%W6=8000)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=8000%O=M5B4NW0SNN%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=8000%S=O%A=S+%F=AS%O=M5B4NW0NNT01SNN%RD=0%Q=)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=FA-104%TG=FF%CD=S)

# Apple Time Capsule 1TB, first generation
Fingerprint Apple Time Capsule NAS device (NetBSD 4.99)
Class Apple | NetBSD | 4.X | storage-misc
CPE cpe:/o:apple:netbsd:4.99 auto
SEQ(SP=D0-DA%GCD=1-6%ISR=D5-DF%TI=I%CI=I%II=I%SS=S%TS=0)
OPS(O1=M5B4NW0NNT01SNN%O2=M5B4NW0NNT01SNN%O3=M5B4NW0NNT01%O4=M5B4NW0NNT01SNN%O5=M5B4NW0NNT01SNN%O6=M5B4NNT01SNN)
WIN(W1=8000%W2=8000%W3=8000%W4=8000%W5=8000%W6=8000)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=8000%O=M5B4NW0SNN%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
T3(R=N)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=FA-104%TG=FF%CD=S)

# Apple AirPort Extreme (802.11a/b/g/draft-n), Apple P/N A1143, S/W ver 7.0
# Apple Airport Extreme 7.1.1
# NetBSD 4.99.4 NetBSD 4.99.4 (E4500) #1: Tue Nov 28 10:25:20 EST 2006 i386
# Apple Airport Extreme base station 802.11n
# Apple Time Capsule NAS device
# QNX 6.5.0 2010/07/09-14:43:25EDT x86pc x86
Fingerprint Apple AirPort Extreme WAP or Time Capsule NAS device (NetBSD 4.99), or QNX RTOS 6.5.0
Class Apple | NetBSD | 4.X | WAP
CPE cpe:/h:apple:airport_extreme
CPE cpe:/o:apple:netbsd:4.99 auto
Class Apple | NetBSD | 4.X | storage-misc
CPE cpe:/o:apple:netbsd:4.99 auto
Class QNX | RTOS | 6.X | general purpose
CPE cpe:/o:qnx:rtos:6.5.0 auto
SEQ(SP=BF-DC%GCD=1-6%ISR=D6-E1%TI=I%CI=I%II=I%SS=S%TS=0)
OPS(O1=M[5AC-5B4]NW0NNT01SNN%O2=M[5AC-5B4]NW0NNT01SNN%O3=M[5AC-5B4]NW0NNT01%O4=M[5AC-5B4]NW0NNT01SNN%O5=M[5AC-5B4]NW0NNT01SNN%O6=M[5AC-5B4]NNT01SNN)
WIN(W1=8000%W2=8000%W3=8000%W4=8000%W5=8000%W6=8000)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=8000%O=M[5AC-5B4]NW0SNN%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=8000%S=O%A=S+%F=AS%O=M[5AC-5B4]NW0NNT01SNN%RD=0%Q=)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=FA-104%TG=FF%CD=S)

# Apple AirPort Extreme 802.11ac, Version: 7.7.3
Fingerprint Apple AirPort Extreme WAP (version 7.7.3)
Class Apple | NetBSD || general purpose
CPE cpe:/o:apple:netbsd auto
Class Apple | embedded || WAP
SEQ(SP=D0-DA%GCD=1-6%ISR=D8-E2%TI=Z%CI=Z%II=I)
OPS(O1=M5B4NW3NNT11SNN%O2=M5B4NW3NNT11SNN%O3=M5B4NW3NNT11%O4=M5B4NW3NNT11SNN%O5=M5B4NW3NNT11SNN%O6=M5B4NNT11SNN)
WIN(W1=8000%W2=8000%W3=8000%W4=8000%W5=8000%W6=8000)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=8000%O=M5B4NW3SNN%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
T3(R=N)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=FA-104%TG=FF%CD=S)

# Airport Extreme 802.11ac wifi-router, OS version 7.7.3
# NetBSD 7.99.21
Fingerprint Apple AirPort Extreme WAP (version 7.7.3) or NetBSD 7.99
Class Apple | NetBSD || general purpose
CPE cpe:/o:apple:netbsd auto
Class NetBSD | NetBSD | 7.X | general purpose
CPE cpe:/o:netbsd:netbsd:7.99 auto
SEQ(SP=C5-CF%GCD=1-6%ISR=D6-E0%TI=Z%CI=Z%II=I)
OPS(O1=M5B4NW3NNT11SNN%O2=M5B4NW3NNT11SNN%O3=M5B4NW3NNT11%O4=M5B4NW3NNT11SNN%O5=M5B4NW3NNT11SNN%O6=M5B4NNT11SNN)
WIN(W1=8000%W2=8000%W3=8000%W4=8000%W5=8000%W6=8000)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=8000%O=M5B4NW3SNN%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=8000%S=O%A=S+%F=AS%O=M5B4NW3NNT11SNN%RD=0%Q=)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=FA-104%TG=FF%CD=S)

# Darwin 14.0.0 Darwin Kernel Version 14.0.0: Fri Sep 19 00:26:44 PDT 2014; root:xnu-2782.1.97~2/RELEASE_X86_64 x86_64
Fingerprint Apple OS X 10.10 (Yosemite) (Darwin 14.0.0)
Class Apple | OS X | 10.10.X | general purpose
CPE cpe:/o:apple:mac_os_x:10.10 auto
SEQ(SP=FA-10C%GCD=1-6%ISR=101-113%TI=RD%CI=RI%II=RI%TS=A)
OPS(O1=M5B4NW5NNT11SLL%O2=M578NW5NNT11SLL%O3=M280NW5NNT11%O4=M22CNW5NNT11SLL%O5=M218NW5NNT11SLL%O6=M109NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M5B4NW5SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# OS X 10.10
# 14.0.0 Darwin Kernel Version 14.0.0: Fri Sep 19 00:26:44 PDT 2014; root:xnu-2782.1.97~2/RELEASE_X86_64 x86_64
# Darwin 14.3.0 Darwin Kernel Version 14.3.0: Mon Mar 23 11:59:05 PDT 2015; root:xnu-2782.20.48~5/RELEASE_X86_64 x86_64
# OS X El Capitan 10.11.0
Fingerprint Apple OS X 10.10 (Yosemite) - 10.11 (El Capitan) (Darwin 14.0.0 - 15.0.0)
Class Apple | OS X | 10.10.X | general purpose
CPE cpe:/o:apple:mac_os_x:10.10 auto
Class Apple | OS X | 10.11.X | general purpose
CPE cpe:/o:apple:mac_os_x:10.11 auto
SEQ(SP=FD-10B%GCD=1-6%ISR=FB-111%TI=RD%CI=RI%II=RI%TS=A)
OPS(O1=M5B4NW5NNT11SLL%O2=M5B4NW5NNT11SLL%O3=M5B4NW5NNT11%O4=M5B4NW5NNT11SLL%O5=M5B4NW5NNT11SLL%O6=M5B4NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=FFFF%O=M5B4NW5SLL%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# Localhost
# Darwin 14.0.0 Darwin Kernel Version 14.0.0: Wed Jul 16 00:46:31 PDT 2014; root:xnu-2782.1.43.0.2~2/RELEASE_X86_64 x86_64
# Darwin 14.3.0 Darwin Kernel Version 14.3.0: Mon Mar 23 11:59:05 PDT 2015; root:xnu-2782.20.48~5/RELEASE_X86_64 x86_64
# Darwin 15.0.0 Darwin Kernel Version 15.0.0: Wed Aug 26 19:41:34 PDT 2015; root:xnu-3247.1.106~5/RELEASE_X86_64 x86_64
Fingerprint Apple OS X 10.10 (Yosemite) - 10.11 (El Capitan) (Darwin 14.0.0 - 15.0.0)
Class Apple | OS X | 10.10.X | general purpose
CPE cpe:/o:apple:mac_os_x:10.10 auto
Class Apple | OS X | 10.11.X | general purpose
CPE cpe:/o:apple:mac_os_x:10.11 auto
SEQ(SP=F7-10B%GCD=1-6%ISR=103-10D%TI=RD%CI=RI%TS=A)
OPS(O1=M3FD8NW5NNT11SLL%O2=M3FD8NW5NNT11SLL%O3=M3FD8NW5NNT11%O4=M3FD8NW5NNT11SLL%O5=M3FD8NW5NNT11SLL%O6=M3FD8NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M3FD8NW5SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=Z%RUCK=0%RUD=G)
IE(R=N)

# Localhost
# OSx 10.10
# Darwin 14.0.0 Darwin Kernel Version 14.0.0: Fri Sep 19 00:26:44 PDT 2014; root:xnu-2782.1.97~2/RELEASE_X86_64 x86_64
# Darwin 14.1.0 Darwin Kernel Version 14.1.0: Mon Dec 22 23:10:38 PST 2014; root:xnu-2782.10.72~2/RELEASE_X86_64 x86_64
# Darwin 14.3.0 Darwin Kernel Version 14.3.0: Thu Feb 12 18:38:33 PST 2015; root:xnu-2782.20.34~3/RELEASE_X86_64 x86_64
# Darwin 14.4.0 Darwin Kernel Version 14.4.0: Tue May 12 21:00:42 PDT 2015; root:xnu-2782.30.4~4/RELEASE_X86_64 x86_64
# Darwin 15.0.0 Darwin Kernel Version 15.0.0: Wed Aug 26 19:41:34 PDT 2015; root:xnu-3247.1.106~5/RELEASE_X86_64 x86_64
# Darwin 15.2.0 (OS X 10.11.4)
# Darwin 15.3.0 Darwin Kernel Version 15.3.0: Thu Dec 10 18:40:58 PST 2015; root:xnu-3248.30.4~1/RELEASE_X86_64 x86_64
# Darwin 15.4.0 Darwin Kernel Version 15.4.0: Fri Feb 26 22:08:05 PST 2016; root:xnu-3248.40.184~3/RELEASE_X86_64 x86_64
# Darwin 16.1.0 Darwin Kernel Version 16.1.0: Thu Oct 13 21:26:57 PDT 2016; root:xnu-3789.21.3~60/RELEASE_X86_64 x86_64
Fingerprint Apple OS X 10.10 (Yosemite) - 10.12 (Sierra) (Darwin 14.0.0 - 16.1.0)
Class Apple | OS X | 10.10.X | general purpose
CPE cpe:/o:apple:mac_os_x:10.10 auto
Class Apple | OS X | 10.11.X | general purpose
CPE cpe:/o:apple:mac_os_x:10.11 auto
SEQ(SP=F5-109%GCD=1-6%ISR=F7-115%TI=RD%CI=RD|RI%II=I|BI|RI%TS=A)
OPS(O1=M3FD8NW5NNT11SLL%O2=M3FD8NW5NNT11SLL%O3=M3FD8NW5NNT11%O4=M3FD8NW5NNT11SLL%O5=M3FD8NW5NNT11SLL%O6=M3FD8NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M3FD8NW5SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=Z%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Darwin Kernel Version 14.1.0 root:xnu-2782.10.72~2/REALESE_X86_64 x86_64
Fingerprint Apple OS X 10.10.2 (Yosemite) (Darwin 14.1.0)
Class Apple | OS X | 10.10.X | general purpose
CPE cpe:/o:apple:mac_os_x:10.10.2 auto
SEQ(SP=100-10A%GCD=1-6%ISR=105-10F%TI=RD%CI=RD%II=RI%TS=A)
OPS(O1=M553NW5NNT11SLL%O2=M553NW5NNT11SLL%O3=M553NW5NNT11%O4=M553NW5NNT11SLL%O5=M553NW5NNT11SLL%O6=M553NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M553NW5SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Darwin 14.1.0 Darwin Kernel Version 14.1.0: Thu Feb 26 19:26:47 PST 2015; root:xnu-2782.10.73~1/RELEASE_X86_64 x86_64
# iOS 9
# Darwin 15.0.0 Darwin Kernel Version 15.0.0: Tue Sep 22 20:33:10 PDT 2015; root:xnu-3247.10.11.1.1~1/RELEASE_X86_64 x86_64
Fingerprint Apple OS X 10.10.2 (Yosemite) - 10.11.1 (El Capitan) or iOS 9 (Darwin 14.1.0 - 15.0.0)
Class Apple | OS X | 10.10.X | general purpose
CPE cpe:/o:apple:mac_os_x:10.10 auto
Class Apple | OS X | 10.11.X | general purpose
CPE cpe:/o:apple:mac_os_x:10.11 auto
Class Apple | iOS | 9.X | general purpose
CPE cpe:/o:apple:iphone_os:9 auto
SEQ(SP=FF-109%GCD=1-6%ISR=102-10C%TI=RD%CI=RI%II=RI%TS=A)
OPS(O1=M5B4NW5NNT11SLL%O2=M5B4NW5NNT11SLL%O3=M5B4NW5NNT11%O4=M5B4NW5NNT11SLL%O5=M5B4NW5NNT11SLL%O6=M5B4NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M5B4NW5SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Localhost, U1.RIPCK=G
# Darwin 14.3.0 Darwin Kernel Version 14.3.0: Mon Mar 23 11:59:05 PDT 2015; root:xnu-2782.20.48~5/RELEASE_X86_64 x86_64
# Darwin 15.0.0 Darwin Kernel Version 15.0.0: Wed Aug 26 19:41:34 PDT 2015; root:xnu-3247.1.106~5/RELEASE_X86_64 x86_64
Fingerprint Apple OS X 10.10.3 (Yosemite) - 10.11.0 (El Capitan) (Darwin 14.3.0 - 15.0.0)
Class Apple | OS X | 10.10.X | general purpose
CPE cpe:/o:apple:mac_os_x:10.10 auto
Class Apple | OS X | 10.11.X | general purpose
CPE cpe:/o:apple:mac_os_x:10.11 auto
SEQ(SP=FC-106%GCD=1-6%ISR=105-10F%TI=RD%CI=RD%II=RI%TS=A)
OPS(O1=M3FD8NW5NNT11SLL%O2=M3FD8NW5NNT11SLL%O3=M3FD8NW5NNT11%O4=M3FD8NW5NNT11SLL%O5=M3FD8NW5NNT11SLL%O6=M3FD8NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M3FD8NW5SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Darwin 14.5.0 Darwin Kernel Version 14.5.0: Thu Apr 21 20:40:54 PDT 2016; root:xnu-2782.50.3~1/RELEASE_X86_64 x86_64
Fingerprint Apple OS X 10.10.5 (Darwin 14.5.0)
Class Apple | OS X | 10.10.X | general purpose
CPE cpe:/o:apple:mac_os_x:10.10.5 auto
SEQ(SP=F6-10E%GCD=1-6%ISR=103-10D%TI=RD%CI=I|RI%II=RI%TS=A)
OPS(O1=M548NW5NNT11SLL%O2=M548NW5NNT11SLL%O3=M548NW5NNT11%O4=M548NW5NNT11SLL%O5=M548NW5NNT11SLL%O6=M548NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M548NW5SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Darwin 15.0.0 Darwin Kernel Version 15.0.0: Sat Sep 19 15:53:46 PDT 2015; root:xnu-3247.10.11~1/RELEASE_X86_64 x86_64
Fingerprint Apple OS X 10.11 (El Capitan) (Darwin 15.0.0)
Class Apple | OS X | 10.11.X | general purpose
CPE cpe:/o:apple:mac_os_x:10.11 auto
SEQ(SP=102-10C%GCD=1-6%ISR=103-10D%TI=RD%CI=RD%II=RI%TS=A)
OPS(O1=M566NW5NNT11SLL%O2=M566NW5NNT11SLL%O3=M566NW5NNT11%O4=M566NW5NNT11SLL%O5=M566NW5NNT11SLL%O6=M566NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M566NW5SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Darwin 15.4.0 Darwin Kernel Version 15.4.0: Fri Feb 26 22:08:05 PST 2016; root:xnu-3248.40.184~3/RELEASE_X86_64 x86_64
# iOS 10.2.1
# 10.1.1 (14B100) on iPad
# Darwin Kernel Version 16.1.0: Thu Oct 13 21:26:57 PDT 2016; root:xnu-3789.21.3~60/RELEASE_X86_64 x86_64
# Darwin Kernel Version 16.6.0: Fri Apr 14 16:21:16 PDT 2017; root:xnu-3789.60.24~6/RELEASE_X86_64 x86_64
Fingerprint Apple OS X 10.11 (El Capitan) - 10.12 (Sierra) or iOS 10.1 - 10.2 (Darwin 15.4.0 - 16.6.0)
Class Apple | OS X | 10.11.X | general purpose
CPE cpe:/o:apple:mac_os_x:10.11 auto
Class Apple | macOS | 10.12.X | general purpose
CPE cpe:/o:apple:mac_os_x:10.12 auto
Class Apple | iOS | 10.X | phone
CPE cpe:/o:apple:iphone_os:10 auto
SEQ(SP=F1-109%GCD=1-6%ISR=F1-111%TI=RD%CI=RD|RI%II=RI%TS=A)
OPS(O1=M5B4NW5NNT11SLL%O2=M5B4NW5NNT11SLL%O3=M5B4NW5NNT11%O4=M5B4NW5NNT11SLL%O5=M5B4NW5NNT11SLL%O6=M5B4NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M5B4NW5SLL%CC=Y%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Darwin 15.2.0 Darwin Kernel Version 15.2.0: Fri Nov 13 19:56:56 PST 2015; root:xnu-3248.20.55~2/RELEASE_X86_64 x86_64
Fingerprint Apple OS X 10.11.2 (El Capitan) (Darwin 15.2.0)
Class Apple | OS X | 10.11.X | general purpose
CPE cpe:/o:apple:mac_os_x:10.11.2 auto
SEQ(SP=FB-105%GCD=1-6%ISR=FC-106%TI=RD%CI=RI%II=RI%TS=A)
OPS(O1=M5B4NW5NNT11SLL%O2=M5B4NW5NNT11SLL%O3=M5B4NW5NNT11%O4=M5B4NW5NNT11SLL%O5=M5B4NW5NNT11SLL%O6=M5B4NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=FFFF%O=M5B4NW5SLL%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# Apple | OS X | 10.8.X
Fingerprint Apple OS X 10.8 (Mountain Lion)
Class Apple | OS X | 10.8.X | general purpose
CPE cpe:/o:apple:mac_os_x:10.8 auto
SEQ(SP=FC-106%GCD=1-6%ISR=100-10A%TI=RD%CI=RI%II=RI%TS=A|D)
OPS(O1=M574NW4NNT11SLL%O2=M574NW4NNT11SLL%O3=M574NW4NNT11%O4=M574NW4NNT11SLL%O5=M574NW4NNT11SLL%O6=M574NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M574NW4SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Darwin 12.4.0 Darwin Kernel Version 12.4.0: Wed May  1 17:57:12 PDT 2013; root:xnu-2050.24.15~1/RELEASE_X86_64 x86_64
Fingerprint Apple OS X 10.8 (Mountain Lion) (Darwin 12.4.0)
Class Apple | OS X | 10.8.X | general purpose
CPE cpe:/o:apple:mac_os_x:10.8 auto
SEQ(SP=101-10B%GCD=1-6%ISR=100-10A%TI=RD%CI=RI%II=RI%TS=A)
OPS(O1=M5B4NW4NNT11SLL%O2=M5B4NW4NNT11SLL%O3=M5B4NW4NNT11%O4=M5B4NW4NNT11SLL%O5=M5B4NW4NNT11SLL%O6=M5B4NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M5B4NW4SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# iPhone 4 running iOS 5.0.1
# Darwin 12.0.0 Darwin Kernel Version 12.0.0: Mon Jan 30 18:41:34 PST 2012; root:xnu-2050.1.12~1/RELEASE_X86_64 x86_64, Mac OS X 10.8 Preview 1
# Darwin 12.1.0 Darwin Kernel Version 12.1.0: Tue Aug 14 13:29:55 PDT 2012; root:xnu-2050.9.2~1/RELEASE_X86_64 x86_64
# Mac OS X 10.9 Build 13A603
# Darwin 13.0.0 Darwin Kernel Version 13.0.0: Thu Sep 19 22:22:27 PDT 2013; root:xnu-2422.1.72~6/RELEASE_X86_64 x86_64
# OSX 10.9.5 Mavericks (Darwin 13.4.0)
Fingerprint Apple OS X 10.8 (Mountain Lion) - 10.9 (Mavericks) (Darwin 12.0.0 - 13.4.0) or iOS 5.0.1
Class Apple | OS X | 10.8.X | general purpose
CPE cpe:/o:apple:mac_os_x:10.8
Class Apple | iOS | 5.X | phone
CPE cpe:/o:apple:iphone_os:5.0.1 auto
Class Apple | iOS | 5.X | media device
CPE cpe:/o:apple:iphone_os:5.0.1 auto
SEQ(SP=F4-108%GCD=1-6%ISR=F2-110%TI=RD%CI=RD|RI%II=RI%TS=A)
OPS(O1=M3FD8NW4NNT11SLL%O2=M3FD8NW4NNT11SLL%O3=M3FD8NW4NNT11%O4=M3FD8NW4NNT11SLL%O5=M3FD8NW4NNT11SLL%O6=M3FD8NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M3FD8NW4SLL%CC=N)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%RD=0)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%RD=0)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%RD=0)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%RD=0)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=Z%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# iPhone 4 running iOS 5.1.1 (9B206), tested via WiFi.
# Darwin 12.0.0 Darwin Kernel Version 12.0.0: Sun Jun 24 23:00:16 PDT 2012; root:xnu-2050.7.9~1/RELEASE_X86_64 x86_64
# iPad 2 running iOS 5.1.1
# Mac OS X 10.8.1 (Mountain Lion)
# Darwin 12.3.0 Darwin Kernel Version 12.3.0: Sun Jan  6 22:37:10 PST 2013; root:xnu-2050.22.13~1/RELEASE_X86_64 x86_64
# iPod touch (4th generation), Model A1367, running iOS 6.0.1
# 12.4.0 Darwin Kernel Version 12.4.0: Wed May  1 17:57:12 PDT 2013; root:xnu-2050.24.15~1/RELEASE_X86_64 x86_64
# iPad mini, iOS 6.1.3
# Apple iPod, OS Version: 6.1.5 (10B400)
# Darwin 13.4.0 Darwin Kernel Version 13.4.0: Sun Aug 17 19:50:11 PDT 2014; root:xnu-2422.115.4~1/RELEASE_X86_64 x86_64
Fingerprint Apple OS X 10.8 (Mountain Lion) - 10.9 (Mavericks) or iOS 5.1.1 - 6.1.5 (Darwin 12.0.0 - 13.4.0)
Class Apple | OS X | 10.8.X | general purpose
CPE cpe:/o:apple:mac_os_x:10.8 auto
Class Apple | OS X | 10.9.X | general purpose
CPE cpe:/o:apple:mac_os_x:10.9 auto
Class Apple | iOS | 5.X | media device
CPE cpe:/o:apple:iphone_os:5 auto
Class Apple | iOS | 5.X | phone
CPE cpe:/o:apple:iphone_os:5 auto
Class Apple | iOS | 6.X | media device
CPE cpe:/o:apple:iphone_os:6 auto
SEQ(SP=F7-109%GCD=1-6%ISR=FA-110%TI=RD%CI=RI%II=BI|RI%TS=A|C)
OPS(O1=M5B4NW4NNT11SLL%O2=M5B4NW4NNT11SLL%O3=M5B4NW4NNT11%O4=M5B4NW4NNT11SLL%O5=M5B4NW4NNT11SLL%O6=M5B4NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M5B4NW4SLL%CC=N)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%RD=0)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%RD=0)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%RD=0)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Darwin 12.0.0 Darwin Kernel Version 12.0.0: Sun Jun 24 23:00:16 PDT 2012; root:xnu-2050.7.9~1/RELEASE_X86_64 x86_64
# Darwin 13.2.0 Darwin Kernel Version 13.2.0: Thu Apr 17 23:03:13 PDT 2014; root:xnu-2422.100.13~1/RELEASE_X86_64 x86_64
# Darwin -mbp.fios-router.home 13.4.0 Darwin Kernel Version 13.4.0: Wed Mar 18 16:20:14 PDT 2015; root:xnu-2422.115.14~1/RELEASE_X86_64 x86_64
Fingerprint Apple OS X 10.8 (Mountain Lion) - 10.9.5 (Mavericks) (Darwin 12.0.0 - 13.4.0)
Class Apple | OS X | 10.8.X | general purpose
CPE cpe:/o:apple:mac_os_x:10.8
Class Apple | OS X | 10.9.X | general purpose
CPE cpe:/o:apple:mac_os_x:10.9 auto
SEQ(SP=FA-109%GCD=1-6%ISR=FD-10F%TI=RD%CI=RD%II=RI%TS=A)
OPS(O1=M3FD8NW4NNT11SLL%O2=M3FD8NW4NNT11SLL%O3=M3FD8NW4NNT11%O4=M3FD8NW4NNT11SLL%O5=M3FD8NW4NNT11SLL%O6=M3FD8NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M3FD8NW4SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# OSX Mountain Lion: Darwin 12.0.0 Darwin Kernel Version 12.0.0: Sun Jun 24 23:00:16 PDT 2012; root:xnu-2050.7.9~1/RELEASE_X86_64 x86_64
# Darwin 12.1.0 Darwin Kernel Version 12.1.0: Tue Aug 14 13:29:55 PDT 2012; root:xnu-2050.9.2~1/RELEASE_X86_64 x86_64
Fingerprint Apple OS X 10.8 - 10.8.1 (Mountain Lion) (Darwin 12.0.0 - 12.1.0)
Class Apple | OS X | 10.8.X | general purpose
CPE cpe:/o:apple:mac_os_x:10.8
SEQ(SP=FA-104%GCD=1-6%ISR=FD-109%TI=RD%CI=RD%II=RI%TS=A)
OPS(O1=M3FD8NW8NNT11SLL%O2=M3FD8NW8NNT11SLL%O3=M3FD8NW8NNT11%O4=M3FD8NW8NNT11SLL%O5=M3FD8NW8NNT11SLL%O6=M3FD8NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M3FD8NW8SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=Z%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# 12.2.0 Darwin Kernel Version 12.2.0: Sat Aug 25 00:48:52 PDT 2012; root:xnu-2050.18.24~1/RELEASE_X86_64 x86_64
Fingerprint Apple OS X 10.8.2 (Mountain Lion) (Darwin 12.2.0)
Class Apple | OS X | 10.8.X | general purpose
CPE cpe:/o:apple:mac_os_x:10.8.2 auto
SEQ(SP=FF-109%GCD=1-6%ISR=106-110%TI=RD%CI=RD%II=RI%TS=A)
OPS(O1=M5B4NW4NNT11SLL%O2=M5B4NW4NNT11SLL%O3=M5B4NW4NNT11%O4=M5B4NW4NNT11SLL%O5=M5B4NW4NNT11SLL%O6=M5B4NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M5B4NW4SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# localhost scan
# Darwin 13.0.0 Darwin Kernel Version 13.0.0: Thu Sep 19 22:22:27 PDT 2013; root:xnu-2422.1.72~6/RELEASE_X86_64 x86_64
# Darwin 13.0.2 Darwin Kernel Version 13.0.2: Sun Sep 29 19:38:57 PDT 2013; root:xnu-2422.75.4~1/RELEASE_X86_64 x86_64
Fingerprint Apple OS X 10.9 (Mavericks) (Darwin 13.0.0 - 13.0.2)
Class Apple | OS X | 10.9.X | general purpose
CPE cpe:/o:apple:mac_os_x:10.9 auto
SEQ(SP=100-10A%GCD=1-6%ISR=108-112%TI=RD%CI=RD%TS=U)
OPS(O1=M3FD8SLL%O2=M3FD8SLL%O3=M3FD8%O4=M3FD8SLL%O5=M3FD8SLL%O6=M3FD8SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M3FD8SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(R=N)

# Darwin thunderbolt.local 13.0.0 Darwin Kernel Version 13.0.0: Wed Jul 17 01:22:21 PDT 2013; root:xnu-2422.1.43~2/RELEASE_X86_64 x86_64
# Darwin hostname 13.2.0 Darwin Kernel Version 13.2.0: Thu Apr 17 23:03:13 PDT 2014; root:xnu-2422.100.13~1/RELEASE_X86_64 x86_64
Fingerprint Apple OS X 10.9 (Mavericks) (Darwin 13.0.0 - 13.2.0)
Class Apple | OS X | 10.9.X | general purpose
CPE cpe:/o:apple:mac_os_x:10.9 auto
SEQ(SP=FE-10C%GCD=1-6%ISR=104-10E%TI=RD%CI=RI%II=RI%TS=A)
OPS(O1=M3FD8NW4NNT11SLL%O2=M3FD8NW4NNT11SLL%O3=M3FD8NW4NNT11%O4=M3FD8NW4NNT11SLL%O5=M3FD8NW4NNT11SLL%O6=M3FD8NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M3FD8NW4SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=Z%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Darwin 13.0.0 Darwin Kernel Version 13.0.0: Thu Sep 19 22:22:27 PDT 2013; root:xnu-2422.1.72~6/RELEASE_X86_64 x86_64
# OSX 10.9.3 (Darwin 13.2)
Fingerprint Apple OS X 10.9 (Mavericks) (Darwin 13.0.0 - 13.2.0)
Class Apple | OS X | 10.9.X | general purpose
CPE cpe:/o:apple:mac_os_x:10.9 auto
SEQ(SP=FF-109%GCD=1-6%ISR=107-111%TI=RD%II=RI%TS=A)
OPS(O1=M3FD8NW4NNT11SLL%O2=M3FD8NW4NNT11SLL%O3=M3FD8NW4NNT11%O4=M3FD8NW4NNT11SLL%O5=M3FD8NW4NNT11SLL%O6=M3FD8NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M3FD8NW4SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=N)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G|Z%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# OS X 10.9
Fingerprint Apple OS X 10.9 (Mavericks) (Darwin 13.0.0)
Class Apple | OS X | 10.9.X | general purpose
CPE cpe:/o:apple:mac_os_x:10.9 auto
SEQ(SP=FA-104%GCD=1-6%ISR=108-112%TI=RD%CI=RD%II=RI%TS=A)
OPS(O1=M56ANW5NNT11SLL%O2=M56ANW5NNT11SLL%O3=M56ANW5NNT11%O4=M56ANW5NNT11SLL%O5=M56ANW5NNT11SLL%O6=M56ANNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M56ANW5SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Darwin 13.2.0 Darwin Kernel Version 13.2.0: Thu Apr 17 23:03:13 PDT 2014; root:xnu-2422.100.13~1/RELEASE_X86_64 x86_64
Fingerprint Apple OS X 10.9.3 (Mavericks) (Darwin 13.2.0)
Class Apple | OS X | 10.9.X | general purpose
CPE cpe:/o:apple:mac_os_x:10.9.3 auto
SEQ(SP=F8-102%GCD=1-6%ISR=108-112%TI=RD%CI=RD%TS=A)
OPS(O1=M585NW4NNT11SLL%O2=M585NW4NNT11SLL%O3=M585NW4NNT11%O4=M585NW4NNT11SLL%O5=M585NW4NNT11SLL%O6=M585NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M585NW4SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# tvOS 13.4.6
# 13.4.8
Fingerprint Apple tvOS 13.4 (Darwin 19.4.0)
Class Apple | tvOS | 13.X | media device
CPE cpe:/o:apple:tvos:13.4 auto
SEQ(SP=103-10D%GCD=1-6%ISR=106-110%TI=Z%II=RI%TS=A)
OPS(O1=M5B4NW6NNT11SLL%O2=M5B4NW6NNT11SLL%O3=M5B4NW6NNT11%O4=M5B4NW6NNT11SLL%O5=M5B4NW6NNT11SLL%O6=M5B4NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=N|Y%T=3B-45%TG=40%W=FFFF%O=M5B4NW6SLL%CC=N%Q=)
T1(R=Y%DF=N|Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=N)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=N|S%T=3B-45%TG=40%CD=S)

# WatchOS 6.2.8
Fingerprint Apple watchOS 6.2 (Darwin 19.2.0)
Class Apple | watchOS | 6.X | specialized
CPE cpe:/o:apple:watchos:6.2 auto
SEQ(SP=FE-108%GCD=1-6%ISR=102-10C%TI=Z%CI=RD%II=RI%TS=A)
OPS(O1=M5B4NW4NNT11SLL%O2=M5B4NW4NNT11SLL%O3=M5B4NW4NNT11%O4=M5B4NW4NNT11SLL%O5=M5B4NW4NNT11SLL%O6=M5B4NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M5B4NW4SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# iWatch 7
Fingerprint Apple watchOS 7 (Darwin 20.0.0)
Class Apple | watchOS | 7.X | specialized
CPE cpe:/o:apple:watchos:7 auto
SEQ(SP=F1-FB%GCD=1-6%ISR=105-10F%TI=Z%CI=RD%II=RI%TS=21)
OPS(O1=M5B4NW5NNT11SLL%O2=M5B4NW5NNT11SLL%O3=M5B4NW5NNT11%O4=M5B4NW5NNT11SLL%O5=M5B4NW5NNT11SLL%O6=M5B4NNT11SLL)
WIN(W1=B50%W2=AD8%W3=4E8%W4=FFFF%W5=418%W6=1FA)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=0%O=M5B4NW5SLL%CC=Y%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# OS/2 4.52 / ArcaOS 5.x
Fingerprint ArcaOS 5
Class Arca Noae | ArcaOS | 5.X | general purpose
CPE cpe:/o:arcanoae:arcaos:5 auto
SEQ(SP=8D-97%GCD=1-6%ISR=8B-95%TI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4NW0%O2=M5B4NW0%O3=M5B4NW0%O4=M5B4NW0%O5=M5B4NW0%O6=M5B4)
WIN(W1=832C%W2=8340%W3=8200%W4=8000%W5=81D0%W6=805C)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=832C%O=M5B4NW0%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=N)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=4210%RIPCK=Z%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Speedport W 700V, firmware version 1.22.000
# SMC, device model: SMC7904WBRA
# https://techinfodepot.shoutwiki.com/wiki/T-Com_Speedport_W700V
Fingerprint Arcadyan ARV4528KW WAP
Class Arcadyan | embedded || WAP
CPE cpe:/h:arcadyan:arv4528kw auto
SEQ(SP=0-1C%GCD=1-6|64|C8|12C|190|1F4%ISR=4B-55%TI=I%II=I%SS=S%TS=U)
OPS(O1=M578%O2=M578%O3=M280%O4=M578%O5=M218%O6=M109)
WIN(W1=5000%W2=5000%W3=5000%W4=5000%W5=5000%W6=5000)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=5000%O=M578%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=5000%S=O%A=S+%F=AS%O=M109%RD=0%Q=)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=O%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=O%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=Z)

# T-Home Speedport W 700V WAP
# T-Com Speedport w700V Router,ADSL-Modem,ADSL2-Modem,WAP
Fingerprint Arcadyan ARV4528KW WAP
Class Arcadyan | embedded || WAP
CPE cpe:/h:arcadyan:arv4528kw auto
SEQ(SP=0-5%GCD=68|6C|D0|D8|138|144|1A0|1B0|208|21C%ISR=4B-55%TI=I%II=I%SS=S%TS=U)
OPS(O1=M578%O2=M578%O3=M280%O4=M578%O5=M218%O6=M109)
WIN(W1=5000%W2=5000%W3=5000%W4=5000%W5=5000%W6=5000)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=5000%O=M578%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=5000%S=O%A=S+%F=AS%O=M109%RD=0%Q=)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=O%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=O%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N|O|S|Y%T=3B-45%TG=40%CD=Z)

# Arcadyan Router W700V (Deutsche Telekom)
Fingerprint Arcadyan ARV4528KW WAP
Class Arcadyan | embedded || WAP
CPE cpe:/h:arcadyan:arv4528kw auto
SEQ(SP=18-22%GCD=1-6%ISR=4B-55%TI=I%CI=I%II=I%SS=S%TS=U)
OPS(O1=M578%O2=M578%O3=M280%O4=M578%O5=M218%O6=M109)
WIN(W1=5000%W2=5000%W3=5000%W4=5000%W5=5000%W6=5000)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=5000%O=M578%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=O|S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=O%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=O%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=Y%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N|S%T=3B-45%TG=40%CD=Z)

# Speedport W700V Integrated ADSL2 Modem
Fingerprint Arcadyan ARV4528KW WAP
Class Arcadyan | embedded || WAP
CPE cpe:/h:arcadyan:arv4528kw auto
SEQ(SP=0-5%GCD=65|CA|12F|194|1F9%ISR=4B-55%TI=I|RD%CI=I%II=I%SS=S%TS=U)
OPS(O1=M578%O2=M578%O3=M280%O4=M578%O5=M218%O6=M109)
WIN(W1=5000%W2=5000%W3=5000%W4=5000%W5=5000%W6=5000)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=5000%O=M578%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=O|S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=O%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=O%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N|Y%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=O|S%T=3B-45%TG=40%CD=Z)

# Astoria Networks ARV7519RW22 (Livebox 2.1)
Fingerprint Arcadyan ARV7519RW22 WAP
Class Arcadyan | embedded || WAP
CPE cpe:/h:arcadyan:arv7519rw22 auto
SEQ(SP=1D-27%GCD=1-6%ISR=4B-55%TI=I%CI=I%II=I%SS=S%TS=U)
OPS(O1=M578%O2=M578%O3=M280%O4=M578%O5=M218%O6=M109)
WIN(W1=A000%W2=A000%W3=A000%W4=A000%W5=A000%W6=A000)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=A000%O=M578%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=A000%S=O%A=S+%F=AS%O=M109%RD=0%Q=)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=O%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=O%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=Y%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=Z)

# Speedport W504V
Fingerprint Arcadyan ARV8539PW22
Class Arcadyan | embedded || WAP
SEQ(SP=0-1D%GCD=1-6|64|C8|12C|190|1F4%ISR=4B-55%TI=I%CI=I%II=I%SS=S%TS=U)
OPS(O1=M578%O2=M578%O3=M280%O4=M578%O5=M218%O6=M109)
WIN(W1=5000%W2=5000%W3=5000%W4=5000%W5=5000%W6=5000)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=5000%O=M578%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=5000%S=O%A=S+%F=AS%O=M109%RD=0%Q=)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=O%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=O%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N|Y%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N|S|Y%T=3B-45%TG=40%CD=Z)

# Speedport W 504V DSL Router + WAP
Fingerprint Arcadyan ARV8539PW22 WAP
Class Arcadyan | embedded || WAP
CPE cpe:/h:arcadyan:arv8539pw22 auto
SEQ(SP=0-1A%GCD=1-6|64|C8|12C|190|1F4%ISR=4B-55%TI=I%CI=I%II=I%SS=S%TS=U)
OPS(O1=M5AC%O2=M578%O3=M280%O4=M5AC%O5=M218%O6=M109)
WIN(W1=8000%W2=8000%W3=8000%W4=8000%W5=8000%W6=8000)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=8000%O=M5AC%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=8000%S=O%A=S+%F=AS%O=M109%RD=0%Q=)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=O%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=O%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=O|S%T=3B-45%TG=40%CD=Z)

# Speedport W 723V Typ B
Fingerprint Arcadyan VGV8539JW22 WAP
Class Arcadyan | embedded || WAP
CPE cpe:/h:arcadyan:vgv8539jw22 auto
SEQ(SP=0-5%GCD=64|C8|12C|190|1F4%ISR=4B-55%TI=I|RD%CI=I%II=I%SS=S%TS=U)
OPS(O1=M5AC%O2=M578%O3=M280%O4=M5AC%O5=M218%O6=M109)
WIN(W1=A000%W2=A000%W3=A000%W4=A000%W5=A000%W6=A000)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=A000%O=M5AC%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=O|S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=A000%S=O%A=O|S+%F=AS%O=M109%RD=0%Q=)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=O%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=O%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N|Y%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=Z)

# Speedport W723V from Telekom Germany(T-Online)
Fingerprint Arcadyan VGV8539JW22 WAP
Class Arcadyan | embedded || WAP
CPE cpe:/h:arcadyan:vgv8539jw22 auto
SEQ(SP=0-1D%GCD=1-6|64|C8|12C|190|1F4%ISR=4B-55%TI=I%CI=I%TS=U)
OPS(O1=M5AC%O2=M578%O3=M280%O4=M5AC%O5=M218%O6=M109)
WIN(W1=5000%W2=5000%W3=5000%W4=5000%W5=5000%W6=5000)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=5000%O=M5AC%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=5000%S=O%A=S+%F=AS%O=M109%RD=0%Q=)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=O%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=O%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=7E99%RUD=G)
IE(R=N)

# Arcadyan Technology Speedport W723 Typ B
Fingerprint Arcadyan VGV8539JW22 WAP
Class Arcadyan | embedded || WAP
CPE cpe:/h:arcadyan:vgv8539jw22 auto
SEQ(SP=E-18%GCD=1-6%ISR=4B-55%TI=I%CI=I%TS=U)
OPS(O1=M5AC%O2=M578%O3=M280%O4=M5AC%O5=M218%O6=M109)
WIN(W1=5000%W2=5000%W3=5000%W4=5000%W5=5000%W6=5000)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=5000%O=M5AC%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=5000%S=O%A=S+%F=AS%O=M109%RD=0%Q=)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=O%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=O%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=O%T=3B-45%TG=40%CD=Z)

# German Telekom DSL-Router:, Speedport W921V, Boot-Code-Version v1.09.01, Firmware-Version 1.24.000, Hardware-Version 01A
Fingerprint Arcadyan VGV953AKW22 WAP
Class Arcadyan | embedded || WAP
CPE cpe:/h:arcadyan:vgv953akw22 auto
SEQ(SP=1-4F%GCD=1-6%ISR=4B-55%TI=I|RD%CI=I%II=I%SS=S%TS=U)
OPS(O1=M5AC%O2=M578%O3=M280%O4=M5AC%O5=M218%O6=M109)
WIN(W1=F000%W2=F000%W3=F000%W4=F000%W5=F000%W6=F000)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=F000%O=M5AC%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=F000%S=O%A=S+%F=AS%O=M109%RD=0%Q=)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=O%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=O%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=O%T=3B-45%TG=40%CD=Z)

# Arcor-Easy Box A300 WLAN, Firmware 1.00.624
Fingerprint Arcor-Easy Box A 300 WLAN wireless ADSL router
Class Arcor | embedded || broadband router
SEQ(SP=F-1D%GCD=1-6%ISR=4B-55%TI=I%II=I%SS=S%TS=U)
OPS(O1=M578%O2=M578%O3=M280%O4=M578%O5=M218%O6=M109)
WIN(W1=5000%W2=5000%W3=5000%W4=5000%W5=5000%W6=5000)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=5000%O=M578%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=5000%S=O%A=S+%F=AS%O=M109%RD=0%Q=)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=O%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=O%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=O|S|Y%T=3B-45%TG=40%CD=Z)

# Areca 1222 RAID controller.  It's version 1.47.
# Areca ARC-1212 4-Port Low Profile PCI-E x8 SAS RAID Controller
# Siemens HiPath 3500 v3.0 PBX, branded as: Deutsche Telekom Octopus F400 19"
Fingerprint Areca ARC-1212 or ARC-1222 RAID controller or Siemens HiPath 3500 PBX
Class Areca | embedded || storage-misc
CPE cpe:/h:areca:arc-1212
CPE cpe:/h:areca:arc-1222
Class Siemens | embedded || PBX
CPE cpe:/h:siemens:hipath_3500
SEQ(SP=BE-C8%GCD=1-6%ISR=CD-D7%TI=I%CI=I%TS=U)
OPS(O1=M5A6%O2=M5A6%O3=M5A6%O4=M5A6%O5=M5A6%O6=M5A6)
WIN(W1=5A6%W2=5A6%W3=5A6%W4=5A6%W5=5A6%W6=5A6)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=5A6%O=M5A6%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=3B-45%TG=40%W=400%S=A%A=S+%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=3B-45%TG=40%W=5A6%S=O%A=S+%F=AS%O=M5A6%RD=0%Q=)
T4(R=Y%DF=N%T=3B-45%TG=40%W=400%S=A%A=S+%F=AR%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=400%S=A%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=400%S=A%A=S+%F=AR%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=400%S=A%A=S+%F=AR%O=%RD=0%Q=)
U1(R=N)
IE(R=N)

# Argon iNet3+ Internetradio
Fingerprint Argon iNet3+ internet radio
Class Argon | embedded || media device
SEQ(SP=71-7F%GCD=1-6%ISR=D0-DA%TI=I%CI=I%II=RI%SS=S%TS=U)
OPS(O1=M5B4%O2=M578%O3=M280%O4=M5B4%O5=M218%O6=M109)
WIN(W1=4000%W2=4000%W3=4000%W4=4000%W5=4000%W6=4000)
ECN(R=Y%DF=N%T=FA-104%TG=FF%W=4000%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=FA-104%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=FA-104%TG=FF%W=4000%S=O%A=S+%F=AS%O=M109%RD=0%Q=)
T4(R=Y%DF=N%T=FA-104%TG=FF%W=4000%S=A+%A=S%F=AR%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=4000%S=A%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=4000%S=A%A=S%F=AR%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FA-104%TG=FF%W=4000%S=A%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=8A%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=33-3D%TG=40%CD=S)

# Argon iNet3+ internet radio (Frontier Silicon)
Fingerprint Argon iNet3+ internet radio
Class Argon | embedded || media device
SEQ(SP=6E-78%GCD=1-6%ISR=D0-DA%TI=I%CI=I%TS=U)
OPS(O1=M5B4%O2=M578%O3=M280%O4=M5B4%O5=M218%O6=M109)
WIN(W1=4000%W2=4000%W3=4000%W4=4000%W5=4000%W6=4000)
ECN(R=Y%DF=N%T=FA-104%TG=FF%W=4000%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=FA-104%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=FA-104%TG=FF%W=4000%S=O%A=S+%F=AS%O=M109%RD=0%Q=)
T4(R=Y%DF=N%T=FA-104%TG=FF%W=4000%S=A+%A=S%F=AR%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=4000%S=A%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=4000%S=A%A=S%F=AR%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FA-104%TG=FF%W=4000%S=A%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=F052%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=22-2C%TG=40%CD=S)

# Argosy Research HD363N Network HDD
Fingerprint Argosy HD363N NAS device
Class Argosy | embedded || storage-misc
CPE cpe:/h:argosy:hd363n auto
SEQ(SP=0-1D%GCD=1-6|6FC|DF8|14F4|1BF0|22EC%ISR=6C-76%II=I%TS=U)
OPS(O1=M5B4%O2=M578%O3=M280%O4=M5B4%O5=M218%O6=M109)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=N%T=1B-25%TG=20%W=FFFF%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=1B-25%TG=20%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=1B-25%TG=20%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=1B-25%TG=20%W=FFFF%S=O%A=S+%F=AS%O=M109%RD=0%Q=)
T4(R=Y%DF=N%T=1B-25%TG=20%W=0%S=A%A=S%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=1B-25%TG=20%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=1B-25%TG=20%W=0%S=A%A=S%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=1B-25%TG=20%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=1B-25%TG=20%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=I%RUCK=G%RUD=G)
IE(DFI=N%T=1B-25%TG=20%CD=S)

# External Hard Disk Argosy HD354N
# Freecom Network Drive. Firmware NAS2891-009T3 LOADER 3.2
# Iomega Home Network Hard Drive 500GB
Fingerprint Asmax NAS-USB print server; or Argosy HD354N, Freecom Network Drive, or Iomega Home Media Network Hard Drive NAS device
Class Argosy | embedded || storage-misc
Class Asmax | embedded || print server
Class Freecom | embedded || storage-misc
Class Iomega | embedded || storage-misc
SEQ(SP=0-9D%GCD=1-6%ISR=78-99%TI=I%CI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4%O2=M578%O3=M280%O4=M5B4%O5=M218%O6=M109)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=N%T=1B-25%TG=20%W=FFFF%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=1B-25%TG=20%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=1B-25%TG=20%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=1B-25%TG=20%W=FFFF%S=O%A=S+%F=AS%O=M109%RD=0%Q=)
T4(R=Y%DF=N%T=1B-25%TG=20%W=0%S=A%A=S%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=1B-25%TG=20%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=1B-25%TG=20%W=0%S=A%A=S%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=1B-25%TG=20%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=1B-25%TG=20%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=1B-25%TG=20%CD=S)

# http://192.168.100.1/cmOpenSource.htm: Kernel 2.6.18,
Fingerprint Arris cable modem (Linux 2.6.18)
Class Arris | embedded || broadband router
Class Linux | Linux | 2.6.X | broadband router
CPE cpe:/o:linux:linux_kernel:2.6.18 auto
SEQ(SP=C6-D0%GCD=1-6%ISR=CB-D5%TI=Z%CI=Z%II=I%TS=7)
OPS(O1=M5B4ST11NW3%O2=M5B4ST11NW3%O3=M5B4NNT11NW3%O4=M5B4ST11NW3%O5=M5B4ST11NW3%O6=M5B4ST11)
WIN(W1=16A0%W2=16A0%W3=16A0%W4=16A0%W5=16A0%W6=16A0)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=16D0%O=M5B4NNSNW3%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=16A0%S=O%A=S+%F=AS%O=M5B4ST11NW3%RD=0%Q=)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# Xfinity cable modem provided by Comcast: Arris TG562G/CT
Fingerprint Arris TG562G/CT cable modem
Class Arris | embedded || broadband router
SEQ(SP=B6-C0%GCD=1-6%ISR=C0-CA%TI=Z%CI=Z%II=I%TS=7)
OPS(O1=M5B4ST11NW4%O2=M5B4ST11NW4%O3=M5B4NNT11NW4%O4=M5B4ST11NW4%O5=M5B4ST11NW4%O6=M5B4ST11)
WIN(W1=16A0%W2=16A0%W3=16A0%W4=16A0%W5=16A0%W6=16A0)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=16D0%O=M5B4NNSNW4%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# ARRIS TG862G/CT residential gateway, SW_REV: 7.6.59M.SIP.PC20.CT
Fingerprint Arris TG862G/CT cable modem
Class Arris | embedded || broadband router
SEQ(SP=C9-D3%GCD=1-6%ISR=CE-D8%TI=Z%CI=Z%II=I%TS=7)
OPS(O1=M5B4ST11NW4%O2=M5B4ST11NW4%O3=M5B4NNT11NW4%O4=M5B4ST11NW4%O5=M5B4ST11NW4%O6=M5B4ST11)
WIN(W1=16A0%W2=16A0%W3=16A0%W4=16A0%W5=16A0%W6=16A0)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=16D0%O=M5B4NNSNW4%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# Arris TM602B cable modem
# Arris TM502G BOOTR: 5.01 SW_REV: 6.1.120
Fingerprint Arris TM502G or TM602B cable modem
Class Arris | embedded || broadband router
CPE cpe:/h:arris:tm502b auto
CPE cpe:/h:arris:tm602b auto
SEQ(SP=FE-108%GCD=1-6%ISR=102-10C%TI=I%CI=I%II=I%SS=O|S%TS=8)
OPS(O1=M5B4NW0NNT11%O2=M5B4NW0NNT11%O3=M5B4NW0NNT11%O4=M5B4NW0NNT11%O5=M5B4NW0NNT11%O6=M5B4NNT11)
WIN(W1=4000%W2=4000%W3=4000%W4=4000%W5=4000%W6=4000)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=4000%O=M5B4NW0%CC=N)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=O|S+%F=AS%RD=0)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%RD=0)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%RD=0)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%RD=0)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=70%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Arris TG862 (Probably Linux)
Fingerprint Arris TG862 WAP
Class Arris | embedded || WAP
CPE cpe:/h:arris:tg862 auto
SEQ(SP=CA-D4%GCD=1-6%ISR=CC-D6%TI=Z%CI=Z%II=I%TS=7)
OPS(O1=M5B4ST11NW4%O2=M5B4ST11NW4%O3=M5B4NNT11NW4%O4=M5B4ST11NW4%O5=M5B4ST11NW4%O6=M5B4ST11)
WIN(W1=3890%W2=3890%W3=3890%W4=3890%W5=3890%W6=3890)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=3908%O=M5B4NNSNW4%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# ArubaOS (MODEL: Aruba200-US), Version 3.3.2.5
Fingerprint Aruba 200 wireless LAN controller (ArubaOS 3.3.2.5)
Class Aruba | ArubaOS | 3.X | remote management
CPE cpe:/o:arubanetworks:arubaos:3.3.2.5 auto
SEQ(SP=101-10B%GCD=1-6%ISR=103-10D%TI=Z%II=I%TS=7)
OPS(O1=M4F6ST11NW0%O2=M4F6ST11NW0%O3=M4F6NNT11NW0%O4=M4F6ST11NW0%O5=M4F6ST11NW0%O6=M4F6ST11)
WIN(W1=16A0%W2=16A0%W3=16A0%W4=16A0%W5=16A0%W6=16A0)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=16D0%O=M4F6NNSNW0%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=FA-104%TG=FF%CD=S)

# ArubaOS (MODEL: Aruba6000-US), Version 3.3.2.5
# Aruba 3400, ArubaOS 3.3.2.15
Fingerprint Aruba 3400 or 6000 wireless LAN controller (ArubaOS 3.3.2)
Class Aruba | ArubaOS | 3.X | remote management
CPE cpe:/o:arubanetworks:arubaos:3.3.2 auto
SEQ(SP=F7-10D%GCD=1-6%ISR=107-111%TI=Z%CI=Z%II=I%TS=7)
OPS(O1=M5B4ST11NW2%O2=M5B4ST11NW2%O3=M5B4NNT11NW2%O4=M5B4ST11NW2%O5=M5B4ST11NW2%O6=M5B4ST11)
WIN(W1=16A0%W2=16A0%W3=16A0%W4=16A0%W5=16A0%W6=16A0)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=16D0%O=M5B4NNSNW2%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=16A0%S=O%A=S+%F=AS%O=M5B4ST11NW2%RD=0%Q=)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# ARUBA Wireless Networks Model 800
# Aruba Mobility Controller A800, Software: ArubaOS 3.3.1.16 (Linux-based)
Fingerprint Aruba A800 wireless LAN switch
Class Aruba | ArubaOS | 3.X | remote management
CPE cpe:/o:arubanetworks:arubaos:3 auto
SEQ(SP=100-10A%GCD=1-6%ISR=107-111%TI=Z%II=I%TS=7)
OPS(O1=M5B4ST11NW0%O2=M5B4ST11NW0%O3=M5B4NNT11NW0%O4=M5B4ST11NW0%O5=M5B4ST11NW0%O6=M5B4ST11)
WIN(W1=16A0%W2=16A0%W3=16A0%W4=16A0%W5=16A0%W6=16A0)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=16D0%O=M5B4NNSNW0%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=FA-104%TG=FF%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=Y%T=FA-104%TG=FF%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=FA-104%TG=FF%CD=S)

# Aruba Operating System Software, IAP-105, 6.4.0.2-4.1.0.0_44004
Fingerprint Aruba 100-series access point (ArubaOS 6.4.0.2)
Class Aruba | ArubaOS | 6.X | WAP
CPE cpe:/o:arubanetworks:arubaos:6.4.0.2 auto
SEQ(SP=FD-107%GCD=1-6%ISR=107-111%TI=Z%CI=Z%II=I%TS=9|B)
OPS(O1=M4ECST11NW2%O2=M4ECST11NW2%O3=M4ECNNT11NW2%O4=M4ECST11NW2%O5=M4ECST11NW2%O6=M4ECST11)
WIN(W1=1380%W2=1380%W3=1380%W4=1380%W5=1380%W6=1380)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=13B0%O=M4ECNNSNW2%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=1380%S=O%A=S+%F=AS%O=M4ECST11NW2%RD=0%Q=)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# 6.4.2.6-4.1.1.10_51810
Fingerprint Aruba Instant AP (ArubaOS 6.4.2.6)
Class Aruba | ArubaOS | 6.X | WAP
CPE cpe:/o:arubanetworks:arubaos:6.4.2.6 auto
SEQ(SP=C8-D2%GCD=1-6%ISR=CE-D8%TI=Z%CI=Z%II=I%TS=9)
OPS(O1=M4ECST11NW2%O2=M4ECST11NW2%O3=M4ECNNT11NW2%O4=M4ECST11NW2%O5=M4ECST11NW2%O6=M4ECST11)
WIN(W1=1380%W2=1380%W3=1380%W4=1380%W5=1380%W6=1380)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=13B0%O=M4ECNNSNW2%CC=Y%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# Aurba AP-70 running ArubaOS 6.3
Fingerprint ArubaOS 6.3
Class Aruba | ArubaOS | 6.X | WAP
CPE cpe:/o:arubanetworks:arubaos:6.3 auto
SEQ(SP=101-10B%GCD=1-6%ISR=102-10C%TI=Z%CI=Z%II=I%TS=9)
OPS(O1=M5B4ST11NW1%O2=M5B4ST11NW1%O3=M5B4NNT11NW1%O4=M5B4ST11NW1%O5=M5B4ST11NW1%O6=M5B4ST11)
WIN(W1=16A0%W2=16A0%W3=16A0%W4=16A0%W5=16A0%W6=16A0)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=16D0%O=M5B4NNSNW1%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=16A0%S=O%A=S+%F=AS%O=M5B4ST11NW1%RD=0%Q=)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# 6.4.2.6-4.1.3.0_54915
Fingerprint ArubaOS 6.4.2.6
Class Aruba | ArubaOS | 6.X | WAP
CPE cpe:/o:arubanetworks:arubaos:6.4.2.6 auto
SEQ(SP=C5-CF%GCD=1-6%ISR=CA-D4%TI=Z%CI=Z%II=I%TS=9)
OPS(O1=M4ECST11NW2%O2=M4ECST11NW2%O3=M4ECNNT11NW2%O4=M4ECST11NW2%O5=M4ECST11NW2%O6=M4ECST11)
WIN(W1=1380%W2=1380%W3=1380%W4=1380%W5=1380%W6=1380)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=13B0%O=M4ECNNSNW2%CC=Y%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=1380%S=O%A=S+%F=AS%O=M4ECST11NW2%RD=0%Q=)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# 6.4.4.8-4.2.4.4_57496
Fingerprint ArubaOS 6.4.4.8
Class Aruba | ArubaOS | 6.X | WAP
CPE cpe:/o:arubanetworks:arubaos:6.4.4.8 auto
SEQ(SP=C4-CE%GCD=1-6%ISR=CB-D5%TI=Z%CI=Z%II=I%TS=9)
OPS(O1=M4ECST11NW5%O2=M4ECST11NW5%O3=M4ECNNT11NW5%O4=M4ECST11NW5%O5=M4ECST11NW5%O6=M4ECST11)
WIN(W1=1380%W2=1380%W3=1380%W4=1380%W5=1380%W6=1380)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=13B0%O=M4ECNNSNW5%CC=Y%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=1380%S=O%A=S+%F=AS%O=M4ECST11NW5%RD=0%Q=)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# 6.5.4.17
Fingerprint ArubaOS 6.5.4.17
Class Aruba | ArubaOS | 6.X | WAP
CPE cpe:/o:arubanetworks:arubaos:6.5.4.17 auto
SEQ(SP=C0-CA%GCD=1-6%ISR=C3-CD%TI=Z%CI=Z%II=I%TS=9)
OPS(O1=M4ECST11NW5%O2=M4ECST11NW5%O3=M4ECNNT11NW5%O4=M4ECST11NW5%O5=M4ECST11NW5%O6=M4ECST11)
WIN(W1=1380%W2=1380%W3=1380%W4=1380%W5=1380%W6=1380)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=13B0%O=M4ECNNSNW5%CC=Y%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# ArubaOS-CX Version: ML.10.04.3011
Fingerprint Aruba ArubaOS-CX 10.04
Class Aruba | ArubaOS-CX | 10.X | switch
CPE cpe:/o:arubanetworks:arubaos_cx:10.04 auto
SEQ(SP=FF-109%GCD=1-6%ISR=10B-115%TI=Z%CI=Z%II=I%TS=9|A)
OPS(O1=M5B4ST11NW7%O2=M5B4ST11NW7%O3=M5B4NNT11NW7%O4=M5B4ST11NW7%O5=M5B4ST11NW7%O6=M5B4ST11)
WIN(W1=7120%W2=7120%W3=7120%W4=7120%W5=7120%W6=7120)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=7210%O=M5B4%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# WC.16.10.0012
Fingerprint Aruba ArubaOS-Switch 16.10
Class Aruba | ArubaOS-Switch | 16.X | switch
CPE cpe:/o:arubanetworks:arubaos_switch:16.10 auto
SEQ(SP=75-89%GCD=1-6%ISR=8F-99%TI=I%II=I%SS=S%TS=A)
OPS(O1=M5B4NW1NNT11%O2=M578NW1NNSNNT11%O3=M280NW1NNT11%O4=M218NW1NNSNNT11%O5=M218NW1NNSNNT11%O6=M109NNSNNT11)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M5B4NW1NNS%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=Y%DF=N%T=00-05%TG=20%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=N)
T7(R=N)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=FA-104%TG=FF%CD=S)

# Aruba Instant On 1930 24G 4SFP/SFP+ Switch JL682A, InstantOn_1930_1.0.5.0 (139), Linux 4.4.120, U-Boot 2013.01 (V1.0.1.29)
Fingerprint Aruba Instant On 1930 switch (Linux 4.4)
Class Aruba | embedded || switch
CPE cpe:/h:arubanetworks:instant_on_1930 auto
Class Linux | Linux | 4.X | switch
CPE cpe:/o:linux:linux_kernel:4.4 auto
SEQ(SP=FD-107%GCD=1-6%ISR=108-112%TI=RD%II=RI%TS=U)
OPS(O1=M5A0%O2=M5A0%O3=M5A0%O4=M5A0%O5=M5A0%O6=M5A0)
WIN(W1=1000%W2=1000%W3=1000%W4=1000%W5=1000%W6=1000)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=1000%O=M5A0%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=N)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Aruba Instant On 1930 24G (JL684A). Software Version 2.5.0, Linux 4.4.120
Fingerprint Aruba Instant On 1930 switch (Linux 4.4)
Class Aruba | embedded || switch
CPE cpe:/h:arubanetworks:instant_on_1930 auto
Class Linux | Linux | 4.X | switch
CPE cpe:/o:linux:linux_kernel:4.4 auto
SEQ(SP=FC-106%GCD=1-6%ISR=FB-105%TI=RD%CI=RI%II=RI%TS=U)
OPS(O1=M5A0%O2=M5A0%O3=M5A0%O4=M5A0%O5=M5A0%O6=M5A0)
WIN(W1=1000%W2=1000%W3=1000%W4=1000%W5=1000%W6=1000)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=1000%O=M5A0%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
T3(R=N)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Aruba Instant On 1830 8G managed network switch running Linux 4.4.120.
# Netgear MS510TX, Firmware 6.7.0.42 (Linux 3.10)
# SG300-10 10 Port Gigabit PoE Managed Switch Firmware Ver. 1.1.1.8
# Cisco SG 300
# SG-200-26
# Aruba 1930 8P 2SFP
Fingerprint Aruba, Cisco, or Netgear switch (Linux 3.10 or 4.4)
Class Aruba | embedded || switch
Class Cisco | embedded || switch
Class Netgear | embedded || switch
Class Linux | Linux | 3.X | switch
CPE cpe:/o:linux:linux_kernel:3.10 auto
Class Linux | Linux | 4.X | switch
CPE cpe:/o:linux:linux_kernel:4 auto
SEQ(SP=F6-10C%GCD=1-6%ISR=F8-116%TI=RD%CI=RD|RI%II=RI%TS=U)
OPS(O1=M[596-5A0]%O2=M[596-5A0]%O3=M[596-5A0]%O4=M[596-5A0]%O5=M[596-5A0]%O6=M[596-5A0])
WIN(W1=1000%W2=1000%W3=1000%W4=1000%W5=1000%W6=1000)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=1000%O=M[596-5A0]%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=O|S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=3B-45%TG=40%W=1000%S=O%A=O|S+%F=AS%O=M[596-5A0]%RD=0%Q=)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# ArubaNetworks IAP 105
# Aruba Instant AP OS.  It is a different firmware chain than what they use in their controller based systems.
Fingerprint Aruba IAP-105 WAP
Class Aruba | embedded || WAP
CPE cpe:/h:arubanetworks:iap-105 auto
SEQ(SP=101-10B%GCD=1-6%ISR=104-10E%TI=Z%CI=Z%II=I%TS=9)
OPS(O1=M5B4ST11NW2%O2=M5B4ST11NW2%O3=M5B4NNT11NW2%O4=M5B4ST11NW2%O5=M5B4ST11NW2%O6=M5B4ST11)
WIN(W1=16A0%W2=16A0%W3=16A0%W4=16A0%W5=16A0%W6=16A0)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=16D0%O=M5B4NNSNW2%CC=N)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0)
T2(R=N)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=16A0%S=O%A=S+%F=AS%O=M5B4ST11NW2%RD=0)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%RD=0)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%RD=0)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%RD=0)
T7(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%RD=0)
U1(DF=N%T=3B-45%TG=40%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# Aruba Instant IAP-93 Access Point
Fingerprint Aruba IAP-93 WAP
Class Aruba | embedded || WAP
CPE cpe:/h:arubanetworks:iap-93 auto
SEQ(SP=104-10E%GCD=1-6%ISR=103-10D%TI=Z%CI=Z%TS=9)
OPS(O1=M5B4ST11NW1%O2=M5B4ST11NW1%O3=M5B4NNT11NW1%O4=M5B4ST11NW1%O5=M5B4ST11NW1%O6=NNT11|M5B4ST11)
WIN(W1=16A0%W2=16A0%W3=16A0%W4=16A0%W5=16A0%W6=16A0)
ECN(R=Y%DF=Y%T=3A-44%TG=40%W=16D0%O=M5B4NNSNW1%CC=N%Q=)
T1(R=Y%DF=Y%T=3A-44%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%T=3A-44%TG=40%W=16A0%S=O%A=S+%F=AS%O=M5B4ST11NW1%RD=0%Q=)
T4(R=Y%DF=Y%T=3A-44%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=3A-44%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3A-44%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=Y%T=3A-44%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(R=N)

# Aruba Instant
Fingerprint Aruba Instant WAP
Class Aruba | embedded || WAP
SEQ(SP=FF-109%GCD=1-6%ISR=103-10D%TI=Z%CI=Z%TS=9)
OPS(O1=M4ECST11NW2%O2=M4ECST11NW2%O3=M4ECNNT11NW2%O4=M4ECST11NW2%O5=M4ECST11NW2%O6=M4ECST11)
WIN(W1=1380%W2=1380%W3=1380%W4=1380%W5=1380%W6=1380)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=13B0%O=M4ECNNSNW2%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=1380%S=O%A=S+%F=AS%O=M4ECST11NW2%RD=0%Q=)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(R=N)

# RT-AC66U Firmware Version: 3.0.0.4.354 (stock from Asus)
Fingerprint Asus RT-AC66U router (Linux 2.6)
Class Asus | embedded || broadband router
CPE cpe:/h:asus:rt-ac66u auto
Class Linux | Linux | 2.6.X | broadband router
CPE cpe:/o:linux:linux_kernel:2.6 auto
SEQ(CI=Z%II=I)
OPS(R=N)
WIN(R=N)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=16D0%O=M5B4NNSNW7%CC=N%Q=)
T1(R=N)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# Linux 2.6.12.6-VENUS #4 Mon Oct 3 18:57:42 CST 2011 mips unknown
Fingerprint Asus O!Play media player (Linux 2.6.12)
Class Asus | embedded || media device
Class Linux | Linux | 2.6.X | media device
CPE cpe:/o:linux:linux_kernel:2.6.12 auto
SEQ(SP=B8-C2%GCD=1-6%ISR=BE-C8%TI=Z%CI=RD%TS=7)
OPS(O1=M5B4ST11NW2%O2=M5B4ST11NW2%O3=M5B4NNT11NW2%O4=M5B4ST11NW2%O5=M5B4ST11NW2%O6=M5B4ST11)
WIN(W1=16A0%W2=16A0%W3=16A0%W4=16A0%W5=16A0%W6=16A0)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=16D0%O=M5B4NNSNW2%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=16A0%S=O%A=S+%F=AS%O=M5B4ST11NW2%RD=0%Q=)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%RD=0)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%RD=0)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%RD=0)
T7(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=O%F=AR%RD=0)
U1(DF=N%T=3B-45%TG=40%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# ASUS Zenfone 5, model: ASUS_T00J with android 4.4.2.
Fingerprint Android 4.4.2
Class Asus | embedded || phone
Class Google | Android | 4.X | phone
CPE cpe:/o:google:android:4.4.2 auto
SEQ(SP=FB-105%GCD=1-6%ISR=107-111%TI=Z%CI=I%II=I%TS=7)
OPS(O1=M5B4ST11NW6%O2=M5B4ST11NW6%O3=M5B4NNT11NW6%O4=M5B4ST11NW6%O5=M5B4ST11NW6%O6=M5B4ST11)
WIN(W1=10F8%W2=10F8%W3=10F8%W4=10F8%W5=10F8%W6=10F8)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=111C%O=M5B4NNSNW6%CC=Y%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# Trendnet TW-100-S4W1CA/RO router
# Model: Asus RX3041 Firmware: Runtime Code V2.1.2.114, Boot Code V0.1.5.24
Fingerprint Asus RX4031 or TRENDnet TW100-S4W1CA router
Class Asus | embedded || router
CPE cpe:/h:asus:rx4031
Class TRENDnet | embedded || router
CPE cpe:/h:trendnet:tw100-s4w1ca auto
SEQ(SP=8D-9F%GCD=1-6%ISR=98-A2%TI=I%CI=I%II=I%SS=S%TS=1)
OPS(O1=M5A8NW0NNT11%O2=M5A8NW0NNT11%O3=M5A8NW0NNT11%O4=M5A8NW0NNT11%O5=M5A8NW0NNT11%O6=M5A8NNT11)
WIN(W1=43E0%W2=4110%W3=423C%W4=43E0%W5=4180%W6=403D)
ECN(R=Y%DF=N%T=7B-85%TG=80%W=4470%O=M5B4NW0%CC=N%Q=)
T1(R=Y%DF=N%T=7B-85%TG=80%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=7B-85%TG=80%W=403D%S=O%A=S+%F=AS%O=M5A8NW0NNT11%RD=0%Q=)
T4(R=Y%DF=N%T=7B-85%TG=80%W=4000%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=7B-85%TG=80%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=7B-85%TG=80%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=7B-85%TG=80%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=134%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# ASUS 4G-N12
Fingerprint Asus 4G-N12 WAP
Class Asus | embedded || WAP
CPE cpe:/h:asus:4g-n12 auto
SEQ(SP=A-14%GCD=1-6%ISR=4A-54%TI=I%CI=I%II=I%SS=O%TS=U)
OPS(O1=M5AC%O2=M578%O3=M280%O4=M5AC%O5=M218%O6=M109)
WIN(W1=F000%W2=F000%W3=F000%W4=F000%W5=F000%W6=F000)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=F000%O=M5AC%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=F000%S=O%A=S+%F=AS%O=M109%RD=0%Q=)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=O%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=O%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=O%T=3B-45%TG=40%CD=Z)

# Asus RT-53N
Fingerprint Asus RT-53N WAP
Class Asus | embedded || WAP
CPE cpe:/h:asus:rt-53n auto
SEQ(SP=FC-106%GCD=1-6%ISR=102-10C%TI=Z%CI=RD|RI%II=I%TS=7)
OPS(O1=M564ST11NW1%O2=M564ST11NW1%O3=M564NNT11NW1%O4=M564ST11NW1%O5=M564ST11NW1%O6=M564ST11)
WIN(W1=16A0%W2=16A0%W3=16A0%W4=16A0%W5=16A0%W6=16A0)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=16D0%O=M564NNSNW1%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=FA-104%TG=FF%W=80%S=Z%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=FA-104%TG=FF%W=100%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T4(R=Y%DF=N%T=FA-104%TG=FF%W=400%S=A%A=S%F=AR%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=7A69%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=8000%S=A%A=S%F=AR%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FA-104%TG=FF%W=FFFF%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(R=N)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# DI-524, HW Rev: G2
# ASUS  RT-N11 EZ Wireless N Router
# Level One FBR-1415TX Firmware: R1.94p0v
Fingerprint ASUS RT-N11 EZ or D-Link DI-524 WAP, or LevelOne FBR-1415TX router
Class Asus | embedded || WAP
CPE cpe:/h:asus:rt-n11_ez
Class D-Link | embedded || WAP
CPE cpe:/h:dlink:di-524 auto
Class LevelOne | embedded || router
CPE cpe:/h:levelone:fbr-1415tx
SEQ(SP=0-1D%GCD=14|28|3C|50|64%ISR=4B-55%TI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4%O2=M5B4%O3=M5B4%O4=M5B4%O5=M5B4%O6=M5B4)
WIN(W1=16D0%W2=16D0%W3=16D0%W4=16D0%W5=16D0%W6=16D0)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=16D0%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# Asus RT-N66U Router
Fingerprint Asus RT-N66U WAP (Linux 2.6)
Class Asus | embedded || WAP
CPE cpe:/h:asus:rt-n66u auto
Class Linux | Linux | 2.6.X | WAP
CPE cpe:/o:linux:linux_kernel:2.6 auto
SEQ(SP=C4-CE%GCD=1-6%ISR=CB-D5%TI=Z%CI=Z%II=I%TS=7)
OPS(O1=M5B4ST11NW7%O2=M5B4ST11NW7%O3=M5B4NNT11NW7%O4=M5B4ST11NW7%O5=M5B4ST11NW7%O6=M5B4ST11)
WIN(W1=10F8%W2=10F8%W3=10F8%W4=10F8%W5=10F8%W6=10F8)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=111C%O=M5B4NNSNW7%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=10F8%S=O%A=S+%F=AS%O=M5B4ST11NW7%RD=0%Q=)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# OS Linux for embedded systems, device ASUS WL500g.PremiumV2
Fingerprint Asus WL-500g WAP
Class Asus | embedded || WAP
CPE cpe:/h:asus:wl-500g auto
SEQ(SP=C2-CC%GCD=1-6%ISR=C6-D0%TI=Z%CI=Z%II=I%TS=7)
OPS(O1=M542ST11NW0%O2=M542ST11NW0%O3=M542NNT11NW0%O4=M542ST11NW0%O5=M542ST11NW0%O6=M542ST11)
WIN(W1=14D8%W2=14D8%W3=14D8%W4=14D8%W5=14D8%W6=14D8)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=1508%O=M542NNSNW0%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=14D8%S=O%A=S+%F=AS%O=M542ST11NW0%RD=0%Q=)
T4(R=N)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=N)
T7(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# Asus WL-500gp home router
Fingerprint Asus WL-500gP wireless broadband router
Class Asus | embedded || WAP
CPE cpe:/h:asus:wl-500gp auto
SEQ(R=N)
OPS(O1=M5B4ST11NW0%O2=M5B4ST11NW0%O3=M5B4NNT11NW0%O4=M5B4ST11NW0%O5=M5B4ST11NW0%O6=M5B4ST11)
WIN(W1=16A0%W2=16A0%W3=16A0%W4=16A0%W5=16A0%W6=16A0)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=16D0%O=M5B4NNSNW0%CC=Y%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=16A0%S=O%A=S+%F=AS%O=M5B4ST11NW0%RD=0%Q=)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=7B-85%TG=80%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=7B-85%TG=80%W=0%S=A%A=O%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=7B-85%TG=80%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(R=N)
IE(R=N)

# AT&T NetGate SG8100 Router
Fingerprint AT&T NetGate SG8100 router
Class AT&T | embedded || router
CPE cpe:/h:att:netgate_sg8100 auto
SEQ(SP=C5-CF%GCD=1-6%ISR=C6-D0%TI=Z%II=I%TS=7)
OPS(O1=M507ST11NW0%O2=M507ST11NW0%O3=M507NNT11NW0%O4=M507ST11NW0%O5=M507ST11NW0%O6=M507ST11)
WIN(W1=13EC%W2=13EC%W3=13EC%W4=13EC%W5=13EC%W6=13EC)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=141C%O=M507NNSNW0%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=13EC%S=O%A=S+%F=AS%O=M507ST11NW0%RD=0%Q=)
T4(R=N)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=N)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# BGW210 (looks like Slirp --ed.)
Fingerprint AT&T BGW210 voice gateway
Class AT&T | embedded || VoIP adapter
SEQ(SP=C-16%GCD=FA00|1F400|2EE00|3E800|4E200%ISR=97-A1%CI=I%II=I%TS=U)
OPS(O1=M5B4%O2=M5B4%O3=M5B4%O4=M5B4%O5=M5B4%O6=M5B4)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=N%T=3C-46%TG=40%W=FFFF%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=3C-46%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T4(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=31-3B%TG=40%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=2B-35%TG=40%CD=S)

# AT&T 3G Microcell
Fingerprint AT&T 3G MicroCell WAP
Class AT&T | embedded || WAP
SEQ(SP=C6-D0%GCD=1-6%ISR=C8-D2%TI=I%CI=Z%II=I%SS=O%TS=A)
OPS(O1=M5ACST11NW1%O2=M5ACST11NW1%O3=M5ACNNT11NW1%O4=M5ACST11NW1%O5=M5ACST11NW1%O6=M5ACST11)
WIN(W1=1680%W2=1680%W3=1680%W4=1680%W5=1680%W6=1680)
ECN(R=Y%DF=N%T=3A-44%TG=40%W=16B0%O=M5ACNNSNW1%CC=N%Q=)
T1(R=Y%DF=N%T=3A-44%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=O%F=AR%O=%RD=0%Q=)
T4(R=Y%DF=Y%T=3A-44%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# Atari TT 030 running Atari System V Release 4.0 (1.0), UniSoft UNIX System V Release 4.0
Fingerprint Atari Unix System V Release 4.0
Class Atari | Unix | SVR4 | general purpose
CPE cpe:/o:atari:unix:svr4 auto
SEQ(SP=C-16%GCD=FA00|1F400|2EE00|3E800|4E200%ISR=97-A1%TI=I%CI=I%II=I%SS=S%TS=U)
OPS(O1=M400%O2=M400%O3=M400%O4=M400%O5=M400%O6=M400)
WIN(W1=1000%W2=1000%W3=1000%W4=1000%W5=1000%W6=1000)
ECN(R=Y%DF=N%T=19-23%TG=20%W=1000%O=M400%CC=N%Q=)
T1(R=Y%DF=N%T=19-23%TG=20%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=19-23%TG=20%W=1000%S=O%A=O%F=A%O=%RD=0%Q=)
T4(R=Y%DF=N%T=19-23%TG=20%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=19-23%TG=20%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=19-23%TG=20%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=19-23%TG=20%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=Z%RUCK=0%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# ATCOM AT-320 Ethernet Phone. Uses the PalmMicro PA168S chipset. H.323 firmware of version 1.53 from PalmMicro.
Fingerprint Atcom AT-320 VoIP phone
Class Atcom | embedded || VoIP phone
CPE cpe:/h:atcom:at-320 auto
SEQ(SP=F4-102%GCD=1-6%ISR=FD-117%TI=I%CI=I%II=I%SS=S%TS=U)
OPS(O1=M218%O2=M218%O3=M218%O4=M218%O5=M218%O6=M218)
WIN(W1=514%W2=514%W3=514%W4=514%W5=514%W6=514)
ECN(R=Y%DF=N%T=7B-85%TG=80%W=514%O=M218%CC=N%Q=)
T1(R=Y%DF=N%T=7B-85%TG=80%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=7B-85%TG=80%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=7B-85%TG=80%W=514%S=O%A=S+%F=AS%O=M218%RD=0%Q=)
T4(R=Y%DF=N%T=7B-85%TG=80%W=0%S=A%A=S%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=7B-85%TG=80%W=0%S=A%A=O%F=R%O=%RD=0%Q=)
T6(R=Y%DF=N%T=7B-85%TG=80%W=0%S=A%A=O%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=7B-85%TG=80%W=0%S=A%A=O%F=R%O=%RD=0%Q=)
U1(R=N)
IE(DFI=N%T=7B-85%TG=80%CD=Z)

# AudioCodes Mediant 1000
# AudioCodes MediaPack 118 VOIP gateway
Fingerprint AudioCodes MediaPack 118 or Mediant 1000 VoIP adapter
Class AudioCodes | embedded || VoIP adapter
CPE cpe:/h:audiocodes:mediapack_118
CPE cpe:/h:audiocodes:mediant_1000
SEQ(SP=C-16%GCD=1E848|3D090|5B8D8|7A120|98968%ISR=9F-A9%TI=I%II=I%SS=S%TS=A)
OPS(O1=M5B4NW1NNSNNT11%O2=M578NW1NNSNNT11%O3=M280NW1NNT11%O4=M5B4NW1NNSNNT11%O5=M218NW1NNSNNT11%O6=M109NNSNNT11)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=FFFF%O=M5B4NW1NNS%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=FA-104%TG=FF%CD=S)

# Audiocodes MP-118-4FXS4FXO VoIP Gate
# Audiocodes MP-114 FXO
# Brother HL-2270DW series, Network Firmware Version: 1.10
Fingerprint Audiocodes MP-1XX-series VoIP adapter or Brother HL-2270DW printer
Class AudioCodes | embedded || VoIP adapter
Class Brother | embedded || printer
CPE cpe:/h:brother:hl-2270dw auto
SEQ(SP=C-16%GCD=1E848|3D090|5B8D8|7A120|98968%ISR=9F-A9%TS=A)
OPS(O1=M5B4NW0NNSNNT11%O2=M578NW0NNSNNT11%O3=M280NW0NNT11%O4=M5B4NW0NNSNNT11%O5=M218NW0NNSNNT11%O6=M109NNSNNT11)
WIN(W1=21F0%W2=2088%W3=2258%W4=21F0%W5=20C0%W6=209D)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=2238%O=M5B4NW0NNS%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=FA-104%TG=FF%CD=S)

# AudioControl D3400 Network Amplifier
Fingerprint AudioControl D3400 network amplifier
Class AudioControl | embedded || media device
CPE cpe:/h:audiocontrol:d3400
SEQ(SP=0-115%GCD=1-6|2F70509|5EE0A12|8E50F1B|BDC1424|ED3192D%ISR=E2-EC%TI=I%CI=I%II=RI%SS=S%TS=U)
OPS(O1=M5DC%O2=M5DC%O3=M5DC%O4=M5DC%O5=M5DC%O6=M5DC)
WIN(W1=1000%W2=1000%W3=1000%W4=1000%W5=1000%W6=1000)
ECN(R=Y%DF=N%T=FA-104%TG=FF%W=1000%O=M5DC%CC=N%Q=)
T1(R=Y%DF=N%T=FA-104%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=FA-104%TG=FF%W=1000%S=O%A=S+%F=AS%O=M5DC%RD=0%Q=)
T4(R=Y%DF=N%T=FA-104%TG=FF%W=1000%S=A+%A=S%F=AR%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=1000%S=A%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=1000%S=A%A=S%F=AR%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FA-104%TG=FF%W=1000%S=A%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# Avaya 4548, SW:v5.6.3.025
# Avaya 5520, SW:v6.3.2.011
Fingerprint Avaya 4000- or 5000-series Ethernet Routing switch
Class Avaya | embedded || switch
SEQ(SP=FF-109%GCD=1-6%ISR=100-10A%TI=I%II=I%SS=S%TS=7)
OPS(O1=M5B4NW0NNT11%O2=M5B4NW0NNT11%O3=M5B4NW0NNT11%O4=M5B4NW0NNT11%O5=M5B4NW0NNT11%O6=M5B4NNT11)
WIN(W1=4000%W2=4000%W3=4000%W4=4000%W5=4000%W6=4000)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=4000%O=M5B4NW0%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=N)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=70%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Avaya Edge Switch 4526-GTX
Fingerprint Avaya 4526GTX switch
Class Avaya | embedded || switch
CPE cpe:/h:avaya:4526gtx auto
SEQ(SP=FA-104%GCD=1-6%ISR=108-112%TI=I%II=I%SS=S%TS=7)
OPS(O1=M5B4NW0NNT11%O2=M5B4NW0NNT11%O3=M5B4NW0NNT11%O4=M5B4NW0NNT11%O5=M5B4NW0NNT11%O6=M5B4NNT11)
WIN(W1=4000%W2=4000%W3=4000%W4=4000%W5=4000%W6=4000)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=4000%O=M5B4NW0%CC=N)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0)
T2(R=N)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=4000%S=O%A=S+%F=AS%O=M5B4NW0NNT11%RD=0)
T4(R=N)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%RD=0)
T6(R=N)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=70%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Avaya P130 workgroup switch, SW version 2.11.3
Fingerprint Avaya P130 workgroup switch
Class Avaya | embedded || switch
SEQ(R=N)
OPS(O1=%O2=%O3=%O4=%O5=%O6=)
WIN(W1=0%W2=0%W3=0%W4=0%W5=0%W6=0)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=0%O=%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=Z%A=S+%F=AR%RD=0%Q=)
T2(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=Z%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Avaya Inc. - P330 Stackable Switch, SW version 4.1.6
Fingerprint Avaya P330 Stackable Switch
Class Avaya | embedded || switch
SEQ(SP=F-11%GCD=FA00|1F400|2EE00|3E800|4E200%ISR=9B-9D%TI=I%II=I%SS=S%TS=U)
OPS(O1=%O2=%O3=%O4=%O5=%O6=)
WIN(W1=1000%W2=1000%W3=1000%W4=1000%W5=1000%W6=1000)
ECN(R=Y%DF=N%T=19-23%TG=20%W=1000%O=%CC=N%Q=)
T1(R=Y%DF=N%T=19-23%TG=20%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=19-23%TG=20%W=1000%S=O%A=O%F=A%O=%RD=0%Q=)
T4(R=Y%DF=N%T=19-23%TG=20%W=1000%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=19-23%TG=20%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=19-23%TG=20%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=19-23%TG=20%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=4210%RIPCK=Z%RUCK=0%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# Avaya Cajun Switch Agent v5.4.2 on P580 model
Fingerprint Avaya P580 switch running Cajun Switch Agent v5.4.2
Class Avaya | embedded || switch
CPE cpe:/h:avaya:p580 auto
SEQ(SP=0-92%GCD=9C4|1388|1D4C|2710|30D4%ISR=8B-BB%TI=I%II=RI%SS=O|S%TS=U)
OPS(O1=M218%O2=M218%O3=M218%O4=M218%O5=M218%O6=M218)
WIN(W1=400%W2=400%W3=400%W4=400%W5=400%W6=400)
ECN(R=Y%DF=N%T=19-23%TG=20%W=400%O=M218%CC=N%Q=)
T1(R=Y%DF=N%T=19-23%TG=20%S=O%A=O|S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=Y%DF=N%T=19-23%TG=20%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=N)
T7(R=N)
U1(DF=N%T=19-23%TG=20%IPL=38%UN=D33|90CE|98BF|DA0A|FBF9%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=19-23%TG=20%CD=S)

# Lucent Technologies Cajun Switch Agent v5.3.2 on P880 model
Fingerprint Avaya P880 switch running Cajun Switch Agent v5.3.2
Class Avaya | embedded || switch
CPE cpe:/h:avaya:p880 auto
SEQ(SP=0-95%GCD=9C4|1388|1D4C|2710|30D4%ISR=8B-BB%TI=I%II=RI%SS=O|S%TS=U)
OPS(O1=M218%O2=M218%O3=M218%O4=M218%O5=M218%O6=M218)
WIN(W1=400%W2=400%W3=400%W4=400%W5=400%W6=400)
ECN(R=Y%DF=N%T=1A-24%TG=20%W=400%O=M218%CC=N%Q=)
T1(R=Y%DF=N%T=1A-24%TG=20%S=O%A=O|S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=Y%DF=N%T=1A-24%TG=20%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=N)
T7(R=N)
U1(DF=N%T=1A-24%TG=20%IPL=38%UN=293|977C|9A49|A984|F0E2%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=1A-24%TG=20%CD=S)

Fingerprint Avaya Intuity Audix Multimedia Messaging System
Class Avaya | embedded || telecom-misc
SEQ(SP=A3-BF%GCD=1-6%ISR=B6-BC%TI=I%II=I%SS=S%TS=U)
OPS(O1=M400%O2=M400%O3=M280%O4=M400%O5=%O6=M109)
WIN(W1=1000%W2=1000%W3=1000%W4=1000%W5=1000%W6=1000)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=1000%O=M400%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=3B-45%TG=40%W=1000%S=O%A=O%F=A%O=%RD=0%Q=)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=4210%RIPCK=Z%RUCK=G%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Avaya G360 Media Gateway running software version 26.36.0
Fingerprint Avaya G350 Media Gateway VoIP adapter
Class Avaya | embedded || VoIP adapter
SEQ(SP=94-9E%GCD=1-6%ISR=9B-A5%TI=I%II=RI%SS=O|S%TS=U)
OPS(O1=M550%O2=M550%O3=M550%O4=M550%O5=M550%O6=M550)
WIN(W1=2000%W2=2000%W3=2000%W4=2000%W5=2000%W6=2000)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=2000%O=M550%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=3B-45%TG=40%W=2000%S=O%A=O%F=A%O=%RD=0%Q=)
T4(R=N)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=N)
T7(R=N)
U1(R=N)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# Avaya IP Office 500 V2 (supports R6.0 or later)
Fingerprint Avaya IP Office
Class Avaya | embedded || VoIP adapter
SEQ(SP=11-1B%GCD=10000|20000|30000|40000|50000%ISR=CB-D5%TI=I%CI=I%II=RI%SS=O%TS=U)
OPS(O1=M4EC%O2=M4EC%O3=M4EC%O4=M4EC%O5=M4EC%O6=M4EC)
WIN(W1=4EC0%W2=4EC0%W3=4EC0%W4=4EC0%W5=4EC0%W6=4EC0)
ECN(R=Y%DF=N%T=5E-68%TG=80%W=4EC0%O=M4EC%CC=N%Q=)
T1(R=Y%DF=N%T=5E-68%TG=80%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=Y%DF=N%T=5E-68%TG=80%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=5E-68%TG=80%W=0%S=A%A=S%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=5E-68%TG=80%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=5E-68%TG=80%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=5E-68%TG=80%CD=S)

# Avaya IP Office R8.1
Fingerprint Avaya IP Office 8.1
Class Avaya | embedded || VoIP adapter
SEQ(SP=16-20%GCD=10000|20000|30000|40000|50000%ISR=CB-D5%TI=I%CI=I%II=RI%SS=S%TS=U)
OPS(O1=M400%O2=M400%O3=M400%O4=M400%O5=M400%O6=M400)
WIN(W1=1111%W2=1111%W3=1111%W4=1111%W5=1111%W6=1111)
ECN(R=Y%DF=N%T=5E-68%TG=80%W=1111%O=M400%CC=N%Q=)
T1(R=Y%DF=N%T=5E-68%TG=80%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=Y%DF=N%T=5E-68%TG=80%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=5E-68%TG=80%W=0%S=A%A=S%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=5E-68%TG=80%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=5E-68%TG=80%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=5E-68%TG=80%CD=S)

# Avaya IP Office IP403
Fingerprint Avaya Office IP403 VoIP adapter
Class Avaya | embedded || VoIP adapter
CPE cpe:/h:avaya:office_ip403 auto
SEQ(SP=11-2D%GCD=10000|20000|30000|40000|50000%ISR=CA-D4%TI=I%II=RI%SS=O%TS=U)
OPS(O1=M400%O2=M400%O3=M400%O4=M400%O5=M400%O6=M400)
WIN(W1=1111%W2=1111%W3=1111%W4=1111%W5=1111%W6=1111)
ECN(R=N)
T1(R=Y%DF=N%T=5E-68%TG=80%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=Y%DF=N%T=5E-68%TG=80%W=1111%S=Z%A=S+%F=R%O=%RD=0%Q=)
T6(R=Y%DF=N%T=5E-68%TG=80%W=1111%S=Z%A=S+%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=5E-68%TG=80%W=1111%S=Z%A=S+%F=R%O=%RD=0%Q=)
U1(DF=N%T=5E-68%TG=80%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=23-3D%TG=40%CD=S)

# Avaya IP500, Firmware 4.1 (9)
# avaya IP Office 500 . mixed-type PABX (analog + voip)
# IP Office 500
Fingerprint Avaya Office IP500 VoIP adapter
Class Avaya | embedded || VoIP adapter
CPE cpe:/h:avaya:office_ip500 auto
SEQ(SP=0-13%GCD=10000|20000|30000|40000|50000|650000|CA0000|12F0000|1940000|1F90000%ISR=CB-D5%TI=I%II=RI%SS=O|S%TS=U)
OPS(O1=M400%O2=M400%O3=M400%O4=M400%O5=M400%O6=M400)
WIN(W1=1111%W2=1111%W3=1111%W4=1111%W5=1111%W6=1111)
ECN(R=Y%DF=N%T=5E-68%TG=80%W=0%O=%CC=N%Q=)
T1(R=Y%DF=N%T=5E-68%TG=80%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=5E-68%TG=80%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=5E-68%TG=80%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
T4(R=Y%DF=N%T=5E-68%TG=80%W=0%S=A%A=S%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=5E-68%TG=80%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=5E-68%TG=80%W=0%S=A%A=S%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=5E-68%TG=80%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=5E-68%TG=80%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=20-3C|5E-68%TG=40|80%CD=S)

# Avaya IP Office500
Fingerprint Avaya Office IP500 VoIP adapter
Class Avaya | embedded || VoIP adapter
CPE cpe:/h:avaya:office_ip500 auto
SEQ(SP=15-35%GCD=10000|20000|30000|40000|50000%ISR=CB-D5%TI=I%CI=I%II=RI%SS=O|S%TS=U)
OPS(O1=M400%O2=M400%O3=M400%O4=M400%O5=M400%O6=M400)
WIN(W1=1111%W2=1111%W3=1111%W4=1111%W5=1111%W6=1111)
ECN(R=N)
T1(R=Y%DF=N%T=5E-68%TG=80%S=O%A=S+%F=AS%RD=0)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=Y%DF=N%T=5E-68%TG=80%W=0%S=Z%A=S%F=AR%RD=0)
T6(R=Y%DF=N%T=5E-68%TG=80%W=0%S=A%A=S%F=R%RD=0)
T7(R=Y%DF=N%T=5E-68%TG=80%W=0%S=Z%A=S%F=AR%RD=0)
U1(DF=N%T=5E-68%TG=80%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=5E-68%TG=80%CD=S)

# AVM FRITZ!Box Fon 7170
Fingerprint AVM FRITZ!Box Fon 7170 ADSL modem
Class AVM | embedded || broadband router
CPE cpe:/h:avm:fritz%21box_fon_7170
SEQ(SP=FE-10E%GCD=1-6%ISR=108-112%TI=Z%II=RI%TS=7)
OPS(O1=M5A6ST11NW1%O2=M578ST11NW1%O3=M280NNT11NW1%O4=M22CST11NW1%O5=M218ST11NW1%O6=M109ST11)
WIN(W1=16A0%W2=16A0%W3=16A0%W4=16A0%W5=16A0%W6=16A0)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=16D0%O=M5A6NNSNW1%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=S%F=R%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=S%F=R%O=%RD=0%Q=)
T7(R=N)
U1(R=N)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Netgear router DG834GT Firmware: V1.01.28
# AVM Fritz!Box FON WLAN 7050
# LINKSYS WAG200G Firmware Version: 1.00.09
# Linksys WAG200G, Firmware Version: 1.01.06
# Linksys WAG200G firmware: 1.01.05
Fingerprint AVM FRITZ!Box FON WLAN 7050, Linksys WAG200G, or Netgear DG834GT wireless broadband router
Class AVM | embedded || WAP
CPE cpe:/h:avm:fritz%21box_fon_wlan_7050
Class Linksys | embedded || WAP
CPE cpe:/h:linksys:wag200g
Class Netgear | embedded || WAP
CPE cpe:/h:netgear:dg834gt
SEQ(SP=B6-CE%GCD=1-6%ISR=B1-D3%TI=Z%II=I%TS=7-9)
OPS(O1=NNT11|M5B4ST11NW0%O2=NNT11|M5B4ST11NW0%O3=NNT11|M5B4NNT11NW0%O4=NNT11|M5B4ST11NW0%O5=NNT11|M5B4ST11NW0%O6=NNT11|M5B4ST11)
WIN(W1=16A0%W2=16A0%W3=16A0%W4=16A0%W5=16A0%W6=16A0)
ECN(R=Y%DF=Y%T=3B-45|FA-104%TG=40|FF%W=16D0%O=|M5B4NNSNW0%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45|FA-104%TG=40|FF%S=O%A=O|S+%F=A|AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%T=3B-45|FA-104%TG=40|FF%W=16A0%S=O%A=O|S+%F=A|AS%O=NNT11|M5B4ST11NW0%RD=0%Q=)
T4(R=N)
T5(R=Y%DF=Y%T=FA-104%TG=FF%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=N)
T7(R=N)
U1(DF=N%T=FA-104%TG=FF%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=FA-104%TG=FF%CD=S)

# AVM Fritzbox Fon WLAN 7170
Fingerprint AVM FRITZ!Box FON WLAN 7170 WAP
Class AVM | embedded || WAP
CPE cpe:/h:avm:fritz%21box_fon_wlan_7170
SEQ(SP=BF-D1%GCD=1-6%ISR=C0-D8%TI=Z%II=I%TS=7)
OPS(O1=M578ST11NW1%O2=M578ST11NW1%O3=M578NNT11NW1%O4=M578ST11NW1%O5=M578ST11NW1%O6=M578ST11)
WIN(W1=16A0%W2=16A0%W3=16A0%W4=16A0%W5=16A0%W6=16A0)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=16D0%O=M578NNSNW1%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=N)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# Fritz!Box 7240.
Fingerprint AVM FRITZ!Box FON WLAN 7240 WAP
Class AVM | embedded || WAP
CPE cpe:/h:avm:fritz%21box_fon_wlan_7240
SEQ(SP=B9-C3%GCD=1-6%ISR=C7-D1%TI=Z%CI=Z%II=I%TS=6-8)
OPS(O1=NNT11|M55EST11NW1%O2=NNT11|M55EST11NW1%O3=NNT11|M55ENNT11NW1%O4=NNT11|M55EST11NW1%O5=NNT11|M55EST11NW1%O6=NNT11|M55EST11)
WIN(W1=16A0%W2=16A0%W3=16A0%W4=16A0%W5=16A0%W6=16A0)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=16D0%O=|M55ENNSNW1%CC=N|Y)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=O|S+%F=A|AS%RD=0)
T2(R=N)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=16A0%S=O%A=O|S+%F=A|AS%O=NNT11|M55EST11NW1%RD=0)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%RD=0)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%RD=0)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%RD=0)
T7(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%RD=0)
U1(DF=N%T=3B-45%TG=40%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# Fritz!Box 7360 running Fritz!OS 06.20
Fingerprint AVM FRITZ!Box (FritzOS 6.20)
Class AVM | FritzOS | 6.X | broadband router
CPE cpe:/o:avm:fritzos:6.20 auto
SEQ(SP=101-10B%GCD=1-6%ISR=108-112%TI=Z%CI=Z%II=I%TS=7)
OPS(O1=M5B4ST11NW2%O2=M5B4ST11NW2%O3=M5B4NNT11NW2%O4=M5B4ST11NW2%O5=M5B4ST11NW2%O6=M5B4ST11)
WIN(W1=16A0%W2=16A0%W3=16A0%W4=16A0%W5=16A0%W6=16A0)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=16D0%O=M5B4NNSNW2%CC=Y%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# FRITZ!OS: 06.03
Fingerprint AVM FRITZ!Box (FritzOS 6.03)
Class AVM | FritzOS | 6.X | WAP
CPE cpe:/o:avm:fritzos:6.03 auto
SEQ(SP=F0-FA%GCD=1-6%ISR=106-110%TI=Z%CI=Z%TS=7)
OPS(O1=M5B4ST11NW2%O2=M5B4ST11NW2%O3=M5B4NNT11NW2%O4=M5B4ST11NW2%O5=M5B4ST11NW2%O6=M5B4ST11)
WIN(W1=16A0%W2=16A0%W3=16A0%W4=16A0%W5=16A0%W6=16A0)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=16D0%O=M5B4NNSNW2%CC=Y%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# AMV Fritz!Box 7390 running FritzOS 06.01
Fingerprint AVM FRITZ!Box FON WLAN 7390 (FritzOS 6.01)
Class AVM | FritzOS | 6.X | WAP
CPE cpe:/o:avm:fritzos:6.01 auto
SEQ(SP=C3-CD%GCD=1-6%ISR=CC-D6%TI=Z%CI=Z%II=I%TS=8)
OPS(O1=M55EST11NW2%O2=M55EST11NW2%O3=M55ENNT11NW2%O4=M55EST11NW2%O5=M55EST11NW2%O6=M55EST11)
WIN(W1=16A0%W2=16A0%W3=16A0%W4=16A0%W5=16A0%W6=16A0)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=16D0%O=M55ENNSNW2%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=16A0%S=O%A=S+%F=AS%O=M55EST11NW2%RD=0%Q=)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# FRITZ!WLAN Repeater 450E FRITZ!OS 06.51
Fingerprint AVM FRITZ!WLAN Repeater 450E (FritzOS 6.51)
Class AVM | FritzOS | 6.X | WAP
CPE cpe:/o:avm:fritzos:6.51 auto
SEQ(SP=B8-C2%GCD=1-6%ISR=BE-C8%TI=Z%CI=Z%II=I%TS=7)
OPS(O1=M5B4ST11NW4%O2=M5B4ST11NW4%O3=M5B4NNT11NW4%O4=M5B4ST11NW4%O5=M5B4ST11NW4%O6=M5B4ST11)
WIN(W1=3890%W2=3890%W3=3890%W4=3890%W5=3890%W6=3890)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=3908%O=M5B4NNSNW4%CC=Y%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# Linux 2.6.11 (ACS5000) (ttyp1) ACS5000 login: Connection closed by foreign host.
Fingerprint Avocent ACS 5000 console server (Linux 2.6.11)
Class Avocent | embedded || remote management
SEQ(SP=C6-D0%GCD=1-6%ISR=C8-D2%TI=I%CI=I%II=I%SS=S%TS=A)
OPS(O1=M5B4ST11NW2%O2=M5B4ST11NW2%O3=M5B4NNT11NW2%O4=M5B4ST11NW2%O5=M5B4ST11NW2%O6=M5B4ST11)
WIN(W1=16A0%W2=16A0%W3=16A0%W4=16A0%W5=16A0%W6=16A0)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=16D0%O=M5B4NNSNW2%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=3B-45%TG=40%W=16A0%S=O%A=S+%F=AS%O=M5B4ST11NW2%RD=0%Q=)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# DSR2020 Application     03.07.01.18
# Avocent AutoView 3100/3200
# Model DSR8020 02-DA-E3 Application  03.07.01.09
Fingerprint Avocent AutoView, DSR2020, or DSR8020 KVM switch
Class Avocent | embedded || remote management
CPE cpe:/h:avocent:autoview_3100
CPE cpe:/h:avocent:autoview_3200
CPE cpe:/h:avocent:dsr2020
CPE cpe:/h:avocent:dsr8020
SEQ(SP=C0-D0%GCD=1-6%ISR=C6-D4%TI=Z%CI=Z%II=I%TS=U)
OPS(O1=M58CNW0%O2=M58CNW0%O3=M58CNW0%O4=M58CNW0%O5=M58CNW0%O6=M58C)
WIN(W1=1630%W2=1630%W3=1630%W4=1630%W5=1630%W6=1630)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=1630%O=M58CNW0%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=1630%S=O%A=S+%F=AS%O=M58CNW0%RD=0%Q=)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# Avocent DSR1021
Fingerprint Avocent DSR1021 KVM switch
Class Avocent | embedded || remote management
SEQ(SP=C2-D0%GCD=1-6%ISR=C9-D3%TI=Z%CI=Z%II=I%TS=6-9)
OPS(O1=NNT11|M58CST11NW0%O2=NNT11|M58CST11NW0%O3=NNT11|M58CNNT11NW0%O4=NNT11|M58CST11NW0%O5=NNT11|M58CST11NW0%O6=NNT11|M58CST11)
WIN(W1=1600%W2=1600%W3=1600%W4=1600%W5=1600%W6=1600)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=1630%O=|M58CNNSNW0%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=O|S+%F=A|AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=1600%S=O%A=O|S+%F=A|AS%O=NNT11|M58CST11NW0%RD=0%Q=)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# Avocent DSR2035 - Appliance firmware version 03.05.01.16
Fingerprint Avocent DSR2035 KVM switch
Class Avocent | embedded || remote management
CPE cpe:/h:avocent:dsr2035
SEQ(SP=C0-CA%GCD=1-6%ISR=C5-CF%TI=Z%CI=Z%II=I%TS=U)
OPS(O1=M564NW0%O2=M564NW0%O3=M564NW0%O4=M564NW0%O5=M564NW0%O6=M564)
WIN(W1=1630%W2=1630%W3=1630%W4=1630%W5=1630%W6=1630)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=1630%O=M564NW0%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=1630%S=O%A=S+%F=AS%O=M564NW0%RD=0%Q=)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# networked KVM Switch., Model Number: MPU2016DAC, Firmware (Boot): 1.9.16473, Firmware (App): 1.10.10.18462
Fingerprint Avocent MergePoint Unity MPU2016DAC KVM switch
Class Avocent | embedded || remote management
SEQ(SP=C4-CE%GCD=1-6%ISR=C7-D1%TI=Z%CI=Z%II=I%TS=8)
OPS(O1=M58CST11NW4%O2=M58CST11NW4%O3=M58CNNT11NW4%O4=M58CST11NW4%O5=M58CST11NW4%O6=M58CST11)
WIN(W1=1600%W2=1600%W3=1600%W4=1600%W5=1600%W6=1600)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=1630%O=M58CNNSNW4%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# Avocent SwitchView IP 1010
Fingerprint Avocent SwitchView 1010 remote access device
Class Avocent | embedded || remote management
SEQ(SP=CD-D7%GCD=1-6%ISR=D9-E3%TI=I%II=I%SS=S%TS=0)
OPS(O1=M5B4NW2NNT01%O2=M5B4NW2NNT01%O3=M5B4NW2NNT01%O4=M5B4NW2NNT01%O5=M5B4NW2NNT01%O6=M5B4NNT01)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M5B4NW2%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%S=O%A=S+%F=AS%O=M5B4NW2NNT01%RD=0%Q=)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=FA-104%TG=FF%CD=S)

# Avocent/Cyclades ACS 6000
Fingerprint Avocent/Cyclades ACS 6000
Class Avocent | embedded || remote management
SEQ(SP=C8-D2%GCD=1-6%ISR=CC-D6%TI=Z%CI=Z%II=I%TS=8)
OPS(O1=M550ST11NW4%O2=M550ST11NW4%O3=M550NNT11NW4%O4=M550ST11NW4%O5=M550ST11NW4%O6=M550ST11)
WIN(W1=16A0%W2=16A0%W3=16A0%W4=16A0%W5=16A0%W6=16A0)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=16D0%O=M550NNSNW4%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=16A0%S=O%A=O|S+%F=AS%O=M550ST11NW4%RD=0%Q=)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A|O%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=O|S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A|O%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=O|S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# Avocent DSR1030 IP KVM
# HP IP KVM 2x1x16 Rebranded Avocent IP KVM
Fingerprint Avocent DSR1030 KVM over IP switch
Class Avocent | embedded || specialized
SEQ(SP=C2-CE%GCD=1-6%ISR=C8-D2%TI=Z%II=I%TS=U)
OPS(O1=M5B4NW0%O2=M5B4NW0%O3=M5B4NW0%O4=M5B4NW0%O5=M5B4NW0%O6=M5B4)
WIN(W1=16D0%W2=16D0%W3=16D0%W4=16D0%W5=16D0%W6=16D0)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=16D0%O=M5B4NW0%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=16D0%S=O%A=S+%F=AS%O=M5B4NW0%RD=0%Q=)
T4(R=Y%DF=Y%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=FA-104%TG=FF%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=Y%T=FA-104%TG=FF%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=FA-104%TG=FF%CD=S)

# Cyclades-ACS5016-Linux V_3.3.0-17
Fingerprint Avocent ACS5016 console server (Linux 2.6.22)
Class Avocent | embedded || terminal server
CPE cpe:/h:avocent:acs5016
Class Linux | Linux | 2.6.X | terminal server
CPE cpe:/o:linux:linux_kernel:2.6.22 auto
SEQ(SP=C9-D3%GCD=1-6%ISR=EA-F4%TI=I%CI=Z%II=I%SS=S%TS=8)
OPS(O1=M5B4ST11NW2%O2=M5B4ST11NW2%O3=M5B4NNT11NW2%O4=M5B4ST11NW2%O5=M5B4ST11NW2%O6=M5B4ST11)
WIN(W1=16A0%W2=16A0%W3=16A0%W4=16A0%W5=16A0%W6=16A0)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=16D0%O=M5B4NNSNW2%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=3B-45%TG=40%W=16A0%S=O%A=S+%F=AS%O=M5B4ST11NW2%RD=0%Q=)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# AVTECH Room Alert 26W Firmware Version: v3.5.0
Fingerprint AVtech Room Alert 26W environmental monitor
Class AVtech | embedded || specialized
SEQ(SP=F7-10D%GCD=1-6%ISR=FC-10E%TI=I|RD%II=I%SS=O%TS=U)
OPS(R=N)
WIN(R=N)
ECN(R=N)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=O%A=S+%F=AR%RD=0)
T6(R=N)
T7(R=N)
U1(DF=Y%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# AV-TECH Digital Video Recorder (device connected to a surveillance camera), AVT AVC 773W 4CH Network DVR
Fingerprint AVtech AVC 773W digital video recorder
Class AVtech | embedded || webcam
SEQ(SP=C-1E%GCD=1-6%ISR=1B-6F%TI=I%II=RI%SS=O|S%TS=U)
OPS(O1=M59E%O2=M578%O3=M280%O4=M59E%O5=M218%O6=M109)
WIN(W1=FAF0%W2=FAF0%W3=FAF0%W4=FAF0%W5=FAF0%W6=FAF0)
ECN(R=Y%DF=Y%T=FA-104%TG=FF%W=FAF0%O=M59E%CC=N%Q=)
T1(R=Y%DF=Y%T=FA-104%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%T=FA-104%TG=FF%W=FAF0%S=O%A=S+%F=AS%O=M109%RD=0%Q=)
T4(R=Y%DF=Y%T=FA-104%TG=FF%W=FAF0%S=A+%A=S%F=AR%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=FA-104%TG=FF%W=FAF0%S=A%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=FA-104%TG=FF%W=FAF0%S=A%A=S%F=AR%O=%RD=0%Q=)
T7(R=Y%DF=Y%T=FA-104%TG=FF%W=FAF0%S=A%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=Y%T=FA-104%TG=FF%IPL=38%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=24-40%TG=40%CD=S)

# Video web server (No brand/Generic brand), I believe it is an "AV Tech Corp" box - they are the people who produce the web pages the box spits out
Fingerprint AVtech digital video recorder
Class AVtech | embedded || webcam
SEQ(SP=66-70%GCD=1-6%ISR=D7-E1%TI=Z%II=RI%TS=U)
OPS(O1=M578%O2=M578%O3=M280%O4=M578%O5=M218%O6=M109)
WIN(W1=FAF0%W2=FAF0%W3=FAF0%W4=FAF0%W5=FAF0%W6=FAF0)
ECN(R=Y%DF=Y%T=FA-104%TG=FF%W=FAF0%O=M578%CC=N%Q=)
T1(R=Y%DF=Y%T=FA-104%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%T=FA-104%TG=FF%W=FAF0%S=O%A=S+%F=AS%O=M109%RD=0%Q=)
T4(R=Y%DF=Y%T=FA-104%TG=FF%W=FAF0%S=A+%A=S%F=AR%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=FA-104%TG=FF%W=FAF0%S=A%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=FA-104%TG=FF%W=FAF0%S=A%A=S%F=AR%O=%RD=0%Q=)
T7(R=Y%DF=Y%T=FA-104%TG=FF%W=FAF0%S=A%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=Y%T=FA-104%TG=FF%IPL=38%UN=6F1E%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=20-3D%TG=40%CD=S)

# Axcient Uptiva backup appliance. On boot-up the system flashes "AxOS".
Fingerprint Axceint Uptiva backup appliance
Class Axcient | embedded || storage-misc
SEQ(SP=BB-CB%GCD=1-6%ISR=C5-CF%TI=Z%II=I%TS=7)
OPS(O1=M5B4ST11NW7%O2=M5B4ST11NW7%O3=M5B4NNT11NW7%O4=M5B4ST11NW7%O5=M5B4ST11NW7%O6=M5B4ST11)
WIN(W1=16A0%W2=16A0%W3=16A0%W4=16A0%W5=16A0%W6=16A0)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=16D0%O=M5B4NNSNW7%CC=Y%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=16A0%S=O%A=S+%F=AS%O=M5B4ST11NW7%RD=0%Q=)
T4(R=N)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=N)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# AXIS 5550 v7.10 Network Print Server
Fingerprint AXIS 5550 print server
Class AXIS | embedded || print server
CPE cpe:/h:axis:5550 auto
SEQ(SP=104-10E%GCD=1-6%ISR=106-110%TI=I%CI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4%O2=M578%O3=M280%O4=M100%O5=M218%O6=M109)
WIN(W1=100%W2=100%W3=100%W4=100%W5=100%W6=100)
ECN(R=Y%DF=N%T=7B-85%TG=80%W=0%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=7B-85%TG=80%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=7B-85%TG=80%W=100%S=O%A=O%F=A%O=%RD=0%Q=)
T4(R=Y%DF=N%T=7B-85%TG=80%W=100%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=7B-85%TG=80%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=7B-85%TG=80%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=7B-85%TG=80%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(R=N)
IE(DFI=N%T=7B-85%TG=80%CD=S)

# Axis 70U Network document server
Fingerprint AXIS 70U Network Document Server
Class AXIS | embedded || specialized
SEQ(SP=0-16%GCD=40000|80000|C0000|100000|140000%ISR=0-9D%TI=I%II=I%SS=S%TS=U)
OPS(O1=M5AC%O2=M578%O3=M218%O4=M218%O5=M218%O6=M109)
WIN(W1=4410%W2=4410%W3=4410%W4=4410%W5=4410%W6=4410)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=0|4410%O=M5AC%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=3B-45%TG=40%W=4410%S=O%A=O%F=A%O=%RD=0%Q=)
T4(R=Y%DF=N%T=3B-45%TG=40%W=4410%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=O|S+%F=AR%O=%RD=0%Q=)
U1(R=N)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# Buffalo TeraStation (NAS)
# Wireless-G Access Point (Model WAP54G), Firmware rev: 3.05
# Network Camera SNC-RZ50N
# Axis 205 IP Web Camera
Fingerprint AXIS 205 Network Camera, Buffalo TeraStation NAS device, Linksys WAP54G WAP, or Sony SNC-RZ50N network camera
Class AXIS | embedded || webcam
CPE cpe:/h:axis:205_network_camera
Class Buffalo | embedded || storage-misc
CPE cpe:/h:buffalo:terastation
Class Linksys | embedded || WAP
CPE cpe:/h:linksys:wap54g
Class Sony | embedded || webcam
CPE cpe:/h:sony:snc-rz50n
SEQ(SP=F8-107%GCD=1-6%ISR=FF-10F%TI=Z%II=I%TS=7)
OPS(O1=M564ST11NW0%O2=M564ST11NW0%O3=M564NNT11NW0%O4=M564ST11NW0%O5=M564ST11NW0%O6=M564ST11)
WIN(W1=16A0%W2=16A0%W3=16A0%W4=16A0%W5=16A0%W6=16A0)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=16D0%O=M564NNSNW0%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=O%A=S+%F=AR%O=%RD=0%Q=)
T6(R=N)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# Axis 206 Network Camera Firmware Version 4.40
Fingerprint AXIS 206 Network Camera
Class AXIS | embedded || webcam
CPE cpe:/h:axis:206_network_camera
SEQ(SP=C6-D0%GCD=1-6%ISR=CD-D7%TI=Z%CI=I%II=I%TS=7)
OPS(O1=M5B4ST11NW1%O2=M5B4ST11NW1%O3=M5B4NNT11NW1%O4=M5B4ST11NW1%O5=M5B4ST11NW1%O6=M5B4ST11)
WIN(W1=16A0%W2=16A0%W3=16A0%W4=16A0%W5=16A0%W6=16A0)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=16D0%O=M5B4NNSNW1%CC=Y%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=16A0%S=O%A=S+%F=AS%O=M5B4ST11NW1%RD=0%Q=)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# Axis 207W Network Camera
# Android 3.1 Honeycomb eeePad Transformer, Linux 2.6.36.3-00001-gf377a2b #1 SMP PREEMPT Fri May 27 11:58:50 CST 2011 armv7l GNU/Linux
Fingerprint AXIS 207W Network Camera
Class AXIS | embedded || webcam
CPE cpe:/h:axis:207w_network_camera
SEQ(SP=BD-E3%GCD=1-6%ISR=CB-DF%TI=Z%CI=Z%II=I%TS=7)
OPS(O1=M5B4ST11NW1%O2=M5B4ST11NW1%O3=M5B4NNT11NW1%O4=M5B4ST11NW1%O5=M5B4ST11NW1%O6=M5B4ST11)
WIN(W1=16A0%W2=16A0%W3=16A0%W4=16A0%W5=16A0%W6=16A0)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=16D0%O=M5B4NNSNW1%CC=Y%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=16A0%S=O%A=S+%F=AS%O=M5B4ST11NW1%RD=0%Q=)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=O%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# Described as axis 2100 network cam on its webpage (port 80).
Fingerprint AXIS 2100 Network Camera
Class AXIS | embedded || webcam
CPE cpe:/h:axis:2100_network_camera
SEQ(SP=100-10A%GCD=1-6%ISR=104-10E%TS=U)
OPS(O1=M5B4%O2=M578%O3=M280%O4=M218%O5=M218%O6=M109)
WIN(W1=3FE0%W2=3FE0%W3=3FE0%W4=3FE0%W5=3FE0%W6=3FE0)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=3FE0%O=M5B4%CC=S%Q=RU)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=3B-45%TG=40%W=3FE0%S=O%A=O|S+%F=ASF%O=M109%RD=0%Q=)
T4(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A|O%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=Z%A=O|S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A|O%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=Z%A=O|S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(R=N)

# Axis 2100 Network Camera
Fingerprint AXIS 2100 Network Camera
Class AXIS | embedded || webcam
CPE cpe:/h:axis:2100_network_camera
SEQ(SP=FB-108%GCD=1-6%ISR=102-10F%TI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4%O2=M578%O3=M280%O4=M218%O5=M218%O6=M109)
WIN(W1=3FE0%W2=3FE0%W3=3FE0%W4=3FE0%W5=3FE0%W6=3FE0)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=3FE0%O=M5B4%CC=N%Q=U)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=FA-104%TG=FF%W=3FE0%S=O%A=S+%F=ASF%O=M109%RD=0%Q=)
T4(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# AXIS model 2120 IP surveillance camera
Fingerprint AXIS 2120 Network Camera
Class AXIS | embedded || webcam
CPE cpe:/h:axis:2120_network_camera
SEQ(SP=FF-109%GCD=1-6%ISR=107-111%TI=I%CI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4%O2=M578%O3=M280%O4=M5B4%O5=M218%O6=M109)
WIN(W1=3FE0%W2=3FE0%W3=3FE0%W4=3FE0%W5=3FE0%W6=3FE0)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=3FE0%O=M5B4%CC=N%Q=U)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=3B-45%TG=40%W=3FE0%S=O%A=S+%F=ASF%O=M109%RD=0%Q=)
T4(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# Axis 3006-V ip camera
Fingerprint Axis M3006-V network camera
Class AXIS | embedded || webcam
SEQ(SP=C3-CD%GCD=1-6%ISR=C6-D0%TI=Z%CI=Z%II=I%TS=7)
OPS(O1=M550ST11NW4%O2=M550ST11NW4%O3=M550NNT11NW4%O4=M550ST11NW4%O5=M550ST11NW4%O6=M550ST11)
WIN(W1=1510%W2=1510%W3=1510%W4=1510%W5=1510%W6=1510)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=1540%O=M550NNSNW4%CC=Y%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=Y%T=3D-47%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=Y%T=3D-47%TG=40%W=0%S=Z%A=O%F=AR%O=%RD=0%Q=)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=Y%T=3D-47%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# AzBox Bravissimo Twin
Fingerprint AzBox Bravissimo Twin satellite TV decoder
Class AzBox | embedded || media device
SEQ(SP=0-5%GCD=278|4F0|768|9E0|C58%ISR=60-6A%TI=I%CI=I%II=RI%SS=O%TS=U)
OPS(O1=M5B4%O2=M5B4%O3=M5B4%O4=M5B4%O5=M5B4%O6=M5B4)
WIN(W1=4000%W2=4000%W3=4000%W4=4000%W5=4000%W6=4000)
ECN(R=Y%DF=N%T=FA-104%TG=FF%W=4000%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=FA-104%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=FA-104%TG=FF%W=4000%S=O%A=S+%F=AS%O=M5B4%RD=0%Q=)
T4(R=Y%DF=N%T=FA-104%TG=FF%W=4000%S=A+%A=S%F=AR%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=4000%S=A%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=4000%S=A%A=S%F=AR%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FA-104%TG=FF%W=4000%S=A%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=1702%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# Barracuda Networks v3.5.05.003 (2006-05-12 15:59:59) Model 400
Fingerprint Barracuda Spam Firewall model 400
Class Barracuda Networks | embedded || firewall
SEQ(SP=FF-109%GCD=1-6%ISR=106-110%TI=I%II=I%SS=S%TS=7)
OPS(O1=M5B4NW0NNT11%O2=M5B4NW0NNT11%O3=M5B4NW0NNT11%O4=M5B4NW0NNT11%O5=M5B4NW0NNT11%O6=M5B4NNT11)
WIN(W1=E000%W2=E000%W3=E000%W4=E000%W5=E000%W6=E000)
ECN(R=Y%DF=Y%T=34-3E%TG=40%W=E000%O=M5B4NW0%CC=N%Q=)
T1(R=Y%DF=Y%T=34-3E%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=34-3E%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=34-3E%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=34-3E%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=N)
U1(DF=N%T=34-3E%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=34-3E%TG=40%CD=S)

# Web Application Firewall 460
Fingerprint Barracuda Web Application Firewall 460
Class Barracuda Networks | embedded || firewall
SEQ(SP=C6-D0%GCD=1-6%ISR=CC-D6%TI=Z%II=I%TS=8)
OPS(O1=M546ST11NW7%O2=M546ST11NW7%O3=M546NNT11NW7%O4=M546ST11NW7%O5=M546ST11NW7%O6=M546ST11)
WIN(W1=16A0%W2=16A0%W3=16A0%W4=16A0%W5=16A0%W6=16A0)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=16D0%O=M546NNSNW7%CC=N)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%RD=0)
T6(R=N)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# Barracuda 340 Load Balancer
Fingerprint Barracuda 340 load balancer
Class Barracuda Networks | embedded || load balancer
SEQ(SP=C5-CF%GCD=1-6%ISR=C9-D3%TI=Z%CI=Z%II=I%TS=7)
OPS(O1=M5ACST11NW0%O2=M5ACST11NW0%O3=M5ACNNT11NW0%O4=M5ACST11NW0%O5=M5ACST11NW0%O6=M5ACST11)
WIN(W1=16A0%W2=16A0%W3=16A0%W4=16A0%W5=16A0%W6=16A0)
ECN(R=Y%DF=N%T=38-42%TG=40%W=16D0%O=M5ACNNSNW0%CC=Y%Q=)
T1(R=Y%DF=N%T=38-42%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=38-42%TG=40%W=16A0%S=O%A=S+%F=AS%O=M5ACST11NW0%RD=0%Q=)
T4(R=Y%DF=N%T=38-42%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=38-42%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=38-42%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=38-42%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=38-42%TG=40%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=38-42%TG=40%CD=S)

# Barracuda 340, Firmware v4.1.0.034 (2012-03-07 15:17:49)
Fingerprint Barracuda 340 load balancer
Class Barracuda Networks | embedded || load balancer
SEQ(SP=F1-FB%GCD=1-6%ISR=10C-116%TI=Z%CI=Z%II=I%TS=8)
OPS(O1=M5B4ST11NW6%O2=M5B4ST11NW6%O3=M5B4NNT11NW6%O4=M5B4ST11NW6%O5=M5B4ST11NW6%O6=M5B4ST11)
WIN(W1=10F8%W2=10F8%W3=10F8%W4=10F8%W5=10F8%W6=10F8)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=111C%O=M5B4NNSNW6%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=10F8%S=O%A=S+%F=AS%O=M5B4ST11NW6%RD=0%Q=)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=Z)

# Barracuda. "This is a web filter appliance"
Fingerprint Barracuda Web Filter
Class Barracuda Networks | embedded || security-misc
SEQ(SP=FA-104%GCD=1-6%ISR=FD-107%TI=Z%II=I%TS=8)
OPS(O1=M564ST11%O2=M564ST11%O3=M564NNT11%O4=M564ST11%O5=M564ST11%O6=M564ST11)
WIN(W1=16A0%W2=16A0%W3=16A0%W4=16A0%W5=16A0%W6=16A0)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=16D0%O=M564NNS%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=O%A=S+%F=AR%O=%RD=0%Q=)
T6(R=N)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# barrelfish.org
Fingerprint Barrelfish before release2011-09-02
Class Barrelfish | Barrelfish || general purpose
CPE cpe:/o:barrelfish:barrelfish auto
SEQ(SP=0-A8%GCD=1-6%ISR=AC-B6%TI=I%CI=I%II=RI%SS=S%TS=U)
OPS(O1=M564%O2=M564%O3=M564%O4=M564%O5=M564%O6=M564)
WIN(W1=2DA0%W2=2DA0%W3=2DA0%W4=2DA0%W5=2DA0%W6=2DA0)
ECN(R=Y%DF=N%T=EE-F8%TG=FF%W=2DA0%O=M564%CC=N)
T1(R=Y%DF=N%T=EE-F8%TG=FF%S=O%A=S+%F=AS%RD=0)
T2(R=Y%DF=N%T=7A-84%TG=80%W=0%S=Z%A=S%F=AR%RD=0)
T3(R=Y%DF=N%T=7A-84%TG=80%W=0%S=Z%A=O%F=AR%RD=0)
T4(R=N)
T5(R=Y%DF=N%T=7A-84%TG=80%W=0%S=Z%A=S+%F=AR%RD=0%Q=R)
T6(R=Y%DF=N%T=7A-84%TG=80%W=0%S=A%A=Z%F=R%RD=0%Q=R)
T7(R=Y%DF=N%T=7A-84%TG=80%W=0%S=Z%A=S+%F=AR%RD=0%Q=R)
U1(DF=N%T=7A-84%TG=80%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=EE-F8%TG=FF%CD=S)

# Basler AG ruL2098-10gc GiGE Vision Ethernet Camera
Fingerprint Basler ruL 2098-10gc GigE Vision Ethernet camera
Class Basler | embedded || webcam
SEQ(SP=0-19%GCD=1-6|174|17E|2E8|2FC|45C|47A|5D0|5F8|744|776%ISR=5A-64%TI=I%II=I%SS=S%TS=U)
OPS(O1=M200%O2=M200%O3=M200%O4=M200%O5=M200%O6=M109)
WIN(W1=200%W2=200%W3=200%W4=200%W5=200%W6=200)
ECN(R=Y%DF=Y%T=FA-104%TG=FF%W=200%O=M200%CC=N%Q=)
T1(R=Y%DF=Y%T=FA-104%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%T=FA-104%TG=FF%W=200%S=O%A=S+%F=AS%O=M109%RD=0%Q=)
T4(R=Y%DF=Y%T=FA-104%TG=FF%W=200%S=A+%A=S%F=AR%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=FA-104%TG=FF%W=200%S=A%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=FA-104%TG=FF%W=200%S=A%A=S%F=AR%O=%RD=0%Q=)
T7(R=Y%DF=Y%T=FA-104%TG=FF%W=200%S=A%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=Y%T=FA-104%TG=FF%IPL=38%UN=24A2|301D|3BB6|477C|5365%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=24-39%TG=40%CD=S)

# Xerox DocuPrint N32
# Bay Networks Terminal Annex server. Converts serial connection to ethernet.
# ANNEX RA4000 Terminal server
Fingerprint Bay Networks Annex Ethernet-to-serial bridge or Xerox DocuPrint N32 printer
Class Bay Networks | embedded || bridge
Class Xerox | embedded || printer
CPE cpe:/h:xerox:docuprint_n32
SEQ(SP=C-16%GCD=FA00|1F400|2EE00|3E800|4E200%ISR=97-A1%II=I%TS=U)
OPS(O1=M5B4%O2=M5B4%O3=M5B4%O4=M5B4%O5=M5B4%O6=M5B4)
WIN(W1=1000%W2=1000%W3=1000%W4=1000%W5=1000%W6=1000)
ECN(R=Y%DF=N%T=19-23%TG=20%W=1000%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=19-23%TG=20%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=19-23%TG=20%W=1000%S=O%A=O%F=A%O=%RD=0%Q=)
T4(R=Y%DF=N%T=19-23%TG=20%W=1000%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=19-23%TG=20%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=19-23%TG=20%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=19-23%TG=20%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=4210%RIPCK=Z%RUCK=0%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# BayStack 450-24T, Versions: HW:RevD  FW:V1.47 SW:v3.1.0.22  ISVN:1
Fingerprint Bay Networks BayStack 450 switch (software version 3.1.0.22)
Class Bay Networks | embedded || switch
CPE cpe:/h:baynetworks:baystack_450 auto
SEQ(SP=20-BA%GCD=FA|1F4|2EE|3E8|4E2%ISR=8A-C0%TI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4%O2=M5B4%O3=M5B4%O4=M5B4%O5=M5B4%O6=M5B4)
WIN(W1=400%W2=400%W3=400%W4=400%W5=400%W6=400)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=0|400%O=|M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O|Z%A=O|S+%F=AR|AS%RD=0%Q=)
T2(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=3B-45%TG=40%W=0|400%S=O|Z%A=O|S+%F=AR|AS%O=|M5B4%RD=0%Q=)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# Bay Networks Switch BayStack 450-24T [FW:V1.48 SW:v4.2.0.16]
Fingerprint Bay Networks BayStack 450 switch (software version 4.2.0.16)
Class Bay Networks | embedded || switch
CPE cpe:/h:baynetworks:baystack_450 auto
SEQ(SP=63-E3%GCD=1-6%ISR=8A-B0%TI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4%O2=M5B4%O3=M5B4%O4=M5B4%O5=M5B4%O6=M5B4)
WIN(W1=400%W2=400%W3=400%W4=400%W5=400%W6=400)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=400%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=O|S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=3B-45%TG=40%W=0|400%S=O|Z%A=O|S+%F=AR|AS%O=|M5B4%RD=0%Q=)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# BeaconMedaes http://www.beaconmedaes.com, PIPELINE ALARMS, TOTALALERT Medical Gas Alarm, MedPlus TotalAlert Alarm Network
Fingerprint BeaconMedaes TotalAlert medical gas alarm
Class BeaconMedaes | embedded || specialized
SEQ(SP=0-16%GCD=FA7F|1F4FE|2EF7D|3E9FC|4E47B%ISR=97-A1%TI=I%II=I%SS=S%TS=U)
OPS(O1=M5B0%O2=M5B0%O3=M5B0%O4=M5B0%O5=M5B0%O6=M5B0)
WIN(W1=2000%W2=2000%W3=2000%W4=2000%W5=2000%W6=2000)
ECN(R=Y%DF=N%T=19-23%TG=20%W=2000%O=M5B0%CC=N%Q=)
T1(R=Y%DF=N%T=19-23%TG=20%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=19-23%TG=20%W=2000%S=O%A=O%F=A%O=%RD=0%Q=)
T4(R=Y%DF=N%T=19-23%TG=20%W=2000%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=19-23%TG=20%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=19-23%TG=20%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=19-23%TG=20%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=19-23%TG=20%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=19-23%TG=20%CD=S)

# MIB MusicButler http://www.beatpro.dk
Fingerprint Beat MIB MusicButler
Class Beat | embedded || media device
SEQ(SP=FC-106%GCD=1-6%ISR=100-10A%TI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4%O2=M5B4%O3=M5B4%O4=M5B4%O5=M5B4%O6=M5B4)
WIN(W1=7D78%W2=7D78%W3=7D78%W4=7D78%W5=7D78%W6=7D78)
ECN(R=Y%DF=N%T=7B-85%TG=80%W=7D78%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=7B-85%TG=80%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=Y%DF=N%T=7B-85%TG=80%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=N)
T7(R=N)
U1(DF=N%T=7B-85%TG=80%IPL=B0%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=7B-85%TG=80%CD=Z)

# BECK IPC Chip http://www.beck-ipc.com/en/products/index.asp
Fingerprint BECK IPC@CHIP
Class BECK | embedded || specialized
SEQ(SP=21-2B%GCD=61A8|C350|124F8|186A0|1E848%ISR=9F-A9%TI=I%CI=I%II=I%SS=S%TS=A)
OPS(O1=M5B4NW0NNT11%O2=M578NW0NNT11%O3=M280NW0NNT11%O4=M5B4NW0NNT11%O5=M218NW0NNT11%O6=M109NNT11)
WIN(W1=21F0%W2=2088%W3=2258%W4=21F0%W5=20C0%W6=209D)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=2238%O=M5B4NW0%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=3B-45%TG=40%W=209D%S=O%A=S+%F=AS%O=M109NW0NNT11%RD=0%Q=)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=N)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=FA-104%TG=FF%CD=S)

# Belkin Network USB Hub (F5L009)
Fingerprint Belkin F5L009 power adapter
Class Belkin | embedded || power-device
SEQ(SP=0-5%GCD=10001|20002|30003|40004|50005%ISR=96-A0%TI=I%CI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4NNS%O2=M5B4NNS%O3=M5B4NNS%O4=M5B4NNS%O5=M5B4NNS%O6=M5B4NNS)
WIN(W1=5B4%W2=5B4%W3=5B4%W4=5B4%W5=5B4%W6=5B4)
ECN(R=Y%DF=N%T=FA-104%TG=FF%W=5B4%O=M5B4NNS%CC=N)
T1(R=Y%DF=N%T=FA-104%TG=FF%S=O%A=S+%F=AS%RD=0)
T2(R=Y%DF=N%T=FA-104%TG=FF%W=5B4%S=A%A=S%F=AR%RD=0)
T3(R=Y%DF=N%T=FA-104%TG=FF%W=5B4%S=A%A=S+%F=AR%RD=0)
T4(R=Y%DF=N%T=FA-104%TG=FF%W=5B4%S=A%A=S%F=AR%RD=0)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S+%F=AR%RD=0)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=AR%RD=0)
T7(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=AR%RD=0)
U1(R=N)
IE(DFI=N%T=FA-104%TG=FF%CD=Z)

# Belkin OmniView SMB 8-Port IP KVM
# SMA Sunny Web Box monitoring solution for Solar Panel Inverters, Based on a Windows CE Firmware running version 1.5
Fingerprint Belkin OmniView KVM switch or SMA Sunny WebBox solar panel monitor
Class Belkin | embedded || specialized
Class SMA | embedded || power-device
SEQ(SP=7E-88%GCD=1-6%ISR=97-A1%TI=I%II=I%SS=S%TS=0)
OPS(O1=M5B4NW0NNT00NNS%O2=M5B4NW0NNT00NNS%O3=M5B4NW0NNT00%O4=M5B4NW0NNT00NNS%O5=M5B4NW0NNT00NNS%O6=M5B4NNT00NNS)
WIN(W1=8000%W2=8000%W3=8000%W4=8000%W5=8000%W6=8000)
ECN(R=Y%DF=Y%T=7B-85%TG=80%W=8000%O=M5B4NW0NNS%CC=N%Q=)
T1(R=Y%DF=Y%T=7B-85%TG=80%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=Y%DF=N%T=7B-85%TG=80%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=N)
T7(R=N)
U1(DF=N%T=7B-85%TG=80%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=7B-85%TG=80%CD=Z)

# Belkin F1DE101N aka digitalv6 Kaveman IPKVM, running Kaveman firmware 2.5-041224.1742
Fingerprint Belkin F1DR101N KVM console
Class Belkin | embedded || terminal
SEQ(SP=3A-44%GCD=9C4|1388|1D4C|2710|30D4%ISR=9F-A9%TI=I%CI=I%II=I%SS=S%TS=A)
OPS(O1=M5B4NW0NNSNNT11%O2=M578NW0NNSNNT11%O3=M280NW0NNT11%O4=M5B4NW0NNSNNT11%O5=M218NW0NNSNNT11%O6=M109NNSNNT11)
WIN(W1=21F0%W2=2088%W3=2258%W4=21F0%W5=20C0%W6=209D)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=2238%O=M5B4NW0NNS%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=3B-45%TG=40%W=209D%S=O%A=S+%F=AS%O=M109NW0NNSNNT11%RD=0%Q=)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=N)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=FA-104%TG=FF%CD=S)

# Belkin Consumer Router/Wireless Access Point Model F5D7230-4 vA000
Fingerprint Belkin F5D7230-4 WAP
Class Belkin | embedded || WAP
CPE cpe:/h:belkin:f5d7230-4 auto
SEQ(SP=0-5%GCD=B|16|21|2C|37%ISR=30-3A%TI=I|RD%CI=I%II=I%SS=S%TS=U)
OPS(O1=M578%O2=M578%O3=M280%O4=M578%O5=M218%O6=M109)
WIN(W1=1770%W2=1770%W3=1770%W4=1770%W5=1770%W6=1770)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=1770%O=M578%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=1770%S=O%A=S+%F=AS%O=M109%RD=0%Q=)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=O%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=O%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=Y%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=Z)

# SMC7008ABR Barricade 8-port Broadband Router
# Belkin F5D7230-4 router
# Belkin Wireless G Router F5D7230-4
Fingerprint Belkin F5D7230-4 WAP or SMC SMC7008ABR router
Class Belkin | embedded || WAP
CPE cpe:/h:belkin:f5d7230-4 auto
Class SMC | embedded || router
CPE cpe:/h:smc:smc7008abr auto
SEQ(SP=0-16%GCD=1-6|A|14|1E|28|32%ISR=30-3A%TI=I%II=I%SS=O%TS=U)
OPS(O1=M578%O2=M578%O3=M280%O4=M578%O5=M218%O6=M109)
WIN(W1=1770%W2=1770%W3=1770%W4=1770%W5=1770%W6=1770)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=1770%O=M578%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=1770%S=O%A=S+%F=AS%O=M109%RD=0%Q=)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=O%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=O%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N|O%T=3B-45%TG=40%CD=Z)

# Belkin Woreless Router F5D8233-4v3(01) Firmware 3.01.17 (Nov 29 2007 17:48:13)
Fingerprint Belkin F5D8233 WAP
Class Belkin | embedded || WAP
CPE cpe:/h:belkin:f5d8233 auto
SEQ(SP=10-1C%GCD=1-6%ISR=4B-55%TI=I%II=I%SS=S%TS=U)
OPS(O1=M578%O2=M578%O3=M280%O4=M578%O5=M218%O6=M109)
WIN(W1=1770%W2=1770%W3=1770%W4=1770%W5=1770%W6=1770)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=1770%O=M578%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=1770%S=O%A=O|S+%F=AS%O=M109%RD=0%Q=)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=O%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=O%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=Y%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=Z)

# Belkin N 150 wireless router, firmware version F6D4230-4_WW_1.00.03
# Belkin N Wireless Router (Part # F5D8236-4, Version 3xxx Firmware), Linux, 2.6.21.x on a mipsel CPU.
Fingerprint Belkin F5D8236 or N150 WAP
Class Belkin | embedded || WAP
SEQ(SP=0-5%GCD=80|100|180|200|280%ISR=4E-58%TI=I%CI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4%O2=M564%O3=M5B4%O4=M5B4%O5=M204%O6=MF5)
WIN(W1=16D0%W2=16D0%W3=16D0%W4=16D0%W5=16D0%W6=16D0)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=16D0%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=3B-45%TG=40%W=16D0%S=O%A=S+%F=AS%O=M5B4%RD=0%Q=)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=S%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=S%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(R=N)
IE(DFI=N%T=3B-45%TG=40%CD=Z)

# Belkin advanced WAP F6D4630-4 v1
Fingerprint Belkin F6D4630-4 v1 WAP
Class Belkin | embedded || WAP
SEQ(SP=0-1D%GCD=1-6|64|C8|12C|190|1F4%ISR=4B-55%TI=I%II=I%SS=S%TS=U)
OPS(O1=M578%O2=M578%O3=M280%O4=M578%O5=M218%O6=M109)
WIN(W1=1770%W2=1770%W3=1770%W4=1770%W5=1770%W6=1770)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=1770%O=M578%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=1770%S=O%A=O|S+%F=AS%O=M109%RD=0%Q=)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=O%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=O%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N|Y%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N|S|Y%T=3B-45%TG=40%CD=Z)

# Philips ADSL Modem Multiservices PSTN Voice V2 Model: CIA6720NB/18
# Belkin Surf WAP Hardware Model F7D2301 Firmware Version 1.00.16 (Jul 2 2010 14:36:56)
Fingerprint Belkin F7D2301 WAP or Philips CIA6720NB ADSL modem
Class Belkin | embedded || WAP
CPE cpe:/h:belkin:f7d2301 auto
Class Philips | embedded || broadband router
CPE cpe:/h:philips:cia6720nb auto
SEQ(SP=41-4B%GCD=1-6%ISR=49-53%TI=I%CI=I%II=I%SS=S%TS=U)
OPS(O1=M578%O2=M578%O3=M280%O4=M578%O5=M218%O6=M109)
WIN(W1=1770%W2=1770%W3=1770%W4=1770%W5=1770%W6=1770)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=1770%O=M578%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=O|S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=O%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=O%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N|Y%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N|S|Y%T=3B-45%TG=40%CD=Z)

# F9K1010_WW_2.00.04 04/21/2015
Fingerprint Belkin N300 WAP (Linux 2.6.30)
Class Belkin | embedded || WAP
CPE cpe:/h:belkin:n300 auto
Class Linux | Linux | 2.6.X | WAP
CPE cpe:/o:linux:linux_kernel:2.6.30 auto
SEQ(SP=C1-CB%GCD=1-6%ISR=C5-CF%TI=Z%CI=Z%II=I%TS=7)
OPS(O1=M5B4ST11%O2=M5B4ST11%O3=M5B4NNT11%O4=M5B4ST11%O5=M5B4ST11%O6=M5B4ST11)
WIN(W1=16A0%W2=16A0%W3=16A0%W4=16A0%W5=16A0%W6=16A0)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=16D0%O=M5B4NNS%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# belkin router running   1.00.09 (Jul 4 2011) Model is a Belkin N600 DB
# Belkin Router N600 DB (dual band), Hardware: F9K1102 v1, Firmware: 1.00.19
Fingerprint Belkin N600 DB WAP
Class Belkin | embedded || WAP
CPE cpe:/h:belkin:n600_db
SEQ(SP=CF-123%GCD=1-6%ISR=E8-100%TI=Z%CI=Z%II=I%TS=7)
OPS(O1=M5B4ST11NW1%O2=M5B4ST11NW1%O3=M5B4NNT11NW1%O4=M5B4ST11NW1%O5=M5B4ST11NW1%O6=M5B4ST11)
WIN(W1=16A0%W2=16A0%W3=16A0%W4=16A0%W5=16A0%W6=16A0)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=16D0%O=M5B4NNSNW1%CC=N)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0)
T2(R=N)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=16A0%S=O%A=S+%F=AS%O=M5B4ST11NW1%RD=0)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%RD=0)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%RD=0)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%RD=0)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# Belkin Wireless Pre-N Router
# Firmware Version 1.01.03; Boot Version 2.01.08
Fingerprint Belkin Wireless Pre-N Router
Class Belkin | embedded || WAP
SEQ(SP=C2-CC%GCD=1-6%ISR=C9-D3%TI=Z%II=I%TS=7)
OPS(O1=%O2=NNT11|M5B4ST11NW0%O3=NNT11|M5B4NNT11NW0%O4=NNT11|M5B4ST11NW0%O5=NNT11|M5B4ST11NW0%O6=NNT11|M5B4ST11)
WIN(W1=16D0%W2=16A0%W3=16A0%W4=16A0%W5=16A0%W6=16A0)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=16D0%O=|M5B4NNSNW0%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=O%F=A%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=16A0%S=O%A=O|S+%F=A|AS%O=NNT11|M5B4ST11NW0%RD=0%Q=)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# Plan 9 from Bell Labs (4th edition)
# 9front as a cpu server.
Fingerprint Bell Labs Plan 9 4th edition
Class Bell Labs | Plan 9 | 4th edition | general purpose
CPE cpe:/o:belllabs:plan_9:4th_edition auto
SEQ(SP=F8-10C%GCD=1-6%ISR=104-10F%TI=I%CI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4W[1-3]N%O2=M5B4W[1-3]N%O3=M5B4W[1-3]N%O4=M5B4W[1-3]N%O5=M5B4W[1-3]N%O6=M5B4)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=N%T=FA-104%TG=FF%W=FFFF%O=M5B4W[1-3]N%CC=N%Q=)
T1(R=Y%DF=N%T=FA-104%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=FA-104%TG=FF%W=FFFF%S=O%A=S+%F=AS%O=M5B4W[1-3]N%RD=0%Q=)
T4(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=FA-104%TG=FF%CD=S)

# Plan 9 from Bell Labs
Fingerprint Bell Labs Plan 9 edition
Class Bell Labs | Plan 9 || general purpose
CPE cpe:/o:belllabs:plan_9 auto
SEQ(SP=FA-10A%GCD=1-6%ISR=101-111%TI=I%CI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4W0N%O2=M5B4W0N%O3=M5B4W0N%O4=M5B4W0N%O5=M5B4W0N%O6=M5B4)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=N%T=FA-104%TG=FF%W=FFFF%O=M5B4W0N%CC=N%Q=)
T1(R=Y%DF=N%T=FA-104%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=FA-104%TG=FF%W=FFFF%S=O%A=S+%F=AS%O=M5B4W0N%RD=0%Q=)
T4(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=FA-104%TG=FF%CD=S)

# Billion 7404VGO-M DSL Router [Firmware 5.52d]
# Zoom ADSL X6 (5590 series)
# Siemens Vulcan BSP v0.01 / Vulcan CSP v0.01, DSL MODEM ADSL/2/2+ V55.1.03.06/E.37.7.37
# TeraCom Broadband modem ADSL
Fingerprint Billion 7404VGO-M or Zoom X6 DSL router
Class Billion | embedded || broadband router
CPE cpe:/h:billion:7474vgo-m
Class Zoom | embedded || broadband router
CPE cpe:/h:zoom:x6 auto
SEQ(SP=74-86%GCD=1-6%ISR=78-8E%TI=I%CI=I%TS=U)
OPS(R=N)
WIN(R=N)
ECN(R=N)
T1(R=Y%DF=Y%T=7B-85%TG=80%S=O%A=O|S+%F=AS%RD=0%Q=)
T2(R=Y%DF=Y%T=7B-85%TG=80%W=4000%S=A%A=Z%F=R%O=%RD=0%Q=)
T3(R=N)
T4(R=Y%DF=Y%T=7B-85%TG=80%W=4000%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=7B-85%TG=80%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=7B-85%TG=80%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=7B-85%TG=80%W=0%S=Z%A=Z%F=R%O=%RD=0%Q=)
U1(DF=N%T=96-A0%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(R=N)

# Billion 7404VGPM
Fingerprint Billion 7404VGP-M ADSL router
Class Billion | embedded || broadband router
CPE cpe:/h:billion:7404vgp-m auto
SEQ(SP=C7-D1%GCD=1-6%ISR=CB-D5%TI=Z%TS=7|9)
OPS(O1=M584ST11NW5%O2=M584ST11NW5%O3=M584NNT11NW5%O4=M584ST11NW5%O5=M584ST11NW5%O6=M584ST11)
WIN(W1=16A0%W2=16A0%W3=16A0%W4=16A0%W5=16A0%W6=16A0)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=16D0%O=M584NNSNW5%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=O|S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=1F59B3D4%Q=)
T5(R=Y%DF=Y%T=FA-104%TG=FF%W=0%S=Z%A=S+%F=AR%O=%RD=1F59B3D4%Q=)
T6(R=Y%DF=Y%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=1F59B3D4%Q=)
T7(R=N)
U1(R=N)
IE(R=N)

# Billion WRT610N running Firmware Version: 1.00.02 B10
Fingerprint Billion WRT610n WAP
Class Billion | embedded || WAP
CPE cpe:/h:billion:wrt610n auto
SEQ(SP=77-85%GCD=1-6%ISR=7F-8D%TI=I%CI=I%TS=U)
OPS(O1=M58C%O2=M578%O3=M280%O4=M218%O5=M218%O6=M109)
WIN(W1=4000%W2=4000%W3=4000%W4=4000%W5=4000%W6=4000)
ECN(R=Y%DF=Y%T=7B-85%TG=80%W=4000%O=M58C%CC=N%Q=)
T1(R=Y%DF=Y%T=7B-85%TG=80%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=7B-85%TG=80%W=4000%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=7B-85%TG=80%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=7B-85%TG=80%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=N)
U1(DF=N%T=96-A0%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(R=N)

# Funkwerk small office WAN Router RS232bw (Bintec hardware) Software RS232bw version V.7.9 Rev. 5 (Patch 6) IPSec from 2011/04/29 00:00:00
Fingerprint BinTec RS232bw ADSL modem
Class BinTec | embedded || broadband router
CPE cpe:/h:bintec:rs232bw auto
SEQ(SP=46-70%GCD=1-6%ISR=8A-94%TI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4%O2=M5B4%O3=M5B4%O4=M5B4%O5=M5B4%O6=M5B4)
WIN(W1=4000%W2=4000%W3=4000%W4=4000%W5=4000%W6=4000)
ECN(R=Y%DF=N%T=6E-78%TG=80%W=4000%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=6E-78%TG=80%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=Y%DF=N%T=6E-78%TG=80%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=N)
T7(R=N)
U1(DF=N%T=6E-78%TG=80%IPL=38%UN=D733%RIPL=G%RID=2%RIPCK=I%RUCK=G%RUD=G)
IE(DFI=S%T=6E-78%TG=80%CD=S)

# BinTec BinGO!
Fingerprint BinTec BinGO! ISDN router
Class BinTec | embedded || router
SEQ(SP=66-80%GCD=1-6%ISR=8D-97%TI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4%O2=M5B4%O3=M5B4%O4=M5B4%O5=M5B4%O6=M5B4)
WIN(W1=1000%W2=1000%W3=1000%W4=1000%W5=1000%W6=1000)
ECN(R=Y%DF=N%T=72-7C%TG=80%W=1000%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=71-7C%TG=80%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=72-7C%TG=80%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=72-7C%TG=80%W=0%S=Z%A=O%F=AR%O=%RD=0%Q=)
T4(R=Y%DF=N%T=72-7C%TG=80%W=0%S=A%A=S%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=72-7C%TG=80%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=72-7C%TG=80%W=0%S=A%A=S%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=72-7C%TG=80%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=72-7C%TG=80%IPL=38%UN=0%RIPL=G%RID=0%RIPCK=I%RUCK=G%RUD=G)
IE(DFI=S%T=72-7C%TG=80%CD=S)

# Bintec Brick-XM
Fingerprint BinTec Brick-XM router
Class BinTec | embedded || router
SEQ(SP=61-71%GCD=1-6%ISR=8D-97%TI=I%CI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4%O2=M5B4%O3=M5B4%O4=M5B4%O5=M5B4%O6=M5B4)
WIN(W1=1000%W2=1000%W3=1000%W4=1000%W5=1000%W6=1000)
ECN(R=Y%DF=N%T=4B-55%TG=80%W=1000%O=M5B4%CC=N)
T1(R=Y%DF=N%T=4B-55%TG=80%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=4B-55%TG=80%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=4B-55%TG=80%W=0%S=Z%A=O%F=AR%O=%RD=0%Q=)
T4(R=Y%DF=N%T=4B-55%TG=80%W=0%S=A%A=S%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=4B-55%TG=80%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=4B-55%TG=80%W=0%S=A%A=S%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=4B-55%TG=80%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=4B-55%TG=80%IPL=38%UN=0%RIPL=G%RID=0%RIPCK=I%RUCK=G%RUD=G)
IE(DFI=S%T=4B-55%TG=80%CD=S)

# funkwerk bintec R3400 gateway
Fingerprint BinTec R3400 WAP
Class BinTec | embedded || router
CPE cpe:/h:bintec:r3400 auto
SEQ(SP=27-6D%GCD=1-6%ISR=8A-94%TI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4%O2=M5B4%O3=M5B4%O4=M5B4%O5=M5B4%O6=M5B4)
WIN(W1=4000%W2=4000%W3=4000%W4=4000%W5=4000%W6=4000)
ECN(R=Y%DF=N%T=76-80%TG=80%W=4000%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=76-80%TG=80%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=76-80%TG=80%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=76-80%TG=80%W=0%S=Z%A=O%F=AR%O=%RD=0%Q=)
T4(R=Y%DF=N%T=76-80%TG=80%W=0%S=A%A=S%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=76-80%TG=80%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=76-80%TG=80%W=0%S=A%A=S%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=76-80%TG=80%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=46-50|76-80%TG=80%IPL=38%UN=4E07%RIPL=G%RID=0%RIPCK=I%RUCK=G%RUD=G)
IE(DFI=S%T=76-80%TG=80%CD=S)

# BINTEC-X4000 version V.7.1 Rev. 4 from 2004/10/06 00:00:00
Fingerprint BinTec X4000 access router
Class BinTec | embedded || router
SEQ(SP=64-6E%GCD=1-6%ISR=8A-94%TI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4%O2=M5B4%O3=M5B4%O4=M5B4%O5=M5B4%O6=M5B4)
WIN(W1=4000%W2=4000%W3=4000%W4=4000%W5=4000%W6=4000)
ECN(R=Y%DF=N%T=71-7B%TG=80%W=4000%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=71-7B%TG=80%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=71-7B%TG=80%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=71-7B%TG=80%W=0%S=Z%A=O%F=AR%O=%RD=0%Q=)
T4(R=Y%DF=N%T=71-7B%TG=80%W=0%S=A%A=S%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=71-7B%TG=80%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=71-7B%TG=80%W=0%S=A%A=S%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=71-7B%TG=80%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=71-7B%TG=80%IPL=38%UN=0%RIPL=G%RID=0%RIPCK=I%RUCK=G%RUD=G)
IE(DFI=S%T=71-7B%TG=80%CD=S)

# Funkwerk BinTec R1200
Fingerprint BinTec R1200 WAP
Class BinTec | embedded || WAP
CPE cpe:/h:bintec:r1200 auto
SEQ(SP=4C-7C%GCD=1-6%ISR=8A-94%TI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4%O2=M5B4%O3=M5B4%O4=M5B4%O5=M5B4%O6=M5B4)
WIN(W1=4000%W2=4000%W3=4000%W4=4000%W5=4000%W6=4000)
ECN(R=Y%DF=N%T=6E-78%TG=80%W=4000%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=6D-78%TG=80%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=Y%DF=N%T=6E-78%TG=80%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=N)
T7(R=N)
U1(DF=N%T=6E-78%TG=80%IPL=38%UN=0|128%RIPL=G%RID=0%RIPCK=I%RUCK=G%RUD=G)
IE(DFI=S%T=6E-78%TG=80%CD=S)

# BlackBoard Transaction System IP Converter (serial-to-IP converter). COM/IPCONV IP Converter V5.6.
Fingerprint Blackboard transaction system serial-to-IP converter
Class Blackboard | embedded || bridge
SEQ(SP=E6-F0%GCD=1-6%ISR=EA-F4%TS=A)
OPS(O1=M5B4NW0NNSNNT11%O2=M578NW0NNSNNT11%O3=M280NW0NNT11%O4=M5B4NW0NNSNNT11%O5=M218NW0NNSNNT11%O6=M109NNSNNT11)
WIN(W1=21F0%W2=2088%W3=2258%W4=21F0%W5=20C0%W6=209D)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=2238%O=M5B4NW0NNS%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=FA-104%TG=FF%CD=S)

# Blackboard AT3000 Activity Reader
Fingerprint BlackBoard AT3000 POS device
Class Blackboard | embedded || specialized
CPE cpe:/h:blackboard:at3000
SEQ(SP=F4-10A%GCD=1-6%ISR=100-10A%TI=RI%TS=A)
OPS(O1=M5B4NW0NNSNNT11%O2=M578NW0NNSNNT11%O3=M280NW0NNT11%O4=M5B4NW0NNSNNT11%O5=M218NW0NNSNNT11%O6=M109NNSNNT11)
WIN(W1=54D8%W2=56C0%W3=55DC%W4=54D8%W5=53EC%W6=5401)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=558C%O=M5B4NW0NNS%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-105%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=FA-105%TG=FF%CD=S)

# BlackBox Coalesce
Fingerprint BlackBox Coalesce wireless collaborations system (Android 5.1)
Class BlackBox | embedded || media device
Class Google | Android | 5.X | media device
CPE cpe:/o:google:android:5.1 auto
SEQ(SP=EB-F5%GCD=1-6%ISR=108-112%TI=Z%CI=I%II=I%TS=7)
OPS(O1=M5B4ST11NW6%O2=M5B4ST11NW6%O3=M5B4NNT11NW6%O4=M5B4ST11NW6%O5=M5B4ST11NW6%O6=M5B4ST11)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M5B4NNSNW6%CC=Y%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=O%F=AR%O=%RD=0%Q=)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# CacheFlow 5000 (exPacketeer)
Fingerprint Blue Coat CacheFlow 5000 proxy server
Class Blue Coat | embedded || proxy server
SEQ(SP=100-10A%GCD=1-6%ISR=102-110%TI=RI%TS=A)
OPS(O1=M5B4NW0ST11LLLL%O2=M5B4NW0ST11LLLL%O3=M5B4NW0NNT11%O4=M5B4NW0ST11LLLL%O5=M5B4NW0ST11LLLL%O6=M5B4ST11LLLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=FFFF%O=M5B4NW0SLL%CC=N)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0)
T2(R=N)
T3(R=Y%DF=N%T=3B-45%TG=40%W=FFFF%S=O%A=S+%F=AS%O=M5B4NW0ST11LLLL%RD=0)
T4(R=Y%DF=Y%T=3A-44%TG=40%W=0%S=A%A=Z%F=R%RD=0)
T5(R=Y%DF=N%T=3A-44%TG=40%W=0%S=Z%A=S+%F=AR%RD=0)
T6(R=Y%DF=Y%T=3A-44%TG=40%W=0%S=A%A=Z%F=R%RD=0)
T7(R=Y%DF=N%T=3A-44%TG=40%W=0%S=Z%A=S%F=AR%RD=0)
U1(DF=N%T=3A-44%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3A-44%TG=40%CD=S)

# Bluecoat CF-5000
Fingerprint Blue Coat CacheFlow 5000 proxy server
Class Blue Coat | embedded || proxy server
SEQ(SP=FF-10B%GCD=1-6%ISR=102-10C%TI=RI%CI=RI%II=RI%SS=S%TS=A)
OPS(O1=M5B4NW6ST11LLLL%O2=M5B4NW6ST11LLLL%O3=M5B4NW6NNT11%O4=M5B4NW6ST11LLLL%O5=M5B4NW6ST11LLLL%O6=M5B4ST11LLLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=FFFF%O=M5B4NW6SLL%CC=N)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0)
T2(R=N)
T3(R=Y%DF=N%T=3B-45%TG=40%W=FFFF%S=O%A=S+%F=AS%O=M5B4NW6ST11LLLL%RD=0)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%RD=0)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%RD=0)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%RD=0)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%RD=0)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# PacketShaper v9.2.3g1
Fingerprint Blue Coat PacketShaper appliance
Class Blue Coat | embedded || proxy server
CPE cpe:/h:bluecoat:packetshaper
SEQ(CI=I%II=I%TS=U)
OPS(R=N)
WIN(R=N)
ECN(R=N)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=Z%RUCK=G%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# Blue Coat proxy server running SGOS 3.2.4.8
Fingerprint Blue Coat proxy server (SGOS 3.2.4.8)
Class Blue Coat | SGOS | 3.X | proxy server
CPE cpe:/o:bluecoat:sgos:3.2.4.8 auto
SEQ(SP=94-A2%GCD=1-6%ISR=9E-A8%TI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4%O2=M578%O3=M280%O4=M5B4%O5=M218%O6=M109)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=FFFF%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=3B-45%TG=40%W=FFFF%S=O%A=S+%F=AS%O=M109%RD=0%Q=)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=15C%RID=4210%RIPCK=Z%RUCK=0%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# Blue Coat proxy server running SGOS 4.1.3.1, release 24075
# Blue Coat Proxy SG8000 w/ SGOS 4.2.3.12
Fingerprint Blue Coat proxy server (SGOS 4.1 - 4.2)
Class Blue Coat | SGOS | 4.X | proxy server
CPE cpe:/o:bluecoat:sgos:4 auto
SEQ(SP=A0-B1%GCD=1-6%ISR=A5-C2%TI=RD%TS=1)
OPS(O1=M5B4NW0NNT11%O2=M578NW0NNT11%O3=M280NW0NNT11%O4=M5B4NW0NNT11%O5=M218NW0NNT11%O6=M109NNT11)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=FFFF%O=M5B4NW0%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=O|S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=15C%RID=4210%RIPCK=Z%RUCK=0%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# Blue Coat SG200 Proxy - SGOS 4.2.2.8 release id: 26972
# SGOS 4.2.5.1, release 29951.
# Blue Coat SG200, Version: SGOS 4.2.6.1, Release id: 31079
Fingerprint Blue Coat SG200 proxy server (SGOS 4.2.2.8 - 4.2.6.1)
Class Blue Coat | SGOS | 4.X | proxy server
CPE cpe:/o:bluecoat:sgos:4 auto
SEQ(SP=94-A0%GCD=1-6%ISR=9C-A6%TI=I%II=I%SS=S%TS=1)
OPS(O1=M5B4NW0NNT11%O2=M578NW0NNT11%O3=M280NW0NNT11%O4=M5B4NW0NNT11%O5=M218NW0NNT11%O6=M109NNT11)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=FFFF%O=M5B4NW0%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=15C%RID=4210%RIPCK=Z%RUCK=0%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# Blue Coat SG810 Series Software SGOS 4.2.3.26
Fingerprint Blue Coat SG810 proxy server (SGOS 4.2.3.26)
Class Blue Coat | SGOS | 4.X | proxy server
CPE cpe:/o:bluecoat:sgos:4.2.3.26 auto
SEQ(SP=A0-B4%GCD=1-6%ISR=AB-BB%TS=1|2)
OPS(O1=M5B4NW0NNT11%O2=M578NW0NNT11%O3=M280NW0NNT11%O4=M5B4NW0NNT11%O5=M218NW0NNT11%O6=M109NNT11)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=FFFF%O=M5B4NW0%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=15C%RID=4210%RIPCK=I%RUCK=0%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# Blue Coat Director SGOS version 4.2.2.2
Fingerprint Blue Coat SGOS 4.2.2.2
Class Blue Coat | SGOS | 4.X | proxy server
CPE cpe:/o:bluecoat:sgos:4.2.2.2 auto
SEQ(SP=101-10B%GCD=1-6%ISR=106-110%TI=I%CI=I%TS=7)
OPS(O1=M5B4NNSNW0NNT11%O2=M5B4NNSNW0NNT11%O3=M5B4NW0NNT11%O4=M5B4NNSNW0NNT11%O5=M5B4NNSNW0NNT11%O6=M5B4NNSNNT11)
WIN(W1=4000%W2=4000%W3=4000%W4=4000%W5=4000%W6=4000)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=4000%O=M5B4NNSNW0%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=3B-45%TG=40%W=4000%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Model: Blue Coat SG200 Series,  Software SGOS 5.1.4.4,  Software Release ID: 28724
Fingerprint Blue Coat SG200 proxy server (SGOS 5.1.4.4)
Class Blue Coat | SGOS | 5.X | proxy server
CPE cpe:/o:bluecoat:sgos:5.1.4.4 auto
SEQ(SP=FF-109%GCD=1-6%ISR=104-112%TI=I%II=I%SS=S%TS=A)
OPS(O1=M5B4NW0ST11LLLL%O2=M5B4NW0ST11LLLL%O3=M5B4NW0NNT11%O4=M5B4NW0ST11LLLL%O5=M5B4NW0ST11LLLL%O6=M5B4ST11LLLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=FFFF%O=M5B4NW0SLL%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=N)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Blue Coat SG210-10. SGOS 5.2.3.9 Proxy edition software release 34077
# Blue Coat Proxy SG210 running SGOS 5.2.3.3
Fingerprint Blue Coat SG210 proxy server (SGOS 5.2.3.3 - 5.2.3.9)
Class Blue Coat | SGOS | 5.X | proxy server
CPE cpe:/o:bluecoat:sgos:5 auto
SEQ(SP=FD-109%GCD=1-6%ISR=103-10D%TI=I%II=I%SS=S%TS=A)
OPS(O1=M5B4NW0ST11LLLL%O2=M5B4NW0ST11LLLL%O3=M5B4NW0NNT11%O4=M5B4NW0ST11LLLL%O5=M5B4NW0ST11LLLL%O6=M5B4ST11LLLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=FFFF%O=M5B4NW0SLL%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=3B-45%TG=40%W=FFFF%S=O%A=S+%F=AS%O=M5B4NW0ST11LLLL%RD=0%Q=)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Blue Coat 510-10 SGOS 5.2.2.5 Proxy Edition, Software release ID: 31082
# Blue Coat SG9000-5 proxy server (SGOS 5.5.4.1)
Fingerprint Blue Coat SG510 or SG9000 proxy server (SGOS 5.2.2.5 - 5.5.4.1)
Class Blue Coat | SGOS | 5.X | proxy server
CPE cpe:/o:bluecoat:sgos:5 auto
SEQ(SP=FE-108%GCD=1-6%ISR=106-110%TI=I%CI=I%II=I%SS=S%TS=A)
OPS(O1=M5B4NW0ST11LLLL%O2=M5B4NW0ST11LLLL%O3=M5B4NW0NNT11%O4=M5B4NW0ST11LLLL%O5=M5B4NW0ST11LLLL%O6=M5B4ST11LLLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=FFFF%O=M5B4NW0SLL%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=3B-45%TG=40%W=FFFF%S=O%A=S+%F=AS%O=M5B4NW0ST11LLLL%RD=0%Q=)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Model: Blue Coat SG510 Series , Software: SGOS 5.1.3.7, Software Release ID: 27503
Fingerprint Blue Coat SG510-series proxy server (SGOS 5.1.3.7)
Class Blue Coat | SGOS | 5.X | proxy server
CPE cpe:/o:bluecoat:sgos:5.1.3.7 auto
SEQ(SP=100-10C%GCD=1-6%ISR=104-10E%TI=I%II=I%SS=S%TS=A)
OPS(O1=M5B4NW0NNT11SLL%O2=M5B4NW0NNT11SLL%O3=M5B4NW0NNT11%O4=M5B4NW0NNT11SLL%O5=M5B4NW0NNT11SLL%O6=M5B4NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=FFFF%O=M5B4NW0SLL%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=3B-45%TG=40%W=FFFF%S=O%A=S+%F=AS%O=M5B4NW0NNT11SLL%RD=0%Q=)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Blue Coat 810-10, SGOS 5.3.1.9 Proxy Edition
# Blue Coat SGOS Specific version 5.3.3.1
Fingerprint Blue Coat SG810 web proxy (SGOS 5.3.1.9 - 5.3.3.1)
Class Blue Coat | SGOS | 5.X | proxy server
CPE cpe:/o:bluecoat:sgos:5 auto
SEQ(SP=F4-10C%GCD=1-6%ISR=102-110%TI=I%II=I%SS=S%TS=A)
OPS(O1=M5B4NW6ST11LLLL%O2=M5B4NW6ST11LLLL%O3=M5B4NW6NNT11%O4=M5B4NW6ST11LLLL%O5=M5B4NW6ST11LLLL%O6=M5B4ST11LLLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=FFFF%O=M5B4NW6SLL%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=3B-45%TG=40%W=FFFF%S=O%A=S+%F=AS%O=M5B4NW6ST11LLLL%RD=0%Q=)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# SGOS 5.5.1.1 Proxy Edition 5.5.1.1 Build: 43412
Fingerprint Blue Coat SGOS 5.5.1.1
Class Blue Coat | SGOS | 5.X | proxy server
CPE cpe:/o:bluecoat:sgos:5.5.1.1 auto
SEQ(SP=101-10B%GCD=1-6%ISR=103-10F%TI=I%II=I%SS=S%TS=A)
OPS(O1=M5B4NW6ST11LLLL%O2=M5B4NW6ST11LLLL%O3=M5B4NW6NNT11%O4=M5B4NW6ST11LLLL%O5=M5B4NW6ST11LLLL%O6=M5B4ST11LLLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=FFFF%O=M5B4NW6SLL%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=N)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Version: SGOS 5.5.3.1 Proxy Edition Release id: 46382
Fingerprint Blue Coat SGOS 5.5.3.1
Class Blue Coat | SGOS | 5.X | proxy server
CPE cpe:/o:bluecoat:sgos:5.5.3.1 auto
SEQ(SP=FA-10A%GCD=1-6%ISR=103-10D%TI=I%CI=I%II=I%SS=S%TS=A)
OPS(O1=M5B4NW6ST11LLLL%O2=M5B4NW6ST11LLLL%O3=M5B4NW6NNT11%O4=M5B4NW6ST11LLLL%O5=M5B4NW6ST11LLLL%O6=M5B4ST11LLLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=FFFF%O=M5B4NW6SLL%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=3B-45%TG=40%W=FFFF%S=O%A=S+%F=AS%O=M5B4NW6ST11LLLL%RD=0%Q=)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Blue Coat running SGOS 6.2.5.1 Proxy Edition
# SGOS 6.2.8.1
Fingerprint Blue Coat proxy server (SGOS 6.2.5.1 - 6.2.8.1)
Class Blue Coat | SGOS | 6.X | proxy server
CPE cpe:/o:bluecoat:sgos:6 auto
SEQ(SP=FD-109%GCD=1-6%ISR=100-112%TI=I%CI=I%II=I%SS=S%TS=A)
OPS(O1=M5B4W0ST11LLLLL%O2=M5B4W0ST11LLLLL%O3=M5B4W0NNT11L%O4=M5B4W0ST11LLLLL%O5=M5B4W0ST11LLLLL%O6=M5B4ST11LLLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=FFFF%O=M5B4W0SLLL%CC=N)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0)
T2(R=N)
T3(R=Y%DF=N%T=3B-45%TG=40%W=FFFF%S=O%A=S+%F=AS%O=M5B4W0ST11LLLLL%RD=0)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%RD=0)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%RD=0)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%RD=0)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%RD=0)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# version 6.3.2.201 BlueCoat Proxy SG
Fingerprint Blue Coat proxy server (SGOS 6.3.2.201)
Class Blue Coat | SGOS | 6.X | proxy server
CPE cpe:/o:bluecoat:sgos:6.3.2.201 auto
SEQ(SP=103-10D%GCD=1-6%ISR=101-10B%TS=A)
OPS(O1=M5B4W0ST11LLLLL%O2=M5B4W0ST11LLLLL%O3=M5B4W0NNT11L%O4=M5B4W0ST11LLLLL%O5=M5B4W0ST11LLLLL%O6=M5B4ST11LLLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=FFFF%O=M5B4W0SLLL%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# 6.5.3.2
Fingerprint Blue Coat proxy server (SGOS 6.5.3.2)
Class Blue Coat | SGOS | 6.X | proxy server
CPE cpe:/o:bluecoat:sgos:6.5.3.2 auto
SEQ(SP=F6-110%GCD=1-6%ISR=101-10F%TI=I%CI=I%II=I%SS=S%TS=A)
OPS(O1=M5B4ST11W6LLLLL%O2=M5B4ST11W6LLLLL%O3=M5B4NNT11W6L%O4=M5B4ST11W6LLLLL%O5=M5B4ST11W6LLLLL%O6=M5B4ST11LLLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=FFFF%O=M5B4SW6LLL%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=3B-45%TG=40%W=FFFF%S=O%A=S+%F=AS%O=M5B4ST11W6LLLLL%RD=0%Q=)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Bluecoat ProxySG 600-10
# SGOS 6.4.3.1 Proxy Edition
# Blue Coat SG900 proxy appliance
# SGOS 6
Fingerprint Blue Coat ProxySG proxy server (SGOS 6.4)
Class Blue Coat | SGOS | 6.X | proxy server
CPE cpe:/o:bluecoat:sgos:6.4 auto
SEQ(SP=F3-107%GCD=1-6%ISR=100-10E%TI=I%CI=I%II=I%SS=S%TS=A)
OPS(O1=M5B4ST11W0LLLLL%O2=M5B4ST11W0LLLLL%O3=M5B4NNT11W0L%O4=M5B4ST11W0LLLLL%O5=M5B4ST11W0LLLLL%O6=M5B4ST11LLLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=FFFF%O=M5B4SW0LLL%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=3B-45%TG=40%W=FFFF%S=O%A=S+%F=AS%O=M5B4ST11W0LLLLL%RD=0%Q=)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# BlueArc Titan 2100 firmware version 4.2.944b
Fingerprint BlueArc Titan 2100 NAS device
Class BlueArc | embedded || storage-misc
CPE cpe:/h:bluearc:titan_2100 auto
SEQ(SP=1D-2D%GCD=1-6%ISR=8A-94%TI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4%O2=M5B4%O3=M5B4%O4=M5B4%O5=M5B4%O6=M5B4)
WIN(W1=FAF0%W2=FAF0%W3=FAF0%W4=FAF0%W5=FAF0%W6=FAF0)
ECN(R=Y%DF=N%T=7B-85%TG=80%W=FAF0%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=7B-85%TG=80%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=7B-85%TG=80%W=FAF0%S=O%A=S+%F=AS%O=M5B4%RD=0%Q=)
T4(R=Y%DF=N%T=7B-85%TG=80%W=FAF0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=7B-85%TG=80%W=FAF0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=7B-85%TG=80%W=FAF0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=7B-85%TG=80%W=FAF0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=FA-104%TG=FF%CD=S)

# Hitachi BlueArc OS 7.0
Fingerprint Hitachi BlueArc OS 7.0
Class BlueArc | embedded || storage-misc
SEQ(SP=4F-59%GCD=1-6%ISR=8A-94%CI=FFE1%II=I%TS=A)
OPS(O1=NNT11M5B4NNSNW2%O2=NNT11M5B4NNSNW2%O3=NNT11M5B4NW2%O4=NNT11M5B4NNSNW2%O5=NNT11M5B4NNSNW2%O6=NNT11M5B4NNS)
WIN(W1=FAF0%W2=FAF0%W3=FAF0%W4=FAF0%W5=FAF0%W6=FAF0)
ECN(R=Y%DF=N%T=7B-85%TG=80%W=FAF0%O=M5B4NNSNW2%CC=N%Q=)
T1(R=Y%DF=N%T=7B-85%TG=80%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=7B-85%TG=80%W=FAF0%S=O%A=S+%F=AS%O=NNT11M5B4NNSNW2%RD=0%Q=)
T4(R=Y%DF=N%T=7B-85%TG=80%W=FAF0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=7B-85%TG=80%W=FAF0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=7B-85%TG=80%W=FAF0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=7B-85%TG=80%W=FAF0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=FA-104%TG=FF%CD=S)

# SuperDOS - very old OS...but still working. Still sold by www.dccs.com.
Fingerprint Bluebird SuperDOS
Class Bluebird | SuperDOS || general purpose
CPE cpe:/o:bluebird:superdos auto
SEQ(SP=FA-104%GCD=1-6%ISR=F3-FD%TI=I%II=I%SS=S%TS=U)
OPS(O1=M5B0%O2=M578%O3=M200%O4=M5B0%O5=M5B0%O6=M5B0)
WIN(W1=1000%W2=1000%W3=1000%W4=1000%W5=1000%W6=1000)
ECN(R=Y%DF=N%T=71-7B%TG=80%W=1000%O=M5B0%CC=N%Q=)
T1(R=Y%DF=N%T=71-7B%TG=80%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=71-7B%TG=80%W=1000%S=O%A=S+%F=AS%O=M109%RD=0%Q=)
T4(R=Y%DF=N%T=71-7B%TG=80%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=71-7B%TG=80%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=71-7B%TG=80%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=71-7B%TG=80%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=71-7B%TG=80%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=4AA2%RUD=G)
IE(DFI=N%T=71-7B%TG=80%CD=Z)

# Bluebird SuperDOS
Fingerprint Bluebird SuperDOS
Class Bluebird | SuperDOS || general purpose
CPE cpe:/o:bluebird:superdos auto
SEQ(SP=C7-D1%GCD=1-6%ISR=D6-E0%TI=I%CI=I%II=I%SS=S%TS=U)
OPS(O1=M5B0%O2=M578%O3=M200%O4=M5B0%O5=M5B0%O6=M5B0)
WIN(W1=1000%W2=1000%W3=1000%W4=1000%W5=1000%W6=1000)
ECN(R=Y%DF=N%T=73-7D%TG=80%W=1000%O=M5B0%CC=N%Q=)
T1(R=Y%DF=N%T=73-7D%TG=80%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=73-7D%TG=80%W=1000%S=O%A=S+%F=AS%O=M109%RD=0%Q=)
T4(R=Y%DF=N%T=73-7D%TG=80%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=73-7D%TG=80%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=73-7D%TG=80%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=73-7D%TG=80%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=73-7D%TG=80%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=5207%RUD=G)
IE(DFI=N%T=73-7D%TG=80%CD=Z)

# Bosch Divar Security Systems embedded operating system
Fingerprint Bosch Divar security system
Class Bosch | embedded || security-misc
SEQ(SP=C-16%GCD=1E848|3D090|5B8D8|7A120|98968%ISR=9F-A9%TI=I%II=I%SS=S%TS=A)
OPS(O1=M5B4NW0NNT11%O2=M578NW0NNT11%O3=M280NW0NNT11%O4=M5B4NW0NNT11%O5=M218NW0NNT11%O6=M109NNT11)
WIN(W1=21F0%W2=2088%W3=2258%W4=21F0%W5=20C0%W6=209D)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=2238%O=M5B4NW0%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=3B-45%TG=40%W=209D%S=O%A=S+%F=AS%O=M109NW0NNT11%RD=0%Q=)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=FA-104%TG=FF%CD=S)

# device type is Bosch network camera
# Bosch DINION IP starlight 7000 HD
Fingerprint Bosch IP camera
Class Bosch | embedded || webcam
SEQ(SP=F0-100%GCD=1-6%ISR=F8-108%TI=I%CI=I%II=I%SS=S%TS=U)
OPS(O1=M340SNL%O2=M340SNL%O3=M340SNL%O4=M340SNL%O5=M340SNL%O6=M340SNL)
WIN(W1=680%W2=680%W3=680%W4=680%W5=680%W6=680)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=680%O=M340SNL%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
T3(R=N)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=S%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=S%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=4801%RID=4210%RIPCK=I%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=Z)

# U1 varies from other multi-vendor "Audio receiver" fingerprint, but scan was directly-connected
Fingerprint Bose SoundTouch 20 audio receiver
Class Bose | embedded || media device
CPE cpe:/h:bose:soundtouch_20
SEQ(SP=C-16%GCD=FA7F|1F4FE|2EF7D|3E9FC|4E47B%ISR=97-A1%TI=I%CI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4%O2=M5B4%O3=M5B4%O4=M5B4%O5=M5B4%O6=M5B4)
WIN(W1=2000%W2=2000%W3=2000%W4=2000%W5=2000%W6=2000)
ECN(R=Y%DF=N%T=7B-85%TG=80%W=2000%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=7B-85%TG=80%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=7B-85%TG=80%W=2000%S=O%A=O%F=A%O=%RD=0%Q=)
T4(R=Y%DF=N%T=7B-85%TG=80%W=2000%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=7B-85%TG=80%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=7B-85%TG=80%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=7B-85%TG=80%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=N%T=7B-85%TG=80%CD=S)

# http://s2soft.com/boundless/anetterm.html
Fingerprint Boundless Technologies NetTerminal text terminal
Class Boundless Technologies | embedded || terminal
SEQ(SP=C-16%GCD=FA00|1F400|2EE00|3E800|4E200%ISR=97-A1%TI=I%CI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4%O2=M5B4%O3=M5B4%O4=M5B4%O5=M5B4%O6=M5B4)
WIN(W1=111C%W2=1068%W3=1180%W4=1000%W5=10C0%W6=1090)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=111C%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=3B-45%TG=40%W=1090%S=O%A=S+%F=AS%O=M5B4%RD=0%Q=)
T4(R=Y%DF=N%T=3B-45%TG=40%W=1000%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=15C%RID=4210%RIPCK=Z%RUCK=0%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# AirPlay-Device
# Marantz NR-1602
# Denon AVR 1912
# Denon AVR 1920 receiver
# Pioneer VSX-921 AV-Receiver
# Bose Soundtouch 20 network music player
Fingerprint Audio receiver: Bose Soundtouch 20, Bowers & Wilkins Zeppelin Air, Denon AVR-1900-series, Marantz NR1602, or Pioneer VSX-921
Class Bowers & Wilkins | embedded || media device
CPE cpe:/h:bowers_%26_wilkins:zeppelin_air
Class Denon | embedded || media device
CPE cpe:/h:denon:avr-1912
CPE cpe:/h:denon:avr-1920
Class Marantz | embedded || media device
CPE cpe:/h:marantz:nr1602
Class Pioneer | embedded || media device
CPE cpe:/h:pioneer:vsx-921
SEQ(SP=C-16%GCD=FA7F|1F4FE|2EF7D|3E9FC|4E47B%ISR=97-A1%TI=I%CI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4%O2=M5B4%O3=M5B4%O4=M5B4%O5=M5B4%O6=M5B4)
WIN(W1=2000%W2=2000%W3=2000%W4=2000%W5=2000%W6=2000)
ECN(R=Y%DF=N%T=7B-85%TG=80%W=2000%O=M5B4%CC=N)
T1(R=Y%DF=N%T=7B-85%TG=80%S=O%A=S+%F=AS%RD=0)
T2(R=N)
T3(R=Y%DF=N%T=7B-85%TG=80%W=2000%S=O%A=O%F=A%RD=0)
T4(R=Y%DF=N%T=7B-85%TG=80%W=2000%S=A%A=Z%F=R%RD=0)
T5(R=Y%DF=N%T=7B-85%TG=80%W=0%S=Z%A=S+%F=AR%RD=0)
T6(R=Y%DF=N%T=7B-85%TG=80%W=0%S=A%A=Z%F=R%RD=0)
T7(R=Y%DF=N%T=7B-85%TG=80%W=0%S=Z%A=S%F=AR%RD=0)
U1(DF=N%T=7B-85%TG=80%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=7B-85%TG=80%CD=S)

# GS-Z3 Data logger, connected to an Energy Display Meter offered by www.energydisplaymeter.co.uk. BGB WebRTU Z3. Firmware Version : 2.05.03 (19), Config Filename: BGBConfig_07_01.bin
Fingerprint British Gas GS-Z3 data logger
Class British Gas | embedded || storage-misc
SEQ(CI=I%II=RI)
OPS(R=N)
WIN(R=N)
ECN(R=N)
T1(R=N)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=FA-104%TG=FF%W=800%S=A+%A=S%F=AR%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=800%S=A%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=800%S=A%A=S%F=AR%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FA-104%TG=FF%W=800%S=A%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# BroadMax Technology Limited LinkMAX HSA300A-2
Fingerprint BroadMax LinkMAX HSA300A-2 ADSL modem
Class BroadMax Technology | embedded || broadband router
SEQ(SP=0-41%GCD=1388|2710|3A98|4E20|61A8%ISR=8A-94%TI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4%O2=M5B4%O3=M5B4%O4=M5B4%O5=M5B4%O6=M5B4)
WIN(W1=1FB0%W2=1FB0%W3=1FB0%W4=1FB0%W5=1FB0%W6=1FB0)
ECN(R=Y%DF=N%T=3B-3D%TG=40%W=1FB0%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=3B-3D%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=3B-3D%TG=40%W=1FB0%S=O%A=S+%F=AS%O=M5B4%RD=0%Q=)
T4(R=Y%DF=Y%T=3B-3D%TG=40%W=0%S=A%A=S%F=R%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=3B-3D%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-3D%TG=40%W=0%S=A%A=S%F=R%O=%RD=0%Q=)
T7(R=Y%DF=Y%T=3B-3D%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=19-23%TG=20%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=19-23%TG=20%CD=Z)

# SW: Version 07.0.01bT7f1, HW: Stackable FCX648S-PREM (PROM-TYPE FCX-ADV-U)
Fingerprint Brocade FCX-series switch
Class Brocade | embedded || switch
SEQ(SP=FB-105%GCD=1-6%ISR=107-111%TI=I%CI=RD%II=I%SS=S%TS=U)
OPS(O1=M564%O2=M564%O3=M564%O4=M564%O5=M564%O6=M564)
WIN(W1=4000%W2=4000%W3=4000%W4=4000%W5=4000%W6=4000)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=4000%O=M564%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=FA-104%TG=FF%W=80%S=Z%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=FA-104%TG=FF%W=100%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T4(R=Y%DF=N%T=FA-104%TG=FF%W=400%S=A%A=S%F=AR%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=O%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=8000%S=A%A=S%F=AR%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FA-104%TG=FF%W=FFFF%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=44%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=I)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# Brocade ICX 6610 24 port Campus Networking Switch
Fingerprint Brocade ICX 6610 switch
Class Brocade | embedded || switch
CPE cpe:/h:brocade:icx_6610 auto
SEQ(SP=7D-87%GCD=1-6%ISR=88-92%TI=I%CI=I%II=I%SS=S%TS=U)
OPS(O1=M56A%O2=M56A%O3=M56A%O4=M56A%O5=M56A%O6=M56A)
WIN(W1=4000%W2=4000%W3=4000%W4=4000%W5=4000%W6=4000)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=4000%O=M56A%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=U)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=U)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=U)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=U)
T7(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=U)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# Brocade Layer 2 switch OS
Fingerprint Brocade Layer 2 switch
Class Brocade | embedded || switch
SEQ(SP=5F-A5%GCD=1-6%ISR=7D-9D%TI=I%II=I%SS=S%TS=U)
OPS(O1=M59C%O2=M59C%O3=M59C%O4=M59C%O5=M59C%O6=M59C)
WIN(W1=4000%W2=4000%W3=4000%W4=4000%W5=4000%W6=4000)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=4000%O=M59C%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=U)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=U)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=U)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=U)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=U)
T7(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=U)
U1(DF=N%T=3B-45%TG=40%IPL=44%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=I)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# SW: Version 07.3.00T203 Copyright (c) 1996-2011 Brocade Communications Systems, Inc. HW: Stackable TurboIron-X24
# brcd6650-64
Fingerprint Brocade TurboIron 24X or ICX6550 switch
Class Brocade | embedded || switch
CPE cpe:/h:brocade:turboiron_24x
SEQ(SP=7A-BA%GCD=1-6%ISR=86-A4%TI=I%CI=I%II=I%SS=S%TS=U)
OPS(O1=M59C%O2=M59C%O3=M59C%O4=M59C%O5=M59C%O6=M59C)
WIN(W1=4000%W2=4000%W3=4000%W4=4000%W5=4000%W6=4000)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=4000%O=M59C%CC=N)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0)
T2(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%RD=0%Q=U)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%RD=0%Q=U)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%RD=0%Q=U)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%RD=0%Q=U)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%RD=0%Q=U)
T7(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%RD=0%Q=U)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# Brocade Silkworm Switches, Kernel: 2.4.19, Fabric OS: v4.4.0b
Fingerprint Brocade Fabric OS 4.4.0 (Linux 2.4.19)
Class Brocade | Fabric OS | 4.X | switch
CPE cpe:/o:brocade:fabric_os:4.4.0 auto
Class Linux | Linux | 2.4.X | general purpose
CPE cpe:/o:linux:linux_kernel:2.4.19 auto
SEQ(SP=C3-CD%GCD=1-6%ISR=CE-D8%TI=Z%II=I%TS=7)
OPS(O1=M5B4ST11NW0%O2=M5B4ST11NW0%O3=M5B4NNT11NW0%O4=M5B4ST11NW0%O5=M5B4ST11NW0%O6=M5B4ST11)
WIN(W1=16A0%W2=16A0%W3=16A0%W4=16A0%W5=16A0%W6=16A0)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=16D0%O=M5B4NNSNW0%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=16A0%S=O%A=S+%F=AS%O=M5B4ST11NW0%RD=0%Q=)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=78C0%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# Kernel: 2.6.14.2, Fabric OS:  v7.4.1
Fingerprint Brocade Fabric OS 7.4.1 (Linux 2.6.14)
Class Brocade | Fabric OS | 7.X | switch
CPE cpe:/o:brocade:fabric_os:7.4.1 auto
Class Linux | Linux | 2.6.X | general purpose
CPE cpe:/o:linux:linux_kernel:2.6.14 auto
SEQ(SP=FD-107%GCD=1-6%ISR=106-110%TI=Z%CI=I%II=I%TS=7)
OPS(O1=M5B4ST11NW2%O2=M5B4ST11NW2%O3=M5B4NNT11NW2%O4=M5B4ST11NW2%O5=M5B4ST11NW2%O6=M5B4ST11)
WIN(W1=16A0%W2=16A0%W3=16A0%W4=16A0%W5=16A0%W6=16A0)
ECN(R=Y%DF=Y%T=3A-44%TG=40%W=16D0%O=M5B4NNSNW2%CC=N%Q=)
T1(R=Y%DF=Y%T=3A-44%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%T=3A-44%TG=40%W=16A0%S=O%A=S+%F=AS%O=M5B4ST11NW2%RD=0%Q=)
T4(R=Y%DF=Y%T=3A-44%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=3A-44%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3A-44%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=Y%T=3A-44%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3A-44%TG=40%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3A-44%TG=40%CD=S)

# Brother NC-130h Node OS
Fingerprint Brother NC-130h print server
Class Brother | embedded || print server
CPE cpe:/h:brother:nc-130h auto
SEQ(SP=C5-CF%GCD=1-6%ISR=D3-DD%TI=I%CI=I%II=I%SS=S%TS=U)
OPS(R=N)
WIN(R=N)
ECN(R=N)
T1(R=Y%DF=N%T=74-7E|B0-BA%TG=80%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=74-7E%TG=80%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=74-7E%TG=80%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=74-7E%TG=80%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=74-7E%TG=80%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=74-7E%TG=80%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=8562%RUD=G)
IE(DFI=N%T=74-7E%TG=80%CD=Z)

# External 10/100BASE-TX Print Server NC-2100p
Fingerprint Brother NC-2100p print server
Class Brother | embedded || print server
CPE cpe:/h:brother:nc-2100p auto
SEQ(SP=0-5%GCD=0%ISR=0-5%TI=I%CI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4%O2=M5B4%O3=M5B4%O4=M5B4%O5=M5B4%O6=M5B4)
WIN(W1=80%W2=80%W3=80%W4=80%W5=80%W6=80)
ECN(R=Y%DF=N%T=FA-104%TG=FF%W=80%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=FA-104%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=APR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=FA-104%TG=FF%W=80%S=O%A=S+%F=AS%O=M5B4%RD=0%Q=)
T4(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=APR%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S+%F=APR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=APR%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=APR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0|11A6%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=FA-104%TG=FF%CD=S)

# Multiprotocol Print Server NC-3100h, Firmware Version: 3.20
Fingerprint Brother NC-3100h print server
Class Brother | embedded || print server
CPE cpe:/h:brother:nc-3100h auto
SEQ(SP=C5-CF%GCD=1-6%ISR=D5-DF%TI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4%O2=M578%O3=M200%O4=M5B4%O5=M5B4%O6=M5B4)
WIN(W1=1000%W2=1000%W3=1000%W4=1000%W5=1000%W6=1000)
ECN(R=Y%DF=N%T=6C-76%TG=80%W=1000%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=6C-76%TG=80%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=6C-76%TG=80%W=1000%S=O%A=S+%F=AS%O=M109%RD=0%Q=)
T4(R=Y%DF=N%T=6C-76%TG=80%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=6C-76%TG=80%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=6C-76%TG=80%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=6C-76%TG=80%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=6C-76%TG=80%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=1597%RUD=G)
IE(DFI=N%T=6C-76%TG=80%CD=Z)

# Brother NC-3100h, Firmware Ver.3.20 (00.08.31)
Fingerprint Brother NC-3100h print server
Class Brother | embedded || print server
CPE cpe:/h:brother:nc-3100h auto
SEQ(SP=C8-D2%GCD=1-6%ISR=D5-DF%TI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4%O2=M578%O3=M200%O4=M5B4%O5=M5B4%O6=M5B4)
WIN(W1=1000%W2=1000%W3=1000%W4=1000%W5=1000%W6=1000)
ECN(R=Y%DF=N%T=6F-79%TG=80%W=1000%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=6F-79%TG=80%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=6F-79%TG=80%W=1000%S=O%A=S+%F=AS%O=M109%RD=0%Q=)
T4(R=Y%DF=N%T=6F-79%TG=80%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=6F-79%TG=80%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=6F-79%TG=80%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=6F-79%TG=80%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=6F-79%TG=80%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=1597%RUD=G)
IE(DFI=N%T=6F-79%TG=80%CD=Z)

# Brother DCP-540CN printer, firmware ver.b
Fingerprint Brother DCP-540CN printer
Class Brother | embedded || printer
CPE cpe:/h:brother:dcp-540cn auto
SEQ(SP=C8-D2%GCD=1-6%ISR=D5-DF%TI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4%O2=M578%O3=M280%O4=M200%O5=M218%O6=M109)
WIN(W1=111C%W2=111C%W3=111C%W4=111C%W5=111C%W6=111C)
ECN(R=Y%DF=N%T=73-7D%TG=80%W=111C%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=73-7D%TG=80%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=73-7D%TG=80%W=111C%S=O%A=S+%F=AS%O=M109%RD=0%Q=)
T4(R=Y%DF=N%T=73-7D%TG=80%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=73-7D%TG=80%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=73-7D%TG=80%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=73-7D%TG=80%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=73-7D%TG=80%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=835F%RUD=G)
IE(DFI=N%T=73-7D%TG=80%CD=Z)

# Brother DCP-540CN Printer
Fingerprint Brother DCP-540CN printer
Class Brother | embedded || printer
CPE cpe:/h:brother:dcp-540cn auto
SEQ(SP=CD-D7%GCD=1-6%ISR=D5-DF%TI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4%O2=M578%O3=M280%O4=M200%O5=M218%O6=M109)
WIN(W1=111C%W2=111C%W3=111C%W4=111C%W5=111C%W6=111C)
ECN(R=Y%DF=N%T=74-7E%TG=80%W=111C%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=74-7E%TG=80%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=74-7E%TG=80%W=111C%S=O%A=S+%F=AS%O=M109%RD=0%Q=)
T4(R=Y%DF=N%T=74-7E%TG=80%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=74-7E%TG=80%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=74-7E%TG=80%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=74-7E%TG=80%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=74-7E%TG=80%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=87B7%RUD=G)
IE(DFI=N%T=74-7E%TG=80%CD=Z)

# Brother DCP-7065DN
Fingerprint Brother DCP-7065DN printer
Class Brother | embedded || printer
CPE cpe:/h:brother:dcp-7065dn auto
SEQ(SP=C-16%GCD=1E848|3D090|5B8D8|7A120|98968%ISR=9F-A9%TI=I%CI=I%II=I%SS=S%TS=A)
OPS(O1=M5B4NW0NNSNNT11%O2=M578NW0NNSNNT11%O3=M280NW0NNT11%O4=M5B4NW0NNSNNT11%O5=M218NW0NNSNNT11%O6=M109NNSNNT11)
WIN(W1=21F0%W2=2088%W3=2258%W4=21F0%W5=20C0%W6=209D)
ECN(R=Y%DF=N%T=3C-46%TG=40%W=0%O=%CC=N%Q=)
T1(R=Y%DF=Y%T=3C-46%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=3C-46%TG=40%W=0%S=Z%A=O%F=AR%O=%RD=0%Q=)
T4(R=Y%DF=N%T=3C-46%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3C-46%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3C-46%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3C-46%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FB-105%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=FB-105%TG=FF%CD=S)

# Brother DCP-7070DW, Firmware Version : H, Sub Firmware Version : 1.01
Fingerprint Brother DCP-7070DW printer
Class Brother | embedded || printer
CPE cpe:/h:brother:dcp-7070dw auto
SEQ(SP=F-19%GCD=1E848|3D090|5B8D8|7A120|98968%ISR=A1-AB%TI=I%CI=I%II=I%SS=S%TS=B)
OPS(O1=M582NW0NNSNNT11%O2=M578NW0NNSNNT11%O3=M280NW0NNT11%O4=M582NW0NNSNNT11%O5=M218NW0NNSNNT11%O6=M109NNSNNT11)
WIN(W1=20C4%W2=2088%W3=2258%W4=21F0%W5=20C0%W6=209D)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=210C%O=M582NW0NNS%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=N)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=FA-104%TG=FF%CD=S)

# DCP-8045D B/W Laser printer
Fingerprint Brother DCP-8045D printer
Class Brother | embedded || printer
CPE cpe:/h:brother:dcp-8045d auto
SEQ(SP=E0-EA%GCD=1-6%ISR=DD-E7%TI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4%O2=M578%O3=M200%O4=M5B4%O5=M5B4%O6=M5B4)
WIN(W1=1000%W2=1000%W3=1000%W4=1000%W5=1000%W6=1000)
ECN(R=Y%DF=N%T=71-7B%TG=80%W=1000%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=71-7B%TG=80%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=71-7B%TG=80%W=1000%S=O%A=S+%F=AS%O=M109%RD=0%Q=)
T4(R=Y%DF=N%T=71-7B%TG=80%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=71-7B%TG=80%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=71-7B%TG=80%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=71-7B%TG=80%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=71-7B%TG=80%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=899B%RUD=G)
IE(DFI=N%T=71-7B%TG=80%CD=Z)

# Brother DCP8065 DN Printer-Copier-Scanner
Fingerprint Brother DCP-8065D printer
Class Brother | embedded || printer
CPE cpe:/h:brother:dcp-8065d
SEQ(SP=0-5%GCD=1E848|3D090|5B8D8|7A120|98968%ISR=9D-A7%TI=I%CI=I%II=I%SS=S%TS=A)
OPS(O1=M5B4NW0NNSNNT11%O2=M578NW0NNSNNT11%O3=M280NW0NNT11%O4=M5B4NW0NNSNNT11%O5=M218NW0NNSNNT11%O6=)
WIN(W1=21F0%W2=2088%W3=2258%W4=21F0%W5=20C0%W6=0)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=0%O=%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=O%F=AR%O=%RD=0%Q=)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=FA-104%TG=FF%CD=S)

# Brother DCP-L2540DN
Fingerprint Brother DCP-L2540DN printer
Class Brother | embedded || printer
CPE cpe:/h:brother:dcp-l2540dn auto
SEQ(CI=RI)
OPS(O1=%O2=%O3=%O4=%O5=%O6=)
WIN(W1=0%W2=0%W3=0%W4=0%W5=0%W6=0)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=0%O=%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=Z%A=S+%F=AR%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=FA-104%TG=FF%CD=S)

# Brother NC-3100h Firmware Ver.3.20 (00.08.31), Brother NC-3100h Command Console
Fingerprint Brother HL-1270N printer
Class Brother | embedded || printer
CPE cpe:/h:brother:hl-1270n auto
SEQ(SP=C9-D3%GCD=1-6%ISR=D5-DF%TI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4%O2=M578%O3=M200%O4=M5B4%O5=M5B4%O6=M5B4)
WIN(W1=1000%W2=1000%W3=1000%W4=1000%W5=1000%W6=1000)
ECN(R=Y%DF=N%T=73-7D%TG=80%W=1000%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=73-7D%TG=80%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=73-7D%TG=80%W=1000%S=O%A=S+%F=AS%O=M109%RD=0%Q=)
T4(R=Y%DF=N%T=73-7D%TG=80%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=73-7D%TG=80%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=73-7D%TG=80%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=73-7D%TG=80%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=73-7D%TG=80%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=159C%RUD=G)
IE(DFI=N%T=73-7D%TG=80%CD=Z)

# Brother HL-1870N
Fingerprint Brother HL-1870N printer
Class Brother | embedded || printer
CPE cpe:/h:brother:hl-1870n auto
SEQ(SP=EB-F5%GCD=1-6%ISR=E6-F0%TI=I%CI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4%O2=M578%O3=M200%O4=M5B4%O5=M5B4%O6=M5B4)
WIN(W1=1000%W2=1000%W3=1000%W4=1000%W5=1000%W6=1000)
ECN(R=Y%DF=N%T=7A-7C%TG=80%W=1000%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=7A-7C%TG=80%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=7A-7C%TG=80%W=1000%S=O%A=S+%F=AS%O=M109%RD=0%Q=)
T4(R=Y%DF=N%T=7A-7C%TG=80%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=7A-7C%TG=80%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=7A-7C%TG=80%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=7A-7C%TG=80%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=7A-7C%TG=80%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=8705%RUD=G)
IE(DFI=N%T=7A-7C%TG=80%CD=Z)

# it is a brother HL-2070N network laster printer
# Brother HL-2070N series, Firmware Version 1.33
# Brother MFC425CN
Fingerprint Brother HL-2070N or MFC-425CN printer
Class Brother | embedded || printer
CPE cpe:/h:brother:hl-2070n
CPE cpe:/h:brother:mfc-425cn
SEQ(SP=C6-DB%GCD=1-6%ISR=D5-E2%TI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4%O2=M578%O3=M280%O4=M200%O5=M218%O6=M109)
WIN(W1=111C%W2=111C%W3=111C%W4=111C%W5=111C%W6=111C)
ECN(R=Y%DF=N%T=6F-79%TG=80%W=111C%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=6F-79%TG=80%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=6F-79%TG=80%W=111C%S=O%A=S+%F=AS%O=M109%RD=0%Q=)
T4(R=Y%DF=N%T=6F-79%TG=80%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=6F-79%TG=80%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=6F-79%TG=80%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=6F-79%TG=80%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=6F-79%TG=80%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUD=G)
IE(DFI=N%T=6F-79%TG=80%CD=Z)

# Brother HL-2070N Networked Laser Printer
# Brother MFC-5460CN
Fingerprint Brother HL-2070N or MFC-5460CN printer
Class Brother | embedded || printer
CPE cpe:/h:brother:hl-2070n
CPE cpe:/h:brother:mfc-5460cn
SEQ(SP=CC-DA%GCD=1-6%ISR=D6-E0%TI=I%CI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4%O2=M578%O3=M280%O4=M200%O5=M218%O6=M109)
WIN(W1=111C%W2=111C%W3=111C%W4=111C%W5=111C%W6=111C)
ECN(R=Y%DF=N%T=73-7D%TG=80%W=111C%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=73-7D%TG=80%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=73-7D%TG=80%W=111C%S=O%A=S+%F=AS%O=M109%RD=0%Q=)
T4(R=Y%DF=N%T=73-7D%TG=80%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=73-7D%TG=80%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=73-7D%TG=80%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=73-7D%TG=80%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=73-7D%TG=80%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUD=G)
IE(DFI=N%T=73-7D%TG=80%CD=Z)

# Brother HL-2070N
Fingerprint Brother HL-2070N printer
Class Brother | embedded || printer
CPE cpe:/h:brother:hl-2070n auto
SEQ(SP=C3-CD%GCD=1-6%ISR=D6-E0%TI=I%CI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4%O2=M578%O3=M280%O4=M200%O5=M218%O6=M109)
WIN(W1=111C%W2=111C%W3=111C%W4=111C%W5=111C%W6=111C)
ECN(R=Y%DF=N%T=6A-74%TG=80%W=111C%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=6A-74%TG=80%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=6A-74%TG=80%W=111C%S=O%A=S+%F=AS%O=M109%RD=0%Q=)
T4(R=Y%DF=N%T=6A-74%TG=80%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=6A-74%TG=80%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=6A-74%TG=80%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=6A-74%TG=80%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=6A-74%TG=80%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=8390%RUD=G)
IE(DFI=N%T=6A-74%TG=80%CD=Z)

# Brother HL-2070N printer (node type Brother NC-6200h, firmware version 1.33 2006-07-21)
Fingerprint Brother HL-2070N printer
Class Brother | embedded || printer
CPE cpe:/h:brother:hl-2070n auto
SEQ(SP=F8-102%GCD=1-6%ISR=F0-FA%TI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4%O2=M578%O3=M280%O4=M200%O5=M218%O6=M109)
WIN(W1=111C%W2=111C%W3=111C%W4=111C%W5=111C%W6=111C)
ECN(R=Y%DF=N%T=71-7B%TG=80%W=111C%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=71-7B%TG=80%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=71-7B%TG=80%W=111C%S=O%A=S+%F=AS%O=M109%RD=0%Q=)
T4(R=Y%DF=N%T=71-7B%TG=80%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=71-7B%TG=80%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=71-7B%TG=80%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=71-7B%TG=80%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=71-7B%TG=80%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUD=G)
IE(DFI=N%T=71-7B%TG=80%CD=Z)

# Brother HL-2070N Printer
Fingerprint Brother HL-2070N printer
Class Brother | embedded || printer
CPE cpe:/h:brother:hl-2070n auto
SEQ(SP=F8-102%GCD=1-6%ISR=EF-F9%TI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4%O2=M578%O3=M280%O4=M200%O5=M218%O6=M109)
WIN(W1=111C%W2=111C%W3=111C%W4=111C%W5=111C%W6=111C)
ECN(R=Y%DF=N%T=6B-75%TG=80%W=111C%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=6B-75%TG=80%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=6B-75%TG=80%W=111C%S=O%A=S+%F=AS%O=M109%RD=0%Q=)
T4(R=Y%DF=N%T=6B-75%TG=80%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=6B-75%TG=80%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=6B-75%TG=80%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=6B-75%TG=80%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=6B-75%TG=80%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUD=G)
IE(DFI=N%T=6B-75%TG=80%CD=Z)

# Brother laser printer HL-2070N
Fingerprint Brother HL-2070N printer
Class Brother | embedded || printer
CPE cpe:/h:brother:hl-2070n auto
SEQ(SP=C8-D2%GCD=1-6%ISR=D7-E1%TI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4%O2=M578%O3=M280%O4=M200%O5=M218%O6=M109)
WIN(W1=111C%W2=111C%W3=111C%W4=111C%W5=111C%W6=111C)
ECN(R=Y%DF=N%T=73-7D%TG=80%W=111C%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=73-7D%TG=80%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=73-7D%TG=80%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=73-7D%TG=80%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=73-7D%TG=80%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=N)
U1(DF=N%T=73-7D%TG=80%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUD=G)
IE(DFI=N%T=73-7D%TG=80%CD=Z)

# HL 2070N, Printer Firmware Version 1.38, Network Firmware Version 1.38
Fingerprint Brother HL-2070N printer
Class Brother | embedded || printer
CPE cpe:/h:brother:hl-2070n auto
SEQ(SP=D1-DB%GCD=1-6%ISR=D5-DF%TI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4%O2=M578%O3=M280%O4=M200%O5=M218%O6=M109)
WIN(W1=111C%W2=111C%W3=111C%W4=111C%W5=111C%W6=111C)
ECN(R=Y%DF=N%T=6E-78%TG=80%W=111C%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=6E-78%TG=80%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=6E-78%TG=80%W=111C%S=O%A=S+%F=AS%O=M109%RD=0%Q=)
T4(R=Y%DF=N%T=6E-78%TG=80%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=6E-78%TG=80%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=6E-78%TG=80%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=6E-78%TG=80%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=6E-78%TG=80%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUD=G)
IE(DFI=N%T=6E-78%TG=80%CD=Z)

# Brother HL-2070N
Fingerprint Brother HL-2070N printer
Class Brother | embedded || printer
CPE cpe:/h:brother:hl-2070n auto
SEQ(SP=C9-DF%GCD=1-6%ISR=D5-DF%TI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4%O2=M578%O3=M280%O4=M200%O5=M218%O6=M109)
WIN(W1=111C%W2=111C%W3=111C%W4=111C%W5=111C%W6=111C)
ECN(R=Y%DF=N%T=71-7B%TG=80%W=111C%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=71-7B%TG=80%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=71-7B%TG=80%W=111C%S=O%A=S+%F=AS%O=M109%RD=0%Q=)
T4(R=Y%DF=N%T=71-7B%TG=80%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=71-7B%TG=80%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=71-7B%TG=80%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=71-7B%TG=80%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=71-7B%TG=80%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUD=G)
IE(DFI=N%T=71-7B%TG=80%CD=Z)

# Brother 2070N
Fingerprint Brother HL-2070N printer
Class Brother | embedded || printer
CPE cpe:/h:brother:hl-2070n auto
SEQ(SP=C5-CF%GCD=1-6%ISR=D6-E0%TI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4%O2=M578%O3=M280%O4=M200%O5=M218%O6=M109)
WIN(W1=111C%W2=111C%W3=111C%W4=111C%W5=111C%W6=111C)
ECN(R=Y%DF=N%T=6D-77%TG=80%W=111C%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=6D-77%TG=80%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=6D-77%TG=80%W=111C%S=O%A=S+%F=AS%O=M109%RD=0%Q=)
T4(R=Y%DF=N%T=6D-77%TG=80%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=6D-77%TG=80%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=6D-77%TG=80%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=6D-77%TG=80%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=6D-77%TG=80%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUD=G)
IE(DFI=N%T=6D-77%TG=80%CD=Z)

# Brother HL-2070N Laser Printer
Fingerprint Brother HL-2070N printer
Class Brother | embedded || printer
CPE cpe:/h:brother:hl-2070n auto
SEQ(SP=F8-102%GCD=1-6%ISR=F0-FA%TI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4%O2=M578%O3=M280%O4=M200%O5=M218%O6=M109)
WIN(W1=111C%W2=111C%W3=111C%W4=111C%W5=111C%W6=111C)
ECN(R=Y%DF=N%T=74-7E%TG=80%W=111C%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=74-7E%TG=80%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=74-7E%TG=80%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=74-7E%TG=80%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=74-7E%TG=80%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=N)
U1(DF=N%T=74-7E%TG=80%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=1615%RUD=G)
IE(DFI=N%T=74-7E%TG=80%CD=Z)

# Brother HL-2070N
Fingerprint Brother HL-2070N printer
Class Brother | embedded || printer
CPE cpe:/h:brother:hl-2070n auto
SEQ(SP=CA-D4%GCD=1-6%ISR=D5-DF%TI=I%CI=I%II=I%SS=S%TS=U)
OPS(R=N)
WIN(R=N)
ECN(R=N)
T1(R=Y%DF=N%T=6C-76%TG=80%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=6C-76%TG=80%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=6C-76%TG=80%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=6C-76%TG=80%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=6C-76%TG=80%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=6C-76%TG=80%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=1932%RUD=G)
IE(DFI=N%T=6C-76%TG=80%CD=Z)

# Brother HL-2070N series
Fingerprint Brother HL-2070N printer
Class Brother | embedded || printer
CPE cpe:/h:brother:hl-2070n auto
SEQ(SP=A4-102%GCD=1-6%ISR=C4-FA%TI=I%CI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4%O2=M578%O3=M280%O4=M200%O5=M218%O6=M109)
WIN(W1=111C%W2=111C%W3=111C%W4=111C%W5=111C%W6=111C)
ECN(R=Y%DF=N%T=75-7F%TG=80%W=111C%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=75-7F%TG=80%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=75-7F%TG=80%W=111C%S=O%A=S+%F=AS%O=M109%RD=0%Q=)
T4(R=Y%DF=N%T=75-7F%TG=80%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=75-7F%TG=80%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=75-7F%TG=80%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=75-7F%TG=80%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=75-7F%TG=80%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUD=G)
IE(DFI=N%T=75-7F%TG=80%CD=Z)

# Brother HL-2250DN, Device Firmware 1.10, Network Firmware 1.06
Fingerprint Brother HL-2250DN printer
Class Brother | embedded || printer
CPE cpe:/h:brother:hl-2250dn
SEQ(SP=F-3D%GCD=1E848|3D090|5B8D8|7A120|98968%ISR=A0-B6%TI=I|RD%CI=I%II=I%SS=O%TS=A|C)
OPS(O1=M5B4NW0NNSNNT11%O2=M578NW0NNSNNT11%O3=M280NW0NNT11%O4=M5B4NW0NNSNNT11%O5=%O6=)
WIN(W1=21F0%W2=2088%W3=2258%W4=21F0%W5=0%W6=0)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=0%O=%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=O%F=AR%O=%RD=0%Q=)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=FA-104%TG=FF%CD=S)

# Brother HL-2270DW wired network interface.
Fingerprint Brother HL-2270DW printer
Class Brother | embedded || printer
CPE cpe:/h:brother:hl-2270dw auto
SEQ(SP=0-31%GCD=30D4|61A8|927C|C350|F424%ISR=9F-A9%TI=I%CI=I%II=I%SS=S%TS=A)
OPS(O1=M5B4NW0NNSNNT11%O2=M578NW0NNSNNT11%O3=M280NW0NNT11%O4=M5B4NW0NNSNNT11%O5=M218NW0NNSNNT11%O6=M109NNSNNT11)
WIN(W1=21F0%W2=2088%W3=2258%W4=21F0%W5=20C0%W6=209D)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=2238%O=M5B4NW0NNS%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=3B-45%TG=40%W=209D%S=O%A=O%F=A%O=M109NW0NNSNNT11%RD=0%Q=)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=FA-104%TG=FF%CD=S)

# Brother HL-22270DW Printer Firmware Version : 1.16
Fingerprint Brother HL-2270DW printer
Class Brother | embedded || printer
CPE cpe:/h:brother:hl-2270dw auto
SEQ(SP=E-18%GCD=1E848|3D090|5B8D8|7A120|98968%ISR=A0-AA%TI=I%CI=I%II=I%SS=O%TS=A)
OPS(O1=M5B4NW0NNSNNT11%O2=M578NW0NNSNNT11%O3=M280NW0NNT11%O4=M5B4NW0NNSNNT11%O5=M218NW0NNSNNT11%O6=)
WIN(W1=21F0%W2=2088%W3=2258%W4=21F0%W5=20C0%W6=0)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=0%O=%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=O%F=AR%O=%RD=0%Q=)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=FA-104%TG=FF%CD=S)

# HL-2280DW
Fingerprint Brother HL-2280DW printer
Class Brother | embedded || printer
CPE cpe:/h:brother:hl-2280dw auto
SEQ(SP=C-16%GCD=1E848|3D090|5B8D8|7A120|98968%ISR=9F-A9%TI=I%CI=RD%II=I%SS=S%TS=A)
OPS(O1=M5B4NW0NNSNNT11%O2=M578NW0NNSNNT11%O3=M280NW0NNT11%O4=M5B4NW0NNSNNT11%O5=M218NW0NNSNNT11%O6=M109NNSNNT11)
WIN(W1=21F0%W2=2088%W3=2258%W4=21F0%W5=20C0%W6=209D)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=2238%O=M5B4NW0NNS%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=O%F=AR%O=%RD=0%Q=)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=FA-104%TG=FF%CD=S)

# Brother HL-2700CN printer
Fingerprint Brother HL-2700CN printer
Class Brother | embedded || printer
CPE cpe:/h:brother:hl-2700cn auto
SEQ(SP=D1-DB%GCD=1-6%ISR=D7-E1%TI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4%O2=M578%O3=M200%O4=M5B4%O5=M5B4%O6=M5B4)
WIN(W1=1000%W2=1000%W3=1000%W4=1000%W5=1000%W6=1000)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=1000%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=3B-45%TG=40%W=1000%S=O%A=S+%F=AS%O=M109%RD=0%Q=)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(R=N)
IE(DFI=N%T=3B-45%TG=40%CD=Z)

# HL-3170CDW series
Fingerprint Brother HL-3170CDW printer
Class Brother | embedded || printer
CPE cpe:/h:brother:hl-3170cdw auto
SEQ(SP=101-10B%GCD=1-6%ISR=104-10E%TI=RI%II=I|RI%TS=A)
OPS(O1=M5B4NW0NNSNNT11%O2=M578NW0NNSNNT11%O3=M280NW0NNT11%O4=M5B4NW0NNSNNT11%O5=M218NW0NNSNNT11%O6=M109NNSNNT11)
WIN(W1=21F0%W2=2088%W3=2258%W4=21F0%W5=20C0%W6=209D)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=2238%O=M5B4NW0NNS%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=N)
T7(R=N)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=FA-104%TG=FF%CD=S)

# MFC-495CW Printer
Fingerprint Brother HL-495CW printer
Class Brother | embedded || printer
CPE cpe:/h:brother:hl-495cw auto
SEQ(SP=C-16%GCD=1E848|3D090|5B8D8|7A120|98968%ISR=9F-A9%TI=I%CI=I%II=I%SS=S%TS=A)
OPS(O1=M5B4NW0NNSNNT11%O2=M578NW0NNSNNT11%O3=M280NW0NNT11%O4=M5B4NW0NNSNNT11%O5=M218NW0NNSNNT11%O6=M109NNSNNT11)
WIN(W1=21F0%W2=2088%W3=2258%W4=21F0%W5=20C0%W6=209D)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=2238%O=M5B4NW0NNS%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=3B-45%TG=40%W=209D%S=O%A=S+%F=AS%O=M109NW0NNSNNT11%RD=0%Q=)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=N)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=FA-104%TG=FF%CD=S)

# Brother HL-5070N printer
Fingerprint Brother HL-5070N printer
Class Brother | embedded || printer
CPE cpe:/h:brother:hl-5070n auto
SEQ(SP=CC-D6%GCD=1-6%ISR=D6-E0%TI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4%O2=M578%O3=M200%O4=M5B4%O5=M5B4%O6=M5B4)
WIN(W1=1000%W2=1000%W3=1000%W4=1000%W5=1000%W6=1000)
ECN(R=Y%DF=N%T=70-7A%TG=80%W=1000%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=70-7A%TG=80%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=70-7A%TG=80%W=1000%S=O%A=S+%F=AS%O=M109%RD=0%Q=)
T4(R=Y%DF=N%T=70-7A%TG=80%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=70-7A%TG=80%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=70-7A%TG=80%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=70-7A%TG=80%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=70-7A%TG=80%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUD=G)
IE(DFI=N%T=70-7A%TG=80%CD=Z)

# Printer Model 5070N by Brother Industries, Ltd.
Fingerprint Brother HL-5070N printer
Class Brother | embedded || printer
CPE cpe:/h:brother:hl-5070n auto
SEQ(SP=D1-DB%GCD=1-6%ISR=D6-E0%TI=I%CI=I%II=I%SS=S%TS=U)
OPS(R=N)
WIN(R=N)
ECN(R=N)
T1(R=Y%DF=N%T=70-7A%TG=80%S=O%A=O|S+%F=A|AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=70-7A%TG=80%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=70-7A%TG=80%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=70-7A%TG=80%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=70-7A%TG=80%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=70-7A%TG=80%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUD=G)
IE(DFI=N%T=70-7A%TG=80%CD=Z)

# Brother HL-5170DN printer, firmware 1.11
Fingerprint Brother HL-5170DN printer
Class Brother | embedded || printer
CPE cpe:/h:brother:hl-5170dn auto
SEQ(SP=C8-D2%GCD=1-6%ISR=D7-E1%TI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4%O2=M578%O3=M200%O4=M5B4%O5=M5B4%O6=M5B4)
WIN(W1=1000%W2=1000%W3=1000%W4=1000%W5=1000%W6=1000)
ECN(R=Y%DF=N%T=70-7A%TG=80%W=1000%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=70-7A%TG=80%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=70-7A%TG=80%W=1000%S=O%A=S+%F=AS%O=M109%RD=0%Q=)
T4(R=Y%DF=N%T=70-7A%TG=80%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=70-7A%TG=80%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=70-7A%TG=80%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=70-7A%TG=80%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=70-7A%TG=80%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=859E%RUD=G)
IE(DFI=N%T=70-7A%TG=80%CD=Z)

# Brother HL-5170DN printer, firmware 1.50
Fingerprint Brother HL-5170DN printer
Class Brother | embedded || printer
CPE cpe:/h:brother:hl-5170dn auto
SEQ(SP=C2-CC%GCD=1-6%ISR=D5-DF%TI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4%O2=M578%O3=M200%O4=M5B4%O5=M5B4%O6=M5B4)
WIN(W1=1000%W2=1000%W3=1000%W4=1000%W5=1000%W6=1000)
ECN(R=Y%DF=N%T=70-7A%TG=80%W=1000%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=70-7A%TG=80%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=70-7A%TG=80%W=1000%S=O%A=S+%F=AS%O=M109%RD=0%Q=)
T4(R=Y%DF=N%T=70-7A%TG=80%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=70-7A%TG=80%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=70-7A%TG=80%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=70-7A%TG=80%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=70-7A%TG=80%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=8582%RUD=G)
IE(DFI=N%T=70-7A%TG=80%CD=Z)

# Brother HL-5170DN Network-Ready Laser Printer with Duplex.
Fingerprint Brother HL-5170DN printer
Class Brother | embedded || printer
CPE cpe:/h:brother:hl-5170dn auto
SEQ(SP=C8-D2%GCD=1-6%ISR=D7-E1%TI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4%O2=M578%O3=M200%O4=M5B4%O5=M5B4%O6=M5B4)
WIN(W1=1000%W2=1000%W3=1000%W4=1000%W5=1000%W6=1000)
ECN(R=Y%DF=N%T=71-7B%TG=80%W=1000%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=71-7B%TG=80%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=71-7B%TG=80%W=1000%S=O%A=S+%F=AS%O=M109%RD=0%Q=)
T4(R=Y%DF=N%T=71-7B%TG=80%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=71-7B%TG=80%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=71-7B%TG=80%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=71-7B%TG=80%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=71-7B%TG=80%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=8582%RUD=G)
IE(DFI=N%T=71-7B%TG=80%CD=Z)

# Brother HL-5170DN
Fingerprint Brother HL-5170DN printer
Class Brother | embedded || printer
CPE cpe:/h:brother:hl-5170dn auto
SEQ(SP=F8-102%GCD=1-6%ISR=F1-FB%TI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4%O2=M578%O3=M200%O4=M5B4%O5=M5B4%O6=M5B4)
WIN(W1=1000%W2=1000%W3=1000%W4=1000%W5=1000%W6=1000)
ECN(R=Y%DF=N%T=70-7A%TG=80%W=1000%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=70-7A%TG=80%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=70-7A%TG=80%W=1000%S=O%A=S+%F=AS%O=M109%RD=0%Q=)
T4(R=Y%DF=N%T=70-7A%TG=80%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=70-7A%TG=80%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=70-7A%TG=80%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=70-7A%TG=80%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=70-7A%TG=80%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=8582%RUD=G)
IE(DFI=N%T=70-7A%TG=80%CD=Z)

# Brother HL-5170DN printer
Fingerprint Brother HL-5170DN printer
Class Brother | embedded || printer
CPE cpe:/h:brother:hl-5170dn auto
SEQ(SP=C5-D7%GCD=1-6%ISR=D4-DE%TI=I%II=I%SS=S%TS=U)
OPS(O1=|M5B4%O2=M578%O3=M200%O4=M5B4%O5=M5B4%O6=M5B4)
WIN(W1=1000%W2=1000%W3=1000%W4=1000%W5=1000%W6=1000)
ECN(R=Y%DF=N%T=6C-76%TG=80%W=1000%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=6C-76%TG=80%S=O%A=S+%F=A|AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=6C-76%TG=80%W=1000%S=O%A=S+%F=AS%O=M109%RD=0%Q=)
T4(R=Y%DF=N%T=6C-76%TG=80%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=6C-76%TG=80%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=6C-76%TG=80%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=6C-76%TG=80%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=6C-76%TG=80%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=8563%RUD=G)
IE(DFI=N%T=6C-76%TG=80%CD=Z)

# Brother DCP-8065DN DCP  Firmware Version    Q NIC  Firmware Version    1.15
# Brother HL-5250DN Printer Firmware Version        1.19
Fingerprint Brother HL-5250DN or DCP-8065D printer
Class Brother | embedded || printer
CPE cpe:/h:brother:hl-5250dn
CPE cpe:/h:brother:dcp-8065d
SEQ(SP=E-18%GCD=1E848|3D090|5B8D8|7A120|98968%ISR=A0-AA%TI=I%CI=I%II=I%SS=S%TS=A)
OPS(O1=M5B4NW0NNSNNT11%O2=M578NW0NNSNNT11%O3=M280NW0NNT11%O4=M5B4NW0NNSNNT11%O5=M218NW0NNSNNT11)
WIN(W1=21F0%W2=2088%W3=2258%W4=21F0%W5=20C0%W6=0)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=0%CC=N)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%RD=0)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%RD=0)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%RD=0)
T7(R=N)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=FA-104%TG=FF%CD=S)

# Brother HL-5250DN Series Printer
Fingerprint Brother HL-5250DN printer
Class Brother | embedded || printer
CPE cpe:/h:brother:hl-5250dn auto
SEQ(SP=9-13%GCD=1E848|3D090|5B8D8|7A120|98968%ISR=9F-A9%TI=I%CI=I%II=I%SS=S%TS=A)
OPS(O1=M5B4NW0NNSNNT11%O2=M578NW0NNSNNT11%O3=M280NW0NNT11%O4=M5B4NW0NNSNNT11%O5=M218NW0NNSNNT11%O6=M109NNSNNT11)
WIN(W1=21F0%W2=2088%W3=2258%W4=21F0%W5=20C0%W6=209D)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=0%O=%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=O%F=AR%O=%RD=0%Q=)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=FA-104%TG=FF%CD=S)

# 5250DN Printer running Network Firmware Version : 1.11
Fingerprint Brother HL-5250DN printer
Class Brother | embedded || printer
CPE cpe:/h:brother:hl-5250dn auto
SEQ(SP=C-16%GCD=1E848|3D090|5B8D8|7A120|98968%ISR=9F-A9%TI=I%II=I%SS=S%TS=A)
OPS(O1=M554NW0NNSNNT11%O2=M554NW0NNSNNT11%O3=M280NW0NNT11%O4=M554NW0NNSNNT11%O5=M218NW0NNSNNT11%O6=M109NNSNNT11)
WIN(W1=24F8%W2=24F8%W3=2258%W4=21F0%W5=20C0%W6=209D)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=254C%O=M554NW0NNS%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=N)
T7(R=N)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=FA-104%TG=FF%CD=S)

# Brother MFC-7840W
# Brother HL-5370DW Printer
Fingerprint Brother HL-5370DW or MFC-7840W printer
Class Brother | embedded || printer
SEQ(SP=E-18%GCD=1E848|3D090|5B8D8|7A120|98968%ISR=9F-A9%TI=I%CI=I%II=I%SS=S%TS=A)
OPS(O1=M5B4NW0NNSNNT11%O2=M578NW0NNSNNT11%O3=M280NW0NNT11%O4=M5B4NW0NNSNNT11%O5=M218NW0NNSNNT11%O6=)
WIN(W1=21F0%W2=2088%W3=2258%W4=21F0%W5=20C0%W6=0)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=0%O=%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=O%F=AR%O=%RD=0%Q=)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=FA-104%TG=FF%CD=S)

# brother hl-5380dn Firmware Version : 1.18
Fingerprint Brother HL-5380dn printer
Class Brother | embedded || printer
CPE cpe:/h:brother:hl-5380dn auto
SEQ(SP=B-15%GCD=1E848|3D090|5B8D8|7A120|98968%ISR=9E-A8%TI=I%CI=I%II=I%SS=S%TS=A)
OPS(O1=M580NW0NNSNNT11%O2=M578NW0NNSNNT11%O3=M280NW0NNT11%O4=M580NW0NNSNNT11%O5=M218NW0NNSNNT11%O6=M109NNSNNT11)
WIN(W1=20B8%W2=2088%W3=2258%W4=21F0%W5=20C0%W6=209D)
ECN(R=Y%DF=Y%T=3A-44%TG=40%W=2100%O=M580NW0NNS%CC=N%Q=)
T1(R=Y%DF=Y%T=3A-44%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%T=3A-44%TG=40%W=209D%S=O%A=S+%F=AS%O=M109NW0NNSNNT11%RD=0%Q=)
T4(R=Y%DF=N%T=3A-44%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3A-44%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3A-44%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3A-44%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=F9-103%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=F9-103%TG=FF%CD=S)

# Brother Multifunction Printer, model MFC-420CN
# Brother MFC-420CN
Fingerprint Brother MFC-420CN printer
Class Brother | embedded || printer
CPE cpe:/h:brother:mfc-420cn auto
SEQ(SP=D0-DA%GCD=1-6%ISR=D5-DF%TI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4%O2=M578%O3=M280%O4=M200%O5=M218%O6=M109)
WIN(W1=1000%W2=1000%W3=1000%W4=1000%W5=1000%W6=1000)
ECN(R=Y%DF=N%T=6B-77%TG=80%W=1000%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=6B-77%TG=80%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=6B-77%TG=80%W=1000%S=O%A=S+%F=AS%O=M109%RD=0%Q=)
T4(R=Y%DF=N%T=6B-77%TG=80%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=6B-77%TG=80%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=6B-77%TG=80%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=6B-77%TG=80%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=6B-77%TG=80%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUD=G)
IE(DFI=N%T=6B-77%TG=80%CD=Z)

# Brother MFC-420CN
Fingerprint Brother MFC-420CN printer
Class Brother | embedded || printer
CPE cpe:/h:brother:mfc-420cn auto
SEQ(SP=CC-D6%GCD=1-6%ISR=D5-DF%TI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4%O2=M578%O3=M280%O4=M200%O5=M218%O6=M109)
WIN(W1=1000%W2=1000%W3=1000%W4=1000%W5=1000%W6=1000)
ECN(R=Y%DF=N%T=7B-7D%TG=80%W=1000%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=7B-7D%TG=80%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=Y%DF=N%T=7B-7D%TG=80%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=N)
T7(R=N)
U1(DF=N%T=7B-7D%TG=80%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=84B3%RUD=G)
IE(DFI=N%T=7B-7D%TG=80%CD=Z)

# Brother MFC-5840CN Multi-Function Center (print, scan, copy, fax)
Fingerprint Brother MFC-5840CN printer
Class Brother | embedded || printer
CPE cpe:/h:brother:mfc-5840cn auto
SEQ(SP=D1-DB%GCD=1-6%ISR=D7-E1%TI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4%O2=M578%O3=M280%O4=M200%O5=M218%O6=M109)
WIN(W1=1000%W2=1000%W3=1000%W4=1000%W5=1000%W6=1000)
ECN(R=Y%DF=N%T=6F-79%TG=80%W=1000%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=6F-79%TG=80%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=6F-79%TG=80%W=1000%S=O%A=S+%F=AS%O=M109%RD=0%Q=)
T4(R=Y%DF=N%T=6F-79%TG=80%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=6F-79%TG=80%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=6F-79%TG=80%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=6F-79%TG=80%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=6F-79%TG=80%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUD=G)
IE(DFI=N%T=6F-79%TG=80%CD=Z)

# Brother MFC-5860CN, F/W version = "E"
Fingerprint Brother MFC-5860CN printer
Class Brother | embedded || printer
CPE cpe:/h:brother:mfc-5860cn auto
SEQ(SP=C7-D1%GCD=1-6%ISR=D7-E1%TI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4%O2=M578%O3=M280%O4=M200%O5=M218%O6=M109)
WIN(W1=111C%W2=111C%W3=111C%W4=111C%W5=111C%W6=111C)
ECN(R=Y%DF=N%T=6B-75%TG=80%W=111C%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=6B-75%TG=80%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=6B-75%TG=80%W=111C%S=O%A=S+%F=AS%O=M109%RD=0%Q=)
T4(R=Y%DF=N%T=6B-75%TG=80%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=6B-75%TG=80%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=6B-75%TG=80%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=6B-75%TG=80%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=6B-75%TG=80%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUD=G)
IE(DFI=N%T=6B-75%TG=80%CD=Z)

# Brother MFC-640CW (via 802.11g)
# Sony Bravia KDL 40W5800 LDC-TV
Fingerprint Brother MFC-640CW printer
Class Brother | embedded || printer
CPE cpe:/h:brother:mfc-640cw auto
SEQ(SP=CF-D9%GCD=1-6%ISR=D7-E1%TI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4%O2=M578%O3=M280%O4=M200%O5=M218%O6=M109)
WIN(W1=111C%W2=111C%W3=111C%W4=111C%W5=111C%W6=111C)
ECN(R=Y%DF=N%T=76-80%TG=80%W=111C%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=76-80%TG=80%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=76-80%TG=80%W=111C%S=O%A=S+%F=AS%O=M109%RD=0%Q=)
T4(R=Y%DF=N%T=76-80%TG=80%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=76-80%TG=80%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=76-80%TG=80%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=76-80%TG=80%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=76-80%TG=80%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUD=G)
IE(DFI=N%T=76-80%TG=80%CD=Z)

# Brother MFC-7820N
# Brother MFC9420CN printer/fax/scanner
Fingerprint Brother MFC-7820N or MFC-9420CN printer
Class Brother | embedded || printer
CPE cpe:/h:brother:mfc-7820n
CPE cpe:/h:brother:mfc-9420n
SEQ(SP=BE-D4%GCD=1-6%ISR=D5-DF%TI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4%O2=M578%O3=M280%O4=M200%O5=M218%O6=M109)
WIN(W1=1000%W2=1000%W3=1000%W4=1000%W5=1000%W6=1000)
ECN(R=Y%DF=N%T=6C-76%TG=40|80%W=1000%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=6C-76%TG=40|80%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=6C-76%TG=40|80%W=1000%S=O%A=S+%F=AS%O=M109%RD=0%Q=)
T4(R=Y%DF=N%T=6C-76%TG=40|80%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=6C-76%TG=40|80%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=6C-76%TG=40|80%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=6C-76%TG=40|80%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=6C-76%TG=40|80%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUD=G)
IE(DFI=N%T=6C-76%TG=40|80%CD=Z)

# Brother MFC-7820N
Fingerprint Brother MFC-7820N printer
Class Brother | embedded || printer
CPE cpe:/h:brother:mfc-7820n auto
SEQ(SP=CB-D5%GCD=1-6%ISR=D5-DF%TI=I%II=I%SS=S%TS=U)
OPS(R=N)
WIN(R=N)
ECN(R=N)
T1(R=Y%DF=N%T=3B-45|7B-85%TG=40|80%S=O%A=S+%F=A|AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(R=N)
IE(DFI=N%T=3B-45%TG=40%CD=Z)

# Brother MFC-7820N all-in-one laser printer (NC-6200h firmware version K)
# Brother MFC-7820N, MFC Firmware Version E
# Brother MFC-7820N
Fingerprint Brother MFC-7820N printer
Class Brother | embedded || printer
CPE cpe:/h:brother:mfc-7820n auto
SEQ(SP=C8-DB%GCD=1-6%ISR=D3-DF%TI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4%O2=M578%O3=M280%O4=M200%O5=M218%O6=M109)
WIN(W1=1000%W2=1000%W3=1000%W4=1000%W5=1000%W6=1000)
ECN(R=Y%DF=N%T=70-81%TG=80%W=1000%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=70-81%TG=80%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=70-81%TG=80%W=1000%S=O%A=S+%F=AS%O=M109%RD=0%Q=)
T4(R=Y%DF=N%T=70-81%TG=80%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=70-81%TG=80%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=70-81%TG=80%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=70-81%TG=80%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=70-81%TG=80%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUD=G)
IE(DFI=N%T=70-81%TG=80%CD=Z)

# Brother MFC-7820N
Fingerprint Brother MFC-7820N printer
Class Brother | embedded || printer
CPE cpe:/h:brother:mfc-7820n auto
SEQ(SP=C3-CD%GCD=1-6%ISR=D2-DC%TI=I%CI=I%II=I%SS=S%TS=U)
OPS(R=N)
WIN(R=N)
ECN(R=N)
T1(R=Y%DF=N%T=74-7E%TG=80%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=74-7E%TG=80%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=74-7E%TG=80%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=74-7E%TG=80%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=74-7E%TG=80%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=74-7E%TG=80%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUD=G)
IE(DFI=N%T=74-7E%TG=80%CD=Z)

# Brother MFC-7820N
Fingerprint Brother MFC-7820N printer
Class Brother | embedded || printer
CPE cpe:/h:brother:mfc-7820n auto
SEQ(CI=I%II=I)
OPS(R=N)
WIN(R=N)
ECN(R=N)
T1(R=N)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=6B-75%TG=80%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=6B-75%TG=80%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=6B-75%TG=80%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=6B-75%TG=80%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=6B-75%TG=80%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUD=G)
IE(DFI=N%T=6B-75%TG=80%CD=Z)

# Brother MFC-7820N
Fingerprint Brother MFC-7820N printer
Class Brother | embedded || printer
CPE cpe:/h:brother:mfc-7820n auto
SEQ(SP=F9-103%GCD=1-6%ISR=F1-FB%TI=I%CI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4%O2=M578%O3=M280%O4=M200%O5=M218%O6=M109)
WIN(W1=1000%W2=1000%W3=1000%W4=1000%W5=1000%W6=1000)
ECN(R=Y%DF=N%T=70-7A%TG=80%W=1000%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=70-7A%TG=80%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=70-7A%TG=80%W=1000%S=O%A=S+%F=AS%O=M109%RD=0%Q=)
T4(R=Y%DF=N%T=70-7A%TG=80%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=70-7A%TG=80%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=70-7A%TG=80%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=70-7A%TG=80%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=70-7A%TG=80%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUD=G)
IE(DFI=N%T=70-7A%TG=80%CD=Z)

# Ricoh SF210C Color Laser Printer
# Brother MFC-7820N
Fingerprint Brother MFC-7820N printer
Class Brother | embedded || printer
CPE cpe:/h:brother:mfc-7820n auto
SEQ(SP=F9-103%GCD=1-6%ISR=F1-FB%TI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4%O2=M578%O3=M280%O4=M200%O5=M218%O6=M109)
WIN(W1=1000%W2=1000%W3=1000%W4=1000%W5=1000%W6=1000)
ECN(R=Y%DF=N%T=76-80%TG=80%W=1000%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=76-80%TG=80%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=76-80%TG=80%W=1000%S=O%A=S+%F=AS%O=M109%RD=0%Q=)
T4(R=Y%DF=N%T=76-80%TG=80%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=76-80%TG=80%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=76-80%TG=80%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=76-80%TG=80%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=76-80%TG=80%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=1-FFFF%RUD=G)
IE(DFI=N%T=76-80%TG=80%CD=Z)

# HP LaserJet 3055 printer, firmware date 20060117
# HP Color LaserJet 2600n
# HP LaserJet P2015 Series
# Sony Network Camerea model SNC-Z20N
# Brother MFC-8460N
# Brother HL-2250DN
Fingerprint Brother MFC-8460N or HL-2250DN or HP LaserJet P2015, 2600n, or 3055 printer; or Sony SNC-Z20N network camera
Class Brother | embedded || printer
Class HP | embedded || printer
Class Sony | embedded || webcam
SEQ(SP=B-15%GCD=1E848|3D090|5B8D8|7A120|98968%ISR=9E-A8%TI=I%II=I%SS=S%TS=A)
OPS(O1=M5B4NW0NNSNNT11%O2=M578NW0NNSNNT11%O3=M280NW0NNT11%O4=M5B4NW0NNSNNT11%O5=M218NW0NNSNNT11%O6=M109NNSNNT11)
WIN(W1=21F0%W2=2088%W3=2258%W4=21F0%W5=20C0%W6=209D)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=2238%O=M5B4NW0NNS%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=209D%S=O%A=O|S+%F=A|AS%O=NNT11|M109NW0NNSNNT11%RD=0%Q=)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=FA-104%TG=FF%CD=S)

# brother MFC-8480DN
Fingerprint Brother MFC-8480DN printer
Class Brother | embedded || printer
CPE cpe:/h:brother:mfc-8480dn auto
SEQ(SP=C-16%GCD=1E848|3D090|5B8D8|7A120|98968%ISR=9F-A9%TI=RD%II=I%TS=A)
OPS(O1=M564NW0NNST11LL%O2=M564NW0NNST11LL%O3=M280NW0T11LL%O4=M564NW0NNST11LL%O5=M218NW0NNST11LL%O6=M109NNST11LL)
WIN(W1=2010%W2=2010%W3=2258%W4=21F0%W5=20C0%W6=209D)
ECN(R=Y%DF=Y%T=3A-44%TG=40%W=2058%O=M564NW0NNS%CC=N%Q=)
T1(R=Y%DF=Y%T=3A-44%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=Y%DF=N%T=3A-44%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=N)
T7(R=N)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=FA-104%TG=FF%CD=S)

# Brother MFC-9420CN
Fingerprint Brother MFC-9420CN printer
Class Brother | embedded || printer
CPE cpe:/h:brother:mfc-9420cn auto
SEQ(SP=C1-CB%GCD=1-6%ISR=D5-DF%TI=I%CI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4%O2=M578%O3=M280%O4=M200%O5=M218%O6=M109)
WIN(W1=1000%W2=1000%W3=1000%W4=1000%W5=1000%W6=1000)
ECN(R=Y%DF=N%T=6A-74%TG=80%W=1000%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=6A-74%TG=80%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=6A-74%TG=80%W=1000%S=O%A=S+%F=AS%O=M109%RD=0%Q=)
T4(R=Y%DF=N%T=6A-74%TG=80%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=6A-74%TG=80%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=6A-74%TG=80%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=6A-74%TG=80%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=6A-74%TG=80%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=164B%RUD=G)
IE(DFI=N%T=6A-74%TG=80%CD=Z)

# Brother MFC-9970CDW Firmware Version P-1.10
Fingerprint Brother MFC-9970CDW printer
Class Brother | embedded || printer
CPE cpe:/h:brother:mfc-9970cdw auto
SEQ(SP=8-12%GCD=30D4|61A8|927C|C350|F424%ISR=9C-A6%TI=I%CI=I%II=I%SS=S%TS=A)
OPS(O1=M5B4NW0NNSNNT11%O2=M578NW0NNSNNT11%O3=M280NW0NNT11%O4=M5B4NW0NNSNNT11%O5=M218NW0NNSNNT11%O6=M109NNSNNT11)
WIN(W1=21F0%W2=2088%W3=2258%W4=21F0%W5=20C0%W6=209D)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=2238%O=M5B4NW0NNS%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=3B-45%TG=40%W=209D%S=O%A=S+%F=AS%O=M109NW0NNSNNT11%RD=0%Q=)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=FA-104%TG=FF%CD=S)

# Brother MFC-J415W
Fingerprint Brother MFC-J415W printer
Class Brother | embedded || printer
CPE cpe:/h:brother:mfc-j415w auto
SEQ(SP=C-16%GCD=1E848|3D090|5B8D8|7A120|98968%ISR=9F-A9%TI=I%CI=I%II=I%SS=S%TS=A)
OPS(O1=M5B4NW0NNSNNT11%O2=M578NW0NNSNNT11%O3=M280NW0NNT11%O4=M218NW0NNSNNT11%O5=M218NW0NNSNNT11%O6=M109NNSNNT11)
WIN(W1=21F0%W2=2088%W3=2258%W4=20C0%W5=20C0%W6=209D)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=2238%O=M5B4NW0NNS%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=N)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=FA-104%TG=FF%CD=S)

# Brother MFC-J615W
# Brother MFC-9325CW printer
Fingerprint Brother MFC-J615W, MFC-9325CW, or HL-5370DW printer
Class Brother | embedded || printer
CPE cpe:/h:brother:mfc-j615w
CPE cpe:/h:brother:mfc-9325cw
CPE cpe:/h:brother:hl-5370dw
SEQ(SP=C-16%GCD=1E848|3D090|5B8D8|7A120|98968%ISR=9F-A9%TI=I%CI=I%II=I%SS=S%TS=A)
OPS(O1=M5B4NW0NNSNNT11%O2=M578NW0NNSNNT11%O3=M280NW0NNT11%O4=M5B4NW0NNSNNT11%O5=M218NW0NNSNNT11%O6=M109NNSNNT11)
WIN(W1=21F0%W2=2088%W3=2258%W4=21F0%W5=20C0%W6=209D)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=2238%O=M5B4NW0NNS%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=N)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=FA-104%TG=FF%CD=S)

# Brother MFC-J625DW
Fingerprint Brother MFC-J625DW printer
Class Brother | embedded || printer
CPE cpe:/h:brother:mfc-j625dw auto
SEQ(SP=F-19%GCD=1E848|3D090|5B8D8|7A120|98968%ISR=A1-AB%TI=I%CI=I%II=I%SS=O%TS=B)
OPS(O1=M5B4NW0NNSNNT11%O2=M578NW0NNSNNT11%O3=M280NW0NNT11%O4=M5B4NW0NNSNNT11%O5=M218NW0NNSNNT11%O6=)
WIN(W1=21F0%W2=2088%W3=2258%W4=21F0%W5=20C0%W6=0)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=0%O=%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=O%F=AR%O=%RD=0%Q=)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=FA-104%TG=FF%CD=S)

# Brother MFC-J6510DW w/ Firmware Version "Q"
Fingerprint Brother MFC-J6510DW printer
Class Brother | embedded || printer
CPE cpe:/h:brother:mfc-j6510dw auto
SEQ(SP=C-16%GCD=1E848|3D090|5B8D8|7A120|98968%ISR=9F-A9%TI=I%II=I%SS=S%TS=A)
OPS(O1=M576NW0NNSNNT11%O2=M576NW0NNSNNT11%O3=M280NW0NNT11%O4=M576NW0NNSNNT11%O5=M218NW0NNSNNT11%O6=M109NNSNNT11)
WIN(W1=207C%W2=207C%W3=2258%W4=207C%W5=20C0%W6=209D)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=0%O=%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=N)
T7(R=N)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=FA-104%TG=FF%CD=S)

# pdp11 running 2.11BSD unix
# BSD 2.11 2.11 BSD UNIX #14: Sat Jun 13 13:00:15 PDT 2020      root@pdp11: /usr/src/sys/ESPPDP  pdp11
Fingerprint 2.11BSD
Class BSD | BSD | 2.X | general purpose
CPE cpe:/o:bsd:bsd:2.11
SEQ(SP=0-2B%GCD=40|80|C0|100|140%ISR=41-5D%TI=I|RD%CI=I|RD%II=I%SS=S%TS=U)
OPS(O1=M400%O2=M400%O3=M400%O4=M400%O5=M400%O6=M400)
WIN(W1=1000%W2=1000%W3=1000%W4=1000%W5=1000%W6=1000)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=1000%O=M400%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=3B-45%TG=40%W=1000%S=O%A=O%F=A%O=%RD=0%Q=)
T4(R=Y%DF=N%T=3B-45%TG=40%W=1000%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=4210%RIPCK=I|Z%RUCK=0%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# VAX 11/780 running 4.1C BSD
Fingerprint 4.1C BSD
Class BSD | BSD | 4.1 | general purpose
CPE cpe:/o:bsd:bsd:4.1 auto
SEQ(SP=C-16%GCD=40|80|C0|100|140%ISR=48-52%TI=I%CI=I%TS=U)
OPS(O1=M400%O2=M400%O3=M400%O4=M400%O5=M400%O6=M400)
WIN(W1=800%W2=800%W3=800%W4=800%W5=800%W6=800)
ECN(R=Y%DF=N%T=0A-14%TG=20%W=800%O=M400%CC=N%Q=)
T1(R=Y%DF=N%T=0A-14%TG=20%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=0A-14%TG=20%W=814%S=O%A=O%F=A%O=%RD=0%Q=)
T4(R=Y%DF=N%T=0A-14%TG=20%W=800%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=0A-14%TG=20%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=0A-14%TG=20%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=0A-14%TG=20%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=34-45%TG=40%IPL=38%UN=0%RIPL=G%RID=4210%RIPCK=Z%RUCK=G%RUD=G)
IE(DFI=N%T=2C-3F%TG=40%CD=S)

# 4.3 BSD UNIX #3: Sat Feb 14 20:31:03 PST 2004. This is UC Berkeley's 4.3BSD on VAX/SimH.
Fingerprint 4.3BSD
Class BSD | BSD | 4.3 | general purpose
CPE cpe:/o:bsd:bsd:4.3
SEQ(SP=C-16%GCD=FA00|1F400|2EE00|3E800|4E200%ISR=97-A1%TI=I%CI=I%II=I%SS=S%TS=U)
OPS(O1=M400%O2=M400%O3=M400%O4=M400%O5=M400%O6=M400)
WIN(W1=1000%W2=1000%W3=1000%W4=1000%W5=1000%W6=1000)
ECN(R=Y%DF=N%T=19-23%TG=20%W=1000%O=M400%CC=N%Q=)
T1(R=Y%DF=N%T=19-23%TG=20%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=19-23%TG=20%W=1000%S=O%A=O%F=A%O=%RD=0%Q=)
T4(R=Y%DF=N%T=19-23%TG=20%W=1000%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=19-23%TG=20%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=19-23%TG=20%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=19-23%TG=20%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=4210%RIPCK=Z%RUCK=0%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# BSD/OS 4.2 BSDI BSD/OS 4.2 Kernel #25: Mon Dec 16 13:09:15 PST 2002 i386
Fingerprint BSDI BSD/OS 4.2
Class BSDI | BSD/OS | 4.X | general purpose
CPE cpe:/o:bsdi:bsd_os:4.2 auto
SEQ(SP=8C-9E%GCD=1-6%ISR=99-A3%TI=I%II=I%SS=S%TS=1)
OPS(O1=M5B4NW4NNT11%O2=M5B4NW0NNT11%O3=M5B4NW4NNT11%O4=M5B4NW4NNT11%O5=M5B4NW4NNT11%O6=M5B4NNT11)
WIN(W1=2238%W2=20D0%W3=2080%W4=2000%W5=2180%W6=2017)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=2238%O=M5B4NW4%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=2017%S=O%A=S+%F=AS%O=M5B4NW4NNT11%RD=0%Q=)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# Buffalo "Cloudstor" NAS.  I think it is running some version of Linux.
Fingerprint Buffalo Cloudstor NAS device
Class Buffalo | embedded || storage-misc
SEQ(SP=C7-D1%GCD=1-6%ISR=C6-D0%TI=Z%II=I%TS=7)
OPS(O1=M5B4ST11NW2%O2=M5B4ST11NW2%O3=M5B4NNT11NW2%O4=M5B4ST11NW2%O5=M5B4ST11NW2%O6=M5B4ST11)
WIN(W1=16A0%W2=16A0%W3=16A0%W4=16A0%W5=16A0%W6=16A0)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=16D0%O=M5B4NNSNW2%CC=Y%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=16A0%S=O%A=S+%F=AS%O=M5B4ST11NW2%RD=0%Q=)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A|O%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=O%F=AR%RD=0)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=O%A=Z%F=R%RD=0)
T7(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=O%F=AR%RD=0)
U1(DF=N%T=3B-45%TG=40%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# Buffalo DriveStation FlexNet model HD-CE1.0TLU2
Fingerprint Buffalo DriveStation HD-CE1.0TLU2 NAS device
Class Buffalo | embedded || storage-misc
SEQ(SP=0-19%GCD=1-6|78E|F1C|16AA|1E38|25C6%ISR=6D-77%TI=I%CI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4%O2=M578%O3=M280%O4=M5B4%O5=M218%O6=M109)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=N%T=1B-25%TG=20%W=FFFF%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=1B-25%TG=20%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=1B-25%TG=20%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=1B-25%TG=20%W=FFFF%S=O%A=S+%F=AS%O=M109%RD=0%Q=)
T4(R=Y%DF=N%T=1B-25%TG=20%W=0%S=A%A=S%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=1B-25%TG=20%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=1B-25%TG=20%W=0%S=A%A=S%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=1B-25%TG=20%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=1B-25%TG=20%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=1B-25%TG=20%CD=S)

# Buffalo Linkstation Live and the OS is linux based
Fingerprint Buffalo LinkStation Live NAS device
Class Buffalo | embedded || storage-misc
SEQ(SP=9B-103%GCD=1-6%ISR=E9-FF%TI=Z%CI=Z%II=I%TS=7)
OPS(O1=M1CC4ST11NW2%O2=M1CC4ST11NW2%O3=M1CC4NNT11NW2%O4=M1CC4ST11NW2%O5=M1CC4ST11NW2%O6=M1CC4ST11)
WIN(W1=3970%W2=3970%W3=3970%W4=3970%W5=3970%W6=3970)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=3988%O=M1CC4NNSNW2%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=3970%S=O%A=S+%F=AS%O=M1CC4ST11NW2%RD=0%Q=)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A|O%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=O|S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=O%A=Z%F=R%RD=0)
T7(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=O%F=AR%RD=0)
U1(DF=N%T=3B-45%TG=40%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# Linux (Linkstation) Buffalo
Fingerprint Buffalo LinkStation NAS device
Class Buffalo | embedded || storage-misc
SEQ(SP=C7-D1%GCD=1-6%ISR=C9-D3%TI=Z%CI=Z%II=I%TS=7)
OPS(O1=M1CC4ST11NW4%O2=M1CC4ST11NW4%O3=M1CC4NNT11NW4%O4=M1CC4ST11NW4%O5=M1CC4ST11NW4%O6=M1CC4ST11)
WIN(W1=3970%W2=3970%W3=3970%W4=3970%W5=3970%W6=3970)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=3988%O=M1CC4NNSNW4%CC=Y)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0)
T2(R=N)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=3970%S=O%A=S+%F=AS%O=M1CC4ST11NW4%RD=0)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%RD=0)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%RD=0)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%RD=0)
T7(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%RD=0)
U1(DF=N%T=3B-45%TG=40%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# Link Station LS-V3.0TL-EU
Fingerprint Buffalo LinkStation NAS device
Class Buffalo | embedded || storage-misc
SEQ(SP=D1-DB%GCD=1-6%ISR=CF-D9%TI=Z%CI=Z%II=I%TS=7)
OPS(O1=M25A4ST11NW4%O2=M25A4ST11NW4%O3=M25A4NNT11NW4%O4=M25A4ST11NW4%O5=M25A4ST11NW4%O6=M25A4ST11)
WIN(W1=4B30%W2=4B30%W3=4B30%W4=4B30%W5=4B30%W6=4B30)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=4B48%O=M25A4NNSNW4%CC=Y%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=4B30%S=O%A=S+%F=AS%O=M25A4ST11NW4%RD=0%Q=)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# LinkStation - LS-QL (LS-QL079)
Fingerprint Buffalo LinkStation Quad LS-QL
Class Buffalo | embedded || storage-misc
CPE cpe:/h:buffalo:ls-ql
SEQ(SP=C7-12B%GCD=1-6%ISR=EA-100%TI=Z%CI=Z%II=I%TS=7)
OPS(O1=MFCCST11NW2%O2=MFCCST11NW2%O3=MFCCNNT11NW2%O4=MFCCST11NW2%O5=MFCCST11NW2%O6=MFCCST11)
WIN(W1=2F40%W2=2F40%W3=2F40%W4=2F40%W5=2F40%W6=2F40)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=2F64%O=MFCCNNSNW2%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=2F40%S=O%A=S+%F=AS%O=MFCCST11NW2%RD=0%Q=)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# Buffalo Link Station LS-WXL 926 1TB SAN
Fingerprint Buffalo LS-WXL NAS device
Class Buffalo | embedded || storage-misc
CPE cpe:/h:buffalo:ls-wxl
SEQ(SP=AD-103%GCD=1-6%ISR=E9-FF%TI=Z%CI=Z%II=I%TS=7)
OPS(O1=MFCCST11NW2%O2=MFCCST11NW2%O3=MFCCNNT11NW2%O4=MFCCST11NW2%O5=MFCCST11NW2%O6=MFCCST11)
WIN(W1=2F40%W2=2F40%W3=2F40%W4=2F40%W5=2F40%W6=2F40)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=2F64%O=MFCCNNSNW2%CC=N)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%RD=0)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%RD=0)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%RD=0)
T7(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%RD=0)
U1(DF=N%T=3B-45%TG=40%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# Buffalo Terastation File Server Model# HD-H1.0TGL/R5 Firmware Version 1.12
Fingerprint Buffalo TeraStation NAS device
Class Buffalo | embedded || storage-misc
SEQ(SP=C7-D1%GCD=1-6%ISR=CC-D6%TI=Z%II=I%TS=7)
OPS(O1=M1CC0ST11NW0%O2=M1CC0ST11NW0%O3=M1CC0NNT11NW0%O4=M1CC0ST11NW0%O5=M1CC0ST11NW0%O6=M1CC0ST11)
WIN(W1=3968%W2=3968%W3=3968%W4=3968%W5=3968%W6=3968)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=3980%O=M1CC0NNSNW0%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=3968%S=O%A=S+%F=AS%O=M1CC0ST11NW0%RD=0%Q=)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# Buffalo Terastation Pro II 2TB NAS, Model Name TS-RHTGL/R5 F/W 1.23
Fingerprint Buffalo TeraStation Pro II NAS device
Class Buffalo | embedded || storage-misc
SEQ(SP=C7-D1%GCD=1-6%ISR=CA-D4%TI=Z%II=I%TS=7)
OPS(O1=M25A4ST11NW2%O2=M25A4ST11NW2%O3=M25A4NNT11NW2%O4=M25A4ST11NW2%O5=M25A4ST11NW2%O6=M25A4ST11)
WIN(W1=4B30%W2=4B30%W3=4B30%W4=4B30%W5=4B30%W6=4B30)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=4B48%O=M25A4NNSNW2%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=4B30%S=O%A=S+%F=AS%O=M25A4ST11NW2%RD=0%Q=)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# TS-RHTGL/R5 with firmware version 1.33 (latest), Terastation PRO II Rack (4GB model)
Fingerprint Buffalo TeraStation Pro II NAS device
Class Buffalo | embedded || storage-misc
SEQ(SP=BC-DA%GCD=1-6%ISR=C6-D0%TI=Z%II=I%TS=7)
OPS(O1=NNT11|M1CC4ST11NW2%O2=NNT11|M1CC4ST11NW2%O3=NNT11|M1CC4NNT11NW2%O4=NNT11|M1CC4ST11NW2%O5=NNT11|M1CC4ST11NW2%O6=NNT11|M1CC4ST11)
WIN(W1=3970%W2=3970%W3=3970%W4=3970%W5=3970%W6=3970)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=3988%O=|M1CC4NNSNW2%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=O|S+%F=A|AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=3970%S=O%A=O|S+%F=A|AS%O=NNT11|M1CC4ST11NW2%RD=0%Q=)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# Buffalo Terra-Station Pro II
Fingerprint Buffalo TeraStation Pro II NAS device
Class Buffalo | embedded || storage-misc
SEQ(SP=C7-D1%GCD=1-6%ISR=CE-D8%TI=RD%II=RI%TS=7)
OPS(O1=M4FEST11NW2%O2=M4FEST11NW2%O3=M4FENNT11NW2%O4=M4FEST11NW2%O5=M4FEST11NW2%O6=M4FEST11)
WIN(W1=16A0%W2=16A0%W3=16A0%W4=16A0%W5=16A0%W6=16A0)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=16D0%O=M4FENNSNW2%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=N)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=164%UN=0%RIPL=G%RID=0-FFFF%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# Buffalo TeraStation III Pro, Firmware 1.10
Fingerprint Buffalo TeraStation Pro III NAS device
Class Buffalo | embedded || storage-misc
SEQ(SP=F9-103%GCD=1-6%ISR=F5-FF%TI=Z%CI=Z%II=I%TS=7)
OPS(O1=M25A4ST11NW5%O2=M25A4ST11NW5%O3=M25A4NNT11NW5%O4=M25A4ST11NW5%O5=M25A4ST11NW5%O6=M25A4ST11)
WIN(W1=4B30%W2=4B30%W3=4B30%W4=4B30%W5=4B30%W6=4B30)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=4B48%O=M25A4NNSNW5%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=4B30%S=O%A=S+%F=AS%O=M25A4ST11NW5%RD=0%Q=)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# Buffalo BS-GS2008, firmware 1.0.0.20 / Sep 18 2014 15:26:32
Fingerprint Buffalo BS-GS switch
Class Buffalo | embedded || switch
SEQ(SP=0-5%GCD=388|710|A98|E20|11A8%ISR=64-6E%TI=I%CI=I%TS=U)
OPS(O1=M578%O2=M218%O3=M280%O4=M578%O5=M218%O6=M109)
WIN(W1=EA60%W2=EA60%W3=EA60%W4=EA60%W5=EA60%W6=EA60)
ECN(R=Y%DF=N%T=37-41%TG=40%W=EA60%O=M578%CC=N%Q=)
T1(R=Y%DF=N%T=37-41%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=37-41%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=37-41%TG=40%W=EA60%S=O%A=O%F=AS%O=M109%RD=0%Q=)
T4(R=Y%DF=N%T=37-41%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=37-41%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=37-41%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=37-41%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(R=N)

# Bush Freesat HD receiver - BFSAT01HD
Fingerprint Bush BFSAT01HD satellite receiver
Class Bush | embedded || media device
SEQ(SP=0-85%GCD=1-6|2293|4526|67B9|8A4C|ACDF%ISR=7D-87%TI=I%CI=I%II=RI%SS=O%TS=U)
OPS(O1=M53C%O2=M53C%O3=M280%O4=M53C%O5=M218%O6=M109)
WIN(W1=53C0%W2=53C0%W3=53C0%W4=53C0%W5=53C0%W6=53C0)
ECN(R=Y%DF=Y%T=FA-104%TG=FF%W=53C0%O=M53C%CC=N%Q=)
T1(R=Y%DF=Y%T=FA-104%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%T=FA-104%TG=FF%W=53C0%S=O%A=O|S+%F=AS%O=M109%RD=0%Q=)
T4(R=Y%DF=Y%T=FA-104%TG=FF%W=53C0%S=A+%A=S%F=AR%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=FA-104%TG=FF%W=53C0%S=A%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=FA-104%TG=FF%W=53C0%S=A%A=S%F=AR%O=%RD=0%Q=)
T7(R=Y%DF=Y%T=FA-104%TG=FF%W=53C0%S=A%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=Y%T=FA-104%TG=FF%IPL=38%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=21-3C%TG=40%CD=S)

# GPS Navcom C-Nav3050
Fingerprint C-Nav 3050 GPS receiver
Class C-Nav | embedded || specialized
SEQ(SP=1A-24%GCD=1-6%ISR=78-82%TI=I%CI=I%II=RI%SS=O%TS=U)
OPS(O1=M400%O2=M400%O3=M280%O4=M400%O5=M218%O6=M109)
WIN(W1=800%W2=800%W3=800%W4=800%W5=800%W6=800)
ECN(R=Y%DF=Y%T=FA-104%TG=FF%W=800%O=M400%CC=N%Q=)
T1(R=Y%DF=Y%T=FA-104%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%T=FA-104%TG=FF%W=800%S=O%A=S+%F=AS%O=M109%RD=0%Q=)
T4(R=Y%DF=Y%T=FA-104%TG=FF%W=800%S=A+%A=S%F=AR%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=FA-104%TG=FF%W=800%S=A%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=FA-104%TG=FF%W=800%S=A%A=S%F=AR%O=%RD=0%Q=)
T7(R=Y%DF=Y%T=FA-104%TG=FF%W=800%S=A%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=Y%T=FA-104%TG=FF%IPL=38%UN=533D%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=30-3A%TG=40%CD=S)

# industrial label printer for marking (brand name "A4+/300") by company "cab Produkttechnik GmbH & Co KG", Firmware V3.19 (Apr 27 2009), Bootloader V1.19 (Mar 13 2008)
Fingerprint cab A4+/300 label printer
Class cab | embedded || printer
SEQ(SP=8B-FD%GCD=1-6|7|E|15|1C|23%ISR=96-E4%TI=I%CI=I%II=I%SS=S%TS=7)
OPS(O1=M5B4SW0T10L%O2=M5B4SW0T10L%O3=M5B4SW0T10L%O4=M5B4SW0T10L%O5=M5B4SW0T10L%O6=M5B4ST10)
WIN(W1=2000%W2=8000%W3=2000%W4=2000%W5=2000%W6=2000)
ECN(R=Y%DF=N%T=19-23%TG=20%W=2000%O=M5B4SW0LLL%CC=N%Q=)
T1(R=Y%DF=N%T=19-23%TG=20%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=19-23%TG=20%W=2000%S=O%A=O%F=A%O=T10LL%RD=0%Q=)
T4(R=Y%DF=N%T=19-23%TG=20%W=2000%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=19-23%TG=20%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=19-23%TG=20%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=19-23%TG=20%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=19-23%TG=20%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=19-23%TG=20%CD=S)

# Cabletron ELS100-24TXM
# 3Com Corporation HiPer Access Router, Dialup-MODEM concentrador
Fingerprint Cabletron ELS100-24TXM switch
Class Cabletron | embedded || switch
CPE cpe:/h:cabletron:els100-24txm auto
SEQ(SP=0-87%GCD=9C4|1388|1D4C|2710|30D4%ISR=8A-B0%TI=I%CI=I%II=I%SS=S%TS=U)
OPS(O1=M218%O2=M218%O3=M218%O4=M218%O5=M218%O6=M218)
WIN(W1=400%W2=400%W3=400%W4=400%W5=400%W6=400)
ECN(R=Y%DF=N%T=FA-104%TG=FF%W=400%O=M218%CC=N%Q=)
T1(R=Y%DF=N%T=FA-104%TG=FF%S=O%A=O|S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=FA-104%TG=FF%W=400%S=O%A=S+%F=AS%O=M218%RD=0%Q=)
T4(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=FA-104%TG=FF%CD=S)

# Cabletron Systems ELS100-24TXM, Switch
# IC-7800 radio, Ver 2.20
Fingerprint Cabletron ELS100-24TXM Switch or Icom IC-7800 radio transceiver
Class Cabletron | embedded || switch
CPE cpe:/h:cabletron:els100-24txm auto
Class Icom | embedded || specialized
CPE cpe:/h:icom:ic-7800
SEQ(SP=0-63%GCD=61A8|C350|124F8|186A0|1E848%ISR=8A-B0%TI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4%O2=M5B4%O3=M5B4%O4=M5B4%O5=M5B4%O6=M5B4)
WIN(W1=400%W2=400%W3=400%W4=400%W5=400%W6=400)
ECN(R=Y%DF=N%T=FA-104%TG=FF%W=400%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=FA-104%TG=FF%S=O%A=O|S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=FA-104%TG=FF%W=400%S=O%A=S+%F=AS%O=M5B4%RD=0%Q=)
T4(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=FA-104%TG=FF%CD=S)

# Enterasys Networks 6G306-06 Rev 05.06.04  10/27/03--13:35 ofc
# Cabletron Systems, Inc. 6H258-17 Rev 05.08.18  12/06/05--12:41 ofc
# Cabletron Systems, Inc. 6H262-18 Rev 05.08.09  01/18/05--15:19 ofc
# Enterasys Networks 6H302-48 Rev 05.07.12  04/27/04--17:19 ofc
Fingerprint Cabletron or Enterasys switch (6G- or 6H-series)
Class Cabletron | embedded || switch
Class Enterasys | embedded || switch
SEQ(SP=77-91%GCD=200|400|600|800|A00%ISR=BF-D1%TI=I%CI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4%O2=M5B4%O3=M5B4%O4=M5B4%O5=M5B4%O6=M5B4)
WIN(W1=1000%W2=1000%W3=1000%W4=1000%W5=1000%W6=1000)
ECN(R=Y%DF=N%T=FA-104%TG=FF%W=1000%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=FA-104%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=FA-104%TG=FF%W=1000%S=O%A=S+%F=AS%O=M5B4%RD=0%Q=)
T4(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=Z)

# CAEN Sy2527 High Voltage Power Supply, Software Version 2.01.00 (used, for example, in physics experiments). Uses some DOS-based embedded system I know no details about.
Fingerprint CAEN SY2527 high voltage power supply
Class CAEN | embedded || power-device
SEQ(SP=103-10D%GCD=1-6%ISR=105-10F%TI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4%O2=M578%O3=M280%O4=M218%O5=M218%O6=M109)
WIN(W1=7FE0%W2=7FE0%W3=7FE0%W4=7FE0%W5=7FE0%W6=7FE0)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=7FE0%O=M5B4%CC=S%Q=RU)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=3B-45%TG=40%W=7FE0%S=O%A=S+%F=ASF%O=M109%RD=0%Q=)
T4(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# Caldera Open UNIX 7.1.0 (SBCSA1) (pts/3)
Fingerprint Caldera Open Unix 7.1.0
Class Caldera | Open Unix | 7.X | general purpose
CPE cpe:/o:caldera:open_unix:7.1.0 auto
SEQ(SP=B1-BB%GCD=1-6%ISR=B5-BF%TI=I%CI=I%II=I%SS=S%TS=7)
OPS(O1=M5B4NW0NNT11%O2=M5B4NW0NNT11%O3=M5B4NW0NNT11%O4=M5B4NW0NNT11%O5=M5B4NW0NNT11%O6=M5B4NNT11)
WIN(W1=111C%W2=111C%W3=111C%W4=111C%W5=111C%W6=111C)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=111C%O=M5B4NW0%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=108C%S=O%A=O%F=A%O=NNT11%RD=0%Q=)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=1000%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=Y%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=Y%T=3B-45%TG=40%CD=S)

# This is a Calix C7 cabinet.  It's running R5.0.71
# Calix C7 shelf running 5.0.43
Fingerprint Calix C7 switch (R5.0)
Class Calix | embedded || switch
CPE cpe:/h:calix:c7 auto
SEQ(SP=0-5%GCD=FA01|1F402|2EE03|3E804|4E205%ISR=95-9F%TI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4NW0%O2=M5B4NW0%O3=M5B4NW0%O4=M5B4NW0%O5=M5B4NW0%O6=M5B4)
WIN(W1=2710%W2=2710%W3=2710%W4=2710%W5=2710%W6=2710)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=2710%O=M5B4NW0%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T3(R=N)
T4(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S+%F=AR%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S+%F=AR%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(R=N)
IE(DFI=S%T=FA-104%TG=FF%CD=Z)

# Linksys WAP11
# SMCWBR14-G, Boot Code Version: V0.00.08, Current Firmware Version: [V1.00.024 2004.1215]
# SOHO-IS104A HW Ver: B4 Firmware Date: 2004.03.05
# SMC2804WBR router of SMC
Fingerprint Linksys WAP11 WAP; or Cameo SOHO-IS104A or SMC SMCWBR14-G or SMC2804WBR broadband router
Class Cameo | embedded || WAP
CPE cpe:/h:cameo:soho-is104a
Class Linksys | embedded || WAP
CPE cpe:/h:linksys:wap11 auto
Class SMC | embedded || broadband router
CPE cpe:/h:smc:smcwbr14-g
CPE cpe:/h:smc:smc2804wbr
SEQ(SP=92-9C%GCD=1-6%ISR=96-A0%TI=I%II=I%SS=S%TS=1)
OPS(O1=M5B4NW0NNT11%O2=M5B4NW0NNT11%O3=M5B4NW0NNT11%O4=M5B4NW0NNT11%O5=M5B4NW0NNT11%O6=M5B4NNT11)
WIN(W1=2238%W2=20D0%W3=2080%W4=2000%W5=2180%W6=2017)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=2238%O=M5B4NW0%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=3B-45%TG=40%W=2017%S=O%A=O%F=A%O=NNT11%RD=0%Q=)
T4(R=Y%DF=N%T=3B-45%TG=40%W=2000%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=15C%RID=4210%RIPCK=Z%RUCK=0%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# Canon CLC4040
Fingerprint Canon CLC4040 printer
Class Canon | embedded || printer
CPE cpe:/h:canon:clc4040 auto
SEQ(SP=FD-107%GCD=1-6%ISR=FE-110%TI=I%CI=Z%II=I%SS=S%TS=6)
OPS(O1=M5B4NW0NNT11%O2=M5B4NW0NNT11%O3=M5B4NW0NNT11%O4=M5B4NW0NNT11%O5=M5B4NW0NNT11%O6=M5B4NNT11)
WIN(W1=4000%W2=4000%W3=4000%W4=4000%W5=4000%W6=4000)
ECN(R=Y%DF=Y%T=3A-44%TG=40%W=4000%O=M5B4NW0%CC=N%Q=)
T1(R=Y%DF=Y%T=3A-44%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=O%F=AR%O=%RD=0%Q=)
T4(R=Y%DF=N%T=3A-44%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# Canon i-SENSYS LBP6310dn
Fingerprint Canon i-SENSYS LBP6310dn printer
Class Canon | embedded || printer
SEQ(SP=0-20%GCD=3200|6400|9600|C800|FA00|467BC00|4682000|8CF7800|8D04000|D373400|D386000|119EF000|11A08000|1606AC00|1608A000%ISR=E7-F1%TI=RD%CI=RD|RI%II=RI%TS=U)
OPS(O1=M5B4%O2=M578%O3=M280%O4=M5B4%O5=M218%O6=M109)
WIN(W1=800%W2=800%W3=800%W4=800%W5=800%W6=800)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=800%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=3B-45%TG=40%W=800%S=O%A=S+%F=AS%O=M109%RD=0%Q=)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=S%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=S%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# MF5490dn
Fingerprint Canon i-SENSYS MF5490dn printer
Class Canon | embedded || printer
SEQ(SP=0-71%GCD=A4ED1800|CE285E00|3200|6400|9600|C800|FA00|293B4600|52768C00|7BB1D200%ISR=100-10A%TI=RD%II=RI%TS=U)
OPS(O1=M5B4%O2=M578%O3=M280%O4=M5B4%O5=M218%O6=M109)
WIN(W1=2D00%W2=2D00%W3=2D00%W4=2D00%W5=2D00%W6=2D00)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=2D00%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=N)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# Canon imageCLASS D1320
Fingerprint Canon imageCLASS D1320 printer
Class Canon | embedded || printer
CPE cpe:/h:canon:imageclass_d1320 auto
SEQ(SP=0-E%GCD=>700000%ISR=CB-D5%TI=RD%CI=RD%II=RI%TS=U)
OPS(O1=M5B4%O2=M578%O3=M280%O4=M5B4%O5=M218%O6=M109)
WIN(W1=2D00%W2=2D00%W3=2D00%W4=2D00%W5=2D00%W6=2D00)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=2D00%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=3B-45%TG=40%W=2D00%S=O%A=S+%F=AS%O=M109%RD=0%Q=)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=S%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=S%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# Canon LBP6300
Fingerprint Canon imageCLASS LBP6300dn printer
Class Canon | embedded || printer
CPE cpe:/h:canon:imageclass_lbp6300dn auto
SEQ(SP=53-9F%GCD=200|400|600|800|A00%ISR=F5-115%TI=RD%CI=RD%II=RI%TS=U)
OPS(O1=M5B4%O2=M578%O3=M280%O4=M5B4%O5=M218%O6=M109)
WIN(W1=800%W2=800%W3=800%W4=800%W5=800%W6=800)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=800%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=3B-45%TG=40%W=800%S=O%A=S+%F=AS%O=M109%RD=0%Q=)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=S%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=S%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# Canon LBP6300
Fingerprint Canon imageCLASS LBP6300dn printer
Class Canon | embedded || printer
CPE cpe:/h:canon:imageclass_lbp6300dn auto
SEQ(SP=8A-94%GCD=200|400|600|800|A00%ISR=10D-117%TI=RD%CI=RD%II=RI%TS=U)
OPS(O1=M5B4%O2=M578%O3=M280%O4=M5B4%O5=M218%O6=M109)
WIN(W1=800%W2=800%W3=800%W4=800%W5=800%W6=800)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=800%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
T3(R=N)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=S%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=S%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# Canon MF212w
Fingerprint Canon imageCLASS MF212w printer
Class Canon | embedded || printer
CPE cpe:/h:canon:imageclass_mf212w auto
SEQ(SP=D4-DE%GCD=1-6%ISR=DA-E4%TI=I%CI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4W0L%O2=M5B4W0L%O3=M5B4W0L%O4=M5B4W0L%O5=M5B4W0L%O6=M5B4)
WIN(W1=7918%W2=7918%W3=7918%W4=7918%W5=7918%W6=7918)
ECN(R=Y%DF=N%T=130-13A%TG=FF%W=7918%O=M5B4W0L%CC=N%Q=)
T1(R=Y%DF=N%T=130-13A%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=130-13A%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=130-13A%TG=FF%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=130-13A%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=130-13A%TG=FF%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=130-13A%TG=FF%IPL=240%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=849B%RUD=I)
IE(DFI=N%T=130-13A%TG=FF%CD=Z)

# Canon ImageClass MF4570dw Monochrome Laser Printer
# Canon MF4500 Series Printer
# Canon MF4800
# mf4700 series
Fingerprint Canon imageCLASS MF4500-, MF4700-, or MF4800-series printer
Class Canon | embedded || printer
SEQ(SP=CD-D7%GCD=1-6%ISR=D5-DF%TI=I%CI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4W0L%O2=M5B4W0L%O3=M5B4W0L%O4=M5B4W0L%O5=M5B4W0L%O6=M5B4)
WIN(W1=2000%W2=2000%W3=2000%W4=2000%W5=2000%W6=2000)
ECN(R=Y%DF=N%T=132-13C%TG=FF%W=2000%O=M5B4W0L%CC=N%Q=)
T1(R=Y%DF=N%T=132-13C%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=132-13C%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=132-13C%TG=FF%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=132-13C%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=132-13C%TG=FF%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=132-13C%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUD=G)
IE(DFI=N%T=132-13C%TG=FF%CD=Z)

# iR1024
Fingerprint Canon imageRUNNER 1024 laser printer
Class Canon | embedded || printer
CPE cpe:/h:canon:imagerunner_1024
SEQ(SP=0-69%GCD=1-6|10001|20002|30003|40004|50005%ISR=95-9F%TI=RD%II=RI%TS=U)
OPS(O1=M5B4%O2=M5B4%O3=M5B4%O4=M5B4%O5=M5B4%O6=M5B4)
WIN(W1=5B4%W2=5B4%W3=5B4%W4=5B4%W5=5B4%W6=5B4)
ECN(R=Y%DF=N%T=FA-104%TG=FF%W=5B4%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=FA-104%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=FA-104%TG=FF%W=5B4%S=A%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=FA-104%TG=FF%W=5B4%S=A%A=S+%F=AR%O=%RD=0%Q=)
T4(R=Y%DF=N%T=FA-104%TG=FF%W=5B4%S=A%A=S%F=AR%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
U1(R=N)
IE(DFI=N%T=FA-104%TG=FF%CD=Z)

# Canon iR2020n department printer
# Kyocera FS-4000DN, System Firmware: 2F9_3000.010.004, Engine Firmware: 2GA_1000.010.001
Fingerprint Canon imageRUNNER 2020 or Kyocera FS-4000DN printer
Class Canon | embedded || printer
CPE cpe:/h:canon:imagerunner_2020
Class Kyocera | embedded || printer
CPE cpe:/h:kyocera:fs-4000dn
SEQ(SP=0-5%GCD=10001|20002|30003|40004|50005%ISR=96-A0%TI=I%CI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4%O2=M5B4%O3=M5B4%O4=M5B4%O5=M5B4%O6=M5B4)
WIN(W1=5B4%W2=5B4%W3=5B4%W4=5B4%W5=5B4%W6=5B4)
ECN(R=Y%DF=N%T=FA-104%TG=FF%W=5B4%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=FA-104%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=FA-104%TG=FF%W=5B4%S=A%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=FA-104%TG=FF%W=5B4%S=A%A=S+%F=AR%O=%RD=0%Q=)
T4(R=Y%DF=N%T=FA-104%TG=FF%W=5B4%S=A%A=S%F=AR%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
U1(R=N)
IE(DFI=N%T=FA-104%TG=FF%CD=Z)

# Canon iR6570 laser printer
# Canon iR2270 Laser Printer
# Canon iR4570 Laser Printer
# ReactOS Operating System, version 0.3.11-20091212-r44553
Fingerprint Canon imageRUNNER 2270, 4570, or 6570 laser printer (VxWorks)
Class Canon | embedded || printer
CPE cpe:/h:canon:imagerunner_2270
CPE cpe:/h:canon:imagerunner_4570
CPE cpe:/h:canon:imagerunner_6570
Class Wind River | VxWorks || general purpose
CPE cpe:/o:windriver:vxworks auto
SEQ(SP=97-A1%GCD=1-6%ISR=9D-A7%TI=I%TS=1|2)
OPS(O1=M5B4NW0NNT11%O2=M5B4NW0NNT11%O3=M5B4NW0NNT11%O4=M5B4NW0NNT11%O5=M5B4NW0NNT11%O6=M5B4NNT11)
WIN(W1=4000%W2=4000%W3=4000%W4=4000%W5=4000%W6=4000)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=4000%O=M5B4NW0%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=4000%S=O%A=O|S+%F=AS%O=M5B4NW0NNT11%RD=0%Q=)
T4(R=Y%DF=N%T=3B-45%TG=40%W=4000%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=Z%RUCK=0%RUD=G)
IE(R=N)

# imageRUNNER2520
Fingerprint Canon imageRUNNER 2520 printer
Class Canon | embedded || printer
CPE cpe:/h:canon:imagerunner_2520 auto
SEQ(SP=FC-106%GCD=1-6%ISR=100-10A%TI=RD%CI=RI%TS=6)
OPS(O1=M5B4NW0NNT11%O2=M5B4NW0NNT11%O3=M5B4NW0NNT11%O4=M5B4NW0NNT11%O5=M5B4NW0NNT11%O6=M5B4NNT11)
WIN(W1=4000%W2=4000%W3=4000%W4=4000%W5=4000%W6=4000)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=4000%O=M5B4NW0%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=70%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Canon imageRunner 2525
Fingerprint Canon imageRUNNER 2525 printer (VxWorks)
Class Canon | embedded || printer
CPE cpe:/h:canon:imagerunner_2525
Class Wind River | VxWorks || general purpose
CPE cpe:/o:windriver:vxworks auto
SEQ(SP=FB-10F%GCD=1-6%ISR=104-110%TI=RD%CI=RD|RI%II=RI%TS=6)
OPS(O1=M5B4NW0NNT11%O2=M5B4NW0NNT11%O3=M5B4NW0NNT11%O4=M5B4NW0NNT11%O5=M5B4NW0NNT11%O6=M5B4NNT11)
WIN(W1=4000%W2=4000%W3=4000%W4=4000%W5=4000%W6=4000)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=4000%O=M5B4NW0%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=4000%S=O%A=S+%F=AS%O=M5B4NW0NNT11%RD=0%Q=)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=70%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Canon Image Runner 3300
# Motorola SBG900 Cable Modem
Fingerprint Canon imageRUNNER 3300 printer or Motorola SURFboard SBG900 wireless cable modem
Class Canon | embedded || printer
CPE cpe:/h:canon:imagerunner_3300
Class Motorola | embedded || WAP
CPE cpe:/h:motorola:surfboard_sbg900 auto
SEQ(SP=14-1E%GCD=FA00|1F400|2EE00|3E800|4E200%ISR=99-A3%TI=I%II=I%SS=S%TS=U)
OPS(O1=M200NW0%O2=M200NW0%O3=M200NW0%O4=M200NW0%O5=M200NW0%O6=M200)
WIN(W1=4000%W2=4000%W3=4000%W4=4000%W5=4000%W6=4000)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=4000%O=M200NW0%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=3B-45%TG=40%W=4000%S=O%A=O%F=A%O=%RD=0%Q=)
T4(R=Y%DF=N%T=3B-45%TG=40%W=4000%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=Z%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Canon iR-ADV 6275 copier/printer/scanner
# Canon printer C2220 iR-ADV
# Cannon Model 6255
# Cannon Model 4235
Fingerprint Canon imageRUNNER ADVANCE 4235, 6275, 6255, or C2220 copier
Class Canon | embedded || printer
CPE cpe:/h:canon:imagerunner_advance_4235
CPE cpe:/h:canon:imagerunner_advance_6275
CPE cpe:/h:canon:imagerunner_advance_6255
CPE cpe:/h:canon:imagerunner_advance_c2220
SEQ(SP=FA-10A%GCD=1-6%ISR=102-10E%TI=Z%CI=Z%II=I%TS=8)
OPS(O1=M5B4ST11%O2=M5B4ST11%O3=M5B4NNT11%O4=M5B4ST11%O5=M5B4ST11%O6=M5B4ST11)
WIN(W1=16A0%W2=16A0%W3=16A0%W4=16A0%W5=16A0%W6=16A0)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=16D0%O=M5B4NNS%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=16A0%S=O%A=S+%F=AS%O=M5B4ST11%RD=0%Q=)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# C3320i
# C3325
Fingerprint Canon imageRUNNER ADVANCE C3320i or C3325 copier
Class Canon | embedded || printer
CPE cpe:/h:canon:imagerunner_advance_c3320i
CPE cpe:/h:canon:imagerunner_advance_c3325
SEQ(SP=F7-105%GCD=1-6%ISR=102-114%TI=Z%CI=Z%II=I%TS=8)
OPS(O1=M5B4ST11%O2=M5B4ST11%O3=M5B4NNT11%O4=M5B4ST11%O5=M5B4ST11%O6=M5B4ST11)
WIN(W1=16A0%W2=16A0%W3=16A0%W4=16A0%W5=16A0%W6=16A0)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=16D0%O=M5B4NNS%CC=Y%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=16A0%S=O%A=S+%F=AS%O=M5B4ST11%RD=0%Q=)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# Canon IR-ADV C5051
Fingerprint Canon imageRUNNER ADVANCE C5051 printer
Class Canon | embedded || printer
CPE cpe:/h:canon:imagerunner_advance_c5051 auto
SEQ(SP=CA-D4%GCD=1-6%ISR=CD-D7%TI=Z%II=I%TS=8)
OPS(O1=M5B4ST11%O2=M5B4ST11%O3=M5B4NNT11%O4=M5B4ST11%O5=M5B4ST11%O6=M5B4ST11)
WIN(W1=16A0%W2=16A0%W3=16A0%W4=16A0%W5=16A0%W6=16A0)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=16D0%O=M5B4NNS%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=N)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0|G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# Canon iRC2880i printer
# canon ir c2380
Fingerprint Canon imageRUNNER C2380 or C2880i or Xerox Phaser 8860MFP printer
Class Canon | embedded || printer
CPE cpe:/h:canon:imagerunner_c2380
CPE cpe:/h:canon:imagerunner_c2880i
CPE cpe:/h:xerox:phaser_8860mfp
SEQ(SP=FB-105%GCD=1-6%ISR=105-10F%TI=I%II=I%SS=O|S%TS=6)
OPS(O1=M5B4NW0NNT11%O2=M5B4NW0NNT11%O3=M5B4NW0NNT11%O4=M5B4NW0NNT11%O5=M5B4NW0NNT11%O6=M5B4NNT11)
WIN(W1=4000%W2=4000%W3=4000%W4=4000%W5=4000%W6=4000)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=4000%O=M5B4NW0%CC=N)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=O|S+%F=AS%RD=0)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%RD=0)
T6(R=N)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=70%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Canon net printer/scanner/fax IR3100C
# Canon iR6800C EUR printer/scanner/copier
Fingerprint Canon imageRUNNER C3100 or C6800 printer
Class Canon | embedded || printer
CPE cpe:/h:canon:imagerunner_c3100
CPE cpe:/h:canon:imagerunner_c6800
SEQ(SP=13-1E%GCD=FA00|1F400|2EE00|3E800|4E200%ISR=98-A3%TI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4%O2=M5B4%O3=M5B4%O4=M5B4%O5=M5B4%O6=M5B4)
WIN(W1=4000%W2=4000%W3=4000%W4=4000%W5=4000%W6=4000)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=4000%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=3B-45%TG=40%W=4000%S=O%A=O%F=A%O=%RD=0%Q=)
T4(R=Y%DF=N%T=3B-45%TG=40%W=4000%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=Z%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# VxWorks
Fingerprint Canon imageRUNNER C3200 printer or Polycom SoundStation IP 4000 VoIP phone
Class Canon | embedded || printer
CPE cpe:/h:canon:imagerunner_c3200
Class Polycom | embedded || VoIP phone
CPE cpe:/h:polycom:soundstation_ip_4000 auto
SEQ(SP=16-20%GCD=FA00|1F400|2EE00|3E800|4E200%ISR=9B-A5%TI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4%O2=M5B4%O3=M5B4%O4=M5B4%O5=M5B4%O6=M5B4)
WIN(W1=2000%W2=2000%W3=2000%W4=2000%W5=2000%W6=2000)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=2000%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=3B-45%TG=40%W=2000%S=O%A=O%F=A%O=%RD=0%Q=)
T4(R=Y%DF=N%T=3B-45%TG=40%W=2000%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=Z%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# VxWorks?
# Canon ImageRunner C5185 Printer
# Mercusys AC12G, Firmware 2.0.3 Build 210128 Rel.55172n.
Fingerprint Canon imageRUNNER C5185 printer or Mercusys AC12G WAP
Class Canon | embedded || printer
CPE cpe:/h:canon:imagerunner_c5185
Class Mercusys | embedded || WAP
CPE cpe:/h:mercusys:ac12g auto
SEQ(SP=F9-103%GCD=1-6%ISR=100-10A%TI=I%CI=I%II=I%SS=S%TS=6)
OPS(O1=M5B4NW0NNT11%O2=M5B4NW0NNT11%O3=M5B4NW0NNT11%O4=M5B4NW0NNT11%O5=M5B4NW0NNT11%O6=M5B4NNT11)
WIN(W1=4000%W2=4000%W3=4000%W4=4000%W5=4000%W6=4000)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=4000%O=M5B4NW0%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=4000%S=O%A=S+%F=AS%O=M5B4NW0NNT11%RD=0%Q=)
T4(R=N)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=70%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Canon mf1238
Fingerprint Canon MF1238 printer
Class Canon | embedded || printer
CPE cpe:/h:canon:mf1238 auto
SEQ(SP=62-79%GCD=200|400|600|800|A00%ISR=102-114%TI=RD%CI=RD%II=RI%TS=U)
OPS(O1=M5B4NNS%O2=M578NNS%O3=M280%O4=M5B4NNS%O5=M218NNS%O6=M109NNS)
WIN(W1=2D00%W2=2D00%W3=2D00%W4=2D00%W5=2D00%W6=2D00)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=2D00%O=M5B4NNS%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=3B-45%TG=40%W=2D00%S=O%A=S+%F=AS%O=M109NNS%RD=0%Q=)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=S%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=S%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# Canon MF4360-4390 Printer
# Canon 4370dn network laser all-in-one printer
Fingerprint Canon MF4360-4390 or 4370dn printer
Class Canon | embedded || printer
SEQ(SP=0-5%GCD=FA01|1F402|2EE03|3E804|4E205%ISR=95-9F%TI=BI%CI=BI%II=BI%SS=S%TS=U)
OPS(O1=M5B4NW0%O2=M5B4NW0%O3=M5B4NW0%O4=M5B4NW0%O5=M5B4NW0%O6=M5B4)
WIN(W1=2710%W2=2710%W3=2710%W4=2710%W5=2710%W6=2710)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=2710%O=M5B4NW0%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=Z%A=S+%F=R%O=%RD=0%Q=)
T3(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T4(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S+%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S+%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=Z%A=S+%F=R%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=Z)

# MF632Cdw
Fingerprint Canon MF632Cdw printer
Class Canon | embedded || printer
CPE cpe:/h:canon:mf632cdw auto
SEQ(SP=0-5%GCD=C3C76000|E1E3B000|34B93800|52D58800|70F1D800%ISR=10C-116%TI=RD%CI=RD%II=RI%TS=U)
OPS(O1=M5B4NNS%O2=M578NNS%O3=M280%O4=M5B4NNS%O5=M218NNS%O6=M109NNS)
WIN(W1=2D00%W2=2D00%W3=2D00%W4=2D00%W5=2D00%W6=2D00)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=2D00%O=M5B4NNS%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=3B-45%TG=40%W=2D00%S=O%A=S+%F=AS%O=M109NNS%RD=0%Q=)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=S%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=S%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# Canon MF733CDw Laser Printer
Fingerprint Canon MF733Cdw printer
Class Canon | embedded || printer
CPE cpe:/h:canon:mf733cdw auto
SEQ(SP=53-5D%GCD=200|400|600|800|A00%ISR=DD-E7%TI=RD%CI=RD%II=RI%TS=U)
OPS(O1=M5B4NNS%O2=M578NNS%O3=M280%O4=M5B4NNS%O5=M218NNS%O6=M109NNS)
WIN(W1=2D00%W2=2D00%W3=2D00%W4=2D00%W5=2D00%W6=2D00)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=2D00%O=M5B4NNS%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
T3(R=N)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=S%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=S%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# Canon PIXMA iX7000
# Canon Pixma MP980 This is Canon's MFU (printer/scanner) device with LAN and WiFi
Fingerprint Canon PIXMA iX7000 or NP-980 printer
Class Canon | embedded || printer
SEQ(SP=0-1D%GCD=3200|6400|9600|C800|FA00|BB800|177000|232800|2EE000|3A9800%ISR=B0-BC%TI=RD%II=RI%TS=U)
OPS(O1=M5B4%O2=M578%O3=M280%O4=M5B4%O5=M218%O6=M109)
WIN(W1=2D00%W2=2D00%W3=2D00%W4=2D00%W5=2D00%W6=2D00)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=2D00%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=3B-45%TG=40%W=2D00%S=O%A=S+%F=AS%O=M109%RD=0%Q=)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=S%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=S%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# Canon MG2920
Fingerprint Canon PIXMA MG2920 printer
Class Canon | embedded || printer
CPE cpe:/h:canon:pixma_mg2920 auto
SEQ(SP=0-5%GCD=17A200|2F4400|46E600|5E8800|762A00%ISR=BA-C4%TI=RD%CI=RD%II=RI%TS=U)
OPS(O1=M5B4%O2=M578%O3=M280%O4=M5B4%O5=M218%O6=M109)
WIN(W1=2D00%W2=2D00%W3=2D00%W4=2D00%W5=2D00%W6=2D00)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=2D00%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=3B-45%TG=40%W=2D00%S=O%A=S+%F=AS%O=M109%RD=0%Q=)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=S%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=S%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# Canon MG5200
Fingerprint Canon PIXMA MG5200 printer
Class Canon | embedded || printer
CPE cpe:/h:canon:pixma_mg5200 auto
SEQ(SP=1E-28%GCD=3200|6400|9600|C800|FA00%ISR=107-111%TI=RD%CI=RI%II=RI%TS=U)
OPS(O1=M5B4%O2=M578%O3=M280%O4=M5B4%O5=M218%O6=M109)
WIN(W1=2D00%W2=2D00%W3=2D00%W4=2D00%W5=2D00%W6=2D00)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=2D00%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=S%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=S%F=R%O=%RD=0%Q=)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# Canon Pixma MG6150
# Photo printer over WiFi. Canon MP495 series.
Fingerprint Canon PIXMA MP495 or MG6150 printer
Class Canon | embedded || printer
CPE cpe:/h:canon:pixma_mp495 auto
CPE cpe:/h:canon:pixma_mg6150 auto
SEQ(SP=0-5%GCD=>B00000%ISR=D2-DC%TI=RD%CI=RD%II=RI%TS=U)
OPS(O1=M5B4%O2=M578%O3=M280%O4=M5B4%O5=M218%O6=M109)
WIN(W1=2D00%W2=2D00%W3=2D00%W4=2D00%W5=2D00%W6=2D00)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=2D00%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=3B-45%TG=40%W=2D00%S=O%A=S+%F=AS%O=M109%RD=0%Q=)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=S%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=S%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# Canon mp600r
# Canon Pixma MX700 printer
Fingerprint Canon PIXMA MP600R or MX700 printer
Class Canon | embedded || printer
SEQ(SP=E-2A%GCD=10000|20000|30000|40000|50000%ISR=C5-CF%TI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4%O2=M578%O3=M5B4%O4=M5B4%O5=M218%O6=M109)
WIN(W1=F800%W2=F800%W3=F800%W4=F800%W5=F800%W6=F800)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=F800%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=3B-45%TG=40%W=F800%S=O%A=S+%F=AS%O=M5B4%RD=0%Q=)
T4(R=Y%DF=N%T=3B-45%TG=40%W=F800%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=Z)

# Canon 4000r printer
# Canon MP800R printer
Fingerprint Canon PIXMA MP800R or 4000R printer
Class Canon | embedded || printer
SEQ(SP=E-2A%GCD=10000|20000|30000|40000|50000%ISR=C6-D0%TI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4%O2=M578%O3=M5B4%O4=M5B4%O5=M218%O6=M109)
WIN(W1=2000%W2=2000%W3=2000%W4=2000%W5=2000%W6=2000)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=2000%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=3B-45%TG=40%W=2000%S=O%A=O|S+%F=A|AS%O=|M5B4%RD=0%Q=)
T4(R=Y%DF=N%T=3B-45%TG=40%W=2000%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=Z)

# Canon MFD MX850 and MX890 (OS is uITRON 4.0)
Fingerprint Canon PIXMA MX800-series printer
Class Canon | embedded || printer
SEQ(SP=0-5%GCD=8EDF000|11DBE000|1AC9D000|23B7C000|2CA5B000%ISR=EF-F9%TI=RD%II=RI%TS=U)
OPS(O1=M5B4%O2=M578%O3=M280%O4=M5B4%O5=M218%O6=M109)
WIN(W1=2D00%W2=2D00%W3=2D00%W4=2D00%W5=2D00%W6=2D00)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=2D00%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=3B-45%TG=40%W=2D00%S=O%A=S+%F=AS%O=M109%RD=0%Q=)
T4(R=N)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=N)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# PIXMA MX850 multi function printer
Fingerprint Canon PIXMA MX850 printer
Class Canon | embedded || printer
CPE cpe:/h:canon:pixma_mx850 auto
SEQ(SP=0-1D%GCD=388|710|A98|E20|11A8%ISR=64-7A%TI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4%O2=M5B4%O3=M5B4%O4=M5B4%O5=M5B4%O6=M5B4)
WIN(W1=2000%W2=2000%W3=2000%W4=2000%W5=2000%W6=2000)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=2000%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=3B-45%TG=40%W=2000%S=O%A=S+%F=AS%O=M5B4%RD=0%Q=)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=S%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=S%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=Z)

# Canon Pixma MX860 network printer/scanner/fax.
# Canon Pixma MX870.
# Canon Pixma MP-495
# Canon MX340 series Firmware Version:               1.020
# Canon MX890 series Firmware Version:               3.020
# Canon MG6200 series, Firmware 1.040
# Canon MG3100, Firmware Version: 2.020
# multifunction printer Canon Pixma MP620
# Canon MX860 Multifunction Device
# Canon MP876 MFP
# Canon MP560 series, Firmware Version:       1.040
# Canon MX870 Series, FW 1.010, Canon Pixma IP4000R printer
# Canon PIXMA MG5220
# Canon MG6100 series, 1.020
# Canon MG5550
Fingerprint Canon PIXMA printer
Class Canon | embedded || printer
SEQ(SP=0-D3%GCD=200|400|600|800|A00|3200|6400|9600|C800|FA00%ISR=C0-11E%TI=RD%CI=RD|RI%II=RI%TS=U)
OPS(O1=M5B4%O2=M578%O3=M280%O4=M5B4%O5=M218%O6=M109)
WIN(W1=2D00%W2=2D00%W3=2D00%W4=2D00%W5=2D00%W6=2D00)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=2D00%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=3B-45%TG=40%W=2D00%S=O%A=S+%F=AS%O=M109%RD=0%Q=)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=S%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=S%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# Canon MP980 printer/copier
# Cannon Mg6100 printer
# Canon MX410 series Firmware Version: 1.000
# Cannon Pixma 882
# Printer Canon Pixma MP495
# Pixma MG6450 printer
# Canon MX920 series, Firmware Version: 2.010,
# Keep getting corrections with more and more models. Indistinguishable.
Fingerprint Canon PIXMA printer
Class Canon | embedded || printer
SEQ(SP=0-23%GCD=>1000000%ISR=DD-115%TI=RD%CI=RD%II=RI%TS=U)
OPS(O1=M5B4%O2=M578%O3=M280%O4=M5B4%O5=M218%O6=M109)
WIN(W1=2D00%W2=2D00%W3=2D00%W4=2D00%W5=2D00%W6=2D00)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=2D00%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=3B-45%TG=40%W=2D00%S=O%A=S+%F=AS%O=M109%RD=0%Q=)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=S%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=S%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# MX870, but same as the one with *all* the Pixma printers. Differs only in MSS
Fingerprint Canon PIXMA printer
Class Canon | embedded || printer
SEQ(SP=0-23%GCD=>1000000%ISR=102-10C%TI=RD%CI=RD%II=RI%TS=U)
OPS(O1=M556%O2=M556%O3=M280%O4=M556%O5=M218%O6=M109)
WIN(W1=2D00%W2=2D00%W3=2D00%W4=2D00%W5=2D00%W6=2D00)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=2D00%O=M556%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=3B-45%TG=40%W=2D00%S=O%A=S+%F=AS%O=M109%RD=0%Q=)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=S%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=S%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# Canon PIXMA TR4520
# Pixma T6250 Wifi
Fingerprint Canon PIXMA TR4520, T6250, or G6000 printer
Class Canon | embedded || printer
CPE cpe:/h:canon:pixma_tr4520
CPE cpe:/h:canon:pixma_t6250
CPE cpe:/h:canon:pixma_g6000
SEQ(SP=FF-109%GCD=1-6%ISR=101-10F%TI=RD%CI=RD%II=RI%TS=U)
OPS(O1=M5B4%O2=M578%O3=M280%O4=M5B4%O5=M218%O6=M109)
WIN(W1=2D00%W2=2D00%W3=2D00%W4=2D00%W5=2D00%W6=2D00)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=2D00%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=3B-45%TG=40%W=2D00%S=O%A=S+%F=AS%O=M109%RD=0%Q=)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=S%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=S%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# Canon 80D
Fingerprint Canon 80D camera
Class Canon | embedded || webcam
CPE cpe:/h:canon:80d
SEQ(SP=0-5%GCD=6D600|DAC00|148200|1B5800|222E00%ISR=AC-B6%TI=RD%CI=RD%TS=U)
OPS(O1=M5B4%O2=M578%O3=M280%O4=M5B4%O5=M218%O6=M109)
WIN(W1=8000%W2=8000%W3=8000%W4=8000%W5=8000%W6=8000)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=8000%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=3B-45%TG=40%W=8000%S=O%A=S+%F=AS%O=M109%RD=0%Q=)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=S%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=S%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# Canon VB-C300 IP camera
Fingerprint Canon VB-C300 IP camera
Class Canon | embedded || webcam
CPE cpe:/h:canon:vb-c300
SEQ(SP=CA-D4%GCD=1-6%ISR=CD-D7%TI=I%CI=I%II=RI%SS=O%TS=U)
OPS(O1=M5B4%O2=M578%O3=M280%O4=M218%O5=M218%O6=M109)
WIN(W1=8000%W2=8000%W3=8000%W4=8000%W5=8000%W6=8000)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=8000%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# Casio QT600/QT6100 cash registering machine
Fingerprint Casio QT-6000 or QT-6100 point-of-sale machine
Class Casio | embedded || specialized
SEQ(CI=I%II=I%TS=U)
OPS(O1=M5B4%O2=%O3=%O4=%O5=%O6=)
WIN(W1=1000%W2=0%W3=0%W4=0%W5=0%W6=0)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=0%O=%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=O%F=AR%O=%RD=0%Q=)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=S%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=S%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=Z)

# Cayman Systems GatorBox CS (a LocalTalk-Ethernet gateway) running GatorShare version 3.0.3 (build X4)
Fingerprint Cayman Systems GatorBox CS
Class Cayman Systems | embedded || bridge
CPE cpe:/h:cayman_systems:gatorbox_cs
SEQ(SP=14-1E%GCD=FA00|1F400|2EE00|3E800|4E200%ISR=99-A3%TI=I%CI=I%II=I%SS=S%TS=U)
OPS(O1=%O2=%O3=%O4=%O5=%O6=)
WIN(W1=1000%W2=1000%W3=1000%W4=1000%W5=1000%W6=1000)
ECN(R=Y%DF=N%T=18-22%TG=20%W=1000%O=%CC=N%Q=)
T1(R=Y%DF=N%T=18-22%TG=20%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=Y%DF=N%T=18-22%TG=20%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=18-22%TG=20%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=18-22%TG=20%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=F9-103%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=2C-36%TG=40%CD=S)

Fingerprint Chamberlain myQ garage door opener
Class Chamberlain Group | embedded || specialized
SEQ(SP=FE-108%GCD=1-6%ISR=108-112%TI=I%CI=I|RD%II=I%TS=U)
OPS(O1=M5B4NNNL%O2=M5B4NNNL%O3=M5B4NNNL%O4=M5B4NNNL%O5=M5B4NNNL%O6=M5B4NNNL)
WIN(W1=3800%W2=3800%W3=3800%W4=3800%W5=3800%W6=3800)
ECN(R=Y%DF=N%T=7B-85%TG=80%W=3800%O=M5B4NNNL%CC=N%Q=)
T1(R=Y%DF=N%T=7B-85%TG=80%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=7B-85%TG=80%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=7B-85%TG=80%W=3800%S=O%A=S+%F=AS%O=M5B4NNNL%RD=0%Q=)
T4(R=Y%DF=N%T=7B-85%TG=80%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
T5(R=Y%DF=N%T=7B-85%TG=80%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=7B-85%TG=80%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
T7(R=Y%DF=N%T=7B-85%TG=80%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(R=N)
IE(DFI=N%T=7B-85%TG=80%CD=S)

Fingerprint Chamberlain myQ garage door opener
Class Chamberlain Group | embedded || specialized
SEQ(SP=53-5D%GCD=1-6%ISR=B8-C2%TI=I%CI=I%II=RI%SS=O%TS=U)
OPS(O1=M578%O2=M578%O3=M578%O4=M578%O5=M578%O6=M578)
WIN(W1=36B0%W2=36B0%W3=36B0%W4=36B0%W5=36B0%W6=36B0)
ECN(R=Y%DF=N%T=FA-104%TG=FF%W=36B0%O=M578%CC=N%Q=)
T1(R=Y%DF=N%T=FA-104%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=FA-104%TG=FF%W=36B0%S=O%A=S+%F=AS%O=M578%RD=0%Q=)
T4(R=Y%DF=N%T=FA-104%TG=FF%W=36B0%S=A%A=S%F=AR%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=36B0%S=A%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=36B0%S=A%A=S%F=AR%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FA-104%TG=FF%W=36B0%S=A%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# Check Point SBox-200, Version: 1.2G, Running: 8.0.34x
Fingerprint Check Point SBox-200 firewall
Class Check Point | embedded || firewall
CPE cpe:/h:checkpoint:sbox-200 auto
SEQ(SP=C7-D1%GCD=1-6%ISR=CD-D7%TI=Z%CI=Z%II=I%TS=7)
OPS(O1=M5B4ST11NW0%O2=M5B4ST11NW0%O3=M5B4NNT11NW0%O4=M5B4ST11NW0%O5=M5B4ST11NW0%O6=M5B4ST11)
WIN(W1=1A3A%W2=1A3A%W3=1A3A%W4=1A3A%W5=1A3A%W6=1A3A)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=1A5E%O=M5B4NNSNW0%CC=Y%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# CheckPoint UTM-1 Edge X, Firmware Version 7.5.42x, Hardware Type SBox-200
Fingerprint Check Point UTM-1 Edge X firewall
Class Check Point | embedded || firewall
SEQ(SP=C5-CF%GCD=1-6%ISR=CA-D4%TI=Z%II=I%TS=7)
OPS(O1=M564ST11NW0%O2=M564ST11NW0%O3=M564NNT11NW0%O4=M564ST11NW0%O5=M564ST11NW0%O6=M564ST11)
WIN(W1=16A0%W2=16A0%W3=16A0%W4=16A0%W5=16A0%W6=16A0)
ECN(R=Y%DF=Y%T=3C-46%TG=40%W=16D0%O=M564NNSNW0%CC=Y%Q=)
T1(R=Y%DF=Y%T=3C-46%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=Y%DF=Y%T=3C-46%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=N)
T7(R=N)
U1(DF=N%T=3C-46%TG=40%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3C-46%TG=40%CD=S)

# VPN-1 Edge X ADSL, Embedded NGX, Firmware version: 7.0.34x
Fingerprint Check Point VPN-1 UTM appliance
Class Check Point | embedded || firewall
SEQ(SP=BA-CE%GCD=1-6%ISR=C3-D7%TI=Z%CI=Z%II=I%TS=9-B)
OPS(O1=M5B4ST11NW0%O2=M5B4ST11NW0%O3=M5B4NNT11NW0%O4=M5B4ST11NW0%O5=M5B4ST11NW0%O6=M5B4ST11)
WIN(W1=16A0%W2=16A0%W3=16A0%W4=16A0%W5=16A0%W6=16A0)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=16D0%O=M5B4NNSNW0%CC=Y)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%RD=0)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%RD=0)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%RD=0)
T7(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%RD=0)
U1(DF=N%T=3B-45%TG=40%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# Zonealarm Z100G Firewall/wireless router. (checkpoint)
Fingerprint Check Point ZoneAlarm Z100G firewall
Class Check Point | embedded || firewall
CPE cpe:/h:checkpoint:zonealarm_z100g auto
SEQ(SP=BE-C8%GCD=1-6%ISR=D0-DA%TI=Z%II=I%TS=7)
OPS(O1=M5B4ST11NW0%O2=M5B4ST11NW0%O3=M5B4NNT11NW0%O4=M5B4ST11NW0%O5=M5B4ST11NW0%O6=M5B4ST11)
WIN(W1=16A0%W2=16A0%W3=16A0%W4=16A0%W5=16A0%W6=16A0)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=16D0%O=M5B4NNSNW0%CC=Y%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=N)
T7(R=N)
U1(R=N)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# IPSO 4.2 Build 106a04 running R65 HFA_60
Fingerprint Check Point NGX R65 firewall (IPSO 4.2)
Class Check Point | IPSO | 4.X | firewall
CPE cpe:/o:checkpoint:ipso:4.2 auto
SEQ(SP=FD-10B%GCD=1-6%ISR=107-113%TI=I%II=I%SS=S%TS=1)
OPS(O1=M400NW0NNT11%O2=M400NW0NNT11%O3=M400NW0NNT11%O4=M400NW0NNT11%O5=M400NW0NNT11%O6=M400NNT11)
WIN(W1=43E0%W2=4110%W3=423C%W4=4334%W5=4180%W6=403D)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=4470%O=M400NW0%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=N)
T7(R=N)
U1(DF=N%T=FA-104%TG=FF%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# Check Point VPN-1(TM) & FireWall-1(R) NGX (R60) HFA_03, Hotfix 603 - Build 015  & IPSO fw-001 4.1-BUILD016 releng 1515  05.19.2006-052320 i386
# This is Check Point VPN-1(TM) & FireWall-1(R) NGX (R60) HFA_03, Hotfix 603 - Build 015
# IPSO fw-001 4.1-BUILD016 releng 1515  05.19.2006-052320 i386
Fingerprint Check Point VPN-1 firewall (IPSO 4.1)
Class Check Point | IPSO | 4.X | firewall
CPE cpe:/o:checkpoint:ipso:4.1 auto
SEQ(SP=C0-10C%GCD=1-6%ISR=107-10B%TI=I%II=I%SS=S%TS=1)
OPS(O1=M5B4NW0NNT11%O2=M5B4NW0NNT11%O3=M5B4NW0NNT11%O4=M5B4NW0NNT11%O5=M5B4NW0NNT11%O6=M5B4NNT11)
WIN(W1=43E0%W2=4110%W3=423C%W4=4110%W5=4180%W6=403D)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=4470%O=M5B4NW0%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=3B-45%TG=40%W=4000%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=N)
U1(DF=N%T=FA-104%TG=FF%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# Ciperlab 5100 Programmable Data Terminal. http://www.cipherlab.com/catalog.asp?CatID=59&ProdID=41
# Ciperlab A5100 Time and Attendance terminal.
Fingerprint CipherLab 5100 time and attendance terminal
Class CipherLab | embedded || specialized
SEQ(SP=0-2B%GCD=1-6|64|C8|12C|190|1F4%ISR=4B-55%TI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4%O2=M5B4%O3=M5B4%O4=M5B4%O5=M5B4%O6=M5B4)
WIN(W1=16D0%W2=16D0%W3=16D0%W4=16D0%W5=16D0%W6=16D0)
ECN(R=N)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=Y%DF=N%T=3B-45%TG=40%W=7A69%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=8000%S=A%A=S%F=AR%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=FFFF%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=900D|A346%RID=G%RIPCK=I%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# Cisco CE590 running Application and Content Networking System Software Release 5.5.5 (build b4 Dec 27 2006)
Fingerprint Cisco Content Engine CE590 running Application and Content Networking System Software 5.5.5
Class Cisco | ACNS | 5.X | proxy server
CPE cpe:/o:cisco:acns:5 auto
SEQ(SP=C6-D0%GCD=1-6%ISR=C7-D1%TI=Z%II=I%TS=U)
OPS(O1=M5B4NNS%O2=M578NNS%O3=M280%O4=M218NNS%O5=M218NNS%O6=M109NNS)
WIN(W1=16D0%W2=16D0%W3=16D0%W4=16D0%W5=16D0%W6=16D0)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=16D0%O=M5B4NNS%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=16D0%S=O%A=S+%F=AS%O=M109NNS%RD=0%Q=)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=Y%T=3B-45%TG=40%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=Y%T=3B-45%TG=40%CD=S)

# Cisco Wide Area Engine WAE-512 running ACNS 5.5.5.4
Fingerprint Cisco WAE-512 Wide Area Application Engine (ACNS 5.5.5.4)
Class Cisco | ACNS | 5.X | proxy server
CPE cpe:/o:cisco:acns:5.5.5.4 auto
SEQ(SP=C3-CD%GCD=1-6%ISR=C7-D1%TI=Z%II=I%TS=U)
OPS(O1=|M5B4NNS%O2=|M578NNS%O3=|M280%O4=|M218NNS%O5=|M218NNS%O6=|M109NNS)
WIN(W1=16D0%W2=16D0%W3=16D0%W4=16D0%W5=16D0%W6=16D0)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=16D0%O=|M5B4NNS%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=O|S+%F=A|AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=16D0%S=O%A=O|S+%F=A|AS%O=|M109NNS%RD=0%Q=)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=Y%T=3B-45%TG=40%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=Y%T=3B-45%TG=40%CD=S)

# AireOS 8.0.140.0
Fingerprint Cisco AireOS 8.0.140.0
Class Cisco | AireOS | 8.X | remote management
CPE cpe:/o:cisco:aireos:8.0.140.0 auto
SEQ(SP=BA-C4%GCD=1-6%ISR=CA-D4%TI=I%CI=I%II=RI%SS=S%TS=8)
OPS(O1=M56EST11NW7%O2=M56EST11NW7%O3=M56ENNT11NW7%O4=M56EST11NW7%O5=M56EST11NW7%O6=M56EST11)
WIN(W1=1588%W2=1588%W3=1588%W4=1588%W5=1588%W6=1588)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=15B8%O=M56ENNSNW7%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=EB-F5%TG=FF%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=EB-F5%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=7B-85%TG=80%CD=S)

# AireOS 8.2.130.0, Linux 2.6.21_mvlcge500-octeon-mips64_octeon_v2_be
Fingerprint Cisco AireOS 8.2 (Linux 2.6.21)
Class Cisco | AireOS | 8.X | remote management
CPE cpe:/o:cisco:aireos:8.2 auto
Class Linux | Linux | 2.6.X | general purpose
CPE cpe:/o:linux:linux_kernel:2.6.21 auto
SEQ(SP=BD-C7%GCD=1-6%ISR=CD-D7%TI=I%CI=Z%TS=8)
OPS(O1=M572ST11NW6%O2=M572ST11NW6%O3=M572NNT11NW6%O4=M572ST11NW6%O5=M572ST11NW6%O6=M572ST11)
WIN(W1=1598%W2=1598%W3=1598%W4=1598%W5=1598%W6=1598)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=15C8%O=M572NNSNW6%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=7B-85%TG=80%CD=S)

# AIR-CT2504-5-K9
# AIR-CT5508-K9
# Cisco WLC version 7.6
# AIR-CT2504-K9, 7.6.130.0
# AireOS 8.0.132.0
Fingerprint Cisco 2500- or 5500-series Wireless Controller (AireOS 7 - 8)
Class Cisco | AireOS || remote management
CPE cpe:/o:cisco:aireos auto
SEQ(SP=C2-CC%GCD=1-6%ISR=C3-D3%TI=Z%CI=I%II=RI%TS=8)
OPS(O1=M56EST11NW6%O2=M56EST11NW6%O3=M56ENNT11NW6%O4=M56EST11NW6%O5=M56EST11NW6%O6=M56EST11)
WIN(W1=1588%W2=1588%W3=1588%W4=1588%W5=1588%W6=1588)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=15B8%O=M56ENNSNW6%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=EB-F5%TG=FF%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=EB-F5%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=7B-85%TG=80%CD=S)

# cisco wlc 2504, version: 7.6.130.0
# AireOS 8.0.121.0
Fingerprint Cisco 2500-series Wireless LAN Controller (AireOS)
Class Cisco | AireOS || remote management
CPE cpe:/o:cisco:aireos auto
SEQ(SP=C6-D0%GCD=1-6%ISR=C2-D4%TI=Z%CI=Z%II=RI%TS=8)
OPS(O1=M56EST11NW6%O2=M56EST11NW6%O3=M56ENNT11NW6%O4=M56EST11NW6%O5=M56EST11NW6%O6=M56EST11)
WIN(W1=1588%W2=1588%W3=1588%W4=1588%W5=1588%W6=1588)
ECN(R=Y%DF=Y%T=3C-46%TG=40%W=15B8%O=M56ENNSNW6%CC=N%Q=)
T1(R=Y%DF=Y%T=3C-46%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3C-46%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=3C-46%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3C-46%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=N)
U1(DF=N%T=3C-46%TG=40%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=7B-85%TG=80%CD=S)

# Cisco Adaptive Security Appliance Software (ASA) Version 7.2(4)
Fingerprint Cisco Adaptive Security Appliance (ASA 7.2)
Class Cisco | ASA | 7.X | firewall
CPE cpe:/o:cisco:asa:7.2 auto
SEQ(SP=FF-109%GCD=1-6%ISR=100-10A%TI=RD%II=RI%TS=U)
OPS(O1=M218%O2=M218%O3=M218%O4=M218%O5=M218%O6=M218)
WIN(W1=2000%W2=2000%W3=2000%W4=2000%W5=2000%W6=2000)
ECN(R=Y%DF=N%T=FA-104%TG=FF%W=2000%O=M218%CC=N%Q=)
T1(R=Y%DF=N%T=FA-104%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=Y%DF=Y%T=7B-85%TG=80%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=N)
T7(R=N)
U1(DF=N%T=7B-85%TG=80%IPL=70%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=FA-104%TG=FF%CD=S)

# cisco asa 8.4
Fingerprint Cisco Adaptive Security Appliance (ASA 8.4)
Class Cisco | ASA | 8.X | firewall
CPE cpe:/o:cisco:asa:8.4 auto
SEQ(SP=102-10C%GCD=1-6%ISR=103-10D%TI=RD%II=RI%TS=U)
OPS(O1=M564%O2=M564%O3=M564%O4=M564%O5=M564%O6=M564)
WIN(W1=2000%W2=2000%W3=2000%W4=2000%W5=2000%W6=2000)
ECN(R=Y%DF=N%T=FA-104%TG=FF%W=2000%O=M564%CC=N%Q=)
T1(R=Y%DF=N%T=FA-104%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=N)
T6(R=N)
T7(R=N)
U1(R=N)
IE(DFI=N%T=FA-104%TG=FF%CD=S)

# Cisco ASA 5540. ASA version 8.0(4)
# Cisco ASA 5510.
Fingerprint Cisco Adaptive Security Appliance 5510 or 5540 firewall (ASA 8.0)
Class Cisco | ASA | 8.X | firewall
CPE cpe:/o:cisco:asa:8.0 auto
SEQ(SP=100-10A%GCD=1-6%ISR=101-10B%TI=RD%CI=RD%II=RI%TS=U)
OPS(O1=M564%O2=M564%O3=M564%O4=M564%O5=M564%O6=M564)
WIN(W1=2000%W2=2000%W3=2000%W4=2000%W5=2000%W6=2000)
ECN(R=Y%DF=N%T=FA-104%TG=FF%W=2000%O=M564%CC=N%Q=)
T1(R=Y%DF=N%T=FA-104%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=FA-104%TG=FF%W=80%S=Z%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=FA-104%TG=FF%W=100%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T4(R=Y%DF=N%T=FA-104%TG=FF%W=400%S=A%A=S%F=AR%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=7A69%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=8000%S=A%A=S%F=AR%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FA-104%TG=FF%W=FFFF%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(R=N)
IE(DFI=N%T=FA-104%TG=FF%CD=S)

# Cisco Adaptive Security Appliance Software Version 9.2(4)22
Fingerprint Cisco Adaptive Security Appliance (ASA 9.2)
Class Cisco | ASA | 9.X | firewall
CPE cpe:/o:cisco:asa:9.2 auto
SEQ(SP=FB-105%GCD=1-6%ISR=105-10F%TI=RD%CI=RD%TS=U)
OPS(O1=M5B4%O2=M5B4%O3=M5B4%O4=M5B4%O5=M5B4%O6=M5B4)
WIN(W1=2000%W2=2000%W3=2000%W4=2000%W5=2000%W6=2000)
ECN(R=Y%DF=N%T=FA-104%TG=FF%W=2000%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=FA-104%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=FA-104%TG=FF%W=100%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T4(R=Y%DF=N%T=FA-104%TG=FF%W=400%S=A%A=S%F=AR%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=7A69%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=8000%S=A%A=S%F=AR%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FA-104%TG=FF%W=FFFF%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(R=N)
IE(R=N)

# Cisco IronPort appliance C170
# IronPort C160 Email security appliance
Fingerprint Cisco IronPort C160 or C170 email security appliance (AsyncOS 7)
Class Cisco | AsyncOS | 7.X | firewall
CPE cpe:/h:cisco:ironport_c170
CPE cpe:/o:cisco:asyncos:7
SEQ(SP=101-10B%GCD=1-6%ISR=103-10D%TI=I%CI=I%II=I%SS=S%TS=21|22)
OPS(O1=M5B4NW3ST11%O2=M578NW3ST11%O3=M280NW3NNT11%O4=M5B4NW3ST11%O5=M218NW3ST11%O6=M109ST11)
WIN(W1=4000%W2=4000%W3=4000%W4=4000%W5=4000%W6=4000)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=4000%O=M5B4NW3SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Cisco IronPort C650 running AsyncOS v7.0.1-010.
Fingerprint Cisco IronPort C650 email security appliance (AsyncOS 7.0.1)
Class Cisco | AsyncOS | 7.X | firewall
CPE cpe:/h:cisco:ironport_c650
CPE cpe:/o:cisco:asyncos:7.0.1
SEQ(SP=FA-10C%GCD=1-6%ISR=107-111%TS=U)
OPS(O1=M5B4SLL%O2=M5B4SLL%O3=M5B4%O4=M5B4SLL%O5=M5B4SLL%O6=M5B4SLL)
WIN(W1=4000%W2=4000%W3=4000%W4=4000%W5=4000%W6=4000)
ECN(R=Y%DF=Y%T=3A-44%TG=40%W=4000%O=M5B4SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3A-44%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3A-44%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=3A-44%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3A-44%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=Y%T=3A-44%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3A-44%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=3A-44%TG=40%CD=S)

# Cisco C370 ESA Current AsyncOS Version: 8.0.1-023
Fingerprint Cisco C370 Email Security Appliance (AsyncOS 8.0.1)
Class Cisco | AsyncOS | 8.X | security-misc
CPE cpe:/o:cisco:asyncos:8.0.1 auto
SEQ(SP=100-10A%GCD=1-6%ISR=105-10F%TI=I%TS=21)
OPS(O1=M564NW3ST11%O2=M564NW3ST11%O3=M280NW3NNT11%O4=M564NW3ST11%O5=M218NW3ST11%O6=M109ST11)
WIN(W1=4000%W2=4000%W3=4000%W4=4000%W5=4000%W6=4000)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=4000%O=M564NW3SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=O%A=S+%F=AR%O=%RD=0%Q=)
T6(R=N)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(R=N)

# Cisco M670 CSM Appliance AsyncOS Version: 8.1.1-013
Fingerprint Cisco M670 Content Security Management appliance (AsyncOS 8.1.1)
Class Cisco | AsyncOS | 8.X | security-misc
CPE cpe:/o:cisco:asyncos:8.1.1 auto
SEQ(SP=FB-105%GCD=1-6%ISR=107-111%TI=I%TS=U)
OPS(O1=M564SLL%O2=M564SLL%O3=M280%O4=M564SLL%O5=M218SLL%O6=M109SLL)
WIN(W1=4000%W2=4000%W3=4000%W4=4000%W5=4000%W6=4000)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=4000%O=M564SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=O%A=S+%F=AR%O=%RD=0%Q=)
T6(R=N)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(R=N)

# Cisco M380 Security Management Appliance AsyncOS Version 9.6.1-019
# Cisco IronPort C380, AsyncOS Version 9.7.2-047
# 9.7.2-131
Fingerprint Cisco AsyncOS 9.6 - 9.7
Class Cisco | AsyncOS | 9.X | security-misc
CPE cpe:/o:cisco:asyncos:9 auto
SEQ(SP=FA-108%GCD=1-6%ISR=FD-10F%TI=I%CI=I%II=I%SS=S%TS=21)
OPS(O1=M5B4NW6ST11%O2=M578NW6ST11%O3=M280NW6NNT11%O4=M5B4NW6ST11%O5=M218NW6ST11%O6=M109ST11)
WIN(W1=4000%W2=4000%W3=4000%W4=4000%W5=4000%W6=4000)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=4000%O=M5B4NW6SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Cisco Catalyst WS-C5000 Software, Version McpSW: 4.5(1) NmpSW: 4.5(1)
Fingerprint Cisco Catalyst WS-C5000 switch (CatOS 4.5(1))
Class Cisco | CatOS | 4.X | switch
CPE cpe:/h:cisco:catalyst_ws-c5000
CPE cpe:/o:cisco:catos:4.5 auto
SEQ(SP=C-16%GCD=FA00|1F400|2EE00|3E800|4E200%ISR=97-A1%TI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4%O2=M5B4%O3=M5B4%O4=M5B4%O5=M5B4%O6=M5B4)
WIN(W1=1000%W2=1000%W3=1000%W4=1000%W5=1000%W6=1000)
ECN(R=Y%DF=N%T=19-23%TG=20%W=1000%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=19-23%TG=20%S=O%A=O|S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=Y%DF=N%T=19-23%TG=20%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=19-23%TG=20%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=19-23%TG=20%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-3D%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=Z%RUCK=0%RUD=G)
IE(DFI=S%T=3B-3D%TG=40%CD=S)

# WS-C2948 Software, Version NmpSW: 6.3(5)
Fingerprint Cisco 2948G switch (CatOS 6.3)
Class Cisco | CatOS | 6.X | switch
CPE cpe:/h:cisco:catalyst_2948g
CPE cpe:/o:cisco:catos:6.3
SEQ(SP=FE-10A%GCD=1-6%ISR=105-10F%TI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4%O2=M5B4%O3=M5B4%O4=M5B4%O5=M5B4%O6=M5B4)
WIN(W1=1000%W2=1000%W3=1000%W4=1000%W5=1000%W6=1000)
ECN(R=Y%DF=N%T=19-23%TG=20%W=1000%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=19-23%TG=20%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=19-23%TG=20%W=1000%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=19-23%TG=20%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=19-23%TG=20%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=N)
U1(DF=N%T=3B-3D%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=Z%RUCK=0%RUD=G)
IE(DFI=S%T=3B-3D%TG=40%CD=S)

# Cisco 2820 Switch w/ OS v5.37
Fingerprint Cisco Catalyst 2820 switch (CatOS 5.37)
Class Cisco | CatOS | 6.X | switch
CPE cpe:/h:cisco:catalyst_2820
CPE cpe:/o:cisco:catos:5.37
SEQ(SP=42-6A%GCD=1-6%ISR=46-5E%TI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4%O2=M5B4%O3=M5B4%O4=M5B4%O5=M5B4%O6=M5B4)
WIN(W1=400%W2=400%W3=400%W4=400%W5=400%W6=400)
ECN(R=Y%DF=N%T=FA-104%TG=FF%W=400%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=FA-104%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=U)
T3(R=Y%DF=N%T=FA-104%TG=FF%W=400%S=O%A=S+%F=AS%O=M5B4%RD=0%Q=)
T4(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=U)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=U)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=U)
T7(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=U)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=FA-104%TG=FF%CD=S)

# Version 6.4(21) Copyright (c) 1995-2006 by Cisco Systems, Inc.
Fingerprint Cisco Catalyst 4912 (CatOS 6.4)
Class Cisco | CatOS | 6.X | switch
CPE cpe:/o:cisco:catos:6.4 auto
SEQ(SP=101-10B%GCD=1-6%ISR=105-10F%TI=I%CI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4%O2=M5B4%O3=M5B4%O4=M5B4%O5=M5B4%O6=M5B4)
WIN(W1=1000%W2=1000%W3=1000%W4=1000%W5=1000%W6=1000)
ECN(R=Y%DF=N%T=FA-104%TG=FF%W=1000%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=FA-104%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=FA-104%TG=FF%W=1000%S=O%A=S+%F=AS%O=M5B4%RD=0%Q=)
T4(R=Y%DF=N%T=FA-104%TG=FF%W=1000%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=00-06%TG=20%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=Z%RUCK=0%RUD=G)
IE(DFI=S%T=00-06%TG=20%CD=S)

# Cisco Catalyst  Model WS-C6509 with WS-X6K-SUP1A-2GE running CatOS 6.3(3)
Fingerprint Cisco Catalyst WS-C6509 switch (CatOS 6.3)
Class Cisco | CatOS | 6.X | switch
CPE cpe:/h:cisco:catalyst_ws-c6509
CPE cpe:/o:cisco:catos:6.3
SEQ(SP=F5-FF%GCD=1-6%ISR=108-112%TI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4%O2=M5B4%O3=M5B4%O4=M5B4%O5=M5B4%O6=M5B4)
WIN(W1=1000%W2=1000%W3=1000%W4=1000%W5=1000%W6=1000)
ECN(R=Y%DF=N%T=19-23%TG=20%W=1000%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=19-23%TG=20%S=O%A=O|S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=19-23%TG=20%W=1000%S=O%A=O%F=A%O=%RD=0%Q=)
T4(R=N)
T5(R=Y%DF=N%T=19-23%TG=20%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=19-23%TG=20%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=19-23%TG=20%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-3D%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=Z%RUCK=0%RUD=G)
IE(DFI=S%T=3B-3D%TG=40%CD=S)

# WS-C6509 Software, Version NmpSW: 8.4(3)
# Cisco Catalyst 4003 CatOS 7.6(17) WS-C4003 Software, Version NmpSW: 7.6(17)
# Cisco Catalyst 4006 CatOS 7.6(17) WS-C4006 Software, Version NmpSW: 7.6(17)
# WS-C2948G with cat4000-k9.8-4-11-GLX
Fingerprint Cisco Catalyst 2948G, 4003, 4006, or 6509 switch (CatOS 7.6(17) - 8.4(3))
Class Cisco | CatOS | 7.X | switch
CPE cpe:/h:cisco:catalyst_4003
CPE cpe:/h:cisco:catalyst_4006
CPE cpe:/o:cisco:catos:7 auto
Class Cisco | CatOS | 8.X | switch
CPE cpe:/h:cisco:catalyst_2948g
CPE cpe:/h:cisco:catalyst_6509
CPE cpe:/o:cisco:catos:8 auto
SEQ(SP=FC-108%GCD=1-6%ISR=FA-112%TI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4%O2=M5B4%O3=M5B4%O4=M5B4%O5=M5B4%O6=M5B4)
WIN(W1=1000%W2=1000%W3=1000%W4=1000%W5=1000%W6=1000)
ECN(R=Y%DF=N%T=FA-104%TG=FF%W=1000%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=FA-104%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=FA-104%TG=FF%W=1000%S=O%A=S+%F=AS%O=M5B4%RD=0%Q=)
T4(R=Y%DF=N%T=FA-104%TG=FF%W=1000%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=Z%RUCK=0%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# WS-C6506 Software, Version NmpSW: 7.6(16)
Fingerprint Cisco Catalyst WS-C6506 switch (CatOS 7.6(16))
Class Cisco | CatOS | 7.X | switch
CPE cpe:/h:cisco:catalyst_ws-c6506
CPE cpe:/o:cisco:catos:7.6 auto
SEQ(SP=E5-109%GCD=1-6%ISR=107-111%TI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4%O2=M5B4%O3=M5B4%O4=M5B4%O5=M5B4%O6=M5B4)
WIN(W1=1000%W2=1000%W3=1000%W4=1000%W5=1000%W6=1000)
ECN(R=Y%DF=N%T=FA-104%TG=FF%W=1000%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=FA-104%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=FA-104%TG=FF%W=1000%S=O%A=S+%F=AS%O=M5B4%RD=0%Q=)
T4(R=Y%DF=N%T=FA-104%TG=FF%W=1000%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-3D%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=Z%RUCK=0%RUD=G)
IE(DFI=S%T=3B-3D%TG=40%CD=S)

# 8.3(2)GLX
Fingerprint Cisco Catalyst switch (CatOS 8.3(2))
Class Cisco | CatOS | 8.X | switch
CPE cpe:/o:cisco:catos:8.3 auto
SEQ(SP=FA-104%GCD=1-6%ISR=106-110%TI=I%CI=I%II=I%SS=S%TS=U)
OPS(O1=M5B0%O2=M5B0%O3=M5B0%O4=M5B0%O5=M5B0%O6=M5B0)
WIN(W1=1000%W2=1000%W3=1000%W4=1000%W5=1000%W6=1000)
ECN(R=Y%DF=N%T=FA-104%TG=FF%W=1000%O=M5B0%CC=N%Q=)
T1(R=Y%DF=N%T=FA-104%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=FA-104%TG=FF%W=1000%S=O%A=S+%F=AS%O=M5B0%RD=0%Q=)
T4(R=Y%DF=N%T=FA-104%TG=FF%W=1000%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=37-41%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=Z%RUCK=0%RUD=G)
IE(DFI=S%T=37-41%TG=40%CD=S)

# Cisco WS-C4506, Cisco Catalyst Operating System Software, Version 8.1(1)
Fingerprint Cisco Catalyst WS-C4506 switch (CatOS 8.1(1))
Class Cisco | CatOS | 8.X | switch
CPE cpe:/h:cisco:catalyst_ws-c4506
CPE cpe:/o:cisco:catos:8.1 auto
SEQ(SP=EB-FC%GCD=1-6%ISR=109-10E%TI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4%O2=M5B4%O3=M5B4%O4=M5B4%O5=M5B4%O6=M5B4)
WIN(W1=1000%W2=1000%W3=1000%W4=1000%W5=1000%W6=1000)
ECN(R=Y%DF=N%T=FA-104%TG=FF%W=1000%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=FA-104%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=FA-104%TG=FF%W=1000%S=O%A=S+%F=AS%O=M5B4%RD=0%Q=)
T4(R=Y%DF=N%T=FA-104%TG=FF%W=1000%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=Z%RUCK=0%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# CISCO 827H
Fingerprint Cisco 827H ADSL router (IOS 12.2)
Class Cisco | embedded || broadband router
CPE cpe:/o:cisco:ios:12.2
SEQ(SP=EF-113%GCD=1-6%ISR=102-114%TI=Z%II=RI%TS=U)
OPS(O1=M5B4%O2=M578%O3=M280%O4=M218%O5=M218%O6=M109)
WIN(W1=1020%W2=1020%W3=1020%W4=1020%W5=1020%W6=1020)
ECN(R=Y%DF=N%T=FB-105%TG=FF%W=1020%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=FB-105%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=N)
U1(DF=N%T=FB-105%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=FB-105%TG=FF%CD=S)

# CISCO C827H (MPC855T) ADSL ROUTER, IOS (tm) C820 Software (C820-Y6-M), Version 12.2(15)T5,  RELEASE SOFTWARE (fc1)
Fingerprint Cisco 827H ADSL router (IOS 12.2)
Class Cisco | embedded || broadband router
CPE cpe:/o:cisco:ios:12.2
SEQ(SP=FE-108%GCD=1-6%ISR=106-110%TI=Z%TS=U)
OPS(O1=M5B4%O2=M578%O3=M280%O4=M218%O5=M218%O6=M109)
WIN(W1=1020%W2=1020%W3=1020%W4=1020%W5=1020%W6=1020)
ECN(R=Y%DF=N%T=FB-105%TG=FF%W=1020%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=FB-105%TG=FF%S=O%A=O|S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A|O%A=Z%F=R%O=%RD=0%Q=)
T7(R=N)
U1(DF=N%T=FB-105%TG=FF%IPL=38%UN=0%RIPL=G%RID=0-FFFF%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=FB-105%TG=FF%CD=S)

# Cisco EPC3208
Fingerprint Cisco EPC3208 cable modem
Class Cisco | embedded || broadband router
CPE cpe:/h:cisco:epc3208 auto
SEQ(SP=FA-104%GCD=1-6%ISR=FC-106%TI=I%CI=I%II=I%SS=S%TS=7)
OPS(O1=M5B4NW0NNT11%O2=M5B4NW0NNT11%O3=M5B4NW0NNT11%O4=M5B4NW0NNT11%O5=M5B4NW0NNT11%O6=M5B4NNT11)
WIN(W1=43E0%W2=4110%W3=423C%W4=4074%W5=4180%W6=403D)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=4470%O=M5B4NW0%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=403D%S=O%A=S+%F=AS%O=M5B4NW0NNT11%RD=0%Q=)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=N)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# cisco epc3208 cable modem
Fingerprint Cisco EPC3208 cable modem
Class Cisco | embedded || broadband router
CPE cpe:/h:cisco:epc3208 auto
SEQ(SP=F1-FB%GCD=1-6%ISR=F8-102%TI=I%CI=I%II=I%SS=S%TS=7)
OPS(O1=M5B4NW0NNT11%O2=M5B4NW0NNT11%O3=M5B4NW0NNT11%O4=M5B4NW0NNT11%O5=M5B4NW0NNT11%O6=M5B4NNT11)
WIN(W1=43E0%W2=4110%W3=423C%W4=4180%W5=4180%W6=403D)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=4470%O=M5B4NW0%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=403D%S=O%A=S+%F=AS%O=M5B4NW0NNT11%RD=0%Q=)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Cisco EPC3212, Firmware Name:  epc3212-ESIP-16-v302r12901-100908cs.bin
# Cisco EPC3208 EuroDocsis 3.0 2-PORT EMTA, Firmware Name:  e3200-ESIP-12-v302r125533-120117c_upc.bin
Fingerprint Cisco EPC3208 or EPC3212 cable modem
Class Cisco | embedded || broadband router
CPE cpe:/h:cisco:epc3212
CPE cpe:/h:cisco:epc3208
SEQ(SP=F0-108%GCD=1-6%ISR=FF-10F%TI=I%CI=I%II=I%SS=S%TS=7)
OPS(O1=M5B4NW0NNT11%O2=M5B4NW0NNT11%O3=M5B4NW0NNT11%O4=M5B4NW0NNT11%O5=M5B4NW0NNT11%O6=M5B4NNT11)
WIN(W1=43E0%W2=4110%W3=423C%W4=43E0%W5=4180%W6=403D)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=4470%O=M5B4NW0%CC=N)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%RD=0)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%RD=0)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%RD=0)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Scientific Atlanta WebSTAR EPX2203 cable modem
# WebSTAR EPX2203 (Hardware Version: v2.0) (Software Version: v2.0.2r1152-060125epx2203-v202r1152-060125c-us-5-358.bin)
# Webstar EPX2203 Series cable modem
# ZyXEL ES-1528 Switch Firmware Version V1.12(ARD.3) Not ZynOS as it is not a layer 3 switch, only layer 2.
# Cisco EPC3212, Bootloader Version  2.3.0_R1
Fingerprint Cisco EPC3212 or Scientific Atlanta WebSTAR EPX2203 cable modem
Class Cisco | embedded || broadband router
CPE cpe:/h:cisco:epc3212
Class Scientific Atlanta | embedded || broadband router
CPE cpe:/h:sciatl:webstar_epx2203
SEQ(SP=CE-106%GCD=1-6%ISR=F6-10E%TI=I%II=I%SS=S%TS=7)
OPS(O1=M5B4NW0NNT11%O2=M5B4NW0NNT11%O3=M5B4NW0NNT11%O4=M5B4NW0NNT11%O5=M5B4NW0NNT11%O6=M5B4NNT11)
WIN(W1=43E0%W2=4110%W3=423C%W4=43E0%W5=4180%W6=403D)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=4470%O=M5B4NW0%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=403D%S=O%A=S+%F=AS%O=M5B4NW0NNT11%RD=0%Q=)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Cisco EPC3925 Bootloader Revision:    2.3.0_R1 Current Software Revision:      EPC3925-ESIP-12-v302r12911-100930c_upc
Fingerprint Cisco EPC3925 cable modem
Class Cisco | embedded || broadband router
CPE cpe:/h:cisco:epc3925
SEQ(SP=F8-102%GCD=1-6%ISR=F7-101%TI=I%TS=7)
OPS(O1=M5B4NW0NNT11%O2=M5B4NW0NNT11%O3=M5B4NW0NNT11%O4=M5B4NW0NNT11%O5=M5B4NW0NNT11%O6=M5B4NNT11)
WIN(W1=43E0%W2=4110%W3=423C%W4=4074%W5=4180%W6=403D)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=4470%O=M5B4NW0%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=403D%S=O%A=S+%F=AS%O=M5B4NW0NNT11%RD=0%Q=)
T4(R=N)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=N)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(R=N)

# Cisco Intrusion Prevention System, Version 7.0(4)E4, Platform: IPS4270-20-K9, Firmware: IPS-K9-7.0-4-E4
Fingerprint Cisco IPS 4270 intrusion prevention system
Class Cisco | embedded || firewall
CPE cpe:/h:cisco:ips_4270
SEQ(SP=FC-106%GCD=1-6%ISR=FC-106%TI=Z%CI=RD%II=I%TS=7|9)
OPS(O1=M564ST11NW0%O2=M564ST11NW0%O3=M564NNT11NW0%O4=M564ST11NW0%O5=M564ST11NW0%O6=M564ST11)
WIN(W1=16A0%W2=16A0%W3=16A0%W4=16A0%W5=16A0%W6=16A0)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=16D0%O=M564NNSNW0%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=O|S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=FA-104%TG=FF%W=80%S=Z%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=FA-104%TG=FF%W=100%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T4(R=Y%DF=N%T=FA-104%TG=FF%W=400%S=A%A=S%F=AR%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=O%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=8000%S=A%A=S%F=AR%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FA-104%TG=FF%W=FFFF%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# Cisco MARS 50, some type of Linux OS
Fingerprint Cisco MARS 50 firewall version 4.2.1
Class Cisco | embedded || firewall
CPE cpe:/h:cisco:mars_50:4.2.1
SEQ(SP=C4-CE%GCD=1-6%ISR=C2-CC%TI=Z%II=I%TS=7)
OPS(O1=M55CST11NW0%O2=M55CST11NW0%O3=M55CNNT11NW0%O4=M55CST11NW0%O5=M55CST11NW0%O6=M55CST11)
WIN(W1=16A0%W2=16A0%W3=16A0%W4=16A0%W5=16A0%W6=16A0)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=16D0%O=M55CNNSNW0%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=FA-104%TG=FF%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=Y%T=FA-104%TG=FF%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=FA-104%TG=FF%CD=S)

# HP WP110 print server, Firmware Version: 02.00, Firmware Build Date: 2001-09-14, Boot+Version: 01.00, Boot Build Date: 2001-07-23
# The printer is a XEROX Document Centre 405
# Cisco Micro Webserver 200, Cisco MicroWeb II, Software Version: Eclipse 1.0.1(100)
# Tektronix oscilloscope model TDS-3034B, Firmware V3.29. (c) 2001
# Tektronix os.350 on a XP350
Fingerprint Cisco Micro Webserver 200, HP WP110 print server, Tektronix TDS3034B oscilloscope or XP350 terminal, or Xerox Document Centre 405 printer
Class Cisco | embedded || general purpose
CPE cpe:/h:micro_webserver_200
Class HP | embedded || print server
CPE cpe:/h:hp:wp110 auto
Class Tektronix | os.350 || specialized
CPE cpe:/h:tektronix:tds3034b
CPE cpe:/o:tektronix:os_350
Class Tektronix | os.350 || terminal
CPE cpe:/h:tektronix:xp350
CPE cpe:/o:tektronix:os_350
Class Xerox | embedded || printer
CPE cpe:/h:xerox:document_centre_405
SEQ(SP=B-15%GCD=FA00|1F400|2EE00|3E800|4E200%ISR=97-A1%TI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4%O2=M5B4%O3=M5B4%O4=M5B4%O5=M5B4%O6=M5B4)
WIN(W1=1000%W2=1000%W3=1000%W4=1000%W5=1000%W6=1000)
ECN(R=Y%DF=N%T=19-23%TG=20%W=1000%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=19-23%TG=20%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=19-23%TG=20%W=1000%S=O%A=O%F=A%O=%RD=0%Q=)
T4(R=Y%DF=N%T=19-23%TG=20%W=1000%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=19-23%TG=20%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=19-23%TG=20%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=19-23%TG=20%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=Z%RUCK=0%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# Cisco Application Control Software (ACSW), loader:    Version 12.2[123], system:    Version A2(1.6a)
Fingerprint Cisco ACE load balancer
Class Cisco | embedded || load balancer
SEQ(SP=F5-FF%GCD=1-6%ISR=FC-106%TI=Z%CI=RD%II=I%TS=U)
OPS(O1=M564%O2=M564%O3=M564%O4=M564%O5=M564%O6=M564)
WIN(W1=16D0%W2=16D0%W3=16D0%W4=16D0%W5=16D0%W6=16D0)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=16D0%O=M564%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=O|S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=FA-104%TG=FF%W=80%S=Z%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=FA-104%TG=FF%W=100%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T4(R=Y%DF=N%T=FA-104%TG=FF%W=400%S=A%A=S%F=AR%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=7A69%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=8000%S=A%A=S%F=AR%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FA-104%TG=FF%W=FFFF%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(R=N)
IE(DFI=N%T=7B-85%TG=80%CD=S)

# Cisco ACE proxy
Fingerprint Cisco ACE load balancer
Class Cisco | embedded || load balancer
SEQ(SP=100-10A%GCD=1-6%ISR=103-10D%TI=RD%TS=U)
OPS(O1=M5B4%O2=M5B4%O3=M5B4%O4=M5B4%O5=M5B4%O6=M5B4)
WIN(W1=8000%W2=8000%W3=8000%W4=8000%W5=8000%W6=8000)
ECN(R=Y%DF=N%T=FA-104%TG=FF%W=8000%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=FA-104%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=7A69%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=N)
T7(R=N)
U1(R=N)
IE(R=N)

# cisco proxy - ACE http://www.cisco.com/en/US/products/ps6906/index.html
Fingerprint Cisco ACE load balancer
Class Cisco | embedded || load balancer
SEQ(SP=FF-109%GCD=1-6%ISR=106-110%TI=RD%TS=U)
OPS(O1=M5B4%O2=M5B4%O3=M5B4%O4=M5B4%O5=M5B4%O6=M5B4)
WIN(W1=4000%W2=4000%W3=4000%W4=4000%W5=4000%W6=4000)
ECN(R=Y%DF=N%T=7B-85%TG=80%W=4000%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=7B-85%TG=80%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=7A69%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=N)
T7(R=N)
U1(R=N)
IE(R=N)

# Cisco ACE appliance proxy
Fingerprint Cisco ACE load balancer
Class Cisco | embedded || load balancer
SEQ(SP=FD-109%GCD=1-6%ISR=104-10E%TI=I%TS=U)
OPS(O1=M5B4%O2=M5B4%O3=M5B4%O4=M5B4%O5=M5B4%O6=M5B4)
WIN(W1=2000%W2=2000%W3=2000%W4=2000%W5=2000%W6=2000)
ECN(R=Y%DF=Y%T=7B-85%TG=80%W=2000%O=M5B4%CC=N%Q=)
T1(R=Y%DF=Y%T=7B-85%TG=80%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=7A69%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=N)
T7(R=N)
U1(R=N)
IE(R=N)

# Cisco SCE (Service Control Engine) 2020 (It runs VxWorks (unknown version) internally) Version 3.1.0 Build 108
Fingerprint Cisco SCE 2020 Service Control Engine load balancer
Class Cisco | embedded || load balancer
SEQ(SP=14-1E%GCD=FA00|1F400|2EE00|3E800|4E200%ISR=99-A3%TI=I%II=I%SS=S%TS=U)
OPS(O1=M200%O2=M200%O3=M200%O4=M200%O5=M200%O6=M200)
WIN(W1=A000%W2=A000%W3=A000%W4=A000%W5=A000%W6=A000)
ECN(R=Y%DF=N%T=3A-44%TG=40%W=A000%O=M200%CC=N%Q=)
T1(R=Y%DF=N%T=3A-44%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=3A-44%TG=40%W=A000%S=O%A=O%F=A%O=%RD=0%Q=)
T4(R=Y%DF=N%T=3A-44%TG=40%W=A000%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3A-44%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3A-44%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3A-44%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3A-44%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=Z%RUCK=0%RUD=G)
IE(DFI=S%T=3A-44%TG=40%CD=S)

# Cisco ISB7150 IP TV settop box
# See also Motorola VIP1200?
Fingerprint Cisco ISB7150 set top box
Class Cisco | embedded || media device
CPE cpe:/h:cisco:isb7150 auto
SEQ(SP=73-91%GCD=1-6%ISR=93-9D%TI=I%CI=I%TS=0)
OPS(O1=M5B2NW2NNT00NNS%O2=M5B2NW2NNT00NNS%O3=M5B2NW2NNT00%O4=M5B2NW2NNT00NNS%O5=M5B2NW2NNT00NNS%O6=M5B2NNT00NNS)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=N%T=7B-85%TG=80%W=FFFF%O=M5B2NW2NNS%CC=N%Q=)
T1(R=Y%DF=N%T=7B-85%TG=80%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=7B-85%TG=80%W=0%S=A%A=O%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=7B-85%TG=80%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=7B-85%TG=80%W=0%S=A%A=O%F=R%O=%RD=0%Q=)
T7(R=N)
U1(DF=N%T=7B-85%TG=80%IPL=B0%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(R=N)

# Cisco Systems, Inc./VPN 3000 Concentrator Version 4.1.7.O
Fingerprint Cisco VPN 3000 Concentrator VPN platform (software version 4.1.7.O)
Class Cisco | embedded || proxy server
CPE cpe:/h:cisco:vpn_3000_concentrator:4.1.7.0
SEQ(SP=D3-DD%GCD=1-6%ISR=DB-E5%TI=RD%II=RI%TS=1)
OPS(O1=M5B4NW0NNT11%O2=M5B4NW0NNT11%O3=M5B4NW0NNT11%O4=M5B4NW0NNT11%O5=M5B4NW0NNT11%O6=M5B4NNT11)
WIN(W1=2000%W2=2000%W3=2000%W4=2000%W5=2000%W6=2000)
ECN(R=Y%DF=N%T=7B-85%TG=80%W=2000%O=M5B4NW0%CC=N%Q=)
T1(R=Y%DF=N%T=7B-85%TG=80%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=7B-85%TG=80%W=2000%S=O%A=S+%F=AS%O=M5B4NW0NNT11%RD=0%Q=)
T4(R=Y%DF=N%T=7B-85%TG=80%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=7B-85%TG=80%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=7B-85%TG=80%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=7B-85%TG=80%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=7B-85%TG=80%IPL=38%UN=A05|41CF|41D1|5108|D8A5%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=7B-85%TG=80%CD=S)

# Cisco VPN Concentrator, software revision: "Cisco Systems, Inc./VPN 3000 Concentrator Version 4.7.2.D Dec 20 2005 15:26:54"
# VPN Concentrator Type: 3005 Cisco Systems, Inc./VPN 3000 Concentrator Version 4.7.Rel Mar 10 2005 14:58:16
Fingerprint Cisco VPN 3000 Concentrator VPN platform (software version 4.7)
Class Cisco | embedded || proxy server
CPE cpe:/h:cisco:vpn_3000_concentrator:4.7
SEQ(SP=CC-DA%GCD=1-6%ISR=CC-E4%TI=I%CI=I%II=RI%SS=O|S%TS=1|2)
OPS(O1=M5B4NW0NNT11%O2=M5B4NW0NNT11%O3=M5B4NW0NNT11%O4=M5B4NW0NNT11%O5=M5B4NW0NNT11%O6=M5B4NNT11)
WIN(W1=2000%W2=2000%W3=2000%W4=2000%W5=2000%W6=2000)
ECN(R=Y%DF=N%T=7B-85%TG=80%W=2000%O=M5B4NW0%CC=N%Q=)
T1(R=Y%DF=N%T=7B-85%TG=80%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=7B-85%TG=80%W=2000%S=O%A=S+%F=AS%O=M5B4NW0NNT11%RD=0%Q=)
T4(R=Y%DF=N%T=7B-85%TG=80%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=7B-85%TG=80%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=7B-85%TG=80%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=7B-85%TG=80%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=7B-85%TG=80%IPL=38%UN=127%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=7B-85%TG=80%CD=S)

# Cisco Concentrator 3030
Fingerprint Cisco VPN 3030 Concentrator VPN platform
Class Cisco | embedded || proxy server
CPE cpe:/h:cisco:vpn_3030_concentrator
SEQ(SP=D6-E0%GCD=1-6%ISR=D8-E2%TI=RD%II=RI%TS=1)
OPS(O1=M5B4NW0NNT11%O2=M5B4NW0NNT11%O3=M5B4NW0NNT11%O4=M5B4NW0NNT11%O5=M5B4NW0NNT11%O6=M5B4NNT11)
WIN(W1=2000%W2=2000%W3=2000%W4=2000%W5=2000%W6=2000)
ECN(R=Y%DF=N%T=7B-85%TG=80%W=2000%O=M5B4NW0%CC=N%Q=)
T1(R=Y%DF=N%T=7B-85%TG=80%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=7B-85%TG=80%W=2000%S=O%A=S+%F=AS%O=M5B4NW0NNT11%RD=0%Q=)
T4(R=Y%DF=N%T=7B-85%TG=80%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=7B-85%TG=80%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=7B-85%TG=80%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=7B-85%TG=80%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=7B-85%TG=80%IPL=38%UN=245F|7B1F|AC10%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=7B-85%TG=80%CD=S)

# Cisco Systems, Inc./VPN 3000 Concentrator Version 4.7.2.F (VPN Concentrator Type: 3030)
Fingerprint Cisco VPN 3030 Concentrator VPN platform (software 4.7.2.F)
Class Cisco | embedded || proxy server
CPE cpe:/h:cisco:vpn_3030_concentrator:4.7.2.f
SEQ(SP=CE-D8%GCD=1-6%ISR=CF-D9%TI=RD%II=RI%TS=1)
OPS(O1=M5B4NW0NNT11%O2=M5B4NW0NNT11%O3=M5B4NW0NNT11%O4=M5B4NW0NNT11%O5=M5B4NW0NNT11%O6=M5B4NNT11)
WIN(W1=2000%W2=2000%W3=2000%W4=2000%W5=2000%W6=2000)
ECN(R=Y%DF=N%T=7B-85%TG=80%W=2000%O=M5B4NW0%CC=N%Q=)
T1(R=Y%DF=N%T=7B-85%TG=80%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=7B-85%TG=80%W=2000%S=O%A=S+%F=AS%O=M5B4NW0NNT11%RD=0%Q=)
T4(R=Y%DF=N%T=7B-85%TG=80%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=7B-85%TG=80%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=7B-85%TG=80%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=7B-85%TG=80%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=7B-85%TG=80%IPL=38%UN=127|4B53|4BD7%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=7B-85%TG=80%CD=S)

# Cisco Wireless LAN Controller model 4402 (management port). sw version is 5.0.148.0.
# Cisco 4400 Series Wireless LAN Controller, AIR-WLC4402-25-K9
Fingerprint Cisco 4402 wireless LAN controller
Class Cisco | embedded || remote management
CPE cpe:/h:cisco:4402_wireless_lan_controller
SEQ(SP=C4-CE%GCD=1-6%ISR=C3-D1%TI=Z%TS=A)
OPS(O1=M56EST11NW2%O2=M56EST11NW2%O3=M56ENNT11NW2%O4=M56EST11NW2%O5=M56EST11NW2%O6=M56EST11)
WIN(W1=1588%W2=1588%W3=1588%W4=1588%W5=1588%W6=1588)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=15B8%O=M56ENNSNW2%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(R=N)

# Cisco Virtual Wireless LAN Controller (vWLC) 7.6.110.00
Fingerprint Cisco Virtual Wireless LAN Controller (vWLC)
Class Cisco | embedded || remote management
SEQ(SP=C8-D2%GCD=1-6%ISR=C4-CE%TI=Z%CI=I%II=RI%TS=8)
OPS(O1=M56EST11NW7%O2=M56EST11NW7%O3=M56ENNT11NW7%O4=M56EST11NW7%O5=M56EST11NW7%O6=M56EST11)
WIN(W1=1588%W2=1588%W3=1588%W4=1588%W5=1588%W6=1588)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=15B8%O=M56ENNSNW7%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=EB-F5%TG=FF%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=EB-F5%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=7B-85%TG=80%CD=S)

# Cisco Wireless LAN Controller (model?)
Fingerprint Cisco Wireless LAN Controller
Class Cisco | embedded || remote management
SEQ(SP=C9-D3%GCD=1-6%ISR=CA-D4%TI=Z%CI=Z%II=RI%TS=8)
OPS(O1=M56EST11NW7%O2=M56EST11NW7%O3=M56ENNT11NW7%O4=M56EST11NW7%O5=M56EST11NW7%O6=M56EST11)
WIN(W1=1588%W2=1588%W3=1588%W4=1588%W5=1588%W6=1588)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=15B8%O=M56ENNSNW7%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=7B-85%TG=80%CD=S)

# Cisco Wireless LAN controller
Fingerprint Cisco Wireless LAN controller
Class Cisco | embedded || remote management
SEQ(SP=BD-C7%GCD=1-6%ISR=C5-CF%TI=Z%II=RI%TS=8)
OPS(O1=M56EST11NW6%O2=M56EST11NW6%O3=M56ENNT11NW6%O4=M56EST11NW6%O5=M56EST11NW6%O6=M56EST11)
WIN(W1=1588%W2=1588%W3=1588%W4=1588%W5=1588%W6=1588)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=15B8%O=M56ENNSNW6%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=N)
T6(R=N)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=7B-85%TG=80%CD=S)

# c1700-k9o3sy7-mz.124-8.bin
Fingerprint Cisco 1700 router
Class Cisco | embedded || router
CPE cpe:/h:cisco:1700_router
SEQ(SP=F9-107%GCD=1-6%ISR=103-10D%TI=RD%II=RI%TS=U)
OPS(O1=M514%O2=M514%O3=M514%O4=M514%O5=M514%O6=M514)
WIN(W1=1020%W2=1020%W3=1020%W4=1020%W5=1020%W6=1020)
ECN(R=Y%DF=N%T=FB-105%TG=FF%W=1020%O=M514%CC=N%Q=)
T1(R=Y%DF=N%T=FB-105%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
T3(R=N)
T4(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FB-105%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=FB-105%TG=FF%CD=S)

# Cisco 1700 series router
Fingerprint Cisco 1700-series router
Class Cisco | embedded || router
CPE cpe:/h:cisco:1700_router
SEQ(SP=FD-10B%GCD=1-6%ISR=FE-10E%TI=Z%CI=I%II=RI%TS=U)
OPS(O1=M5B4%O2=M578%O3=M280%O4=M5B4%O5=M218%O6=M109)
WIN(W1=1020%W2=1020%W3=1020%W4=1020%W5=1020%W6=1020)
ECN(R=Y%DF=N%T=FB-105%TG=FF%W=1020%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=FB-105%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=N)
U1(DF=N%T=FB-105%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=FB-105%TG=FF%CD=S)

# Cisco ASR 9010
Fingerprint Cisco ASR 9010 router
Class Cisco | embedded || router
CPE cpe:/h:cisco:asr_9010_router
SEQ(CI=I%II=RI%TS=U)
OPS(O1=M4D8W0L%O2=M4D8W0L%O3=M280W0L%O4=M4D8W0L%O5=M218W0L%O6=M109)
WIN(W1=4000%W2=4000%W3=4000%W4=4000%W5=4000%W6=4000)
ECN(R=Y%DF=N%T=FA-104%TG=FF%W=4000%O=M4D8W0L%CC=N)
T1(R=Y%DF=N%T=FA-104%TG=FF%S=O%A=S+%F=AS%RD=0)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%RD=0)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=Z%A=S+%F=AR%RD=0)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%RD=0)
T7(R=N)
U1(DF=N%T=FA-104%TG=FF%IPL=60%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# Cisco Network Analysis Module (NME-NAM-80S) Software version 4.1(1) RELEASE SOFTWARE [fc2] (Probably Linux --Ed.)
Fingerprint Cisco NME-NAM-80S network analysis module
Class Cisco | embedded || specialized
SEQ(SP=C5-CF%GCD=1-6%ISR=C2-CC%TI=Z%II=I%TS=U)
OPS(O1=M5B4%O2=M5B4%O3=M5B4%O4=M5B4%O5=M5B4%O6=M5B4)
WIN(W1=16D0%W2=16D0%W3=16D0%W4=16D0%W5=16D0%W6=16D0)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=16D0%O=M5B4%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=16D0%S=O%A=S+%F=AS%O=M5B4%RD=0%Q=)
T4(R=N)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=N)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# Cisco RFGW-1-D Universal Edge QAM Release 02.02.15
Fingerprint Cisco RFGW-1-D radio
Class Cisco | embedded || specialized
SEQ(SP=F2-10A%GCD=1-6%ISR=103-10D%TI=I%II=I%SS=S%TS=U)
OPS(O1=NNM564SNW0%O2=NNM564SNW0%O3=M564NW0%O4=NNM564SNW0%O5=NNM564SNW0%O6=NNM564S)
WIN(W1=2710%W2=2710%W3=2710%W4=2710%W5=2710%W6=2710)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=2710%O=NNM564SNW0%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=FA-104%TG=FF%W=80%S=Z%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=FA-104%TG=FF%W=100%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T4(R=Y%DF=N%T=FA-104%TG=FF%W=400%S=A%A=S%F=AR%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=O%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=8000%S=A%A=S%F=AR%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FA-104%TG=FF%W=FFFF%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=138%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=Z)

# Cisco 1900 switch
Fingerprint Cisco Catalyst 1900 switch
Class Cisco | embedded || switch
CPE cpe:/h:cisco:catalyst_1900
SEQ(SP=E-18%GCD=9C4|1388|1D4C|2710|30D4%ISR=8A-94%TI=I%II=I%SS=S%TS=U)
OPS(R=N)
WIN(R=N)
ECN(R=N)
T1(R=N)
T2(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=FA-104%TG=FF%W=400%S=O%A=O|S+%F=AS%O=M5B4%RD=0%Q=)
T4(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=FA-104%TG=FF%CD=S)

# Cisco Catalyst 1900 running Cisco Catalyst 1900/2820 Enterprise Edition Software Version V8.01.01
# This device is a Cisco 1900 Series Switch, running IOS v 9.00.04
# RAD (http://www.rad.com) TDM OVER IP MULTIPLEXER IPMUX-1/DC/E1/UPT/STC-E1, Boot version - 1.21, Application version - 4.07
Fingerprint Cisco Catalyst 1900 switch or RAD IPMUX-1 TDM-over-IP multiplexer
Class Cisco | embedded || switch
CPE cpe:/h:cisco:catalyst_1900
Class RAD Data Communications | embedded || switch
SEQ(SP=10-84%GCD=9C4|1388|1D4C|2710|30D4|6B6C|D6D8|14244|1ADB0|2191C%ISR=8A-AE%TI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4%O2=M5B4%O3=M5B4%O4=M5B4%O5=M5B4%O6=M5B4)
WIN(W1=400%W2=400%W3=400%W4=400%W5=400%W6=400)
ECN(R=Y%DF=N%T=FA-104%TG=FF%W=400%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=FA-104%TG=FF%S=O%A=O|S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=FA-104%TG=FF%W=400%S=O%A=S+%F=AS%O=M5B4%RD=0%Q=)
T4(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=FA-104%TG=FF%CD=S)

# Cisco Systems Catalyst 1900,V9.00.03, 19XX's runs neither IOS nor CatOS
Fingerprint Cisco Catalyst 1900 Switch, Software v9.00.03
Class Cisco | embedded || switch
CPE cpe:/h:cisco:catalyst_1900
SEQ(SP=F2-F6%GCD=1-6%ISR=106-108%TI=I|RD%II=I%SS=S%TS=U)
OPS(O1=M218%O2=M218%O3=M218%O4=M218%O5=M218%O6=M218)
WIN(W1=400%W2=400%W3=400%W4=400%W5=400%W6=400)
ECN(R=Y%DF=N%T=FA-104%TG=FF%W=400%O=M218%CC=N%Q=)
T1(R=Y%DF=N%T=FA-104%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=O%A=S+%F=AR%O=%RD=0%Q=)
T6(R=N)
T7(R=N)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=FA-104%TG=FF%CD=S)

# Cisco Catalyst 1912 A Switch (FW: V9.00.04)
# It runs neither IOS nor CatOS.
# The MIB says :
# RFC1213-MIB::sysDescr.0 = STRING: "Cisco Systems Catalyst 1900,V9.00.04    "
# RFC1213-MIB::sysObjectID.0 = OID: CISCO-SMI::workgroup.31
# Firmware is: V9.00.04    : Standard Edition
Fingerprint Cisco Catalyst 1912 switch
Class Cisco | embedded || switch
CPE cpe:/h:cisco:catalyst_1912
SEQ(SP=13-29%GCD=9C4|1388|1D4C|2710|30D4%ISR=8A-94%TI=I|RD%II=I%SS=S%TS=U)
OPS(O1=M218%O2=M218%O3=M218%O4=M218%O5=M218%O6=M218)
WIN(W1=400%W2=400%W3=400%W4=400%W5=400%W6=400)
ECN(R=Y%DF=N%T=FA-104%TG=FF%W=400%O=M218%CC=N%Q=)
T1(R=Y%DF=N%T=FA-104%TG=FF%S=O%A=O|S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=FA-104%TG=FF%W=400%S=O%A=O|S+%F=AS%O=M218%RD=0%Q=)
T4(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=FA-104%TG=FF%CD=S)

# CSS11501 Software v.8.20.3.03
Fingerprint Cisco CSS 11501 switch
Class Cisco | embedded || switch
CPE cpe:/h:cisco:css_11501 auto
SEQ(CI=RD%II=I)
OPS(R=N)
WIN(W1=0%W2=0%W3=0%W4=0%W5=0%W6=0)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=0%CC=N)
T1(R=Y%DF=N%T=3B-45%TG=40%S=Z%A=S+%F=AR%RD=0)
T2(R=Y%DF=N%T=3E-48%TG=40%W=0%S=Z%A=S%F=AR%RD=0)
T3(R=Y%DF=N%T=3E-48%TG=40%W=0%S=Z%A=S+%F=AR%RD=0)
T4(R=Y%DF=N%T=3E-48%TG=40%W=0%S=A%A=S%F=R%RD=0)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%RD=0)
T6(R=Y%DF=N%T=3E-48%TG=40%W=0%S=A%A=S%F=R%RD=0)
T7(R=Y%DF=N%T=3E-48%TG=40%W=0%S=Z%A=S+%F=AR%RD=0)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=N%T=7A-84%TG=80%CD=Z)

# cisco MDS 9000
Fingerprint Cisco MDS 9000 switch
Class Cisco | embedded || switch
CPE cpe:/h:cisco:mds_9000
SEQ(SP=C5-CF%GCD=1-6%ISR=C8-D2%TI=I%CI=I%II=I%SS=S%TS=7)
OPS(O1=M5B4ST11NW6%O2=M5B4ST11NW6%O3=M5B4NNT11NW6%O4=M5B4ST11NW6%O5=M5B4ST11NW6%O6=M5B4ST11)
WIN(W1=16A0%W2=16A0%W3=16A0%W4=16A0%W5=16A0%W6=16A0)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=16D0%O=M5B4NNSNW6%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=3B-45%TG=40%W=16A0%S=O%A=S+%F=AS%O=M5B4ST11NW6%RD=0%Q=)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# Cisco Nexus 5000
Fingerprint Cisco Nexus 5000 switch
Class Cisco | embedded || switch
CPE cpe:/o:cisco:nexus_5000
SEQ(SP=F3-10B%GCD=1-6%ISR=FC-110%TI=I%CI=I%II=RI%SS=O|S%TS=3)
OPS(O1=M218NNT11%O2=M218NNT11%O3=M218NNT11%O4=M218NNT11%O5=M218NNT11%O6=M109NNT11)
WIN(W1=4884|4E18|5940|6468|69FC%W2=4BE8|5154|5C2C|6704|6C70%W3=4C0C|5368|5D38|6708|6E64%W4=4DC8|53EC|5E28|6864|6E88%W5=4DC8|53EC|5E28|6864|6E88%W6=4E13|5401|5EE0|68C2|6EB0)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=4E18|5940|6468|69FC|6F90%O=M218%CC=N)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%RD=0)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%RD=0)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%RD=0)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%RD=0)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# SF300-08 8-Port 10/100 Managed Switch, SRW208-K9 V02, v1.2.7.76 / R750_NIK_1_2_584_002
# Cisco Small Business SG-300-28 on 1.3.78 Textview firmware
# Cisco SG300-28P 28-Port Gigabit PoE Managed Switch, Firmware: 1.4.0.88
Fingerprint Cisco SF300 or SG300 switch
Class Cisco | embedded || switch
CPE cpe:/h:cisco:sf300 auto
CPE cpe:/h:cisco:sg300 auto
SEQ(SP=F5-109%GCD=1-6%ISR=104-113%TI=Z|RD%CI=Z|RD|RI%II=RI%TS=U)
OPS(O1=M596%O2=M596%O3=M596%O4=M596%O5=M596%O6=M596)
WIN(W1=800%W2=800%W3=800%W4=800%W5=800%W6=800)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=800%O=M596%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
T3(R=N)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# SF300-24 SMB Managed Switch. Firmware Version (Active Image): 1.3.7.18
Fingerprint Cisco SF300 or SG300 switch
Class Cisco | embedded || switch
CPE cpe:/h:cisco:sf300
CPE cpe:/h:cisco:sg300
SEQ(CI=RI%II=RI)
OPS(R=N)
WIN(R=N)
ECN(R=N)
T1(R=N)
T2(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
T3(R=N)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=N)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Netgear GS724TP (PoE 24port gigabit switch)
# Dell PowerConnect 2748, Firmware Version 1.0.0.33, Boot Version 1.0.0.05
# Linksys SLM224P switch, Boot Version   1.0.4, Firmware Version   1.0.1
# Netgear FS728TP switch
# SLM2048
# APC SNMP Adapter
# SLM2024 Gigabit switch (24 port)
# FS728TP Smart Switch
# Cisco SG 300-10 Switch
Fingerprint Cisco SG 300-10, Dell PowerConnect 2748, Linksys SLM2024, SLM2048, or SLM224P, or Netgear FS728TP or GS724TP switch
Class Cisco | embedded || switch
CPE cpe:/h:cisco:sg_300-10
Class Dell | embedded || switch
CPE cpe:/h:dell:powerconnect_2748
Class Linksys | embedded || switch
CPE cpe:/h:linksys:slm2024
CPE cpe:/h:linksys:slm2048
CPE cpe:/h:linksys:slm224p
Class Netgear | embedded || switch
CPE cpe:/h:netgear:fs728tp
CPE cpe:/h:netgear:prosafe_gs724tp
SEQ(SP=FB-10D%GCD=1-6%ISR=103-113%TI=RD%II=RI%TS=U)
OPS(O1=%O2=%O3=%O4=%O5=%O6=)
WIN(W1=1000%W2=1000%W3=1000%W4=1000%W5=1000%W6=1000)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=1000%O=%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=O|S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=3B-45%TG=40%W=1000%S=O%A=S+%F=AS%O=%RD=0%Q=)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# SG500-28 28-Port Gigabit Stackable Managed Switch
Fingerprint Cisco SG 500 switch
Class Cisco | embedded || switch
CPE cpe:/h:cisco:sg_500
SEQ(CI=RI%II=RI%TS=U)
OPS(R=N)
WIN(R=N)
ECN(R=N)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
T3(R=N)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=N)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Cisco SG300-10 10-Port Gigabit Managed Switch
# Cisco Small Business 200 Series Gigabit Smart Switch SLM2048T-EU in this case Firmware version 1.2.9.44
# Cisco SG200-5 50-Port Gigabit Smart Switch
Fingerprint Cisco SG200 or SG300 switch
Class Cisco | embedded || switch
CPE cpe:/h:cisco:sg_300
SEQ(SP=FE-108%GCD=1-6%ISR=104-110%TI=RD%CI=RD|RI%II=RI%TS=U)
OPS(O1=M596%O2=M596%O3=M596%O4=M596%O5=M596%O6=M596)
WIN(W1=1000%W2=1000%W3=1000%W4=1000%W5=1000%W6=1000)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=1000%O=M596%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
T3(R=N)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Cisco SG 200-08 Gigabit Smart Switch with Firmware 1.0.8.3
Fingerprint Cisco SG200 switch
Class Cisco | embedded || switch
CPE cpe:/h:cisco:sg200 auto
SEQ(SP=FE-108%GCD=1-6%ISR=101-10B%TI=I%CI=I%II=I%SS=S%TS=7)
OPS(O1=M5B4NW0NNT11%O2=M5B4NW0NNT11%O3=M5B4NW0NNT11%O4=M5B4NW0NNT11%O5=M5B4NW0NNT11%O6=M5B4NNT11)
WIN(W1=10F8%W2=1044%W3=112C%W4=1194%W5=1060%W6=10CD)
ECN(R=Y%DF=Y%T=FA-104%TG=FF%W=111C%O=M5B4NW0%CC=N%Q=)
T1(R=Y%DF=Y%T=FA-104%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# SG200-26 26-Port Gigabit Smart Switch, Firmware 1.2.9.44
Fingerprint Cisco SG200 switch
Class Cisco | embedded || switch
CPE cpe:/h:cisco:sg200 auto
SEQ(SP=102-10C%GCD=1-6%ISR=108-112%TI=RD%II=RI%TS=U)
OPS(O1=M596%O2=M596%O3=M596%O4=M596%O5=M596%O6=M596)
WIN(W1=1000%W2=1000%W3=1000%W4=1000%W5=1000%W6=1000)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=1000%O=M596%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=N)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Cisco SG250-10P
Fingerprint Cisco SG250 switch
Class Cisco | embedded || switch
CPE cpe:/h:cisco:sg250 auto
SEQ(SP=FD-107%GCD=1-6%ISR=104-10E%TI=RD%CI=RD%II=RI%TS=U)
OPS(O1=M5A0%O2=M5A0%O3=M5A0%O4=M5A0%O5=M5A0%O6=M5A0)
WIN(W1=1000%W2=1000%W3=1000%W4=1000%W5=1000%W6=1000)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=1000%O=M5A0%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
T3(R=N)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Cisco Small Business SG-300-28 on 1.3.78 Textview firmware
Fingerprint Cisco SG300 switch
Class Cisco | embedded || switch
CPE cpe:/h:cisco:sg300 auto
SEQ(SP=FD-107%GCD=1-6%ISR=104-10E%TI=Z%CI=Z%II=RI%TS=U)
OPS(O1=M596%O2=M596%O3=M596%O4=M596%O5=M596%O6=M596)
WIN(W1=800%W2=800%W3=800%W4=800%W5=800%W6=800)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=800%O=M596%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
T3(R=N)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Cisco SG300-20 20-Port Gigabit Managed Switch, Firmware 1.4.7.6
Fingerprint Cisco SG300 switch
Class Cisco | embedded || switch
CPE cpe:/h:cisco:sg300 auto
SEQ(SP=FD-107%GCD=1-6%ISR=109-113%TI=RD%TS=U)
OPS(O1=M596%O2=M596%O3=M596%O4=M596%O5=M596%O6=M596)
WIN(W1=800%W2=800%W3=800%W4=800%W5=800%W6=800)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=800%O=M596%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=N)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# HP Switch: "PROCURVE J9028B" adm Software version PB.02.09, Hardware version R01
# HP ProCurve 1800-24G J9028B running firmware version PB.03.02
# Cisco Small Business Switch SLM2008 Firmware Revision 2.0.0.10
Fingerprint Cisco SLM2008 or HP ProCurve 1800 switch
Class Cisco | embedded || switch
CPE cpe:/h:cisco:slm2008
Class HP | embedded || switch
CPE cpe:/h:hp:procurve_1800 auto
SEQ(SP=C-16%GCD=A|14|1E|28|32%ISR=1E-28%TI=I%CI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4%O2=M5B4%O3=M5B4%O4=M5B4%O5=M5B4%O6=M5B4)
WIN(W1=600%W2=600%W3=600%W4=600%W5=600%W6=600)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=600%O=M5B4%CC=N%Q=|U)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=O|S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=3B-45%TG=40%W=80%S=A%A=S+%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=3B-45%TG=40%W=100%S=A%A=S+%F=AR%O=%RD=0%Q=)
T4(R=Y%DF=N%T=3B-45%TG=40%W=400%S=A%A=S+%F=AR%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=7A69%S=A%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=8000%S=A%A=S+%F=AR%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=FFFF%S=A%A=S+%F=AR%O=%RD=0%Q=)
U1(R=N)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# Cisco SLM-2008
Fingerprint Cisco SLM2008 switch
Class Cisco | embedded || switch
CPE cpe:/h:cisco:slm2008
SEQ(SP=C-16%GCD=A|14|1E|28|32%ISR=1D-27%TI=I%CI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4%O2=M5B4%O3=M5B4%O4=M5B4%O5=M5B4%O6=M5B4)
WIN(W1=600%W2=600%W3=600%W4=600%W5=600%W6=600)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=600%O=M5B4%CC=N%Q=U)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=3B-45%TG=40%W=80%S=A%A=S+%F=AR%O=%RD=0%Q=)
T3(R=N)
T4(R=Y%DF=N%T=3B-45%TG=40%W=400%S=A%A=S+%F=AR%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=7A69%S=A%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=8000%S=A%A=S+%F=AR%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=FFFF%S=A%A=S+%F=AR%O=%RD=0%Q=)
U1(R=N)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# Cisco SRW2008-K9 aka SG300-10 (this is the new Cisco re-packaged model and not the Linksys SRW2008 which doesn't have the K9 designation). (Sx300_FW-1.1.2.0.ros).
Fingerprint Cisco SRW2008-K9 switch
Class Cisco | embedded || switch
CPE cpe:/h:cisco:srw2008-k9 auto
SEQ(SP=FE-108%GCD=1-6%ISR=104-10E%TI=RD%CI=RD%II=RI%TS=U)
OPS(O1=M596%O2=M596%O3=M596%O4=M596%O5=M596%O6=M596)
WIN(W1=800%W2=800%W3=800%W4=800%W5=800%W6=800)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=800%O=M596%CC=N)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=O|S+%F=AS%RD=0)
T2(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%RD=0)
T3(R=Y%DF=N%T=3B-45%TG=40%W=800%S=O%A=O|S+%F=AS%O=M596%RD=0)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%RD=0)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%RD=0)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%RD=0)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%RD=0)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Cisco ATA 188 (SIP), S/W Version     3.02.01(050616A), Firmware        ATA030201SIP050616A.zup
Fingerprint Cisco ATA 188 VoIP adapter
Class Cisco | embedded || VoIP adapter
CPE cpe:/h:cisco:ata_188_voip_gateway
SEQ(CI=I%II=I)
OPS(R=N)
WIN(R=N)
ECN(R=N)
T1(R=N)
T2(R=Y%DF=N%T=F5-FF%TG=FF%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T3(R=N)
T4(R=Y%DF=N%T=F5-FF%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=F5-FF%TG=FF%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=F5-FF%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=F5-FF%TG=FF%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=F5-FF%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=F5-FF%TG=FF%CD=S)

# Cisco Communications Manager 7.1.1
Fingerprint Cisco Unified Communications Manager VoIP adapter
Class Cisco | embedded || VoIP adapter
CPE cpe:/a:cisco:unified_communications_manager:7.1.1
SEQ(SP=FE-10A%GCD=1-6%ISR=104-112%TI=Z%CI=RD%II=I%TS=A)
OPS(O1=M564ST11NW2%O2=M564ST11NW2%O3=M564NNT11NW2%O4=M564ST11NW2%O5=M564ST11NW2%O6=M564ST11)
WIN(W1=16A0%W2=16A0%W3=16A0%W4=16A0%W5=16A0%W6=16A0)
ECN(R=N)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=Y%T=22-3C%TG=40%W=80%S=A%A=S%F=AR%O=WANM109T10S%RD=0%Q=)
T3(R=Y%DF=N%T=21-3D%TG=40%W=100%S=A%A=S%F=AR%O=WANM109T10S%RD=0%Q=)
T4(R=Y%DF=Y%T=1F-3E%TG=20|40%W=400%S=A%A=S%F=AR%O=WANM109T10S%RD=0%Q=)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=O%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=1E-3E%TG=20|40%W=8000%S=A%A=S%F=AR%O=WANM109T10S%RD=0%Q=)
T7(R=Y%DF=N%T=1E-3E%TG=20|40%W=FFFF%S=A%A=S%F=AR%O=WFNM109T10S%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# Cisco Unified Call Manager 7.1.3.32900-4
# UNITY Connection
Fingerprint Cisco Unified Communications Manager VoIP adapter
Class Cisco | embedded || VoIP adapter
CPE cpe:/h:cisco:unified_call_manager
SEQ(SP=C6-D0%GCD=1-6%ISR=C9-D3%TI=Z%II=I%TS=A)
OPS(O1=M5B4ST11NW2%O2=M5B4ST11NW2%O3=M5B4NNT11NW2%O4=M5B4ST11NW2%O5=M5B4ST11NW2%O6=M5B4ST11)
WIN(W1=16A0%W2=16A0%W3=16A0%W4=16A0%W5=16A0%W6=16A0)
ECN(R=N)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=N)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# Cisco VG248, Software version 1.3(2)ES3, DSP firmware version 3.6(25C)
Fingerprint Cisco VG248 Analog Phone Gateway
Class Cisco | embedded || VoIP adapter
SEQ(SP=0-1B%GCD=1-6%ISR=15-1F%TI=I%CI=I%II=I%SS=S%TS=U)
OPS(O1=%O2=%O3=%O4=%O5=%O6=)
WIN(W1=400%W2=400%W3=400%W4=400%W5=400%W6=400)
ECN(R=Y%DF=N%T=FA-104%TG=FF%W=400%O=%CC=N%Q=)
T1(R=Y%DF=N%T=FA-104%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=FA-104%TG=FF%W=400%S=O%A=S+%F=AS%O=%RD=0%Q=)
T4(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=Z%A=S%F=R%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=Z%A=S%F=R%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=FA-104%TG=FF%CD=S)

# 7936 Cisco IP Conference Station
# CISCO Unified IP Conference Station 7935. Polycom hardware with CISCO software.
Fingerprint Cisco 7935 or 7936 IP Conference Station VoIP phone
Class Cisco | embedded || VoIP phone
CPE cpe:/h:cisco:unified_ip_conference_station_7935
CPE cpe:/h:cisco:unified_ip_conference_station_7936
SEQ(SP=13-1D%GCD=FA00|1F400|2EE00|3E800|4E200%ISR=98-A2%TI=I%CI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4%O2=M5B4%O3=M5B4%O4=M5B4%O5=M5B4%O6=M5B4)
WIN(W1=1000%W2=1000%W3=1000%W4=1000%W5=1000%W6=1000)
ECN(R=N)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=3B-45%TG=40%W=1000%S=O%A=O%F=A%O=%RD=0%Q=)
T4(R=Y%DF=N%T=3B-45%TG=40%W=1000%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=Z%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Cisco IP Conference Station Model 7936
Fingerprint Cisco 7936 IP Conference Station VoIP phone
Class Cisco | embedded || VoIP phone
CPE cpe:/h:cisco:unified_ip_conference_station_7936
SEQ(SP=17-21%GCD=FA00|1F400|2EE00|3E800|4E200%ISR=9C-A6%TI=I%CI=I%II=I%SS=S%TS=U)
OPS(O1=M200%O2=M200%O3=M200%O4=M200%O5=M200%O6=M200)
WIN(W1=2000%W2=2000%W3=2000%W4=2000%W5=2000%W6=2000)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=2000%O=M200%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=3B-45%TG=40%W=2000%S=O%A=O%F=A%O=%RD=0%Q=)
T4(R=Y%DF=N%T=3B-45%TG=40%W=2000%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=Z%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Cisco CP-7936G
Fingerprint Cisco 7936G IP Conference Station VoIP phone
Class Cisco | embedded || VoIP phone
CPE cpe:/h:cisco:unified_ip_conference_station_7936g
SEQ(SP=14-1E%GCD=FA00|1F400|2EE00|3E800|4E200%ISR=99-A3%TI=I%CI=I%II=I%SS=S%TS=U)
OPS(O1=M200%O2=M200%O3=M200%O4=M200%O5=M200%O6=M200)
WIN(W1=1000%W2=1000%W3=1000%W4=1000%W5=1000%W6=1000)
ECN(R=N)
T1(R=Y%DF=N%T=3D-47%TG=40%S=O%A=S+%F=AS%RD=0)
T2(R=N)
T3(R=Y%DF=N%T=3D-47%TG=40%W=1000%S=O%A=O%F=A%RD=0)
T4(R=Y%DF=N%T=3D-47%TG=40%W=1000%S=A%A=Z%F=R%RD=0)
T5(R=Y%DF=N%T=3D-47%TG=40%W=0%S=Z%A=S+%F=AR%RD=0)
T6(R=Y%DF=N%T=3D-47%TG=40%W=0%S=A%A=Z%F=R%RD=0)
T7(R=Y%DF=N%T=3D-47%TG=40%W=0%S=Z%A=S%F=AR%RD=0)
U1(DF=N%T=3D-47%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=Z%RUCK=0%RUD=G)
IE(DFI=S%T=3D-47%TG=40%CD=S)

# Cisco CP 8945 Phone
Fingerprint Cisco CP 8945 VoIP phone
Class Cisco | embedded || VoIP phone
CPE cpe:/h:cisco:cp_8945 auto
SEQ(SP=C1-CF%GCD=1-6%ISR=C1-D9%TI=Z%CI=Z%II=I%TS=7)
OPS(O1=M5B0ST11NW2%O2=M5B0ST11NW2%O3=M5B0NNT11NW2%O4=M5B0ST11NW2%O5=M5B0ST11NW2%O6=M5B0ST11)
WIN(W1=1690%W2=1690%W3=1690%W4=1690%W5=1690%W6=1690)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=16C0%O=M5B0NNSNW2%CC=N)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0)
T2(R=N)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=1690%S=O%A=S+%F=AS%O=M5B0ST11NW2%RD=0)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%RD=0)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%RD=0)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%RD=0)
T7(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%RD=0)
U1(DF=N%T=3B-45%TG=40%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# Cisco CP 8945 Phone
Fingerprint Cisco CP 8945 VoIP phone
Class Cisco | embedded || VoIP phone
CPE cpe:/h:cisco:cp_8945 auto
SEQ(SP=F7-101%GCD=1-6%ISR=FA-104%TI=Z%TS=7)
OPS(O1=M564ST11NW4%O2=M564ST11NW4%O3=M564NNT11NW4%O4=M564ST11NW4%O5=M564ST11NW4%O6=M564ST11)
WIN(W1=16A0%W2=16A0%W3=16A0%W4=16A0%W5=16A0%W6=16A0)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=16D0%O=M564NNSNW4%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=O%A=S+%F=AR%O=%RD=0%Q=)
T6(R=N)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(R=N)

# Cisco CP-DX80
Fingerprint Cisco CP-DX80 collaboration endpoint (Android)
Class Cisco | embedded || VoIP phone
CPE cpe:/h:cisco:cp-dx80
Class Google | Android || VoIP phone
CPE cpe:/o:google:android auto
SEQ(SP=101-10B%GCD=1-6%ISR=101-10B%TI=Z%CI=Z%II=I%TS=7)
OPS(O1=M5B4ST11NW3%O2=M5B4ST11NW3%O3=M5B4NNT11NW3%O4=M5B4ST11NW3%O5=M5B4ST11NW3%O6=M5B4ST11)
WIN(W1=3890%W2=3890%W3=3890%W4=3890%W5=3890%W6=3890)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=3908%O=M5B4NNSNW3%CC=Y%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=O%F=AR%O=%RD=0%Q=)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# Cisco IP Phone 7941/7961 Phone,       uname -a reports:      CNU-OS  8.2(1.19) 3.3(0.2) CP-7941G BCM1100-C1(MIPS32)
# Cisco IP Phone 7941 Series
# Cisco IP Phone CP-7911G
# Cisco IP Phone CP-7970G, Version SCCP70.8-2-2SR2S
Fingerprint Cisco IP Phone (7911, 7941, 7961, or 7970)
Class Cisco | embedded || VoIP phone
CPE cpe:/h:cisco:unified_ip_phone_7911
CPE cpe:/h:cisco:unified_ip_phone_7941
CPE cpe:/h:cisco:unified_ip_phone_7961
CPE cpe:/h:cisco:unified_ip_phone_7970
SEQ(SP=FD-10B%GCD=1-8%ISR=101-111%TI=I%II=I%SS=S%TS=U)
OPS(O1=M578%O2=M578%O3=M578%O4=M578%O5=M578%O6=M578)
WIN(W1=2000%W2=2000%W3=2000%W4=2000%W5=2000%W6=2000)
ECN(R=N)
T1(R=Y%DF=N%T=1B-25%TG=20%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=1B-25%TG=20%W=2000%S=A%A=S%F=AR%O=%RD=0%Q=)
T5(R=Y%DF=N%T=1B-25%TG=20%W=2000%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=1B-25%TG=20%W=2000%S=A%A=S%F=AR%O=%RD=0%Q=)
T7(R=Y%DF=N%T=1B-25%TG=20%W=2000%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# Cisco IP telefon CP-6941
Fingerprint Cisco IP Phone 6941
Class Cisco | embedded || VoIP phone
SEQ(SP=100-10A%GCD=1-6%ISR=108-112%TI=I%TS=9)
OPS(O1=M5B0NW0NNT11%O2=M5B0NW0NNT11%O3=M5B0NW0NNT11%O4=M5B0NW0NNT11%O5=M5B0NW0NNT11%O6=M5B0NNT11)
WIN(W1=4000%W2=4000%W3=4000%W4=4000%W5=4000%W6=4000)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=4000%O=M5B0NW0%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=O%A=S+%F=AR%O=%RD=0%Q=)
T6(R=N)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=70%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(R=N)

# Cisco IP Phone 7910
Fingerprint Cisco IP Phone 7910
Class Cisco | embedded || VoIP phone
CPE cpe:/h:cisco:unified_ip_phone_7910
SEQ(SP=0-5%GCD=5800|B000|10800|16000|1B800%ISR=88-92%TI=I%II=I%SS=S%TS=U)
OPS(O1=M578%O2=M578%O3=M578%O4=M578%O5=M578%O6=M578)
WIN(W1=578%W2=578%W3=578%W4=578%W5=578%W6=578)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=578%O=M578%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=3B-45%TG=40%W=578%S=O%A=S+%F=AS%O=M578%RD=0%Q=)
T4(R=Y%DF=N%T=3B-45%TG=40%W=578%S=Z%A=O%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=578%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=578%S=A%A=S%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=578%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# Cisco IP Phone 7911
Fingerprint Cisco IP Phone 7911
Class Cisco | embedded || VoIP phone
CPE cpe:/h:cisco:unified_ip_phone_7911
SEQ(SP=E5-EF%GCD=C|18|24|30|3C%ISR=105-10F%TI=I%CI=I%II=I%SS=S%TS=U)
OPS(O1=M578%O2=M578%O3=M578%O4=M578%O5=M578%O6=M578)
WIN(W1=2000%W2=2000%W3=2000%W4=2000%W5=2000%W6=2000)
ECN(R=N)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=3B-45%TG=40%W=2000%S=A%A=S%F=AR%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=2000%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=2000%S=A%A=S%F=AR%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=2000%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# Cisco IP Phone 7911
Fingerprint Cisco IP Phone 7911
Class Cisco | embedded || VoIP phone
SEQ(SP=E1-EB%GCD=10|20|30|40|50%ISR=108-112%TI=I%CI=I%II=I%SS=S%TS=U)
OPS(O1=M53C%O2=M53C%O3=M53C%O4=M53C%O5=M53C%O6=M53C)
WIN(W1=2000%W2=2000%W3=2000%W4=2000%W5=2000%W6=2000)
ECN(R=N)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=3B-45%TG=40%W=2000%S=A%A=S%F=AR%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=2000%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=2000%S=A%A=S%F=AR%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=2000%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# Cisco IP Phone 7912 Series
Fingerprint Cisco IP Phone 7912-series
Class Cisco | embedded || VoIP phone
CPE cpe:/h:cisco:unified_ip_phone_7912
SEQ(SP=0-35%GCD=1000|2000|3000|4000|5000|B000|16000|21000|2C000|37000%ISR=90-9A%TI=I%CI=I%II=I%SS=S%TS=U)
OPS(O1=M5B0%O2=M5B0%O3=M5B0%O4=M5B0%O5=M5B0%O6=M5B0)
WIN(W1=578%W2=578%W3=578%W4=578%W5=578%W6=578)
ECN(R=Y%DF=N%T=F5-FF%TG=FF%W=578%O=M5B0%CC=N%Q=)
T1(R=Y%DF=N%T=F5-FF%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=F5-FF%TG=FF%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=F5-FF%TG=FF%W=578%S=O%A=S+%F=AS%O=M5B0%RD=0%Q=)
T4(R=Y%DF=N%T=F5-FF%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=F5-FF%TG=FF%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=F5-FF%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=F5-FF%TG=FF%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=F5-FF%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=F5-FF%TG=FF%CD=S)

# Cisco IP Phone 7912
Fingerprint Cisco IP Phone 7912-series
Class Cisco | embedded || VoIP phone
CPE cpe:/h:cisco:unified_ip_phone_7912
SEQ(CI=I%II=I%TS=U)
OPS(R=N)
WIN(R=N)
ECN(R=N)
T1(R=Y%DF=N%T=F5-FF%TG=FF%S=O%A=O|S+%F=A|AS%RD=0%Q=)
T2(R=Y%DF=N%T=F5-FF%TG=FF%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T3(R=N)
T4(R=Y%DF=N%T=F5-FF%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=F5-FF%TG=FF%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=F5-FF%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=F5-FF%TG=FF%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=F5-FF%TG=FF%IPL=38)
IE(R=N)

# Cisco IP Phone 7912G (SCCP) Software Version        6.01.00(051208A)
Fingerprint Cisco IP Phone 7912G
Class Cisco | embedded || VoIP phone
CPE cpe:/h:cisco:unified_ip_phone_7912g
SEQ(SP=FC-106%GCD=1-6%ISR=102-10C%TI=I%II=I%SS=S%TS=U)
OPS(O1=M564%O2=M564%O3=M564%O4=M564%O5=M564%O6=M564)
WIN(W1=578%W2=578%W3=578%W4=578%W5=578%W6=578)
ECN(R=Y%DF=N%T=F6-100%TG=FF%W=578%O=M564%CC=N%Q=)
T1(R=Y%DF=N%T=F6-100%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=Y%T=23-3D%TG=40%W=80%S=A%A=S%F=AR%O=WANM109T10S%RD=0%Q=)
T3(R=Y%DF=N%T=23-35%TG=40%W=100%S=A%A=S+%F=AR%O=WANM109T10S%RD=0%Q=)
T4(R=Y%DF=Y%T=21-2D|33-3E%TG=40%W=400%S=A%A=S%F=AR%O=WANM109T10S%RD=0%Q=)
T5(R=Y%DF=N%T=F6-100%TG=FF%W=0%S=O%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=21-3D%TG=40%W=8000%S=A%A=S%F=AR%O=WANM109T10S%RD=0%Q=)
T7(R=Y%DF=N%T=2B-3F%TG=40%W=FFFF%S=A%A=S+%F=AR%O=WFNM109T10S%RD=0%Q=)
U1(DF=N%T=F6-100%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=F6-100%TG=FF%CD=S)

# Cisco IP Phone 7941
Fingerprint Cisco IP Phone 7941
Class Cisco | embedded || VoIP phone
CPE cpe:/h:cisco:unified_ip_phone_7941
SEQ(SP=101-10B%GCD=1-6%ISR=107-111%TI=I%II=I%SS=S%TS=U)
OPS(O1=M564%O2=M564%O3=M564%O4=M564%O5=M564%O6=M564)
WIN(W1=2000%W2=2000%W3=2000%W4=2000%W5=2000%W6=2000)
ECN(R=N)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=O|S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=Y%DF=N%T=3B-45%TG=40%W=2000%S=O%A=S+%F=AR%O=%RD=0%Q=)
T6(R=N)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# Cisco 7941 phone running SIP firmware 8.3(3)SR2
# Cisco CP-7961G-GE, SCCP41.8-3-3SR2S
# Cisco CP-7941G, SCCP41.8-3-4SR1S
# Cisco IP Phone 7975
# Cisco Unified IP Phone 7965G, Global, Gig Ethernet, Color, Version         SCCP45.8-5-2SR1S
Fingerprint Cisco IP Phone 7941, 7961, 7965G, or 7975
Class Cisco | embedded || VoIP phone
CPE cpe:/h:cisco:unified_ip_phone_7941
CPE cpe:/h:cisco:unified_ip_phone_7961
CPE cpe:/h:cisco:unified_ip_phone_7965g
CPE cpe:/h:cisco:unified_ip_phone_7975
CPE cpe:/h:cisco:unified_ip_phone
SEQ(SP=C9-109%GCD=1-6%ISR=FE-112%TI=I%CI=I%II=I%SS=S%TS=U)
OPS(O1=M578%O2=M578%O3=M578%O4=M578%O5=M578%O6=M578)
WIN(W1=2000%W2=2000%W3=2000%W4=2000%W5=2000%W6=2000)
ECN(R=N)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=3B-45%TG=40%W=2000%S=A%A=S%F=AR%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=2000%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=2000%S=A%A=S%F=AR%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=2000%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# Cisco Unified IP Phone 7942G Version         SCCP42.8-5-2SR1S
Fingerprint Cisco IP Phone 7942G
Class Cisco | embedded || VoIP phone
CPE cpe:/h:cisco:unified_ip_phone_7942g
SEQ(SP=F6-10A%GCD=1-6%ISR=105-10F%TI=I%II=I%SS=S%TS=U)
OPS(O1=M546%O2=M546%O3=M546%O4=M546%O5=M546%O6=M546)
WIN(W1=2000%W2=2000%W3=2000%W4=2000%W5=2000%W6=2000)
ECN(R=N)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=Y%DF=N%T=3B-45%TG=40%W=2000%S=Z%A=S+%F=AR%RD=0)
T6(R=N)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# Cisco Unified IP Phone CP-7942G
Fingerprint Cisco IP Phone 7942G
Class Cisco | embedded || VoIP phone
CPE cpe:/h:cisco:unified_ip_phone_7942g
SEQ(SP=D5-DF%GCD=20|40|60|80|A0%ISR=103-10D%TI=I%CI=I%II=I%SS=S%TS=U)
OPS(O1=M578%O2=M578%O3=M578%O4=M578%O5=M578%O6=M578)
WIN(W1=2000%W2=2000%W3=2000%W4=2000%W5=2000%W6=2000)
ECN(R=N)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=3B-45%TG=40%W=2000%S=A%A=S%F=AR%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=2000%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=2000%S=A%A=S%F=AR%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=2000%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# Cisco 7945 phone
Fingerprint Cisco IP Phone 7945
Class Cisco | embedded || VoIP phone
CPE cpe:/h:cisco:unified_ip_phone_7945
SEQ(SP=AD-103%GCD=10|20|30|40|50|400|800|C00|1000|1400%ISR=FA-112%TI=I%CI=I%II=I%SS=S%TS=U)
OPS(O1=M488%O2=M488%O3=M488%O4=M488%O5=M488%O6=M488)
WIN(W1=2000%W2=2000%W3=2000%W4=2000%W5=2000%W6=2000)
ECN(R=N)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=3B-45%TG=40%W=2000%S=A%A=S%F=AR%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=2000%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=2000%S=A%A=S%F=AR%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=2000%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# Cisco Unified IP Phone CP-7945G
Fingerprint Cisco IP Phone 7945G
Class Cisco | embedded || VoIP phone
CPE cpe:/h:cisco:unified_ip_phone_7945g
SEQ(SP=FC-106%GCD=1-6%ISR=10A-114%TI=I%CI=I%II=I%SS=O%TS=U)
OPS(O1=M53C%O2=M53C%O3=M53C%O4=M53C%O5=M53C%O6=M53C)
WIN(W1=2000%W2=2000%W3=2000%W4=2000%W5=2000%W6=2000)
ECN(R=N)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=3B-45%TG=40%W=2000%S=A%A=S%F=AR%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=2000%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=2000%S=A%A=S%F=AR%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=2000%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# Cisco Unified IP Phone 7961G Version 9.3(1.1S)
Fingerprint Cisco IP Phone 7961G
Class Cisco | embedded || VoIP phone
CPE cpe:/h:cisco:unified_ip_phone_7961g
SEQ(SP=FA-104%GCD=1-6%ISR=102-10C%TI=I%II=I%SS=S%TS=U)
OPS(O1=M53C%O2=M53C%O3=M53C%O4=M53C%O5=M53C%O6=M53C)
WIN(W1=2000%W2=2000%W3=2000%W4=2000%W5=2000%W6=2000)
ECN(R=N)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=Y%DF=N%T=3B-45%TG=40%W=2000%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=N)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# Cisco IP Phone CP-7961G Version  7.0(3.0S)
Fingerprint Cisco IP Phone 7961G
Class Cisco | embedded || VoIP phone
CPE cpe:/h:cisco:unified_ip_phone_7961g
SEQ(SP=101-10B%GCD=1-6%ISR=105-10F%TI=I%CI=I%II=I%SS=S%TS=U)
OPS(O1=M578%O2=M578%O3=M578%O4=M578%O5=M578%O6=M578)
WIN(W1=2000%W2=2000%W3=2000%W4=2000%W5=2000%W6=2000)
ECN(R=Y%DF=N%T=1B-25%TG=20%W=2000%O=M578%CC=N%Q=)
T1(R=Y%DF=N%T=1B-25%TG=20%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=1B-25%TG=20%W=2000%S=A%A=S%F=AR%O=%RD=0%Q=)
T5(R=Y%DF=N%T=1B-25%TG=20%W=2000%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=1B-25%TG=20%W=2000%S=A%A=S%F=AR%O=%RD=0%Q=)
T7(R=Y%DF=N%T=1B-25%TG=20%W=2000%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# Cisco CP-7971G-GE
Fingerprint Cisco IP Phone 7971G-GE
Class Cisco | embedded || VoIP phone
CPE cpe:/h:cisco:unified_ip_phone_7971g-ge
SEQ(SP=FC-106%GCD=1-6%ISR=FE-108%TI=I%CI=I%II=I%SS=S%TS=U)
OPS(O1=M550%O2=M550%O3=M550%O4=M550%O5=M550%O6=M550)
WIN(W1=2000%W2=2000%W3=2000%W4=2000%W5=2000%W6=2000)
ECN(R=N)
T1(R=Y%DF=N%T=3D-47%TG=40%S=O%A=S+%F=AS%RD=0)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=3D-47%TG=40%W=2000%S=A%A=S%F=AR%RD=0)
T5(R=Y%DF=N%T=3D-47%TG=40%W=2000%S=Z%A=S+%F=AR%RD=0)
T6(R=Y%DF=N%T=3D-47%TG=40%W=2000%S=A%A=S%F=AR%RD=0)
T7(R=Y%DF=N%T=3D-47%TG=40%W=2000%S=Z%A=S+%F=AR%RD=0)
U1(DF=N%T=3D-47%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3D-47%TG=40%CD=S)

# Cisco Unified IP Phone CP-7975G
Fingerprint Cisco IP Phone 7975G
Class Cisco | embedded || VoIP phone
CPE cpe:/h:cisco:unified_ip_phone_7975g
SEQ(SP=FC-106%GCD=1-6%ISR=108-112%TI=I%CI=I%II=I%SS=S%TS=U)
OPS(O1=M53C%O2=M53C%O3=M53C%O4=M53C%O5=M53C%O6=M53C)
WIN(W1=2000%W2=2000%W3=2000%W4=2000%W5=2000%W6=2000)
ECN(R=N)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=3B-45%TG=40%W=2000%S=A%A=S%F=AR%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=2000%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=2000%S=A%A=S%F=AR%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=2000%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# Cisco IP Phone CP-8945
Fingerprint Cisco IP Phone 8945
Class Cisco | embedded || VoIP phone
CPE cpe:/h:cisco:unified_ip_phone_8945
SEQ(SP=C3-CD%GCD=1-6%ISR=C5-CF%TI=I%CI=Z%II=I%SS=S%TS=7)
OPS(O1=M5B4ST11NW4%O2=M5B4ST11NW4%O3=M5B4NNT11NW4%O4=M5B4ST11NW4%O5=M5B4ST11NW4%O6=M5B4ST11)
WIN(W1=16A0%W2=16A0%W3=16A0%W4=16A0%W5=16A0%W6=16A0)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=16D0%O=M5B4NNSNW4%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=3B-45%TG=40%W=16A0%S=O%A=S+%F=AS%O=M5B4ST11NW4%RD=0%Q=)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# Cisco IP Phone 8961, Version: sip8961.9-4-1MN-49
Fingerprint Cisco IP Phone 8961
Class Cisco | embedded || VoIP phone
SEQ(SP=DF-E9%GCD=1-6%ISR=DE-E8%TI=I%CI=Z%II=I%SS=S%TS=7)
OPS(O1=M5B4ST11NW1%O2=M5B4ST11NW1%O3=M5B4NNT11NW1%O4=M5B4ST11NW1%O5=M5B4ST11NW1%O6=M5B4ST11)
WIN(W1=16A0%W2=16A0%W3=16A0%W4=16A0%W5=16A0%W6=16A0)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=16D0%O=M5B4NNSNW1%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=3B-45%TG=40%W=16A0%S=O%A=S+%F=AS%O=M5B4ST11NW1%RD=0%Q=)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# Cisco IP Phone CP-9951 ( SEP3C0E236D7785 )
# Cisco Unified IP 9971
Fingerprint Cisco IP Phone 9951 or 9971
Class Cisco | embedded || VoIP phone
SEQ(SP=E0-EA%GCD=1-6%ISR=DF-E9%TI=I%CI=Z%II=I%SS=S%TS=7)
OPS(O1=M5B4ST11NW2%O2=M5B4ST11NW2%O3=M5B4NNT11NW2%O4=M5B4ST11NW2%O5=M5B4ST11NW2%O6=M5B4ST11)
WIN(W1=16A0%W2=16A0%W3=16A0%W4=16A0%W5=16A0%W6=16A0)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=16D0%O=M5B4NNSNW2%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=3B-45%TG=40%W=16A0%S=O%A=S+%F=AS%O=M5B4ST11NW2%RD=0%Q=)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# Cisco CP-7970G running software SCCP70.8-2-2SR1S
Fingerprint Cisco IP Phone CP-7970G
Class Cisco | embedded || VoIP phone
CPE cpe:/h:cisco:unified_ip_phone_7970g
SEQ(SP=C9-DB%GCD=40|80|C0|100|140%ISR=102-10C%TI=I%II=I%SS=S%TS=U)
OPS(O1=M578%O2=M578%O3=M578%O4=M578%O5=M578%O6=M578)
WIN(W1=2000%W2=2000%W3=2000%W4=2000%W5=2000%W6=2000)
ECN(R=N)
T1(R=Y%DF=N%T=1B-25%TG=20%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=1B-25%TG=20%W=2000%S=A%A=S%F=AR%O=%RD=0%Q=)
T5(R=Y%DF=N%T=1B-25%TG=20%W=2000%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=1B-25%TG=20%W=2000%S=A%A=S%F=AR%O=%RD=0%Q=)
T7(R=Y%DF=N%T=1B-25%TG=20%W=2000%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# Cisco SPA303 VoIP phone
Fingerprint Cisco SPA 303 VoIP phone
Class Cisco | embedded || VoIP phone
CPE cpe:/h:cisco:spa303_3-line_ip_phone_with_2-port_switch
SEQ(SP=EF-F9%GCD=1-6%ISR=104-10E%TI=RD%II=I%TS=22)
OPS(O1=M5B4NNSNW3NNT11%O2=M5B4NNSNW3NNT11%O3=M5B4NW3NNT11%O4=M5B4NNSNW3NNT11%O5=M5B4NNSNW3NNT11%O6=M5B4NNSNNT11)
WIN(W1=4000%W2=4000%W3=4000%W4=4000%W5=4000%W6=4000)
ECN(R=Y%DF=Y%T=3C-46%TG=40%W=4000%O=M5B4NNSNW3%CC=N%Q=)
T1(R=Y%DF=Y%T=3C-46%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=N)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=Z%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# *** Ethernet Routing Switch 5520-48T-PWR                    ***
# *** BOSS 5.0 SSH                                            ***
# *** HW:31       FW:5.0.0.2   SW:v5.0.0.011                  ***
# Nortel v5.0.1.0 Ethernet routing switch
# Sun StorageTek 6140 Array
# CISCO IP PHONE 303 (SPA303) SW.version: 7.4.8a
Fingerprint Cisco SPA 303 VoIP phone, Nortel 5520 Ethernet Routing Switch, or Sun StorageTek 6140 NAS device
Class Cisco | embedded || VoIP phone
CPE cpe:/h:cisco:spa303_3-line_ip_phone_with_2-port_switch
Class Nortel | embedded || switch
CPE cpe:/h:nortel:ethernet_routing_switch_5520
Class Sun | embedded || storage-misc
CPE cpe:/h:sun:storagetek_6140 auto
SEQ(SP=95-9F%GCD=1-6%ISR=9B-A5%TI=I%II=I%SS=S%TS=1)
OPS(O1=M5B4NW0NNT11%O2=M5B4NW0NNT11%O3=M5B4NW0NNT11%O4=M5B4NW0NNT11%O5=M5B4NW0NNT11%O6=M5B4NNT11)
WIN(W1=2000%W2=2000%W3=2000%W4=2000%W5=2000%W6=2000)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=2000%O=M5B4NW0%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=3B-45%TG=40%W=2000%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=Z%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# SPA 502G
Fingerprint Cisco SPA 502G VoIP phone
Class Cisco | embedded || VoIP phone
CPE cpe:/h:cisco:small_business_ip_phone:spa505g
SEQ(SP=100-10A%GCD=1-6%ISR=106-110%TI=I%II=I%SS=S%TS=1)
OPS(O1=M5B4NW0NNT11%O2=M578NW0NNT11%O3=M280NW0NNT11%O4=M22CNW0NNT11%O5=M218NW0NNT11%O6=M109NNT11)
WIN(W1=2000%W2=2000%W3=2000%W4=2000%W5=2000%W6=2000)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=2000%O=M5B4NW0%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=N)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=Z%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Cisco CP-6921
Fingerprint Cisco Unified IP Phone 6921
Class Cisco | embedded || VoIP phone
CPE cpe:/h:cisco:unified_ip_phone_6921
SEQ(SP=FA-10C%GCD=1-6%ISR=107-111%TI=I%CI=I%II=I%SS=S%TS=9)
OPS(O1=M5B0NW0NNT11%O2=M5B0NW0NNT11%O3=M5B0NW0NNT11%O4=M5B0NW0NNT11%O5=M5B0NW0NNT11%O6=M5B0NNT11)
WIN(W1=4000%W2=4000%W3=4000%W4=4000%W5=4000%W6=4000)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=4000%O=M5B0NW0%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=3B-45%TG=40%W=4000%S=O%A=S+%F=AS%O=M5B0NW0NNT11%RD=0%Q=)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=70%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Cisco IP Phone 7905G, SIP Firmware 8.0.0
# Cisco IP Phone 7960 series phone
# Cisco ATA phone adapter
Fingerprint Cisco Unified IP Phone 7905G or 7960
Class Cisco | embedded || VoIP phone
CPE cpe:/h:cisco:unified_ip_phone_7905g
CPE cpe:/h:cisco:unified_ip_phone_7960
SEQ(SP=0-1B%GCD=1000|2000|3000|4000|5000%ISR=90-9A%TI=I%II=I%SS=S%TS=U)
OPS(O1=M5B0%O2=M5B0%O3=M5B0%O4=M5B0%O5=M5B0%O6=M5B0)
WIN(W1=3E80%W2=3E80%W3=3E80%W4=3E80%W5=3E80%W6=3E80)
ECN(R=Y%DF=N%T=F5-FF%TG=FF%W=3E80%O=M5B0%CC=N%Q=)
T1(R=Y%DF=N%T=F5-FF%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=F5-FF%TG=FF%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=F5-FF%TG=FF%W=3E80%S=O%A=O|S+%F=A|AS%O=|M5B0%RD=0%Q=)
T4(R=Y%DF=N%T=F5-FF%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=F5-FF%TG=FF%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=F5-FF%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=F5-FF%TG=FF%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=F5-FF%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=F5-FF%TG=FF%CD=S)

# CP-7924G
Fingerprint Cisco Unified IP Phone 7942G
Class Cisco | embedded || VoIP phone
CPE cpe:/h:cisco:unified_ip_phone_7924g
SEQ(SP=FD-107%GCD=1-6%ISR=104-10E%TI=I%CI=I%II=I%SS=S%TS=U)
OPS(O1=M4E2%O2=M4E2%O3=M4E2%O4=M4E2%O5=M4E2%O6=M4E2)
WIN(W1=2000%W2=2000%W3=2000%W4=2000%W5=2000%W6=2000)
ECN(R=N)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=3B-45%TG=40%W=2000%S=A%A=S%F=AR%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=2000%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=2000%S=A%A=S%F=AR%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=2000%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

Fingerprint Cisco Unified IP Phone 7960
Class Cisco | embedded || VoIP phone
CPE cpe:/h:cisco:unified_ip_phone_7960
SEQ(SP=102-10C%GCD=1-6%ISR=104-10E%TI=I%II=I%SS=S%TS=U)
OPS(O1=M578%O2=M578%O3=M578%O4=M578%O5=M578%O6=M578)
WIN(W1=578%W2=578%W3=578%W4=578%W5=578%W6=578)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=578%O=M578%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=3B-45%TG=40%W=578%S=O%A=S+%F=AS%O=M578%RD=0%Q=)
T4(R=Y%DF=N%T=3B-45%TG=40%W=578%S=Z%A=O%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=578%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=578%S=A%A=S%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=578%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# model 7925G
Fingerprint Cisco Unified Wireless IP Phone 7925G
Class Cisco | embedded || VoIP phone
SEQ(SP=BD-C7%GCD=1-6%ISR=C0-CA%TI=Z%CI=Z%II=I%TS=7)
OPS(O1=M514ST11NW0%O2=M514ST11NW0%O3=M514NNT11NW0%O4=M514ST11NW0%O5=M514ST11NW0%O6=M514ST11)
WIN(W1=16A0%W2=16A0%W3=16A0%W4=16A0%W5=16A0%W6=16A0)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=16D0%O=M514NNSNW0%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=16A0%S=O%A=S+%F=AS%O=M514ST11NW0%RD=0%Q=)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# Cisco 3802 WAP
Fingerprint Cisco Aironet 3800-series WAP
Class Cisco | embedded || WAP
SEQ(SP=102-10C%GCD=1-6%ISR=104-10E%TI=Z%CI=RI%TS=7)
OPS(O1=M5B4NNT11NW7%O2=M5B4NNT11NW7%O3=M5B4NNT11NW7%O4=M5B4NNT11NW7%O5=M5B4NNT11NW7%O6=M5B4NNT11)
WIN(W1=7120%W2=7120%W3=7120%W4=7120%W5=7120%W6=7120)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=7210%O=M5B4NW7%CC=Y%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=FA-104%TG=FF%W=80%S=Z%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=FA-104%TG=FF%W=100%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T4(R=Y%DF=N%T=FA-104%TG=FF%W=400%S=A%A=S%F=AR%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=O%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=8000%S=A%A=S%F=AR%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FA-104%TG=FF%W=FFFF%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(R=N)
IE(R=N)

# Cisco Small Business RV110W Wireless-N VPN Firewall, Firmware Version: 1.2.0.9
Fingerprint Cisco RV110W Wireless-N VPN Firewall
Class Cisco | embedded || WAP
SEQ(SP=CB-D5%GCD=1-6%ISR=EB-F5%TI=Z%CI=Z%TS=7)
OPS(O1=M5B4ST11NW1%O2=M5B4ST11NW1%O3=M5B4NNT11NW1%O4=M5B4ST11NW1%O5=M5B4ST11NW1%O6=M5B4ST11)
WIN(W1=16A0%W2=16A0%W3=16A0%W4=16A0%W5=16A0%W6=16A0)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=16D0%O=M5B4NNSNW1%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# ASR1002 IOS XE 2.6.2
# SOL-AKL1006-B bootflash:/asr1000rp1-advipservicesk9.03.02.00.S.151-1.S.bin
Fingerprint Cisco ASR 1002 router
Class Cisco | IOS XE | 2.X | router
CPE cpe:/h:cisco:asr_1002_router
CPE cpe:/o:cisco:ios_xe:2 auto
SEQ(SP=F2-10A%GCD=1-6%ISR=FC-10E%TI=RD%CI=RD%II=RI%TS=U)
OPS(O1=M218%O2=M218%O3=M218%O4=M218%O5=M218%O6=M109)
WIN(W1=1020%W2=1020%W3=1020%W4=1020%W5=1020%W6=1020)
ECN(R=Y%DF=N%T=FB-105%TG=FF%W=1020%O=M218%CC=N%Q=)
T1(R=Y%DF=N%T=FB-105%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=FB-105%TG=FF%W=1020%S=O%A=S+%F=AS%O=M109%RD=0%Q=)
T4(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FB-105%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=FB-105%TG=FF%CD=S)

# Cisco IOS XR Software, Version 3.4.1[00]
# Cisco IOS XR Software, Version 3.6.2[00] cisco CRS-16/S (7457) processor
Fingerprint Cisco CRS-1 router (IOS XR 3.4.1 - 3.6.2)
Class Cisco | IOS XR | 3.X | router
CPE cpe:/o:cisco:ios_xr:3 auto
SEQ(SP=F9-109%GCD=1-6%ISR=100-110%TI=Z%II=RI%TS=U)
OPS(O1=M4D8W0L%O2=M4D8W0L%O3=M280W0L%O4=M218W0L%O5=M218W0L%O6=M109)
WIN(W1=4000%W2=4000%W3=4000%W4=4000%W5=4000%W6=4000)
ECN(R=Y%DF=N%T=FA-104%TG=FF%W=4000%O=M4D8W0L%CC=N%Q=)
T1(R=Y%DF=N%T=FA-104%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# Cisco IOS XR 4.1.1
Fingerprint Cisco IOS XR 4.1.1
Class Cisco | IOS XR | 4.X | router
CPE cpe:/o:cisco:ios_xr:4.1.1 auto
SEQ(CI=I%II=RI%TS=U)
OPS(O1=M5B4W0L%O2=M578W0L%O3=M280W0L%O4=M4D8W0L%O5=M218W0L%O6=M109)
WIN(W1=4000%W2=4000%W3=4000%W4=4000%W5=4000%W6=4000)
ECN(R=Y%DF=N%T=FB-105%TG=FF%W=4000%O=M5B4W0L%CC=N)
T1(R=Y%DF=N%T=FB-105%TG=FF%S=O%A=S+%F=AS%RD=0)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=Z%F=R%RD=0)
T5(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=Z%A=S+%F=AR%RD=0)
T6(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=Z%F=R%RD=0)
T7(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=Z%A=S+%F=AR%RD=0)
U1(DF=N%T=FB-105%TG=FF%IPL=60%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=FB-105%TG=FF%CD=S)

# Cisco IOS XR Software, Version 5.1.2
Fingerprint Cisco IOS XR 5.1.2
Class Cisco | IOS XR | 5.X | router
CPE cpe:/o:cisco:ios_xr:5.1.2 auto
SEQ(CI=I%II=RI%TS=U)
OPS(O1=M4D8W0L%O2=M4D8W0L%O3=M280W0L%O4=M4D8W0L%O5=M218W0L%O6=M109)
WIN(W1=4000%W2=4000%W3=4000%W4=4000%W5=4000%W6=4000)
ECN(R=Y%DF=N%T=FA-104%TG=FF%W=4000%O=M4D8W0L%CC=N%Q=)
T1(R=Y%DF=N%T=FA-104%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=60%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# Cisco 2500 (68030) IGS-I-L, Version 11.1(24)
Fingerprint Cisco 2500 router (IOS 11.1)
Class Cisco | IOS | 11.X | router
CPE cpe:/h:cisco:2500_router
CPE cpe:/o:cisco:ios:11.1
SEQ(SP=3B-51%GCD=1-6%ISR=9A-A4%TI=Z%II=RI%TS=U)
OPS(O1=M218%O2=M218%O3=M218%O4=M218%O5=M218%O6=M218)
WIN(W1=860%W2=860%W3=860%W4=860%W5=860%W6=860)
ECN(R=Y%DF=N%T=FB-105%TG=FF%W=860%O=M218%CC=N%Q=)
T1(R=Y%DF=N%T=FB-105%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=Z%A=O|S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=FB-105%TG=FF%W=860%S=O%A=S+%F=AS%O=M218%RD=0%Q=)
T4(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=Z%A=O|S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FB-105%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=FB-105%TG=FF%CD=S)

# IOS (tm) C2600 Software (C2600-IS-M), Version 11.3(4)T1,  RELEASE SOFTWARE (fc1)
Fingerprint Cisco 2600 router (IOS 11.3)
Class Cisco | IOS | 11.X | router
CPE cpe:/h:cisco:2600_router
CPE cpe:/o:cisco:ios:11.3
SEQ(SP=5C-66%GCD=1-6%ISR=9A-A4%TI=Z%II=RI%TS=U)
OPS(O1=M5B4%O2=M5B4%O3=M5B4%O4=M5B4%O5=M5B4%O6=M5B4)
WIN(W1=1020%W2=1020%W3=1020%W4=1020%W5=1020%W6=1020)
ECN(R=Y%DF=N%T=FB-105%TG=FF%W=1020%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=FB-105%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=S+%F=AR%O=%RD=0%Q=)
T6(R=N)
T7(R=N)
U1(DF=N%T=FB-105%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=FB-105%TG=FF%CD=S)

# Cisco Internetwork Operating System Software  IOS (tm) C2900XL Software (C2900XL-H-M), Version 11.2(8)SA5, RELEASE SOFTWARE (fc1)
# IOS (tm) C2900XL Software (C2900XL-HS-M), Version 11.2(8.11)SA6, MAINTENANCE INTERIM SOFTWARE
Fingerprint Cisco 2900XL switch (IOS 11.2)
Class Cisco | IOS | 11.X | switch
CPE cpe:/h:cisco:catalyst_2900xl
CPE cpe:/o:cisco:ios:11.2
SEQ(SP=64-94%GCD=1-6%ISR=9A-A4%TI=Z%II=RI%TS=U)
OPS(O1=M5B4%O2=M5B4%O3=M5B4%O4=M5B4%O5=M5B4%O6=M5B4)
WIN(W1=10C0%W2=10C0%W3=10C0%W4=10C0%W5=10C0%W6=10C0)
ECN(R=Y%DF=N%T=FA-104%TG=FF%W=10C0%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=FA-104%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=O|S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=FA-104%TG=FF%W=10C0%S=O%A=S+%F=AS%O=M5B4%RD=0%Q=)
T4(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=O|S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# IOS (tm) C2900XL Software (C2900XL-HS-M), Version 11.2(8.6)SA6
Fingerprint Cisco 2900XL switch (IOS 11.2)
Class Cisco | IOS | 11.X | switch
CPE cpe:/h:cisco:catalyst_2900xl
CPE cpe:/o:cisco:ios:11.2
SEQ(SP=3F-8D%GCD=1-6%ISR=9A-A4%TI=Z%II=RI%TS=U)
OPS(O1=M218%O2=M218%O3=M218%O4=M218%O5=M218%O6=M218)
WIN(W1=10C0%W2=10C0%W3=10C0%W4=10C0%W5=10C0%W6=10C0)
ECN(R=Y%DF=N%T=FA-104%TG=FF%W=10C0%O=M218%CC=N%Q=)
T1(R=Y%DF=N%T=FA-104%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=O%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=FA-104%TG=FF%W=10C0%S=O%A=S+%F=AS%O=M218%RD=0%Q=)
T4(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# Cisco WS-C3512-XL
# Cisco IOS (tm) C3500XL Software (C3500XL-C3H2S-M), Version 12.0(5)WC10
# IOS (tm) C2900XL Software (C2900XL-C3H2S-M), Version 12.0(5)WC17, RELEASE SOFTWARE (fc1)
# IOS (tm) C3500XL Software (C3500XL-C3H2S-M), Version 12.0(5)WC17, RELEASE SOFTWARE (fc1)
# Cisco 3548XL switch, IOS 12.0(5)WC16 Enterprise Edition
# IOS (tm) C2600 Software (C2600-I-M), Version 11.3(11b)T5,  RELEASE SOFTWARE (fc1)
# IOS (tm) C2950 Software (C2950-C3H2S-M), Version 12.0(5.3)WC(1)
Fingerprint Cisco Catalyst 2600-, 2900- or 3500 XL-series switch (IOS 11.3 - 12.0)
Class Cisco | IOS | 11.X | switch
CPE cpe:/h:cisco:catalyst_2600
CPE cpe:/o:cisco:ios:11 auto
Class Cisco | IOS | 12.X | switch
CPE cpe:/h:cisco:catalyst_2900
CPE cpe:/h:cisco:catalyst_3500_xl
CPE cpe:/o:cisco:ios:12 auto
SEQ(SP=ED-10B%GCD=1-6%ISR=102-10E%TI=Z%II=RI%TS=U)
OPS(O1=M5B4%O2=M5B4%O3=M5B4%O4=M5B4%O5=M5B4%O6=M5B4)
WIN(W1=1020%W2=1020%W3=1020%W4=1020%W5=1020%W6=1020)
ECN(R=Y%DF=N%T=FA-104%TG=FF%W=1020%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=FA-104%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=FA-104%TG=FF%W=1020%S=O%A=S+%F=AS%O=M5B4%RD=0%Q=)
T4(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# Cisco IOS Software, SOHO97 Software (SOHO97-K9OY1-M), Version 12.4(25a)
Fingerprint Cisco SOHO 97 ADSL router
Class Cisco | IOS | 12.X | broadband router
CPE cpe:/o:cisco:ios:12 auto
SEQ(SP=FD-109%GCD=1-6%ISR=102-10C%TI=RD%CI=RD%II=RI%TS=A)
OPS(O1=M5B4SNNT11LL%O2=M578SNNT11LL%O3=M280T11LL%O4=M218SNNT11LL%O5=M218SNNT11LL%O6=M109SNNT11LL)
WIN(W1=1020%W2=1020%W3=1020%W4=1020%W5=1020%W6=1020)
ECN(R=Y%DF=N%T=FB-105%TG=FF%W=1020%O=M5B4SLL%CC=N%Q=)
T1(R=Y%DF=N%T=FB-105%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FB-105%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=FB-105%TG=FF%CD=S)

# Cisco ubr10012 DOCSIS router
Fingerprint Cisco uBR10012 broadband router
Class Cisco | IOS | 12.X | broadband router
CPE cpe:/o:cisco:ios:12 auto
SEQ(SP=100-10A%GCD=1-6%ISR=103-10D%TI=RD%CI=RD%II=RI%TS=U)
OPS(O1=M5B4%O2=M578%O3=M280%O4=M218%O5=M218%O6=M109)
WIN(W1=1020%W2=1020%W3=1020%W4=1020%W5=1020%W6=1020)
ECN(R=Y%DF=Y%T=FB-105%TG=FF%W=1020%O=M5B4%CC=N%Q=)
T1(R=Y%DF=Y%T=FB-105%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%T=FB-105%TG=FF%W=1020%S=O%A=S+%F=AS%O=M109%RD=0%Q=)
T4(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FB-105%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=FB-105%TG=FF%CD=S)

# IOS (tm) 10000 Software (UBR10K2-K8P6U2-M), Version 12.3(23)BC4
Fingerprint Cisco 10000 router (IOS 12.3)
Class Cisco | IOS | 12.X | router
CPE cpe:/h:cisco:10000_router
CPE cpe:/o:cisco:ios:12.3
SEQ(SP=F9-109%GCD=1-6%ISR=FF-10F%TI=Z%CI=I%II=RI%TS=U)
OPS(O1=M5B4%O2=M578%O3=M280%O4=M5B4%O5=M218%O6=M109)
WIN(W1=1020%W2=1020%W3=1020%W4=1020%W5=1020%W6=1020)
ECN(R=Y%DF=N%T=FB-105%TG=FF%W=1020%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=FB-105%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FB-105%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=FB-105%TG=FF%CD=S)

# IOS (tm) 1600 Software (C1600-Y-M), Version 12.0(3), RELEASE SOFTWARE (fc1)
Fingerprint Cisco 1600 router (IOS 12.0)
Class Cisco | IOS | 12.X | router
CPE cpe:/o:cisco:ios:12.0 auto
SEQ(SP=6C-76%GCD=1-6%ISR=9A-A4%TI=Z%CI=I%II=RI%TS=U)
OPS(O1=M5B4%O2=M5B4%O3=M5B4%O4=M5B4%O5=M5B4%O6=M5B4)
WIN(W1=1020%W2=1020%W3=1020%W4=1020%W5=1020%W6=1020)
ECN(R=Y%DF=N%T=FB-105%TG=FF%W=1020%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=FB-105%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=FB-105%TG=FF%W=1020%S=O%A=S+%F=AS%O=M5B4%RD=0%Q=)
T4(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FB-105%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=FB-105%TG=FF%CD=S)

# IOS (tm) C1700 Software (C1700-BNR2SY-M), Version 12.0(0.18)PI, BETA TEST SOFTWARE
Fingerprint Cisco 1700 router (IOS 12.0)
Class Cisco | IOS | 12.X | router
CPE cpe:/h:cisco:router_1700
CPE cpe:/o:cisco:ios:12.0
SEQ(SP=33-5D%GCD=1-6%ISR=9A-A4%TI=Z%II=RI%TS=U)
OPS(O1=M5B4%O2=M5B4%O3=M5B4%O4=M5B4%O5=M5B4%O6=M5B4)
WIN(W1=1020%W2=1020%W3=1020%W4=1020%W5=1020%W6=1020)
ECN(R=Y%DF=N%T=FA-104%TG=FF%W=1020%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=FA-104%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=FA-104%TG=FF%W=1020%S=O%A=S+%F=AS%O=M5B4%RD=0%Q=)
T4(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# Cisco 3640 IOS ver 12.4.12
# Cisco 1812 router
# Cisco IOS Software, 3700 Software (C3725-ADVENTERPRISEK9-M), Version 12.4(7), RELEASE SOFTWARE (fc6)
Fingerprint Cisco 1812, 3640, or 3700 router (IOS 12.4)
Class Cisco | IOS | 12.X | router
CPE cpe:/h:cisco:c1812
CPE cpe:/h:cisco:c3640
CPE cpe:/h:cisco:c3700
CPE cpe:/o:cisco:ios:12.4
SEQ(SP=FA-10A%GCD=1-6%ISR=103-10D%TI=RD%II=RI%TS=U)
OPS(O1=M5B4%O2=M578%O3=M280%O4=M218%O5=M218%O6=M109)
WIN(W1=1020%W2=1020%W3=1020%W4=1020%W5=1020%W6=1020)
ECN(R=Y%DF=N%T=FA-104%TG=FF%W=1020%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=FA-104%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
T3(R=N)
T4(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
U1(R=N)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# c1841-adventerprisek9-mz.124-24.T2.bin Router Cisco model 1841
Fingerprint Cisco 1841 router (IOS 12)
Class Cisco | IOS | 12.X | router
CPE cpe:/h:cisco:1841_integrated_services_router
CPE cpe:/o:cisco:ios:12 auto
SEQ(SP=101-10B%GCD=1-6%ISR=105-10F%TI=RD%CI=RD%II=RI%TS=U)
OPS(O1=M55C%O2=M55C%O3=M280%O4=M218%O5=M218%O6=M109)
WIN(W1=1020%W2=1020%W3=1020%W4=1020%W5=1020%W6=1020)
ECN(R=Y%DF=N%T=FB-105%TG=FF%W=1020%O=M55C%CC=N%Q=)
T1(R=Y%DF=N%T=FB-105%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FB-105%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=FB-105%TG=FF%CD=S)

# Cisco 1841 IOS 12.4(15)
Fingerprint Cisco 1841 router (IOS 12.4)
Class Cisco | IOS | 12.X | router
CPE cpe:/h:cisco:1841_integrated_services_router
CPE cpe:/o:cisco:ios:12.4
SEQ(SP=F4-10C%GCD=1-6%ISR=ED-111%TI=RD%CI=RD|RI%II=RI%TS=U)
OPS(O1=M5B4%O2=M578%O3=M280%O4=M5B4%O5=M218%O6=M109)
WIN(W1=1020%W2=1020%W3=1020%W4=1020%W5=1020%W6=1020)
ECN(R=Y%DF=N%T=FB-105%TG=FF%W=1020%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=FB-105%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FB-105%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=FB-105%TG=FF%CD=S)

# Cisco IOS (tm) 2500 Software (C2500-P7-L), Version 12.1(27b), RELEASE SOFTWARE (fc1)
Fingerprint Cisco 2500 router (IOS 12.1)
Class Cisco | IOS | 12.X | router
CPE cpe:/h:cisco:2500_router
CPE cpe:/o:cisco:ios:12.1
SEQ(SP=F0-10A%GCD=1-6%ISR=100-110%TI=Z%II=RI%TS=U)
OPS(O1=M5B4%O2=M578%O3=M280%O4=M218%O5=M218%O6=M109)
WIN(W1=1020%W2=1020%W3=1020%W4=1020%W5=1020%W6=1020)
ECN(R=Y%DF=N%T=FB-105%TG=FF%W=1020%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=FB-105%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=FB-105%TG=FF%W=1020%S=O%A=S+%F=AS%O=M5B4%RD=0%Q=)
T4(R=N)
T5(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=S+%F=AR%O=%RD=0%Q=)
T6(R=N)
T7(R=N)
U1(DF=N%T=FB-105%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=FB-105%TG=FF%CD=S)

# Cisco IOS 12.3(24) IP-PLUS featureset on a Cisco 2509 Router
Fingerprint Cisco 2509 router (IOS 12.3)
Class Cisco | IOS | 12.X | router
CPE cpe:/h:cisco:2509_router
CPE cpe:/o:cisco:ios:12.3
SEQ(SP=FF-109%GCD=1-6%ISR=106-110%TI=Z%II=RI%TS=U)
OPS(O1=M5B4SLL%O2=M578SLL%O3=M280%O4=M218SLL%O5=M218SLL%O6=M109SLL)
WIN(W1=1020%W2=1020%W3=1020%W4=1020%W5=1020%W6=1020)
ECN(R=Y%DF=N%T=FB-105%TG=FF%W=1020%O=M5B4SLL%CC=N%Q=)
T1(R=Y%DF=N%T=FB-105%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
T3(R=N)
T4(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FB-105%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=FB-105%TG=FF%CD=S)

# Cisco 2514 router running IOS 12.1(2)
Fingerprint Cisco 2514 router (IOS 12.1)
Class Cisco | IOS | 12.X | router
CPE cpe:/h:cisco:2514_router
CPE cpe:/o:cisco:ios:12.1
SEQ(SP=76-80%GCD=1-6%ISR=9A-A4%TI=Z%II=RI%TS=U)
OPS(O1=M5B4%O2=M5B4%O3=M5B4%O4=M5B4%O5=M5B4%O6=M5B4)
WIN(W1=1020%W2=1020%W3=1020%W4=1020%W5=1020%W6=1020)
ECN(R=Y%DF=N%T=FB-105%TG=FF%W=1020%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=FB-105%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=FB-105%TG=FF%W=1020%S=O%A=S+%F=AS%O=M5B4%RD=0%Q=)
T4(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FB-105%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=FB-105%TG=FF%CD=S)

# IOS (tm) C2600 Software (C2600-K4P-M), Version 12.0(13.5)S, EARLY DEPLOYMENT MAINTENANCE INTERIM SOFTWARE
Fingerprint Cisco 2600 router (IOS 12.0)
Class Cisco | IOS | 12.X | router
CPE cpe:/h:cisco:2600_router
CPE cpe:/o:cisco:ios:12.0
SEQ(SP=4B-79%GCD=1-6%ISR=9A-A4%TI=Z%CI=I%II=RI%TS=U)
OPS(O1=M5B4%O2=M578%O3=M280%O4=M218%O5=M218%O6=M109)
WIN(W1=10C0%W2=10C0%W3=10C0%W4=10C0%W5=10C0%W6=10C0)
ECN(R=Y%DF=N%T=FB-105%TG=FF%W=10C0%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=FB-105%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=FB-105%TG=FF%W=10C0%S=O%A=S+%F=AS%O=M5B4%RD=0%Q=)
T4(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FB-105%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=FB-105%TG=FF%CD=S)

# Cisco IOS C2600 Software (C2600-IS-M) Version 12.1(3a)T4 release software (fc1)
Fingerprint Cisco 2600 router (IOS 12.1)
Class Cisco | IOS | 12.X | router
CPE cpe:/h:cisco:2600_router
CPE cpe:/o:cisco:ios:12.1
SEQ(SP=49-57%GCD=1-6%ISR=9A-A4%TI=Z%II=RI%TS=U)
OPS(O1=M5B4%O2=M5B4%O3=M5B4%O4=M5B4%O5=M5B4%O6=M5B4)
WIN(W1=1020%W2=1020%W3=1020%W4=1020%W5=1020%W6=1020)
ECN(R=Y%DF=N%T=FB-105%TG=FF%W=1020%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=FB-105%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=FB-105%TG=FF%W=1020%S=O%A=S+%F=AS%O=M5B4%RD=0%Q=)
T4(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FB-105%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=FB-105%TG=FF%CD=S)

# Cisco 2611 IOS 12.3(15a)
Fingerprint Cisco 2611 router (IOS 12.3)
Class Cisco | IOS | 12.X | router
CPE cpe:/h:cisco:2611_router
CPE cpe:/o:cisco:ios:12.3
SEQ(SP=C7-D1%GCD=1-6%ISR=C6-D0%TI=Z%CI=RD|RI%II=RI%TS=A)
OPS(O1=M5B4ST11%O2=M5B4ST11%O3=M5B4NNT11%O4=M5B4ST11%O5=M5B4ST11%O6=)
WIN(W1=16A0%W2=16A0%W3=16A0%W4=16A0%W5=16A0%W6=0)
ECN(R=Y%DF=N%T=23-3A%TG=40%W=0%O=%CC=N%Q=R)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
T3(R=N)
T4(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=25-39%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
U1(DF=Y%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# Cisco IOS C2600 Software (C2600-I-M), Version 12.3(19) running on a Cisco 2620 router
# Cisco-3620 Cisco Internetwork Operating System Software IOS (tm) 3600 Software (C3620-I-M), Version 12.1(1)
Fingerprint Cisco 2620 or 3620 router (IOS 12.1 - 12.3)
Class Cisco | IOS | 12.X | router
CPE cpe:/h:cisco:2620_router
CPE cpe:/h:cisco:3620_router
CPE cpe:/o:cisco:ios:12 auto
SEQ(SP=100-10A%GCD=1-6%ISR=FE-112%TI=Z%II=RI%TS=U)
OPS(O1=M218%O2=M218%O3=M218%O4=M218%O5=M218%O6=M109)
WIN(W1=1020%W2=1020%W3=1020%W4=1020%W5=1020%W6=1020)
ECN(R=Y%DF=N%T=FB-105%TG=FF%W=1020%O=M218%CC=N%Q=)
T1(R=Y%DF=N%T=FB-105%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
T3(R=N)
T4(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FB-105%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=FB-105%TG=FF%CD=S)

# IOS (tm) C2600 Software (C2600-I-M), Version 12.0(7)T,  RELEASE SOFTWARE (fc2), cisco 2620 (MPC860), ROM: System Bootstrap, Version 12.1(3r)T2, RELEASE SOFTWARE (fc1)
Fingerprint Cisco 2620 router (IOS 12.0)
Class Cisco | IOS | 12.X | router
CPE cpe:/h:cisco:2620_router
CPE cpe:/o:cisco:ios:12.0
SEQ(SP=4F-59%GCD=1-6%ISR=9A-A4%TI=Z%CI=I%II=RI%TS=U)
OPS(O1=M22C%O2=M22C%O3=M22C%O4=M22C%O5=M22C%O6=M22C)
WIN(W1=1020%W2=1020%W3=1020%W4=1020%W5=1020%W6=1020)
ECN(R=Y%DF=N%T=FB-105%TG=FF%W=1020%O=M22C%CC=N%Q=)
T1(R=Y%DF=N%T=FB-105%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=FB-105%TG=FF%W=1020%S=O%A=S+%F=AS%O=M22C%RD=0%Q=)
T4(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FB-105%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=FB-105%TG=FF%CD=S)

# Cisco IOS Software, 2800 Software (C2800NM-ADVSECURITYK9-M), Version 12.4(15)T7, RELEASE SOFTWARE (fc3)
Fingerprint Cisco 2800 router (IOS 12.4)
Class Cisco | IOS | 12.X | router
CPE cpe:/h:cisco:2800_router
CPE cpe:/o:cisco:ios:12.4
SEQ(R=N)
OPS(O1=%O2=%O3=%O4=%O5=%O6=)
WIN(W1=0%W2=0%W3=0%W4=0%W5=0%W6=0)
ECN(R=Y%DF=N%T=FB-105%TG=FF%W=0%O=%CC=N%Q=)
T1(R=Y%DF=N%T=FB-105%TG=FF%S=A%A=S+%F=AR%RD=0%Q=)
T2(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
T3(R=N)
T4(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FB-105%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=FB-105%TG=FF%CD=S)

# Cisco IOS Software, 2801 Software (C2801-ADVSECURITYK9-M), Version 12.4(22)T,
Fingerprint Cisco 2801 router (IOS 12.4)
Class Cisco | IOS | 12.X | router
CPE cpe:/o:cisco:ios:12.4 auto
SEQ(SP=F3-109%GCD=1-6%ISR=106-110%TI=RD%CI=RD%II=RI%TS=U)
OPS(O1=M5B4%O2=M5B4%O3=M5B4%O4=M218%O5=M5B4%O6=M5B4)
WIN(W1=1020%W2=1020%W3=1020%W4=1020%W5=1020%W6=1020)
ECN(R=Y%DF=N%T=FA-105%TG=FF%W=1020%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=FA-105%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=FA-105%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
T3(R=N)
T4(R=Y%DF=N%T=FA-105%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FA-105%TG=FF%W=0%S=A%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FA-105%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FA-105%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FB-105%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=FA-105%TG=FF%CD=S)

# Cisco 2811 Router
# Cisco IOS Software, C3900 Software (C3900-UNIVERSALK9-M), Version 15.1(4)M2, RELEASE SOFTWARE (fc1)
Fingerprint Cisco 2811 or 3900 router (IOS 12.X or IOS 15.1)
Class Cisco | IOS | 12.X | router
CPE cpe:/o:cisco:ios:12.x auto
Class Cisco | IOS | 15.X | router
CPE cpe:/o:cisco:ios:15.1 auto
SEQ(SP=FA-10C%GCD=1-6%ISR=FD-10F%TI=RD%II=RI%TS=U)
OPS(O1=M218%O2=M218%O3=M218%O4=M218%O5=M218%O6=M109)
WIN(W1=1020%W2=1020%W3=1020%W4=1020%W5=1020%W6=1020)
ECN(R=Y%DF=N%T=FB-105%TG=FF%W=1020%O=M218%CC=N%Q=)
T1(R=Y%DF=N%T=FB-105%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=S+%F=AR%O=%RD=0%Q=)
T6(R=N)
T7(R=N)
U1(DF=N%T=FB-105%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=FB-105%TG=FF%CD=S)

# Cisco IOS Software, 2800 Software (C2800NM-IPBASEK9-M), Version 12.4(25c), RELEASE SOFTWARE (fc2), Cisco 2811 (revision 53.51) with 512000K/12288K bytes of memory.
# IOS (tm) s222_rp Software (s222_rp-IPSERVICESK9_WAN-M), Version 12.2(18)SXF6, RELEASE SOFTWARE (fc1)
Fingerprint Cisco 2811 router (IOS 12.2 - 12.4)
Class Cisco | IOS | 12.X | router
CPE cpe:/h:cisco:2811_router
CPE cpe:/o:cisco:ios:12
SEQ(SP=101-10B%GCD=1-6%ISR=108-112%TI=RD%CI=RD%II=RI%TS=U)
OPS(O1=M218%O2=M218%O3=M218%O4=M218%O5=M218%O6=M109)
WIN(W1=1020%W2=1020%W3=1020%W4=1020%W5=1020%W6=1020)
ECN(R=Y%DF=N%T=FB-105%TG=FF%W=1020%O=M218%CC=N%Q=)
T1(R=Y%DF=N%T=FB-105%TG=FF%S=O%A=O|S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=FB-105%TG=FF%W=80%S=Z%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=FB-105%TG=FF%W=100%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T4(R=Y%DF=N%T=FB-105%TG=FF%W=400%S=A%A=S%F=AR%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=O%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FB-105%TG=FF%W=8000%S=A%A=S%F=AR%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FB-105%TG=FF%W=FFFF%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FB-105%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=FB-105%TG=FF%CD=S)

# Cisco WS-C2960G-24TC-L, Version 12.2(25)SEE1
# Cisco IOS 12.2(2)XA1, EARLY DEPLOYMENT; Running on Cisco cable modem
# Cisco WS-C3750G-48TS-S  Version 12.2(25r)SE1
# Cisco 3750 running Version 12.2(25r)SE1
# Cisco IOS Software, C3560 Software (C3560-IPBASE-M), Version 12.2(25)SEB4, RELEASE SOFTWARE (fc1)
# IOS (tm) C2950 Software (C2950-I6K2L2Q4-M), Version 12.1(22)EA8a, RELEASE SOFTWARE (fc1)
# cisco WS-C2950T-24, System image file is "flash:c2950-i6k2l2q4-mz.121-22.EA9.bin"
# 7200 Software (C7200-BOOT-M), Version 12.0(17)S, EARLY DEPLOYMENT RELEASE SOFTWARE (fc1) (7206VXR router)
# Cisco uBR7111 (CMTS)
# Cisco Cat6509, IOS (tm) MSFC2 Software (C6MSFC2-PK2SV-M), Version 12.1(8a)E5
Fingerprint Cisco 2900-series, 3650, or 3750 switch; 6509 or 7206VXR router; or uBR925 or uBR7111 cable modem (IOS 12.1 - 12.2)
Class Cisco | IOS | 12.X | router
CPE cpe:/h:cisco:6506_router
CPE cpe:/h:cisco:7206vxr_router
CPE cpe:/o:cisco:ios:12 auto
Class Cisco | IOS | 12.X | switch
CPE cpe:/h:cisco:catalyst_2900
CPE cpe:/h:cisco:catalyst_3650
CPE cpe:/h:cisco:catalyst_3750
CPE cpe:/o:cisco:ios:12 auto
Class Cisco | IOS | 12.X | broadband router
CPE cpe:/h:cisco:ubr925
CPE cpe:/h:cisco:ubr7111
CPE cpe:/o:cisco:ios:12 auto
SEQ(SP=F7-10D%GCD=1-6%ISR=FF-111%TI=Z%II=RI%TS=U)
OPS(O1=M218%O2=M218%O3=M218%O4=M218%O5=M218%O6=M109)
WIN(W1=1020%W2=1020%W3=1020%W4=1020%W5=1020%W6=1020)
ECN(R=Y%DF=N%T=FA-104%TG=FF%W=1020%O=M218%CC=N%Q=)
T1(R=Y%DF=N%T=FA-104%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=FA-104%TG=FF%W=1020%S=O%A=S+%F=AS%O=M218%RD=0%Q=)
T4(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# Cisco 3825 running ISO 12.4(15)T14
Fingerprint Cisco 3925 router (IOS 12.4)
Class Cisco | IOS | 12.X | router
CPE cpe:/o:cisco:ios:12.4 auto
SEQ(SP=FB-10B%GCD=1-6%ISR=104-112%TI=RD%CI=RD%II=RI%TS=U)
OPS(O1=M4B0%O2=M4B0%O3=M280%O4=M218%O5=M218%O6=M109)
WIN(W1=1020%W2=1020%W3=1020%W4=1020%W5=1020%W6=1020)
ECN(R=Y%DF=N%T=FA-104%TG=FF%W=1020%O=M4B0%CC=N%Q=)
T1(R=Y%DF=N%T=FA-104%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=FA-104%TG=FF%W=80%S=Z%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=FA-104%TG=FF%W=100%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T4(R=Y%DF=N%T=FA-104%TG=FF%W=400%S=A%A=S%F=AR%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=O%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=8000%S=A%A=S%F=AR%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FA-104%TG=FF%W=FFFF%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(R=N)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# IOS (tm) 2500 Software (C2500-I-L), Version 12.1(27b), RELEASE SOFTWARE (fc1)
# cisco 2509  IOS 12.1(21)
# cisco 2509 IOS 12.1(27a)
# Cisco Catalyst 4948-10GE
# Cisco Catalyst Express 500 with IOS 12.2(25)FY
# Cisco Router 2500 series - IOS (tm) 2500 Software (C2500-IK8S-L), Version 12.2(5), RELEASE SOFTWARE (fc1)
# Cisco Catalyst 3560 Layer3 Switch
# Cisco IOS 12.1 mainline: Cisco Catalyst 5000/5500 RSFC
# cisco WS-C2950C-24 running IOS (tm) C2950 Software (C2950-I6K2L2Q4-M), Version 12.1(22)EA9, RELEASE SOFTWARE (fc1)
# Cisco Router 4500 - IOS (tm) 4500 Software (C4500-JK9S-M), Version 12.2(27), RELEASE SOFTWARE (fc3)
# IOS (tm) C3750 Software (C3750-I9-M), Version 12.2(20)SE4, RELEASE SOFTWARE (fc1)
# C2960 Boot Loader (C2960-HBOOT-M) Version 12.2(25r)SEE1
# Cisco WS-C3550-24-PWR (PowerPC) C3550-I5K2L2Q3-M, Version 12.1(22)EA6
# Catalyst 3550 Series WS-C3550-24-SMI IOS VERSION: 12.2(25)SEB4
# Cisco 4506 Sup 4 running: Catalyst 4000 L3 Switch Software (cat4000-I5K91S-M), Version 12.2(25)EW, RELEASE SOFTWARE (fc1)
# Cisco Catalyst 6506 (IOS 12.2)
# IOS (tm) Catalyst 4000 L3 Switch Software (cat4000-IS-M), Version 12.1(12c)EW1
Fingerprint Cisco 500, 2000-, 3000-, 4000-, 5000-series, or 6506 switch; or 2500- or 4500-series router (IOS 12.1 - 12.2)
Class Cisco | IOS | 12.X | router
CPE cpe:/h:cisco:router_2500
CPE cpe:/h:cisco:router_4500
CPE cpe:/o:cisco:ios:12 auto
Class Cisco | IOS | 12.X | switch
CPE cpe:/h:cisco:catalyst_500
CPE cpe:/h:cisco:catalyst_2000
CPE cpe:/h:cisco:catalyst_3000
CPE cpe:/h:cisco:catalyst_4000
CPE cpe:/h:cisco:catalyst_5000
CPE cpe:/h:cisco:catalyst_6506
CPE cpe:/o:cisco:ios:12 auto
SEQ(SP=F6-107%GCD=1-6%ISR=F5-115%TI=Z%II=RI%TS=U)
OPS(O1=M5B4%O2=M578%O3=M280%O4=M218%O5=M218%O6=M109)
WIN(W1=1020%W2=1020%W3=1020%W4=1020%W5=1020%W6=1020)
ECN(R=Y%DF=N%T=FB-105%TG=FF%W=1020%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=FB-105%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=FB-105%TG=FF%W=1020%S=O%A=S+%F=AS%O=M5B4%RD=0%Q=)
T4(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FB-105%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=FB-105%TG=FF%CD=S)

# IOS (tm) 5300 Software (C5300-I-M), Version 12.1(5)T15,  RELEASE SOFTWARE (fc2)
Fingerprint Cisco 5300 router (IOS 12.1)
Class Cisco | IOS | 12.X | router
CPE cpe:/h:cisco:5300_router
CPE cpe:/o:cisco:ios:12.1
SEQ(TI=Z%CI=I%II=RI%TS=U)
OPS(R=N)
WIN(R=N)
ECN(R=N)
T1(R=Y%DF=N%T=FB-105%TG=FF%S=O%A=O|S+%F=A|AS%RD=0)
T2(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=S%F=AR%RD=0)
T3(R=N)
T4(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=Z%F=R%RD=0)
T5(R=N)
T6(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=Z%F=R%RD=0)
T7(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=S%F=AR%RD=0)
U1(DF=N%T=FB-105%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=FB-105%TG=FF%CD=S)

# cisco 5300 12.3 IOS
Fingerprint Cisco 5300 router (IOS 12.3)
Class Cisco | IOS | 12.X | router
CPE cpe:/h:cisco:5300_router
CPE cpe:/o:cisco:ios:12.3
SEQ(SP=FD-107%GCD=1-6%ISR=108-112%TI=Z%II=RI%TS=U)
OPS(O1=M218%O2=M218%O3=M218%O4=M218%O5=M218%O6=M109)
WIN(W1=1020%W2=1020%W3=1020%W4=1020%W5=1020%W6=1020)
ECN(R=Y%DF=N%T=FB-105%TG=FF%W=1020%O=M218%CC=N%Q=)
T1(R=Y%DF=N%T=FB-105%TG=FF%S=O%A=O|S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=S+%F=AR%O=%RD=0%Q=)
T6(R=N)
T7(R=N)
U1(DF=N%T=FB-105%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=FB-105%TG=FF%CD=S)

# Cisco IOS Software, s72033_rp Software (s72033_rp-IPSERVICESK9_WAN-VM), Version 12.2(33)SXI4a, RELEASE SOFTWARE (fc2), cisco WS-C6506-E
Fingerprint Cisco 6506 router (IOS 12.2)
Class Cisco | IOS | 12.X | router
CPE cpe:/h:cisco:6506_router
CPE cpe:/o:cisco:ios:12.2
SEQ(SP=FA-104%GCD=1-6%ISR=108-112%TI=RD%CI=RD|RI%II=RI%TS=U)
OPS(O1=M564%O2=M564%O3=M280%O4=M218%O5=M218%O6=M109)
WIN(W1=8000%W2=8000%W3=8000%W4=8000%W5=8000%W6=8000)
ECN(R=Y%DF=N%T=38-42%TG=40%W=8000%O=M564%CC=N%Q=)
T1(R=Y%DF=N%T=38-42%TG=40%S=O%A=O|S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=FB-105%TG=FF%W=80%S=Z%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=FB-105%TG=FF%W=100%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T4(R=Y%DF=N%T=FB-105%TG=FF%W=400%S=A%A=S%F=AR%O=%RD=0%Q=)
T5(R=Y%DF=N%T=38-42%TG=40%W=0%S=O%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FB-105%TG=FF%W=8000%S=A%A=S%F=AR%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FB-105%TG=FF%W=FFFF%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FB-105%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=FB-105%TG=FF%CD=S)

# Cisco IOS Software, 7200 Software (C7200P-KBOOT-M), Version 12.4(22)T, RELEASE SOFTWARE (fc1)
Fingerprint Cisco 7200 router (IOS 12.4)
Class Cisco | IOS | 12.X | router
CPE cpe:/o:cisco:ios:12.4 auto
SEQ(SP=FE-108%GCD=1-6%ISR=107-111%TI=RD%II=RI%TS=A)
OPS(O1=M20CT11LL%O2=M20CT11LL%O3=M20CT11LL%O4=M20CT11LL%O5=M20CT11LL%O6=M109T11LL)
WIN(W1=1020%W2=1020%W3=1020%W4=1020%W5=1020%W6=1020)
ECN(R=Y%DF=N%T=FB-105%TG=FF%W=1020%O=M218%CC=N%Q=)
T1(R=Y%DF=N%T=FB-105%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=S+%F=AR%O=%RD=0%Q=)
T6(R=N)
T7(R=N)
U1(DF=N%T=FB-105%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=FB-105%TG=FF%CD=S)

# Cisco 7206VXR (NPE-G2) router running 12.4(11)T
Fingerprint Cisco 7206VXR router (IOS 12.4)
Class Cisco | IOS | 12.X | router
CPE cpe:/h:cisco:7206vxr_router
CPE cpe:/o:cisco:ios:12.4
SEQ(SP=FD-107%GCD=1-6%ISR=104-10E%TI=RD%II=RI%TS=A)
OPS(O1=M5A8SNNT11LL%O2=M578SNNT11LL%O3=M280T11LL%O4=M218SNNT11LL%O5=M218SNNT11LL%O6=M109SNNT11LL)
WIN(W1=1020%W2=1020%W3=1020%W4=1020%W5=1020%W6=1020)
ECN(R=Y%DF=N%T=FB-105%TG=FF%W=1020%O=M5B4SLL%CC=N%Q=)
T1(R=Y%DF=N%T=FB-105%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
T3(R=N)
T4(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FB-105%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=FB-105%TG=FF%CD=S)

# Cisco 7600 router running IOS 12.2(33)SRE
# Cisco IOS Software, IOS-XE Software (PPC_LINUX_IOSD-ADVENTERPRISEK9-M), Version 15.1(1)S2, RELEASE SOFTWARE (fc1) ASR1002 router
Fingerprint Cisco 7600 router (IOS 12.2)
Class Cisco | IOS | 12.X | router
CPE cpe:/h:cisco:7600_router
CPE cpe:/o:cisco:ios:12.2
SEQ(SP=F2-108%GCD=1-6%ISR=101-111%TI=RD%CI=RD|RI%II=RI%TS=U)
OPS(O1=M5B4%O2=M578%O3=M280%O4=M218%O5=M218%O6=M109)
WIN(W1=1020%W2=1020%W3=1020%W4=1020%W5=1020%W6=1020)
ECN(R=Y%DF=N%T=FB-105%TG=FF%W=1020%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=FB-105%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=FB-105%TG=FF%W=1020%S=O%A=S+%F=AS%O=M109%RD=0%Q=)
T4(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FB-105%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=FB-105%TG=FF%CD=S)

# Cisco 857W CISCO857W-G-A-K9 Cisco IOS Software, C850 Software (C850-ADVSECURITYK9-M), Version 12.4(6)T7, RELEASE SOFTWARE (fc5)
# Cisco IOS 12.X version 12.4 Cisco 7301 (NPE)
# Cisco IOS Software, C2600 Software (C2600-ADVSECURITYK9-M), Version 12.4(17)
# Cisco IOS Software, C870 Software (C870-ADVSECURITYK9-M), Version 12.4(4)T7
# Cisco 3825 Version 12.4(13r)T
# Cisco IOS Software, 2800 Software (C2800NM-ADVIPSERVICESK9-M), Version 12.4(9)T1
# Cisco IOS Software, C837 Software (C837-K9O3Y6-M), Version 12.4(16), RELEASE SOFTWARE (fc1)
# Cisco 1801, ios: c180x-advipservicesk9-mz.124-15.T1.bin
# Cisco 2651XM router running 12.4(12a) Advanced Enterprise Services.
# Cisco IOS Software, 3800 Software (C3825-ADVIPSERVICESK9-M), Version 12.4(16b), RELEASE SOFTWARE (fc3)
# Cisco 857 ADSL router running IOS 12.4(6)T8
# Cisco IOS Software, 7200 Software (C7200-ADVIPSERVICESK9-M), Version 12.4(11)T3
# Cisco IOS Software, Catalyst 4000 L3 Switch Software (cat4000-I9S-M), Version 12.2(25)EWA8, RELEASE SOFTWARE (fc1)
# cisco AIR-AP1121G-A-K9 C1100 Software (C1100-K9W7-M), Version 12.3(8)JEB1
# Cisco Aironet 1242AG wireless access point running IOS 12.4(3g)JA
# Cisco 871 (C870-ADVSECURITYK9-M), Version 12.4(4)T7.
Fingerprint Cisco 800-series, 1801, 2000-series, 3800, 4000, or 7000-series router; or 1100 or 1242G WAP (IOS 12.2 - 12.4)
Class Cisco | IOS | 12.X | router
CPE cpe:/h:cisco:800_router
CPE cpe:/h:cisco:1801_router
CPE cpe:/h:cisco:2000_router
CPE cpe:/h:cisco:3800_router
CPE cpe:/h:cisco:4000_router
CPE cpe:/h:cisco:7000_router
CPE cpe:/o:cisco:ios:12 auto
Class Cisco | IOS | 12.X | WAP
CPE cpe:/h:cisco:aironet_ap1100
CPE cpe:/h:cisco:aironet_ap1242g
CPE cpe:/o:cisco:ios:12 auto
SEQ(SP=FD-109%GCD=1-6%ISR=103-111%TI=RD%II=RI%TS=U)
OPS(O1=M5B4%O2=M578%O3=M280%O4=M218%O5=M218%O6=M109)
WIN(W1=1020%W2=1020%W3=1020%W4=1020%W5=1020%W6=1020)
ECN(R=Y%DF=N%T=FB-105%TG=FF%W=1020%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=FB-105%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
T3(R=N)
T4(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FB-105%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=FB-105%TG=FF%CD=S)

# Cisco 1712 router running IOS 12.2(15)
# Cisco 806 <IOS (tm) C806 Software (C806-OY6-M), Version 12.2(8)T5,RELEASE SOFTWARE (fc1)>
# Cisco 1721 router IOS (tm) C1700 Software (C1700-Y-M), Version 12.2(4)YA2, EARLY DEPLOYMENT RELEASE SOFTWARE (fc1)
# IOS (tm) C2600 Software (C2600-IPVOICE-M), Version 12.3(3)
Fingerprint Cisco 806, 1712, 1721, or 2600 router (IOS 12.2 - 12.3)
Class Cisco | IOS | 12.X | router
CPE cpe:/h:cisco:806_router
CPE cpe:/h:cisco:1712_router
CPE cpe:/h:cisco:1721_router
CPE cpe:/h:cisco:2600_router
CPE cpe:/o:cisco:ios:12 auto
SEQ(SP=F6-10A%GCD=1-6%ISR=FD-10F%TI=Z%II=RI%TS=U)
OPS(O1=M5B4%O2=M578%O3=M280%O4=M218%O5=M218%O6=M109)
WIN(W1=1020%W2=1020%W3=1020%W4=1020%W5=1020%W6=1020)
ECN(R=Y%DF=N%T=FA-105%TG=FF%W=1020%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=FA-105%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=FA-105%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=FA-105%TG=FF%W=1020%S=O%A=S+%F=AS%O=M109%RD=0%Q=)
T4(R=Y%DF=N%T=FA-105%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FA-105%TG=FF%W=0%S=A%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FA-105%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FA-105%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-105%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=FA-105%TG=FF%CD=S)

# IOS (tm) C820 Software (C820-K9OSV6Y6-M), Version 12.3(20), RELEASE SOFTWARE (fc2)
# IOS (tm) 2500 Software (C2500-IS-L), Version 12.3(23), RELEASE SOFTWARE (fc5)
# Cisco 1721 router running IOS version 12.3(6c)
# Cisco 1751 router with IOS 12.3(14)T6.
# Cisco 1750 router (IOS 12.3)
Fingerprint Cisco 820, 1721, 1750, 1751, or 2514 router (IOS 12.3)
Class Cisco | IOS | 12.X | router
CPE cpe:/h:cisco:820_router
CPE cpe:/h:cisco:1721_router
CPE cpe:/h:cisco:1750_router
CPE cpe:/h:cisco:1751_router
CPE cpe:/h:cisco:2514_router
CPE cpe:/o:cisco:ios:12.3
SEQ(SP=E2-107%GCD=1-6%ISR=108-10C%TI=Z%II=RI%TS=U)
OPS(O1=M5B4%O2=M578%O3=M280%O4=M218%O5=M218%O6=M109)
WIN(W1=1020%W2=1020%W3=1020%W4=1020%W5=1020%W6=1020)
ECN(R=Y%DF=N%T=FB-105%TG=FF%W=1020%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=FB-105%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
T3(R=N)
T4(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FB-105%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=FB-105%TG=FF%CD=S)

# Cisco IOS Software, C836 Software (C836-K9O3S8Y6-M), Version 12.4(23), RELEASE SOFTWARE (fc1), ROM: System Bootstrap, Version 12.2(11r)YV, RELEASE SOFTWARE (fc1)
# Cisco IOS Software, 1841 Software (C1841-ADVENTERPRISEK9-M), Version 12.4(24)T, RELEASE SOFTWARE (fc1)
# Cisco IOS Software, 2800 Software (C2800NM-ADVENTERPRISEK9-M), Version 12.4(23), RELEASE SOFTWARE (fc1)
# Cisco 1751 router running IOS 12.4.23 with ADSL feature set.
# Cisco IOS Software, 1841 Software (C1841-ADVENTERPRISEK9-M), Version 15.0(1)M
# Cisco IOS Software, C890 Software (C890-UNIVERSALK9-M), Version 12.4(22)YB, RELEASE SOFTWARE (fc2), Cisco 891 (MPC8300) processor (revision 1.0)
# Cisco IOS Software, 2801 Software (C2801-ADVENTERPRISEK9-M), Version 12.4(25a), RELEASE SOFTWARE (fc2)
# Cisco IOS Software, 1841 Software (C1841-ADVENTERPRISEK9-M), Version 15.1(3)T1, RELEASE SOFTWARE (fc2)
# Cisco IOS Software, C2900 Software (C2900-UNIVERSALK9-M), Version 15.1(1)T, RELEASE SOFTWARE (fc1)
Fingerprint Cisco 836, 890, 1751, 1841, 2800, or 2900 router (IOS 12.4 - 15.1)
Class Cisco | IOS | 12.X | router
CPE cpe:/h:cisco:836_router
CPE cpe:/h:cisco:890_router
CPE cpe:/h:cisco:1751_router
CPE cpe:/h:cisco:2800_router
CPE cpe:/o:cisco:ios:12 auto
Class Cisco | IOS | 15.X | router
CPE cpe:/h:cisco:1841_router
CPE cpe:/h:cisco:2900_router
CPE cpe:/o:cisco:ios:15 auto
SEQ(SP=F6-10C%GCD=1-6%ISR=FF-111%TI=RD%CI=RD|RI%II=RI%TS=U)
OPS(O1=M5B4%O2=M578%O3=M280%O4=M218%O5=M218%O6=M109)
WIN(W1=1020%W2=1020%W3=1020%W4=1020%W5=1020%W6=1020)
ECN(R=Y%DF=N%T=FB-105%TG=FF%W=1020%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=FB-105%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FB-105%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=FB-105%TG=FF%CD=S)

# Cisco IOS Software, C860 Software (C860-UNIVERSALK9-M), Version 12.4(15)XZ2
# Cisco IOS Software, C870 Software (C870-ADVSECURITYK9-M), Version 12.4(24)T
Fingerprint Cisco 860 or 870 router (IOS 12.4)
Class Cisco | IOS | 12.X | router
CPE cpe:/h:cisco:860_router
CPE cpe:/h:cisco:870_router
CPE cpe:/o:cisco:ios:12.4
SEQ(SP=F4-10A%GCD=1-6%ISR=104-112%TI=RD%CI=RD|RI%II=RI%TS=U)
OPS(O1=M218%O2=M218%O3=M218%O4=M218%O5=M218%O6=M218)
WIN(W1=1020%W2=1020%W3=1020%W4=1020%W5=1020%W6=1020)
ECN(R=Y%DF=N%T=FB-105%TG=FF%W=1020%O=M218%CC=N%Q=)
T1(R=Y%DF=N%T=FB-105%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FB-105%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=FB-105%TG=FF%CD=S)

# Cisco IOS Software, C870 Software (C870-ADVIPSERVICESK9-M), Version 12.4(15)T1, RELEASE SOFTWARE (fc2)
Fingerprint Cisco 870 router (IOS 12.4)
Class Cisco | IOS | 12.X | router
CPE cpe:/h:cisco:870_router
CPE cpe:/o:cisco:ios:12.4
SEQ(SP=FA-104%GCD=1-6%ISR=FA-104%TI=RD%CI=RD%II=RI%SS=S%TS=U)
OPS(O1=M578%O2=M578%O3=M280%O4=M218%O5=M218%O6=M109)
WIN(W1=1020%W2=1020%W3=1020%W4=1020%W5=1020%W6=1020)
ECN(R=Y%DF=N%T=FB-105%TG=FF%W=1020%O=M578%CC=N%Q=)
T1(R=Y%DF=N%T=FB-105%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
T3(R=N)
T4(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FB-105%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=FB-105%TG=FF%CD=S)

# Cisco sw2960 + IOS 12.2(46)SE
# Cisco IOS Software, C870 Software (C870-ADVIPSERVICESK9-M), Version 12.4(4)T8, RELEASE SOFTWARE (fc3)
Fingerprint Cisco 870 router or 2960 switch (IOS 12.2 - 12.4)
Class Cisco | IOS | 12.X | router
CPE cpe:/h:cisco:870_router
CPE cpe:/o:cisco:ios:12 auto
Class Cisco | IOS | 12.X | switch
CPE cpe:/h:cisco:2960_switch
CPE cpe:/o:cisco:ios:12 auto
SEQ(SP=FF-109%GCD=1-6%ISR=100-112%TI=RD|RI%II=RI%SS=O%TS=U)
OPS(O1=M5B4%O2=M578%O3=M280%O4=M218%O5=M218%O6=M109)
WIN(W1=1020%W2=1020%W3=1020%W4=1020%W5=1020%W6=1020)
ECN(R=Y%DF=N%T=FA-104%TG=FF%W=1020%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=FA-104%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=N)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# Cisco 2821 ISR which is running Call Manager Express
# Cisco 7206 Series VXR router.
# IOS (tm) s72033_rp Software (s72033_rp-IPSERVICESK9-M), Version 12.2(18)SXF6, cisco WS-C6506 (R7000) processor
# Cisco IOS Software, C870 Software (C870-ADVIPSERVICESK9-M), Version 15.1(4)M2, RELEASE SOFTWARE (fc1)
Fingerprint Cisco 870, 2821, 6506, or 7206VXR router (IOS 12.2 - 15.1)
Class Cisco | IOS | 12.X | router
CPE cpe:/h:cisco:870_router
CPE cpe:/h:cisco:2821_router
CPE cpe:/h:cisco:6506_router
CPE cpe:/h:cisco:7206vxr_router
CPE cpe:/o:cisco:ios:12
CPE cpe:/o:cisco:ios:15
SEQ(SP=F5-109%GCD=1-6%ISR=FD-10F%TI=RD%II=RI%TS=U)
OPS(O1=M5B4%O2=M578%O3=M280%O4=M218%O5=M218%O6=M109)
WIN(W1=1020%W2=1020%W3=1020%W4=1020%W5=1020%W6=1020)
ECN(R=Y%DF=N%T=FC-106%TG=FF%W=1020%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=FC-106%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=Y%DF=N%T=FC-106%TG=FF%W=0%S=A%A=S+%F=AR%O=%RD=0%Q=)
T6(R=N)
T7(R=N)
U1(DF=N%T=FC-106%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=FC-106%TG=FF%CD=S)

# Cisco Router 877, 124-15.T11
Fingerprint Cisco 877 router (IOS 12.4)
Class Cisco | IOS | 12.X | router
CPE cpe:/h:cisco:877_router
CPE cpe:/o:cisco:ios:12.4
SEQ(SP=FD-10B%GCD=1-6%ISR=105-10F%TI=RD%II=RI%TS=U)
OPS(O1=M591%O2=M578%O3=M280%O4=M218%O5=M218%O6=M109)
WIN(W1=1020%W2=1020%W3=1020%W4=1020%W5=1020%W6=1020)
ECN(R=Y%DF=N%T=FB-105%TG=FF%W=1020%O=M591%CC=N%Q=)
T1(R=Y%DF=N%T=FB-105%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FB-105%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=FB-105%TG=FF%CD=S)

# Cisco 2610XM IOS 12.4(19b) Advanced Security Feature Set c2600-advsecurityk9-mz.124-19b.bin
# Cisco Aironet 1200 Series (AIR-LAP-1232AG-E-K9)
# Cisco Aironet 1250 Series (AIR-AP1252AG-A-K9) Software version: 12.4(10b)JDA3
Fingerprint Cisco Aironet 1200-series WAP or 2610XM router (IOS 12.4)
Class Cisco | IOS | 12.X | router
CPE cpe:/h:cisco:2610xm_router
CPE cpe:/o:cisco:ios:12.4
Class Cisco | IOS | 12.X | WAP
CPE cpe:/h:cisco:aironet_ap1200
CPE cpe:/o:cisco:ios:12.4
SEQ(SP=FE-108%GCD=1-6%ISR=FC-112%TI=RD%CI=RD|RI%II=RI%TS=U)
OPS(O1=M5B4%O2=M578%O3=M280%O4=M218%O5=M218%O6=M109)
WIN(W1=1020%W2=1020%W3=1020%W4=1020%W5=1020%W6=1020)
ECN(R=Y%DF=N%T=FA-104%TG=FF%W=1020%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=FA-104%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
T3(R=N)
T4(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# Cisco 1811 Router, IOS 12.4(6)T6
# Cisco IOS Software, 2800 Software (C2800NM-ADVIPSERVICESK9-M), Version 12.4(11)T2
# Cisco IOS Software, C1250 Software (C1250-K9W7-M), Version 12.4(10b)JA1, RELEASE SOFTWARE (fc2)
# Cisco Aironet 1240AG Series Access Point
# Cisco VG 224 Analog Phone Gateway
Fingerprint Cisco Aironet 1240AG or 1250 WAP, 1811 or 2800 router, or VG 224 VoIP adapter (IOS 12.4)
Class Cisco | IOS | 12.X | router
CPE cpe:/h:cisco:1811_router
CPE cpe:/h:cisco:2800_router
CPE cpe:/o:cisco:ios:12.4
Class Cisco | embedded || VoIP adapter
CPE cpe:/h:cisco:vg_224
CPE cpe:/o:cisco:ios:12.4
Class Cisco | IOS | 12.X | WAP
CPE cpe:/h:cisco:aironet_ap1240ag
CPE cpe:/h:cisco:aironet_ap1250
CPE cpe:/o:cisco:ios:12.4
SEQ(SP=F7-10D%GCD=1-6%ISR=FE-110%TI=RD%CI=RD|RI%II=RI%TS=U)
OPS(O1=M218%O2=M218%O3=M218%O4=M218%O5=M218%O6=M109)
WIN(W1=1020%W2=1020%W3=1020%W4=1020%W5=1020%W6=1020)
ECN(R=Y%DF=N%T=FB-105%TG=FF%W=1020%O=M218%CC=N%Q=)
T1(R=Y%DF=N%T=FB-105%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
T3(R=N)
T4(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FB-105%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=FB-105%TG=FF%CD=S)

# Cisco Aironet 1200 Air-AP1220
# Cisco IOS Software, C831 Software (C831-K9O3Y6-M), Version 12.3(2)XE3, RELEASE SOFTWARE (fc1)
Fingerprint Cisco Aironet 350 or 1200 WAP or 831 router (IOS 12.3)
Class Cisco | IOS | 12.X | router
CPE cpe:/h:cisco:831_router
CPE cpe:/o:cisco:ios:12.3
Class Cisco | IOS | 12.X | WAP
CPE cpe:/h:cisco:aironet_ap350
CPE cpe:/h:cisco:aironet_ap1200
CPE cpe:/o:cisco:ios:12.3
SEQ(SP=102-10E%GCD=1-6%ISR=103-10D%TI=Z%II=RI%TS=U)
OPS(O1=M218%O2=M218%O3=M218%O4=M218%O5=M218%O6=M109)
WIN(W1=1020%W2=1020%W3=1020%W4=1020%W5=1020%W6=1020)
ECN(R=Y%DF=N%T=FA-104%TG=FF%W=1020%O=M218%CC=N%Q=)
T1(R=Y%DF=N%T=FA-104%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=FA-104%TG=FF%W=1020%S=O%A=S+%F=AS%O=M109%RD=0%Q=)
T4(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# Cisco IOS (tm) 3600 Software (C3620-IK9O3S6-M), Version 12.3(16), RELEASE SOFTWARE (fc 4)
Fingerprint Cisco C3620 router (IOS 12.3)
Class Cisco | IOS | 12.X | router
CPE cpe:/h:cisco:3620_router
CPE cpe:/o:cisco:ios:12.3
SEQ(SP=FD-107%GCD=1-6%ISR=103-10F%TI=Z%II=RI%TS=U)
OPS(O1=M5B4%O2=M578%O3=M280%O4=M218%O5=M218%O6=M109)
WIN(W1=1020%W2=1020%W3=1020%W4=1020%W5=1020%W6=1020)
ECN(R=Y%DF=N%T=FA-104%TG=FF%W=1020%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=FA-104%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S+%F=AR%O=%RD=0%Q=)
T6(R=N)
T7(R=N)
U1(DF=N%T=7B-85%TG=80%IPL=70%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# Cisco 2821 running ios c2800nm-advipservicesk9-mz.124-20.YA2.bin
# Cisco IOS Software, C860 Software (C860-UNIVERSALK9-M), Version 12.4(24)T4, RELEASE SOFTWARE (fc2)
# Cisco IOS Software, C880 Software (C880DATA-UNIVERSALK9-M), Version 15.0(1)M4, RELEASE SOFTWARE (fc1)
Fingerprint Cisco C860, C880, or 2821 router (IOS 12.4 - 15.0)
Class Cisco | IOS | 12.X | router
CPE cpe:/h:cisco:860_router
CPE cpe:/h:cisco:880_router
CPE cpe:/o:cisco:ios:12.4
Class Cisco | IOS | 15.X | router
CPE cpe:/h:cisco:880_router
CPE cpe:/o:cisco:ios:15.0
SEQ(SP=F0-10C%GCD=1-6%ISR=102-112%TI=RD|RI%CI=RD%II=RI%SS=S%TS=U)
OPS(O1=M5B4%O2=M5B4%O3=M5B4%O4=M218%O5=M5B4%O6=M5B4)
WIN(W1=1020%W2=1020%W3=1020%W4=1020%W5=1020%W6=1020)
ECN(R=Y%DF=N%T=FB-105%TG=FF%W=1020%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=FB-105%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FB-105%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=FB-105%TG=FF%CD=S)

# Cisco IOS Software, C870 Software (C870-ADVSECURITYK9-M), Version 12.4(15)T5, RELEASE SOFTWARE (fc4)
Fingerprint Cisco C870 router (IOS 12.4)
Class Cisco | IOS | 12.X | router
CPE cpe:/h:cisco:870_router
CPE cpe:/o:cisco:ios:12.4
SEQ(SP=FC-106%GCD=1-6%ISR=107-111%TI=RD%CI=RD%TS=A)
OPS(O1=T11LL|M5A8SNNW2NT11LLLLLL%O2=T11LL|M578SNNW2NT11LLLLLL%O3=T11LL|M280W2NT11LLLLS|M280W2NT11LLLLLL%O4=T11LL|M218SNNW2NT11LLLLLL%O5=T11LL|M218SNNW2NT11LLLLLL%O6=T11LL|M109SNNT11LL)
WIN(W1=FF3C|FFFF%W2=FF3C|FFFF%W3=FF3C|FFFF%W4=FF3C|FFFF%W5=FF3C|FFFF%W6=FFFF)
ECN(R=Y%DF=N%T=FB-105%TG=FF%W=FF3C|FFFF%O=|M5B4SNNW2LLLLL%CC=N|Y%Q=)
T1(R=Y%DF=N%T=FB-105%TG=FF%S=O%A=O|S+%F=A|AS%RD=0%Q=)
T2(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A|O%A=O|S%F=AR%O=%RD=0%Q=)
T3(R=N)
T4(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A|O%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A|O%A=O|S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A|O%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A|O%A=O|S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FB-105%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=FB-105%TG=FF%CD=S)

# Version 12.2(18)SXF11, RELEASE SOFTWARE (fc1)
Fingerprint Cisco IOS 12.2
Class Cisco | IOS | 12.X | router
CPE cpe:/o:cisco:ios:12.2 auto
SEQ(SP=101-10B%GCD=1-6%ISR=108-112%TI=Z%II=RI%TS=U)
OPS(O1=M5B4W0L%O2=M578W0L%O3=M280W0L%O4=M218W0L%O5=M218W0L%O6=M109)
WIN(W1=8000%W2=8000%W3=8000%W4=8000%W5=8000%W6=8000)
ECN(R=Y%DF=N%T=38-42%TG=40%W=8000%O=M5B4W0L%CC=N%Q=)
T1(R=Y%DF=N%T=38-42%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=38-42%TG=40%W=8000%S=O%A=O%F=AS%O=M109W0L%RD=0)
T4(R=N)
T5(R=Y%DF=N%T=38-42%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=N)
T7(R=N)
U1(DF=N%T=FB-105%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=FB-105%TG=FF%CD=S)

# Cisco IOS Software Product/Model Number: AIR-AP1262N-E-K9 System Software Version: 12.4(25d)JA1
# Cisco IAD2430 (R527x) processor (rev 4.1) Cisco IOS Software, 2400 Software (C2430-I6S-M) Version 12.4(15)T10, Release Software (fc3)
# Cisco Wireless Access Point (AIR-LAP1142N-A-K9 V01)
# Cisco IOS Software, C831 Software (C831-K9O3SY6-M), Version 12.4(15)T10
# Cisco IOS 12.4(25b) on a 1760 router
# IOS-XE 15.3
# IOS_XE v16.12.4
# IOS-XE ROM: 15.0(1r)SG(15)
Fingerprint Cisco IOS 12.4 or IOS-XE 15.0 - 16.12
Class Cisco | IOS | 12.X | router
CPE cpe:/o:cisco:ios:12 auto
Class Cisco | IOS-XE | 15.X | router
CPE cpe:/o:cisco:ios_xe:15 auto
Class Cisco | IOS-XE | 16.X | router
CPE cpe:/o:cisco:ios_xe:16 auto
SEQ(SP=F8-10B%GCD=1-6%ISR=100-112%TI=RD%CI=RD|RI%II=RI%TS=U)
OPS(O1=M218%O2=M218%O3=M218%O4=M218%O5=M218%O6=M109)
WIN(W1=1020%W2=1020%W3=1020%W4=1020%W5=1020%W6=1020)
ECN(R=Y%DF=N%T=F7-101%TG=FF%W=1020%O=M218%CC=N)
T1(R=Y%DF=N%T=F7-101%TG=FF%S=O%A=S+%F=AS%RD=0)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=F7-101%TG=FF%W=0%S=A%A=Z%F=R%RD=0)
T5(R=Y%DF=N%T=F7-101%TG=FF%W=0%S=A%A=S+%F=AR%RD=0)
T6(R=Y%DF=N%T=F7-101%TG=FF%W=0%S=A%A=Z%F=R%RD=0)
T7(R=Y%DF=N%T=F7-101%TG=FF%W=0%S=A%A=S%F=AR%RD=0)
U1(DF=N%T=F7-101%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=F7-101%TG=FF%CD=S)

# Cisco DOCSIS CMTS running IOS 12.1  (this is a cable modem termination server)
# IOS (tm) 7200 Software (UBR7200-IK1S-M), Version 12.1(8.5)EC, EARLY DEPLOYMENT MAINTENANCE INTERIM SOFTWARE
Fingerprint Cisco DOCSIS cable modem termination server (IOS 12.1)
Class Cisco | IOS | 12.X | specialized
CPE cpe:/o:cisco:ios:12.1
SEQ(SP=F8-FF%GCD=1-6%ISR=107-109%TI=Z%II=RI%TS=U)
OPS(O1=M218%O2=M218%O3=M218%O4=M218%O5=M218%O6=M109)
WIN(W1=1020%W2=1020%W3=1020%W4=1020%W5=1020%W6=1020)
ECN(R=Y%DF=N%T=FA-104%TG=FF%W=1020%O=M218%CC=N%Q=)
T1(R=Y%DF=N%T=FA-104%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=FA-104%TG=FF%W=1020%S=O%A=S+%F=AS%O=M218%RD=0%Q=)
T4(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
U1(R=N)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# Cisco 2924-XL Switch running IOS C2900XL Software (C2900XL-C3H2S-M), Version 12.0(5)XU, RELEASE SOFTWARE (fc1)
# IOS (tm) 2500 Software (C2500-D-L), Version 12.0(10), RELEASE SOFTWARE (fc1)
Fingerprint Cisco 2500 or 2924XL switch (IOS 12.0)
Class Cisco | IOS | 12.X | switch
CPE cpe:/h:cisco:catalyst_ws-c2924-xl
CPE cpe:/h:cisco:catalyst_2500
CPE cpe:/o:cisco:ios:12.0
SEQ(SP=7D-9D%GCD=1-6%ISR=9A-A4%TI=Z%II=RI%TS=U)
OPS(O1=M5B4%O2=M5B4%O3=M5B4%O4=M5B4%O5=M5B4%O6=M5B4)
WIN(W1=1020%W2=1020%W3=1020%W4=1020%W5=1020%W6=1020)
ECN(R=Y%DF=N%T=FA-104%TG=FF%W=1020%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=FA-104%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=FA-104%TG=FF%W=1020%S=O%A=S+%F=AS%O=M5B4%RD=0%Q=)
T4(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# IOS (tm) C2940 Software (C2940-I6Q4L2-M), Version 12.1(22)EA8a, RELEASE SOFTWARE (fc1)
# Cisco C3750
# cisco WS-C2940-8TT-S
# IOS (tm) C2950 Software (C2950-I6Q4L2-M), Version 12.1(22)EA6, RELEASE SOFTWARE (fc1)
Fingerprint Cisco 2900-series or 3700-series switch (IOS 12.1)
Class Cisco | IOS | 12.X | switch
CPE cpe:/o:cisco:ios:12.1
SEQ(SP=FB-109%GCD=1-6%ISR=100-114%TI=Z%CI=I%II=RI%TS=U)
OPS(O1=M5B4%O2=M578%O3=M280%O4=M218%O5=M218%O6=M109)
WIN(W1=1020%W2=1020%W3=1020%W4=1020%W5=1020%W6=1020)
ECN(R=Y%DF=N%T=FA-104%TG=FF%W=1020%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=FA-104%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=FA-104%TG=FF%W=1020%S=O%A=S+%F=AS%O=M5B4%RD=0%Q=)
T4(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G|I%RUCK=G%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# IOS (tm) C2900XL Software (C2900XL-C3H2S-M), Version 12.0(5)WC5a, RELEASE SOFTWARE (fc2)
Fingerprint Cisco 2900-series switch (IOS 12.0)
Class Cisco | IOS | 12.X | switch
CPE cpe:/o:cisco:ios:12.0 auto
SEQ(SP=100-10A%GCD=1-6%ISR=100-10A%TI=Z%CI=I%TS=U)
OPS(O1=M22C%O2=M22C%O3=M22C%O4=M22C%O5=M22C%O6=M22C)
WIN(W1=1020%W2=1020%W3=1020%W4=1020%W5=1020%W6=1020)
ECN(R=Y%DF=N%T=FA-104%TG=FF%W=1020%O=M22C%CC=N%Q=)
T1(R=Y%DF=N%T=FA-104%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
T3(R=N)
T4(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# IOS (tm) C2900XL Software (C2900XL-C3H2S-M), Version 12.0(5)WC17, RELEASE SOFTWARE (fc1)
Fingerprint Cisco 2900XL switch (IOS 12.0)
Class Cisco | IOS | 12.X | switch
CPE cpe:/h:cisco:catalyst_2900xl
CPE cpe:/o:cisco:ios:12.0
SEQ(SP=100-10A%GCD=1-6%ISR=104-112%TI=Z%II=RI%TS=U)
OPS(O1=M22CSLL%O2=M22CSLL%O3=M22CSLL%O4=M22CSLL%O5=M22CSLL%O6=M22CSLL)
WIN(W1=1020%W2=1020%W3=1020%W4=1020%W5=1020%W6=1020)
ECN(R=Y%DF=N%T=FA-104%TG=FF%W=1020%O=M22CSLL%CC=N%Q=)
T1(R=Y%DF=N%T=FA-104%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=FA-104%TG=FF%W=1020%S=O%A=S+%F=AS%O=M22CSLL%RD=0%Q=)
T4(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# Cisco WS-C2924M-XL (PowerPC403GA) C2900XL-C3H2S-M, Version 12.0(5)WC16
# IOS (tm) C3500XL Software (C3500XL-C3H2S-M), Version 12.0(5)WC16, Release Software (fc1)
# WS-C2924-XL-A Version 12.0(5)WC17
# IOS (tm) C2950 Software (C2950-C3H2S-M), Version 12.0(5.3)WC(1), MAINTENANCE INTERIM SOFTWARE
Fingerprint Cisco 2924M XL, 2950, or 3500XL switch (IOS 12.0)
Class Cisco | IOS | 12.X | switch
CPE cpe:/h:cisco:catalyst_ws-c2924m-xl
CPE cpe:/h:cisco:catalyst_2950
CPE cpe:/h:cisco:catalyst_3500xl
CPE cpe:/o:cisco:ios:12.0
SEQ(SP=FE-10A%GCD=1-6%ISR=FA-110%TI=Z%II=RI%TS=U)
OPS(O1=M22C%O2=M22C%O3=M22C%O4=M22C%O5=M22C%O6=M22C)
WIN(W1=1020%W2=1020%W3=1020%W4=1020%W5=1020%W6=1020)
ECN(R=Y%DF=N%T=FA-104%TG=FF%W=1020%O=M22C%CC=N%Q=)
T1(R=Y%DF=N%T=FA-104%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=FA-104%TG=FF%W=1020%S=O%A=S+%F=AS%O=M22C%RD=0%Q=)
T4(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# C2950 software (C2950-I6Q4L2-M) Version 12.1(22)EA4a
Fingerprint Cisco 2950 switch (IOS 12.1)
Class Cisco | IOS | 12.X | switch
CPE cpe:/h:cisco:catalyst_2950
CPE cpe:/o:cisco:ios:12.1
SEQ(SP=FD-107%GCD=1-6%ISR=104-112%TI=Z%II=RI%TS=U)
OPS(O1=M5B4LLNN%O2=M578LLNN%O3=M280LLNN%O4=M218LLNN%O5=M218LLNN%O6=M109LLNL|M109LLNN|M109NNLL)
WIN(W1=1020%W2=1020%W3=1020%W4=1020%W5=1020%W6=1020)
ECN(R=Y%DF=N%T=FA-104%TG=FF%W=1020%O=M5B4LLNN%CC=N%Q=)
T1(R=Y%DF=N%T=FA-104%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=FA-104%TG=FF%W=1020%S=O%A=S+%F=AS%O=M5B4LLNN%RD=0%Q=)
T4(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# IOS (tm) C2950 Software (C2950-I6Q4L2-M), Version 12.1(22)EA4, RELEASE SOFTWARE (fc1)
Fingerprint Cisco 2950 switch (IOS 12.1)
Class Cisco | IOS | 12.X | switch
CPE cpe:/h:cisco:catalyst_2950
CPE cpe:/o:cisco:ios:12.1
SEQ(SP=FB-105%GCD=1-6%ISR=104-10E%TI=Z%CI=I%II=RI%TS=U)
OPS(O1=M5B4LLLL%O2=M578LLNN%O3=M280LLNN%O4=M218LLLN%O6=M109LLNN)
WIN(W1=1020%W2=1020%W3=1020%W4=1020%W5=1020%W6=1020)
ECN(R=Y%DF=N%T=FB-105%TG=FF%W=1020%O=M5B4LLNN%CC=N)
T1(R=Y%DF=N%T=FB-105%TG=FF%S=O%A=S+%F=AS%RD=0)
T2(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=S%F=AR%RD=0)
T3(R=Y%DF=N%T=FB-105%TG=FF%W=1020%S=O%A=S+%F=AS%O=M5B4NNS%RD=0)
T4(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=Z%F=R%RD=0)
T5(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=S+%F=AR%RD=0)
T6(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=Z%F=R%RD=0)
T7(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=S%F=AR%RD=0)
U1(DF=N%T=FB-105%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=FB-105%TG=FF%CD=S)

# IOS (tm) C2950 Software (C2950-I6Q4L2-M), Version 12.1(22)EA4a
# Cisco Catalist WS-C2950G-24-EI, Software: 12.1(22)EA4a
Fingerprint Cisco 2950 switch (IOS 12.1)
Class Cisco | IOS | 12.X | switch
CPE cpe:/h:cisco:catalyst_2950
CPE cpe:/o:cisco:ios:12.1
SEQ(SP=FB-109%GCD=1-6%ISR=FF-10F%TI=Z%CI=I%II=I|RI%TS=U)
OPS(O1=M218LLLL|M218LLLN|M218LLNL|M218LLNN|M218LNLL|M218NLLL|M218NLLN|M218NLNL|M218NNLL%O2=M218LLLL|M218LLLN|M218LLNL|M218LLNN|M218LNLL|M218NLLL|M218NLLN|M218NLNL|M218NNLL%O3=M218LLLL|M218LLLN|M218LLNL|M218LLNN|M218LNLL|M218NLLL|M218NLLN|M218NLNL|M218NNLL%O4=M218LLLL|M218LLLN|M218LLNL|M218LLNN|M218LNLL|M218NLLL|M218NLLN|M218NLNL|M218NNLL%O5=M218LLLL|M218LLLN|M218LLNL|M218LLNN|M218LNLL|M218NLLL|M218NLLN|M218NLNL|M218NNLL%O6=M109LLLL|M109LLLN|M109LLNL|M109LLNN|M109LNLL|M109NLLL|M109NLLN|M109NLNL|M109NNLL)
WIN(W1=1020%W2=1020%W3=1020%W4=1020%W5=1020%W6=1020)
ECN(R=Y%DF=N%T=FA-104%TG=FF%W=1020%O=M218LLLL|M218LLLN|M218LLNL|M218LLNN|M218LNLL|M218NLLL|M218NLLN|M218NLNL|M218NNLL%CC=N%Q=)
T1(R=Y%DF=N%T=FA-104%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=FA-104%TG=FF%W=1020%S=O%A=S+%F=AS%O=M218LLLL|M218LLLN|M218LLNL|M218LLNN|M218LNLL|M218NLLL|M218NLLN|M218NLNL|M218NNLL%RD=0%Q=)
T4(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# cisco 2950-24 IOS 12.1(22)EA13, Standard Image
Fingerprint Cisco 2950 switch (IOS 12.1)
Class Cisco | IOS | 12.X | switch
CPE cpe:/h:cisco:catalyst_2950
CPE cpe:/o:cisco:ios:12.1
SEQ(SP=FD-107%GCD=1-6%ISR=10A-114%TI=RD%CI=RD%II=RI%TS=U)
OPS(O1=M5B4%O2=M578%O3=M280%O4=M218%O5=M218%O6=M109)
WIN(W1=1020%W2=1020%W3=1020%W4=1020%W5=1020%W6=1020)
ECN(R=Y%DF=N%T=FA-104%TG=FF%W=1020%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=FA-104%TG=FF%S=O%A=O%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=FA-104%TG=FF%W=1020%S=O%A=S+%F=AS%O=M5B4%RD=0%Q=)
T4(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# IOS (tm) C2950 Software (C2950-I6Q4L2-M), Version 12.1(22)EA4
Fingerprint Cisco 2950 switch (IOS 12.1)
Class Cisco | IOS | 12.X | switch
CPE cpe:/h:cisco:catalyst_2950
CPE cpe:/o:cisco:ios:12.1
SEQ(SP=FC-106%GCD=1-6%ISR=100-10A%TI=Z%CI=I%II=RI%TS=U)
OPS(O1=M5B4LLLL%O2=M578LLLL%O3=M280LLLL|M280LLNN%O4=M218LLLL%O5=M218LLLL|M218LLNN%O6=M109LLLL)
WIN(W1=1020%W2=1020%W3=1020%W4=1020%W5=1020%W6=1020)
ECN(R=Y%DF=N%T=FA-104%TG=FF%W=1020%O=M5B4LLLL%CC=N%Q=)
T1(R=Y%DF=N%T=FA-104%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=FA-104%TG=FF%W=1020%S=O%A=S+%F=AS%O=M5B4LLLL%RD=0%Q=)
T4(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# IOS (tm) C2950 Software (C2950-I6Q4L2-M), Version 12.1(22)EA4a, RELEASE SOFTWARE (fc1)
Fingerprint Cisco 2950 switch (IOS 12.1)
Class Cisco | IOS | 12.X | switch
CPE cpe:/h:cisco:catalyst_2950
CPE cpe:/o:cisco:ios:12.1
SEQ(SP=F4-10A%GCD=1-6%ISR=F8-112%TI=Z%CI=I%II=RI%TS=U)
OPS(O1=M5B4LLLL|M5B4LLNL%O2=M578LLLN|M578LLNL%O3=M280LLLL|M280LLLN|M280LLNL%O4=M218LLLN|M218LLNL|M218NLLL%O5=M218LLLL|M218LLLN|M218LLNL%O6=M109LLLN|M109LLNL)
WIN(W1=1020%W2=1020%W3=1020%W4=1020%W5=1020%W6=1020)
ECN(R=Y%DF=N%T=FA-104%TG=FF%W=1020%O=M5B4LLLN|M5B4LLNL%CC=N%Q=)
T1(R=Y%DF=N%T=FA-104%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=FA-104%TG=FF%W=1020%S=O%A=S+%F=AS%O=M5B4LLLN|M5B4LLNL%RD=0%Q=)
T4(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# IOS (tm) C2950 Software (C2950-I6Q4L2-M), Version 12.1(22)EA4a, RELEASE SOFTWARE (fc1)
Fingerprint Cisco 2950 switch (IOS 12.1)
Class Cisco | IOS | 12.X | switch
CPE cpe:/h:cisco:catalyst_2950
CPE cpe:/o:cisco:ios:12.1
SEQ(SP=FD-10B%GCD=1-6%ISR=103-10D%TI=Z%CI=I%II=RI%TS=U)
OPS(O1=M218LLLN|M218LLNL%O2=M218LLLN|M218LLNL%O3=|M218LLLN|M218LLNL%O4=|M218LLLN|M218LLNL%O5=|M218LLLN|M218LLNL%O6=|M109LLNL)
WIN(W1=1020%W2=1020%W3=1020%W4=1020%W5=1020%W6=1020)
ECN(R=Y%DF=N%T=FA-104%TG=FF%W=1020%O=M218LLNL|M218NLLL%CC=N%Q=)
T1(R=Y%DF=N%T=FA-104%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=N)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# Cisco Catalyst WS-C3750G-12S-E IOS 12.2(35)SE2
# cisco WS-C2950C-24 IOS (tm) C2950 Software (C2950-I6K2L2Q4-M), Version 12.1(22)EA10a
# IOS (tm) C2950 Software (C2950-I6K2L2Q4-M), Version 12.1(22)EA10a, RELEASE SOFTWARE (fc2)
# cisco 6509 IOS 122-18.SXF1
# Cisco IOS Software, C3750 Software (C3750-ADVIPSERVICESK9-M), Version 12.2(35)SE2, RELEASE SOFTWARE (fc1)
# 6500 Switch
# Cisco Catalyst 4510R Switch
# Cisco IOS 12.1E: Catalyst 6000
# Cisco IOS Software, C3560 Software (C3560-ADVIPSERVICESK9-M), Version 12.2(44)SE, RELEASE SOFTWARE (fc1)
# Cisco IOS Software, C3550 Software (C3550-IPSERVICESK9-M), Version 12.2(44)SE2
# NME-16ES-1G, IOS 12.2(25)SEE4, C3750-IPSERVICESK9-M
# cisco WS-C2960-8TC-L (PowerPC405) processor (revision A0)
Fingerprint Cisco 2950, 2960, 3000-series, 4510R, 6000-series, or 6500-series switch (IOS 12.1 or 12.2)
Class Cisco | IOS | 12.X | switch
CPE cpe:/h:cisco:catalyst_2950
CPE cpe:/h:cisco:catalyst_2960
CPE cpe:/h:cisco:catalyst_3000
CPE cpe:/h:cisco:catalyst_4510r
CPE cpe:/h:cisco:catalyst_6000
CPE cpe:/h:cisco:catalyst_6500
CPE cpe:/o:cisco:ios:12.1 auto
SEQ(SP=FA-108%GCD=1-6%ISR=100-110%TI=RD%II=RI%TS=U)
OPS(O1=M5B4%O2=M578%O3=M280%O4=M218%O5=M218%O6=M109)
WIN(W1=1020%W2=1020%W3=1020%W4=1020%W5=1020%W6=1020)
ECN(R=Y%DF=N%T=FB-105%TG=FF%W=1020%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=FB-105%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=FB-105%TG=FF%W=1020%S=O%A=S+%F=AS%O=M5B4%RD=0%Q=)
T4(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FB-105%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=FB-105%TG=FF%CD=S)

# model: WS-C2960G-24TC-L sw version: 12.2(50)SE1
# IOS (tm) C2950 Software (C2950-I6K2L2Q4-M), Version 12.1(22)EA13
# Cisco IOS Software, C3550 Software (C3550-IPSERVICESK9-M), Version 12.2(50)SE3
# Cisco IOS Software, C3560 Software (C3560-IPSERVICESK9-M), Version 12.2(50)SE3
# 4500 series catalyst core switch IOS Version 12.2(54)SG1
# WS-C3560G-48TS     15.0(2)SE
# Cisco Adaptive Security Appliance Software Version 9.0(2)
Fingerprint Cisco 2950, 2960, 3550, 3560, 3750, or 4500 switch or 6500 router (IOS 12.1 - 15.0); or Adaptive Security Appliance firewall
Class Cisco | IOS | 12.X | switch
CPE cpe:/h:cisco:catalyst_2950
CPE cpe:/h:cisco:catalyst_2960
CPE cpe:/h:cisco:catalyst_3550
CPE cpe:/h:cisco:catalyst_3560
CPE cpe:/h:cisco:catalyst_3750
CPE cpe:/h:cisco:catalyst_4500
CPE cpe:/o:cisco:ios:12
Class Cisco | IOS | 15.X | router
CPE cpe:/o:cisco:ios:15
Class Cisco | ASA | 9.X | firewall
CPE cpe:/o:cisco:asa:9 auto
SEQ(SP=F1-10F%GCD=1-6%ISR=FE-112%TI=RD%CI=RD|RI%II=RI%TS=U)
OPS(O1=M5B4%O2=M578%O3=M280%O4=M218%O5=M218%O6=M109)
WIN(W1=1020%W2=1020%W3=1020%W4=1020%W5=1020%W6=1020)
ECN(R=Y%DF=N%T=FA-104%TG=FF%W=1020%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=FA-104%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=FA-104%TG=FF%W=1020%S=O%A=S+%F=AS%O=M5B4%RD=0%Q=)
T4(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# Cisco IOS Software, C3750 Software (C3750-IPSERVICESK9-M), Version 12.2(50)SE2, RELEASE SOFTWARE (fc2)
# Cisco IOS (tm) C2950 Software (C2950-I6K2L2Q4-M), Version 12.1(22)EA12, RELEASE SOFTWARE (fc1)
# Cisco IOS Software, C3560 Software (C3560-IPBASEK9-M), Version 12.2(46)SE, RELEASE SOFTWARE (fc2)
# Cisco IOS Software, C3550 Software (C3550-IPBASEK9-M), Version 12.2(46)SE, RELEASE SOFTWARE (fc2)
# Cisco IOS Software, C2960 Software (C2960-LANBASEK9-M), Version 12.2(46)SE, RELEASE SOFTWARE (fc2)
Fingerprint Cisco 2950, 2960, 3550, 3560, or 3750 switch (IOS 12.1 - 12.2)
Class Cisco | IOS | 12.X | switch
CPE cpe:/h:cisco:catalyst_2950
CPE cpe:/h:cisco:catalyst_2960
CPE cpe:/h:cisco:catalyst_3550
CPE cpe:/h:cisco:catalyst_3560
CPE cpe:/h:cisco:catalyst_3750
CPE cpe:/o:cisco:ios:12 auto
SEQ(SP=F2-10C%GCD=1-6%ISR=FE-10E%TI=RD%II=RI%TS=U)
OPS(O1=M5B4%O2=M578%O3=M280%O4=M218%O5=M218%O6=M109)
WIN(W1=1020%W2=1020%W3=1020%W4=1020%W5=1020%W6=1020)
ECN(R=Y%DF=N%T=FB-105%TG=FF%W=1020%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=FB-105%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=FB-105%TG=FF%W=1020%S=O%A=S+%F=AS%O=M5B4%RD=0%Q=)
T4(R=N)
T5(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=S+%F=AR%O=%RD=0%Q=)
T6(R=N)
T7(R=N)
U1(DF=N%T=FB-105%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=FB-105%TG=FF%CD=S)

# Catalyst 3560-E Series Device Manager
# Cisco WS-C2960-24PC-L
Fingerprint Cisco 2960 or 3650 switch
Class Cisco | IOS | 12.X | switch
CPE cpe:/h:cisco:catalyst_2960
CPE cpe:/h:cisco:catalyst_3650
SEQ(SP=FC-108%GCD=1-6%ISR=106-110%TI=RD|RI%II=RI%SS=O%TS=U)
OPS(O1=M564%O2=M564%O3=M280%O4=M218%O5=M218%O6=M109)
WIN(W1=1020%W2=1020%W3=1020%W4=1020%W5=1020%W6=1020)
ECN(R=Y%DF=Y%T=FA-104%TG=FF%W=1020%O=M564%CC=N%Q=)
T1(R=Y%DF=Y%T=FA-104%TG=FF%S=O%A=O|S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=O%A=S+%F=AR%O=%RD=0%Q=)
T6(R=N)
T7(R=N)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# Cisco WS-C2960G-48TC-L LAN switch, running 12.2(50)SE5 ( C2960-LANBASEK9-M )
Fingerprint Cisco 2960 switch (IOS 12.2)
Class Cisco | IOS | 12.X | switch
CPE cpe:/o:cisco:ios:12.2 auto
SEQ(SP=FF-109%GCD=1-6%ISR=107-111%TI=RD%CI=RD%II=RI%TS=U)
OPS(O1=M5B4%O2=M56A%O3=M280%O4=M218%O5=M218%O6=M109)
WIN(W1=1020%W2=1020%W3=1020%W4=1020%W5=1020%W6=1020)
ECN(R=Y%DF=Y%T=FB-105%TG=FF%W=1020%O=M5B4%CC=N%Q=)
T1(R=Y%DF=Y%T=FB-105%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%T=FB-105%TG=FF%W=1020%S=O%A=S+%F=AS%O=M5B4%RD=0%Q=)
T4(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FB-105%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=FB-105%TG=FF%CD=S)

# c2960s-universalk9-mz.122-53.SE2/c2960s-universalk9-mz.122-53.SE2.bin
Fingerprint Cisco 2960 switch (IOS 12.2)
Class Cisco | IOS | 12.X | switch
CPE cpe:/o:cisco:ios:12.2 auto
SEQ(SP=F9-103%GCD=1-6%ISR=107-111%TI=RD%CI=RI%II=RI%TS=U)
OPS(O1=M558%O2=M558%O3=M280%O4=M218%O5=M218%O6=M109)
WIN(W1=1020%W2=1020%W3=1020%W4=1020%W5=1020%W6=1020)
ECN(R=Y%DF=N%T=FA-104%TG=FF%W=1020%O=M558%CC=N%Q=)
T1(R=Y%DF=N%T=FA-104%TG=FF%S=O%A=O%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=O%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=O%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=O%F=R%O=%RD=0%Q=)
T7(R=N)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# Cisco catalyst 3500 XL
Fingerprint Cisco 3500 XL switch
Class Cisco | IOS | 12.X | switch
CPE cpe:/h:cisco:catalyst_3500xl
CPE cpe:/o:cisco:ios:12 auto
SEQ(SP=F6-108%GCD=1-6%ISR=FE-10E%TI=Z%II=RI%TS=A)
OPS(R=N)
WIN(R=N)
ECN(R=Y%DF=N%T=FB-105%TG=FF%W=1020%O=M5B4SNN%CC=N%Q=)
T1(R=Y%DF=N%T=FB-105%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=FB-105%TG=FF%W=1020%S=O%A=S+%F=AS%O=M109SNNT11LL%RD=0%Q=)
T4(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FB-105%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=FB-105%TG=FF%CD=S)

# Cisco IOS Software, C3560 Software, Version 12.2(25)SEE3
Fingerprint Cisco 3500-series switch (IOS 12.2)
Class Cisco | IOS | 12.X | switch
CPE cpe:/o:cisco:ios:12.2 auto
SEQ(SP=FD-107%GCD=1-6%ISR=107-111%TI=Z%CI=RD%II=RI%TS=U)
OPS(O1=M5B4%O2=M578%O3=M280%O4=M218%O5=M218%O6=M109)
WIN(W1=1020%W2=1020%W3=1020%W4=1020%W5=1020%W6=1020)
ECN(R=Y%DF=N%T=FA-104%TG=FF%W=1020%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=FA-104%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=FA-104%TG=FF%W=1020%S=O%A=S+%F=AS%O=M5B4%RD=0%Q=)
T4(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# Cisco IOS Software, C3550 Software (C3550-IPBASEK9-M), Version 12.2(44)SE6, RELEASE SOFTWARE (fc1)
Fingerprint Cisco 3550 switch (IOS 12.1)
Class Cisco | IOS | 12.X | switch
CPE cpe:/h:cisco:catalyst_3550
CPE cpe:/o:cisco:ios:12.1 auto
SEQ(SP=F8-10E%GCD=1-6%ISR=106-110%TI=RD%CI=RD%II=RI%TS=U)
OPS(O1=M5B4%O2=M578%O3=M280%O4=M218%O5=M218%O6=M109)
WIN(W1=1020%W2=1020%W3=1020%W4=1020%W5=1020%W6=1020)
ECN(R=Y%DF=N%T=FA-104%TG=FF%W=1020%O=M5B4%CC=N)
T1(R=Y%DF=N%T=FA-104%TG=FF%S=O%A=S+%F=AS%RD=0)
T2(R=N)
T3(R=Y%DF=N%T=FA-104%TG=FF%W=1020%S=O%A=S+%F=AS%O=M7A8%RD=0)
T4(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%RD=0)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S+%F=AR%RD=0)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%RD=0)
T7(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=AR%RD=0)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# Cisco IOS Software, C3550 Software (C3550-IPBASEK9-M), Version 12.2(44)SE6, RELEASE SOFTWARE (fc1)
Fingerprint Cisco 3550 switch (IOS 12.2)
Class Cisco | IOS | 12.X | switch
CPE cpe:/h:cisco:3550_switch
CPE cpe:/o:cisco:ios:12.2
SEQ(SP=F7-10D%GCD=1-6%ISR=FE-110%TI=RD|RI%II=RI%SS=O%TS=U)
OPS(O1=M5B4%O2=M578%O3=M280%O4=M218%O5=M218%O6=M109)
WIN(W1=1020%W2=1020%W3=1020%W4=1020%W5=1020%W6=1020)
ECN(R=Y%DF=Y%T=FA-104%TG=FF%W=1020%O=M5B4%CC=N)
T1(R=Y%DF=Y%T=FA-104%TG=FF%S=O%A=S+%F=AS%RD=0)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S+%F=AR%RD=0)
T6(R=N)
T7(R=N)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# Cisco IOS Software, C3550 Software (C3550-IPSERVICESK9-M), Version 12.2(44)SE6, RELEASE SOFTWARE (fc1)
Fingerprint Cisco 3550 switch (IOS 12.2)
Class Cisco | IOS | 12.X | switch
CPE cpe:/o:cisco:ios:12.2 auto
SEQ(SP=FF-109%GCD=1-6%ISR=107-111%TI=RD%CI=RI%TS=U)
OPS(O1=M564%O2=M564%O3=M280%O4=M218%O5=M218%O6=M109)
WIN(W1=1020%W2=1020%W3=1020%W4=1020%W5=1020%W6=1020)
ECN(R=Y%DF=Y%T=FA-104%TG=FF%W=1020%O=M564%CC=N%Q=)
T1(R=Y%DF=Y%T=FA-104%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=FC-106%TG=FF%W=400%S=A%A=S%F=AR%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=O%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FC-106%TG=FF%W=8000%S=A%A=S%F=AR%O=%RD=0%Q=)
T7(R=N)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(R=N)

# Cisco IOS Software, C3560 Software (C3560-IPBASEK9-M), Version 12.2(25)SEE3, RELEASE SOFTWARE (fc2)
Fingerprint Cisco 3560 switch (IOS 12.2)
Class Cisco | IOS | 12.X | switch
CPE cpe:/h:cisco:catalyst_3560
CPE cpe:/o:cisco:ios:12.2
SEQ(SP=100-10A%GCD=1-6%ISR=104-110%TI=Z%II=RI%TS=U)
OPS(O1=M218%O2=M218%O3=M218%O4=M218%O5=M218%O6=M109)
WIN(W1=1020%W2=1020%W3=1020%W4=1020%W5=1020%W6=1020)
ECN(R=Y%DF=N%T=FB-105%TG=FF%W=1020%O=M218%CC=N%Q=)
T1(R=Y%DF=N%T=FB-105%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=FB-105%TG=FF%W=1020%S=O%A=S+%F=AS%O=M218%RD=0%Q=)
T4(R=N)
T5(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=S+%F=AR%O=%RD=0%Q=)
T6(R=N)
T7(R=N)
U1(DF=N%T=FB-105%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=FB-105%TG=FF%CD=S)

# Cisco 3560G-24TS
Fingerprint Cisco 3560G switch (IOS 12.2)
Class Cisco | IOS | 12.X | switch
CPE cpe:/h:cisco:catalyst_3560g
CPE cpe:/o:cisco:ios:12.2
SEQ(SP=FB-105%GCD=1-6%ISR=104-10E%TI=Z%II=RI%TS=U)
OPS(O1=M218%O2=M218%O3=M218%O4=M218%O5=M218%O6=M109)
WIN(W1=1020%W2=1020%W3=1020%W4=1020%W5=1020%W6=1020)
ECN(R=Y%DF=N%T=FA-104%TG=FF%W=1020%O=M218%CC=N%Q=)
T1(R=Y%DF=N%T=FA-104%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=O%A=S+%F=AR%O=%RD=0%Q=)
T6(R=N)
T7(R=N)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# Cisco IOS Software, C3750E Software (C3750E-UNIVERSALK9-M), Version 12.2(44)
# Cisco 6500 supervisor 720 IOS ver 12.2(33)
Fingerprint Cisco 3750 or 6500 switch (IOS 12.2)
Class Cisco | IOS | 12.X | switch
CPE cpe:/h:cisco:catalyst_3750
CPE cpe:/h:cisco:catalyst_6500
CPE cpe:/o:cisco:ios:12.2
SEQ(SP=102-10C%GCD=1-6%ISR=103-10D%TI=RD%CI=RD|RI%II=RI%TS=U)
OPS(O1=M5B4%O2=M578%O3=M280%O4=M218%O5=M218%O6=M109)
WIN(W1=1020%W2=1020%W3=1020%W4=1020%W5=1020%W6=1020)
ECN(R=Y%DF=Y%T=FB-105%TG=FF%W=1020%O=M5B4%CC=N%Q=)
T1(R=Y%DF=Y%T=FB-105%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=Y%T=FB-105%TG=FF%W=1020%S=O%A=S+%F=AS%O=M5B4%RD=0%Q=)
T4(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FB-105%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=FB-105%TG=FF%CD=S)

# Cisco IOS Software, C3750 Software (C3750-IPBASE-M), Version 12.2(25)SEB4
Fingerprint Cisco 3750 switch (IOS 12.2)
Class Cisco | IOS | 12.X | switch
CPE cpe:/h:cisco:catalyst_3750
CPE cpe:/o:cisco:ios:12.2
SEQ(SP=FB-107%GCD=1-6%ISR=FE-112%TI=Z%II=RI%TS=U)
OPS(O1=M5B4%O2=M578%O3=M280%O4=M218%O5=M218%O6=M109)
WIN(W1=1020%W2=1020%W3=1020%W4=1020%W5=1020%W6=1020)
ECN(R=Y%DF=N%T=FB-105%TG=FF%W=1020%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=FB-105%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=S+%F=AR%O=%RD=0%Q=)
T6(R=N)
T7(R=N)
U1(DF=N%T=FB-105%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=FB-105%TG=FF%CD=S)

# IOS Version 12.2.33SXI6 6509-E chassis running Supervisor 720 - 3B
Fingerprint Cisco 6509 switch (IOS 12.2)
Class Cisco | IOS | 12.X | switch
CPE cpe:/h:cisco:catalyst_6509:e
CPE cpe:/o:cisco:ios:12.2 auto
SEQ(SP=FE-108%GCD=1-6%ISR=104-10E%TI=RD%II=RI%TS=U)
OPS(O1=M5B4%O2=M578%O3=M280%O4=M218%O5=M218%O6=M109)
WIN(W1=1020%W2=1020%W3=1020%W4=1020%W5=1020%W6=1020)
ECN(R=Y%DF=Y%T=FA-104%TG=FF%W=1020%O=M5B4%CC=N)
T1(R=Y%DF=Y%T=FA-104%TG=FF%S=O%A=S+%F=AS%RD=0)
T2(R=N)
T3(R=Y%DF=Y%T=FA-104%TG=FF%W=1020%S=O%A=S+%F=AS%O=M5B4%RD=0)
T4(R=N)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S+%F=AR%RD=0)
T6(R=N)
T7(R=N)
U1(R=N)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# Cisco IOS Software, C3750 Software (C3750-IPSERVICESK9-M), Version 12.2(46)SE, RELEASE SOFTWARE (fc2)
# Cisco IOS Software, C880 Software (C880DATA-UNIVERSALK9-M), Version 15.0(1)XA2, RELEASE SOFTWARE (fc2)
Fingerprint Cisco 880 router (IOS 15.0) or 3750 switch (IOS 12.2)
Class Cisco | IOS | 12.X | switch
CPE cpe:/h:cisco:catalyst_3750
CPE cpe:/o:cisco:ios:12.2
Class Cisco | IOS | 15.X | router
CPE cpe:/h:cisco:880_router
CPE cpe:/o:cisco:ios:15.0
SEQ(SP=FF-109%GCD=1-6%ISR=FC-10E%TI=RD%II=RI%TS=U)
OPS(O1=M564%O2=M564%O3=M280%O4=M218%O5=M218%O6=M109)
WIN(W1=1020%W2=1020%W3=1020%W4=1020%W5=1020%W6=1020)
ECN(R=Y%DF=N%T=FB-105%TG=FF%W=1020%O=M564%CC=N%Q=)
T1(R=Y%DF=N%T=FB-105%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=FC-106%TG=FF%W=80%S=Z%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=FC-106%TG=FF%W=100%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T4(R=Y%DF=N%T=FC-106%TG=FF%W=400%S=A%A=S%F=AR%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=O%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FC-106%TG=FF%W=8000%S=A%A=S%F=AR%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FC-106%TG=FF%W=FFFF%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FB-105%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=FB-105%TG=FF%CD=S)

# Cisco IOS Software, C2960S Software (C2960S-UNIVERSALK9-M), Version 12.2(53)SE2, RELEASE SOFTWARE (fc3)
# 3750-x
Fingerprint Cisco C2960 switch (IOS 12.2)
Class Cisco | IOS | 12.X | switch
CPE cpe:/h:cisco:catalyst_2960
CPE cpe:/o:cisco:ios:12.2
SEQ(SP=101-10B%GCD=1-6%ISR=103-10D%TI=RD%CI=RD|RI%II=RI%TS=U)
OPS(O1=M564%O2=M564%O3=M280%O4=M218%O5=M218%O6=M109)
WIN(W1=1020%W2=1020%W3=1020%W4=1020%W5=1020%W6=1020)
ECN(R=Y%DF=Y%T=FA-104%TG=FF%W=1020%O=M564%CC=N%Q=)
T1(R=Y%DF=Y%T=FA-104%TG=FF%S=O%A=O|S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=FA-104%TG=FF%W=80%S=Z%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=FA-104%TG=FF%W=100%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T4(R=Y%DF=N%T=FA-104%TG=FF%W=400%S=A%A=S%F=AR%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=O%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=8000%S=A%A=S%F=AR%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FA-104%TG=FF%W=FFFF%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# Cisco IOS Software, C3560 Software (C3560-IPSERVICESK9-M), Version 12.2(55)SE10, RELEASE SOFTWARE (fc2)
Fingerprint Cisco C3500-series switch (IOS 12.2)
Class Cisco | IOS | 12.X | switch
CPE cpe:/o:cisco:ios:12.2 auto
SEQ(SP=101-10B%GCD=1-6%ISR=10A-114%TI=RD%CI=RD%II=RI%TS=U)
OPS(O1=M5B4%O2=M578%O3=M280%O4=M218%O5=M218%O6=M109)
WIN(W1=1020%W2=1020%W3=1020%W4=1020%W5=1020%W6=1020)
ECN(R=Y%DF=N%T=FA-104%TG=FF%W=1020%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=FA-104%TG=FF%S=O%A=O%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=O%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=O%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=O%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=O%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# WS-C3560G-48TS IOS release - 12.2(53)SE2
Fingerprint Cisco C3560 switch (IOS 12.2)
Class Cisco | IOS | 12.X | switch
CPE cpe:/h:cisco:catalyst_3560
CPE cpe:/o:cisco:ios:12.2
SEQ(SP=102-10C%GCD=1-6%ISR=FD-10F%TI=RD%CI=RD|RI%II=RI%TS=U)
OPS(O1=M5B4%O2=M578%O3=M280%O4=M218%O5=M218%O6=M109)
WIN(W1=5B4%W2=578%W3=280%W4=218%W5=218%W6=109)
ECN(R=Y%DF=Y%T=FA-104%TG=FF%W=5B4%O=M5B4%CC=N%Q=)
T1(R=Y%DF=Y%T=FA-104%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%T=FA-104%TG=FF%W=5B4%S=O%A=S+%F=AS%O=M5B4%RD=0%Q=)
T4(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=E8FD%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# 6513-core-switch# Cisco IOS Software, s72033_rp Software (s72033_rp-ADVENTERPRISEK9_WAN-M), Version 12.2(33)SXI
# Cisco IOS Software, Catalyst 4500 L3 Switch Software (cat4500e-IPBASEK9-M), Version 12.2(52)XO, RELEASE SOFTWARE (fc1)
# WS-C3560X-48       12.2(53)SE2           C3560E-UNIVERSALK9-M
# Cisco WS-C3750-48P - Version 12.2(55)SE1
# Cisco Catalyst 1900/2820 Enterprise Edition Software Version V9.00.06
Fingerprint Cisco Catalyst 1900, 2820, 2960, 3560, 3750, 4500, or 6513 switch (IOS 12.2)
Class Cisco | IOS | 12.X | switch
CPE cpe:/h:cisco:catalyst_1900
CPE cpe:/h:cisco:catalyst_2820
CPE cpe:/h:cisco:catalyst_2960
CPE cpe:/h:cisco:catalyst_3560
CPE cpe:/h:cisco:catalyst_4500
CPE cpe:/h:cisco:catalyst_6513
CPE cpe:/o:cisco:ios:12.2
SEQ(SP=F8-10C%GCD=1-6%ISR=100-110%TI=RD%CI=RD|RI%II=RI%TS=U)
OPS(O1=M5B4%O2=M578%O3=M280%O4=M218%O5=M218%O6=M109)
WIN(W1=1020%W2=1020%W3=1020%W4=1020%W5=1020%W6=1020)
ECN(R=Y%DF=Y%T=FA-104%TG=FF%W=1020%O=M5B4%CC=N%Q=)
T1(R=Y%DF=Y%T=FA-104%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%T=FA-104%TG=FF%W=1020%S=O%A=S+%F=AS%O=M5B4%RD=0%Q=)
T4(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# Cisco IOS Software, C3560 Software (C3560-IPBASE-M), Version 12.2(35)SE5, RELEASE SOFTWARE (fc1)
# Cisco IOS Software, C2970 Software (C2970-LANBASEK9-M), Version 12.2(25)SEE4, RELEASE SOFTWARE (fc1)
Fingerprint Cisco Catalyst 2900-series or 3500-series switch (IOS 12.2)
Class Cisco | IOS | 12.X | switch
CPE cpe:/o:cisco:ios:12.2
SEQ(SP=F3-10B%GCD=1-6%ISR=100-112%TI=RD%CI=I|RI%II=RI%TS=U)
OPS(O1=M218%O2=M218%O3=M218%O4=M218%O5=M218%O6=M109)
WIN(W1=1020%W2=1020%W3=1020%W4=1020%W5=1020%W6=1020)
ECN(R=Y%DF=N%T=FA-104%TG=FF%W=1020%O=M218%CC=N)
T1(R=Y%DF=N%T=FA-104%TG=FF%S=O%A=S+%F=AS%RD=0)
T2(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=AR%RD=0)
T3(R=Y%DF=N%T=FA-104%TG=FF%W=1020%S=O%A=S+%F=AS%O=M218%RD=0)
T4(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%RD=0)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S+%F=AR%RD=0)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%RD=0)
T7(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=AR%RD=0)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# C3500XL Software (C3500XL-C3H2S-M), Version 12.0(5)WC15
# IOS (tm) C2900XL Software (C2900XL-C3H2S-M), Version 12.0(5)WC17, RELEASE SOFTWARE (fc1)
Fingerprint Cisco Catalyst 2900XL or 3500XL switch (IOS 12.0)
Class Cisco | IOS | 12.X | switch
CPE cpe:/h:cisco:catalyst_2900xl
CPE cpe:/h:cisco:catalyst_3500xl
CPE cpe:/o:cisco:ios:12.0
SEQ(SP=DE-108%GCD=1-6%ISR=101-10F%TI=Z%II=RI%TS=U)
OPS(O1=M22C%O2=M22C%O3=M22C%O4=M22C%O5=M22C%O6=M22C)
WIN(W1=1020%W2=1020%W3=1020%W4=1020%W5=1020%W6=1020)
ECN(R=Y%DF=N%T=FA-104%TG=FF%W=1020%O=M22C%CC=N%Q=)
T1(R=Y%DF=N%T=FA-104%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=O%A=S+%F=AR%O=%RD=0%Q=)
T6(R=N)
T7(R=N)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# WS-C2912-XL-A Version 12.0(5)XU
Fingerprint Cisco Catalyst 2912 switch (IOS 12.0)
Class Cisco | IOS | 12.X | switch
CPE cpe:/h:cisco:catalyst_2912
CPE cpe:/o:cisco:ios:12.0
SEQ(SP=65-8F%GCD=1-6%ISR=9A-A4%TI=Z%II=RI%TS=U)
OPS(O1=M22C%O2=M22C%O3=M22C%O4=M22C%O5=M22C%O6=M22C)
WIN(W1=1020%W2=1020%W3=1020%W4=1020%W5=1020%W6=1020)
ECN(R=Y%DF=N%T=FA-104%TG=FF%W=1020%O=M22C%CC=N%Q=)
T1(R=Y%DF=N%T=FA-104%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=FA-104%TG=FF%W=1020%S=O%A=S+%F=AS%O=M22C%RD=0%Q=)
T4(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# Cisco WS-C2912-XL
Fingerprint Cisco Catalyst 2912 switch (IOS 12.0)
Class Cisco | IOS | 12.X | switch
CPE cpe:/h:cisco:catalyst_2912
CPE cpe:/o:cisco:ios:12.0
SEQ(SP=FB-105%GCD=1-6%ISR=105-10F%TI=Z%II=RI%TS=U)
OPS(O1=M22C%O2=M22C%O3=M22C%O4=M22C%O5=M22C%O6=M22C)
WIN(W1=1020%W2=1020%W3=1020%W4=1020%W5=1020%W6=1020)
ECN(R=Y%DF=N%T=FA-104%TG=FF%W=1020%O=|M22C%CC=N)
T1(R=Y%DF=N%T=FA-104%TG=FF%S=O%A=O|S+%F=AS%RD=0)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S+%F=AR%RD=0)
T6(R=N)
T7(R=N)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# Catalyst 2950 series 48 Port
Fingerprint Cisco Catalyst 2950 switch
Class Cisco | IOS | 12.X | switch
CPE cpe:/h:cisco:catalyst_2950
CPE cpe:/o:cisco:ios:12 auto
SEQ(SP=FE-108%GCD=1-6%ISR=102-114%TI=Z%II=RI%TS=U)
OPS(O1=M5B4LLLL|M5B4LLNL%O2=M578LLLL|M578LLNL%O3=M280LLLL|M280LLNL%O4=M218LLLL|M218LLNL|M218NLLL%O5=M218LLLL|M218LLNL%O6=M109LLLL|M109LLNL|M109NLLL)
WIN(W1=1020%W2=1020%W3=1020%W4=1020%W5=1020%W6=1020)
ECN(R=Y%DF=N%T=FA-104%TG=FF%W=1020%O=M5B4LLNL%CC=N%Q=)
T1(R=Y%DF=N%T=FA-104%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S+%F=AR%O=%RD=0%Q=)
T6(R=N)
T7(R=N)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# WS-C2950-24, Version 12.1(22)EA13
# IOS (tm) C2950 Software (C2950-I6K2L2Q4-M), Version 12.1(22)EA13
Fingerprint Cisco Catalyst 2950 switch (IOS 12.1)
Class Cisco | IOS | 12.X | switch
CPE cpe:/h:cisco:catalyst_2950
CPE cpe:/o:cisco:ios:12.1
SEQ(SP=FD-10B%GCD=1-6%ISR=102-112%TI=RD%CI=RD|RI%II=RI%TS=U)
OPS(O1=M218%O2=M218%O3=M218%O4=M218%O5=M218%O6=M109)
WIN(W1=1020%W2=1020%W3=1020%W4=1020%W5=1020%W6=1020)
ECN(R=Y%DF=N%T=FA-104%TG=FF%W=1020%O=M218%CC=N%Q=)
T1(R=Y%DF=N%T=FA-104%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=FA-104%TG=FF%W=1020%S=O%A=S+%F=AS%O=M218%RD=0%Q=)
T4(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# Cisco Catalyst 2950 Series WS-C2950-12
Fingerprint Cisco Catalyst 2950-series switch
Class Cisco | IOS | 12.X | switch
CPE cpe:/h:cisco:catalyst_2950
CPE cpe:/o:cisco:ios:12 auto
SEQ(SP=100-10A%GCD=1-6%ISR=103-10D%TI=Z%II=RI%TS=U)
OPS(O1=%O2=M578LLLN%O3=M280LLLN%O4=%O5=M218LLLN%O6=M109LLLL)
WIN(W1=1020%W2=1020%W3=1020%W4=1020%W5=1020%W6=1020)
ECN(R=Y%DF=N%T=FA-104%TG=FF%W=1020%O=M5B4LLLN%CC=N%Q=)
T1(R=Y%DF=N%T=FA-104%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=FA-104%TG=FF%W=1020%S=O%A=S+%F=AS%O=M5B4LLLN%RD=0%Q=)
T4(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# CIsco 2960
# IOS (tm) 3600 Software (C3640-IK9S-M), Version 12.3(20), RELEASE SOFTWARE (fc2)
Fingerprint Cisco Catalyst 2960 or 3600 switch (IOS 12.3)
Class Cisco | IOS | 12.X | switch
CPE cpe:/h:cisco:catalyst_2960
CPE cpe:/h:cisco:catalyst_3600
CPE cpe:/o:cisco:ios:12.3
SEQ(SP=FE-108%GCD=1-6%ISR=102-10C%TI=Z%II=RI%TS=U)
OPS(O1=M5B4%O2=M578%O3=M280%O4=M218%O5=M218%O6=M109)
WIN(W1=1020%W2=1020%W3=1020%W4=1020%W5=1020%W6=1020)
ECN(R=Y%DF=N%T=FA-104%TG=FF%W=1020%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=FA-104%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S+%F=AR%O=%RD=0%Q=)
T6(R=N)
T7(R=N)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# Cisco IOS 12.2(44)SE running on a Cisco Catalyst 2960 switch
Fingerprint Cisco Catalyst 2960 switch (IOS 12.2)
Class Cisco | IOS | 12.X | switch
CPE cpe:/h:cisco:catalyst_2960
CPE cpe:/o:cisco:ios:12.2
SEQ(SP=F9-109%GCD=1-6%ISR=107-111%TI=RD%II=RI%TS=U)
OPS(O1=M5A8SNNT11LL%O2=M578SNNT11LL%O3=|M280SNNLLLLLLLL|M280SNNNLLLLLLL%O4=M218SNNT11LL%O5=M218SNNT11LL%O6=M109SNNT11LL)
WIN(W1=1020%W2=1020%W3=1020%W4=1020%W5=1020%W6=1020)
ECN(R=Y%DF=N%T=FA-104%TG=FF%W=1020%O=M5B4SNN%CC=N%Q=)
T1(R=Y%DF=N%T=FA-104%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=FA-104%TG=FF%W=1020%S=O%A=S+%F=AS%O=M5B4%RD=0%Q=)
T4(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# 12.2(55)SE on Cisco Switch WS-X2960-24TT-L
Fingerprint Cisco Catalyst 2960 switch (IOS 12.2)
Class Cisco | IOS | 12.X | switch
CPE cpe:/h:cisco:catalyst_2960
CPE cpe:/o:cisco:ios:12.2
SEQ(SP=F5-109%GCD=1-6%ISR=106-112%TI=RD%CI=RD%II=RI%TS=A|U)
OPS(O1=M5B4SNNT11LL%O2=M578SNNT11LL%O3=M280SNNLLLLLLLL%O4=M218SNNT11LL%O5=M218SNNT11LL%O6=M109SNNT11LL)
WIN(W1=1020%W2=1020%W3=1020%W4=1020%W5=1020%W6=1020)
ECN(R=Y%DF=N%T=FA-104%TG=FF%W=1020%O=M5B4SNN%CC=N%Q=)
T1(R=Y%DF=N%T=FA-104%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=FA-104%TG=FF%W=1020%S=O%A=S+%F=AS%O=M5E2%RD=0%Q=)
T4(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# Cisco IOS Software, C2960 Software (C2960-LANLITEK9-M), Version 12.2(50)SE5, RELEASE SOFTWARE (fc1)
Fingerprint Cisco Catalyst 2960 switch (IOS 12.2)
Class Cisco | IOS | 12.X | switch
CPE cpe:/h:cisco:catalyst_2960
CPE cpe:/o:cisco:ios:12.2
SEQ(SP=F9-109%GCD=1-6%ISR=106-112%TI=RD%CI=RD|RI%II=RI%TS=U)
OPS(O1=M550%O2=M550%O3=M280%O4=M218%O5=M218%O6=M109)
WIN(W1=1020%W2=1020%W3=1020%W4=1020%W5=1020%W6=1020)
ECN(R=Y%DF=Y%T=FB-105%TG=FF%W=1020%O=M550%CC=N)
T1(R=Y%DF=Y%T=FB-105%TG=FF%S=O%A=S+%F=AS%RD=0)
T2(R=N)
T3(R=Y%DF=Y%T=FB-105%TG=FF%W=1020%S=O%A=S+%F=AS%O=M550%RD=0)
T4(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=Z%F=R%RD=0)
T5(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=S+%F=AR%RD=0)
T6(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=Z%F=R%RD=0)
T7(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=S%F=AR%RD=0)
U1(DF=N%T=FB-105%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=FB-105%TG=FF%CD=S)

# WS-C3550-24-SMI, Version 12.2(50)SE
# Cisco IOS Software, C3560 Software (C3560-IPSERVICESK9-M), Version 12.2(50)SE
# cisco catalyst c2960
Fingerprint Cisco Catalyst 2960, 3550, or 3560 switch (IOS 12.2)
Class Cisco | IOS | 12.X | switch
CPE cpe:/h:cisco:catalyst_2960
CPE cpe:/h:cisco:catalyst_3550
CPE cpe:/h:cisco:catalyst_3560
CPE cpe:/o:cisco:ios:12.2
SEQ(SP=FD-107%GCD=1-6%ISR=103-113%TI=RD|RI%II=RI%SS=O%TS=U)
OPS(O1=M5B4%O2=M578%O3=M280%O4=M218%O5=M218%O6=M109)
WIN(W1=1020%W2=1020%W3=1020%W4=1020%W5=1020%W6=1020)
ECN(R=Y%DF=Y%T=FA-104%TG=FF%W=1020%O=M5B4%CC=N%Q=)
T1(R=Y%DF=Y%T=FA-104%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=Y%T=FA-104%TG=FF%W=1020%S=O%A=S+%F=AS%O=M5B4%RD=0%Q=)
T4(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# Cisco IOS Software, C2960 Software (C2960-LANBASE-M), Version 12.2(35)SE5, RELEASE SOFTWARE (fc1)
# Cisco IOS Version 12.2(18)SXF8 running on Supervisor II / MSFC II module in a Cisco Catalyst 6500 switch
# Cisco WS-C3560-48PS
# Cisco IOS Software, C3560 Software (C3560-ADVIPSERVICESK9-M), Version 12.2(25)SEE4
Fingerprint Cisco Catalyst 2960, 3560, or 6500 switch (IOS 12.2)
Class Cisco | IOS | 12.X | switch
CPE cpe:/h:cisco:catalyst_2960
CPE cpe:/h:cisco:catalyst_3560
CPE cpe:/h:cisco:catalyst_6500
CPE cpe:/o:cisco:ios:12.2
SEQ(SP=FF-109%GCD=1-6%ISR=100-10E%TI=RD%CI=RD|RI%II=RI%TS=U)
OPS(O1=M218%O2=M218%O3=M218%O4=M218%O5=M218%O6=M109)
WIN(W1=1020%W2=1020%W3=1020%W4=1020%W5=1020%W6=1020)
ECN(R=Y%DF=N%T=FB-105%TG=FF%W=1020%O=M218%CC=N%Q=)
T1(R=Y%DF=N%T=FB-105%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=FB-105%TG=FF%W=1020%S=O%A=S+%F=AS%O=M218%RD=0%Q=)
T4(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FB-105%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=FB-105%TG=FF%CD=S)

# IOS (tm) C3500XL Software (C3500XL-C3H2S-M), Version 12.0(5)WC17, RELEASE SOFTWARE (fc1)
Fingerprint Cisco Catalyst 3500 XL-series switch (12.0)
Class Cisco | IOS | 12.X | switch
CPE cpe:/h:cisco:catalyst_2900
CPE cpe:/h:cisco:catalyst_3500_xl
SEQ(SP=FA-10A%GCD=1-6%ISR=FF-113%TI=Z%CI=I%II=RI%TS=U)
OPS(O1=M5B4%O2=M5B4%O3=M5B4%O4=M5B4%O5=M5B4%O6=M5B4)
WIN(W1=1020%W2=1020%W3=1020%W4=1020%W5=1020%W6=1020)
ECN(R=Y%DF=N%T=FA-104%TG=FF%W=1020%O=M5B4%CC=N)
T1(R=Y%DF=N%T=FA-104%TG=FF%S=O%A=S+%F=AS%RD=0)
T2(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=AR%RD=0)
T3(R=N)
T4(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%RD=0)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S+%F=AR%RD=0)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%RD=0)
T7(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=AR%RD=0)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# Cisco IOS Software, C3560E Software (C3560E-UNIVERSALK9-M), Version 12.2(53)SE2, RELEASE SOFTWARE (fc3)
Fingerprint Cisco Catalyst 3500-series switch (IOS 12.2)
Class Cisco | IOS | 12.X | switch
CPE cpe:/o:cisco:ios:12.2 auto
SEQ(SP=FC-10A%GCD=1-6%ISR=101-111%TI=RD%CI=RD%II=RI%TS=U)
OPS(O1=M5B4%O2=M578%O3=M280%O4=M218%O5=M218%O6=M109)
WIN(W1=1020%W2=1020%W3=1020%W4=1020%W5=1020%W6=1020)
ECN(R=Y%DF=Y%T=FA-104%TG=FF%W=1020%O=M5B4%CC=N%Q=)
T1(R=Y%DF=Y%T=FA-104%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%T=FA-104%TG=FF%W=1020%S=O%A=S+%F=AS%O=M5E2%RD=0%Q=)
T4(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# Cisco IOS Software, C3560 Software (C3560-ADVIPSERVICESK9-M), Version 12.2(44)SE, RELEASE SOFTWARE (fc1)
Fingerprint Cisco Catalyst 3500-series switch (IOS 12.2)
Class Cisco | IOS | 12.X | switch
CPE cpe:/o:cisco:ios:12.2 auto
SEQ(SP=FB-105%GCD=1-6%ISR=10A-114%TI=RD%CI=RD%II=RI%TS=A)
OPS(O1=M5A8T11LL%O2=M578T11LL%O3=M280T11LL%O4=M218T11LL%O5=M218T11LL%O6=M109T11LL)
WIN(W1=1020%W2=1020%W3=1020%W4=1020%W5=1020%W6=1020)
ECN(R=Y%DF=N%T=FA-104%TG=FF%W=1020%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=FA-104%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=FA-104%TG=FF%W=1020%S=O%A=S+%F=AS%O=M5B4%RD=0%Q=)
T4(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# IOS (tm) C3550 Software (C3550-I9Q3L2-M), Version 12.1(22)EA1a
Fingerprint Cisco Catalyst 3550 switch (IOS 12.1)
Class Cisco | IOS | 12.X | switch
CPE cpe:/h:cisco:catalyst_3550
CPE cpe:/o:cisco:ios:12.2
SEQ(SP=FB-10B%GCD=1-6%ISR=108-112%TI=Z%TS=U)
OPS(O1=M218%O2=M218%O3=M218%O4=M218%O5=M218%O6=M109)
WIN(W1=1020%W2=1020%W3=1020%W4=1020%W5=1020%W6=1020)
ECN(R=Y%DF=N%T=FB-105%TG=FF%W=1020%O=M218%CC=N%Q=)
T1(R=Y%DF=N%T=FB-105%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=FB-105%TG=FF%W=1020%S=O%A=S+%F=AS%O=M218%RD=0%Q=)
T4(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FB-105%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(R=N)

# Cisco IOS Software, C3550 Software (C3550-IPBASEK9-M), Version 12.2(44)SE2, RELEASE SOFTWARE (fc2)
Fingerprint Cisco Catalyst 3550 switch (IOS 12.2)
Class Cisco | IOS | 12.X | switch
CPE cpe:/h:cisco:catalyst_3550
CPE cpe:/o:cisco:ios:12.2
SEQ(SP=FA-108%GCD=1-6%ISR=103-10D%TI=RD%CI=RD|RI%II=RI%TS=U)
OPS(O1=M5B4%O2=M578%O3=M280%O4=M218%O5=M218%O6=M109)
WIN(W1=1020%W2=1020%W3=1020%W4=1020%W5=1020%W6=1020)
ECN(R=Y%DF=Y%T=FA-104%TG=FF%W=1020%O=M5B4%CC=N%Q=)
T1(R=Y%DF=Y%T=FA-104%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
T3(R=N)
T4(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# Cisco Catalyst 6509 (setup to perform routing)
# IOS (tm) c6sup2_rp Software (c6sup2_rp-JK2S-M), Version 12.1(26)E4, RELEASE SOFTWARE (fc1)
# Cisco Catalyst 6500 running 12.1(11r)E1, RELEASE SOFTWARE (fc1)
# Cisco Catalyst 3560 switch [WS-C3560-48PS] running IOS 12.2(35)SE1.
Fingerprint Cisco Catalyst 3560 or 6500-series switch (IOS 12.1 - 12.2)
Class Cisco | IOS | 12.X | switch
CPE cpe:/h:cisco:catalyst_3560
CPE cpe:/h:cisco:catalyst_6500
CPE cpe:/o:cisco:ios:12 auto
SEQ(SP=E6-107%GCD=1-6%ISR=105-114%TI=RD%II=RI%TS=U)
OPS(O1=M218%O2=M218%O3=M218%O4=M218%O5=M218%O6=M109)
WIN(W1=1020%W2=1020%W3=1020%W4=1020%W5=1020%W6=1020)
ECN(R=Y%DF=N%T=FA-104%TG=FF%W=1020%O=M218%CC=N%Q=)
T1(R=Y%DF=N%T=FA-104%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=FA-104%TG=FF%W=1020%S=O%A=S+%F=AS%O=M218%RD=0%Q=)
T4(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
U1(R=N)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# ipbase 12.2(17r)SX7 fc1 cisco 6509 sup720-10g
Fingerprint Cisco Catalyst 6509 switch (IOS 12.2)
Class Cisco | IOS | 12.X | switch
CPE cpe:/h:cisco:catalyst_6509
CPE cpe:/o:cisco:ios:12.2
SEQ(SP=FE-108%GCD=1-6%ISR=FD-107%TI=RD%CI=RD%II=RI%TS=U)
OPS(O1=M5B4%O2=M578%O3=M280%O4=M218%O5=M218%O6=M109)
WIN(W1=8000%W2=8000%W3=8000%W4=8000%W5=8000%W6=8000)
ECN(R=Y%DF=N%T=38-42%TG=40%W=8000%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=38-42%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=38-42%TG=40%W=8000%S=O%A=S+%F=AS%O=M109%RD=0%Q=)
T4(R=Y%DF=N%T=38-42%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=38-42%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=38-42%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=38-42%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FB-105%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=FB-105%TG=FF%CD=S)

# IOS 12.2(33)SXI3 running on 6509-E
Fingerprint Cisco Catalyst 6509-E switch (IOS 12.2)
Class Cisco | IOS | 12.X | switch
CPE cpe:/h:cisco:catalyst_6509:e
CPE cpe:/o:cisco:ios:12.2
SEQ(SP=FB-105%GCD=1-6%ISR=102-10C%TI=RD%CI=RD%II=RI%TS=U)
OPS(O1=M5B4%O2=M578%O3=M280%O4=M218%O5=M218%O6=M109)
WIN(W1=8000%W2=8000%W3=8000%W4=8000%W5=8000%W6=8000)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=8000%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=3B-45%TG=40%W=8000%S=O%A=S+%F=AS%O=M109%RD=0%Q=)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(R=N)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# Cisco LS1010 Cat8510MSR WA5-5 Software (Cat8510M-WP-M), Version 12.0(10)W5(18b)
Fingerprint Cisco Catalyst 8510MSR switch (IOS 12.0)
Class Cisco | IOS | 12.X | switch
CPE cpe:/h:cisco:catalyst_8510msr
CPE cpe:/o:cisco:ios:12.0
SEQ(SP=48-5C%GCD=1-6%ISR=9A-A4%TI=Z%II=RI%TS=U)
OPS(O1=M218%O2=M218%O3=M218%O4=M218%O5=M218%O6=M218)
WIN(W1=1020%W2=1020%W3=1020%W4=1020%W5=1020%W6=1020)
ECN(R=Y%DF=N%T=FB-105%TG=FF%W=1020%O=M218%CC=N%Q=)
T1(R=Y%DF=N%T=FB-105%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=FB-105%TG=FF%W=1020%S=O%A=S+%F=AS%O=M218%RD=0%Q=)
T4(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FB-105%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=FB-105%TG=FF%CD=S)

# Cisco IOS Software, CBS30X0 Software (CBS30X0-IPBASEK9-M), Version 12.2(46)SE, R
Fingerprint Cisco Catalyst Blade Switch 3020 (IOS 12.2)
Class Cisco | IOS | 12.X | switch
CPE cpe:/h:cisco:catalyst_blade_switch_3020
CPE cpe:/o:cisco:ios:12.2
SEQ(SP=FA-10A%GCD=1-6%ISR=103-111%TI=RD%CI=RD%II=RI%TS=U)
OPS(O1=M514%O2=M514%O3=M280%O4=M218%O5=M218%O6=M109)
WIN(W1=1020%W2=1020%W3=1020%W4=1020%W5=1020%W6=1020)
ECN(R=Y%DF=Y%T=FA-104%TG=FF%W=1020%O=M514%CC=N%Q=)
T1(R=Y%DF=Y%T=FA-104%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=Y%T=FA-104%TG=FF%W=1020%S=O%A=S+%F=AS%O=M514%RD=0%Q=)
T4(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# Cisco Switch CE500
# Catalyst Express 500
# Catalyst Express 520
Fingerprint Cisco Catalyst Express 500 or 520 switch
Class Cisco | IOS | 12.X | switch
CPE cpe:/h:cisco:catalyst_express_500
CPE cpe:/h:cisco:catalyst_express_520
CPE cpe:/o:cisco:ios:12 auto
SEQ(SP=FA-10A%GCD=1-6%ISR=103-10F%TI=Z|RD%CI=I|RD%II=RI%TS=U)
OPS(O1=M5B4%O2=M578%O3=M280%O4=M218%O5=M218%O6=M109)
WIN(W1=1020%W2=1020%W3=1020%W4=1020%W5=1020%W6=1020)
ECN(R=Y%DF=N%T=FA-104%TG=FF%W=1020%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=FA-104%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=FA-104%TG=FF%W=1020%S=O%A=S+%F=AS%O=M7A6%RD=0%Q=)
T4(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# Cisco Catalyst Express 500, IOS 12.2(25)SEG
Fingerprint Cisco Catalyst Express 500 switch (IOS 12.2)
Class Cisco | IOS | 12.X | switch
CPE cpe:/h:cisco:catalyst_express_500
CPE cpe:/o:cisco:ios:12.2
SEQ(SP=100-10A%GCD=1-6%ISR=109-113%TI=Z%CI=I%II=RI%TS=U)
OPS(O1=M218%O2=M218%O3=M218%O4=M218%O5=M218%O6=M109)
WIN(W1=1020%W2=1020%W3=1020%W4=1020%W5=1020%W6=1020)
ECN(R=Y%DF=N%T=FA-104%TG=FF%W=1020%O=M218%CC=N%Q=)
T1(R=Y%DF=N%T=FA-104%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=N)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# Cisco Catalyst 2960 IOS 12.2(35)SE5
# cisco 2960 8 port switch
# Cisco IOS Software, C3560 Software (C3560-IPBASE-M), Version 12.2(35)SE5, RELEASE SOFTWARE (fc1)
# Cisco IOS Software, C3750E Software (C3750E-UNIVERSAL-M), Version 12.2(35)SE5, RELEASE SOFTWARE (fc1)
# Cisco IOS Software, Catalyst 4500 L3 Switch Software (cat4500-IPBASEK9-M), Version 12.2(40)SG, RELEASE SOFTWARE (fc2)
# Cisco 12.2(50)SE IOS
Fingerprint Cisco Catalyst switch (IOS 12.2)
Class Cisco | IOS | 12.X | switch
CPE cpe:/o:cisco:ios:12.2 auto
SEQ(SP=F8-10C%GCD=1-6%ISR=102-113%TI=RD%CI=I|RD|RI%II=RI%TS=U)
OPS(O1=M5B4%O2=M578%O3=M280%O4=M218%O5=M218%O6=M109)
WIN(W1=1020%W2=1020%W3=1020%W4=1020%W5=1020%W6=1020)
ECN(R=Y%DF=N%T=FA-104%TG=FF%W=1020%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=FA-104%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=FA-104%TG=FF%W=1020%S=O%A=S+%F=AS%O=M5B4%RD=0%Q=)
T4(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# cisco 1131AG wireless access point running IOS 12.3(8)JA2
Fingerprint Cisco 1131AG WAP (IOS 12.3)
Class Cisco | IOS | 12.X | WAP
CPE cpe:/h:cisco:aironet_ap1131ag
CPE cpe:/o:cisco:ios:12.3
SEQ(SP=FF-109%GCD=1-6%ISR=109-113%TI=Z%II=RI%TS=U)
OPS(O1=M218%O2=M218%O3=M218%O4=M218%O5=M218%O6=M109)
WIN(W1=1020%W2=1020%W3=1020%W4=1020%W5=1020%W6=1020)
ECN(R=Y%DF=N%T=FA-104%TG=FF%W=1020%O=M218%CC=N%Q=)
T1(R=Y%DF=N%T=FA-104%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=AR|EAR%O=%RD=0%Q=)
T3(R=N)
T4(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R|ER%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S+%F=AR|EAR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=AR|EAR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# Aironet 1130 (AIR-AP1131AG-A-K9) rinning IOS 12.4(3g)JA (c1130-k9w7-tar.124-3g.JA)
Fingerprint Cisco Aironet 1130 WAP (IOS 12.4)
Class Cisco | IOS | 12.X | WAP
CPE cpe:/h:cisco:aironet_ap1131ag
CPE cpe:/o:cisco:ios:12.4
SEQ(SP=101-10B%GCD=1-6%ISR=107-111%TI=RD%CI=I%II=RI%TS=U)
OPS(O1=M5B4%O2=M578%O3=M280%O4=M218%O5=M218%O6=M109)
WIN(W1=1020%W2=1020%W3=1020%W4=1020%W5=1020%W6=1020)
ECN(R=Y%DF=N%T=FA-104%TG=FF%W=1020%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=FA-104%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
T3(R=N)
T4(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# Cisco AIR-AP1141N-E-K9 running IOS 12.4(21a)JA1
# AIR-CAP3602I-E-K9, Cisco IOS Software, C3600 Software (AP3G2-K9W7-M), Version 15.3(3)JAB, RELEASE SOFTWARE (fc1)
Fingerprint Cisco Aironet 1141N (IOS 12.4) or 3602I (IOS 15.3) WAP
Class Cisco | IOS | 12.X | WAP
CPE cpe:/o:cisco:ios:12.4 auto
Class Cisco | IOS | 15.X | WAP
CPE cpe:/h:cisco:aironet_1141n
CPE cpe:/h:cisco:aironet_3602i
CPE cpe:/o:cisco:ios:12.4
CPE cpe:/o:cisco:ios:15.3
SEQ(SP=F8-10A%GCD=1-6%ISR=106-110%TI=RD%CI=RD%II=RI%TS=U)
OPS(O1=M5B4%O2=M578%O3=M280%O4=M218%O5=M218%O6=M109)
WIN(W1=1020%W2=1020%W3=1020%W4=1020%W5=1020%W6=1020)
ECN(R=Y%DF=N%T=FA-104%TG=FF%W=1020%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=FA-104%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# Cisco Aironet 1200 Series (AIR-LAP-1232AG-E-K9)
Fingerprint Cisco Aironet 1200 WAP (IOS 12.3)
Class Cisco | IOS | 12.X | WAP
CPE cpe:/h:cisco:aironet_ap1200
CPE cpe:/o:cisco:ios:12.3
SEQ(SP=100-10A%GCD=1-6%ISR=101-10F%TI=RD%CI=RD|RI%II=RI%TS=U)
OPS(O1=M5B4%O2=M578%O3=M280%O4=M218%O5=M218%O6=M109)
WIN(W1=1020%W2=1020%W3=1020%W4=1020%W5=1020%W6=1020)
ECN(R=Y%DF=N%T=FA-104%TG=FF%W=1020%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=FA-104%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
T3(R=N)
T4(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S+%F=EAR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=ER%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=EAR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# Cisco IOS Software, C1200 Software (C1200-K9W7-M), Version 12.3(8)JEB1, RELEASE SOFTWARE (fc1)
# Cisco IOS Software, C1240 Software (C1240-K9W7-M), Version 12.4(10b)JDA3, RELEASE SOFTWARE (fc1)
Fingerprint Cisco Aironet 1200-series WAP router (IOS 12.3 - 12.4)
Class Cisco | IOS | 12.X | WAP
CPE cpe:/h:cisco:aironet_ap1200
CPE cpe:/o:cisco:ios:12
SEQ(SP=FE-108%GCD=1-6%ISR=105-10F%TI=RD%CI=RD|RI%II=RI%TS=U)
OPS(O1=M218%O2=M218%O3=M218%O4=M218%O5=M218%O6=M109)
WIN(W1=1020%W2=1020%W3=1020%W4=1020%W5=1020%W6=1020)
ECN(R=Y%DF=N%T=FA-104%TG=FF%W=1020%O=M218%CC=N%Q=)
T1(R=Y%DF=N%T=FA-104%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
T3(R=N)
T4(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# Cisco AP1231G 12.3(8)JEC2 IOS Filename: c1200-k9w7-mx.123-8.JEC2
Fingerprint Cisco Aironet 1231G WAP (IOS 12.3)
Class Cisco | IOS | 12.X | WAP
CPE cpe:/h:cisco:aironet_ap1231g
CPE cpe:/o:cisco:ios:12.3
SEQ(SP=FC-106%GCD=1-6%ISR=103-10F%TI=Z%II=RI%TS=U)
OPS(O1=M218%O2=M218%O3=M218%O4=M218%O5=M218%O6=M109)
WIN(W1=1020%W2=1020%W3=1020%W4=1020%W5=1020%W6=1020)
ECN(R=Y%DF=N%T=FA-104%TG=FF%W=1020%O=M218%CC=N%Q=)
T1(R=Y%DF=N%T=FA-104%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=FA-104%TG=FF%W=80%S=Z%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=FA-104%TG=FF%W=100%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T4(R=Y%DF=N%T=FA-104%TG=FF%W=400%S=A%A=S%F=AR%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=O%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=8000%S=A%A=S%F=AR%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FA-104%TG=FF%W=FFFF%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# Cisco Aironet 1240AG Access Point running system software 12.4(10b)JA
# Cisco 1240AG, IOS 12.4
# Cisco IOS Software, C2600 Software (C2600-ADVENTERPRISEK9_IVS-M), Version 12.4(4)XC7, RELEASE SOFTWARE (fc1)
# Cat 3560 IOS 12.2(35)SE5
# Cisco IOS Software, 2800 Software (C2800NM-SPSERVICESK9-M), Version 12.4(10b), RELEASE SOFTWARE (fc3), Cisco 2811 (revision 53.51) with 251904K/10240K bytes of memory.
Fingerprint Cisco Aironet 1240AG WAP, C2600 or C2800 router, or C3560 switch (IOS 12.2 - 12.4)
Class Cisco | IOS | 12.X | WAP
CPE cpe:/h:cisco:aironet_ap1240ag
CPE cpe:/o:cisco:ios:12.4
Class Cisco | IOS | 12.X | router
CPE cpe:/h:cisco:router_2600
CPE cpe:/h:cisco:router_2800
CPE cpe:/o:cisco:ios:12.4
Class Cisco | IOS | 12.X | switch
CPE cpe:/h:cisco:catalyst_3560
CPE cpe:/o:cisco:ios:12.2
SEQ(SP=F3-10D%GCD=1-6%ISR=F7-10F%TI=RD|RI%CI=I%II=RI%SS=O%TS=U)
OPS(O1=M218%O2=M218%O3=M218%O4=M218%O5=M218%O6=M109)
WIN(W1=1020%W2=1020%W3=1020%W4=1020%W5=1020%W6=1020)
ECN(R=Y%DF=N%T=FA-104%TG=FF%W=1020%O=M218%CC=N%Q=)
T1(R=Y%DF=N%T=FA-104%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
T3(R=N)
T4(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# Aironet 1250 series running IOS 12.4
# IOSXE on a ASR1001X router
Fingerprint Cisco Aironet 1250 WAP (IOS 12.4) or IOS XE
Class Cisco | IOS | 12.X | WAP
CPE cpe:/h:cisco:aironet_ap1250
CPE cpe:/o:cisco:ios:12.4
Class Cisco | IOS XE || router
CPE cpe:/o:cisco:ios_xe auto
SEQ(SP=FB-105%GCD=1-6%ISR=FE-10E%TI=RD%CI=RD|RI%II=RI%TS=U)
OPS(O1=M218%O2=M218%O3=M218%O4=M218%O5=M218%O6=M109)
WIN(W1=1020%W2=1020%W3=1020%W4=1020%W5=1020%W6=1020)
ECN(R=Y%DF=N%T=FA-104%TG=FF%W=1020%O=M218%CC=N%Q=)
T1(R=Y%DF=N%T=FA-104%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=N)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# Cisco IOS Software, C350 Software (C350-K9W7-M), Version 12.3(8)JA2, RELEASE SOFTWARE (fc1) / Cisco Aironet 350
# IOS 12.3(7)JA2 on a Cisco Aironet model AIR-AP1131AG-E-K9
# Cisco Aironet AIR-AP1200 running IOS 12.3(8)JA
# Cisco Aironet 1100
# C2600 Software (C2600-I-M), Version 12.3(20)
# Model: AIR-AP-1131AG-A-K9, Firmware Version:12.3(7) IOS
Fingerprint Cisco Aironet 350, 1100, 1200, or 1131AG WAP; or Cisco 2600 router (IOS 12.3)
Class Cisco | IOS | 12.X | WAP
CPE cpe:/h:cisco:aironet_ap350
CPE cpe:/h:cisco:aironet_ap1100
CPE cpe:/h:cisco:aironet_ap1200
CPE cpe:/o:cisco:ios:12.3
Class Cisco | IOS | 12.X | router
CPE cpe:/h:cisco:catalyst_2600
CPE cpe:/o:cisco:ios:12.3
SEQ(SP=DF-10D%GCD=1-6%ISR=107-10F%TI=Z%II=RI%TS=U)
OPS(O1=M5B4%O2=M578%O3=M280%O4=M218%O5=M218%O6=M109)
WIN(W1=1020%W2=1020%W3=1020%W4=1020%W5=1020%W6=1020)
ECN(R=Y%DF=N%T=FA-104%TG=FF%W=1020%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=FA-104%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
T3(R=N)
T4(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# cisco AIR-AP1232AG-E-K9 Cisco IOS Software, C1200 Software (C1200-K9W7-M), Version 12.3(7)JA2, RELEASE SOFTWARE (fc1)
# Cisco IOS Software, C1240 Software (C1240-K9W7-M), Version 12.3(8)JA2, RELEASE SOFTWARE (fc1)
# Cisco 5350 Media Gateway
# Cisco Aironet 1200 IOS Version  12.3(2)JA4
Fingerprint Cisco AS5350 VoIP gateway, or Aironet 1200, 1230, or 1240-series WAP (IOS 12.3)
Class Cisco | IOS | 12.X | WAP
CPE cpe:/h:cisco:as5350
CPE cpe:/h:cisco:aironet_ap1230
CPE cpe:/h:cisco:aironet_ap1240
CPE cpe:/h:cisco:aironet_ap1200
CPE cpe:/o:cisco:ios:12.3
SEQ(SP=CF-10D%GCD=1-6%ISR=F5-110%TI=Z%CI=I%II=RI%TS=U)
OPS(O1=M218%O2=M218%O3=M218%O4=M218%O5=M218%O6=M109)
WIN(W1=1020%W2=1020%W3=1020%W4=1020%W5=1020%W6=1020)
ECN(R=Y%DF=N%T=FA-104%TG=FF%W=1020%O=M218%CC=N%Q=)
T1(R=Y%DF=N%T=FA-104%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
T3(R=N)
T4(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# Cisco IOS Software, C1900 Software (C1900-UNIVERSALK9-M), Version 15.4(3)M2, RELEASE SOFTWARE (fc2)
Fingerprint Cisco 1900-series router (IOS 15.4)
Class Cisco | IOS | 15.X | router
CPE cpe:/o:cisco:ios:15.4 auto
SEQ(SP=102-10C%GCD=1-6%ISR=106-110%TI=RD%CI=RD|RI%II=RI%TS=U)
OPS(O1=M564%O2=M564%O3=M564%O4=M218%O5=M564%O6=M564)
WIN(W1=1020%W2=1020%W3=1020%W4=1020%W5=1020%W6=1020)
ECN(R=Y%DF=N%T=FB-105%TG=FF%W=1020%O=M564%CC=N%Q=)
T1(R=Y%DF=N%T=FB-105%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FB-105%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=FB-105%TG=FF%CD=S)

# Cisco 1921 running IOS 15.1(4)M4
Fingerprint Cisco 1921 router (IOS 15.1)
Class Cisco | IOS | 15.X | router
CPE cpe:/h:cisco:1921_integrated_services_router
CPE cpe:/o:cisco:ios:15.1 auto
SEQ(SP=F2-10A%GCD=1-6%ISR=FD-10F%TI=RD%CI=RD|RI%II=RI%TS=U)
OPS(O1=M5B4SNNW1LLLS|M5B4SNNW1LLLLL%O2=M578SNNW1LLLS|M578SNNW1LLSL|M578SNNW1LW5N|M578SNNW1LLLLL%O3=|M280W1LLLS|M280W1LLSL|M280W1LW1L%O4=M218SNNW1LLLS|M218SNNW1LLSL|M218SNNW1LLLLL%O5=M218SNNW1LLLS|M218SNNW1LLSL|M218SNNW1LLLLL|M218SNNW1LNLLL%O6=M109SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=N%T=FB-105%TG=FF%W=FFFF%O=M5B4SNNW1LLLS|M5B4SNNW1LLLLL%CC=N%Q=)
T1(R=Y%DF=N%T=FB-105%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FB-105%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=FB-105%TG=FF%CD=S)

# Cisco 2811 Router, running C2800NM-ADVENTERPRISEK9-M Version 15.1(2)T1
Fingerprint Cisco 2811 router (IOS 15.1)
Class Cisco | IOS | 15.X | router
CPE cpe:/h:cisco:catalyst_2811
CPE cpe:/o:cisco:ios:15.1
SEQ(SP=FF-10B%GCD=1-6%ISR=10A-114%TI=RD%CI=RD%II=RI%TS=U)
OPS(O1=M5B4SLL%O2=M578SLL%O3=M280%O4=M218SLL%O5=M218SLL%O6=M109SLL)
WIN(W1=1020%W2=1020%W3=1020%W4=1020%W5=1020%W6=1020)
ECN(R=Y%DF=N%T=FB-105%TG=FF%W=1020%O=M5B4SLL%CC=Y%Q=)
T1(R=Y%DF=N%T=FB-105%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FB-105%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=FB-105%TG=FF%CD=S)

# Cisco IOS Software, C880 Software (C880DATA-UNIVERSALK9-M), Version 15.1(3)T1, RELEASE SOFTWARE (fc2)
Fingerprint Cisco 880 router (IOS 15.1)
Class Cisco | IOS | 15.X | router
CPE cpe:/o:cisco:ios:15.1 auto
SEQ(SP=FA-104%GCD=1-6%ISR=106-110%TI=RD%II=RI%TS=U)
OPS(O1=M218%O2=M218%O3=M218%O4=M218%O5=M218%O6=M218)
WIN(W1=1020%W2=1020%W3=1020%W4=1020%W5=1020%W6=1020)
ECN(R=Y%DF=N%T=FB-105%TG=FF%W=1020%O=M218%CC=N%Q=)
T1(R=Y%DF=N%T=FB-105%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=S+%F=AR%O=%RD=0%Q=)
T6(R=N)
T7(R=N)
U1(DF=N%T=FB-105%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=FB-105%TG=FF%CD=S)

# Cisco 887 VA router (VDSL/ADSL one) running IOS 15.1(3)T1
Fingerprint Cisco 887 router (IOS 15.1)
Class Cisco | IOS | 15.X | router
CPE cpe:/o:cisco:ios:15.1 auto
SEQ(SP=100-10A%GCD=1-6%ISR=108-112%TI=RD%CI=RD%II=RI%TS=A)
OPS(O1=M5B4SNNT11LL%O2=M5B4SNNT11LL%O3=M5B4T11LL%O4=M218SNNT11LL%O5=M5B4SNNT11LL%O6=M5B4SNNT11LL)
WIN(W1=1020%W2=1020%W3=1020%W4=1020%W5=1020%W6=1020)
ECN(R=Y%DF=N%T=FB-105%TG=FF%W=1020%O=M5B4SLL%CC=N)
T1(R=Y%DF=N%T=FB-105%TG=FF%S=O%A=S+%F=AS%RD=0)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=Z%F=R%RD=0)
T5(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=S+%F=AR%RD=0)
T6(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=Z%F=R%RD=0)
T7(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=S%F=AR%RD=0)
U1(DF=N%T=FB-105%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=FB-105%TG=FF%CD=S)

# Cisco c7200 router running in GNS3 on Windows XP
Fingerprint Cisco C7200 router (IOS 15)
Class Cisco | IOS | 15.X | router
CPE cpe:/h:cisco:catalyst_7200
CPE cpe:/o:cisco:ios:15 auto
SEQ(SP=100-10A%GCD=1-6%ISR=FD-107%TI=I%CI=RI%II=RI%SS=O|S%TS=0)
OPS(O1=M5B4NW0NNT00NNS%O2=M5B4NW0NNT00NNS%O3=M5B4NW0NNT00%O4=M5B4NW0NNT00NNS%O5=M5B4NW0NNT00NNS%O6=M5B4NNT00NNS)
WIN(W1=4470%W2=41A0%W3=4100%W4=40E8%W5=40E8%W6=402E)
ECN(R=Y%DF=N%T=7D-87%TG=80%W=4470%O=M5B4NW0NNS%CC=N%Q=)
T1(R=Y%DF=N%T=7D-87%TG=80%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=N)
U1(DF=N%T=FB-105%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=C3B4%RUD=G)
IE(DFI=S%T=FB-105%TG=FF%CD=S)

# Cisco IOS Software, 7200 Software (C7200-ADVENTERPRISEK9-M), Version 15.2(4)S2
Fingerprint Cisco C7200 router (IOS 15.2)
Class Cisco | IOS | 15.X | router
CPE cpe:/h:cisco:catalyst_7200
CPE cpe:/o:cisco:ios:15.2 auto
SEQ(SP=104-10E%GCD=1-6%ISR=105-10F%TI=RD%CI=RD%II=RI%TS=U)
OPS(O1=M5B4%O2=M578%O3=M280%O4=M218%O5=M218%O6=M109)
WIN(W1=1020%W2=1020%W3=1020%W4=1020%W5=1020%W6=1020)
ECN(R=Y%DF=N%T=FB-105%TG=FF%W=1020%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=FB-105%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=FB-105%TG=FF%W=1020%S=O%A=S+%F=AS%O=M109%RD=0%Q=)
T4(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FB-105%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=FB-105%TG=FF%CD=S)

# Cisco IOS Software, C860 Software (C860-UNIVERSALK9-M), Version 15.2(2)T, RELEASE SOFTWARE (fc1)
Fingerprint Cisco C860 router (IOS 15.2)
Class Cisco | IOS | 15.X | router
CPE cpe:/h:cisco:860_router
CPE cpe:/o:cisco:ios:15.2
SEQ(SP=FA-106%GCD=1-6%ISR=F9-10F%TI=RD%CI=RD%II=RI%TS=U)
OPS(O1=M5B4%O2=M5B4%O3=M5B4%O4=M5B4%O5=M5B4%O6=M5B4)
WIN(W1=1020%W2=1020%W3=1020%W4=1020%W5=1020%W6=1020)
ECN(R=Y%DF=N%T=FB-105%TG=FF%W=1020%O=M5B4%CC=N)
T1(R=Y%DF=N%T=FB-105%TG=FF%S=O%A=S+%F=AS%RD=0)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=Z%F=R%RD=0)
T5(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=S+%F=AR%RD=0)
T6(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=Z%F=R%RD=0)
T7(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=S%F=AR%RD=0)
U1(DF=N%T=FB-105%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=FB-105%TG=FF%CD=S)

# Cisco IOS 15
Fingerprint Cisco IOS 15
Class Cisco | IOS | 15.X | router
CPE cpe:/o:cisco:ios:15 auto
SEQ(SP=F4-FE%GCD=1-6%ISR=F5-FF%TI=RD%CI=RD%II=RI%TS=U)
OPS(O1=M5B4%O2=M578%O3=M280%O4=M218%O5=M218%O6=M109)
WIN(W1=1020%W2=1020%W3=1020%W4=1020%W5=1020%W6=1020)
ECN(R=Y%DF=N%T=FB-105%TG=FF%W=1020%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=FB-105%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FB-105%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=FB-105%TG=FF%CD=S)

# Cisco IOS Software, C880 Software (C880DATA-UNIVERSALK9-M), Version 15.5(3)M4a, RELEASE SOFTWARE (fc1)
# Cisco IOS Software, C1250 Software (C1250-K9W7-M), Version 15.2(2)JA1, RELEASE SOFTWARE (fc1)
Fingerprint Cisco IOS 15.2 - 15.5
Class Cisco | IOS | 15.X | router
CPE cpe:/o:cisco:ios:15 auto
SEQ(SP=F7-109%GCD=1-6%ISR=FB-107%TI=RD%CI=RD%TS=A)
OPS(O1=M5B4SNNT11LL%O2=M578SNNT11LL%O3=M280T11LL%O4=M218SNNT11LL%O5=M218SNNT11LL%O6=M109SNNT11LL)
WIN(W1=1020%W2=1020%W3=1020%W4=1020%W5=1020%W6=1020)
ECN(R=Y%DF=N%T=FB-105%TG=FF%W=1020%O=M5B4SLL%CC=N%Q=)
T1(R=Y%DF=N%T=FB-105%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FB-105%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=FB-105%TG=FF%CD=S)

# Product/Model Number: AIR-AP1042N-R-K9, Version 15.2(4)JA1
# Cisco IOS Software, C800 Software (C800-UNIVERSALK9-M), Version 15.8(3)M6
Fingerprint Cisco IOS 15.2 - 15.8
Class Cisco | IOS | 15.X | router
CPE cpe:/o:cisco:ios:15 auto
SEQ(SP=FB-105%GCD=1-6%ISR=FF-10D%TI=RD%II=RI%TS=U)
OPS(O1=M218%O2=M218%O3=M218%O4=M218%O5=M218%O6=M109)
WIN(W1=1020%W2=1020%W3=1020%W4=1020%W5=1020%W6=1020)
ECN(R=Y%DF=N%T=FB-105%TG=FF%W=1020%O=M218%CC=N%Q=)
T1(R=Y%DF=N%T=FB-105%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=O%A=S+%F=AR%O=%RD=0%Q=)
T6(R=N)
T7(R=N)
U1(DF=N%T=FB-105%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=FB-105%TG=FF%CD=S)

# C2951 Software (C2951-UNIVERSALK9-M), Version 15.5(2)T2
Fingerprint Cisco IOS 15.5
Class Cisco | IOS | 15.X | router
CPE cpe:/o:cisco:ios:15.5 auto
SEQ(SP=103-10D%GCD=1-6%ISR=108-112%TI=RD%CI=RD%II=RI%TS=U)
OPS(O1=M218%O2=M218%O3=M218%O4=M218%O5=M218%O6=M218)
WIN(W1=1020%W2=1020%W3=1020%W4=1020%W5=1020%W6=1020)
ECN(R=Y%DF=N%T=FB-105%TG=FF%W=1020%O=M218%CC=N%Q=)
T1(R=Y%DF=N%T=FB-105%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=FB-105%TG=FF%W=80%S=Z%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=FB-105%TG=FF%W=100%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T4(R=Y%DF=N%T=FB-105%TG=FF%W=400%S=A%A=S%F=AR%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=O%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FB-105%TG=FF%W=8000%S=A%A=S%F=AR%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FB-105%TG=FF%W=FFFF%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FB-105%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=FB-105%TG=FF%CD=S)

# Version 15.9(3)M2, RELEASE SOFTWARE (fc1)
Fingerprint Cisco IOS 15.9
Class Cisco | IOS | 15.X | router
CPE cpe:/o:cisco:ios:15.9 auto
SEQ(SP=FE-108%GCD=1-6%ISR=103-10D%TI=RD%CI=RI%II=RI%TS=U)
OPS(O1=M5B4%O2=M578%O3=M280%O4=M218%O5=M218%O6=M109)
WIN(W1=1020%W2=1020%W3=1020%W4=1020%W5=1020%W6=1020)
ECN(R=Y%DF=N%T=FB-105%TG=FF%W=1020%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=FB-105%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=N)
U1(DF=N%T=FB-105%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=FB-105%TG=FF%CD=S)

# Cisco IOS Software, C2960C Software (C2960c405ex-UNIVERSALK9-M), Version 15.2(2)E3, RELEASE SOFTWARE (fc3)
Fingerprint Cisco Catalyst 2960 switch (IOS 15.2)
Class Cisco | IOS | 15.X | switch
CPE cpe:/o:cisco:ios:15.2 auto
SEQ(SP=F8-102%GCD=1-6%ISR=104-10E%TI=RD%CI=RD%II=RI%TS=U)
OPS(O1=M5B4%O2=M578%O3=M280%O4=M218%O5=M218%O6=M109)
WIN(W1=1020%W2=1020%W3=1020%W4=1020%W5=1020%W6=1020)
ECN(R=Y%DF=N%T=FA-104%TG=FF%W=1020%O=M5B4%CC=Y%Q=)
T1(R=Y%DF=N%T=FA-104%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# Cisco IOS Software, C3560CX Software (C3560CX-UNIVERSALK9-M), Version 15.2(5)E, RELEASE SOFTWARE (fc1)
Fingerprint Cisco Catalyst 3500-series switch (IOS 15.2)
Class Cisco | IOS | 15.X | switch
CPE cpe:/o:cisco:ios:15.2 auto
SEQ(SP=102-10C%GCD=1-6%ISR=102-10C%TI=RD%CI=RD%II=RI%TS=U)
OPS(O1=M218%O2=M218%O3=M218%O4=M218%O5=M218%O6=M109)
WIN(W1=1020%W2=1020%W3=1020%W4=1020%W5=1020%W6=1020)
ECN(R=Y%DF=N%T=FA-104%TG=FF%W=1020%O=M218%CC=Y%Q=)
T1(R=Y%DF=N%T=FA-104%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# AIR-SAP2602E-E-K9, FW: 15.2(2)JA
Fingerprint Cisco Aironet 2600-series WAP (IOS 15.2(2))
Class Cisco | IOS | 15.X | WAP
CPE cpe:/o:cisco:ios:15.2 auto
SEQ(SP=FF-109%GCD=1-6%ISR=104-10E%TI=RD%CI=RD|RI%II=RI%TS=U)
OPS(O1=M5B4%O2=M578%O3=M280%O4=M218%O5=M218%O6=M109)
WIN(W1=1020%W2=1020%W3=1020%W4=1020%W5=1020%W6=1020)
ECN(R=Y%DF=N%T=FA-104%TG=FF%W=1020%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=FA-104%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# WS-C3560X-48
Fingerprint Cisco 3560-X switch
Class Cisco | IOS || switch
CPE cpe:/o:cisco:ios auto
SEQ(SP=F7-101%GCD=1-6%ISR=107-111%TI=RD%CI=RI%II=RI%TS=U)
OPS(O1=M5B4%O2=M578%O3=M280%O4=M218%O5=M218%O6=M109)
WIN(W1=1020%W2=1020%W3=1020%W4=1020%W5=1020%W6=1020)
ECN(R=Y%DF=N%T=FB-105%TG=FF%W=1020%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=FB-105%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=FB-105%TG=FF%W=1020%S=O%A=S+%F=AS%O=M1020%RD=0%Q=)
T4(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FB-105%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=FB-105%TG=FF%CD=S)

# 16.11.01
Fingerprint Cisco IOS-XE 16.11
Class Cisco | IOS-XE | 16.X | router
CPE cpe:/o:cisco:ios_xe:16.11 auto
SEQ(SP=F4-FE%GCD=1-6%ISR=10C-116%TI=RD%CI=RI%II=RI%TS=U)
OPS(O1=M54D%O2=M54D%O3=M280%O4=M218%O5=M218%O6=M109)
WIN(W1=1020%W2=1020%W3=1020%W4=1020%W5=1020%W6=1020)
ECN(R=Y%DF=N%T=FB-105%TG=FF%W=1020%O=M54D%CC=N%Q=)
T1(R=Y%DF=N%T=FB-105%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FB-105%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=N)
U1(DF=N%T=FB-105%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=FB-105%TG=FF%CD=S)

# Cisco Nexus Operating System (NX-OS), kickstart: version 4.2(1a), cisco MDS 9509
Fingerprint Cisco MDS 9509 switch (NX-OS 4.2)
Class Cisco | NX-OS | 4.X | switch
CPE cpe:/o:cisco:mds_9509
CPE cpe:/o:cisco:nx_os:4.2 auto
SEQ(SP=FA-104%GCD=1-6%ISR=FC-10A%TI=I|RD%CI=RD%II=I%SS=S%TS=7-9)
OPS(O1=M564ST11NW6%O2=M564ST11NW6%O3=M564NNT11NW6%O4=M564ST11NW6%O5=M564ST11NW6%O6=M564ST11)
WIN(W1=16A0%W2=16A0%W3=16A0%W4=16A0%W5=16A0%W6=16A0)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=16D0%O=M564NNSNW6%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=O|S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=FA-104%TG=FF%W=80%S=Z%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=FA-104%TG=FF%W=100%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T4(R=Y%DF=N%T=FA-104%TG=FF%W=400%S=A%A=S%F=AR%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=O%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=8000%S=A%A=S%F=AR%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FA-104%TG=FF%W=FFFF%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# Cisco Nexus 5010, NX-OS Version 4.1(3)N1(1)
# Cisco Nexus 5010 Switch, system:    version 4.1(3)N2(1)
# Cisco Nexus Operating System (NX-OS) Software, cisco Nexus5010 Chassis ("20x10GE/Supervisor"), System version: 4.1(3)N2(1)
Fingerprint Cisco Nexus 5010 switch (NX-OS 4.1)
Class Cisco | NX-OS | 4.X | switch
CPE cpe:/o:cisco:nexus_5010
CPE cpe:/o:cisco:nx_os:4.1 auto
SEQ(SP=F3-10B%GCD=1-6%ISR=105-10F%TI=I%CI=I%II=RI%SS=O|S%TS=3)
OPS(O1=M200NNT11%O2=M200NNT11%O3=M200NNT11%O4=M200NNT11%O5=M200NNT11%O6=M200NNT11)
WIN(W1=4334%W2=4334%W3=44B0%W4=4650%W5=47A4%W6=4825)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=4B1C%O=M200%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=I%RUCK=0%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# Cisco NX-OS(tm) n7000, Software (n7000-s1-dk9), Version 4.2(4), RELEASE SOFTWARE
Fingerprint Cisco Nexus 7000 switch (NX-OS 4.2(4))
Class Cisco | NX-OS | 4.X | switch
CPE cpe:/o:cisco:nexus_7000
CPE cpe:/o:cisco:nx_os:4.2 auto
SEQ(SP=FF-109%GCD=1-6%ISR=107-111%TI=I%CI=I%II=RI%SS=O|S%TS=3)
OPS(O1=M218NNT11%O2=M218NNT11%O3=M218NNT11%O4=M218NNT11%O5=M218NNT11%O6=M109NNT11)
WIN(W1=9E20|A214|A608|A9FC|ADF0%W2=9E20|A214|A608|A9FC|ADF0%W3=9F74|A45C|A6D0|ABB8|AE2C%W4=9FA8|A5CC|A7D8|ABF0|B008%W5=9FA8|A5CC|A7D8|ABF0|B008%W6=A01A|A608|A802|ABF6|B0E7)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=A214|A608|A9FC|ADF0|B1E4%O=M218%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# Cisco Nexus Operating System (NX-OS) Software, cisco Nexus7000 C7010, kickstart image file is: bootflash:/n7000-s1-kickstart.4.2.6.bin
Fingerprint Cisco Nexus 7000 switch (NX-OS 4.2.6)
Class Cisco | NX-OS | 4.X | switch
CPE cpe:/o:cisco:nexus_7000
CPE cpe:/o:cisco:nx_os:4.2.6 auto
SEQ(SP=FA-104%GCD=1-6%ISR=109-113%TI=I%CI=RD%II=RI%SS=O%TS=3)
OPS(O1=M218NNT11%O2=M218NNT11%O3=M218NNT11%O4=M218NNT11%O5=M218NNT11%O6=M109NNT11)
WIN(W1=4334|4728%W2=4334|4728%W3=44B0|4998%W4=4598|49B0%W5=4598|49B0%W6=462B|4A1F)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=4728%O=M218%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=O|S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=FA-104%TG=FF%W=80%S=Z%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=FA-104%TG=FF%W=100%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T4(R=Y%DF=N%T=FA-104%TG=FF%W=400%S=A%A=S%F=AR%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=O%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=8000%S=A%A=S%F=AR%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FA-104%TG=FF%W=FFFF%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# NX-OS 4.0(1a) image on a Cisco Nexus 7000-series switch supervisor module
Fingerprint Cisco Nexus 7000-series switch (NX-OS 4.0(1a))
Class Cisco | NX-OS | 4.X | switch
CPE cpe:/o:cisco:nexus_7000
CPE cpe:/o:cisco:nx_os:4.0 auto
SEQ(SP=FD-10D%GCD=1-6%ISR=FA-10F%TI=I%II=RI%SS=O|S%TS=3)
OPS(O1=M200NNT11%O2=M200NNT11%O3=M200NNT11%O4=M200NNT11%O5=M200NNT11%O6=M200NNT11)
WIN(W1=5EE0|62D4|66C8|6ABC|6EB0%W2=5EE0|62D4|66C8|6ABC|6EB0%W3=5FAC|6494|6708|6BF0|70D8%W4=5FB4|6590|6784|6D60|7148%W5=6034|6658|6864|6E88|72A0%W6=60DA|66C8|68C2|6EB0|72A4)
ECN(R=Y%DF=N%T=3C-46%TG=40%W=62D4|66C8|6ABC|6EB0|72A4%O=M200%CC=N%Q=)
T1(R=Y%DF=N%T=3C-46%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=3C-46%TG=40%W=62D4|66C8|6ABC|6EB0|72A4%S=O%A=S+%F=AS%O=M200NNT11%RD=0%Q=)
T4(R=Y%DF=N%T=3C-46%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3C-46%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3C-46%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3C-46%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FB-105%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=I%RUCK=0%RUD=G)
IE(DFI=S%T=FB-105%TG=FF%CD=S)

# Nexus 7010 running 4.0(4)
Fingerprint Cisco Nexus 7010 switch (NX-OS 4.0(4))
Class Cisco | NX-OS | 4.X | switch
CPE cpe:/o:cisco:nexus_7010
CPE cpe:/o:cisco:nx_os:4.0 auto
SEQ(SP=F9-109%GCD=1-6%ISR=FB-10D%TI=I%CI=I%II=RI%SS=S%TS=3|4)
OPS(O1=M200NNT11%O2=M200NNT11%O3=M200NNT11%O4=M200NNT11%O5=M200NNT11%O6=M200NNT11)
WIN(W1=4728|4F10|56F8|5AEC|5EE0%W2=4728|4F10|56F8|5AEC|5EE0%W3=4998|50F4|5850|5D38|5FAC%W4=4A38|5208|59D8|5DC0|5FB4%W5=4BBC|53EC|5A10|5E28|6034%W6=4C19|5401|5AEC|5EE0|60DA)
ECN(R=Y%DF=N%T=3C-46%TG=40%W=4F10|56F8|5AEC|5EE0|62D4%O=M200%CC=N%Q=)
T1(R=Y%DF=N%T=3C-46%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=3C-46%TG=40%W=4F10%S=O%A=S+%F=AS%O=M200NNT11%RD=0%Q=)
T4(R=Y%DF=N%T=3C-46%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3C-46%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3C-46%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3C-46%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FB-105%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=I%RUCK=0%RUD=G)
IE(DFI=S%T=FB-105%TG=FF%CD=S)

# Cisco NX-OS 4.2(1) on an 7010 Chassis
Fingerprint Cisco Nexus 7010 switch (NX-OS 4.2(1))
Class Cisco | NX-OS | 4.X | switch
CPE cpe:/o:cisco:nexus_7010
CPE cpe:/o:cisco:nx_os:4.2 auto
SEQ(SP=F4-FE%GCD=1-6%ISR=109-113%CI=I%II=RI%TS=3|4)
OPS(O1=M5B4NNT11%O2=M578NNT11%O3=M280NNT11%O4=M5B4NNT11%O5=M218NNT11%O6=M109NNT11)
WIN(W1=4334%W2=4334%W3=44B0%W4=4598%W5=4598%W6=462B)
ECN(R=Y%DF=N%T=3C-46%TG=40%W=4728%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=3C-46%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=3C-46%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3C-46%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3C-46%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3C-46%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FB-105%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=I%RUCK=0%RUD=G)
IE(DFI=S%T=FB-105%TG=FF%CD=S)

# Software 4.0(1a)N1(1)
Fingerprint Cisco NX-OS 4.0(1a)N1(1)
Class Cisco | NX-OS | 4.X | switch
CPE cpe:/o:cisco:nx_os:4.0 auto
SEQ(SP=F8-10A%GCD=1-6%ISR=100-10E%TI=I%CI=RD|RI%II=RI%SS=S%TS=3)
OPS(O1=M200NNT11%O2=M200NNT11%O3=M200NNT11%O4=M200NNT11%O5=M200NNT11%O6=M200NNT11)
WIN(W1=A214|A9FC|ADF0|B1E4|B5D8%W2=A214|A9FC|ADF0|B1E4|B5D8%W3=A45C|ABB8|AE2C|B314|B7FC%W4=A604|ABE0|AFC8|B3B0|B98C%W5=A7D8|ABF0|B008|B420|BA44%W6=A802|ABF6|B0E7|B4DB|BAC9)
ECN(R=Y%DF=N%T=3C-46%TG=40%W=A9FC|ADF0|B1E4|B5D8|BDC0%O=M200%CC=N%Q=)
T1(R=Y%DF=N%T=3C-46%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=FB-105%TG=FF%W=80%S=Z%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=FB-105%TG=FF%W=100%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T4(R=Y%DF=N%T=FB-105%TG=FF%W=400%S=A%A=S%F=AR%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3C-46%TG=40%W=0%S=O%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FB-105%TG=FF%W=8000%S=A%A=S%F=AR%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FB-105%TG=FF%W=FFFF%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FB-105%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=I%RUCK=0%RUD=G)
IE(DFI=S%T=FB-105%TG=FF%CD=S)

# cisco Nexus5548 Chassis ("O2 32X10GE/Modular Supervisor") system:    version 5.2(1)N1(1)
Fingerprint Cisco Nexus 5548 switch (NX-OS 5.2)
Class Cisco | NX-OS | 5.X | switch
CPE cpe:/o:cisco:nexus_5548
CPE cpe:/o:cisco:nx_os:5.2 auto
SEQ(SP=FF-109%GCD=1-6%ISR=107-111%TI=I%CI=I%II=RI%SS=S%TS=3)
OPS(O1=M218NNT11%O2=M218NNT11%O3=M218NNT11%O4=M218NNT11%O5=M218NNT11%O6=M109NNT11)
WIN(W1=5FF0%W2=5FF0%W3=6220%W4=6240%W5=6240%W6=62D4)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=6988%O=M218%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=I%RUCK=0%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# cisco Nexus5548 Chassis ("O2 32X10GE/Modular Universal Platform Supervisor") System version: 5.1(3)N1(1)
Fingerprint Cisco Nexus 5548P switch (NX-OS 5.1)
Class Cisco | NX-OS | 5.X | switch
CPE cpe:/o:cisco:nexus_5548p
CPE cpe:/o:cisco:nx_os:5.1 auto
SEQ(SP=FC-106%GCD=1-6%ISR=103-10F%TI=I%II=RI%SS=O%TS=3)
OPS(O1=M218NNT11%O2=M218NNT11%O3=M218NNT11%O4=M218NNT11%O5=M218NNT11%O6=M109NNT11)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=FFFF%O=M218%CC=N)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=N)
T6(R=N)
T7(R=N)
U1(R=N)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# This is a cisco Nexus7000 C7009 NX-OS 5.2(4)
Fingerprint Cisco Nexus 7000 switch (NX-OS 5.2(4))
Class Cisco | NX-OS | 5.X | switch
CPE cpe:/o:cisco:nexus_7000
CPE cpe:/o:cisco:nx_os:5.2 auto
SEQ(SP=F4-10A%GCD=1-6%ISR=107-113%TI=I%CI=I%II=RI%SS=O%TS=3)
OPS(O1=M218NNT11%O2=M218NNT11%O3=M218NNT11%O4=M218NNT11%O5=M218NNT11%O6=M109NNT11)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=FFFF%O=M218%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=I%RUCK=0%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# Cisco Nexus 7010
Fingerprint Cisco Nexus 7010 switch (NX-OS 5)
Class Cisco | NX-OS | 5.X | switch
CPE cpe:/o:cisco:nexus_7010
CPE cpe:/o:cisco:nx_os:5 auto
SEQ(SP=101-10B%GCD=1-6%ISR=100-112%TI=I%II=RI%SS=O|S%TS=3)
OPS(O1=M218NNT11%O2=M218NNT11%O3=M218NNT11%O4=M218NNT11%O5=M218NNT11%O6=M109NNT11)
WIN(W1=4884|4E18|5940|6468|69FC%W2=4BE8|5154|5C2C|6704|6C70%W3=4C0C|5368|5D38|6708|6E64%W4=4DC8|53EC|5E28|6864|6E88%W5=4DC8|53EC|5E28|6864|6E88%W6=4E13|5401|5EE0|68C2|6EB0)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=4E18|5940|6468|69FC|6F90%O=M218%CC=N)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=N)
T6(R=N)
T7(R=N)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# Cisco Nexus System version: 5.1(2) on Nesus 7010 BIOS:      version 3.22.0
Fingerprint Cisco Nexus 7010 switch (NX-OS 5.1(2))
Class Cisco | NX-OS | 5.X | switch
CPE cpe:/o:cisco:nexus_7010
CPE cpe:/o:cisco:nx_os:5.1 auto
SEQ(SP=103-10D%GCD=1-6%ISR=102-110%TI=I%II=RI%SS=S%TS=3)
OPS(O1=M5B4NNT11%O2=M578NNT11%O3=M280NNT11%O4=M5B4NNT11%O5=M218NNT11%O6=M109NNT11)
WIN(W1=A758|ACEC|B280|B814|BDA8%W2=A814|AD80|B2EC|B858|BDC4%W3=A944|AE2C|B314|BA70|BF58%W4=A9E4|B008|B420|BC50|C068%W5=A9E4|B008|B420|BC50|C068%W6=A9FC|B0E7|B4DB|BCC3|C0B7)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=ACEC|B280|B814|BDA8|C33C%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=N)
T6(R=N)
T7(R=N)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# Cisco | NX-OS | 5.X | switch
# system:    version 6.0(2)U3(1)
Fingerprint Cisco Nexus switch (NX-OS 5 or 6.0(2))
Class Cisco | NX-OS | 5.X | switch
CPE cpe:/o:cisco:nx_os:5 auto
Class Cisco | NX-OS | 6.X | switch
CPE cpe:/o:cisco:nx_os:6 auto
SEQ(SP=FE-10A%GCD=1-6%ISR=104-110%TI=I%CI=I%II=RI%SS=O%TS=3)
OPS(O1=M5B4NNT11%O2=M578NNT11%O3=M280NNT11%O4=M5B4NNT11%O5=M218NNT11%O6=M109NNT11)
WIN(W1=4328|47F4|4CC0|518C|5658%W2=4328|47F4|4CC0|518C|5658%W3=44B0|4998|4E80|5368|5850%W4=4598|49B0|4FD4|53EC|5A10%W5=4598|49B0|4FD4|53EC|5A10%W6=462B|4A1F|500D|5401|5AEC)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=47F4|4CC0|518C|5658|5B24%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=I%RUCK=0%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# Cisco NX-OS 5.X
Fingerprint Cisco Nexus switch (NX-OS 5)
Class Cisco | NX-OS | 5.X | switch
CPE cpe:/o:cisco:nx_os:5 auto
SEQ(SP=100-10A%GCD=1-6%ISR=109-113%TI=I%CI=I%II=RI%SS=S%TS=3)
OPS(O1=M5B4NNT11%O2=M578NNT11%O3=M280NNT11%O4=M5B4NNT11%O5=M218NNT11%O6=M109NNT11)
WIN(W1=A1C4%W2=A2A8%W3=A45C%W4=A5CC%W5=A5CC%W6=A608)
ECN(R=Y%DF=N%T=3C-46%TG=40%W=A758%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=3C-46%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=3C-46%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3C-46%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3C-46%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3C-46%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FB-105%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=FB-105%TG=FF%CD=S)

# 5.0(3)U1(1a)
Fingerprint Cisco Nexus switch (NX-OS 5.0)
Class Cisco | NX-OS | 5.X | switch
CPE cpe:/o:cisco:nx_os:5.0 auto
SEQ(SP=FF-109%GCD=1-6%ISR=104-10E%TI=I%CI=I%II=RI%SS=S%TS=3)
OPS(O1=M218NNT11%O2=M218NNT11%O3=M218NNT11%O4=M218NNT11%O5=M218NNT11%O6=M109NNT11)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=FFFF%O=M218%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# system:    version 5.1(3)N1(1a)
Fingerprint Cisco Nexus switch (NX-OS 5.1(3))
Class Cisco | NX-OS | 5.X | switch
CPE cpe:/o:cisco:nx_os:5.1 auto
SEQ(SP=FE-108%GCD=1-6%ISR=105-10F%TI=I%II=RI%SS=S%TS=3)
OPS(O1=M218NNT11%O2=M218NNT11%O3=M218NNT11%O4=M218NNT11%O5=M218NNT11%O6=M109NNT11)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=FFFF%O=M218%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=N)
T6(R=N)
T7(R=N)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# system:    version 5.1(3)N1(1a)
Fingerprint Cisco Nexus switch (NX-OS 5.1(3))
Class Cisco | NX-OS | 5.X | switch
CPE cpe:/o:cisco:nx_os:5.1 auto
SEQ(SP=FB-10D%GCD=1-6%ISR=103-10F%TI=I%II=RI%SS=O|S%TS=3)
OPS(O1=M218NNT11%O2=M218NNT11%O3=M218NNT11%O4=M218NNT11%O5=M218NNT11%O6=M109NNT11)
WIN(W1=BDA8|C33C|CE64|D98C|E4B4%W2=BDC4|C89C|D374|DE4C|E924%W3=BF58|C928|D56C|DF3C|EB80%W4=C068|CAA4|D6EC|E128|ED70%W5=C068|CAA4|D6EC|E128|ED70%W6=C0B7|CB96|D772|E154|EE2D)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=C33C|CE64|D98C|E4B4|EFDC%O=M218%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=N)
T6(R=N)
T7(R=N)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# NX-OS version 5.2(1)SV3(1.5a)
Fingerprint Cisco NX-OS 5.2
Class Cisco | NX-OS | 5.X | switch
CPE cpe:/o:cisco:nx_os:5.2 auto
SEQ(SP=FB-105%GCD=1-6%ISR=105-10F%TI=I%CI=RD%II=RI%SS=S%TS=3)
OPS(O1=M218NNT11%O2=M218NNT11%O3=M218NNT11%O4=M218NNT11%O5=M218NNT11%O6=M109NNT11)
WIN(W1=47F4%W2=47F4%W3=4998%W4=49B0%W5=49B0%W6=4A1F)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=4CC0%O=M218%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=FB-105%TG=FF%W=80%S=Z%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=FB-105%TG=FF%W=100%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T4(R=Y%DF=N%T=FB-105%TG=FF%W=400%S=A%A=S%F=AR%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=O%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FB-105%TG=FF%W=8000%S=A%A=S%F=AR%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FB-105%TG=FF%W=FFFF%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# cisco nexus 3000 switch
Fingerprint Cisco Nexus 3000 switch (NX-OS 6)
Class Cisco | NX-OS | 6.X | switch
CPE cpe:/o:cisco:nx_os:6 auto
SEQ(SP=FA-104%GCD=1-6%ISR=100-10A%TI=I%CI=I%II=RI%SS=O%TS=3)
OPS(O1=M218NNT11%O2=M218NNT11%O3=M218NNT11%O4=M218NNT11%O5=M218NNT11%O6=M109NNT11)
WIN(W1=47F4%W2=47F4%W3=4998%W4=49B0%W5=49B0%W6=4A1F)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=4CC0%O=M218%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=I%RUCK=0%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# cisco Nexus7000 C7009 version 6.0(1)
Fingerprint Cisco Nexus 7000 switch (NX-OS 6.0)
Class Cisco | NX-OS | 6.X | switch
CPE cpe:/o:cisco:nx_os:6.0 auto
SEQ(SP=FD-107%GCD=1-6%ISR=107-111%TI=I%CI=I%II=RI%SS=O%TS=3)
OPS(O1=M5B4NNT11%O2=M578NNT11%O3=M280NNT11%O4=M5B4NNT11%O5=M218NNT11%O6=M109NNT11)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=FFFF%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=I%RUCK=0%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# NEXUS 7K - with NX-OS v6.2.8
Fingerprint Cisco Nexus 7000 switch (NX-OS 6.2.8)
Class Cisco | NX-OS | 6.X | switch
CPE cpe:/o:cisco:nx_os:6.2.8 auto
SEQ(SP=F3-FD%GCD=1-6%ISR=104-10E%TI=I%CI=I%II=RI%SS=O%TS=3)
OPS(O1=M218NNT11%O2=M218NNT11%O3=M218NNT11%O4=M218NNT11%O5=M218NNT11%O6=M109NNT11)
WIN(W1=5FF0%W2=5FF0%W3=6220%W4=6240%W5=6240%W6=62D4)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=64BC%O=M218%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=I%RUCK=0%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# system:    version 6.1(2) cisco Nexus7000 C7010
Fingerprint Cisco Nexus 7000-series switch (NX-OS 6.1(2))
Class Cisco | NX-OS | 6.X | switch
CPE cpe:/o:cisco:nexus_7000
CPE cpe:/o:cisco:nx_os:6.1 auto
SEQ(SP=100-10A%GCD=1-6%ISR=101-10B%TI=I%CI=I%II=RI%SS=S%TS=3)
OPS(O1=M5B4NNT11%O2=M578NNT11%O3=M280NNT11%O4=M5B4NNT11%O5=M218NNT11%O6=M109NNT11)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=N%T=3C-46%TG=40%W=FFFF%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=3C-46%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=3C-46%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3C-46%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3C-46%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3C-46%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FB-105%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=I%RUCK=0%RUD=G)
IE(DFI=S%T=FB-105%TG=FF%CD=S)

# NX-OS 6.X
# 6.0.2
Fingerprint Cisco Nexus switch (NX-OS 6)
Class Cisco | NX-OS | 6.X | switch
CPE cpe:/o:cisco:nx_os:6 auto
SEQ(SP=FD-107%GCD=1-6%ISR=104-10E%TI=I%II=RI%SS=O%TS=3)
OPS(O1=M218NNT11%O2=M218NNT11%O3=M218NNT11%O4=M218NNT11%O5=M218NNT11%O6=M109NNT11)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=FFFF%O=M218%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=O|Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=N)
T7(R=N)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=I%RUCK=0%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# System version: 6.0(2)U3(1)
Fingerprint Cisco Nexus switch (NX-OS 6.0(2))
Class Cisco | NX-OS | 6.X | switch
CPE cpe:/o:cisco:nx_os:6.0 auto
SEQ(SP=FD-107%GCD=1-6%ISR=FE-110%TI=I%CI=I%II=RI%SS=O|S%TS=3)
OPS(O1=M218NNT11%O2=M218NNT11%O3=M218NNT11%O4=M218NNT11%O5=M218NNT11%O6=M109NNT11)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=FFFF%O=M218%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=I%RUCK=0%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# version 6.2(16)
Fingerprint Cisco Nexus switch (NX-OS 6.2)
Class Cisco | NX-OS | 6.X | switch
CPE cpe:/o:cisco:nx_os:6.2 auto
SEQ(SP=103-10D%GCD=1-6%ISR=103-10D%TI=I%CI=I%II=RI%SS=S%TS=3)
OPS(O1=M5B4NNT11%O2=M578NNT11%O3=M280NNT11%O4=M23D8NNT11%O5=M218NNT11%O6=M109NNT11)
WIN(W1=47F4%W2=47F4%W3=4998%W4=49B0%W5=49B0%W6=4A1F)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=4CC0%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=I%RUCK=0%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# 6.2(12)
Fingerprint Cisco Nexus switch (NX-OS 6.2)
Class Cisco | NX-OS | 6.X | switch
CPE cpe:/o:cisco:nx_os:6.2 auto
SEQ(SP=FF-109%GCD=1-6%ISR=107-111%TI=RD%CI=RD%II=RI%TS=18)
OPS(O1=M5B4NNT11%O2=M578NNT11%O3=M280NNT11%O4=M5B4NNT11%O5=M218NNT11%O6=M109NNT11)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=FFFF%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=I%RUCK=0%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# NX-OS 6.2(7) running on a Cisco MDS 9148 Fibre Channel Switch.
Fingerprint Cisco NX-OS 6.2
Class Cisco | NX-OS | 6.X | switch
CPE cpe:/o:cisco:nx_os:6.2 auto
SEQ(SP=B9-C3%GCD=1-6%ISR=C6-D0%TI=I%CI=I%II=I%SS=S%TS=7)
OPS(O1=M5B4ST11NW6%O2=M5B4ST11NW6%O3=M5B4NNT11NW6%O4=M5B4ST11NW6%O5=M5B4ST11NW6%O6=M5B4ST11)
WIN(W1=16A0%W2=16A0%W3=16A0%W4=16A0%W5=16A0%W6=16A0)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=16D0%O=M5B4NNSNW6%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=O%F=AR%O=%RD=0%Q=)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# System version: 7.1(1)N1(1)
Fingerprint Cisco Nexus switch (NX-OS 7.1)
Class Cisco | NX-OS | 7.X | switch
CPE cpe:/o:cisco:nx_os:7.1 auto
SEQ(SP=FE-108%GCD=1-6%ISR=105-10F%TI=I%II=RI%SS=O%TS=3)
OPS(O1=M218NNT11%O2=M218NNT11%O3=M218NNT11%O4=M218NNT11%O5=M218NNT11%O6=M109NNT11)
WIN(W1=47F4%W2=47F4%W3=4998%W4=49B0%W5=49B0%W6=4A1F)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=4CC0%O=M218%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=N)
T7(R=N)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=I%RUCK=0%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# NX-OS 7.2(0)D1(1)  Nexus 7706 Chassis with N77-SUP2E supervisor
Fingerprint Cisco Nexus switch (NX-OS 7.2)
Class Cisco | NX-OS | 7.X | switch
CPE cpe:/o:cisco:nx_os:7.2 auto
SEQ(SP=FA-104%GCD=1-6%ISR=108-112%TI=I%CI=I%II=RI%SS=S%TS=3)
OPS(O1=M218NNT11%O2=M218NNT11%O3=M218NNT11%O4=M218NNT11%O5=M218NNT11%O6=M109NNT11)
WIN(W1=47F4%W2=47F4%W3=4998%W4=49B0%W5=49B0%W6=4A1F)
ECN(R=Y%DF=N%T=3C-46%TG=40%W=4CC0%O=M218%CC=N%Q=)
T1(R=Y%DF=N%T=3C-46%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=3C-46%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3C-46%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3C-46%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3C-46%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FB-105%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=I%RUCK=0%RUD=G)
IE(DFI=S%T=FB-105%TG=FF%CD=S)

# 7.3(11)N1(1)
Fingerprint Cisco Nexus switch (NX-OS 7.3)
Class Cisco | NX-OS | 7.X | switch
CPE cpe:/o:cisco:nx_os:7.3 auto
SEQ(SP=FF-109%GCD=1-6%ISR=104-10E%TI=I%CI=I%II=RI%SS=O%TS=3)
OPS(O1=M218NNT11%O2=M218NNT11%O3=M218NNT11%O4=M218NNT11%O5=M218NNT11%O6=M109NNT11)
WIN(W1=4328%W2=4328%W3=44B0%W4=4598%W5=4598%W6=462B)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=47F4%O=M218%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=I%RUCK=0%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# 7.3(8)N1(1)
Fingerprint Cisco Nexus switch (NX-OS 7.3)
Class Cisco | NX-OS | 7.X | switch
CPE cpe:/o:cisco:nx_os:7.3 auto
SEQ(SP=102-10C%GCD=1-6%ISR=105-10F%TI=I%CI=I%II=RI%SS=O%TS=3)
OPS(O1=M5B4NNT11%O2=M578NNT11%O3=M280NNT11%O4=M5B4NNT11%O5=M218NNT11%O6=M109NNT11)
WIN(W1=EB0C%W2=EB0C%W3=EB80%W4=ED70%W5=ED70%W6=EE2D)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=EFD8%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=I%RUCK=0%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# Software   BIOS: version  NXOS: version 9.2(3)
Fingerprint Cisco Nexus switch (NX-OS 9.2)
Class Cisco | NX-OS | 9.X | switch
CPE cpe:/o:cisco:nx_os:9.2 auto
SEQ(SP=FB-105%GCD=1-6%ISR=108-112%TI=I%CI=I%II=RI%SS=S%TS=3)
OPS(O1=M218NNT11%O2=M218NNT11%O3=M218NNT11%O4=M218NNT11%O5=M218NNT11%O6=M109NNT11)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=FFFF%O=M218%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=FB-105%TG=FF%CD=S)

# NXOS: version 9.3(4) [build 9.3(3.101)]
Fingerprint Cisco Nexus switch (NX-OS 9.3)
Class Cisco | NX-OS | 9.X | switch
CPE cpe:/o:cisco:nx_os:9.3 auto
SEQ(SP=FF-10B%GCD=1-6%ISR=107-111%TI=I%CI=I%II=RI%SS=O%TS=3)
OPS(O1=M218NNT11%O2=M218NNT11%O3=M218NNT11%O4=M218NNT11%O5=M218NNT11%O6=M109NNT11)
WIN(W1=47F4%W2=47F4%W3=4998%W4=49B0%W5=49B0%W6=4A1F)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=4CC0%O=M218%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# Cisco Nexus V1000 Virtual Switch
Fingerprint Cisco Nexus V1000 switch (NX-OS)
Class Cisco | NX-OS || switch
CPE cpe:/o:cisco:nexus_v1000
CPE cpe:/o:cisco:nx_os auto
SEQ(SP=FC-106%GCD=1-6%ISR=103-111%TI=I%CI=I%II=RI%SS=O%TS=3)
OPS(O1=M200NNT11%O2=M200NNT11%O3=M200NNT11%O4=M200NNT11%O5=M200NNT11%O6=M200NNT11)
WIN(W1=9244|9638|9A2C|9E20|A214%W2=9244|9638|9A2C|9E20|A214%W3=9330|9818|9A8C|9F74|A45C%W4=9470|9858|9C40|A028|A604%W5=956C|9984|9D9C|A1B4|A7D8%W6=9638|9A2C|9E20|A214|A802)
ECN(R=Y%DF=N%T=3C-46%TG=40%W=9638|9A2C|9E20|A214|A9FC%O=M200%CC=N%Q=)
T1(R=Y%DF=N%T=3C-46%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=3C-46%TG=40%W=9638%S=O%A=O|S+%F=AS%O=M200NNT11%RD=0%Q=)
T4(R=Y%DF=N%T=3C-46%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3C-46%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3C-46%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3C-46%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FB-105%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=I%RUCK=0%RUD=G)
IE(DFI=S%T=FB-105%TG=FF%CD=S)

# Cisco Nexus V1000 Virtual Switch
Fingerprint Cisco Nexus V1000 switch (NX-OS)
Class Cisco | NX-OS || switch
CPE cpe:/o:cisco:nexus_v1000
CPE cpe:/o:cisco:nx_os auto
SEQ(SP=FF-109%GCD=1-6%ISR=107-111%TI=I%CI=I%II=RI%SS=O%TS=3)
OPS(O1=M200NNT11%O2=M200NNT11%O3=M200NNT11%O4=M200NNT11%O5=M200NNT11%O6=M200NNT11)
WIN(W1=7698|7E80|8274|8668|8A5C%W2=7698|7E80|8274|8668|8A5C%W3=7834|7F90|8478|86EC|8BD4%W4=7918|80E8|84D0|88B8|8CA0%W5=7AD0|80F4|850C|8924|8D3C%W6=7B89|8177|856B|895F|8D53)
ECN(R=Y%DF=N%T=3C-46%TG=40%W=7E80|8274|8668|8A5C|8E50%O=M200%CC=N%Q=)
T1(R=Y%DF=N%T=3C-46%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=3C-46%TG=40%W=7E80%S=O%A=O|S+%F=AS%O=M200NNT11%RD=0%Q=)
T4(R=Y%DF=N%T=3C-46%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3C-46%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3C-46%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3C-46%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FB-105%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=I%RUCK=0%RUD=G)
IE(DFI=S%T=FB-105%TG=FF%CD=S)

# Cisco 5510 with ASA 8.2(1) OS.
Fingerprint Cisco ASA 5510 firewall (PIX OS 8.2)
Class Cisco | PIX OS | 6.X | firewall
CPE cpe:/o:cisco:pix_os:6 auto
SEQ(SP=101-10B%GCD=1-6%ISR=101-10B%TI=RD%CI=RD|RI%II=RI%TS=U)
OPS(O1=M564%O2=M564%O3=M564%O4=M564%O5=M564%O6=M564)
WIN(W1=2000%W2=2000%W3=2000%W4=2000%W5=2000%W6=2000)
ECN(R=Y%DF=N%T=FA-104%TG=FF%W=2000%O=M564%CC=N%Q=)
T1(R=Y%DF=N%T=FA-104%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=FA-104%TG=FF%W=80%S=Z%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=FA-104%TG=FF%W=100%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T4(R=Y%DF=N%T=FA-104%TG=FF%W=400%S=A%A=S%F=AR%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=7A69%S=O%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=8000%S=A%A=S%F=AR%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FA-104%TG=FF%W=FFFF%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(R=N)
IE(DFI=N%T=FA-104%TG=FF%CD=S)

# Cisco PIX firewall running verios 6.3(5) software
# Cisco PIX Firewall Version 6.3(3). Hardware:   PIX-515E, 64 MB RAM, CPU Pentium II 433 MHz
Fingerprint Cisco PIX firewall (PIX OS 6.3(5))
Class Cisco | PIX OS | 6.X | firewall
CPE cpe:/o:cisco:pix_os:6.3 auto
SEQ(SP=FA-106%GCD=1-6%ISR=108-114%TI=I%CI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4%O2=M5B4%O3=M5B4%O4=M5B4%O5=M5B4%O6=M5B4)
WIN(W1=1000%W2=1000%W3=1000%W4=1000%W5=1000%W6=1000)
ECN(R=Y%DF=N%T=FA-104%TG=FF%W=1000%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=FA-104%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=FA-104%TG=FF%W=80%S=A%A=S%F=AR%O=WANM109T10S%RD=0%Q=)
T3(R=Y%DF=N%T=FA-104%TG=FF%W=1000%S=O%A=S+%F=AS%O=M5B4%RD=0%Q=)
T4(R=N)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=7A69%S=A%A=S+%F=AR%O=WANM109T10S%RD=0%Q=)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=8000%S=A%A=S%F=AR%O=WANM109T10S%RD=0%Q=)
T7(R=Y%DF=N%T=FA-104%TG=FF%W=FFFF%S=A%A=S+%F=UAPR%O=WFNM109T10S%RD=0%Q=)
U1(R=N)
IE(DFI=N%T=FA-104%TG=FF%CD=S)

# Citrix Access Gateway model 2000, software release 4.5.8. Rebadged Supermicro 5013C-M. The operating system itself is some form of Linux.
Fingerprint Citrix Access Gateway VPN gateway
Class Citrix | embedded || proxy server
SEQ(SP=C6-D0%GCD=1-6%ISR=CC-D6%TI=Z%II=I%TS=U)
OPS(O1=M586NNSNW0%O2=M586NNSNW0%O3=M586NW0%O4=M586NNSNW0%O5=M586NNSNW0%O6=M586NNS)
WIN(W1=1618%W2=1618%W3=1618%W4=1618%W5=1618%W6=1618)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=1618%O=M586NNSNW0%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(R=N)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# Citrix Access Gateway Appliance, Standard Edition, v4.6.3
Fingerprint Citrix Access Gateway VPN gateway
Class Citrix | embedded || proxy server
SEQ(SP=C4-CE%GCD=1-6%ISR=CC-D6%TI=Z%II=I%TS=U)
OPS(O1=M5B4NNSNW6%O2=M5B4NNSNW6%O3=M5B4NW6%O4=M5B4NNSNW6%O5=M5B4NNSNW6%O6=M5B4NNS)
WIN(W1=16D0%W2=16D0%W3=16D0%W4=16D0%W5=16D0%W6=16D0)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=16D0%O=M5B4NNSNW6%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=N)
T7(R=N)
U1(R=N)
IE(DFI=N%T=3B-45%TG=40%CD=S)

Fingerprint Citrix Cloud Gateway Connector
Class Citrix | embedded || security-misc
SEQ(SP=FB-105%GCD=1-6%ISR=104-10E%TI=I%CI=I%II=I%SS=O%TS=U)
OPS(O1=M5B4NW8NNS%O2=M532NW8NNS%O3=M218NW8%O4=M218NW8NNS%O5=M218NW8NNS%O6=M80NNS)
WIN(W1=1FFE%W2=1FFE%W3=1FFE%W4=1FFE%W5=1FFE%W6=1FFE)
ECN(R=Y%DF=Y%T=FA-104%TG=FF%W=1FFE%O=M5B4NW8NNS%CC=N%Q=)
T1(R=Y%DF=Y%T=FA-104%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=Y%T=FA-104%TG=FF%W=2009%S=Z%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=Y%T=FA-104%TG=FF%W=2014%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T4(R=Y%DF=Y%T=FA-104%TG=FF%W=2009%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=FA-104%TG=FF%W=2014%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=FA-104%TG=FF%W=2009%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=Y%T=FA-104%TG=FF%W=2009%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=1D2B%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# NetScaler NS13.0: Build 47.24.nc, Date: Jan 20 2020, 06:11:41   (64-bit)
Fingerprint Citrix NetScaler 13.0
Class Citrix | NetScaler | 13.X | load balancer
CPE cpe:/o:citrix:netscaler:13.0 auto
SEQ(SP=F7-101%GCD=1-6%ISR=108-112%TI=I%II=I%SS=O%TS=U)
OPS(O1=M532NW8NNS%O2=M532NW8NNS%O3=M218NW8%O4=M218NW8NNS%O5=M218NW8NNS%O6=M80NNS)
WIN(W1=1FFE%W2=1FFE%W3=1FFE%W4=1FFE%W5=1FFE%W6=1FFE)
ECN(R=Y%DF=Y%T=FA-104%TG=FF%W=1FFE%O=M532NW8NNS%CC=N%Q=)
T1(R=Y%DF=Y%T=FA-104%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=FA-104%TG=FF%W=2009%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=FA-104%TG=FF%W=2014%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=N)
T7(R=N)
U1(R=N)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# NetScaler NS9.2: Build 48.6.nc, Date: Sep 23 2010, 10:04:46
Fingerprint Citrix NetScaler 9.2
Class Citrix | NetScaler | 9.X | load balancer
CPE cpe:/o:citrix:netscaler:9.2 auto
SEQ(SP=FD-107%GCD=1-6%ISR=100-112%TI=I%CI=RD|RI%II=RI%SS=O|S%TS=U)
OPS(O1=M550%O2=M550%O3=M218%O4=M218%O5=M218%O6=M80)
WIN(W1=1FFE%W2=1FFE%W3=1FFE%W4=1FFE%W5=1FFE%W6=1FFE)
ECN(R=Y%DF=Y%T=FA-104%TG=FF%W=1FFE%O=M550%CC=N%Q=)
T1(R=Y%DF=Y%T=FA-104%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=FA-104%TG=FF%W=80%S=Z%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=FA-104%TG=FF%W=100%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T4(R=Y%DF=N%T=FA-104%TG=FF%W=400%S=A%A=S%F=AR%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=FA-104%TG=FF%W=2014%S=O%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=8000%S=A%A=S%F=AR%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FA-104%TG=FF%W=FFFF%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=>0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=Z)

# Citrix NetScaler load balancer
Fingerprint Citrix NetScaler
Class Citrix | NetScaler || load balancer
CPE cpe:/o:citrix:netscaler auto
SEQ(SP=101-10B%GCD=1-6%ISR=107-111%CI=BI%II=RI%TS=U)
OPS(O1=M5B4%O2=M564%O3=M218%O4=M218%O5=M218%O6=M80)
WIN(W1=1FFE%W2=1FFE%W3=1FFE%W4=1FFE%W5=1FFE%W6=1FFE)
ECN(R=Y%DF=N%T=FA-104%TG=FF%W=1FFE%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=FA-104%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=FA-104%TG=FF%W=2009%S=A%A=S%F=R%O=%RD=0%Q=)
T3(R=Y%DF=N%T=FA-104%TG=FF%W=2014%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T4(R=N)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=2014%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=2009%S=A%A=S%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FA-104%TG=FF%W=2009%S=A%A=S+%F=R%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=Z)

# Citrix Net Scaler
Fingerprint Citrix NetScaler
Class Citrix | NetScaler || load balancer
CPE cpe:/o:citrix:netscaler auto
SEQ(SP=F1-10D%GCD=1-6%ISR=101-10F%TI=RD%II=RI%TS=U)
OPS(O1=M564%O2=M564%O3=M218%O4=M218%O5=M218%O6=M80)
WIN(W1=1FFE%W2=1FFE%W3=1FFE%W4=1FFE%W5=1FFE%W6=1FFE)
ECN(R=Y%DF=Y%T=FA-104%TG=FF%W=1FFE%O=M564%CC=N%Q=)
T1(R=Y%DF=Y%T=FA-104%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=Y%DF=Y%T=FA-104%TG=FF%W=2014%S=O%A=S+%F=AR%O=%RD=0%Q=)
T6(R=N)
T7(R=N)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=>0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=Z)

# Citrix NetScaler
Fingerprint Citrix NetScaler
Class Citrix | NetScaler || load balancer
CPE cpe:/o:citrix:netscaler auto
SEQ(SP=FE-108%GCD=1-6%ISR=109-113%TI=RD%TS=U)
OPS(O1=M5B4%O2=M550%O3=M218%O4=M218%O5=M218%O6=M80)
WIN(W1=1FFE%W2=1FFE%W3=1FFE%W4=1FFE%W5=1FFE%W6=1FFE)
ECN(R=Y%DF=Y%T=FB-105%TG=FF%W=1FFE%O=M5B4%CC=N%Q=)
T1(R=Y%DF=Y%T=FB-105%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=Y%DF=Y%T=FB-105%TG=FF%W=2014%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=N)
T7(R=N)
U1(DF=N%T=FB-105%TG=FF%IPL=38%UN=>0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(R=N)

# Citrix NetScaler load balancer
Fingerprint Citrix NetScaler
Class Citrix | NetScaler || load balancer
CPE cpe:/o:citrix:netscaler auto
SEQ(SP=FF-109%GCD=1-6%ISR=102-10C%TI=I%CI=I%II=RI%SS=O%TS=U)
OPS(O1=M5B4%O2=M550%O3=M218%O4=M218%O5=M218%O6=M80)
WIN(W1=1FFE%W2=1FFE%W3=1FFE%W4=1FFE%W5=1FFE%W6=1FFE)
ECN(R=Y%DF=Y%T=FA-104%TG=FF%W=1FFE%O=M5B4%CC=N%Q=)
T1(R=Y%DF=Y%T=FA-104%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=Y%T=FA-104%TG=FF%W=2009%S=Z%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=Y%T=FA-104%TG=FF%W=2014%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T4(R=N)
T5(R=Y%DF=Y%T=FA-104%TG=FF%W=2014%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=FA-104%TG=FF%W=2009%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=Y%T=FA-104%TG=FF%W=2009%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=>0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=Z)

# Citrix NetScaler VPX
Fingerprint Citrix NetScaler
Class Citrix | NetScaler || load balancer
CPE cpe:/o:citrix:netscaler auto
SEQ(SP=101-10B%GCD=1-6%ISR=106-110%TI=I%CI=I%II=I%TS=U)
OPS(O1=M5B4NW8NNS%O2=M532NW8NNS%O3=M218NW8%O4=M218NW8NNS%O5=M218NW8NNS%O6=M80NNS)
WIN(W1=1FFE%W2=1FFE%W3=1FFE%W4=1FFE%W5=1FFE%W6=1FFE)
ECN(R=Y%DF=Y%T=FA-104%TG=FF%W=1FFE%O=M5B4NW8NNS%CC=N%Q=)
T1(R=Y%DF=Y%T=FA-104%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=Y%T=FA-104%TG=FF%W=2009%S=Z%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=Y%T=FA-104%TG=FF%W=2014%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T4(R=Y%DF=Y%T=FA-104%TG=FF%W=2009%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=FA-104%TG=FF%W=2014%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=FA-104%TG=FF%W=2009%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=Y%T=FA-104%TG=FF%W=2009%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=2EBE%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Citrix Netscaler VPX
Fingerprint Citrix NetScaler
Class Citrix | NetScaler || load balancer
CPE cpe:/o:citrix:netscaler auto
SEQ(SP=100-10A%GCD=1-6%ISR=108-112%TI=I%II=RI%SS=O%TS=U)
OPS(O1=M550%O2=M550%O3=M218%O4=M218%O5=M218%O6=M80)
WIN(W1=1FFE%W2=1FFE%W3=1FFE%W4=1FFE%W5=1FFE%W6=1FFE)
ECN(R=Y%DF=Y%T=FA-104%TG=FF%W=1FFE%O=M550%CC=N%Q=)
T1(R=Y%DF=Y%T=FA-104%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=Y%DF=Y%T=FA-104%TG=FF%W=2014%S=O%A=S+%F=AR%O=%RD=0%Q=)
T6(R=N)
T7(R=N)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=9637%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=Z)

# CMI's Genus NEMA runs on a license-free Linux operating system
Fingerprint CMI Genus NEMA terminal
Class CMI | embedded || terminal
SEQ(SP=FB-109%GCD=1-6%ISR=109-113%TI=I%II=I%SS=S%TS=U)
OPS(O1=M564%O2=M564%O3=M564%O4=M564%O5=M564%O6=M564)
WIN(W1=3E80%W2=3E80%W3=3E80%W4=3E80%W5=3E80%W6=3E80)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=3E80%O=M564%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=O%A=S+%F=AR%O=%RD=0%Q=)
T6(R=N)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# Cognex DataMan 200 (running http://www.sics.se/~adam/lwip/)
# TCP_WND 800
Fingerprint Cognex DataMan 200 ID reader (lwIP stack)
Class Cognex | embedded || specialized
Class lwIP | lwIP || general purpose
CPE cpe:/a:lwip_project:lwip auto
SEQ(SP=0-59%GCD=1-6|CE|19C|26A|338|406%ISR=55-5F%TI=I%CI=I%II=RI%SS=O%TS=U)
OPS(O1=M5B4%O2=M5B4%O3=M5B4%O4=M5B4%O5=M5B4%O6=M5B4)
WIN(W1=800%W2=800%W3=800%W4=800%W5=800%W6=800)
ECN(R=Y%DF=N%T=FA-104%TG=FF%W=800%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=FA-104%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=FA-104%TG=FF%W=800%S=O%A=S+%F=AS%O=M5B4%RD=0%Q=)
T4(R=Y%DF=N%T=FA-104%TG=FF%W=800%S=O|A+%A=O|S%F=AR%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=800%S=A|O%A=O|S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=800%S=A|O%A=O|S%F=AR%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FA-104%TG=FF%W=800%S=A|O%A=O|S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=128|7CBB|B4CA|B518%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# Cognitive CXI thermal label printer by General Data
Fingerprint Cognitive CXI thermal printer
Class Cognitive | embedded || printer
SEQ(SP=FE-108%GCD=1-6%ISR=106-110%TI=I%II=I%SS=S%TS=7)
OPS(O1=M510ST11NWA%O2=M510ST11NWA%O3=M510NNT11NWA%O4=M510ST11NWA%O5=M510ST11NWA%O6=M510ST11)
WIN(W1=3890%W2=3890%W3=3890%W4=3890%W5=3890%W6=3890)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=3908%O=M510NNSNWA%CC=Y%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=Y%DF=N%T=1B-25%TG=20%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=N)
T7(R=N)
U1(R=N)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Comau Robotics Smart Six C4G controller
Fingerprint Comau C4G robot control unit
Class Comau | embedded || specialized
SEQ(SP=FC-108%GCD=1-6%ISR=102-112%TI=RD%II=RI%TS=21|22)
OPS(O1=M5B4NW4ST11%O2=M578NW4ST11%O3=M280NW4NNT11%O4=M5B4NW4ST11%O5=M218NW4ST11%O6=M109ST11)
WIN(W1=FECC%W2=FECC%W3=FECC%W4=FECC%W5=FECC%W6=FECC)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FECC%O=M5B4NW4SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=N)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=0-FFFF%RIPCK=I%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# iPAQ Connection Point CP-2W 4 port + 802.11b router, Hardware Version 1.01, Software Version 2.09 Jan 21, 2003
Fingerprint Compaq iPAQ CP-2W Connection Point WAP
Class Compaq | embedded || WAP
SEQ(R=N)
OPS(O1=|M578%O2=|M578%O3=|M578%O4=|M578%O5=|M578%O6=|M578)
WIN(W1=0|800%W2=0|800%W3=0|800%W4=0|800%W5=0|800%W6=0|800)
ECN(R=Y%DF=N%T=FA-104%TG=FF%W=0|800%O=|M578%CC=N%Q=)
T1(R=Y%DF=N%T=FA-104%TG=FF%S=Z%A=S+%F=AR|AS%RD=0%Q=)
T2(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=FA-104%TG=FF%W=800%S=Z%A=O|S+%F=AS%O=M578%RD=0%Q=)
T4(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=AR%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=AR%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(R=N)
IE(DFI=N%T=FA-104%TG=FF%CD=S)

# Compaq Tru64 4.0F
Fingerprint Compaq Tru64 UNIX V4.0F
Class Compaq | Tru64 UNIX | 4.X | general purpose
CPE cpe:/o:compaq:tru64:4 auto
SEQ(SP=E2-EC%GCD=10|20|30|40|50%ISR=104-10E%TI=I%TS=U)
OPS(O1=M5B4NW0%O2=M5B4NW0%O3=M5B4NW0%O4=M5B4NW0%O5=M5B4NW0%O6=M5B4)
WIN(W1=832C%W2=8340%W3=8200%W4=8000%W5=81D0%W6=805C)
ECN(R=Y%DF=Y%T=3B-3D%TG=40%W=832C%O=M5B4NW0%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-3D%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%T=3B-3D%TG=40%W=805C%S=O%A=S+%F=AS%O=M5B4NW0%RD=0%Q=)
T4(R=Y%DF=N%T=3B-3D%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-3D%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-3D%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-3D%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# /etc/motd: Compaq Tru64 UNIX V5.1 (Rev. 732); Sat Mar 20 11:57:19 EST 2004
Fingerprint Compaq Tru64 UNIX 5.1
Class Compaq | Tru64 UNIX | 5.X | general purpose
CPE cpe:/o:compaq:tru64:5.1 auto
SEQ(SP=E3-ED%GCD=10|20|30|40|50%ISR=107-111%TI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4NW0%O2=M5B4NW0%O3=M5B4NW0%O4=M5B4NW0%O5=M5B4NW0%O6=M5B4)
WIN(W1=F000%W2=F000%W3=F000%W4=F000%W5=F000%W6=F000)
ECN(R=Y%DF=N%T=3B-3D%TG=40%W=F000%O=M5B4NW0%CC=N%Q=)
T1(R=Y%DF=N%T=3B-3D%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=3B-3D%TG=40%W=F000%S=O%A=S+%F=AS%O=M5B4NW0%RD=0%Q=)
T4(R=Y%DF=N|Y%T=3B-3D%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N|Y%T=3B-3D%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N|Y%T=3B-3D%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N|Y%T=3B-3D%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# OSF1 tru64 V5.1 1885 alpha
Fingerprint Compaq Tru64 UNIX 5.1
Class Compaq | Tru64 UNIX | 5.X | general purpose
CPE cpe:/o:compaq:tru64:5.1 auto
SEQ(SP=8D-99%GCD=1-6%ISR=98-A2%TI=I%CI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4NW0%O2=M5B4NW0%O3=M5B4NW0%O4=M5B4NW0%O5=M5B4NW0%O6=M5B4)
WIN(W1=F000%W2=F000%W3=F000%W4=F000%W5=F000%W6=F000)
ECN(R=Y%DF=N%T=37-41%TG=40%W=F000%O=M5B4NW0%CC=N%Q=)
T1(R=Y%DF=N%T=37-41%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=37-41%TG=40%W=F000%S=O%A=O%F=A%O=%RD=0%Q=)
T4(R=Y%DF=N|Y%T=37-41%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N|Y%T=37-41%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N|Y%T=37-41%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N|Y%T=37-41%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Compaq Tru64 UNIX V5.1 (Rev. 732)
# VMS v7.3-1
# VMS 7.3-1 on a VAX
Fingerprint Compaq Tru64 UNIX 5.1 or HP OpenVMS 7.3-1
Class Compaq | Tru64 UNIX | 5.X | general purpose
CPE cpe:/o:compaq:tru64:5.1 auto
Class HP | OpenVMS | 7.X | general purpose
CPE cpe:/o:hp:openvms:7.3 auto
SEQ(SP=91-9D%GCD=1-6%ISR=99-A3%TI=I%CI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4NW0%O2=M5B4NW0%O3=M5B4NW0%O4=M5B4NW0%O5=M5B4NW0%O6=M5B4)
WIN(W1=F000%W2=F000%W3=F000%W4=F000%W5=F000%W6=F000)
ECN(R=Y%DF=N%T=3B-3D%TG=40%W=F000%O=M5B4NW0%CC=N%Q=)
T1(R=Y%DF=N%T=3B-3D%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=3B-3D%TG=40%W=F000%S=O%A=O%F=A%O=%RD=0%Q=)
T4(R=N)
T5(R=Y%DF=N%T=3B-3D%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-3D%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-3D%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# HP OpenVMS V7.3-2 on AlphaServer ES45 Model 2
# Compaq Tru64 UNIX V5.1B (Rev. 2650)
Fingerprint Compaq Tru64 UNIX 5.1 or HP OpenVMS 7.3-2
Class Compaq | Tru64 UNIX | 5.X | general purpose
CPE cpe:/o:compaq:tru64:5.1 auto
Class HP | OpenVMS | 7.X | general purpose
CPE cpe:/o:hp:openvms:7.3 auto
SEQ(SP=DC-E9%GCD=10|20|30|40|50%ISR=107-111%TI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4NW0%O2=M5B4NW0%O3=M5B4NW0%O4=M5B4NW0%O5=M5B4NW0%O6=M5B4)
WIN(W1=F000%W2=F000%W3=F000%W4=F000%W5=F000%W6=F000)
ECN(R=Y%DF=N%T=3B-3D%TG=40%W=F000%O=M5B4NW0%CC=N%Q=)
T1(R=Y%DF=N%T=3B-3D%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=3B-3D%TG=40%W=F000%S=O%A=S+%F=AS%O=M5B4NW0%RD=0%Q=)
T4(R=Y%DF=N|Y%T=3B-3D%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N|Y%T=3B-3D%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N|Y%T=3B-3D%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N|Y%T=3B-3D%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Compaq Tru64 UNIX V5.1B
# OpenVMS/Alpha V8.2
# OpenVMS (TM) Alpha Operating System, Version V8.3
# OpenVMS v8.3 box runs the MultiNet TCP/IP stack (from Process Software) v5.2, rather than HP's native TCP/IP stack for OpenVMS.
Fingerprint Compaq Tru64 UNIX 5.1B or HP OpenVMS 8.2 - 8.3
Class Compaq | Tru64 UNIX | 5.X | general purpose
CPE cpe:/o:compaq:tru64:5 auto
Class HP | OpenVMS | 8.X | general purpose
CPE cpe:/o:hp:openvms:8 auto
SEQ(SP=FB-109%GCD=1-6%ISR=FF-10D%TI=I%CI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4NW0%O2=M5B4NW0%O3=M5B4NW0%O4=M5B4NW0%O5=M5B4NW0%O6=M5B4)
WIN(W1=F53C%W2=F0A0%W3=F000%W4=F000%W5=F0C8%W6=F028)
ECN(R=Y%DF=N%T=7B-85%TG=80%W=F53C%O=M5B4NW0%CC=N%Q=)
T1(R=Y%DF=N%T=7B-85%TG=80%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=7B-85%TG=80%W=F028%S=O%A=S+%F=AS%O=M5B4NW0%RD=0%Q=)
T4(R=Y%DF=N|Y%T=7B-85%TG=80%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N|Y%T=7B-85%TG=80%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N|Y%T=7B-85%TG=80%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N|Y%T=7B-85%TG=80%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Ethernet to wall socket connector provided by BT. Runs 10Mbps ethernet through house electrics.
# Acbel Polytech Ethernet over Powerline 200Mbit/sec bridge
Fingerprint AcBel or Comtrend powerline Ethernet adapter
Class Comtrend | embedded || bridge
Class AcBel | embedded || bridge
SEQ(SP=0-16%GCD=9C4|1388|1D4C|2710|30D4%ISR=0-67%TI=I%TS=U)
OPS(O1=M578%O2=M578%O3=M578%O4=M578%O5=M578%O6=M578)
WIN(W1=7805%W2=7805%W3=7805%W4=7805%W5=7805%W6=7805)
ECN(R=Y%DF=N%T=22-38%TG=40%W=7805%O=M578%CC=N%Q=)
T1(R=Y%DF=N%T=22-36%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=23-3A%TG=40%W=7805%S=O%A=S+%F=AS%O=M578%RD=0%Q=)
T4(R=Y%DF=N%T=20-2E|31-3E%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=21-38%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=N)
T7(R=Y%DF=N%T=22-2E|35-3F%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(R=N)

# Router Comtrend 5361 RoHS
Fingerprint Comtrend 5361 ADSL router
Class Comtrend | embedded || broadband router
CPE cpe:/h:comtrend:5361 auto
SEQ(SP=C1-CB%GCD=1-6%ISR=C7-D1%TI=Z%II=I%TS=8)
OPS(O1=M5ACST11NW0%O2=M5ACST11NW0%O3=M5ACNNT11NW0%O4=M5ACST11NW0%O5=M5ACST11NW0%O6=M5ACST11)
WIN(W1=1680%W2=1680%W3=1680%W4=1680%W5=1680%W6=1680)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=16B0%O=M5ACNNSNW0%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=1680%S=O%A=S+%F=AS%O=M5ACST11NW0%RD=0%Q=)
T4(R=Y%DF=Y%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=FA-104%TG=FF%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=Y%T=FA-104%TG=FF%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=FA-104%TG=FF%CD=S)

# Comtrend CT-800 SIP gateway
Fingerprint Comtrend CT-800 VoIP adapter
Class Comtrend | embedded || VoIP adapter
CPE cpe:/h:comtrend:ct-800 auto
SEQ(SP=14-1E%GCD=7A00|F400|16E00|1E800|26200%ISR=91-9B%TI=I%II=I%SS=S%TS=1)
OPS(O1=M5B4NW0NNT11%O2=M5B4NW0NNT11%O3=M5B4NW0NNT11%O4=M5B4NW0NNT11%O5=M5B4NW0NNT11%O6=M5B4NNT11)
WIN(W1=43E0%W2=4110%W3=423C%W4=4074%W5=4180%W6=403D)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=4470%O=M5B4NW0%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=3B-45%TG=40%W=403D%S=O%A=O%F=A%O=NNT11%RD=0%Q=)
T4(R=Y%DF=N%T=3B-45%TG=40%W=4000%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# COMTREND CT536 Router
Fingerprint Comtrend CT536 wireless ADSL router
Class Comtrend | embedded || WAP
CPE cpe:/h:comtrend:ct536 auto
SEQ(SP=C8-D2%GCD=1-6%ISR=CC-D6%TI=Z%CI=Z%II=I%TS=8)
OPS(R=N)
WIN(R=N)
ECN(R=Y%DF=Y%T=3B-45|FA-104%TG=40|FF%W=16B0%O=|M5ACNW0%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45|FA-104%TG=40|FF%S=O%A=O|S+%F=A|AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%T=3B-45|FA-104%TG=40|FF%W=1680%S=O%A=O|S+%F=A|AS%O=NNT11|M5ACNNT11NW0%RD=0%Q=)
T4(R=Y%DF=Y%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=FA-104%TG=FF%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=Y%T=FA-104%TG=FF%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=FA-104%TG=FF%CD=S)

# conceptronic CHD3NET
Fingerprint Conceptronic CHD3NET NAS device
Class Conceptronic | embedded || storage-misc
CPE cpe:/h:conceptronic:chd3net auto
SEQ(SP=0-5%GCD=596B|B2D6|10C41|165AC|1BF17%ISR=89-93%TI=RD%TS=U)
OPS(O1=M5B4%O2=M578%O3=M280%O4=M5B4%O5=M218%O6=M109)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=N%T=1B-25%TG=20%W=FFFF%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=1B-25%TG=20%S=O%A=O|S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=1B-25%TG=20%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=1B-25%TG=20%W=FFFF%S=O%A=O|S+%F=AS%O=M109%RD=0%Q=)
T4(R=Y%DF=N%T=1B-25%TG=20%W=0%S=A%A=S%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=1B-25%TG=20%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=1B-25%TG=20%W=0%S=A%A=S%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=1B-25%TG=20%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=1B-25%TG=20%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=1B-25%TG=20%CD=S)

# Control4 HC-300 home controller
Fingerprint Control4 HC-300 home controller or Mobotix M22 camera
Class Control4 | embedded || remote management
Class Mobotix | embedded || webcam
SEQ(SP=C1-CB%GCD=1-6%ISR=C7-D3%TI=Z%CI=I%II=I%TS=7)
OPS(O1=M5B4ST11NW2%O2=M5B4ST11NW2%O3=M5B4NNT11NW2%O4=M5B4ST11NW2%O5=M5B4ST11NW2%O6=M5B4ST11)
WIN(W1=16A0%W2=16A0%W3=16A0%W4=16A0%W5=16A0%W6=16A0)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=16D0%O=M5B4NNSNW2%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# Coraid Linux NAS v. 6, debian based Storage System, made by CoRAID
Fingerprint CoRAID NAS device
Class CoRAID | embedded || storage-misc
SEQ(SP=BE-CE%GCD=1-6%ISR=C8-D2%TI=Z%II=I%TS=8)
OPS(O1=M1040ST11NW2%O2=M1040ST11NW2%O3=M1040NNT11NW2%O4=M1040ST11NW2%O5=M1040ST11NW2%O6=M1040ST11)
WIN(W1=309C%W2=309C%W3=309C%W4=309C%W5=309C%W6=309C)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=30C0%O=M1040NNSNW2%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=309C%S=O%A=S+%F=AS%O=M1040ST11NW2%RD=0%Q=)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# CoyotePoint load balancer E250GX
Fingerprint Coyote Point E250GX Equalizer load balancer
Class Coyote Point | embedded || load balancer
CPE cpe:/h:coyote_point:e250gx
SEQ(SP=FF-109%GCD=1-6%ISR=109-113%TI=I%CI=I%II=I%SS=S%TS=B)
OPS(O1=M5B4NW0NNT11%O2=M5B4NW0NNT11%O3=M5B4NW0NNT11%O4=M5B4NW0NNT11%O5=M5B4NW0NNT11%O6=M5B4NNT11)
WIN(W1=8000%W2=8000%W3=8000%W4=8000%W5=8000%W6=8000)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=8000%O=M5B4NW0%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=8000%S=O%A=S+%F=AS%O=M5B4NW0NNT11%RD=0%Q=)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# Coyote Point Systems Equalizer version: 7.2.0h platform: e350si
Fingerprint Coyote Point E350SI Equalizer load balancer
Class Coyote Point | embedded || load balancer
CPE cpe:/h:coyote_point:e350si
SEQ(SP=102-10C%GCD=1-6%ISR=104-10E%TI=I%CI=RI%II=I%SS=O|S%TS=B)
OPS(O1=M5B4NW0NNT11%O2=M578NW0NNT11%O3=M280NW0NNT11%O4=M22CNW0NNT11%O5=M218NW0NNT11%O6=M109NNT11)
WIN(W1=E000%W2=E000%W3=E000%W4=E000%W5=E000%W6=E000)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=E000%O=M5B4NW0%CC=N)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=O|S+%F=AS%RD=0)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=S%F=R%RD=0)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%RD=0)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=S%F=R%RD=0)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# 2.0.5.60 unicosmk CRAY T3E, Vendor: Cray, OS: Unicos/mk
Fingerprint Cray UNICOS/mk 2.0.5.60
Class Cray | UNICOS | 2.X | general purpose
CPE cpe:/o:cray:unicos:2 auto
SEQ(SP=98-A2%GCD=1-6%ISR=9F-A9%TI=I%CI=I%II=I%SS=S%TS=A)
OPS(O1=M10D8WANT11LL%O2=M10D8W0NT11LL%O3=M10D8W5NT11LL%O4=M10D8WANT11LL%O5=M10D8WANT11LL%O6=M10D8T11LL)
WIN(W1=8000%W2=8000%W3=8000%W4=8000%W5=8000%W6=8000)
ECN(R=Y%DF=Y%T=3B-3D%TG=40%W=8000%O=M10D8WAN%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-3D%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=3B-3D%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=Y%T=3B-3D%TG=40%W=20%S=O%A=O%F=A%O=NNT11%RD=0%Q=)
T4(R=Y%DF=N%T=3B-3D%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-3D%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-3D%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-3D%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=Z%RUCK=0%RUD=G)
IE(DFI=N%T=FA-104%TG=FF%CD=S)

# Dedicated Micros Digital Sprite 2, Version 4.4 (029)
# Crestron AV2 with a C2ENET-2 card, firmware 3.155.1240
# Crestron CP2e and firmware 3.155.1240
# Crestron TPS-6x touchpanel with firmware 3.001.0030
Fingerprint Crestron AV2 or CP2E automation system or TPS-6x touchpanel (2-Series), or Dedicated Micros Digital Sprite 2 DVR
Class Crestron | 2-Series || specialized
CPE cpe:/o:crestron:2_series auto
Class Dedicated Micros | embedded || media device
SEQ(SP=FE-10A%GCD=1-6%ISR=103-111%TI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4%O2=M5B4%O3=M5B4%O4=M5B4%O5=M5B4%O6=M5B4)
WIN(W1=3E80%W2=3E80%W3=3E80%W4=3E80%W5=3E80%W6=3E80)
ECN(R=Y%DF=N%T=1B-25%TG=20%W=3E80%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=1B-25%TG=20%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=1B-25%TG=20%W=0%S=Z%A=S%F=ARF%O=%RD=0%Q=)
T3(R=Y%DF=N%T=1B-25%TG=20%W=3E80%S=O%A=S+%F=AS%O=M5B4%RD=0%Q=)
T4(R=Y%DF=N%T=1B-25%TG=20%W=0%S=A%A=Z%F=RF%O=%RD=0%Q=)
T5(R=Y%DF=N%T=1B-25%TG=20%W=0%S=Z%A=S+%F=ARF%O=%RD=0%Q=)
T6(R=Y%DF=N%T=1B-25%TG=20%W=0%S=A%A=Z%F=RF%O=%RD=0%Q=)
T7(R=Y%DF=N%T=1B-25%TG=20%W=0%S=Z%A=S%F=ARF%O=%RD=0%Q=)
U1(R=N)
IE(DFI=N%T=1B-25%TG=20%CD=S)

# Crestron Xpanel Series 2 unit
Fingerprint Crestron XPanel control system
Class Crestron | 2-Series || specialized
CPE cpe:/o:crestron:2_series auto
SEQ(CI=I%II=I)
OPS(R=N)
WIN(R=N)
ECN(R=N)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=O|S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# Possibly a bad print, because no response to open TCP port. Compare Crestron XPanel control system print elsewhere.
# MPC-M5 Cntrl Eng [v4.001.1039 (Oct 22 2009), #0090B136]
# Wago 750-852
Fingerprint Crestron MPC-M5 AV controller or Wago Kontakttechnik 750-852 PLC
Class Crestron | embedded || media device
CPE cpe:/h:crestron:mpc-m5
Class Wago Kontakttechnik | embedded || specialized
CPE cpe:/h:wago_kontakttechnik:750-852
SEQ(CI=I%II=I)
OPS(R=N)
WIN(R=N)
ECN(R=N)
T1(R=N)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# Crestron CNMSX-AV with expansion CNX-ENET+ Ethernet card.
Fingerprint Crestron CNMSX-AV control and automation system
Class Crestron | embedded || specialized
SEQ(SP=CF-D9%GCD=1-6%ISR=D5-DF%TI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4%O2=M5B4%O3=M5B4%O4=M5B4%O5=M5B4%O6=M5B4)
WIN(W1=1000%W2=1000%W3=1000%W4=1000%W5=1000%W6=1000)
ECN(R=Y%DF=N%T=38-42%TG=40%W=1000%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=38-42%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=38-42|74-7E%TG=40|80%W=1000%S=O%A=O|S+%F=A|AS%O=|M5B4%RD=0%Q=)
T4(R=Y%DF=N%T=38-42%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=38-42%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=38-42%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=38-42%TG=40%W=0%S=A%A=S+%F=A%O=%RD=0%Q=)
U1(DF=N%T=38-42%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=38-42%TG=40%CD=Z)

# Crestron Electronics, Product: MC2E, Firmware: v4.000.0226
# Crestron Pro2 processor
# MP2e firmware 4.000.0226
# Crestron QM-RMC with firmware 4.000.0226
# Crestron Pro2 with optional ethernet interface C2ENET-1
# HP StorageWorks MSL4048 Tape Library, Product ID MSL G3, Library Firmware 6.00 / 2.60e
Fingerprint Crestron MC2E, MP2E, PRO2, or QM-RMC control and automation system, or HP StorageWorks MSL4048 tape library
Class Crestron | embedded || specialized
Class HP | embedded || storage-misc
CPE cpe:/h:hp:storageworks_msl4048
SEQ(SP=EE-10C%GCD=1-6%ISR=FF-10F%TI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4%O2=M5B4%O3=M5B4%O4=M5B4%O5=M5B4%O6=M5B4)
WIN(W1=3E80%W2=3E80%W3=3E80%W4=3E80%W5=3E80%W6=3E80)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=3E80%O=M5B4%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=3E80%S=O%A=S+%F=AS%O=M5B4%RD=0%Q=)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# CyanogenMod 11-20141005-SNAPSHOT-M11-hammerhead (based on Android 4.4.4) on a Nexus 5.
Fingerprint CyanogenMod 11 (Android 4.4.4)
Class CyanogenMod | CyanogenMod | 11.X | phone
CPE cpe:/o:cyanogenmod:cyanogenmod:11 auto
Class Google | Android | 4.X | phone
CPE cpe:/o:google:android:4.4.4 auto
SEQ(SP=FE-108%GCD=1-6%ISR=104-10E%TI=Z%CI=Z%II=I%TS=7)
OPS(O1=M5B4ST11NW6%O2=M5B4ST11NW6%O3=M5B4NNT11NW6%O4=M5B4ST11NW6%O5=M5B4ST11NW6%O6=M5B4ST11)
WIN(W1=A9B0%W2=A9B0%W3=A9B0%W4=A9B0%W5=A9B0%W6=A9B0)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=A564%O=M5B4NNSNW6%CC=Y%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# cm-12-20150314-NIGHTLY-bacon
Fingerprint CyanogenMod 12 (Android 5.0)
Class CyanogenMod | CyanogenMod | 12.X | phone
CPE cpe:/o:cyanogenmod:cyanogenmod:12 auto
Class Google | Android | 5.X | phone
CPE cpe:/o:google:android:5.0 auto
SEQ(SP=BC-C6%GCD=1-6%ISR=C6-D0%TI=Z%CI=I%TS=U)
OPS(O1=M5B4NNSNW1%O2=M5B4NNSNW1%O3=M5B4NW1%O4=M5B4NNSNW1%O5=M5B4NNSNW1%O6=M5B4NNS)
WIN(W1=16D0%W2=16D0%W3=16D0%W4=16D0%W5=16D0%W6=16D0)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=16D0%O=M5B4NNSNW1%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=O%F=AR%O=%RD=0%Q=)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# Android Lollipop v5.0.2 (CyanogenMod 12)
Fingerprint CyanogenMod 12 (Android 5.0.2)
Class CyanogenMod | CyanogenMod | 12.X | phone
CPE cpe:/o:cyanogenmod:cyanogenmod:12 auto
Class Google | Android | 5.X | phone
CPE cpe:/o:google:android:5.0.2 auto
SEQ(SP=FB-107%GCD=1-6%ISR=108-112%TI=Z%CI=I%II=I%TS=7)
OPS(O1=M5B4ST11NW6%O2=M5B4ST11NW6%O3=M5B4NNT11NW6%O4=M5B4ST11NW6%O5=M5B4ST11NW6%O6=M5B4ST11)
WIN(W1=A9B0%W2=A9B0%W3=A9B0%W4=A9B0%W5=A9B0%W6=A9B0)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=A564%O=M5B4NNSNW6%CC=Y%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# CybeRoam Unified Threat Management -> Application Firewall
Fingerprint Cyberoam UTM firewall
Class Cyberoam | embedded || firewall
SEQ(SP=BE-CC%GCD=1-6%ISR=CB-D9%TI=Z%TS=U)
OPS(O1=M58C%O2=M58C%O3=M58C%O4=M58C%O5=M58C%O6=M58C)
WIN(W1=16D0%W2=16D0%W3=16D0%W4=16D0%W5=16D0%W6=16D0)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=16D0%O=M58C%CC=N)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%RD=0)
T6(R=N)
T7(R=N)
U1(R=N)
IE(R=N)

# "XLi" appears to be Linux --Ed.
# Cymphonix EX 550, XLi Operating System Version 9 http://www.cymphonix.com/XLiVersion9.html
Fingerprint Cymphonix EX550 firewall
Class Cymphonix | embedded || firewall
CPE cpe:/h:cymphonix:ex550 auto
SEQ(SP=C9-D3%GCD=1-6%ISR=D1-DB%TI=Z%II=I%TS=U)
OPS(O1=M5B4NNS%O2=M5B4NNS%O3=M5B4%O4=M5B4NNS%O5=M5B4NNS%O6=M5B4NNS)
WIN(W1=16D0%W2=16D0%W3=16D0%W4=16D0%W5=16D0%W6=16D0)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=16D0%O=M5B4NNS%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=N)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# D-Link DI-704P
# Dlink dl-604 router
# D-Link DI-524 wireless 802.11g broadband router
Fingerprint D-Link DI-504 or DI-704P broadband router, or DI-524 WAP
Class D-Link | embedded || broadband router
Class D-Link | embedded || WAP
SEQ(SP=0-1B%GCD=32|64|96|C8|FA%ISR=4A-54%TI=BI%II=BI%SS=S%TS=U)
OPS(O1=|M5B4%O2=|M5B4%O3=|M5B4%O4=|M5B4%O5=|M5B4%O6=|M5B4)
WIN(W1=0|16D0%W2=0|16D0%W3=0|16D0%W4=0|16D0%W5=0|16D0%W6=0|16D0)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=0|16D0%O=|M5B4%CC=N%Q=U)
T1(R=Y%DF=N%T=3B-45%TG=40%S=Z%A=S+%F=AR%RD=0%Q=)
T2(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A|O%A=O|S%F=AR%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=O|S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# DI-808HV
Fingerprint D-Link DI-808HV router
Class D-Link | embedded || broadband router
CPE cpe:/h:dlink:di-808hv auto
SEQ(SP=0-5%GCD=64|C8|12C|190|1F4%ISR=4B-55%TI=I%TS=U)
OPS(O1=%O2=%O3=%O4=%O5=%O6=)
WIN(W1=0%W2=0%W3=0%W4=0%W5=0%W6=0)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=0%O=%CC=N%Q=R)
T1(R=Y%DF=N%T=3B-45%TG=40%S=Z%A=S+%F=AR%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=N)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(R=N)

# CANOPY CMM 2.2 Build 2a Oct 12 2006 15:14:19
# D-Link DIR-100 Router with switch firmware 2.00_b5_sw
Fingerprint D-Link DIR-100 DSL router or Motorola Canopy cluster management module 2.2
Class D-Link | embedded || broadband router
CPE cpe:/h:dlink:dir-100 auto
Class Motorola | embedded || specialized
SEQ(SP=8B-99%GCD=1-6%ISR=97-A3%TI=I%II=I%SS=S%TS=1|2)
OPS(O1=M5A8NW0NNT11%O2=M5A8NW0NNT11%O3=M5A8NW0NNT11%O4=M5A8NW0NNT11%O5=M5A8NW0NNT11%O6=M5A8NNT11)
WIN(W1=43E0%W2=4110%W3=423C%W4=43E0%W5=4180%W6=403D)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=4470%O=M5B4NW0%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=3B-45%TG=40%W=403D|4431|4A1F|500D|54FE%S=O%A=O|S+%F=AS%O=M5A8NW0NNT11%RD=0%Q=)
T4(R=Y%DF=N%T=3B-45%TG=40%W=4000%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=134%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# DIR-842: Linux 3.10.90+ (jenkins@jrdslave2) (gcc version 7.4.0 (crosstool-NG 1.24.0-rc3) ) #1 Thu Aug 5 16:26:26 MSK 2021 MIPS 24Kc V8.5 mips32
Fingerprint D-Link DIR-842 (Linux 3.10)
Class D-Link | embedded || broadband router
Class Linux | Linux | 3.X | broadband router
CPE cpe:/o:linux:linux_kernel:3.10 auto
SEQ(SP=102-10C%GCD=1-6%ISR=108-112%TI=Z%CI=I%II=I%TS=7)
OPS(O1=M5B4NNT11NW3%O2=M5B4NNT11NW3%O3=M5B4NNT11NW3%O4=M5B4NNT11NW3%O5=M5B4NNT11NW3%O6=M5B4NNT11)
WIN(W1=3890%W2=3890%W3=3890%W4=3890%W5=3890%W6=3890)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=3908%O=M5B4NW3%CC=Y%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# D-Link 2540B busybox 1.00 embedded
Fingerprint D-Link DSL-2540B ADSL router
Class D-Link | embedded || broadband router
CPE cpe:/h:dlink:dsl-2540b auto
SEQ(SP=C3-CD%GCD=1-6%ISR=C8-D2%TI=Z%II=I%TS=8)
OPS(O1=M5B4ST11NW7%O2=M5B4ST11NW7%O3=M5B4NNT11NW7%O4=M5B4ST11NW7%O5=M5B4ST11NW7%O6=M5B4ST11)
WIN(W1=16A0%W2=16A0%W3=16A0%W4=16A0%W5=16A0%W6=16A0)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=16D0%O=M5B4NNSNW7%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=N)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=B198%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# D-Link DSL-2640B ADSL2+ + Wi-Fi Router + 4-Port Switch
Fingerprint D-Link DSL-2640B ADSL router
Class D-Link | embedded || broadband router
CPE cpe:/h:dlink:dsl-2640b auto
SEQ(SP=C3-CD%GCD=1-6%ISR=CA-D4%TI=Z%CI=Z%II=I%TS=A-C)
OPS(O1=M5B0ST11NW1%O2=M5B0ST11NW1%O3=M5B0NNT11NW1%O4=M5B0ST11NW1%O5=M5B0ST11NW1%O6=M5B0ST11)
WIN(W1=1690%W2=1690%W3=1690%W4=1690%W5=1690%W6=1690)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=16C0%O=M5B0NNSNW1%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=1690%S=O%A=S+%F=AS%O=M5B0ST11NW1%RD=0%Q=)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# D-Link DSL-2890AL running AU_1.01.04 of the firmware
Fingerprint D-Link DSL-2890AL ADSL router
Class D-Link | embedded || broadband router
CPE cpe:/h:dlink:dsl-2890al auto
SEQ(SP=BC-C6%GCD=1-6%ISR=C9-D3%TI=Z%II=I%TS=U)
OPS(O1=M5B4NNSNW2%O2=M5B4NNSNW2%O3=M5B4NW2%O4=M5B4NNSNW2%O5=M5B4NNSNW2%O6=M5B4NNS)
WIN(W1=16D0%W2=16D0%W3=16D0%W4=16D0%W5=16D0%W6=16D0)
ECN(R=Y%DF=Y%T=3A-44%TG=40%W=16D0%O=M5B4NNSNW2%CC=Y%Q=)
T1(R=Y%DF=Y%T=3A-44%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=Y%DF=Y%T=3A-44%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=N)
T7(R=N)
U1(DF=N%T=3A-44%TG=40%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3A-44%TG=40%CD=S)

# D-Link DSL-500 firmware R2.21.002.03.b13au
Fingerprint D-Link DSL-500 ADSL router
Class D-Link | embedded || broadband router
CPE cpe:/h:dlink:dsl-500 auto
SEQ(R=N)
OPS(O1=%O2=%O3=%O4=%O5=%O6=)
WIN(W1=0%W2=0%W3=0%W4=0%W5=0%W6=0)
ECN(R=Y%DF=Y%T=3B-3D%TG=40%W=0%O=%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-3D%TG=40%S=Z%A=S%F=AR%RD=0%Q=)
T2(R=Y%DF=Y%T=3B-3D%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=Y%T=3B-3D%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T4(R=Y%DF=Y%T=3B-3D%TG=40%W=0%S=A%A=S%F=R%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=3B-3D%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-3D%TG=40%W=0%S=A%A=S%F=R%O=%RD=0%Q=)
T7(R=Y%DF=Y%T=3B-3D%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=19-23%TG=20%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=19-23%TG=20%CD=Z)

# D-Link ADSL router, model DSL-500G
# D-Link DSL-500G Generation IV ADSL Router
# D-LINK DSL-500G, Generation II, Ver.: C5
Fingerprint D-Link DSL-500G ADSL router
Class D-Link | embedded || broadband router
CPE cpe:/h:dlink:dsl-500g auto
SEQ(SP=F7-10D%GCD=1-6%ISR=FA-110%TI=I%II=I%SS=S%TS=U)
OPS(O1=M584%O2=M584%O3=M584%O4=M584%O5=M584%O6=M584)
WIN(W1=3E80%W2=3E80%W3=3E80%W4=3E80%W5=3E80%W6=3E80)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=3E80%O=M584%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=3B-45%TG=40%W=3E80%S=O%A=S+%F=AS%O=M584%RD=0%Q=)
T4(R=N)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=ARF%O=%RD=0%Q=)
T6(R=N)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# D-Link DSL-504 ADLS modem/router
Fingerprint D-Link DSL-504 ADSL modem
Class D-Link | embedded || broadband router
CPE cpe:/h:dlink:dsl-504 auto
SEQ(SP=0-29%GCD=9C4|1388|1D4C|2710|30D4%ISR=8A-94%TI=I%II=I%SS=S%TS=U)
OPS(O1=MFD8%O2=MFD8%O3=MFD8%O4=MFD8%O5=MFD8%O6=MFD8)
WIN(W1=5DC%W2=5DC%W3=5DC%W4=5DC%W5=5DC%W6=5DC)
ECN(R=Y%DF=N%T=3B-3D%TG=40%W=5DC%O=MFD8%CC=N%Q=)
T1(R=Y%DF=N%T=3B-3D%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=3B-3D%TG=40%W=5DC%S=O%A=S+%F=AS%O=MFD8%RD=0%Q=)
T4(R=Y%DF=Y%T=3B-3D%TG=40%W=0%S=A%A=S%F=R%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=3B-3D%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-3D%TG=40%W=0%S=A%A=S%F=R%O=%RD=0%Q=)
T7(R=Y%DF=Y%T=3B-3D%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=19-23%TG=20%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=19-23%TG=20%CD=Z)

# D-Link Modem DSL2-300G, Hardware revision: A1, Firmware: R7.00.b1.TQ.t7, The firmware is a special revision for Telus Québec (*.TQ.*).
Fingerprint D-Link DSL2-300G DSL modem
Class D-Link | embedded || broadband router
CPE cpe:/h:dlink:dsl2-300g auto
SEQ(SP=70-88%GCD=1-6%ISR=7C-90%TI=I%TS=U)
OPS(O1=M5B4%O2=M578%O3=M280%O4=M218%O5=M218%O6=M109)
WIN(W1=4000%W2=4000%W3=4000%W4=4000%W5=4000%W6=4000)
ECN(R=Y%DF=Y%T=7B-85%TG=80%W=4000%O=M5B4%CC=N%Q=)
T1(R=Y%DF=Y%T=7B-85%TG=80%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=7B-85%TG=80%W=4000%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=7B-85%TG=80%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=7B-85%TG=80%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=7B-85%TG=80%W=0%S=Z%A=Z%F=R%O=%RD=0%Q=)
U1(DF=N%T=96-A0%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(R=N)

# D-Link DFL-200 firmware v1.34.0
Fingerprint D-Link DFL-200 firewall
Class D-Link | embedded || firewall
CPE cpe:/h:dlink:dfl-200 auto
SEQ(SP=FE-10A%GCD=1-6%ISR=105-10F%TI=RD%CI=RI%II=RI%TS=U)
OPS(O1=M5AC%O2=M5AC%O3=M5AC%O4=M5AC%O5=M5AC%O6=M5AC)
WIN(W1=8000%W2=8000%W3=8000%W4=8000%W5=8000%W6=8000)
ECN(R=Y%DF=N%T=FA-104%TG=FF%W=8000%O=M5AC%CC=N%Q=)
T1(R=Y%DF=N%T=FA-104%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=N)
U1(R=N)
IE(DFI=N%T=FA-104%TG=FF%CD=S)

# D-Link DFL 700 Router/Firewall
Fingerprint D-Link DFL-700 firewall
Class D-Link | embedded || firewall
CPE cpe:/h:dlink:dfl-700 auto
SEQ(SP=102-10C%GCD=1-6%ISR=104-10E%TI=RD%TS=U)
OPS(O1=M564%O2=M564%O3=M564%O4=M564%O5=M564%O6=M564)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=FFFF%O=M564%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=N)
U1(R=N)
IE(R=N)

# D-Link NetDefend OS
Fingerprint D-Link NetDefend firewall
Class D-Link | embedded || firewall
SEQ(SP=F4-FE%GCD=1-6%ISR=106-110%TI=RD%TS=U)
OPS(O1=M5B4%O2=M5B4%O3=M5B4%O4=M5B4%O5=M5B4%O6=M5B4)
WIN(W1=8000%W2=8000%W3=8000%W4=8000%W5=8000%W6=8000)
ECN(R=Y%DF=N%T=FA-104%TG=FF%W=8000%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=FA-104%TG=FF%S=O%A=O|S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=N)
U1(R=N)
IE(DFI=N%T=FA-104%TG=FF%CD=S)

# D-Link DP-G310 wireless print server (hardware version A1, firmware version 1.40)
# Hamlet HPS01UU USB Print Server
Fingerprint D-Link DP-300U, DP-G310, or Hamlet HPS01UU print server
Class D-Link | embedded || print server
CPE cpe:/h:dlink:dp-300u
CPE cpe:/h:dlink:dp-g310
Class Hamlet | embedded || print server
CPE cpe:/h:hamlet:hps01uu auto
SEQ(SP=0-1D%GCD=37|6E|A5|DC|113%ISR=4B-55%TI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4%O2=M5B4%O3=M5B4%O4=M5B4%O5=M5B4%O6=M5B4)
WIN(W1=B68%W2=B68%W3=B68%W4=B68%W5=B68%W6=B68)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=B68%O=M5B4%CC=N%Q=U)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=3B-45%TG=40%W=B68%S=O%A=S+%F=ASF%O=M5B4%RD=0%Q=)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(R=N)
IE(DFI=N%T=FA-104%TG=FF%CD=Z)

# D-Link DPR-1260 Firmware:1.20
# Dlink Gamer Lounge  DGL-4300
# DLink DIR-655, running Ubicom's ipOS operarating system.
# Tranzeo TR-5a 5GHz Client radio with built-in antenna
# DGL-4300 - Wireless 108G Gaming Router, Firmware version: 1.8,    2007/03/01
# DLINK DIR-615 wireless access router Firmware Version: 2.25RU
# D-LINK DIR-855 Wireless N Quadband Gigabit Router
# D-Link Systems DGL-4500.
# DIR-628 Router
Fingerprint D-Link DPR-1260 print server; or DGL-4300, DGL-4500, DIR-615, DIR-625, DIR-628, DIR-655, or DIR-855 WAP
Class D-Link | embedded || print server
CPE cpe:/h:dlink:dpr-1260
Class D-Link | embedded || WAP
CPE cpe:/h:dlink:dgl-4300
CPE cpe:/h:dlink:dgl-4500
CPE cpe:/h:dlink:dir-615
CPE cpe:/h:dlink:dir-625
CPE cpe:/h:dlink:dir-628
CPE cpe:/h:dlink:dir-655
CPE cpe:/h:dlink:dir-855
SEQ(SP=95-B5%GCD=1-6%ISR=A9-BB%TI=I%II=I%SS=S%TS=U)
OPS(O1=|M5B4%O2=|M5B4%O3=|M5B4%O4=|M5B4%O5=|M5B4%O6=|M5B4)
WIN(W1=1000%W2=1000%W3=1000%W4=1000%W5=1000%W6=1000)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=1000%O=|M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=O|S+%F=A|AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=3B-45%TG=40%W=1000%S=O%A=O|S+%F=A|AS%O=|M5B4%RD=0%Q=)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=Z)

# D-Link DNS-321 NAS
Fingerprint D-Link DNS-321 NAS device
Class D-Link | embedded || storage-misc
CPE cpe:/h:dlink:dns-321 auto
SEQ(SP=CA-D4%GCD=1-6%ISR=EA-F4%TI=Z%CI=Z%II=I%TS=6|7)
OPS(O1=M2304ST11NW1%O2=M2304ST11NW1%O3=M2304NNT11NW1%O4=M2304ST11NW1%O5=M2304ST11NW1%O6=M2304ST11)
WIN(W1=45F0%W2=45F0%W3=45F0%W4=45F0%W5=45F0%W6=45F0)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=4608%O=M2304NNSNW1%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=45F0%S=O%A=S+%F=AS%O=M2304ST11NW1%RD=0%Q=)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# D-Link DGS-1210-24 switch
# DES-1210-52
# DGS-1210-24
# D-Link DGS-1500-28
Fingerprint D-Link DES-1210, DGS-1210, or DGS-1500 switch
Class D-Link | embedded || switch
CPE cpe:/h:dlink:des-1210
CPE cpe:/h:dlink:dgs-1210
CPE cpe:/h:dlink:dgs-1500
SEQ(SP=0-5%GCD=388|710|A98|E20|11A8%ISR=64-6E%TI=I%CI=I%II=I%SS=S%TS=7)
OPS(O1=M109NNT11|M578NNT11%O2=M578NNT11%O3=M578NNT11%O4=M578NNT11%O5=M218NNT11%O6=M109NNT11)
WIN(W1=2400%W2=2400%W3=2400%W4=2400%W5=2400%W6=2400)
ECN(R=Y%DF=N%T=37-41%TG=40%W=0%O=%CC=N%Q=)
T1(R=Y%DF=N%T=37-41%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=37-41%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=37-41%TG=40%W=0%S=Z%A=O%F=AR%O=%RD=0%Q=)
T4(R=Y%DF=N%T=37-41%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=37-41%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=37-41%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=37-41%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# D-LINK DES-3010G L2 managed switch
# Linksys DES-3010G Fast Ethernet Switch, Firmware Version: Build 3.00.036
# Switch: DES-3010F, Boot PROM: Build 1.01.007, Firmware Version: Build 4.00.018
Fingerprint D-Link DES-3010F or DES-3010G switch
Class D-Link | embedded || switch
CPE cpe:/h:dlink:des-3010f
CPE cpe:/h:dlink:dgs-3010g
SEQ(SP=8D-97%GCD=1-6%ISR=92-9C%TI=I%II=RI%SS=O|S%TS=1)
OPS(O1=M5A4NW0NNT11%O2=M5A4NW0NNT11%O3=M5A4NW0NNT11%O4=M5A4NW0NNT11%O5=M5A4NW0NNT11%O6=M5A4NNT11)
WIN(W1=2000%W2=2000%W3=2000%W4=2000%W5=2000%W6=2000)
ECN(R=Y%DF=N%T=19-23%TG=20%W=2000%O=M5A4NW0%CC=N%Q=)
T1(R=Y%DF=N%T=19-23%TG=20%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=19-23%TG=20%W=0|2000%S=O|Z%A=O|S+%F=A|AR|AS%O=|NNT11NNLLLLLLLLLL|M5A4NW0NNT11NNLLLLLLLLLL%RD=0%Q=)
T4(R=Y%DF=N%T=19-23%TG=20%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=19-23%TG=20%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=19-23%TG=20%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=19-23%TG=20%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=19-23%TG=20%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=19-23%TG=20%CD=S)

# D-Link DGS-3200-10 Gigabit Ethernet Switch
Fingerprint D-Link DES-3010G switch
Class D-Link | embedded || switch
CPE cpe:/h:dlink:des-3010g auto
SEQ(SP=8C-98%GCD=1-6%ISR=92-9C%TI=I%II=RI%SS=S%TS=1)
OPS(O1=M5A4NW0NNT11%O2=M5A4NW0NNT11%O3=M5A4NW0NNT11%O4=M5A4NW0NNT11%O5=M5A4NW0NNT11%O6=M5A4NNT11)
WIN(W1=2000%W2=2000%W3=2000%W4=2000%W5=2000%W6=2000)
ECN(R=Y%DF=N%T=19-23%TG=20%W=2000%O=M5A4NW0%CC=N%Q=)
T1(R=Y%DF=N%T=19-23%TG=20%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=19-23%TG=20%W=2000%S=O%A=S+%F=AS%O=M5A4NW0NNT11NNLLLLLLLLLL%RD=0%Q=)
T4(R=Y%DF=N%T=19-23%TG=20%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=19-23%TG=20%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=19-23%TG=20%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=19-23%TG=20%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=19-23%TG=20%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# DES-3016 Fast Ethernet Switch Command Line Interface Firmware version: "Build 1.00B007"
Fingerprint D-Link DES-3016 switch
Class D-Link | embedded || switch
CPE cpe:/h:dlink:des-3010f
CPE cpe:/h:dlink:dgs-3010g
SEQ(SP=8B-95%GCD=1-6%ISR=91-9B%TI=I%II=RI%SS=O%TS=1)
OPS(O1=M5A4NW0NNT11%O2=M5A4NW0NNT11%O3=M5A4NW0NNT11%O4=M5A4NW0NNT11%O5=M5A4NW0NNT11%O6=M5A4NNT11)
WIN(W1=2000%W2=2000%W3=2000%W4=2000%W5=2000%W6=2000)
ECN(R=Y%DF=N%T=19-23%TG=20%W=2000%O=M5A4NW0%CC=N)
T1(R=Y%DF=N%T=19-23%TG=20%S=O%A=S+%F=AS%RD=0)
T2(R=N)
T3(R=Y%DF=N%T=19-23%TG=20%W=2000%S=O%A=S+%F=AS%O=M5A4NW0NNT11NNLLLLLLLLLL|M5A4NW0NNT11W27W27NNLLLL%RD=0)
T4(R=N)
T5(R=Y%DF=N%T=19-23%TG=20%W=0%S=Z%A=S+%F=AR%RD=0)
T6(R=N)
T7(R=N)
U1(DF=N%T=19-23%TG=20%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=19-23%TG=20%CD=S)

# D/Link DES-3028P, Firmware Version  Build 1.02-B10
Fingerprint D-Link DES-3028P switch
Class D-Link | embedded || switch
CPE cpe:/h:dlink:des-3028p auto
SEQ(SP=8D-97%GCD=1-6%ISR=93-9D%TI=I%CI=I%II=RI%SS=S%TS=1)
OPS(O1=M5A4NW0NNT11%O2=M5A4NW0NNT11%O3=M5A4NW0NNT11%O4=M5A4NW0NNT11%O5=M5A4NW0NNT11%O6=M5A4NNT11)
WIN(W1=2000%W2=2000%W3=2000%W4=2000%W5=2000%W6=2000)
ECN(R=Y%DF=N%T=19-23%TG=20%W=2000%O=M5A4NW0%CC=N%Q=)
T1(R=Y%DF=N%T=19-23%TG=20%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=19-23%TG=20%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=19-23%TG=20%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=19-23%TG=20%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=N)
U1(DF=N%T=19-23%TG=20%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=19-23%TG=20%CD=S)

# DES-3200-26 Fast Ethernet Switch
Fingerprint D-Link DES-3200 switch
Class D-Link | embedded || switch
CPE cpe:/h:dlink:des-3200 auto
SEQ(SP=0-5%GCD=0%ISR=0-5%TI=I%CI=I%II=RI%SS=O|S%TS=1)
OPS(O1=M5A4NW0NNT11%O2=M5A4NW0NNT11%O3=M5A4NW0NNT11%O4=M5A4NW0NNT11%O5=M5A4NW0NNT11%O6=M5A4NNT11)
WIN(W1=2000%W2=2000%W3=2000%W4=2000%W5=2000%W6=2000)
ECN(R=Y%DF=N%T=19-23%TG=20%W=2000%O=M5A4NW0%CC=N)
T1(R=Y%DF=N%T=19-23%TG=20%S=O%A=S+%F=AS%RD=0)
T2(R=N)
T3(R=Y%DF=N%T=19-23%TG=20%W=2000%S=O%A=S+%F=AS%O=M5A4NW0NNT11T11LL|M5A4NW0NNT11NNLLLLLLLLLL%RD=0)
T4(R=Y%DF=N%T=19-23%TG=20%W=0%S=A%A=Z%F=R%RD=0)
T5(R=Y%DF=N%T=19-23%TG=20%W=0%S=Z%A=S+%F=AR%RD=0)
T6(R=Y%DF=N%T=19-23%TG=20%W=0%S=A%A=Z%F=R%RD=0)
T7(R=Y%DF=N%T=19-23%TG=20%W=0%S=Z%A=S%F=AR%RD=0)
U1(DF=N%T=19-23%TG=20%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=19-23%TG=20%CD=S)

# D-Link DES-3326 Switch
Fingerprint D-Link DES-3326 switch
Class D-Link | embedded || switch
CPE cpe:/h:dlink:des-3326 auto
SEQ(SP=8D-97%GCD=1-6%ISR=91-9B%TI=I%II=RI%SS=S%TS=1)
OPS(O1=M5B4NW0NNT11%O2=M5B4NW0NNT11%O3=M5B4NW0NNT11%O4=M5B4NW0NNT11%O5=M5B4NW0NNT11%O6=M5B4NNT11)
WIN(W1=2000%W2=2000%W3=2000%W4=2000%W5=2000%W6=2000)
ECN(R=Y%DF=N%T=19-23%TG=20%W=2000%O=M5B4NW0%CC=N%Q=)
T1(R=Y%DF=N%T=19-23%TG=20%S=Z%A=S+%F=A|AR|AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=19-23%TG=20%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=19-23%TG=20%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=19-23%TG=20%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=19-23%TG=20%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=19-23%TG=20%IPL=38%UN=128%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=19-23%TG=20%CD=S)

# DES-3526 Fast-Ethernet Switch, Firmware Version  : Build 5.01-B21
# DES-3550 Fast Ethernet Switch Command Line Interface Firmware: Build 5.01.B65
Fingerprint D-Link DES-3526 or DES-3550 switch
Class D-Link | embedded || switch
SEQ(SP=8D-97%GCD=1-6%ISR=92-9C%TI=I%CI=I%II=RI%SS=O|S%TS=1)
OPS(O1=M5A4NW0NNT11%O2=M5A4NW0NNT11%O3=M5A4NW0NNT11%O4=M5A4NW0NNT11%O5=M5A4NW0NNT11%O6=M5A4NNT11)
WIN(W1=2000%W2=2000%W3=2000%W4=2000%W5=2000%W6=2000)
ECN(R=Y%DF=N%T=19-23%TG=20%W=2000%O=M5A4NW0%CC=N%Q=)
T1(R=Y%DF=N%T=19-23%TG=20%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=19-23%TG=20%W=2000%S=O%A=S+%F=AS%O=M5A4NW0NNT11NNLLLLLLLLLL%RD=0%Q=)
T4(R=Y%DF=N%T=19-23%TG=20%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=19-23%TG=20%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=19-23%TG=20%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=19-23%TG=20%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=19-23%TG=20%IPL=38%UN=128%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=19-23%TG=20%CD=S)

# d-link des 3526, Firmware Version 5.00-B28
Fingerprint D-Link DES-3526 switch
Class D-Link | embedded || switch
CPE cpe:/h:dlink:des-3526 auto
SEQ(SP=8D-97%GCD=1-6%ISR=92-9C%TI=I|RD%II=RI%SS=S%TS=1)
OPS(O1=M5A4NW0NNT11%O2=M5A4NW0NNT11%O3=M5A4NW0NNT11%O4=M5A4NW0NNT11%O5=M5A4NW0NNT11%O6=M5A4NNT11)
WIN(W1=2000%W2=2000%W3=2000%W4=2000%W5=2000%W6=2000)
ECN(R=Y%DF=N%T=19-23%TG=20%W=2000%O=M5A4NW0%CC=N%Q=)
T1(R=Y%DF=N%T=19-23%TG=20%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=19-23%TG=20%W=2000%S=O%A=S+%F=AS%O=M5A4NW0NNT11NNLLLLLM800L|M5A4NW0NNT11NNNNLLLM800L%RD=0%Q=)
T4(R=Y%DF=N%T=19-23%TG=20%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=19-23%TG=20%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=19-23%TG=20%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=19-23%TG=20%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=19-23%TG=20%IPL=38%UN=100|128%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=19-23%TG=20%CD=S)

# D-Link DES-3256 switch
Fingerprint D-Link DES-3526 switch
Class D-Link | embedded || switch
CPE cpe:/h:dlink:des-3526 auto
SEQ(SP=8E-98%GCD=1-6%ISR=92-9C%TI=I%CI=I%II=RI%SS=O%TS=1)
OPS(O1=M5A4NW0NNT11%O2=M5A4NW0NNT11%O3=M5A4NW0NNT11%O4=M5A4NW0NNT11%O5=M5A4NW0NNT11%O6=M5A4NNT11)
WIN(W1=2000%W2=2000%W3=2000%W4=2000%W5=2000%W6=2000)
ECN(R=Y%DF=N%T=19-23%TG=20%W=2000%O=M5A4NW0%CC=N%Q=)
T1(R=Y%DF=N%T=19-23%TG=20%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=19-23%TG=20%W=0|2000%S=O|Z%A=O|S+%F=AR|AS%O=|M5A4NW0NNT11NNLLLLLLLLLL%RD=0%Q=)
T4(R=Y%DF=N%T=19-23%TG=20%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=19-23%TG=20%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=19-23%TG=20%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=19-23%TG=20%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=19-23%TG=20%IPL=38%UN=3204|6BAE|D31F|E000|F562%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=19-23%TG=20%CD=S)

# DES-3526 Fast Ethernet Switch Firmware: Build 4.01-B19
Fingerprint D-Link DES-3526 switch
Class D-Link | embedded || switch
CPE cpe:/h:dlink:des-3526
SEQ(SP=8E-98%GCD=1-6%ISR=92-9C%TI=I|RD%CI=I%II=RI%SS=O%TS=1)
OPS(O1=M5A4NW0NNT11%O2=M5A4NW0NNT11%O3=M5A4NW0NNT11%O4=M5A4NW0NNT11%O5=M5A4NW0NNT11%O6=M5A4NNT11)
WIN(W1=2000%W2=2000%W3=2000%W4=2000%W5=2000%W6=2000)
ECN(R=Y%DF=N%T=19-23%TG=20%W=2000%O=M5A4NW0%CC=N)
T1(R=Y%DF=N%T=19-23%TG=20%S=O%A=S+%F=AS%RD=0)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=19-23%TG=20%W=0%S=A%A=Z%F=R%RD=0)
T5(R=Y%DF=N%T=19-23%TG=20%W=0%S=Z%A=S+%F=AR%RD=0)
T6(R=Y%DF=N%T=19-23%TG=20%W=0%S=A%A=Z%F=R%RD=0)
T7(R=N)
U1(DF=N%T=19-23%TG=20%IPL=38%UN=128%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=19-23%TG=20%CD=S)

# D-Link DES-3550 Firmware: Build 5.01.B52
Fingerprint D-Link DES-3550 switch
Class D-Link | embedded || switch
CPE cpe:/h:dlink:des-3550 auto
SEQ(SP=8B-95%GCD=1-6%ISR=91-9B%TI=I%CI=I%II=RI%SS=S%TS=1)
OPS(O1=M5A4NW0NNT11%O2=M5A4NW0NNT11%O3=M5A4NW0NNT11%O4=M5A4NW0NNT11%O5=M5A4NW0NNT11%O6=M5A4NNT11)
WIN(W1=2000%W2=2000%W3=2000%W4=2000%W5=2000%W6=2000)
ECN(R=Y%DF=N%T=19-23%TG=20%W=2000%O=M5A4NW0%CC=N%Q=)
T1(R=Y%DF=N%T=19-23%TG=20%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=19-23%TG=20%W=2000%S=O%A=S+%F=AS%O=%RD=0%Q=)
T4(R=Y%DF=N%T=19-23%TG=20%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=19-23%TG=20%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=19-23%TG=20%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=19-23%TG=20%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=19-23%TG=20%IPL=38%UN=128%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=19-23%TG=20%CD=S)

# DES-7210 Modular Layer 3 Chassis Ethernet Switch, System hardware version: A1.0, System software version: v10.3(5), Release(67526)
Fingerprint D-Link DES-7210 switch
Class D-Link | embedded || switch
CPE cpe:/h:dlink:des-7210 auto
SEQ(SP=0-5%GCD=388|710|A98|E20|11A8%ISR=64-6E%TI=I%CI=I%II=I%SS=S%TS=U)
OPS(O1=M218%O2=M218%O3=M218%O4=M218%O5=M218%O6=M109)
WIN(W1=1000%W2=1000%W3=1000%W4=1000%W5=1000%W6=1000)
ECN(R=Y%DF=N%T=3A-44%TG=40%W=1000%O=M218%CC=N%Q=)
T1(R=Y%DF=N%T=3A-44%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=3A-44%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
T3(R=N)
T4(R=Y%DF=N%T=3A-44%TG=40%W=0%S=A%A=S%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3A-44%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3A-44%TG=40%W=0%S=A%A=S%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3A-44%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=164%UN=5002%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# DLINK DGS-1210-10P firmware 2.01.002
# firmware 2.02.A005 (O4=M218NNT11)
Fingerprint D-Link DGS-1210 switch
Class D-Link | embedded || switch
CPE cpe:/h:dlink:dgs-1210
SEQ(SP=0-5%GCD=388|710|A98|E20|11A8%ISR=64-6E%TI=I%CI=I%TS=7)
OPS(O1=M578NNT11%O2=M578NNT11%O3=M578NNT11%O4=M[218|578]NNT11%O5=M218NNT11%O6=M109NNT11)
WIN(W1=2400%W2=2400%W3=2400%W4=2400%W5=2400%W6=2400)
ECN(R=Y%DF=N%T=37-41%TG=40%W=0%O=%CC=N%Q=)
T1(R=Y%DF=N%T=37-41%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=37-41%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=37-41%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=37-41%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# D-Link DGS-1210-10P, Firmware Version 3.12.b017
Fingerprint D-Link DGS-1210 switch
Class D-Link | embedded || switch
CPE cpe:/h:dlink:dgs-1210 auto
SEQ(SP=0-5%GCD=388|710|A98|E20|11A8%ISR=64-6E%TI=I%CI=I%II=I%SS=S%TS=7)
OPS(O1=M578NNT11%O2=M578NNT11%O3=M578NNT11%O4=M578NNT11%O5=M218NNT11%O6=M109NNT11)
WIN(W1=2400%W2=2400%W3=2400%W4=2400%W5=2400%W6=2400)
ECN(R=Y%DF=N%T=37-41%TG=40%W=0%O=%CC=N%Q=)
T1(R=Y%DF=N%T=37-41%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=37-41%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
T3(R=N)
T4(R=Y%DF=N%T=37-41%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=37-41%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=37-41%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=37-41%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# DLINK DGS-1210-10P firmware 2.02.002
Fingerprint D-Link DGS-1210 switch
Class D-Link | embedded || switch
CPE cpe:/h:dlink:dgs-1210
SEQ(SP=0-5%GCD=388|710|A98|E20|11A8%ISR=64-6E%TI=I%II=I%SS=O%TS=7)
OPS(O1=M578NNT11%O2=M578NNT11%O3=M578NNT11%O4=M578NNT11%O5=M218NNT11%O6=M109NNT11)
WIN(W1=2400%W2=2400%W3=2400%W4=2400%W5=2400%W6=2400)
ECN(R=Y%DF=N%T=37-41%TG=40%W=0%O=%CC=N%Q=)
T1(R=Y%DF=N%T=37-41%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=Y%DF=N%T=37-41%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=N)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# DGS-1510
Fingerprint D-Link DGS-1510 switch
Class D-Link | embedded || switch
CPE cpe:/h:dlink:dgs-1510 auto
SEQ(SP=8E-98%GCD=1-6%ISR=92-9C%TI=I%CI=I%II=RI%TS=1)
OPS(O1=M5A4NW0NNT11%O2=M5A4NW0NNT11%O3=M5A4NW0NNT11%O4=M5A4NW0NNT11%O5=M5A4NW0NNT11%O6=M5A4NNT11)
WIN(W1=2000%W2=2000%W3=2000%W4=2000%W5=2000%W6=2000)
ECN(R=Y%DF=N%T=1A-24%TG=20%W=2000%O=M5A4NW0%CC=N%Q=)
T1(R=Y%DF=N%T=1A-24%TG=20%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=1A-24%TG=20%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=1A-24%TG=20%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=1A-24%TG=20%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=N)
U1(DF=N%T=1A-24%TG=20%IPL=38%UN=128%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=FB-105%TG=FF%CD=S)

# D-Link DGS-3024
Fingerprint D-Link DGS-3024 switch
Class D-Link | embedded || switch
CPE cpe:/h:dlink:dgs-3024 auto
SEQ(SP=8E-98%GCD=1-6%ISR=92-9C%TI=I%II=RI%SS=O|S%TS=1)
OPS(O1=M5B4NW0NNT11%O2=M5B4NW0NNT11%O3=M5B4NW0NNT11%O4=M5B4NW0NNT11%O5=M5B4NW0NNT11%O6=M5B4NNT11)
WIN(W1=2000%W2=2000%W3=2000%W4=2000%W5=2000%W6=2000)
ECN(R=Y%DF=N%T=19-23%TG=20%W=2000%O=M5B4NW0%CC=N%Q=)
T1(R=Y%DF=N%T=19-23%TG=20%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=19-23%TG=20%W=2000%S=O%A=S+%F=AS%O=|M5B4NW0NNT11NNLLLLLLLLLL%RD=0%Q=)
T4(R=Y%DF=N%T=19-23%TG=20%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=19-23%TG=20%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=19-23%TG=20%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=19-23%TG=20%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=19-23%TG=20%IPL=38%UN=127|128%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=19-23%TG=20%CD=S)

# D-Link DGS-3324SR xStack 24-Port Layer3 Gigabit Stack Switch
# D-Link DES-3828 switch
# D-Link DES-3528 2.60.017
Fingerprint D-Link DGS-3324SR, DSG-3612G, DES-3528 or DES-3828 switch
Class D-Link | embedded || switch
SEQ(SP=8B-95%GCD=1-6%ISR=91-9B%TI=I%II=RI%SS=O|S%TS=1)
OPS(O1=M5A4NW0NNT11%O2=M5A4NW0NNT11%O3=M5A4NW0NNT11%O4=M5A4NW0NNT11%O5=M5A4NW0NNT11%O6=M5A4NNT11)
WIN(W1=2000%W2=2000%W3=2000%W4=2000%W5=2000%W6=2000)
ECN(R=Y%DF=N%T=1A-24%TG=20%W=2000%O=M5A4NW0%CC=N%Q=)
T1(R=Y%DF=N%T=1A-24%TG=20%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=1A-24%TG=20%W=2000%S=O%A=S+%F=AS%O=M5A4NW0NNT11NNLLLLLLLLLL%RD=0%Q=)
T4(R=Y%DF=N%T=1A-24%TG=20%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=1A-24%TG=20%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=1A-24%TG=20%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=1A-24%TG=20%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=1A-24%TG=20%IPL=38%UN=128%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# DGS-3450 switch; firmware 2.62B15
Fingerprint D-Link DGS-3450 switch
Class D-Link | embedded || switch
CPE cpe:/h:dlink:dgs-3450 auto
SEQ(SP=8D-97%GCD=1-6%ISR=92-9C%TI=RD%CI=I%II=RI%TS=1)
OPS(O1=NNT11|M5A4NW0NNT11%O2=NNT11|M5A4NW0NNT11%O3=NNT11|M5A4NW0NNT11%O4=NNT11|M5A4NW0NNT11%O5=NNT11|M5A4NW0NNT11%O6=NNT11|M5A4NNT11)
WIN(W1=2000%W2=2000%W3=2000%W4=2000%W5=2000%W6=2000)
ECN(R=Y%DF=N%T=1A-24%TG=20%W=2000%O=|M5A4NW0%CC=N%Q=)
T1(R=Y%DF=N%T=1A-24%TG=20%S=O%A=O|S+%F=A|AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=1A-24%TG=20%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=1A-24%TG=20%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=1A-24%TG=20%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=1A-24%TG=20%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=1A-24%TG=20%IPL=38%UN=128|45C%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=FB-105%TG=FF%CD=S)

# DGS-3610-26. OS is RGOS.
Fingerprint D-Link DGS-3610 switch
Class D-Link | embedded || switch
CPE cpe:/h:dlink:dgs-3610 auto
SEQ(SP=0-5%GCD=388|710|A98|E20|11A8%ISR=64-6E%TI=I%CI=I%II=I%SS=O|S%TS=U)
OPS(O1=M218%O2=M218%O3=M218%O4=M218%O5=M218%O6=M109)
WIN(W1=1000%W2=1000%W3=1000%W4=1000%W5=1000%W6=1000)
ECN(R=Y%DF=N%T=39-43%TG=40%W=1000%O=M218%CC=N%Q=)
T1(R=Y%DF=N%T=39-43%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=39-43%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
T3(R=N)
T4(R=Y%DF=N%T=39-43%TG=40%W=0%S=A%A=S%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=39-43%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=39-43%TG=40%W=0%S=A%A=S%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=39-43%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3A-44%TG=40%IPL=164%UN=FD28%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3A-44%TG=40%CD=S)

# DGS-3627G Gigabit Ethernet Switch, Firmware: Build 2.50.T31
Fingerprint D-Link DGS-3627G stack
Class D-Link | embedded || switch
SEQ(SP=8E-98%GCD=1-6%ISR=92-9C%TI=I|RD%II=RI%SS=O%TS=1)
OPS(O1=M5C2NW0NNT11%O2=M5C2NW0NNT11%O3=M5C2NW0NNT11%O4=M5C2NW0NNT11%O5=M5C2NW0NNT11%O6=M5C2NNT11)
WIN(W1=2000%W2=2000%W3=2000%W4=2000%W5=2000%W6=2000)
ECN(R=Y%DF=N%T=1A-24%TG=20%W=2000%O=M5C2NW0%CC=N%Q=)
T1(R=Y%DF=N%T=1A-24%TG=20%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=1A-24%TG=20%W=2000%S=O%A=S+%F=AS%O=M5C2NW0NNT11NNLLLLLLLLLL%RD=0%Q=)
T4(R=Y%DF=N%T=1A-24%TG=20%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=1A-24%TG=20%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=1A-24%TG=20%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=1A-24%TG=20%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=1A-24%TG=20%IPL=38%UN=128%RIPL=G%RID=G%RIPCK=G%RUCK=61F5%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# DXS-3326GSR Stackable Ethernet Switch Firmware: Build 4.41-B16
Fingerprint D-Link DXS-3326GSR switch
Class D-Link | embedded || switch
CPE cpe:/h:dlink:dxs-3326gsr auto
SEQ(SP=8D-97%GCD=1-6%ISR=9F-A9%TI=I%II=RI%SS=S%TS=1)
OPS(O1=M5A4NW0NNT11%O2=M5A4NW0NNT11%O3=M5A4NW0NNT11%O4=M5A4NW0NNT11%O5=M5A4NW0NNT11%O6=M5A4NNT11)
WIN(W1=2000%W2=2000%W3=2000%W4=2000%W5=2000%W6=2000)
ECN(R=Y%DF=N%T=1A-24%TG=20%W=2000%O=M5A4NW0%CC=N)
T1(R=Y%DF=N%T=1A-24%TG=20%S=O%A=S+%F=AS%RD=0)
T2(R=N)
T3(R=Y%DF=N%T=1A-24%TG=20%W=2000%S=O%A=S+%F=AS%O=M5A4NW0NNT11NNLLLLLLLLLL%RD=0)
T4(R=Y%DF=N%T=1A-24%TG=20%W=0%S=A%A=Z%F=R%RD=0)
T5(R=Y%DF=N%T=1A-24%TG=20%W=0%S=Z%A=S+%F=AR%RD=0)
T6(R=Y%DF=N%T=1A-24%TG=20%W=0%S=A%A=Z%F=R%RD=0)
T7(R=Y%DF=N%T=1A-24%TG=20%W=0%S=Z%A=S%F=AR%RD=0)
U1(DF=N%T=1A-24%TG=20%IPL=38%UN=128%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=FB-105%TG=FF%CD=S)

# D-Link DXS-3600-32S, H/W:B1, Bootloader:1.10.007 Runtime:2.34.B029
Fingerprint D-Link DXS-3600 switch
Class D-Link | embedded || switch
CPE cpe:/h:dlink:dxs-3600 auto
SEQ(SP=8E-98%GCD=1-6%ISR=92-9C%TI=I%CI=I|RD%II=RI%TS=1)
OPS(O1=M200NW0NNT11%O2=M200NW0NNT11%O3=M200NW0NNT11%O4=M200NW0NNT11%O5=M200NW0NNT11%O6=M200NNT11)
WIN(W1=2000%W2=2000%W3=2000%W4=2000%W5=2000%W6=2000)
ECN(R=Y%DF=N%T=18-22%TG=20%W=2000%O=M200NW0%CC=N%Q=)
T1(R=Y%DF=N%T=18-22%TG=20%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=18-22%TG=20%W=2000%S=O%A=S+%F=AS%O=M200NW0NNT11NNLLLLLLLLLL%RD=0%Q=)
T4(R=Y%DF=N%T=18-22%TG=20%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=18-22%TG=20%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=18-22%TG=20%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=18-22%TG=20%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=18-22%TG=20%IPL=38%UN=128%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=F9-103%TG=FF%CD=S)

# D-Link VoIP Gateway DVG-4022S
Fingerprint D-Link DVG-4022S VoIP adapter
Class D-Link | embedded || VoIP adapter
CPE cpe:/h:dlink:dvg-4022s auto
SEQ(SP=8F-99%GCD=1-6%ISR=92-9C%TI=I%II=RI%SS=O%TS=1)
OPS(O1=M5B4NW0NNT11%O2=M5B4NW0NNT11%O3=M5B4NW0NNT11%O4=M5B4NW0NNT11%O5=M5B4NW0NNT11%O6=M5B4NNT11)
WIN(W1=2000%W2=2000%W3=2000%W4=2000%W5=2000%W6=2000)
ECN(R=Y%DF=N%T=19-23%TG=20%W=2000%O=M5B4NW0%CC=N%Q=)
T1(R=Y%DF=N%T=19-23%TG=20%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=19-23%TG=20%W=2000%S=O%A=O|S+%F=A|AS%O=NNT11NNLLLLLLLLLN|M5B4NW0NNT11NNLLLLLLLLLN%RD=0%Q=)
T4(R=Y%DF=N%T=19-23%TG=20%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=19-23%TG=20%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=19-23%TG=20%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=19-23%TG=20%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=19-23%TG=20%IPL=38%UN=128%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=19-23%TG=20%CD=S)

# D-Link VoIP Router DVG-5112S, Firmware Version: GE_1.00
# D-Link DVG-6004S FXO VoIP Router Software Version No. [1.02.38.28]
Fingerprint D-Link DVG-5112S or DVG-6004S VoIP adapter
Class D-Link | embedded || VoIP adapter
SEQ(SP=BF-DB%GCD=1-6%ISR=CB-D5%TI=Z%CI=Z%II=RI%TS=7)
OPS(O1=M5B4ST11NW0%O2=M5B4ST11NW0%O3=M5B4NNT11NW0%O4=M5B4ST11NW0%O5=M5B4ST11NW0%O6=M5B4ST11)
WIN(W1=16A0%W2=16A0%W3=16A0%W4=16A0%W5=16A0%W6=16A0)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=16D0%O=M5B4NNSNW0%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=16A0%S=O%A=S+%F=AS%O=M5B4ST11NW0%RD=0%Q=)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=7B-85%TG=80%CD=S)

# D-Link DPH-150S VoIP phone
Fingerprint D-Link DPH-150S VoIP phone
Class D-Link | embedded || VoIP phone
CPE cpe:/h:dlink:dph-150s auto
SEQ(CI=Z)
OPS(O1=%O2=%O3=%O4=%O5=%O6=)
WIN(W1=0%W2=0%W3=0%W4=0%W5=0%W6=0)
ECN(R=Y%DF=Y%T=FA-104%TG=FF%W=0%O=%CC=N%Q=)
T1(R=Y%DF=Y%T=FA-104%TG=FF%S=Z%A=S+%F=AR%RD=0%Q=)
T2(R=Y%DF=Y%T=FA-104%TG=FF%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=Y%T=FA-104%TG=FF%W=0%S=Z%A=O%F=AR%O=%RD=0%Q=)
T4(R=Y%DF=Y%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=FA-104%TG=FF%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=FA-104%TG=FF%W=0%S=A|O%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=Y%T=FA-104%TG=FF%W=0%S=Z%A=O|S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=FA-104%TG=FF%CD=S)

# D-Link WBR-2310 Hardware: A1 Firmware: 1.04
# D-Link DI-524
Fingerprint D-Link DI-524 or WBR-2310 wireless broadband router
Class D-Link | embedded || WAP
SEQ(SP=C-7E%GCD=FA7F|1F4FE|2EF7D|3E9FC|4E47B%ISR=97-E3%TI=I%II=I%SS=S%TS=U)
OPS(O1=M5B0%O2=M5B0%O3=M5B0%O4=M5B0%O5=M5B0%O6=M5B0)
WIN(W1=2000%W2=2000%W3=2000%W4=2000%W5=2000%W6=2000)
ECN(R=Y%DF=N%T=7A-84%TG=80%W=2000%O=M5B0%CC=N%Q=)
T1(R=Y%DF=N%T=7A-84%TG=80%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=7A-84%TG=80%W=2000%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=7A-84%TG=80%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=7A-84%TG=80%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=7A-84%TG=80%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=7A-84%TG=80%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=7A-84%TG=80%CD=S)

# D-Link DI-524 Wifi router
Fingerprint D-Link DI-524 WAP
Class D-Link | embedded || WAP
CPE cpe:/h:dlink:di-524 auto
SEQ(SP=0-3B%GCD=32|64|96|C8|FA%ISR=4B-55%TI=BI%CI=BI%II=BI%SS=S%TS=U)
OPS(O1=M5B4%O2=M5B4%O3=M5B4%O4=M5B4%O5=M5B4%O6=M5B4)
WIN(W1=16D0%W2=16D0%W3=16D0%W4=16D0%W5=16D0%W6=16D0)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=16D0%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# d-link Di-524
Fingerprint D-Link DI-524 wireless broadband router
Class D-Link | embedded || WAP
CPE cpe:/h:dlink:di-524 auto
SEQ(SP=0-5%GCD=64|C8|12C|190|1F4%ISR=4B-55%TI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4%O2=M5B4%O3=M5B4%O4=M5B4%O5=M5B4%O6=M5B4)
WIN(W1=16D0%W2=16D0%W3=16D0%W4=16D0%W5=16D0%W6=16D0)
ECN(R=Y%DF=N%T=7B-85%TG=80%W=16D0%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=7B-85%TG=80%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=7B-85%TG=80%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=7B-85%TG=80%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T4(R=Y%DF=N%T=7B-85%TG=80%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
T5(R=Y%DF=N%T=7B-85%TG=80%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=7B-85%TG=80%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
T7(R=Y%DF=N%T=7B-85%TG=80%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=7B-85%TG=80%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=7B-85%TG=80%CD=S)

# DI-524 wireless router running Firmware Version: 3.23 , Wed, 28 Jun 2006
Fingerprint D-Link DI-524 wireless broadband router
Class D-Link | embedded || WAP
CPE cpe:/h:dlink:di-524 auto
SEQ(SP=C-16%GCD=FA7F|1F4FE|2EF7D|3E9FC|4E47B%ISR=97-A1%TI=I%CI=RI%TS=U)
OPS(O1=M5B0%O2=M5B0%O3=M5B0%O4=M5B0%O5=M5B0%O6=M5B0)
WIN(W1=2000%W2=2000%W3=2000%W4=2000%W5=2000%W6=2000)
ECN(R=Y%DF=N%T=7B-85%TG=80%W=2000%O=M5B0%CC=N%Q=)
T1(R=Y%DF=N%T=7B-85%TG=80%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=7A69%S=A%A=S+%F=AR%O=WANM109T10S%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A|O%A=O|S%F=AR%O=%RD=0%Q=)
T7(R=N)
U1(R=N)
IE(R=N)

# Model: D-Link DI-604 Hardware version: D1 Firmware: V3.02
Fingerprint D-Link DI-604 wireless broadband router
Class D-Link | embedded || WAP
CPE cpe:/h:dlink:di-604 auto
SEQ(SP=0-5%GCD=64|C8|12C|190|1F4%ISR=4B-55%TI=BI%CI=BI%II=BI%SS=S%TS=U)
OPS(O1=M5B4%O2=M5B4%O3=M5B4%O4=M5B4%O5=M5B4%O6=M5B4)
WIN(W1=16D0%W2=16D0%W3=16D0%W4=16D0%W5=16D0%W6=16D0)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=0%O=%CC=N%Q=U)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# D-Link DI-604 Hardware Version: B2 Firmware Version: 1.80 (Apr 10, 2003)
Fingerprint D-Link DI-604 wireless broadband router
Class D-Link | embedded || WAP
CPE cpe:/h:dlink:di-604 auto
SEQ(SP=0-5%GCD=64|C8|12C|190|1F4%ISR=4B-55%TI=BI%CI=BI%II=BI%SS=S%TS=U)
OPS(O1=M5AC%O2=M5AC%O3=M5AC%O4=M5AC%O5=M5AC%O6=M5AC)
WIN(W1=16B0%W2=16B0%W3=16B0%W4=16B0%W5=16B0%W6=16B0)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=3%O=%CC=N%Q=U)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=3B-45%TG=40%W=80%S=Z%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=3B-45%TG=40%W=100%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T4(R=Y%DF=N%T=3B-45%TG=40%W=400%S=A%A=S%F=AR%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=7A69%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=8000%S=A%A=S%F=AR%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=FFFF%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# D-Link DI-604 provided by Verizon in about 2007 for residential FIOS.
Fingerprint D-Link DI-604 wireless broadband router
Class D-Link | embedded || WAP
CPE cpe:/h:dlink:di-604 auto
SEQ(SP=C-16%GCD=FA7F|1F4FE|2EF7D|3E9FC|4E47B%ISR=97-A1%TI=I%II=I%SS=S%TS=U)
OPS(O1=M5B0%O2=M5B0%O3=M5B0%O4=M5B0%O5=M5B0%O6=M5B0)
WIN(W1=2000%W2=2000%W3=2000%W4=2000%W5=2000%W6=2000)
ECN(R=Y%DF=N%T=7A-84%TG=80%W=2000%O=M5B0%CC=N%Q=)
T1(R=Y%DF=N%T=7A-84%TG=80%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=7A-84%TG=80%W=2000%S=O%A=O%F=A%O=%RD=0%Q=)
T4(R=N)
T5(R=Y%DF=N%T=7A-84%TG=80%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=N)
T7(R=N)
U1(DF=N%T=7A-84%TG=80%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=91CD%RUD=G)
IE(DFI=N%T=7A-84%TG=80%CD=S)

# D-Link Wireless Router / Access Point DI-714P+, firmware Version: V1.33
Fingerprint D-Link DI-714P+ wireless broadband router
Class D-Link | embedded || WAP
SEQ(SP=C-16%GCD=1F4|3E8|5DC|7D0|9C4%ISR=4B-55%TI=I%TS=U)
OPS(O1=M5B4%O2=M5B4%O3=M5B4%O4=M5B4%O5=M5B4%O6=M5B4)
WIN(W1=16D0%W2=16D0%W3=16D0%W4=16D0%W5=16D0%W6=16D0)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=16D0%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(R=N)

# D-Link DI-824VUP Wireless VPN Router Firmware Version: v1.05, Mon, Apr 25 2005
Fingerprint D-Link DI-824VUP Wireless VPN Router
Class D-Link | embedded || WAP
CPE cpe:/h:dlink:di-824vup auto
SEQ(SP=F-11%GCD=32|64|96|C8|FA%ISR=4F-51%TI=I%TS=U)
OPS(O1=M5B4%O2=M5B4%O3=M5B4%O4=M5B4%O5=M5B4%O6=M5B4)
WIN(W1=16D0%W2=16D0%W3=16D0%W4=16D0%W5=16D0%W6=16D0)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=16D0%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(R=N)

# router D-Link Dir-300
Fingerprint D-Link DIR-300 WAP
Class D-Link | embedded || WAP
CPE cpe:/h:dlink:dir-300 auto
SEQ(SP=C9-D3%GCD=1-6%ISR=CA-D4%TI=Z%II=I%TS=8)
OPS(O1=M618ST11NW1%O2=M618ST11NW1%O3=M618NNT11NW1%O4=M618ST11NW1%O5=M618ST11NW1%O6=M618ST11)
WIN(W1=1224%W2=1224%W3=1224%W4=1224%W5=1224%W6=1224)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=1248%O=M618NNSNW1%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=N)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# D-Link DIR-300/NRU, Firmware v.2.05
Fingerprint D-Link DIR-300 WAP
Class D-Link | embedded || WAP
CPE cpe:/h:dlink:dir-300 auto
SEQ(SP=EC-10A%GCD=1-6%ISR=105-111%CI=Z%II=I%TS=21|22)
OPS(O1=M5B4NW3ST11%O2=M578NW3ST11%O3=M280NW3NNT11%O4=M5B4NW3ST11%O5=M218NW3ST11%O6=M109ST11)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=FFFF%O=M5B4NW3SLL%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=16A0%S=O%A=S+%F=AS%O=M5B4ST11NW1%RD=0%Q=)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

Fingerprint D-Link DIR-612 WAP
Class D-Link | embedded || WAP
CPE cpe:/h:dlink:dir-612 auto
SEQ(SP=88-92%GCD=1-6%ISR=97-A1%TI=I%CI=I%II=RI%TS=1)
OPS(O1=M5B4NW0NNT11%O2=M5B4NW0NNT11%O3=M5B4NW0NNT11%O4=M5B4NW0NNT11%O5=M5B4NW0NNT11%O6=M5B4NNT11)
WIN(W1=2000%W2=2000%W3=2000%W4=2000%W5=2000%W6=2000)
ECN(R=Y%DF=N%T=19-23%TG=20%W=2000%O=M5B4NW0%CC=N%Q=)
T1(R=Y%DF=N%T=19-23%TG=20%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=19-23%TG=20%W=2000%S=O%A=S+%F=AS%O=M5B4NW0NNT11NNLLLLLLLLLL%RD=0%Q=)
T4(R=Y%DF=N%T=19-23%TG=20%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=19-23%TG=20%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=19-23%TG=20%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=19-23%TG=20%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=19-23%TG=20%IPL=38%UN=4FBA%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=19-23%TG=20%CD=S)

# D-Link DIR-615
Fingerprint D-Link DIR-615 WAP
Class D-Link | embedded || WAP
CPE cpe:/h:dlink:dir-615 auto
SEQ(SP=98-A2%GCD=1-6%ISR=9C-A6%TI=I%CI=I%II=RI%TS=1)
OPS(O1=M5B4NW0NNT11%O2=M5B4NW0NNT11%O3=M5B4NW0NNT11%O4=M5B4NW0NNT11%O5=M5B4NW0NNT11%O6=M5B4NNT11)
WIN(W1=2000%W2=2000%W3=2000%W4=2000%W5=2000%W6=2000)
ECN(R=Y%DF=N%T=19-23%TG=20%W=2000%O=M5B4NW0%CC=N%Q=)
T1(R=Y%DF=N%T=19-23%TG=20%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=19-23%TG=20%W=2000%S=O%A=S+%F=AS%O=M5B4NW0NNT11NNLLLLLLLLLL%RD=0%Q=)
T4(R=Y%DF=N%T=19-23%TG=20%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=19-23%TG=20%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=19-23%TG=20%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=19-23%TG=20%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=19-23%TG=20%IPL=38%UN=944D%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=19-23%TG=20%CD=S)

# Seano/EnGenius ESR-9752 wireless router with stock v1.1.3 firmware
# ENCORE 3G Wireless Router Hardware version: 1.1.0 Kernel version: 1.0.5
# Senao ESR-9752 300Mbps 802.11n Wireless SOHO Router
# D-Link DIR-615
Fingerprint D-Link DIR-615, Encore 3G, or EnGenius ESR-9752 WAP
Class D-Link | embedded || WAP
CPE cpe:/h:dlink:dir-615
Class Encore | embedded || WAP
CPE cpe:/h:encore:3g
Class EnGenius | embedded || WAP
CPE cpe:/h:engenius:esr-9752
SEQ(SP=C1-CB%GCD=1-6%ISR=C3-D5%TI=Z%CI=Z%II=I%TS=U)
OPS(O1=M5B4%O2=M5B4%O3=M5B4%O4=M5B4%O5=M5B4%O6=M5B4)
WIN(W1=5B4%W2=5B4%W3=5B4%W4=5B4%W5=5B4%W6=5B4)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=5B4%O=M5B4%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# D-Link DIR-655 Wireless AP/NAT/router, Firmware Version: 1.32NA,, 2009/07/09, Hardware Version: A4
Fingerprint D-Link DIR-655
Class D-Link | embedded || WAP
SEQ(CI=I%II=I)
OPS(O1=%O2=%O3=%O4=%O5=%O6=)
WIN(W1=0%W2=0%W3=0%W4=0%W5=0%W6=0)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=0%O=%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=Z%A=S+%F=AR%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=Z)

# Dlink DIR-835 Firmware Version: 1.01
Fingerprint D-Link DIR-835 WAP
Class D-Link | embedded || WAP
CPE cpe:/h:dlink:dir-835 auto
SEQ(SP=CD-D7%GCD=1-6%ISR=D0-DA%TI=Z%CI=Z%II=I%TS=U)
OPS(O1=M5B4NNSNW2%O2=M5B4NNSNW2%O3=M5B4NW2%O4=M5B4NNSNW2%O5=M5B4NNSNW2%O6=M5B4NNS)
WIN(W1=16D0%W2=16D0%W3=16D0%W4=16D0%W5=16D0%W6=16D0)
ECN(R=N)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# D-Link DSR-1000N Firmware Version: 1.03B43_WW
Fingerprint D-Link DSR-1000N WAP
Class D-Link | embedded || WAP
CPE cpe:/h:dlink:dsr-1000n auto
SEQ(SP=C4-CE%GCD=1-6%ISR=C0-CA%TI=Z%CI=Z%II=I%TS=8)
OPS(O1=M5B4ST11NW4%O2=M5B4ST11NW4%O3=M5B4NNT11NW4%O4=M5B4ST11NW4%O5=M5B4ST11NW4%O6=M5B4ST11)
WIN(W1=16A0%W2=16A0%W3=16A0%W4=16A0%W5=16A0%W6=16A0)
ECN(R=Y%DF=Y%T=3C-46%TG=40%W=16D0%O=M5B4NNSNW4%CC=N)
T1(R=Y%DF=Y%T=3C-46%TG=40%S=O%A=S+%F=AS%RD=0)
T2(R=N)
T3(R=Y%DF=Y%T=3C-46%TG=40%W=16A0%S=O%A=S+%F=AS%O=M5B4ST11NW4%RD=0)
T4(R=Y%DF=Y%T=3C-46%TG=40%W=0%S=A%A=Z%F=R%RD=0)
T5(R=Y%DF=Y%T=3C-46%TG=40%W=0%S=Z%A=S+%F=AR%RD=0)
T6(R=Y%DF=Y%T=3C-46%TG=40%W=0%S=A%A=Z%F=R%RD=0)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# D-Link DWL-2100AP
Fingerprint D-Link DWL-2100AP wireless access point
Class D-Link | embedded || WAP
SEQ(SP=14-1E%GCD=FA00|1F400|2EE00|3E800|4E200%ISR=99-A3%TI=I%TS=1)
OPS(O1=M5B4NW0NNT11%O2=M5B4NW0NNT11%O3=M5B4NW0NNT11%O4=M5B4NW0NNT11%O5=M5B4NW0NNT11%O6=M5B4NNT11)
WIN(W1=2000%W2=2000%W3=2000%W4=2000%W5=2000%W6=2000)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=2000%O=M5B4NW0%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=7B-85%TG=80%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=7B-85%TG=80%W=0%S=Z%A=O%F=AR%O=%RD=0%Q=)
T4(R=Y%DF=N%T=7B-85%TG=80%W=0%S=A|O%A=O|S%F=AR%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=7B-85%TG=80%W=0%S=A|O%A=O|S%F=AR%O=%RD=0%Q=)
T7(R=Y%DF=N%T=7B-85%TG=80%W=0%S=Z%A=O|S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=I%RUCK=0%RUD=G)
IE(R=N)

# D-Link DWL-624+ WAN Router (Connected thru Wi-FI, default network configurations, no cryptography.)
# d-link vdi-624 Airplus XtremeG 2.4GHz Wireless Router, firmware 2.43DDM 1/12/2005 (Wireless broadband router produced by D-Link for Verizon FIOS customers.  D-Link calls it a 'di-624' but this version (for Verizon FIOS customers) is called a 'vdi-624'.)
# d-link dwl 900ap access point
Fingerprint D-Link DWL-900AP WAP
Class D-Link | embedded || WAP
CPE cpe:/h:dlink:dwl-900ap auto
SEQ(SP=C9-D3%GCD=1-6%ISR=CD-D7%TI=Z%CI=Z%II=I%TS=7)
OPS(O1=M500ST11NW0%O2=M500ST11NW0%O3=M500NNT11NW0%O4=M500ST11NW0%O5=M500ST11NW0%O6=M500ST11)
WIN(W1=16A0%W2=16A0%W3=16A0%W4=16A0%W5=16A0%W6=16A0)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=16D0%O=M500NNSNW0%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%T=3B-45%TG=40%W=16A0%S=O%A=S+%F=AS%O=M500ST11NW0%RD=0%Q=)
T4(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# DWL-900AP+ Wireless Access Point
# USRobotics USR5450 802.11g Wireless Turbo Multi-Function Access Point. Running firmware version 1.53b10.
# PLANET WAP-1966
Fingerprint D-Link DWL-900AP+, Planet WAP-1966, or USRobotics USR5450 WAP
Class D-Link | embedded || WAP
CPE cpe:/h:dlink:dwl-9000ap%2b
Class Planet | embedded || WAP
CPE cpe:/h:planet:wap-1966
Class USRobotics | embedded || WAP
CPE cpe:/h:usrobotics:usr5450 auto
SEQ(SP=B-15%GCD=FA7F|1F4FE|2EF7D|3E9FC|4E47B%ISR=96-A0%TI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4%O2=M5B4%O3=M5B4%O4=M5B4%O5=M5B4%O6=M5B4)
WIN(W1=2000%W2=2000%W3=2000%W4=2000%W5=2000%W6=2000)
ECN(R=Y%DF=N%T=7A-84%TG=80%W=2000%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=7A-84%TG=80%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=7A-84%TG=80%W=2000%S=O%A=O%F=A%O=%RD=0%Q=)
T4(R=Y%DF=N%T=7A-84%TG=80%W=2000%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=7A-84%TG=80%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=7A-84%TG=80%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=7A-84%TG=80%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=7A-84%TG=80%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=7A-84%TG=80%CD=S)

# DWL-G710
Fingerprint D-Link DWL-G710 WAP
Class D-Link | embedded || WAP
CPE cpe:/h:dlink:dwl-g710 auto
SEQ(CI=1%II=1)
OPS(O1=M5A8NW0NNT11%O2=M5A8NW0NNT11%O3=M5A8NW0NNT11%O4=M5A8NW0NNT11%O5=M5A8NW0NNT11%O6=M5A8NNT11)
WIN(W1=43E0%W2=4110%W3=423C%W4=43E0%W5=4180%W6=403D)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=4470%O=M5B4NW0%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=3B-45%TG=40%W=403D%S=O%A=S+%F=AS%O=M5A8NW0NNT11%RD=0%Q=)
T4(R=Y%DF=N%T=3B-45%TG=40%W=4000%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=3401%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# D-Link DWL-G810 Wlan/Ethernet Bridge
Fingerprint D-Link DWL-G810 WAP
Class D-Link | embedded || WAP
CPE cpe:/h:dlink:dwl-g810 auto
SEQ(SP=C-16%GCD=FA7F|1F4FE|2EF7D|3E9FC|4E47B%ISR=97-A1%TI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4%O2=M5B4%O3=M5B4%O4=M5B4%O5=M5B4%O6=M5B4)
WIN(W1=2000%W2=2000%W3=2000%W4=2000%W5=2000%W6=2000)
ECN(R=Y%DF=N%T=7A-84%TG=80%W=2000%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=7A-84%TG=80%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=7A-84%TG=80%W=2000%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=7A-84%TG=80%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=7A-84%TG=80%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=7A-84%TG=80%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=7A-84%TG=80%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=7A-84%TG=80%CD=S)

# D-Link DCS-2103
Fingerprint D-Link DCS-2103 webcam
Class D-Link | embedded || webcam
CPE cpe:/h:dlink:dcs-2103 auto
SEQ(SP=B1-D1%GCD=1-6%ISR=B8-D4%TI=Z%II=I%TS=7)
OPS(O1=M400CST11NW7%O2=M400CST11NW7%O3=M400CNNT11NW7%O4=M400CST11NW7%O5=M400CST11NW7%O6=M400CST11)
WIN(W1=8000%W2=8000%W3=8000%W4=8000%W5=8000%W6=8000)
ECN(R=Y%DF=Y%T=3B-45%TG=40%W=8018%O=M400CNNSNW7%CC=Y%Q=)
T1(R=Y%DF=Y%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=Y%DF=Y%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=N)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=6C53%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# DCS-5300G  >  High Speed 2.4GHz (802.11g) Wireless Internet Camera
# D-Link DCS-3220
Fingerprint D-Link DCS-3220 or DCS-5300G webcam
Class D-Link | embedded || webcam
SEQ(SP=0-21%GCD=A|14|1E|28|32%ISR=4B-55%TI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4%O2=M5B4%O3=M5B4%O4=M5B4%O5=M5B4%O6=M5B4)
WIN(W1=16D0%W2=16D0%W3=16D0%W4=16D0%W5=16D0%W6=16D0)
ECN(R=N)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=Y%DF=N%T=3B-45%TG=40%W=7A69%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=8000%S=A%A=S%F=AR%O=%RD=0%Q=)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# D-LINK DCS-3220 2-way Audio Internet Camera
Fingerprint D-Link DCS-3220 webcam
Class D-Link | embedded || webcam
CPE cpe:/h:dlink:dcs-3220 auto
SEQ(SP=0-16%GCD=A|14|1E|28|32%ISR=4B-55%TI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4%O2=M5B4%O3=M5B4%O4=M5B4%O5=M5B4%O6=M5B4)
WIN(W1=16D0%W2=16D0%W3=16D0%W4=16D0%W5=16D0%W6=16D0)
ECN(R=N)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=3B-45%TG=40%W=100%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T4(R=N)
T5(R=Y%DF=N%T=3B-45%TG=40%W=7A69%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=8000%S=A%A=S%F=AR%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=FFFF%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=3B-45%TG=40%CD=S)

# Daikin Online Wifi Controller
Fingerprint Daikin DKN Cloud Wi-Fi Adaptor
Class Daikin | embedded || specialized
SEQ(SP=0-5%GCD=111BAD|22375A|335307|446EB4|558A61%ISR=C3-CD%TI=I%CI=I%II=RI%SS=S%TS=U)
OPS(O1=M578%O2=M578%O3=M578%O4=M578%O5=M578%O6=M578)
WIN(W1=36B0%W2=36B0%W3=36B0%W4=36B0%W5=36B0%W6=36B0)
ECN(R=Y%DF=N%T=FA-104%TG=FF%W=36B0%O=M578%CC=N%Q=)
T1(R=Y%DF=N%T=FA-104%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=FA-104%TG=FF%W=36B0%S=O%A=S+%F=AS%O=M578%RD=0%Q=)
T4(R=Y%DF=N%T=FA-104%TG=FF%W=36B0%S=A%A=S%F=AR%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=36B0%S=A%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=36B0%S=A%A=S%F=AR%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FA-104%TG=FF%W=36B0%S=A%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# dgux agaviion R4.11MU06 generic AViiON mc88110, Data General 8540 running the following operating system "DG/UX Release R4.11MU06"
Fingerprint Data General DG/UX 4.11MU06
Class Data General | DG/UX | 4.X | general purpose
CPE cpe:/o:data_general:dg%2fux:4.11mu06
SEQ(SP=C-42%GCD=10000|20000|30000|40000|50000%ISR=98-AC%TI=I|RD%CI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4%O2=M5B4%O3=M5B4%O4=M5B4%O5=M5B4%O6=M5B4)
WIN(W1=2238%W2=20D0%W3=2080%W4=2238%W5=2180%W6=2229)
ECN(R=Y%DF=N%T=FA-104%TG=FF%W=2238%O=M5B4%CC=N)
T1(R=Y%DF=N%T=FA-104%TG=FF%S=O%A=S+%F=AS%RD=0)
T2(R=N)
T3(R=Y%DF=N%T=FA-104%TG=FF%W=2225%S=O%A=O%F=A%RD=0)
T4(R=Y%DF=N%T=FA-104%TG=FF%W=2238%S=A%A=Z%F=R%RD=0)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=Z%A=S+%F=AR%RD=0)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=A%A=Z%F=R%RD=0)
T7(R=Y%DF=N%T=FA-104%TG=FF%W=0%S=Z%A=S%F=AR%RD=0)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=Z%RUCK=0%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# Daysequerra M4.2SI radio (Microchip Technology chip)
Fingerprint Daysequerra M4.2SI radio
Class Daysequerra | embedded || media device
CPE cpe:/h:daysequerra:m4.2si
SEQ(SP=11-1B%GCD=1-6%ISR=78-82%TI=I%CI=I%II=RI%SS=O%TS=U)
OPS(O1=M5DC%O2=M5DC%O3=M5DC%O4=M5DC%O5=M5DC%O6=M5DC)
WIN(W1=5DC%W2=5DC%W3=5DC%W4=5DC%W5=5DC%W6=5DC)
ECN(R=Y%DF=N%T=FA-104%TG=FF%W=5DC%O=M5DC%CC=N%Q=)
T1(R=Y%DF=N%T=FA-104%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=FA-104%TG=FF%W=5DC%S=O%A=S+%F=AS%O=M5DC%RD=0%Q=)
T4(R=Y%DF=N%T=FA-104%TG=FF%W=5DC%S=A+%A=S%F=AR%O=%RD=0%Q=)
T5(R=Y%DF=N%T=FA-104%TG=FF%W=5DC%S=A%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=FA-104%TG=FF%W=5DC%S=A%A=S%F=AR%O=%RD=0%Q=)
T7(R=Y%DF=N%T=FA-104%TG=FF%W=5DC%S=A%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# DECserver716, Network Access SW V3.6 BL01 , HW=V1.2 , RO=V7.3-0, LAT V5.1, LOAD IMAGE: WWENG2
Fingerprint DECserver716 (DNAS 3.6)
Class DEC | DECserver | 3.X | general purpose
CPE cpe:/h:dec:decserver716
CPE cpe:/o:dec:dnas:3.6
SEQ(SP=10-1A%GCD=FA00|1F400|2EE00|3E800|4E200%ISR=97-A1%TI=I%CI=I%II=I%SS=S%TS=U)
OPS(O1=M200%O2=M200%O3=M200%O4=M200%O5=M200%O6=M200)
WIN(W1=600%W2=600%W3=600%W4=600%W5=600%W6=600)
ECN(R=Y%DF=N%T=19-23%TG=20%W=600%O=M200%CC=N%Q=)
T1(R=Y%DF=N%T=19-23%TG=20%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=19-23%TG=20%W=600%S=O%A=O%F=A%O=%RD=0%Q=)
T4(R=Y%DF=N%T=19-23%TG=20%W=600%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=19-23%TG=20%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=19-23%TG=20%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=19-23%TG=20%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=Z%RUCK=0%RUD=G)
IE(DFI=S%T=FA-104%TG=FF%CD=S)

# OSF1 v4.0 1229 on DEC ALPHA
Fingerprint DEC Digital UNIX OSF1 v4.0 1229
Class DEC | Digital UNIX | 4.X | general purpose
CPE cpe:/o:dec:digital_unix:4 auto
SEQ(SP=E4-EE%GCD=1-6%ISR=FE-108%TI=I%II=I%SS=S%TS=0)
OPS(O1=M5B4NW0NNT00NNS%O2=M5B4NW0NNT00NNS%O3=M5B4NW0NNT00%O4=M5B4NW0NNT00NNS%O5=M5B4NW0NNT00NNS%O6=M5B4NNT00NNS)
WIN(W1=4470%W2=41A0%W3=4100%W4=40E8%W5=40E8%W6=402E)
ECN(R=Y%DF=N%T=7C-86%TG=80%W=4470%O=M5B4NW0NNS%CC=N%Q=|U)
T1(R=Y%DF=N%T=7C-86%TG=80%S=O%A=S+%F=AS%RD=0%Q=|U)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=Y%DF=N%T=3B-3D%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-3D%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=25A3%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# DEC Digital UNIX 4.X
# DEC Digital UNIX 4.X (AlphaServer 1000A 5/400 Digital UNIX V4.0F (Rev. 1229))
Fingerprint DEC Digital UNIX v4.0F
Class DEC | Digital UNIX | 4.X | general purpose
CPE cpe:/o:dec:digital_unix:4 auto
SEQ(SP=91-9B%GCD=1-6%ISR=98-A2%TI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4NW0%O2=M5B4NW0%O3=M5B4NW0%O4=M5B4NW0%O5=M5B4NW0%O6=M5B4)
WIN(W1=832C%W2=8340%W3=8200%W4=8000%W5=81D0%W6=805C)
ECN(R=Y%DF=Y%T=3B-3D%TG=40%W=832C%O=M5B4NW0%CC=N%Q=)
T1(R=Y%DF=Y%T=3B-3D%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%T=3B-3D%TG=40%W=805C%S=O%A=O%F=A%O=%RD=0%Q=)
T4(R=Y%DF=N%T=3B-3D%TG=40%W=8000%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-3D%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-3D%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-3D%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# DEC Digital UNIX 5.X
Fingerprint DEC Digital UNIX 5.X
Class DEC | Digital UNIX | 5.X | general purpose
CPE cpe:/o:dec:digital_unix:5.x auto
SEQ(SP=DB-E9%GCD=10|20|30|40|50%ISR=103-10D%II=I%TS=U)
OPS(O1=M5B4NW0%O2=M5B4NW0%O3=M5B4NW0%O4=M5B4NW0%O5=M5B4NW0%O6=M5B4)
WIN(W1=F000%W2=F000%W3=F000%W4=F000%W5=F000%W6=F000)
ECN(R=N)
T1(R=Y%DF=N%T=3B-3D%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=3D-47%TG=40%W=400%S=A%A=S%F=AR%O=%RD=0%Q=)
T5(R=Y%DF=N|Y%T=3B-3D%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3D-47%TG=40%W=8000%S=A%A=S%F=AR%O=%RD=0%Q=)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# OSF1 V5.0 910 alpha, DEC 3000/600 workstation/server with 175MHz alpha CPU, 96MB RAM
# OpenVMS 7.2 for Alpha processors
Fingerprint DEC Digital UNIX OSF1 v5.0 910 or OpenVMS 7.2
Class DEC | Digital UNIX | 5.X | general purpose
CPE cpe:/o:dec:digital_unix:5 auto
Class DEC | OpenVMS | 7.X | general purpose
CPE cpe:/o:dec:openvms:7.2 auto
SEQ(SP=91-9B%GCD=1-6%ISR=99-A3%TI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4NW0%O2=M5B4NW0%O3=M5B4NW0%O4=M5B4NW0%O5=M5B4NW0%O6=M5B4)
WIN(W1=832C%W2=8340%W3=8200%W4=8000%W5=81D0%W6=805C)
ECN(R=Y%DF=N%T=3B-3D%TG=40%W=832C%O=M5B4NW0%CC=N%Q=)
T1(R=Y%DF=N%T=3B-3D%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=3B-3D%TG=40%W=805C%S=O%A=O%F=A%O=%RD=0%Q=)
T4(R=Y%DF=N%T=3B-3D%TG=40%W=8000%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-3D%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-3D%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-3D%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# VAX/VMS V5.5-2
Fingerprint DEC OpenVMS 5.5-2
Class DEC | OpenVMS | 5.X | general purpose
CPE cpe:/o:dec:openvms:5.5 auto
SEQ(SP=C-16%GCD=FA00|1F400|2EE00|3E800|4E200%ISR=97-A1%TI=I%CI=I%II=I%SS=S%TS=U)
OPS(O1=M5B0%O2=M5B0%O3=M5B0%O4=M5B0%O5=M5B0%O6=M5B0)
WIN(W1=BB8%W2=BB8%W3=BB8%W4=BB8%W5=BB8%W6=BB8)
ECN(R=Y%DF=N%T=19-23%TG=20%W=BB8%O=M5B0%CC=N%Q=)
T1(R=Y%DF=N%T=19-23%TG=20%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=19-23%TG=20%W=BB8%S=O%A=O%F=A%O=%RD=0%Q=)
T4(R=N)
T5(R=Y%DF=N%T=19-23%TG=20%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=19-23%TG=20%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=19-23%TG=20%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=4210%RIPCK=Z%RUCK=G%RUD=G)
IE(DFI=N%T=FA-104%TG=FF%CD=S)

# DEC OpenVMS V7.1-2
# DEC OpenVMS V7.1
Fingerprint DEC OpenVMS 7.1
Class DEC | OpenVMS | 7.X | general purpose
CPE cpe:/o:dec:openvms:7.1 auto
SEQ(SP=E-18%GCD=FA00|1F400|2EE00|3E800|4E200%ISR=98-A2%TI=I%II=I%SS=S%TS=U)
OPS(O1=%O2=%O3=%O4=%O5=%O6=)
WIN(W1=1000%W2=1000%W3=1000%W4=1000%W5=1000%W6=1000)
ECN(R=Y%DF=N%T=7B-85%TG=80%W=1000%O=%CC=N%Q=)
T1(R=Y%DF=N%T=7B-85%TG=80%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=7B-85%TG=80%W=1000%S=O%A=O%F=A%O=%RD=0%Q=)
T4(R=Y%DF=N%T=7B-85%TG=80%W=1000%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=7B-85%TG=80%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=7B-85%TG=80%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=7B-85%TG=80%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=4210%RIPCK=Z%RUCK=G%RUD=G)
IE(DFI=N%T=FA-104%TG=FF%CD=S)

# OpenVMS (TM) VAX Operating System, Version V7.1
Fingerprint DEC OpenVMS 7.1
Class DEC | OpenVMS | 7.X | general purpose
CPE cpe:/o:dec:openvms:7.1 auto
SEQ(SP=C-36%GCD=FA00|1F400|2EE00|3E800|4E200%ISR=97-AD%TI=I%II=I%SS=S%TS=U)
OPS(O1=M5B0W0N%O2=M5B0W0N%O3=M5B0W0N%O4=M5B0W0N%O5=M5B0W0N%O6=M5B0)
WIN(W1=1000%W2=1000%W3=1000%W4=1000%W5=1000%W6=1000)
ECN(R=Y%DF=N%T=7B-85%TG=80%W=1000%O=M5B0W0N%CC=N)
T1(R=Y%DF=N%T=7B-85%TG=80%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=7B-85%TG=80%W=1000%S=O%A=O%F=A%RD=0)
T4(R=Y%DF=N%T=7B-85%TG=80%W=1000%S=A%A=Z%F=R%RD=0)
T5(R=Y%DF=N%T=7B-85%TG=80%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=7B-85%TG=80%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=7B-85%TG=80%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=1042%RIPCK=Z%RUCK=G%RUD=G)
IE(DFI=N%T=FA-104%TG=FF%CD=S)

# OpenVMS (TM) Alpha Operating System, Version V7.1-1H2
Fingerprint DEC OpenVMS 7.1
Class DEC | OpenVMS | 7.X | general purpose
CPE cpe:/o:dec:openvms:7.1 auto
SEQ(SP=C-16%GCD=FA00|1F400|2EE00|3E800|4E200%ISR=97-A1%TI=I%II=I%SS=S%TS=U)
OPS(O1=M5B0W0N%O2=M5B0W0N%O3=M5B0W0N%O4=M5B0W0N%O5=M5B0W0N%O6=M5B0)
WIN(W1=1000%W2=1000%W3=1000%W4=1000%W5=1000%W6=1000)
ECN(R=Y%DF=N%T=7B-85%TG=80%W=1000%O=M5B0W0N%CC=N)
T1(R=Y%DF=N%T=7B-85%TG=80%S=O%A=O|S+%F=AS%RD=0)
T2(R=N)
T3(R=N)
T4(R=Y%DF=N%T=7B-85%TG=80%W=1000%S=A%A=Z%F=R%RD=0)
T5(R=Y%DF=N%T=7B-85%TG=80%W=0%S=Z%A=S+%F=AR%RD=0)
T6(R=Y%DF=N%T=7B-85%TG=80%W=0%S=A%A=Z%F=R%RD=0)
T7(R=N)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=1042%RIPCK=Z%RUCK=G%RUD=G)
IE(DFI=N%T=FA-104%TG=FF%CD=S)

# OpenVMS/VAX V7.3-1 on a DEC VAXstation 4000 Model 60
Fingerprint DEC OpenVMS 7.3-1
Class DEC | OpenVMS | 7.X | general purpose
CPE cpe:/o:dec:openvms:7.3 auto
SEQ(SP=33-87%GCD=20|40|60|80|A0%ISR=95-9F%TI=I%CI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4NW0%O2=M5B4NW0%O3=M5B4NW0%O4=M5B4NW0%O5=M5B4NW0%O6=M5B4)
WIN(W1=111C%W2=1068%W3=C80%W4=BB8%W5=C90%W6=C6C)
ECN(R=Y%DF=N%T=37-41%TG=40%W=111C%O=M5B4NW0%CC=N%Q=)
T1(R=Y%DF=N%T=37-41%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=N%T=37-41%TG=40%W=C6C%S=O%A=O%F=A%O=%RD=0%Q=)
T4(R=N)
T5(R=Y%DF=Y%T=37-41%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=37-41%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=Y%T=37-41%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# OSF1 V4.0 1229 alpha
Fingerprint DEC OSF/1 V4.0
Class DEC | OSF/1 | 4.X | general purpose
CPE cpe:/o:dec:osf_1:4 auto
SEQ(SP=8E-9E%GCD=1-6%ISR=99-A3%TI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4NW0%O2=M5B4NW0%O3=M5B4NW0%O4=M5B4NW0%O5=M5B4NW0%O6=M5B4)
WIN(W1=832C%W2=8340%W3=8200%W4=8000%W5=81D0%W6=805C)
ECN(R=Y%DF=Y%T=37-41%TG=40%W=832C%O=M5B4NW0%CC=N%Q=)
T1(R=Y%DF=Y%T=37-41%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=Y%DF=N%T=37-41%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=N)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=0%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# OSF1 V5.1 2650 alpha
Fingerprint DEC OSF/1 V5.1
Class DEC | OSF/1 | 5.X | general purpose
CPE cpe:/o:dec:osf_1:5 auto
SEQ(SP=DA-E4%GCD=10|20|30|40|50%ISR=106-110%TI=I%II=I%SS=S%TS=U)
OPS(O1=M5B4NW0%O2=M5B4NW0%O3=M5B4NW0%O4=M5B4NW0%O5=M5B4NW0%O6=M5B4)
WIN(W1=F000%W2=F000%W3=F000%W4=F000%W5=F000%W6=F000)
ECN(R=Y%DF=N%T=7B-85%TG=80%W=F000%O=M5B4NW0%CC=N%Q=)
T1(R=Y%DF=N%T=7B-85%TG=80%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=Y%DF=N%T=7B-85%TG=80%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=N)
T7(R=N)
U1(DF=N%T=3B-45%TG=40%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=S%T=3B-45%TG=40%CD=S)

# BQTCP network stack by Johnny Billquist.
Fingerprint DEC RSX-11M-PLUS 4
Class DEC | RSX-11M-PLUS | 4.X | general purpose
CPE cpe:/o:dec:rsx_11m_plus:4 auto
SEQ(SP=FA-104%GCD=1-6%ISR=F6-100%TI=BI%CI=BI%II=BI%SS=S%TS=U)
OPS(O1=M5B4%O2=M578%O3=M280%O4=M128%O5=M218%O6=M128)
WIN(W1=16D0%W2=15E0%W3=A00%W4=4A0%W5=860%W6=4A0)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=16D0%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=3B-45%TG=40%W=4A0%S=O%A=S+%F=AS%O=M128%RD=0%Q=)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=FA-104%TG=FF%CD=Z)

# ESX-11M-PLUS V4.6
Fingerprint DEC RSX-11M-PLUS 4.6
Class DEC | RSX-11M-PLUS | 4.X | general purpose
CPE cpe:/o:dec:rsx_11m_plus:4.6 auto
SEQ(SP=EA-102%GCD=1-6%ISR=F3-FD%TI=BI%CI=BI%II=BI%SS=S%TS=U)
OPS(O1=M5B4%O2=M5B4%O3=M5B4%O4=M5B4%O5=M5B4%O6=M5B4)
WIN(W1=16D0%W2=16D0%W3=16D0%W4=16D0%W5=16D0%W6=16D0)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=16D0%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=3B-45%TG=40%W=16D0%S=O%A=S+%F=AS%O=M5B4%RD=0%Q=)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=FA-104%TG=FF%CD=Z)

# RSX-11M-PLUS V4.6 (BQTCP/IP V2.4)
Fingerprint RSX-11M-PLUS V4.6
Class DEC | RSX-11M-PLUS | 4.X | general purpose
CPE cpe:/o:dec:rsx_11m_plus:4 auto
SEQ(SP=F5-109%GCD=1-6%ISR=F5-101%TI=BI|RD%CI=BI%II=BI%SS=S%TS=U)
OPS(O1=M5B4%O2=M5B4%O3=M5B4%O4=M5B4%O5=M5B4%O6=M5B4)
WIN(W1=2238%W2=2238%W3=2238%W4=2238%W5=2238%W6=2238)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=2238%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=3B-45%TG=40%W=2238%S=O%A=S+%F=AS%O=M5B4%RD=0%Q=)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=FA-104%TG=FF%CD=Z)

# RSX-11M-PLUS V5.0
Fingerprint RSX-11M-PLUS 5.0
Class DEC | RSX-11M-PLUS | 5.X | general purpose
CPE cpe:/o:dec:rsx_11m_plus:5.0 auto
SEQ(SP=E8-F2%GCD=1-6%ISR=ED-F7%TI=BI%CI=BI%II=BI%SS=S%TS=U)
OPS(O1=M5B4%O2=M5B4%O3=M5B4%O4=M5B4%O5=M5B4%O6=M5B4)
WIN(W1=2238%W2=2238%W3=2238%W4=2238%W5=2238%W6=2238)
ECN(R=Y%DF=N%T=3B-45%TG=40%W=2238%O=M5B4%CC=N%Q=)
T1(R=Y%DF=N%T=3B-45%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=3B-45%TG=40%W=2238%S=O%A=S+%F=AS%O=M5B4%RD=0%Q=)
T4(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
T5(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=3B-45%TG=40%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
T7(R=Y%DF=N%T=3B-45%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(DF=N%T=FA-104%TG=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(DFI=N%T=FA-104%TG=FF%CD=Z)

# OS name is "RSX-11M-PLUS"
Fingerprint DEC RSX-11M-PLUS
Class DEC | RSX-11M-PLUS || general purpose
CPE cpe:/o:dec:rsx-11m-plus
SEQ(SP=0-1D%GCD=10001|20002|30003|40004|50005%ISR=A8-B2%TI=BI%CI=BI%II=BI%SS=S%TS=U)
OPS(O1=M5B4%O2=M578%O3=M280%O4=M5B4%O5=M218%O6=M109)
WIN(W