Fixes #503 by correcting the ZebraNet vendor to Zebra, and making some minor updates to the param of the two fingerprints. The "Zebra ZebraNet Print Server FTP" fingerprint was modified to build os.product using the hw.product value rather than simply duplicating the value to reflect existing CPE patterns. However, the the ZBR-##### values extracted from the banner appear to be more of a product number rather than the product model / name so it is unlikely this will correctly match CPE strings.
Note the Product Number that is listed for that print server. In the example below, the Product Number is 46688. Your print server may report the number 46686 or 46687.
Investigated a particular device with an FTP banner that included "ZBR-79071 Version V61.17.17Z" and I found the web interface referred to "GK420d", a printer with an internal wired print server.
Description
Fixes #503 by correcting the
ZebraNetvendor toZebra, and making some minor updates to the param of the two fingerprints. The "Zebra ZebraNet Print Server FTP" fingerprint was modified to buildos.productusing thehw.productvalue rather than simply duplicating the value to reflect existing CPE patterns. However, the theZBR-#####values extracted from the banner appear to be more of a product number rather than the product model / name so it is unlikely this will correctly match CPE strings.Notes
From ZebraNet II Print Server Firmware – V7.06 (0264A):
Investigated a particular device with an FTP banner that included "ZBR-79071 Version V61.17.17Z" and I found the web interface referred to "GK420d", a printer with an internal wired print server.
Motivation and Context
More accurate fingerprint data.
How Has This Been Tested?
bundle exec ./bin/recog_verify xml/ftp_banners.xml xml/snmp_sysdescr.xmlrake testsTypes of changes
Checklist: