Solved

I want to know fingerprint attribute

  • 15 September 2020
  • 4 replies
  • 50 views

I  know what types of types you can define in <tests>.
matchtype="exact", dhcptype="any" etc.

It would be nice to have a documented file.

I couldn't find it.


==============================================================================
Example
==============================================================================
<fingerprint os="Kyocera KM-6030 Network Scanner" os_class="Scanner" os_url="http://www.kyoceramita.com" comments="NS-30 Ver 1.3.00 KM 6030 Ver 2.64.D" author="xnih@cableone.net" lastmodified="2009-02-09">
<tests>
<test weight="5" matchtype="exact" dhcptype="Any" dhcpoption55="1,3,12,23,6,15,44,47"/>
</tests>
</fingerprint>

icon

Best answer by Rodney Lacroix 15 September 2020, 13:27

This link has a pretty good description of what all the fields are:

http://dhcpfingerprinting.blogspot.com/2009/04/how-satori-uses-dhcpxml-file.html

View original

4 replies

Userlevel 3

This link has a pretty good description of what all the fields are:

http://dhcpfingerprinting.blogspot.com/2009/04/how-satori-uses-dhcpxml-file.html

s it one that applies to extreme?

Is it possible to use dhcp option 60?

This link has a pretty good description of what all the fields are:

http://dhcpfingerprinting.blogspot.com/2009/04/how-satori-uses-dhcpxml-file.html

s it one that applies to extreme?

Is it possible to use dhcp option 60?

Userlevel 3

The Parameters list is only for option 55 parameters.

The dhcpoptions field is what can (or must) be included in the request, but the parameters is what can (or must) be included depending on your match type. So, now, you cannot include option 60 parameters as part of that. We only extract options of type 55.

In fact, in the 8.5 release, you can add your own fingerprint as part of the UI. However, if you specify the options to be included, it disables the parameters list. So, you CAN specify that the request must contain options 43, 55, 60 to match this fingerprint, but cannot further delineate the parameters inside those options. It’s an OR argument (request must have these options OR must have these option 55 parameters).

If you leave the Options field blank, the parameters list is only for option 55.

See screen shot.

Hope it helps!

 

Reply