Merge pull request #622 from rapid7/birnam/vc-2140-snmp-fingerprinting

Birnam/vc 2140 snmp fingerprinting
rapid7 · Aug 12, 2024 · c759276 · c759276
2 parents 0c6b552 + 37d6ae1
commit c759276
Show file tree

Hide file tree

Showing 4 changed files with 23 additions and 0 deletions.
diff --git a/identifiers/os_family.txt b/identifiers/os_family.txt
@@ -50,6 +50,7 @@ DocuPrint
 Document Centre
 Dynix
 EDR
+EOS
 ERS
 EX
 Embedded

diff --git a/identifiers/os_product.txt b/identifiers/os_product.txt
@@ -75,6 +75,7 @@ Email Appliance
 Enterprise AP
 Enterprise Linux
 Enterprise WAP
+EOS
 EqualLogic
 Excella
 FRITZ!OS

diff --git a/identifiers/vendor.txt b/identifiers/vendor.txt
@@ -79,6 +79,7 @@ Arachni
 Araknis Networks
 Arch
 Arescom
+Arista
 Array Networks
 Arris
 Artisoft Inc.

diff --git a/xml/snmp_sysdescr.xml b/xml/snmp_sysdescr.xml
@@ -749,6 +749,26 @@
     <param pos="0" name="os.device" value="WAP"/>
   </fingerprint>
 
+  <!--======================================================================
+                           Arista Networks
+  =======================================================================-->
+
+  <fingerprint pattern="^Arista Networks EOS version ([\S]+) running on an Arista (?:Networks )?([\S]+)$">
+    <description>Arista Network Switch</description>
+    <example hw.model="DCS-7050QX-32S" os.version="4.28.6.1M">Arista Networks EOS version 4.28.6.1M running on an Arista Networks DCS-7050QX-32S</example>
+    <example hw.model="DCS-7050S-52" os.version="4.18.0F">Arista Networks EOS version 4.18.0F running on an Arista Networks DCS-7050S-52</example>
+    <example hw.model="DCS-7280SR2K-48C6" os.version="4.22.4M">Arista Networks EOS version 4.22.4M running on an Arista Networks DCS-7280SR2K-48C6</example>
+    <example hw.model="DCS-7050QX-32" os.version="4.20.10M">Arista Networks EOS version 4.20.10M running on an Arista Networks DCS-7050QX-32</example>
+    <example hw.model="vEOS-lab" os.version="4.30.6M">Arista Networks EOS version 4.30.6M running on an Arista vEOS-lab</example>
+    <param pos="0" name="os.vendor" value="Arista"/>
+    <param pos="0" name="os.family" value="EOS"/>
+    <param pos="0" name="hw.device" value="Switch"/>
+    <param pos="0" name="os.product" value="EOS"/>
+    <param pos="0" name="os.certainty" value="0.9"/>
+    <param pos="1" name="os.version"/>
+    <param pos="2" name="hw.model"/>
+  </fingerprint>
+
   <!--======================================================================
                            Aruba Networks
   =======================================================================-->
-Original file line number
+Diff line change
@@ Expand Up / @@ -50,6 +50,7 @@ DocuPrint @@
     Document Centre
     Dynix
     EDR
+    EOS
     ERS
     EX
     Embedded
@@ Expand Down @@