From 8fd0ff0f8326de5be7dafdd65cc21d5cec8a3cdc Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Ji=C5=99=C3=AD=20Pe=C5=A1=C3=ADk?= <jiri_pesik@rapid7.com>
Date: Tue, 6 Aug 2024 15:04:19 +0200
Subject: [PATCH 1/5] SNMP fingerprinting for Arista

---
 identifiers/os_family.txt  |  1 +
 identifiers/os_product.txt |  1 +
 xml/snmp_sysdescr.xml      | 18 ++++++++++++++++++
 3 files changed, 20 insertions(+)

diff --git a/identifiers/os_family.txt b/identifiers/os_family.txt
index fcae6529..23ac2a73 100644
--- a/identifiers/os_family.txt
+++ b/identifiers/os_family.txt
@@ -50,6 +50,7 @@ DocuPrint
 Document Centre
 Dynix
 EDR
+EOS
 ERS
 EX
 Embedded
diff --git a/identifiers/os_product.txt b/identifiers/os_product.txt
index cbb66729..b5115a03 100644
--- a/identifiers/os_product.txt
+++ b/identifiers/os_product.txt
@@ -75,6 +75,7 @@ Email Appliance
 Enterprise AP
 Enterprise Linux
 Enterprise WAP
+EOS
 EqualLogic
 Excella
 FRITZ!OS
diff --git a/xml/snmp_sysdescr.xml b/xml/snmp_sysdescr.xml
index 9e569b4f..b7f14df0 100644
--- a/xml/snmp_sysdescr.xml
+++ b/xml/snmp_sysdescr.xml
@@ -749,6 +749,24 @@
     <param pos="0" name="os.device" value="WAP"/>
   </fingerprint>
 
+  <!--======================================================================
+                           Arista Networks
+  =======================================================================-->
+
+  <fingerprint pattern="^Arista Networks EOS version ([\S]+) running on an Arista Networks ([\S]+)$">
+    <description>HP Aruba Network Switch</description>
+    <example hw.model="DCS-7050QX-32S" os.version="4.28.6.1M">Arista Networks EOS version 4.28.6.1M running on an Arista Networks DCS-7050QX-32S</example>
+    <example hw.model="DCS-7050S-52" os.version="4.18.0F">Arista Networks EOS version 4.18.0F running on an Arista Networks DCS-7050S-52</example>
+    <example hw.model="DCS-7280SR2K-48C6" os.version="4.22.4M">Arista Networks EOS version 4.22.4M running on an Arista Networks DCS-7280SR2K-48C6</example>
+    <example hw.model="DCS-7050QX-32" os.version="4.20.10M">Arista Networks EOS version 4.20.10M running on an Arista Networks DCS-7050QX-32</example>
+    <param pos="0" name="os.vendor" value="Arista"/>
+    <param pos="0" name="os.family" value="EOS"/>
+    <param pos="0" name="hw.device" value="Switch"/>
+    <param pos="0" name="os.product" value="EOS"/>
+    <param pos="1" name="os.version"/>
+    <param pos="2" name="hw.model"/>
+  </fingerprint>
+
   <!--======================================================================
                            Aruba Networks
   =======================================================================-->

From b31ff8caa49a72ba38267ff3b881e0d9941e6b53 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Ji=C5=99=C3=AD=20Pe=C5=A1=C3=ADk?= <jiri_pesik@rapid7.com>
Date: Tue, 6 Aug 2024 15:20:06 +0200
Subject: [PATCH 2/5] SNMP fingerprinting for Arista

---
 xml/snmp_sysdescr.xml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/xml/snmp_sysdescr.xml b/xml/snmp_sysdescr.xml
index b7f14df0..18c9aef9 100644
--- a/xml/snmp_sysdescr.xml
+++ b/xml/snmp_sysdescr.xml
@@ -754,7 +754,7 @@
   =======================================================================-->
 
   <fingerprint pattern="^Arista Networks EOS version ([\S]+) running on an Arista Networks ([\S]+)$">
-    <description>HP Aruba Network Switch</description>
+    <description>Arista Network Switch</description>
     <example hw.model="DCS-7050QX-32S" os.version="4.28.6.1M">Arista Networks EOS version 4.28.6.1M running on an Arista Networks DCS-7050QX-32S</example>
     <example hw.model="DCS-7050S-52" os.version="4.18.0F">Arista Networks EOS version 4.18.0F running on an Arista Networks DCS-7050S-52</example>
     <example hw.model="DCS-7280SR2K-48C6" os.version="4.22.4M">Arista Networks EOS version 4.22.4M running on an Arista Networks DCS-7280SR2K-48C6</example>

From 8c5fa50a25407856428da3f564d343344ce90702 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Ji=C5=99=C3=AD=20Pe=C5=A1=C3=ADk?= <jiri_pesik@rapid7.com>
Date: Tue, 6 Aug 2024 15:34:50 +0200
Subject: [PATCH 3/5] SNMP fingerprinting for Arista

---
 identifiers/vendor.txt | 1 +
 1 file changed, 1 insertion(+)

diff --git a/identifiers/vendor.txt b/identifiers/vendor.txt
index efe41d86..d2c10957 100644
--- a/identifiers/vendor.txt
+++ b/identifiers/vendor.txt
@@ -79,6 +79,7 @@ Arachni
 Araknis Networks
 Arch
 Arescom
+Arista
 Array Networks
 Arris
 Artisoft Inc.

From 92a9d6cb6a204ab0a6aa722c68d84b97493d2889 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Ji=C5=99=C3=AD=20Pe=C5=A1=C3=ADk?= <jiri_pesik@rapid7.com>
Date: Tue, 6 Aug 2024 17:24:29 +0200
Subject: [PATCH 4/5] SNMP fingerprinting for Arista

---
 xml/snmp_sysdescr.xml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/xml/snmp_sysdescr.xml b/xml/snmp_sysdescr.xml
index 18c9aef9..0c70b6b8 100644
--- a/xml/snmp_sysdescr.xml
+++ b/xml/snmp_sysdescr.xml
@@ -753,7 +753,7 @@
                            Arista Networks
   =======================================================================-->
 
-  <fingerprint pattern="^Arista Networks EOS version ([\S]+) running on an Arista Networks ([\S]+)$">
+  <fingerprint pattern="^Arista Networks EOS version ([\S]+) running on an Arista (?:Networks )([\S]+)$">
     <description>Arista Network Switch</description>
     <example hw.model="DCS-7050QX-32S" os.version="4.28.6.1M">Arista Networks EOS version 4.28.6.1M running on an Arista Networks DCS-7050QX-32S</example>
     <example hw.model="DCS-7050S-52" os.version="4.18.0F">Arista Networks EOS version 4.18.0F running on an Arista Networks DCS-7050S-52</example>

From 37d6ae196cad605c3ed4a5617a21ab2c23745227 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Ji=C5=99=C3=AD=20Pe=C5=A1=C3=ADk?= <jiri_pesik@rapid7.com>
Date: Wed, 7 Aug 2024 17:51:39 +0200
Subject: [PATCH 5/5] Added certainty, test example and modified regex

---
 xml/snmp_sysdescr.xml | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/xml/snmp_sysdescr.xml b/xml/snmp_sysdescr.xml
index 0c70b6b8..5988ee49 100644
--- a/xml/snmp_sysdescr.xml
+++ b/xml/snmp_sysdescr.xml
@@ -753,16 +753,18 @@
                            Arista Networks
   =======================================================================-->
 
-  <fingerprint pattern="^Arista Networks EOS version ([\S]+) running on an Arista (?:Networks )([\S]+)$">
+  <fingerprint pattern="^Arista Networks EOS version ([\S]+) running on an Arista (?:Networks )?([\S]+)$">
     <description>Arista Network Switch</description>
     <example hw.model="DCS-7050QX-32S" os.version="4.28.6.1M">Arista Networks EOS version 4.28.6.1M running on an Arista Networks DCS-7050QX-32S</example>
     <example hw.model="DCS-7050S-52" os.version="4.18.0F">Arista Networks EOS version 4.18.0F running on an Arista Networks DCS-7050S-52</example>
     <example hw.model="DCS-7280SR2K-48C6" os.version="4.22.4M">Arista Networks EOS version 4.22.4M running on an Arista Networks DCS-7280SR2K-48C6</example>
     <example hw.model="DCS-7050QX-32" os.version="4.20.10M">Arista Networks EOS version 4.20.10M running on an Arista Networks DCS-7050QX-32</example>
+    <example hw.model="vEOS-lab" os.version="4.30.6M">Arista Networks EOS version 4.30.6M running on an Arista vEOS-lab</example>
     <param pos="0" name="os.vendor" value="Arista"/>
     <param pos="0" name="os.family" value="EOS"/>
     <param pos="0" name="hw.device" value="Switch"/>
     <param pos="0" name="os.product" value="EOS"/>
+    <param pos="0" name="os.certainty" value="0.9"/>
     <param pos="1" name="os.version"/>
     <param pos="2" name="hw.model"/>
   </fingerprint>