FreeBSD SNMP banners incorrectly assert Linux fingerprints; regex is too loose
jhart-r7 opened this issue · comments
Jon Hart commented
https://github.com/rapid7/recog/blob/master/xml/snmp_sysdescr.xml#L2489-2512
Those should be FreeBSD, not Linux.
Also, that second fingerprint is just too loose -- while it is likely correct that anything beginning with FreeBSD is in fact FreeBSD, there is almost certainly more we could get from the fingerprint provided this overly loose regex wasn't there and the match didn't occur.