v.2.1.19 - 2018.04.16

• Improved coverage: xml/smtp_banners.xml #160
  • Note: Due to effort to cleanup description lines (remove duplicates, remove multilines, provide context, standardize format) almost every value for <description> has changed. This will impact the value returned as matched with tools such as DAP.
  • Project Sonar SMTP survey data was used to enhance and improve the coverage. Full details and metrics can be found in #160
  • Improved the accuracy and/or flexibility of multiple fingerprints.
  • Changed ALL instances of flags="REG_ICASE" to an inline flag (?i:) in order to make the regex compatible with more languages.
  • Implemented fingerprint examples for those fingerprints where examples could be found.
  • This sometimes resulted in removing fingerprints that were actually duplicates or trivially different.
  • Reworked description values so as to remove examples and ensure that this field is unique within the file as the value of description serves as an identifier when processing fingerprints. Multiline descriptions were reduced to single line where possible. Many descriptions were modified.
  • Fixed multiple instances where captures where under/over capturing. For example, some fingerprints would have captured the examples but the examples were missing leading or ending spaces. Other fingerprints were over-broad in what they would capture leading to fall positives or misidentification.
  • Fixed multiple instances where the portion of the version banner that was captured was different between two products in the same family.
  • Removed various real and example hostnames from examples and standardized on 'foo.bar'
  • Corrected system.time.format so as to match timestamp provided by service
  • Reworked date regex for multiple matches to remove inadvertent requirement for two digit day value when the banner included a single digit day.