<?xml version='1.0' encoding='UTF-8'?>
<fingerprints matches="nntp.banner" protocol="nntp" database_type="service">
  <!--
  NNTP greeting messages (part of the banner after the response code) are matched
  against these patterns to fingerprint NNTP servers.
  -->

  <fingerprint pattern="CCProxy NNTP Service$">
    <description>Youngzsoft CCProxy NNTP with no version</description>
    <example>CCProxy NNTP Service</example>
    <param pos="0" name="service.vendor" value="Youngzsoft"/>
    <param pos="0" name="service.family" value="CCProxy"/>
    <param pos="0" name="service.product" value="CCProxy"/>
  </fingerprint>

  <fingerprint pattern="^(\S{1,512}) Lyris ListManager NNTP Service ready">
    <description>Lyris Listmanager</description>
    <example host.name="blah">blah Lyris ListManager NNTP Service ready (posting ok).</example>
    <param pos="0" name="service.vendor" value="Lyris"/>
    <param pos="0" name="service.family" value="ListManager"/>
    <param pos="0" name="service.product" value="ListManager"/>
    <param pos="1" name="host.name"/>
  </fingerprint>

  <fingerprint pattern="^NNTP Service (?:.*) Version: (5.0.2195.[0-9]+)">
    <description>Microsoft IIS NNTP Server on Windows 2000</description>
    <example service.version="5.0.2195.7034" ms.nttp.version="5.0.2195.7034">NNTP Service 5.00.0984 Version: 5.0.2195.7034 Posting Allowed</example>
    <example service.version="5.0.2195.5329" ms.nttp.version="5.0.2195.5329">NNTP Service 5.00.0984 Version: 5.0.2195.5329 Posting Allowed</example>
    <param pos="0" name="service.vendor" value="Microsoft"/>
    <param pos="0" name="service.product" value="IIS"/>
    <param pos="0" name="service.family" value="IIS"/>
    <param pos="1" name="service.version"/>
    <param pos="0" name="service.cpe23" value="cpe:/a:microsoft:iis:{service.version}"/>
    <param pos="0" name="os.vendor" value="Microsoft"/>
    <param pos="0" name="os.family" value="Windows"/>
    <param pos="0" name="os.product" value="Windows 2000"/>
    <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_2000:-"/>
    <param pos="1" name="ms.nttp.version"/>
  </fingerprint>

  <fingerprint pattern="^NNTP Service (?:.*) Version: (6.0.3790.[0-9]+)">
    <description>Microsoft IIS NNTP Server on Windows Server 2003</description>
    <example service.version="6.0.3790.3959" ms.nttp.version="6.0.3790.3959">NNTP Service 6.0.3790.3959 Version: 6.0.3790.3959 Posting Allowed</example>
    <example service.version="6.0.3790.206" ms.nttp.version="6.0.3790.206">NNTP Service 6.0.3790.206 Version: 6.0.3790.206 Posting Allowed</example>
    <param pos="0" name="service.vendor" value="Microsoft"/>
    <param pos="0" name="service.product" value="IIS"/>
    <param pos="0" name="service.family" value="IIS"/>
    <param pos="1" name="service.version"/>
    <param pos="0" name="service.cpe23" value="cpe:/a:microsoft:iis:{service.version}"/>
    <param pos="0" name="os.vendor" value="Microsoft"/>
    <param pos="0" name="os.family" value="Windows"/>
    <param pos="0" name="os.product" value="Windows Server 2003"/>
    <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows_server_2003:-"/>
    <param pos="1" name="ms.nttp.version"/>
  </fingerprint>

  <fingerprint pattern="^NNTP Service Microsoft. Internet Services (?:.*) Version: (?:[^ ]+)">
    <description>Older Microsoft IIS NNTP Servers</description>
    <example>NNTP Service Microsoft. Internet Services 5.00 Version: 5.0.2068.0 Posting Allowed</example>
    <example>NNTP Service Microsoft. Internet Services 5.00.7515. Version: 5.0.0.7515 Posting Allowed</example>
    <example>NNTP Service Microsoft. Internet Services 5.5 Version: 5.5.1726.0 Posting Allowed</example>
    <param pos="0" name="service.vendor" value="Microsoft"/>
    <param pos="0" name="service.family" value="Exchange Server"/>
    <param pos="0" name="service.product" value="Exchange Server"/>
    <param pos="0" name="service.cpe23" value="cpe:/a:microsoft:exchange_server:-"/>
    <param pos="0" name="os.vendor" value="Microsoft"/>
    <param pos="0" name="os.family" value="Windows"/>
    <param pos="0" name="os.product" value="Windows"/>
    <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows:-"/>
  </fingerprint>

  <fingerprint pattern="^Kerio (?:Connect|MailServer)\s+(\d\.[\d.]+)\s+(?:(?:patch|RC) (\d)\s+)?NNTP server ready$">
    <description>Kerio Connect NNTP</description>
    <example service.version="9.2.3">Kerio Connect 9.2.3 NNTP server ready</example>
    <example service.version="9.2.6" service.version.version="2">Kerio Connect 9.2.6 patch 2 NNTP server ready</example>
    <example service.version="6.7.3">Kerio MailServer 6.7.3 NNTP server ready</example>
    <param pos="0" name="service.vendor" value="Kerio"/>
    <param pos="0" name="service.family" value="Connect"/>
    <param pos="0" name="service.product" value="NNTP"/>
    <param pos="1" name="service.version"/>
    <param pos="2" name="service.version.version"/>
  </fingerprint>

  <fingerprint pattern="^NNTP server ready(?: \(no posting\))?$">
    <description>Non-specific NNTP -- assert nothing</description>
    <example>NNTP server ready (no posting)</example>
    <example>NNTP server ready</example>
    <param pos="0" name="hw.certainty" value="0.0"/>
    <param pos="0" name="os.certainty" value="0.0"/>
    <param pos="0" name="service.certainty" value="0.0"/>
  </fingerprint>

</fingerprints>