Why Linux based device is classified in ip router class

[Karthiga Jeyara]

Linux based device is discovered in IP router class. While checking I could see that SNMP, SSH port is open in Shazzam scan, however it didn't execute the SSH classifier instead it executes the SNMP classifier. perform SSH credential test, its validated. Kindly advise

[doug_schulze]

It happened because your snmp return most likely returned that it had routing capabilities. You can see the decision point in the snmp classify sensor near the bottom. Obviously you want to ensure you have access to (SSH) port 22 and this wont happen but until it does you would want to put some sort of classification criteria that says sysdescr does not contain Linux (or the appropriate value)