1<!ELEMENT etterlog (host*)> 2<!ATTLIST etterlog version CDATA #REQUIRED> 3<!ATTLIST etterlog date CDATA #REQUIRED> 4<!ELEMENT host (hostname?, mac?, manuf?, distance, type, fingerprint?, os?, port*)> 5<!ATTLIST host ip CDATA #REQUIRED> 6<!ELEMENT hostname (#PCDATA)> 7<!ELEMENT location (#PCDATA)> 8<!ELEMENT mac (#PCDATA)> 9<!ELEMENT manuf (#PCDATA)> 10<!ELEMENT distance (#PCDATA)> 11<!ELEMENT type (#PCDATA)> 12<!ELEMENT fingerprint (#PCDATA)> 13<!ATTLIST fingerprint type CDATA #REQUIRED> 14<!ELEMENT os (#PCDATA)> 15<!ATTLIST os type CDATA #REQUIRED> 16<!ELEMENT port (banner?, account*)> 17<!ATTLIST port proto CDATA #REQUIRED> 18<!ATTLIST port addr CDATA #REQUIRED> 19<!ATTLIST port service CDATA #REQUIRED> 20<!ELEMENT banner (#PCDATA)> 21<!ELEMENT account (user, pass, client, info?)> 22<!ATTLIST account user CDATA #REQUIRED> 23<!ATTLIST account failed CDATA> 24<!ELEMENT user (#PCDATA)> 25<!ELEMENT pass (#PCDATA)> 26<!ELEMENT client (#PCDATA)> 27<!ELEMENT info (#PCDATA)> 28