Current pcap (needs to be updated, see #1) yields incorrect asset details after integration

[0xcad]

To replicate:

• go to branch viper-docker-from-main
• make sure you copy over .env.example to .env!

Expected behavior:

• after just capture and just integrate, VIPER has assets from blueflow that include a CT machine
• assets have role and cpe filled out

Current behavior:

• Blueflow has 8 assets listed, VIPER only has 4 assets (expected: VIPER has 8 assets)
• Asset role is empty for one asset
• cpe is cpe:2.3:-:-:- for all assets (expected: assets have a cpe that includes vendor/product/version, even if version if unknown/-)
• Perhaps concerningly, the CT machine asset (hostname BRILL-CT01, ip 10.10.10.30) gets labeled as role: patient_monitor (expected: CT machine has role related to CT machine, not patient monitor)

just parse output:

{
  "hostname": "CCPLATFORM01",
  "ip_address": "10.10.20.20",
  "mac_address": "00:09:5C:BB:CC:02",
  "vendor": "microsoft",
  "product": "windows_10",
  "version": null,
  "device_class": "workstation",
  "open_ports": [
    5355
  ],
  "confidence": "HIGH"
}
{
  "hostname": "MX700-bed12",
  "ip_address": "10.10.10.21",
  "mac_address": "00:09:FB:BD:75:6D",
  "vendor": "philips",
  "product": "intellivue_mx700",
  "version": null,
  "device_class": "patient_monitor",
  "open_ports": [
    3702
  ],
  "confidence": "LOW"
}
{
  "hostname": null,
  "ip_address": "10.10.20.1",
  "mac_address": "00:1B:17:00:01:11",
  "vendor": "paloaltonetworks",
  "product": "pan_os",
  "version": null,
  "device_class": "firewall",
  "open_ports": [],
  "confidence": "LOW"
}
{
  "hostname": "PACSARCH01",
  "ip_address": "10.10.20.30",
  "mac_address": "00:50:56:8B:CA:FE",
  "vendor": "microsoft",
  "product": "windows_server",
  "version": null,
  "device_class": "server",
  "open_ports": [
    5355
  ],
  "confidence": "LOW"
}
{
  "hostname": null,
  "ip_address": "10.10.20.7",
  "mac_address": "00:50:56:8B:DC:01",
  "vendor": "vmware",
  "product": null,
  "version": null,
  "device_class": null,
  "open_ports": [],
  "confidence": "LOW"
}
{
  "hostname": "BRILL-CT01",
  "ip_address": "10.10.10.30",
  "mac_address": "00:90:20:AA:BB:01",
  "vendor": "philips",
  "product": "brilliance_ict",
  "version": null,
  "device_class": null,
  "open_ports": [],
  "confidence": "HIGH"
}
{
  "hostname": "ACMEWS02",
  "ip_address": "10.10.10.41",
  "mac_address": "60:A5:E2:AE:32:1A",
  "vendor": "microsoft",
  "product": "windows_10",
  "version": null,
  "device_class": "workstation",
  "open_ports": [
    5355
  ],
  "confidence": "LOW"
}
{
  "hostname": "ACMECT01",
  "ip_address": "10.10.10.40",
  "mac_address": "E8:D8:D1:AA:BB:02",
  "vendor": "microsoft",
  "product": "windows_7",
  "version": null,
  "device_class": "workstation",
  "open_ports": [
    5355
  ],
  "confidence": "LOW"
}