Cisco Cisco Firepower Management Center 2000 Guía Del Desarrollador
Version 5.3
Sourcefire 3D System eStreamer Integration Guide
543
Understanding Legacy Data Structures
Legacy Discovery Data Structures
Appendix B
Legacy Scan Result Data Blocks
For more information, see the following sections:
•
•
•
•
•
Generic Scan Results Data Block for 4.9.1.x and earlier
The Generic Scan Results data block contains scan results and is used in the
on page 545. The Generic Scan Results data
block has a block type of 71.
The following diagram shows the basic structure of a Generic Scan Results data
The following diagram shows the basic structure of a Generic Scan Results data
block:
Client
Application ID
uint32
The internal identification number of the detected
client application, if applicable.
String Block
Type
uint32
Initiates a String data block that contains the
client application version. This value is always 0.
String Block
Length
uint32
Number of bytes in the client application version
String data block, including the string block type
and length fields, plus the number of bytes in the
version.
Version
string
Client application version.
User Client Application Data Block Fields (Continued)
F
IELD
N
UMBER
OF
B
YTES
D
ESCRIPTION
Byte
0
1
2
3
Bit
0 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31
Generic Scan Results Data Block Type (71)
Generic Scan Results Block Length
Port
Protocol