Cisco Cisco Firepower Management Center 4000 개발자 가이드
Version 5.3
Sourcefire 3D System eStreamer Integration Guide
321
Understanding Discovery & Connection Data Structures
Host Discovery and Connection Data Blocks
Chapter 4
String Block
Type
uint32
Initiates a String data block that contains the
server version. This value is always 0.
String Block
Length
uint32
Number of bytes in the server version String
data block, including eight bytes for the block
type and length fields, plus the number of
bytes in the server version.
Server Version
string
Server version.
Last Time
Used
uint32
Indicates when the server information was last
used in traffic.
Source Type
uint32
Number that maps to the type of data source:
•
•
0
if the server data was provided by RNA
•
1
if the server data was provided by a user
•
2
if the server data was provided by a third-
party scanner
•
3
if the server data was provided by a
command line tool such as nmimport.pl or
the Host Input API client
Source ID
uint32
Identification number that maps to the source
of the server data. Depending on the source
type, this may map to RNA, a user, a scanner,
or a third-party application.
List Block Type
uint32
Initiates a list of Sub-Server data blocks. This
value is always 11.
List Block
Length
uint32
Number of bytes in the List data block,
including eight bytes for the list block type and
length fields, plus the number of bytes in the
encapsulated Sub-Server data blocks that
follow.
Sub-Server
Block Type
uint32
Initiates the first Sub-Server data block. This
data block can be followed by other Sub-Server
data blocks up to the limit defined in the list
block length field.
Server Information Data Block Fields (Continued)
F
IELD
D
ATA
T
YPE
D
ESCRIPTION