Cisco Cisco Firepower Management Center 4000 Entwickleranleitung

Seite von 536
 
B-62
FireSIGHT eStreamer Integration Guide
 
Appendix B      Understanding Legacy Data Structures 
  Legacy Discovery Data Structures
User Product Data Block for 5.0.x
The User Product data block conveys host input data imported from a third party application, including 
third party application string mappings. This data block is used in 
. The User Product data block has a block type of 65 for 4.10.x, and a block type of 118 for 
5.0 - 5.0.x. The block types have the same structure.
Note
An asterisk(*) next to a data block name in the following diagram indicates that multiple instances of 
the data block may occur.
Vulnerability 
Data
string
Information relating to each vulnerability.
List Block Type uint32
Initiates a List data block comprising Scan Vulnerability data blocks 
conveying transport Scan Vulnerability data. This value is always 
11
.
List Block 
Length
uint32
Number of bytes in the list. This number includes the eight bytes of the 
list block type and length fields, plus all encapsulated Scan 
Vulnerability data blocks.
This field is followed by zero or more Scan Vulnerability data blocks.
Generic Scan 
Results Block 
Type
uint32
Initiates a Generic Scan Results data block describing server and 
operating system data detected during a scan. This value is always 108.
Generic Scan 
Results Block 
Length
uint32
Number of bytes in the Generic Scan Results data block, including 
eight bytes for the generic scan results block type and length fields, 
plus the number of bytes in the scan result data that follows.
Generic Scan 
Results Data
string
Information relating to each scan result.
Generic List 
Block Type
uint32
Initiates a Generic List data block comprising User Product data blocks 
conveying host input data from a third party application. This value is 
always 
31
.
Generic List 
Block Length
uint32
Number of bytes in the Generic List data block, including the list 
header and all encapsulated User Product data blocks.
User Product 
Data Blocks *
variable
User Product data blocks containing host input data. See 
 for a description of this data block.
Table B-14
Scan Result Data Block Fields (continued)
Field
Data Type
Description