Cisco Cisco Firepower Management Center 4000 Entwickleranleitung

Version 5.3

Sourcefire 3D System eStreamer Integration Guide

519

Understanding Legacy Data Structures

Legacy Discovery Data Structures

Appendix B

Web Application Data Block for 4.9.1 - 4.10.x

The web application data block has a block type of 97. Identity data blocks are 

used in Host Server, Full Server, Host Client Application, and Connection 

Statistics data blocks. The data block describes the web application type and 

application ID from HTTP client requests detected by the system. 
For more information on the data blocks that incorporate this data block, see the 

following sections: 

The following diagram shows the format of a Web Application data block 4.9.1+.

Sub-Server 

Block Length

uint32

Total number of bytes in each Sub-Server data 

block, including the eight bytes in the Sub-

Server block type and length fields plus the 

number of bytes of data that follows.

Sub-Server 

Data

variable

Sub-server data as documented in 

 on page 241. 

Confidence

uint32

System confidence percentage.

Host Server Data 4.9.0.x Fields (Continued)

Byte

0

1

2

3

Bit

0 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31

 Web Application Data Block Type (97)

Web Application Data Block Length

Web Application Data Type

Web Application Data ID