Cisco Cisco Firepower Management Center 4000 Entwickleranleitung

Version 5.3

Sourcefire 3D System eStreamer Integration Guide

673

Understanding Legacy Data Structures

Legacy Host Data Structures

Appendix B

Full Host Profile Data Block 5.0 - 5.0.2

The Full Host Profile data block for version 5.0 - 5.0.2 contains a full set of data 

describing one host. It has the format shown in the graphic below and explained 

in the following table. Note that, except for List data blocks, the graphic does not 

show the fields of the encapsulated data blocks. These encapsulated data blocks 

are described separately in 

Understanding Discovery & Connection Data 

(Third Party 

Scan/VDB) 

Host 

Vulnerability 

Data Blocks *

variable

Host Vulnerability data blocks sourced from a 

third party scanner and containing information 

about host vulnerabilities cataloged in the 

Sourcefire vulnerability database (VDB). See 

page 293 for a description of this data block.

Generic List 

Block Type

uint32

Initiates a Generic List data block comprising 

Host Vulnerability data blocks conveying third 

party scan vulnerability data. This value is 

always 31.

Generic List 

Block Length

uint32

Number of bytes in the Generic List data block, 

including the list header and all encapsulated 

data blocks.

(Third Party 

Scan) Host 

Vulnerability 

Data Blocks *

variable

List of Host Vulnerability data blocks for 

vulnerabilities identified through a third party 

scanner. Note that the host vulnerability IDs for 

these data blocks are third party scanner IDs, 

not Sourcefire vulnerability IDs. See 

 on page 293 for 

a description of this data block. 

List Block Type

uint32

Initiates a List data block comprising Attribute 

Value data blocks conveying attribute data. This 

value is always 11.

List Block 

Length

uint32

Number of bytes in the List data block, including 

the list header and all encapsulated data blocks.

Attribute Value 

Data Blocks *

variable

List of Attribute Value data blocks. See 

 on page 253 for a description 

of this data block.

Full Host Profile Data Block 4.9 - 4.10.x (Continued)