Cisco Cisco Firepower Management Center 2000 Entwickleranleitung
Version 5.3
Sourcefire 3D System eStreamer Integration Guide
317
Understanding Discovery & Connection Data Structures
Host Discovery and Connection Data Blocks
Chapter 4
Generic List
Block Type
uint32
Initiates a Generic List data block comprising
sub-server information data blocks conveying
sub-server data added by a scanner. This value
is always 31.
Generic List
Block Length
uint32
Number of bytes in the Generic List data block,
including the list header and all encapsulated
sub-server information data blocks.
Sub-Server
Information-
Scan Added
Data Blocks *
variable
Full Server Information data blocks containing
information about sub-servers on a host added
by a scanner. See
on page 322 for a description of this data
block.
Generic List
Block Type
uint32
Initiates a Generic List data block comprising
sub-server information data blocks conveying
sub-server data added by an application. This
value is always 31.
Generic List
Block Length
uint32
Number of bytes in the Generic List data block,
including the list header and all encapsulated
sub-server information data blocks.
Sub-Server
Information -
Application
Added Data
Blocks *
variable
Full Server Information data blocks containing
information about sub-servers on a host added
by an application. See
on page 322 for a description of this
data block.
Confidence
uint32
Percentage of confidence of Sourcefire in
correct identification of the full server data.
BLOB Block
Type
uint32
Initiates a BLOB data block, which contains
banner data. This value is always 10.
BLOB Block
Length
uint32
Total number of bytes in the BLOB data block,
including eight bytes for the block type and
length fields, plus the number of bytes in the
banner.
Server Banner
Data
byte[
n
]
First
n
bytes of the packet involved in the
server event, where
n
is equal to or less than
256.
Full Server Data Block 4.10.0+ Fields (Continued)
F
IELD
D
ATA
T
YPE
D
ESCRIPTION