Cisco Cisco Firepower Management Center 2000 Entwickleranleitung

Version 5.3

Sourcefire 3D System eStreamer Integration Guide

520

Understanding Legacy Data Structures

Legacy Discovery Data Structures

Appendix B

The 

 table describes the fields of the Web 

Application data block:

Host Server Data Block for 4.9.1.x

The Host Server data block conveys information about servers identified by the 

system, including the server port, the frequency of use, last use, and confidence, 

as well as lists of server information blocks and Sub-Server blocks for the host for 

the event. Host Server data blocks are contained in messages for new TCP and 

UDP servers and changes to TCP and UDP servers. For more information, see 

 on page 206. Starting in 4.9.1, the data block includes a list of 

Web Application data blocks. Note that the Host Server data block has a block 

type of 98.

An asterisk(*) next to a data block name in the following diagram 

indicates that multiple instances of the data block may occur.

Web Application Data Block Fields 

Web 

Application 

Data Block 

Type

uint32

Initiates the Web Application data block. This 

value is always 97.

Web 

Application 

Data Block 

Length

uint32

Number of bytes in the Web Application data 

block. This value should always be sixteen 

bytes for the data block type and length fields 

and the source type and ID fields.

Web 

Application ID

uint32

Indicates the ID of the web application.