Cisco Cisco Firepower Management Center 2000 Entwickleranleitung

Seite von 726
Version 5.3
Sourcefire 3D System eStreamer Integration Guide
541
Understanding Legacy Data Structures
Legacy Discovery Data Structures
Appendix B
User Client Application Data Block for 5.1 and earlier
The User Client Application data block contains information about the source of 
the client application data, the identification number for the user who added the 
data, and the lists of IP address range data blocks. The User Client Application 
data block has a block type of 59.
The following diagram shows the basic structure of a User Client Application data 
block:
String Block 
Type
uint32
Initiates a String data block for the client 
application version. This value is always 0.
String Block 
Length
uint32
Number of bytes in the String data block for the 
client application name, including eight bytes for 
the string block type and length, plus the number 
of bytes in the client application version.
Version
string
Client application version.
Generic List 
Block Type
uint32
Initiates a Generic List data block. This value is 
always 31.
Generic List 
Block Length
uint32
Number of bytes in the Generic List block and 
encapsulated Web Application data blocks. This 
number includes the eight bytes of the generic 
list block header fields, plus the number of bytes 
in all of the encapsulated Web Application data 
blocks.
Web 
Application 
Data Blocks
variable
Encapsulated Web Application data blocks up to 
the maximum number of bytes in the list block 
length. For information on the encapsulated Web 
Application data blocks, see 
Client Application Data Block for 4.9.1 - 4.10.x Fields (Continued)
F
IELD
D
ATA
 
T
YPE
D
ESCRIPTION
Byte
0
1
2
3
Bit
0 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31
User Client Application Block Type (59)
User Client Application Block Length