Cisco Cisco Firepower Management Center 4000 Developer's Guide
4-73
FireSIGHT eStreamer Integration Guide
Chapter 4 Understanding Discovery & Connection Data Structures
Host Discovery and Connection Data Blocks
String Information Data Block
The String Information data block contains string data. For example, the String Information data block
is used to convey the Common Vulnerabilities and Exposures (CVE) identification string within a Scan
Vulnerability data block. The String Information data block has a block type of 35 in the series 1 group
of blocks.
is used to convey the Common Vulnerabilities and Exposures (CVE) identification string within a Scan
Vulnerability data block. The String Information data block has a block type of 35 in the series 1 group
of blocks.
The following diagram shows the format of the String Information data block:
The following table describes the fields of the String Information data block.
Attribute Address Data Block 5.2+
The Attribute Address data block contains an attribute list item and is used within an Attribute Definition
data block. It has a block type of 146 in the series 1 group of blocks.
data block. It has a block type of 146 in the series 1 group of blocks.
The following diagram shows the basic structure of an Attribute Address data block:
Byte
0
1
2
3
Bit
0 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31
String Information Block Type (35)
String Information Block Length
CVE ID
String Block Type (0)
String Block Length
Value...
Table 4-38
String Information Data Block Fields
Field
Data Type
Description
String Information
Block Type
Block Type
uint32
Initiates a String Information data block. This value is always
35
.
String Information
Block Length
Block Length
uint32
Combined length of the String Information data block header and
String Information data.
String Information data.
String Block Type
uint32
Initiates a string data block for the value.
String Block Length
uint32
Number of bytes in the string data block for the value, including
eight bytes for the string block type and length, plus the number
of bytes in the value.
eight bytes for the string block type and length, plus the number
of bytes in the value.
Value
string
The value of the Common Vulnerabilities and Exposures (CVE)
identification number for the vulnerability data block where the
String Information data block is used.
identification number for the vulnerability data block where the
String Information data block is used.