Cisco Cisco Firepower Management Center 4000 Developer's Guide
Version 5.3
Sourcefire 3D System eStreamer Integration Guide
673
Understanding Legacy Data Structures
Legacy Host Data Structures
Appendix B
Full Host Profile Data Block 5.0 - 5.0.2
The Full Host Profile data block for version 5.0 - 5.0.2 contains a full set of data
describing one host. It has the format shown in the graphic below and explained
in the following table. Note that, except for List data blocks, the graphic does not
show the fields of the encapsulated data blocks. These encapsulated data blocks
are described separately in
(Third Party
Scan/VDB)
Host
Vulnerability
Data Blocks *
variable
Host Vulnerability data blocks sourced from a
third party scanner and containing information
about host vulnerabilities cataloged in the
Sourcefire vulnerability database (VDB). See
page 293 for a description of this data block.
Generic List
Block Type
uint32
Initiates a Generic List data block comprising
Host Vulnerability data blocks conveying third
party scan vulnerability data. This value is
always 31.
Generic List
Block Length
uint32
Number of bytes in the Generic List data block,
including the list header and all encapsulated
data blocks.
(Third Party
Scan) Host
Vulnerability
Data Blocks *
variable
List of Host Vulnerability data blocks for
vulnerabilities identified through a third party
scanner. Note that the host vulnerability IDs for
these data blocks are third party scanner IDs,
not Sourcefire vulnerability IDs. See
on page 293 for
a description of this data block.
List Block Type
uint32
Initiates a List data block comprising Attribute
Value data blocks conveying attribute data. This
value is always 11.
List Block
Length
uint32
Number of bytes in the List data block, including
the list header and all encapsulated data blocks.
Attribute Value
Data Blocks *
variable
List of Attribute Value data blocks. See
on page 253 for a description
of this data block.
Full Host Profile Data Block 4.9 - 4.10.x (Continued)
F
IELD
D
ATA
T
YPE
D
ESCRIPTION