Cisco Cisco Firepower Management Center 4000 Guía Del Desarrollador

Version 5.3

Sourcefire 3D System eStreamer Integration Guide

240

Understanding Discovery & Connection Data Structures

Host Discovery and Connection Data Blocks

Chapter 4

The 

 table describes the fields of the List data block.

Generic List Block

The Generic List data block is used to encapsulate a list of series 1 data blocks. 

For example, when client application information is transmitted within a Host 

Profile data block, a list of Client Application data blocks are encapsulated by the 

Generic List data block. The Generic List data block has a block type of 31 in the 

series 1 group of blocks.
The following diagram shows the basic structure of a Generic List data block:

List Data Block Fields 

List Block 

Type

uint32

Initiates a List data block. This value is always 11.

List Block 

Length

uint32

Number of bytes in the list block and 

encapsulated data. For example, if there were 

three sub-server data blocks included in the list, 

the value here would include the number of bytes 

in the sub-server blocks, plus eight bytes for the 

list block header.

Encapsulated 

Data Blocks

variable

Encapsulated data blocks up to the maximum 

number of bytes in the list block length.

Byte

0

1

2

3

Bit

0 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31

Generic List Block Type (31)

Generic List Block Length

Encapsulated Data Blocks...