Cisco Cisco Firepower Management Center 4000 Guía Del Desarrollador
Version 5.3
Sourcefire 3D System eStreamer Integration Guide
316
Understanding Discovery & Connection Data Structures
Host Discovery and Connection Data Blocks
Chapter 4
The
table describes the components of the
Full Server data block.
Full Server Data Block 4.10.0+ Fields
F
IELD
D
ATA
T
YPE
D
ESCRIPTION
Full Server
Block Type
uint32
Initiates a Full Server data block. This value is
always 104.
Full Server
Block Length
uint32
Total number of bytes in the Full Server data
block, including eight bytes for the full server
block type and length fields, plus the number of
bytes of full server data that follows.
Port
uint16
Server port number.
Hits
uint32
Number of hits the server has received.
Generic List
Block Type
uint32
Initiates a Generic List data block comprising
data blocks of detected sub-server data. This
value is always 31.
Generic List
Block Length
uint32
Number of bytes in the Generic List data block,
including the list header and all encapsulated
sub-server information data blocks.
Sub-Server
Information -
Sourcefire
Data Blocks *
variable
Full Server Information data blocks containing
information about sub-servers for a host server
detected by Sourcefire. See
on page 322 for a
description of this data block.
Generic List
Block Type
uint32
Initiates a Generic List data block comprising
sub-server information data blocks conveying
sub-server data added by a user. This value is
always 31.
Generic List
Block Length
uint32
Number of bytes in the Generic List data block,
including the list header and all encapsulated
server information data blocks.
Sub-Server
Information-
User Added
Data Blocks *
variable
Full Server Information data blocks containing
information about sub-servers on a host added
by a user. See
on page 322 for a description of this data
block.