Cisco Cisco Firepower Management Center 4000 Guía Del Desarrollador

Version 5.3

Sourcefire 3D System eStreamer Integration Guide

322

Understanding Discovery & Connection Data Structures

Host Discovery and Connection Data Blocks

Chapter 4

Full Server Information Data Block

The Full Server Information data block conveys information about a server 

detected on a host, including the server’s application protocol, vendor, and 

version, and the list of its associated sub-servers. For each sub-server, 

information is included by a Full Sub-Server data block (see 

 on page 255). The Full Server Information data block has a block type of 106 

in the series 1 group of blocks. 

An asterisk(*) next to a series 1 data block name in the following 

diagram indicates that multiple instances of the data block may occur.

The following diagram shows the format of the Full Server Information data block:

Sub-Server 

Block Length

uint32

Total number of bytes in each Sub-Server data 

block, including the eight bytes in the Sub-

Server block type and length fields, plus the 

number of bytes of data that follows.

Sub-Server 

Data

variable

Sub-server data as documented in 

 on page 241. 

Server Information Data Block Fields (Continued)

Byte

0

1

2

3

Bit

0 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31

Full Server Block Type (106)

Full Server Block Length

Application Protocol ID

Vendor

String Block Type (0)

String Block Length

Vendor Name String...

Ve

rs

io

n

String Block Type (0)

String Block Length

Version String...

Last Used