Cisco Cisco Firepower Management Center 4000 Guía Del Desarrollador

Version 5.3

Sourcefire 3D System eStreamer Integration Guide

538

Understanding Legacy Data Structures

Legacy Discovery Data Structures

Appendix B

Host Client Application Data Block for 3.5 - 4.9.0.x

The Client Application data block for 3.5 - 4.9.0.x describes a client application and 

is used within legacy New Client Application events (event type 1001, subtype 7) 

and Client Application Timeout events (event type 1001, subtype 20). It has a 

block type of 42.
The following diagram shows the basic structure of a Client Application data 

block:

The 

 table describes the fields of 

the Client Application data block.

Byte

0

1

2

3

Bit

0 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31

Client Application Block Type (42)

Client Application Block Length

Hits

Last Used

Type ID

ID

Ve

rs

io

n

String Block Type (0)

String Block Length

Version...

Client Application Data Block 3.5 - 4.9.0.x Fields 

Client 

Application 

Block Type

uint32

Initiates a Host Client Application data block. This 

value is always 42.

Client 

Application 

Block Length

uint32

Number of bytes in the Client Application data 

block, including eight bytes for the client 

application block type and length, plus the 

number of bytes in the client application data that 

follows.