Cisco Cisco Firepower Management Center 4000 Guía Del Desarrollador

Version 5.3

Sourcefire 3D System eStreamer Integration Guide

567

Understanding Legacy Data Structures

Legacy Discovery Data Structures

Appendix B

Legacy Host Profile Data Blocks

See the following sections for more information:

Host Profile Data Block for 4.9.x - 5.0.2

The following diagram shows the format of a Host Profile data block in 4.9 to 

5.0.2. The Host Profile data block also does not include a host criticality value, but 

does include a VLAN presence indicator. In addition, a Host Profile data block can 

convey a NetBIOS name for the host. This Host Profile data block has a block type 

of 91.

An asterisk(*) next to a block type field in the following diagram 

indicates the message may contain zero or more instances of the series 1 data 

block.

String Block 

Type

uint32

Initiates a String data block containing the 

email address for the user. This value is always 

0.

String Block 

Length

uint32

Number of bytes in the email address String 

data block, including eight bytes for the block 

type and length fields, plus the number of 

bytes in the email address.

Email

string

The email address for the user.

User Login Information Data Block Fields 5.0 - 5.0.2 (Continued)

Byte

0

1

2

3

Bit

0 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31

Host Profile Block Type (91)

Host Profile Block Length

IP Address

Server 

Fi

ngerprints

Hops

Primary/Secondary

Generic List Block Type (31)

Generic List Block Type, continued

Generic List Block Length

Generic List Block Length, continued

Server Fingerprint Data Blocks*