Cisco Cisco Firepower Management Center 4000 Guía Del Desarrollador
Version 5.3
Sourcefire 3D System eStreamer Integration Guide
674
Understanding Legacy Data Structures
Legacy Host Data Structures
Appendix B
on page 164. The Full Host Profile data block a block type value of 111.
IMPORTANT!
An asterisk(*) next to a block name in the following diagram
indicates that multiple instances of the data block may occur.
Byte
0
1
2
3
Bit
0 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31
Full Host Profile Data Block (111)
Data Block Length
IP Address
Hops
Generic List Block Type (31)
Generic List Block
Type, continued
Generic List Block Length
OS Der
ived
Fingerprints
Generic List Block
Length, continued
Operating System Fingerprint Block Type (130)*
OS Fingerprint Block
Type (130)*, con’t
Operating System Fingerprint Block Length
OS Fingerprint Block
Length, con’t
Operating System Derived Fingerprint Data...
Generic List Block Type (31)
Generic List Block Length
Ser
ver
Fingerprints
Operating System Fingerprint Block Type (130)*
Operating System Fingerprint Block Length
Operating System Server Fingerprint Data...
Generic List Block Type (31)
Generic List Block Length
Client
Fingerprints
Operating System Fingerprint Block Type (130)*
Operating System Fingerprint Block Length
Operating System Client Fingerprint Data...
Generic List Block Type (31)
Generic List Block Length