Cisco Cisco Firepower Management Center 2000 Guía Del Desarrollador
Version 5.3
Sourcefire 3D System eStreamer Integration Guide
240
Understanding Discovery & Connection Data Structures
Host Discovery and Connection Data Blocks
Chapter 4
The
table describes the fields of the List data block.
Generic List Block
The Generic List data block is used to encapsulate a list of series 1 data blocks.
For example, when client application information is transmitted within a Host
Profile data block, a list of Client Application data blocks are encapsulated by the
Generic List data block. The Generic List data block has a block type of 31 in the
series 1 group of blocks.
The following diagram shows the basic structure of a Generic List data block:
The following diagram shows the basic structure of a Generic List data block:
List Data Block Fields
F
IELD
D
ATA
T
YPE
D
ESCRIPTION
List Block
Type
uint32
Initiates a List data block. This value is always 11.
List Block
Length
uint32
Number of bytes in the list block and
encapsulated data. For example, if there were
three sub-server data blocks included in the list,
the value here would include the number of bytes
in the sub-server blocks, plus eight bytes for the
list block header.
Encapsulated
Data Blocks
variable
Encapsulated data blocks up to the maximum
number of bytes in the list block length.
Byte
0
1
2
3
Bit
0 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31
Generic List Block Type (31)
Generic List Block Length
Encapsulated Data Blocks...