Cisco Cisco Firepower Management Center 2000 Guía Del Desarrollador
Version 5.3
Sourcefire 3D System eStreamer Integration Guide
344
Understanding Discovery & Connection Data Structures
Host Discovery and Connection Data Blocks
Chapter 4
host. The Host Profile data block has a block type of 139 in the series 1 group of
blocks. The data block now supports IPv6 addresses, and client application data
blocks have been added.
IMPORTANT!
An asterisk(*) next to a block type field in the following diagram
indicates the message may contain zero or more instances of the series 1 data
block.
Byte
0
1
2
3
Bit
0 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31
Host Profile Block Type (139)
Host Profile Block Length
IP Address
IP Address, continued
IP Address, continued
IP Address, continued
Ser
ver
Fingerprints
Hops
Primary/Secondary
Generic List Block Type (31)
Generic List Block Type, continued
Generic List Block Length
Generic List Block Length, continued
Server Fingerprint Data Blocks*
Client
Fingerprints
Generic List Block Type (31)
Generic List Block Length
Client Fingerprint Data Blocks*
SM
B
Fingerprints
Generic List Block Type (31)
Generic List Block Length
SMB Fingerprint Data Blocks*
DHCP
Fingerprints
Generic List Block Type (31)
Generic List Block Length
DHCP Fingerprint Data Blocks*