Cisco Cisco Firepower Management Center 4000 Guide Du Développeur
Version 5.3
Sourcefire 3D System eStreamer Integration Guide
334
Understanding Discovery & Connection Data Structures
Host Discovery and Connection Data Blocks
Chapter 4
Host Client Application Data Block for 5.0+
The Host Client Application data block for 5.0+ describes a client application and
is used within New Client Application events (event type 1000, subtype 7), Client
Application Timeout events (event type 1001, subtype 20), and Client Application
Update events (event type 1001, subtype 32). The Host Client Application data
block for 4.10.2+ has a block type of 122 in the series 1 group of blocks.
Web
Application
Data Blocks
variable
Encapsulated Web Application data blocks up to
the maximum number of bytes in the generic list
block length.
Generic List
Block Type
uint32
Initiates a Generic List data block. This value is
always 31.
Generic List
Block Length
uint32
Number of bytes in the Generic List block and
encapsulated Vulnerability data blocks. This
number includes the eight bytes of the generic
list block header fields, plus the number of bytes
in all of the encapsulated Vulnerability data
blocks.
Vulnerability
Data Blocks
variable
Encapsulated Vulnerability data blocks up to the
maximum number of bytes in the generic list
block length.
Full Host Client Application Data Block 5.0+ Fields (Continued)
F
IELD
D
ATA
T
YPE
D
ESCRIPTION