Cisco Cisco Firepower Management Center 4000 Guide Du Développeur

Version 5.3

Sourcefire 3D System eStreamer Integration Guide

335

Understanding Discovery & Connection Data Structures

Host Discovery and Connection Data Blocks

Chapter 4

The following diagram shows the basic structure of a Host Client Application data 

block for 5.0+:

The 

 table describes the fields of the 

Host Client Application data block.

Byte

0

1

2

3

Bit

0 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31

Host Client Application Block Type (122)

Host Client Application Block Length

Hits

Last Used

ID

Ve

rs

io

n

String Block Type (0)

String Block Length

Version...

Generic List Block Type (31)

Generic List Block Length

We

b

Application

Web Application Block Type (123)*

Web Application Block Length

Web Application Data...

Host Client Application Data Block Fields 

Client 

Application 

Block Type

uint32

Initiates a Host Client Application data block. This 

value is always 122.

Client 

Application 

Block Length

uint32

Number of bytes in the Client Application data 

block, including eight bytes for the client 

application block type and length, plus the 

number of bytes in the client application data that 

follows.