Cisco Cisco Firepower Management Center 2000 Guida Dello Sviluppatore

Version 5.3

Sourcefire 3D System eStreamer Integration Guide

268

Understanding Discovery & Connection Data Structures

Host Discovery and Connection Data Blocks

Chapter 4

User Client Application List Data Block

The User Client Application List data block contains information about the source 

of the client application data, the identification number for the user who added 

the data, and the lists of client application blocks. The User Client Application List 

data block has a block type of 60 in the series 1 group of blocks.

Generic List 

Block Length

uint32

Number of bytes in the Generic List data block, 

including the list header and all encapsulated IP 

Range Specification data blocks.

IP Range 

Specification 

Data Blocks *

variable

IP Range Specification data blocks containing 

information about the IP address ranges for the 

user input. See 

 on page 270 for a description of this data 

block.

Application 

Protocol ID

uint32

The internal identification number for the 

application protocol, if applicable.

Client 

Application ID

uint32

The internal identification number of the detected 

client application, if applicable.

String Block 

Type

uint32

Initiates a String data block that contains the 

client application version. This value is always 0.

String Block 

Length

uint32

Number of bytes in the client application version 

String data block, including the string block type 

and length fields, plus the number of bytes in the 

version.

Version

string

Client application version.

Payload Type

uint32

This field is included for backwards compatibility. 

It is always 

0

.

Web 

Application ID

uint32

The internal identification number for the web 

application, if applicable.

User Client Application Data Block Fields (Continued)