Cisco Cisco Firepower Management Center 2000 Guida Dello Sviluppatore

Version 5.3

Sourcefire 3D System eStreamer Integration Guide

325

Understanding Discovery & Connection Data Structures

Host Discovery and Connection Data Blocks

Chapter 4

Generic Scan Results Data Block for 4.10.0+

The Generic Scan Results data block contains scan results and is used in the 

 on page 308. The Generic Scan Results data block has a 

block type of 108 in the series 1 group of blocks.
The following diagram shows the basic structure of a Generic Scan Results data 

block:

Full Sub-Server 

Block Length

uint32

Total number of bytes in each Full Sub-Server 

data block, including the eight bytes in the Full 

Sub-Server block type and length fields, plus 

the number of bytes of data that follows.

Full Sub-Server 

Data Blocks *

uint32

Full Sub-Server data blocks containing sub-

servers for the server. See 

 on page 255 for a description of this data 

block.

Full Server Information Data Block Fields (Continued)

Byte

0

1

2

3

Bit

0 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31

Generic Scan Results Data Block Type (108)

Generic Scan Results Block Length

Port

Protocol

Sca

n Res

ul

t

Sub-Servers

String Block Type (0)

String Block Length

Scan Result Sub-Server String...

Sc

an Res

ul

t

Va

lu

e

String Block Type (0)

String Block Length

Scan Result Value...