Cisco Cisco Firepower Management Center 4000 開発者ガイド
Version 5.3
Sourcefire 3D System eStreamer Integration Guide
520
Understanding Legacy Data Structures
Legacy Discovery Data Structures
Appendix B
The
table describes the fields of the Web
Application data block:
Host Server Data Block for 4.9.1.x
The Host Server data block conveys information about servers identified by the
system, including the server port, the frequency of use, last use, and confidence,
as well as lists of server information blocks and Sub-Server blocks for the host for
the event. Host Server data blocks are contained in messages for new TCP and
UDP servers and changes to TCP and UDP servers. For more information, see
on page 206. Starting in 4.9.1, the data block includes a list of
Web Application data blocks. Note that the Host Server data block has a block
type of 98.
IMPORTANT!
An asterisk(*) next to a data block name in the following diagram
indicates that multiple instances of the data block may occur.
Web Application Data Block Fields
F
IELD
D
ATA
T
YPE
D
ESCRIPTION
Web
Application
Data Block
Type
uint32
Initiates the Web Application data block. This
value is always 97.
Web
Application
Data Block
Length
uint32
Number of bytes in the Web Application data
block. This value should always be sixteen
bytes for the data block type and length fields
and the source type and ID fields.
Web
Application ID
uint32
Indicates the ID of the web application.