Cisco Cisco Firepower Management Center 4000 개발자 가이드

Version 5.3

Sourcefire 3D System eStreamer Integration Guide

550

Understanding Legacy Data Structures

Legacy Discovery Data Structures

Appendix B

Scan Type

uint32

Indicates how the results were added to the 

system.

IP Address

uint32

IP address of the host affected by the 

vulnerabilities in the result, in IP address octets.

Port

uint16

Port used by the sub-server affected by the 

vulnerabilities in the results. 

Protocol

uint16

IANA protocol number. For example:
•

1

 — ICMP

4

 — IP

6

 — TCP

17

 — UDP

and so on.

Flag

uint16

Reserved

List Block 

Type

uint32

Initiates a List data block comprising Scan 

Vulnerability data blocks conveying transport 

Scan Vulnerability data. This value is always 11.

List Block 

Length

uint32

Number of bytes in the list. This number includes 

the eight bytes of the list block type and length 

fields, plus all encapsulated Scan Vulnerability 

data blocks.

This field is followed by zero or more Scan 

Vulnerability data blocks.

Scan 

Vulnerability 

Block Type

uint32

Initiates a Scan Vulnerability data block describing 

a vulnerability detected during a scan. This value 

is always 109.

Scan 

Vulnerability 

Block Length

uint32

Number of bytes in the Scan Vulnerability data 

block, including eight bytes for the scan 

vulnerability block type and length fields, plus the 

number of bytes in the scan vulnerability data 

that follows.

Vulnerability 

Data

string

Information relating to each vulnerability.

Scan Result Data Block Fields (Continued)