Cisco Cisco Firepower Management Center 2000 개발자 가이드

Version 5.3

Sourcefire 3D System eStreamer Integration Guide

575

Understanding Legacy Data Structures

Legacy Discovery Data Structures

Appendix B

Legacy OS Fingerprint Data Blocks

See the following sections for more information:

Operating System Fingerprint Data Block for 4.9.x - 5.0.2

The Operating System Fingerprint data block has a block type of 87. The block 

includes a fingerprint Universally Unique Identifier (UUID), as well as the 

fingerprint type, the fingerprint source type, and the fingerprint source ID. The 

following diagram shows the format of an Operating System Fingerprint data 

block for version 4.9.x to version 5.0.2.

Client 

Application 

Block Type

uint32

Initiates a client application block. This value is 

always 5.

Client 

Application 

Block Length

uint32

Number of bytes in the client application block, 

including eight bytes for the client application 

block type and length fields, plus the number 

of bytes in the client application data that 

follows.

Client 

Application 

Data

variable

Client application data fields describing a client 

application, as documented in 

String Block 

Type

uint32

Initiates a string data block for the NetBIOS 

name. This value is set to 0 to indicate string 

data.

String Block 

Length

uint32

Indicates the number of bytes in the NetBIOS 

name data block, including eight bytes for the 

string block type and length, plus the number 

of bytes in the NetBIOS name.

NetBIOS 

String Data

Variable

Contains the NetBIOS name of the host 

described in the host profile.

Host Profile Data Block for 4.9 - 5.0.2 Fields (Continued)