Cisco Cisco Firepower Management Center 2000 Guia Do Programador
4-66
FireSIGHT eStreamer Integration Guide
Chapter 4 Understanding Discovery & Connection Data Structures
Host Discovery and Connection Data Blocks
Generic List Block
The Generic List data block is used to encapsulate a list of series 1 data blocks. For example, when client
application information is transmitted within a Host Profile data block, a list of Client Application data
blocks are encapsulated by the Generic List data block. The Generic List data block has a block type of
31 in the series 1 group of blocks.
application information is transmitted within a Host Profile data block, a list of Client Application data
blocks are encapsulated by the Generic List data block. The Generic List data block has a block type of
31 in the series 1 group of blocks.
The following diagram shows the basic structure of a Generic List data block:
The following table describes the fields of the Generic List data block.
Sub-Server Data Block
The Sub-Server data block conveys information about an individual sub-server, which is a server called
by another server on the same host and has associated vulnerabilities. The Sub-Server data block has a
block type of 1 in the series 1 group of blocks.
by another server on the same host and has associated vulnerabilities. The Sub-Server data block has a
block type of 1 in the series 1 group of blocks.
The following diagram shows the format of the Sub-Server data block:
Byte
0
1
2
3
Bit
0 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31
Generic List Block Type (31)
Generic List Block Length
Encapsulated Data Blocks...
Table 4-31
Generic List Data Block Fields
Field
Number of
Bytes
Bytes
Description
Generic List Block Type
uint32
Initiates a Generic List data block. This value is always
31
.
Generic List Block
Length
Length
uint32
Number of bytes in the Generic List block and encapsulated
data blocks. This number includes the eight bytes of the
generic list block header fields, plus the number of bytes in all
of the encapsulated data blocks.
data blocks. This number includes the eight bytes of the
generic list block header fields, plus the number of bytes in all
of the encapsulated data blocks.
Encapsulated Data
Blocks
Blocks
variable
Encapsulated data blocks up to the maximum number of bytes
in the list block length.
in the list block length.
Byte
0
1
2
3
Bit
0 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31
Sub-Server Block Type (1)
Sub-Server Block Length