Cisco Cisco Firepower Management Center 2000 Guia Do Programador

Página de 536
 
4-73
FireSIGHT eStreamer Integration Guide
 
Chapter 4      Understanding Discovery & Connection Data Structures
  Host Discovery and Connection Data Blocks
String Information Data Block
The String Information data block contains string data. For example, the String Information data block 
is used to convey the Common Vulnerabilities and Exposures (CVE) identification string within a Scan 
Vulnerability data block. The String Information data block has a block type of 35 in the series 1 group 
of blocks.
The following diagram shows the format of the String Information data block:
The following table describes the fields of the String Information data block.
Attribute Address Data Block 5.2+
The Attribute Address data block contains an attribute list item and is used within an Attribute Definition 
data block. It has a block type of 146 in the series 1 group of blocks.
The following diagram shows the basic structure of an Attribute Address data block:
Byte
0
1
2
3
Bit
0 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31
String Information Block Type (35)
String Information Block Length
CVE ID
String Block Type (0)
String Block Length
Value...
Table 4-38
String Information Data Block Fields 
Field
Data Type
Description
String Information 
Block Type
uint32
Initiates a String Information data block. This value is always 
35
.
String Information 
Block Length
uint32
Combined length of the String Information data block header and 
String Information data.
String Block Type
uint32
Initiates a string data block for the value.
String Block Length
uint32
Number of bytes in the string data block for the value, including 
eight bytes for the string block type and length, plus the number 
of bytes in the value.
Value
string
The value of the Common Vulnerabilities and Exposures (CVE) 
identification number for the vulnerability data block where the 
String Information data block is used.