Cisco Cisco Firepower Management Center 2000 Guia Do Programador

Página de 536
 
4-87
FireSIGHT eStreamer Integration Guide
 
Chapter 4      Understanding Discovery & Connection Data Structures
  Host Discovery and Connection Data Blocks
User Client Application List Data Block
The User Client Application List data block contains information about the source of the client 
application data, the identification number for the user who added the data, and the lists of client 
application blocks. The User Client Application List data block has a block type of 60 in the series 1 
group of blocks.
The following diagram shows the basic structure of a User Client Application List data block:
IP Range Specification 
Data Blocks *
variable
IP Range Specification data blocks containing information 
about the IP address ranges for the user input. See 
 for a description of this 
data block.
Application Protocol ID uint32
The internal identification number for the application protocol, 
if applicable.
Client Application ID
uint32
The internal identification number of the detected client 
application, if applicable.
String Block Type
uint32
Initiates a String data block that contains the client application 
version. This value is always 
0
.
String Block Length
uint32
Number of bytes in the client application version String data 
block, including the string block type and length fields, plus the 
number of bytes in the version.
Version
string
Client application version.
Payload Type
uint32
This field is included for backwards compatibility. It is always 
0
.
Web Application ID
uint32
The internal identification number for the web application, if 
applicable.
Table 4-47
User Client Application Data Block Fields (continued)
Field
Number of 
Bytes
Description
Byte
0
1
2
3
Bit
0 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31
User Client Application Block Type (60)
User Client Application Block Length
Source Type
Source ID
User Client 
App List 
Blocks
Generic List Block Type (31)
Generic List Block Length
User Client Application List Data Blocks...