Cisco Cisco Firepower Management Center 2000 Guia Do Programador

Version 5.3

Sourcefire 3D System eStreamer Integration Guide

334

Understanding Discovery & Connection Data Structures

Host Discovery and Connection Data Blocks

Chapter 4

Host Client Application Data Block for 5.0+

The Host Client Application data block for 5.0+ describes a client application and 

is used within New Client Application events (event type 1000, subtype 7), Client 

Application Timeout events (event type 1001, subtype 20), and Client Application 

Update events (event type 1001, subtype 32). The Host Client Application data 

block for 4.10.2+ has a block type of 122 in the series 1 group of blocks.

Web 

Application 

Data Blocks

variable

Encapsulated Web Application data blocks up to 

the maximum number of bytes in the generic list 

block length.

Generic List 

Block Type

uint32

Initiates a Generic List data block. This value is 

always 31.

Generic List 

Block Length

uint32

Number of bytes in the Generic List block and 

encapsulated Vulnerability data blocks. This 

number includes the eight bytes of the generic 

list block header fields, plus the number of bytes 

in all of the encapsulated Vulnerability data 

blocks.

Vulnerability 

Data Blocks

variable

Encapsulated Vulnerability data blocks up to the 

maximum number of bytes in the generic list 

block length.

Full Host Client Application Data Block 5.0+ Fields (Continued)