Cisco Cisco Firepower Management Center 2000 Guia Do Programador
Version 5.3
Sourcefire 3D System eStreamer Integration Guide
536
Understanding Legacy Data Structures
Legacy Discovery Data Structures
Appendix B
Attribute Address Data Block for 4.5.x - 5.1.1.x
The Attribute Address data block contains an attribute list item and is used within
an Attribute Definition data block. It has a block type of 38.
The following diagram shows the basic structure of an Attribute Address data
The following diagram shows the basic structure of an Attribute Address data
block:
Server ID
uint32
Indicates the ID of the server identified in the
data block.
String Block
Type
uint32
Initiates a String data block containing the
server vendor’s name. This value is always 0.
String Block
Length
uint32
Number of bytes in the vendor name String
data block, including eight bytes for the block
type and length fields, plus the number of
bytes in the server vendor name.
Server Vendor
Name
string
Name of the server vendor.
String Block
Type
uint32
Initiates a String data block that contains the
server version. This value is always 0.
String Block
Length
uint32
Number of bytes in the server version String
data block, including eight bytes for the block
type and length fields, plus the number of
bytes in the server version.
Server Version
string
Server version.
Last Time
Used
uint32
Indicates when the server information was last
used in traffic.
Source Type
uint32
Indicates the type (Sourcefire, user, application,
or scanner) of the source that supplied the
server information.
Source ID
uint32
Indicates the ID of the source that supplied the
server information.
Server Information Data Block 4.9.1 and Earlier Fields (Continued)
F
IELD
D
ATA
T
YPE
D
ESCRIPTION