Cisco Cisco Firepower Management Center 2000 Guia Do Programador
Version 5.3
Sourcefire 3D System eStreamer Integration Guide
538
Understanding Legacy Data Structures
Legacy Discovery Data Structures
Appendix B
•
Host Client Application Data Block for 3.5 - 4.9.0.x
The Client Application data block for 3.5 - 4.9.0.x describes a client application and
is used within legacy New Client Application events (event type 1001, subtype 7)
and Client Application Timeout events (event type 1001, subtype 20). It has a
block type of 42.
The following diagram shows the basic structure of a Client Application data
The following diagram shows the basic structure of a Client Application data
block:
The
table describes the fields of
the Client Application data block.
Byte
0
1
2
3
Bit
0 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31
Client Application Block Type (42)
Client Application Block Length
Hits
Last Used
Type ID
ID
Ve
rs
io
n
String Block Type (0)
String Block Length
Version...
Client Application Data Block 3.5 - 4.9.0.x Fields
F
IELD
D
ATA
T
YPE
D
ESCRIPTION
Client
Application
Block Type
uint32
Initiates a Host Client Application data block. This
value is always 42.
Client
Application
Block Length
uint32
Number of bytes in the Client Application data
block, including eight bytes for the client
application block type and length, plus the
number of bytes in the client application data that
follows.