Cisco Cisco Firepower Management Center 2000 开发者指南
4-64
FireSIGHT eStreamer Integration Guide
Chapter 4 Understanding Discovery & Connection Data Structures
Host Discovery and Connection Data Blocks
Note
Strings returned in this data block are not always null-terminated (that is, they are not always terminated
with a 0).
with a 0).
The following diagram shows the format of the String data block:
The following table describes the fields of the String data block.
BLOB Data Block
The BLOB data block can be used to convey binary data. For example, it is used to hold the server banner
captured by the system. The BLOB data block has a block type of 10 in the series 1 group of blocks.
captured by the system. The BLOB data block has a block type of 10 in the series 1 group of blocks.
The following diagram shows the format of the BLOB data block:
Byte
0
1
2
3
Bit
0 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31
String Block Type (0)
String Block Length
String Data...
Table 4-28
String Data Block Fields
Field
Data Type
Description
String Block Type
uint32
Initiates a String data block. This value is always
0
.
String Block Length
uint32
Combined length of the string data block header and string data.
String Data
string
Contains the string data and may contain a terminating character
(null byte) at the end of the string.
(null byte) at the end of the string.
Byte
0
1
2
3
Bit
0 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31
BLOB Block Type (10)
BLOB Block Length
BLOB Binary Data...