Enriched Scan File Structure

The XML Enricher reads scan files and outputs enriched XML scan files containing all of the original data as well as data identified in the application recognition step.

Each file is stored as a <file> element. When a file is identified as belonging to an application, two attributes are added to the element:

  • versionid

  • flag

For example,

<file name=”winword.exe” size=”12345” versionid=”1111” flag=”M”/>

represents a file named winword.exe identified as belonging to the application with a version ID of 1111. The type of the file is “M”, which means Main file. The possible values for the type field are:

flag “type” tag in enriched XML file
Main M
Associated Y
3rd Party 3
Device Driver A
Unknown N

The versionid attribute refers to the unique ID associated with every version in the SAI library. In an enriched XML scan file, the <applicationdata> section contains a list of applications identified on the machine along with the version IDs.

For example:

<applicationdata>
<application version="6.0 sp1"
           	release="6.0"
               name="Internet Explorer" 
        	desc="Microsoft Internet Explorer" 
        	publisher="Microsoft" 
        	language="English" 
        	os="Windows 98/NT/2K/ME/XP" 
        	type="Internet browser software"
		typeid="122252" 
        	maindir="C:\Program Files\Internet Explorer" 
        	lastUsed="2004-05-05 00:00:00" 
        	versionid="12790" 
        	releaseid="131"
               /> 
        
<application version="6.0 sp1" 
		release="6.0" name="Outlook Express" 
               publisher="Microsoft" 
        	language="English" 
        	os="Windows 98/NT/2K/ME/XP" 
        	type="Desktop communications software" 
		typeid="105020"
        	maindir="C:\Program Files\Outlook Express" 
        	lastUsed="2004-05-05 00:00:00" 
        	versionid="12792" 
        	releaseid="372" 
        	licencedby="12790" 
        	licencedbyrelease="131"
               />
        
</applicationdata>

The example above could be found for a machine with just two applications on it: Microsoft Internet Explorer and Microsoft Outlook Express. The licencedby attribute indicates that Microsoft Outlook Express is licensed by Microsoft Internet Explorer. In other words, while both are licensable applications, this machine requires one license for Microsoft Internet Explorer; with this license, no separate Outlook Express license is required.

Related Topics Link IconRelated Information