Cisco Cisco Firepower Management Center 2000 Guía Del Desarrollador
6-9
FireSIGHT eStreamer Integration Guide
Chapter 6 Configuring eStreamer
Configuring the eStreamer Reference Client
Understanding the eStreamer Perl Reference Client
You can download the
eStreamerSDK.zip
package, which contains the eStreamer Perl reference client,
from the
. The following files are included in the
eStreamerSDK.zip
package:
•
SF_CUSTOM_ALERT.MIB
This MIB file is used by the
snmp.pm
file to set up traps for SNMP.
•
SFRecords.pm
This Perl module contains definitions of discovery message record blocks.
•
SFStreamer.pm
This Perl module contains the functions called by the Perl clients.
•
SFPkcs12.pm
This Perl module parses the client certificate and allows the client to connect to the eStreamer server.
•
SFRNABlocks.pm
This Perl module contains definitions of discovery data blocks.
•
ssl_test.pl
You can use this Perl script to test an intrusion event request over an SSL connection.
•
OutputPlugins/csv.pm
This Perl module prints intrusion events to a comma-separated value (CSV) format.
•
OutputPlugins/print.pm
This Perl module prints events to a human-readable format.
•
OutputPlugins/snmp.pm
This Perl module sends events to the specified SNMP server.
•
OutputPlugins/pcap.pm
This Perl module stores packet captures as a pcap file.
•
OutputPlugins/syslog.pm
This Perl module sends events to the local syslog server.
Configuring Communications for the eStreamer Reference Client
The reference client uses the Secure Sockets Layer (SSL) for data communication. You must install
OpenSSL on the computer you plan to use as a client and configure it appropriately for your
environment.
OpenSSL on the computer you plan to use as a client and configure it appropriately for your
environment.
Note
For initial installations on Linux operating systems, you must install the
libssl-dev
component as part
of this download.
To set up SSL on your client:
Step 1
Download OpenSSL from
Step 2
Unpack the source to
/usr/local/src
.
Step 3
Configure the source by running the Configure script.