Cisco Cisco Firepower Management Center 4000 Guía Del Desarrollador
Version 5.3
Sourcefire 3D System eStreamer Integration Guide
585
Understanding Legacy Data Structures
Legacy Connection Data Structures
Appendix B
Connection Statistics Data Block 4.10.2.x
The Connection Statistics data block is used in Connection Data messages.
Changes to the Connection data block between 4.10.1 and 4.10.2 include the
addition of NetFlow fields. The Connection Statistics data block for 4.10.2.x has a
block type of 125.
For more information on the Connection Statistics Data message, see
For more information on the Connection Statistics Data message, see
Client
Application
Version
string
Version of the client application (5.0, 5.5, and so
on).
String Block
Type
uint32
Initiates a string data block for the client
application URL. This value is always 0.
String Block
Length
uint32
Number of bytes in the client application URL
String data block, including eight bytes for the
string block type and length fields, plus the
number of bytes in the client application URL
string.
Client
Application
URL
string
URL the client application accessed, if applicable
(/files/index.html, for example).
String Block
Type
uint32
Initiates a string data block for the domain name.
This value is always 0.
String Block
Length
uint32
Number of bytes in the domain name String data
block, including eight bytes for the string block
type and length fields, plus the number of bytes
in the domain name string.
Domain
Name
string
The domain name for the initiating host, if
applicable.
Payload Type
uint32
Indicates the type of the payload data.
Payload ID
uint32
Indicates the ID of the payload.
Connection Statistics Data Block 4.9.1 - 4.10.1 Fields (Continued)
F
IELD
D
ATA
T
YPE
D
ESCRIPTION