Cisco Cisco Firepower Management Center 4000 Entwickleranleitung

Seite von 102
 
3-26
FireSIGHT System Host Input API Guide
 
Chapter 3      Using the Host Input Import Tool 
  Example Host Input Import File
Example: Adding a Host
After the file sets the source application name and third-party product map, commands to import data 
follow. The first import function called is the 
AddHost
 function: 
# Add an IP host with no Primary MAC
#
AddHost,1.2.3.4
Note that the IP address for the added host is 
1.2.3.4
 and no primary MAC address is set for the host. 
Example: Adding a Protocol to the Host
The next command in the import file adds the 
ospf
 protocol to the 
1.2.3.4
 host:
# Add the ospf protocol to the host
#
AddProtocol, 1.2.3.4,,ospf,xport
Note that the protocol type for the protocol is 
xport
.
Example: Adding a Server to the Host
The next command in the import file uses the 
AddService
 function to add the 
OpenSSH
 server to the 
1.2.3.4
 host:
# Add a server for the host
#
AddService,1.2.3.4, 22, tcp, ssh, OpenSSH, 4.1
Note that the command sets the port to 
22
, the protocol to 
tcp
, the server type to 
ssh
, the vendor display 
string to 
OpenSSH
, and the version display string to 
4.1
.
Example: Setting the Operating System
The import file next sets the operating system value for the host using the 
SetOS
 command. The 
Asset 
Management App
 map set contains a product map mapping the third-party product name 
Microsoft 
Win2K
 to the Cisco product definition for Microsoft Windows 2000 SP3: