Cisco Cisco Firepower Management Center 4000 Entwickleranleitung

Seite von 102
 
3-30
FireSIGHT System Host Input API Guide
 
Chapter 3      Using the Host Input Import Tool 
  Testing Your Import on the Defense Center
program for determining if a host is up or down. It uses ICMP echo packets. ICMP 
timestamp packets are used to synchronize clocks between hosts.","cve_ids: 
CVE-1999-0524","bugtraq_ids:"
#
#Send the commands above to the host input service for processing
#
ScanFlush
#
# Add a Client App
#
AddClientApp, 1.2.3.4, "BMC Remedy", "Asset Manager", "0.0"
#
# Add a MAC only host
#
AddHost,,01:02:03:04:05:06
Testing Your Import on the Defense Center
You can simulate an import with your import file to make sure it behaves as expected. Because many 
functions allow you to import duplicate data into the network map, you want to avoid running the same 
import multiple times. Running a test import avoids that problem. Additionally, the system discards any 
data in the import file that it cannot interpret, so you want to make sure that the import file will import 
completely. The test reports the results to the screen (or you can redirect them to a file) so you can then 
correct any problems with the file before you run the actual import. 
Note that if you set up the host input reference client on a remote host with access to the Defense Center, 
you can use the 
ssl_host_input_api_test.pl
 script to process an import file from the client. For more 
information on setting up the reference client, see 
.
To test an import file:
Step 1
Copy the import file you created to the 
/usr/local/sf/bin/ 
directory on the Defense Center where you 
want to run the import.
Caution
You must log in using an account with read/write access to this directory to import a file.
Step 2
Log into your Defense Center by 
ssh
, using an account with 
admin
 privileges.
Step 3
At the command line, type 
/usr/local/sf/bin/nmimport.pl -t filename
.
Tip
To redirect the results of the test import to a log file, add
 > logfilename
 to the end of the 
command.
The import test runs, printing messages indicating the results of the import simulation to the screen or 
to the file you specify.