Cisco Cisco Firepower Management Center 4000 Entwickleranleitung

Seite von 536
 
B-58
FireSIGHT eStreamer Integration Guide
 
Appendix B      Understanding Legacy Data Structures 
  Legacy Discovery Data Structures
The following table describes the fields of the Attribute Address data block.
Legacy Client Application Data Blocks
For more information, see the following section:
  •
User Client Application Data Block for 5.0 - 5.1
The User Client Application data block contains information about the source of the client application 
data, the identification number for the user who added the data, and the lists of IP address range data 
blocks. The User Client Application data block has a block type of 59.
The following diagram shows the basic structure of a User Client Application data block:
Table B-12
Attribute Address Data Block Fields 
Field
Data Type
Description
Attribute 
Address Block 
Type
uint32
Initiates an Attribute Address data block. This value is 
always 38.
Attribute 
Address Block 
Length
uint32
Number of bytes in the Attribute Address data block, 
including eight bytes for the attribute address block 
type and length, plus the number of bytes in the 
attribute address data that follows.
Attribute ID
uint32
Identification number of the affected attribute, if 
applicable. 
IP  Address 
uint8[4]
IP address of the host, if the address was automatically 
assigned, in IP address octets.
Bits
uint32
Contains the significant bits used to calculate the 
netmask if an IP address was automatically assigned.
Byte
0
1
2
3
Bit
0 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31
User Client Application Block Type (59)
User Client Application Block Length
IP Address 
Ranges
Generic List Block Type (31)
Generic List Block Length
IP Range Specification Data Blocks*
Application Protocol ID
Client Application ID