Cisco Cisco Firepower Management Center 4000 Entwickleranleitung
B-68
FireSIGHT eStreamer Integration Guide
Appendix B Understanding Legacy Data Structures
Legacy Discovery Data Structures
Legacy User Login Data Blocks
See the following section for more information:
•
User Login Information Data Block for 5.0 - 5.0.2
The User Login Information data block is used in User Information Update messages and conveys
changes in login information for a detected user. For more information, see
changes in login information for a detected user. For more information, see
The User Login Information data block has a block type of 121 for version 5.0 - 5.0.2.
String Block
Length
Length
uint32
Number of bytes in the build String data block, including eight bytes
for the block type and length fields, plus the number of bytes in the
build number.
for the block type and length fields, plus the number of bytes in the
build number.
Build
string
Build number of the Cisco 3D operating system that the third party
operating system string in the user input is mapped to.
operating system string in the user input is mapped to.
String Block
Type
Type
uint32
Initiates a String data block containing the patch number of the Cisco
3D operating system that the third party operating system string is
mapped to. This value is always
3D operating system that the third party operating system string is
mapped to. This value is always
0
.
String Block
Length
Length
uint32
Number of bytes in the patch String data block, including eight bytes
for the block type and length fields, plus the number of bytes in the
patch number.
for the block type and length fields, plus the number of bytes in the
patch number.
Patch
string
Patch number of the Cisco 3D operating system that the third party
operating system string in the user input is mapped to.
operating system string in the user input is mapped to.
String Block
Type
Type
uint32
Initiates a String data block containing the extension number of the
Cisco 3D operating system that the third party operating system
string is mapped. This value is always
Cisco 3D operating system that the third party operating system
string is mapped. This value is always
0
.
String Block
Length
Length
uint32
Number of bytes in the extension String data block, including eight
bytes for the block type and length fields, plus the number of bytes in
the extension number.
bytes for the block type and length fields, plus the number of bytes in
the extension number.
Extension
string
Extension number of the Cisco 3D operating system that the third
party operating system string in the user input is mapped to.
party operating system string in the user input is mapped to.
UUID
uint8 [x16]
Contains the unique identification number for the operating system.
Generic List
Block Type
Block Type
uint32
Initiates a Generic List data block comprising Fix List data blocks
conveying user input data regarding what fixes have been applied to
hosts in the specified IP address ranges. This value is always
conveying user input data regarding what fixes have been applied to
hosts in the specified IP address ranges. This value is always
31
.
Generic List
Block Length
Block Length
uint32
Number of bytes in the Generic List data block, including the list
header and all encapsulated Fix List data blocks.
header and all encapsulated Fix List data blocks.
Fix List Data
Blocks *
Blocks *
variable
Fix List data blocks containing information about fixes applied to the
hosts. See
hosts. See
for a description of this
data block.
Table B-15
User Product Data Block Fields for 4.10.x, 5.0-5.0.x (continued)
Field
Data Type
Description