Cisco Cisco Firepower Management Center 2000 Entwickleranleitung
4-39
FireSIGHT eStreamer Integration Guide
Chapter 4 Understanding Discovery & Connection Data Structures
Metadata for Discovery Events
Each of these events uses the following format:
New Network Protocol Message
A New Network Protocol event message has a standard discovery event header (as documented in
) followed by a two-byte field for the network protocol (using
protocol values described in following table).
New Transport Protocol Message
A New Transport Protocol event message has a standard discovery event header (as documented in
, block type 4 in series 1) and a one-byte field for the transport
protocol number (using values described in following table).
Byte
0
1
2
3
Bit
0 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31
Discovery Event Header
Server Data Block
Byte
0
1
2
3
Bit
0 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31
Discovery Event Header
Network Protocol
Byte
0
1
2
3
Bit
0 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31
Discovery Event Header
Transport Protocol