Cisco Cisco Firepower Management Center 2000 Entwickleranleitung

Seite von 536
 
4-71
FireSIGHT eStreamer Integration Guide
 
Chapter 4      Understanding Discovery & Connection Data Structures
  Host Discovery and Connection Data Blocks
VLAN Data Block
The VLAN data block contains VLAN tag information for a host. The VLAN data block has a block type 
of 14 in the series 1 group of blocks.The following diagram shows the format of the VLAN data block:
The following table describes the fields of the VLAN data block.
List Block Type
uint32
Initiates a list that contains zero or more VDB vulnerability ID 
numbers encapsulated in Integer data blocks.
List Block Length
uint32
Number of bytes in the vulnerability ID list, including eight bytes 
for the list block type and length fields, plus the number of bytes in 
the encapsulated Integer data blocks.
(Vulnerability ID) 
Integer Data Blocks
variable
Contains zero or more Integer data blocks containing vulnerability 
identification numbers. See 
for the data fields that appear in an Integer data block.
Table 4-35
Vulnerability Reference Data Block Fields (continued)
Field
Data Type
Description
Byte
0
1
2
3
Bit
0 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31
VLAN Block Type (14)
VLAN Block Length
VLAN ID
VLAN Type
VLAN Priority
Table 4-36
VLAN Data Block Fields 
Field
Data Type
Description
VLAN Block Type
uint32
Initiates a VLAN data block. This value is always 
14
.
VLAN Block Length uint32
Number of bytes in the VLAN data block. This value is always 
12
.
VLAN ID
uint16
Contains the VLAN identification number that indicates which 
VLAN the host is a member of.
VLAN Type
uint8
Type of packet encapsulated in the VLAN tag.
  •
0
 - Ethernet 
  •
1
 - Token Ring
VLAN Priority
uint8
Priority value included in the VLAN tag.