Cisco Cisco Firepower Management Center 2000 Entwickleranleitung

Seite von 536
 
4-98
FireSIGHT eStreamer Integration Guide
 
Chapter 4      Understanding Discovery & Connection Data Structures 
  Host Discovery and Connection Data Blocks
User Server List Data Block
The User Server List data block contains a list of server data blocks from a user input event. The User 
Server List data block has a block type of 77 in the series 1 group of blocks. 
The following diagram shows the basic structure of a User Server List data block:
The following table describes the fields of the User Server List data block.
Byte
0
1
2
3
Bit
0 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31
User Server List Data Block Type (77)
User Server List Block Length
Source Type
Source ID
User
Server 
Blocks
Generic List Block Type (31)
Generic List Block Length
User Server Data Block*
Table 4-57
User Server List Data Block Fields 
Field
Number of 
Bytes
Description
User Server List 
Data Block Type
uint32
Initiates a User Server List data block. This value is always 
77
.
User Server List 
Block Length
uint32
Total number of bytes in the User Server List data block, including 
eight bytes for the user server list block type and length fields, plus 
the number of bytes of user server list data that follows.
Source Type
uint32
Number that maps to the type of data source: 
  •
0
 if the server data was detected by RNA 
  •
1
 if the server data was provided by a user
  •
2
 if the server data was detected by a third-party scanner
  •
3
 if the server data was provided by a command line tool such 
as 
nmimport.pl
 or the Host Input API client
Source ID
uint32
Identification number that maps to the source of the server data. 
Depending on the source type, this may map to RNA, a user, a 
scanner, or a third-party application.
Generic List Block 
Type
uint32
Initiates a Generic List data block. This value is always 
31
.