Cisco Cisco Firepower Management Center 2000 Entwickleranleitung

Seite von 536
 
6-9
FireSIGHT eStreamer Integration Guide
 
Chapter 6      Configuring eStreamer
  Configuring the eStreamer Reference Client
Understanding the eStreamer Perl Reference Client
You can download the 
eStreamerSDK.zip
 package, which contains the eStreamer Perl reference client, 
from the 
. The following files are included in the 
eStreamerSDK.zip
 package:
  •
SF_CUSTOM_ALERT.MIB
This MIB file is used by the 
snmp.pm
 file to set up traps for SNMP.
  •
SFRecords.pm
This Perl module contains definitions of discovery message record blocks.
  •
SFStreamer.pm
This Perl module contains the functions called by the Perl clients.
  •
SFPkcs12.pm
This Perl module parses the client certificate and allows the client to connect to the eStreamer server.
  •
SFRNABlocks.pm
This Perl module contains definitions of discovery data blocks.
  •
ssl_test.pl
You can use this Perl script to test an intrusion event request over an SSL connection.
  •
OutputPlugins/csv.pm
This Perl module prints intrusion events to a comma-separated value (CSV) format. 
  •
OutputPlugins/print.pm
This Perl module prints events to a human-readable format. 
  •
OutputPlugins/snmp.pm
This Perl module sends events to the specified SNMP server.
  •
OutputPlugins/pcap.pm
This Perl module stores packet captures as a pcap file.
  •
OutputPlugins/syslog.pm
This Perl module sends events to the local syslog server.
Configuring Communications for the eStreamer Reference Client
The reference client uses the Secure Sockets Layer (SSL) for data communication. You must install 
OpenSSL on the computer you plan to use as a client and configure it appropriately for your 
environment.
Note
For initial installations on Linux operating systems, you must install the 
libssl-dev 
component as part 
of this download.
To set up SSL on your client:
Step 1
Download OpenSSL from 
Step 2
Unpack the source to 
/usr/local/src
.
Step 3
Configure the source by running the Configure script.