Cisco Cisco Firepower Management Center 2000 Entwickleranleitung
B-89
FireSIGHT eStreamer Integration Guide
Appendix B Understanding Legacy Data Structures
Legacy Connection Data Structures
Connection Statistics Data Block 5.2.x
The connection statistics data block is used in connection data messages. Changes to the connection data
block between versions 5.1.1 and 5.2 include the addition of new fields to support geolocation. The
connection statistics data block for version 5.2.x has a block type of 144 in the series 1 group of blocks.
It deprecates block type 137,
block between versions 5.1.1 and 5.2 include the addition of new fields to support geolocation. The
connection statistics data block for version 5.2.x has a block type of 144 in the series 1 group of blocks.
It deprecates block type 137,
.
For more information on the Connection Statistics Data message, see
The following diagram shows the format of a Connection Statistics data block for 5.2.x:
::
Byte
0
1
2
3
Bit
0 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31
Connection Data Block Type (144)
Connection Data Block Length
Device ID
Ingress Zone
Ingress Zone, continued
Ingress Zone, continued
Ingress Zone, continued
Egress Zone
Egress Zone, continued
Egress Zone, continued
Egress Zone, continued
Ingress Interface
Ingress Interface, continued
Ingress Interface, continued
Ingress Interface, continued
Egress Interface
Egress Interface, continued
Egress Interface, continued
Egress Interface, continued
Initiator IP Address