Cisco Cisco Firepower Management Center 4000 Entwickleranleitung

Version 5.3

Sourcefire 3D System eStreamer Integration Guide

378

Understanding Discovery & Connection Data Structures

User Data Blocks

Chapter 4

User Login Information Data Block 5.1+

The User Login Information data block is used in User Information Update 

messages and conveys changes in login information for a detected user. For more 

information, see 

 on page 223.

The User Login Information data block has a block type of 73 for version 4.7 - 

4.10.x, a block type of 121 in the series 1 group of blocks for version 5.0 - 5.0.2, 

and a block type of 127 in the series 1 group of blocks for version 5.1+. 

Last Name

string

The last name for the user. 

String Block 

Type

uint32

Initiates a String data block containing the 

email address for the user. This value is always 

0.

String Block 

Length

uint32

Number of bytes in the email address String 

data block, including eight bytes for the block 

type and length fields, plus the number of 

bytes in the email address.

Email

string

The email address for the user. 

String Block 

Type

uint32

Initiates a String data block containing the 

department for the user. This value is always 0.

String Block 

Length

uint32

Number of bytes in the department String data 

block, including eight bytes for the block type 

and length fields, plus the number of bytes in 

the department.

Department

string

The department for the user. 

String Block 

Type

uint32

Initiates a String data block containing the 

phone number for the user. This value is always 

0.

String Block 

Length

uint32

Number of bytes in the phone number String 

data block, including eight bytes for the block 

type and length fields, plus the number of 

bytes in the phone number.

Phone

string

The phone number for the user. 

User Information Data Block Fields (Continued)