Cisco Cisco Firepower Management Center 2000 Entwickleranleitung

Seite von 726
Version 5.3
Sourcefire 3D System eStreamer Integration Guide
213
Understanding Discovery & Connection Data Structures
Metadata for Discovery Events
Chapter 4
Host Identified as a Bridge/Router Message
A Host Identified as a Bridge/Router event message has a standard discovery 
event header (as documented in 
followed by a four-byte field for the value that matches the host type:
0 — host
1 — router
2 — bridge
VLAN Tag Information Update Messages
The VLAN Tag Information Update event has a standard discovery event header 
(as documented in 
 on page 198) followed by VLAN 
data block (as documented in 
Change NetBIOS Name Message
A Change NetBIOS Name event message has a standard discovery event header 
(as documented in 
 on page 198) followed by a 
String Information data block (as documented in 
Byte
0
1
2
3
Bit
0 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31
Discovery Event Header
Host Type
Byte
0
1
2
3
Bit
0 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31
Discovery Event Header
VLAN Data Block