Cisco Cisco Firepower Management Center 2000 Entwickleranleitung
Version 5.3
Sourcefire 3D System eStreamer Integration Guide
215
Understanding Discovery & Connection Data Structures
Metadata for Discovery Events
Chapter 4
differs depending on the system version. For information on policy control
message data block format for the current version, see
Connection Statistics Data Message
The Connection Statistics event has a standard discovery event header (as
on page 198) followed by a
Connection Statistics data block. The documentation of each version of the
Connection Statistics data block includes the system versions that use it. For
information on the connection statistics data block format for version 5.3+, see
IMPORTANT!
The Connection Statistics data block differs depending on which
system version created the message. For information on legacy versions, see the
Connection Statistics data block in
Byte
0
1
2
3
Bit
0 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31
Discovery Event Header
Policy Control Message Data Block
Byte
0
1
2
3
Bit
0 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31
Discovery Event Header
Connection Statistics Data Block