Cisco Cisco Firepower Management Center 2000 Entwickleranleitung

Version 5.3

Sourcefire 3D System eStreamer Integration Guide

253

Understanding Discovery & Connection Data Structures

Host Discovery and Connection Data Blocks

Chapter 4

The 

 table describes the fields of the Attribute 

List Item data block.

Attribute Value Data Block

The Attribute Value data block conveys attribute identification numbers and values 

for host attributes. An Attribute Value data block for each attribute applied to the 

host in the event is included in a list in the Full Host Profile data block. The 

Attribute Value data block has a block type of 48 in the series 1 group of blocks.

Attribute List Item Data Block Fields 

Attribute List Item Block 

Type

uint32

Initiates an Attribute List Item 

data block. This value is always 

39.

Attribute List Item Block 

Length

uint32

Number of bytes in the 

Attribute List Item data block, 

including eight bytes for the 

attribute list item block type 

and length, plus the number of 

bytes in the attribute list item 

data that follows.

Attribute ID

uint32

Identification number of the 

affected attribute, if applicable. 

String Block Type

uint32

Initiates a String data block for 

the attribute list item name. 

This value is always 0.

String Block Length

uint32

Number of bytes in the String 

data block for the attribute list 

item name, including eight 

bytes for the string block type 

and length, plus the number of 

bytes in the attribute list item 

name.

Name

string

Attribute list item name.