Cisco Cisco Firepower Management Center 2000 Entwickleranleitung

Seite von 726
Version 5.3
Sourcefire 3D System eStreamer Integration Guide
266
Understanding Discovery & Connection Data Structures
Host Discovery and Connection Data Blocks
Chapter 4
User Client Application Data Block for 5.1.1+
The User Client Application data block contains information about the source of 
the client application data, the identification number for the user who added the 
data, and the lists of IP address range data blocks. The payload ID, which was 
added in Version 5.3, specifies the application instance associated with the 
record. The User Client Application data block has a block type of 138 in the series 
1 group of blocks. It replaces block type 59.
Generic List 
Block Length
uint32
Number of bytes in the Generic List data block, 
including the list header and all encapsulated IP 
Range Specification data blocks.
IP Range 
Specification 
Data Blocks *
variable
IP Range Specification data blocks containing 
information about the IP address ranges for the 
user input. See 
 on page 270 for a description of this data 
block.
Generic List 
Block Type
uint32
Initiates a Generic List data block comprising 
MAC Range Specification data blocks conveying 
MAC address range data. This value is always 31.
Generic List 
Block Length
uint32
Number of bytes in the Generic List data block, 
including the list header and all encapsulated 
MAC Range Specification data blocks.
MAC Range 
Specification 
Data Blocks *
variable
MAC Range Specification data blocks containing 
information about the MAC address ranges for 
the user input. See 
 on page 274 for a description of this 
data block.
Protocol Type
uint8
Indicates the type of the protocol. The protocol 
can be either 
0
, for a network layer protocol such 
as IP, or 
1
 for a transport layer protocol such as 
TCP or UDP.
Protocol
uint16
Indicates the protocol for the data contained in 
the data block.
User Protocol Data Block Fields (Continued)
F
IELD
N
UMBER
 
OF
 B
YTES
D
ESCRIPTION