Cisco Cisco Firepower Management Center 2000 Entwickleranleitung

Seite von 726
Version 5.3
Sourcefire 3D System eStreamer Integration Guide
291
Understanding Discovery & Connection Data Structures
Host Discovery and Connection Data Blocks
Chapter 4
User Protocol List Data Block 4.7+
The User Protocol List data block is used to contain information about the source 
of the protocol data, the identification number for the user who added the data, 
and the lists of user protocol data blocks. The User Protocol List data block has a 
block type of 83 in the series 1 group of blocks. For more information on User 
Protocol data blocks, see 
The User Protocol List data block is used in user protocol messages, as 
documented in 
Source Type
uint32
Number that maps to the type of data source: 
0
 if the user attribute value was provided by 
RNA 
1
 if the user attribute value was provided by a 
user
2
 if the user attribute value was provided by a 
third-party scanner
3
 if the user attribute value was provided by a 
command line tool such as nmimport.pl or the 
Host Input API client
Attribute ID
uint32
Identification number of the updated attribute. 
BLOB Block 
Type
uint32
Initiates a BLOB data block. This value is always 
10.
BLOB Block 
Length
uint32
Number of bytes in the BLOB data block, 
including eight bytes for the BLOB block type and 
length fields, plus the length of the binary data 
that follows.
Value
variable
Contains the user attribute value, in binary 
format. 
User Attribute Value Data Block Fields (Continued)
F
IELD
N
UMBER
 
OF
 B
YTES
D
ESCRIPTION