Cisco Cisco Firepower Management Center 2000 Entwickleranleitung

Seite von 726
Version 5.3
Sourcefire 3D System eStreamer Integration Guide
418
Configuring eStreamer
Configuring the eStreamer Reference Client
Chapter 6
Modifying the Type of Data Requested by a Test Script
The 
SFStreamer.pm
 Perl module defines several request flag variables that you 
can use in the sample scripts to request data. The following table indicates what 
request flag variable to call to set each request flag in an event stream request 
message. If you want to request different data using one of the output modules, 
you can edit the $FLAG settings in the module. 
./ssl_test.pl 
eStreamerServerName
 
-o csv -f 
CSVFile
OutputPlugins/ 
csv.pm
Event stream 
request, 
message type 
2, with bits 2 
and 23 set to 1
Intrusion event data (see 
page 70)
eStreamer transmits type 1 intrusion 
events because bit 2 is set on the 
event stream request.
./ssl_test.pl 
eStreamerServerName
 
-o snmp -f 
SNMPServer
OutputPlugins/ 
snmp.pm
Event stream 
request, 
message type 
2, with bits 2, 
20, and 23 set 
to 1
Intrusion event data (see 
page 70)
eStreamer transmits type 1 intrusion 
events because bit 2 is set on the 
event stream request.
./ssl_test.pl 
eStreamerServerName
 
-o syslog
OutputPlugins/ 
syslog.pm
Event stream 
request, 
message type 
2, with bits 2, 
20, and 23 set 
to 1
Intrusion event data (see 
page 70)
eStreamer transmits type 1 intrusion 
events because bit 2 is set on the 
event stream request.
Default Requests Made by Output Plugins (Continued)
T
HIS
 
SYNTAX
...
C
ALLS
 
PLUGIN
...
A
ND
 
SENDS
...
T
O
 
REQUEST
 
THE
 
FOLLOWING
 
DATA
...