Cisco Cisco Firepower Management Center 2000 Entwickleranleitung

Version 5.3

Sourcefire 3D System eStreamer Integration Guide

585

Understanding Legacy Data Structures

Legacy Connection Data Structures

Appendix B

Connection Statistics Data Block 4.10.2.x

The Connection Statistics data block is used in Connection Data messages. 

Changes to the Connection data block between 4.10.1 and 4.10.2 include the 

addition of NetFlow fields. The Connection Statistics data block for 4.10.2.x has a 

block type of 125.
For more information on the Connection Statistics Data message, see 

Client 

Application 

Version

string

Version of the client application (5.0, 5.5, and so 

on).

String Block 

Type 

uint32

Initiates a string data block for the client 

application URL. This value is always 0.

String Block 

Length

uint32

Number of bytes in the client application URL 

String data block, including eight bytes for the 

string block type and length fields, plus the 

number of bytes in the client application URL 

string.

Client 

Application 

URL

string

URL the client application accessed, if applicable  

(/files/index.html, for example).

String Block 

Type 

uint32

Initiates a string data block for the domain name. 

This value is always 0.

String Block 

Length

uint32

Number of bytes in the domain name String data 

block, including eight bytes for the string block 

type and length fields, plus the number of bytes 

in the domain name string.

Domain 

Name

string

The domain name for the initiating host, if 

applicable.

Payload Type

uint32

Indicates the type of the payload data.

Payload ID

uint32

Indicates the ID of the payload.

Connection Statistics Data Block 4.9.1 - 4.10.1 Fields (Continued)