Cisco Cisco Firepower Management Center 4000 Developer's Guide
Version 5.3
Sourcefire 3D System eStreamer Integration Guide
253
Understanding Discovery & Connection Data Structures
Host Discovery and Connection Data Blocks
Chapter 4
table describes the fields of the Attribute
List Item data block.
Attribute Value Data Block
The Attribute Value data block conveys attribute identification numbers and values
for host attributes. An Attribute Value data block for each attribute applied to the
host in the event is included in a list in the Full Host Profile data block. The
Attribute Value data block has a block type of 48 in the series 1 group of blocks.
Attribute List Item Data Block Fields
F
IELD
D
ATA
T
YPE
D
ESCRIPTION
Attribute List Item Block
Type
uint32
Initiates an Attribute List Item
data block. This value is always
39.
Attribute List Item Block
Length
uint32
Number of bytes in the
Attribute List Item data block,
including eight bytes for the
attribute list item block type
and length, plus the number of
bytes in the attribute list item
data that follows.
Attribute ID
uint32
Identification number of the
affected attribute, if applicable.
String Block Type
uint32
Initiates a String data block for
the attribute list item name.
This value is always 0.
String Block Length
uint32
Number of bytes in the String
data block for the attribute list
item name, including eight
bytes for the string block type
and length, plus the number of
bytes in the attribute list item
name.
Name
string
Attribute list item name.