Cisco Cisco Firepower Management Center 4000 Guía Del Desarrollador

Descargar
Página de 180
 
6-35
FireSIGHT System Database Access Guide
 
Chapter 6      Schema: Discovery Event and Network Map Tables
  rna_host_service
rna_host_sensor Sample Query
The following query returns up to 25 hosts, and the sensor that detected them, from the 
rna_host_sensor
 
table.
SELECT host_id, sensor_address, sensor_name 
FROM rna_host_sensor 
LIMIT 0, 25;
rna_host_service
The 
rna_host_service
 table contains general information about the servers detected on the hosts in your 
managed network through network port and traffic protocol combinations. 
For more information, see the following sections:
  •
  •
  •
rna_host_service Fields
The following table describes the fields you can access in the 
rna_host_service
 table.
Table 6-32
rna_host_service Fields 
Field
Description
confidence
The FireSIGHT System-assigned confidence rating (from 
0
 to 
100
) for the 
identification of the server.
hits
The number of times the server was detected.
host_id
ID number of the host.
last_used_sec
UNIX timestamp of the date and time the system last detected server activity.
port
The port used by the server.
protocol
The traffic protocol: 
TCP
 or 
UDP
.