Cisco Cisco Firepower Management Center 4000 Guía Del Desarrollador
4-45
FireSIGHT eStreamer Integration Guide
Chapter 4 Understanding Discovery & Connection Data Structures
Metadata for Discovery Events
Change NetBIOS Name Message
A Change NetBIOS Name event message has a standard discovery event header (as documented in
) followed by a String Information data block (as documented
in
). The String Information data block is block type 35 in
series 1.
Note
The Change NetBIOS Domain event is not currently generated by the FireSIGHT System.
Update Banner Message
) followed by a Server Banner data block (as documented in
). The server banner data block is block type 37 in series 1.
Byte
0
1
2
3
Bit
0 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31
Discovery Event Header
VLAN Data Block
Byte
0
1
2
3
Bit
0 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31
Discovery Event Header
String Information Data Block