Cisco Cisco Firepower Management Center 4000 Guía Del Desarrollador

Descargar
Página de 536
 
4-69
FireSIGHT eStreamer Integration Guide
 
Chapter 4      Understanding Discovery & Connection Data Structures
  Host Discovery and Connection Data Blocks
Integer (INT32) Data Block
The Integer (INT32) data block is used in List data blocks to convey 32-bit integer data, for example, in 
the Vulnerability Reference data block where it is used to transmit a list of vulnerability identification 
numbers.
The Integer data block has a block type of 7 in the series 1 group of blocks.
The following diagram shows the format of the integer data block:
The following table describes the fields of the Integer data block:
Vulnerability Reference Data Block
The Vulnerability Reference data block describes the list of vulnerabilities to which a host is subject, 
including the affected port, protocol, server, and list of related vulnerabilities. The Vulnerability 
Reference data block has a block type of 8 in the series 1 group of blocks.
Note
An asterisk (*) next to a series 1 data block name in the following diagram indicates the message may 
contain zero or more instances of the block.
The following diagram shows the format of the Vulnerability Reference data block:
Byte
0
1
2
3
Bit
0 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31
Integer Block Type (7)
Integer Block Length
Integer
Table 4-34
Integer Data Block Fields 
Field
Data Type
Description
Integer Block Type
uint32
Initiates an Integer data block. The value is always 
7
.
Integer Block Length uint32
Number of bytes in the Integer data block. This value is always 
12
Integer
uint32
Contains the integer value. 
Byte
0
1
2
3
Bit
0 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31
Vulnerability Reference Block Type (8)
Vulnerability Reference Block Length