Cisco Cisco Firepower Management Center 2000 Guía Del Desarrollador
4-84
FireSIGHT eStreamer Integration Guide
Chapter 4 Understanding Discovery & Connection Data Structures
Host Discovery and Connection Data Blocks
User Protocol Data Block
The User Protocol data block is used to contain information about added protocols, the type of the
protocol, and lists of IP address and MAC address ranges for the hosts with the protocol. The User
Protocol data block has a block type of 57 in the series 1 group of blocks.
protocol, and lists of IP address and MAC address ranges for the hosts with the protocol. The User
Protocol data block has a block type of 57 in the series 1 group of blocks.
The following diagram shows the basic structure of a User Protocol data block:
List Block Length
uint32
Number of bytes in the list. This number includes the eight bytes of
the list block type and length fields, plus all encapsulated Attribute
Address data blocks.
the list block type and length fields, plus all encapsulated Attribute
Address data blocks.
This field is followed by zero or more Attribute Address data blocks.
Attribute Address
Block Type
Block Type
uint32
Initiates the first Attribute Address data block. This data block can
be followed by other Attribute Address data blocks up to the limit
defined in the list block length field.
be followed by other Attribute Address data blocks up to the limit
defined in the list block length field.
Attribute Address
Block Length
Block Length
uint32
Number of bytes in the Attribute Address data block, including eight
bytes for the block type and header fields, plus the number of bytes
in the attribute address.
bytes for the block type and header fields, plus the number of bytes
in the attribute address.
Attribute Address
variable
Attribute Address data as documented in
.
Table 4-45
Attribute Definition Data Block Fields (continued)
Field
Data Type
Description
Byte
0
1
2
3
Bit
0 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31
User Protocol Block Type (57)
User Protocol Block Length
IP Address
Ranges
Generic List Block Type (31)
Generic List Block Length
IP Range Specification Data Blocks*
MAC Add.
Ranges
Generic List Block Type (31)
Generic List Block Length
MAC Range Specification Data Blocks...
Protocol Type
Protocol