Cisco Cisco Firepower Management Center 2000 Guía Del Desarrollador
4-93
FireSIGHT eStreamer Integration Guide
Chapter 4 Understanding Discovery & Connection Data Structures
Host Discovery and Connection Data Blocks
Address Specification Data Block
The Address Specification data block is used to contain lists of IP address range specifications and MAC
address specifications. The Address Specification data block has a block type of 64 in the series 1 group
of blocks.
address specifications. The Address Specification data block has a block type of 64 in the series 1 group
of blocks.
The following diagram shows the basic structure of an Address Specification data block:
The following table describes the fields of the Address Specification data block.
Byte
0
1
2
3
Bit
0 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31
Address Specification Data Block Type (64)
Address Specification Block Length
IP Address
Range
Blocks
Generic List Block Type (31)
Generic List Block Length
IP Address Range Specification Data Blocks...
MAC
Address
Blocks
Generic List Block Type (31)
Generic List Block Length
MAC Address Specification Data Blocks...
Table 4-53
Address Specification Data Block Fields
Field
Number of
Bytes
Bytes
Description
Address
Specification
Data Block Type
Specification
Data Block Type
uint32
Initiates an Address Specification data block. This value is always
64
.
Address
Specification
Block Length
Specification
Block Length
uint32
Total number of bytes in the Address Specification data block,
including eight bytes for the address specification block type and
length fields, plus the number of bytes of address specification data
that follows.
including eight bytes for the address specification block type and
length fields, plus the number of bytes of address specification data
that follows.
Generic List
Block Type
Block Type
uint32
Initiates a Generic List data block. This value is always
31
.
Generic List
Block Length
Block Length
uint32
Number of bytes in the Generic List block and encapsulated data
blocks. This number includes the eight bytes of the generic list block
header fields, plus the number of bytes in all of the encapsulated data
blocks.
blocks. This number includes the eight bytes of the generic list block
header fields, plus the number of bytes in all of the encapsulated data
blocks.