Cisco Cisco Firepower Management Center 2000 Guía Del Desarrollador

Descargar
Página de 536
 
4-93
FireSIGHT eStreamer Integration Guide
 
Chapter 4      Understanding Discovery & Connection Data Structures
  Host Discovery and Connection Data Blocks
Address Specification Data Block
The Address Specification data block is used to contain lists of IP address range specifications and MAC 
address specifications. The Address Specification data block has a block type of 64 in the series 1 group 
of blocks.
The following diagram shows the basic structure of an Address Specification data block:
The following table describes the fields of the Address Specification data block.
Byte
0
1
2
3
Bit
0 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31
Address Specification Data Block Type (64)
Address Specification Block Length
IP Address 
Range 
Blocks
Generic List Block Type (31)
Generic List Block Length
IP Address Range Specification Data Blocks...
MAC 
Address 
Blocks
Generic List Block Type (31)
Generic List Block Length
MAC Address Specification Data Blocks...
Table 4-53
Address Specification Data Block Fields 
Field
Number of 
Bytes
Description
Address 
Specification 
Data Block Type
uint32
Initiates an Address Specification data block. This value is always 
64
.
Address 
Specification 
Block Length
uint32
Total number of bytes in the Address Specification data block, 
including eight bytes for the address specification block type and 
length fields, plus the number of bytes of address specification data 
that follows.
Generic List 
Block Type
uint32
Initiates a Generic List data block. This value is always 
31
.
Generic List 
Block Length
uint32
Number of bytes in the Generic List block and encapsulated data 
blocks. This number includes the eight bytes of the generic list block 
header fields, plus the number of bytes in all of the encapsulated data 
blocks.