Cisco Cisco Firepower Management Center 2000 Guía Del Desarrollador

Descargar
Página de 536
 
B-101
FireSIGHT eStreamer Integration Guide
 
Appendix B      Understanding Legacy Data Structures
  Legacy Connection Data Structures
Initiator 
Transmitted 
Packets 
uint64
Number of packets transmitted by the initiating host.
Responder 
Transmitted 
Packets 
uint64
Number of packets transmitted by the responding host.
Initiator 
Transmitted Bytes 
uint64
Number of bytes transmitted by the initiating host.
Responder 
Transmitted Bytes 
uint64
Number of bytes transmitted by the responding host.
User  ID
uint32
Internal identification number for the user who last logged into the 
host that generated the traffic.
Application 
Protocol ID
uint32
Application ID of the application protocol.
URL Category
uint32
The internal identification number of the URL category.
URL Reputation
uint32
The internal identification number for the URL reputation.
Client 
Application ID
uint32
The internal identification number of the detected client 
application, if applicable.
Web Application 
ID
uint32
The internal identification number of the detected web 
application, if applicable.
String Block Type  uint32
Initiates a String data block for the client application URL. This 
value is always 
0
.
String Block 
Length
uint32
Number of bytes in the client application URL String data block, 
including eight bytes for the string block type and length fields, 
plus the number of bytes in the client application URL string.
Client 
Application URL
string
URL the client application accessed, if applicable 
 
(/files/index.html, for example).
String Block Type uint32
Initiates a String data block for the host NetBIOS name. This value 
is always 
0
.
String Block 
Length
uint32
Number of bytes in the String data block, including eight bytes for 
the string block type and length fields, plus the number of bytes in 
the NetBIOS name string.
NetBIOS Name
string
Host NetBIOS name string.
String Block Type uint32
Initiates a String data block for the client application version. This 
value is always 
0
.
String Block 
Length
uint32
Number of bytes in the String data block for the client application 
version, including eight bytes for the string block type and length, 
plus the number of bytes in the version.
Client 
Application 
Version
string
Client application version.
Table B-23
Connection Statistics Data Block 5.1.1.x Fields (continued)
Field
Data Type
Description