Cisco Cisco Firepower Management Center 2000 Guía Del Desarrollador

Descargar
Página de 536
 
B-166
FireSIGHT eStreamer Integration Guide
 
Appendix B      Understanding Legacy Data Structures 
  Legacy Host Data Structures
Operating 
System 
Fingerprint 
(Mobile Device 
Fingerprint) Data 
Blocks *
variable
Operating System Fingerprint data blocks containing information 
about the operating system on a host identified using a mobile device 
fingerprint. See 
 for a description of this data block.
List Block Type
uint32
Initiates a List data block comprising Server data blocks conveying 
TCP server data. This value is always 
11
.
List Block 
Length
uint32
Number of bytes in the list. This number includes the eight bytes of 
the list block type and length fields, plus all encapsulated Server data 
blocks. 
This field is followed by zero or more Server data blocks.
TCP Server Data 
Blocks
variable
Host server data blocks describing a TCP server (as documented for 
earlier versions of the product).
List Block Type
uint32
Initiates a List data block comprising Server data blocks conveying 
UDP server data. This value is always 
11
.
List Block 
Length
uint32
Number of bytes in the list. This number includes the eight bytes of 
the list block type and length fields, plus all encapsulated Server data 
blocks. 
This field is followed by zero or more Server data blocks.
UDP Server Data 
Blocks
uint32
Host server data blocks describing a UDP server (as documented for 
earlier versions of the product).
List Block Type
uint32
Initiates a List data block comprising Protocol data blocks conveying 
network protocol data. This value is always 
11
.
List Block 
Length
uint32
Number of bytes in the list. This number includes the eight bytes of 
the list block type and length fields, plus all encapsulated Protocol 
data blocks.
This field is followed by zero or more Protocol data blocks.
Network Protocol 
Data Blocks
uint32
Protocol data blocks describing a network protocol. See 
 for a description of this data block.
List Block Type
uint32
Initiates a List data block comprising Protocol data blocks conveying 
transport protocol data. This value is always 
11
.
List Block 
Length
uint32
Number of bytes in the list. This number includes the eight bytes of 
the list block type and length fields, plus all encapsulated Protocol 
data blocks. 
This field is followed by zero or more transport protocol data blocks.
Transport 
Protocol Data 
Blocks
uint32
Protocol data blocks describing a transport protocol. See 
 for a description of this data block.
List Block Type
uint32
Initiates a List data block comprising MAC Address data blocks. This 
value is always 
11
.
List Block 
Length
uint32
Number of bytes in the list, including the list header and all 
encapsulated MAC Address data blocks.
Table B-34
Host Profile Data Block 5.1.x Fields (continued)
Field
Data Type
Description