Cisco Cisco Firepower Management Center 2000 Guía Del Desarrollador
B-167
FireSIGHT eStreamer Integration Guide
Appendix B Understanding Legacy Data Structures
Legacy Host Data Structures
Host MAC
Address Data
Blocks
Address Data
Blocks
uint32
Host MAC Address data blocks describing a host MAC address. See
for a description of this data
block.
Host Last Seen
uint32
UNIX timestamp that represents the last time the system detected host
activity.
activity.
Host Type
uint32
Indicates the host type. The following values may appear:
•
0
- host
•
1
- router
•
2
- bridge
•
3
- NAT device
•
4
- LB (load balancer)
Mobile
uint8
True-false flag indicating whether the host is a mobile device.
Jailbroken
uint8
True-false flag indicating whether the host is a mobile device that is
also jailbroken.
also jailbroken.
VLAN Presence
uint8
Indicates whether a VLAN is present:
•
0
- Yes
•
1
- No
VLAN ID
uint16
VLAN identification number that indicates which VLAN the host is a
member of.
member of.
VLAN Type
uint8
Type of packet encapsulated in the VLAN tag.
VLAN Priority
uint8
Priority value included in the VLAN tag.
Generic List
Block Type
Block Type
uint32
Initiates a Generic List data block comprising Client Application data
blocks conveying client application data. This value is always
blocks conveying client application data. This value is always
31
.
Generic List
Block Length
Block Length
uint32
Number of bytes in the Generic List data block, including the list
header and all encapsulated client application data blocks.
header and all encapsulated client application data blocks.
Client
Application Data
Blocks
Application Data
Blocks
uint32
Client application data blocks describing a client application. See
for a description
of this data block.
String Block
Type
Type
uint32
Initiates a string data block for the NetBIOS name. This value is set
to
to
0
to indicate string data.
String Block
Length
Length
uint32
Indicates the number of bytes in the NetBIOS name data block,
including eight bytes for the string block type and length, plus the
number of bytes in the NetBIOS name.
including eight bytes for the string block type and length, plus the
number of bytes in the NetBIOS name.
NetBIOS String
Data
Data
Variable
Contains the NetBIOS name of the host described in the host profile.
Table B-34
Host Profile Data Block 5.1.x Fields (continued)
Field
Data Type
Description