Cisco Cisco Firepower Management Center 2000 Guía Del Desarrollador

Descargar
Página de 536
 
B-167
FireSIGHT eStreamer Integration Guide
 
Appendix B      Understanding Legacy Data Structures
  Legacy Host Data Structures
Host MAC 
Address Data 
Blocks
uint32
Host MAC Address data blocks describing a host MAC address. See 
 for a description of this data 
block.
Host  Last  Seen
uint32
UNIX timestamp that represents the last time the system detected host 
activity.
Host Type
uint32
Indicates the host type. The following values may appear:
  •
0
 - host
  •
1
 - router
  •
2
 - bridge
  •
3
 - NAT device
  •
4
 - LB (load balancer)
Mobile
uint8
True-false flag indicating whether the host is a mobile device.
Jailbroken
uint8
True-false flag indicating whether the host is a mobile device that is 
also jailbroken.
VLAN Presence
uint8
Indicates whether a VLAN is present:
  •
0
 - Yes
  •
1
 - No
VLAN ID
uint16
VLAN identification number that indicates which VLAN the host is a 
member of.
VLAN Type
uint8
Type of packet encapsulated in the VLAN tag.
VLAN Priority
uint8
Priority value included in the VLAN tag.
Generic List 
Block Type
uint32
Initiates a Generic List data block comprising Client Application data 
blocks conveying client application data. This value is always 
31
.
Generic List 
Block Length
uint32
Number of bytes in the Generic List data block, including the list 
header and all encapsulated client application data blocks.
Client 
Application Data 
Blocks
uint32
Client application data blocks describing a client application. See 
 for a description 
of this data block.
String Block 
Type
uint32
Initiates a string data block for the NetBIOS name. This value is set 
to 
0
 to indicate string data.
String Block 
Length
uint32
Indicates the number of bytes in the NetBIOS name data block, 
including eight bytes for the string block type and length, plus the 
number of bytes in the NetBIOS name.
NetBIOS String 
Data
Variable
Contains the NetBIOS name of the host described in the host profile.
Table B-34
Host Profile Data Block 5.1.x Fields (continued)
Field
Data Type
Description