Cisco Cisco Firepower Management Center 2000 Guía Del Desarrollador
4-16
FireSIGHT eStreamer Integration Guide
Chapter 4 Understanding Discovery & Connection Data Structures
Metadata for Discovery Events
Source Application Record
The eStreamer service transmits metadata containing information about the source application for a host
discovery event within a Source Application record, the format of which is shown below. (Source
application information is sent when one of the metadata flags—bits 1, 14, 15, or 20 in the Request Flags
field of a request message—is set. See
discovery event within a Source Application record, the format of which is shown below. (Source
application information is sent when one of the metadata flags—bits 1, 14, 15, or 20 in the Request Flags
field of a request message—is set. See
.) Note that the Record Type field, which
appears after the Message Length field, has a value of
91
, indicating a Source Application record.
The following table describes the fields in the Source Application record.
Source Detector Record
The eStreamer service transmits metadata containing information about the source application for a host
discovery event within a Source Type record, the format of which is shown below. (Source type
information is sent when one of the metadata flags—bits 1, 14, 15, or 20 in the Request Flags field of a
request message—is set. See
discovery event within a Source Type record, the format of which is shown below. (Source type
information is sent when one of the metadata flags—bits 1, 14, 15, or 20 in the Request Flags field of a
request message—is set. See
.) Note that the Record Type field, which appears
after the Message Length field, has a value of
96
, indicating a Source Detector record.
Byte
0
1
2
3
Bit
0 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31
Header Version (1)
Message Type (4)
Message Length
Record Type (91)
Record Length
Source Application ID
Name Length
Name...
Table 4-11
Source Application Record Fields
Field
Data Type
Description
Source Application ID
uint32
The ID number for the source application.
Name Length
uint32
The number of bytes included in the source application name.
Name
string
The name of the source application.