Cisco Cisco Firepower Management Center 4000 Guía Del Desarrollador
Version 5.3
Sourcefire 3D System eStreamer Integration Guide
283
Understanding Discovery & Connection Data Structures
Host Discovery and Connection Data Blocks
Chapter 4
User Hosts Data Block 4.7+
page 217 to contain information about host ranges and user and source identity
from a user host input event. The User Hosts data block has a block type of 78 in
the series 1 group of blocks.
The following diagram shows the basic structure of a User Hosts data block:
The following diagram shows the basic structure of a User Hosts data block:
The
table describes the fields of the User Hosts
data block.
Byte
0
1
2
3
Bit
0 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31
User Hosts Block Type (78)
User Hosts Block Length
IP
Ranges
Generic List Block Type (31)
Generic List Block Length
IP Range Specification Data Blocks*
MA
C
Ranges
Generic List Block Type (31)
Generic List Block Length
MAC Range Specification Data Blocks...
Source ID
Source Type
User Hosts Data Block Fields
F
IELD
N
UMBER
OF
B
YTES
D
ESCRIPTION
User Hosts
Block Type
uint32
Initiates a User Hosts data block. This value is
always 78.
User Hosts
Block Length
uint32
Total number of bytes in the User Hosts data
block, including eight bytes for the user hosts
block type and length fields, plus the number of
bytes of user hosts data that follows.