Cisco Cisco Firepower Management Center 4000 Guía Del Desarrollador
Version 5.3
Sourcefire 3D System eStreamer Integration Guide
565
Understanding Legacy Data Structures
Legacy Discovery Data Structures
Appendix B
Legacy User Login Data Blocks
See the following sections for more information:
•
User Login Information Data Block for 5.0 - 5.0.2
The User Login Information data block is used in User Information Update
messages and conveys changes in login information for a detected user. For more
information, see
The User Login Information data block has a block type of 121 for version 5.0 -
5.0.2.
The graphic below shows the format of the User Login Information data block:
The graphic below shows the format of the User Login Information data block:
String Block
Length
uint32
Number of bytes in the String data block for the
vulnerability name, including eight bytes for the
string block type and length, plus the number of
bytes in the vulnerability name.
Vulnerability
Name
string
Vulnerability name.
User Vulnerability Data Block Fields (Continued)
F
IELD
D
ATA
T
YPE
D
ESCRIPTION
Byte
0
1
2
3
Bit
0 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31
User Login Information Block Type (121)
User Login Information Block Length
Timestamp
IP Address
Us
er
Name
String Block Type (0)
String Block Length
User Name...
User ID
Application ID