Cisco Cisco Firepower Management Center 4000 Guía Del Desarrollador
Version 5.3
Sourcefire 3D System eStreamer Integration Guide
601
Understanding Legacy Data Structures
Legacy Connection Data Structures
Appendix B
Client
Application ID
uint32
The internal identification number of the
detected client application, if applicable.
Web
Application ID
uint32
The internal identification number of the
detected web application, if applicable.
String Block
Type
uint32
Initiates a String data block for the client
application URL. This value is always 0.
String Block
Length
uint32
Number of bytes in the client application URL
String data block, including eight bytes for the
string block type and length fields, plus the
number of bytes in the client application URL
string.
Client
Application
URL
string
URL the client application accessed, if
applicable
(/files/index.html, for example).
String Block
Type
uint32
Initiates a String data block for the host
NetBIOS name. This value is always 0.
String Block
Length
uint32
Number of bytes in the String data block,
including eight bytes for the string block type
and length fields, plus the number of bytes in
the NetBIOS name string.
NetBIOS Name
string
Host NetBIOS name string.
String Block
Type
uint32
Initiates a String data block for the client
application version. This value is always 0.
String Block
Length
uint32
Number of bytes in the String data block for the
client application version, including eight bytes
for the string block type and length, plus the
number of bytes in the version.
Client
Application
Version
string
Client application version.
Monitor Rule 1
uint32
The ID of the first monitor rule associated with
the connection event.
Monitor Rule 2
uint32
The ID of the second monitor rule associated
with the connection event.
Connection Statistics Data Block 5.1 Fields (Continued)
F
IELD
D
ATA
T
YPE
D
ESCRIPTION