Cisco Cisco Firepower Management Center 2000 Guía Del Desarrollador
Version 5.3
Sourcefire 3D System eStreamer Integration Guide
290
Understanding Discovery & Connection Data Structures
Host Discovery and Connection Data Blocks
Chapter 4
The
table describes the fields of the User
Attribute Value data block.
Source ID
Source Type
Attribute ID
Va
lu
e
BLOB Block Type (10)
BLOB Block Length
Value...
User Attribute Value Data Block Fields
F
IELD
N
UMBER
OF
B
YTES
D
ESCRIPTION
User
Attribute
Value Data
Block Type
uint32
Initiates a User Attribute Value data block. This
value is always 82.
User
Attribute
Value Block
Length
uint32
Total number of bytes in the Attribute Value data
block, including eight bytes for the user attribute
value block type and length fields, plus the
number of bytes of user attribute value data that
follows.
Generic List
Block Type
uint32
Initiates a Generic List data block. This value is
always 31.
Generic List
Block Length
uint32
Number of bytes in the Generic List block and
encapsulated data blocks. This number includes
the eight bytes of the generic list block header
fields, plus the number of bytes in all of the
encapsulated data blocks.
IP Address
Range
Specification
Data Blocks
variable
IP Address Range Specification data blocks (each
with a start IP address and end IP address) up to
the maximum number of bytes in the list block
length.
Source ID
uint32
Identification number that maps to the source
that added or updated the attribute data.
Depending on the source type, this may map to
RNA, a user, a scanner, or a third-party
application.