Cisco Cisco Firepower Management Center 2000 Guía Del Desarrollador
Version 5.3
Sourcefire 3D System eStreamer Integration Guide
292
Understanding Discovery & Connection Data Structures
Host Discovery and Connection Data Blocks
Chapter 4
The following diagram shows the basic structure of a User Protocol List data
block:
The
table describes the fields of the Generic
List data block.
Byte
0
1
2
3
Bit
0 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31
User Protocol List Block Type (83)
User Protocol List Block Length
Source Type
Source ID
Us
er Protocol Blocks
Generic List Block Type (31)
Generic List Block Length
User Protocol Data Blocks...
User Protocol List Data Block Fields
F
IELD
N
UMBER
OF
B
YTES
D
ESCRIPTION
User Protocol
List Block
Type
uint32
Initiates a User Protocol List data block. This
value is always 83.
User Protocol
List Block
Length
uint32
Total number of bytes in the User Protocol List
data block, including eight bytes for the user
protocol list block type and length fields, plus the
number of bytes of user protocol list data that
follows.
Source Type
uint32
Number that maps to the type of data source:
•
•
0
if the protocol data was provided by RNA
•
1
if the protocol data was provided by a user
•
2
if the protocol data was provided by a third-
party scanner
•
3
if the protocol data was provided by a
command line tool such as nmimport.pl or the
Host Input API client