Cisco Cisco Firepower Management Center 2000 Guía Del Desarrollador
Version 5.3
Sourcefire 3D System eStreamer Integration Guide
384
Understanding Discovery & Connection Data Structures
Discovery and Connection Event Series 2 Data Blocks
Chapter 4
The
Access Control Rule Reason Data Block Fields
table describes the fields in
the Access Control Rule Reason data block.
Access Control Rule Reason Data Block Fields
F
IELD
D
ATA
T
YPE
D
ESCRIPTION
Access
Control Rule
Reason
Block Type
uint32
Initiates an Access Control Rule Reason
block. This value is always 21.
Access
Control Rule
Reason
Block Length
uint32
Total number of bytes in the Access Control
Rule Reason block, including eight bytes for
the Access Control Rule Reason block type
and length fields, plus the number of bytes of
data that follows.
Access
Control Rule
Reason
uint16
The reason the Access Control rule logged
the connection.
String Block
Type
uint32
Initiates a String data block containing the
descriptive name associated with the access
control rule reason. This value is always 0.
String Block
Length
uint32
The number of bytes included in the name
String data block, including eight bytes for the
block type and header fields plus the number
of bytes in the Description field.
Description
string
Description of the Access Control rule
reason.