Cisco Cisco Firepower Management Center 2000 Guía Del Desarrollador
Version 5.3
Sourcefire 3D System eStreamer Integration Guide
717
Understanding Legacy Data Structures
Legacy Host Data Structures
Appendix B
List Block Type
uint32
Initiates a List data block comprising MAC
Address data blocks. This value is always 11.
List Block
Length
uint32
Number of bytes in the list, including the list
header and all encapsulated MAC Address data
blocks.
Host MAC
Address Data
Blocks
uint32
Host MAC Address data blocks describing a
host MAC address. See
on page 297 for a description of this data
block.
Host Last
Seen
uint32
UNIX timestamp that represents the last time
the system detected host activity.
Host Type
uint32
Indicates the host type. The following values
may appear:
• 0 — host
• 0 — host
• 1 — router
• 2 — bridge
• 3 — NAT device
• 4 — LB (load balancer)
Mobile
uint8
True-false flag indicating whether the host is a
mobile device.
Jailbroken
uint8
True-false flag indicating whether the host is a
mobile device that is also jailbroken.
VLAN
Presence
uint8
Indicates whether a VLAN is present:
• 0 — Yes
• 0 — Yes
• 1 — No
VLAN ID
uint16
VLAN identification number that indicates
which VLAN the host is a member of.
VLAN Type
uint8
Type of packet encapsulated in the VLAN tag.
VLAN Priority
uint8
Priority value included in the VLAN tag.
Generic List
Block Type
uint32
Initiates a Generic List data block comprising
Client Application data blocks conveying client
application data. This value is always 31.
Host Profile Data Block 5.1.x Fields (Continued)
F
IELD
D
ATA
T
YPE
D
ESCRIPTION