Cisco Cisco Firepower Management Center 2000 Guía Del Desarrollador

Descargar
Página de 726
Version 5.3
Sourcefire 3D System eStreamer Integration Guide
720
Understanding Legacy Data Structures
Legacy Metadata Structures
Appendix B
The 
Detection Engine Record Fields
 table describes the fields in the Detection 
Engine Record.
Byte
0
1
2
3
Bit
0 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31
Header Version (1)
Message Type (4)
Message Length
Record Type (68)
Record Length
Detection Engine ID
Name Length
Name...
Description Length
Description...
Type Length
Type...
Ma
naged Devic
e
UU
ID
Detection Engine UUID
Detection Engine UUID, continued
Detection Engine UUID, continued
Detection Engine UUID, continued
Detection Engine Record Fields 
F
IELD
D
ATA
 T
YPE
D
ESCRIPTION
Detection 
Engine ID
uint32
The detection engine ID number.
Name Length
uint16
The number of bytes included in the detection 
engine name.
Name
string
The name of the detection engine that 
detected the event.
Description 
Length
uint16
The number of bytes included in the detection 
engine description.