Cisco Cisco Firepower Management Center 2000 Guía Del Desarrollador
Version 5.3
Sourcefire 3D System eStreamer Integration Guide
720
Understanding Legacy Data Structures
Legacy Metadata Structures
Appendix B
The
Detection Engine Record Fields
table describes the fields in the Detection
Engine Record.
Byte
0
1
2
3
Bit
0 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31
Header Version (1)
Message Type (4)
Message Length
Record Type (68)
Record Length
Detection Engine ID
Name Length
Name...
Description Length
Description...
Type Length
Type...
Ma
naged Devic
e
UU
ID
Detection Engine UUID
Detection Engine UUID, continued
Detection Engine UUID, continued
Detection Engine UUID, continued
Detection Engine Record Fields
F
IELD
D
ATA
T
YPE
D
ESCRIPTION
Detection
Engine ID
uint32
The detection engine ID number.
Name Length
uint16
The number of bytes included in the detection
engine name.
Name
string
The name of the detection engine that
detected the event.
Description
Length
uint16
The number of bytes included in the detection
engine description.