Cisco Cisco Firepower Management Center 4000 Guida Dello Sviluppatore
Version 5.3
Sourcefire 3D System eStreamer Integration Guide
581
Understanding Legacy Data Structures
Legacy Connection Data Structures
Appendix B
Connection Statistics Data Block 4.9.1 - 4.10.1
The Connection Statistics data block is used in Connection Data messages.
Changes to the Connection data block between 4.7 and 4.9.1+ include the
addition of a list of Web Application data blocks. The Connection Statistics data
block for 4.9.1 - 4.10.1 has a block type of 101.
For more information on the Connection Statistics Data message, see
For more information on the Connection Statistics Data message, see
Client
Application
Version
string
Version of the client application (5.0, 5.5, and so
on).
String Block
Type
uint32
Initiates a string data block for the client
application URL. This value is always 0.
String Block
Length
uint32
Number of bytes in the client application URL
String data block, including eight bytes for the
string block type and length fields, plus the
number of bytes in the client application URL
string.
Client
Application
URL
string
URL the client application accessed, if applicable
(/files/index.html, for example).
String Block
Type
uint32
Initiates a string data block for the domain name.
This value is always 0.
String Block
Length
uint32
Number of bytes in the domain name String data
block, including eight bytes for the string block
type and length fields, plus the number of bytes
in the domain name string.
Domain
Name
string
The domain name for the initiating host, if
applicable.
Connection Statistics Data Block 4.7 - 4.9.0.x Fields (Continued)
F
IELD
D
ATA
T
YPE
D
ESCRIPTION