Cisco Cisco Firepower Management Center 2000 開発者ガイド
Version 5.3
Sourcefire 3D System eStreamer Integration Guide
183
Understanding Discovery & Connection Data Structures
Metadata for Discovery Events
Chapter 4
The
table describes the fields in the Server record.
Source Type Record
The eStreamer service transmits metadata containing information about the
source application for an event within a Source Type record, the format of which
is shown below. (Source type information is sent when one of the metadata
flags—bits 1, 14, 15, or 20 in the Request Flags field of a request message—is
set. See
on page 30.) Note that the Record Type field, which
appears after the Message Length field, has a value of 90, indicating a Source
Type record.
Byte
0
1
2
3
Bit
0 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31
Header Version (1)
Message Type (4)
Message Length
Record Type (63)
Record Length
Application ID
Name Length
Name...
Server Record Fields
F
IELD
D
ATA
T
YPE
D
ESCRIPTION
Application ID
uint32
The application ID number of the application
protocol.
Name Length
uint32
The number of bytes included in the server
name.
Name
string
The name of the application protocol. For
application ID 65535, the name is
unknown
.