Cisco Cisco Firepower Management Center 2000 개발자 가이드
4-172
FireSIGHT eStreamer Integration Guide
Chapter 4 Understanding Discovery & Connection Data Structures
User Data Blocks
User Login Information Data Block 5.1+
The User Login Information data block is used in User Information Update messages and conveys
changes in login information for a detected user. For more information, see
changes in login information for a detected user. For more information, see
The User Login Information data block has a block type of 73 for version 4.7 - 4.10.x, a block type of
121 in the series 1 group of blocks for version 5.0 - 5.0.2, and a block type of 127 in the series 1 group
of blocks for version 5.1+.
121 in the series 1 group of blocks for version 5.0 - 5.0.2, and a block type of 127 in the series 1 group
of blocks for version 5.1+.
The graphic below shows the format of the User Login Information data block:
String Block Length
uint32
Number of bytes in the phone number String data block,
including eight bytes for the block type and length fields, plus the
number of bytes in the phone number.
including eight bytes for the block type and length fields, plus the
number of bytes in the phone number.
Phone
string
The phone number for the user.
Table 4-85
User Information Data Block Fields (continued)
Field
Data Type
Description
Byte
0
1
2
3
Bit
0 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31
User Login Information Block Type (127)
User Login Information Block Length
Timestamp
IPv4 Address
User
Name
String Block Type (0)
String Block Length
User Name...
User ID
Application ID
Email
String Block Type (0)
String Block Length
Email...
IPv6 Address
IPv6 Address, continued
IPv6 Address, continued