Cisco Cisco Firepower Management Center 4000 Guia Do Programador
4-98
FireSIGHT eStreamer Integration Guide
Chapter 4 Understanding Discovery & Connection Data Structures
Host Discovery and Connection Data Blocks
User Server List Data Block
The User Server List data block contains a list of server data blocks from a user input event. The User
Server List data block has a block type of 77 in the series 1 group of blocks.
Server List data block has a block type of 77 in the series 1 group of blocks.
The following diagram shows the basic structure of a User Server List data block:
The following table describes the fields of the User Server List data block.
Byte
0
1
2
3
Bit
0 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31
User Server List Data Block Type (77)
User Server List Block Length
Source Type
Source ID
User
Server
Blocks
Generic List Block Type (31)
Generic List Block Length
User Server Data Block*
Table 4-57
User Server List Data Block Fields
Field
Number of
Bytes
Bytes
Description
User Server List
Data Block Type
Data Block Type
uint32
Initiates a User Server List data block. This value is always
77
.
User Server List
Block Length
Block Length
uint32
Total number of bytes in the User Server List data block, including
eight bytes for the user server list block type and length fields, plus
the number of bytes of user server list data that follows.
eight bytes for the user server list block type and length fields, plus
the number of bytes of user server list data that follows.
Source Type
uint32
Number that maps to the type of data source:
•
0
if the server data was detected by RNA
•
1
if the server data was provided by a user
•
2
if the server data was detected by a third-party scanner
•
3
if the server data was provided by a command line tool such
as
nmimport.pl
or the Host Input API client
Source ID
uint32
Identification number that maps to the source of the server data.
Depending on the source type, this may map to RNA, a user, a
scanner, or a third-party application.
Depending on the source type, this may map to RNA, a user, a
scanner, or a third-party application.
Generic List Block
Type
Type
uint32
Initiates a Generic List data block. This value is always
31
.