Cisco Cisco Firepower Management Center 4000 Guia Do Programador

Página de 726
Version 5.3
Sourcefire 3D System eStreamer Integration Guide
712
Understanding Legacy Data Structures
Legacy Host Data Structures
Appendix B
SM
Fingerprints
Generic List Block Type (31)
Generic List Block Length
SMB Fingerprint Data Blocks*
DH
CP 
Fingerprin
ts
Generic List Block Type (31)
Generic List Block Length
DHCP Fingerprint Data Blocks*
Mobile Device Fingerprints
Generic List Block Type (31)
Generic List Block Length
Mobile Device Fingerprint Data Blocks*
TCP
 Server
Block*
List Block Type (11)
List of TCP
Servers
List Block Length
TCP Server Data Blocks
UDP Server
Block*
List Block Type (11)
List of UDP
Servers
List Block Length
UDP Server Data Blocks
Network
Protocol Block*
List Block Type (11)
List of Network
Protoco
ls
List Block Length
Network Protocol Data Blocks
Tr
ansport
Protoc
ol Bloc
k*
List Block Type (11)
List of T
ransport
Protocols
List Block Length
Transport Protocol Data Blocks
MAC Address
Bl
oc
k*
List Block Type (11)
Lis
t o
f MA
C
Addresses
List Block Length
Host MAC Address Data Blocks
Host Last Seen
Host Type
Byte
0
1
2
3
Bit
0 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31