Руководство Разработчика для Cisco Cisco Firepower Management Center 2000
Version 5.3
Sourcefire 3D System eStreamer Integration Guide
266
Understanding Discovery & Connection Data Structures
Host Discovery and Connection Data Blocks
Chapter 4
User Client Application Data Block for 5.1.1+
The User Client Application data block contains information about the source of
the client application data, the identification number for the user who added the
data, and the lists of IP address range data blocks. The payload ID, which was
added in Version 5.3, specifies the application instance associated with the
record. The User Client Application data block has a block type of 138 in the series
1 group of blocks. It replaces block type 59.
Generic List
Block Length
uint32
Number of bytes in the Generic List data block,
including the list header and all encapsulated IP
Range Specification data blocks.
IP Range
Specification
Data Blocks *
variable
IP Range Specification data blocks containing
information about the IP address ranges for the
user input. See
on page 270 for a description of this data
block.
Generic List
Block Type
uint32
Initiates a Generic List data block comprising
MAC Range Specification data blocks conveying
MAC address range data. This value is always 31.
Generic List
Block Length
uint32
Number of bytes in the Generic List data block,
including the list header and all encapsulated
MAC Range Specification data blocks.
MAC Range
Specification
Data Blocks *
variable
MAC Range Specification data blocks containing
information about the MAC address ranges for
the user input. See
on page 274 for a description of this
data block.
Protocol Type
uint8
Indicates the type of the protocol. The protocol
can be either
0
, for a network layer protocol such
as IP, or
1
for a transport layer protocol such as
TCP or UDP.
Protocol
uint16
Indicates the protocol for the data contained in
the data block.
User Protocol Data Block Fields (Continued)
F
IELD
N
UMBER
OF
B
YTES
D
ESCRIPTION