Cisco Cisco Firepower Management Center 2000 开发者指南
6-16
FireSIGHT System Database Access Guide
Chapter 6 Schema: Discovery Event and Network Map Tables
rna_host_client_app
rna_host_client_app
The
rna_host_client_app
table contains information on the client applications detected on the hosts in
your monitored network. It supersedes the deprecated
rna_ip_host_client_app
table.
For more information, see the following sections:
•
•
•
rna_host_client_app Fields
The following table describes the fields you can access in the
rna_host_client_app
table.
Table 6-14
rna_host_client_app Fields
Field
Description
application
Field deprecated in Version 5.0. Returns
null
for all queries.
application_protocol_id
An internal identifier for the detected application protocol.
application_protocol_name
One of:
•
the name of the application, if a positive identification can be made
•
pending
if the system requires more data
•
blank if there is no application information in the connection
application_type
Field deprecated in Version 5.0. Returns
null
for all queries.
client_application_id
The internal identification number for the application, if the application is
identifiable.
identifiable.
client_application_name
One of:
•
the name of the application, if a positive identification can be made.
•
a generic client name if the system detects a client application but cannot
identify a specific one.
identify a specific one.
•
blank if there is no client application information in the connection.
hits
The number of times the client application was detected.
host_id
ID number of the host.
last_used_sec
The UNIX timestamp of the date and time the system last detected application
activity.
activity.
version
The version of the application detected on the host.