GH-474: change MQTT::max_payload_size to be a runtime option

This commit is contained in:
Jon Siwek 2019-08-05 18:11:54 -07:00
parent 704969ddd6
commit 35c42b4b09
12 changed files with 49 additions and 23 deletions

View file

@ -0,0 +1,15 @@
# @TEST-EXEC: zeek -b -r $TRACES/mqtt.pcap %INPUT > out
# @TEST-EXEC: btest-diff out
@load policy/protocols/mqtt
@load base/frameworks/config
event mqtt_publish(c: connection, is_orig: bool, msg_id: count, msg: MQTT::PublishMsg)
{
print "mqtt_publish", msg$payload, |msg$payload|, msg$payload_len;
if ( MQTT::max_payload_size > 8 )
Config::set_value("MQTT::max_payload_size", 8);
else
Config::set_value("MQTT::max_payload_size", MQTT::max_payload_size - 3);
}