5 commits

Author	SHA1	Message	Date
Jon Siwek	35c42b4b09	GH-474: change MQTT::max_payload_size to be a runtime option	2019-08-05 18:11:54 -07:00
Johanna Amann	0f96a9dedf	Disable MQTT by default ... To enable MQTT, one has to load policy/scripts/mqtt. Like with smb in 2.5, the consts are loaded by default.	2019-08-05 17:04:39 -07:00
Jon Siwek	6bc947a48e	GH-474: add MQTT::max_payload_size option ... This caps size of payload strings within mqtt_publish events and mqtt_publish.log files. A new "payload_len" field in the log file shows the real payload size in cases where it may have been truncated.	2019-08-02 14:28:55 -07:00
Jon Siwek	ee28e9e9f3	Merge remote-tracking branch 'origin/topic/seth/mqtt' ... * origin/topic/seth/mqtt: Bug fixes and test baseline updates Fix an issue with bro_init -> zeek_init MQTT Analyzer heavily updated and ported from the analyzer originally by Supriya Kumar Adjustments during merge: * Minor whitespace cleanups * Some bro to zeek renaming * Fixed the parsing of unsubscribe messages to generate an event for each topic	2019-07-31 21:29:38 -07:00
Seth Hall	a42b3a1d63	MQTT Analyzer heavily updated and ported from the analyzer originally by Supriya Kumar ... This analyzer generates three logs to fully display what is happening over the MQTT connection. - mqtt_connect.log - mqtt_subscribe.log - mqtt_publish.log At this time it only supports MQTT 3.1 and 3.1.1	2019-07-29 13:45:10 -04:00