mirror of
https://github.com/zeek/zeek.git
synced 2025-10-02 14:48:21 +00:00
15 lines
470 B
Text
15 lines
470 B
Text
# @TEST-EXEC: zeek -b -r $TRACES/mqtt.pcap %INPUT > out
|
|
# @TEST-EXEC: btest-diff out
|
|
|
|
@load base/protocols/mqtt
|
|
@load base/frameworks/config
|
|
|
|
event mqtt_publish(c: connection, is_orig: bool, msg_id: count, msg: MQTT::PublishMsg)
|
|
{
|
|
print "mqtt_publish", msg$payload, |msg$payload|, msg$payload_len;
|
|
|
|
if ( MQTT::max_payload_size > 8 )
|
|
Config::set_value("MQTT::max_payload_size", 8);
|
|
else
|
|
Config::set_value("MQTT::max_payload_size", MQTT::max_payload_size - 3);
|
|
}
|