mirror of
https://github.com/zeek/zeek.git
synced 2025-10-02 22:58:20 +00:00

This analyzer generates three logs to fully display what is happening over the MQTT connection. - mqtt_connect.log - mqtt_subscribe.log - mqtt_publish.log At this time it only supports MQTT 3.1 and 3.1.1
6 lines
212 B
Text
6 lines
212 B
Text
# @TEST-EXEC: bro -b -r $TRACES/mqtt.pcap %INPUT >output
|
|
# @TEST-EXEC: btest-diff mqtt_connect.log
|
|
# @TEST-EXEC: btest-diff mqtt_subscribe.log
|
|
# @TEST-EXEC: btest-diff mqtt_publish.log
|
|
|
|
@load base/protocols/mqtt
|