mqtt: add suricata.yaml enabling MQTT for testing

diff --git a/tests/mqtt-events-invalid-qos/suricata.yaml b/tests/mqtt-events-invalid-qos/suricata.yaml
new file mode 100644 (file)
index 0000000..e9d9a4a
--- /dev/null
+++ b/tests/mqtt-events-invalid-qos/suricata.yaml
@@ -0,0 +1,17 @@
+%YAML 1.1
+---
+
+outputs:
+  - eve-log:
+      enabled: yes
+      filetype: regular
+      filename: eve.json
+      types:
+        - mqtt
+        - alert
+        - anomaly
+
+app-layer:
+  protocols:
+    mqtt:
+      enabled: yes
\ No newline at end of file

diff --git a/tests/mqtt-events-missing-connect/suricata.yaml b/tests/mqtt-events-missing-connect/suricata.yaml
new file mode 100644 (file)
index 0000000..e9d9a4a
--- /dev/null
+++ b/tests/mqtt-events-missing-connect/suricata.yaml
@@ -0,0 +1,17 @@
+%YAML 1.1
+---
+
+outputs:
+  - eve-log:
+      enabled: yes
+      filetype: regular
+      filename: eve.json
+      types:
+        - mqtt
+        - alert
+        - anomaly
+
+app-layer:
+  protocols:
+    mqtt:
+      enabled: yes
\ No newline at end of file

diff --git a/tests/mqtt-events-unassigned-msgtype/suricata.yaml b/tests/mqtt-events-unassigned-msgtype/suricata.yaml
new file mode 100644 (file)
index 0000000..e9d9a4a
--- /dev/null
+++ b/tests/mqtt-events-unassigned-msgtype/suricata.yaml
@@ -0,0 +1,17 @@
+%YAML 1.1
+---
+
+outputs:
+  - eve-log:
+      enabled: yes
+      filetype: regular
+      filename: eve.json
+      types:
+        - mqtt
+        - alert
+        - anomaly
+
+app-layer:
+  protocols:
+    mqtt:
+      enabled: yes
\ No newline at end of file

diff --git a/tests/mqtt-events-unintroduced/suricata.yaml b/tests/mqtt-events-unintroduced/suricata.yaml
new file mode 100644 (file)
index 0000000..e9d9a4a
--- /dev/null
+++ b/tests/mqtt-events-unintroduced/suricata.yaml
@@ -0,0 +1,17 @@
+%YAML 1.1
+---
+
+outputs:
+  - eve-log:
+      enabled: yes
+      filetype: regular
+      filename: eve.json
+      types:
+        - mqtt
+        - alert
+        - anomaly
+
+app-layer:
+  protocols:
+    mqtt:
+      enabled: yes
\ No newline at end of file