]> git.ipfire.org Git - thirdparty/suricata-verify.git/commitdiff
mqtt-events-missing-connect: fix test
authorJason Ish <jason.ish@oisf.net>
Sun, 19 Feb 2023 00:58:13 +0000 (18:58 -0600)
committerVictor Julien <victor@inliniac.net>
Thu, 30 Mar 2023 13:55:09 +0000 (15:55 +0200)
On inspection of the pcap, the signature 2226000 should only alert once.

Issue: 5799

tests/mqtt-events-missing-connect/test.yaml

index 97bdb0e714f2cdb0043a4a40781c8c9e3f591550..d8be65d8cd82166b4d5c0d98af75b6a10d9ba1da 100644 (file)
@@ -10,7 +10,7 @@ args:
 checks:
 
   - filter:
-      count: 2
+      count: 1
       match:
         event_type: alert
         alert.signature_id: 2226000