]> git.ipfire.org Git - thirdparty/suricata-verify.git/commitdiff
mqtt-events-invalid-qos: fix test
authorJason Ish <jason.ish@oisf.net>
Fri, 17 Feb 2023 18:34:36 +0000 (12:34 -0600)
committerVictor Julien <victor@inliniac.net>
Thu, 30 Mar 2023 13:55:09 +0000 (15:55 +0200)
On inspection of the pcap, the signature 2226006 should only alert once.

Issue: 5799

tests/mqtt-events-invalid-qos/test.yaml

index 44b3eac7ac17d12dcb6a33f155a6f454728f6962..8f1fadc74de7b320141794c0bfcf2aef66294751 100644 (file)
@@ -10,7 +10,7 @@ args:
 checks:
 
   - filter:
-      count: 2
+      count: 1
       match:
         event_type: alert
         alert.signature_id: 2226006