From: Sascha Steinbiss Date: Sat, 26 Jun 2021 12:12:50 +0000 (+0200) Subject: mqtt: add suricata.yaml enabling MQTT for testing X-Git-Tag: suricata-6.0.4~79 X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=79d5af08c86f402cb72f5f5a8960342807ad4028;p=thirdparty%2Fsuricata-verify.git mqtt: add suricata.yaml enabling MQTT for testing --- diff --git a/tests/mqtt-events-invalid-qos/suricata.yaml b/tests/mqtt-events-invalid-qos/suricata.yaml new file mode 100644 index 000000000..e9d9a4a02 --- /dev/null +++ b/tests/mqtt-events-invalid-qos/suricata.yaml @@ -0,0 +1,17 @@ +%YAML 1.1 +--- + +outputs: + - eve-log: + enabled: yes + filetype: regular + filename: eve.json + types: + - mqtt + - alert + - anomaly + +app-layer: + protocols: + mqtt: + enabled: yes \ No newline at end of file diff --git a/tests/mqtt-events-missing-connect/suricata.yaml b/tests/mqtt-events-missing-connect/suricata.yaml new file mode 100644 index 000000000..e9d9a4a02 --- /dev/null +++ b/tests/mqtt-events-missing-connect/suricata.yaml @@ -0,0 +1,17 @@ +%YAML 1.1 +--- + +outputs: + - eve-log: + enabled: yes + filetype: regular + filename: eve.json + types: + - mqtt + - alert + - anomaly + +app-layer: + protocols: + mqtt: + enabled: yes \ No newline at end of file diff --git a/tests/mqtt-events-unassigned-msgtype/suricata.yaml b/tests/mqtt-events-unassigned-msgtype/suricata.yaml new file mode 100644 index 000000000..e9d9a4a02 --- /dev/null +++ b/tests/mqtt-events-unassigned-msgtype/suricata.yaml @@ -0,0 +1,17 @@ +%YAML 1.1 +--- + +outputs: + - eve-log: + enabled: yes + filetype: regular + filename: eve.json + types: + - mqtt + - alert + - anomaly + +app-layer: + protocols: + mqtt: + enabled: yes \ No newline at end of file diff --git a/tests/mqtt-events-unintroduced/suricata.yaml b/tests/mqtt-events-unintroduced/suricata.yaml new file mode 100644 index 000000000..e9d9a4a02 --- /dev/null +++ b/tests/mqtt-events-unintroduced/suricata.yaml @@ -0,0 +1,17 @@ +%YAML 1.1 +--- + +outputs: + - eve-log: + enabled: yes + filetype: regular + filename: eve.json + types: + - mqtt + - alert + - anomaly + +app-layer: + protocols: + mqtt: + enabled: yes \ No newline at end of file