From 2ecef8c607e0e53775964ec67162b141b8c39c7b Mon Sep 17 00:00:00 2001 From: Marco Ochse Date: Fri, 27 Nov 2020 19:07:12 +0100 Subject: [PATCH] enable MQTT as eagle eyed by @adepasquale --- docker/suricata/dist/suricata.yaml | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/docker/suricata/dist/suricata.yaml b/docker/suricata/dist/suricata.yaml index 72d4fae9..dfca0b49 100644 --- a/docker/suricata/dist/suricata.yaml +++ b/docker/suricata/dist/suricata.yaml @@ -281,7 +281,7 @@ outputs: extended: no - ssh - mqtt: - # passwords: yes # enable output of passwords + passwords: yes # enable output of passwords # HTTP2 logging. HTTP2 support is currently experimental and # disabled by default. To enable, uncomment the following line # and be sure to enable http2 in the app-layer section. @@ -720,8 +720,8 @@ app-layer: dp: 5900, 5901, 5902, 5903, 5904, 5905, 5906, 5907, 5908, 5909 # MQTT, disabled by default. mqtt: - # enabled: no - # max-msg-length: 1mb + enabled: yes + max-msg-length: 1mb krb5: enabled: yes snmp: