[Zeek] Zeek doesn't see the MQTT traffic.

[Tomek Koziak]

I am trying to work with the *mqtt_publish *and the* mqtt_connect *events*.
*I have a mosquitto broker which is running locally on which I send
messages from a sensor. I want to investigate those messages. However, I am
not able to observe any values that should like c: connection. Even when I
run it on the mqtt.pcap from here
<https://github.com/pradeesi/MQTT-Wireshark-Capture/blob/master/mqtt_packets_tcpdump.pcap>
and
again the previously mentioned events, it doesn't produce any output. What
may cause this problem?

BR
Tomasz
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.ICSI.Berkeley.EDU/pipermail/zeek/attachments/20200417/9d89e533/attachment.html