Keyboard shortcuts

Press ← or → to navigate between chapters

Press S or / to search in the book

Press ? to show this help

Press Esc to hide this help

sys-info

Collect and display all $SYS broker metadata. Unlike fingerprint, which produces a summary focused on identification, sys-info shows the raw $SYS topic tree in a readable grouped format.

Synopsis

mqattack sys-info [OPTIONS]

Options

FlagDefaultDescription
-w, --wait <SECS>5Collection window in seconds
--liveoffStream messages as received instead of showing a grouped summary

Output format

Default (summary mode): Topics are grouped by their first three path segments and printed as a table. For example, all topics under $SYS/broker/clients/ are shown together.

Live mode: Each message is printed as it arrives:

$SYS/broker/clients/connected       3
$SYS/broker/clients/total          47
$SYS/broker/messages/received    1082

Examples

Collect for 5 seconds, print grouped summary

mqattack sys-info -H 192.168.1.10

Longer collection window

mqattack sys-info -H 192.168.1.10 -w 15

Live stream

mqattack sys-info -H 192.168.1.10 --live

sys-info over TLS

mqattack sys-info --tls -H broker.example.com -p 8883 -w 15

Save all $SYS data to a file

mqattack sys-info -H 192.168.1.10 --live > sys-dump.txt

Notes

  • $SYS access is typically restricted to privileged users on production brokers. A successful collection indicates a misconfiguration.
  • The live mode is useful when you want to watch how statistics change over time (e.g., observing connected client counts during a brute-force run).