Next: , Previous: ident Analyzer, Up: Analyzers and Events


7.20 The irc Analyzer

The IRC analyzer processes traffic from chat sessions that use the IRC (Internet Relay Chat) protocol. It can analyze client-server connections and server-server connections.

Bro instantiates an IRC analyzer for any connection with service ports 6666/tcp or 6667/tcp, providing you have loaded the IRC analyzer, or defined a handler for one of the IRC events. It it also possible to analyze server connections, but to do so you need to recompile Bro to include the necessary ports if they are not the usual ones.

Bro can analyze compressed connections if it sees the beginning of the connection.