Next: login Analyzer, Previous: ident Analyzer, Up: Analyzers and Events
irc
Analyzer
The IRC
analyzer processes traffic from chat sessions that
use the IRC (Internet Relay Chat) protocol.
It can analyze client-server connections and server-server connections.
Bro instantiates an IRC
analyzer for any connection with service
ports 6666/tcp
or 6667/tcp
,
providing you have loaded the IRC
analyzer, or defined a handler
for one of the IRC events.
It it also possible to analyze server connections, but to do so you need
to recompile Bro to include the necessary ports if they are not the
usual ones.
Bro can analyze compressed connections if it sees the beginning of the connection.