base/protocols/irc/dcc-send.bro

IRC

File extraction and introspection for DCC transfers over IRC.

There is a major problem with this script in the cluster context because we might see A send B a message that a DCC connection is to be expected, but that connection will actually be between B and C which could be analyzed on a different worker.

Namespace:IRC Imports:base/frameworks/cluster, base/protocols/irc/main.bro, base/utils/files.bro Source File:/scripts/base/protocols/irc/dcc-send.bro

Summary

Redefinitions

IRC::Info: record

Detailed Interface