From 02b45bc9eae99052c6a17fbc83ebecd9d9a1c3ab Mon Sep 17 00:00:00 2001
From: Seth Hall <seth@icir.org>
Date: Tue, 7 Jun 2011 16:35:55 -0400
Subject: [PATCH] Fixed major bug in IRC analysis.

---
 policy/protocols/irc/base.bro | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/policy/protocols/irc/base.bro b/policy/protocols/irc/base.bro
index 400b58a0c7..260bd7a6e3 100644
--- a/policy/protocols/irc/base.bro
+++ b/policy/protocols/irc/base.bro
@@ -66,6 +66,8 @@ function set_session(c: connection)
 
 event irc_nick_message(c: connection, who: string, newnick: string) &priority=5
 	{
+	set_session(c);
+	
 	c$irc$command = "NICK";
 	c$irc$value = newnick;
 	}
@@ -78,6 +80,8 @@ event irc_nick_message(c: connection, who: string, newnick: string) &priority=-5
 
 event irc_user_message(c: connection, user: string, host: string, server: string, real_name: string) &priority=5
 	{
+	set_session(c);
+	
 	c$irc$command = "USER";
 	c$irc$value = user;
 	c$irc$addl=fmt("%s %s %s", host, server, real_name);
@@ -92,6 +96,8 @@ event irc_user_message(c: connection, user: string, host: string,
 	
 event irc_join_message(c: connection, info_list: irc_join_list) &priority=5
 	{
+	set_session(c);
+	
 	c$irc$command = "JOIN";
 	}