mirror of
https://github.com/zeek/zeek.git
synced 2025-10-15 13:08:20 +00:00
Rename analyzer/protocols -> analyzer/protocol
This commit is contained in:
Robin Sommer
parent
f7a10d915b
commit
4bc2ba60c9
279 changed files with 114 additions and 116 deletions
9
src/analyzer/protocol/irc/CMakeLists.txt
Normal file
9
src/analyzer/protocol/irc/CMakeLists.txt
Normal file
|
|
@ -0,0 +1,9 @@
|
|||
|
||||
include(BroPlugin)
|
||||
|
||||
include_directories(BEFORE ${CMAKE_CURRENT_SOURCE_DIR} ${CMAKE_CURRENT_BINARY_DIR})
|
||||
|
||||
bro_plugin_begin(IRC)
|
||||
bro_plugin_cc(IRC.cc Plugin.cc)
|
||||
bro_plugin_bif(events.bif)
|
||||
bro_plugin_end()
|
||||
1206
src/analyzer/protocol/irc/IRC.cc
Normal file
1206
src/analyzer/protocol/irc/IRC.cc
Normal file
File diff suppressed because it is too large
Load diff
67
src/analyzer/protocol/irc/IRC.h
Normal file
67
src/analyzer/protocol/irc/IRC.h
Normal file
|
|
@ -0,0 +1,67 @@
|
|||
// An IRC analyzer contributed by Roland Gruber.
|
||||
|
||||
#ifndef ANALYZER_PROTOCOL_IRC_IRC_H
|
||||
#define ANALYZER_PROTOCOL_IRC_IRC_H
|
||||
#include "analyzer/protocol/tcp/TCP.h"
|
||||
|
||||
namespace analyzer { namespace irc {
|
||||
|
||||
/**
|
||||
* \brief Main class for analyzing IRC traffic.
|
||||
*/
|
||||
class IRC_Analyzer : public tcp::TCP_ApplicationAnalyzer {
|
||||
enum { WAIT_FOR_REGISTRATION, REGISTERED, };
|
||||
enum { NO_ZIP, ACCEPT_ZIP, ZIP_LOADED, };
|
||||
public:
|
||||
/**
|
||||
* \brief Constructor, builds a new analyzer object.
|
||||
*/
|
||||
IRC_Analyzer(Connection* conn);
|
||||
|
||||
/**
|
||||
* \brief Called when connection is closed.
|
||||
*/
|
||||
virtual void Done();
|
||||
|
||||
/**
|
||||
* \brief New input line in network stream.
|
||||
*
|
||||
* \param len the line length
|
||||
* \param data pointer to line start
|
||||
* \param orig was this data sent from connection originator?
|
||||
*/
|
||||
virtual void DeliverStream(int len, const u_char* data, bool orig);
|
||||
|
||||
static analyzer::Analyzer* InstantiateAnalyzer(Connection* conn)
|
||||
{
|
||||
return new IRC_Analyzer(conn);
|
||||
}
|
||||
|
||||
protected:
|
||||
int orig_status;
|
||||
int orig_zip_status;
|
||||
int resp_status;
|
||||
int resp_zip_status;
|
||||
|
||||
private:
|
||||
/** \brief counts number of invalid IRC messages */
|
||||
int invalid_msg_count;
|
||||
|
||||
/** \brief maximum count of invalid IRC messages */
|
||||
int invalid_msg_max_count;
|
||||
|
||||
/**
|
||||
* \brief Splits a string into its words which are separated by
|
||||
* the split character.
|
||||
*
|
||||
* \param input string which will be splitted
|
||||
* \param split character which separates the words
|
||||
* \return vector containing words
|
||||
*/
|
||||
vector<string> SplitWords(const string input, const char split);
|
||||
|
||||
};
|
||||
|
||||
} } // namespace analyzer::*
|
||||
|
||||
#endif
|
||||
10
src/analyzer/protocol/irc/Plugin.cc
Normal file
10
src/analyzer/protocol/irc/Plugin.cc
Normal file
|
|
@ -0,0 +1,10 @@
|
|||
|
||||
#include "plugin/Plugin.h"
|
||||
|
||||
#include "IRC.h"
|
||||
|
||||
BRO_PLUGIN_BEGIN(IRC)
|
||||
BRO_PLUGIN_DESCRIPTION("IRC Analyzer");
|
||||
BRO_PLUGIN_ANALYZER("IRC", irc::IRC_Analyzer);
|
||||
BRO_PLUGIN_BIF_FILE(events);
|
||||
BRO_PLUGIN_END
|
||||
799
src/analyzer/protocol/irc/events.bif
Normal file
799
src/analyzer/protocol/irc/events.bif
Normal file
|
|
@ -0,0 +1,799 @@
|
|||
|
||||
## Generated for all client-side IRC commands.
|
||||
##
|
||||
## See `Wikipedia <http://en.wikipedia.org/wiki/Internet_Relay_Chat>`__ for more
|
||||
## information about the IRC protocol.
|
||||
##
|
||||
## c: The connection.
|
||||
##
|
||||
## is_orig: Always true.
|
||||
##
|
||||
## prefix: The optional prefix coming with the command. IRC uses the prefix to
|
||||
## indicate the true origin of a message.
|
||||
##
|
||||
## command: The command.
|
||||
##
|
||||
## arguments: The arguments for the command.
|
||||
##
|
||||
## .. bro:see:: irc_channel_info irc_channel_topic irc_dcc_message irc_error_message
|
||||
## irc_global_users irc_invalid_nick irc_invite_message irc_join_message
|
||||
## irc_kick_message irc_message irc_mode_message irc_names_info irc_network_info
|
||||
## irc_nick_message irc_notice_message irc_oper_message irc_oper_response
|
||||
## irc_part_message irc_password_message
|
||||
##
|
||||
## .. note:: This event is generated only for messages that originate
|
||||
## at the client-side. Commands coming in from remote trigger
|
||||
## the :bro:id:`irc_message` event instead.
|
||||
event irc_request%(c: connection, is_orig: bool, prefix: string,
|
||||
command: string, arguments: string%);
|
||||
|
||||
## Generated for all IRC replies. IRC replies are sent in response to a
|
||||
## request and come with a reply code.
|
||||
##
|
||||
## See `Wikipedia <http://en.wikipedia.org/wiki/Internet_Relay_Chat>`__ for more
|
||||
## information about the IRC protocol.
|
||||
##
|
||||
## c: The connection.
|
||||
##
|
||||
## is_orig: True if the command was sent by the originator of the TCP
|
||||
## connection.
|
||||
##
|
||||
## prefix: The optional prefix coming with the reply. IRC uses the prefix to
|
||||
## indicate the true origin of a message.
|
||||
##
|
||||
## code: The reply code, as specified by the protocol.
|
||||
##
|
||||
## params: The reply's parameters.
|
||||
##
|
||||
## .. bro:see:: irc_channel_info irc_channel_topic irc_dcc_message irc_error_message
|
||||
## irc_global_users irc_invalid_nick irc_invite_message irc_join_message
|
||||
## irc_kick_message irc_message irc_mode_message irc_names_info irc_network_info
|
||||
## irc_nick_message irc_notice_message irc_oper_message irc_oper_response
|
||||
## irc_part_message irc_password_message
|
||||
event irc_reply%(c: connection, is_orig: bool, prefix: string,
|
||||
code: count, params: string%);
|
||||
|
||||
## Generated for IRC commands forwarded from the server to the client.
|
||||
##
|
||||
## See `Wikipedia <http://en.wikipedia.org/wiki/Internet_Relay_Chat>`__ for more
|
||||
## information about the IRC protocol.
|
||||
##
|
||||
## c: The connection.
|
||||
##
|
||||
## is_orig: Always false.
|
||||
##
|
||||
## prefix: The optional prefix coming with the command. IRC uses the prefix to
|
||||
## indicate the true origin of a message.
|
||||
##
|
||||
## command: The command.
|
||||
##
|
||||
## message: TODO.
|
||||
##
|
||||
## .. bro:see:: irc_channel_info irc_channel_topic irc_dcc_message irc_error_message
|
||||
## irc_global_users irc_invalid_nick irc_invite_message irc_join_message
|
||||
## irc_kick_message irc_mode_message irc_names_info irc_network_info
|
||||
## irc_nick_message irc_notice_message irc_oper_message irc_oper_response
|
||||
## irc_part_message irc_password_message
|
||||
##
|
||||
## .. note::
|
||||
##
|
||||
## This event is generated only for messages that are forwarded by the server
|
||||
## to the client. Commands coming from client trigger the
|
||||
## :bro:id:`irc_request` event instead.
|
||||
event irc_message%(c: connection, is_orig: bool, prefix: string,
|
||||
command: string, message: string%);
|
||||
|
||||
## Generated for IRC messages of type *quit*. This event is generated for
|
||||
## messages coming from both the client and the server.
|
||||
##
|
||||
## See `Wikipedia <http://en.wikipedia.org/wiki/Internet_Relay_Chat>`__ for more
|
||||
## information about the IRC protocol.
|
||||
##
|
||||
## c: The connection.
|
||||
##
|
||||
## is_orig: True if the command was sent by the originator of the TCP
|
||||
## connection.
|
||||
##
|
||||
## nick: The nickname coming with the message.
|
||||
##
|
||||
## message: The text included with the message.
|
||||
##
|
||||
## .. bro:see:: irc_channel_info irc_channel_topic irc_dcc_message irc_error_message
|
||||
## irc_global_users irc_invalid_nick irc_invite_message irc_join_message
|
||||
## irc_kick_message irc_message irc_mode_message irc_names_info irc_network_info
|
||||
## irc_nick_message irc_notice_message irc_oper_message irc_oper_response
|
||||
## irc_part_message irc_password_message
|
||||
event irc_quit_message%(c: connection, is_orig: bool, nick: string, message: string%);
|
||||
|
||||
## Generated for IRC messages of type *privmsg*. This event is generated for
|
||||
## messages coming from both the client and the server.
|
||||
##
|
||||
## See `Wikipedia <http://en.wikipedia.org/wiki/Internet_Relay_Chat>`__ for more
|
||||
## information about the IRC protocol.
|
||||
##
|
||||
## c: The connection.
|
||||
##
|
||||
## is_orig: True if the command was sent by the originator of the TCP
|
||||
## connection.
|
||||
##
|
||||
## source: The source of the private communication.
|
||||
##
|
||||
## target: The target of the private communication.
|
||||
##
|
||||
## message: The text of communication.
|
||||
##
|
||||
## .. bro:see:: irc_channel_info irc_channel_topic irc_dcc_message irc_error_message
|
||||
## irc_global_users irc_invalid_nick irc_invite_message irc_join_message
|
||||
## irc_kick_message irc_message irc_mode_message irc_names_info irc_network_info
|
||||
## irc_nick_message irc_notice_message irc_oper_message irc_oper_response
|
||||
## irc_part_message irc_password_message
|
||||
event irc_privmsg_message%(c: connection, is_orig: bool, source: string,
|
||||
target: string, message: string%);
|
||||
|
||||
## Generated for IRC messages of type *notice*. This event is generated for
|
||||
## messages coming from both the client and the server.
|
||||
##
|
||||
## See `Wikipedia <http://en.wikipedia.org/wiki/Internet_Relay_Chat>`__ for more
|
||||
## information about the IRC protocol.
|
||||
##
|
||||
## c: The connection.
|
||||
##
|
||||
## is_orig: True if the command was sent by the originator of the TCP
|
||||
## connection.
|
||||
##
|
||||
## source: The source of the private communication.
|
||||
##
|
||||
## target: The target of the private communication.
|
||||
##
|
||||
## message: The text of communication.
|
||||
##
|
||||
## .. bro:see:: irc_channel_info irc_channel_topic irc_dcc_message irc_error_message
|
||||
## irc_global_users irc_invalid_nick irc_invite_message irc_join_message
|
||||
## irc_kick_message irc_message irc_mode_message irc_names_info irc_network_info
|
||||
## irc_nick_message irc_oper_message irc_oper_response irc_part_message
|
||||
## irc_password_message
|
||||
event irc_notice_message%(c: connection, is_orig: bool, source: string,
|
||||
target: string, message: string%);
|
||||
|
||||
## Generated for IRC messages of type *squery*. This event is generated for
|
||||
## messages coming from both the client and the server.
|
||||
##
|
||||
## See `Wikipedia <http://en.wikipedia.org/wiki/Internet_Relay_Chat>`__ for more
|
||||
## information about the IRC protocol.
|
||||
##
|
||||
## c: The connection.
|
||||
##
|
||||
## is_orig: True if the command was sent by the originator of the TCP
|
||||
## connection.
|
||||
##
|
||||
## source: The source of the private communication.
|
||||
##
|
||||
## target: The target of the private communication.
|
||||
##
|
||||
## message: The text of communication.
|
||||
##
|
||||
## .. bro:see:: irc_channel_info irc_channel_topic irc_dcc_message irc_error_message
|
||||
## irc_global_users irc_invalid_nick irc_invite_message irc_join_message
|
||||
## irc_kick_message irc_message irc_mode_message irc_names_info irc_network_info
|
||||
## irc_nick_message irc_notice_message irc_oper_message irc_oper_response
|
||||
## irc_part_message irc_password_message
|
||||
event irc_squery_message%(c: connection, is_orig: bool, source: string,
|
||||
target: string, message: string%);
|
||||
|
||||
## Generated for IRC messages of type *join*. This event is generated for
|
||||
## messages coming from both the client and the server.
|
||||
##
|
||||
## See `Wikipedia <http://en.wikipedia.org/wiki/Internet_Relay_Chat>`__ for more
|
||||
## information about the IRC protocol.
|
||||
##
|
||||
## c: The connection.
|
||||
##
|
||||
## is_orig: True if the command was sent by the originator of the TCP
|
||||
## connection.
|
||||
##
|
||||
## info_list: The user information coming with the command.
|
||||
##
|
||||
## .. bro:see:: irc_channel_info irc_channel_topic irc_dcc_message irc_error_message
|
||||
## irc_global_users irc_invalid_nick irc_invite_message irc_kick_message
|
||||
## irc_message irc_mode_message irc_names_info irc_network_info irc_nick_message
|
||||
## irc_notice_message irc_oper_message irc_oper_response irc_part_message
|
||||
## irc_password_message
|
||||
event irc_join_message%(c: connection, is_orig: bool, info_list: irc_join_list%);
|
||||
|
||||
## Generated for IRC messages of type *part*. This event is generated for
|
||||
## messages coming from both the client and the server.
|
||||
##
|
||||
## See `Wikipedia <http://en.wikipedia.org/wiki/Internet_Relay_Chat>`__ for more
|
||||
## information about the IRC protocol.
|
||||
##
|
||||
## c: The connection.
|
||||
##
|
||||
## is_orig: True if the command was sent by the originator of the TCP
|
||||
## connection.
|
||||
##
|
||||
## nick: The nickname coming with the message.
|
||||
##
|
||||
## chans: The set of channels affected.
|
||||
##
|
||||
## message: The text coming with the message.
|
||||
##
|
||||
## .. bro:see:: irc_channel_info irc_channel_topic irc_dcc_message irc_error_message
|
||||
## irc_global_users irc_invalid_nick irc_invite_message irc_join_message
|
||||
## irc_kick_message irc_message irc_mode_message irc_names_info irc_network_info
|
||||
## irc_nick_message irc_notice_message irc_oper_message irc_oper_response
|
||||
## irc_password_message
|
||||
event irc_part_message%(c: connection, is_orig: bool, nick: string,
|
||||
chans: string_set, message: string%);
|
||||
|
||||
## Generated for IRC messages of type *nick*. This event is generated for
|
||||
## messages coming from both the client and the server.
|
||||
##
|
||||
## See `Wikipedia <http://en.wikipedia.org/wiki/Internet_Relay_Chat>`__ for more
|
||||
## information about the IRC protocol.
|
||||
##
|
||||
## c: The connection.
|
||||
##
|
||||
## is_orig: True if the command was sent by the originator of the TCP
|
||||
## connection.
|
||||
##
|
||||
## who: The user changing its nickname.
|
||||
##
|
||||
## newnick: The new nickname.
|
||||
##
|
||||
## .. bro:see:: irc_channel_info irc_channel_topic irc_dcc_message irc_error_message
|
||||
## irc_global_users irc_invalid_nick irc_invite_message irc_join_message
|
||||
## irc_kick_message irc_message irc_mode_message irc_names_info irc_network_info
|
||||
## irc_notice_message irc_oper_message irc_oper_response irc_part_message
|
||||
## irc_password_message
|
||||
event irc_nick_message%(c: connection, is_orig: bool, who: string, newnick: string%);
|
||||
|
||||
## Generated when a server rejects an IRC nickname.
|
||||
##
|
||||
## See `Wikipedia <http://en.wikipedia.org/wiki/Internet_Relay_Chat>`__ for more
|
||||
## information about the IRC protocol.
|
||||
##
|
||||
## c: The connection.
|
||||
##
|
||||
## is_orig: True if the command was sent by the originator of the TCP
|
||||
## connection.
|
||||
##
|
||||
## .. bro:see:: irc_channel_info irc_channel_topic irc_dcc_message irc_error_message
|
||||
## irc_global_users irc_invite_message irc_join_message irc_kick_message
|
||||
## irc_message irc_mode_message irc_names_info irc_network_info irc_nick_message
|
||||
## irc_notice_message irc_oper_message irc_oper_response irc_part_message
|
||||
## irc_password_message
|
||||
event irc_invalid_nick%(c: connection, is_orig: bool%);
|
||||
|
||||
## Generated for an IRC reply of type *luserclient*.
|
||||
##
|
||||
## See `Wikipedia <http://en.wikipedia.org/wiki/Internet_Relay_Chat>`__ for more
|
||||
## information about the IRC protocol.
|
||||
##
|
||||
## c: The connection.
|
||||
##
|
||||
## is_orig: True if the command was sent by the originator of the TCP
|
||||
## connection.
|
||||
##
|
||||
## users: The number of users as returned in the reply.
|
||||
##
|
||||
## services: The number of services as returned in the reply.
|
||||
##
|
||||
## servers: The number of servers as returned in the reply.
|
||||
##
|
||||
## .. bro:see:: irc_channel_info irc_channel_topic irc_dcc_message irc_error_message
|
||||
## irc_global_users irc_invalid_nick irc_invite_message irc_join_message
|
||||
## irc_kick_message irc_message irc_mode_message irc_names_info irc_nick_message
|
||||
## irc_notice_message irc_oper_message irc_oper_response irc_part_message
|
||||
## irc_password_message
|
||||
event irc_network_info%(c: connection, is_orig: bool, users: count,
|
||||
services: count, servers: count%);
|
||||
|
||||
## Generated for an IRC reply of type *luserme*.
|
||||
##
|
||||
## See `Wikipedia <http://en.wikipedia.org/wiki/Internet_Relay_Chat>`__ for more
|
||||
## information about the IRC protocol.
|
||||
##
|
||||
## c: The connection.
|
||||
##
|
||||
## is_orig: True if the command was sent by the originator of the TCP
|
||||
## connection.
|
||||
##
|
||||
## users: The number of users as returned in the reply.
|
||||
##
|
||||
## services: The number of services as returned in the reply.
|
||||
##
|
||||
## servers: The number of servers as returned in the reply.
|
||||
##
|
||||
## .. bro:see:: irc_channel_info irc_channel_topic irc_dcc_message irc_error_message
|
||||
## irc_global_users irc_invalid_nick irc_invite_message irc_join_message
|
||||
## irc_kick_message irc_message irc_mode_message irc_names_info irc_network_info
|
||||
## irc_nick_message irc_notice_message irc_oper_message irc_oper_response
|
||||
## irc_part_message irc_password_message
|
||||
event irc_server_info%(c: connection, is_orig: bool, users: count,
|
||||
services: count, servers: count%);
|
||||
|
||||
## Generated for an IRC reply of type *luserchannels*.
|
||||
##
|
||||
## See `Wikipedia <http://en.wikipedia.org/wiki/Internet_Relay_Chat>`__ for more
|
||||
## information about the IRC protocol.
|
||||
##
|
||||
## c: The connection.
|
||||
##
|
||||
## is_orig: True if the command was sent by the originator of the TCP
|
||||
## connection.
|
||||
##
|
||||
## chans: The number of channels as returned in the reply.
|
||||
##
|
||||
## .. bro:see:: irc_channel_topic irc_dcc_message irc_error_message irc_global_users
|
||||
## irc_invalid_nick irc_invite_message irc_join_message irc_kick_message
|
||||
## irc_message irc_mode_message irc_names_info irc_network_info irc_nick_message
|
||||
## irc_notice_message irc_oper_message irc_oper_response irc_part_message
|
||||
## irc_password_message
|
||||
event irc_channel_info%(c: connection, is_orig: bool, chans: count%);
|
||||
|
||||
## Generated for an IRC reply of type *whoreply*.
|
||||
##
|
||||
## See `Wikipedia <http://en.wikipedia.org/wiki/Internet_Relay_Chat>`__ for more
|
||||
## information about the IRC protocol.
|
||||
##
|
||||
## c: The connection.
|
||||
##
|
||||
## is_orig: True if the command was sent by the originator of the TCP
|
||||
## connection.
|
||||
##
|
||||
## target_nick: The target nickname.
|
||||
##
|
||||
## channel: The channel.
|
||||
##
|
||||
## user: The user.
|
||||
##
|
||||
## host: The host.
|
||||
##
|
||||
## server: The server.
|
||||
##
|
||||
## nick: The nickname.
|
||||
##
|
||||
## params: The parameters.
|
||||
##
|
||||
## hops: The hop count.
|
||||
##
|
||||
## real_name: The real name.
|
||||
##
|
||||
## .. bro:see:: irc_channel_info irc_channel_topic irc_dcc_message irc_error_message
|
||||
## irc_global_users irc_invalid_nick irc_invite_message irc_join_message
|
||||
## irc_kick_message irc_message irc_mode_message irc_names_info irc_network_info
|
||||
## irc_nick_message irc_notice_message irc_oper_message irc_oper_response
|
||||
## irc_part_message irc_password_message
|
||||
event irc_who_line%(c: connection, is_orig: bool, target_nick: string,
|
||||
channel: string, user: string, host: string,
|
||||
server: string, nick: string, params: string,
|
||||
hops: count, real_name: string%);
|
||||
|
||||
|
||||
## Generated for an IRC reply of type *namereply*.
|
||||
##
|
||||
## See `Wikipedia <http://en.wikipedia.org/wiki/Internet_Relay_Chat>`__ for more
|
||||
## information about the IRC protocol.
|
||||
##
|
||||
## c: The connection.
|
||||
##
|
||||
## is_orig: True if the command was sent by the originator of the TCP
|
||||
## connection.
|
||||
##
|
||||
## c_type: The channel type.
|
||||
##
|
||||
## channel: The channel.
|
||||
##
|
||||
## users: The set of users.
|
||||
##
|
||||
## .. bro:see:: irc_channel_info irc_channel_topic irc_dcc_message irc_error_message
|
||||
## irc_global_users irc_invalid_nick irc_invite_message irc_join_message
|
||||
## irc_kick_message irc_message irc_mode_message irc_network_info irc_nick_message
|
||||
## irc_notice_message irc_oper_message irc_oper_response irc_part_message
|
||||
## irc_password_message
|
||||
event irc_names_info%(c: connection, is_orig: bool, c_type: string,
|
||||
channel: string, users: string_set%);
|
||||
|
||||
## Generated for an IRC reply of type *whoisoperator*.
|
||||
##
|
||||
## See `Wikipedia <http://en.wikipedia.org/wiki/Internet_Relay_Chat>`__ for more
|
||||
## information about the IRC protocol.
|
||||
##
|
||||
## c: The connection.
|
||||
##
|
||||
## is_orig: True if the command was sent by the originator of the TCP
|
||||
## connection.
|
||||
##
|
||||
## nick: The nickname specified in the reply.
|
||||
##
|
||||
## .. bro:see:: irc_channel_info irc_channel_topic irc_dcc_message irc_error_message
|
||||
## irc_global_users irc_invalid_nick irc_invite_message irc_join_message
|
||||
## irc_kick_message irc_message irc_mode_message irc_names_info irc_network_info
|
||||
## irc_nick_message irc_notice_message irc_oper_message irc_oper_response
|
||||
## irc_part_message irc_password_message
|
||||
event irc_whois_operator_line%(c: connection, is_orig: bool, nick: string%);
|
||||
|
||||
## Generated for an IRC reply of type *whoischannels*.
|
||||
##
|
||||
## See `Wikipedia <http://en.wikipedia.org/wiki/Internet_Relay_Chat>`__ for more
|
||||
## information about the IRC protocol.
|
||||
##
|
||||
## c: The connection.
|
||||
##
|
||||
## is_orig: True if the command was sent by the originator of the TCP
|
||||
## connection.
|
||||
##
|
||||
## nick: The nickname specified in the reply.
|
||||
##
|
||||
## chans: The set of channels returned.
|
||||
##
|
||||
## .. bro:see:: irc_channel_info irc_channel_topic irc_dcc_message irc_error_message
|
||||
## irc_global_users irc_invalid_nick irc_invite_message irc_join_message
|
||||
## irc_kick_message irc_message irc_mode_message irc_names_info irc_network_info
|
||||
## irc_nick_message irc_notice_message irc_oper_message irc_oper_response
|
||||
## irc_part_message irc_password_message
|
||||
event irc_whois_channel_line%(c: connection, is_orig: bool, nick: string,
|
||||
chans: string_set%);
|
||||
|
||||
## Generated for an IRC reply of type *whoisuser*.
|
||||
##
|
||||
## See `Wikipedia <http://en.wikipedia.org/wiki/Internet_Relay_Chat>`__ for more
|
||||
## information about the IRC protocol.
|
||||
##
|
||||
## c: The connection.
|
||||
##
|
||||
## is_orig: True if the command was sent by the originator of the TCP
|
||||
## connection.
|
||||
##
|
||||
## nick: The nickname specified in the reply.
|
||||
##
|
||||
## user: The user name specified in the reply.
|
||||
##
|
||||
## host: The host name specified in the reply.
|
||||
##
|
||||
## real_name: The real name specified in the reply.
|
||||
##
|
||||
## .. bro:see:: irc_channel_info irc_channel_topic irc_dcc_message irc_error_message
|
||||
## irc_global_users irc_invalid_nick irc_invite_message irc_join_message
|
||||
## irc_kick_message irc_message irc_mode_message irc_names_info irc_network_info
|
||||
## irc_nick_message irc_notice_message irc_oper_message irc_oper_response
|
||||
## irc_part_message irc_password_message
|
||||
event irc_whois_user_line%(c: connection, is_orig: bool, nick: string,
|
||||
user: string, host: string, real_name: string%);
|
||||
|
||||
## Generated for IRC replies of type *youreoper* and *nooperhost*.
|
||||
##
|
||||
## See `Wikipedia <http://en.wikipedia.org/wiki/Internet_Relay_Chat>`__ for more
|
||||
## information about the IRC protocol.
|
||||
##
|
||||
## c: The connection.
|
||||
##
|
||||
## is_orig: True if the command was sent by the originator of the TCP
|
||||
## connection.
|
||||
##
|
||||
## got_oper: True if the *oper* command was executed successfully
|
||||
## (*youreport*) and false otherwise (*nooperhost*).
|
||||
##
|
||||
## .. bro:see:: irc_channel_info irc_channel_topic irc_dcc_message irc_error_message
|
||||
## irc_global_users irc_invalid_nick irc_invite_message irc_join_message
|
||||
## irc_kick_message irc_message irc_mode_message irc_names_info irc_network_info
|
||||
## irc_nick_message irc_notice_message irc_oper_message irc_part_message
|
||||
## irc_password_message
|
||||
event irc_oper_response%(c: connection, is_orig: bool, got_oper: bool%);
|
||||
|
||||
## Generated for an IRC reply of type *globalusers*.
|
||||
##
|
||||
## See `Wikipedia <http://en.wikipedia.org/wiki/Internet_Relay_Chat>`__ for more
|
||||
## information about the IRC protocol.
|
||||
##
|
||||
## c: The connection.
|
||||
##
|
||||
## is_orig: True if the command was sent by the originator of the TCP
|
||||
## connection.
|
||||
##
|
||||
## prefix: The optional prefix coming with the command. IRC uses the prefix to
|
||||
## indicate the true origin of a message.
|
||||
##
|
||||
## msg: The message coming with the reply.
|
||||
##
|
||||
## .. bro:see:: irc_channel_info irc_channel_topic irc_dcc_message irc_error_message
|
||||
## irc_invalid_nick irc_invite_message irc_join_message irc_kick_message
|
||||
## irc_message irc_mode_message irc_names_info irc_network_info irc_nick_message
|
||||
## irc_notice_message irc_oper_message irc_oper_response irc_part_message
|
||||
## irc_password_message
|
||||
event irc_global_users%(c: connection, is_orig: bool, prefix: string, msg: string%);
|
||||
|
||||
## Generated for an IRC reply of type *topic*.
|
||||
##
|
||||
## See `Wikipedia <http://en.wikipedia.org/wiki/Internet_Relay_Chat>`__ for more
|
||||
## information about the IRC protocol.
|
||||
##
|
||||
## c: The connection.
|
||||
##
|
||||
## is_orig: True if the command was sent by the originator of the TCP
|
||||
## connection.
|
||||
##
|
||||
## channel: The channel name specified in the reply.
|
||||
##
|
||||
## topic: The topic specified in the reply.
|
||||
##
|
||||
## .. bro:see:: irc_channel_info irc_dcc_message irc_error_message irc_global_users
|
||||
## irc_invalid_nick irc_invite_message irc_join_message irc_kick_message
|
||||
## irc_message irc_mode_message irc_names_info irc_network_info irc_nick_message
|
||||
## irc_notice_message irc_oper_message irc_oper_response irc_part_message
|
||||
## irc_password_message
|
||||
event irc_channel_topic%(c: connection, is_orig: bool, channel: string, topic: string%);
|
||||
|
||||
## Generated for IRC messages of type *who*. This event is generated for
|
||||
## messages coming from both the client and the server.
|
||||
##
|
||||
## See `Wikipedia <http://en.wikipedia.org/wiki/Internet_Relay_Chat>`__ for more
|
||||
## information about the IRC protocol.
|
||||
##
|
||||
## c: The connection.
|
||||
##
|
||||
## is_orig: True if the command was sent by the originator of the TCP
|
||||
## connection.
|
||||
##
|
||||
## mask: The mask specified in the message.
|
||||
##
|
||||
## oper: True if the operator flag was set.
|
||||
##
|
||||
## .. bro:see:: irc_channel_info irc_channel_topic irc_dcc_message irc_error_message
|
||||
## irc_global_users irc_invalid_nick irc_invite_message irc_join_message
|
||||
## irc_kick_message irc_message irc_mode_message irc_names_info irc_network_info
|
||||
## irc_nick_message irc_notice_message irc_oper_message irc_oper_response
|
||||
## irc_part_message irc_password_message
|
||||
event irc_who_message%(c: connection, is_orig: bool, mask: string, oper: bool%);
|
||||
|
||||
## Generated for IRC messages of type *whois*. This event is generated for
|
||||
## messages coming from both the client and the server.
|
||||
##
|
||||
## See `Wikipedia <http://en.wikipedia.org/wiki/Internet_Relay_Chat>`__ for more
|
||||
## information about the IRC protocol.
|
||||
##
|
||||
## c: The connection.
|
||||
##
|
||||
## is_orig: True if the command was sent by the originator of the TCP
|
||||
## connection.
|
||||
##
|
||||
## server: TODO.
|
||||
##
|
||||
## users: TODO.
|
||||
##
|
||||
## .. bro:see:: irc_channel_info irc_channel_topic irc_dcc_message irc_error_message
|
||||
## irc_global_users irc_invalid_nick irc_invite_message irc_join_message
|
||||
## irc_kick_message irc_message irc_mode_message irc_names_info irc_network_info
|
||||
## irc_nick_message irc_notice_message irc_oper_message irc_oper_response
|
||||
## irc_part_message irc_password_message
|
||||
event irc_whois_message%(c: connection, is_orig: bool, server: string, users: string%);
|
||||
|
||||
## Generated for IRC messages of type *oper*. This event is generated for
|
||||
## messages coming from both the client and the server.
|
||||
##
|
||||
## See `Wikipedia <http://en.wikipedia.org/wiki/Internet_Relay_Chat>`__ for more
|
||||
## information about the IRC protocol.
|
||||
##
|
||||
## c: The connection.
|
||||
##
|
||||
## is_orig: True if the command was sent by the originator of the TCP
|
||||
## connection.
|
||||
##
|
||||
## user: The user specified in the message.
|
||||
##
|
||||
## password: The password specified in the message.
|
||||
##
|
||||
## .. bro:see:: irc_channel_info irc_channel_topic irc_dcc_message irc_error_message
|
||||
## irc_global_users irc_invalid_nick irc_invite_message irc_join_message
|
||||
## irc_kick_message irc_message irc_mode_message irc_names_info irc_network_info
|
||||
## irc_nick_message irc_notice_message irc_oper_response irc_part_message
|
||||
## irc_password_message
|
||||
event irc_oper_message%(c: connection, is_orig: bool, user: string, password: string%);
|
||||
|
||||
## Generated for IRC messages of type *kick*. This event is generated for
|
||||
## messages coming from both the client and the server.
|
||||
##
|
||||
## See `Wikipedia <http://en.wikipedia.org/wiki/Internet_Relay_Chat>`__ for more
|
||||
## information about the IRC protocol.
|
||||
##
|
||||
## c: The connection.
|
||||
##
|
||||
## is_orig: True if the command was sent by the originator of the TCP
|
||||
## connection.
|
||||
##
|
||||
## prefix: The optional prefix coming with the command. IRC uses the prefix to
|
||||
## indicate the true origin of a message.
|
||||
##
|
||||
## chans: The channels specified in the message.
|
||||
##
|
||||
## users: The users specified in the message.
|
||||
##
|
||||
## comment: The comment specified in the message.
|
||||
##
|
||||
## .. bro:see:: irc_channel_info irc_channel_topic irc_dcc_message irc_error_message
|
||||
## irc_global_users irc_invalid_nick irc_invite_message irc_join_message
|
||||
## irc_message irc_mode_message irc_names_info irc_network_info irc_nick_message
|
||||
## irc_notice_message irc_oper_message irc_oper_response irc_part_message
|
||||
## irc_password_message
|
||||
event irc_kick_message%(c: connection, is_orig: bool, prefix: string,
|
||||
chans: string, users: string, comment: string%);
|
||||
|
||||
## Generated for IRC messages of type *error*. This event is generated for
|
||||
## messages coming from both the client and the server.
|
||||
##
|
||||
## See `Wikipedia <http://en.wikipedia.org/wiki/Internet_Relay_Chat>`__ for more
|
||||
## information about the IRC protocol.
|
||||
##
|
||||
## c: The connection.
|
||||
##
|
||||
## is_orig: True if the command was sent by the originator of the TCP
|
||||
## connection.
|
||||
##
|
||||
## prefix: The optional prefix coming with the command. IRC uses the prefix to
|
||||
## indicate the true origin of a message.
|
||||
##
|
||||
## message: The textual description specified in the message.
|
||||
##
|
||||
## .. bro:see:: irc_channel_info irc_channel_topic irc_dcc_message irc_global_users
|
||||
## irc_invalid_nick irc_invite_message irc_join_message irc_kick_message
|
||||
## irc_message irc_mode_message irc_names_info irc_network_info irc_nick_message
|
||||
## irc_notice_message irc_oper_message irc_oper_response irc_part_message
|
||||
## irc_password_message
|
||||
event irc_error_message%(c: connection, is_orig: bool, prefix: string, message: string%);
|
||||
|
||||
## Generated for IRC messages of type *invite*. This event is generated for
|
||||
## messages coming from both the client and the server.
|
||||
##
|
||||
## See `Wikipedia <http://en.wikipedia.org/wiki/Internet_Relay_Chat>`__ for more
|
||||
## information about the IRC protocol.
|
||||
##
|
||||
## c: The connection.
|
||||
##
|
||||
## is_orig: True if the command was sent by the originator of the TCP
|
||||
## connection.
|
||||
##
|
||||
## prefix: The optional prefix coming with the command. IRC uses the prefix to
|
||||
## indicate the true origin of a message.
|
||||
##
|
||||
## nickname: The nickname specified in the message.
|
||||
##
|
||||
## channel: The channel specified in the message.
|
||||
##
|
||||
## .. bro:see:: irc_channel_info irc_channel_topic irc_dcc_message irc_error_message
|
||||
## irc_global_users irc_invalid_nick irc_join_message irc_kick_message
|
||||
## irc_message irc_mode_message irc_names_info irc_network_info irc_nick_message
|
||||
## irc_notice_message irc_oper_message irc_oper_response irc_part_message
|
||||
## irc_password_message
|
||||
event irc_invite_message%(c: connection, is_orig: bool, prefix: string,
|
||||
nickname: string, channel: string%);
|
||||
|
||||
## Generated for IRC messages of type *mode*. This event is generated for
|
||||
## messages coming from both the client and the server.
|
||||
##
|
||||
## See `Wikipedia <http://en.wikipedia.org/wiki/Internet_Relay_Chat>`__ for more
|
||||
## information about the IRC protocol.
|
||||
##
|
||||
## c: The connection.
|
||||
##
|
||||
## is_orig: True if the command was sent by the originator of the TCP
|
||||
## connection.
|
||||
##
|
||||
## prefix: The optional prefix coming with the command. IRC uses the prefix to
|
||||
## indicate the true origin of a message.
|
||||
##
|
||||
## params: The parameters coming with the message.
|
||||
##
|
||||
## .. bro:see:: irc_channel_info irc_channel_topic irc_dcc_message irc_error_message
|
||||
## irc_global_users irc_invalid_nick irc_invite_message irc_join_message
|
||||
## irc_kick_message irc_message irc_names_info irc_network_info irc_nick_message
|
||||
## irc_notice_message irc_oper_message irc_oper_response irc_part_message
|
||||
## irc_password_message
|
||||
event irc_mode_message%(c: connection, is_orig: bool, prefix: string, params: string%);
|
||||
|
||||
## Generated for IRC messages of type *squit*. This event is generated for
|
||||
## messages coming from both the client and the server.
|
||||
##
|
||||
## See `Wikipedia <http://en.wikipedia.org/wiki/Internet_Relay_Chat>`__ for more
|
||||
## information about the IRC protocol.
|
||||
##
|
||||
## c: The connection.
|
||||
##
|
||||
## is_orig: True if the command was sent by the originator of the TCP
|
||||
## connection.
|
||||
##
|
||||
## prefix: The optional prefix coming with the command. IRC uses the prefix to
|
||||
## indicate the true origin of a message.
|
||||
##
|
||||
## server: The server specified in the message.
|
||||
##
|
||||
## message: The textual description specified in the message.
|
||||
##
|
||||
## .. bro:see:: irc_channel_info irc_channel_topic irc_dcc_message irc_error_message
|
||||
## irc_global_users irc_invalid_nick irc_invite_message irc_join_message
|
||||
## irc_kick_message irc_message irc_mode_message irc_names_info irc_network_info
|
||||
## irc_nick_message irc_notice_message irc_oper_message irc_oper_response
|
||||
## irc_part_message irc_password_message
|
||||
event irc_squit_message%(c: connection, is_orig: bool, prefix: string,
|
||||
server: string, message: string%);
|
||||
|
||||
## Generated for IRC messages of type *dcc*. This event is generated for
|
||||
## messages coming from both the client and the server.
|
||||
##
|
||||
## See `Wikipedia <http://en.wikipedia.org/wiki/Internet_Relay_Chat>`__ for more
|
||||
## information about the IRC protocol.
|
||||
##
|
||||
## c: The connection.
|
||||
##
|
||||
## is_orig: True if the command was sent by the originator of the TCP
|
||||
## connection.
|
||||
##
|
||||
## prefix: The optional prefix coming with the command. IRC uses the prefix to
|
||||
## indicate the true origin of a message.
|
||||
##
|
||||
## target: The target specified in the message.
|
||||
##
|
||||
## dcc_type: The DCC type specified in the message.
|
||||
##
|
||||
## argument: The argument specified in the message.
|
||||
##
|
||||
## address: The address specified in the message.
|
||||
##
|
||||
## dest_port: The destination port specified in the message.
|
||||
##
|
||||
## size: The size specified in the message.
|
||||
##
|
||||
## .. bro:see:: irc_channel_info irc_channel_topic irc_error_message irc_global_users
|
||||
## irc_invalid_nick irc_invite_message irc_join_message irc_kick_message
|
||||
## irc_message irc_mode_message irc_names_info irc_network_info irc_nick_message
|
||||
## irc_notice_message irc_oper_message irc_oper_response irc_part_message
|
||||
## irc_password_message
|
||||
event irc_dcc_message%(c: connection, is_orig: bool,
|
||||
prefix: string, target: string,
|
||||
dcc_type: string, argument: string,
|
||||
address: addr, dest_port: count, size: count%);
|
||||
|
||||
## Generated for IRC messages of type *user*. This event is generated for
|
||||
## messages coming from both the client and the server.
|
||||
##
|
||||
## See `Wikipedia <http://en.wikipedia.org/wiki/Internet_Relay_Chat>`__ for more
|
||||
## information about the IRC protocol.
|
||||
##
|
||||
## c: The connection.
|
||||
##
|
||||
## is_orig: True if the command was sent by the originator of the TCP
|
||||
## connection.
|
||||
##
|
||||
## user: The user specified in the message.
|
||||
##
|
||||
## host: The host name specified in the message.
|
||||
##
|
||||
## server: The server name specified in the message.
|
||||
##
|
||||
## real_name: The real name specified in the message.
|
||||
##
|
||||
## .. bro:see:: irc_channel_info irc_channel_topic irc_dcc_message irc_error_message
|
||||
## irc_global_users irc_invalid_nick irc_invite_message irc_join_message
|
||||
## irc_kick_message irc_message irc_mode_message irc_names_info irc_network_info
|
||||
## irc_nick_message irc_notice_message irc_oper_message irc_oper_response
|
||||
## irc_part_message irc_password_message
|
||||
event irc_user_message%(c: connection, is_orig: bool, user: string, host: string, server: string, real_name: string%);
|
||||
|
||||
## Generated for IRC messages of type *password*. This event is generated for
|
||||
## messages coming from both the client and the server.
|
||||
##
|
||||
## See `Wikipedia <http://en.wikipedia.org/wiki/Internet_Relay_Chat>`__ for more
|
||||
## information about the IRC protocol.
|
||||
##
|
||||
## c: The connection.
|
||||
##
|
||||
## is_orig: True if the command was sent by the originator of the TCP
|
||||
## connection.
|
||||
##
|
||||
## password: The password specified in the message.
|
||||
##
|
||||
## .. bro:see:: irc_channel_info irc_channel_topic irc_dcc_message irc_error_message
|
||||
## irc_global_users irc_invalid_nick irc_invite_message irc_join_message
|
||||
## irc_kick_message irc_message irc_mode_message irc_names_info irc_network_info
|
||||
## irc_nick_message irc_notice_message irc_oper_message irc_oper_response
|
||||
## irc_part_message
|
||||
event irc_password_message%(c: connection, is_orig: bool, password: string%);
|
||||
Loading…
Add table
Add a link
Reference in a new issue