def _add_irc(self, conn, tcpdata):
"""
Adds an IRC communication.
@param conn: TCP connection info.
@param tcpdata: TCP data in flow
"""
if enabled_passlist:
if conn["src"] in ip_passlist:
return False
if conn["dst"] in ip_passlist:
return False
try:
reqc = ircMessage()
reqs = ircMessage()
filters_sc = ["266"]
client = reqc.getClientMessages(tcpdata)
for message in client:
message.update(conn)
server = reqs.getServerMessagesFilter(tcpdata, filters_sc)
for message in server:
message.update(conn)
self.irc_requests = self.irc_requests + client + server
except Exception:
return False
return True
def _add_irc(self, tcpdata):
"""
Adds an IRC communication.
@param tcpdata: TCP data in flow
@param dport: destination port
"""
try:
reqc = ircMessage()
reqs = ircMessage()
filters_sc = ["266"]
filters_cc = []
self.irc_requests = self.irc_requests + reqc.getClientMessages(tcpdata) + reqs.getServerMessagesFilter(tcpdata,filters_sc)
except Exception, why:
return False
def _add_irc(self, tcpdata):
"""
Adds an IRC communication.
@param tcpdata: TCP data in flow
@param dport: destination port
"""
try:
reqc = ircMessage()
reqs = ircMessage()
filters_sc = ["266"]
filters_cc = []
self.irc_requests = self.irc_requests + reqc.getClientMessages(tcpdata) + reqs.getServerMessagesFilter(tcpdata,filters_sc)
except Exception, why:
return False
def _check_irc(self, tcpdata):
"""
Checks for IRC traffic.
@param tcpdata: tcp data flow
"""
try:
req = ircMessage()
except Exception, why:
return False
def _check_irc(self, tcpdata):
"""
Checks for IRC traffic.
@param tcpdata: tcp data flow
"""
try:
req = ircMessage()
except Exception, why:
return False
def _add_irc(self, conn, tcpdata):
"""
Adds an IRC communication.
@param conn: TCP connection info.
@param tcpdata: TCP data in flow
"""
try:
reqc = ircMessage()
reqs = ircMessage()
filters_sc = ["266"]
client = reqc.getClientMessages(tcpdata)
for message in client:
message.update(conn)
server = reqs.getServerMessagesFilter(tcpdata, filters_sc)
for message in server:
message.update(conn)
self.irc_requests = self.irc_requests + client + server
except Exception:
return False
return True
def check(tcp):
"""
Checks for IRC traffic.
Identify
@param tcpdata: tcp data flow
"""
if not (tcp.dport != 21):
print "IRC found"
return False
try:
req = ircMessage()
except Exception:
return False
return req.isthereIRC(tcp.data)
