Internet Relay Chat (IRC)
XXX - add a brief IRC description here
XXX - add a brief description of IRC history
- ["TCP"]: Typically, IRC uses ["TCP"] as its transport protocol. The well known TCP port for IRC traffic is 6667.
XXX - Add example traffic here (as plain text or Ethereal screenshot).
The IRC dissector is (fully functional, partially functional, not existing, ... whatever the current state is). Also add info of additional Ethereal features where appropriate, like special statistics of this protocol.
(XXX add links to preference settings affecting how IRC is dissected).
Example capture file
XXX - Add a simple example capture file to the SampleCaptures page and link from here (see below). Keep this file short, it's also a good idea to gzip it to make it even smaller, as Ethereal can open gzipped files automatically.
A complete list of IRC display filter fields can be found in the [http://www.ethereal.com/docs/dfref/i/irc.html display filter reference]
Show only the IRC based traffic:
You cannot directly filter IRC protocols while capturing. However, if you know the ["TCP"] port used (see above), you can filter on that one.
Capture only the IRC traffic over the default port (6667):
tcp port 6667
[http://www.ietf.org/rfc/rfc1459.txt RFC 1459] Internet Relay Chat Protocol
[http://www.ietf.org/rfc/rfc2810.txt RFC 2810] Internet Relay Chat: Architecture
[http://www.ietf.org/rfc/rfc2811.txt RFC 2811] Internet Relay Chat: Channel Management
[http://www.ietf.org/rfc/rfc2812.txt RFC 2812] Internet Relay Chat: Client Protocol
[http://www.ietf.org/rfc/rfc2813.txt RFC 2813] Internet Relay Chat: Server Protocol