Giving OpServ the ability to record a clone attack from
when it first detects it to the point when channel
moderation expires, and e-mailing the results would be a
great way of monitoring such attacks and being able to
log the results, such as the channel name, who may
have been involved and the hosts used.
For example, OpServ detects a join-flood on channel
#test, informs people in the alert-channel and joins the
detected channel for moderation. As soon as OpServ
joins, it begins recording everything taking place in the
channel such as:
- Channel Joins/Parts
- Modes Changes
- Users Speaking
- List of every user (+hostmask) in channel
- Date/Time attack occured
OpServ could then use an e-mail system such as the
one NickServ uses for cookies, and e-mail the results to
an address specified in the config file.