From 252213bbf639c0ef75c6bec8f9739a7d7fe32e22 Mon Sep 17 00:00:00 2001 From: reverse Date: Sat, 18 Jul 2026 19:18:43 +0000 Subject: [PATCH] NOTIFY: document k/m/u/o flags and quit/part/kick reasons --- Services.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/Services.md b/Services.md index 6c4336e..f0c9484 100644 --- a/Services.md +++ b/Services.md @@ -38,7 +38,7 @@ Each line carries the forensic detail a cloak hides, in labelled fields — the The displayed `nick!ident@host` keeps the cloak so it still correlates with what ordinary users see. Because these lines expose real IPs, keep the log channel **operator-only** (`+O`). The connection *port* is not shown — the ircd's server-to-server burst never sends it to services. - **Mask** — a `nick!user@host` pattern, a bare nick glob (`baddie*`), or a `#channel` (watches everyone who joins a matching channel). -- **Flags** — `c` connect, `d` disconnect, `j` join, `p` part, `n` nick change, `t` topic, `s` services command, `S` services SET; `*` for all. +- **Flags** — `c` connect, `d` disconnect, `o` oper-up, `j` join, `p` part, `k` kick, `m` channel mode, `t` topic, `n` nick change, `u` user mode, `s` services command, `S` services SET; `*` for all. Disconnects and parts carry their quit/part reason; a kick names the kicker and reason. - **Expiry** — `+30d`, `+12h`, `+45m`, or `+0` for permanent. /msg OperServ NOTIFY ADD +0 cdn baddie*!*@* known ban-evader