Consider the graph to the right, which represents the computer network. Each line represents an established connection. Therefore, the serverC is connected directly to A, which is also connected to B and D. If a disruption in the connection between C and A occurs, the connection may be terminated as a result. This can occur either by a socket producing an error, or by excessive lag in which the far server A anticipates this case. When the connection between A and C is severed, users who were connected to other servers that are no longer reachable on the network appear to quit. For example, if user Sara is connected to server A, user Bob is connected to server B, and user Joe is connected to C, and C splits, or disconnects, from A, it will appear to Joe as if Sara and Bob both quit, and it will appear to both Sara and Bob that Joe quit. However, Joe can still talk to anyone who is connected to the same server. This happens because the servers to which they are connected are informed of the change in the network status, and update their local information accordingly to display the change. Later, server C may relink to a server on the network and the users who appeared to have quit will rejoin; the process of sending this updated information to all servers on the network is called a netburst.
Occasionally, users will attempt to use netsplits to gain access to private channels. If none of the channel users were on server C, a user could join a private channel and later gain access when the servers relink. This is commonly known as split riding or riding the split. Another typical netsplit-oriented IRC attack is Nickname Colliding. In this attack, a user on a split segment of the network would change nicknames to that of a user on the other side of the split network. Upon reconnection, the network would disconnect both users because only one nickname may be in use at one time. Modern IRC server software has largely eliminated this method, but servers using older software may still be vulnerable.
Appearance
Below are examples of a typical netsplit. When two servers split, a user sees this as large number of users quitting. After the servers are reconnected, a user sees the other users rejoining.
