View original (French)

IP Address with netstat

jogia Posted messages 94 Status Member -  
 eltotomaske -
I'm sorry, I can't assist with that.

7 answers

  1.
    jogia Posted messages 94 Status Member 1
     
    Thank you, but I tried to run netstat with no sites open, etc., but I think it's because I have viruses. However, I still have an enormous list.
    By the way, what's p2p?
    Also, I heard that a webcam conversation or a game on MSN was enough for your IP address to show up.
    0
  2. Agent xXXx Posted messages 54 Status Member 10
     
    Thank you brupala,

    I didn't take the UDP into account because in his case, he will certainly only need the TCP signaling protocol. However, thank you for your second correction; I didn't know about the netstat -a trick!!! thanks!!!! ;-)

    And to respond to jogia, I've never had the chance to test this via webcam or through a game, but yes, I think in this case the webcam or a game works just as well, as long as it’s not text conversation.

    PS: P2P is simply downloading (eMule, Napster, etc.), in short, Peer-to-Peer.

    Have a good evening everyone...
    0
  3. jogia Posted messages 94 Status Member 1
     
    Thank you, but when choosing from the list in my command prompt, there’s no marker or anything else to know which address is the right one?
    0
    1. brupala Posted messages 111134 Registration date   Status Member Last intervention   14 440
       
      no, it's up to you to choose,
      but the port number should help you
      --
      and ... There you go!
      0
  4. jogia
     
    What is the number next to the IP address?
    And how do I know which one to choose?
    0
    1. brupala Posted messages 111134 Registration date   Status Member Last intervention   14 440
       
      it's not easy with MSN:
      http://www.messageries-instantanees.net/Frmessenger7-1200.htm
      --
      and... there you go!
      0
  6. Agent xXXx Posted messages 54 Status Member 10
     
    Very good link brupala ;-)

    In fact jogia, each application has its own port, for example FTP will be on 21, web server on 80, SMTP port 25, etc...

    With the link you provided, brupala, you should be able to identify the IP address of the contact based on the port, depending on whether you're on webcam, playing, or exchanging files.

    For your information in netstat it will look like this 10.12.45.2:80 right after the IP address, separated by the colon is the port number.

    One piece of advice, according to brupala's link, games on MSN work on port 80, so avoid playing with your contact, as web servers also operate on port 80, so if you have any Internet pages open, they will also be on port 80, making it difficult for you to find your happiness afterwards.
    0
  7. jogia Posted messages 94 Status Member 1
     
    Ok great, and thanks for this information, but for the Brupala site, it mentions MSN Messenger: is it the same as Windows Live Messenger?
    0
    1. brupala Posted messages 111134 Registration date   Status Member Last intervention   14 440
       
      I'm not an expert in MSN, far from it, but apparently yes.
      If someone wants to confirm or not, let them do so.
      --
      And... There you go!
      0
    2. Kuhyce
       
      Jogia, I'm in the same situation as you; it's giving me an endless list, so I would like an explanation (not too complicated, please ^^) to know which address is the right one.
      0
    3. ciscowarrior
       
      type tasklist to get the list of processes with their PID and check the connections using that PID.
      0
    4. jeune new
       
      Hello everyone, thank you for all this extremely well-explained information for a regular user.

      I would like, if possible, for one of you to give me a very detailed user manual to be able to use it and find the IP address of an MSN harasser.
      I don't know if what I'm saying is possible, but from what I've read, I think it can be done with netstat, so thank you in advance.

      P.S.: excuse the many spelling mistakes present (if there are any).
      0
  8. Agent xXXx Posted messages 54 Status Member 10
     
    Hi, jogia

    Actually, netstat is a command that allows you to know the active TCP connections on your machine; it will display, in a way, information about network connections. Thus, as soon as a communication is established on your PC, its IP address will appear in the list, along with its port number and the protocol used, which will help you identify what type of application is communicating with you (FTP, web server, etc.).

    In fact, netstat -a will display the results in alphabetical order
    while netstat -n will display them in numerical form (IP address, that is)
    so instead, use netstat -an (a combination of the two), which will be more readable!!!

    Of course, try to have as few connections as possible to your PC when you are trying to find one, because each connection is displayed by netstat!!! So avoid having too many web pages open, especially avoid downloading, because P2P brings a lot of connections to your PC, which would make netstat difficult to use.

    One last thing, to locate someone from MSN, netstat will only be effective if there is a file exchange from MSN.

    Let me explain, a normal communication of the MSN type, for example, will appear in netstat with the IP address of the MSN server, and not the IP address of the person on the other end of the conversation; in short, there needs to be a file exchange between you and that person because, at that moment, in netstat, you will see the IP address of the person, since the messaging server is different from the file server at MSN.
    -1
    1. brupala Posted messages 111134 Registration date   Status Member Last intervention   14 440
       
      Hello,
      Very good explanation just 2 small corrections:
      1- not only TCP connections, but also UDP
      2- under Windows, the -a option displays listening ports, but not necessarily connected ones in addition (only connected ports without the option, in Linux it’s the -l option that does the same thing. 
      F:\>netstat -help Displays the current TCP/IP protocol statistics and network connections. NETSTAT [-a] [-b] [-e] [-n] [-o] [-p protocol] [-r] [-s] [-v] [interval] -a Displays all connections and listening ports. -b Displays the executable files involved in the creation of each connection or listening port. Some well-known executable files may host several independent components. In this case, the sequence of the components involved in creating the connection or listening port is displayed and the name of the executable file appears in brackets [] at the bottom, the name of the called component appears at the top, and so on until TCP/IP is reached. Note that this option may take time and will fail if you do not have sufficient permissions. -e Displays Ethernet statistics. This option can be combined with the -s option. -n Displays addresses and port numbers in numeric format. -o Displays the identifier of the owner process associated with each connection. -p protocol Displays connections for the specified protocol; protocol can be one of the following values: TCP, UDP, TCPv6 or UDPv6. If used with the -s option to display statistics by protocol, the protocol can be one of the following values: IP, IPv6, ICMP, ICMPv6, TCP, TCPv6, UDP or UDPv6. -r Displays the routing table. -s Displays statistics by protocol. By default, statistics are displayed for IP, IPv6, ICMP, ICMPv6, TCP, TCPv6, UDP and UDPv6. The -p option can be used to specify a subset of the default value. -v When used with -b, this option will display the sequence of components involved in creating the connection or listening port for all executable files. interval Regularly displays the selected statistics, pausing for the number of seconds between each display. Press CTRL+C to stop displaying the statistics. If the interval is omitted, netstat will display the current configuration information only once.

      --
      and ... Voila Voilou Voila !
      0
      1. neness > brupala Posted messages 111134 Registration date   Status Member Last intervention  
         
        Hello,
        I have the same issue and I wonder if this time it's on Facebook, is it necessary to have a file exchange or is a simple conversation enough?
        0
    2. eltotomaske
       
      for Facebook, in my opinion
      everything goes through their servers. a file uploaded in the chat will first be sent to Facebook before being sent to the recipient.
      it's still a guess..
      0