Printable View
If your chatting with a friend on one of the many chat programs like MSN, Yahoo, AIM, etc... Is there a way to get your friends IP address through a DOS command in WIndows XP, or perhaps some other way? I am not asking this to hack into their computer or anything of that matter just need the information, thanks.
Only if you create a direct connection (sending files, voice chat, send picture, etc.)
You have to find out for each service though, they may operate differently.
AFAIK AIM and MSN communicate through their servers until you direct connect.
You should see the IP show up in netstat.
Or a protocol sniffer... whichever you prefer.
No offense intended kyrios but...
why would you need to have it then? Would I need your IP to talk to you in chat?Quote:
I am not asking this to hack into their computer or anything of that matter just need the information, thanks.
To protect his own IP with someone they may not trust?Quote:
why would you need to have it then?
Oh I see, so I guess just chatting with the person won't give you their IP address. So if they send me a file or the other way around then doing something like, netstat -a, would that display their IP address. Or perhaps using a program like Ethereal?
Hi phishphreek80,
but...he just said they were friends...why wouldn't he trust him?...and what use could he have for his IP?
I really don't know, that's why I'm asking.
Eg
edit: would sending things also display the home IP address of a dynamic IP
Yeah that is exactly why phisphreek80. I have a friend well sorta friend at college and I know for a fact he hacks, or can because he has a whole lot of knowledge in the internet "security" field. And we need to chat on one of these services to exchange homework and the like. So I need to know if there is a way. Thanks.Quote:
In regards to AIM at the least (the one I know the most about unfortunately) -
Your IP address is known only to the AIM servers, as is the IP of whomever you're IMing with. AIM does not divulge said IP to either end user, although it (along with your entire conversation) is logged deep within the bowels of their servers for their private usage (snitching to the authorities, picking out which ad to send you next, etc.) This is done by point relay - you're not really messaging the end user... you're messaging AOL (who makes and owns AIM for those of you who've lived under rocks for the past 15 years or so), who in turn relays that message the end user on your behalf.
It's not a bad setup if you want to protect your users from everyone else while stealing whatever they choose to convey for yourself. :rolleyes:
[edit] Just realized I didn't fully answer your question, so here's the rest:
All that being said, a DOS command like say...netstat... will only show you the IP address of whatever AIM server you're in contact with, NOT the end user. I've never used Ethereal to sniff AIM packets, so I can't confirm or deny this, but I'm pretty sure the same is true there as well. [/edit]
Hope that helped.
[moredit]Ok, so now a caution to add to the unwary user - common sense dictates that if he puts a link into whatever message he sends you he *could* be snagging your IP off that link. Be careful of every file he sends as well, for they could contain keyloggers, or other various and sundry malware. If you know this person IRL (I'm pretty sure you do from reading your posts) be sure to protect your computer physically as well. DO NOT let him have physical access to your computer! (If I can touch a box, I can pwn it forever in under a minute.)[/moredit] - and I caught the next response from Phish as I posted this - the above caution should serve warning on what he said too.... :D
|3lack|ce: that is true for only chatting, as soon as you establish a direct connection (picture, file, webcam, etc.) you are no longer going through the AIM servers.
Can you imagine AOL trying to proxy everyone's files around for free?
Text is one thing... multimegabye files/streams are another
OH DEAR!
If it is homework, why don't you do your own? I used to when I was at school :DQuote:
And we need to chat on one of these services to exchange homework and the like.
If it is pr0n...............go find your own.
You only "share" with people you TRUST and trust implicitly. You obviously don't trust this guy, so don't share.
If you are exchanging things, you are wide open as suggested..........sure your IP addy may change with each logon, but you will already have been backdoored..............if it hasn't happened by now?
Like I said..........trust :rolleyes:
Hey nihil,Quote:
Originally posted here by nihil
OH DEAR!
You only "share" with people you TRUST and trust implicitly. You obviously don't trust this guy, so don't share.
If you don't trust some one, why would you have him on your contact list????.. :confused:
What really happen that some persons can't prevent themselves from accepting those people to share files with, thus they pay for thier own curiosity.... :)
Egaladeist's question is just in time and place, this question might implicate so many meaning like a little port scanning like using SB7, or NB. Only provide an IP and see if the PC is infected has some ports welcomes your packets... This is a possible side... actually more likely to be the main reason...Quote:
but...he just said they were friends...why wouldn't he trust him?...and what use could he have for his IP?
I do second phishphreek80's opnion, if you noticed in the chat that the client asks the person if he wishes to establish a direct connection... actually it is most shown in application sharing... Synchronization process.
Just my $0.02
Cheers :)
I have some students on my MSN list and that doesn't mean I trust them. :DQuote:
If you don't trust some one, why would you have him on your contact list????
Hey MsMittens,
You always have something special to say..lol.. ;)
This matter is really dependent on the person, some will add other won't.... I am from the others.. I don't add anyone, unless I'm certain that he won't hurt me... Even if I downloaded seomthing he sent.. say like a picture, first I will scan... open it with a hex editor.. then open it safely.. If something bad happened then I would be lamer.... :D
Cheers
Then that would indicate you don't trust them. ;) If you did, you'd trust them enough to scan it and ensure that it is safe before they send it.Quote:
I don't add anyone, unless I'm certain that he won't hurt me... Even if I downloaded seomthing he sent.. say like a picture, first I will scan... open it with a hex editor.. then open it safely..
Oh! you always find something to make it disjionted..... lol.... ;)
Well, I think here level of trustworthy should get involved... My friend might have no intention to hurt me.. but his OS might be infected and some of his files are about bleeding viruses... So I have to check it.. am I right?...
Somting is guranted, if you sent me something I will open it.. without scanning.. as I know you are treating with security issues strictly... So you will cut some corners for me... lol... :D
When it comes to computers I don't trust my mother, my friends or anyone at all. Who knows what lurks on yonder box? "What light through yonder window breaks?"
Well thank you all for your replies. I was transferring files today with a friend I do trust and I couldn't get his IP. I tried, netstat, netstat -a, netstat -n... and his IP still wouldn't come up during the transer. I also tried Cain and I couldn't get it, but o well. Thanks
Good point! RoadClosed
There are two angles to this.
1. Those you do not trust not to deliberately attack you.
2. Those who you do not trust to keep their box malware free.
There have been several nasties recently that have used P2P as one of their vectors, as I recall.
:)