- This topic has 29 replies, 17 voices, and was last updated 22 years, 11 months ago by
.
-
Posts
-
Quote:quote:Originally posted by BrianQuote:quote:Originally posted by spot
but how do u get the ip?From ISPs (Internet Service Providers). Is that what you’re trying to ask?
EDIT: Forgot to add… Different IP addresses are assigned to each computer. The IP addresses starts from 0.0.0.0 to 255.255.255.255. It is just like the telephone companies assign phone numbers 200-0000 to 999-9999.
An IP does not start with 0.0.0.0. You can’t have a 0.X.X.X address! A full C IP scope would be like 10.1.1.1 through 10.1.1.254 (you cant use 0 or 255 on the end) with a subnet mast of 255.255.255.0. Or some people with routers or firewalls at home will notice a 192.168.0.1 address for their device. This provides an internal IP address range, while the outside interface has an address provided by an ISP. If ICMP (ping) is enabled, you can quite easily find an IP address. Solar Winds has a network browser where you can scan your little heart away. If someone has open ports, you can even see the USER that is logged on. Get a book and learn something.
smontgom. You beat me to it. 🙂 haha IP addresses do NOT start from 0.0.0.0 to 255.255.255.255. In fact, IP addresses do not even start with 0 or 255 OR end with 0 or 255. 255 in hex would equal FF, and in IP terms that would register as a 1 or “broadcast”. 0 would of course be zero or in IP terms “the network”. This all because of the mask 255.255.255.0. (telephone companies also do NOT assign numbers from 200-0000 to 999-9999, I used to work for a telephone company but I won’t even get started on that). Ethernet addresses are assigned by the Internet Standards Organization (ISO) more or less. I forget which branch actually handles the first 24bit MAC (actually the first 2 bits). Local IP addresses are assigned according to your MAC address. Your MAC address is a UNIQUE, 48bit set of numbers (hex) attached to your Network Card or Integrated Interface. The first 24bits are assigned by the manufacturer of that Network Card. The first 2bits of the first 24bits are assigned by the ISO to specific manufactures. Are you following? 🙂 ISPs are given a set of IP ranges in whatever class they are in. A, B, or C (D and E you don’t need to worry about). Each of these classes have a range which you can determine by your mask. 255.255.255.0 is class C. Now when you take both of these sets of ranges you can see how unique an IP can get. If you’re running on a router or switch or server of some sort then it possible and actually quite common for 2 people to have the same IP addresses, HOWEVER, you do not connect to THAT IP. You would be connecting to a WAN IP address. The IP address given to you by your ISP. Most IP addresses (localy) are 192.168.2.x or 192.168.1.x but you obviously cannot connect to these addresses since they are local IP addresses. But there ARE ways of obtaining the IP from someone reguardless of direct connections or file transfers. Hackers will use port sniffers or service scanners to check for open ports or unprotected services. IP addresses (WAN) can easily be obtained this way. If you’re trying to obtain an IP from someone you’re simply chatting to you could run Peeking programs such as EtherPeek (if you’re willing to spend the big bucks). But this would also require you to know how to break apart individual packets and read HEX fluently. All in all, if this kind of stuff interests you so much… take Networking classes and obtain a degree. 🙂 And DO NOT try to obtain an IP for revenge. IP addresses are traceable… even on wireless connections. Anything you do can be scanned, monitored, and traced to the very spot you are sitting.
Brian,
You are absolutely right, but note these tiny considerations:
“Your MAC address is a UNIQUE, 48bit set of numbers (hex) attached to your Network Card or Integrated Interface.”
Wrong
Many NICs and routers have a highly user-configurable MAC address. So this does not have to be unique“But there ARE ways of obtaining the IP from someone regardless of direct connections or file transfers.”
True
It even can be far more simpler. All noobs can do it.
E.g. Miranda IM has a open-source, official “Tip info” plugin that uncovers ICQ user’s both internal and external IP address. You don’t even need to talk to that person…just silently add the ICQ# to your CL and move the mouse pointer to the nickname“EtherPeek (if you’re willing to spend the big bucks)”
No need to spend any bucks!
Use the excellent, FREE and open-source Ethereal instead 😀“Anything you do can be scanned, monitored, and traced to the very spot you are sitting.”
In fact, yes. But using chained anon proxies can make tracing much more difficult.Yours, Nederfox
Nederfox:
“Wrong. Many NICs and routers have a highly user-configurable MAC address. So this does not have to be unique”
I’m afraid you’re wrong. Have you studied Networking? Do you know who the ISO is? ALL MAC addresses ARE unique and I would gladly accept proof otherwise! It’s a networking standard and MUST be true in order for networking to even be possible. Granted there may be an incredibly small chance that 2 people will have the same MAC address but the odds of getting struck by lightening 3 times in a row are greater than finding 2 people with the same MAC address. It’s a Law, Standard, and Must Have function for networking. Any test you take will tell you this. MCSA, MCSE, MCP, Network+, Security+, etc. MAC addresses can be altered through routers and programs but when packets are sent, the burned MAC address is always the same to each NIC, regardless of alteration. Change your MAC address with whatever program you use and then do an ipconfig /all and tell me it’s not the same. 🙂 A MAC address is just like a social security number or VIN for your car. You need to do your research a little better on this issue. The address you are thinking of is a MAC clone address… not the MAC address. There is a BIG difference.
As far as chained proxies… yes it will make tracing more difficult but that’s why we have computers. So we can let them sit and do all the work for us. 🙂 Even through chained proxies, one can be traced in a matter of minutes if not less. I’m just basicly saying that it’s not worth it. 🙂
Nederfox: (This is for you to study…)
Physical Numeric Address (MAC Address):
This consists of a 6-byte numeric address, burned into firmware (on a chip) by network interface manufacturers. The first three bytes (known as the organizational unique identifier,[/b] or OUI identify the manufacturer of whatever interface is in use; the final three bytes provide another unique[/b] numeric identifier that causes any interface on a network to have a unique[/b] physical numeric address. The physical numeric address functions at a sublayer of the Data Link layer in the OSI network reference model, called the Media Access Control (MAC) layer. For that reason, it’s also known as a MAC layer address (or MAC address). Although there’s more to it than this explanation suggests, it is the job of the Logical Link Control (LLC) sublayer in the Data Link layer software (usually at the driver level) to enable the network interface to establish a point-to-point connection with another network interface on the same physical cable segment. ARP (Address Resolution Protocol) is used to permit computers to translate numeric IP addresses to MAC layer addresses, and RARP (Reverse ARP) is used to translate MAC layer addresses to numeric IP addresses.“Guide to TCP/IP”, Laura A. Chappell. Course Technology 2002
ISBN: 0-619-18654-2
Pages 54 to 55If you need more proof, go here…
http://www.webopedia.com/TERM/M/MAC_address.htmlNow I’m not trying to be an ass about this by any means… I simply don’t want anyone reading this thread to be misinformed.
Quote:quote:Originally posted by Suzy83Hi everyone 🙂
I read on the AIM forum that you can find out someone’s IP address if you connect to them directly for sending a file and such.
How can you find out someone’s IP address through MSN Messenger?
A friend of mine was chatting with a guy on MSN and he said he found out her IP address just by chatting!! We have no idea how he did that :confused: Can anyone clarify? As far as we know, he’s not a hacker or anything, just handy with computers.
XD i just wnated to know if ya’ll knew what teh heck ya’ll were talking about XD. yes you can get a person’s ip from msn messenger. but no you can’t do it if you are sending them a file, cause all you will get is the msn server that you are relaying off of. but you can however get it when they are sending you a file. i’m not trying to give out any hints for a hacker who might be in here but the command is called “netstat” all you have to do is look for foreign host ip.
and you can easily tell a server ip from a PC.
so before everyone starts telling everything that comes to tehir mind first. here it is. just to clear it all up ^.^. oh and no, if someone uses custom emotioncons or backgrounds you cannot trace teh ip. and yes you can trace if they are using a webcam or audioBrian and Nederfox:
Just to add my two bits on MAC addresses… you are both correct. The key to the material you’re quoting, Brian, is that the MAC address provides a unique physical address to each interface on a network. Two networks attached together by a router at the physical layer can potentionally have a node in one segment that is identical to a MAC address in the other segment, and have no problems what so ever. However, each interface on an individual network must be assigned a unique MAC address for it to work properly. If two interfaces have the same MAC address, “very strange things” will begin to happen with the devices using those interfaces, but only if they share the same physical layer. So, for example, my computer here at home, connected to a personal LAN which passes through a broadband router to my ISP, could potentially have the same MAC address as another machine connected to the same ISP network, since they are on separate physical networks (due to my broadband router).
To ensure that devices generally do not conflict with eachother at the Data Link Layer, manufacturers obtain an OUI (a unique 3-octet identifier that makes up the first portion of a registered MAC address) from the IEEE, the organization the ISO council has designated as the registration authority for OUI assignments. Combined with the OUI and a manufacturer assigned 3-octet identifier, a NIC can have an IEEE certified, globally unique MAC address. However, some (very few) manufacturers try to cut corners and save the cost of selling a standard’s compliant interface. I know this first hand from a shipment of low-cost Ethernet NIC’s a company I consult for received. All of the MAC addresses for the cards were factory set to zeros. It was a complete administrative nightmare until we figured out what was happening and why. Thankfully, in this case, Nederfox was correct in saying that many NICs have a user-configurable MAC address. By simply changing the MAC addresses on the individual cards, using a manufacturer firmware utility, to machine addresses that we knew would be unique to our physical network, the problem instantly went away. We could of contacted the IEEE and asked for our own OUI, but it wasn’t necessary.
Generally speaking, most NIC’s will let you change the MAC address through the drivers of the operating system. This will not permanently replace a unique MAC address if your NIC has been assigned one by the manufacturer, and it will return to it’s factory set MAC address if the setting is cleared, or, in some cases, if the machine is rebooted. In Unix-like operating systems, this is accomplished through the ifconfig command. In Windows, most drivers have a “Network Address” setting in the Advanced tab of your NIC’s device properties. Many Linksys broadband routers also possess the ability to clone a MAC address from a machine on the internal network to it’s WAN port, in case your ISP only allows your original PC’s MAC address to connect.
Now… what this all has to do with the original question is beyond me. 🙂
—
Adam
Chameleon Networks
adam@chameleonnetworks.netwivern: Yes… what I was trying to do was clarify that without making it sound too difficult (tricky when dealing with TCP/IP) 🙂 Looking back at what I wrote, I think I wrote too much. Anyway, I just didn’t want people getting the idea that they could effectively “hide” themselves with a masked or cloned MAC. Without fully understanding what’s going on you could really screw things up. I wish NIC vendors would stop calling their MAC addresses configurable though. It’s a little misleading. And I don’t know how this thread branched off on to TCP/IP. Suzy83 is probably going to get a headache reading all of this. 🙂 If they’re still reading the thread.
broku: If MSN treats peer-to-peer connections like a regular network does then YES you can get an IP by sending them a file. I’m not sure how MSN works but for the sake of argument if MSN works like a router or switch for messenger users then your IP packets must contain a destination MAC and IP. Therefor, when your computer handshakes with their computer to establish a session you will have their IP. But like I said… I don’t know how MSN works so you could be right.
LOL
I don’t think Suzy83 expected such verbose explanation…
anyway, nice to see some ppl here who know well the network mechanism thingy. (svmedia, wivern, thx)Indeed, duplicate Mac addresses are not necessarily troubleshooting. We can extrapolate this to duplicate IP addresses…if the duplicates are sufficient distant from eachother, one might not experience problems directly.
For tracking down this kind of protocol problems, this is why some ISPs want to have your NIC Mac address.Nederfox:)
EDIT: @svMedia:
When connected to the Msn network, a constant connection is opened to baym-cs174.msgr.hotmail.com:1863.
This machine could act as “man in the middle”.Ok… so MSN works as a message delivery boy more or less? 🙂
Suzy83.. if you’re still reading this thread I’ll put it in the simplest words:
“It takes a bit of work, and a little knowledge of networking”There is really no need to do this unless of course one had something “promiscuous” on their agenda. Wether that be to show off, scare someone, or worse. Who knows? My suggestion is: put that person on your ignore list. :p If he’s not willing to let you know how he did it personally, or even why, then he’s not worth talking to.
EDIT:
BTW… I had to add this 🙂 hahaI never knew MSN would volentarily be anyone’s b*tch.
Interesting to know though. Are all messenger services run in this way?what can a person do wit some1’s IP address?. like i can get peoples IP from AIM but i dont do anything wit em cuz i dont kno what i can do.
Quote:quote:Originally posted by zanevalonwhat can a person do wit some1’s IP address?. like i can get peoples IP from AIM but i dont do anything wit em cuz i dont kno what i can do.
dude how do you get people IP from aim without them giving it to you…please tell me, anyways i think you can get sensitive information such as passwords…not 100% sure
if you have someone’s IP address and bad intentions, you could try to get into that person’s computer and mess with their stuff. I’m sure nobody has to tell you that it’s illegal to gain access to any computer without permission, and most people won’t do anything with IP addresses, if they even know what they are for.
Just as a footnote to the posts listed here, I’d like to add:
Unless you are trying to trace someone who has bad intentions toward you, or you yourself have bad intentions, there is no need to know someones IP address.
I’d also like to add, for the benefit of those reading this thread with bad intentions. No matter how well you try to mask/spoof your IP when on the Internet you can be traced and prosecuted.
Quote:quote:Originally posted by hellsfury_25mUnless you are trying to trace someone who has bad intentions toward you, or you yourself have bad intentions, there is no need to know someones IP address.
I’d also like to add, for the benefit of those reading this thread with bad intentions. No matter how well you try to mask/spoof your IP when on the Internet you can be traced and prosecuted.
Perfect bottom line.
EOF.
- The topic ‘Finding out someone’s IP address?’ is closed to new replies.