Getting IP information

When you issue ‘netstat’ command it gives you all the ip addresses you are connected to. All the ip addresses with :http at end are open web pages. Others that have a port number at end (e.g. :5001) are messengers and other applications that uses your internet connetion.

I think for PMs yahoo uses port #5101. So to find out the ip address of a person, whom you are talking with on yahoo PM, look for an ip address that ends with :5010 (e.g. 216.85.144.245:5101). And yes only netstat won’t show you ip address in numerical format, rather it shows ip in words. to see it in numerical format you have to specify -n option. i.e. netstat -n. PS:mostly you don’t need to see the ip address in numerical format. Because word ip address has enough information for location. e.g. orient234.dialup.toronto.ca:5101

After you know the ip address you can use any software that are available to find location from ip as mentioned by sg. But I would recommend the database of internet authorities. World is devided in 3 parts for internet distribution and there are 3 authorities for correcponding division to assign ip addresses. those are ARIN, RIPE and APNIC and those are controlled by top most authotiry called IANA. So just search in their ‘whois’ database. I am pasting the links to their ‘whois’ database below:

http://www.arin.net/whois/index.html
http://www.apnic.net/
http://www.ripe.net/db/whois/whois.html

(I am not sure about which countries fall under which authority but roughly ARIN handles USA side regions, APNIC handles asia-pacific region as suggested by the name and RIPE handles australia side regions. But don’t worry about it use any of the links to find the location and if you used wrong link it will give you correct authority link for that location.)

If you use any other software it is evantually going to use these database so its better to use these links. They are supposed to have the latest information. The only disadvantage is that they won’t show location in graphical format.

I’ll attempt to keep this short 😉

Firstly, you may only obtain the IP (and isn’t this discussed in about 20 other threads?) when the IM goes into peer 2 peer mode, in which case messages are not handled by the server or routed through it. This only happens when two buddies talk usually, and it doesn’t happen all that often.

Secondly, it’s port 5101 http://www.helpbytes.co.uk/yconnect.php

Thirdly, Jimmy is indeed correct on most parts of his IP assignment.

RIPE is Europe, Middle East,Central Asia and parts of Africa (above equator), not Australia.

ARIN is indeed American plus sub-sahara Africa.

APNIC handles Australian too

There is a fourth, LACNIC, Latin Ammerica and Carribean.

As Jimmy said, they are responsible for IP assignments, an ISP must obtain the IP rights from these people first. It is from these 4 you get the whois information on which ISP the IP belongs too.

Here is a task for you, do a whois on Microsoft.com. Once you have done that, you will realize why you shouldn’t trust any information provided by a whois search. There are times where you can trust it, but only if you are sure that it is up to date information, and 90 percent of the time, it’s not. You don’t even really need any whois information on anyone or anything.

d00d, hve you ever done a whois on microsoft.com, it’s hillarious. At any rate, you are right, it’s not relevant, and wasn’t to begin with, which is what the last statement of my last post was about. However, whois information can actually be several years old, it’s the DNS information that’s usually not more than 48 hours old, and whois and DNS aren’t related at all. Whois just gives you general information about the site/domain, like the admin, abuse email address, the engineers/admin’s address, location, so on and so forth. The DNS information can actually be read by doing a dig on the site/domane (which is what I thinkyou meant by domane whois, however, it’s not techincally called that, it’s actually called…. a dig) and they can be as much as a week outdated, however, most are usually 600 seconds (6 min) to 24 hours outdated. The ISP’s domain info that I work at keeps it for 600 seconds. Also, an IP whois is the same as a domane/hostname/site whois, since, it’s all done by IP address anyways, the name is just easier to remember. 😉 I could explain how DNS works, but I’m sure you know Freddy, at least I think you do :eek:, and if you don’t or anyone else wants to know, I can give an explanation, as long as it won’t piss off the admins of this site anyways :D.

Dammit, you’ll have to wait till I go back to work on Teusday to get the information I was talking about on the whois. I’ll post it here on Teusday, assuming I remember to get it then. But I figured you knew how DNS works, though it is nice of us to show everyone else, however irrelivant it is. You know what, forget the microsoft thing, since this entire deal is irrelivant, it’s not going to matter, and this is my last post on the subject. Maybe an admin should lock this one too. 😮

Oh I know that, but it’s still funny. An yeah, I didn’t think about the content of it being not accepted here, though, it could probably be edited. But yes, I know that’s not a domain whois.