- Posts: 107
- Thank you received: 0
IP address of skype contacts
18 years 1 month ago #18175
by aminos
IP address of skype contacts was created by aminos
Hi everybody,
Just a simple question, I am using slackware Linux I want just to know how to know the ip address of the contact users with whom i am chatting, I read somewhere we can use the netstat command to do this butu i don't know how !
actually the same question apply to the winXP system !
so if u have any idea & thanks in advance.
Just a simple question, I am using slackware Linux I want just to know how to know the ip address of the contact users with whom i am chatting, I read somewhere we can use the netstat command to do this butu i don't know how !
actually the same question apply to the winXP system !
so if u have any idea & thanks in advance.
18 years 1 month ago #18176
by Arani
Picking pebbles on the shore of the networking ocean
Replied by Arani on topic IP addresses
hi,
just to do away with the confusion, netstat does not give you any IP address information. this command line syntax gives you a detailed information of the ports that are being used on your computer by the TCP/IP stack.
regarding skype and IP addresses, if you are not directly connected to some user on skype, you wont be able to check their IP addresses. even then, if you or the other user is behind NAT or a firewall, the IP addresses would be masked.
so in short, it's difficult to obtain an IP address of the user.
just to do away with the confusion, netstat does not give you any IP address information. this command line syntax gives you a detailed information of the ports that are being used on your computer by the TCP/IP stack.
regarding skype and IP addresses, if you are not directly connected to some user on skype, you wont be able to check their IP addresses. even then, if you or the other user is behind NAT or a firewall, the IP addresses would be masked.
so in short, it's difficult to obtain an IP address of the user.
Picking pebbles on the shore of the networking ocean
18 years 1 month ago #18179
by Smurf
Thats not quite correct, if you do a netstat (well on Windows XP, don't know about nix), it does give the port information but this will also detail the foreign and source IP Address information that has the IP/Port mapping to your computer.
If you look at this netstat off my machine, you will notice a connection from my machine 10.11.200.2 on port 2069 to 204.157.10.72 on port 80. Further down i do a nslookup on www.firewall.cx which give me the same ip address 204.157.10.72 so that line in the netstat is the socket information of my connection to this site. (Ignore the DNS Timeouts, thats because my firewall kicked in so i had to allow the nslookup access)
As Arani quite rightly said though, as far as i am aware, since Skype uses P2P technologies to route the traffic, you may not actually see the direct connection with the socket information from the IP/Port mapping that NetStat would generate. Also, the Nat may also cause issues.
Cheers
Wayne Murphy
Firewall.cx Team Member
www.firewall.cx
Now working for a Security Company called Sec-1 Ltd in the UK, for any
Penetration Testing work visit www.sec-1.com or PM me for details.
Replied by Smurf on topic Re: IP addresses
hi,
just to do away with the confusion, netstat does not give you any IP address information. this command line syntax gives you a detailed information of the ports that are being used on your computer by the TCP/IP stack.
Thats not quite correct, if you do a netstat (well on Windows XP, don't know about nix), it does give the port information but this will also detail the foreign and source IP Address information that has the IP/Port mapping to your computer.
If you look at this netstat off my machine, you will notice a connection from my machine 10.11.200.2 on port 2069 to 204.157.10.72 on port 80. Further down i do a nslookup on www.firewall.cx which give me the same ip address 204.157.10.72 so that line in the netstat is the socket information of my connection to this site. (Ignore the DNS Timeouts, thats because my firewall kicked in so i had to allow the nslookup access)
As Arani quite rightly said though, as far as i am aware, since Skype uses P2P technologies to route the traffic, you may not actually see the direct connection with the socket information from the IP/Port mapping that NetStat would generate. Also, the Nat may also cause issues.
Cheers
Wayne Murphy
Firewall.cx Team Member
www.firewall.cx
Now working for a Security Company called Sec-1 Ltd in the UK, for any
Penetration Testing work visit www.sec-1.com or PM me for details.
18 years 1 month ago #18180
by donanak
A smart person knows what to say, but a wise person knows whether or not to say it.
'When perfection comes, the imperfect disappear.'
Replied by donanak on topic Re: IP address of skype contacts
And FYI, if you're behind a firewall/NAT yourself netstat will not be able to output direct connections.
Just my 2 cents
Just my 2 cents
A smart person knows what to say, but a wise person knows whether or not to say it.
'When perfection comes, the imperfect disappear.'
18 years 1 month ago #18181
by Smurf
Wayne Murphy
Firewall.cx Team Member
www.firewall.cx
Now working for a Security Company called Sec-1 Ltd in the UK, for any
Penetration Testing work visit www.sec-1.com or PM me for details.
Replied by Smurf on topic Re: IP address of skype contacts
Oh, and if you were wondering why there are 0.0.0.0 addresses, this simply means that the service (application, deamon, or whatever you call it) that is listening on that port, is listening on all IP Addresses that are on the machine (if you have more then one then it will be mapping to the port on all of them).
e.g.
If i had a webserver with ip addresses 10.10.10.1, 10.10.10.2, 10.10.10.3, 10.10.10.4 and i had an entry that said 0.0.0.0:80 on the source address that was "Listening". This means that IIS (Apache or whatever your Webservice was) would be listening on all 4 address on port 80.
Also, if you do a NetStat with the -o option (for Windows XP/2003 Server) then you will see the Process ID's also so you can then map it to the service that was listening. This is also good if you think you have a Trojan or the like to help identify it.
Hope that makes sense.
e.g.
If i had a webserver with ip addresses 10.10.10.1, 10.10.10.2, 10.10.10.3, 10.10.10.4 and i had an entry that said 0.0.0.0:80 on the source address that was "Listening". This means that IIS (Apache or whatever your Webservice was) would be listening on all 4 address on port 80.
Also, if you do a NetStat with the -o option (for Windows XP/2003 Server) then you will see the Process ID's also so you can then map it to the service that was listening. This is also good if you think you have a Trojan or the like to help identify it.
Hope that makes sense.
Wayne Murphy
Firewall.cx Team Member
www.firewall.cx
Now working for a Security Company called Sec-1 Ltd in the UK, for any
Penetration Testing work visit www.sec-1.com or PM me for details.
18 years 1 month ago #18183
by Arani
Picking pebbles on the shore of the networking ocean
Replied by Arani on topic Re: IP address of skype contacts
kudos to smurf for pointing out what i had missed on netstat. i had ignored that part of info provided by the netstat command.
thanks smurf. it all comes back to me now.
cheers
thanks smurf. it all comes back to me now.
cheers
Picking pebbles on the shore of the networking ocean
Time to create page: 0.136 seconds