Use netstat to check QQ friends' IP addresses

In Windows, there is a program netstat that comes with Windows. The principle is the same as that of small wood. The difference is that small wood is

Only when someone else sends us data packets can the IP address query function be implemented. If the recipient does not reply, then he cannot

. This method is to take the initiative to attack the method, send data packets to the other party, and then use netstat to view.

Method:

C: Windows> netstat-n

Active connections

PROTO local address foreign address State

C: Windows>

Send a message to the user who wants to check his IP address. Then

C: Windows> netstat-n

Active connections

PROTO local address foreign address State

UDP 127.0.0.1: 4000 127.0.0.2: 4000 syn_sent

C: Windows>

Let's take a look at the differences between the first netstat result and the second netstat result.

The second project is in progress. It is not difficult to see from the second project that the Protocol is UDP and the local IP address is 127.0.0.1,

Port 4000 is used to send this packet. The IP address that receives the packet is 127.0.0.2, which is accepted by port 4000.

The current status is syn_sent.

Okay. We found that the IP address is 127.0.0.2.

Summary:

1. Open dos and enter netstat-n

2. Send a message to the QQ address of your IP address. When the message is sent, jump to the next step.

3. Enter netstat-N again.

4. analysis results.

Maybe you will not analyze the results.

The reason for the first input of netstat-N is that it is different from the result of the next input of netstat-N.

The first time we got

Active connections

PROTO local address foreign address State

The second time

Active connections

PROTO local address foreign address State

UDP 127.0.0.1: 4000 127.0.0.2: 4000 syn_sent

A line is added.

Okay. Let's analyze the second result.

PROTO local address foreign address State

UDP 127.0.0.1: 4000 127.0.0.2: 4000 syn_sent

PROTO: Protocol local: local IP Address: local port local: IP address of the other party

Port State: Status

The Protocol is UDP and the local IP address is 127.0.0.1. port 4000 is used to send this packet and accept our

The IP address of the packet is 127.0.0.2, which is accepted on port 4000. The current status is syn_sent.

Netstat is used to check what IP address you are currently connecting to and provides all the Protocol ports.

Is it so troublesome to query the IP addresses of QQ friends? Just patch QQ? Yes, it's easy to do this, but what if it's a new QQ and the "patch" hasn't been done yet? Using software such as ipsniper, what should I do if I am not in a hurry to check it? You can use other software, such ...... Well, I want to talk about other people's software. Why don't I try the doscommand? That is, it is simple, convenient, and environmentally friendly (unlike applications that require additional installation and hard disk space, they also occupy the same resources ).

Not long-winded, officially started. First, send the person you want to know the IP address to QQ's "two-person world" with weapons such as sweet words and sugar-coated shells. In the DOS window (DOS in Win9x and command prompt in Win2000 ). Run the following command:

Netstat-n

You will see:

Active connections

PROTO local address foreign address State

TCP 202.109.34.78: 1200 202.121.139.35: 61555 established

TCP 202.109.34.78: 2694 202.109.72.40: 6667 established

TCP 202.109.34.78: 4869 211.202.1.227: 23 established

Good guy, so many IP addresses! Which one is what we are looking? Don't worry. Read it later. Now we exit the "two man world", and then input it again in DOS:

Netstat-n

You will see:

Active connections

PROTO local address foreign address State

TCP 202.109.34.78: 1200 202.121.139.35: 61555 time_wait

TCP 202.109.34.78: 2694 202.109.72.40: 6667 established

TCP 202.109.34.78: 4869 211.202.1.227: 23 established

Do you see the difference between the two before and after? Not shown? Take a closer look and you will find that:

Originally, TCP 202.109.34.78: 1200 202.121.139.35: 61555 established

Now TCP 202.109.34.78: 1200 202.121.139.35: 61555 time_wait

Okay, now you should know? Yes! The IP address of the person you chat with is: 202.121.139.35! So how do you know? Friends, please refer to our message transmission in the "two-person world". QQ must be connected to each other (through UDP protocol ), at this time, it is "established" (in the result of your use of the netstat-N command); and the disconnection from "Two Worlds" is naturally "time_wait.