Directly query the IP addresses of QQ friends without using software (1)

According to the test, this method is sometimes effective and sometimes ineffective. For more information, see

Http://blog.csdn.net/xyydyyqf/article/details/9149205

Use the shortcut key "START key + R", or open start, search "run", and run cmd.

Enter the tasklist command to obtain the name, PID, session, and memory usage of the current process.

For example, the current two QQ's PID is 4616,4618.

Send one to QQ friends at will and establish a socket connection directly to the other party's computer (because when QQ sends messages, text is forwarded by the server, and image and video are directly connected by Protocol)

Run the netstat command. netstat is used in many ways. Here, netstat-N and netstat-O are used.

When netstat-N is input, the result of tasklist is not required, and the Network Session list can be obtained quickly.

However, the disadvantage is that QQ's network connection may not be obtained and its accuracy cannot be determined.

Some methods are used once when no message is sent.
Netstat-N: Use netstat-N again after sending the message. The difference between the two results is that the IP address of the other party is redundant. However, this is often not accurate because there are many network connections and there is a latency problem. I have observed that a better way to use netstat-N is to look at the address of the other party, that is, the port of the "external address", which is generally a port above 50000.

The most accurate method is to use netstat-O to work with the process PID in tasklist. You can see that qq.exe, which is the most popular with pid4616. However, this is a little slow.

For the first time, the recipient is 123.138.238.40: https. This is because the message is sent, so it passes through the server and the port is also HTTPS 443 (HTTP is port 80 ). Therefore, this is not the IP address of the other party but the IP address of the server.

The second time there is no 4616 message because of delay.

After sending the third message, we can see from 4616 that the recipient's IP address is 119.4.45.61: 55647. Generally, the receiving port is later than 50000.

Conclusion: The QQ port seems to be different from the previous one. It used to be a fixed port of 4000 or something. Now it becomes dynamic, and the protocol is not UDP. (In addition, I cannot check the mobile phone address, because the IP address is forwarded through the server, the IP address is the IP address of the intermediate server of the Shenzhen headquarters). What is intuitive is that the external address port is HTTP (80) or HTTPS (443) all of them are sent to the server rather than to the personal computer. In the past, a lot of IP Lookup software was ineffective, and some virus advertisements and so on were also good.

However, it is also possible that the IP address of the other party cannot be identified if you want to send something to the server.

Likewise, the principle of querying Weibo, Renren, YY, and other friend information is the same. It depends on whether these clients establish a connection with each other through the server when sending messages, if you are interested, test it. (At least the online video audio file transfer should be a direct connection instead of a Transit server)

/*

* *****

* Http://blog.csdn.net/xyydyyqf

*/