Checking networkports

Hroudtwolf · Post by **Hroudtwolf** » Thu Mar 31, 2005 7:19 pm

Hello everybody,

Do anyone knows, how to check all networkports at the same time
for activity ?

Is there an API-Hook ?

Hroudtwolf · Post by **Hroudtwolf** » Fri Apr 01, 2005 12:16 am

Is this a mysterious secret?
The first problem, that nobody can solve ?

I just want to get any event of incoming network activity !?

NoahPhense · Post by **NoahPhense** » Fri Apr 01, 2005 2:48 am

Yeah, I'd be interested in some network stuff too..

dige · Post by **dige** » Fri Apr 01, 2005 11:37 am

It's very easy, you have to start the same programm for 65.000 times
using the port number as parameter ;-)

Hroudtwolf · Post by **Hroudtwolf** » Fri Apr 01, 2005 11:46 am

Yes, but this way needs much CPU-Work.

I need an event-hook for the windownetwork. Sometime I had read therefrom.

HeX0R · Post by **HeX0R** » Fri Apr 01, 2005 1:01 pm

Maybe this can help:
http://www.thecodeproject.com/csharp/iphlpapi.asp

Hroudtwolf · Post by **Hroudtwolf** » Fri Apr 01, 2005 1:50 pm

Thanks...

..but this must work without any extern resources libs and DLLs...
I know, this function are implemented in the system. Windowsaplications are using this function,too.

NoahPhense · Post by **NoahPhense** » Fri Apr 01, 2005 2:31 pm

Hroudtwolf wrote:Thanks...

..but this must work without any extern resources libs and DLLs...
I know, this function are implemented in the system. Windowsaplications are using this function,too.

Yeah, I think we need to hook into the stack.

- np

Tommeh · Post by **Tommeh** » Fri Apr 01, 2005 4:08 pm

..but this must work without any extern resources libs and DLLs...

That example uses netstat, if you pipe out the result of that, its exactly what you need...

On the other hand, if you want to do it to a remote machine (port scanning) then something like...

Code: Select all

Procedure OpenSocket(portnum)
OpenNetworkConnection("127.0.0.1", portnum)
EndProcedure

For t=1 to 65000
CreateThread(@OpenSocket(), t)
Next t

That stuff is just off the top of my head, but that will tie up your internet connection while its doing it.

Hroudtwolf · Post by **Hroudtwolf** » Fri Apr 01, 2005 4:18 pm

Thanks. I will test it now.....

Tommeh · Post by **Tommeh** » Fri Apr 01, 2005 4:38 pm

You will want to do error checking with each one, otherwise you won't know if its opened/closed

Hroudtwolf · Post by **Hroudtwolf** » Fri Apr 01, 2005 4:57 pm

I want know if any accesses comes to a port.

Tommeh · Post by **Tommeh** » Fri Apr 01, 2005 5:26 pm

Yes...

Simple port scanner:

Code: Select all

InitNetwork()

Procedure OpenSocket(portnum)
If OpenNetworkConnection("127.0.0.1", portnum)
Debug "OPEN! [port:"+Str(portnum)
EndIf
EndProcedure

For t=1 To 65000
CreateThread(@OpenSocket(), t)
Next t

Again, please be carefull with this, even to localhost, if you have no delays, it will kill your net connection, it did to me on 1mb after 2 seconds

Kale · Post by **Kale** » Fri Apr 01, 2005 7:37 pm

For t=1 To 65000
CreateThread(@OpenSocket(), t)

Whats the maximum number of threads that can be started on windows? i though it was < 65000?

NoahPhense · Post by **NoahPhense** » Fri Apr 01, 2005 7:56 pm

We need to locate some kind of hook. There are much easier ways to
do what we're trying to do.

For example.. I use a freeware program, called active ports. It does no
scanning, yet, it tells me on the fly.. ports and ip addresses that are
being opened and closed.

- np