Overview: ipbounty is an ip address discovery library that can discover ip addresses connecting to a local machine via netstat and runs an automated discovery retrieving information similar to nslookup, tracert, and whois.
Overview: ipbounty is an ip address discovery library that can discover ip addresses connecting to a local machine via netstat and runs an automated discovery retrieving information similar to nslookup, tracert, and whois.
Audience: ipbounty is a class library in the form of a dll that developers can use as a reference in their projects. The library is ipdiscovery.dll (aka: ipbounty).
Technical Details: ipbounty was programmed in C# .Net 4.0 and has been tested on the Windows 7 platform.
Features: Developers can use ipbounty in their programs. Ipbounty can:
Retrieve the current instance of netstat remote ip addresses and run an automatic discovery of nslookup, tracert, and whois and store to a local database.
Poll for a specified period of time and gather a list of all remote ip and store the remote ip addresses into a local database.
Run a complete discovery of all polled ip addresses and store the information into a local database.
Retrieve discovered information from the local database based on remote ip address.
For Fun: This is a starter list for things to try with ipbounty:
Open ipdiscovery.dll (aka: ipbounty) in ILSpy to explore the classes, methods and code.
Add it as a reference to your .Net Projects and code a user-interface for it.
Add it as a reference into a WCF service project and allow clients to grab netstat data from remote machines!
Purpose:
Picture yourself sitting at your computer. Suddenly, you feel obsessively compelled to run a netstat from your command line, a feeling that happens nearly every day. In fact, you get this urge many times a day, almost every hour, or every minute that you sit in front of your computer. After you run netstat, you become glued to the results, staring at the ip addresses that are connecting to your machine. You manually go down the list, copy each remote ip and tediously discover it by running nslookup, tracert and whois. You need a better way. You need ipbounty. After implementing it, you can sit back, listening to mp3s while you surf the net. You are no less obsessed, but now ipbounty is running things for you and storing the results into a database for later review. Good for students, hobbyists and the netstat-obsessed.
Code Library Usage
Polling Feature: Polls netstat remote ip addresses for 20 minutes, grabbing stats in intervals of 2 minutes.
Overview: ipbounty is an ip address discovery library that can discover ip addresses connecting to a local machine via netstat and runs an automated discovery retrieving information similar to nslookup, tracert, and whois.
Audience: ipbounty is a class library in the form of a dll that developers can use as a reference in their projects. The library is ipdiscovery.dll (aka: ipbounty).
Technical Details: ipbounty was programmed in C# .Net 4.0 and has been tested on the Windows 7 platform.
Features: Developers can use ipbounty in their programs. Ipbounty can:
For Fun: This is a starter list for things to try with ipbounty:
Purpose:
Picture yourself sitting at your computer. Suddenly, you feel obsessively compelled to run a netstat from your command line, a feeling that happens nearly every day. In fact, you get this urge many times a day, almost every hour, or every minute that you sit in front of your computer. After you run netstat, you become glued to the results, staring at the ip addresses that are connecting to your machine. You manually go down the list, copy each remote ip and tediously discover it by running nslookup, tracert and whois. You need a better way. You need ipbounty. After implementing it, you can sit back, listening to mp3s while you surf the net. You are no less obsessed, but now ipbounty is running things for you and storing the results into a database for later review. Good for students, hobbyists and the netstat-obsessed.
Code Library Usage
Polling Feature: Polls netstat remote ip addresses for 20 minutes, grabbing stats in intervals of 2 minutes.
Polls netstat remote ip addresses for 1 hour, grabbing stats in intervals of 2 minutes.
Discover Polled Ip Addresses Feature
This is the call you make to discover all polled ip addresses:
Poll One Netstat Instance and Discover
This call will run one instance of netstat and then run an nslookup, tracert, whois:
Specialized Functions Feature
This allows you to retrieve fromt the database data that has been captured or polled by single ip address.
~~~~~~~~~~~~~~~~~~~~
DataTable dt = new DataTable();
ipdiscovery ipFunctions = new ipdiscovery(false);
dt = ipFunctions.getIpRecordbyIp("74.125.31.120");
dt = ipFunctions.getTraceRouteByIp("74.125.225.111");
~~~~~~~~~~~~~~~~~~~~~
Last edit: Corey Habbas 2012-11-28