Have a Ping Question 1

[Deputy357]

I have been out of the IT world for awhile and I've forgotten a few things, now I'm need of some direction. I have a friend who's computer is being hacked by another friend. I know I can ping that person to find out for sure if it's them, I just don't remember how. They are denying it, but I want to prove it and be done with it. Please anyone who can help, I would greatly appreciate it!!!!

 

[LawnBoy]

From a command prompt, the basic syntax is:

ping <hostname>
or
ping <IP address>

But ping doesn't prove anything except that both machines are on a connected network. It does not prove that any communication has ever occured in the past.

 

[Deputy357]

I appreciate the response, that doesn't sound like it will do me much good then. Do you have any tips on investigating this?

 

[chieftan]

When you believe he is hacking the computer try using 'netstat' to see what ports are being utilised. that will give you an idea of what programs he is using. You could also see what is happening by using ethereal (you will have to place the network card in promiscous mode for a few minutes while doing this).

Also, try looking at 'nbtstat', this will give some more indication from a netBIOS perspective.

Some pointers.... You may glean more information from

http://www.hackerthreads.org

 

[LawnBoy]

Ethereal is an excellent tool for such things, but you have to know how to analyze the results, which can be rather daunting for a novice.

We need some basics... What makes you think the machine is being 'hacked'?