Tracing PINGs

[cyprus106]

OK, This may be a little advanced but it's at least worth a shot.

I know it's possible to know when you've been Pinged (network, internet... that kind of ping) by another machine, but how would I read that in code? Anybody know a theory or sample?

Thanks a lot, Cyprus

 

[hennep]

May be the sourcecode of a network sniffer could do the trick

http://www.tlsecurity.net/windows/ids/sniffer/

and click on "Windump Source"

 

[mattcs]

You would probably need to read all the IP datagrams comming into your machine (look at the protocol field of the header) and see which ones have an Echo Request in them.

Using Windows (Berkley) sockets, the following is from the excellent Black Sun Reasearch site from one of their winsock tutorials:

------------------------------
As usual we would set up our socket with something like the following:

SOCKET sniffsock;
SOCKADDR_IN if0;

sniffsock = socket(AF_INET, SOCK_RAW, IPPROTO_IP);

and then call bind() with this raw socket:

bind(sniffsock, (SOCKADDR *)&if0, sizeof(if0));

we then go into Promiscuous mode and recieve all of the packets by calling WSAIoctl() with SIO_RCVALL set:

WSAIoctl(sniffsock, SIO_RCVALL, &optval, sizeof(optval), NULL, 0, &dwBytesRet, NULL, NULL);

we can then use the WSARecv() function to grab the packets and feed them into a buffer like so:

recv(sniffsock, RecvBuf, sizeof(RecvBuf), 0);
------------------------------

Hope this helps.