Security Basics mailing list archives

Re: Private IP address with yahoo messenger


From: John Pluffum <john.pluffum () gmail com>
Date: Thu, 31 May 2007 09:43:18 +0930

Pranay Kanwar wrote:
Hi,

Looking at the services section in the

http://libyahoo2.sourceforge.net/ymsg-9.txt

YAHOO_SERVICE_P2PFILEXFER      = 0x4d
YAHOO_SERVICE_PEERTOPEER       = 0x4f

P2PFILEXFER   - transfer a file between two peers, yahoo server not used
PEERTOPEER    - check if peer to peer connections are possible

Sometimes pidgin (http://www.pidgin.im/) displays the internal IP
address of a user when we do Get Info from menu. One of
my friends is shown 192.168.1.3 right now!.

Digging into the source

pidgin-2.0.1/libpurple/protocols/yahoo/yahoo.c

The function yahoo_process_p2p, at line 2020
shows that the p2p service packet does contain the
IP address and it is base64 encoded.
  
Verified. The packet contains the address of the sender.

"pidgin -d" will output -
Got P2P service packet (from server): who = xyz.host.com, ip = w.x.y.z

purple_debug_info("yahoo", "Got P2P service packet (from server): who =
%s, ip = %s\n", who, tmp);

when engaged in p2p transfer.
regards

warl0ck // MSG
http://www.metaeye.org
Cheers


Current thread: