1.  One can often figure out most of this from the output of the "tracert"
command.

2.  If you enter an IP address in the whois form at http://www.arin.net, it
will either tell you what ISP owns that number range (if they're in North
America) or which of the other three registries you need to consult (RIPE
for Europe, APNIC for Asia, and there's a new one for Latin America).

3.  Hackers often work through compromised intermediary machines.  The
source address of the traffic you're seeing is not necessarily where the
person behind it is.

4.  Many kinds of network activity -- including some nasty attacks -- don't
require two-way communication.  Packets may be delivered to you with a faked
source address, incriminating a machine that, if it exists at all, has
nothing to do with the traffic you see.

David Gillett


On 10 Nov 2003 at 16:47, Roberto Safora Romay wrote:

> I need information to find a free program to trace hackers (rout, ip,
> geographical region, isp...) that attempt to enter or even ping my PC;
> I know there is one named "Hackertrace"  but is not compatible with Windows
> Xp pro.
> TIA
> Roberto
> I
>
>              Do you want to signoff PCSOFT or just change to
>                     Digest mode - visit our web site:
>                    http://freepctech.com/pcsoft.shtml

                         PCSOFT's List Owner's:
                      Bob Wright<[log in to unmask]>
                       Drew Dunn<[log in to unmask]>