IP address question

Discussion in 'IT and Computer-Related Degrees' started by Randell1234, May 4, 2015.

Loading...
  1. jhp

    jhp Member

    My IP address on this machine is 10.0.3.32. My tablet's is 192.168.12.17. What are the source IP addresses the forum sees?
     
  2. SteveFoerster

    SteveFoerster Resident Gadfly Staff Member

    And then it gets even more confusing. Anything that's 10.*.*.* or 192.168.*.* isn't a real IP address that's accessible anywhere, it's just a placeholder used by your internal network. So the IP address the forum gets isn't the same that you see, it's a public one that your router would use.

    The reason for this is that IPv4 addresses are increasingly scarce, so this is a way for organizations with many computers to use the Internet while only having a few public IP addresses.
     
  3. Rifleman

    Rifleman New Member

    To avoid the command prompt (on a PC) or thumbing through settings on a tablet or mobile device, I suppose you could just visit a site like What's My IP Address? - Obsolete Browser Page to see your external (public facing) IP address.

    If you want to know what's going on "under the hood", reading about network address translation (NAT) and dynamic host control protocol (DHCP) will give you a good idea of how your router works in relation to IP addresses.
     
  4. jhp

    jhp Member

    You misunderstood my rhetorical question.

    I wanted to point out several incorrect notions when it comes to IP addresses.

    IP addresses can and do change, even within a single packet. There are several border protocols that take full advantage of this besides just simple home-use IP remapping (aka NATing). Something does happen to them, and do not necessarily remain the same in the entire communication.

    10.x and 192.168.x address spaces are real IP addresses, and not just placeholders. They happen to be private IP address spaces (24-bit and 16-bit blocks, respectively), but they are valid, and fully functional. Indeed, there are restrictions on their use and routing capabilities.

    It would be very unusual for "What's my IP" (or any external solution) to show an internal NATed IP address.

    But, I believe we are way off topic. :smokin:

    From the original post, the IP address that shows in the vendor's log, the presumably online catalog request would be possible to track down. If it is to someone known, the circumstantial evidence would have some weight. The question is how much weight?

    Ex. IP extracted from web server log. If the IP is tracked to the cable modem of one of her known enemies, that could be a plausible source. If it was tracked to a nearby coffee house, it still would be plausible that it is this individual, but much weaker. And, so on...

    In my work, I never, ever say "Joe did it". I only say "the machine with joe's login and password did it".

     
    Last edited by a moderator: Jun 5, 2015
  5. Rifleman

    Rifleman New Member

    Sorry, I didn't notice it was pointed at carrishharris, so my response is better aimed at them than you.

    Correct, I never meant to imply that one could find internal network addresses, MACs, or anything else by using that utility.



    Are you a forensics or incident handler by chance?
     
    Last edited by a moderator: Jun 6, 2015
  6. jhp

    jhp Member

    Yes, I am.
     
  7. stehaw

    stehaw member

    I guess it not as simple as you think.
     
  8. Randell1234

    Randell1234 Moderator

    I never thought is was simple.
     

Share This Page