I've encountered a problem recently with a friend of mine.

This boy happens to be stalking her. "Supposidly" He knows much personal information of hers, but worst of all i've seen several accounts of his "attacks" In California and Ohio. I'm confused though because I live in CT...Now to get to the point...

I was currious as to find out if its possible to aquire someones Ip from their Aim sn. I know theres netstat -n through D/C and Command Prompt, but this character wont connect with me, nor the girl he's harrassing. I know that some sites give location to Ip's so thats all I need..is his IP and im set from there on out. So if anyone has any information at all on this subject please respond. :(

His sn is: DoeBoY2510

Mine is: x IshbarQ x

If they talk, have her direct-connect with him.  Packetlog.

I said...he WONT connect with her..I know theres someway though to find it. Obviously AIM contains the sn's ip.

Packet log some convos and look for IP's in the logs.

That wont work, messages are relayed through the server.

Packet logging is overkill
Just get Sysinternal's TCPView and watch the connections in real time.  TCPView even displays the programs they are associated with...so packet log is particularly a bad idea if you have a lot of traffic...it certainly doesn't associate connections with their programs like TCPView does.

[quote author=Tazo link=topic=12881.msg128995#msg128995 date=1127435212]
That wont work, messages are relayed through the server.
[/quote]One.. two.. three times thats been stated!

I don't know of any way other than DC to get their IP. =/

EDIT -
nslay, if you use a quality packet logger (ethereal) you can use a filter such as ((tcp.port == 6112)), which clearly will only show Battle.net packets, instead of AIM, but you get my drift.

[quote author=Joe link=topic=12881.msg129015#msg129015 date=1127440282]
[quote author=Tazo link=topic=12881.msg128995#msg128995 date=1127435212]
That wont work, messages are relayed through the server.
[/quote]One.. two.. three times thats been stated!

I don't know of any way other than DC to get their IP. =/

EDIT -
nslay, if you use a quality packet logger (ethereal) you can use a filter such as ((tcp.port == 6112)), which clearly will only show Battle.net packets, instead of AIM, but you get my drift.
[/quote]

We're assuming direct connect, in which case they aren't forwarded through the AOL servers.
Who cares about packets?  We're looking for the IP, not the information being sent.
So, as soon as a direct connect is established one side directly connected to other...the IP can be seen through netstat or TCPView.

Edit: a packet logger doesn't usually associate the connections to their program counterparts, nor does it usually give you the option to forcefully drop connections...no windows utility that I know of gives you that kind of verbosity and power.  Packet loggers are used to watch information being transmitted and recieved...TCPView is a small and powerful tool that allows you to watch incoming and outgoing connections in real time while examining which program is responsible for which connection...it also allows you to forcefuly drop connections which I thought was pretty cool.  TCPView isn't a packet logger.

So in other words, that guy is stalking her?

[quote author=Ishbar link=topic=12881.msg128985#msg128985 date=1127431902]
I said...he WONT connect with her..I know theres someway though to find it. Obviously AIM contains the sn's ip.
[/quote]

Maybe file transfer?

You're not likely to get his IP. Why does it matter so much, anyway? And how do you know where the attacks originate from?

Aw crap, I read a daRktYpE post.. agh, my brain!

[quote]You're not likely to get his IP.[/quote]Pound it my eThug. Now, lets get back on topic and fix it.
[quote]Why does it matter so much, anyway?[/quote]READ.
[quote]And how do you know where the attacks originate from?[/quote]READ.

Joe, since when did you become the forum police, always posting on-topic stuff and never missing anything that was said?

Generally the only information you can get from an IP address is information about the user's ISP which includes the server's contact information, location and a range of IPs that they currently own.

[quote author=nslay link=topic=12881.msg129019#msg129019 date=1127440863]
We're assuming direct connect, in which case they aren't forwarded through the AOL servers.
[/quote]

He specifically said that isn't an option. 

File-transfer isn't a bad idea, though.  I think file-transfers are direct connections. 

[quote author=iago link=topic=12881.msg129093#msg129093 date=1127506441]
[quote author=nslay link=topic=12881.msg129019#msg129019 date=1127440863]
We're assuming direct connect, in which case they aren't forwarded through the AOL servers.
[/quote]

He specifically said that isn't an option. 

File-transfer isn't a bad idea, though.  I think file-transfers are direct connections. 
[/quote]

They are...it would be terribly inefficient to send through servers.
The next problem is, he could just as easily use a public proxy.

Two words: AIM Privacy.

Problem solved.

is your friend name kristine? shes 17 years old and shes from san jose california?

the guy you supposedly is stalking her is from delmar

[quote author=Denial link=topic=12881.msg129240#msg129240 date=1127610456]
is your friend name kristine? shes 17 years old and shes from san jose california?

the guy you supposedly is stalking her is from delmar
[/quote]

lol...

In gaim when you initiate a direct connection it will say "Attempting to connect to *.*.*.*"  So just try that.

[quote author=Kaiory link=topic=12881.msg130288#msg130288 date=1128744775]
In gaim when you initiate a direct connection it will say "Attempting to connect to *.*.*.*"  So just try that.
[/quote] That would be after the user on the other end has accepted the request to connect. Otherwise the ip is completely invisible, as all of your data is still being thrown at the central server. The server will not just give up information like that at your request, it will only furnish it after the user has okayed it. Plus the remote box has to know to listen.

Is AIM xml based like some of the other networks? This question has little to do with the topic other than the fact that it is about aim, I am just curious is all.

AIM is based off of the gecko engine, last I heard.