Shoutbox

Starting with the whole discussion about window open/close notifiers, with questions to get the contact's font, and some other things people would like to access but can't with the current script engine, I decided to try and create an ActiveX based Packet sniffer.

Warning: if your script uses this, it may become unstable/useless if MSN changes protocol ! So be very carefull!

This allows you to start monitoring packets with a couple of lines of code, and provides easy methods to get what you want, quickly!

It gives you access to only 1 property and 2 methods:
» property IP : string containing the IP you want to listen
» function Start() : start monitoring the choosen IP
» function Stop() : stop monitoring the choosen IP
» function About() : displays a small about box

Examples: (with full commented code)

• Window open/close notifier ( very reliable, only close notifier has a delay of 15/30seconds from the actual close of the window, due to a WLM limitation )
  
• View All MSN packets (usefull to study what packets get sent/received when you do something specific and build your own script)

My first idea was to make the ActiveX MSN-only (only capture MSN packets), but then I thought that only one extra line of code (check if comming from MSN port) wouldn't matter if you could monitor the entire network.

So, here it is, hope you guys enjoy it.

I didn't test it very much, but there aren't that much things that can go wrong with 1 property and 2 basic methods, so I leave it for you guys to use !

Note: it's OCX because Delphi doesn't allow to create non-visual ActiveX Object (actually it allows, but it would take forever), so I created it visually and then added the flag to make the ActiveX invisible at runtime. So, don't worry about the extension being OCX and not DLL, just register it normally using regsvr32.

Note2: my imagination wasn't running that wild when I gave the ActiveX a name, so w00t.Xniff sounded like a good choice

Note3: I hope it works in every PCs, because hopefully it doesn't need Borland Runtime Packages to run (that's why the filesize is rather big). But I dunno, it's the first ActiveX I create so I can't know for sure...

WOW.
you rock.
this will start a whole new wave of scripts.

Yup nice job

Amazing, we can expect a new breed of scripting arriving I think now people have great examples to work with .

Looks really quite usefull

for anyone wondering how to get the local ip so you know what address to sniff:

code:

---

function getLoaclIp(){
    var wmiObj = new ActiveXObject('WbemScripting.SWbemLocator');
    var wmiInst = wmiObj.ConnectServer('.', "root\\cimv2");
    wmiInst.Security_.ImpersonationLevel = 3;
   
    var col = wmiInst.ExecQuery('Select * from Win32_NetworkAdapterConfiguration');
    var colEnum = new Enumerator(col);
   
    var ipAddr;
   
    for (; !colEnum.atEnd(); colEnum.moveNext()){
        var objIp = colEnum.item();
        var addr = objIp.IPAddress(0);
        if((typeof addr == 'string') && addr.match(/\d{1,3}\.\d{1,3}\.\d{1,3}\.\d{1,3}/)){
            ipAddr = addr;
        }
    }
   
    return ipAddr;
}

---

That function returns the last vaild ipaddress of you network adapters.
Im sure there is a better way to find it, but WMI was the only way i could think of at the time

I believe

code:

---

ws = new ActiveXObject( "MSWinsock.Winsock" );
ipaddress = ws.LocalIP;

---

is easier, but I made it so that the developer can set what IP to listen because there are people with multiple network adapters.

I don't think everyone can use winsock, there was a thread about that a long time ago

is there any way to have the script do the regsvr32 stuff?

Like stated in the documentation:

code:

---

Example 2
ScriptInfo file used to create a Script Pack. During import, the "ExtraFuncVB.dll" ActiveX will be registered with resvr32.

    <DotNetFiles>
        <FileName>ExtraFuncVB.dll</FileName>
    </DotNetFiles>

---

So, you just change ExtraFuncVB.dll to Xniff.ocx and voila'

quote:

---

Originally posted by Pai
I believe

code:

---

ws = new ActiveXObject( "MSWinsock.Winsock" );
ipaddress = ws.LocalIP;

---

is easier, but I made it so that the developer can set what IP to listen because there are people with multiple network adapters.

---

I knew there would be an easyer way envolving winsock -_-

* Plik hides in shame