1

我有一个在 GoDaddy 共享 linux 服务器上运行 PHP 的网站。我需要确定用户是否连接到公司 VPN。如果我只是简单地做 $_SERVER['REMOTE_ADDR'] 它会给我客户端的 IP 地址。但是，如果我可以使用跟踪器进行更深入的挖掘，第二跳将显示为公司 IP 地址。

是否可以使用 PHP 从网页进行跟踪路由以确定用户是否连接到公司的拆分隧道 VPN？

4

2 回答 2

10

在 PHP 中创建一个跟踪路由程序

http://www.adayinthelifeof.nl/2010/07/30/creating-a-traceroute-program-in-php/

如果网站出现故障，这是 jist：

<?php

define ("SOL_IP", 0);
define ("IP_TTL", 2);    // On OSX, use '4' instead of '2'.

$dest_url = "www.google.com";   // Fill in your own URL here, or use $argv[1] to fetch from commandline.
$maximum_hops = 30;
$port = 33434;  // Standard port that traceroute programs use. Could be anything actually.

// Get IP from URL
$dest_addr = gethostbyname ($dest_url);
print "Tracerouting to destination: $dest_addr\n";

$ttl = 1;
while ($ttl < $maximum_hops) {
    // Create ICMP and UDP sockets
    $recv_socket = socket_create (AF_INET, SOCK_RAW, getprotobyname ('icmp'));
    $send_socket = socket_create (AF_INET, SOCK_DGRAM, getprotobyname ('udp'));

    // Set TTL to current lifetime
    socket_set_option ($send_socket, SOL_IP, IP_TTL, $ttl);

    // Bind receiving ICMP socket to default IP (no port needed since it's ICMP)
    socket_bind ($recv_socket, 0, 0);

    // Save the current time for roundtrip calculation
    $t1 = microtime (true);

    // Send a zero sized UDP packet towards the destination
    socket_sendto ($send_socket, "", 0, 0, $dest_addr, $port);

    // Wait for an event to occur on the socket or timeout after 5 seconds. This will take care of the
    // hanging when no data is received (packet is dropped silently for example)
    $r = array ($recv_socket);
    $w = $e = array ();
    socket_select ($r, $w, $e, 5, 0);

    // Nothing to read, which means a timeout has occurred.
    if (count ($r)) {
        // Receive data from socket (and fetch destination address from where this data was found)
        socket_recvfrom ($recv_socket, $buf, 512, 0, $recv_addr, $recv_port);

        // Calculate the roundtrip time
        $roundtrip_time = (microtime(true) - $t1) * 1000;

        // No decent address found, display a * instead
        if (empty ($recv_addr)) {
            $recv_addr = "*";
            $recv_name = "*";
        } else {
            // Otherwise, fetch the hostname for the address found
            $recv_name = gethostbyaddr ($recv_addr);
        }

        // Print statistics
        printf ("%3d   %-15s  %.3f ms  %s\n", $ttl, $recv_addr,  $roundtrip_time, $recv_name);
    } else {
        // A timeout has occurred, display a timeout
        printf ("%3d   (timeout)\n", $ttl);
    }

    // Close sockets
    socket_close ($recv_socket);
    socket_close ($send_socket);

    // Increase TTL so we can fetch the next hop
    $ttl++;

    // When we have hit our destination, stop the traceroute
    if ($recv_addr == $dest_addr) break;
}

?>

你需要是根。这意味着从 Web 服务器运行它时它可能不起作用，您必须从命令行运行它：

jthijssen@tarabas:~/traceroute$ sudo php traceroute.php
Tracerouting to destination: 199.6.1.164
  1   192.168.1.1      0.004 ms  192.168.1.1
  2   *                0.005 ms  static.kpn.net
  3   (timeout)
  4   139.156.113.141  0.005 ms  nl-asd-dc2-ias-csg01-ge-3-2-0-kpn.net
  5   195.190.227.221  0.005 ms  asd2-rou-1022.nl.euroringen.net
  6   134.222.229.105  0.005 ms  asd2-rou-1001.NL.eurorings.net
  7   134.222.97.186   0.007 ms  kpn-1402.xe-0-0-0.jun1.galilei.network.bit.nl
  8   213.154.236.75   0.012 ms  213.154.236.75
  9   199.6.1.164      0.012 ms  pub3.kernel.org

这是到 www.kernel.org 的跟踪路由。我已经删除了第二个跃点（因为那是我所在的 IP）。第三跳返回超时。可能那里的站点没有返回 ICMP 数据包以供使用。

以上代码可以在github上找到：https ://github.com/jaytaph/traceroute

于 2013-02-06T12:57:12.440 回答
2

您可以使用 PHP 在服务器上运行 traceroute 命令。

<?php
$output = shell_exec("/usr/sbin/traceroute target");
echo "<pre>$output</pre>";
?>

然后解析 $output 中的输出。

来源： http: //php.net/manual/en/function.shell-exec.php

于 2012-09-17T17:00:04.197 回答