Skip to main content

Network monitoring with Ruby

This is all about using Ruby to check on network stuff — but the golden rule here is: only do this on networks and systems you own or have permission to test. Same idea as it being fine to check if your own front door is locked, but not okay to go around checking your neighbors' doors.

Checking if a "port" is open

Think of your computer or router like an apartment building with a bunch of numbered doors (called ports). Some doors are unlocked (open) because a service is listening there — like a web server sitting behind door 80. Others are locked (closed).

require 'socket'

def scan_port(host, port)
  begin
    socket = TCPSocket.new(host, port)   # try knocking on the door
    socket.close                          # say bye, we're just checking
    puts "Port #{port} is open on #{host}"
    true
  rescue
    false    # if it errors out, the door's closed/locked
  end
end

Then this checks a handful of common "doors" on a device (here, a home router at 192.168.1.1):

['22', '80', '443', '8080'].each do |port|
  scan_port('192.168.1.1', port.to_i)
end

Translation: "Try knocking on ports 22, 80, 443, and 8080 on my router, and tell me which ones answer."

Finding info about the network

DNS lookup is basically asking "what's the actual address behind this website's name?" — like looking up someone's street address when you only know their name:

require 'resolv'
ip = Resolv.getaddress('google.com')
puts "Google's IP: #{ip}"

Pinging is like shouting "you there?" and seeing if something shouts back:

require 'net/ping'
pinger = Net::Ping::External.new('8.8.8.8')
if pinger.ping
  puts "Host is reachable"
end

If it responds, great — the connection's alive.

Keeping an eye on your own system

def check_connections
  connections = `netstat -an`
  puts connections.lines.grep(/ESTABLISHED/)
end

This asks your computer: "show me every network conversation you're currently having," then filters it down to just the ones that are actively connected (ESTABLISHED).

def scan_wifi
  networks = `iwlist scan 2>/dev/null | grep ESSID`
  puts networks
end

This just lists the WiFi networks your own computer can currently see nearby — like glancing at the WiFi menu on your phone.

The important note

Everything above is genuinely useful for network administration — like a homeowner checking their own security cameras. But the same tools, pointed at systems that aren't yours, cross into territory that's illegal and harmful, similar to trying doorknobs on houses that aren't yours.

If you're interested in this stuff for real, better paths are:

  • TryHackMe or HackTheBox — legal, gamified platforms specifically built for practicing security skills
  • Building your own home lab (a virtual machine or two you control) to safely test against
  • Formal cybersecurity courses that teach this properly, with ethics baked in

Want me to help you set up something like a home lab environment, or walk through legitimate network monitoring for systems you actually manage?

Labels:

Popular posts from this blog

C++ vcpkg Manifest Mode + CMake

 If you've ever tried to install a C++ library and felt like you were assembling furniture without instructions, this article is for you. We're going to talk about vcpkg manifest mode and how it works with CMake , and I'm going to explain it like you're five years old (in a good way — no judgment here). First, Let's Talk About the Problem In most programming languages, adding a library is easy. Python has pip install requests . JavaScript has npm install express . You type one command, and boom, the library shows up in your project. C++ never really had that. For decades, if you wanted to use a library like fmt or nlohmann/json , you had to: Download the source code yourself Figure out how to compile it Tell your compiler where to find the headers Tell your linker where to find the compiled binaries Cry a little vcpkg is Microsoft's answer to this mess. It's a package manager for C++ — like pip or npm , but for C++ libraries. And manifest mode...
Read more

How to Set Up a Linux Web Server and Host an HTML Page Easily

Setting up a web server on Linux means spending a fair amount of time in the terminal — Linux leans heavily on the command line rather than clicking through menus, so you'll be typing out instructions more often than not.  If you're new to this, it can feel a little intimidating at first, but the good news is you don't need to become a Linux wizard overnight. A handful of core commands will get you surprisingly far. A few you'll lean on constantly: cd — move between directories ls — see what's in the current directory mkdir — create a new folder nano or vim — edit files right there in the terminal sudo — run something with administrator privileges Get comfortable with these and you'll be able to navigate around, tweak configuration files, and install software without much trouble. You don't need to memorize everything — you just need to be confident enough to follow along with clear instructions, which is exactly what this guide aims to give you....
Read more

How to Check if Someone is Connected to Your Machine in Linux

Picture this: you glance at your system monitor and notice your CPU is humming along even though you're not running anything demanding. Or maybe your internet feels sluggish for no obvious reason. A small, uneasy thought creeps in — is someone else on my machine right now? For Linux users, this isn't something you have to wonder about. Linux ships with a powerful set of built-in tools that let you see exactly who's connected, who's logged in, and what your network is doing at any given moment. You don't need to be a security expert to use them — you just need to know where to look. This guide walks you through the practical, no-nonsense steps to check for unauthorized connections on your Linux system, with real commands you can run right now. Why Monitoring Network Connections Matters Every device on a network — including your own Linux machine — communicates using an IP address. When another device or user connects to your system, that connection shows up as a trac...
Read more