topic Re: Poking TCP Ports from Windows PowerShell in Getting Data In

Poking TCP Ports from Windows PowerShell

ShaneNewman — Tue, 17 Jun 2014 02:25:14 GMT

A vendor is requesting that we Poke several TCP ports and send specific text to capture application status. "Poke 8080, send http GET for / and Poke TCP 5222 and send string 'test123'".

I know how to use powershell to initiate a telnet connection to the ports and monitor port status that way:

$Port = 8080,5222,5223
foreach ($P in $Port) {
$Socket = New-Object Net.Sockets.TcpClient
$Computer = "LocalHost"
$RunTime = get-date

# Suppress error messages
$ErrorActionPreference = 'SilentlyContinue'

# Try to connect
$Socket.Connect($Computer, $P)

# Determine if we are connected.
if ($Socket.Connected) {
 "$RunTime Port $P is open"
  $Socket.Close()   
  }
  else {
  "$RunTime Port $P is closed" 
  }
  }
  $Socket = $null

How can I modify this code to also pass a text string or command?

Re: Poking TCP Ports from Windows PowerShell

grijhwani — Tue, 17 Jun 2014 11:06:28 GMT

Not really a Splunk question. Wouldn't you reach a more informed audience on a more Windows-specific support forum?

That said, I just did a Google search for "powershell sockets", and amongst the first hits was this: Scripting Network / TCP Connections in PowerShell

Re: Poking TCP Ports from Windows PowerShell

ShaneNewman — Tue, 17 Jun 2014 18:50:22 GMT

I found that and tried it to no avail. I was hoping that someone on the forum had tried to do something similar and found a way to do it from Splunk or had created app with a built-in modular input. Judging by the lack of responses I feel like that is not really the case...

Re: Poking TCP Ports from Windows PowerShell

halr9000 — Tue, 17 Jun 2014 23:16:31 GMT

I'd post this to serverfault, TechNet forums, /r/powershell, or the like. That said...

Re: Poking TCP Ports from Windows PowerShell

halr9000 — Tue, 17 Jun 2014 23:32:19 GMT

I would suggesting thinking one layer higher. Test the service, not the TCP protocol. 5222 is WS-Man, aka PowerShell remoting. There's a cmdlet for that, and yes, you can invoke it from Splunk. Check out:

HTH