All Apps and Add-ons

TA-connectivity port check hangs or breaks when firewall blocks access to port

corkyman
New Member

I have installed and configured TA-connectivity for port check. It works fine when access to port is open and detects anything is listening on the port or not. The problem arises when access to the port is blocked by the firewall. In this case nothing happens and the execution of the script stops. For example, if I have three entries in the configuration file that define three hosts and their ports and the second entry's port is blocked then TA-connect will correctly determine port open/closed for the first entry but produce nothing for the second and even the third entry.

Can timeout be introduced in the this check and reported as such? Or at least have the execution fail for the second entry in the example above but still work for the third entry.

Does anyone know if this app is supported by the developer or if there any alternatives?

Labels (1)
0 Karma

isoutamo
SplunkTrust
SplunkTrust

Hi

First I’m not a python programmer. I just look python code of this module and my impressions are that there is no timeout defined for socket connection test. If/when this is true then this is expected behavior for connections where FW silently blocks connection without informing connecting client for that.

The best option is ask developer to add this timeout as parameter for this test or fix it by yourself.

pingtest and web test have implemented differently, so they haven’t this same issue. 

r. Ismo

0 Karma

corkyman
New Member

Thank you, sounds like you found the root cause. Can you give me the snippet of the code you found where the timeout is not defined? I am not a python coder either but can give this to our resident python expert to fix. 

0 Karma

isoutamo
SplunkTrust
SplunkTrust
0 Karma

corkyman
New Member

Thank you so much. I can see how the code should be changed and will turn it over to my python expert to make sure it is done right.

0 Karma
Get Updates on the Splunk Community!

Devesh Logendran, Splunk, and the Singapore Cyber Conquest

At this year’s Splunk University, I had the privilege of chatting with Devesh Logendran, one of the winners in ...

There's No Place Like Chrome and the Splunk Platform

WATCH NOW!Malware. Risky Extensions. Data Exfiltration. End-users are increasingly reliant on browsers to ...

Customer Experience | Join the Customer Advisory Board!

Are you ready to take your Splunk journey to the next level? 🚀 We invite you to join our elite squad ...