Ping
Pings an IP or url address, to verify it's up. Note - On Cortex XSOAR 8 and Cortex XSIAM, the script can run only on a custom engine.
python · Common Scripts
Source
import re import subprocess import demistomock as demisto from CommonServerPython import * def main(): try: dest = demisto.args()["address"] ping_out = subprocess.check_output(["ping", "-c", "3", "-q", dest], stderr=subprocess.STDOUT, universal_newlines=True) s = re.search(r"PING.*?\((.+?)\)", ping_out) res = {} if s: res["destination_ip"] = s.group(1) s = re.search(r"rtt min/avg/max/mdev = (.+)/(.+)/(.+)/(.+)\s+ms", ping_out) if not s: raise ValueError("Couldn't parse ping statistics:\n" + ping_out) res["ret_code"] = "0" res["destination"] = dest res["min_rtt"] = s.group(1) res["avg_rtt"] = s.group(2) res["max_rtt"] = s.group(3) res["mdev_rtt"] = s.group(4) return_outputs(readable_output=tableToMarkdown("Ping Results", res), outputs={"Ping": res}, raw_response=res) except Exception as e: if isinstance(e, subprocess.CalledProcessError): msg = e.output # pylint: disable=no-member else: msg = str(e) if not is_xsoar_on_prem() and "ping: socket: Operation not permitted" in msg: msg = "The Ping script can be executed only on custom engines" return_error(msg) # python2 uses __builtin__ python3 uses builtins if __name__ == "__builtin__" or __name__ == "builtins": main()
README
Pings an IP or url address, to verify it’s up. Note - On Cortex XSOAR 8 and Cortex XSIAM, the script can run only on a custom engine.
Script Data
| Name | Description |
|---|---|
| Script Type | python3 |
| Tags | Utility |
| Cortex XSOAR Version | 5.0.0 |
Inputs
| Argument Name | Description |
|---|---|
| address | Address to ping |
Outputs
| Path | Description | Type |
|---|---|---|
| Ping.ret_code | Ping return code | number |
| Ping.destination | Ping destination address | string |
| Ping.max_rtt | Ping max round trip time | number |
| Ping.avg_rtt | Ping average round trip time | number |
| Ping.min_rtt | Ping minimum round trip time | number |
| Ping.destination_ip | Ping destination IP | string |