aquasecurity / aquasecurity/cloudsploit

Collecting metadata. This may take several minutes... events.js:292 throw er; // Unhandled 'error' event ^ Error: connect ETIMEDOUT 138.1.16.150:443

Open
#569 3 comments 0 reactions 0 assignees View on GitHub
Dominant language
JavaScript
Stars
3.8k
Forks
751
Avg merge
11d 9h
Merged PRs (30d)
3

Description

HI Team,

We have installed and configured the cloudsploit tool with Oracle Cloud Infrastructure (OCI), While generating the report, We are getting below error connect ETIMEOUT Error and also noticed that every time the destination IP address is getting change.

**Could you please provide the specific IP address range that need to be whitelist in the egress rule and Route table of the instance to resolve and fix this connection TIMEOUT Error from OCI compute Instance towards the Internet.**

**We have not added the 0.0.0.0 route and egress rule in the existing route table & security list due to security concern.**

######## Console log ########
[root@ins01 cloudsploit-master]#
[root@ins01 cloudsploit-master]# ./index.js --config /home/cloudtool/cloudsploit-master/config.js

_____ _ _ _____ _ _ _
/ ____| | | |/ ____| | | (_) |
| | | | ___ _ _ __| | (___ _ __ | | ___ _| |_
| | | |/ _ \| | | |/ _` |\___ \| '_ \| |/ _ \| | __|
| |____| | (_) | |_| | (_| |____) | |_) | | (_) | | |_
\_____|_|\___/ \__,_|\__,_|_____/| .__/|_|\___/|_|\__|
| |
|_|

CloudSploit by Aqua Security, Ltd.
Cloud security auditing for AWS, Azure, GCP, Oracle, and GitHub

INFO: Using CloudSploit config file: /home/cloudtool/cloudsploit-master/config.js
INFO: Skipping AWS pagination mode
INFO: Determining API calls to make...
INFO: Found 38 API calls to make for oracle plugins
INFO: Collecting metadata. This may take several minutes...
events.js:292
throw er; // Unhandled 'error' event
^

Error: connect ETIMEDOUT 147.154.238.120:443
at TCPConnectWrap.afterConnect [as oncomplete] (net.js:1146:16)
Emitted 'error' event on ClientRequest instance at:
at TLSSocket.socketErrorListener (_http_client.js:469:9)
at TLSSocket.emit (events.js:315:20)
at TLSSocket.EventEmitter.emit (domain.js:467:12)
at emitErrorNT (internal/streams/destroy.js:106:8)
at emitErrorCloseNT (internal/streams/destroy.js:74:3)
at processTicksAndRejections (internal/process/task_queues.js:80:21) {
errno: -110,
code: 'ETIMEDOUT',
syscall: 'connect',
address: '147.154.238.120',
port: 443
}
[root@ins01 cloudsploit-master]#
[root@ins01 cloudsploit-master]#

Br,
Aditya Singh.
9945549518.

Contributor guide

Open the contributing guide

Research direction

Start by running ./index.js --config /home/cloudtool/cloudsploit-master/config.js and review the OCI metadata collection path associated with the 38 API calls. Investigate the reported ETIMEDOUT errors and changing destination addresses; done means identifying the cause and documenting a confirmed resolution or required configuration.

Written by the indexing model from the issue text.

Assessment

Tech stack
javascript
Domain
cloud, networking
Issue type
Bug
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
20/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.