Discovery log - Other TCP connection states found: ["FIN_WAIT_2","TIME_WAIT","CLOSE_WAIT","SYN_SENT"

[Richard Nelson]

Hi all, I have noticed that our discovery log has started to report numerous messages relating to the TCP connection states.  This appears be a recent phenomena and I'm trying to understand if its an indication of an issue or simply an increase on the level of logging.

Other TCP connection states found: ["FIN_WAIT_2","TIME_WAIT","CLOSE_WAIT","SYN_SENT"]

Has anyone else noticed these or know why they are being reported?

Thanks,  Richard 

[Marinus _Ronald]

I checked this with ServiceNow Support, and this is expected behavior (PRB1936267).

The warning comes from the Windows – Active Connections multisensor, which only models LISTENING and ESTABLISHED states. Other valid TCP states (e.g. TIME_WAIT, SYN_SENT) are logged as:

Other TCP connection states found: [...]

This was mainly introduced to support non-English environments, where TCP state values can differ, and to make unmapped states visible.

Bottom line:
If Discovery is working as expected, these warnings can be safely ignored.