# Filebeat netflow port 2055 bound to host

**URL:** https://discuss.elastic.co/t/filebeat-netflow-port-2055-bound-to-host/322101
**Category:** Beats
**Tags:** docker, filebeat
**Created:** [December 28, 2022, 1:47pm UTC](https://discuss.elastic.co/t/filebeat-netflow-port-2055-bound-to-host/322101 "2022-12-28T13:47:11Z")
**Posts on this page:** 4
**Page:** 1

<div class="post-metadata">

### Author: ![shaikmuzakkir](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/shaikmuzakkir/32/114202_2.png) [@shaikmuzakkir](https://discuss.elastic.co/u/shaikmuzakkir)
#### Post date: [December 28, 2022, 1:47pm UTC](https://discuss.elastic.co/t/filebeat-netflow-port-2055-bound-to-host/322101/1 "2022-12-28T13:47:11Z")

</div>

Hi

We are using the filebeat image - [docker.elastic.co/beats/filebeat:8.4.3](http://docker.elastic.co/beats/filebeat:8.4.3) and see the netflow port 2055 is bound to the host. We are using the below config for netflow as input:

```auto
    - type: netflow
      max_message_size: 10MiB
      host: "0.0.0.0:2055"
      protocols: [v5,v9,ipfix]
      expiration_timeout: 30m
      queue_size: 81920
      detect_sequence_reset: true

```

Once the pod is deployed on kubernetes, we see the port 2055 on container bound to the port 2055 on the host? Is that expected?

---

<div class="post-metadata">

### Author: ![ChrsMark](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/chrsmark/32/55858_2.png) [@ChrsMark](https://discuss.elastic.co/u/ChrsMark)
#### Post date: [December 29, 2022, 8:56am UTC](https://discuss.elastic.co/t/filebeat-netflow-port-2055-bound-to-host/322101/2 "2022-12-29T08:56:26Z")

</div>

Hey!

Is Filebeat Pod running with `hostNetwork` setting enabled? See [beats/filebeat-daemonset.yaml at main · elastic/beats · GitHub](https://github.com/elastic/beats/blob/main/deploy/kubernetes/filebeat/filebeat-daemonset.yaml#L19). If so, this is the reason.

---

<div class="post-metadata">

### Author: ![shaikmuzakkir](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/shaikmuzakkir/32/114202_2.png) [@shaikmuzakkir](https://discuss.elastic.co/u/shaikmuzakkir)
#### Post date: [December 30, 2022, 7:16am UTC](https://discuss.elastic.co/t/filebeat-netflow-port-2055-bound-to-host/322101/3 "2022-12-30T07:16:45Z")

</div>

Thanks Chris.

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [January 27, 2023, 9:17am UTC](https://discuss.elastic.co/t/filebeat-netflow-port-2055-bound-to-host/322101/4 "2023-01-27T09:17:01Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.