# Netflow and Filebeat - Error running harvester: listen udp 0.0.0.0:2055: bind: address already in use

**URL:** <https://discuss.elastic.co/t/netflow-and-filebeat-error-running-harvester-listen-udp-0-0-0-0-bind-address-already-in-use/219498>\
**Category:** Beats\
**Tags:** beats-module, filebeat\
**Created:** [February 16, 2020, 2:21am UTC](https://discuss.elastic.co/t/netflow-and-filebeat-error-running-harvester-listen-udp-0-0-0-0-bind-address-already-in-use/219498 "2020-02-16T02:21:25Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![uklipse](https://avatars.discourse-cdn.com/v4/letter/u/cdc98d/32.png) [@uklipse](https://discuss.elastic.co/u/uklipse)\
**Post date:** [February 16, 2020, 2:21am UTC](https://discuss.elastic.co/t/netflow-and-filebeat-error-running-harvester-listen-udp-0-0-0-0-bind-address-already-in-use/219498/1 "2020-02-16T02:21:25Z")

</div>

I'm trying to configure the netflow module with Filebeat but getting an error about the local address already in use. In my config, if I change the netflow\_host to localhost instead of 0.0.0.0 then the error says 127.0.0.1 instead of 0.0.0.0. When I run lsof -i | grep 2055, I see the filebeat process opening that port but not LISTENING (output below). If I change the port in the \modules.d\netflow.yaml to something else then I still get this error but with the new port.

```
filebeat 4611 root 11u IPv4 57181 0t0 UDP localhost.localdomain:2055 

```

If I stop the filebeat service and re-run that command, I don't get any results for port 2055. This seems to be normal behavior other than it not listening so I'm not sure why I'm getting this error. Any ideas?

---

<div class="post-metadata">

**Author:** ![uklipse](https://avatars.discourse-cdn.com/v4/letter/u/cdc98d/32.png) [@uklipse](https://discuss.elastic.co/u/uklipse)\
**Post date:** [February 18, 2020, 1:11pm UTC](https://discuss.elastic.co/t/netflow-and-filebeat-error-running-harvester-listen-udp-0-0-0-0-bind-address-already-in-use/219498/2 "2020-02-18T13:11:13Z")

</div>

To update my question, I ended up just reinstalling Filebeat and it bound to the correct port now. Not sure what happened originally but not getting that error anymore.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [March 17, 2020, 1:32pm UTC](https://discuss.elastic.co/t/netflow-and-filebeat-error-running-harvester-listen-udp-0-0-0-0-bind-address-already-in-use/219498/3 "2020-03-17T13:32:40Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
