# No netflow module installed but still server still listening on port2055 udp

**URL:** <https://discuss.elastic.co/t/no-netflow-module-installed-but-still-server-still-listening-on-port2055-udp/371185>\
**Category:** Elasticsearch\
**Created:** [November 28, 2024, 11:56am UTC](https://discuss.elastic.co/t/no-netflow-module-installed-but-still-server-still-listening-on-port2055-udp/371185 "2024-11-28T11:56:28Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![ahsan0331](https://avatars.discourse-cdn.com/v4/letter/a/5fc32e/32.png) [@ahsan0331](https://discuss.elastic.co/u/ahsan0331)\
**Post date:** [November 28, 2024, 11:56am UTC](https://discuss.elastic.co/t/no-netflow-module-installed-but-still-server-still-listening-on-port2055-udp/371185/1 "2024-11-28T11:56:28Z")

</div>

Hi  
I was trying to fiddle with elastic NetFlow. i had installed a NetFlow filebeat and then it started to work. now i removed that in ny ubutnu netstat tbale its still listening on port 2055. how to fully remove that.

as i want to add the Elastic Agent only netflow .

```auto

root@elastic:/home/netflow# netstat -tunlp
Active Internet connections (only servers)
Proto Recv-Q Send-Q Local Address Foreign Address State PID/Program name
tcp 0 0 0.0.0.0:5601 0.0.0.0:* LISTEN 1119/node
tcp 0 0 127.0.0.54:53 0.0.0.0:* LISTEN 745/systemd-resolve
tcp 0 0 127.0.0.53:53 0.0.0.0:* LISTEN 745/systemd-resolve
tcp6 0 0 :::9300 :::* LISTEN 1117/java
tcp6 0 0 :::22 :::* LISTEN 1/init
tcp6 0 0 :::9200 :::* LISTEN 1117/java
tcp6 0 0 :::5044 :::* LISTEN 968/java
tcp6 0 0 127.0.0.1:9600 :::* LISTEN 968/java
udp 0 0 127.0.0.54:53 0.0.0.0:* 745/systemd-resolve
udp 0 0 127.0.0.53:53 0.0.0.0:* 745/systemd-resolve
udp 0 0 10.20.6.155:68 0.0.0.0:* 701/systemd-network
udp6 0 0 :::2055 :::* 1118/filebeat

```

regards

---

<div class="post-metadata">

**Author:** ![stephenb](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/stephenb/32/40856_2.png) [@stephenb](https://discuss.elastic.co/u/stephenb)\
**Post date:** [December 2, 2024, 10:12pm UTC](https://discuss.elastic.co/t/no-netflow-module-installed-but-still-server-still-listening-on-port2055-udp/371185/2 "2024-12-02T22:12:51Z")

</div>

looks like the process is still running... I suggest to kill it.... if it was fully running in memory in the background just removing the installation may not been enough.