netstat -an | grep 2055 gives the following udp 0 0 0.0.0.0:2055 0.0.0.0:*
btw the server is running SuSE 10.2; I noticed the same issue if I start a capture session , kill it and try to restart.. the flow-capture wouldn't restart; the only thing I could do was increment the listening port... ________________________________ From: Joe Loiacono [mailto:[EMAIL PROTECTED] Sent: Thursday, December 20, 2007 10:26 AM To: Christian Vo Cc: [email protected] Subject: RE: [Flow-tools] killed all flow-capture processes, but can't restart on previously specified port...(?) Maybe the port got bound up somehow. Can you try a 'netstat -an'? If port 2055 is listed then somehow you got to kill it off. You could try the flow-capture command using a different port and see what results. Joe "Christian Vo" <[EMAIL PROTECTED]> 12/20/2007 12:12 PM To Joe Loiacono/CIV/[EMAIL PROTECTED] cc <[email protected]>, <[EMAIL PROTECTED]> Subject RE: [Flow-tools] killed all flow-capture processes, but can't restart on previously specified port...(?) Hi Joe, This is how I've been running it previously /usr/local/flow-tools/bin/flow-capture -p /flows/pids/flowcapture1.pid -w /flows/router1 -E4000M -S3 0/0/2055 after killing this process (kill -TERM...) I tried to do this: /usr/local/flow-tools/bin/flow-capture -p /flows/pids/flowcapture1.pid -w /flows/all_devices -E4000M -S3 0/0/2055 and it wouldn't start... ________________________________ From: Joe Loiacono [mailto:[EMAIL PROTECTED] Sent: Thursday, December 20, 2007 5:44 AM To: Christian Vo Cc: [email protected]; [EMAIL PROTECTED] Subject: Re: [Flow-tools] killed all flow-capture processes, but can't restart on previously specified port...(?) Christian, Can you show us the syntax of your flow-capture command? Thanks, Joe "Christian Vo" <[EMAIL PROTECTED]> Sent by: [EMAIL PROTECTED] 12/20/2007 05:38 AM To <[email protected]> cc Subject [Flow-tools] killed all flow-capture processes, but can't restart on previously specified port...(?) hi, I may have missed something in the docs, but I'd really appreciate if someone can help with the following: currently running flow-tools.0.68-1, and I was successfully capturing data. stopped my flow-capture processes, with the intention of just exporting from my network devices to one dest. port. when I try to restart my flow-capture process I get the following under /var/log/messages: 2007-12-20T02:10:37-08:00 netmon flow-capture[6574]: setsockopt(size=4194304) 2007-12-20T02:10:37-08:00 netmon flow-capture[6574]: bind(0.0.0.0): Address already in use not sure what to check.. I know I don't have any flow capture processes remaining... google'd the error message, but no solutions seem to pop up.. pls help, thx ________________________________ This email message is for the sole use of the intended recipient(s) and may contain confidential information. Any unauthorized review, use, disclosure or distribution is prohibited. If you are not the intended recipient, please contact the sender by reply email and destroy all copies of the original message. ________________________________ _______________________________________________ Flow-tools mailing list [EMAIL PROTECTED] http://mailman.splintered.net/mailman/listinfo/flow-tools
_______________________________________________ Flow-tools mailing list [EMAIL PROTECTED] http://mailman.splintered.net/mailman/listinfo/flow-tools
