<br><font size=2 face="sans-serif">Maybe the port got bound up somehow.</font>
<br>
<br><font size=2 face="sans-serif">Can you try a 'netstat -an'?</font>
<br>
<br><font size=2 face="sans-serif">If port 2055 is listed then somehow
you got to kill it off. You could try the flow-capture command using a
different port and see what results.</font>
<br>
<br><font size=2 face="sans-serif">Joe<br>
</font>
<br>
<br>
<br>
<table width=100%>
<tr valign=top>
<td width=40%><font size=1 face="sans-serif"><b>"Christian Vo"
<cvo@nvidia.com></b> </font>
<p><font size=1 face="sans-serif">12/20/2007 12:12 PM</font>
<td width=59%>
<table width=100%>
<tr valign=top>
<td>
<div align=right><font size=1 face="sans-serif">To</font></div>
<td><font size=1 face="sans-serif">Joe Loiacono/CIV/CSC@CSC</font>
<tr valign=top>
<td>
<div align=right><font size=1 face="sans-serif">cc</font></div>
<td><font size=1 face="sans-serif"><flow-tools@list.splintered.net>,
<flow-tools-bounces@list.splintered.net></font>
<tr valign=top>
<td>
<div align=right><font size=1 face="sans-serif">Subject</font></div>
<td><font size=1 face="sans-serif">RE: [Flow-tools] killed all flow-capture
processes, but can't restart on previously
specified port...(?)</font></table>
<br>
<table>
<tr valign=top>
<td>
<td></table>
<br></table>
<br>
<br>
<br><font size=2 color=blue face="Arial">Hi Joe,</font>
<br><font size=3> </font>
<br><font size=2 color=blue face="Arial">This is how I've been running
it previously</font>
<br><font size=3> </font>
<br><font size=2 color=blue face="Arial">/usr/local/flow-tools/bin/flow-capture
-p /flows/pids/flowcapture1.pid -w /flows/router1 -E4000M -S3 0/0/2055</font>
<br><font size=3> </font>
<br><font size=2 color=blue face="Arial">after killing this process (kill
-TERM...)</font>
<br><font size=3> </font>
<br><font size=2 color=blue face="Arial">I tried to do this:</font>
<br><font size=2 color=blue face="Arial">/usr/local/flow-tools/bin/flow-capture
-p /flows/pids/flowcapture1.pid -w /flows/all_devices -E4000M -S3 0/0/2055</font>
<br><font size=3> </font>
<br><font size=2 color=blue face="Arial">and it wouldn't start...</font>
<br>
<hr><font size=2 face="Tahoma"><b>From:</b> Joe Loiacono [mailto:jloiacon@csc.com]
<b><br>
Sent:</b> Thursday, December 20, 2007 5:44 AM<b><br>
To:</b> Christian Vo<b><br>
Cc:</b> flow-tools@list.splintered.net; flow-tools-bounces@list.splintered.net<b><br>
Subject:</b> Re: [Flow-tools] killed all flow-capture processes, but can't
restart on previously specified port...(?)</font><font size=3><br>
</font>
<br><font size=2 face="sans-serif"><br>
Christian,</font><font size=3> <br>
</font><font size=2 face="sans-serif"><br>
Can you show us the syntax of your flow-capture command?</font><font size=3>
<br>
</font><font size=2 face="sans-serif"><br>
Thanks,</font><font size=3> <br>
</font><font size=2 face="sans-serif"><br>
Joe</font><font size=3><br>
<br>
<br>
</font>
<table width=100%>
<tr valign=top>
<td width=31%><font size=1 face="sans-serif"><b>"Christian Vo"
<cvo@nvidia.com></b> <br>
Sent by: flow-tools-bounces@list.splintered.net</font><font size=3> </font>
<p><font size=1 face="sans-serif">12/20/2007 05:38 AM</font><font size=3>
</font>
<td width=68%>
<br>
<table width=100%>
<tr valign=top>
<td width=7%>
<div align=right><font size=1 face="sans-serif">To</font></div>
<td width=92%><font size=1 face="sans-serif"><flow-tools@list.splintered.net></font><font size=3>
</font>
<tr valign=top>
<td>
<div align=right><font size=1 face="sans-serif">cc</font></div>
<td>
<tr valign=top>
<td>
<div align=right><font size=1 face="sans-serif">Subject</font></div>
<td><font size=1 face="sans-serif">[Flow-tools] killed all flow-capture
processes, but can't restart on previously specified
port...(?)</font></table>
<br>
<br>
<table width=100%>
<tr valign=top>
<td width=50%>
<td width=50%></table>
<br></table>
<br><font size=3><br>
<br>
</font><font size=2 face="Arial"><br>
hi, <br>
I may have missed something in the docs, but I'd really appreciate if someone
can help with the following:</font><font size=3> <br>
</font><font size=2 face="Arial"><br>
currently running flow-tools.0.68-1, and I was successfully capturing data.</font><font size=3>
</font><font size=2 face="Arial"><br>
stopped my flow-capture processes, with the intention of just exporting
from my network devices to one dest. port.</font><font size=3> <br>
</font><font size=2 face="Arial"><br>
when I try to restart my flow-capture process I get the following under
/var/log/messages:</font><font size=3> <br>
</font><font size=2 face="Arial"><br>
2007-12-20T02:10:37-08:00 netmon flow-capture[6574]: setsockopt(size=4194304)<br>
2007-12-20T02:10:37-08:00 netmon flow-capture[6574]: bind(0.0.0.0): Address
already in use</font><font size=3> <br>
</font><font size=2 face="Arial"><br>
not sure what to check.. I know I don't have any flow capture processes
remaining... <br>
google'd the error message, but no solutions seem to pop up..</font><font size=3>
<br>
</font><font size=2 face="Arial"><br>
pls help, thx</font><font size=3> <br>
</font><font size=2 face="Arial"><br>
</font><font size=3> <br>
<br>
</font>
<hr><font size=3><br>
This email message is for the sole use of the intended recipient(s) and
may contain confidential information. Any unauthorized review, use,
disclosure or distribution is prohibited. If you are not the intended
recipient, please contact the sender by reply email and destroy all copies
of the original message. <br>
</font>
<hr><font size=2><tt>_______________________________________________<br>
Flow-tools mailing list<br>
flow-tools@splintered.net<br>
http://mailman.splintered.net/mailman/listinfo/flow-tools</tt></font><font size=3>
</font>
<br>