Snort mailing list archives
RE: Invalid Iterface with snort 2.0.0...
From: "L. Christopher Luther" <CLuther () Xybernaut com>
Date: Tue, 22 Apr 2003 16:23:15 -0400
Confusion resounds in this thread. I initially thought that Mohammad attempted multiple service installs, and that the initial install (i.e., the one that didn't specify an interface) was the one that took but was causing problems. However, if I read Mohammad correctly, he's getting the invalid interface error when *while* attempting to install the service. My suggestion was two fold: 1) put the '-i' in the front of the command line, which will probably make no difference, and two, put a space between '-i' and the interface number, which may make a difference, depending how Snort obtains it's parameters from the registry. Hopefully confusion is now gone. :-S - Christopher -----Original Message----- From: Michael Steele [mailto:michaels () silicondefense com] Sent: Tuesday, April 22, 2003 4:14 PM To: 'L. Christopher Luther'; mohammad () tisri org Cc: snort-users () lists sourceforge net Subject: RE: [Snort-users] Invalid Iterface with snort 2.0.0... Christopher, I'm confused at this point. Has he installed the service or not? His last message to your post was: "I said that I did not installed the service." Well, if he has not installed the service then of course the error he is getting using the "/INSTALL /SHOW" is correct. He first needs to install the service. -Michael -- Michael Steele | System Engineer / Support Technician mailto:michaels () silicondefense com Silicon Defense - The Cyber-War Defense Company Website: http://www.silicondefense.com Snort: Open Source Network IDS - http://www.snort.org -----Original Message----- From: snort-users-admin () lists sourceforge net [mailto:snort-users-admin () lists sourceforge net] On Behalf Of L. Christopher Luther Sent: Tuesday, April 22, 2003 12:02 PM To: 'mohammad () tisri org'; 'Michael Steele' Cc: snort-users () lists sourceforge net Subject: RE: [Snort-users] Invalid Iterface with snort 2.0.0... Sorry, my bad. It helps if one actually reads the message. Have you tried to install the service specifying the interface 1st on the command line? Like: snort /install /service -i 1 -c e:/snort/etc/snort.conf -l e:/snort/log Do you still get the "Invalid interface '0'" message? Note: There is a space between the '-i' and the actual interface number '1'. - Christopher -----Original Message----- From: Mohammad Alimohammadi [mailto:mohammad () tisri org] Sent: Tuesday, April 22, 2003 2:24 PM To: 'L. Christopher Luther'; 'Michael Steele' Cc: snort-users () lists sourceforge net Subject: RE: [Snort-users] Invalid Iterface with snort 2.0.0... I said that I did not installed the service. It shows E:\Snort\bin>snort /service /show ERROR: [SNORT_SERVICE] Unable to open Snort registry entry. Perhaps Snort has not been installed as a service. The operation completed successfully. Fatal Error, Quitting..
-----Original Message----- From: L. Christopher Luther [mailto:CLuther () Xybernaut com] Sent: Tuesday, April 22, 2003 10:48 PM To: 'mohammad () tisri org'; 'Michael Steele' Cc: snort-users () lists sourceforge net Subject: RE: [Snort-users] Invalid Iterface with snort 2.0.0... this was already suggested by Michael Steele, but it's worth
repeating:
From the command prompt type: Snort /SERVICE /SHOW What does that show? - Christopher -----Original Message----- From: Mohammad Alimohammadi [mailto:mohammad () tisri org] Sent: Tuesday, April 22, 2003 2:03 PM To: 'Michael Steele'; 'L. Christopher Luther' Cc: snort-users () lists sourceforge net Subject: RE: [Snort-users] Invalid Iterface with snort 2.0.0... Dear All Yes exactly I know that we can install the service once. And uses of
-W
for a list of possible interfaces. But the problem is that even I can not install the service for first time... I must say that I can get the traffic in display or any another output methods. But the problems occur when I want to install service in win2k... I used the service before with Snort 1.9.1 but there I have one
network
adapter not 2... Warm Regards Mohammad-----Original Message----- From: snort-users-admin () lists sourceforge net [mailto:snort-users- admin () lists sourceforge net] On Behalf Of Michael Steele Sent: Tuesday, April 22, 2003 9:33 PM To: mohammad () tisri org; snort-users () lists sourceforge net Subject: RE: [Snort-users] Invalid Iterface with snort 2.0.0... Mohammad, Once the service is installed it has to uninstalled before you can install the service again. From a command line navigate to the snort\bin folder use snort -W togeta list of possible interfaces. From that same command line type snort -v -ix The x in -ix switch is the number of the interface to use. See if you can get traffic to display on any of those interfaceslistedusing the snort -W command. -Michael -- Michael Steele | System Engineer / Support Technician mailto:michaels () silicondefense com Silicon Defense - The Cyber-War Defense Company Website: http://www.silicondefense.com Snort: Open Source Network IDS - http://www.snort.org -----Original Message----- From: snort-users-admin () lists sourceforge net [mailto:snort-users-admin () lists sourceforge net] On Behalf Of
Mohammad
Alimohammadi Sent: Tuesday, April 22, 2003 9:31 AM To: snort-users () lists sourceforge net Subject: [Snort-users] Invalid Iterface with snort 2.0.0... Dear All, When I want to install snort as a service in win2k whit every this commands: snort /install /service -c e:/snort/etc/snort.conf -l e:/snort/log snort /install /service -c e:/snort/etc/snort.conf -l e:/snort/log
-i1
snort /install /service -c e:/snort/etc/snort.conf -l e:/snort/log
-i2
I have got this error: ERROR: Invalid interface '0'.Fatal Error, Quitting.. I have 2 network adapter an I am using snort 2.0.0 ... Any suggestion??? Regards Mohammad ------------------------------------------------------- This sf.net email is sponsored by:ThinkGeek Welcome to geek heaven. http://thinkgeek.com/sf _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users ------------------------------------------------------- This sf.net email is sponsored by:ThinkGeek Welcome to geek heaven. http://thinkgeek.com/sf _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
------------------------------------------------------- This sf.net email is sponsored by:ThinkGeek Welcome to geek heaven. http://thinkgeek.com/sf _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users ------------------------------------------------------- This sf.net email is sponsored by:ThinkGeek Welcome to geek heaven. http://thinkgeek.com/sf _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- Invalid Iterface with snort 2.0.0... Mohammad Alimohammadi (Apr 22)
- RE: Invalid Iterface with snort 2.0.0... Michael Steele (Apr 22)
- RE: Invalid Iterface with snort 2.0.0... Mohammad Alimohammadi (Apr 22)
- <Possible follow-ups>
- RE: Invalid Iterface with snort 2.0.0... L. Christopher Luther (Apr 22)
- RE: Invalid Iterface with snort 2.0.0... L. Christopher Luther (Apr 22)
- RE: Invalid Iterface with snort 2.0.0... Mohammad Alimohammadi (Apr 22)
- Re: Invalid Iterface with snort 2.0.0... Chris Reid (Apr 22)
- RE: Invalid Iterface with snort 2.0.0... Michael Steele (Apr 22)
- RE: Invalid Iterface with snort 2.0.0... Mohammad Alimohammadi (Apr 22)
- RE: Invalid Iterface with snort 2.0.0... L. Christopher Luther (Apr 22)
- RE: Invalid Iterface with snort 2.0.0... Michael Steele (Apr 22)
- RE: Invalid Iterface with snort 2.0.0... L. Christopher Luther (Apr 22)
- RE: Invalid Iterface with snort 2.0.0... Michael Steele (Apr 22)