Re: RE: Win32 Snort as a service: Error 1067

["Sean Lazar" <slazar () cruzio com>]

I modified the install to my specs. I followed the guide 
http://www.silicondefense.com/support/windows/winsnortdocs/winsnarfiis.php but I changed the service install command. I 
only have one partition (no D drive) and didn't want to run IIS.

I wanted to share my experiences with how I got the error 1067, and what I did to change it.

The command:
snort /SERVICE /INSTALL -c c:\snort\etc\snort.conf -l c:\snort\log -i1
will give an error 1067 when you try to start the service.

The command:
snort /service /install -l C:\snort\log
works better and does not give the error. I think that the -c paramater is the culprit.


It looks like the snort found on your website 
http://www.silicondefense.com/support/windows/files/snort200/Snort_201_Build88_Installer.exe and the one found on the 
snort page http://www.snort.org/dl/binaries/win32/snort-2_0_1.exe are probably the same because they have the same file 
size.

Hope that clarifies things.

Sean
  ----- Original Message ----- 
  From: Michael Steele 
  To: snort-users () lists sourceforge net 
  Sent: Saturday, August 23, 2003 3:35 PM
  Subject: RE: [Snort-users] RE: Win32 Snort as a service: Error 1067


  Sean,



  This is confusing.



  Did you follow the guide exactly as it instructed, or did you modify the install to your specs?

  Cheers...

  -Michael Steele
  --
   System Engineer / Security Support Technician    
   mailto:michaels () winsnort com   
   Website: http://www.winsnort.com
   Snort: Open Source Network IDS - http://www.snort.org


------------------------------------------------------------------------------

  From: snort-users-admin () lists sourceforge net [mailto:snort-users-admin () lists sourceforge net] On Behalf Of 
Sean Lazar
  Sent: Saturday, August 23, 2003 2:10 AM
  To: snort-users () lists sourceforge net
  Subject: [Snort-users] RE: Win32 Snort as a service: Error 1067



  Hi I wanted to share my experiences with Snort on Windows, and the error 1067 when I used it as a service. I have a 
windows xp machine and have installed the 2.0.1 win32 binary off the snort.org website. Winpcap 3.0.0 installed. Easy 
install and I just went for it and I got it to run as a service with the commands:



  C:\>cd C:\snort\bin

  C:\>snort /service /install -l C:\snort\log



  no problems there. The service starts and stops beautifully. But then I tried following Silicon Defense's guide and 
that's when I got the 1026 error:

  http://www.silicondefense.com/support/windows/winsnortdocs/winsnarfiis.php



  Michael uses the command: snort /SERVICE /INSTALL -c d:\applications\snort\etc\snort.conf -l c:\Inetpub\wwwroot\log 
-ix



  I modified that (only one partition and no iis).



  snort /SERVICE /INSTALL -c c:\snort\etc\snort.conf -l c:\snort\log -i1



  At that point when you try to start the service it stops and gives you an error 1067.



  Hope that helps confused people. Note I didn't download snort off of www.silicondefense.com. Perhaps it is a slightly 
different build w/ fixes.



  Sean