Re: Win32 Snort as a service: Error 1067

["Chris Reid" <chris.reid () codecraftconsultants com>]

What messages are recorded in your Windows Event Log?  Each error you are
seeing is supposed to generate at least one message in the Event Log.

What happens when you run the following (sorry if the lines wrap):

    C:\> cd \
    C:\> c:\snort\bin\snort -c c:\snort\etc\snort.conf -l c:\snort\log -i1

Are any further errors displayed in the command prompt window this time?

The Win32 service needs fully qualified paths to be specified within the
snort.conf file.  This includes paths for rules files and classification
files.  Ensure that you modified your snort.conf file to specify these fully
qualified paths.

Chris Reid


----- Original Message ----- 
From: "Sean Lazar" <slazar () cruzio com>
To: <snort-users () lists sourceforge net>
Sent: Saturday, August 23, 2003 8:27 PM
Subject: Re: [Snort-users] RE: Win32 Snort as a service: Error 1067


I modified the install to my specs. I followed the guide
http://www.silicondefense.com/support/windows/winsnortdocs/winsnarfiis.php
but I changed the service install command. I only have one partition (no D
drive) and didn't want to run IIS.

I wanted to share my experiences with how I got the error 1067, and what I
did to change it.

The command:
snort /SERVICE /INSTALL -c c:\snort\etc\snort.conf -l c:\snort\log -i1
will give an error 1067 when you try to start the service.

The command:
snort /service /install -l C:\snort\log
works better and does not give the error. I think that the -c paramater is
the culprit.


It looks like the snort found on your website
http://www.silicondefense.com/support/windows/files/snort200/Snort_201_Build88_Installer.exe
and the one found on the snort page
http://www.snort.org/dl/binaries/win32/snort-2_0_1.exe are probably the same
because they have the same file size.

Hope that clarifies things.

Sean



-------------------------------------------------------
This SF.net email is sponsored by: VM Ware
With VMware you can run multiple operating systems on a single machine.
WITHOUT REBOOTING! Mix Linux / Windows / Novell virtual machines
at the same time. Free trial click here:http://www.vmware.com/wl/offer/358/0
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users