Snort 1.9.0 as Service on Win2k

["bunger" <bunger () mail BillUnger com>]

This has probably been beaten to death, but I have searched the archives and haven't really found anything relevant.  I 
am actually having 2 problems.  But first, here is my config:

- Snort v1.9.0 **see following note
- Windows 2000 Server w/ sp3
- IDSCenter v1.09 Beta 2

PROBLEM 1:
**Though I installed the win32 binary build from http://www.snort.org/dl/binaries/1.9.0/Snort-1.9.0-win32.exe
, running snort -V from the command line shows:

C:\Snort>snort -V

-*> Snort! <*-
Version 1.8.7beta5-ODBC-MySQL-WIN32 (Build 128)
By Martin Roesch (roesch () sourcefire com, www.snort.org)
1.7-WIN32 Port By Michael Davis (mike () datanerds net, www.datanerds.net/~mike)
1.8-WIN32 Port By Chris Reid (chris.reid () codecraftconsultants com)
1.8-WIN32 Compiled by Michael Steele (michaels () silicondefense com, www.siliconde
fense.com)
          (based on code from 1.7 port)


PROBLEM 2:
I can start snort fine from the IDSCenter, but I would like to run it as a service.  To do so, I grab the startup 
parameters from the IDSCenter and run the following at the command prompt, which installs fine:

snort.exe /SERVICE /INSTALL -c "C:\Snort\snort.conf" -l "C:\Snort\log" -h xx.yy.zz.ww/32 -i 2 -a -C -d -e -X -I -zall


 [SNORT_SERVICE] Attempting to install the Snort service.

 [SNORT_SERVICE] The full path to the Snort binary appears to be:
    C:\Snort\snort.exe /SERVICE

 [SNORT_SERVICE] Successfully added registry keys to:
    \HKEY_LOCAL_MACHINE\SOFTWARE\Snort\

 [SNORT_SERVICE] Successfully added the Snort service to the Services database.


Then when I attempt to start the snort service, I get an error.

Here is what the command line start error looks like:

C:\Snort>net start snortsvc
The Snort service is starting.
The Snort service could not be started.

A system error has occurred.

System error 1067 has occurred.

The process terminated unexpectedly.

And here is what the Event log looks like:
Event Type:     Error
Event Source:   Service Control Manager
Event Category: None
Event ID:       7031
Date:           10/8/2002
Time:           10:01:07 AM
User:           N/A
Computer:       ourComputer
Description:
The Snort service terminated unexpectedly.  It has done this 2 time(s).  The following corrective action will be taken 
in 0 milliseconds: No action. 

Any ideas or suggestions would be very much appreciated!




-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users