Snort mailing list archives

Attention: Win32 Users - Snort 1.9.0 "STABLE RELEASE" Binaries Available


From: "Michael Steele" <michaels () silicondefense com>
Date: Wed, 9 Oct 2002 14:01:16 -0700

To all Windows users of Snort:

Please read all the notices below.

The latest 1.9.0 STABLE binaries have been compiled and are now
available on our site. There are now 9 flavors available:

Snort_1.9.0b6-209_Win32_StdDB_FlexResp_Release 
Snort_1.9.0b6-209_Win32_StdDB_FlexResp_Service_Release
Snort_1.9.0b6-209_Win32_StdDB_FlexResp_Service_SFStats_Release
Snort_1.9.0b6-209_Win32_StdDB_MSSQL_FlexResp_Release
Snort_1.9.0b6-209_Win32_StdDB_MSSQL_FlexResp_Service_Release
Snort_1.9.0b6-209_Win32_StdDB_MSSQL_Release
Snort_1.9.0b6-209_Win32_StdDB_MSSQL_Service_Release
Snort_1.9.0b6-209_Win32_StdDB_Release
Snort_1.9.0b6-209_Win32_StdDB_Service_Release

NOTICE: You MUST update the complete package if you are migrating from
Snort 1.8x 

NOTICE: The "Run as Service" is now a Windows feature of Snort
(whoohoo), and is ONLY available for the following Windows environments:

IMPORTANT: You MUST use the Service Release!

1. 2000 Professional / 2000 Server Family
2. XP Pro / XP .NET Server Family
3. NT Server 4 (latest service pack).

The basic usage is as follows:

Note: COMPLETELY remove any previous installation of Snort running as a
service, even Registry settings, then reboot. If you have any concerns
or questions, please don't hesitate to email me.

There are three command switches that Snort uses for the Service
activation. 

/SERVICE /INSTALL 
/SERVICE /UNINSTALL 
/SERVICE /SHOW 

Explanation of Service options:

CAUTION: All the switches MUST be used from the folder that Snort is
located in. If Snort is located in C:\Snort then navigate to that folder
and type the command from there.

This will install Snort as a service with the specified parameters: 
"snort /SERVICE /INSTALL -de -c <FULL PATH>\snort.conf -l <FULL
PATH>\logs" 

This will remove snort as a service: 
"snort /SERVICE /UNINSTALL" 

This will display the parameters: 
"snort /SERVICES /SHOW
 
From the Start Menu go to Programs / Administrative Tools and Open the
Services applet in Administrative Tools.  Select Snort from the services
window, right click on Snort, choose Properties, and under startup type
select Automatic (this will allow snort to be active when there is no
one logged on). 

Note: If you want to stop or start the service from a command prompt
type: 

"net stop snortsvc" 
"net start snortsvc"

Note: If you want to change the parameters then you must: 

Take Snort down: net stop snortsvc

snort /SERVICE /UNINSTALL 
snort /SERVICE /INSTALL < NEW PARAMETERS >

Bring Snort back up: net start snortsvc

A Big THANK YOU to Chris Reid for this...

NOTICE to all our clients: We will ONLY be supporting the STABLE
RELEASES:

Snort 1.7.1
Snort 1.8.1
Snort 1.8.2
Snort 1.8.3
Snort 1.8.6
Snort 1.8.7
Snort 1.9.0

Link to Downloads:
http://www.silicondefense.com/techsupport/downloads.htm

Note: Documentation for installing an IDS in a Windows environment will
be coming soon for Snort 1.9

Link to Documentation:
http://www.silicondefense.com/techsupport/windows.htm

-Michael
-- 
 Michael Steele | System Engineer / Support Technician     
 mailto:michaels () silicondefense com    
 Silicon Defense: IDS solutions - http://www.silicondefense.com
 Snort: Open Source Network IDS - http://www.snort.org






-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: