RE: SNORT 1.9 As Service - Won't Start

["Michael Steele" <michaels () silicondefense com>]

Burger,

Which flavor of Snort are you running? I'll go to a Win2k machine and
try it. I'm on an XP box with no problems.

Have you tried "net start snort" ?

-Michael
-- 
 Michael Steele | System Engineer / Support Technician     
 mailto:michaels () silicondefense com    
 Silicon Defense: IDS solutions - http://www.silicondefense.com
 Snort: Open Source Network IDS - http://www.snort.org


-----Original Message-----
From: bunger [mailto:bunger () mail billunger com] 
Sent: Thursday, October 10, 2002 10:32 AM
To: Michael Steele
Subject: RE: [Snort-users] SNORT 1.9 As Service - Won't Start

I tried exactly that and still received the same error.  Here is the
command I used:

Snort /SERVICE /INSTALL -c C:\Snort\snort.conf -l C:\Snort\log -i2

So then I tried just running snort manually from the command and snort
started up just fine?!  Here is the command I used for that:

Snort -c C:\Snort\snort.conf -l C:\Snort\log -i2

Has anyone gotten Snort 1.9 to run on Win2k?  Are there any required
services packs ( though my server is patched to sp3 )?

thanks again,
Bill



---------- Original Message ----------------------------------
From: "Michael Steele" <michaels () silicondefense com>
Date: Thu, 10 Oct 2002 09:04:27 -0700

> Burger,
>
> The docs state:
>
> This will install Snort as a service with the specified parameters: 
> "snort /SERVICE /INSTALL -de -c <FULL PATH>\snort.conf -l <FULL
> PATH>\logs"
>
> Note the -de is placed before the -c and -l, and I really don't know if
> it makes a difference where you place them, it shouldn't.
>
> Insert your homenet into the snort.conf and try:
>
> Snort -c C:\Snort\snort.conf -l C:\Snort\log -i2
>
> If that works, just keep adding until the offending switch is found.
>
> -Michael
> -- 
> Michael Steele | System Engineer / Support Technician     
> mailto:michaels () silicondefense com    
> Silicon Defense: IDS solutions - http://www.silicondefense.com
> Snort: Open Source Network IDS - http://www.snort.org
>
>
> -----Original Message-----
> From: bunger [mailto:bunger () mail billunger com] 
> Sent: Thursday, October 10, 2002 7:02 AM
> To: Michael Steele
> Subject: RE: [Snort-users] SNORT 1.9 As Service - Won't Start
>
> Thanks for suggestion, but still no go.  Same error....
>
>
>
> ---------- Original Message ----------------------------------
> From: "Michael Steele" <michaels () silicondefense com>
> Date: Wed, 9 Oct 2002 18:53:55 -0700
>
> > Bunger,
> >
> > Try running that command line from the console. It looks like your
> > command line may be screwy?
> >
> > The -i 2 should be -i2
> >
> > -Michael
> > -- 
> > Michael Steele | System Engineer / Support Technician     
> > mailto:michaels () silicondefense com    
> > Silicon Defense: IDS solutions - http://www.silicondefense.com
> > Snort: Open Source Network IDS - http://www.snort.org
> >
> >
> > -----Original Message-----
> > From: snort-users-admin () lists sourceforge net
> > [mailto:snort-users-admin () lists sourceforge net] On Behalf Of bunger
> > Sent: Wednesday, October 09, 2002 3:35 PM
> > To: snort-users () lists sourceforge net
> > Subject: [Snort-users] SNORT 1.9 As Service - Won't Start
> >
> > Just downloaded and installed the service release for Snort 1.9 from
> > Silicon Defense and am unable to get Snort to start as a service.  If
I
> > type "snort /SERVICE /SHOW" this is what I see:
> >
> >
> > C:\Snort>snort /SERVICE /SHOW
> >
> > Snort is currently configured to run as a Windows service using the
> > following
> > command-line parameters:
> >
> >     -c C:\Snort\snort.conf -l C:\Snort\log -h 64.68.241.147/32 -i 2
-a
> > -C -d -e -X -I -zall
> >
> >
> >
> > If I type "net start snortsvc" this is what I get:
> >
> > C:\Snort>net start snortsvc
> > The Snort service is starting.
> > The Snort service could not be started.
> >
> > A system error has occurred.
> >
> > System error 1067 has occurred.
> >
> > The process terminated unexpectedly.
> >
> >
> > Any ideas?
> >
> > Thanks!
> >
> >
> > -------------------------------------------------------
> > This sf.net email is sponsored by:ThinkGeek
> > Welcome to geek heaven.
> > http://thinkgeek.com/sf
> > _______________________________________________
> > Snort-users mailing list
> > Snort-users () lists sourceforge net
> > Go to this URL to change user options or unsubscribe:
> > https://lists.sourceforge.net/lists/listinfo/snort-users
> > Snort-users list archive:
> > http://www.geocrawler.com/redir-sf.php3?list=snort-users
>
>
>
>
>
> -------------------------------------------------------
> This sf.net email is sponsored by:ThinkGeek
> Welcome to geek heaven.
> http://thinkgeek.com/sf
> _______________________________________________
> Snort-users mailing list
> Snort-users () lists sourceforge net
> Go to this URL to change user options or unsubscribe:
> https://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users list archive:
> http://www.geocrawler.com/redir-sf.php3?list=snort-users





-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users