RE: Snort 2.0 as a Windows Service??

["Michael Steele" <michaels () silicondefense com>]

Kerberos

Uninstall the service, reboot, then install the service again:

C:\BIN\Snort>snort /SERVICE /INSTALL -c C:\BIN\Snort\snort.conf -l
C:\BIN\Snort\log -h 10.0.1.0/24[Ip address sanitized] -i1 -y

-Michael
-- 
 Michael Steele | System Engineer / Support Technician     
 mailto:michaels () silicondefense com    
 Silicon Defense - The Cyber-War Defense Company
 Website: http://www.silicondefense.com
 Snort: Open Source Network IDS - http://www.snort.org


-----Original Message-----
From: snort-users-admin () lists sourceforge net
[mailto:snort-users-admin () lists sourceforge net] On Behalf Of kerberos K
Sent: Tuesday, April 22, 2003 11:19 AM
To: snort-users () lists sourceforge net
Subject: [Snort-users] Snort 2.0 as a Windows Service??



I'm using the Snort 2.0 binary from both Snort.org and Silicon Defense,
I've 
attempted to install Snort as a Win2K service.  I've used both Snort 
binaries on the same machine via a command line, and everything appears
to 
have worked...

When I install Snort as a service, the following output is generated:

C:\BIN\Snort>snort.exe /SERVICE /INSTALL -c "C:\BIN\Snort\snort.conf"
- -l "C:\BIN\Snort\log" -h 10.0.1.0/24[Ip address sanitized] -i 1 -y

[SNORT_SERVICE] Attempting to install the Snort service.

[SNORT_SERVICE] The full path to the Snort binary appears to be:
    C:\BIN\Snort\snort.exe /SERVICE

[SNORT_SERVICE] Successfully added registry keys to:
    \HKEY_LOCAL_MACHINE\SOFTWARE\Snort\

[SNORT_SERVICE] Successfully added the Snort service to the Services
database.


And when I "show" the service parameters, they appear as:

C:\Snort\snort\bin>snort /service /show

Snort is currently configured to run as a Windows service using the 
following
command-line parameters:

     -c c:\snort\snort\etc\snort.conf -l c:\snort\snort\log -h
10.0.1.0/24 
[Ip address sanitized]-i 1 -y

However when I attempt to start the service via either command line, or 
through the services applet I get the following error:

"C:\Snort\snort\bin>net start snort
The Snort service is starting.
The Snort service could not be started.

A system error has occurred.

System error 1067 has occurred.

The process terminated unexpectedly."

I previously had Snort 1.9.1 running as a service and successfully
logging 
to a mysql database and ACID. This current issue happened when I
attempted 
to upgrade from 1.9.1 to 2.0.

I know this issue has come up several times in the past, I just have not

seen a solution? Did I miss something? I'm searching through the archive

messages now. I was just hoping maybe some could point me in the right 
direction...

Thanks

Brad


_________________________________________________________________
The new MSN 8: smart spam protection and 2 months FREE*  
http://join.msn.com/?page=features/junkmail



-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users





-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users