RE: Invalid Iterface with snort 2.0.0...

["Michael Steele" <michaels () silicondefense com>]

Christopher,

I'm confused at this point. Has he installed the service or not? His
last message to your post was:

"I said that I did not installed the service."

Well, if he has not installed the service then of course the error he is
getting using the "/INSTALL /SHOW" is correct. He first needs to install
the service.

-Michael
-- 
 Michael Steele | System Engineer / Support Technician     
 mailto:michaels () silicondefense com    
 Silicon Defense - The Cyber-War Defense Company
 Website: http://www.silicondefense.com
 Snort: Open Source Network IDS - http://www.snort.org


-----Original Message-----
From: snort-users-admin () lists sourceforge net
[mailto:snort-users-admin () lists sourceforge net] On Behalf Of L.
Christopher Luther
Sent: Tuesday, April 22, 2003 12:02 PM
To: 'mohammad () tisri org'; 'Michael Steele'
Cc: snort-users () lists sourceforge net
Subject: RE: [Snort-users] Invalid Iterface with snort 2.0.0...

Sorry, my bad.  It helps if one actually reads the message.  

Have you tried to install the service specifying the interface 1st on
the
command line?  Like:  

   snort /install /service -i 1 -c e:/snort/etc/snort.conf -l
e:/snort/log 

Do you still get the "Invalid interface '0'" message?  

Note: There is a space between the '-i' and the actual interface number
'1'.


- Christopher


-----Original Message-----
From: Mohammad Alimohammadi [mailto:mohammad () tisri org]
Sent: Tuesday, April 22, 2003 2:24 PM
To: 'L. Christopher Luther'; 'Michael Steele'
Cc: snort-users () lists sourceforge net
Subject: RE: [Snort-users] Invalid Iterface with snort 2.0.0...


I said that I did not installed the service.
It shows

E:\Snort\bin>snort /service /show
ERROR:  [SNORT_SERVICE] Unable to open Snort registry entry.  Perhaps
Snort has not been installed as a service. The operation completed
successfully.
Fatal Error, Quitting..

> -----Original Message-----
> From: L. Christopher Luther [mailto:CLuther () Xybernaut com]
> Sent: Tuesday, April 22, 2003 10:48 PM
> To: 'mohammad () tisri org'; 'Michael Steele'
> Cc: snort-users () lists sourceforge net
> Subject: RE: [Snort-users] Invalid Iterface with snort 2.0.0...
>
> this was already suggested by Michael Steele, but it's worth
repeating:
> From the command prompt type: Snort /SERVICE /SHOW
>
> What does that show?
>
> - Christopher
>
>
> -----Original Message-----
> From: Mohammad Alimohammadi [mailto:mohammad () tisri org]
> Sent: Tuesday, April 22, 2003 2:03 PM
> To: 'Michael Steele'; 'L. Christopher Luther'
> Cc: snort-users () lists sourceforge net
> Subject: RE: [Snort-users] Invalid Iterface with snort 2.0.0...
>
>
> Dear All
> Yes exactly I know that we can install the service once. And uses of
-W
> for a list of possible interfaces.
>
> But the problem is that even I can not install the service for first
> time...
> I must say that I can get the traffic in display or any another output
> methods. But the problems occur when I want to install service in
> win2k...
>
> I used the service before with Snort 1.9.1 but there I have one
network
> adapter not 2...
>
> Warm Regards
> Mohammad
>
>
>
> > -----Original Message-----
> > From: snort-users-admin () lists sourceforge net [mailto:snort-users-
> > admin () lists sourceforge net] On Behalf Of Michael Steele
> > Sent: Tuesday, April 22, 2003 9:33 PM
> > To: mohammad () tisri org; snort-users () lists sourceforge net
> > Subject: RE: [Snort-users] Invalid Iterface with snort 2.0.0...
> >
> > Mohammad,
> >
> > Once the service is installed it has to uninstalled before you can
> > install the service again.
> >
> > From a command line navigate to the snort\bin folder use snort -W to
> get
> > a list of possible interfaces.
> >
> > From that same command line type snort -v -ix
> >
> > The x in -ix switch is the number of the interface to use.
> >
> > See if you can get traffic to display on any of those interfaces
> listed
> > using the snort -W command.
> >
> > -Michael
> > --
> >  Michael Steele | System Engineer / Support Technician
> >  mailto:michaels () silicondefense com
> >  Silicon Defense - The Cyber-War Defense Company
> >  Website: http://www.silicondefense.com
> >  Snort: Open Source Network IDS - http://www.snort.org
> >
> >
> > -----Original Message-----
> > From: snort-users-admin () lists sourceforge net
> > [mailto:snort-users-admin () lists sourceforge net] On Behalf Of
Mohammad
> > Alimohammadi
> > Sent: Tuesday, April 22, 2003 9:31 AM
> > To: snort-users () lists sourceforge net
> > Subject: [Snort-users] Invalid Iterface with snort 2.0.0...
> >
> > Dear All,
> > When I want to install snort as a service in win2k whit every this
> > commands:
> >
> > snort /install /service -c e:/snort/etc/snort.conf -l e:/snort/log
> >
> > snort /install /service -c e:/snort/etc/snort.conf -l e:/snort/log
-i1
> > snort /install /service -c e:/snort/etc/snort.conf -l e:/snort/log
-i2
> > I have got this error:
> > ERROR: Invalid interface '0'.Fatal Error, Quitting..
> >
> > I have 2 network adapter an I am using snort 2.0.0 ...
> > Any suggestion???
> >
> > Regards
> > Mohammad
> >
> >
> >
> >
> > -------------------------------------------------------
> > This sf.net email is sponsored by:ThinkGeek
> > Welcome to geek heaven.
> > http://thinkgeek.com/sf
> > _______________________________________________
> > Snort-users mailing list
> > Snort-users () lists sourceforge net
> > Go to this URL to change user options or unsubscribe:
> > https://lists.sourceforge.net/lists/listinfo/snort-users
> > Snort-users list archive:
> > http://www.geocrawler.com/redir-sf.php3?list=snort-users
> >
> >
> >
> >
> >
> > -------------------------------------------------------
> > This sf.net email is sponsored by:ThinkGeek
> > Welcome to geek heaven.
> > http://thinkgeek.com/sf
> > _______________________________________________
> > Snort-users mailing list
> > Snort-users () lists sourceforge net
> > Go to this URL to change user options or unsubscribe:
> > https://lists.sourceforge.net/lists/listinfo/snort-users
> > Snort-users list archive:
> > http://www.geocrawler.com/redir-sf.php3?list=snort-users


-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users





-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users