RE: WinSnort and MSSQL Problem

["snortmail" <snortmail () eloqua com>]

Hey - I'm having the same problem on my win2k box....snort runs fine when not used as a service.  Running Snort 2.1 - I 
get errors:
 
FROM Command Prompt: net start snort
 
The service is not responding to the control function.
More help is available by typing NET HELPMSG 2186.
 
FROM Services MMC:
 
Could not start the Snort service on Local Computer.
Error 1053: The service did not respond to the start or control request in a timely fashion.
 
But firing up snort from the command prompt using snort.exe directly works like a charm...
 
I've checked permissions on the snort.exe and all other files involved and everythings ok.  Any help would be 
appreciated as it's much more convenient to be running this as a service.  Thx,
 
- Mike Couch


-----Original Message-----
From: Michael Steele [mailto:michaels () winsnort com]
Sent: Tuesday, December 30, 2003 12:54 PM
To: 'Snort Users List'
Subject: RE: [Snort-users] WinSnort and MSSQL Problem

If you followed the guide there will be no console window open.

Kindest regards,

The WINSNORT.com Management Team
--
Pick up your FREE Windows or UNIX Snort installation guides      
mailto:support () winsnort com
Website: http://www.winsnort.com
Snort: Open Source Network IDS - http://www.snort.org


> -----Original Message-----
> From: snort-users-admin () lists sourceforge net [mailto:snort-users-
> admin () lists sourceforge net] On Behalf Of Uso
> Sent: Tuesday, December 30, 2003 1:31 AM
> To: snort-users () lists sourceforge net
> Subject: [Snort-users] WinSnort and MSSQL Problem
>
> Hi,
> I just finished installing snort with ACID and MSSQL according to the
> documentation on WinSnort.com.
> I am receiving some errors that I don't understand on the console but the
> system seems to be working fine as ACID is reporting correctly (however
> CPU
> utilization is high because of the scrolling of these error messages in
> the
> console window).
> Does anyone have a clue what that error means?
>
> regards
> Uso
>
>
> -*> Snort! <*-
> Version 2.1.0-ODBC-MySQL-MSSQL-FlexRESP-WIN32 (Build 9)
> By Martin Roesch (roesch () sourcefire com, www.snort.org)
> 1.7-WIN32 Port By Michael Davis (mike () datanerds net,
> www.datanerds.net/~mike)
> 1.8 - 2.1 WIN32 Port By Chris Reid (chris.reid () codecraftconsultants com)
> database: SQL Server message 2627, state 1, severity 14:
>         Violation of PRIMARY KEY constraint 'PK__event__78B3EFCA'. Cannot
> insert
>  duplicate key in object 'event'.
> Server 'ITTSLAB1', Line 1
> database:  The above error was caused by the following statement:
> INSERT INTO event (sid,cid,signature,timestamp) VALUES ('1', '4978', '1',
> '2003-
> 12-30 13:21:37.197')
> database: SQL Server message 3621, state 0, severity 0:
>         The statement has been terminated.
> Server 'ITTSLAB1', Line 1
> database:  The above error was caused by the following statement:
> INSERT INTO event (sid,cid,signature,timestamp) VALUES ('1', '4978', '1',
> '2003-
> 12-30 13:21:37.197')
> database: DB-Library error:
>         General SQL Server error: Check messages from the SQL Server.
> database:  The above error was caused by the following statement:
> INSERT INTO event (sid,cid,signature,timestamp) VALUES ('1', '4978', '1',
> '2003-
> 12-30 13:21:37.197')
> database: SQL Server message 2627, state 1, severity 14:
>         Violation of PRIMARY KEY constraint 'PK__event__78B3EFCA'. Cannot
> insert
>  duplicate key in object 'event'.
> Server 'ITTSLAB1', Line 1
> database:  The above error was caused by the following statement:
> INSERT INTO event (sid,cid,signature,timestamp) VALUES ('1', '4979', '1',
> '2003-
> 12-30 13:21:37.197')
> database: SQL Server message 3621, state 0, severity 0:
>         The statement has been terminated.
> Server 'ITTSLAB1', Line 1
> database:  The above error was caused by the following statement:
> INSERT INTO event (sid,cid,signature,timestamp) VALUES ('1', '4979', '1',
> '2003-
> 12-30 13:21:37.197')
> database: DB-Library error:
>         General SQL Server error: Check messages from the SQL Server.
> database:  The above error was caused by the following statement:
> INSERT INTO event (sid,cid,signature,timestamp) VALUES ('1', '4979', '1',
> '2003-
> 12-30 13:21:37.197')
> database: SQL Server message 2627, state 1, severity 14:
>         Violation of PRIMARY KEY constraint 'PK__event__78B3EFCA'. Cannot
> insert
>  duplicate key in object 'event'.
> Server 'ITTSLAB1', Line 1
> database:  The above error was caused by the following statement:
> INSERT INTO event (sid,cid,signature,timestamp) VALUES ('1', '4980', '1',
> '2003-
> 12-30 13:21:37.197')
> database: SQL Server message 3621, state 0, severity 0:
>         The statement has been terminated.
>
>
>
> -------------------------------------------------------
> This SF.net email is sponsored by: IBM Linux Tutorials.
> Become an expert in LINUX or just sharpen your skills.  Sign up for IBM's
> Free Linux Tutorials.  Learn everything from the bash shell to sys admin.
> Click now! http://ads.osdn.com/?ad_id=1278&alloc_id=3371&op=click
> _______________________________________________
> Snort-users mailing list
> Snort-users () lists sourceforge net
> Go to this URL to change user options or unsubscribe:
> https://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users list archive:
> http://www.geocrawler.com/redir-sf.php3?list=snort-users





-------------------------------------------------------
This SF.net email is sponsored by: IBM Linux Tutorials.
Become an expert in LINUX or just sharpen your skills.  Sign up for IBM's
Free Linux Tutorials.  Learn everything from the bash shell to sys admin.
Click now! http://ads.osdn.com/?ad_id=1278&alloc_id=3371&op=click
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


-------------------------------------------------------
This SF.net email is sponsored by: IBM Linux Tutorials.
Become an expert in LINUX or just sharpen your skills.  Sign up for IBM's
Free Linux Tutorials.  Learn everything from the bash shell to sys admin.
Click now! http://ads.osdn.com/?ad_id78&alloc_id371&op=click
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users