RE: Snort 2.0 as a Windows Service??

["Uhte, Russ" <RussU () RP-L com>]

Run snort from the command prompt as 
C:\BIN\Snort>snort.exe -c "C:\BIN\Snort\snort.conf" -l "C:\BIN\Snort\log" -h
10.0.1.0/24[Ip address sanitized] -i 1 -y

What error are you getting from this??

-Russ

> -----Original Message-----
> From: kerberos K [mailto:kerberos_k () hotmail com] 
> Sent: Tuesday, April 22, 2003 1:19 PM
> To: snort-users () lists sourceforge net
> Subject: [Snort-users] Snort 2.0 as a Windows Service??
>
>
>
>
> I'm using the Snort 2.0 binary from both Snort.org and 
> Silicon Defense, I've 
> attempted to install Snort as a Win2K service.  I've used both Snort 
> binaries on the same machine via a command line, and 
> everything appears to 
> have worked...
>
> When I install Snort as a service, the following output is generated:
>
> C:\BIN\Snort>snort.exe /SERVICE /INSTALL -c "C:\BIN\Snort\snort.conf"
> - -l "C:\BIN\Snort\log" -h 10.0.1.0/24[Ip address sanitized] -i 1 -y
>
> [SNORT_SERVICE] Attempting to install the Snort service.
>
> [SNORT_SERVICE] The full path to the Snort binary appears to be:
>     C:\BIN\Snort\snort.exe /SERVICE
>
> [SNORT_SERVICE] Successfully added registry keys to:
>     \HKEY_LOCAL_MACHINE\SOFTWARE\Snort\
>
> [SNORT_SERVICE] Successfully added the Snort service to the Services
> database.
>
>
> And when I "show" the service parameters, they appear as:
>
> C:\Snort\snort\bin>snort /service /show
>
> Snort is currently configured to run as a Windows service using the 
> following
> command-line parameters:
>
>      -c c:\snort\snort\etc\snort.conf -l c:\snort\snort\log 
> -h 10.0.1.0/24 
> [Ip address sanitized]-i 1 -y
>
> However when I attempt to start the service via either 
> command line, or 
> through the services applet I get the following error:
>
> "C:\Snort\snort\bin>net start snort
> The Snort service is starting.
> The Snort service could not be started.
>
> A system error has occurred.
>
> System error 1067 has occurred.
>
> The process terminated unexpectedly."
>
> I previously had Snort 1.9.1 running as a service and 
> successfully logging 
> to a mysql database and ACID. This current issue happened 
> when I attempted 
> to upgrade from 1.9.1 to 2.0.
>
> I know this issue has come up several times in the past, I 
> just have not 
> seen a solution? Did I miss something? I'm searching through 
> the archive 
> messages now. I was just hoping maybe some could point me in 
> the right 
> direction...
>
> Thanks
>
> Brad
>
>
> _________________________________________________________________
> The new MSN 8: smart spam protection and 2 months FREE*  
> http://join.msn.com/?page=features/junkmail
>
>
>
> -------------------------------------------------------
> This sf.net email is sponsored by:ThinkGeek
> Welcome to geek heaven.
> http://thinkgeek.com/sf
> _______________________________________________
> Snort-users mailing list
> Snort-users () lists sourceforge net
> Go to this URL to change user options or unsubscribe:
> https://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users list archive:
> http://www.geocrawler.com/redir-sf.php3?list=snort-users
> ---
> [This E-mail scanned for viruses by Declude Virus]


---
CONFIDENTIALITY NOTICE: This email and any attachments are for the exclusive
and confidential use of the intended recipient. If you are not the intended
recipient, please do not read, distribute or take action in reliance upon
this message. If you have received this in error, please notify us
immediately by return email and promptly delete this message and its
attachments from your computer system.
---


-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users