[Snort-users] Snort 2.0 as a Windows Service??

Michael Steele michaels at ...155...
Tue Apr 22 13:10:02 EDT 2003


Uninstall the service, reboot, then install the service again:

C:\BIN\Snort>snort /SERVICE /INSTALL -c C:\BIN\Snort\snort.conf -l
C:\BIN\Snort\log -h[Ip address sanitized] -i1 -y

 Michael Steele | System Engineer / Support Technician     
 mailto:michaels at ...155...    
 Silicon Defense - The Cyber-War Defense Company
 Website: http://www.silicondefense.com
 Snort: Open Source Network IDS - http://www.snort.org

-----Original Message-----
From: snort-users-admin at lists.sourceforge.net
[mailto:snort-users-admin at lists.sourceforge.net] On Behalf Of kerberos K
Sent: Tuesday, April 22, 2003 11:19 AM
To: snort-users at lists.sourceforge.net
Subject: [Snort-users] Snort 2.0 as a Windows Service??

I'm using the Snort 2.0 binary from both Snort.org and Silicon Defense,
attempted to install Snort as a Win2K service.  I've used both Snort 
binaries on the same machine via a command line, and everything appears
have worked...

When I install Snort as a service, the following output is generated:

C:\BIN\Snort>snort.exe /SERVICE /INSTALL -c "C:\BIN\Snort\snort.conf"
- -l "C:\BIN\Snort\log" -h[Ip address sanitized] -i 1 -y

[SNORT_SERVICE] Attempting to install the Snort service.

[SNORT_SERVICE] The full path to the Snort binary appears to be:
    C:\BIN\Snort\snort.exe /SERVICE

[SNORT_SERVICE] Successfully added registry keys to:

[SNORT_SERVICE] Successfully added the Snort service to the Services

And when I "show" the service parameters, they appear as:

C:\Snort\snort\bin>snort /service /show

Snort is currently configured to run as a Windows service using the 
command-line parameters:

     -c c:\snort\snort\etc\snort.conf -l c:\snort\snort\log -h 
[Ip address sanitized]-i 1 -y

However when I attempt to start the service via either command line, or 
through the services applet I get the following error:

"C:\Snort\snort\bin>net start snort
The Snort service is starting.
The Snort service could not be started.

A system error has occurred.

System error 1067 has occurred.

The process terminated unexpectedly."

I previously had Snort 1.9.1 running as a service and successfully
to a mysql database and ACID. This current issue happened when I
to upgrade from 1.9.1 to 2.0.

I know this issue has come up several times in the past, I just have not

seen a solution? Did I miss something? I'm searching through the archive

messages now. I was just hoping maybe some could point me in the right 



The new MSN 8: smart spam protection and 2 months FREE*  

This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
Snort-users mailing list
Snort-users at lists.sourceforge.net
Go to this URL to change user options or unsubscribe:
Snort-users list archive:

More information about the Snort-users mailing list