Snort mailing list archives
Snort win2k run as service
From: Sixonetonoffun1 () aol com
Date: Thu, 20 Dec 2001 18:30:57 EST
win2k sp2 blah blah Snort 1.8.3 flex-resp IDS center MySQL ACID ADODB PHPLot Ok for about 2 1/2 weeks I've been using Snort playing with it so to speak. Now I would like to change from IDS Center starting Snort to running as a service. I believe I followed siliconedefense instructions and am logged on with administrative privilege. But fail to be able to start snort this way. Am I missing something ? instsrv.exe ran with no error and srvany.exe reported no error. Here's the reg key as exported. Thanks, Peter Windows Registry Editor Version 5.00 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\snort] "Type"=dword:00000010 "Start"=dword:00000002 "ErrorControl"=dword:00000001 "ImagePath"=hex(2):46,00,3a,00,5c,00,57,00,49,00,4e,00,4e,00,54,00,5c,00,73,00 ,\ 72,00,76,00,61,00,6e,00,79,00,2e,00,65,00,78,00,65,00,00,00 "DisplayName"="snort" "ObjectName"="LocalSystem" "Description"="IDS" [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\snort\Parameters ] "AppParameters"=" -c C:\\Snort\\Snort\\snort.conf -l C:\\Snort\\Snort -i 1 -p" "AppDirectory "="C:\\Snort\\Snort" "Application "="C:\\Snort\\Snort\\Snort.exe" [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\snort\Security] "Security"=hex:01,00,14,80,a0,00,00,00,ac,00,00,00,14,00,00,00,30,00,00,00,02, \ 00,1c,00,01,00,00,00,02,80,14,00,ff,01,0f,00,01,01,00,00,00,00,00,01,00,00,\ 00,00,02,00,70,00,04,00,00,00,00,00,18,00,fd,01,02,00,01,01,00,00,00,00,00,\ 05,12,00,00,00,20,02,00,00,00,00,1c,00,ff,01,0f,00,01,02,00,00,00,00,00,05,\ 20,00,00,00,20,02,00,00,78,f0,0d,00,00,00,18,00,8d,01,02,00,01,01,00,00,00,\ 00,00,05,0b,00,00,00,20,02,00,00,00,00,1c,00,fd,01,02,00,01,02,00,00,00,00,\ 00,05,20,00,00,00,23,02,00,00,78,f0,0d,00,01,01,00,00,00,00,00,05,12,00,00,\ 00,01,01,00,00,00,00,00,05,12,00,00,00 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\snort\Enum] "0"="Root\\LEGACY_SNORT\\0000" "Count"=dword:00000001 "NextInstance"=dword:00000001 _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- Snort win2k run as service Sixonetonoffun1 (Dec 20)
- <Possible follow-ups>
- RE: Snort win2k run as service Burleson, Lee (IA) (Dec 20)
- Snort win2k run as service Michael Steele (Dec 26)