Snort mailing list archives

Snort win2k run as service


From: Sixonetonoffun1 () aol com
Date: Thu, 20 Dec 2001 18:30:57 EST

win2k sp2 blah blah
Snort 1.8.3 flex-resp
IDS center 
MySQL
ACID
ADODB
PHPLot

Ok for about 2 1/2 weeks I've been using Snort playing with it so to speak. 
Now I would like to change from IDS Center starting Snort to running as a 
service. I believe I followed  siliconedefense instructions and am logged on 
with administrative privilege. But fail to be able to start snort this way. 
Am I missing something ? instsrv.exe ran with no error and srvany.exe 
reported no error. Here's the reg key as exported. 
                                                                              
Thanks, Peter

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\snort]
"Type"=dword:00000010
"Start"=dword:00000002
"ErrorControl"=dword:00000001
"ImagePath"=hex(2):46,00,3a,00,5c,00,57,00,49,00,4e,00,4e,00,54,00,5c,00,73,00

,\
  72,00,76,00,61,00,6e,00,79,00,2e,00,65,00,78,00,65,00,00,00
"DisplayName"="snort"
"ObjectName"="LocalSystem"
"Description"="IDS"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\snort\Parameters ]
"AppParameters"=" -c C:\\Snort\\Snort\\snort.conf -l C:\\Snort\\Snort -i 1 -p"
"AppDirectory "="C:\\Snort\\Snort"
"Application "="C:\\Snort\\Snort\\Snort.exe"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\snort\Security]
"Security"=hex:01,00,14,80,a0,00,00,00,ac,00,00,00,14,00,00,00,30,00,00,00,02,
\
  00,1c,00,01,00,00,00,02,80,14,00,ff,01,0f,00,01,01,00,00,00,00,00,01,00,00,\
  00,00,02,00,70,00,04,00,00,00,00,00,18,00,fd,01,02,00,01,01,00,00,00,00,00,\
  05,12,00,00,00,20,02,00,00,00,00,1c,00,ff,01,0f,00,01,02,00,00,00,00,00,05,\
  20,00,00,00,20,02,00,00,78,f0,0d,00,00,00,18,00,8d,01,02,00,01,01,00,00,00,\
  00,00,05,0b,00,00,00,20,02,00,00,00,00,1c,00,fd,01,02,00,01,02,00,00,00,00,\
  00,05,20,00,00,00,23,02,00,00,78,f0,0d,00,01,01,00,00,00,00,00,05,12,00,00,\
  00,01,01,00,00,00,00,00,05,12,00,00,00

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\snort\Enum]
"0"="Root\\LEGACY_SNORT\\0000"
"Count"=dword:00000001
"NextInstance"=dword:00000001



_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: