RE: Invalid Iterface with snort 2.0.0...

["Michael Steele" <michaels () silicondefense com>]

Mohammad,

If you have installed the snort service for a previous installation of
some kind, like using the Microsoft INSTSRV.exe program, you MUST remove
the service using that program (INSTSRV.exe) or Snort will not install
the service. Go into the registry and see if there is an entry in
HKLM/System/Services and if there is you might be able to delete it with
no after effects, but if you used INSTSRV.EXE to install the service, it
would be better to use that program or any other program that created
the service to remove it.

-Michael
-- 
 Michael Steele | System Engineer / Support Technician     
 mailto:michaels () silicondefense com    
 Silicon Defense - The Cyber-War Defense Company
 Website: http://www.silicondefense.com
 Snort: Open Source Network IDS - http://www.snort.org


-----Original Message-----
From: Mohammad Alimohammadi [mailto:mohammad () tisri org] 
Sent: Tuesday, April 22, 2003 11:24 AM
To: 'L. Christopher Luther'; 'Michael Steele'
Cc: snort-users () lists sourceforge net
Subject: RE: [Snort-users] Invalid Iterface with snort 2.0.0...

I said that I did not installed the service.
It shows

E:\Snort\bin>snort /service /show
ERROR:  [SNORT_SERVICE] Unable to open Snort registry entry.  Perhaps
Snort has not been installed as a service. The operation completed
successfully.
Fatal Error, Quitting..

> -----Original Message-----
> From: L. Christopher Luther [mailto:CLuther () Xybernaut com]
> Sent: Tuesday, April 22, 2003 10:48 PM
> To: 'mohammad () tisri org'; 'Michael Steele'
> Cc: snort-users () lists sourceforge net
> Subject: RE: [Snort-users] Invalid Iterface with snort 2.0.0...
>
> this was already suggested by Michael Steele, but it's worth
repeating:
> From the command prompt type: Snort /SERVICE /SHOW
>
> What does that show?
>
> - Christopher
>
>
> -----Original Message-----
> From: Mohammad Alimohammadi [mailto:mohammad () tisri org]
> Sent: Tuesday, April 22, 2003 2:03 PM
> To: 'Michael Steele'; 'L. Christopher Luther'
> Cc: snort-users () lists sourceforge net
> Subject: RE: [Snort-users] Invalid Iterface with snort 2.0.0...
>
>
> Dear All
> Yes exactly I know that we can install the service once. And uses of
-W
> for a list of possible interfaces.
>
> But the problem is that even I can not install the service for first
> time...
> I must say that I can get the traffic in display or any another output
> methods. But the problems occur when I want to install service in
> win2k...
>
> I used the service before with Snort 1.9.1 but there I have one
network
> adapter not 2...
>
> Warm Regards
> Mohammad
>
>
>
> > -----Original Message-----
> > From: snort-users-admin () lists sourceforge net [mailto:snort-users-
> > admin () lists sourceforge net] On Behalf Of Michael Steele
> > Sent: Tuesday, April 22, 2003 9:33 PM
> > To: mohammad () tisri org; snort-users () lists sourceforge net
> > Subject: RE: [Snort-users] Invalid Iterface with snort 2.0.0...
> >
> > Mohammad,
> >
> > Once the service is installed it has to uninstalled before you can
> > install the service again.
> >
> > From a command line navigate to the snort\bin folder use snort -W to
> get
> > a list of possible interfaces.
> >
> > From that same command line type snort -v -ix
> >
> > The x in -ix switch is the number of the interface to use.
> >
> > See if you can get traffic to display on any of those interfaces
> listed
> > using the snort -W command.
> >
> > -Michael
> > --
> >  Michael Steele | System Engineer / Support Technician
> >  mailto:michaels () silicondefense com
> >  Silicon Defense - The Cyber-War Defense Company
> >  Website: http://www.silicondefense.com
> >  Snort: Open Source Network IDS - http://www.snort.org
> >
> >
> > -----Original Message-----
> > From: snort-users-admin () lists sourceforge net
> > [mailto:snort-users-admin () lists sourceforge net] On Behalf Of
Mohammad
> > Alimohammadi
> > Sent: Tuesday, April 22, 2003 9:31 AM
> > To: snort-users () lists sourceforge net
> > Subject: [Snort-users] Invalid Iterface with snort 2.0.0...
> >
> > Dear All,
> > When I want to install snort as a service in win2k whit every this
> > commands:
> >
> > snort /install /service -c e:/snort/etc/snort.conf -l e:/snort/log
> >
> > snort /install /service -c e:/snort/etc/snort.conf -l e:/snort/log
-i1
> > snort /install /service -c e:/snort/etc/snort.conf -l e:/snort/log
-i2
> > I have got this error:
> > ERROR: Invalid interface '0'.Fatal Error, Quitting..
> >
> > I have 2 network adapter an I am using snort 2.0.0 ...
> > Any suggestion???
> >
> > Regards
> > Mohammad
> >
> >
> >
> >
> > -------------------------------------------------------
> > This sf.net email is sponsored by:ThinkGeek
> > Welcome to geek heaven.
> > http://thinkgeek.com/sf
> > _______________________________________________
> > Snort-users mailing list
> > Snort-users () lists sourceforge net
> > Go to this URL to change user options or unsubscribe:
> > https://lists.sourceforge.net/lists/listinfo/snort-users
> > Snort-users list archive:
> > http://www.geocrawler.com/redir-sf.php3?list=snort-users
> >
> >
> >
> >
> >
> > -------------------------------------------------------
> > This sf.net email is sponsored by:ThinkGeek
> > Welcome to geek heaven.
> > http://thinkgeek.com/sf
> > _______________________________________________
> > Snort-users mailing list
> > Snort-users () lists sourceforge net
> > Go to this URL to change user options or unsubscribe:
> > https://lists.sourceforge.net/lists/listinfo/snort-users
> > Snort-users list archive:
> > http://www.geocrawler.com/redir-sf.php3?list=snort-users






-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users