[Snort-users] Snort Installation on Win2K problems

--0-1138766268-1086191809=:36519
Content-Type: text/plain; charset=us-ascii

Hello,

We're new to Snort and are trying to implement Snort as part of our IDS at our company.

We want to install Snort on a Win2K box, using IDSCenter RC4 as the front end. However, after install, any configuration change made via IDSCenter causes the Snort service to fails to start.

The Win2K box is 2000 Professional, SP4. Snort is version 2_1_2, installed WinPcap 2.3

The error message displayed is:

Error: D:\Snort\etc\snort.conf(246) => Invalid keyword 'preprocessor' for 'global' configuration. Fatal error, Quitting...

I read the FAQ, and section 5.5 (How to start Snort as a Win32 service) states that paths need to be set up from from the command line. Can similar parameters be added to the Snorter service as well?

When the service fails, in IDSCenter, in the Overview console, you can view the message that the service has failed to start, and this Snort command line is displayed:

C:\SNORT\bin\snort.exe -c "C:\SNORT\etc\snort.conf" -l "C:\SNORT\log"

....but can't be modified. How do I? Is this string correct?

Does anyone have any suggestions about what is causing this error??

Thanks!

George


--0-1138766268-1086191809=:36519
Content-Type: text/html; charset=us-ascii

<DIV>Hello,</DIV>
<DIV>&nbsp;</DIV>
<DIV>We're new to Snort and are trying to implement Snort as part of our IDS at our company. </DIV>
<DIV>&nbsp;</DIV>
<DIV>We want to install Snort on a Win2K box, using IDSCenter RC4 as the front end. However, after install, any configuration change made via IDSCenter causes the Snort service to fails to start.</DIV>
<DIV>&nbsp;</DIV>
<DIV>The Win2K box is 2000 Professional, SP4. Snort is version 2_1_2, installed WinPcap 2.3</DIV>
<DIV>&nbsp;</DIV>
<DIV>The error message displayed is:</DIV>
<DIV>&nbsp;</DIV>
<DIV>Error: D:\Snort\etc\snort.conf(246) =&gt; Invalid keyword 'preprocessor' for 'global' configuration. Fatal error, Quitting...</DIV>
<DIV>&nbsp;</DIV>
<DIV>I read the FAQ, and section 5.5 (How to start Snort as a Win32 service) states that paths need to be set up from from the command line. Can similar parameters be added to the Snorter service as well?</DIV>
<DIV>&nbsp;</DIV>
<DIV>When the service fails, in IDSCenter, in the Overview console, you can view the message that the service has failed to start, and this Snort command line is displayed:</DIV>
<DIV>&nbsp;</DIV>
<DIV>C:\SNORT\bin\snort.exe -c "C:\SNORT\etc\snort.conf" -l "C:\SNORT\log"</DIV>
<DIV>&nbsp;</DIV>
<DIV>...but can't be modified. How do I? Is this string correct?</DIV>
<DIV>&nbsp;</DIV>
<DIV>Does anyone have any suggestions about what is causing this error??</DIV>
<DIV>&nbsp;</DIV>
<DIV>Thanks!</DIV>
<DIV>&nbsp;</DIV>
<DIV>George<BR></DIV>
--0-1138766268-1086191809=:36519--


-------------------------------------------------------
This SF.Net email is sponsored by the new InstallShield X.
From Windows to Linux, servers to mobile, InstallShield X is the one
installation-authoring solution that does it all. Learn more and
evaluate today! http://www.installshield.com/Dev2Dev/0504
_______________________________________________
Snort-users mailing list
Snort-users@lists.sourceforge.net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/...fo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.p...st=snort-users