Snort.org home  
Got Source? About Snort About Sourcefire Snort FAQ
Sourcefire Network Security - the creators of Snort

Snort Forums Archive

Archive Home » Support » start snort as a service

Please note that the categories listed below represent an archived version of our forums pages. To view the current version and be able to post and reply to threads, please register and login here to go to the full forums pages.

[ Notice: Full Version of This Topic ]

start snort as a service


Posted by Lothar on April 01, 2005 13:28:37

I can't get snort to start as a service, win 2000, MYSQL.

Posted by chris on April 02, 2005 03:48:10

hi lothar, the first thing to do is make you that snort can run through a console session, to do that, use cmd, to navigate to the snort binary directory and execute snort so it dumps to the console window, use the command snort -v -ix,
where -ix equals your internet interface number, you can get the number from executing snort -W . if you get packets passing through the console window, you know that snort has installed correctly.
Now you need to include your confi files to make sure that everything is correct there. use snort -c "path to config file" -l "path to logging file" -ix -T, this should test your parameters and give any error messages if snort has any problems.
Once you have sorted those out, you need to install snort as a service in windows, you can use the command
snort /SERVICE /INSTALL -c "path to config file" -l "path to logging file" -ix
this will set an entry to the services.msc MMC, then you will need to open services.msc and set snort to start automatically. that should get you up and running bascally.
for a better summary, have a look at www.winsnort.com
they have various installation read me that you can have a look at..
cheers,
Chris