Skip to content

Windows could not start the Snort service

Featured Replies

Using the commands in the tutorial to install snort as a service this is the path I end up with.  Is it correct?  The service won't start and results in-

"Windows could not start the Snort service on Local Computer"

"Path to executable:"

"d:\winids\Snort\bin\snort /SERVICE"

 

 

Edited by scowles
Multiple images by mistake

Where exactly are you at in the tutorial?

What happens: From a open CMD window type 'd:\winids\Snort\bin\snort /SERVICE /SHOW' (less the outside quotes), and tap the 'Enter' key.

  • Author

I got all the way through the

How to Install This Windows Intrusion Detection System (WinIDS)

tutorial and was getting thousands of alerts.  But, I always had to manually start snort from the command line.  Barnyard 2 always started automatically.

 

Service_Show_Cmd_Result.JPG

AddingSnortToServices.JPG

Edited by scowles
Attachment added to show where I went back to in the tutorial to make snort run as a service

Open a CMD window and  type 'cd /d d:\winids\snort\bin' (less the outside quotes), and tap the 'Enter' key.

At the CMD prompt type 'snort /SERVICE /UNINSTALL' (less the outside quotes), and tap the 'Enter' key.

At the CMD prompt type 'snort /SERVICE /INSTALL -c d:\winids\snort\etc\snort.conf -l d:\winids\snort\log -ix' (less the outside quotes), and tap the 'Enter' key.

Note: Make SURE the x above reflects your interface number.

At the CMD prompt type 'sc config snortsvc start= auto' (less the outside quotes), and tap the 'Enter' key.

At the CMD prompt type 'net start snort' (less the outside quotes), and tap the 'Enter' key.

The service should now start...

  • Author

Morpheus,

Thanks.  Good recommendation but I think the registry might be where the issue is?

 

RegistryIssuePossible.JPG

It appears you added a step. Go back and follow the directions.

RegistryIssuePossible_thumb_JPG_2d9a09f7

  • Author

Here's the result of my going back and executing the instructions more carefully-

  • Author

Missing Results attached

Uninstall_Install_Snort_Service_Result.JPG

Did you try rebooting?

From the CMD prompt type 'd:\winids\snort\bin\snort /SERVICE /SHOW' (less the outside quotes), and tap the 'Enter' key.

What does the above show?

  • Author

Yes, I have rebooted many times.  Results of the requested command run are attached.

Thanks.

 

SERVICE_SHOW Cmd Result.GIF

From the command prompt type d:\winids\snort\bin\snort -v -i1

What is the result?

Create an account or sign in to comment

Important Information

We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.

Account

Navigation

Search

Search

Configure browser push notifications

Chrome (Android)
  1. Tap the lock icon next to the address bar.
  2. Tap Permissions → Notifications.
  3. Adjust your preference.
Chrome (Desktop)
  1. Click the padlock icon in the address bar.
  2. Select Site settings.
  3. Find Notifications and adjust your preference.