After installation, when you run “net start snortsvc,” the following error is displayed…
The Snort service is starting.
The Snort service could not be started.
A system error has occurred.
System error 1067 has occurred.
The process terminated unexpectedly.
Eventvwr shows the error as…
The following information is part of the event: c:\Snort\etc\snort.conf(114) => Missing argument to AIM_SERVERS
This is due to the c:\snort\etc\snort.conf being edited using Notepad using the wordwrap settings. This can be confirmed by var AIM_SEVERS setting spanning across of 4 instead of a single line e.g.
Simply open the original setup snort.conf file using Wordpad, copy the VAR AIM_SERVERS line and paste to your snort.conf file which must also be opened in Wordpad.