Snort Windows service startup error 1067



After installation, when you run “net start snortsvc,” the following error is displayed…

The Snort service is starting.
The Snort service could not be started.

A system error has occurred.

System error 1067 has occurred.

The process terminated unexpectedly.

Eventvwr shows the error as…

The following information is part of the event: c:\Snort\etc\snort.conf(114) => Missing argument to AIM_SERVERS


This is due to the c:\snort\etc\snort.conf being edited using Notepad using the wordwrap settings. This can be confirmed by var AIM_SEVERS setting spanning across of 4 instead of a single line e.g.






Simply open the original setup snort.conf file using Wordpad, copy the VAR AIM_SERVERS line and paste to your snort.conf file which must also be opened in Wordpad.


Leave a Reply

Fill in your details below or click an icon to log in: Logo

You are commenting using your account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s

%d bloggers like this: