Snort Windows service startup error 1067

snortsvcerr

Problem…

After installation, when you run “net start snortsvc,” the following error is displayed…

The Snort service is starting.
The Snort service could not be started.

A system error has occurred.

System error 1067 has occurred.

The process terminated unexpectedly.

Eventvwr shows the error as…

The following information is part of the event: c:\Snort\etc\snort.conf(114) => Missing argument to AIM_SERVERS

Cause…

This is due to the c:\snort\etc\snort.conf being edited using Notepad using the wordwrap settings. This can be confirmed by var AIM_SEVERS setting spanning across of 4 instead of a single line e.g.

var AIM_SERVERS

[64.12.24.0/23,64.12.28.0/23,64.12.161.0/24,64.12.163.0/24,64.12.200.0/24,205.188.3.0/

24,205.188.5.0/24,205.188.7.0/24,205.188.9.0/24,205.188.153.0/24,205.188.179.0/24,205.

188.248.0/24]

Solution…

Simply open the original setup snort.conf file using Wordpad, copy the VAR AIM_SERVERS line and paste to your snort.conf file which must also be opened in Wordpad.

Advertisements

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s

%d bloggers like this: