How to configure Suricata-IDS in IPS mode in Windows Server 2019?

Help
,
22

Hi,
I got below errors:

C:\Program Files\Suricata>suricata -c suricata.yaml -i 172.1.1.2 -l ./log -knone -vvv --service-install
5/9/2021 -- 12:08:52 - <Info> - Running as service: no
5/9/2021 -- 12:08:52 - <Info> - translated 172.1.1.2 to pcap device \Device\NPF_{FFDBB923-6641-45AF-B37E-0A0A839CC103}
5/9/2021 -- 12:08:52 - <Error> - [ERRCODE: SC_ERR_SVC(162)] - Can't create service: 1073
C:\Program Files\Suricata>
C:\Program Files\Suricata>suricata -c suricata.yaml -l ./log -knone -vvv --service-install
5/9/2021 -- 12:10:50 - <Info> - Running as service: no
5/9/2021 -- 12:10:50 - <Error> - [ERRCODE: SC_ERR_SVC(162)] - Can't create service: 1073
1 Like
24

Hello,
How can I solve that error?

Thank you.

25

Hí,

Check that the service is not already created. It has happened to me with a Mindow 10. If it is created, it is possible that it is in manual mode. Start it from Services.

26

Hi,

I had the same error and I solved it by deleting the existing Suricata service with sc delete suricata and installing it again with the --service-install flag.