Re: Snort Users Yahoo Group

[Jeff Nathan <jeff () snort org>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1


- --On Saturday, June 21, 2003 09:33:15 -0700 "Roy S. Rapoport" 
<snort-users () ols inorganic org> wrote:

[...]

> -- I think a fair amount of it is "How do I get Snort logging to MySQL?"
> -- but the problem is still that really, snort-users should be a rather
> low-volume list, and we need snort-newusers (or snort-setup) and then --
> *MAYBE* -- snort-3rdparty-setup (though for God's sake, with a better
> name than that).

snort-newbies or snort-setup are appropriate names.

> However, if we do go ahead and do this, I'd argue there's a need to have
> all three lists reside in the same place and advertised through
> snort.org.  I think the vast majority of people who land on this mailing
> list find it because they've downloaded snort from Snort.org and seen
> Snort's link to this mailing list.  It's foolish to wait until someone
> posts to say "hey, you should go to this other mailing list."

Agreed.

> As for the 3rd-party tools, I have to admit I didn't even notice ACID
> had its own user mailing list hosted on sourceforge.  Of course, of the
> 13 messages posted in June, it appears approximately 11 are spam, so
> it's obviously not being vigorously managed.  I do think we should start
> responding to ACID questions with "That's not appropriate for this
> mailing list," though I'm not sure we have enough cantankerous assholes
> to maintain that as a consistent tone.  I do very strongly support the
> idea of a mailing list for each widely-adopted tool.  I'm not sure
> what's going to happen in the case of SnortCenter.  I'm guessing Lars
> doesn't have a whole bunch of energy/desire to deal with the support
> side of it (and in the case of SC, I think there's a danger anyway
> because it is so dependent on the efforts of one person).
>
> -roy


If the ACID list is unmaintained, there's nothing we can do about it.  Once 
a new list is created, list users would be expected to abide by the posting 
guidelines.

I do not mean to single out SnortCenter or ACID, it's by no means an easy 
effort to support a third party component in your spare time. 
Nevertheless, these components (and a few others) result in a 
disproportional amount of traffic to snort-users.  If people want to use 
these components, something has to give.  More documentation is needed 
(written by experienced users and the authors of these components), as well 
as a better place to ask questions about these components.

Brian/Marty, any interest in a t-shirt program for writing third-party 
component documentation?

- -Jeff

- --
http://cerberus.sourcefire.com/~jeff       (pgp key available)
"Great spirits have always encountered violent opposition from mediocre
minds."
- - Albert Einstein
    
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.7 (OpenBSD)

iD8DBQE+9g9/Eqr8+Gkj0/0RAgcXAJ9ShUPjlGwipH4rPRA0/nBCTOlPbwCfTSYQ
3BtpugICgvbnaalPN5WIblE=
=1Diy
-----END PGP SIGNATURE-----



-------------------------------------------------------
This SF.Net email is sponsored by: INetU
Attention Web Developers & Consultants: Become An INetU Hosting Partner.
Refer Dedicated Servers. We Manage Them. You Get 10% Monthly Commission!
INetU Dedicated Managed Hosting http://www.inetu.net/partner/index.php
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users