Snort mailing list archives

Re: open source vs. GPL


From: Martin Roesch <roesch () sourcefire com>
Date: Tue, 14 Apr 2009 18:30:47 -0400

I (and Sourcefire) wouldn't be writing hundreds of thousands of lines
of code just for a licensing exercise, we could easily scrub Snort's
existing code base of contributed code if we wanted to and save
ourselves the time and effort.  To get Snort where I want it to go as
a technology requires a rewrite and there are engineering reasons for
doing so.

I think my response regarding spo_database was sufficient related to
the latency of the module and its impact on packet processing.

On the licensing I guess we're going to have to agree to disagree.

Marty

On Tue, Apr 14, 2009 at 5:45 PM, Loyal A Moses <loyalmoses () mac com> wrote:

It's classic foolery with the use of the words "open source".
Snort today is a product that you can fork, and go sell if you like as long
as you adhere to the GPL license.
Snort tomorrow (version 3) is not going to allow you to fork and go sell
should you wish, because Sourcefire is changing it's licensing, which
arguably they actually can't do with the current GPL'd snort. Thus the
reason why Marty has stated that they have developed version 3 will 100%
non-contributed code. Which is an amazing task, that I would love to have
seen.
On Apr 14, 2009, at 2:36 PM, Christopher Jacob wrote:

Did I miss a memo? When was it announced that Snort 3 would not be open
source?
~chris

...sent from the road...
On Apr 14, 2009, at 4:21 PM, Loyal A Moses <loyalmoses () mac com> wrote:


Snort is open source, until version 3. But that is a whole other argument.
On Apr 14, 2009, at 1:11 PM, Joel Esler wrote:

No one is taking a vote, we just said, "if we had a vote in it..."  I'd
rather take the code out of the IDS/IPS and put it into an output module.
 One that is maintained well (as Shawn said).
Snort is an open source program, I don't see harm in discussion on Snort's
own mailing lists do you?
J

On Tue, Apr 14, 2009 at 3:35 PM, Loyal A Moses <loyalmoses () mac com> wrote:

Is Sourcefire limited on development skill or man power?

It makes no sense at all to remove one of the most common facilities
in use by snort users because it is "too complex".

In the end, you'll do what you are going to do regardless of the
community -- we've seen it before. But don't use "complexity" and
"bugs" as the excuse.

Sourcefire is a publicly traded company -- Is it smart to be taking
votes on product development from a mailing list? I wouldn't think so.

Loyal.

On Apr 14, 2009, at 11:52 AM, Jason Brvenik wrote:

I have an ulterior motive and it is simple.

Many of the bugs and issues over time with snort have been in output
plugins. Make one well supported, tested, unified method designed for
best performance and while doing so it improves the supportability and
maintainability of the code base.

On Tue, Apr 14, 2009 at 2:39 PM, Loyal A Moses <loyalmoses () mac com>
wrote:
My vote is to provide as many output options as possible, to help
keep
snort used as a tool.

The argument of code complexity being a good reason to remove output
facilities is only valid if the code is written poorly and not
modular. This wheel doesn't need re-invented and this conversation is
kind of silly, unless there is ulterior motives for actually wanting
to remove this support.

Loyal.


------------------------------------------------------------------------------
This SF.net email is sponsored by:
High Quality Requirements in a Collaborative Environment.
Download a free trial of Rational Requirements Composer Now!
http://p.sf.net/sfu/www-ibm-com
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users




------------------------------------------------------------------------------
This SF.net email is sponsored by:
High Quality Requirements in a Collaborative Environment.
Download a free trial of Rational Requirements Composer Now!
http://p.sf.net/sfu/www-ibm-com
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users



--
joel esler | Sourcefire | gtalk: jesler () sourcefire com | 302-223-5974

------------------------------------------------------------------------------
This SF.net email is sponsored by:
High Quality Requirements in a Collaborative Environment.
Download a free trial of Rational Requirements Composer Now!
http://p.sf.net/sfu/www-ibm-com

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users

------------------------------------------------------------------------------
This SF.net email is sponsored by:
High Quality Requirements in a Collaborative Environment.
Download a free trial of Rational Requirements Composer Now!
http://p.sf.net/sfu/www-ibm-com
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users




-- 
Martin Roesch - Founder/CTO, Sourcefire Inc. - +1-410-290-1616
Sourcefire - Security for the Real World - http://www.sourcefire.com
Snort: Open Source IDP - http://www.snort.org

------------------------------------------------------------------------------
This SF.net email is sponsored by:
High Quality Requirements in a Collaborative Environment.
Download a free trial of Rational Requirements Composer Now!
http://p.sf.net/sfu/www-ibm-com
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: