Re: [Emerging-Sigs] GPL rules - who maintains them? Nobody?

["evilghost () packetmail net" <evilghost () packetmail net>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 03/18/11 19:23, Jason Brvenik wrote:
> Make sense? What's missing?

Performance degradation, elimination of false positives/false negatives as the
Internet and applications evolve, etc.

If an improvement is made, and deemed and improvement, it makes sense to include
it into ET/VRT, or vice versa; remember these are community/GPL rules and not
VRT IP.

There are two ET sets, open, and open-nogpl, with the open set including GPL
rules overlapping with the VRT community rules.  There are organizations which
only run ET, so inclusion of the gpl rules in the 'open' set makes sense.  For
dual-subscribers (ET & VRT) the 'open-nogpl' rules make sense.

It was decided to not change the SIDs to avoid performance degradation, lack of
continuity in the GPL rules, etc.  So, if the VRT team makes changes to the GPL
rules we'd (ET [1]) appreciate the updates.  Conversely, if we (ET [1]) make
changes we'd like to submit these to VRT as well, and come to an agreement for
the sake of uniformity.

[1] I should say I am a ET community participant only and have no profit to
derive from my participation.  I'm actually speaking presumptuously for ET, but
I think there's a desire in cooperation between both organizations.  Just
bringing you up to speed.

Now, it's beer time.

- -- 
It has been said that "hate" is a powerful emotion, perhaps that's why I'm so
strong.

- -evilghost
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)

iQIcBAEBAgAGBQJNg/tfAAoJENgimYXu6xOHREcQAIeJqB6fswDUAuqFZaOnmh1L
580kbHvhSKap845SiLWcaYucZ8vtdbKdUZlts2lrLnmlWUEfWkpsF+sQy92hh8As
QMWfopV3KpLmlRul8RcqOYot3+Bec/KLuBUJKZjFBvJJ56Mg6BaExjxmZ0x13hLd
2I/RMd1MYWQqZ9ADJ9FKOdPSX9ouiRfQJD6UxwDcUypNSRvAA/TVnyBq6i1XqFpA
saP+HwgUyykiFz+YAd4UQUPjGJBBYdivBn4CRVrjsMfLUYo1C6BUTbj78qKdBNHn
g6Vvk79TxzUympGVwN+P4XYkU5pHwIEMTPNRCB+YfkpVXnmvL473NAiYqlBqvQwt
/7sO6TuemkZK6Gfub4mbpe09xpfNN7GVs3aNoikVVzo2HX6OIwS9FPo3nxP3Qiqj
WG5G5HdYYW3ItlDmkzPylH7b8eYYxiIqaKnwODWiCfgEqwTfd1mZJYCRmI+Bd9iJ
pyjo1KLX4OliONiu+6OJwdWqNQO3m6UBOwmylC+tZNfqrH/TvxOFk0ojS8Q9Q7a+
S5kcRr1/VUcytCjkOQlTSGDMN8u4m2CPlcT+ZOxXShGImKOgFyrnzjiwYLtH1Oz7
RnaXpEK8ocGhJUl5NHxMNAABe6Fe1DqP/VrqLSSDbGOcVslNW9GwD+f4YanhDdZl
wM2+S0Oh2MWyq2CwLT6y
=WIlQ
-----END PGP SIGNATURE-----


------------------------------------------------------------------------------
Colocation vs. Managed Hosting
A question and answer guide to determining the best fit
for your organization - today and in the future.
http://p.sf.net/sfu/internap-sfd2d
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users