Snort mailing list archives
Re: [Emerging-Sigs] GPL rules - who maintains them?Nobody?
From: Victor Julien <lists () inliniac net>
Date: Mon, 21 Mar 2011 15:30:13 +0100
On 03/21/2011 03:24 PM, Matthew Jonkman wrote:
Perhaps that is the best solution then. Doesn't seem we'll get far with collaboration..... I prefer still not to re-sid them. Seems like a violation of the spirit of gpl in taking just the content and removing the reference to their history and origin. We'll still keep the license header though I suppose and reference their original sid range so folks can still search for relevant info.
You could set up a series of pages on the ET site describing where they come from, what their sid was, what the license is, etc etc and put that in as a reference... Cheers, Victor
I'd still prefer to keep them in sync somehow, if an option for that arises. Any other ideas? Matt On Mar 21, 2011, at 10:18 AM, Weir, Jason wrote:I should apologize for bringing this up - but the discussion has been at times entertaining... This is the crux of the problem - from an end users perspective.. I had what I thought was a FP on sid #1313.. I sent a note to the snort sigs list - Nigel informed me that they had no such rule... Hmmm, I thought the VRT was maintaining and distributing the GPL rules - did a search and he was correct, no sid #1313 Some more looking - the sig came from ET - so I send a note to the et sigs list.. Whoa, they don't maintain them either (I knew that duh)... So the folks that maintain them wont and either will the folks that just distribute them - come on guys! If I choose to run multiple rule sets then duplicates are my problem - why should ET or VRT care? You guys need to put out the most comprehensive rule set you can. Who cares what the competition does.. Your end users surely don't! This isn't about snort vs. suritica or ids vs. malware or not - ET and VRT have different views of the world and again your end users don't care! I want a rule set that works and the GPL mess is broken... When I have a question on a rule I need to know without a doubt where to go for help - it's that simple... Again my suggestion is do away with the GPL set completely - if that means renaming and residing them (with or without reference to the old rule) so be it... Make the rule set stand on its own and let me deal with duplicates... -J-----Original Message----- From: emerging-sigs-bounces () emergingthreats net [mailto:emerging-sigs-bounces () emergingthreats net] On Behalf Of Matthew Jonkman Sent: Monday, March 21, 2011 9:49 AM To: Martin Roesch Cc: wkitty42 () windstream net; emerging-sigs () emergingthreats net; snort-users () lists sourceforge net Subject: Re: [Emerging-Sigs] [Snort-users] GPL rules - who maintains them?Nobody? Cool, that's a very valid business model and strategy. Trying to bring this discussion back to GPL sids.... Matt_____________________________________________________________________________________________ Please visit www.nhrs.org to subscribe to NHRS email announcements and updates. _______________________________________________ Emerging-sigs mailing list Emerging-sigs () emergingthreats net http://lists.emergingthreats.net/mailman/listinfo/emerging-sigs Support Emerging Threats! Subscribe to Emerging Threats Pro http://www.emergingthreatspro.com The ONLY place to get complete premium rulesets for Snort 2.4.0 through Current!---------------------------------------------------- Matthew Jonkman Emergingthreats.net Emerging Threats Pro Open Information Security Foundation (OISF) Phone 765-807-8630 x110 Fax 312-264-0205 http://www.emergingthreatspro.com http://www.openinfosecfoundation.org ---------------------------------------------------- PGP: http://www.jonkmans.com/mattjonkman.asc _______________________________________________ Emerging-sigs mailing list Emerging-sigs () emergingthreats net http://lists.emergingthreats.net/mailman/listinfo/emerging-sigs Support Emerging Threats! Subscribe to Emerging Threats Pro http://www.emergingthreatspro.com The ONLY place to get complete premium rulesets for Snort 2.4.0 through Current!
-- --------------------------------------------- Victor Julien http://www.inliniac.net/ PGP: http://www.inliniac.net/victorjulien.asc --------------------------------------------- ------------------------------------------------------------------------------ Colocation vs. Managed Hosting A question and answer guide to determining the best fit for your organization - today and in the future. http://p.sf.net/sfu/internap-sfd2d _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- Re: [Emerging-Sigs] GPL rules - who maintains them? Nobody?, (continued)
- Re: [Emerging-Sigs] GPL rules - who maintains them? Nobody? Matthew Jonkman (Mar 21)
- Re: [Emerging-Sigs] GPL rules - who maintains them? Nobody? Randal T. Rioux (Mar 21)
- Re: [Emerging-Sigs] GPL rules - who maintains them?Nobody? Weir, Jason (Mar 21)
- Re: [Emerging-Sigs] GPL rules - who maintains them?Nobody? Matthew Jonkman (Mar 21)
- Re: [Emerging-Sigs] GPL rules - who maintainsthem?Nobody? evilghost () packetmail net (Mar 21)
- Re: [Emerging-Sigs] GPL rules - who maintainsthem?Nobody? Weir, Jason (Mar 21)
- Re: [Emerging-Sigs] GPL rules - who maintainsthem?Nobody? Jacob Kitchel (Mar 21)
- Re: [Emerging-Sigs] GPL rules - whomaintainsthem?Nobody? evilghost () packetmail net (Mar 21)
- Re: [Emerging-Sigs] GPL rules - who maintainsthem?Nobody? Martin Holste (Mar 21)
- Re: [Emerging-Sigs] GPL rules - who maintainsthem?Nobody? Nigel Houghton (Mar 21)
- Re: [Emerging-Sigs] GPL rules - who maintains them?Nobody? Victor Julien (Mar 21)
- Message not available
- Re: [Emerging-Sigs] GPL rules - who maintains them? Nobody? Matthew Jonkman (Mar 21)
- Re: [Emerging-Sigs] GPL rules - who maintains them? Nobody? Matthew Jonkman (Mar 19)
- Re: [Emerging-Sigs] GPL rules - who maintains them? Nobody? Jason Brvenik (Mar 19)
- Message not available
- Message not available
- Message not available
- Re: [Emerging-Sigs] GPL rules - who maintains them? Nobody? Joel Esler (Mar 21)
- Re: [Emerging-Sigs] GPL rules - who maintains them? Nobody? evilghost () packetmail net (Mar 21)
- Re: [Emerging-Sigs] GPL rules - who maintains them? Nobody? Martin Roesch (Mar 21)
- Re: [Emerging-Sigs] GPL rules - who maintains them? Nobody? evilghost () packetmail net (Mar 21)
- Re: [Emerging-Sigs] GPL rules - who maintains them? Nobody? Joel Esler (Mar 21)
- Re: [Emerging-Sigs] GPL rules - who maintains them? Nobody? waldo kitty (Mar 21)
- Re: [Emerging-Sigs] GPL rules - who maintains them? Nobody? Joel Esler (Mar 21)