Snort mailing list archives
RE: Professionalism
From: Mike Shaw <mshaw () wwisp com>
Date: Wed, 14 Nov 2001 09:18:20 -0600
Honestly, any shop that would select any MS product over Snort is whacked to begin with--whatever the reasons.
I think this is why open source has had the success it has. It puts a premium on functionality and stability over corporate marketing BS. If we start injecting image and a 'professional appearance' into the priority list, then we can say buh-bye to the superiority of the product and hello to slick interfaces.
The prior poster made a point. What VP or member of senior management goes through the conf file? These people should be by definition Techies. Any techie who thinks that the porn statement makes snort suspect and not worth using is likely to be running a pretty cheesy shop. If they are not techies and they want to look through the files......best of luck to you.
If you want professionalism, fill out a P.O. for one of the professionally developed products. If you want to effectively fulfill your professional responsibilities AND help the bottom line then go with Snort.
-Mike (a different Mike) At 06:14 PM 11/13/2001 -0500, Sheahan, Paul (PCLN-NW) wrote:
I totally agree.....a professional look and feel "out of the box" would definitely help a product like this get more immediate acceptance in the corporate world. If management gets a first impression that Snort or any other open source software is being maintained by a bunch of people who aren't serious due to little remarks like this (which you would never see in the a commercial package), they will hesitate to bring it into a corporate environment. I would love to see the open source world really take off and overcome the Microsoft monster, and professionalism out of the box would be a good place to start if the developers are serious about competing with the commercial apps. Just my 2 cents..... -----Original Message----- From: Joe Smith [mailto:shadowm4n () yahoo com] Sent: Tuesday, November 13, 2001 5:39 PM To: snort-users () lists sourceforge net Subject: Re: [Snort-users] Professionalism Nothing quite like stirring the hornet's nest... Based on many of the responses I've received, I get the impression my point has been missed and/or I didn't state it clearly enough. My agenda is simple: make open-source more commonplace in the corporate environment. It's the same goal that many in the open source community share, because it's the only way to displace the current OS/Application monarch, Mr. Bill Gates. Many in the corporate world have a very negative opinion of open source precisely because of what I stated earlier regarding the unprofessional nature of open source. They will claim that the code is "untrustworthy". This doesn't mean it doesn't work (or can be configured to work). It doesn't mean that the programmers are untrustworthy. Once again, it isn't the impropriety that's the problem, it's the appearance of impropriety. The negative stigma will stay as long as this sort of thing crops up. Yes, I realize its idiotic for a VP to disqualify a product only because of lubrication references, but it does happen and it makes my job (ya know, intrusion detection and all that fun stuff) that much more difficult. Yes, its free. Yes, the classification.config file can be sed/grepped to do exactly what you want. And yes, its the best thing out there (its superior to every IDS I've tested, commercial or non). All I'm asking is for snort to make an effort to present a more professional appearance so that corporate acceptance is the default, not the exception. Mike --- Gordon Ewasiuk <gewasiuk () gnmc net> wrote: > On Today, Phil Wood wrote: > > >Date: Tue, 13 Nov 2001 13:08:47 -0700 > >From: Phil Wood <cpw () lanl gov> > >To: Joe Smith <shadowm4n () yahoo com> > >Cc: snort-users () lists sourceforge net > >Subject: Re: [Snort-users] Professionalism > > > >On Tue, Nov 13, 2001 at 09:54:31AM -0800, Joe Smith > wrote: > >> To the administrators of SNORT, > >> > >> An excerpt from "classification.config" from the > most > >> recent snort rules download. > > > >One thing that has not been over stated since the > inception of > >the "classification.config" file is the following: > > > > As a snort administrator/installer you should > edit classification.config > > to suit the policies of your organization. At > the same time, you should > > review the rules which you are including in your > snort.conf file for > > appropriateness, and to verify their > classification in relation to the > > changes you made to the classification.config > file. You should not use > > either the classification.config or rules out of > the box. To do so, > > is a dereliction of duty. > > Damn. People get a commerical-grade IDS FOR FREE > and are bitching about a > simple pr0n rule? Whoa. WTF? Hellooooo. If you > are that "offended" by > SNORT, don't use it. Go out and pay tens of > thousands of dollars for > some crap from McAfee, Cisco, or whoever. > > If not, and you enjoy the many, many features and > benefits offered by > SNORT, *FOR FREE*, then edit the rule and go about > your business. > > -Gordo > > -------------------------------------------------- > Gordon Ewasiuk, Certifed Sun Fanatic, Winstar VHC > The REAL office number is here-----> 703.893.4901 > > Read the story about the #1 Unix Platform > http://www.sun.com/software/cover/2001-1106 > ------------------------------------------------- > > > _______________________________________________ > Snort-users mailing list > Snort-users () lists sourceforge net > Go to this URL to change user options or > unsubscribe: > https://lists.sourceforge.net/lists/listinfo/snort-users > Snort-users list archive: > http://www.geocrawler.com/redir-sf.php3?list=snort-users __________________________________________________ Do You Yahoo!? Find the one for you at Yahoo! Personals http://personals.yahoo.com _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
_______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- Re: Professionalism, (continued)
- Re: Professionalism Roberto Suarez Soto (Nov 14)
- snort database diagrams? Edwin Eefting (Nov 14)
- Re: snort database diagrams? Roberto Suarez Soto (Nov 14)
- Re[2]: snort database diagrams? Edwin Eefting (Nov 14)
- Re: Re[2]: snort database diagrams? Guillaume (Nov 14)
- Re: Re[2]: snort database diagrams? Roberto Suarez Soto (Nov 15)
- RE: re: Professionalism James Fowler (Nov 15)
- Re: re: Professionalism Martin Roesch (Nov 17)
- Re: re: Professionalism Mark Rowlands (Nov 18)
- Re: re: Professionalism Jeff Nathan (Nov 19)
- Message not available
- Re: re: Professionalism Jeff Nathan (Nov 20)