Snort mailing list archives

Re: v2.8.4 incorrect logging to MySQL


From: Shirk Dog <shirkdog_list () hotmail com>
Date: Tue, 14 Apr 2009 18:38:01 -0400



http://i43.tinypic.com/wwn514.jpg

Shirkdog


From: loyalmoses () mac com
To: cummingsj () gmail com
Date: Tue, 14 Apr 2009 15:25:29 -0700
CC: snort-users () lists sourceforge net
Subject: Re: [Snort-users] v2.8.4 incorrect logging to MySQL


Was that sarcasm?
Cause I think I might know the facility you are talking about. ;-)
On Apr 14, 2009, at 3:08 PM, JJ Cummings wrote:I am pretty sure that this clearly states the source will be completely 
closed... i.e. transcribed into ancient  Egyptian, sealed with the seal of the Royal Pig, locked in a vault with 10' 
thick walls.. buried deep within an undisclosed NBC facility that has a large detail of highly trained special ops 
guards on duty...... right?
 
On Tue, Apr 14, 2009 at 3:51 PM, pieter claassen <pieter () claassen co uk> wrote:
 This is from the license file included in snortsp-3.0.0b3:
 
 * The Snort Security Platform and its included engine module software
 * ("Snort") is the copyrighted work  of Sourcefire, Inc. (C) 2007-2008
 * Sourcefire, Inc.  All Rights Reserved.  This program is free software; you
 * may use, redistribute and/or modify this  software only under the terms
 * and conditions of the GNU General Public License as published by the Free
 * Software Foundation; Version 2 with the clarifications and exceptions
 * described below.
 ...
 
 Are you saying there is something else happening here?
 
 Pieter
 
 On Tue, Apr 14, 2009 at 11:06 PM, Loyal A Moses <loyalmoses () mac com> wrote:

Marty,

Do you mean open source as in GPL or equivalent or as in we can all
read the source?

A quote from you:

"We're also saying that people who want to
contribute code to the project do so with the knowledge that we're
going to consider the code as assigned to Sourcefire unless other
arrangements are made."

That doesn't sound so "open source" to me and more like a charade.

And another quote in the same posting by you:

"Given that we need to be able to offer Snort under an alternative
license for commercial integrators who are integrating Snort and
don't want to adhere to the GPL it's essential that we retain the
right to relicense the totality of the codebase."

Now, there is the real reason.

Just be direct and communicate that version 3 will not be GPL and
Sourcefire will now retain all rights. Unless you plan on having two
source branches with zero intellectual-property cross over and
licensed independently.

I am not hostile towards the concept. The concept is business and it
is what it is.

Loyal.

On Apr 14, 2009, at 1:40 PM, Martin Roesch wrote:

Snort 3.0 is open source.

Marty

On Tue, Apr 14, 2009 at 4:21 PM, Loyal A Moses <loyalmoses () mac com>
wrote:

Snort is open source, until version 3. But that is a whole other
argument.
On Apr 14, 2009, at 1:11 PM, Joel Esler wrote:

No one is taking a vote, we just said, "if we had a vote in it..."
I'd
rather take the code out of the IDS/IPS and put it into an output
module.
 One that is maintained well (as Shawn said).
Snort is an open source program, I don't see harm in discussion on
Snort's
own mailing lists do you?
J

On Tue, Apr 14, 2009 at 3:35 PM, Loyal A Moses <loyalmoses () mac com>
wrote:

Is Sourcefire limited on development skill or man power?

It makes no sense at all to remove one of the most common facilities
in use by snort users because it is "too complex".

In the end, you'll do what you are going to do regardless of the
community -- we've seen it before. But don't use "complexity" and
"bugs" as the excuse.

Sourcefire is a publicly traded company -- Is it smart to be taking
votes on product development from a mailing list? I wouldn't think
so.

Loyal.

On Apr 14, 2009, at 11:52 AM, Jason Brvenik wrote:

I have an ulterior motive and it is simple.

Many of the bugs and issues over time with snort have been in
output
plugins. Make one well supported, tested, unified method designed
for
best performance and while doing so it improves the
supportability and
maintainability of the code base.

On Tue, Apr 14, 2009 at 2:39 PM, Loyal A Moses <loyalmoses () mac com>
wrote:
My vote is to provide as many output options as possible, to help
keep
snort used as a tool.

The argument of code complexity being a good reason to remove
output
facilities is only valid if the code is written poorly and not
modular. This wheel doesn't need re-invented and this
conversation is
kind of silly, unless there is ulterior motives for actually
wanting
to remove this support.

Loyal.


------------------------------------------------------------------------------
This SF.net email is sponsored by:
High Quality Requirements in a Collaborative Environment.
Download a free trial of Rational Requirements Composer Now!
http://p.sf.net/sfu/www-ibm-com
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users




------------------------------------------------------------------------------
This SF.net email is sponsored by:
High Quality Requirements in a Collaborative Environment.
Download a free trial of Rational Requirements Composer Now!
http://p.sf.net/sfu/www-ibm-com
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users



--
joel esler | Sourcefire | gtalk: jesler () sourcefire com | 302-223-5974


------------------------------------------------------------------------------
This SF.net email is sponsored by:
High Quality Requirements in a Collaborative Environment.
Download a free trial of Rational Requirements Composer Now!
http://p.sf.net/sfu/www-ibm-com
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users




--
Martin Roesch - Founder/CTO, Sourcefire Inc. - +1-410-290-1616
Sourcefire - Security for the Real World - http://www.sourcefire.com
Snort: Open Source IDP - http://www.snort.org


------------------------------------------------------------------------------
This SF.net email is sponsored by:
High Quality Requirements in a Collaborative Environment.
Download a free trial of Rational Requirements Composer Now!
http://p.sf.net/sfu/www-ibm-com
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users

 
 ------------------------------------------------------------------------------
 This SF.net email is sponsored by:
 High Quality Requirements in a Collaborative Environment.
 Download a free trial of Rational Requirements Composer Now!
 http://p.sf.net/sfu/www-ibm-com
 _______________________________________________
 Snort-users mailing list
 Snort-users () lists sourceforge net
 Go to this URL to change user options or unsubscribe:
 https://lists.sourceforge.net/lists/listinfo/snort-users
 Snort-users list archive:
 http://www.geocrawler.com/redir-sf.php3?list=snort-users
 




_________________________________________________________________
Rediscover HotmailĀ®: Get quick friend updates right in your inbox. 
http://windowslive.com/RediscoverHotmail?ocid=TXT_TAGLM_WL_HM_Rediscover_Updates1_042009
------------------------------------------------------------------------------
This SF.net email is sponsored by:
High Quality Requirements in a Collaborative Environment.
Download a free trial of Rational Requirements Composer Now!
http://p.sf.net/sfu/www-ibm-com
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users

Current thread: