Snort mailing list archives

Re: v2.8.4 incorrect logging to MySQL


From: Shirk Dog <shirkdog_list () hotmail com>
Date: Tue, 14 Apr 2009 18:50:28 -0400


What about the Zombies???

Shirkdog



Date: Tue, 14 Apr 2009 16:08:12 -0600
From: cummingsj () gmail com
To: pieter () claassen co uk
CC: loyalmoses () mac com; snort-users () lists sourceforge net; roesch () sourcefire com
Subject: Re: [Snort-users] v2.8.4 incorrect logging to MySQL

I am pretty sure that this clearly states the source will be completely closed... i.e. transcribed into ancient  
Egyptian, sealed with the seal of the Royal Pig, locked in a vault with 10' thick walls.. buried deep within an 
undisclosed NBC facility that has a large detail of highly trained special ops guards on duty...... right?


On Tue, Apr 14, 2009 at 3:51 PM, pieter claassen <pieter () claassen co uk> wrote:

This is from the license file included in snortsp-3.0.0b3:



* The Snort Security Platform and its included engine module software

* ("Snort") is the copyrighted work  of Sourcefire, Inc. (C) 2007-2008

* Sourcefire, Inc.  All Rights Reserved.  This program is free software; you

* may use, redistribute and/or modify this  software only under the terms

* and conditions of the GNU General Public License as published by the Free

* Software Foundation; Version 2 with the clarifications and exceptions

* described below.

...



Are you saying there is something else happening here?



Pieter



On Tue, Apr 14, 2009 at 11:06 PM, Loyal A Moses <loyalmoses () mac com> wrote:



Marty,



Do you mean open source as in GPL or equivalent or as in we can all

read the source?



A quote from you:



"We're also saying that people who want to

contribute code to the project do so with the knowledge that we're

going to consider the code as assigned to Sourcefire unless other

arrangements are made."



That doesn't sound so "open source" to me and more like a charade.



And another quote in the same posting by you:



"Given that we need to be able to offer Snort under an alternative

license for commercial integrators who are integrating Snort and

don't want to adhere to the GPL it's essential that we retain the

right to relicense the totality of the codebase."



Now, there is the real reason.



Just be direct and communicate that version 3 will not be GPL and

Sourcefire will now retain all rights. Unless you plan on having two

source branches with zero intellectual-property cross over and

licensed independently.



I am not hostile towards the concept. The concept is business and it

is what it is.



Loyal.



On Apr 14, 2009, at 1:40 PM, Martin Roesch wrote:



Snort 3.0 is open source.



Marty



On Tue, Apr 14, 2009 at 4:21 PM, Loyal A Moses <loyalmoses () mac com>

wrote:



Snort is open source, until version 3. But that is a whole other

argument.

On Apr 14, 2009, at 1:11 PM, Joel Esler wrote:



No one is taking a vote, we just said, "if we had a vote in it..."

I'd

rather take the code out of the IDS/IPS and put it into an output

module.

 One that is maintained well (as Shawn said).

Snort is an open source program, I don't see harm in discussion on

Snort's

own mailing lists do you?

J



On Tue, Apr 14, 2009 at 3:35 PM, Loyal A Moses <loyalmoses () mac com>

wrote:



Is Sourcefire limited on development skill or man power?



It makes no sense at all to remove one of the most common facilities

in use by snort users because it is "too complex".



In the end, you'll do what you are going to do regardless of the

community -- we've seen it before. But don't use "complexity" and

"bugs" as the excuse.



Sourcefire is a publicly traded company -- Is it smart to be taking

votes on product development from a mailing list? I wouldn't think

so.



Loyal.



On Apr 14, 2009, at 11:52 AM, Jason Brvenik wrote:



I have an ulterior motive and it is simple.



Many of the bugs and issues over time with snort have been in

output

plugins. Make one well supported, tested, unified method designed

for

best performance and while doing so it improves the

supportability and

maintainability of the code base.



On Tue, Apr 14, 2009 at 2:39 PM, Loyal A Moses <loyalmoses () mac com>

wrote:

My vote is to provide as many output options as possible, to help

keep

snort used as a tool.



The argument of code complexity being a good reason to remove

output

facilities is only valid if the code is written poorly and not

modular. This wheel doesn't need re-invented and this

conversation is

kind of silly, unless there is ulterior motives for actually

wanting

to remove this support.



Loyal.





------------------------------------------------------------------------------

This SF.net email is sponsored by:

High Quality Requirements in a Collaborative Environment.

Download a free trial of Rational Requirements Composer Now!

http://p.sf.net/sfu/www-ibm-com

_______________________________________________

Snort-users mailing list

Snort-users () lists sourceforge net

Go to this URL to change user options or unsubscribe:

https://lists.sourceforge.net/lists/listinfo/snort-users

Snort-users list archive:

http://www.geocrawler.com/redir-sf.php3?list=snort-users









------------------------------------------------------------------------------

This SF.net email is sponsored by:

High Quality Requirements in a Collaborative Environment.

Download a free trial of Rational Requirements Composer Now!

http://p.sf.net/sfu/www-ibm-com

_______________________________________________

Snort-users mailing list

Snort-users () lists sourceforge net

Go to this URL to change user options or unsubscribe:

https://lists.sourceforge.net/lists/listinfo/snort-users

Snort-users list archive:

http://www.geocrawler.com/redir-sf.php3?list=snort-users







--

joel esler | Sourcefire | gtalk: jesler () sourcefire com | 302-223-5974





------------------------------------------------------------------------------

This SF.net email is sponsored by:

High Quality Requirements in a Collaborative Environment.

Download a free trial of Rational Requirements Composer Now!

http://p.sf.net/sfu/www-ibm-com

_______________________________________________

Snort-users mailing list

Snort-users () lists sourceforge net

Go to this URL to change user options or unsubscribe:

https://lists.sourceforge.net/lists/listinfo/snort-users

Snort-users list archive:

http://www.geocrawler.com/redir-sf.php3?list=snort-users









--

Martin Roesch - Founder/CTO, Sourcefire Inc. - +1-410-290-1616

Sourcefire - Security for the Real World - http://www.sourcefire.com

Snort: Open Source IDP - http://www.snort.org





------------------------------------------------------------------------------

This SF.net email is sponsored by:

High Quality Requirements in a Collaborative Environment.

Download a free trial of Rational Requirements Composer Now!

http://p.sf.net/sfu/www-ibm-com

_______________________________________________

Snort-users mailing list

Snort-users () lists sourceforge net

Go to this URL to change user options or unsubscribe:

https://lists.sourceforge.net/lists/listinfo/snort-users

Snort-users list archive:

http://www.geocrawler.com/redir-sf.php3?list=snort-users





------------------------------------------------------------------------------

This SF.net email is sponsored by:

High Quality Requirements in a Collaborative Environment.

Download a free trial of Rational Requirements Composer Now!

http://p.sf.net/sfu/www-ibm-com

_______________________________________________

Snort-users mailing list

Snort-users () lists sourceforge net

Go to this URL to change user options or unsubscribe:

https://lists.sourceforge.net/lists/listinfo/snort-users

Snort-users list archive:

http://www.geocrawler.com/redir-sf.php3?list=snort-users





_________________________________________________________________
Rediscover HotmailĀ®: Now available on your iPhone or BlackBerry
http://windowslive.com/RediscoverHotmail?ocid=TXT_TAGLM_WL_HM_Rediscover_Mobile1_042009
------------------------------------------------------------------------------
This SF.net email is sponsored by:
High Quality Requirements in a Collaborative Environment.
Download a free trial of Rational Requirements Composer Now!
http://p.sf.net/sfu/www-ibm-com
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users

Current thread: