Re: [Emerging-Sigs] GPL rules - who maintains them?Nobody?

[Victor Julien <lists () inliniac net>]

On 03/21/2011 03:24 PM, Matthew Jonkman wrote:
> Perhaps that is the best solution then. Doesn't seem we'll get far with collaboration.....
>
> I prefer still not to re-sid them. Seems like a violation of the spirit of gpl in taking just the content and 
> removing the reference to their history and origin. We'll still keep the license header though I suppose and 
> reference their original sid range so folks can still search for relevant info. 

You could set up a series of pages on the ET site describing where they
come from, what their sid was, what the license is, etc etc and put that
in as a reference...

Cheers,
Victor

> I'd still prefer to keep them in sync somehow, if an option for that arises. Any other ideas?
>
> Matt
>
> On Mar 21, 2011, at 10:18 AM, Weir, Jason wrote:
>
> > I should apologize for bringing this up - but the discussion has been at
> > times entertaining...
> >
> > This is the crux of the problem - from an end users perspective..
> >
> > I had what I thought was a FP on sid #1313.. I sent a note to the snort
> > sigs list - Nigel informed me that they had no such rule...
> >
> > Hmmm, I thought the VRT was maintaining and distributing the GPL rules -
> > did a search and he was correct, no sid #1313
> >
> > Some more looking - the sig came from ET - so I send a note to the et
> > sigs list..  Whoa, they don't maintain them either (I knew that duh)...
> >
> > So the folks that maintain them wont and either will the folks that just
> > distribute them - come on guys!
> >
> > If I choose to run multiple rule sets then duplicates are my problem -
> > why should ET or VRT care?  You guys need to put out the most
> > comprehensive rule set you can.  Who cares what the competition does..
> > Your end users surely don't!
> >
> > This isn't about snort vs. suritica or ids vs. malware or not - ET and
> > VRT have different views of the world and again your end users don't
> > care! 
> >
> > I want a rule set that works and the GPL mess is broken...  When I have
> > a question on a rule I need to know without a doubt where to go for help
> > - it's that simple...
> >
> > Again my suggestion is do away with the GPL set completely - if that
> > means renaming and residing them (with or without reference to the old
> > rule) so be it...  Make the rule set stand on its own and let me deal
> > with duplicates...
> >
> > -J
> >
> > > -----Original Message-----
> > > From: emerging-sigs-bounces () emergingthreats net 
> > > [mailto:emerging-sigs-bounces () emergingthreats net] On Behalf 
> > > Of Matthew Jonkman
> > > Sent: Monday, March 21, 2011 9:49 AM
> > > To: Martin Roesch
> > > Cc: wkitty42 () windstream net; 
> > > emerging-sigs () emergingthreats net; snort-users () lists sourceforge net
> > > Subject: Re: [Emerging-Sigs] [Snort-users] GPL rules - who 
> > > maintains them?Nobody?
> > >
> > >
> > > Cool, that's a very valid business model and strategy. 
> > >
> > > Trying to bring this discussion back to GPL sids.... 
> > >
> > > Matt
> >
> >
> > _____________________________________________________________________________________________
> >
> > Please visit www.nhrs.org to subscribe to NHRS email announcements and updates.
> > _______________________________________________
> > Emerging-sigs mailing list
> > Emerging-sigs () emergingthreats net
> > http://lists.emergingthreats.net/mailman/listinfo/emerging-sigs
> >
> > Support Emerging Threats! Subscribe to Emerging Threats Pro http://www.emergingthreatspro.com
> > The ONLY place to get complete premium rulesets for Snort 2.4.0 through Current!
>
>
> ----------------------------------------------------
> Matthew Jonkman
> Emergingthreats.net
> Emerging Threats Pro
> Open Information Security Foundation (OISF)
> Phone 765-807-8630 x110
> Fax 312-264-0205
> http://www.emergingthreatspro.com
> http://www.openinfosecfoundation.org
> ----------------------------------------------------
>
> PGP: http://www.jonkmans.com/mattjonkman.asc
>
>
>
> _______________________________________________
> Emerging-sigs mailing list
> Emerging-sigs () emergingthreats net
> http://lists.emergingthreats.net/mailman/listinfo/emerging-sigs
>
> Support Emerging Threats! Subscribe to Emerging Threats Pro http://www.emergingthreatspro.com
> The ONLY place to get complete premium rulesets for Snort 2.4.0 through Current!


-- 
---------------------------------------------
Victor Julien
http://www.inliniac.net/
PGP: http://www.inliniac.net/victorjulien.asc
---------------------------------------------


------------------------------------------------------------------------------
Colocation vs. Managed Hosting
A question and answer guide to determining the best fit
for your organization - today and in the future.
http://p.sf.net/sfu/internap-sfd2d
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users