Snort mailing list archives

Re: [Emerging-Sigs] GPL rules - who maintainsthem?Nobody?


From: Jacob Kitchel <jacob.kitchel () gmail com>
Date: Mon, 21 Mar 2011 09:51:50 -0500

Jason,

Don't apologize for starting the thread! It's made for some highly
entertaining reading over the weekend. Here are some observations:

VRT - You have the fastest IDS guns in the East (Coast). I've never
heard a bad thing said about your technical skills but at some point
you've got to stop shooting yourselves in the foot on these lists.
Stay technical and let Joel handle the PR. Nothing personal.

ET - If you want to handle GPL rules and provide them for the
community, at some point stop waiting for the community to come to a
communal decision. Suggest a method of managing them that meets 95% of
the community's needs and give the community a 2 week grace period for
suggestions. Wrap in what's relevant, make it so, and move on.

Looks like Joel already beat me to the punch as I was typing this email...

BTW, hiring Joel for PR/community relations was a great move.

Jacob



On Mon, Mar 21, 2011 at 9:33 AM, Weir, Jason <jason.weir () nhrs org> wrote:


-----Original Message-----
From: evilghost () packetmail net [mailto:evilghost () packetmail net]
Sent: Monday, March 21, 2011 10:29 AM
To: Matthew Jonkman
Cc: Weir, Jason; emerging-sigs () emergingthreats net;
snort-users () lists sourceforge net
Subject: Re: [Emerging-Sigs] [Snort-users] GPL rules - who
maintainsthem?Nobody?



On 03/21/11 09:24, Matthew Jonkman wrote:
Any other ideas?

I do not like the idea of re-SIDing.  It doesn't make sense, promotes
unnecessary duplication, and can result in performance
degradation and disparity
between the GPL rules.

In the spirit of the GPL, if you make changes, you submit
said changes upstream.

If we make improvements we should submit them to VRT, and
vice versa.  Their
inclusion is up to VRT/ET respectively.

I do not vote we re-SID.  I do vote we preserve SID and communicate
upstream/downstream on changes.  A rational person would
evaluate the changes,
engage in mutual discussion, and agree on modifications.

Re-SIDing is stupid.


evilghost - I agree that re-SIDing is stupid...  But the rest of your
suggestions require VRT and ET cooperate and have a healthy back in
forth relationship.  It seems clear that will never happen..

-J


_____________________________________________________________________________________________

Please visit www.nhrs.org to subscribe to NHRS email announcements and updates.
_______________________________________________
Emerging-sigs mailing list
Emerging-sigs () emergingthreats net
http://lists.emergingthreats.net/mailman/listinfo/emerging-sigs

Support Emerging Threats! Subscribe to Emerging Threats Pro http://www.emergingthreatspro.com
The ONLY place to get complete premium rulesets for Snort 2.4.0 through Current!


------------------------------------------------------------------------------
Colocation vs. Managed Hosting
A question and answer guide to determining the best fit
for your organization - today and in the future.
http://p.sf.net/sfu/internap-sfd2d
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: