Re: Cisco Sourcefire

[Michal Purzynski <michal () rsbac org>]

Man - everything but ASA.

It lacked a very basis like a BGP support, not no mention other things. 
My home router, SRX100H does BGP just fine.

And yeah, ASA = PC. Some cheaper models even displayed an IRQ list 
during boot and guess what - one was reserved for a sound card.

I know some people so much attached to ASA, than after some models they 
had went bad, and it wasn't possible anymore to get them from Cisco or 
eBay, the literally made ASA out of commodity parts. It was enough to 
find the exact model of the motherboard with a BX chipset, the right 
Intel network cards and guess what - it was working.

Still people learn ASA just by running the Linux it's based on in qemu 
and it's fine.

On 7/24/13 2:53 AM, Mike Miller wrote:
> We had SSM-20's in our ASA5540's at my last job. Worked just fine, and 
> since it had access to the backplane, could do some stuff that would 
> have been difficult otherwise.
>
> Funny if those feature modules didn't look a whole lot like a 
> PC...booted from flash, DIMM memory, I'll bet there was an Intel CPU 
> under the heatsink.
>
> Whaddaya think a snort installation would do on that hardware?
>
>
> On Tue, Jul 23, 2013 at 2:28 PM, Scott <opiesan () gmail com 
> <mailto:opiesan () gmail com>> wrote:
>
>     If Cisco has any brains at all they'll leave Sourcefire as is for
>     the most part. Keep in mind their objective is to buy a rock star
>     security company/product because it makes good business sense and
>     yes, money.
>
>     Change is inevitable but not always bad. Sourcefire rocks because
>     they know what they're doing and they do it better than most other
>     IPS vendors. I believe they'll bust ass to make sure the great
>     things stay great while making other things better. It's in
>     Cisco's best interests to do the same. Otherwise it's like using
>     the Turin shroud to wash your car. Even Cisco isn't that stupid.
>
>     They've got a ways to go before this all approved and final. I
>     recommend taking a deep breath, relax, and hold steady as she
>     goes. It'll work out for the best.
>
>     Scott
>
>     P.S. - Congrats to any Sourcefire folks that become insanely rich.
>     Next time we meet at a con drinks are on you. ;-)
>
>     On Jul 23, 2013 3:54 PM, "Joel Esler" <jesler () sourcefire com
>     <mailto:jesler () sourcefire com>> wrote:
>
>         All ---
>
>         Okay, I am going to try and respond to everyone here, so bear
>         with me.
>
>         We had an event here today where I was busy, that's what took
>         me so long.  So if anyone is running around their office
>         sweating waiting for some kind of statement from me or Marty
>         other than the blog post I put up this morning:
>
>         http://blog.snort.org/2013/07/a-continued-commitment-to-open-source.html
>
>         So, I'll try and answer some of the emails in one thread and
>         hopefully everyone will feel the same that I feel.
>
>         On Jul 23, 2013, at 1:46 PM, Jefferson, Shawn
>         <Shawn.Jefferson () bcferries com
>         <mailto:Shawn.Jefferson () bcferries com>> wrote:
>
> >         It may not end up being that bad.  I was worried that
> >         Rapid7's acquisition of Metasploit would kill that product,
> >         but it hasn't really. Changed it, for sure, but it hasn't
> >         killed it.  I am a bit more worried about how the Cisco
> >         acquisition of Sourcefire will affect the VRT though.  I
> >         suspect Snort will (and has to because of GPL?) remain open
> >         source however.
>
>         *Bottom line up front*:  Snort will remain open.  Cisco is
>         committed to OpenSource.
>
>         This includes but is not limited to :).  ClamAV, RazorBack,
>         Snort, etc.
>
>         On Jul 23, 2013, at 1:53 PM, Y M <snort () outlook com
>         <mailto:snort () outlook com>> wrote:
>
>
>             Another thing is the Snort (SnortCP) and Sourcefire
>             certifications and certification holders. Are these
>             certifications deprecated already?
>
>         Education is very important to Cisco.  As you know Cisco has
>         many education programs and certifications already (CCNA,
>         CCNP, CCIE, etc).  As for what new things will be announced
>         after the final merger has cleared, I'll leave that to Cisco.
>
>         On Jul 23, 2013, at 1:31 PM, waldo kitty
>         <wkitty42 () windstream net <mailto:wkitty42 () windstream net>> wrote:
> >         On 7/23/2013 12:38, Ayodele Okeowo wrote:
> > >         This is suicide for Sourcefire. Sourcefire is better as an
> > >         entity itself.
> >
> >         greed for $$$ drives all to suicide at times... the
> >         shareholders of both
> >         companies seem to be of the same mind and wanting more $$$
> >         even if it means
> >         death to the company and/or products...
>
>         As stated earlier, we aren't stopping our commitment to Open
>         Source, and the community is the same as it ever was, if not
>         better.  See OpenDaylight.
>
>         On Jul 23, 2013, at 12:02 PM, Y M <snort () outlook com
>         <mailto:snort () outlook com>> wrote:
>
> >         What happens also to rules release, community contributions,
> >         Barnyard, PulledPork?
>
>         Nothing.  Same as yesterday
>
>         On Jul 23, 2013, at 11:46 AM, Peter Bates
>         <peter.bates () ucl ac uk <mailto:peter.bates () ucl ac uk>> wrote:
>
> >         The development of Snort would still be governed by the open
> >         source
> >         licence in use, though, surely?
>
>         GPLv2.  Same as it ever was.
>
>         --
>         *Joel Esler*
>         Senior Research Engineer, VRT
>         OpenSource Community Manager
>         Sourcefire
>
>
>
>
>         ------------------------------------------------------------------------------
>         See everything from the browser to the database with AppDynamics
>         Get end-to-end visibility with application monitoring from
>         AppDynamics
>         Isolate bottlenecks and diagnose root cause in seconds.
>         Start your free trial of AppDynamics Pro today!
>         http://pubads.g.doubleclick.net/gampad/clk?id=48808831&iu=/4140/ostg.clktrk
>         _______________________________________________
>         Snort-users mailing list
>         Snort-users () lists sourceforge net
>         <mailto:Snort-users () lists sourceforge net>
>         Go to this URL to change user options or unsubscribe:
>         https://lists.sourceforge.net/lists/listinfo/snort-users
>         Snort-users list archive:
>         http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users
>
>         Please visit http://blog.snort.org to stay current on all the
>         latest Snort news!
>
>
>     ------------------------------------------------------------------------------
>     See everything from the browser to the database with AppDynamics
>     Get end-to-end visibility with application monitoring from AppDynamics
>     Isolate bottlenecks and diagnose root cause in seconds.
>     Start your free trial of AppDynamics Pro today!
>     http://pubads.g.doubleclick.net/gampad/clk?id=48808831&iu=/4140/ostg.clktrk
>     _______________________________________________
>     Snort-users mailing list
>     Snort-users () lists sourceforge net
>     <mailto:Snort-users () lists sourceforge net>
>     Go to this URL to change user options or unsubscribe:
>     https://lists.sourceforge.net/lists/listinfo/snort-users
>     Snort-users list archive:
>     http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users
>
>     Please visit http://blog.snort.org to stay current on all the
>     latest Snort news!
>
>
>
>
> ------------------------------------------------------------------------------
> See everything from the browser to the database with AppDynamics
> Get end-to-end visibility with application monitoring from AppDynamics
> Isolate bottlenecks and diagnose root cause in seconds.
> Start your free trial of AppDynamics Pro today!
> http://pubads.g.doubleclick.net/gampad/clk?id=48808831&iu=/4140/ostg.clktrk
>
>
> _______________________________________________
> Snort-users mailing list
> Snort-users () lists sourceforge net
> Go to this URL to change user options or unsubscribe:
> https://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users list archive:
> http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users
>
> Please visit http://blog.snort.org to stay current on all the latest Snort news!

------------------------------------------------------------------------------
See everything from the browser to the database with AppDynamics
Get end-to-end visibility with application monitoring from AppDynamics
Isolate bottlenecks and diagnose root cause in seconds.
Start your free trial of AppDynamics Pro today!
http://pubads.g.doubleclick.net/gampad/clk?id=48808831&iu=/4140/ostg.clktrk

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users

Please visit http://blog.snort.org to stay current on all the latest Snort news!