snort-users April 2009 archive
Main Archive Page > Month Archives  > snort-users archives
snort-users: Re: [Snort-users] v2.8.4 incorrect logging to MySQL

Re: [Snort-users] v2.8.4 incorrect logging to MySQL

From: Joel Esler <jesler_at_nospam>
Date: Tue Apr 14 2009 - 21:12:57 GMT
To: Loyal A Moses <loyalmoses@mac.com>


Snort is still open source when it's version 3. In fact snort 3 is out now and is available for download. -- Joel Esler Sent from my iDevice On Apr 14, 2009, at 4:21 PM, Loyal A Moses <loyalmoses@mac.com> wrote:
>
> Snort is open source, until version 3. But that is a whole other
> argument.
>
> On Apr 14, 2009, at 1:11 PM, Joel Esler wrote:
>
>> No one is taking a vote, we just said, "if we had a vote in it..."
>> I'd rather take the code out of the IDS/IPS and put it into an
>> output module. One that is maintained well (as Shawn said).
>>
>> Snort is an open source program, I don't see harm in discussion on
>> Snort's own mailing lists do you?
>>
>> J
>>
>> On Tue, Apr 14, 2009 at 3:35 PM, Loyal A Moses <loyalmoses@mac.com>
>> wrote:
>>
>> Is Sourcefire limited on development skill or man power?
>>
>> It makes no sense at all to remove one of the most common facilities
>> in use by snort users because it is "too complex".
>>
>> In the end, you'll do what you are going to do regardless of the
>> community -- we've seen it before. But don't use "complexity" and
>> "bugs" as the excuse.
>>
>> Sourcefire is a publicly traded company -- Is it smart to be taking
>> votes on product development from a mailing list? I wouldn't think
>> so.
>>
>> Loyal.
>>
>> On Apr 14, 2009, at 11:52 AM, Jason Brvenik wrote:
>>
>> > I have an ulterior motive and it is simple.
>> >
>> > Many of the bugs and issues over time with snort have been in
>> output
>> > plugins. Make one well supported, tested, unified method designed
>> for
>> > best performance and while doing so it improves the
>> supportability and
>> > maintainability of the code base.
>> >
>> > On Tue, Apr 14, 2009 at 2:39 PM, Loyal A Moses <loyalmoses@mac.com>
>> > wrote:
>> >> My vote is to provide as many output options as possible, to help
>> >> keep
>> >> snort used as a tool.
>> >>
>> >> The argument of code complexity being a good reason to remove
>> output
>> >> facilities is only valid if the code is written poorly and not
>> >> modular. This wheel doesn't need re-invented and this
>> conversation is
>> >> kind of silly, unless there is ulterior motives for actually
>> wanting
>> >> to remove this support.
>> >>
>> >> Loyal.
>> >>
>> >>
>> ---
>> ---
>> ---
>> ---------------------------------------------------------------------
>> >> This SF.net email is sponsored by:
>> >> High Quality Requirements in a Collaborative Environment.
>> >> Download a free trial of Rational Requirements Composer Now!
>> >> http://p.sf.net/sfu/www-ibm-com
>> >> _______________________________________________
>> >> Snort-users mailing list
>> >> Snort-users@lists.sourceforge.net
>> >> Go to this URL to change user options or unsubscribe:
>> >> https://lists.sourceforge.net/lists/listinfo/snort-users
>> >> Snort-users list archive:
>> >> http://www.geocrawler.com/redir-sf.php3?list=snort-users
>> >>
>>
>>
>> ---
>> ---
>> ---
>> ---------------------------------------------------------------------
>> This SF.net email is sponsored by:
>> High Quality Requirements in a Collaborative Environment.
>> Download a free trial of Rational Requirements Composer Now!
>> http://p.sf.net/sfu/www-ibm-com
>> _______________________________________________
>> Snort-users mailing list
>> Snort-users@lists.sourceforge.net
>> Go to this URL to change user options or unsubscribe:
>> https://lists.sourceforge.net/lists/listinfo/snort-users
>> Snort-users list archive:
>> http://www.geocrawler.com/redir-sf.php3?list=snort-users
>>
>>
>>
>> --
>> joel esler | Sourcefire | gtalk: jesler@sourcefire.com | 302-223-5974
>
> ---
> ---
> ---
> ---------------------------------------------------------------------
> This SF.net email is sponsored by:
> High Quality Requirements in a Collaborative Environment.
> Download a free trial of Rational Requirements Composer Now!
> http://p.sf.net/sfu/www-ibm-com
> _______________________________________________
> Snort-users mailing list
> Snort-users@lists.sourceforge.net
> Go to this URL to change user options or unsubscribe:
> https://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users list archive:
> http://www.geocrawler.com/redir-sf.php3?list=snort-users

------------------------------------------------------------------------------ This SF.net email is sponsored by: High Quality Requirements in a Collaborative Environment. Download a free trial of Rational Requirements Composer Now! http://p.sf.net/sfu/www-ibm-com

_______________________________________________ Snort-users mailing list Snort-users@lists.sourceforge.net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users