Re: [Emerging-Sigs] GPL rules - who maintains them?Nobody?

[Matthew Jonkman <jonkman () emergingthreatspro com>]

Perhaps that is the best solution then. Doesn't seem we'll get far with collaboration.....

I prefer still not to re-sid them. Seems like a violation of the spirit of gpl in taking just the content and removing 
the reference to their history and origin. We'll still keep the license header though I suppose and reference their 
original sid range so folks can still search for relevant info. 

I'd still prefer to keep them in sync somehow, if an option for that arises. Any other ideas?

Matt

On Mar 21, 2011, at 10:18 AM, Weir, Jason wrote:

> I should apologize for bringing this up - but the discussion has been at
> times entertaining...
>
> This is the crux of the problem - from an end users perspective..
>
> I had what I thought was a FP on sid #1313.. I sent a note to the snort
> sigs list - Nigel informed me that they had no such rule...
>
> Hmmm, I thought the VRT was maintaining and distributing the GPL rules -
> did a search and he was correct, no sid #1313
>
> Some more looking - the sig came from ET - so I send a note to the et
> sigs list..  Whoa, they don't maintain them either (I knew that duh)...
>
> So the folks that maintain them wont and either will the folks that just
> distribute them - come on guys!
>
> If I choose to run multiple rule sets then duplicates are my problem -
> why should ET or VRT care?  You guys need to put out the most
> comprehensive rule set you can.  Who cares what the competition does..
> Your end users surely don't!
>
> This isn't about snort vs. suritica or ids vs. malware or not - ET and
> VRT have different views of the world and again your end users don't
> care! 
>
> I want a rule set that works and the GPL mess is broken...  When I have
> a question on a rule I need to know without a doubt where to go for help
> - it's that simple...
>
> Again my suggestion is do away with the GPL set completely - if that
> means renaming and residing them (with or without reference to the old
> rule) so be it...  Make the rule set stand on its own and let me deal
> with duplicates...
>
> -J
>
> > -----Original Message-----
> > From: emerging-sigs-bounces () emergingthreats net 
> > [mailto:emerging-sigs-bounces () emergingthreats net] On Behalf 
> > Of Matthew Jonkman
> > Sent: Monday, March 21, 2011 9:49 AM
> > To: Martin Roesch
> > Cc: wkitty42 () windstream net; 
> > emerging-sigs () emergingthreats net; snort-users () lists sourceforge net
> > Subject: Re: [Emerging-Sigs] [Snort-users] GPL rules - who 
> > maintains them?Nobody?
> >
> >
> > Cool, that's a very valid business model and strategy. 
> >
> > Trying to bring this discussion back to GPL sids.... 
> >
> > Matt
>
>
> _____________________________________________________________________________________________
>
> Please visit www.nhrs.org to subscribe to NHRS email announcements and updates.
> _______________________________________________
> Emerging-sigs mailing list
> Emerging-sigs () emergingthreats net
> http://lists.emergingthreats.net/mailman/listinfo/emerging-sigs
>
> Support Emerging Threats! Subscribe to Emerging Threats Pro http://www.emergingthreatspro.com
> The ONLY place to get complete premium rulesets for Snort 2.4.0 through Current!


----------------------------------------------------
Matthew Jonkman
Emergingthreats.net
Emerging Threats Pro
Open Information Security Foundation (OISF)
Phone 765-807-8630 x110
Fax 312-264-0205
http://www.emergingthreatspro.com
http://www.openinfosecfoundation.org
----------------------------------------------------

PGP: http://www.jonkmans.com/mattjonkman.asc




------------------------------------------------------------------------------
Colocation vs. Managed Hosting
A question and answer guide to determining the best fit
for your organization - today and in the future.
http://p.sf.net/sfu/internap-sfd2d
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users