This is a discussion on Re: [Snort-users] [Bleeding-sigs] RE: What's up with Snort's within the Snort forums, part of the System Security and Security Related category; --===============1288488642== Content-Type: text/html; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable Content-class: urn:content-...
|
|||||||
| FAQ | Members List | Calendar | Search | Today's Posts | Mark Forums Read |
|
|||
|
--===============1288488642==
Content-Type: text/html; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable Content-class: urn:content-classes:message <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2//EN"> <HTML> <HEAD> <META HTTP-EQUIV=3D"Content-Type" CONTENT=3D"text/html; = charset=3Diso-8859-1"> <META NAME=3D"Generator" CONTENT=3D"MS Exchange Server version = 6.5.7652.24"> <TITLE>Re: [Snort-users] [Bleeding-sigs] RE: What's up with Snort's = license?</TITLE> </HEAD> <BODY> <!-- Converted from text/plain format --> <P><FONT SIZE=3D2>-----BEGIN PGP SIGNED MESSAGE-----</FONT> <BR><FONT SIZE=3D2>Hash: SHA1</FONT> </P> <P><FONT SIZE=3D2>Alan,</FONT> </P> <P><FONT SIZE=3D2>Thanks for the invite to participate in a panel = discussion. I'm </FONT> <BR><FONT SIZE=3D2>going to decline on similar grounds to Victor. = I've already made my </FONT> <BR><FONT SIZE=3D2>thoughts on the matter public in my blog and the = Q&A email sent to </FONT> <BR><FONT SIZE=3D2>Snort-users the other day. At the end of the = day further discussion </FONT> <BR><FONT SIZE=3D2>on licensing comes down to an idealogical debate and = like religion </FONT> <BR><FONT SIZE=3D2>and politics these differences in opinion are rarely = resolved. I'd </FONT> <BR><FONT SIZE=3D2>be happy to further address any questions from the = community on a one </FONT> <BR><FONT SIZE=3D2>to one basis.</FONT> </P> <P><FONT SIZE=3D2>I'm a programmer not a lawyer, let's get back to = talking about cool </FONT> <BR><FONT SIZE=3D2>technology.</FONT> </P> <P> <FONT = SIZE=3D2>-Marty</FONT> </P> <P><FONT SIZE=3D2>On Jul 19, 2007, at 9:20 AM, Alan Shimel wrote:</FONT> </P> <P><FONT SIZE=3D2>> Hopefully this will not bounce, as I registered = this email address </FONT> <BR><FONT SIZE=3D2>> on the list.</FONT> <BR><FONT SIZE=3D2>></FONT> <BR><FONT SIZE=3D2>></FONT> <BR><FONT SIZE=3D2>></FONT> <BR><FONT SIZE=3D2>> With all of the back and forth regarding these = issues I would like </FONT> <BR><FONT SIZE=3D2>> to invite Marty, Matt Jonkman, Victor and maybe = some of the other </FONT> <BR><FONT SIZE=3D2>> folks who have written to appear on my podcast = that I do weekly. </FONT> <BR><FONT SIZE=3D2>> We can do it with either with live call ins for = questions or have </FONT> <BR><FONT SIZE=3D2>> people submit their questions. I think it = will be a great chance </FONT> <BR><FONT SIZE=3D2>> to clear the air and give everyone their say and = then hopefully put </FONT> <BR><FONT SIZE=3D2>> these issues to bed once and for all. = Marty, Matt, Victor, et al, </FONT> <BR><FONT SIZE=3D2>> what do you say? Would you be willing to = get on a panel and </FONT> <BR><FONT SIZE=3D2>> discuss these issues?</FONT> <BR><FONT SIZE=3D2>></FONT> <BR><FONT SIZE=3D2>></FONT> <BR><FONT SIZE=3D2>></FONT> <BR><FONT SIZE=3D2>> Let me know</FONT> <BR><FONT SIZE=3D2>></FONT> <BR><FONT SIZE=3D2>></FONT> <BR><FONT SIZE=3D2>></FONT> <BR><FONT SIZE=3D2>> alan</FONT> <BR><FONT SIZE=3D2>></FONT> <BR><FONT SIZE=3D2>></FONT> <BR><FONT SIZE=3D2>></FONT> <BR><FONT SIZE=3D2>> StillSecure</FONT> <BR><FONT SIZE=3D2>> Alan Shimel</FONT> <BR><FONT SIZE=3D2>> Chief Strategy Officer</FONT> <BR><FONT SIZE=3D2>></FONT> <BR><FONT SIZE=3D2>> O 303.381.3815</FONT> <BR><FONT SIZE=3D2>> C 516.857.7409</FONT> <BR><FONT SIZE=3D2>> F 303.381.3881</FONT> <BR><FONT SIZE=3D2>></FONT> <BR><FONT SIZE=3D2>></FONT> <BR><FONT SIZE=3D2>></FONT> <BR><FONT SIZE=3D2>> <image001.gif></FONT> <BR><FONT SIZE=3D2>></FONT> <BR><FONT SIZE=3D2>> www.stillsecure.com</FONT> <BR><FONT SIZE=3D2>> The information transmitted is intended only for = the person</FONT> <BR><FONT SIZE=3D2>> to whom it is addressed and may contain = confidential material.</FONT> <BR><FONT SIZE=3D2>> Review or other use of this information by = persons other than</FONT> <BR><FONT SIZE=3D2>> the intended recipient is prohibited. If you've = received</FONT> <BR><FONT SIZE=3D2>> this in error, please contact the sender and = delete</FONT> <BR><FONT SIZE=3D2>> from any computer.</FONT> <BR><FONT SIZE=3D2>></FONT> <BR><FONT SIZE=3D2>> From: snort-users-bounces@lists.sourceforge.net = [<A HREF=3D"mailto:snort-users-">mailto:snort-users-</A> </FONT> <BR><FONT SIZE=3D2>> bounces@lists.sourceforge.net] On Behalf Of Matt = Jonkman</FONT> <BR><FONT SIZE=3D2>> Sent: Wednesday, July 18, 2007 10:48 PM</FONT> <BR><FONT SIZE=3D2>> To: Martin Roesch; Snort Users</FONT> <BR><FONT SIZE=3D2>> Cc: Bleeding Sigs</FONT> <BR><FONT SIZE=3D2>> Subject: [Snort-users] [Bleeding-sigs] RE: = What's up with Snort's </FONT> <BR><FONT SIZE=3D2>> license?</FONT> <BR><FONT SIZE=3D2>></FONT> <BR><FONT SIZE=3D2>></FONT> <BR><FONT SIZE=3D2>></FONT> <BR><FONT SIZE=3D2>> Appreciate the reply Marty. I'm the person who = said you'd slipped </FONT> <BR><FONT SIZE=3D2>> this in on</FONT> <BR><FONT SIZE=3D2>> a Friday before a long weekend. I mentioned that = because that's what</FONT> <BR><FONT SIZE=3D2>> happened the last time SF did something and then = didn't communicate </FONT> <BR><FONT SIZE=3D2>> with the</FONT> <BR><FONT SIZE=3D2>> community for weeks afterwards. 3.0 license = release I think it was </FONT> <BR><FONT SIZE=3D2>> maybe? I</FONT> <BR><FONT SIZE=3D2>> forget. But had someone mentioned that you had = to do this in a rush </FONT> <BR><FONT SIZE=3D2>> because</FONT> <BR><FONT SIZE=3D2>> of outside factors we'd have known = different....</FONT> <BR><FONT SIZE=3D2>></FONT> <BR><FONT SIZE=3D2>> And that time, and the time before, (and = probably the time before </FONT> <BR><FONT SIZE=3D2>> that IIRC)</FONT> <BR><FONT SIZE=3D2>> you said SF was in the wrong by not putting out = a note that </FONT> <BR><FONT SIZE=3D2>> something was</FONT> <BR><FONT SIZE=3D2>> changing right away, or even that you had to do = something and would be</FONT> <BR><FONT SIZE=3D2>> explaining it shortly. When SF goes into a = communication blackout </FONT> <BR><FONT SIZE=3D2>> it's quite</FONT> <BR><FONT SIZE=3D2>> obvious. The "I'm too busy" thing = frankly doesn't sound plausible. </FONT> <BR><FONT SIZE=3D2>> Over two</FONT> <BR><FONT SIZE=3D2>> weeks is more than enough time for anyone to = send out an email that </FONT> <BR><FONT SIZE=3D2>> says</FONT> <BR><FONT SIZE=3D2>> "We're aware of the situation, we'll update = you shortly". If you were</FONT> <BR><FONT SIZE=3D2>> spending the time waiting for legal review then = say so. And let us </FONT> <BR><FONT SIZE=3D2>> know up</FONT> <BR><FONT SIZE=3D2>> front that's what we're waiting for. Otherwise = you just foment the</FONT> <BR><FONT SIZE=3D2>> conspiracy theories and undermine the corporate = confidence that </FONT> <BR><FONT SIZE=3D2>> snort will</FONT> <BR><FONT SIZE=3D2>> remain stable and community oriented. But I = think we've had this</FONT> <BR><FONT SIZE=3D2>> conversation before, so I won't beat the dead = horse any longer.</FONT> <BR><FONT SIZE=3D2>></FONT> <BR><FONT SIZE=3D2>> I haven't a problem with you protecting code and = your rights, but the</FONT> <BR><FONT SIZE=3D2>> willy-nilly changing of others copyright is not = something that </FONT> <BR><FONT SIZE=3D2>> should happen</FONT> <BR><FONT SIZE=3D2>> by accident. That's not like changing the colors = on a website, </FONT> <BR><FONT SIZE=3D2>> that's sacred</FONT> <BR><FONT SIZE=3D2>> ground. Rushing through that was a huge hit to = trust.</FONT> <BR><FONT SIZE=3D2>></FONT> <BR><FONT SIZE=3D2>> So my questions:</FONT> <BR><FONT SIZE=3D2>></FONT> <BR><FONT SIZE=3D2>> Will the coders that have more than trivial = portions of code in </FONT> <BR><FONT SIZE=3D2>> snort be</FONT> <BR><FONT SIZE=3D2>> receiving a proportional chunk of the money you = make when on </FONT> <BR><FONT SIZE=3D2>> relicensing</FONT> <BR><FONT SIZE=3D2>> Snort under the commercial license? Future and = historical </FONT> <BR><FONT SIZE=3D2>> contracts? That</FONT> <BR><FONT SIZE=3D2>> seems a fair thing to do, unless you intend to = buy out their </FONT> <BR><FONT SIZE=3D2>> copyright?</FONT> <BR><FONT SIZE=3D2>> That'd be fair as well. But in protecting the = authors of Snort </FONT> <BR><FONT SIZE=3D2>> (yourself and</FONT> <BR><FONT SIZE=3D2>> others), you've got to consider all of them when = the money flows.</FONT> <BR><FONT SIZE=3D2>></FONT> <BR><FONT SIZE=3D2>> If they're not to be reimbursed under your = relicensing revenue, do </FONT> <BR><FONT SIZE=3D2>> they then</FONT> <BR><FONT SIZE=3D2>> also have the right to sell snort under a = commercial license of </FONT> <BR><FONT SIZE=3D2>> their own?</FONT> <BR><FONT SIZE=3D2>></FONT> <BR><FONT SIZE=3D2>> Why's CVS down still? Why was it down in the = first place?</FONT> <BR><FONT SIZE=3D2>></FONT> <BR><FONT SIZE=3D2>> Have you had the time now to identify exactly = what issues in GPLv3 </FONT> <BR><FONT SIZE=3D2>> are an</FONT> <BR><FONT SIZE=3D2>> issue for SF? I've seen talk of the patent = prohibition stuff as </FONT> <BR><FONT SIZE=3D2>> being a</FONT> <BR><FONT SIZE=3D2>> possible issue. Is that what's a concern for = SF?</FONT> <BR><FONT SIZE=3D2>></FONT> <BR><FONT SIZE=3D2>> To be clear: I do appreciate your stewardship of = Snort. Better </FONT> <BR><FONT SIZE=3D2>> communication</FONT> <BR><FONT SIZE=3D2>> would not put so many into a default hostile and = suspicious stance.</FONT> <BR><FONT SIZE=3D2>></FONT> <BR><FONT SIZE=3D2>> Matt</FONT> <BR><FONT SIZE=3D2>></FONT> <BR><FONT SIZE=3D2>></FONT> <BR><FONT SIZE=3D2>></FONT> <BR><FONT SIZE=3D2>> > -----Original Message-----</FONT> <BR><FONT SIZE=3D2>> > From: = snort-users-bounces@lists.sourceforge.net</FONT> <BR><FONT SIZE=3D2>> > [<A = HREF=3D"mailto:snort-users-bounces@lists.sourceforge.net">mailto:snort-us= ers-bounces@lists.sourceforge.net</A>] On Behalf</FONT> <BR><FONT SIZE=3D2>> > Of Martin Roesch</FONT> <BR><FONT SIZE=3D2>> > Sent: Thursday, July 19, 2007 4:49 = AM</FONT> <BR><FONT SIZE=3D2>> > To: Snort Users</FONT> <BR><FONT SIZE=3D2>> > Subject: [Snort-users] What's up with = Snort's license?</FONT> <BR><FONT SIZE=3D2>> ></FONT> <BR><FONT SIZE=3D2>> > -----BEGIN PGP SIGNED MESSAGE-----</FONT> <BR><FONT SIZE=3D2>> > Hash: SHA1</FONT> <BR><FONT SIZE=3D2>> ></FONT> <BR><FONT SIZE=3D2>> > Hi everyone,</FONT> <BR><FONT SIZE=3D2>> ></FONT> <BR><FONT SIZE=3D2>> > I posted this message on my blog a few = minutes ago, please read it</FONT> <BR><FONT SIZE=3D2>> > and let me know what you think if you're = interested in Snort</FONT> <BR><FONT SIZE=3D2>> > licensing issues.</FONT> <BR><FONT SIZE=3D2>> ></FONT> <BR><FONT SIZE=3D2>> > - --</FONT> <BR><FONT SIZE=3D2>> ></FONT> <BR><FONT SIZE=3D2>> > There have been a lot of questions and = speculation about the things</FONT> <BR><FONT SIZE=3D2>> > we (Sourcefire) have been changing in = Snort's licensing recently and</FONT> <BR><FONT SIZE=3D2>> > it needs to be addressed so that we can = clear the air.</FONT> <BR><FONT SIZE=3D2>> ></FONT> <BR><FONT SIZE=3D2>> > There are three things that people have = been asking questions about</FONT> <BR><FONT SIZE=3D2>> > or having issues with.</FONT> <BR><FONT SIZE=3D2>> ></FONT> <BR><FONT SIZE=3D2>> > 1) GPL v2 lock that we put in place on June = 29th.</FONT> <BR><FONT SIZE=3D2>> > 2) "Clarifications" in Snort's = license language (Snort 3.0).</FONT> <BR><FONT SIZE=3D2>> > 3) "Clarifications" with regard = to assignments of ownership for</FONT> <BR><FONT SIZE=3D2>> > contributed code (Snort 3.0).</FONT> <BR><FONT SIZE=3D2>> ></FONT> <BR><FONT SIZE=3D2>> > Let me address these issues in = order.</FONT> <BR><FONT SIZE=3D2>> ></FONT> <BR><FONT SIZE=3D2>> > 1) GPL v2 lock.</FONT> <BR><FONT SIZE=3D2>> ></FONT> <BR><FONT SIZE=3D2>> > Here's what happened. About 3 weeks ago I = got a heads up that under</FONT> <BR><FONT SIZE=3D2>> > GPL v2, a licensee can choose to use GPL v3 = if we don't specify what</FONT> <BR><FONT SIZE=3D2>> > version of the GPL to use; conceivably we = could have people forking</FONT> <BR><FONT SIZE=3D2>> > and changing license on us. Seeing as GPL = v3 didn't even</FONT> <BR><FONT SIZE=3D2>> > "ship" until</FONT> <BR><FONT SIZE=3D2>> > June 29th we didn't feel like we were going = to be able to make any</FONT> <BR><FONT SIZE=3D2>> > decision on the language that was contained = in the new version until</FONT> <BR><FONT SIZE=3D2>> > we'd had some time to perform a formal = legal review. It also didn't</FONT> <BR><FONT SIZE=3D2>> > help that they decided to release on the = last day of the quarter.</FONT> <BR><FONT SIZE=3D2>> > Another contributing factor to the decision = for me was that Linus</FONT> <BR><FONT SIZE=3D2>> > decided to keep the Linux kernel at GPL v2, = that in itself</FONT> <BR><FONT SIZE=3D2>> > was enough</FONT> <BR><FONT SIZE=3D2>> > to get me to hit the pause button and take = some serious time</FONT> <BR><FONT SIZE=3D2>> > reviewing this new license before making = any decision. Linus himself</FONT> <BR><FONT SIZE=3D2>> > said "I'm not arguing against the = GPLv3. I'm arguing that the GPLv3</FONT> <BR><FONT SIZE=3D2>> > is wrong for _me_, and it's not the license = I ever chose." It's not</FONT> <BR><FONT SIZE=3D2>> > the license we chose either and we're not = moving to it without a</FONT> <BR><FONT SIZE=3D2>> > conscious decision to do so.</FONT> <BR><FONT SIZE=3D2>> ></FONT> <BR><FONT SIZE=3D2>> > If we didn't want the code base moving to = the new version then what</FONT> <BR><FONT SIZE=3D2>> > could we do? The simplest thing given the = time constraints that we</FONT> <BR><FONT SIZE=3D2>> > were working within was just to change the = language in the source</FONT> <BR><FONT SIZE=3D2>> > file header preambles (and not the license = itself) noting that we</FONT> <BR><FONT SIZE=3D2>> > were specifying Snort at GPL version 2 = until we could make a solid</FONT> <BR><FONT SIZE=3D2>> > and informed decision about how we wanted = to treat GPL v3.</FONT> <BR><FONT SIZE=3D2>> ></FONT> <BR><FONT SIZE=3D2>> > For those of you with wholly contributed = source files where the file</FONT> <BR><FONT SIZE=3D2>> > headers were changed, many (most/all?) of = them referred to "the</FONT> <BR><FONT SIZE=3D2>> > program" as being under an indistinct = version number (not just your</FONT> <BR><FONT SIZE=3D2>> > source files) and so rather than try to = track everyone down in the</FONT> <BR><FONT SIZE=3D2>> > time frame we had to work with *I* made a = unilateral decision</FONT> <BR><FONT SIZE=3D2>> > to just</FONT> <BR><FONT SIZE=3D2>> > move forward with it and we'd clean up the = mess afterwards.</FONT> <BR><FONT SIZE=3D2>> > I'm sorry</FONT> <BR><FONT SIZE=3D2>> > for the "bull in the china shop" = routine but we felt like we needed</FONT> <BR><FONT SIZE=3D2>> > to have this language out there before GPL = v3 shipped at noon EDT on</FONT> <BR><FONT SIZE=3D2>> > June 29th. Clearly there were some mistakes = made, obviously we</FONT> <BR><FONT SIZE=3D2>> > shouldn't have changed things like the BSD = license on the</FONT> <BR><FONT SIZE=3D2>> > strl* files</FONT> <BR><FONT SIZE=3D2>> > and so on, we'll fix that too. As Victor = observed, this was done in</FONT> <BR><FONT SIZE=3D2>> > something of a hurry. BTW, we didn't try to = "slip it out on a</FONT> <BR><FONT SIZE=3D2>> > Friday"</FONT> <BR><FONT SIZE=3D2>> > per the note on some blog, Friday was the = deadline and we had to </FONT> <BR><FONT SIZE=3D2>> move.</FONT> <BR><FONT SIZE=3D2>> ></FONT> <BR><FONT SIZE=3D2>> > Where do we go from here? We're going to = examine the language in the</FONT> <BR><FONT SIZE=3D2>> > new license and decide if we want to move = forward with it. This is</FONT> <BR><FONT SIZE=3D2>> > going to take a while but we'll make an = announcement when we</FONT> <BR><FONT SIZE=3D2>> > make the</FONT> <BR><FONT SIZE=3D2>> > final decision. For those of you who have = wholly authored source</FONT> <BR><FONT SIZE=3D2>> > files that would like the language changed = for your source</FONT> <BR><FONT SIZE=3D2>> > files back</FONT> <BR><FONT SIZE=3D2>> > to the original, with the provision that = the language reflect that</FONT> <BR><FONT SIZE=3D2>> > you're just referring to your file and not = the entirety of the</FONT> <BR><FONT SIZE=3D2>> > program, just let us (me) know and send us = the verbage you want and</FONT> <BR><FONT SIZE=3D2>> > we'll make the change. For those of you who = object to this sort of</FONT> <BR><FONT SIZE=3D2>> > thing all together that would like to = maintain your code as an</FONT> <BR><FONT SIZE=3D2>> > external patch set for Snort instead of in = the main source</FONT> <BR><FONT SIZE=3D2>> > tree, give</FONT> <BR><FONT SIZE=3D2>> > us the heads up and we'll pull your code = from the source trees. Once</FONT> <BR><FONT SIZE=3D2>> > again, this is with the provision that we = may reimplement the</FONT> <BR><FONT SIZE=3D2>> > capabilities that your code offers as = Sourcefire-authored code if it</FONT> <BR><FONT SIZE=3D2>> > happens to be something that we consider = important to the project.</FONT> <BR><FONT SIZE=3D2>> ></FONT> <BR><FONT SIZE=3D2>> > If anyone has any other input I'd be happy = to hear it. Contrary to</FONT> <BR><FONT SIZE=3D2>> > what several groups with vested interests = seem to be promoting,</FONT> <BR><FONT SIZE=3D2>> > Sourcefire isn't interested in closing = Snort's source code or making</FONT> <BR><FONT SIZE=3D2>> > this a closed-source project. The community = continues to be</FONT> <BR><FONT SIZE=3D2>> > important</FONT> <BR><FONT SIZE=3D2>> > to us and we have no plans on that ever = changing.</FONT> <BR><FONT SIZE=3D2>> ></FONT> <BR><FONT SIZE=3D2>> > 2) Snort 3.0 "clarifications" and = the GPL</FONT> <BR><FONT SIZE=3D2>> ></FONT> <BR><FONT SIZE=3D2>> > There has been a fair amount of opinion = being put forth by people in</FONT> <BR><FONT SIZE=3D2>> > the blogging world that Snort 3.0 will no = longer be "open</FONT> <BR><FONT SIZE=3D2>> > source" due</FONT> <BR><FONT SIZE=3D2>> > to the clarifications that we put in place. = This is just plain </FONT> <BR><FONT SIZE=3D2>> wrong.</FONT> <BR><FONT SIZE=3D2>> ></FONT> <BR><FONT SIZE=3D2>> > Sourcefire produces Snort as an open source = project. My interest as</FONT> <BR><FONT SIZE=3D2>> > the guy who started this whole thing and = who has worked on and</FONT> <BR><FONT SIZE=3D2>> > advanced this project for closing in on 9 = years now has always been</FONT> <BR><FONT SIZE=3D2>> > how good we can make the technology and how = well we can serve the</FONT> <BR><FONT SIZE=3D2>> > needs of the community. Now that Snort has = my company behind it, the</FONT> <BR><FONT SIZE=3D2>> > priorities really haven't changed but = there's an interesting dynamic</FONT> <BR><FONT SIZE=3D2>> > out there with companies that are using = Snort as a part of their</FONT> <BR><FONT SIZE=3D2>> > product or service offering. Many of them = seem to expect us to work</FONT> <BR><FONT SIZE=3D2>> > on this technology and improve it = continuously so that their</FONT> <BR><FONT SIZE=3D2>> > offering</FONT> <BR><FONT SIZE=3D2>> > is cutting edge but contribute nothing to = the project and complain</FONT> <BR><FONT SIZE=3D2>> > bitterly whenever we do something that = might cost them some money to</FONT> <BR><FONT SIZE=3D2>> > continue to use a best-of-breed technology = like this.</FONT> <BR><FONT SIZE=3D2>> ></FONT> <BR><FONT SIZE=3D2>> > It's Free as in "Free Speech", = not Free as in "Free Money" people!</FONT> <BR><FONT SIZE=3D2>> > Companies that use Snort as part of a = service or product seem to be</FONT> <BR><FONT SIZE=3D2>> > having a tough time accepting this. The = goal of the new licensing</FONT> <BR><FONT SIZE=3D2>> > language is to define what we consider to = constitute</FONT> <BR><FONT SIZE=3D2>> > conditions under</FONT> <BR><FONT SIZE=3D2>> > which something built on or around Snort is = a derivative work</FONT> <BR><FONT SIZE=3D2>> > subject</FONT> <BR><FONT SIZE=3D2>> > to the stipulations of the GPL (i.e. = putting the derivative code</FONT> <BR><FONT SIZE=3D2>> > under the GPL license). Despite all the = gnashing of teeth that has</FONT> <BR><FONT SIZE=3D2>> > resulted from this clarification, what = we've really done is take</FONT> <BR><FONT SIZE=3D2>> > about the most "open" stance you = can with a GPL project and put it</FONT> <BR><FONT SIZE=3D2>> > out there, true open source champions = should be applauding us</FONT> <BR><FONT SIZE=3D2>> > for our</FONT> <BR><FONT SIZE=3D2>> > position.</FONT> <BR><FONT SIZE=3D2>> ></FONT> <BR><FONT SIZE=3D2>> > That didn't happen. Instead we've gotten a = litany of grousing from</FONT> <BR><FONT SIZE=3D2>> > the blogerati, primarily because we've = offered a commercial license</FONT> <BR><FONT SIZE=3D2>> > for people who don't want to play by the = rules of the GPL in their</FONT> <BR><FONT SIZE=3D2>> > product and service offerings that will = (*gasp*!) cost money. If</FONT> <BR><FONT SIZE=3D2>> > you're licensing technology from Sourcefire = (which all of you using</FONT> <BR><FONT SIZE=3D2>> > the GPL version of Snort are doing) and you = don't wish to live under</FONT> <BR><FONT SIZE=3D2>> > the terms of that license, we're giving you = another one to choose</FONT> <BR><FONT SIZE=3D2>> > from. If you don't like having world-class = security technology</FONT> <BR><FONT SIZE=3D2>> > available for a fee because it affects your = cost structure, that's</FONT> <BR><FONT SIZE=3D2>> > not my problem. If you want to use it for = free then you have to live</FONT> <BR><FONT SIZE=3D2>> > by the license but people always seem to = interpret the GPL in ways</FONT> <BR><FONT SIZE=3D2>> > that are optimally advantageous to them (if = they don't just take the</FONT> <BR><FONT SIZE=3D2>> > code directly and bury it in their = product). The clarifications we</FONT> <BR><FONT SIZE=3D2>> > put into Snort 3 are there to get us all on = the same page and</FONT> <BR><FONT SIZE=3D2>> > to make</FONT> <BR><FONT SIZE=3D2>> > sure that commercial users of the = technology understand that we're</FONT> <BR><FONT SIZE=3D2>> > not a "venture technology" = company, giving them technology for free</FONT> <BR><FONT SIZE=3D2>> > to enable their business models which = frequently compete against us</FONT> <BR><FONT SIZE=3D2>> > in some regard. There's nothing wrong with = using Snort as a part of</FONT> <BR><FONT SIZE=3D2>> > your commercial offering as long as you = adhere to its</FONT> <BR><FONT SIZE=3D2>> > license. If you</FONT> <BR><FONT SIZE=3D2>> > can't do that then we need to talk.</FONT> <BR><FONT SIZE=3D2>> ></FONT> <BR><FONT SIZE=3D2>> > At the same time we've taken many measures = to ensure that the end</FONT> <BR><FONT SIZE=3D2>> > users of the technology are unaffected. = Want to integrate Snort or</FONT> <BR><FONT SIZE=3D2>> > part of Snort into your open source = project? No problem, it's free.</FONT> <BR><FONT SIZE=3D2>> > Want to deploy 100 home-made Snort sensors = in your non-profit/</FONT> <BR><FONT SIZE=3D2>> > enterprise/government organization ? Go for = it. Want to learn how</FONT> <BR><FONT SIZE=3D2>> > these systems work at the code level? No = problem, it's all there.</FONT> <BR><FONT SIZE=3D2>> > Want transparency of your security = technology and the content that</FONT> <BR><FONT SIZE=3D2>> > drives it? It's all there, as it should be. = Want to have access to</FONT> <BR><FONT SIZE=3D2>> > the internals to extend or correct or add = your own value to the</FONT> <BR><FONT SIZE=3D2>> > project or just your operational = environment? All part of the open</FONT> <BR><FONT SIZE=3D2>> > source concept, make it happen. Want to = fork and make your own IPS</FONT> <BR><FONT SIZE=3D2>> > project built on the code-base? You can do = that, just make sure you</FONT> <BR><FONT SIZE=3D2>> > understand what you're doing in maintaining = proper licensing for the</FONT> <BR><FONT SIZE=3D2>> > forked project and respect our IP.</FONT> <BR><FONT SIZE=3D2>> ></FONT> <BR><FONT SIZE=3D2>> > I personally have *always* been the biggest = advocate for the</FONT> <BR><FONT SIZE=3D2>> > users of</FONT> <BR><FONT SIZE=3D2>> > Snort since the day this company was formed = and I always will be.</FONT> <BR><FONT SIZE=3D2>> ></FONT> <BR><FONT SIZE=3D2>> > 3) Snort 3.0 and IP assignments</FONT> <BR><FONT SIZE=3D2>> ></FONT> <BR><FONT SIZE=3D2>> > This is the most controversial provision of = the clarifications that</FONT> <BR><FONT SIZE=3D2>> > we put into the Snort 3.0 license. = Basically what it says is:</FONT> <BR><FONT SIZE=3D2>> ></FONT> <BR><FONT SIZE=3D2>> > * By sending these changes to Sourcefire or = one of the Sourcefire-</FONT> <BR><FONT SIZE=3D2>> > moderated</FONT> <BR><FONT SIZE=3D2>> > * mailing lists or forums, you are granting = to Sourcefire, Inc. the</FONT> <BR><FONT SIZE=3D2>> > unlimited,</FONT> <BR><FONT SIZE=3D2>> > * perpetual, non-exclusive right to reuse, = modify, and/or relicense</FONT> <BR><FONT SIZE=3D2>> > the code.</FONT> <BR><FONT SIZE=3D2>> > * Snort will always be available Open = Source, but this is important</FONT> <BR><FONT SIZE=3D2>> > * because the inability to relicense code = has caused devastating</FONT> <BR><FONT SIZE=3D2>> > problems for</FONT> <BR><FONT SIZE=3D2>> > * other Free Software projects (such as KDE = and NASM). We also</FONT> <BR><FONT SIZE=3D2>> > occasionally</FONT> <BR><FONT SIZE=3D2>> > * relicense the code to third parties as = discussed above. If</FONT> <BR><FONT SIZE=3D2>> > you wish to</FONT> <BR><FONT SIZE=3D2>> > * specify special license conditions of = your contributions, just say</FONT> <BR><FONT SIZE=3D2>> > so when</FONT> <BR><FONT SIZE=3D2>> > * you send them.</FONT> <BR><FONT SIZE=3D2>> ></FONT> <BR><FONT SIZE=3D2>> > So what's that mean? If you send a patch to = the mailing lists or to</FONT> <BR><FONT SIZE=3D2>> > Sourcefire, if you contribute code to the = Snort project we consider</FONT> <BR><FONT SIZE=3D2>> > that code and it's IP to be = "assigned" to us. The reason for doing</FONT> <BR><FONT SIZE=3D2>> > this should be pretty clear, we don't feel = that contributing</FONT> <BR><FONT SIZE=3D2>> > a 3-line</FONT> <BR><FONT SIZE=3D2>> > patch to a 200k+ LOC codebase means that = the contributer has</FONT> <BR><FONT SIZE=3D2>> > copyright claims over Snort at that point. = In the early years there</FONT> <BR><FONT SIZE=3D2>> > were many people who contributed (in any = way) to Snort but over the</FONT> <BR><FONT SIZE=3D2>> > years since Sourcefire was incorporated the = total contribution by</FONT> <BR><FONT SIZE=3D2>> > these external contributers has decreased = substantially. After that,</FONT> <BR><FONT SIZE=3D2>> > Sourcefire developed more and more of the = code, especially the core</FONT> <BR><FONT SIZE=3D2>> > functionality of the detection engine and = preprocessors, not to</FONT> <BR><FONT SIZE=3D2>> > mention tons of the rules as well. I have = felt for a long time that</FONT> <BR><FONT SIZE=3D2>> > we need to have a sense of proportionality = about this and we should</FONT> <BR><FONT SIZE=3D2>> > also have the ability to be flexible with = the code base in terms of</FONT> <BR><FONT SIZE=3D2>> > licensing without needing to approach every = contributer individually</FONT> <BR><FONT SIZE=3D2>> > to get sign-off on any changes that we = make. That's why we've put</FONT> <BR><FONT SIZE=3D2>> > this provision into Snort 3.0.</FONT> <BR><FONT SIZE=3D2>> ></FONT> <BR><FONT SIZE=3D2>> > This "assumptive assignment" is = exactly what projects like Nmap use.</FONT> <BR><FONT SIZE=3D2>> > Perhaps we should take the next step and = use the FSF's model where</FONT> <BR><FONT SIZE=3D2>> > contributers to projects like GCC need to = sign a legal document</FONT> <BR><FONT SIZE=3D2>> > explicitly to contribute to the project. = The FSF does this because</FONT> <BR><FONT SIZE=3D2>> > they need to have flexibility but also = because they need to get out</FONT> <BR><FONT SIZE=3D2>> > from under any potential problems that may = occur due to someone</FONT> <BR><FONT SIZE=3D2>> > inappropriately contributing IP from a 3rd = party. I don't like that</FONT> <BR><FONT SIZE=3D2>> > concept because of the overhead associated = with interacting with the</FONT> <BR><FONT SIZE=3D2>> > project, Snort's not a huge project like = GCC so I've liked that</FONT> <BR><FONT SIZE=3D2>> > people can contribute as they see fit. The = FSF does take one</FONT> <BR><FONT SIZE=3D2>> > additional step, they guarantee that the = projects that people make</FONT> <BR><FONT SIZE=3D2>> > assignments to will be available as open = source projects in</FONT> <BR><FONT SIZE=3D2>> > perpetuity. I think that maybe we need to = make a statement like that</FONT> <BR><FONT SIZE=3D2>> > but quite frankly it's always been our = position that Snort will</FONT> <BR><FONT SIZE=3D2>> > always be available as Free Software and we = have no intention to</FONT> <BR><FONT SIZE=3D2>> > change our position ever.</FONT> <BR><FONT SIZE=3D2>> ></FONT> <BR><FONT SIZE=3D2>> > I think that the part of this provision = that people have had</FONT> <BR><FONT SIZE=3D2>> > the most</FONT> <BR><FONT SIZE=3D2>> > trouble with is that we also retain the = right to relicense the</FONT> <BR><FONT SIZE=3D2>> > contributed code under alternative = licenses. We have to be</FONT> <BR><FONT SIZE=3D2>> > able to do</FONT> <BR><FONT SIZE=3D2>> > that if we're going to offer alternative = licenses to Snort,</FONT> <BR><FONT SIZE=3D2>> > maintaining a "patch free" code = branch and a "patch tainted" branch</FONT> <BR><FONT SIZE=3D2>> > doesn't make any sense to me and probably = not to you either. The</FONT> <BR><FONT SIZE=3D2>> > assignment doesn't mean we're going to = "steal" your code and</FONT> <BR><FONT SIZE=3D2>> > "disappear" it CIA-style. It = means that we need to be able to retain</FONT> <BR><FONT SIZE=3D2>> > the right to offer it under our commercial = license. The code you</FONT> <BR><FONT SIZE=3D2>> > contribute will always be available to you = and everyone else in the</FONT> <BR><FONT SIZE=3D2>> > open source code base, we're not going to = steal it but we are going</FONT> <BR><FONT SIZE=3D2>> > to make it available to our commercial = users. If you've got a</FONT> <BR><FONT SIZE=3D2>> > problem</FONT> <BR><FONT SIZE=3D2>> > with this, don't contribute the code to us, = maintain it as an</FONT> <BR><FONT SIZE=3D2>> > external patch.</FONT> <BR><FONT SIZE=3D2>> ></FONT> <BR><FONT SIZE=3D2>> > That's about it. I'm sorry we haven't been = as communicative with the</FONT> <BR><FONT SIZE=3D2>> > OSS community as we probably should be, I = personally have a lot of</FONT> <BR><FONT SIZE=3D2>> > demands on my time and I'm the person at SF = who's the most familiar</FONT> <BR><FONT SIZE=3D2>> > with the totality of the Snort project so I = have a lot of input into</FONT> <BR><FONT SIZE=3D2>> > the process here and I'm also fairly = parochial regarding</FONT> <BR><FONT SIZE=3D2>> > communicating concepts like this to the = user community. In</FONT> <BR><FONT SIZE=3D2>> > the future</FONT> <BR><FONT SIZE=3D2>> > I'll try to be more forthcoming with all of = you and I hope you'll</FONT> <BR><FONT SIZE=3D2>> > continue to be patient with both me and = Sourcefire; our</FONT> <BR><FONT SIZE=3D2>> > hearts really</FONT> <BR><FONT SIZE=3D2>> > are in the right place with the users of = this technology but we also</FONT> <BR><FONT SIZE=3D2>> > have to be pragmatic about how all of this = is going to work</FONT> <BR><FONT SIZE=3D2>> > given all</FONT> <BR><FONT SIZE=3D2>> > of the commercial use that Snort = sees.</FONT> <BR><FONT SIZE=3D2>> ></FONT> <BR><FONT SIZE=3D2>> > We're trying to be pragmatic about these = issues, I hope that people</FONT> <BR><FONT SIZE=3D2>> > can feel comfortable with the direction = that we're taking things. I</FONT> <BR><FONT SIZE=3D2>> > look forward to reading people's = responses.</FONT> <BR><FONT SIZE=3D2>> ></FONT> <BR><FONT SIZE=3D2>> > = -Marty</FONT> <BR><FONT SIZE=3D2>> ></FONT> <BR><FONT SIZE=3D2>> > - --</FONT> <BR><FONT SIZE=3D2>> > Martin Roesch - Founder/CTO, Sourcefire = Inc. - +1-410-290-1616</FONT> <BR><FONT SIZE=3D2>> > Sourcefire - Security for the Real World - = <A = HREF=3D"http://www.sourcefire.com">http://www.sourcefire.com</A></FONT> <BR><FONT SIZE=3D2>> > Snort: Open Source IDP - <A = HREF=3D"http://www.snort.org">http://www.snort.org</A></FONT> <BR><FONT SIZE=3D2>> ></FONT> <BR><FONT SIZE=3D2>> ></FONT> <BR><FONT SIZE=3D2>> ></FONT> <BR><FONT SIZE=3D2>> ></FONT> <BR><FONT SIZE=3D2>> > -----BEGIN PGP SIGNATURE-----</FONT> <BR><FONT SIZE=3D2>> > Version: GnuPG v1.4.5 (Darwin)</FONT> <BR><FONT SIZE=3D2>> ></FONT> <BR><FONT SIZE=3D2>> > = iD8DBQFGnmCYqj0FAQQ3KOARAr6wAJ9H4EKBvqQIBsI7dx+H7b Fb6hnvVACeICZu</FONT> <BR><FONT SIZE=3D2>> > kqjs5CsDqD8cQhP2LA9hUpM=3D</FONT> <BR><FONT SIZE=3D2>> > =3DBWUO</FONT> <BR><FONT SIZE=3D2>> > -----END PGP SIGNATURE-----</FONT> <BR><FONT SIZE=3D2>> ></FONT> <BR><FONT SIZE=3D2>> > = --------------------------------------------------------------</FONT> <BR><FONT SIZE=3D2>> > -----------</FONT> <BR><FONT SIZE=3D2>> > This SF.net email is sponsored by DB2 = Express</FONT> <BR><FONT SIZE=3D2>> > Download DB2 Express C - the FREE version = of DB2 express and take</FONT> <BR><FONT SIZE=3D2>> > control of your XML. No limits. Just data. = Click to get it now.</FONT> <BR><FONT SIZE=3D2>> > <A = HREF=3D"http://sourceforge.net/powerbar/db2/">http://sourceforge.net/powe= rbar/db2/</A></FONT> <BR><FONT SIZE=3D2>> > = _______________________________________________</FONT> <BR><FONT SIZE=3D2>> > Snort-users mailing list</FONT> <BR><FONT SIZE=3D2>> > Snort-users@lists.sourceforge.net</FONT> <BR><FONT SIZE=3D2>> > Go to this URL to change user options or = unsubscribe:</FONT> <BR><FONT SIZE=3D2>> > <A = HREF=3D"https://lists.sourceforge.net/lists/listinfo/snort-users">https:/= /lists.sourceforge.net/lists/listinfo/snort-users</A></FONT> <BR><FONT SIZE=3D2>> > Snort-users list archive:</FONT> <BR><FONT SIZE=3D2>> > <A = HREF=3D"http://www.geocrawler.com/redir-sf.php3?list=3Dsnort-users">http:= //www.geocrawler.com/redir-sf.php3?list=3Dsnort-users</A></FONT> <BR><FONT SIZE=3D2>> ></FONT> <BR><FONT SIZE=3D2>></FONT> <BR><FONT SIZE=3D2>> = _______________________________________________</FONT> <BR><FONT SIZE=3D2>> Bleeding-sigs mailing list</FONT> <BR><FONT SIZE=3D2>> Bleeding-sigs@bleedingthreats.net</FONT> <BR><FONT SIZE=3D2>> <A = HREF=3D"http://lists.bleedingthreats.net/cgi-bin/mailman/listinfo/bleedin= g-">http://lists.bleedingthreats.net/cgi-bin/mailman/listinfo/bleeding-</= A> </FONT> <BR><FONT SIZE=3D2>> sigs</FONT> <BR><FONT SIZE=3D2>></FONT> <BR><FONT SIZE=3D2>> No virus found in this incoming message.</FONT> <BR><FONT SIZE=3D2>> Checked by AVG Free Edition.</FONT> <BR><FONT SIZE=3D2>> Version: 7.5.476 / Virus Database: 269.10.9/907 = - Release Date: </FONT> <BR><FONT SIZE=3D2>> 7/18/2007 3:30 PM</FONT> <BR><FONT SIZE=3D2>></FONT> <BR><FONT SIZE=3D2>></FONT> <BR><FONT SIZE=3D2>></FONT> </P> <P><FONT SIZE=3D2>- --</FONT> <BR><FONT SIZE=3D2>Martin Roesch - Founder/CTO, Sourcefire Inc. - = +1-410-290-1616</FONT> <BR><FONT SIZE=3D2>Sourcefire - Security for the Real World - <A = HREF=3D"http://www.sourcefire.com">http://www.sourcefire.com</A></FONT> <BR><FONT SIZE=3D2>Snort: Open Source IDP - <A = HREF=3D"http://www.snort.org">http://www.snort.org</A></FONT> </P> <BR> <BR> <BR> <P><FONT SIZE=3D2>-----BEGIN PGP SIGNATURE-----</FONT> <BR><FONT SIZE=3D2>Version: GnuPG v1.4.5 (Darwin)</FONT> </P> <P><FONT = SIZE=3D2>iD8DBQFGpQi+qj0FAQQ3KOARAlKcAJ9ovWh/a0uiO02pD7Twwd6aXaiUmgCeMU8h= </FONT> <BR><FONT SIZE=3D2>VE+YthSs53Gpi5gCnlmzzrM=3D</FONT> <BR><FONT SIZE=3D2>=3DYf7L</FONT> <BR><FONT SIZE=3D2>-----END PGP SIGNATURE-----</FONT> <BR><FONT = SIZE=3D2>_________________________________________ ______</FONT> <BR><FONT SIZE=3D2>Bleeding-sigs mailing list</FONT> <BR><FONT SIZE=3D2>Bleeding-sigs@bleedingthreats.net</FONT> <BR><FONT SIZE=3D2><A = HREF=3D"http://lists.bleedingthreats.net/cgi-bin/mailman/listinfo/bleedin= g-sigs">http://lists.bleedingthreats.net/cgi...tinfo/bleedin= g-sigs</A></FONT> <BR> <BR><FONT SIZE=3D2>No virus found in this incoming message.<BR> Checked by AVG Free Edition.<BR> Version: 7.5.476 / Virus Database: 269.10.16/914 - Release Date: = 7/23/2007 7:45 PM<BR> </FONT> </P> </BODY> </HTML> --===============1288488642== Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline ------------------------------------------------------------------------- This SF.net email is sponsored by: Splunk Inc. Still grepping through log files to find problems? Stop. Now Search log events and configuration files using AJAX and a browser. Download your FREE copy of Splunk now >> http://get.splunk.com/ --===============1288488642== Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline _______________________________________________ Snort-users mailing list Snort-users@lists.sourceforge.net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/...fo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.p...st=snort-users --===============1288488642==-- |