Re: [Snort-users] [Bleeding-sigs] RE: What's up with Snort's

This is a discussion on Re: [Snort-users] [Bleeding-sigs] RE: What's up with Snort's within the Snort forums, part of the System Security and Security Related category; --===============1288488642== Content-Type: text/html; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable Content-class: urn:content-...


Go Back   Usenet Forums > System Security and Security Related > Snort

FAQ Members List Calendar Search Today's Posts Mark Forums Read
  #1 (permalink)  
Old 07-24-2007
Martin Roesch
 
Posts: n/a
Default Re: [Snort-users] [Bleeding-sigs] RE: What's up with Snort's

--===============1288488642==
Content-Type: text/html;
charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
Content-class: urn:content-classes:message

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2//EN">
<HTML>
<HEAD>
<META HTTP-EQUIV=3D"Content-Type" CONTENT=3D"text/html; =
charset=3Diso-8859-1">
<META NAME=3D"Generator" CONTENT=3D"MS Exchange Server version =
6.5.7652.24">
<TITLE>Re: [Snort-users] [Bleeding-sigs] RE: What's up with Snort's =
license?</TITLE>
</HEAD>
<BODY>
<!-- Converted from text/plain format -->

<P><FONT SIZE=3D2>-----BEGIN PGP SIGNED MESSAGE-----</FONT>

<BR><FONT SIZE=3D2>Hash: SHA1</FONT>
</P>

<P><FONT SIZE=3D2>Alan,</FONT>
</P>

<P><FONT SIZE=3D2>Thanks for the invite to participate in a panel =
discussion.&nbsp; I'm&nbsp; </FONT>

<BR><FONT SIZE=3D2>going to decline on similar grounds to Victor.&nbsp; =
I've already made my&nbsp; </FONT>

<BR><FONT SIZE=3D2>thoughts on the matter public in my blog and the =
Q&amp;A email sent to&nbsp; </FONT>

<BR><FONT SIZE=3D2>Snort-users the other day.&nbsp; At the end of the =
day further discussion&nbsp; </FONT>

<BR><FONT SIZE=3D2>on licensing comes down to an idealogical debate and =
like religion&nbsp; </FONT>

<BR><FONT SIZE=3D2>and politics these differences in opinion are rarely =
resolved.&nbsp; I'd&nbsp; </FONT>

<BR><FONT SIZE=3D2>be happy to further address any questions from the =
community on a one&nbsp; </FONT>

<BR><FONT SIZE=3D2>to one basis.</FONT>
</P>

<P><FONT SIZE=3D2>I'm a programmer not a lawyer, let's get back to =
talking about cool&nbsp; </FONT>

<BR><FONT SIZE=3D2>technology.</FONT>
</P>

<P>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; <FONT =
SIZE=3D2>-Marty</FONT>
</P>

<P><FONT SIZE=3D2>On Jul 19, 2007, at 9:20 AM, Alan Shimel wrote:</FONT>
</P>

<P><FONT SIZE=3D2>&gt; Hopefully this will not bounce, as I registered =
this email address&nbsp; </FONT>

<BR><FONT SIZE=3D2>&gt; on the list.</FONT>

<BR><FONT SIZE=3D2>&gt;</FONT>

<BR><FONT SIZE=3D2>&gt;</FONT>

<BR><FONT SIZE=3D2>&gt;</FONT>

<BR><FONT SIZE=3D2>&gt; With all of the back and forth regarding these =
issues I would like&nbsp; </FONT>

<BR><FONT SIZE=3D2>&gt; to invite Marty, Matt Jonkman, Victor and maybe =
some of the other&nbsp; </FONT>

<BR><FONT SIZE=3D2>&gt; folks who have written to appear on my podcast =
that I do weekly.&nbsp;&nbsp; </FONT>

<BR><FONT SIZE=3D2>&gt; We can do it with either with live call ins for =
questions or have&nbsp; </FONT>

<BR><FONT SIZE=3D2>&gt; people submit their questions.&nbsp; I think it =
will be a great chance&nbsp; </FONT>

<BR><FONT SIZE=3D2>&gt; to clear the air and give everyone their say and =
then hopefully put&nbsp; </FONT>

<BR><FONT SIZE=3D2>&gt; these issues to bed once and for all.&nbsp; =
Marty, Matt, Victor, et al,&nbsp; </FONT>

<BR><FONT SIZE=3D2>&gt; what do you say?&nbsp; Would you be willing to =
get on a panel and&nbsp; </FONT>

<BR><FONT SIZE=3D2>&gt; discuss these issues?</FONT>

<BR><FONT SIZE=3D2>&gt;</FONT>

<BR><FONT SIZE=3D2>&gt;</FONT>

<BR><FONT SIZE=3D2>&gt;</FONT>

<BR><FONT SIZE=3D2>&gt; Let me know</FONT>

<BR><FONT SIZE=3D2>&gt;</FONT>

<BR><FONT SIZE=3D2>&gt;</FONT>

<BR><FONT SIZE=3D2>&gt;</FONT>

<BR><FONT SIZE=3D2>&gt; alan</FONT>

<BR><FONT SIZE=3D2>&gt;</FONT>

<BR><FONT SIZE=3D2>&gt;</FONT>

<BR><FONT SIZE=3D2>&gt;</FONT>

<BR><FONT SIZE=3D2>&gt; StillSecure</FONT>

<BR><FONT SIZE=3D2>&gt; Alan Shimel</FONT>

<BR><FONT SIZE=3D2>&gt; Chief Strategy Officer</FONT>

<BR><FONT SIZE=3D2>&gt;</FONT>

<BR><FONT SIZE=3D2>&gt; O 303.381.3815</FONT>

<BR><FONT SIZE=3D2>&gt; C 516.857.7409</FONT>

<BR><FONT SIZE=3D2>&gt; F 303.381.3881</FONT>

<BR><FONT SIZE=3D2>&gt;</FONT>

<BR><FONT SIZE=3D2>&gt;</FONT>

<BR><FONT SIZE=3D2>&gt;</FONT>

<BR><FONT SIZE=3D2>&gt; &lt;image001.gif&gt;</FONT>

<BR><FONT SIZE=3D2>&gt;</FONT>

<BR><FONT SIZE=3D2>&gt; www.stillsecure.com</FONT>

<BR><FONT SIZE=3D2>&gt; The information transmitted is intended only for =
the person</FONT>

<BR><FONT SIZE=3D2>&gt; to whom it is addressed and may contain =
confidential material.</FONT>

<BR><FONT SIZE=3D2>&gt; Review or other use of this information by =
persons other than</FONT>

<BR><FONT SIZE=3D2>&gt; the intended recipient is prohibited. If you've =
received</FONT>

<BR><FONT SIZE=3D2>&gt; this in error, please contact the sender and =
delete</FONT>

<BR><FONT SIZE=3D2>&gt; from any computer.</FONT>

<BR><FONT SIZE=3D2>&gt;</FONT>

<BR><FONT SIZE=3D2>&gt; From: snort-users-bounces@lists.sourceforge.net =
[<A HREF=3D"mailto:snort-users-">mailto:snort-users-</A> </FONT>

<BR><FONT SIZE=3D2>&gt; bounces@lists.sourceforge.net] On Behalf Of Matt =
Jonkman</FONT>

<BR><FONT SIZE=3D2>&gt; Sent: Wednesday, July 18, 2007 10:48 PM</FONT>

<BR><FONT SIZE=3D2>&gt; To: Martin Roesch; Snort Users</FONT>

<BR><FONT SIZE=3D2>&gt; Cc: Bleeding Sigs</FONT>

<BR><FONT SIZE=3D2>&gt; Subject: [Snort-users] [Bleeding-sigs] RE: =
What's up with Snort's&nbsp; </FONT>

<BR><FONT SIZE=3D2>&gt; license?</FONT>

<BR><FONT SIZE=3D2>&gt;</FONT>

<BR><FONT SIZE=3D2>&gt;</FONT>

<BR><FONT SIZE=3D2>&gt;</FONT>

<BR><FONT SIZE=3D2>&gt; Appreciate the reply Marty. I'm the person who =
said you'd slipped&nbsp; </FONT>

<BR><FONT SIZE=3D2>&gt; this in on</FONT>

<BR><FONT SIZE=3D2>&gt; a Friday before a long weekend. I mentioned that =
because that's what</FONT>

<BR><FONT SIZE=3D2>&gt; happened the last time SF did something and then =
didn't communicate&nbsp; </FONT>

<BR><FONT SIZE=3D2>&gt; with the</FONT>

<BR><FONT SIZE=3D2>&gt; community for weeks afterwards. 3.0 license =
release I think it was&nbsp; </FONT>

<BR><FONT SIZE=3D2>&gt; maybe? I</FONT>

<BR><FONT SIZE=3D2>&gt; forget. But had someone mentioned that you had =
to do this in a rush&nbsp; </FONT>

<BR><FONT SIZE=3D2>&gt; because</FONT>

<BR><FONT SIZE=3D2>&gt; of outside factors we'd have known =
different....</FONT>

<BR><FONT SIZE=3D2>&gt;</FONT>

<BR><FONT SIZE=3D2>&gt; And that time, and the time before, (and =
probably the time before&nbsp; </FONT>

<BR><FONT SIZE=3D2>&gt; that IIRC)</FONT>

<BR><FONT SIZE=3D2>&gt; you said SF was in the wrong by not putting out =
a note that&nbsp; </FONT>

<BR><FONT SIZE=3D2>&gt; something was</FONT>

<BR><FONT SIZE=3D2>&gt; changing right away, or even that you had to do =
something and would be</FONT>

<BR><FONT SIZE=3D2>&gt; explaining it shortly. When SF goes into a =
communication blackout&nbsp; </FONT>

<BR><FONT SIZE=3D2>&gt; it's quite</FONT>

<BR><FONT SIZE=3D2>&gt; obvious. The &quot;I'm too busy&quot; thing =
frankly doesn't sound plausible.&nbsp; </FONT>

<BR><FONT SIZE=3D2>&gt; Over two</FONT>

<BR><FONT SIZE=3D2>&gt; weeks is more than enough time for anyone to =
send out an email that&nbsp; </FONT>

<BR><FONT SIZE=3D2>&gt; says</FONT>

<BR><FONT SIZE=3D2>&gt; &quot;We're aware of the situation, we'll update =
you shortly&quot;. If you were</FONT>

<BR><FONT SIZE=3D2>&gt; spending the time waiting for legal review then =
say so. And let us&nbsp; </FONT>

<BR><FONT SIZE=3D2>&gt; know up</FONT>

<BR><FONT SIZE=3D2>&gt; front that's what we're waiting for. Otherwise =
you just foment the</FONT>

<BR><FONT SIZE=3D2>&gt; conspiracy theories and undermine the corporate =
confidence that&nbsp; </FONT>

<BR><FONT SIZE=3D2>&gt; snort will</FONT>

<BR><FONT SIZE=3D2>&gt; remain stable and community oriented. But I =
think we've had this</FONT>

<BR><FONT SIZE=3D2>&gt; conversation before, so I won't beat the dead =
horse any longer.</FONT>

<BR><FONT SIZE=3D2>&gt;</FONT>

<BR><FONT SIZE=3D2>&gt; I haven't a problem with you protecting code and =
your rights, but the</FONT>

<BR><FONT SIZE=3D2>&gt; willy-nilly changing of others copyright is not =
something that&nbsp; </FONT>

<BR><FONT SIZE=3D2>&gt; should happen</FONT>

<BR><FONT SIZE=3D2>&gt; by accident. That's not like changing the colors =
on a website,&nbsp; </FONT>

<BR><FONT SIZE=3D2>&gt; that's sacred</FONT>

<BR><FONT SIZE=3D2>&gt; ground. Rushing through that was a huge hit to =
trust.</FONT>

<BR><FONT SIZE=3D2>&gt;</FONT>

<BR><FONT SIZE=3D2>&gt; So my questions:</FONT>

<BR><FONT SIZE=3D2>&gt;</FONT>

<BR><FONT SIZE=3D2>&gt; Will the coders that have more than trivial =
portions of code in&nbsp; </FONT>

<BR><FONT SIZE=3D2>&gt; snort be</FONT>

<BR><FONT SIZE=3D2>&gt; receiving a proportional chunk of the money you =
make when on&nbsp; </FONT>

<BR><FONT SIZE=3D2>&gt; relicensing</FONT>

<BR><FONT SIZE=3D2>&gt; Snort under the commercial license? Future and =
historical&nbsp; </FONT>

<BR><FONT SIZE=3D2>&gt; contracts? That</FONT>

<BR><FONT SIZE=3D2>&gt; seems a fair thing to do, unless you intend to =
buy out their&nbsp; </FONT>

<BR><FONT SIZE=3D2>&gt; copyright?</FONT>

<BR><FONT SIZE=3D2>&gt; That'd be fair as well. But in protecting the =
authors of Snort&nbsp; </FONT>

<BR><FONT SIZE=3D2>&gt; (yourself and</FONT>

<BR><FONT SIZE=3D2>&gt; others), you've got to consider all of them when =
the money flows.</FONT>

<BR><FONT SIZE=3D2>&gt;</FONT>

<BR><FONT SIZE=3D2>&gt; If they're not to be reimbursed under your =
relicensing revenue, do&nbsp; </FONT>

<BR><FONT SIZE=3D2>&gt; they then</FONT>

<BR><FONT SIZE=3D2>&gt; also have the right to sell snort under a =
commercial license of&nbsp; </FONT>

<BR><FONT SIZE=3D2>&gt; their own?</FONT>

<BR><FONT SIZE=3D2>&gt;</FONT>

<BR><FONT SIZE=3D2>&gt; Why's CVS down still? Why was it down in the =
first place?</FONT>

<BR><FONT SIZE=3D2>&gt;</FONT>

<BR><FONT SIZE=3D2>&gt; Have you had the time now to identify exactly =
what issues in GPLv3&nbsp; </FONT>

<BR><FONT SIZE=3D2>&gt; are an</FONT>

<BR><FONT SIZE=3D2>&gt; issue for SF? I've seen talk of the patent =
prohibition stuff as&nbsp; </FONT>

<BR><FONT SIZE=3D2>&gt; being a</FONT>

<BR><FONT SIZE=3D2>&gt; possible issue. Is that what's a concern for =
SF?</FONT>

<BR><FONT SIZE=3D2>&gt;</FONT>

<BR><FONT SIZE=3D2>&gt; To be clear: I do appreciate your stewardship of =
Snort. Better&nbsp; </FONT>

<BR><FONT SIZE=3D2>&gt; communication</FONT>

<BR><FONT SIZE=3D2>&gt; would not put so many into a default hostile and =
suspicious stance.</FONT>

<BR><FONT SIZE=3D2>&gt;</FONT>

<BR><FONT SIZE=3D2>&gt; Matt</FONT>

<BR><FONT SIZE=3D2>&gt;</FONT>

<BR><FONT SIZE=3D2>&gt;</FONT>

<BR><FONT SIZE=3D2>&gt;</FONT>

<BR><FONT SIZE=3D2>&gt; &gt; -----Original Message-----</FONT>

<BR><FONT SIZE=3D2>&gt; &gt; From: =
snort-users-bounces@lists.sourceforge.net</FONT>

<BR><FONT SIZE=3D2>&gt; &gt; [<A =
HREF=3D"mailto:snort-users-bounces@lists.sourceforge.net">mailto:snort-us=
ers-bounces@lists.sourceforge.net</A>] On Behalf</FONT>

<BR><FONT SIZE=3D2>&gt; &gt; Of Martin Roesch</FONT>

<BR><FONT SIZE=3D2>&gt; &gt; Sent: Thursday, July 19, 2007 4:49 =
AM</FONT>

<BR><FONT SIZE=3D2>&gt; &gt; To: Snort Users</FONT>

<BR><FONT SIZE=3D2>&gt; &gt; Subject: [Snort-users] What's up with =
Snort's license?</FONT>

<BR><FONT SIZE=3D2>&gt; &gt;</FONT>

<BR><FONT SIZE=3D2>&gt; &gt; -----BEGIN PGP SIGNED MESSAGE-----</FONT>

<BR><FONT SIZE=3D2>&gt; &gt; Hash: SHA1</FONT>

<BR><FONT SIZE=3D2>&gt; &gt;</FONT>

<BR><FONT SIZE=3D2>&gt; &gt; Hi everyone,</FONT>

<BR><FONT SIZE=3D2>&gt; &gt;</FONT>

<BR><FONT SIZE=3D2>&gt; &gt; I posted this message on my blog a few =
minutes ago, please read it</FONT>

<BR><FONT SIZE=3D2>&gt; &gt; and let me know what you think if you're =
interested in Snort</FONT>

<BR><FONT SIZE=3D2>&gt; &gt; licensing issues.</FONT>

<BR><FONT SIZE=3D2>&gt; &gt;</FONT>

<BR><FONT SIZE=3D2>&gt; &gt; - --</FONT>

<BR><FONT SIZE=3D2>&gt; &gt;</FONT>

<BR><FONT SIZE=3D2>&gt; &gt; There have been a lot of questions and =
speculation about the things</FONT>

<BR><FONT SIZE=3D2>&gt; &gt; we (Sourcefire) have been changing in =
Snort's licensing recently and</FONT>

<BR><FONT SIZE=3D2>&gt; &gt; it needs to be addressed so that we can =
clear the air.</FONT>

<BR><FONT SIZE=3D2>&gt; &gt;</FONT>

<BR><FONT SIZE=3D2>&gt; &gt; There are three things that people have =
been asking questions about</FONT>

<BR><FONT SIZE=3D2>&gt; &gt; or having issues with.</FONT>

<BR><FONT SIZE=3D2>&gt; &gt;</FONT>

<BR><FONT SIZE=3D2>&gt; &gt; 1) GPL v2 lock that we put in place on June =
29th.</FONT>

<BR><FONT SIZE=3D2>&gt; &gt; 2) &quot;Clarifications&quot; in Snort's =
license language (Snort 3.0).</FONT>

<BR><FONT SIZE=3D2>&gt; &gt; 3) &quot;Clarifications&quot; with regard =
to assignments of ownership for</FONT>

<BR><FONT SIZE=3D2>&gt; &gt; contributed code (Snort 3.0).</FONT>

<BR><FONT SIZE=3D2>&gt; &gt;</FONT>

<BR><FONT SIZE=3D2>&gt; &gt; Let me address these issues in =
order.</FONT>

<BR><FONT SIZE=3D2>&gt; &gt;</FONT>

<BR><FONT SIZE=3D2>&gt; &gt; 1) GPL v2 lock.</FONT>

<BR><FONT SIZE=3D2>&gt; &gt;</FONT>

<BR><FONT SIZE=3D2>&gt; &gt; Here's what happened. About 3 weeks ago I =
got a heads up that under</FONT>

<BR><FONT SIZE=3D2>&gt; &gt; GPL v2, a licensee can choose to use GPL v3 =
if we don't specify what</FONT>

<BR><FONT SIZE=3D2>&gt; &gt; version of the GPL to use; conceivably we =
could have people forking</FONT>

<BR><FONT SIZE=3D2>&gt; &gt; and changing license on us. Seeing as GPL =
v3 didn't even</FONT>

<BR><FONT SIZE=3D2>&gt; &gt; &quot;ship&quot; until</FONT>

<BR><FONT SIZE=3D2>&gt; &gt; June 29th we didn't feel like we were going =
to be able to make any</FONT>

<BR><FONT SIZE=3D2>&gt; &gt; decision on the language that was contained =
in the new version until</FONT>

<BR><FONT SIZE=3D2>&gt; &gt; we'd had some time to perform a formal =
legal review. It also didn't</FONT>

<BR><FONT SIZE=3D2>&gt; &gt; help that they decided to release on the =
last day of the quarter.</FONT>

<BR><FONT SIZE=3D2>&gt; &gt; Another contributing factor to the decision =
for me was that Linus</FONT>

<BR><FONT SIZE=3D2>&gt; &gt; decided to keep the Linux kernel at GPL v2, =
that in itself</FONT>

<BR><FONT SIZE=3D2>&gt; &gt; was enough</FONT>

<BR><FONT SIZE=3D2>&gt; &gt; to get me to hit the pause button and take =
some serious time</FONT>

<BR><FONT SIZE=3D2>&gt; &gt; reviewing this new license before making =
any decision. Linus himself</FONT>

<BR><FONT SIZE=3D2>&gt; &gt; said &quot;I'm not arguing against the =
GPLv3. I'm arguing that the GPLv3</FONT>

<BR><FONT SIZE=3D2>&gt; &gt; is wrong for _me_, and it's not the license =
I ever chose.&quot; It's not</FONT>

<BR><FONT SIZE=3D2>&gt; &gt; the license we chose either and we're not =
moving to it without a</FONT>

<BR><FONT SIZE=3D2>&gt; &gt; conscious decision to do so.</FONT>

<BR><FONT SIZE=3D2>&gt; &gt;</FONT>

<BR><FONT SIZE=3D2>&gt; &gt; If we didn't want the code base moving to =
the new version then what</FONT>

<BR><FONT SIZE=3D2>&gt; &gt; could we do? The simplest thing given the =
time constraints that we</FONT>

<BR><FONT SIZE=3D2>&gt; &gt; were working within was just to change the =
language in the source</FONT>

<BR><FONT SIZE=3D2>&gt; &gt; file header preambles (and not the license =
itself) noting that we</FONT>

<BR><FONT SIZE=3D2>&gt; &gt; were specifying Snort at GPL version 2 =
until we could make a solid</FONT>

<BR><FONT SIZE=3D2>&gt; &gt; and informed decision about how we wanted =
to treat GPL v3.</FONT>

<BR><FONT SIZE=3D2>&gt; &gt;</FONT>

<BR><FONT SIZE=3D2>&gt; &gt; For those of you with wholly contributed =
source files where the file</FONT>

<BR><FONT SIZE=3D2>&gt; &gt; headers were changed, many (most/all?) of =
them referred to &quot;the</FONT>

<BR><FONT SIZE=3D2>&gt; &gt; program&quot; as being under an indistinct =
version number (not just your</FONT>

<BR><FONT SIZE=3D2>&gt; &gt; source files) and so rather than try to =
track everyone down in the</FONT>

<BR><FONT SIZE=3D2>&gt; &gt; time frame we had to work with *I* made a =
unilateral decision</FONT>

<BR><FONT SIZE=3D2>&gt; &gt; to just</FONT>

<BR><FONT SIZE=3D2>&gt; &gt; move forward with it and we'd clean up the =
mess afterwards.</FONT>

<BR><FONT SIZE=3D2>&gt; &gt; I'm sorry</FONT>

<BR><FONT SIZE=3D2>&gt; &gt; for the &quot;bull in the china shop&quot; =
routine but we felt like we needed</FONT>

<BR><FONT SIZE=3D2>&gt; &gt; to have this language out there before GPL =
v3 shipped at noon EDT on</FONT>

<BR><FONT SIZE=3D2>&gt; &gt; June 29th. Clearly there were some mistakes =
made, obviously we</FONT>

<BR><FONT SIZE=3D2>&gt; &gt; shouldn't have changed things like the BSD =
license on the</FONT>

<BR><FONT SIZE=3D2>&gt; &gt; strl* files</FONT>

<BR><FONT SIZE=3D2>&gt; &gt; and so on, we'll fix that too. As Victor =
observed, this was done in</FONT>

<BR><FONT SIZE=3D2>&gt; &gt; something of a hurry. BTW, we didn't try to =
&quot;slip it out on a</FONT>

<BR><FONT SIZE=3D2>&gt; &gt; Friday&quot;</FONT>

<BR><FONT SIZE=3D2>&gt; &gt; per the note on some blog, Friday was the =
deadline and we had to&nbsp; </FONT>

<BR><FONT SIZE=3D2>&gt; move.</FONT>

<BR><FONT SIZE=3D2>&gt; &gt;</FONT>

<BR><FONT SIZE=3D2>&gt; &gt; Where do we go from here? We're going to =
examine the language in the</FONT>

<BR><FONT SIZE=3D2>&gt; &gt; new license and decide if we want to move =
forward with it. This is</FONT>

<BR><FONT SIZE=3D2>&gt; &gt; going to take a while but we'll make an =
announcement when we</FONT>

<BR><FONT SIZE=3D2>&gt; &gt; make the</FONT>

<BR><FONT SIZE=3D2>&gt; &gt; final decision. For those of you who have =
wholly authored source</FONT>

<BR><FONT SIZE=3D2>&gt; &gt; files that would like the language changed =
for your source</FONT>

<BR><FONT SIZE=3D2>&gt; &gt; files back</FONT>

<BR><FONT SIZE=3D2>&gt; &gt; to the original, with the provision that =
the language reflect that</FONT>

<BR><FONT SIZE=3D2>&gt; &gt; you're just referring to your file and not =
the entirety of the</FONT>

<BR><FONT SIZE=3D2>&gt; &gt; program, just let us (me) know and send us =
the verbage you want and</FONT>

<BR><FONT SIZE=3D2>&gt; &gt; we'll make the change. For those of you who =
object to this sort of</FONT>

<BR><FONT SIZE=3D2>&gt; &gt; thing all together that would like to =
maintain your code as an</FONT>

<BR><FONT SIZE=3D2>&gt; &gt; external patch set for Snort instead of in =
the main source</FONT>

<BR><FONT SIZE=3D2>&gt; &gt; tree, give</FONT>

<BR><FONT SIZE=3D2>&gt; &gt; us the heads up and we'll pull your code =
from the source trees. Once</FONT>

<BR><FONT SIZE=3D2>&gt; &gt; again, this is with the provision that we =
may reimplement the</FONT>

<BR><FONT SIZE=3D2>&gt; &gt; capabilities that your code offers as =
Sourcefire-authored code if it</FONT>

<BR><FONT SIZE=3D2>&gt; &gt; happens to be something that we consider =
important to the project.</FONT>

<BR><FONT SIZE=3D2>&gt; &gt;</FONT>

<BR><FONT SIZE=3D2>&gt; &gt; If anyone has any other input I'd be happy =
to hear it. Contrary to</FONT>

<BR><FONT SIZE=3D2>&gt; &gt; what several groups with vested interests =
seem to be promoting,</FONT>

<BR><FONT SIZE=3D2>&gt; &gt; Sourcefire isn't interested in closing =
Snort's source code or making</FONT>

<BR><FONT SIZE=3D2>&gt; &gt; this a closed-source project. The community =
continues to be</FONT>

<BR><FONT SIZE=3D2>&gt; &gt; important</FONT>

<BR><FONT SIZE=3D2>&gt; &gt; to us and we have no plans on that ever =
changing.</FONT>

<BR><FONT SIZE=3D2>&gt; &gt;</FONT>

<BR><FONT SIZE=3D2>&gt; &gt; 2) Snort 3.0 &quot;clarifications&quot; and =
the GPL</FONT>

<BR><FONT SIZE=3D2>&gt; &gt;</FONT>

<BR><FONT SIZE=3D2>&gt; &gt; There has been a fair amount of opinion =
being put forth by people in</FONT>

<BR><FONT SIZE=3D2>&gt; &gt; the blogging world that Snort 3.0 will no =
longer be &quot;open</FONT>

<BR><FONT SIZE=3D2>&gt; &gt; source&quot; due</FONT>

<BR><FONT SIZE=3D2>&gt; &gt; to the clarifications that we put in place. =
This is just plain&nbsp; </FONT>

<BR><FONT SIZE=3D2>&gt; wrong.</FONT>

<BR><FONT SIZE=3D2>&gt; &gt;</FONT>

<BR><FONT SIZE=3D2>&gt; &gt; Sourcefire produces Snort as an open source =
project. My interest as</FONT>

<BR><FONT SIZE=3D2>&gt; &gt; the guy who started this whole thing and =
who has worked on and</FONT>

<BR><FONT SIZE=3D2>&gt; &gt; advanced this project for closing in on 9 =
years now has always been</FONT>

<BR><FONT SIZE=3D2>&gt; &gt; how good we can make the technology and how =
well we can serve the</FONT>

<BR><FONT SIZE=3D2>&gt; &gt; needs of the community. Now that Snort has =
my company behind it, the</FONT>

<BR><FONT SIZE=3D2>&gt; &gt; priorities really haven't changed but =
there's an interesting dynamic</FONT>

<BR><FONT SIZE=3D2>&gt; &gt; out there with companies that are using =
Snort as a part of their</FONT>

<BR><FONT SIZE=3D2>&gt; &gt; product or service offering. Many of them =
seem to expect us to work</FONT>

<BR><FONT SIZE=3D2>&gt; &gt; on this technology and improve it =
continuously so that their</FONT>

<BR><FONT SIZE=3D2>&gt; &gt; offering</FONT>

<BR><FONT SIZE=3D2>&gt; &gt; is cutting edge but contribute nothing to =
the project and complain</FONT>

<BR><FONT SIZE=3D2>&gt; &gt; bitterly whenever we do something that =
might cost them some money to</FONT>

<BR><FONT SIZE=3D2>&gt; &gt; continue to use a best-of-breed technology =
like this.</FONT>

<BR><FONT SIZE=3D2>&gt; &gt;</FONT>

<BR><FONT SIZE=3D2>&gt; &gt; It's Free as in &quot;Free Speech&quot;, =
not Free as in &quot;Free Money&quot; people!</FONT>

<BR><FONT SIZE=3D2>&gt; &gt; Companies that use Snort as part of a =
service or product seem to be</FONT>

<BR><FONT SIZE=3D2>&gt; &gt; having a tough time accepting this. The =
goal of the new licensing</FONT>

<BR><FONT SIZE=3D2>&gt; &gt; language is to define what we consider to =
constitute</FONT>

<BR><FONT SIZE=3D2>&gt; &gt; conditions under</FONT>

<BR><FONT SIZE=3D2>&gt; &gt; which something built on or around Snort is =
a derivative work</FONT>

<BR><FONT SIZE=3D2>&gt; &gt; subject</FONT>

<BR><FONT SIZE=3D2>&gt; &gt; to the stipulations of the GPL (i.e. =
putting the derivative code</FONT>

<BR><FONT SIZE=3D2>&gt; &gt; under the GPL license). Despite all the =
gnashing of teeth that has</FONT>

<BR><FONT SIZE=3D2>&gt; &gt; resulted from this clarification, what =
we've really done is take</FONT>

<BR><FONT SIZE=3D2>&gt; &gt; about the most &quot;open&quot; stance you =
can with a GPL project and put it</FONT>

<BR><FONT SIZE=3D2>&gt; &gt; out there, true open source champions =
should be applauding us</FONT>

<BR><FONT SIZE=3D2>&gt; &gt; for our</FONT>

<BR><FONT SIZE=3D2>&gt; &gt; position.</FONT>

<BR><FONT SIZE=3D2>&gt; &gt;</FONT>

<BR><FONT SIZE=3D2>&gt; &gt; That didn't happen. Instead we've gotten a =
litany of grousing from</FONT>

<BR><FONT SIZE=3D2>&gt; &gt; the blogerati, primarily because we've =
offered a commercial license</FONT>

<BR><FONT SIZE=3D2>&gt; &gt; for people who don't want to play by the =
rules of the GPL in their</FONT>

<BR><FONT SIZE=3D2>&gt; &gt; product and service offerings that will =
(*gasp*!) cost money. If</FONT>

<BR><FONT SIZE=3D2>&gt; &gt; you're licensing technology from Sourcefire =
(which all of you using</FONT>

<BR><FONT SIZE=3D2>&gt; &gt; the GPL version of Snort are doing) and you =
don't wish to live under</FONT>

<BR><FONT SIZE=3D2>&gt; &gt; the terms of that license, we're giving you =
another one to choose</FONT>

<BR><FONT SIZE=3D2>&gt; &gt; from. If you don't like having world-class =
security technology</FONT>

<BR><FONT SIZE=3D2>&gt; &gt; available for a fee because it affects your =
cost structure, that's</FONT>

<BR><FONT SIZE=3D2>&gt; &gt; not my problem. If you want to use it for =
free then you have to live</FONT>

<BR><FONT SIZE=3D2>&gt; &gt; by the license but people always seem to =
interpret the GPL in ways</FONT>

<BR><FONT SIZE=3D2>&gt; &gt; that are optimally advantageous to them (if =
they don't just take the</FONT>

<BR><FONT SIZE=3D2>&gt; &gt; code directly and bury it in their =
product). The clarifications we</FONT>

<BR><FONT SIZE=3D2>&gt; &gt; put into Snort 3 are there to get us all on =
the same page and</FONT>

<BR><FONT SIZE=3D2>&gt; &gt; to make</FONT>

<BR><FONT SIZE=3D2>&gt; &gt; sure that commercial users of the =
technology understand that we're</FONT>

<BR><FONT SIZE=3D2>&gt; &gt; not a &quot;venture technology&quot; =
company, giving them technology for free</FONT>

<BR><FONT SIZE=3D2>&gt; &gt; to enable their business models which =
frequently compete against us</FONT>

<BR><FONT SIZE=3D2>&gt; &gt; in some regard. There's nothing wrong with =
using Snort as a part of</FONT>

<BR><FONT SIZE=3D2>&gt; &gt; your commercial offering as long as you =
adhere to its</FONT>

<BR><FONT SIZE=3D2>&gt; &gt; license. If you</FONT>

<BR><FONT SIZE=3D2>&gt; &gt; can't do that then we need to talk.</FONT>

<BR><FONT SIZE=3D2>&gt; &gt;</FONT>

<BR><FONT SIZE=3D2>&gt; &gt; At the same time we've taken many measures =
to ensure that the end</FONT>

<BR><FONT SIZE=3D2>&gt; &gt; users of the technology are unaffected. =
Want to integrate Snort or</FONT>

<BR><FONT SIZE=3D2>&gt; &gt; part of Snort into your open source =
project? No problem, it's free.</FONT>

<BR><FONT SIZE=3D2>&gt; &gt; Want to deploy 100 home-made Snort sensors =
in your non-profit/</FONT>

<BR><FONT SIZE=3D2>&gt; &gt; enterprise/government organization ? Go for =
it. Want to learn how</FONT>

<BR><FONT SIZE=3D2>&gt; &gt; these systems work at the code level? No =
problem, it's all there.</FONT>

<BR><FONT SIZE=3D2>&gt; &gt; Want transparency of your security =
technology and the content that</FONT>

<BR><FONT SIZE=3D2>&gt; &gt; drives it? It's all there, as it should be. =
Want to have access to</FONT>

<BR><FONT SIZE=3D2>&gt; &gt; the internals to extend or correct or add =
your own value to the</FONT>

<BR><FONT SIZE=3D2>&gt; &gt; project or just your operational =
environment? All part of the open</FONT>

<BR><FONT SIZE=3D2>&gt; &gt; source concept, make it happen. Want to =
fork and make your own IPS</FONT>

<BR><FONT SIZE=3D2>&gt; &gt; project built on the code-base? You can do =
that, just make sure you</FONT>

<BR><FONT SIZE=3D2>&gt; &gt; understand what you're doing in maintaining =
proper licensing for the</FONT>

<BR><FONT SIZE=3D2>&gt; &gt; forked project and respect our IP.</FONT>

<BR><FONT SIZE=3D2>&gt; &gt;</FONT>

<BR><FONT SIZE=3D2>&gt; &gt; I personally have *always* been the biggest =
advocate for the</FONT>

<BR><FONT SIZE=3D2>&gt; &gt; users of</FONT>

<BR><FONT SIZE=3D2>&gt; &gt; Snort since the day this company was formed =
and I always will be.</FONT>

<BR><FONT SIZE=3D2>&gt; &gt;</FONT>

<BR><FONT SIZE=3D2>&gt; &gt; 3) Snort 3.0 and IP assignments</FONT>

<BR><FONT SIZE=3D2>&gt; &gt;</FONT>

<BR><FONT SIZE=3D2>&gt; &gt; This is the most controversial provision of =
the clarifications that</FONT>

<BR><FONT SIZE=3D2>&gt; &gt; we put into the Snort 3.0 license. =
Basically what it says is:</FONT>

<BR><FONT SIZE=3D2>&gt; &gt;</FONT>

<BR><FONT SIZE=3D2>&gt; &gt; * By sending these changes to Sourcefire or =
one of the Sourcefire-</FONT>

<BR><FONT SIZE=3D2>&gt; &gt; moderated</FONT>

<BR><FONT SIZE=3D2>&gt; &gt; * mailing lists or forums, you are granting =
to Sourcefire, Inc. the</FONT>

<BR><FONT SIZE=3D2>&gt; &gt; unlimited,</FONT>

<BR><FONT SIZE=3D2>&gt; &gt; * perpetual, non-exclusive right to reuse, =
modify, and/or relicense</FONT>

<BR><FONT SIZE=3D2>&gt; &gt; the code.</FONT>

<BR><FONT SIZE=3D2>&gt; &gt; * Snort will always be available Open =
Source, but this is important</FONT>

<BR><FONT SIZE=3D2>&gt; &gt; * because the inability to relicense code =
has caused devastating</FONT>

<BR><FONT SIZE=3D2>&gt; &gt; problems for</FONT>

<BR><FONT SIZE=3D2>&gt; &gt; * other Free Software projects (such as KDE =
and NASM). We also</FONT>

<BR><FONT SIZE=3D2>&gt; &gt; occasionally</FONT>

<BR><FONT SIZE=3D2>&gt; &gt; * relicense the code to third parties as =
discussed above. If</FONT>

<BR><FONT SIZE=3D2>&gt; &gt; you wish to</FONT>

<BR><FONT SIZE=3D2>&gt; &gt; * specify special license conditions of =
your contributions, just say</FONT>

<BR><FONT SIZE=3D2>&gt; &gt; so when</FONT>

<BR><FONT SIZE=3D2>&gt; &gt; * you send them.</FONT>

<BR><FONT SIZE=3D2>&gt; &gt;</FONT>

<BR><FONT SIZE=3D2>&gt; &gt; So what's that mean? If you send a patch to =
the mailing lists or to</FONT>

<BR><FONT SIZE=3D2>&gt; &gt; Sourcefire, if you contribute code to the =
Snort project we consider</FONT>

<BR><FONT SIZE=3D2>&gt; &gt; that code and it's IP to be =
&quot;assigned&quot; to us. The reason for doing</FONT>

<BR><FONT SIZE=3D2>&gt; &gt; this should be pretty clear, we don't feel =
that contributing</FONT>

<BR><FONT SIZE=3D2>&gt; &gt; a 3-line</FONT>

<BR><FONT SIZE=3D2>&gt; &gt; patch to a 200k+ LOC codebase means that =
the contributer has</FONT>

<BR><FONT SIZE=3D2>&gt; &gt; copyright claims over Snort at that point. =
In the early years there</FONT>

<BR><FONT SIZE=3D2>&gt; &gt; were many people who contributed (in any =
way) to Snort but over the</FONT>

<BR><FONT SIZE=3D2>&gt; &gt; years since Sourcefire was incorporated the =
total contribution by</FONT>

<BR><FONT SIZE=3D2>&gt; &gt; these external contributers has decreased =
substantially. After that,</FONT>

<BR><FONT SIZE=3D2>&gt; &gt; Sourcefire developed more and more of the =
code, especially the core</FONT>

<BR><FONT SIZE=3D2>&gt; &gt; functionality of the detection engine and =
preprocessors, not to</FONT>

<BR><FONT SIZE=3D2>&gt; &gt; mention tons of the rules as well. I have =
felt for a long time that</FONT>

<BR><FONT SIZE=3D2>&gt; &gt; we need to have a sense of proportionality =
about this and we should</FONT>

<BR><FONT SIZE=3D2>&gt; &gt; also have the ability to be flexible with =
the code base in terms of</FONT>

<BR><FONT SIZE=3D2>&gt; &gt; licensing without needing to approach every =
contributer individually</FONT>

<BR><FONT SIZE=3D2>&gt; &gt; to get sign-off on any changes that we =
make. That's why we've put</FONT>

<BR><FONT SIZE=3D2>&gt; &gt; this provision into Snort 3.0.</FONT>

<BR><FONT SIZE=3D2>&gt; &gt;</FONT>

<BR><FONT SIZE=3D2>&gt; &gt; This &quot;assumptive assignment&quot; is =
exactly what projects like Nmap use.</FONT>

<BR><FONT SIZE=3D2>&gt; &gt; Perhaps we should take the next step and =
use the FSF's model where</FONT>

<BR><FONT SIZE=3D2>&gt; &gt; contributers to projects like GCC need to =
sign a legal document</FONT>

<BR><FONT SIZE=3D2>&gt; &gt; explicitly to contribute to the project. =
The FSF does this because</FONT>

<BR><FONT SIZE=3D2>&gt; &gt; they need to have flexibility but also =
because they need to get out</FONT>

<BR><FONT SIZE=3D2>&gt; &gt; from under any potential problems that may =
occur due to someone</FONT>

<BR><FONT SIZE=3D2>&gt; &gt; inappropriately contributing IP from a 3rd =
party. I don't like that</FONT>

<BR><FONT SIZE=3D2>&gt; &gt; concept because of the overhead associated =
with interacting with the</FONT>

<BR><FONT SIZE=3D2>&gt; &gt; project, Snort's not a huge project like =
GCC so I've liked that</FONT>

<BR><FONT SIZE=3D2>&gt; &gt; people can contribute as they see fit. The =
FSF does take one</FONT>

<BR><FONT SIZE=3D2>&gt; &gt; additional step, they guarantee that the =
projects that people make</FONT>

<BR><FONT SIZE=3D2>&gt; &gt; assignments to will be available as open =
source projects in</FONT>

<BR><FONT SIZE=3D2>&gt; &gt; perpetuity. I think that maybe we need to =
make a statement like that</FONT>

<BR><FONT SIZE=3D2>&gt; &gt; but quite frankly it's always been our =
position that Snort will</FONT>

<BR><FONT SIZE=3D2>&gt; &gt; always be available as Free Software and we =
have no intention to</FONT>

<BR><FONT SIZE=3D2>&gt; &gt; change our position ever.</FONT>

<BR><FONT SIZE=3D2>&gt; &gt;</FONT>

<BR><FONT SIZE=3D2>&gt; &gt; I think that the part of this provision =
that people have had</FONT>

<BR><FONT SIZE=3D2>&gt; &gt; the most</FONT>

<BR><FONT SIZE=3D2>&gt; &gt; trouble with is that we also retain the =
right to relicense the</FONT>

<BR><FONT SIZE=3D2>&gt; &gt; contributed code under alternative =
licenses. We have to be</FONT>

<BR><FONT SIZE=3D2>&gt; &gt; able to do</FONT>

<BR><FONT SIZE=3D2>&gt; &gt; that if we're going to offer alternative =
licenses to Snort,</FONT>

<BR><FONT SIZE=3D2>&gt; &gt; maintaining a &quot;patch free&quot; code =
branch and a &quot;patch tainted&quot; branch</FONT>

<BR><FONT SIZE=3D2>&gt; &gt; doesn't make any sense to me and probably =
not to you either. The</FONT>

<BR><FONT SIZE=3D2>&gt; &gt; assignment doesn't mean we're going to =
&quot;steal&quot; your code and</FONT>

<BR><FONT SIZE=3D2>&gt; &gt; &quot;disappear&quot; it CIA-style. It =
means that we need to be able to retain</FONT>

<BR><FONT SIZE=3D2>&gt; &gt; the right to offer it under our commercial =
license. The code you</FONT>

<BR><FONT SIZE=3D2>&gt; &gt; contribute will always be available to you =
and everyone else in the</FONT>

<BR><FONT SIZE=3D2>&gt; &gt; open source code base, we're not going to =
steal it but we are going</FONT>

<BR><FONT SIZE=3D2>&gt; &gt; to make it available to our commercial =
users. If you've got a</FONT>

<BR><FONT SIZE=3D2>&gt; &gt; problem</FONT>

<BR><FONT SIZE=3D2>&gt; &gt; with this, don't contribute the code to us, =
maintain it as an</FONT>

<BR><FONT SIZE=3D2>&gt; &gt; external patch.</FONT>

<BR><FONT SIZE=3D2>&gt; &gt;</FONT>

<BR><FONT SIZE=3D2>&gt; &gt; That's about it. I'm sorry we haven't been =
as communicative with the</FONT>

<BR><FONT SIZE=3D2>&gt; &gt; OSS community as we probably should be, I =
personally have a lot of</FONT>

<BR><FONT SIZE=3D2>&gt; &gt; demands on my time and I'm the person at SF =
who's the most familiar</FONT>

<BR><FONT SIZE=3D2>&gt; &gt; with the totality of the Snort project so I =
have a lot of input into</FONT>

<BR><FONT SIZE=3D2>&gt; &gt; the process here and I'm also fairly =
parochial regarding</FONT>

<BR><FONT SIZE=3D2>&gt; &gt; communicating concepts like this to the =
user community. In</FONT>

<BR><FONT SIZE=3D2>&gt; &gt; the future</FONT>

<BR><FONT SIZE=3D2>&gt; &gt; I'll try to be more forthcoming with all of =
you and I hope you'll</FONT>

<BR><FONT SIZE=3D2>&gt; &gt; continue to be patient with both me and =
Sourcefire; our</FONT>

<BR><FONT SIZE=3D2>&gt; &gt; hearts really</FONT>

<BR><FONT SIZE=3D2>&gt; &gt; are in the right place with the users of =
this technology but we also</FONT>

<BR><FONT SIZE=3D2>&gt; &gt; have to be pragmatic about how all of this =
is going to work</FONT>

<BR><FONT SIZE=3D2>&gt; &gt; given all</FONT>

<BR><FONT SIZE=3D2>&gt; &gt; of the commercial use that Snort =
sees.</FONT>

<BR><FONT SIZE=3D2>&gt; &gt;</FONT>

<BR><FONT SIZE=3D2>&gt; &gt; We're trying to be pragmatic about these =
issues, I hope that people</FONT>

<BR><FONT SIZE=3D2>&gt; &gt; can feel comfortable with the direction =
that we're taking things. I</FONT>

<BR><FONT SIZE=3D2>&gt; &gt; look forward to reading people's =
responses.</FONT>

<BR><FONT SIZE=3D2>&gt; &gt;</FONT>

<BR><FONT SIZE=3D2>&gt; &gt;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; =
-Marty</FONT>

<BR><FONT SIZE=3D2>&gt; &gt;</FONT>

<BR><FONT SIZE=3D2>&gt; &gt; - --</FONT>

<BR><FONT SIZE=3D2>&gt; &gt; Martin Roesch - Founder/CTO, Sourcefire =
Inc. - +1-410-290-1616</FONT>

<BR><FONT SIZE=3D2>&gt; &gt; Sourcefire - Security for the Real World - =
<A =
HREF=3D"http://www.sourcefire.com">http://www.sourcefire.com</A></FONT>

<BR><FONT SIZE=3D2>&gt; &gt; Snort: Open Source IDP - <A =
HREF=3D"http://www.snort.org">http://www.snort.org</A></FONT>

<BR><FONT SIZE=3D2>&gt; &gt;</FONT>

<BR><FONT SIZE=3D2>&gt; &gt;</FONT>

<BR><FONT SIZE=3D2>&gt; &gt;</FONT>

<BR><FONT SIZE=3D2>&gt; &gt;</FONT>

<BR><FONT SIZE=3D2>&gt; &gt; -----BEGIN PGP SIGNATURE-----</FONT>

<BR><FONT SIZE=3D2>&gt; &gt; Version: GnuPG v1.4.5 (Darwin)</FONT>

<BR><FONT SIZE=3D2>&gt; &gt;</FONT>

<BR><FONT SIZE=3D2>&gt; &gt; =
iD8DBQFGnmCYqj0FAQQ3KOARAr6wAJ9H4EKBvqQIBsI7dx+H7b Fb6hnvVACeICZu</FONT>

<BR><FONT SIZE=3D2>&gt; &gt; kqjs5CsDqD8cQhP2LA9hUpM=3D</FONT>

<BR><FONT SIZE=3D2>&gt; &gt; =3DBWUO</FONT>

<BR><FONT SIZE=3D2>&gt; &gt; -----END PGP SIGNATURE-----</FONT>

<BR><FONT SIZE=3D2>&gt; &gt;</FONT>

<BR><FONT SIZE=3D2>&gt; &gt; =
--------------------------------------------------------------</FONT>

<BR><FONT SIZE=3D2>&gt; &gt; -----------</FONT>

<BR><FONT SIZE=3D2>&gt; &gt; This SF.net email is sponsored by DB2 =
Express</FONT>

<BR><FONT SIZE=3D2>&gt; &gt; Download DB2 Express C - the FREE version =
of DB2 express and take</FONT>

<BR><FONT SIZE=3D2>&gt; &gt; control of your XML. No limits. Just data. =
Click to get it now.</FONT>

<BR><FONT SIZE=3D2>&gt; &gt; <A =
HREF=3D"http://sourceforge.net/powerbar/db2/">http://sourceforge.net/powe=
rbar/db2/</A></FONT>

<BR><FONT SIZE=3D2>&gt; &gt; =
_______________________________________________</FONT>

<BR><FONT SIZE=3D2>&gt; &gt; Snort-users mailing list</FONT>

<BR><FONT SIZE=3D2>&gt; &gt; Snort-users@lists.sourceforge.net</FONT>

<BR><FONT SIZE=3D2>&gt; &gt; Go to this URL to change user options or =
unsubscribe:</FONT>

<BR><FONT SIZE=3D2>&gt; &gt; <A =
HREF=3D"https://lists.sourceforge.net/lists/listinfo/snort-users">https:/=
/lists.sourceforge.net/lists/listinfo/snort-users</A></FONT>

<BR><FONT SIZE=3D2>&gt; &gt; Snort-users list archive:</FONT>

<BR><FONT SIZE=3D2>&gt; &gt; <A =
HREF=3D"http://www.geocrawler.com/redir-sf.php3?list=3Dsnort-users">http:=
//www.geocrawler.com/redir-sf.php3?list=3Dsnort-users</A></FONT>

<BR><FONT SIZE=3D2>&gt; &gt;</FONT>

<BR><FONT SIZE=3D2>&gt;</FONT>

<BR><FONT SIZE=3D2>&gt; =
_______________________________________________</FONT>

<BR><FONT SIZE=3D2>&gt; Bleeding-sigs mailing list</FONT>

<BR><FONT SIZE=3D2>&gt; Bleeding-sigs@bleedingthreats.net</FONT>

<BR><FONT SIZE=3D2>&gt; <A =
HREF=3D"http://lists.bleedingthreats.net/cgi-bin/mailman/listinfo/bleedin=
g-">http://lists.bleedingthreats.net/cgi-bin/mailman/listinfo/bleeding-</=
A> </FONT>

<BR><FONT SIZE=3D2>&gt; sigs</FONT>

<BR><FONT SIZE=3D2>&gt;</FONT>

<BR><FONT SIZE=3D2>&gt; No virus found in this incoming message.</FONT>

<BR><FONT SIZE=3D2>&gt; Checked by AVG Free Edition.</FONT>

<BR><FONT SIZE=3D2>&gt; Version: 7.5.476 / Virus Database: 269.10.9/907 =
- Release Date:&nbsp; </FONT>

<BR><FONT SIZE=3D2>&gt; 7/18/2007 3:30 PM</FONT>

<BR><FONT SIZE=3D2>&gt;</FONT>

<BR><FONT SIZE=3D2>&gt;</FONT>

<BR><FONT SIZE=3D2>&gt;</FONT>
</P>

<P><FONT SIZE=3D2>- --</FONT>

<BR><FONT SIZE=3D2>Martin Roesch - Founder/CTO, Sourcefire Inc. - =
+1-410-290-1616</FONT>

<BR><FONT SIZE=3D2>Sourcefire - Security for the Real World - <A =
HREF=3D"http://www.sourcefire.com">http://www.sourcefire.com</A></FONT>

<BR><FONT SIZE=3D2>Snort: Open Source IDP - <A =
HREF=3D"http://www.snort.org">http://www.snort.org</A></FONT>
</P>
<BR>
<BR>
<BR>

<P><FONT SIZE=3D2>-----BEGIN PGP SIGNATURE-----</FONT>

<BR><FONT SIZE=3D2>Version: GnuPG v1.4.5 (Darwin)</FONT>
</P>

<P><FONT =
SIZE=3D2>iD8DBQFGpQi+qj0FAQQ3KOARAlKcAJ9ovWh/a0uiO02pD7Twwd6aXaiUmgCeMU8h=
</FONT>

<BR><FONT SIZE=3D2>VE+YthSs53Gpi5gCnlmzzrM=3D</FONT>

<BR><FONT SIZE=3D2>=3DYf7L</FONT>

<BR><FONT SIZE=3D2>-----END PGP SIGNATURE-----</FONT>

<BR><FONT =
SIZE=3D2>_________________________________________ ______</FONT>

<BR><FONT SIZE=3D2>Bleeding-sigs mailing list</FONT>

<BR><FONT SIZE=3D2>Bleeding-sigs@bleedingthreats.net</FONT>

<BR><FONT SIZE=3D2><A =
HREF=3D"http://lists.bleedingthreats.net/cgi-bin/mailman/listinfo/bleedin=
g-sigs">http://lists.bleedingthreats.net/cgi...tinfo/bleedin=
g-sigs</A></FONT>
<BR>

<BR><FONT SIZE=3D2>No virus found in this incoming message.<BR>
Checked by AVG Free Edition.<BR>
Version: 7.5.476 / Virus Database: 269.10.16/914 - Release Date: =
7/23/2007 7:45 PM<BR>
</FONT>&nbsp;
</P>

</BODY>
</HTML>


--===============1288488642==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

-------------------------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc.
Still grepping through log files to find problems? Stop.
Now Search log events and configuration files using AJAX and a browser.
Download your FREE copy of Splunk now >> http://get.splunk.com/
--===============1288488642==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

_______________________________________________
Snort-users mailing list
Snort-users@lists.sourceforge.net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/...fo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.p...st=snort-users
--===============1288488642==--
Reply With Quote
Reply
Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are Off
[IMG] code is Off
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On



All times are GMT +1. The time now is 08:33 AM.


Powered by vBulletin® Version 3.7.3
Copyright ©2000 - 2008, Jelsoft Enterprises Ltd.
Content Relevant URLs by vBSEO 3.0.0