Re: snort rules

[Paul Schmehl <pauls () utdallas edu>]

--On Thursday, April 28, 2005 06:01:01 PM -0400 Matt Kettler 
<mkettler () evi-inc com> wrote:
> You only have to pay to get the rules written by sourcefire's VRT group
> in a timely fashion. You can get them for free with a 5 day delay.
>
> Community written rules are also still freely updated on a timely basis.
The more I think about this, the more I like it.  The only people this 
change penalizes are vendors who *used* to "steal" snort without giving 
Sourcefire and Marty any credit and who want to convince their customers 
that they *always* have the latest and greatest rules (so they can't afford 
to wait the five days.)  And that's exactly why this change was made.

The average schmoo like me can get their rules from anywhere or write their 
own.  And five days after the "big boys" get theirs, I have the *same* 
rules they do.

Seems like a win-win to me.

Paul Schmehl (pauls () utdallas edu)
Adjunct Information Security Officer
The University of Texas at Dallas
AVIEN Founding Member
http://www.utdallas.edu


-------------------------------------------------------
SF.Net email is sponsored by: Tell us your software development plans!
Take this survey and enter to win a one-year sub to SourceForge.net
Plus IDC's 2005 look-ahead and a copy of this survey
Click here to start!  http://www.idcswdc.com/cgi-bin/survey?id=105hix
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users