[Snort-users] Snort Users Yahoo Group

Jeff Nathan jeff at ...950...
Sun Jun 22 13:21:02 EDT 2003

Hash: SHA1

- --On Saturday, June 21, 2003 09:33:15 -0700 "Roy S. Rapoport" 
<snort-users at ...9230...> wrote:


> -- I think a fair amount of it is "How do I get Snort logging to MySQL?"
> -- but the problem is still that really, snort-users should be a rather
> low-volume list, and we need snort-newusers (or snort-setup) and then --
> *MAYBE* -- snort-3rdparty-setup (though for God's sake, with a better
> name than that).

snort-newbies or snort-setup are appropriate names.

> However, if we do go ahead and do this, I'd argue there's a need to have
> all three lists reside in the same place and advertised through
> snort.org.  I think the vast majority of people who land on this mailing
> list find it because they've downloaded snort from Snort.org and seen
> Snort's link to this mailing list.  It's foolish to wait until someone
> posts to say "hey, you should go to this other mailing list."


> As for the 3rd-party tools, I have to admit I didn't even notice ACID
> had its own user mailing list hosted on sourceforge.  Of course, of the
> 13 messages posted in June, it appears approximately 11 are spam, so
> it's obviously not being vigorously managed.  I do think we should start
> responding to ACID questions with "That's not appropriate for this
> mailing list," though I'm not sure we have enough cantankerous assholes
> to maintain that as a consistent tone.  I do very strongly support the
> idea of a mailing list for each widely-adopted tool.  I'm not sure
> what's going to happen in the case of SnortCenter.  I'm guessing Lars
> doesn't have a whole bunch of energy/desire to deal with the support
> side of it (and in the case of SC, I think there's a danger anyway
> because it is so dependent on the efforts of one person).
> -roy

If the ACID list is unmaintained, there's nothing we can do about it.  Once 
a new list is created, list users would be expected to abide by the posting 

I do not mean to single out SnortCenter or ACID, it's by no means an easy 
effort to support a third party component in your spare time. 
Nevertheless, these components (and a few others) result in a 
disproportional amount of traffic to snort-users.  If people want to use 
these components, something has to give.  More documentation is needed 
(written by experienced users and the authors of these components), as well 
as a better place to ask questions about these components.

Brian/Marty, any interest in a t-shirt program for writing third-party 
component documentation?

- -Jeff

- --
http://cerberus.sourcefire.com/~jeff       (pgp key available)
"Great spirits have always encountered violent opposition from mediocre
- - Albert Einstein
Version: GnuPG v1.0.7 (OpenBSD)


More information about the Snort-users mailing list