Language Selection

English French German Italian Portuguese Spanish

Sourcefire's Roesch pledges long, open-source life for Snort

Filed under

Many users in the Snort community are interested in the Check Point acquisition. What's happened since the acquisition?

Roesch: Well, the fact that we're going to have more resources at our fingertips to continue to advance Snort. More people in research, developers, QA people, [and] the quality of the technology should continue to improve more rapidly. We have a lot of ideas as far as where detection technology needs to go to remain relevant. I don't think the end-all, be-all of detection technology is deep-packet inspection. I think that that's one approach, but it ignores a whole lot of problems that aren't going to be ignored by the bad guys forever. We're working hard to combat those kinds of problems and bring people more effective, powerful analysis technology. So the Snort community should be thrilled because we're going to pour a lot of interesting ideas and hard work into this technology that they're still going to benefit from.

There's a lot of skepticism from the Snort users right now because they're in wait-and-see mode, so we need to prove to them that we mean it when we say Snort's going to get a lot better. We're not going to try to close it or anything like that. Once they see how much benefiting, they're going to be really happy.

Full Interview.

More in Tux Machines

Games for GNU/Linux

Linux Foundation and Linux

  • Intel Has Been Working On MIPI SoundWire Support For Linux
    An Intel developer has published testing patches for providing a SoundWire bus driver within the Linux kernel, which implements the MIPI SoundWire 1.1 specification. For those unfamiliar with SoundWire as was I when coming across these patches, "The SoundWire protocol is a robust, scalable, low complexity, low power, low latency, two-pin (clock and data) multi-drop bus that allows for the transfer of multiple audio streams and embedded control/commands. SoundWire provides synchronization capabilities and supports both PCM and PDM, multichannel data, isochronous and asynchronous modes. SoundWire does borrow a number of concepts from existing interfaces such as HDAudio, AC97, SLIMbus, which already provide control/audio on the same wires, or legacy interfaces such as I2C/I2S, TDM, PDM."
  • Linux Perf Gets New "C2C" Tool For False Sharing Detection
    The perf code for Linux 4.10 is set to receive a new "c2c" tool. The C2C tool within the perf subsystem is aimed to track down cacheline contention and has already been used by developers in tracking down false sharing of large applications, readers/writes to cachelines, and related information to assist NUMA shared-memory applications.
  • OOPS! Sometimes Even Linus Gets It Wrong!
  • OpenTracing: Turning the Lights On for Microservices
    Those building microservices at scale understand the role and importance of distributed tracing: after all, it’s the most direct way to understand how and why complex systems misbehave. When we deployed Dapper at Google in 2005, it was like someone finally turned the lights on: everything from ordinary programming errors to broken caches to bad network hardware to unknown dependencies came into plain view.
  • Linux Foundation Spurs JavaScript Development

NVIDIA 375.10

  • NVIDIA 375.10 Linux Driver Released, Supports GTX 1050 Series
  • Nvidia 375.10 Beta Linux Graphics Driver Released with GeForce GTX 1050 Support
    On October 20, 2016, Nvidia published a new Beta graphics driver for the Linux platform, adding support for some new GPUs the company launched recently, as well as various improvements and bug fixes. The Nvidia 375.10 Beta is now available for early adopters, but we don't recommend installing it just yet if you're looking for a stable and reliable gaming experience, adding support for Nvidia's recently announced Nvidia GeForce GTX 1050 and GeForce GTX 1050 Ti graphics cards, as well as Nvidia Quadro P6000 and Nvidia Quadro P5000 GPUs. Another interesting change implemented in the new Beta video driver, which should hit the stable channels next month, is the addition of two new X11 configuration options, namely ForceCompositionPipeline and ForceFullCompositionPipeline, overriding the MetaMode tokens with the same names.

Deus Ex: Mankind Divided for GNU/Linux