Slashdot Mirror


Snort Creator Makes Good

Anonymous Coward writes: "Robin Miller, aka Roblimo, has written a great analysis of one of the first Open Source companies to be profitable before their IPO, Sourcefire! In this 'local boy makes good', we read about Team Fortress-playing programmer Marty Roesch, who writes Snort to beat his online gaming addiction. Now Snort is one of the most successful Intrusion Detection Systems out there and Marty's start-up is going gangbusters. Robin explains how Marty's company started in his basement (like Apple's garage), got profitable, then got venture capital in a time when everyone swears there is no venture. Marty even offers jobs at Sourcefire for the Slashdot crowd, 'Linux zealots, Open Source gurus, self-starters who are self motivating so I can just turn them loose...'"

288 comments

  1. Careers? by cp4 · · Score: 5, Informative

    Clicked on Careers and don't see anything for Linux zealots...

    Technical Writer and Marketing Manager don't quite fit the bill.

    Am I looking in the wrong place?

    1. Re:Careers? by carlos_benj · · Score: 1

      Clicked on Careers and don't see anything for Linux zealots...

      Technical Writer and Marketing Manager don't quite fit the bill.


      Hmmm. I take it you've never been in marketing....

      --

      --

      As a matter of fact, I am a lawyer. But I play an actor on TV.

    2. Re:Careers? by IXI · · Score: 0

      Ouch! That's so stupid, it hurts!

      --
      He saw some dirty arabs and fired. Too bad it was just some friendly kurds, BBC reporters and his fellow cowboys.
    3. Re:Careers? by Anonymous Coward · · Score: 0

      If it is Open Source, and he wants self starters, why wouldn't these self starters just take his Open Source, and start themselves right into their own business?

      Obviously he is only selling service and support. I can sell service and support myself. Cut out my own niche, sell it cheaper than him, and garuntee it is just as good as his big company (since it is the same code).

      Some people just don't get it.

    4. Re:Careers? by norweigiantroll · · Score: 0, Troll

      How the heck did that get moderated 'Informative'? Troll, flamebait or at least funny would be better.

    5. Re:Careers? by Anonymous Coward · · Score: 0

      I found that post very informative.

      I find yours hurtful. I hope you get modded down.

    6. Re:Careers? by Anonymous Coward · · Score: 0

      Linux Zealot is a trademark of adequacy.org

    7. Re:Careers? by Hast · · Score: 2, Interesting

      If you're interested in a job why don't you just fire off a mail to them? It's not too uncommon these days (with the market a bit down) for companys to hire because they have heard of you before.

      They said they wanted forward people after all, contacting them before they ask you too is rather forward. (Just don't be pushy about it, just ask them to add your CV to their pile.)

      You could also do as someone said and download the source and start poking around. (And the two are not mutually exclusive, of course.)

    8. Re:Careers? by Anonymous Coward · · Score: 0

      read the article...he's not just offering support.

    9. Re:Careers? by Anonymous Coward · · Score: 0

      If you find the first post informative you should better have a look at "Free Software".
      That's really informative.

    10. Re:Careers? by Anonymous Coward · · Score: 0

      > How the heck did that get moderated 'Informative'? Troll, flamebait or at least funny would be better.

      How the heck did that get moderated 'Troll'? Seem to be some very biased people modding today.

  2. Misread the headline... by Anonymous Coward · · Score: 5, Funny

    ...and thought it was "Snort Creator Makes God".

    I was like, whoa, cool...

    1. Re:Misread the headline... by Anonymous Coward · · Score: 0

      I was like, whoa, cool...

      Thank you, Keanu

    2. Re:Misread the headline... by Anonymous Coward · · Score: 0

      Dude, you're totally welcome.

    3. Re:Misread the headline... by Anonymous Coward · · Score: 0

      I thought it said "Snot Creator Makes Gourd".

  3. Snort Slashdotted. by MisterBlister · · Score: 5, Funny

    Can it still detect intrusions when its being hit by an infinite number of open source monkeys?

    1. Re:Snort Slashdotted. by Drunken+Coward · · Score: 0

      I suspect that was the intention and Roesch probably solicited Roblimo about the article. I little bit of free stress testing is a good thing, and I can't imagine anyone would be serious when they say they'll hire "linux zealots". It would get a much more favorable reaction to call them gurus rather than zealots, though those two terms are not necessarily interchangable.

      --
      Have you been stalked by Seth today?
    2. Re:Snort Slashdotted. by Col.+Panic · · Score: 3, Informative

      Just in case you were somewhat serious, yes! You can use a load balancer and tap even 1 Gb traffic.

  4. Snort Creator by Anonymous Coward · · Score: 0

    So is he some kind of drug dealer?

  5. Can't wait till.... by jsimon12 · · Score: 0, Flamebait

    Should be intersting to see how long it will take for them to patent things and start sueing, or start sueing for trademarks, or conversly get sued for the like. Its the Internet effect.

    1. Re:Can't wait till.... by Shoten · · Score: 2

      What are they going to patent? Snort is open-source. That's not just a catchphrase, it's a legally solid concept. And they don't make money off the technology, they make it off the implementation of it, and the support of it. Things like service and support contracts and Snort appliances.

      --

      For your security, this post has been encrypted with ROT-13, twice.
    2. Re:Can't wait till.... by jsimon12 · · Score: 2

      Hey, so far we have seen http and a bunch of other wild things patented, all I am saying is it seems when people "go corporate" they do exactly that and start beliving their own PR and listening to the lawyers and such. Hopefully that won't happen in this case, snort is solid opensource goods, but you never know.

    3. Re:Can't wait till.... by Anonymous Coward · · Score: 0

      http is patented? Link please.

  6. great! by Arminius · · Score: 3, Interesting

    It's good to see people who are making a difference in the open source world and not just criticize it!

    --

    ------
    Never underestimate the power of stupid people in large groups.
    1. Re:great! by MyHair · · Score: 1
      It's good to see people who are making a difference in the open source world and not just criticize it!
      ------
      Never underestimate the power of stupid people in large groups.

      Your sig changes the whole mood of your post. Funny, though!

  7. Snort?? by Myshkin · · Score: 5, Funny

    With a name like snort he is probably making a bunch of money off of people who think they're buying some cocaine.

    1. Re:Snort?? by MyHair · · Score: 1

      Especially since he's not just selling Snort; he's selling the experience: Sourcefire powered by Snort!

    2. Re:Snort?? by construct · · Score: 1

      and to top it off you could analyze its logs with ACID.

      --
      Assumption is the mother of all fuckups
  8. And also useful... by User+956 · · Score: 5, Informative

    I'm sure some of you would prefer the Windows version of Snort, put together by Silicon defense.

    --
    The theory of relativity doesn't work right in Arkansas.
    1. Re:And also useful... by carlos_benj · · Score: 5, Funny

      I'm sure some of you would prefer the Windows version of Snort

      Would that be 'blow'?

      --

      --

      As a matter of fact, I am a lawyer. But I play an actor on TV.

    2. Re:And also useful... by Anonymous Coward · · Score: 0
      Would that be 'blow'?

      No, that would suck

      ha, ha

    3. Re:And also useful... by div_2n · · Score: 1

      No, that would be "suck"

    4. Re:And also useful... by div_2n · · Score: 1

      And it is only after I submit that I see Mr. A. Nonymous beat me to the punch on that one.

  9. TeamFortress? by Telastyn · · Score: 0, Offtopic

    Isn't that QuakeTF not HalfLife TF, which is a horrible conversion and not anywhere near the greatness of the original?

  10. Good luck. by saintlupus · · Score: 5, Funny

    Linux zealots, Open Source gurus, self-starters who are self motivating so I can just turn them loose...

    ...are actually off doing something interesting, rather than spending their time fucking about on Slashdot.

    --saint

    1. Re:Good luck. by nemski · · Score: 1

      You tell 'em, uh, I'm not really here either.

      --
      Some people have a way with words, others not have way.
    2. Re:Good luck. by autocracy · · Score: 0, Flamebait

      Well, you're still here... I'm just showing up to post this and then go back to my servers...

      --
      SIG: HUP
    3. Re:Good luck. by t3chmonkey · · Score: 1

      As in James Ellroy? I gotta know.

    4. Re:Good luck. by nemski · · Score: 1

      First off, a thousand sincere apologies to you, your family and friends. I regret any doubt that I may have cast on your knowledge and humor. I am also very sorry that my lame attempt at humor fell so short --- I thought that you might have gotten the irony. But alas, I misfired. A lesson learned. By the way what does SIG: HUD mean? tia

      --
      Some people have a way with words, others not have way.
  11. Sourcefire \.'ed by unformed · · Score: 3, Interesting

    Not really surprised...you had to state that he's offering jobs, didn't you?

    1. Re:Sourcefire \.'ed by Midnight+Thunder · · Score: 1
      Not really surprised...you had to state that he's offering jobs, didn't you?

      Maybe he is going withdraw that offer, since the /. crowd /.ed him.

      --
      Jumpstart the tartan drive.
  12. But will he remain profitable? by jschrod · · Score: 4, Interesting
    The point is not if he is profitable, but if he will remain to be so after venture capital and the associated demands came into his company. I hope that this guy did a very thorough cost-benefit analysis before he took the money.

    Venture capitalists are not in for the long run, they want to capitalize their investments in the mid term. Quite some companies went bankrupt or got in difficulties after external money and the demand for quick market grab came in and drove solid growth strategy out. Look at SuSE for an example from the Linux world.

    Disclaimer: I'm owner and CEO of a (privately held, incorporated) company. We still make profits, even in this harsh market, because we didn't join the hype train, but brought solid add-on value to our customers. I wish Marty Roesch luck in choosing his business strategy...

    --

    Joachim

    People don't write Manifestos any more -- what's going on in this world? [Frank Zappa]

    1. Re:But will he remain profitable? by carlos_benj · · Score: 1

      Given the current heightened security awareness I'm sure the timing for this is just right. Still, the VC money is a gamble. Will they be able to grow the company quick enough to be ready when the vultures start wanting to see the ROI payoff?

      --

      --

      As a matter of fact, I am a lawyer. But I play an actor on TV.

    2. Re:But will he remain profitable? by Anonymous Coward · · Score: 0

      Having read the full article, and being local to their shnazzy offices *note to self: make good on promise to send him my resume...*
      He's been profitable since their first sale. He's playing the money the same way I would: be cheap, obsessively cheap. If you don't need something, and can't reason the necessity to purchase something, then DON'T BUY IT.
      IT companies don't need $1k+ chairs, $1500 desks and $30k computers on everyone's desks....seriously.

      Oh, and considering he's getting sales for 6 figures worth of his stuff, I think he's doing alright for himself.

      Disclaimer:
      I'm currently employed by a mid-sized privately held company that's profitable during this downturn as well. :P

    3. Re:But will he remain profitable? by monkeydo · · Score: 2

      I wish him luck. VC's don't like cheap. I have no idea how much of their money he took, but investors don't expect you to sit on the cash they give you earning interest in your savings account while you only buy what you *need*. The VC's are giving you money to spend, and if you're stockpiling it they'll complain that you aren't growing fast enough. If you don't have an immediate need for a bunch of cash, you probably shouldn't take it. No, companies don't *need* $1,000 chairs, but they also don't necesarrily *need* VC dollars.

      --
      Si vis pacem, para bellum
      The only thing more annoying than a Libertarian is an (un|mis)informed Libertarian
    4. Re:But will he remain profitable? by littleRedFriend · · Score: 1

      Their exit strategy is probably to sell the company to a bigger competitor or a big iron vendor, like Sun or HP, in a couple of years. These don't only buy companies for profits, but also for technology expertise (people) and customer base.

      I'm sure we'll see an enhanced version of Snort for a proprietary *nix OS some day.
      He'll be rich and have all the time of the world to play games and drink beer with Zealots.

      --
      IANAL, but imagine a beowulf cluster of in Soviet Russia all your belong are base to us welcoming the new SCO overlords.
    5. Re:But will he remain profitable? by Hast · · Score: 1
      Reading the article would let you read amongst other things this:
      In a twist that would have been considered insane only a few years ago, Marty, his new CEO, and their venture capital backers have decided to wait until they have ramped up sales enough to cover the company's newly-increased expenses before they ramp up hiring.

      VS's are in it for the money, but they make more money if they let the company grow at a non-destructive rate.
  13. Obligatory snide comment by sparty · · Score: 1

    This "take in more money than you spend" concept is a little hard to grasp at first, but the more you think about it, the more sense it makes, at least in a fuddy-duddy, "old economy" kind of way.

    As much as I sincerely want to believe that this is attempting to be witty, it's far too close to the *cough*VALinux*cough* truth *cough*Amazon*cough* coming from an OSDN employee.

  14. Sourcefire slow because they use Snort by Anonymous Coward · · Score: 0

    Like my pappy used to say: "Too many intrusion detection rules spoils the speed of your website."

  15. Step two revealed by gmhowell · · Score: 5, Insightful

    First go read the newsforge article.... Okay, the joke is:

    Step one: develop open source software
    Step two: mumble, mumble
    Step three: profit!

    Now, it seems that step two is revealed. It's actually a few steps. Now, for the first time ever:

    Step two (a): Come up with (proprietary) tools that make the basic (GPL) Snort code easy to understand and use for non-technical managers.
    Step two (b): Load Snort and the additional tools into a box, and sell the box as a complete solution, instead of just selling software.

    It's been said before that there is no incentive to make OSS easy to use. Here (and elsewhere) is the proof. Make it hard to use. Release it. BUT, make the config tools easy to use, IF you pay for them.

    I'm not slagging the guy, he's gotta eat. But it is another notch in the belt for those who are cynical about OSS and business.

    --
    Jesus was all right but his disciples were thick and ordinary. -John Lennon
    1. Re:Step two revealed by wessto · · Score: 3, Informative

      This is evident in Sun's iPlanet suite of application servers. You can get the entire enterprise edition of the server as a command-line set of tools absolutely free, however the nice GUI's for application deployment, monitoring and configuration will cost you.

    2. Re:Step two revealed by natefaerber · · Score: 2, Insightful

      But the great thing is that anyone can build a config tool and sell it, thus creating competition. They can do that because they can see the source.

      Or, someone could add features to the source that could make it easier with or without tools.

      It's about CHOICE and OPTIONS.

      "...there is no incentive to make OSS easy to use."
      What's the incentive to make OSS?

      --
      -- My HARDWARE, My CHOICE.
    3. Re:Step two revealed by crimoid · · Score: 5, Insightful

      Exactly, but this is a GOOD thing.

      Developers get to eat (and maybe pay rent), and customers aren't tied to one vendor.

      In addition the developer can get the assistance from the community at large, while the customer has equal opportunity to review the code that they are using.

      This is a shining example of how to leverage Open Source and make a living at it. Find a middle-ground where the core code is usable but not so easy that a monkey in a suit can install it.... the techies can run it for free and the suits can pay for it. I don't see how this is a bad thing.

    4. Re:Step two revealed by gmhowell · · Score: 2

      I agree that it is a mostly good thing. The guy has to eat. Personally, I would prefer it if infrastructure tools were developed in-house, by, say, Bank of America and Ford, and Fred's Chicken Hut, then released into the wild, rather than have one company do the development, support, and sales.

      But, yes, this is a good thing.

      --
      Jesus was all right but his disciples were thick and ordinary. -John Lennon
    5. Re:Step two revealed by carlos_benj · · Score: 3, Insightful

      I'm not slagging the guy

      Sure you are. If you read that far down into the article you had to read about the technical guys who gladly would have installed snort but couldn't get it past the suits because it didn't come from a 'company'. In other words, he could have sold the product as-is. The problem was that so could anyone else. The GUI front end for the phb's, a preloaded box, all that is just differentiation (what makes us better than the other guys).

      --

      --

      As a matter of fact, I am a lawyer. But I play an actor on TV.

    6. Re:Step two revealed by Erasmus+Darwin · · Score: 2
      "But the great thing is that anyone can build a config tool and sell it, thus creating competition."

      Or they can create an OSS project to develop a snort configuration tool, thereby undercutting the software end of the SourceFire project. I'm not sure if this scenario would be a win (an OSS project improves the usability of another OSS project) or a loss (an OSS project reduces revenue that's indirectly helping another OSS project).

    7. Re:Step two revealed by gmhowell · · Score: 2

      I agree that it's about choice and options. I looked at a half dozen programs before picking a photo gallery manager for my website (not linked in the above url, BTW).

      To answer your question: in CatB (or one of the other essays in the book) the incentive is peer approval and positive strokes from the community. Ease of use doesn't generate those things.

      --
      Jesus was all right but his disciples were thick and ordinary. -John Lennon
    8. Re:Step two revealed by gmhowell · · Score: 3, Insightful

      Honestly, I did miss the part (or underplayed) where he said the tools the company developed helped corporate buy-in.

      I think the thing that helped more than the product was the price tag. If you sell it for $49.95, it's not worth that much to a Fortune 100. But $20,000 per box plus $10k per sensor... That must really be worth something if you are charging that much for it.

      --
      Jesus was all right but his disciples were thick and ordinary. -John Lennon
    9. Re:Step two revealed by Anonymous Coward · · Score: 0

      I've always like the idea of taking Open Source technology, making it easier to use, and embed it into commercial products.

      When you estimate the length of time it takes to hire a Slashdot programmer, write the snort plugins, make sense of the Snort output, and wrap an "easy to use" GUI around it, you are talking about $15,000 in costs. But if an Appliance is made available with all of that in there, well tested, and costs about $8000, now THAT is a bargain.

      The developer get paid for his efforts to make it easy enough for a BOZO to use, and still allow the more knowledgeable person to customize it.

      My friend just got a Crunchbox, and is very happy with it, because just hours after a new threat is discovered, they have a snort rule for it. I think their DEMO box has these new rulz.

    10. Re:Step two revealed by Erik_Kahl · · Score: 1


      The beauty of this model is that if you weren't such a lazy whinner you could get off your ass and write the same damned EZ-KONFIG tool.

      Don't complain about this.

      Usability = 1/Functionality

      This equation explains the problem pretty well I think.

      Snort is very flexible, stable and thin. It has tremendous packet scanning capabilities. Because of all of this functionality there are many choices to be made when configuring snort. It takes time, knowledge and effort to correctly and efficiently configure snort.

      All of the functionality is in the open source version, and there are other open source tools, such as ACID, which make analysis of the snort output very easy. I'm sure there will be some effort made to make snort easier to configure and maintain by an open source project someday. I won't do it though, cause I like snort the way it is.

      The man gave us a good app. I think its pretty fair of him to ask for money if you want him to hold your hand and set it up for you.

    11. Re:Step two revealed by zrodney · · Score: 1

      what's wrong with that??

    12. Re:Step two revealed by Anonymous Coward · · Score: 0

      Remember when the whole world thought this was VA's idea and threw their money at them? I thought they were brilliant. Only thing is, that was never their plan. Everyone just assumed that's what they were doing because it was so obvious and wished they'd thought of it first. Instead VA buys a bunch of overpriced websites and chairs and forgets what they were doing before.

    13. Re:Step two revealed by Hast · · Score: 1

      Sourcefire is /not/ about selling a shrink wrapped box in the store. They get money from selling IDS system. They sell the rack boxes with snort installed and configured. They sell the normal boxes with admininistration tools. They sell training and expertise.

      They aim for the customers that "don't want OSS" in the first place. (I bet you can download a whole bunch of GUI's for Snort if you want them.) And from the article is seems like they charge quite a bit from the servers.

    14. Re:Step two revealed by Xouba · · Score: 1

      You are right: for some reason, big companies don't like it cheap.

      And I think that's the problem with many Linux solutions: companies think about Linux, and they think about the funny penguin logo, the teen MS-bashers with testosterone overdose, and plenty of hairy OSS-preachers.

      It's not that I personally don't like it, being somewhat in the middle of the "hairy" and the "teen" :-) But it's understandable that many companies don't like something that they think comes from and is used by only a bunch of freaks. The (small) firm I work for does Linux and security consulting (among others), and has suffered because of that "unprofessional" mystique that big companies attach to Linux (and BSD, and OSS as a whole).

      So, as conclusion: it looks stupid, but I would say that, if you're going to do something related to OSS and big companies, charge for it. Not a lot, but a significant amount. These companies want to know that they're buying something good, and one of the proofs that they have about it is price.

    15. Re:Step two revealed by Anonymous Coward · · Score: 0
      I think the important aspect of step 2 is the box, not the easy-to-admin tools. This is one of the big weaknesses of OS for profit.

      They are selling hardware to corporate America. This is an easy and proven business model. What if the random, itch-scratching project he had chosen had been less suited for this? What if he wrote instead an Abiword or a GIMP? You can't sell either of these with hardware. Corporate America has shown little interest in liscensing "pure" software from OS companies.

      Am I missing something? Someone please prove me wrong.

  16. It it only the beginning by Anonymous Coward · · Score: 0

    of the thousand trolls war!

  17. That's what.. by Steveftoth · · Score: 1

    that's what sendmail does as well isn't it? That program is god awful to use, but if you have their 'tools' then it is supposed to be much ,much more managable.

    1. Re:That's what.. by rhost89 · · Score: 1

      Yes but what they dont know is i have the last laugh, i dont use thier tools so i get a very very through understanding of the software (be it sendmail etc...) which makes me more valuable then the average point and click guy :) Use your gui wrappers, ill be laughing all the way to the bank :)

      --
      I will bend your mind with my spoon
  18. Next headline: by Ziviyr · · Score: 1

    Slashdot effect burns down sourcefire.com. :-)

    --

    Someone set us up the bomb, so shine we are!
  19. Exactly by Anonymous Coward · · Score: 0

    If he was profitable, why did he ever jump in bed with the mob.

    Wait a couple of years for your Porche.

    Venture Capatlists are the new name for loan sharks, and silent partners. They don't use guns or violence, either, they use something different, called lawyers, due dilligence suits, and a board of directors that just up and fire you (likening it to Apple yet again).

    Don't sell any of your company, unless it is privately (to friends/co-workers that believe in your vision), until you are ready to leave.

  20. Other step by ackthpt · · Score: 1
    Tho this is one many are, and have died trying, sell support.

    Here's the tool, here's all the manuals, etc. we'll sell you:

    Training

    Onsite/offsite support

    Consulting

    All good and fine, until you IPO and require a profit and your customer base dries up, due to downturns in their revenues or they just get all cheap on you and then expect you to be around upgrading the software and able to bail them out when something goes wrong.

    Maybe sell insurance policies?

    --

    A feeling of having made the same mistake before: Deja Foobar
    1. Re:Other step by Jason+Earl · · Score: 3

      Clearly you didn't read the article. The biggest difference between Sourcefire and most of the other crash and burn software companies (whether selling Free softwware or commercial software) was that Marty and friends have not spent money they didn't have. They ran the company out of Marty's house for a while, and when they finally did get offices they bought pre-furnished offices from a burnout at pennies on the dollar.

      In fact, the cycle you describe is common in the commercial software world as well. I pay maintenance fees on several large commercial software packages that I have no intention of ever updating to the newest version. The version I have works fine, and the new version had "issues" in my environment. I pay the maintenance fees as insurance.

      Microsoft has a large enough market, and enough clout that they can force their customers to upgrade, but most software companies don't have that kind of leverage.

    2. Re:Other step by ackthpt · · Score: 1
      Clearly you didn't read the article.

      Ah, but I did. I was addressing a reply to the post and merely stating how things have been for the past 40+ years.

      FWIW, where I used to work, we were the last people in the world to "upgrade" releases of anything and held vendors feet to the fire anytime they tried to pull a "Microsoft" on us (your example, forcing customers to "upgrade" by threatening to withdraw support, which, if you think about it, is another manifestation of monopoly.) I follow the example on my own eq, having been stung a couple times, when "upgrades" ceased essential products and services from other vendors from working.

      Marty's judicious use of venture capital underscores the change in business these days, grow the business first, then seek and accept funding as necessary, rather than get a fat pile on an IPO and blow it trying to gather name recognition, while your analysts, techs, marketing people scramble to put something together.

      --

      A feeling of having made the same mistake before: Deja Foobar
  21. Blow? by totallygeek · · Score: 1, Redundant

    With a name like snort he is probably making a bunch of money off of people who think they're buying some cocaine.


    Nah, they are still waiting on Blow.

  22. Personally... by creative_name · · Score: 1

    ..I prefer Snood to Good any day!

    --
    Posting as directed.
  23. potential jobs? by Hegemony · · Score: 2, Funny

    Oh man, you HAD to mention that he was hiring. Instantly slashdotted.

  24. I estimate by Anonymous Coward · · Score: 0

    that the flood scipt is cranking along at about one post every 10 seconds -- most impressive

  25. Sounds great, and just in time for the IPO by Gumber · · Score: 2

    I hope it still sounds great 12 months or so after the IPO.

  26. Wish I could stay and watch by Anonymous Coward · · Score: 0

    the fireworks going off early on slashdot but I can't I really need to be on my way now.

  27. Jobs by Anonymous Coward · · Score: 0

    Those jobs sound rubbish. Where is the Zealot job??

  28. OT (Sig) by gmhowell · · Score: 1

    BTW, skimmed the link in your sig. I don't have time to actually do the test, but after a paragraph or two, it was getting very painful to read. Mind expects one thing, eyes see another.

    --
    Jesus was all right but his disciples were thick and ordinary. -John Lennon
  29. I know at least one earlier by T.E.D. · · Score: 4, Interesting

    ACT is a company that creates only free software. They've been around since the late 90's, and I understand they have been in the black for years, perhaps since inception. They are a privately held company, and as far as I know, have no plans to ever do an IPO. Perhaps that's why they don't get much press (although RMS likes to use them as examples in his speeches).

  30. OMG! by SavingPrivateNawak · · Score: 1

    Who let the trolls out??

    Tonight is 'Episode II: Attack of The Trolls' or somthing???

    The guy with the large post did an impressive work anyway... I wish this post were used to show + explain the bug! And why not a patch in the same large post! That would beat bugtrak and their exploits code!!

  31. My Sig. (Offtopic, of course) by saintlupus · · Score: 1

    As in James Ellroy? I gotta know.

    Yes, as in James Ellroy. There's an edited version of an old interview with him in The Onion this week. Hunt through the archives for the original - it's a lot better.

    --saint

  32. Only one thing to say..... by AMuse · · Score: 2

    CONGRATULATIONS MARTY!!

    I attended a SANS function that Marty lectured at once, for using Snort as an intrusion detection system. It's damn solid software. Very impressive, very configurable.

    Congrats on getting paid to do what you love, Marty. The rest of us should be so lucky. :>

  33. Am impressed with Snort's performance by Anonymous Coward · · Score: 0

    We've done some very extensive performance tests, and are very encouraged with the results. We are getting only a 15% slowdown at gigabit speeds using P3's with ALL of the snort rulz activated.

  34. Sorry, I meant hyperlinking by jsimon12 · · Score: 2

    Sorry, I meant hyperlinking

  35. OT: OSX ?= FreeBSD by LunaticLeo · · Score: 2

    I was under the impression that OS X was _A_ BSD but not actually a code fork of FreeBSD. Do they really share the same code in the base distribution? Or are they just cousins in the same family tree?

    BTW, I do know that Hubbard(sp?) and other FreeBSD folk have become employed by Apple. How does that factor in?

    --
    -- I am not a fanatic, I am a true believer.
    1. Re:OT: OSX ?= FreeBSD by Anonymous Coward · · Score: 0

      Jordan is paid primarily to *not* develop software. After all, if a the FreeBSD hackers really tried, an OSX compatibility layer would appear quicker than the Linux one.

    2. Re:OT: OSX ?= FreeBSD by Neil · · Score: 1
      I was under the impression that OS X was _A_ BSD but not actually a code fork of FreeBSD. Do they really share the same code in the base distribution? Or are they just cousins in the same family tree?

      IIRC, the kernel is Mach micro-kernel running a BSD personality layer, and the userland is a code-fork from FreeBSD 3.2

  36. yah, snort screws it's developers by netmask · · Score: 1

    What I like best, is how Marty stands to profit so much, where others like Dragos who have commited so much time and code to the project, get nothing.

    Yah, marty sure does rule. Even when he's standing behind you while you're bent over an IDS server.

    1. Re:yah, snort screws it's developers by SomeOtherGuy · · Score: 4, Interesting

      Maybe not in up front dollars...But if any open source package gets "huge" or becomes a "killer app" then being one of the "core developers" will mean much on the old Resume. Ask Linus or some of the Apache folks.

      In the medical field (and in some degrees education) it is considered a huge career boost to get "published" in a journal....Considering the amount of money a Dr. makes -- just getting a concept or research published does not make tons of cash -- but the future dollars he makes "because" he was published are very big!

      P.S. -- I work for a big Fortune 500 company and Snort has been all the rage this year so far. (Last year it was Apache).....

      --
      (+1 Funny) only if I laugh out loud.
  37. hot damn, that would rule by AssFace · · Score: 1

    working there that is... too bad I'm in boston and not moving to MD.

    really working anywhere than my Office Space world right now would rule rule RULE!!!

    --

    There are some odd things afoot now, in the Villa Straylight.
  38. I wish Marty all the best. by talks_to_birds · · Score: 1
    I use snort; have been since one of the low 1.x betas.

    Marty's still on the snort list from time to time, as are some of the other primary developers.

    To all the whiners who are putting him done for what he's done:

    Either you work for the government, slurping from the public trough;

    or, you've inherited your livelyhood;

    or, you're still in school, and Daddy's paying your way.

    Stop whining, get off your butt, and see if you can make one half as much a contribution to the human race as Marty has.

    t_t_b

    --
    I'm on PJ's "enemies" list! Are you?
  39. Demarc by checkitout · · Score: 3, Informative

    If you're checking out snort for the first time, I highly recommend using Demarc PureSecure which is free as in beer (aka for personal use). It's by far the best front end for snort, and does host based checks as well.

    The screenshots are mouthwatering. :)

    1. Re:Demarc by Anonymous Coward · · Score: 0

      i agree if youre gonna run snort, you gotta run puresecure. it is a really nice peice of software. there's an article about it at linuxworld linuxworld article that got me to try it. i haven't tried the windows version (yuck!), but the unix one is tight.

  40. Snort Creator Makes Good by Anonymous Coward · · Score: 0

    for a moment i thought this was about the guy who invented cocaine.

  41. Care to try English? by Anonymous Coward · · Score: 0
    WTF is "to leverage?"


    Damn business lameres trtying to pervert the language and instead showing themselves as the morons that they are, not communicating effeectively with their intended audience.


    What kind of idiot speaks that way?

    1. Re:Care to try English? by Anonymous Coward · · Score: 0

      sober much?

  42. why outside funding? by moankey · · Score: 1

    In the article he says that even after several sales of $300k he wanted to take in more sales before getting an office and hiring staff, he was able to make nice money and didnt believe in unnecessary expenses. Yet the next paragraph goes on to say he was able to secure $7.5 million in funding.
    Why the funding and investors, that I am sure have their $.02 to add, if you work on bare essentials and are making good money?

  43. Missing crucial info by Anonymous Coward · · Score: 0

    This account seems to skip one important fact. Between his initial development of Snort in 1999 and the Jan 2001 founding of Sourcefire, Marty was:

    Martin Roesch
    Director of Forensic Systems http://www.hiverworld.com
    Hiverworld, Inc.

    Last time I checked, Hiverworld (now called nCircle) sells commercial IDS software and appliances.

    You've got to wonder how much of his success was based on his experiences with this company.

  44. Marty should write a book... by Schnake · · Score: 1

    I'd like to see Marty write a book detailing all his experiences in the growth of his software company. I've always believed in the cautious spending philosophy he embraces, and find most of his other business practices are very wise for a person without a business degree, but then again I never really expect much from a person with a business degree. I'd like to hear more about Marty's hiring practices, his selection criteria for a CEO, and anything else relevant to growing a software company around a successful piece of software.

  45. Oh, man, stallman is spinning in his grave! by msouth · · Score: 1

    He's dead, did you hear?

    --
    Liberty uber alles.
  46. Like a doctor? by Anonymous Coward · · Score: 0

    Upfront dollars for someone elses work is pretty shitty. What is shittier is you telling them that they should be happy with a resume booster. No one will care. This isn't really a prestige driven business.

    Meanwhile someone is walking to the bank laughing with your work.

    Maybe you can roll your next joint with your resume, that will help the hurting.

    Or look at it this way. After it gets big, Marty can cash in with his resume, plus still have all the VC... But why would he do that when he already owns the company? Oh, owning a hugely profitable company isn't quite the same as a better-than-average-salary-because-of-your-resume- job. Now I get it, I wonder if you do.

    1. Re:Like a doctor? by SomeOtherGuy · · Score: 2

      Yes..We have all seen how successful the .com/linux/open source businesses have been. I may "be rolling my joints with my resume" ... but you will be rolling them with stock shares that are worth zilch...zero...

      --
      (+1 Funny) only if I laugh out loud.
  47. Perfect example of ... by Anonymous Coward · · Score: 0

    pissing down someones back and telling them its raining.

    Then you tell them they should be happy it is happening, even if they don't believe it is rain, which you insist it is, because it is nice and warm. You won't get one of those nasty chills you can in a big thunderstorm.

    What do you tell the people that you are ass-raping? That they should be happy, cause they won't be constipated for the next couple of days?