Re: OSSIM Fedback




First of all my apologies for the cross-posting, I don't like it but since it's been started this way I'll answer to the three lists.

It's not my duty to enter into discussion if ossim is easy to use or not but I will freely admit that we'd love to have much more documentation that there's already available. I hope time & third party contributions will be able to close this gap in the near future, we'll see.

What made me enter this thread were what I see as accusations of intentionally writing complex code.

I must say that I have to deny this and ask Stefano sincerely for proof of this.

Ossim is a complex project, it's been evolving since more than four years now and there are quite some things we have done in the past which we don't like. Ossim has not been planned to it's current extent beforehand because we haven't had tons of money to spend and the little funding we had could only be consolidated having something working asap. This is why parts of it may be not well documented, not clearly structured and so on. But obfuscating / complicating code in purpose ? No way.

Anyway, if you have had trouble understanding the code and needed help, we've got a small but fine user base who would've been glad to help (ourselves included). I recommend you trying out the vmware image we released a couple of weeks ago, it is already setup and working and could be used by anyone to at least "learn by example".

And, in order to close this mail and clarify a last thing, most of what's included with ossim is being released under BSD license, if at any time we had intention to avoid reuse of the code we would've used a more restrictive license in the first place (like GPL), don't you think so ?

Greetings,

Dominique

Am 12.06.2006 um 23:06 schrieb Stefano Zanero:

We studied OSSIM in order to use it as a framework for implementing our
own correlation algorithms.

My experience is partially negative, in particular for the lack of
documentation on installation and software internals. Additionally, the
source code is intentionally complex and undocumented, to avoid forking
or reuse... which is quite curious for a GPL software.

------------------------------------------------------------------------
Test Your IDS

Is your IDS deployed correctly?
Find out quickly and easily by testing it with real-world attacks from CORE IMPACT.
Go to http://www.securityfocus.com/sponsor/CoreSecurity_focus-ids_040708 to learn more.
------------------------------------------------------------------------



Relevant Pages

  • Re: OSSIM Fedback
    ... First of all my apologies for the cross-posting, I don't like it but since it's been started this way I'll answer to the three lists. ... It's not my duty to enter into discussion if ossim is easy to use or not but I will freely admit that we'd love to have much more documentation that there's already available. ... And, in order to close this mail and clarify a last thing, most of what's included with ossim is being released under BSD license, if at any time we had intention to avoid reuse of the code we would've used a more restrictive license in the first place, don't you think so? ... You have an option to go with a managed service or an enterprise software. ...
    (Pen-Test)
  • Re: how to document a website/database
    ... as the documentation and requirement definitions. ... 'organic' site development! ... Thanks, I'll consider that, though the intention is to get a bit more ...
    (comp.lang.php)
  • Re: TZ slot machine mod how-to
    ... Great job Cliffy and very nice documentation for someone else to ATTEMPT it ... upon anyone who makes these and sells them. ... My intention is strictly to ...
    (rec.games.pinball)
  • Re: Support?
    ... > Then why the FUCK do you want "a little more ... > documentation", if you have no intention of reading it? ...
    (alt.os.linux.suse)
  • Re: UNP Book Question - when write() to socket returns 0
    ... But if you get -2 and the documentation doesn't say anything ... without intention at all is reasonable. ... code that specifically formats the hard drive or deletes ... random files on a "can't happen" return code would probably make code ...
    (comp.unix.programmer)