[Bro-Dev] Geo Location Plugin

[anthony kasza]

That makes sense. The next logical question would be, what makes a plugin
special enough to be included the core? I think GeoIP, being legacy like
Robin mentioned, qualifies.

-AK
On Oct 16, 2014 9:21 AM, "Clark, Gilbert" <gc355804 at ohio.edu> wrote:

>  +1 that core plugins be built / distributed with bro.
>
> Re: package / plugin management, coming from a Java EE background, one of
> the things I don't like about some of the OSGi software (read: highly
> modular, plugin-driven) I've worked with is how confusing it can get to
> track versions of each specific bundle / plugin to know how / when to
> update them.  Binding a specific set of core plugin versions to application
> releases mitigates some of that complexity in my experience.  In other
> words, I'd be a bit hesitant to agree that bro should individually package
> *core* plugins and offer them independently through a repo, just because it
> will probably require a great deal of care to update those (since there
> could be e.g. side effects / dependencies that aren't immediately obvious).
>
> An external repository / package manager seems like a good fit for
> non-core plugins, though.
>
> -Gilbert
> On Oct 16, 2014 11:41 AM, anthony kasza <anthony.kasza at gmail.com> wrote:
>
> I think having some plugins distributed and built with Bro is reasonable,
> too. As long as functionality and interfaces don't change current users
> shouldn't notice a difference.
> How eventually moving the plugin to a package manager will affect users is
> something else to consider.
>
> -AK
> On Oct 16, 2014 6:21 AM, "Slagell, Adam J" <slagell at illinois.edu> wrote:
>
>> I think that is reasonable for some things.
>>
>> On Oct 16, 2014, at 8:02 AM, Robin Sommer robin at icir.org wrote:
>>
>> > (unless we decide to
>> > build (some) plugins by default, which currently isn't happening).
>>
>> ------
>>
>> Adam J. Slagell
>> Chief Information Security Officer
>> Assistant Director, Cybersecurity Directorate
>> National Center for Supercomputing Applications
>> University of Illinois at Urbana-Champaign
>> www.slagell.info
>>
>> "Under the Illinois Freedom of Information Act (FOIA), any written
>> communication to or from University employees regarding University business
>> is a public record and may be subject to public disclosure."
>>
>>
>>
>>
>>
>>
>>
>>
>>
>>
>> _______________________________________________
>> bro-dev mailing list
>> bro-dev at bro.org
>> http://mailman.icsi.berkeley.edu/mailman/listinfo/bro-dev
>>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.icsi.berkeley.edu/pipermail/bro-dev/attachments/20141016/39bf2ebe/attachment.html