Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

AOL Moloch: open-source, large scale, packet-capturing, indexing database system

molo.ch

Post reply on HN
Print view View original

101–110 of 156 posts

Re: AOL Moloch: open-source, large scale, packet-capturing, indexing database system

#101

Post by dguido »

awick wrote: post #63
dguido wrote: post #20

Fun fact, Moloch was initially created with funding from DARPA's famous Cyber Fast Track program! It's great to see that Moloch is still going strong since ~2013. There is some previous discussion of Moloch when it was released in this older thread: https://news.ycombinator.com/item?id=20586005

Not sure if you are joking, but Moloch was never part of DARPA's short lived Cyber Fast Track program. :) We do welcome contributions from everyone, and lots of different folks use Moloch. If interested join us over at https://molo.ch

That's odd. Are you one of the original authors? The CFT project list had Moloch on it. I'll try and dig it up, it's probably floating around my Google Drive. You may want to speak with Eoin Miller, as I believe he was the point of contact for the project in the document I'm thinking of.

Re: AOL Moloch: open-source, large scale, packet-capturing, indexing database system

#102

Post by whyhead »

awick wrote: post #63
dguido wrote: post #20

Fun fact, Moloch was initially created with funding from DARPA's famous Cyber Fast Track program! It's great to see that Moloch is still going strong since ~2013. There is some previous discussion of Moloch when it was released in this older thread: https://news.ycombinator.com/item?id=20586005

Not sure if you are joking, but Moloch was never part of DARPA's short lived Cyber Fast Track program. :) We do welcome contributions from everyone, and lots of different folks use Moloch. If interested join us over at https://molo.ch

Thanks, John. I tried to do something a while back with wireshark but I couldn't get the thing to scale. Gonna give this one a hard look.

Re: AOL Moloch: open-source, large scale, packet-capturing, indexing database system

#104

Post by dguido »

dguido wrote: post #101
awick wrote: post #63

Earlier quoted context omitted.

Not sure if you are joking, but Moloch was never part of DARPA's short lived Cyber Fast Track program. :) We do welcome contributions from everyone, and lots of different folks use Moloch. If interested join us over at https://molo.ch

That's odd. Are you one of the original authors? The CFT project list had Moloch on it. I'll try and dig it up, it's probably floating around my Google Drive. You may want to speak with Eoin Miller, as I believe he was the point of contact for the project in the document I'm thinking of.

Fuckkkkk I think I found the source of my confusion. I am wrong, you are right.

I DID find documents about Moloch floating around my Google Drive from ~2013-ish. I believe I invited your co-author Eion to present at a conference I was running, THREADS, in 2014 and that he was not able to make it. The focus the _year prior_ was exclusively on DARPA CFT. I combined those two events in my head and thought your project got some seed funding from DARPA too. I'm sorry!

Here is the conference:

THREADS 2014 when you were invited: https://github.com/trailofbits/threads/tree/master/2014

THREADS 2013 was a retrospective on DARPA CFT: https://github.com/trailofbits/threads/tree/master/2013

Re: AOL Moloch: open-source, large scale, packet-capturing, indexing database system

#105

Post by dguido »

dguido wrote: post #20

Fun fact, Moloch was initially created with funding from DARPA's famous Cyber Fast Track program! It's great to see that Moloch is still going strong since ~2013. There is some previous discussion of Moloch when it was released in this older thread: https://news.ycombinator.com/item?id=20586005

I seem to be mistaken :-x. Moloch was never provided with early funding from CFT. I confused a few interactions I had with their project's original authors in 2013. It _feels_ like something CFT would have funded, but it was started on its own. See more here: https://news.ycombinator.com/item?id=22951925

Re: AOL Moloch: open-source, large scale, packet-capturing, indexing database system

#106

Post by closeparen »

dguido wrote: post #20

Fun fact, Moloch was initially created with funding from DARPA's famous Cyber Fast Track program! It's great to see that Moloch is still going strong since ~2013. There is some previous discussion of Moloch when it was released in this older thread: https://news.ycombinator.com/item?id=20586005

What can you do with a packet capture on a modern high security network besides go, "yup, that's TLS"?

May DoD turns off the forward secrecy stuff and escrows keys?

Re: AOL Moloch: open-source, large scale, packet-capturing, indexing database system

#107

Post by sildur »

HideousKojima wrote: post #18
scandox wrote: post #11

Earlier quoted context omitted.

I think this is a bit distracting. It's an ancient name. Probably a better paragraph to fixate on would be: > Moloch has been used figuratively in English literature from John Milton's Paradise Lost (1667) to Allen Ginsberg's "Howl" (1955), to refer to a person or thing demanding or requiring a very costly sacrifice. I mean a project called Zeus would hardly founder on it's namesakes fetish for turning into a bull an…

Zeus is known a bit better and for more things than Moloch

But today everyone knows about Zeus huge sex drive.

Re: AOL Moloch: open-source, large scale, packet-capturing, indexing database system

#108

Post by ignoramous »

gyehuda wrote: post #30
ignoramous wrote: post #3

Not the greatest choice of name: Moloch[a] (also Molech, Mollok, Milcom, or Malcam) is the biblical name of a Canaanite god associated with child sacrifice, through fire or war. From: https://en.wikipedia.org/wiki/Moloch

Naming open source projects is a challenging task. The team hears this all the time, but hey, open source is about code you can use, a community you can join to make the code better, and the pride that people around the world want to use your code. If you are on a blue-team, you'll want to look at this project. If you are making lists of names that distract attention this goes on it.

If someone names their CLI JDahmer which then requires me to use it jdahmer , it is going to cringe me out.

That said, I totally respect the project's decision to name it so. I'm sorry if it comes off as an outrage or an unnecessary rant. I understand it takes away the energy which is otherwise better spent on a constructive discussion of this excellent project, which is also surprisingly well-maintained. But, I hope you realise why the name is controversial, especially since everyone that has to use the project has to get used to seeing/reading/using/typing Moloch everywhere from the docs, to the CLI, to the FAQ pages, and what-not.

May be the project can explain their rationale in a separate webpage (if they want to) and that might help?

Re: AOL Moloch: open-source, large scale, packet-capturing, indexing database system

#109

Post by simlevesque »

pgsbathhouse2 wrote: post #94
simlevesque wrote: post #39

Earlier quoted context omitted.

You are offended by the name of an open source project ? Your life must be easy.

Are you going to be that daft?

I'm really sorry you don't approve the name.
Post reply on HN