Security Onion 20120123 is now available! This resolves the following issues:
Issue 191: Update NSM scripts to control Bro
Issue 202: If user selects only one interface, configure Bro as standalone
If you're only monitoring a single network interface, this update will configure Bro for standalone mode which will greatly increase performance!
New users can download and install the 20111103 ISO image using the instructions here. The step marked "Install Security Onion updates" will automatically install this update.
Existing Security Onion users can perform an in-place upgrade using the following command (if you're behind a proxy, remember to set your proxy variables as described in the FAQ):
sudo -i "curl -L http://sourceforge.net/projects/security-onion/files/security-onion-upgrade.sh > ~/security-onion-upgrade.sh && bash ~/security-onion-upgrade.sh"
|NSM scripts now control Bro|
Thanks to Seth Hall of the Bro project for his tuning suggestion!
Thanks to Richard Bejtlich for his suggestion of updating the NSM scripts to control Bro!
If you have any questions, please join our mailing list and ask away!
Toolsmith Tool of the Year
If you're a fan of Security Onion, please vote for it for 2011 Toolsmith Tool of the Year!