Shortly after releasing the packages, we determined that there was a bug in the kernel module. The PF_RING team patched the kernel module and I've created a new securityonion-pfring-module package which is now available in our stable repo.
To ensure that the PF_RING kernel module is installed before any Ubuntu kernel updates, you may want to install as follows:
sudo apt-get update ; sudo apt-get install securityonion-pfring-module ; sudo apt-get dist-upgradeFor more information, please see our Upgrade page:
The securityonion-pfring-module package will do the following:
- stop all NSM sensor processes
- terminate any remaining processes using PF_RING
- remove the existing PF_RING module
- build the new PF_RING module and insert it
- start all NSM sensor processes
If you have any questions or problems, please use our mailing list:
If you and/or your organization have found value in Security Onion, please consider giving back to the community by joining one of our teams:
We especially need help in answering support questions on the mailing list and IRC channel. Thanks!