Security Onion 14.04.4.1 ISO image now available!

We have a new Security Onion 14.04.4.1 ISO image now available that contains all the latest Ubuntu and Security Onion updates as of March 19, 2016!

This resolves the following issue:

14.04.4.1 ISO image #861
https://github.com/Security-Onion-Solutions/security-onion/issues/861

This new ISO image has been tested by the following (thanks!):
Wes Lambert
James Taylor
L.T. Easterly

New Users
I've updated the Verify_ISO page for the new ISO image:
https://github.com/Security-Onion-Solutions/security-onion/blob/master/Verify_ISO.md

Please remember to verify the signature of the downloaded ISO image using the instructions on that page.

Existing Deployments
If you have existing installations based on a previous 14.04 ISO image, there is no need to download the new ISO image.  You can simply continue using our standard update process to install updated packages as they are made available:
https://github.com/Security-Onion-Solutions/security-onion/wiki/Upgrade

Release Notes
For more information about this release, please see:
https://github.com/Security-Onion-Solutions/security-onion/wiki/Security-Onion-14.04-Release-Notes

Training
This new ISO image will be used in our upcoming online class in May:
http://blog.securityonion.net/2016/03/next-round-of-security-onion-online.html

Want to show your support for Security Onion?
Several folks have asked about Security Onion t-shirts and they are available in our CafePress store!
http://www.cafepress.com/securityonion/11820053

Need Support?
If you have questions or problems, please see:
https://github.com/Security-Onion-Solutions/security-onion/wiki/Support

Thanks!

Next Round of Security Onion Online Training Sessions - May 16 through May 19

The next round of online training sessions will be held Monday May 16 through Thursday May 19!

For more information and to register, please see:
https://attendee.gototraining.com/9z73w/catalog/8119062504158470144

securityonion-setup - 20120912-0ubuntu0securityonion203 resolves an issue

securityonion-setup - 20120912-0ubuntu0securityonion203 is now available and should resolve the following issue:

Issue 876: Setup: division by 0 error on SNIFFING_INTERFACES
https://github.com/Security-Onion-Solutions/security-onion/issues/876

Updating
This new package is now available in our stable repo.  Please see the following page for full update instructions:
https://github.com/Security-Onion-Solutions/security-onion/wiki/Upgrade

Want to show your support for Security Onion?
Several folks have asked about Security Onion t-shirts and they are available in our CafePress store!
http://www.cafepress.com/securityonion/11820053

Training
Security Onion 301 is tomorrow:
http://blog.securityonion.net/2016/02/next-round-of-security-onion-online_26.html

Commercial Support
Need commercial support?  Please see:
http://securityonionsolutions.com

Feedback
If you have any questions or problems, please use our security-onion mailing list:
https://github.com/Security-Onion-Solutions/security-onion/wiki/MailingLists

Thanks!

securityonion-nsmnow-admin-scripts - 20120724-0ubuntu0securityonion132 resolves an issue

securityonion-nsmnow-admin-scripts - 20120724-0ubuntu0securityonion132 is now available and should resolve the following issue:

Issue 866: NSM: Squert object_mappings table has wrong permissions
https://github.com/Security-Onion-Solutions/security-onion/issues/866

This package was tested by Wes Lambert.  Thanks, Wes!

Updating
This new package is now available in our stable repo.  Please see the following page for full update instructions:
https://github.com/Security-Onion-Solutions/security-onion/wiki/Upgrade

Want to show your support for Security Onion?
Several folks have asked about Security Onion t-shirts and they are available in our CafePress store!
http://www.cafepress.com/securityonion/11820053

Training
The next round of online training sessions starts tomorrow:
http://blog.securityonion.net/2016/02/next-round-of-security-onion-online_26.html

Commercial Support
Need commercial support?  Please see:
http://securityonionsolutions.com

Feedback
If you have any questions or problems, please use our security-onion mailing list:
https://github.com/Security-Onion-Solutions/security-onion/wiki/MailingLists

Thanks!

securityonion-setup - 20120912-0ubuntu0securityonion201 resolves four issues

securityonion-setup - 20120912-0ubuntu0securityonion201 is now available and should resolve the following issues:

Issue 865: Setup: only open port 22 in ufw firewall
https://github.com/Security-Onion-Solutions/security-onion/issues/865

Issue 860: Setup: disable noisy SURICATA events
https://github.com/Security-Onion-Solutions/security-onion/issues/860

Issue 735: Setup: Production Mode should automatically configure PF_RING instances based on number of CPU cores
https://github.com/Security-Onion-Solutions/security-onion/issues/735

Issue 874: Setup: add -w option to write out sosetup.conf file
https://github.com/Security-Onion-Solutions/security-onion/issues/874

This package was tested by Wes Lambert.  Thanks, Wes!

Updating
This new package is now available in our stable repo.  Please see the following page for full update instructions:
https://github.com/Security-Onion-Solutions/security-onion/wiki/Upgrade

Want to show your support for Security Onion?
Several folks have asked about Security Onion t-shirts and they are available in our CafePress store!
http://www.cafepress.com/securityonion/11820053

Training
The next round of online training sessions starts tomorrow:
http://blog.securityonion.net/2016/02/next-round-of-security-onion-online_26.html

Commercial Support
Need commercial support?  Please see:
http://securityonionsolutions.com

Feedback
If you have any questions or problems, please use our security-onion mailing list:
https://github.com/Security-Onion-Solutions/security-onion/wiki/MailingLists

Thanks!

securityonion-sostat - 20120722-0ubuntu0securityonion52 resolves two issues

securityonion-sostat - 20120722-0ubuntu0securityonion52 is now available and should resolve the following issues:

Issue 785: sostat: show number of available updates
https://github.com/Security-Onion-Solutions/security-onion/issues/785

Issue 792: soup: add note about running on master server before running on sensor
https://github.com/Security-Onion-Solutions/security-onion/issues/792

Wes Lambert submitted pull requests for these changes and tested the resulting package.  Thanks, Wes!

Updating
This new package is now available in our stable repo.  Please see the following page for full update instructions:
https://github.com/Security-Onion-Solutions/security-onion/wiki/Upgrade

Want to show your support for Security Onion?
Several folks have asked about Security Onion t-shirts and they are available in our CafePress store!
http://www.cafepress.com/securityonion/11820053

Training
The next round of online training sessions starts in just a few days:
http://blog.securityonion.net/2016/02/next-round-of-security-onion-online_26.html

Commercial Support
Need commercial support?  Please see:
http://securityonionsolutions.com

Feedback
If you have any questions or problems, please use our security-onion mailing list:
https://github.com/Security-Onion-Solutions/security-onion/wiki/MailingLists

Thanks!

securityonion-pulledpork - 0.7.0-0ubuntu0securityonion6 resolves an issue

securityonion-pulledpork - 0.7.0-0ubuntu0securityonion6 is now available and should resolve the following issue:

Issue 832: pulledpork.pl refinement
https://github.com/Security-Onion-Solutions/security-onion/issues/832

Wes Lambert tested this package.  Thanks, Wes!

Updating
This new package is now available in our stable repo.  Please see the following page for full update instructions:
https://github.com/Security-Onion-Solutions/security-onion/wiki/Upgrade

Want to show your support for Security Onion?
Several folks have asked about Security Onion t-shirts and they are available in our CafePress store!
http://www.cafepress.com/securityonion/11820053

Training
The next round of online training sessions starts in just a few days:
http://blog.securityonion.net/2016/02/next-round-of-security-onion-online_26.html

Commercial Support
Need commercial support?  Please see:
http://securityonionsolutions.com

Feedback
If you have any questions or problems, please use our security-onion mailing list:
https://github.com/Security-Onion-Solutions/security-onion/wiki/MailingLists

Thanks!

Security Onion Conference 2016 CFP

Security Onion Conference 2016 will be held in Augusta GA on Friday September 9 (please mark your calendar!).  This is the day before BSides Augusta, so you may want to plan on attending both:
http://bsidesaugusta.org

I'll publish more details about the Security Onion Conference as they are finalized.

We want to hear from you!

How are you...
...using Security Onion to fight evil?
...handling lots of traffic using Security Onion?
...integrating Security Onion with other technologies?
...automating common tasks with your own scripts?

Each talk should be 30 minutes with an additional 10 minutes for questions.

March 9 - CFP Open
June 1 - CFP Closed
July 1 - Speakers selected and notified
September 9 - Security Onion Conference

UPDATE 2016/06/02 - CFP is now closed!  Thanks to all who submitted!

UPDATE 2016/06/30 - Registration is now open and speaker lineup has been published!

https://securityonion.net/conference

Reminder: Upgrade from Security Onion 12.04 to 14.04

Security Onion 14.04 was released over one month ago:
http://blog.securityonion.net/2016/01/security-onion-140431-iso-image-now.html

The feedback has been overwhelmingly positive!

If you're still running the old Security Onion 12.04, you should start making plans to upgrade:
https://github.com/Security-Onion-Solutions/security-onion/wiki/Upgrading-from-12.04-to-14.04

securityonion-capme - 20121213-0ubuntu0securityonion35 resolves an issue

securityonion-capme - 20121213-0ubuntu0securityonion35 is now available and should resolve the following issue:

Issue 862: securityonion-capme: merge timestamp changes from Wes Lambert
https://github.com/Security-Onion-Solutions/security-onion/issues/862

Robert Bardo tested this package.  Thanks, Rob!

Updating
This new package is now available in our stable repo.  Please see the following page for full update instructions:
https://github.com/Security-Onion-Solutions/security-onion/wiki/Upgrade

Want to show your support for Security Onion?
Several folks have asked about Security Onion t-shirts and they are available in our CafePress store!
http://www.cafepress.com/securityonion/11820053

Training
The next round of online training sessions starts in just a few days:
http://blog.securityonion.net/2016/02/next-round-of-security-onion-online_26.html

Commercial Support
Need commercial support?  Please see:
http://securityonionsolutions.com

Feedback
If you have any questions or problems, please use our security-onion mailing list:
https://github.com/Security-Onion-Solutions/security-onion/wiki/MailingLists

Thanks!