Security Onion 14.04.4.1 ISO image now available!

We have a new Security Onion 14.04.4.1 ISO image now available that contains all the latest Ubuntu and Security Onion updates as of March 19, 2016!

This resolves the following issue:

14.04.4.1 ISO image #861
https://github.com/Security-Onion-Solutions/security-onion/issues/861

This new ISO image has been tested by the following (thanks!):
Wes Lambert
James Taylor
L.T. Easterly

New Users
I've updated the Verify_ISO page for the new ISO image:
https://github.com/Security-Onion-Solutions/security-onion/blob/master/Verify_ISO.md

Please remember to verify the signature of the downloaded ISO image using the instructions on that page.

Existing Deployments
If you have existing installations based on a previous 14.04 ISO image, there is no need to download the new ISO image.  You can simply continue using our standard update process to install updated packages as they are made available:
https://github.com/Security-Onion-Solutions/security-onion/wiki/Upgrade

Release Notes
For more information about this release, please see:
https://github.com/Security-Onion-Solutions/security-onion/wiki/Security-Onion-14.04-Release-Notes

Training
This new ISO image will be used in our upcoming online class in May:
http://blog.securityonion.net/2016/03/next-round-of-security-onion-online.html

Want to show your support for Security Onion?
Several folks have asked about Security Onion t-shirts and they are available in our CafePress store!
http://www.cafepress.com/securityonion/11820053

Need Support?
If you have questions or problems, please see:
https://github.com/Security-Onion-Solutions/security-onion/wiki/Support

Thanks!

Security Onion 14.04.3.1 ISO image now available!

I'm pleased to announce that Security Onion 14.04.3.1 RC2 has been promoted to RELEASE status!

This release resolves the following issues:

Issue 814: Move to Ubuntu 14.04
https://github.com/Security-Onion-Solutions/security-onion/issues/814

Issue 739: Salt 2015.5.3
https://github.com/Security-Onion-Solutions/security-onion/issues/739

Issue 829: Apache reverse proxy /elsa-query to ELSA port 3154
https://github.com/Security-Onion-Solutions/security-onion/issues/829

Issue 824: securityonion-web-page: fix links to ELSA
https://github.com/Security-Onion-Solutions/security-onion/issues/824

Issue 810: securityonion-web-page: move SSH Logins query to Host Logs category
https://github.com/Security-Onion-Solutions/security-onion/issues/810

Issue 811: securityonion-tcpudpflow: add SMTP and RDP support
https://github.com/Security-Onion-Solutions/security-onion/issues/811

Issue 807: securityonion-elsa-extras: Remove NameVirtualHost to eliminate warning on apache restart
https://github.com/Security-Onion-Solutions/security-onion/issues/807

Issue 729: Setup: add option for pivot URL (no longer needed since Apache is proxying /elsa-query to ELSA port 3154)
https://github.com/Security-Onion-Solutions/security-onion/issues/729

Issue 821: Setup: fix domain name cancellation
https://github.com/Security-Onion-Solutions/security-onion/issues/821

Issue 822: Setup: remove alphanumeric password requirement
https://github.com/Security-Onion-Solutions/security-onion/issues/822

Issue 828: Setup: desktop shortcuts
https://github.com/Security-Onion-Solutions/security-onion/issues/828

Issue 790: sostat: remove snorby
https://github.com/Security-Onion-Solutions/security-onion/issues/790

Issue 830: soup: remove old linux kernels
https://github.com/Security-Onion-Solutions/security-onion/issues/830

Issue 815: NSM: add log directory creation to postinst
https://github.com/Security-Onion-Solutions/security-onion/issues/815

Issue 831: Snort Community Ruleset has moved
https://github.com/Security-Onion-Solutions/security-onion/issues/831

Issue 812: Bro 2.4.1
https://github.com/Security-Onion-Solutions/security-onion/issues/812

Issue 816: Snort needs liblzma
https://github.com/Security-Onion-Solutions/security-onion/issues/816

Issue 818: Suricata 3.0RC3
https://github.com/Security-Onion-Solutions/security-onion/issues/818

Issue 836: syslog-ng warning when restarting
https://github.com/Security-Onion-Solutions/security-onion/issues/836

Issue 838: Move downloads from SourceForge to Github
https://github.com/Security-Onion-Solutions/security-onion/issues/838

Release Notes
For more information about this release, please see:
https://github.com/Security-Onion-Solutions/security-onion/wiki/Security-Onion-14.04-Release-Notes

Installation Guide
I've updated the Installation guide to reflect the download locations for the new ISO image:
https://github.com/Security-Onion-Solutions/security-onion/wiki/Installation

Checksums
As always, please remember to verify the checksum of the downloaded ISO image using the instructions in the Installation guide:
https://github.com/Security-Onion-Solutions/security-onion/blob/master/checksums.txt

Existing Deployments
If you have existing installations of Security Onion 12.04, you can upgrade to 14.04:
https://github.com/Security-Onion-Solutions/security-onion/wiki/Upgrading-from-12.04-to-14.04

Training
We have online training classes starting next Monday that will use this new ISO image:
http://blog.securityonion.net/2016/01/next-round-of-security-onion-online.html

Commercial Support
Need commercial support?  Please see:
http://securityonionsolutions.com

Feedback
If you have any questions or problems, please use our security-onion mailing list:
https://github.com/Security-Onion-Solutions/security-onion/wiki/MailingLists

Want to show your support for Security Onion?
Several folks have asked about Security Onion t-shirts and they are now available in our CafePress store!
http://www.cafepress.com/securityonion/11820053

Thanks!

Security Onion 14.04 Release Candidate 2 (BDR2 RC2)

I recently announced our move towards Ubuntu 14.04, called the Big Distro Rebuild 2 (BDR2):
http://blog.securityonion.net/2015/09/bdr2-electric-boogaloo-towards-ubuntu.html
http://blog.securityonion.net/2015/10/bdr2-progress-report-towards-ubuntu-1404.html
http://blog.securityonion.net/2015/11/bdr2-testers-wanted.html
http://blog.securityonion.net/2015/12/bdr2-iso-testers-wanted.html
http://blog.securityonion.net/2016/01/security-onion-1404-has-reached-release.html

I'm pleased to report that Release Candidate 2 of our new ISO image is now available!

We need your help!

If you haven't already, please join our security-onion-testing mailing list and follow the testing procedures here:
https://groups.google.com/d/topic/security-onion-testing/s0gonp04guA/discussion

Thanks in advance for your time and effort!

Security Onion 14.04 has reached Release Candidate status!

I recently announced our move towards Ubuntu 14.04, called the Big Distro Rebuild 2 (BDR2):
http://blog.securityonion.net/2015/09/bdr2-electric-boogaloo-towards-ubuntu.html
http://blog.securityonion.net/2015/10/bdr2-progress-report-towards-ubuntu-1404.html
http://blog.securityonion.net/2015/11/bdr2-testers-wanted.html
http://blog.securityonion.net/2015/12/bdr2-iso-testers-wanted.html

I'm pleased to report that a Release Candidate version of our new ISO image is now available!

We need your help!

If you haven't already, please join our security-onion-testing mailing list and follow the testing procedures here:
https://groups.google.com/d/topic/security-onion-testing/itTRpYxx6ag/discussion

Thanks in advance for your time and effort!

BDR2: ISO Testers Wanted!

I recently announced our move towards Ubuntu 14.04, called the Big Distro Rebuild 2 (BDR2):
http://blog.securityonion.net/2015/09/bdr2-electric-boogaloo-towards-ubuntu.html
http://blog.securityonion.net/2015/10/bdr2-progress-report-towards-ubuntu-1404.html
http://blog.securityonion.net/2015/11/bdr2-testers-wanted.html

I'm pleased to report that an ALPHA version of our new ISO image is now available!

We need your help!

If you haven't already, please join our security-onion-testing mailing list and follow the testing procedures here:
https://groups.google.com/d/topic/security-onion-testing/Lma3vCYQMgw/discussion

Thanks in advance for your time and effort!

BDR2: Testers Wanted!

I recently announced our move towards Ubuntu 14.04, called the Big Distro Rebuild 2 (BDR2):
http://blog.securityonion.net/2015/09/bdr2-electric-boogaloo-towards-ubuntu.html
http://blog.securityonion.net/2015/10/bdr2-progress-report-towards-ubuntu-1404.html

I'm pleased to report that BDR2 is continuing to progress quite nicely!

We're now ready to start testing in-place upgrades from Ubuntu 12.04 to Ubuntu 14.04.  If you haven't already, please join our security-onion-testing mailing list and follow the testing procedures at the links below:

https://groups.google.com/d/topic/security-onion-testing/voIjY2OYjtc/discussion

https://groups.google.com/d/topic/security-onion-testing/dXd0qq5HP3c/discussion

https://groups.google.com/d/topic/security-onion-testing/N9DAGuvqSoo/discussion

https://groups.google.com/d/topic/security-onion-testing/nM75XYnv1DY/discussion

https://groups.google.com/d/topic/security-onion-testing/aTLRDGkXG7o/discussion

https://groups.google.com/d/topic/security-onion-testing/07OZSYfsdrA/discussion

https://groups.google.com/d/topic/security-onion-testing/Bim6Uw5oA3I/discussion

https://groups.google.com/d/topic/security-onion-testing/ZZugJV04Xts/discussion

Thanks!

BDR2 Progress Report (towards Ubuntu 14.04)

I recently announced our move towards Ubuntu 14.04, called the Big Distro Rebuild 2 (BDR2):
http://blog.securityonion.net/2015/09/bdr2-electric-boogaloo-towards-ubuntu.html

I'm pleased to report that BDR2 is coming along quite nicely!

What works?
At this point, the securityonion-all metapackage and all of its dependencies should install correctly on Ubuntu 14.04 and most of the software should work correctly.

What doesn't work?
Xplico and Salt haven't been moved over yet.  There may be a few other optional packages which haven't been fully tested yet.

How can we help?
We're going to need lots of help testing all of these packages over the next few months, so if you'd like to contribute back to the community, please join the security-onion-testing mailing list and then see the following threads:
https://groups.google.com/d/topic/security-onion-testing/voIjY2OYjtc/discussion
https://groups.google.com/d/topic/security-onion-testing/dXd0qq5HP3c/discussion
https://groups.google.com/d/topic/security-onion-testing/N9DAGuvqSoo/discussion

Thanks!

What's new?
Most things are staying the same, although we're updating ELSA to the latest version which includes new animated charts and dashboards using charts.js.

Dashboard showing top DNS, HTTP, and SSL requests

Connections - Top Services

DHCP - DHCP Servers

DNS - Top Return Code

Files - MIME Types

Files - Sources

FTP - Top Commands

HTTP - Top Ports

HTTP - MIME Types

HTTP - Top Sites

HTTP - Sites Hosting EXEs

HTTP - Sites Hosting JARs

HTTP - Sites Hosting SWFs

HTTP - Sites Hosting ZIPs

Kerberos - Top Services

Notice - Top Notice Types

SMTP - Top Subjects

Software - Software Detected by Bro

SSL - Top SSL Versions

X.509 - Key Length

BDR2: Electric Boogaloo (towards Ubuntu 14.04)

If you've been in the Security Onion community for a few years, you may remember that back in 2012 we embarked on a project called BDR (Big Distro Rebuild) to put all of our software into true Ubuntu packages designed for Ubuntu 12.04:
https://groups.google.com/d/topic/security-onion-testing/kOib06_QMPU/discussion

It's now time to rebuild all of those packages for Ubuntu 14.04, so I'm calling this BDR2.  As mentioned at the Security Onion Conference, I'm hoping to get all this work done by Christmas, but no promises!

I've done some initial work to get the securityonion-client metapackage to install cleanly on Ubuntu 14.04.

Sguil client running on Ubuntu 14.04

I'll soon start working on the securityonion-sensor and securityonion-server metapackages.

Help Wanted

We're going to need lots of help testing all of these packages over the next few months, so if you'd like to contribute back to the community, please join the security-onion-testing mailing list and then see the following thread:
https://groups.google.com/d/topic/security-onion-testing/voIjY2OYjtc/discussion

Thanks!