Zeek 3.0.11 now available for Security Onion 16.04!

Zeek 3.0.11 was recently released and is a security update:
https://github.com/zeek/zeek/releases/tag/v3.0.11

The following updates are now available for Security Onion 16.04!

• securityonion-bro - 3.0.11-1ubuntu1securityonion1 (Zeek 3.0.11)
• securityonion-bro-afpacket - 1.3.0-1ubuntu1securityonion29
• securityonion-bro-scripts - 20121004-0ubuntu0securityonion111

These updates should resolve the following issue:

Zeek 3.0.11 #1792
https://github.com/Security-Onion-Solutions/security-onion/issues/1792

Thanks

• Thanks to the Zeek team for Zeek 3.0.11!
• Thanks to Chris Morgret for testing and QA!

Updating

Please see the following page for full update instructions:
https://securityonion.net/docs/Upgrade

Support

Need support?  Please see:
https://securityonion.net/docs/Support

Documentation

You can find our documentation here:
https://securityonion.net/docs

Also, we're now offering a printed copy of our official documentation with foreword by Richard Bejtlich and proceeds going to Rural Technology Fund:
https://securityonion.net/book

Training

Security Onion Solutions is the only official authorized training provider for Security Onion.  For more information about our training classes, please see:
https://securityonionsolutions.com

Appliances

We now offer hardware appliances!  For more information, please see:
https://securityonionsolutions.com

Thanks!

Zeek 3.0.10 now available for Security Onion 16.04!

Zeek 3.0.10 was recently released and is a security update:
https://github.com/zeek/zeek/releases/tag/v3.0.10

The following updates are now available for Security Onion 16.04!
securityonion-bro - 3.0.10-1ubuntu1securityonion2 (Zeek 3.0.10)
securityonion-bro-afpacket - 1.3.0-1ubuntu1securityonion28
securityonion-bro-scripts - 20121004-0ubuntu0securityonion110

These updates should resolve the following issue:

Zeek 3.0.10 #1790
https://github.com/Security-Onion-Solutions/security-onion/issues/1790

Thanks

Thanks to the Zeek team for Zeek 3.0.10!

Thanks to Chris Morgret for testing and QA!

Updating

Please see the following page for full update instructions:
https://securityonion.net/docs/Upgrade

Support

Need support?  Please see:
https://securityonion.net/docs/Support

Documentation

You can find our documentation here:
https://securityonion.net/docs

Also, we're now offering a printed copy of our official documentation with foreword by Richard Bejtlich and proceeds going to Rural Technology Fund:
https://securityonion.net/book

Training

Security Onion Solutions is the only official authorized training provider for Security Onion.  For more information about our training classes, please see:
https://securityonionsolutions.com

Appliances

We now offer hardware appliances!  For more information, please see:
https://securityonionsolutions.com

Thanks!

Zeek 3.0.8 now available for Security Onion 16.04!

Zeek 3.0.8 was recently released and is a security update:

https://github.com/zeek/zeek/releases/tag/v3.0.8

The following updates are now available for Security Onion 16.04!

securityonion-bro - 3.0.8-1ubuntu1securityonion1 (Zeek 3.0.8)

securityonion-bro-afpacket - 1.3.0-1ubuntu1securityonion25

securityonion-bro-scripts - 20121004-0ubuntu0securityonion108

These updates should resolve the following issue:

Zeek 3.0.8 #1779

https://github.com/Security-Onion-Solutions/security-onion/issues/1779

Thanks

Thanks to the Zeek team for Zeek 3.0.8!

Thanks to Chris Morgret for testing and QA!

Updating

Please see the following page for full update instructions:

https://securityonion.net/docs/Upgrade

Support

Need support?  Please see:

https://securityonion.net/docs/Support

Documentation

You can find our documentation here:

https://securityonion.net/docs

Also, we're now offering a printed copy of our official documentation with foreword by Richard Bejtlich and proceeds going to Rural Technology Fund:

https://securityonion.net/book

Training

Security Onion Solutions is the only official authorized training provider for Security Onion.  For more information about our training classes, please see:

https://securityonionsolutions.com

Appliances

We now offer hardware appliances!  For more information, please see:

https://securityonionsolutions.com

Thanks!

Zeek 3.0.7 now available for Security Onion!

The following updates are now available for Security Onion!

securityonion-bro - 3.0.7-1ubuntu1securityonion1 (Zeek 3.0.7)

securityonion-bro-afpacket - 1.3.0-1ubuntu1securityonion24

securityonion-bro-scripts - 20121004-0ubuntu0securityonion107

These updates should resolve the following issues:

Zeek 3.0.7 #1770

https://github.com/Security-Onion-Solutions/security-onion/issues/1770

Thanks

Thanks to the Zeek team for Zeek 3.0.7!

Thanks to Wes Lambert and Bryant Treacle for testing and QA!

Updating

Please see the following page for full update instructions:

https://securityonion.net/docs/Upgrade

Support

Need support?  Please see:

https://securityonion.net/docs/Support

Documentation

You can find our documentation here:

https://securityonion.net/docs

Also, we're now offering a printed copy of our official documentation with foreword by Richard Bejtlich and proceeds going to Rural Technology Fund:

https://securityonion.net/book

Training

Security Onion Solutions is the only official authorized training provider for Security Onion.  For more information about our training classes, please see:

https://securityonionsolutions.com

Appliances

We now offer hardware appliances!  For more information, please see:

https://securityonionsolutions.com

Thanks!

Zeek 3.0.6 now available for Security Onion!

The following updates are now available for Security Onion!

securityonion-bro - 3.0.6-1ubuntu1securityonion1 (Zeek 3.0.6)
securityonion-bro-afpacket - 1.3.0-1ubuntu1securityonion23
securityonion-bro-scripts - 20121004-0ubuntu0securityonion106

These updates should resolve the following issues:

Zeek 3.0.6 #1764
https://github.com/Security-Onion-Solutions/security-onion/issues/1764

Thanks
Thanks to the Zeek team for Zeek 3.0.6!
Thanks to Wes Lambert for testing and QA!

Updating
Please see the following page for full update instructions:
https://securityonion.net/docs/Upgrade

Support
Need support?  Please see:
https://securityonion.net/docs/Support

Documentation
You can find our documentation here:
https://securityonion.net/docs

Also, we're now offering a printed copy of our official documentation with foreword by Richard Bejtlich and proceeds going to Rural Technology Fund:
https://securityonion.net/book

Training
Security Onion Solutions is the only official authorized training provider for Security Onion.  For more information about our training classes, please see:
https://securityonionsolutions.com

Appliances
We now offer hardware appliances!  For more information, please see:
https://securityonionsolutions.com

Thanks!

Zeek 3.0.5 now available for Security Onion!

The following updates are now available for Security Onion!

securityonion-bro - 3.0.5-1ubuntu1securityonion1 (Zeek 3.0.5)
securityonion-bro-afpacket - 1.3.0-1ubuntu1securityonion22
securityonion-bro-scripts - 20121004-0ubuntu0securityonion105

These updates should resolve the following issues:

Zeek 3.0.5 #1757
https://github.com/Security-Onion-Solutions/security-onion/issues/1757

Thanks
Thanks to the Zeek team for Zeek 3.0.5!
Thanks to Wes Lambert for testing and QA!

Updating
Please see the following page for full update instructions:
https://securityonion.net/docs/Upgrade

Support
Need support?  Please see:
https://securityonion.net/docs/Support

Documentation
You can find our documentation here:
https://securityonion.net/docs

Also, we're now offering a printed copy of our official documentation with foreword by Richard Bejtlich and proceeds going to Rural Technology Fund:
https://securityonion.net/book

Training
Security Onion Solutions is the only official authorized training provider for Security Onion.  For more information about our training classes, please see:
https://securityonionsolutions.com

Appliances
We now offer hardware appliances!  For more information, please see:
https://securityonionsolutions.com

Thanks!

Zeek 3.0.3 now available for Security Onion!

The following updates are now available for Security Onion!

securityonion-bro - 3.0.3-1ubuntu1securityonion1 (Zeek 3.0.3)
securityonion-bro-afpacket - 1.3.0-1ubuntu1securityonion21
securityonion-bro-scripts - 20121004-0ubuntu0securityonion104
securityonion-samples-bro - 20170824-1ubuntu1securityonion6

These updates should resolve the following issues:

Zeek 3.0.3 #1726
https://github.com/Security-Onion-Solutions/security-onion/issues/1726

securityonion-samples-bro: symlink /opt/samples/zeek to /opt/samples/bro #1727
https://github.com/Security-Onion-Solutions/security-onion/issues/1727

Thanks
Thanks to the Zeek team for Zeek 3.0.3!
Thanks to Pete Nelson and Wes Lambert for testing and QA!

Updating
Please see the following page for full update instructions:
https://securityonion.net/docs/Upgrade

Support
Need support?  Please see:
https://securityonion.net/docs/Support

Documentation
You can find our documentation here:
https://securityonion.net/docs

Also, we're now offering a printed copy of our official documentation with foreword by Richard Bejtlich and proceeds going to Rural Technology Fund:
https://securityonion.net/book

Training
Security Onion Solutions is the only official authorized training provider for Security Onion.  For more information about our training classes, please see:
https://securityonionsolutions.com

Appliances
We now offer hardware appliances!  For more information, please see:
https://securityonionsolutions.com

Thanks!

Bro 2.6.4 now available for Security Onion!

Bro 2.6.4 is now available for Security Onion!  The new package versions are as follows:

securityonion-bro - 2.6.4-1ubuntu1securityonion1
securityonion-bro-afpacket - 1.3.0-1ubuntu1securityonion13
securityonion-bro-scripts - 20121004-0ubuntu0securityonion73

Bro 2.6.4

These packages should resolve the following issue:

Bro 2.6.4 #1628
https://github.com/Security-Onion-Solutions/security-onion/issues/1628

Thanks
Thanks to the Bro/Zeek team for Bro 2.6.4!
Thanks to Wylie Bayes for testing!

Updating
Please see the following page for full update instructions:
https://securityonion.net/docs/Upgrade

Documentation
We've got a brand new documentation site!  Please let us know if anything needs to be updated:
https://securityonion.net/docs

Also, we're now offering a printed copy of our official documentation with foreword by Richard Bejtlich and proceeds going to Rural Technology Fund:
https://securityonion.net/book

Conference
Only a few weeks left to register for Security Onion Conference 2019 on Friday, October 4, 2019!
https://socaugusta2019.eventbrite.com/

Training
Security Onion Solutions is the only official authorized training provider for Security Onion and we have 4-day Security Onion Training classes coming up in Columbia MD and Augusta GA!  If you can't make it to an onsite class, we have a new online training platform.  For more information and other training options, please see:
https://securityonionsolutions.com

Appliances
We now offer hardware appliances!  For more information, please see:
https://blog.securityonion.net/2018/10/introducing-security-onion-solutions.html

Support
Need support?  Please see:
https://securityonion.net/docs/Support

Thanks!

Bro 2.6.3 now available for Security Onion!

Bro 2.6.3 is now available for Security Onion!  The new package versions are as follows:

securityonion-bro - 2.6.3-1ubuntu1securityonion1
securityonion-bro-afpacket - 1.3.0-1ubuntu1securityonion12
securityonion-bro-scripts - 20121004-0ubuntu0securityonion72

Bro 2.6.3

These packages should resolve the following issue:

Bro 2.6.3 #1603
https://github.com/Security-Onion-Solutions/security-onion/issues/1603

Thanks
Thanks to the Bro/Zeek team for Bro 2.6.3!
Thanks to Wes Lambert for testing!

Updating
Please see the following page for full update instructions:
https://securityonion.net/docs/Upgrade

Conference
Registration is now open for Security Onion Conference 2019 on Friday, October 4, 2019!
https://socaugusta2019.eventbrite.com/

Documentation
We've got a brand new documentation site!  Please let us know if anything needs to be updated:
https://securityonion.net/docs

Also, we're now offering a printed copy of our official documentation with foreword by Richard Bejtlich and proceeds going to Rural Technology Fund:
https://securityonion.net/book

Training
Security Onion Solutions is the only official authorized training provider for Security Onion and we have 4-day Security Onion Training classes coming up in Columbia MD and Augusta GA!  If you can't make it to an onsite class, we have a new online training platform.  For more information and other training options, please see:
https://securityonionsolutions.com

Appliances
We now offer hardware appliances!  For more information, please see:
https://blog.securityonion.net/2018/10/introducing-security-onion-solutions.html

Support
Need support?  Please see:
https://securityonion.net/docs/Support

Thanks!

Bro 2.6.2 now available for Security Onion!

Bro 2.6.2 is now available for Security Onion!  The new package versions are as follows:

securityonion-bro - 2.6.2-1ubuntu1securityonion2
securityonion-bro-afpacket - 1.3.0-1ubuntu1securityonion11
securityonion-bro-scripts - 20121004-0ubuntu0securityonion71

These packages should resolve the following issue:

Bro 2.6.2 #1525
https://github.com/Security-Onion-Solutions/security-onion/issues/1525

Thanks
Thanks to the Bro/Zeek team for Bro 2.6.2!
Thanks to Wes Lambert for testing!

Updating
Please see the following page for full update instructions:
https://securityonion.net/docs/Upgrade

Conference
Please mark your calendar! Security Onion Conference 2019 will be on Friday, October 4, 2019 and registration will open July 18! CFP is open now and we want to hear from you!
https://blog.securityonion.net/2019/04/security-onion-conference-2019-cfp.html

Documentation
We've got a brand new documentation site!  Please let us know if anything needs to be updated:
https://securityonion.net/docs

Also, we're now offering a printed copy of our official documentation with foreword by Richard Bejtlich and proceeds going to Rural Technology Fund:
https://securityonion.net/book

Training
We have 4-day Security Onion Training classes coming up in Columbia MD!  If you can't make it to an onsite class, we have a new online training platform.  For more information and other training options, please see:
https://securityonionsolutions.com

Appliances
We now offer hardware appliances!  For more information, please see:
https://blog.securityonion.net/2018/10/introducing-security-onion-solutions.html

Support
Need support?  Please see:
https://securityonion.net/docs/Support

Thanks!

Bro 2.5.5 now available for Security Onion 14.04 and 16.04!

Bro 2.5.5 was released last night:
https://www.bro.org/download/NEWS.bro.html
https://www.bro.org/download/CHANGES.bro.txt

The following 14.04 packages are now available:
securityonion-bro - 2.5.5-1ubuntu1securityonion1
securityonion-bro-scripts - 20121004-0ubuntu0securityonion59

The following 16.04 packages are now available:
securityonion-bro - 2.5.5-1ubuntu1securityonion2
securityonion-bro-scripts - 20121004-0ubuntu0securityonion60

These packages should resolve the following issue:

Bro 2.5.5 #1314
https://github.com/Security-Onion-Solutions/security-onion/issues/1314

Bro 2.5.5

Thanks
Thanks to the Bro team for Bro 2.5.5!
Thanks to Wes Lambert for testing these new packages!

Updating
Please see the following page for full update instructions:
https://securityonion.net/wiki/Upgrade

Conference
Registration is now open for our annual Security Onion Conference in Augusta GA!
http://socaugusta2018.eventbrite.com/

Training
We have 4-day Security Onion training classes coming up in Maryland and Georgia!  If you can't make it to any of these onsite classes, we have a new online training platform!  For more information and other training options, please see:
https://securityonionsolutions.com

Support
Need support?  Please see:
https://securityonion.net/wiki/Support

Thanks!

Bro 2.5.2 now available for Security Onion!

Bro 2.5.2 was released recently:
http://blog.bro.org/2017/10/bro-252-242-release-security-update.html
https://www.bro.org/download/NEWS.bro.html
https://www.bro.org/download/CHANGES.bro.txt

The following packages are now available:

securityonion-bro - 2.5.2-1ubuntu1securityonion2
securityonion-bro-scripts - 20121004-0ubuntu0securityonion51

These new packages should resolve the following issues:

Issue 1144: Bro 2.5.2
https://github.com/Security-Onion-Solutions/security-onion/issues/1144

Thanks
Thanks to the Bro team for Bro 2.5.2!
Thanks to Wes Lambert for testing these new packages!

Updating
Please see the following page for full update instructions:
https://securityonion.net/wiki/Upgrade

Want to show your support for Security Onion?
Security Onion t-shirts are available in our CafePress store!
http://www.cafepress.com/securityonion/11820053

Training
We have a 4-day Security Onion training class coming up in San Antonio, Texas!  For this and other training options, please see:
https://securityonionsolutions.com

Support
Need support?  Please see:
https://securityonion.net/wiki/Support

Thanks!

Bro 2.5.1 now available for Security Onion!

Bro 2.5.1 was released recently:
http://blog.bro.org/2017/06/bro-251-released.html
https://www.bro.org/download/NEWS.bro.html
https://www.bro.org/download/CHANGES.bro.txt

The following packages are now available:

securityonion-bro - 2.5.1-1ubuntu1securityonion2
securityonion-bro-scripts - 20121004-0ubuntu0securityonion50

These new packages should resolve the following issues:

Issue 1109: Bro 2.5.1
https://github.com/Security-Onion-Solutions/security-onion/issues/1109

Issue 1052: Segmentation fault /opt/bro/bin/capstats
https://github.com/Security-Onion-Solutions/security-onion/issues/1052

Thanks
Thanks to Github user "bugcrash" for finding and reporting a segmentation fault in /opt/bro/bin/capstats!
Thanks to the Bro team for Bro 2.5.1!
Thanks to Wes Lambert for testing these new packages!

Updating
These packages are now available in our stable repo.  Please see the following page for full update instructions:
https://securityonion.net/wiki/Upgrade

Want to show your support for Security Onion?
Security Onion t-shirts are available in our CafePress store!
http://www.cafepress.com/securityonion/11820053

Conference
Security Onion Conference will be on Friday September 15 in beautiful Augusta, GA!
https://securityonion.net/conference

Training
Need training?  Please see:
https://securityonionsolutions.com

Support
Need support?  Please see:
https://securityonion.net/wiki/Support

Thanks!

Bro 2.5 now available for Security Onion!

Bro 2.5 was released recently:
http://blog.bro.org/2016/11/bro-25-released.html
https://www.bro.org/download/NEWS.bro.html
https://www.bro.org/download/CHANGES.bro.txt

I've packaged Bro 2.5 and also updated the securityonion-bro-scripts and securityonion-elsa-extras packages.  The new packages are as follows:
securityonion-bro - 2.5-1ubuntu1securityonion3
securityonion-bro-scripts - 20121004-0ubuntu0securityonion49
securityonion-elsa-extras - 20151011-1ubuntu1securityonion47

These packages resolve the following issues:

Issue 1023: Bro 2.5
https://github.com/Security-Onion-Solutions/security-onion/issues/1023

Issue 1028: securityonion-bro-scripts: update for Bro 2.5
https://github.com/Security-Onion-Solutions/security-onion/issues/1028

Issue 1029: securityonion-elsa-extras: update for Bro 2.5
https://github.com/Security-Onion-Solutions/security-onion/issues/1029

Thanks to Wes Lambert and Rob Bardo for testing!

Updating
These packages are now available in our stable repo.  Please see the following page for full update instructions:
https://github.com/Security-Onion-Solutions/security-onion/wiki/Upgrade

These updates will back up your Bro configuration.  You'll then need to do the following:

• re-apply any local customizations to the Bro config
• restart Bro as follows:
  sudo nsm_sensor_ps-restart --only-bro

Want to show your support for Security Onion?

Security Onion t-shirts are available in our CafePress store!
http://www.cafepress.com/securityonion/11820053

Training
Security Onion Solutions provides onsite, online, and on-demand training.  For more information, please see:
https://securityonionsolutions.com

Support
Need support?  Please see:
https://github.com/Security-Onion-Solutions/security-onion/wiki/Support

Thanks!

Bro 2.4 now available for Security Onion!

Bro 2.4 was recently released:
http://blog.bro.org/2015/06/bro-24-released.html

I've packaged Bro 2.4 and updated the securityonion-bro-scripts, securityonion-elsa-extras, and securityonion-capme packages.  The new packages are as follows:

securityonion-bro - 2.4-0ubuntu0securityonion2
securityonion-bro-scripts - 20121004-0ubuntu0securityonion43
securityonion-elsa-extras - 20131117-1ubuntu0securityonion99
securityonion-capme - 20121213-0ubuntu0securityonion23  

These packages resolve the following issues:

Issue 743: Bro 2.4
https://github.com/Security-Onion-Solutions/security-onion/issues/743

Issue 752: securityonion-bro-scripts: update sensortab.bro for Bro 2.4
https://github.com/Security-Onion-Solutions/security-onion/issues/752

Issue 753: securityonion-bro-scripts: update shellshock module for Bro 2.4
https://github.com/Security-Onion-Solutions/security-onion/issues/753

Issue 754: securityonion-bro-scripts: update extract.bro for Bro 2.4
https://github.com/Security-Onion-Solutions/security-onion/issues/754

Issue 762: securityonion-elsa-extras: update bro_conn parser for Bro 2.4
https://github.com/Security-Onion-Solutions/security-onion/issues/762

Issue 765: securityonion-elsa-extras: update bro_intel parser for Bro 2.4
https://github.com/Security-Onion-Solutions/security-onion/issues/765

Issue 768: securityonion-elsa-extras: update bro_ssl parser for Bro 2.4
https://github.com/Security-Onion-Solutions/security-onion/issues/768

Issue 774: securityonion-elsa-extras: update bro_ssh parser for Bro 2.4
https://github.com/Security-Onion-Solutions/security-onion/issues/774

Issue 773: securityonion-elsa-extras: add Windows and Cisco parsers from Brian Kellogg
https://github.com/Security-Onion-Solutions/security-onion/issues/773

Issue 793: CapMe: Update for Bro 2.4 conn.log
https://github.com/Security-Onion-Solutions/security-onion/issues/793

These packages have been tested by the following (thanks!):
James Taylor
Jay Swan
Heine Lysemose
Tommy Dew
Brian Kellogg

Updating
These new packages are now available in our stable repo.  Please see the following page for full update instructions:
https://github.com/Security-Onion-Solutions/security-onion/wiki/Upgrade

Feedback
If you have any questions or problems, please use our security-onion mailing list:
https://github.com/Security-Onion-Solutions/security-onion/wiki/MailingLists

Training
Need training?  Please see:
http://securityonionsolutions.com

Commercial Support
Need commercial support?  Please see:
http://securityonionsolutions.com

Help Wanted
If you and/or your organization have found value in Security Onion, please consider giving back to the community by joining one of our teams:
https://github.com/Security-Onion-Solutions/security-onion/wiki/TeamMembers

Thanks!

UPDATED 2015-08-10 to add securityonion-capme required due to new field in Bro conn.log.