Security Onion

Security Onion 20111028 is now available!   This resolves  Issue 135   by updating the NSM scripts to start Snort with the AFPACKET DA...

Security Onion 20111025 is now available!   This resolves Issue 84   by updating Snort to version 2.9.1.2 and its DAQ to version 0.6.2....

Security Onion 20111020 is now available!   This resolves Issue 133 by updating the NSM scripts to spawn daemonlogger (instead of snort)...

I was looking at some packets recently and noticed the Wireshark message "Packet size limited during capture".  This was strange s...

I'll be presenting "Security Onion: Network Security Monitoring in Minutes" at  # BSidesATL  on Friday, November 4.  For more ...

I've got a guest blog post over at PaulDotCom describing how to find evil User Agents on your network using the new httpry functionality...

Security Onion 20111013 is now available!   This simple update resolves Issue 131 . In-place Upgrade Existing Security Onion users...

Security Onion 20111001 is now available!   This simple update resolves two issues in /usr/local/bin/pulledpork_update.sh: Issue 127 r...

Security Onion 20110922 is now available!   This update resolves Issue 126 .  It also spawns instances of  httpry and  httpry_agent  for ea...

Security Onion 20110920 is now available!   This update enables IP-to-country mapping in the SQueRT web interface  (great for showing off ...

Security Onion 20110919 is now available!   This update does the following : Updates the NSMnow admin scripts to support argus. Start...

Security Onion 20110915 is now available!   This update does the following : fixes a minor bug in sguil-db-purge upgrades Argus to versi...

Security Onion 20110914 is now available!   This will update the Setup script to use the new config file format and install a daily scrip...