Security Onion

Problem #1 Suppose you're monitoring traffic that has VLAN tags (in both directions).  By default, when you right-click the Alert ID ...

Security Onion 20120222 is now available!  This resolves the following issues: Issue 199: Snorby dashboard not updating New Users New ...

I really like having byobu configured for all my Security Onion SSH sessions, as it gives lots of good health/status information about the s...

Security Onion 20120202 is now available!  This resolves the following issues: Issue 195: Update nsm scripts to not create /etc/nsm/HOSTN...

Only 2 days left to vote for 2011 Toolsmith Tool of the Year!  If you're a fan of Security Onion, please vote! http://holisticinfosec.b...

Security Onion 20120125 is now available!  This resolves the following issues: Issue 203: New users should have a more sensible default fo...

I'll be giving a Shmoocon Firetalk on Saturday 1/28 at 7:40 PM: http://www.novainfosecportal.com/2012/01/25/shmoocon-2012-firetalks-%E...

Last year, I received a few success stories from satisfied Security Onion users: http://securityonion.blogspot.com/2011/05/security-onion-s...

Security Onion 20120124 is now available!  This resolves the following issue: Issue 140: OSSEC agent needs to be integrated into NSM scrip...

Security Onion 20120123 is now available!  This resolves the following issues: Issue 191: Update NSM scripts to control Bro Issue 202: I...

Security Onion 20120119 is now available!  This resolves the following issues: Issue 154: Track pulledpork download status Issue 160: Pul...

I'll be presenting Security Onion at the NoVA Hackers Shmoocon Epilogue: http://novahackers.blogspot.com/2012/01/shmoocon-epilogue-spea...

Security Onion 20120116 is now available!   This resolves the following issue: Issue 170: Snort 2.9.2 For more information about...

Security Onion 20120114 is now available!   This resolves the following issue: Issue 190: typo in /etc/cron.d/bro New User...

Security Onion 20120113 is now available!   This resolves the following issues: Issue 147: Bro 2.0 integration Issue 185: Syntax...

Security Onion 20120107 is now available!  This resolves the following issue: Issue 184: reference.config needs to be updated Ne...

Security Onion 20120106 is now available!  This resolves the following issues: Issue 152: etherape Issue 158: whois Issue 178: n...

Security Onion 20111229 is now available!  This resolves the following issues: Issue 109:  Optional PADS or PRADS Issue 115:  edit ...

Security Onion 20111228 is now available!  This resolves the following issue: Issue 151: NetworkMiner New Users New users can downloa...

Security Onion 20111227 is now available!  This resolves the following issue: Issue 172: Snorby Export-to-PDF results in error New User...