Security Onion

Security Onion 20120329 is now available!  This resolves the following issues: Issue 114: Provide single location for configuring BPF fil...

Security Onion 20120326 is now available!  This resolves the following issues: Issue 197: Snort 2.9.2.1 Issue 218: /etc/nsm/gen-msg.map ...

Security Onion 20120321 is now available!  This resolves the following issues: Issue 237: Snorby 2.5.1  - This is a bugfix release.  It f...

I spent some time this morning creating and updating several pages on the Security Onion Wiki : Installation Procedure http://code.googl...

Security Onion 20120312 is now available!  This resolves the following issues: Issue 233: Snorby 2.5.0 Our original Snorby package ...

Ubuntu just released new MySQL packages.  A few things to be aware of for Security Onion users: The update will stop MySQL in order to pe...

SANS is coming to Augusta GA in June!  Doug Burks will be teaching SANS SEC503: Intrusion Detection In-Depth and Mark Baggett will be teachi...

Security Onion 20120229 is now available!  This resolves the following issues: Issue 220: Add mon to /usr/local/bin/setup Issue 231: Sno...

Problem #1 Suppose you're monitoring traffic that has VLAN tags (in both directions).  By default, when you right-click the Alert ID ...

Security Onion 20120222 is now available!  This resolves the following issues: Issue 199: Snorby dashboard not updating New Users New ...

I really like having byobu configured for all my Security Onion SSH sessions, as it gives lots of good health/status information about the s...

Security Onion 20120202 is now available!  This resolves the following issues: Issue 195: Update nsm scripts to not create /etc/nsm/HOSTN...

Only 2 days left to vote for 2011 Toolsmith Tool of the Year!  If you're a fan of Security Onion, please vote! http://holisticinfosec.b...

Security Onion 20120125 is now available!  This resolves the following issues: Issue 203: New users should have a more sensible default fo...

I'll be giving a Shmoocon Firetalk on Saturday 1/28 at 7:40 PM: http://www.novainfosecportal.com/2012/01/25/shmoocon-2012-firetalks-%E...

Last year, I received a few success stories from satisfied Security Onion users: http://securityonion.blogspot.com/2011/05/security-onion-s...

Security Onion 20120124 is now available!  This resolves the following issue: Issue 140: OSSEC agent needs to be integrated into NSM scrip...

Security Onion 20120123 is now available!  This resolves the following issues: Issue 191: Update NSM scripts to control Bro Issue 202: I...

Security Onion 20120119 is now available!  This resolves the following issues: Issue 154: Track pulledpork download status Issue 160: Pul...

I'll be presenting Security Onion at the NoVA Hackers Shmoocon Epilogue: http://novahackers.blogspot.com/2012/01/shmoocon-epilogue-spea...

Security Onion 20120116 is now available!   This resolves the following issue: Issue 170: Snort 2.9.2 For more information about...

Security Onion 20120114 is now available!   This resolves the following issue: Issue 190: typo in /etc/cron.d/bro New User...

Security Onion 20120113 is now available!   This resolves the following issues: Issue 147: Bro 2.0 integration Issue 185: Syntax...

Security Onion 20120107 is now available!  This resolves the following issue: Issue 184: reference.config needs to be updated Ne...