Security Onion

Suricata 1.4.1 was recently released: http://suricata-ids.org/2013/03/08/suricata-1-4-1-released/ I've packaged Suricata 1.4.1 and i...

I've packaged a new version of PRADS which changes the way that byte counts are reported.  PRADS will now report total IP bytes, which m...

PF_RING 5.5.2 was recently released: http://www.ntop.org/pf_ring/pf_ring-5-5-2-released/ I've packaged PF_RING 5.5.2 and the packages...

An issue was recently discovered in Bro 2.1 when monitoring multiple interfaces with PF_RING that could result in traffic loss.  This issue...

I've updated our NSM scripts to resolve the following issues: Issue 292 : Need cronjob to reload syslog-ng at midnight Issue 295 : In...

Seth Hall wrote a great Bro module  based on the recent Mandiant APT1 report .  Here are some quick instructions for loading the module on ...

Snorby 2.5.6 was recently released to fix a vulnerability: https://github.com/Snorby/snorby/blob/master/ChangeLog.md I've packaged S...

Snorby 2.5.4 was recently released with some vulnerability fixes: https://github.com/Snorby/snorby/blob/master/ChangeLog.md I've pac...

UPDATE 2013-10-05: See the updated version of this blog post here: http://securityonion.blogspot.com/2013/10/got-dns-visibility.html The...

Introduction New to Security Onion?  Here's a short FAQ from  Brad Shoop : What is Security Onion? Security Onion is a netwo...