Security Onion

techburgher found an issue with the new 14.04 version released yesterday: Issue 844: Setup: sosetup-network needs same interface regex as ...

Steve Baker found an issue with the new 14.04 version released yesterday: Issue 843: NSM: services fail to start when choosing Master only ...

I'm pleased to announce that Security Onion 14.04.3.1 RC2 has been promoted to RELEASE status! This release resolves the following ...

I recently announced our move towards Ubuntu 14.04, called the Big Distro Rebuild 2 (BDR2): http://blog.securityonion.net/2015/09/bdr2-elec...

Summary A remote command injection vulnerability in capme was discovered by Kevin Breen and James Hall and responsibly disclosed.  An updat...

The next round of online training sessions will be held Monday January 25 through Thursday January 28! Please note that we'll be using...

Snort 2.9.8.0 was recently released: http://blog.snort.org/2015/11/snort-2980-has-been-released.html I've updated our Snort package: ...

I recently announced our move towards Ubuntu 14.04, called the Big Distro Rebuild 2 (BDR2): http://blog.securityonion.net/2015/09/bdr2-elec...

I recently announced our move towards Ubuntu 14.04, called the Big Distro Rebuild 2 (BDR2): http://blog.securityonion.net/2015/09/bdr2-elec...

I recently announced our move towards Ubuntu 14.04, called the Big Distro Rebuild 2 (BDR2): http://blog.securityonion.net/2015/09/bdr2-elec...

The Snort Community ruleset has moved to a different URL.  If you're using the Snort ruleset, you'll need to update your pulledpork....

I recently announced our move towards Ubuntu 14.04, called the Big Distro Rebuild 2 (BDR2): http://blog.securityonion.net/2015/09/bdr2-elec...

The next round of online training sessions will be held Monday November 2 through Thursday November 5! For more information and to registe...

If you've been in the Security Onion community for a few years, you may remember that back in 2012 we embarked on a project called BDR (...

This year's Security Onion Conference was an overwhelming success!  Thanks to all of the great speakers that made it such a great event!...

The next round of online training sessions will be held Monday October 5 through Thursday October 8! For more information and to register,...

We have a new Security Onion 12.04.5.3 ISO image now available that contains all the latest Ubuntu and Security Onion updates as of August 2...

The recent Bro 2.4 package includes some new Bro logs such as mysql.log, kerberos.log, rdp.log, pe.log, and sip.log.  These new logs are now...

The recent Bro 2.4 package had new default settings for SpoolDir and LogDir in broctl.cfg which required updates to our NSM and Setup script...

Users trying to install x2go have reported conflicts with our securityonion-libcapture-tiny-perl package.  I've updated this package to ...

You may have previously experienced intermittent issues when the daily cron job runs rule-update to update your NIDS ruleset.  Because all S...

Snort 2.9.7.5 was recently released: http://blog.snort.org/2015/07/snort-2975-is-now-available-on-snortorg.html I've updated our Snor...

Snorby 2.6.3 was recently released to resolve some XSS issues: https://github.com/Snorby/snorby/commit/5a3a33cf496b66be7ef4bd7d3cce0a996e1d...

The next round of online training sessions will be held Monday 8/24 through Thursday 8/27! For more information and to register, please se...

Bro 2.4 was recently released: http://blog.bro.org/2015/06/bro-24-released.html I've packaged Bro 2.4 and updated the securityonion-b...

I've updated the securityonion-web-page package to resolve two issues.  The new package version is as follows: securityonion-web-page -...

I've updated the Setup package to resolve several issues, including allowing you to disable Snorby.  It should work as follows: choos...

Registration for the 2015 Security Onion Conference in Augusta GA is now open! http://security-onion-conference-2015.eventbrite.com/

Brian Kellogg sent in a patch for the securityonion-sguil-agent-ossec package to parse syslog IP addresses.  Thanks, Brian! The new packag...

I've updated the securityonion-tcpudpflow package to improve the formatting of the Bro transcript option when processing UDP (primarily ...

I've updated the sostat package to resolve an issue.  The new package version is as follows: securityonion-sostat - 20120722-0ubuntu0se...

We have a new Security Onion 12.04.5.2 ISO image now available that contains all the latest Ubuntu and Security Onion updates as of June 17,...