Security Onion Files

IDS/NSM, Snort, Suricata, Bro, Sguil, Squert, ELSA, Xplico

Brought to you by: dougburks

The interactive file manager requires Javascript. Please enable it or use sftp or scp.
You may still browse the files here.

Name	Modified	Size	InfoDownloads / Week
Parent folder
security-onion-upgrade.sh	2011-10-22	31.0 kB	0
securityonion-snort-conf_20111025_i386.deb	2011-10-22	384.5 kB	0
securityonion-snort_2.9.1.2-1_i386.deb	2011-10-22	3.0 MB	0
daq_0.6.2-1_i386.deb	2011-10-22	374.9 kB	0
Totals: 4 Items		3.8 MB	0

This Sourceforge repo stores old legacy versions of Security Onion.

Please do NOT use the versions of Security Onion stored here.

Instead, please download the latest version of Security Onion from Github:

https://github.com/Security-Onion-Solutions/security-onion/wiki/Installation

Source: README.md, updated 2016-06-07

Other Useful Business Software

MongoDB Atlas runs apps anywhere

Deploy in 115+ regions with the modern database for every enterprise.

MongoDB Atlas gives you the freedom to build and run modern applications anywhere—across AWS, Azure, and Google Cloud. With global availability in over 115 regions, Atlas lets you deploy close to your users, meet compliance needs, and scale with confidence across any geography.

Start Free

Keep company data safe with Chrome Enterprise

Protect your business with AI policies and data loss prevention in the browser

Make AI work your way with Chrome Enterprise. Block unapproved sites and set custom data controls that align with your company's policies.

Download Chrome

Recommended Projects

Security Onion
Linux distro for threat hunting, enterprise security monitoring
SELKS
A Suricata based IDS/IPS/NSM distro
Snorby Security Distribution
This project is no longer updated, see http://www.smoothsec.org/ Snorby SSD is is an open source IDS (Intrusion Detection System) Linux distribution based on Snort and Snorby. Built on Ubuntu 8.04 LTS . With SSD it is possible to get a complete Intrusion Detection System running within a few minutes.
Sguil
Sguil's (pronounced sgweel) main component is an intuitive GUI that receives realtime events from snort/barnyard. It includes other components which facilitate the practice of Network Security Monitoring (NSM) and event driven analysis of IDS alerts.
pytbull
============ ***IMPORTANT*** PLEASE NOTE THAT PYTBULL IS NO LONGER MAINTAINED AND HAS BEEN PORTED BY netrunn3r HERE: https://github.com/netrunn3r/pytbull-ng. YOU SHOULD USE pytbull-ng INSTEAD. THANK YOU. ============ pytbull is an Intrusion Detection/Prevention System (IDS/IPS) Testing Framework for Snort, Suricata and any IDS/IPS that generates an alert file. It can be used to test the detection and blocking capabilities of an IDS/IPS and to validate config.