Security Onion Files

IDS/NSM, Snort, Suricata, Bro, Sguil, Squert, ELSA, Xplico

Brought to you by: dougburks

The interactive file manager requires Javascript. Please enable it or use sftp or scp.
You may still browse the files here.

Name	Modified	Size	InfoDownloads / Week
Parent folder
security-onion-upgrade.sh	2012-04-13	87.2 kB	0
securityonion-nsmnow-admin-scripts_20120412_i386.deb	2012-04-13	200.8 kB	0
securityonion-setup_20120412_i386.deb	2012-04-11	8.4 kB	0
Totals: 3 Items		296.4 kB	0

This Sourceforge repo stores old legacy versions of Security Onion.

Please do NOT use the versions of Security Onion stored here.

Instead, please download the latest version of Security Onion from Github:

https://github.com/Security-Onion-Solutions/security-onion/wiki/Installation

Source: README.md, updated 2016-06-07

Other Useful Business Software

Grafana: The open and composable observability platform

Faster answers, predictable costs, and no lock-in built by the team helping to make observability accessible to anyone.

Grafana is the open source analytics & monitoring solution for every database.

Learn More

Gen AI apps are built with MongoDB Atlas

The database for AI-powered applications.

MongoDB Atlas is the developer-friendly database used to build, scale, and run gen AI and LLM-powered apps—without needing a separate vector database. Atlas offers built-in vector search, global availability across 115+ regions, and flexible document modeling. Start building AI apps faster, all in one place.

Start Free

Recommended Projects

SELKS
A Suricata based IDS/IPS/NSM distro
Security Onion
Linux distro for threat hunting, enterprise security monitoring
Snorby Security Distribution
This project is no longer updated, see http://www.smoothsec.org/ Snorby SSD is is an open source IDS (Intrusion Detection System) Linux distribution based on Snort and Snorby. Built on Ubuntu 8.04 LTS . With SSD it is possible to get a complete Intrusion Detection System running within a few minutes.
Sguil
Sguil's (pronounced sgweel) main component is an intuitive GUI that receives realtime events from snort/barnyard. It includes other components which facilitate the practice of Network Security Monitoring (NSM) and event driven analysis of IDS alerts.
pytbull
============ ***IMPORTANT*** PLEASE NOTE THAT PYTBULL IS NO LONGER MAINTAINED AND HAS BEEN PORTED BY netrunn3r HERE: https://github.com/netrunn3r/pytbull-ng. YOU SHOULD USE pytbull-ng INSTEAD. THANK YOU. ============ pytbull is an Intrusion Detection/Prevention System (IDS/IPS) Testing Framework for Snort, Suricata and any IDS/IPS that generates an alert file. It can be used to test the detection and blocking capabilities of an IDS/IPS and to validate config.