-
Notifications
You must be signed in to change notification settings - Fork 521
MetaPackages
Security Onion consists of over 70 Ubuntu packages in a Launchpad PPA. You can install these packages individually or you can install one or more metapackages (groups of packages) depending on what functionality you need.
-
securityonion-client (about 50MB)
Sguil client, Wireshark, NetworkMiner, etc. -
securityonion-sensor (about 50MB) - Snort, Suricata, Bro, netsniff-ng, Sguil agents, etc.
-
securityonion-elsa and securityonion-elsa-extras (about 50MB) - ELSA
-
securityonion-server (about 200MB) - Sguil server, Squert, CapMe, etc.
-
securityonion-all - all of the above
-
securityonion-iso (new in Security Onion 14.04) - all of the above plus bridge-utils, byobu, foremost, securityonion-onionsalt, securityonion-samples-markofu, securityonion-samples-mta, securityonion-samples-shellshock, xfsprogs, xplico
- Introduction
- Use Cases
- Hardware Requirements
- Release Notes
- Download/Install
- Booting Issues
- After Installation
- UTC and Time Zones
- Services
- VirtualBox Walkthrough
- VMWare Walkthrough
- Videos
- Architecture
- Cheat Sheet
- Conference
- Elastic Stack
- Elastic Architecture
- Elasticsearch
- Logstash
- Kibana
- ElastAlert
- Curator
- FreqServer
- DomainStats
- Docker
- Redis
- Data Fields
- Beats
- Pre-Releases
- ELSA to Elastic
- Network Configuration
- Proxy Configuration
- Firewall/Hardening
- Email Configuration
- Integrating with other systems
- Changing IP Addresses
- NTP
- Managing Alerts
- Managing Rules
- Adding Local Rules
- Disabling Processes
- Filtering with BPF
- Adjusting PF_RING for traffic
- MySQL Tuning
- Adding a new disk
- High Performance Tuning
- Trimming PCAPs