Direct 32bit Ubuntu with Security Onion download...

[Mark]

I have an 4yr old 32bit Dell Vostro and want to explore Security Onion. I see a direct link to the 64bit version but none to a 32bit version. Is there a 32bit version .iso file for older systems?

[Doug Burks]

Hi Mark,

We don't provide a 32-bit ISO, but you can install your preferred
flavor of Ubuntu 12.04 32-bit and then add our PPA and packages as
described here:
https://code.google.com/p/security-onion/wiki/Installation#If_you_want_to_quickly_evaluate_Security_Onion_on_your_preferred

Doug

On Tue, Sep 3, 2013 at 11:49 PM, Mark <itsupp...@gmail.com> wrote:
> I have an 4yr old 32bit Dell Vostro and want to explore Security Onion. I see a direct link to the 64bit version but none to a 32bit version. Is there a 32bit version .iso file for older systems?
>

> --
> You received this message because you are subscribed to the Google Groups "security-onion" group.
> To unsubscribe from this group and stop receiving emails from it, send an email to security-onio...@googlegroups.com.
> To post to this group, send email to securit...@googlegroups.com.
> Visit this group at http://groups.google.com/group/security-onion.
> For more options, visit https://groups.google.com/groups/opt_out.



--
Doug Burks
http://securityonion.blogspot.com

[Mark]

On Tuesday, September 3, 2013 8:49:43 PM UTC-7, Mark wrote:
> I have an 4yr old 32bit Dell Vostro and want to explore Security Onion. I see a direct link to the 64bit version but none to a 32bit version. Is there a 32bit version .iso file for older systems?

Hi Doug:
I managed to install Ubuntu 12.04's Desktop version, SO and setup SO following those exact instructions, Thanks. However, I am unable to find the location of where to Start SO, Snorby, etc...
Can someone point in the direction of accessing the newly installed security programs? Thank you.

[Matt Gregory]

Hi Mark,

 

To access Snorby, ELSA, Squert, and Xplico, navigate to https://<your_SO_server_IP>/ which will have direct links to each of these web apps.  Note that remote access to Xplico will require you to first open appropriate ports with Ubuntu's uncomplicated firewall (UFW).

 

For Sguil, click the Sguil icon on the desktop or execute sguil.tk on the command line, then point the client at your SO server's IP address.  The recommended procedure for accessing your SO server is via a client VM with SO installed (but not having sosetup ran).  That way you can ensure you have the appropriate software installed (i.e., Sguil) and can seamlessly pivot to Wireshark, NetworkMiner, etc.  This also reduces the load on your server by not running any client processes.

 

See also:

http://code.google.com/p/security-onion/wiki/IntroductionToSecurityOnion

http://code.google.com/p/security-onion/wiki/IntroductionWalkthrough

Matt