Security Onion iso download issue

[Bruce Statton]

I have to download Security Onion iso for my class, and to set it up on VMware workstation. I go to the website provided on Sourceforge, and it downloads, however there is no iso file to choose from when I attempt to set up a new virtualization on VMWare. There are only text files when I look at what I downloaded from Sourceforge. I am on Windows 8.

Any help would be appreciated.

[Doug Burks]

Hi Bruce,

Are you following the guide here?
https://code.google.com/p/security-onion/wiki/QuickISOImage

Did you then click this link?
http://sourceforge.net/projects/security-onion/files/12.04.5.1/

Did you then click the securityonion-12.04.5.1-20150205.iso link?

Did you then verify the MD5sum of the downloaded ISO image?

On Wed, Mar 25, 2015 at 8:06 AM, Bruce Statton <bruce...@gmail.com> wrote:
> I have to download Security Onion iso for my class, and to set it up on VMware workstation. I go to the website provided on Sourceforge, and it downloads, however there is no iso file to choose from when I attempt to set up a new virtualization on VMWare. There are only text files when I look at what I downloaded from Sourceforge. I am on Windows 8.
>
> Any help would be appreciated.
>

> --
> You received this message because you are subscribed to the Google Groups "security-onion" group.
> To unsubscribe from this group and stop receiving emails from it, send an email to security-onio...@googlegroups.com.
> To post to this group, send email to securit...@googlegroups.com.
> Visit this group at http://groups.google.com/group/security-onion.
> For more options, visit https://groups.google.com/d/optout.



--
Doug Burks
Need Security Onion Training or Commercial Support?
http://securityonionsolutions.com

[Bruce Statton]

Ok, what do I do if the md5sum and the iso image are different?

[Doug Burks]

That means that either the file was corrupted in transit or you
downloaded the wrong file.

On Wed, Mar 25, 2015 at 8:41 AM, Bruce Statton <bruce...@gmail.com> wrote:
> Ok, what do I do if the md5sum and the iso image are different?
>

[Bruce Statton]

Okay, I still don't understand. I don't know why this would be the wrong file to download if it's the only file to download. And there was no interruption during the downloading process. Should I try another web browser like Firefox instead of Internet Explorer? Would that help?

After I unzip the download, I do not even see an ISO file type. I see a folder that has an image of a cd, and when I click on that it says that the image has been corrupted.

I just do not understand the issue. I've tried downloading this multiple times and it's always the same problem.

Thanks.

[Doug Burks]

What exactly are you unzipping? You should only be downloading one
file with an .ISO extension and you shouldn't need to unzip it.
VMware Workstation can boot a VM directly from the ISO image itself.

I didn't see any answers to my previous questions, so I'll ask them again:

Are you following the guide here?
https://code.google.com/p/security-onion/wiki/QuickISOImage

Did you then click this link?
http://sourceforge.net/projects/security-onion/files/12.04.5.1/

Did you then click the securityonion-12.04.5.1-20150205.iso link?

[Bruce Statton]

Okay, when I go to Sourceforge to download the ISO, I see that there are two files, I click on the ISO file (not the md5 one), and it begins to download. After downloading, I check my downloads file and there is the Security Onion as a zip. Once I unzip it, there are multiple folders and files.

So if it's just suppose to be one file, why is giving me a zip containing multiple files and folders?

[Bruce Statton]

And I have read the guides to your previous questions, and everything seems okay. But obviously something is not right.

[Doug Burks]

My guess would be that you have WinZip or some other tool installed
that has associated itself with the .ISO file extension. Have you
tried verifying the checksum of the ISO file without unzipping it?

On Wed, Mar 25, 2015 at 9:31 AM, Bruce Statton <bruce...@gmail.com> wrote:
> Okay, when I go to Sourceforge to download the ISO, I see that there are two files, I click on the ISO file (not the md5 one), and it begins to download. After downloading, I check my downloads file and there is the Security Onion as a zip. Once I unzip it, there are multiple folders and files.
>
> So if it's just suppose to be one file, why is giving me a zip containing multiple files and folders?
>

[Bruce Statton]

Yes, I am able to read the md5 checksum through a text file before unzipping, and it is different from the one on the Sourceforge website file.

[Doug Burks]

What do you mean by "read the md5 checksum through a text file"?

Are you using a piece of software like WinMD5Sum
(http://www.nullriver.com/products/winmd5sum) to verify the checksum
of securityonion-12.04.5.1-20150205.iso?

Here are the correct checksums for securityonion-12.04.5.1-20150205.iso:

MD5: 02a49a06a55df8997669b4df9f1048a0
SHA1: 3cf32398d2859d0ca4009cdf13df0bb4f4ab98d9

On Wed, Mar 25, 2015 at 9:37 AM, Bruce Statton <bruce...@gmail.com> wrote:
> Yes, I am able to read the md5 checksum through a text file before unzipping, and it is different from the one on the Sourceforge website file.
>

[Bruce Statton]

I attached a screenshot. You can see after I double click the zip folder (before I unzip) that I can click on the text file of the md5 and can read the code.

[Doug Burks]

Please do not "double click the zip folder". You don't want to open
the ISO image in your archiving tool and look at the files inside the
ISO image.

I also see from your screenshot that you're looking at the 12.04.1 ISO
image from 2013. That is a very old version. Please do not use that
version.

Please follow the instructions here:
https://code.google.com/p/security-onion/wiki/QuickISOImage

These instructions will have you click the following link to download
the *current* ISO image (12.04.5.1 NOT 12.04.1):
http://sourceforge.net/projects/security-onion/files/12.04.5.1/

Then click the securityonion-12.04.5.1-20150205.iso link. (again
12.04.5.1 NOT 12.04.1).

Once that file is downloaded, please do not double-click it. Doing so
will open in your archiving tool (WinZip or other), which we do not
want.

Next, you need to download a checksum tool for Windows, like the
previously mentioned WinMD5Sum:
http://www.nullriver.com/products/winmd5sum

Then drag and drop the downloaded ISO image into the checksum tool.
The checksum tool will output a checksum and it should match one of
the following:

MD5: 02a49a06a55df8997669b4df9f1048a0
SHA1: 3cf32398d2859d0ca4009cdf13df0bb4f4ab98d9

Also see:
https://help.ubuntu.com/community/HowToMD5SUM

On Wed, Mar 25, 2015 at 9:48 AM, Bruce Statton <bruce...@gmail.com> wrote:
> I attached a screenshot. You can see after I double click the zip folder (before I unzip) that I can click on the text file of the md5 and can read the code.
>

[Bruce Statton]

I understand it's an old version, but it's the requirement for my class, in order to do certain tasks and assignments. I also tried not double clicking on it before and trying to upload it on VMWare but it says that it cannot recognize or read it in order to make a new virtualization.

I will try your instructions and let you know.

Thank you.

[Bruce Statton]

Okay, I followed what you said and the checksum output matches the MD5 code.

Now what? How do I install this on to VMWare workstation?

As you can see in the screenshot, it says that it does not know the operating system of the disc image.

[Doug Burks]

The ISO image is based on Ubuntu 12.04 64-bit, so you should be able
to select that as an option. VMware doesn't really have to know what
OS it is, it just uses that to set some default settings. You should
configure the settings of your VM as directed by our Wiki or your
professor.

[Bruce Statton]

But I have to use Security Onion. I need to use that ISO.

I don't understand why it just won't download correctly. I can't imagine I am the only person (Windows user) this has happened to.

I've downloaded other ISOs for virtualization before and those worked fine.

Is there another website that I can try to download Security Onion on? Or something that will work specifically for Windows?

I appreciate the help, but you can understand how frustrating this can be. I've been trying to download this ISO for the last two days now with no solution.

[Doug Burks]

I wasn't telling you to use another ISO. You've downloaded the ISO
image and verified the checksum. VMware doesn't recognize the ISO
image and that's fine. You can simply click Next and tell VMware that
it's Ubuntu 12.04 64-bit (to use VMware's default settings for Ubuntu)
OR you can simply configure your own VM settings.