Tricks and Tips

This section is a collection of miscellaneous tricks and tips for Security Onion.

• Airgap
  • Key Differences
  • Updating
  • Updating from RC3
• Cloud AMI
  • Getting Started
• Docker
  • Download
  • Security
  • Elastic
  • Registry
  • Networking
  • Bridge
  • Containers
  • VMware Tools
  • Dependencies
• DNS Anomaly Detection
• ICMP Anomaly Detection
  • Usage
  • Presentation
  • Download
• Adding a new disk
  • Method 1: LVM (Logical Volume Management)
  • Method 2: Mount a separate drive to /nsm
  • Method 3: Make /nsm a symlink to the new logging location
• PCAPs for Testing
  • Links
  • Downloading
  • tcpreplay
  • so-import-pcap
• Removing a Sensor
  • Disable sensor interface
  • Delete sensor configuration
  • Wipe sensor configuration and data
  • Remove sensor reference from manager node
  • Remove search node reference from manager node Elasticsearch _cluster/settings
• Syslog Output
• UTC and Time Zones