DK 'Log : /ossim/alienvault_ossim_installer

Installer 1.2 beta2 available
Sat, 07 Mar 2009

Just a quick notice about beta2 being out. Tons of bugs have been this weeks, cheers to everybody helping. Updates for the upcoming week should apply to both but will be focused on beta2(550MB aprox).

Among the fixes, there are:

Forensics panel visual and functionality fixes. Click here for a teaser.
New auto-update notification. When enabled the system checks for rule/directive/plugin or code updates once a day, presenting a visual notification to the user about the update and it's contents.
Snort should work fine now. Included some custom AlienVault rules for directives.
About 20 new high-quality correlation directives detecting real world threats.
Plugin .cfg and .sql fixes.
Ossim configuration menu fixes (issue ossim-setup from commandline in order to check it out).
Many bugfixes.

posted at: 08:28 | path: /ossim | permanent link to this entry | 3 comments |

* Posted by Question at Tue Mar 10 22:41:36 2009

When I downloaded and burned the ISO, I noticed that the ISO shows AMD64 in the title on the CD it was burned to. When I went to install the Beta on some spare hardware it stated that it needed a CPU that supported a 64bit architecture. Will the new installer only be 64bit / elimination of 32bit support or is that only for this ISO?

* Posted by Dominique at Wed Mar 11 07:28:23 2009

No, we're working on both the 32bit as well as the 64bit installer. Problem is I had been working on 64bit the whole last year so that's easier to get out now, while 32bit should also be in public beta pretty soon.

64bit is way faster tho ;-)

* Posted by newzbie at Wed Mar 11 17:33:10 2009

I installed the beta today. At near the end of the installation, it asked me if I wanted to use eth0 in promiscuous mode. I hit continue but then Snort conf after that failed...

I used eth1 for management. how do I add eth0 as a senor?

Thanks