Saturday, January 26, 2013

Security Onion on Virtual Box

Reinstalled +Doug Burks's  Security Onion  Security Onion/ @ home.   I find that Virtual Box seems to work better than VMware Player:  vmware player is not happy with promiscuous mode, wants you to "chmod a+rw /dev/vm*", and even then I was not seeing traffic on the bridged interface.  Also, Virtual Box allows snapshots.