SmoothSec

SmoothSec is an open source and free operating system designed to be a capable and reliable IDS (Intrusion Detection System) and IPS (Intrusion Prevention System). It is bases on the award winning Debian GNU/Linux distribution.

Available for the 32-bit and 64-bit architectures as installable-only CDs

The operating system is available for download as 32-bit and 64-bit installable-only CD and DVD ISO images that must be written to either CD/DVD discs or USB flash drives.

Boot options

As mentioned, the distribution can only be installed on local drive, which is also the main boot entry on the bootloader. In the advanced options entry you’ll find only the Hardware Detection Tool (HDT), which allows you to view detailed information about your computer’s hardware components.

Text-mode installer that is quite easy to use

The distribution features a text-mode installer that is quite easy to use, requiring users to choose a language, location and keyboard layout, enter a hostname and/or domainname, partition the disk, configure the package manager and install the bootloader.

CLI environment

Despite the fact that is is distributed as full CD-size images, the distro doesn’t includes a graphical environment. All the action takes place in the command-line, where the user must login using the “root” username and the “toor” password (without quotes).

Then, you must run the “smoothsec.first.setup” script and follow the on-screen instructions to adapt the system to your needs. Available modes include All in one, Distributed (web console) and Distributed (sensor) for one or three network interfaces.

Includes numerous IDS/IPS applications

Among the included intrusion detection applications, we can mention Snort, Suricata, Snorby, PulledPork, and Pigsty. With this apps, and with the easy to setup process, the SmoothSec Linux distribution allows users to deploy a complete IPS or IDS system within minutes.

Bottom line

All in all, SmoothSec is a decent, lightweight and stable Debian-based operating system that has been designed from the ground up to be used by security beginners and experts alike.

What is new in this release:

• Improvements and fixes
• Smoothsec apt repository added.

What is new in version 3.2:

• Improvements and fixes:
• Snorby email reports fixed.
• Pigsty stability and performances improved.
• Pigsty logs archving.
• Upgrades:
• Snort Version 2.9.5.3
• Suricata version 1.4.5
• MariaDB 5.5.32
• Pigsty Version 0.1.5
• New tools:
• Arpwatch
• Sagan
• tcpxtract
• ngrep
• nast
• ipgrab
• tshark
• justniffer
• python-impacket
• python idstools
• python tcpextract
• greppcap.py
• percona-toolkit
• percona-xtrabackup