SIE and NMSG Tutorial Blog Posts

• Farsight’s Network Message, Volume 1: Introduction to NMSG

• Farsight’s Network Message, Volume 2: Introduction to nmsgtool

• Farsight’s Network Message, Volume 3: Headers and Encoding

• Farsight’s Network Message, Volume 4: The C Programming API

• Farsight’s Network Message, Volume 5: The Python Programming API

• Processing Passive DNS With the nmsg C API

• Google Protocol Buffer Deserialization The Hard Way

• NMSG and JSON encoding

• JSON Serialization Support in nmsg

• Farsight’s Network Message: Loss Tracking Explained

Farsight blog articles related to processing SIE channels:

• Finding Web Proxy Auto Discovery Protocol (WAD) related Security Exposures Using Farsight Security’s NXDOMAINs Channel

• Conficker and a Brief Tutorial on Working With SIE Channel 80 Sinkhole Data

• What (Besides NXDOMAINs) Do We See on Farsight Security’s DNS Errors Channel?

• Spotting A DNS Denial of Service Reflection Attack in SIE Darkspace Telescope Data

• Accessing Darknet Telescope Data via SIE Remote Access (SRA)

• Visualizing SIE Channel 204 Rdata

• Geolocating & Mapping IP Address Data From SIE

• Creating a Heatmap From SIE Channel 204 Data