eBook Now Available: Using Farsight Passive DNS for Incident Response - Download now!

Security Information Exchange (SIE) on Debian


Farsight supports Debian GNU/Linux through an apt package repository. Ubuntu and other Debian-based systems may be able to use this repository as well.

Debian/GNU/Linux 9 ("stretch") setup

Enable the stretch-farsightsec package repository
$ wget -O debian-farsightsec.gpg https://dl.farsightsecurity.com/debian/debian-farsightsec.gpg
$ echo "deb http://dl.farsightsecurity.com/debian stretch-farsightsec main" | sudo tee -a /etc/apt/sources.list.d/debian-farsightsec.list
$ sudo cp debian-farsightsec.gpg /etc/apt/trusted.gpg.d/
$ sudo apt-get update

Note that Farsight also offers Wheezy packages from its wheezy-farsightsec package repository which can be enabled as per:
$ wget -O debian-farsightsec.gpg https://dl.farsightsecurity.com/debian/archive.pubkey
$ echo "deb http://dl.farsightsecurity.com/debian wheezy-farsightsec main" | sudo tee -a /etc/apt/sources.list.d/debian-farsightsec.list
$ sudo cp debian-farsightsec.gpg /etc/apt/trusted.gpg.d/
$ sudo apt-get update
Note: The Wheezy packages are EOL and unmaintained.

Package Installation

Install the core nmsg packages and SIE plugins.
$ sudo apt-get install nmsgtool nmsg-msg-module-sie
Install packages for developing C applications.
$ sudo apt-get install libnmsg-dev nmsg-msg-module-sie-dev libwdns-dev
Install packages for developing Python applications.
$ sudo apt-get install python-nmsg python-wdns
Install packages for SIE remote access (sratool, sratunnel, radtool, radtunnel):
$ sudo apt-get install axa-tools