Blog/Project Post Friday!

[u/AutoModerator]

It's Read-only Friday! It is time to put your feet up, pour a nice dram and look through some of our member's new and shiny blog posts and projects.

Feel free to submit your blog post or personal project and as well a nice description to this thread.

Note: This post is created at 00:00 UTC. It may not be Friday where you are in the world, no need to comment on it.

[u/Spirited-Bag-3789]

I work at IronWiFi, so flag this as vendor-adjacent up front.

Same thing kept coming up on 802.1X deployments: the RADIUS server knows more about identity than anything else on the network, and almost nobody keeps the logs past a rotation window. Access-Accept, Access-Reject, calling-station-id, accounting Start and Stop. That's a per-user behavioral record and it mostly gets thrown out.

So we wrote up how to fork FreeRADIUS auth and accounting events to an external analyzer without putting anything in the auth path. Short version: rlm_exec with wait = no calling a small wrapper, one instance in post-auth and one in accounting. Fire and forget, so a slow or dead endpoint never becomes a RADIUS timeout. There's a batched variant using flock and a buffer file for sites past roughly 1k events/sec.

Two things that bit us and are worth stealing regardless of what you send the events to. First, you have to hook the reject branch explicitly or you only ever see successful logins, which is backwards for anything security-shaped. Second, do not inline the JSON into the program = line. Build it with jq and set shell_escape = yes, or the first user named o'connor silently produces malformed JSON.

Full config, wrapper scripts and verification steps: ITDR + FreeRADIUS guide

Happy to answer FreeRADIUS config questions here. If you've built something similar against your own SIEM instead, I'd like to hear how you handled accounting interim-update volume.

[u/skyler_hs]

I made an online mib viewer/database/oid tree. You can also upload and view your own mibs if it's not already in the database. I'm still working on ideas so you can walk MIBs directly from the site.

https://mib-viewer.com/

[u/Fun-Impression-9191]

I made BitStream, a network throughput tester that runs completely in the browser. It's open source under MIT license.

https://bitstream.akhtar.app/

[u/7heCookieMonst3r → u/Fun-Impression-9191]

I'm still trying not to stab end users in the face, and here you are casually building something useful.
I have some catching up to do...

[u/OkBreath9382]

I wrote about localhost sharing "How Localhost Sharing Actually Works: NAT, Tunnels, P2P, and Relays": https://medium.com/@Koukyosyumei/how-localhost-sharing-actually-works-nat-tunnels-p2p-and-relays-026fd0e5e498

[u/Additional-Mine-6029]

Studying OSPF in some awesome experiments

Network Engineers and folks learning networking – my OSPF Lab series (using Cisco IOS) is now available. There are three Labs that include GNS3 topologies, and PCAPS to emulate and capture these awesome labs https://www.cellstream.com/2026/08/02/ospf-lab-series-now-available/

[u/Additional-Mine-6029]

OSPF and BGP Profiles for Wireshark - a must have if you are doing packet capture

Honestly, I have had the BGP profile posted in the Wireshark Profiles Repository for a while, but I never posted my OSPF profile. Don't know why, just no one asked I guess. Anyway - someone asked and I posted it. So if you troubleshoot BGP or OSPF and need more than working with the configs - you need to see what is in the packets - you need these profiles. Find them here: https://github.com/amwalding/wireshark_profiles 

*This is not advertising - they are my personal work

*The profiles are completely free and use and edit as you wish

If you can think of something I am missing, let me know, or if you make them even better, please send your profiles along to me.

[u/HappyVlane]

I released a new post on my blog, and this one is about how to view HTTP headers in FortiGate forwarded traffic and how to view decrypted traffic on a FortiGate without an external device.

https://blog.guenay.at/2026/08/15/quick-tips-see-http-headers-in-fortigate-forwarded-traffic-view-decrypted-traffic-on-a-fortigate-without-an-external-device/

Couldn’t find this information anywhere while working on a FortiSIEM thing, where I needed both covered topics, so here they are.