gnu/packages/networking.scm

   1 ;;; GNU Guix --- Functional package management for GNU
   2 ;;; Copyright © 2014, 2017, 2018 Ludovic Courtès <ludo@gnu.org>
   3 ;;; Copyright © 2015, 2016, 2017, 2018 Ricardo Wurmus <rekado@elephly.net>
   4 ;;; Copyright © 2015 Mark H Weaver <mhw@netris.org>
   5 ;;; Copyright © 2015, 2016, 2017 Stefan Reichör <stefan@xsteve.at>
   6 ;;; Copyright © 2016 Raimon Grau <raimonster@gmail.com>
   7 ;;; Copyright © 2016, 2017, 2018, 2019, 2020 Tobias Geerinckx-Rice <me@tobias.gr>
   8 ;;; Copyright © 2016 John Darrington <jmd@gnu.org>
   9 ;;; Copyright © 2016, 2017, 2018, 2019, 2020 Nicolas Goaziou <mail@nicolasgoaziou.fr>
  10 ;;; Copyright © 2016 Eric Bavier <bavier@member.fsf.org>
  11 ;;; Copyright © 2016, 2017 ng0 <ng0@n0.is>
  12 ;;; Copyright © 2016, 2017, 2018 Arun Isaac <arunisaac@systemreboot.net>
  13 ;;; Copyright © 2016 Benz Schenk <benz.schenk@uzh.ch>
  14 ;;; Copyright © 2016, 2017 Pjotr Prins <pjotr.guix@thebird.nl>
  15 ;;; Copyright © 2017 Mathieu Othacehe <m.othacehe@gmail.com>
  16 ;;; Copyright © 2017 Leo Famulari <leo@famulari.name>
  17 ;;; Copyright © 2017, 2018, 2019, 2020 Efraim Flashner <efraim@flashner.co.il>
  18 ;;; Copyright © 2017, 2018, 2019 Rutger Helling <rhelling@mykolab.com>
  19 ;;; Copyright © 2017, 2019 Gábor Boskovits <boskovits@gmail.com>
  20 ;;; Copyright © 2017 Thomas Danckaert <post@thomasdanckaert.be>
  21 ;;; Copyright © 2018 Adam Van Ymeren <adam@vany.ca>
  22 ;;; Copyright © 2018 Fis Trivial <ybbs.daans@hotmail.com>
  23 ;;; Copyright © 2018 Tonton <tonton@riseup.net>
  24 ;;; Copyright © 2018 Clément Lassieur <clement@lassieur.org>
  25 ;;; Copyright © 2018 Theodoros Foradis <theodoros@foradis.org>
  26 ;;; Copyright © 2018, 2020 Marius Bakke <mbakke@fastmail.com>
  27 ;;; Copyright © 2018, 2020 Oleg Pykhalov <go.wigust@gmail.com>
  28 ;;; Copyright © 2018 Pierre Neidhardt <mail@ambrevar.xyz>
  29 ;;; Copyright © 2019 Maxim Cournoyer <maxim.cournoyer@gmail.com>
  30 ;;; Copyright © 2019 Vasile Dumitrascu <va511e@yahoo.com>
  31 ;;; Copyright © 2019 Julien Lepiller <julien@lepiller.eu>
  32 ;;; Copyright © 2019 Timotej Lazar <timotej.lazar@araneo.si>
  33 ;;; Copyright © 2019 Brice Waegeneire <brice@waegenei.re>
  34 ;;; Copyright © 2019 Tonton <tonton@riseup.net>
  35 ;;; Copyright © 2019, 2020 Alex Griffin <a@ajgrf.com>
  36 ;;; Copyright © 2019 Jan Wielkiewicz <tona_kosmicznego_smiecia@interia.pl>
  37 ;;; Copyright © 2019 Daniel Schaefer <git@danielschaefer.me>
  38 ;;; Copyright © 2019 Diego N. Barbato <dnbarbato@posteo.de>
  39 ;;; Copyright © 2020 Vincent Legoll <vincent.legoll@gmail.com>
  40 ;;; Copyright © 2020 Brice Waegeneire <brice@waegenei.re>
  41 ;;;
  42 ;;; This file is part of GNU Guix.
  43 ;;;
  44 ;;; GNU Guix is free software; you can redistribute it and/or modify it
  45 ;;; under the terms of the GNU General Public License as published by
  46 ;;; the Free Software Foundation; either version 3 of the License, or (at
  47 ;;; your option) any later version.
  48 ;;;
  49 ;;; GNU Guix is distributed in the hope that it will be useful, but
  50 ;;; WITHOUT ANY WARRANTY; without even the implied warranty of
  51 ;;; MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
  52 ;;; GNU General Public License for more details.
  53 ;;;
  54 ;;; You should have received a copy of the GNU General Public License
  55 ;;; along with GNU Guix.  If not, see <http://www.gnu.org/licenses/>.
  56
  57 (define-module (gnu packages networking)
  58   #:use-module ((guix licenses) #:prefix license:)
  59   #:use-module (guix packages)
  60   #:use-module (guix download)
  61   #:use-module (guix git-download)
  62   #:use-module (guix build-system cmake)
  63   #:use-module (guix build-system glib-or-gtk)
  64   #:use-module (guix build-system gnu)
  65   #:use-module (guix build-system go)
  66   #:use-module (guix build-system perl)
  67   #:use-module (guix build-system python)
  68   #:use-module (guix build-system trivial)
  69   #:use-module (guix utils)
  70   #:use-module (gnu packages)
  71   #:use-module (gnu packages admin)
  72   #:use-module (gnu packages adns)
  73   #:use-module (gnu packages algebra)
  74   #:use-module (gnu packages audio)
  75   #:use-module (gnu packages autotools)
  76   #:use-module (gnu packages base)
  77   #:use-module (gnu packages bison)
  78   #:use-module (gnu packages boost)
  79   #:use-module (gnu packages check)
  80   #:use-module (gnu packages code)
  81   #:use-module (gnu packages compression)
  82   #:use-module (gnu packages cpp)
  83   #:use-module (gnu packages crypto)
  84   #:use-module (gnu packages curl)
  85   #:use-module (gnu packages cyrus-sasl)
  86   #:use-module (gnu packages dejagnu)
  87   #:use-module (gnu packages documentation)
  88   #:use-module (gnu packages flex)
  89   #:use-module (gnu packages gettext)
  90   #:use-module (gnu packages glib)
  91   #:use-module (gnu packages gnome)
  92   #:use-module (gnu packages gnupg)
  93   #:use-module (gnu packages gtk)
  94   #:use-module (gnu packages image)
  95   #:use-module (gnu packages libidn)
  96   #:use-module (gnu packages linux)
  97   #:use-module (gnu packages lua)
  98   #:use-module (gnu packages multiprecision)
  99   #:use-module (gnu packages kerberos)
 100   #:use-module (gnu packages ncurses)
 101   #:use-module (gnu packages nettle)
 102   #:use-module (gnu packages openldap)
 103   #:use-module (gnu packages password-utils)
 104   #:use-module (gnu packages pcre)
 105   #:use-module (gnu packages perl)
 106   #:use-module (gnu packages perl-check)
 107   #:use-module (gnu packages pkg-config)
 108   #:use-module (gnu packages polkit)
 109   #:use-module (gnu packages pretty-print)
 110   #:use-module (gnu packages pulseaudio)
 111   #:use-module (gnu packages python)
 112   #:use-module (gnu packages python-web)
 113   #:use-module (gnu packages python-xyz)
 114   #:use-module (gnu packages qt)
 115   #:use-module (gnu packages readline)
 116   #:use-module (gnu packages serialization)
 117   #:use-module (gnu packages sqlite)
 118   #:use-module (gnu packages ssh)
 119   #:use-module (gnu packages textutils)
 120   #:use-module (gnu packages tls)
 121   #:use-module (gnu packages valgrind)
 122   #:use-module (gnu packages web)
 123   #:use-module (gnu packages wxwidgets)
 124   #:use-module (gnu packages xml)
 125   #:use-module (ice-9 match))
 126
 127 (define-public blueman
 128   (package
 129     (name "blueman")
 130     (version "2.1.2")
 131     (source
 132      (origin
 133        (method url-fetch)
 134        (uri
 135         (string-append "https://github.com/blueman-project/blueman/releases/"
 136                        "download/2.1.2/blueman-2.1.2.tar.gz"))
 137        (sha256
 138         (base32 "0wamxdw36c8i3aqwmja5q70fajqwd7inpkvlpkldd54wdxbcd38d"))))
 139     (build-system glib-or-gtk-build-system)
 140     (arguments
 141      `(#:configure-flags
 142        (list
 143         "--enable-polkit"
 144         "--disable-appindicator"         ; Deprecated
 145         "--with-systemdsystemunitdir=no" ; Not required
 146         "--with-systemduserunitdir=no")))  ; Not required
 147     (native-inputs
 148      `(("cython" ,python-cython)
 149        ("glib:bin" ,glib "bin")
 150        ("gtk+:bin" ,gtk+ "bin")
 151        ("intltool" ,intltool)
 152        ("libtool" ,libtool)
 153        ("pkg-config" ,pkg-config)))
 154     (inputs
 155      `(("adwaita-icon-theme" ,adwaita-icon-theme)
 156        ("bluez" ,bluez)
 157        ("dbus" ,dbus)
 158        ("gdkpixbuf" ,gdk-pixbuf)
 159        ("glib" ,glib)
 160        ("gtk+" ,gtk+)
 161        ("iproute2" ,iproute)
 162        ("net-tools" ,net-tools)
 163        ("pango" ,pango)
 164        ("polkit" ,polkit)
 165        ("pulseaudio" ,pulseaudio)
 166        ("pycairo" ,python-pycairo)
 167        ("pygobject" ,python-pygobject)
 168        ("python" ,python-wrapper)
 169        ("libnm" ,libnma)))
 170     (synopsis "GTK+ Bluetooth manager")
 171     (description "Blueman is a Bluetooth management utility using the Bluez
 172 D-Bus backend.  It is designed to be easy to use for most common Bluetooth
 173 tasks.")
 174     (home-page "https://github.com/blueman-project/blueman")
 175     (license license:gpl3+)))
 176
 177 ;; The gnu.org ‘home’ for this GNU project is a directory listing with 1.6.0 as
 178 ;; the latest version.  The author's git repository, mentioned in the 1.6.0
 179 ;; README and otherwise legit-looking, contains a proper 1.7.0 release tarball
 180 ;; with many OUI updates.  Use it, even though it's also several years old now.
 181 (define-public macchanger
 182   (package
 183     (name "macchanger")
 184     (version "1.7.0")
 185     (source
 186      (origin
 187        (method url-fetch)
 188        (uri (string-append "https://github.com/alobbs/macchanger/"
 189                            "releases/download/" version "/"
 190                            name "-" version ".tar.gz"))
 191        (sha256
 192         (base32 "1gs5m0jxyprdp00w2qkbnaqm3ilkjz0q1gqdg4nzdm8g4xy73qns"))))
 193     (build-system gnu-build-system)
 194     (home-page "https://www.gnu.org/software/macchanger/")
 195     (synopsis "Viewing and manipulating MAC addresses of network interfaces")
 196     (description "GNU MAC Changer is a utility for viewing and changing MAC
 197 addresses of networking devices.  New addresses may be set explicitly or
 198 randomly.  They can include MAC addresses of the same or other hardware vendors
 199 or, more generally, MAC addresses of the same category of hardware.")
 200     (license license:gpl2+)))
 201
 202 (define-public miredo
 203   (package
 204     (name "miredo")
 205     (version "1.2.6")
 206     (source (origin
 207               (method url-fetch)
 208               (uri (string-append "http://www.remlab.net/files/miredo/miredo-"
 209                                   version ".tar.xz"))
 210               (sha256
 211                (base32
 212                 "0j9ilig570snbmj48230hf7ms8kvcwi2wblycqrmhh85lksd49ps"))))
 213     (build-system gnu-build-system)
 214     (arguments
 215      '(#:phases
 216        (modify-phases %standard-phases
 217          ;; The checkconf test in src/ requires network access.
 218          (add-before
 219           'check 'disable-checkconf-test
 220           (lambda _
 221             (substitute* "src/Makefile"
 222               (("^TESTS = .*") "TESTS = \n"))
 223             #t)))))
 224     (home-page "https://www.remlab.net/miredo/")
 225     (synopsis "Teredo IPv6 tunneling software")
 226     (description
 227      "Miredo is an implementation (client, relay, server) of the Teredo
 228 specification, which provides IPv6 Internet connectivity to IPv6 enabled hosts
 229 residing in IPv4-only networks, even when they are behind a NAT device.")
 230     (license license:gpl2+)))
 231
 232 (define-public socat
 233   (package
 234     (name "socat")
 235     (version "1.7.3.4")
 236     (source (origin
 237               (method url-fetch)
 238               (uri (string-append
 239                     "http://www.dest-unreach.org/socat/download/socat-"
 240                     version ".tar.bz2"))
 241               (sha256
 242                (base32
 243                 "1z7xgnwiqpcv1j6aghhj9nqbx7cg3gpc4n9j7vi9hm7nhv5788wp"))))
 244     (build-system gnu-build-system)
 245     (arguments '(#:tests? #f))          ; no test suite
 246     (inputs `(("openssl" ,openssl)))
 247     (home-page "http://www.dest-unreach.org/socat/")
 248     (synopsis
 249      "Open bidirectional communication channels from the command line")
 250     (description
 251      "socat is a relay for bidirectional data transfer between two independent
 252 data channels---files, pipes, devices, sockets, etc.  It can create
 253 \"listening\" sockets, named pipes, and pseudo terminals.
 254
 255 socat can be used, for instance, as TCP port forwarder, as a shell interface
 256 to UNIX sockets, IPv6 relay, for redirecting TCP oriented programs to a serial
 257 line, to logically connect serial lines on different computers, or to
 258 establish a relatively secure environment (su and chroot) for running client
 259 or server shell scripts with network connections.")
 260     (license license:gpl2)))
 261
 262 (define-public tcp-wrappers
 263   (package
 264     (name "tcp-wrappers")
 265     (version "7.6")
 266     (source (origin
 267               (method url-fetch)
 268               (uri (string-append
 269                     "ftp://ftp.porcupine.org/pub/security/tcp_wrappers_"
 270                     version ".tar.gz"))
 271               (sha256
 272                (base32
 273                 "0p9ilj4v96q32klavx0phw9va21fjp8vpk11nbh6v2ppxnnxfhwm"))))
 274     (build-system gnu-build-system)
 275     (arguments
 276      `(#:phases
 277        (modify-phases %standard-phases
 278          (delete 'configure)  ; there is no configure script
 279          (delete 'check)      ; there are no tests
 280          (replace 'build
 281            (lambda _
 282              (chmod "." #o755)
 283              ;; Upstream doesn't generate a shared library.  So we have to do it.
 284              (setenv "CC" "gcc -fno-builtin -fPIC")
 285              (substitute* "Makefile"
 286                (("^(all[^\n]*)" line) (string-append line " libwrap.so\n
 287 libwrap.so: $(LIB_OBJ)\n
 288 \tgcc -shared $^ -o $@\n")))
 289              ;; Deal with some gcc breakage.
 290              (substitute* "percent_m.c"
 291                (("extern char .sys_errlist.*;") ""))
 292              (substitute* "scaffold.c"
 293                (("extern char .malloc.*;") ""))
 294              ;; This, believe it or not, is the recommended way to build!
 295              (invoke "make" "REAL_DAEMON_DIR=/etc" "linux")))
 296          ;; There is no make install stage, so we have to do it ourselves.
 297          (replace 'install
 298            (lambda _
 299              (let ((out (assoc-ref %outputs "out"))
 300                    (man-pages `("hosts_access.3"
 301                                 "hosts_access.5"
 302                                 "hosts_options.5"
 303                                 "tcpd.8"
 304                                 "tcpdchk.8"
 305                                 "tcpdmatch.8"))
 306                    (libs  `("libwrap.a"
 307                             "libwrap.so"))
 308                    (headers `("tcpd.h"))
 309                    (bins `("safe_finger"
 310                            "tcpd"
 311                            "tcpdchk"
 312                            "tcpdmatch"
 313                            "try-from")))
 314                (for-each
 315                 (lambda (x)
 316                   (install-file x (string-append out "/include")))
 317                 headers)
 318                (for-each
 319                 (lambda (x)
 320                   (install-file x (string-append out "/share/man/man"
 321                                                  (string-take-right x 1))))
 322                 man-pages)
 323                (for-each
 324                 (lambda (x)
 325                   (install-file x (string-append out "/lib/")))
 326                 libs)
 327                (for-each
 328                 (lambda (x)
 329                   (install-file x (string-append out "/bin/")))
 330                 bins))
 331              #t)))))
 332     (home-page "http://www.porcupine.org")
 333     (synopsis  "Monitor and filter incoming requests for network services")
 334     (description "With this package you can monitor and filter incoming requests for
 335 network services.  It includes a library which may be used by daemons to
 336 transparently check connection attempts against an access control list.")
 337     (license (license:non-copyleft "file://DISCLAIMER"
 338                                    "See the file DISCLAIMER in the distribution."))))
 339
 340
 341 (define-public zeromq
 342   (package
 343     (name "zeromq")
 344     (version "4.3.2")
 345     (source (origin
 346               (method url-fetch)
 347               (uri (string-append "https://github.com/zeromq/libzmq/releases"
 348                                   "/download/v" version "/zeromq-" version ".tar.gz"))
 349               (sha256
 350                (base32
 351                 "0qzp80ky4y2k7k1ya09v9gkivvfbz2km813snrb8jhnn634bbmzb"))))
 352     (build-system gnu-build-system)
 353     (home-page "https://zeromq.org")
 354     (synopsis "Library for message-based applications")
 355     (description
 356      "The 0MQ lightweight messaging kernel is a library which extends the
 357 standard socket interfaces with features traditionally provided by specialized
 358 messaging middle-ware products.  0MQ sockets provide an abstraction of
 359 asynchronous message queues, multiple messaging patterns, message
 360 filtering (subscriptions), seamless access to multiple transport protocols and
 361 more.")
 362     (license license:lgpl3+)))
 363
 364 (define-public czmq
 365   (package
 366     (name "czmq")
 367     (version "4.2.0")
 368     (source (origin
 369               (method url-fetch)
 370               (uri (string-append
 371                     "https://github.com/zeromq/" name
 372                     "/releases/download/v" version
 373                     "/" name "-" version ".tar.gz"))
 374               (sha256
 375                (base32
 376                 "1szciz62sk3fm4ga9qjpxz0n0lazvphm32km95bq92ncng12kayg"))))
 377     (build-system gnu-build-system)
 378     (arguments
 379      '(#:configure-flags '("--enable-drafts")
 380        #:phases (modify-phases %standard-phases
 381                   (add-before 'check 'patch-tests
 382                     (lambda _
 383                       ;; XXX FIXME: Disable the zproc test, which fails on some
 384                       ;; hardware: <https://github.com/zeromq/czmq/issues/2007>.
 385                       (substitute* "src/czmq_selftest.c"
 386                         (("\\{ \"zproc\", zproc_test.*")
 387                          ""))
 388                       #t)))))
 389     (inputs
 390      `(("zeromq" ,zeromq)))
 391     (home-page "http://zeromq.org")
 392     (synopsis "High-level C bindings for ØMQ")
 393     (description
 394      "czmq provides bindings for the ØMQ core API that hides the differences
 395 between different versions of ØMQ.")
 396     (license license:mpl2.0)))
 397
 398 (define-public cppzmq
 399   (package
 400     (name "cppzmq")
 401     (version "4.6.0")
 402     (source (origin
 403               (method git-fetch)
 404               (uri (git-reference
 405                     (url "https://github.com/zeromq/cppzmq")
 406                     (commit (string-append "v" version))))
 407               (sha256
 408                (base32
 409                 "19acx2bzi4n6fdnfgkja1nds7m1bwg8lw5vfcijrx9fv75pa7m8h"))
 410               (file-name (git-file-name name version))))
 411     (build-system cmake-build-system)
 412     (arguments
 413      '(;; FIXME: The test suite requires downloading Catch and custom
 414        ;; CMake targets, and refuses to use the system version.
 415        ;; See <https://github.com/zeromq/cppzmq/issues/334>.
 416        #:tests? #f
 417        #:configure-flags '("-DCPPZMQ_BUILD_TESTS=OFF")))
 418     (native-inputs
 419      `(("pkg-config" ,pkg-config)))
 420     (inputs
 421      `(("zeromq" ,zeromq)))
 422     (home-page "http://zeromq.org")
 423     (synopsis "C++ bindings for the ØMQ messaging library")
 424     (description
 425      "This package provides header-only C++ bindings for ØMQ.  The header
 426 files contain direct mappings of the abstractions provided by the ØMQ C API.")
 427     (license license:expat)))
 428
 429 (define-public librdkafka
 430   (package
 431     (name "librdkafka")
 432     (version "0.9.1")
 433     (source (origin
 434               (method url-fetch)
 435               (uri (string-append
 436                     "https://github.com/edenhill/librdkafka/archive/"
 437                     version ".tar.gz"))
 438               (file-name (string-append name "-" version ".tar.gz"))
 439               (sha256
 440                (base32
 441                 "10ldx7g7ymmg17snzx78vy4n8ma1rjx0agzi34g15j2fk867xmas"))))
 442     (build-system gnu-build-system)
 443     (arguments
 444      '(#:phases
 445        (modify-phases %standard-phases
 446          (replace 'configure
 447            ;; its custom configure script doesn't understand 'CONFIG_SHELL'.
 448            (lambda* (#:key outputs #:allow-other-keys)
 449              (let ((out (assoc-ref outputs "out")))
 450                ;; librdkafka++.so lacks RUNPATH for librdkafka.so
 451                (setenv "LDFLAGS"
 452                        (string-append "-Wl,-rpath=" out "/lib"))
 453                (invoke "./configure"
 454                        (string-append "--prefix=" out))))))))
 455     (native-inputs
 456      `(("python" ,python-wrapper)))
 457     (propagated-inputs
 458      `(("zlib" ,zlib))) ; in the Libs.private field of rdkafka.pc
 459     (home-page "https://github.com/edenhill/librdkafka")
 460     (synopsis "Apache Kafka C/C++ client library")
 461     (description
 462      "librdkafka is a C library implementation of the Apache Kafka protocol,
 463 containing both Producer and Consumer support.")
 464     (license license:bsd-2)))
 465
 466 (define-public libndp
 467   (package
 468     (name "libndp")
 469     (version "1.7")
 470     (source (origin
 471               (method url-fetch)
 472               (uri (string-append "http://libndp.org/files/"
 473                                   name "-" version ".tar.gz"))
 474               (sha256
 475                (base32
 476                 "1dlinhl39va00v55qygjc9ap77yqf7xvn4rwmvdr49xhzzxhlj1c"))))
 477     (build-system gnu-build-system)
 478     (home-page "http://libndp.org/")
 479     (synopsis "Library for Neighbor Discovery Protocol")
 480     (description
 481      "libndp contains a library which provides a wrapper for IPv6 Neighbor
 482 Discovery Protocol.  It also provides a tool named ndptool for sending and
 483 receiving NDP messages.")
 484     (license license:lgpl2.1+)))
 485
 486 (define-public ethtool
 487   (package
 488     (name "ethtool")
 489     (version "5.4")
 490     (source (origin
 491               (method url-fetch)
 492               (uri (string-append "mirror://kernel.org/software/network/"
 493                                   "ethtool/ethtool-" version ".tar.xz"))
 494               (sha256
 495                (base32
 496                 "0srbqp4a3x9ryrbm5q854375y04ni8j0bmsrl89nmsyn4x4ixy12"))))
 497     (build-system gnu-build-system)
 498     (home-page "https://www.kernel.org/pub/software/network/ethtool/")
 499     (synopsis "Display or change Ethernet device settings")
 500     (description
 501      "ethtool can be used to query and change settings such as speed,
 502 auto-negotiation and checksum offload on many network devices, especially
 503 Ethernet devices.")
 504     (license license:gpl2)))
 505
 506 (define-public ifstatus
 507   (package
 508     (name "ifstatus")
 509     (version "1.1.0")
 510     (source (origin
 511               (method url-fetch)
 512               (uri (string-append "mirror://sourceforge/ifstatus/ifstatus/"
 513                                   "ifstatus%20v" version "/ifstatus-v"
 514                                   version ".tar.gz"))
 515               (sha256
 516                (base32
 517                 "045cbsq9ps32j24v8y5hpyqxnqn9mpaf3mgvirlhgpqyb9jsia0c"))
 518               (modules '((guix build utils)))
 519               (snippet
 520                '(begin
 521                   (substitute* "Main.h"
 522                     (("#include <stdio.h>")
 523                      "#include <stdio.h>\n#include <stdlib.h>"))
 524                   #t))))
 525     (build-system gnu-build-system)
 526     (arguments
 527      '(#:tests? #f                                ; no "check" target
 528        #:phases
 529        (modify-phases %standard-phases
 530          (delete 'configure)             ; no configure script
 531          (replace 'install
 532                   (lambda* (#:key outputs #:allow-other-keys)
 533                     (let* ((out (assoc-ref outputs "out"))
 534                            (bin (string-append out "/bin")))
 535                       (mkdir-p bin)
 536                       (copy-file "ifstatus"
 537                                  (string-append bin "/ifstatus")))
 538                     #t)))))
 539     (inputs `(("ncurses" ,ncurses)))
 540     (home-page "http://ifstatus.sourceforge.net/graphic/index.html")
 541     (synopsis "Text based network interface status monitor")
 542     (description
 543      "IFStatus is a simple, easy-to-use program for displaying commonly
 544 needed/wanted real-time traffic statistics of multiple network
 545 interfaces, with a simple and efficient view on the command line.  It is
 546 intended as a substitute for the PPPStatus and EthStatus projects.")
 547     (license license:gpl2+)))
 548
 549 (define-public nload
 550   (package
 551     (name "nload")
 552     (version "0.7.4")
 553     (source (origin
 554               (method url-fetch)
 555               (uri (string-append "mirror://sourceforge/nload/nload/" version
 556                                   "/nload-" version ".tar.gz"))
 557               (sha256
 558                (base32
 559                 "1rb9skch2kgqzigf19x8bzk211jdfjfdkrcvaqyj89jy2pkm3h61"))))
 560     (build-system gnu-build-system)
 561     (inputs `(("ncurses" ,ncurses)))
 562     (home-page "http://www.roland-riegel.de/nload/")
 563     (synopsis "Realtime console network usage monitor")
 564     (description
 565      "Nload is a console application which monitors network traffic and
 566 bandwidth usage in real time.  It visualizes the in- and outgoing traffic using
 567 two graphs, and provides additional info like total amount of transferred data
 568 and min/max network usage.")
 569     (license license:gpl2+)))
 570
 571 (define-public iodine
 572   (package
 573     (name "iodine")
 574     (version "0.7.0")
 575     (source (origin
 576               (method url-fetch)
 577               (uri (string-append "http://code.kryo.se/" name "/"
 578                                   name "-" version ".tar.gz"))
 579               (sha256
 580                (base32
 581                 "0gh17kcxxi37k65zm4gqsvbk3aw7yphcs3c02pn1c4s2y6n40axd"))))
 582     (build-system gnu-build-system)
 583     (arguments
 584      '(#:phases
 585        (modify-phases %standard-phases
 586          (delete 'configure)
 587          (add-before 'build 'fix-ifconfig-path
 588            ;; This package works only with the net-tools version of ifconfig.
 589            (lambda* (#:key inputs #:allow-other-keys)
 590              (substitute* "src/tun.c"
 591                (("PATH=[^ ]* ")
 592                 (string-append (assoc-ref inputs "net-tools") "/bin/")))
 593              #t))
 594          (add-before 'check 'delete-failing-tests
 595            ;; Avoid https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=802105.
 596            (lambda _
 597              (substitute* "tests/common.c"
 598                (("tcase_add_test\\(tc, \
 599 test_parse_format_ipv(4(|_listen_all|_mapped_ipv6)|6)\\);")
 600                 ""))
 601              #t)))
 602        #:make-flags (list "CC=gcc"
 603                           (string-append "prefix=" (assoc-ref %outputs "out")))
 604        #:test-target "test"))
 605     (inputs `(("net-tools" ,net-tools)
 606               ("zlib" ,zlib)))
 607     (native-inputs `(("check" ,check)
 608                      ("pkg-config" ,pkg-config)))
 609     (home-page "https://code.kryo.se/iodine/")
 610     (synopsis "Tunnel IPv4 data through a DNS server")
 611     (description "Iodine tunnels IPv4 data through a DNS server.  This
 612 can be useful in different situations where internet access is firewalled, but
 613 DNS queries are allowed.  The bandwidth is asymmetrical, with limited upstream
 614 and up to 1 Mbit/s downstream.")
 615     ;; src/md5.[ch] is released under the zlib license
 616     (license (list license:isc license:zlib))))
 617
 618 (define-public whois
 619   (package
 620     (name "whois")
 621     (version "5.5.6")
 622     (source
 623      (origin
 624        (method url-fetch)
 625        (uri (string-append "mirror://debian/pool/main/w/whois/"
 626                            "whois_" version ".tar.xz"))
 627        (sha256
 628         (base32 "0kpi981zjczvdcxfcq455c529vlaxa73x8kbm530z5b01h0fk8fb"))))
 629     (build-system gnu-build-system)
 630     (arguments
 631      `(#:tests? #f                      ; no test suite
 632        #:make-flags (list "CC=gcc"
 633                           (string-append "prefix=" (assoc-ref %outputs "out")))
 634        #:phases
 635        (modify-phases %standard-phases
 636          (delete 'configure)            ; no configure script
 637          (add-before 'build 'setenv
 638            (lambda _
 639              (setenv "HAVE_ICONV" "1")
 640              #t)))))
 641     (inputs
 642      `(("libidn2" ,libidn2)))
 643     (native-inputs
 644      `(("gettext" ,gettext-minimal)
 645        ("perl" ,perl)
 646        ("pkg-config" ,pkg-config)))
 647     (synopsis "Intelligent client for the WHOIS directory service")
 648     (description
 649       "whois searches for an object in a @dfn{WHOIS} (RFC 3912) database.
 650 It is commonly used to look up the registered users or assignees of an Internet
 651 resource, such as a domain name, an IP address block, or an autonomous system.
 652 It can automatically select the appropriate server for most queries.
 653
 654 For historical reasons, this package also includes @command{mkpasswd}, which
 655 encrypts passwords using @code{crypt(3)} and is unrelated to the Expect command
 656 of the same name.")
 657     (home-page "https://github.com/rfc1036/whois")
 658     (license license:gpl2+)))
 659
 660 (define-public wireshark
 661   (package
 662     (name "wireshark")
 663     (version "3.2.3")
 664     (source
 665      (origin
 666        (method url-fetch)
 667        (uri (string-append "https://www.wireshark.org/download/src/wireshark-"
 668                            version ".tar.xz"))
 669        (sha256
 670         (base32 "1fpsfjrap7j84sy728yhcr2gad9nq3n5gq03mwrmxnc6ijwf81zh"))))
 671     (build-system cmake-build-system)
 672     (arguments
 673      `(#:phases
 674        (modify-phases %standard-phases
 675          (add-after 'unpack 'remove-failing-test
 676            ;; Test 31/32 fails with errors like "Program reassemble_test is
 677            ;; not available".  Skipping it for now.
 678            (lambda _
 679              (substitute* "CMakeLists.txt"
 680                (("suite_unittests" all) (string-append "# " all)))
 681              #t)))
 682        ;; Build process chokes during `validate-runpath' phase.
 683        ;;
 684        ;; Errors are like the following:
 685        ;; "/gnu/store/...wireshark-3.0.0/lib/wireshark/plugins/3.0/epan/ethercat.so:
 686        ;; error: depends on 'libwireshark.so.12', which cannot be found in
 687        ;; RUNPATH".  That is, "/gnu/store/...wireshark-3.0.0./lib" doesn't
 688        ;; belong to RUNPATH.
 689        ;;
 690        ;; That’s not a problem in practice because "ethercat.so" is a plugin,
 691        ;; so it’s dlopen’d by a process that already provides "libwireshark".
 692        ;; For now, we disable this phase.
 693        #:validate-runpath? #f))
 694     (inputs
 695      `(("c-ares" ,c-ares)
 696        ("glib" ,glib)
 697        ("gnutls" ,gnutls)
 698        ("libcap" ,libcap)
 699        ("libgcrypt" ,libgcrypt)
 700        ("libnl" ,libnl)
 701        ("libpcap" ,libpcap)
 702        ("libssh" ,libssh)
 703        ("libxml2" ,libxml2)
 704        ("lz4" ,lz4)
 705        ("lua" ,lua-5.2)                 ;Lua 5.3 unsupported
 706        ("krb5" ,mit-krb5)
 707        ("qtbase" ,qtbase)
 708        ("qtmultimedia" ,qtmultimedia)
 709        ("qtsvg" ,qtsvg)
 710        ("sbc" ,sbc)
 711        ("snappy" ,snappy)
 712        ("zlib" ,zlib)))
 713     (native-inputs
 714      `(("bison" ,bison)
 715        ("doxygen" ,doxygen)
 716        ("flex" ,flex)
 717        ("gettext" ,gettext-minimal)
 718        ("perl" ,perl)
 719        ("pkg-config" ,pkg-config)
 720        ("python" ,python-wrapper)
 721        ("qttools" ,qttools)))
 722     (synopsis "Network traffic analyzer")
 723     (description "Wireshark is a network protocol analyzer, or @dfn{packet
 724 sniffer}, that lets you capture and interactively browse the contents of
 725 network frames.")
 726     (home-page "https://www.wireshark.org/")
 727     (license license:gpl2+)))
 728
 729 (define-public fping
 730   (package
 731     (name "fping")
 732     (version "4.2")
 733     (source
 734      (origin
 735        (method url-fetch)
 736        (uri (string-append "https://fping.org/dist/fping-"
 737                            version ".tar.gz"))
 738        (sha256
 739         (base32 "0jmnf4vmr43aiwk3h2b5qdsb95gxar8gz1yli8fswnm9nrs9ccvx"))))
 740     (build-system gnu-build-system)
 741     (home-page "https://fping.org/")
 742     (synopsis "Send ICMP ECHO_REQUEST packets to network hosts")
 743     (description
 744      "fping is a ping like program which uses the Internet Control Message
 745 Protocol (ICMP) echo request to determine if a target host is responding.
 746 fping differs from ping in that you can specify any number of targets on the
 747 command line, or specify a file containing the lists of targets to ping.
 748 Instead of sending to one target until it times out or replies, fping will
 749 send out a ping packet and move on to the next target in a round-robin
 750 fashion.")
 751     (license license:expat)))
 752
 753 (define-public gandi.cli
 754   (package
 755     (name "gandi.cli")
 756     (version "1.5")
 757     (source
 758      (origin
 759        (method url-fetch)
 760        (uri (pypi-uri name version))
 761        (sha256
 762         (base32 "110wc9zgxsrvw4yzp21p0ian5lcf7vhcpxhnmsc4fg9pzl2bwxd5"))))
 763     (build-system python-build-system)
 764     (arguments
 765      `(#:phases
 766        (modify-phases %standard-phases
 767          (add-after 'unpack 'embed-store-file-names
 768            (lambda _
 769              (substitute* (list "gandi/cli/modules/cert.py"
 770                                 "gandi/cli/tests/commands/test_certificate.py")
 771                (("openssl") (which "openssl")))
 772              #t))
 773          (add-after 'install 'install-documentation
 774            ;; The included man page may be outdated but we install it anyway,
 775            ;; since it's mentioned in 'gandi --help' and better than nothing.
 776            (lambda* (#:key outputs #:allow-other-keys)
 777              (let* ((out  (assoc-ref outputs "out"))
 778                     (man1 (string-append out "/share/man/man1")))
 779                (mkdir-p man1)
 780                (with-output-to-file (string-append man1 "/gandi.1")
 781                  (lambda _
 782                    (invoke "rst2man.py" "gandicli.man.rst")))
 783                #t))))))
 784     (native-inputs
 785      `(("python-docutils" ,python-docutils)   ; for rst2man.py
 786        ("python-pytest-cov" ,python-pytest-cov)
 787        ("python-tox" ,python-tox)))
 788     (inputs
 789      `(("openssl" ,openssl)
 790        ("python-click" ,python-click)
 791        ("python-ipy" ,python-ipy)
 792        ("python-pyyaml" ,python-pyyaml)
 793        ("python-requests" ,python-requests)))
 794     (home-page "https://cli.gandi.net")
 795     (synopsis "Command-line interface to the Gandi.net Web API")
 796     (description
 797      "This package provides a command-line client (@command{gandi}) to buy,
 798 manage, and delete Internet resources from Gandi.net such as domain names,
 799 virtual machines, and certificates.")
 800     (license license:gpl3+)))
 801
 802 (define-public go-netns
 803   (let ((commit "13995c7128ccc8e51e9a6bd2b551020a27180abd")
 804         (revision "1"))
 805     (package
 806       (name "go-netns")
 807       (version (git-version "0.0.0" revision commit))
 808       (source (origin
 809                 (method git-fetch)
 810                 (uri (git-reference
 811                       (url "https://github.com/vishvananda/netns.git")
 812                       (commit commit)))
 813                 (file-name (git-file-name name version))
 814                 (sha256
 815                  (base32
 816                   "1zk6w8158qi4niva5rijchbv9ixgmijsgqshh54wdaav4xrhjshn"))))
 817       (build-system go-build-system)
 818       (arguments
 819        `(#:import-path "github.com/vishvananda/netns"
 820          #:tests? #f))                  ;tests require root privileges
 821       (home-page "https://github.com/vishvananda/netns")
 822       (synopsis "Simple network namespace handling for Go")
 823       (description "The netns package provides a simple interface for
 824 handling network namespaces in Go.")
 825       (license license:asl2.0))))
 826
 827 (define-public go-sctp
 828   ;; docker-libnetwork-cmd-proxy requires this exact commit.
 829   (let ((commit "07191f837fedd2f13d1ec7b5f885f0f3ec54b1cb")
 830         (revision "1"))
 831     (package
 832       (name "go-sctp")
 833       (version (git-version "0.0.0" revision commit))
 834       (source (origin
 835                 (method git-fetch)
 836                 (uri (git-reference
 837                       (url "https://github.com/ishidawataru/sctp.git")
 838                       (commit commit)))
 839                 (file-name (git-file-name name version))
 840                 (sha256
 841                  (base32
 842                   "1mk9ncm10gwi5pn5wcw4skbyf4qg7n5qdf1mim4gf3mrckvi6g6h"))))
 843       (build-system go-build-system)
 844       (arguments
 845        `(#:import-path "github.com/ishidawataru/sctp"))
 846       (home-page "https://github.com/ishidawataru/sctp")
 847       (synopsis "SCTP library for the Go programming language")
 848       (description "This library provides methods for using the stream control
 849 transmission protocol (SCTP) in a Go application.")
 850       (license license:asl2.0))))
 851
 852 (define-public httping
 853   (package
 854     (name "httping")
 855     (version "2.5")
 856     (source
 857      (origin
 858        (method url-fetch)
 859        (uri (string-append "https://www.vanheusden.com/httping/httping-"
 860                            version ".tgz"))
 861        (sha256
 862         (base32
 863          "1y7sbgkhgadmd93x1zafqc4yp26ssiv16ni5bbi9vmvvdl55m29y"))))
 864     (build-system gnu-build-system)
 865     (native-inputs
 866      `(("gettext" ,gettext-minimal)))
 867     (inputs
 868      `(("fftw" ,fftw)
 869        ("ncurses" ,ncurses)
 870        ("openssl" ,openssl)))
 871     (arguments
 872      `(#:make-flags (list "CC=gcc"
 873                           (string-append "DESTDIR=" (assoc-ref %outputs "out"))
 874                           "PREFIX=")
 875        #:tests? #f)) ; no tests
 876     (home-page "https://www.vanheusden.com/httping/")
 877     (synopsis "Web server latency and throughput monitor")
 878     (description
 879      "httping measures how long it takes to connect to a web server, send an
 880 HTTP(S) request, and receive the reply headers.  It is somewhat similar to
 881 @command{ping}, but can be used even in cases where ICMP traffic is blocked
 882 by firewalls or when you want to monitor the response time of the actual web
 883 application stack itself.")
 884     (license license:gpl2)))        ; with permission to link with OpenSSL
 885
 886 (define-public httpstat
 887   (package
 888     (name "httpstat")
 889     (version "1.2.1")
 890     (source
 891      (origin
 892        (method url-fetch)
 893        (uri (pypi-uri "httpstat" version))
 894        (sha256
 895         (base32
 896          "1chw2nk56vaq87aba012a270k9na06hfx1pfbsrc3jfvlc2kb9hb"))))
 897     (build-system python-build-system)
 898     (inputs `(("curl" ,curl)))
 899     (arguments
 900      '(#:phases
 901        (modify-phases %standard-phases
 902          (add-before 'build 'fix-curl-path
 903            (lambda* (#:key inputs #:allow-other-keys)
 904              (substitute* "httpstat.py"
 905                (("ENV_CURL_BIN.get\\('curl'\\)")
 906                 (string-append "ENV_CURL_BIN.get('"
 907                                (assoc-ref inputs "curl")
 908                                "/bin/curl')")))
 909              #t)))))
 910     (home-page "https://github.com/reorx/httpstat")
 911     (synopsis "Visualize curl statistics")
 912     (description
 913      "@command{httpstat} is a tool to visualize statistics from the
 914 @command{curl} HTTP client.  It acts as a wrapper for @command{curl} and
 915 prints timing information for each step of the HTTP request (DNS lookup,
 916 TCP connection, TLS handshake and so on) in the terminal.")
 917     (license license:expat)))
 918
 919 (define-public squid
 920   (package
 921     (name "squid")
 922     (version "4.10")
 923     (source
 924      (origin
 925        (method url-fetch)
 926        (uri (string-append "http://www.squid-cache.org/Versions/v4/squid-"
 927                            version ".tar.xz"))
 928        (sha256
 929         (base32 "07sz0adv8nkhy797675bpra7lvdkwjq9isw1ddgylhlazl511w4q"))))
 930     (build-system gnu-build-system)
 931     (arguments
 932      '(#:phases
 933        (modify-phases %standard-phases
 934          (add-before 'build 'fix-true-path
 935            (lambda* (#:key inputs #:allow-other-keys)
 936              (substitute* "test-suite/testheaders.sh"
 937                (("/bin/true")
 938                 (string-append (assoc-ref inputs "coreutils")
 939                                "/bin/true")))
 940              #t)))))
 941     (inputs
 942      `(("perl" ,perl)
 943        ("openldap" ,openldap)
 944        ("linux-pam" ,linux-pam)
 945        ("libcap" ,libcap)
 946        ("cyrus-sasl" ,cyrus-sasl)
 947        ("expat" ,expat)
 948        ("libxml2" ,libxml2)
 949        ("openssl" ,openssl)))
 950     (native-inputs
 951      `(("cppunit" ,cppunit)
 952        ("pkg-config" ,pkg-config)))
 953     (synopsis "Web caching proxy")
 954     (description "Squid is a caching proxy for the Web supporting HTTP, HTTPS,
 955 FTP, and more.  It reduces bandwidth and improves response times by caching and
 956 reusing frequently-requested web pages.")
 957     (home-page "http://www.squid-cache.org/")
 958     (license license:gpl2+)))
 959
 960 (define-public bwm-ng
 961   (package
 962     (name "bwm-ng")
 963     (version "0.6.2")
 964     (source
 965      (origin
 966        (method git-fetch)
 967        (uri (git-reference
 968              (url "https://github.com/vgropp/bwm-ng.git")
 969              (commit (string-append "v" version))))
 970        (file-name (git-file-name name version))
 971        (sha256
 972         (base32 "0k906wb4pw3dcqpcwnni78lahzi3bva483f8c17sjykic7as4y5n"))))
 973     (build-system gnu-build-system)
 974     (arguments
 975      `(#:phases
 976        (modify-phases %standard-phases
 977          (add-after 'unpack 'disable-premature-./configure
 978            (lambda _
 979              (substitute* "autogen.sh"
 980                (("\\$srcdir/configure")
 981                 "true"))
 982              #t)))))
 983     (native-inputs
 984      `(("autoconf" ,autoconf)
 985        ("automake" ,automake)))
 986     (inputs
 987      `(("ncurses" ,ncurses)))
 988     (synopsis "Console based live network and disk I/O bandwidth monitor")
 989     (description "Bandwidth Monitor NG is a small and simple console based
 990 live network and disk I/O bandwidth monitor.")
 991     (home-page "https://www.gropp.org/?id=projects&sub=bwm-ng")
 992     (license license:gpl2)))
 993
 994 (define-public aircrack-ng
 995   (package
 996     (name "aircrack-ng")
 997     (version "1.6")
 998     (source
 999      (origin
1000        (method url-fetch)
1001        (uri (string-append "https://download.aircrack-ng.org/aircrack-ng-"
1002                            version ".tar.gz"))
1003        (sha256
1004         (base32 "0ix2k64qg7x3w0bzdsbk1m50kcpq1ws59g3zkwiafvpwdr4gs2sg"))))
1005     (build-system gnu-build-system)
1006     (native-inputs
1007      `(("autoconf" ,autoconf)
1008        ("automake" ,automake)
1009        ("libtool" ,libtool)
1010        ("pkg-config" ,pkg-config)
1011        ("which" ,which)))
1012     (inputs
1013      `(("libgcrypt" ,libgcrypt)
1014        ("libnl" ,libnl)
1015        ("libpcap" ,libpcap)
1016        ("ethtool" ,ethtool)
1017        ("pcre" ,pcre)
1018        ("sqlite" ,sqlite)
1019        ("zlib" ,zlib)))
1020     (arguments
1021      `(#:configure-flags
1022        (list "--with-experimental=yes"  ; build wesside-ng, etc.
1023              "--with-gcrypt")           ; openssl's the default
1024        #:phases (modify-phases %standard-phases
1025                   (add-before 'bootstrap 'patch-evalrev
1026                     (lambda _
1027                       ;; Called by ./autogen.sh below, before the default
1028                       ;; ‘patch-shebangs’ phase has had a chance to run.
1029                       (substitute* "evalrev"
1030                         (("/bin/sh")
1031                          (which "sh")))
1032                       #t))
1033                   (replace 'bootstrap
1034                     (lambda _
1035                       ;; Patch shebangs in generated files before running
1036                       ;; ./configure.
1037                       (setenv "NOCONFIGURE" "please")
1038                       (invoke "bash" "./autogen.sh")))
1039                   (add-after 'build 'absolutize-tools
1040                     (lambda* (#:key inputs #:allow-other-keys)
1041                       (let ((ethtool (string-append (assoc-ref inputs "ethtool")
1042                                                     "/sbin/ethtool")))
1043                         (substitute* "scripts/airmon-ng"
1044                           (("ethtool ")
1045                            (string-append ethtool " ")))
1046                         #t))))))
1047     (home-page "https://www.aircrack-ng.org")
1048     (synopsis "Assess WiFi network security")
1049     (description
1050      "Aircrack-ng is a complete suite of tools to assess WiFi network
1051 security.  It focuses on different areas of WiFi security: monitoring,
1052 attacking, testing, and cracking.  All tools are command-line driven, which
1053 allows for heavy scripting.")
1054     (license (list license:gpl2+ license:bsd-3))))
1055
1056 (define-public pixiewps
1057   (package
1058     (name "pixiewps")
1059     (version "1.4.2")
1060     (source (origin
1061               (method url-fetch)
1062               (uri (string-append
1063                     "https://github.com/wiire-a/pixiewps/releases/"
1064                     "download/v" version "/" name "-" version ".tar.xz"))
1065               (sha256
1066                (base32
1067                 "07nym6bqml0k9v29vnj003nrgnwrywgjvnljb7cdpsvnwilhbp64"))))
1068     (build-system gnu-build-system)
1069     (arguments
1070      '(#:make-flags
1071        (list "CC=gcc"
1072              (string-append "PREFIX=" (assoc-ref %outputs "out")))
1073        #:phases
1074        (modify-phases %standard-phases
1075          (delete 'configure)) ; no configure script
1076        #:tests? #f)) ; there are no tests
1077     (home-page "https://github.com/wiire-a/pixiewps/")
1078     (synopsis "Offline brute-force tool for Wi-Fi Protected Setup")
1079     (description "Pixiewps implements the pixie-dust attack to brute
1080 force the Wi-Fi Protected Setup (WPS) PIN by exploiting the low or
1081 non-existing entropy of some access points.")
1082     (license license:gpl3+)))
1083
1084 (define-public reaver
1085   (package
1086     (name "reaver")
1087     (version "1.6.6")
1088     (source (origin
1089               (method url-fetch)
1090               (uri (string-append
1091                     "https://github.com/t6x/reaver-wps-fork-t6x/releases/"
1092                     "download/v" version "/reaver-" version ".tar.xz"))
1093               (sha256
1094                (base32
1095                 "00k7mc81ifv0wma7k4v18mj498badbw5yls6c28qin3d1gda0ag3"))))
1096     (build-system gnu-build-system)
1097     (arguments
1098      `(#:configure-flags
1099        ;; Save session files to current directory instead of /var.
1100        (list "--enable-savetocurrent"
1101              "--localstatedir=/tmp/dummy") ; prevent creating /var during install
1102        #:phases
1103        (modify-phases %standard-phases
1104          (add-before 'configure 'change-directory
1105            (lambda _
1106              (chdir "src")
1107              #t))
1108          (add-after 'install 'install-doc
1109            (lambda* (#:key outputs #:allow-other-keys)
1110              (chdir "../docs")
1111              (let* ((out (assoc-ref outputs "out"))
1112                     (doc (string-append out "/share/doc/" ,name "-" ,version))
1113                     (man1 (string-append out "/share/man/man1")))
1114                (for-each (lambda (file) (install-file file doc))
1115                          (find-files "." "README.*"))
1116                (install-file "reaver.1" man1)
1117                #t))))
1118        #:tests? #f))                    ; there are no tests
1119     (inputs
1120      `(("libpcap" ,libpcap)))
1121     (propagated-inputs
1122      `(("aircrack-ng" ,aircrack-ng)
1123        ("pixiewps" ,pixiewps)))
1124     (home-page "https://github.com/t6x/reaver-wps-fork-t6x/")
1125     (synopsis "Attack tool for Wi-Fi Protected Setup")
1126     (description "Reaver performs a brute force attack against an access
1127 point's Wi-Fi Protected Setup (WPS) PIN.  Once the PIN is found, the WPA
1128 passphrase can be recovered and the AP's wireless settings can be
1129 reconfigured.")
1130     (license license:gpl2+)))
1131
1132 (define-public perl-danga-socket
1133   (package
1134     (name "perl-danga-socket")
1135     (version "1.62")
1136     (source
1137      (origin
1138        (method url-fetch)
1139        (uri (string-append "mirror://cpan/authors/id/N/NM/NML/"
1140                            "Danga-Socket-" version ".tar.gz"))
1141        (sha256
1142         (base32 "0x4bvirmf0kphks19jwgva00zz73zx344218dfaiv8gigrw3yg4m"))))
1143     (build-system perl-build-system)
1144     (native-inputs
1145      `(("perl-test-tcp" ,perl-test-tcp)))
1146     (propagated-inputs
1147      `(("perl-sys-syscall" ,perl-sys-syscall)))
1148     (home-page "https://metacpan.org/release/Danga-Socket")
1149     (synopsis "Event loop and event-driven async socket base class")
1150     (description
1151      "Danga::Socket is an abstract base class for objects backed by a socket
1152 which provides the basic framework for event-driven asynchronous IO, designed
1153 to be fast.  Danga::Socket is both a base class for objects, and an event
1154 loop.")
1155     (license license:perl-license)))
1156
1157 (define-public perl-data-validate-ip
1158   (package
1159     (name "perl-data-validate-ip")
1160     (version "0.27")
1161     (source
1162      (origin
1163        (method url-fetch)
1164        (uri (string-append
1165              "mirror://cpan/authors/id/D/DR/DROLSKY/Data-Validate-IP-"
1166              version ".tar.gz"))
1167        (sha256
1168         (base32 "1mmppyzsh1w2z2h86kvzqxy56wxgs62a3kf8nvcnz76bblir5ap1"))))
1169     (build-system perl-build-system)
1170     (native-inputs
1171      `(("perl-test-requires" ,perl-test-requires)))
1172     (propagated-inputs
1173      `(("perl-netaddr-ip" ,perl-netaddr-ip)))
1174     (home-page "https://metacpan.org/release/Data-Validate-IP")
1175     (synopsis "IPv4 and IPv6 validation methods")
1176     (description
1177      "This module provides several IP address validation subroutines that both
1178 validate and untaint their input.  This includes both basic validation
1179 (@code{is_ipv4()} and @code{is_ipv6()}) and special cases like checking whether
1180 an address belongs to a specific network or whether an address is public or
1181 private (reserved).")
1182     (license license:perl-license)))
1183
1184 (define-public perl-net-dns
1185  (package
1186   (name "perl-net-dns")
1187   (version "1.21")
1188   (source
1189     (origin
1190       (method url-fetch)
1191       (uri
1192        (list
1193         (string-append "https://www.net-dns.org/download/Net-DNS-"
1194                        version ".tar.gz")
1195         (string-append "mirror://cpan/authors/id/N/NL/NLNETLABS/Net-DNS-"
1196                        version ".tar.gz")))
1197       (sha256
1198        (base32 "0yknrsh0wqr9s43c0wf3dyzrsi2r7k0v75hay74gqkq850xy3vyx"))))
1199   (build-system perl-build-system)
1200   (inputs
1201     `(("perl-digest-hmac" ,perl-digest-hmac)))
1202   (home-page "https://www.net-dns.org/")
1203   (synopsis
1204     "Perl Interface to the Domain Name System")
1205   (description "Net::DNS is the Perl Interface to the Domain Name System.")
1206   (license license:x11)))
1207
1208 (define-public perl-socket6
1209  (package
1210   (name "perl-socket6")
1211   (version "0.29")
1212   (source
1213     (origin
1214       (method url-fetch)
1215       (uri (string-append
1216              "mirror://cpan/authors/id/U/UM/UMEMOTO/Socket6-"
1217              version
1218              ".tar.gz"))
1219       (sha256
1220         (base32
1221           "054izici8klfxs8hr5rljib28plijpsfymy99xbzdp047bx1b2a6"))))
1222   (build-system perl-build-system)
1223   (arguments
1224    `(#:phases
1225      (modify-phases %standard-phases
1226          (replace 'configure
1227            (lambda* (#:key outputs #:allow-other-keys)
1228              (let* ((out (assoc-ref outputs "out"))
1229                     (args `("Makefile.PL"
1230                             ,(string-append "PREFIX=" out)
1231                             "INSTALLDIRS=site")))
1232                (setenv "CONFIG_SHELL" (which "sh"))
1233                (apply invoke "perl" args)))))))
1234   (home-page "https://metacpan.org/release/Socket6")
1235   (synopsis
1236     "IPv6 related part of the C socket.h defines and structure manipulators for Perl")
1237   (description "Socket6 binds the IPv6 related part of the C socket header
1238 definitions and structure manipulators for Perl.")
1239   (license license:bsd-3)))
1240
1241 (define-public perl-net-dns-resolver-programmable
1242  (package
1243   (name "perl-net-dns-resolver-programmable")
1244   (version "v0.003")
1245   (source
1246     (origin
1247       (method url-fetch)
1248       (uri (string-append
1249              "mirror://cpan/authors/id/J/JM/JMEHNLE/net-dns-resolver-programmable/"
1250              "Net-DNS-Resolver-Programmable-" version ".tar.gz"))
1251       (sha256
1252         (base32
1253           "1v3nl2kaj4fs55n1617n53q8sa3mir06898vpy1rq98zjih24h4d"))
1254       (patches
1255        (search-patches "perl-net-dns-resolver-programmable-fix.patch"))))
1256   (build-system perl-build-system)
1257   (native-inputs
1258     `(("perl-module-build" ,perl-module-build)))
1259   (inputs `(("perl-net-dns" ,perl-net-dns)))
1260   (home-page
1261     "https://metacpan.org/release/Net-DNS-Resolver-Programmable")
1262   (synopsis
1263     "Programmable DNS resolver class for offline emulation of DNS")
1264   (description "Net::DNS::Resolver::Programmable is a programmable DNS resolver for
1265 offline emulation of DNS.")
1266   (license license:perl-license)))
1267
1268 (define-public perl-net-dns-resolver-mock
1269   (package
1270     (name "perl-net-dns-resolver-mock")
1271     (version "1.20171219")
1272     (source (origin
1273               (method url-fetch)
1274               (uri (string-append
1275                      "mirror://cpan/authors/id/M/MB/MBRADSHAW/"
1276                      "Net-DNS-Resolver-Mock-" version ".tar.gz"))
1277               (sha256
1278                (base32
1279                 "0m3rxpkv1b9121srvbqkrgzg4m8mnydiydqv34in1i1ixwrl6jn9"))))
1280     (build-system perl-build-system)
1281     (inputs
1282      `(("perl-net-dns" ,perl-net-dns)))
1283     (home-page "https://metacpan.org/release/Net-DNS-Resolver-Mock")
1284     (synopsis "Mock DNS Resolver object for testing")
1285     (description
1286      "Net::DNS::Resolver::Mock is a subclass of Net::DNS::Resolver, but returns
1287 static data from any provided DNS zone file instead of querying the network.
1288 It is intended primarily for use in testing.")
1289     (license license:perl-license)))
1290
1291 (define-public perl-netaddr-ip
1292  (package
1293   (name "perl-netaddr-ip")
1294   (version "4.079")
1295   (source
1296     (origin
1297       (method url-fetch)
1298       (uri (string-append
1299              "mirror://cpan/authors/id/M/MI/MIKER/NetAddr-IP-"
1300              version
1301              ".tar.gz"))
1302       (sha256
1303         (base32
1304           "1rx0dinrz9fk9qcg4rwqq5n1dm3xv2arymixpclcv2q2nzgq4npc"))))
1305   (build-system perl-build-system)
1306   (arguments
1307     `(#:phases
1308        (modify-phases %standard-phases
1309          (replace 'configure
1310            (lambda* (#:key outputs #:allow-other-keys)
1311              (let* ((out (assoc-ref outputs "out"))
1312                     (args `("Makefile.PL"
1313                             ,(string-append "PREFIX=" out)
1314                             "INSTALLDIRS=site")))
1315                (setenv "CONFIG_SHELL" (which "sh"))
1316                (apply invoke "perl" args)))))))
1317   (home-page
1318     "https://metacpan.org/release/NetAddr-IP")
1319   (synopsis
1320     "Manages IPv4 and IPv6 addresses and subnets")
1321   (description "NetAddr::IP manages IPv4 and IPv6 addresses and subsets.")
1322   (license license:perl-license)))
1323
1324 (define-public perl-net-patricia
1325  (package
1326   (name "perl-net-patricia")
1327   (version "1.22")
1328   (source
1329     (origin
1330       (method url-fetch)
1331       (uri (string-append
1332              "mirror://cpan/authors/id/G/GR/GRUBER/Net-Patricia-"
1333              version
1334              ".tar.gz"))
1335       (sha256
1336         (base32
1337           "0ln5f57vc8388kyh9vhx2infrdzfhbpgyby74h1qsnhwds95m0vh"))))
1338   (build-system perl-build-system)
1339   (arguments
1340    '(#:phases
1341      (modify-phases %standard-phases
1342        (add-after 'unpack 'dont-link-with-nsl ; Borrowed from Debian.
1343          (lambda _
1344            (substitute* "Makefile.PL"
1345              (("-lnsl") ""))
1346            #t)))))
1347   (inputs
1348     `(("perl-net-cidr-lite" ,perl-net-cidr-lite)
1349       ("perl-socket6" ,perl-socket6)))
1350   (home-page
1351     "https://metacpan.org/release/Net-Patricia")
1352   (synopsis
1353     "Patricia Trie Perl module for fast IP address lookups")
1354   (description
1355     "Net::Patricia does IP address lookups quickly in Perl.")
1356   ;; The bindings are licensed under GPL2 or later.
1357   ;; libpatricia is licensed under 2-clause BSD.
1358   (license (list license:gpl2+ license:bsd-2))))
1359
1360 (define-public perl-net-cidr-lite
1361  (package
1362   (name "perl-net-cidr-lite")
1363   (version "0.21")
1364   (source
1365     (origin
1366       (method url-fetch)
1367       (uri (string-append
1368              "mirror://cpan/authors/id/D/DO/DOUGW/Net-CIDR-Lite-"
1369              version
1370              ".tar.gz"))
1371       (sha256
1372         (base32
1373           "14shj73zbqmfjbp0qz1fs9j4p2dpvz5hfkm4qfdjbydflbl2b8fg"))))
1374   (build-system perl-build-system)
1375   (home-page
1376     "https://metacpan.org/release/Net-CIDR-Lite")
1377   (synopsis
1378     "Perl extension for merging IPv4 or IPv6 CIDR addresses")
1379   (description "Net::CIDR::Lite merges IPv4 or IPv6 CIDR addresses.")
1380   (license license:gpl1+)))
1381
1382 ;; TODO: Use the geolite-mirror-simple.pl script from the example
1383 ;; directory to stay current with the databases. How?
1384 (define-public perl-geo-ip
1385  (package
1386   (name "perl-geo-ip")
1387   (version "1.51")
1388   (source
1389     (origin
1390       (method url-fetch)
1391       (uri (string-append
1392              "mirror://cpan/authors/id/M/MA/MAXMIND/Geo-IP-"
1393              version
1394              ".tar.gz"))
1395       (sha256
1396         (base32
1397           "1fka8fr7fw6sh3xa9glhs1zjg3s2gfkhi7n7da1l2m2wblqj0c0n"))))
1398   (build-system perl-build-system)
1399   (home-page "https://metacpan.org/release/Geo-IP")
1400   (synopsis
1401     "Look up location and network information by IP Address in Perl")
1402   (description "The Perl module @code{Geo::IP}.  It looks up location and
1403 network information by IP Address.")
1404   (license license:perl-license)))
1405
1406 (define-public perl-io-socket-inet6
1407  (package
1408   (name "perl-io-socket-inet6")
1409   (version "2.72")
1410   (source
1411     (origin
1412       (method url-fetch)
1413       (uri (string-append
1414              "mirror://cpan/authors/id/S/SH/SHLOMIF/IO-Socket-INET6-"
1415              version
1416              ".tar.gz"))
1417       (sha256
1418         (base32
1419           "1fqypz6qa5rw2d5y2zq7f49frwra0aln13nhq5gi514j2zx21q45"))))
1420   (build-system perl-build-system)
1421   (native-inputs
1422     `(("perl-module-build" ,perl-module-build)
1423       ("perl-test-pod" ,perl-test-pod)
1424       ("perl-test-pod-coverage" ,perl-test-pod-coverage)))
1425   (inputs `(("perl-socket6" ,perl-socket6)))
1426   (arguments `(;; Need network socket API
1427                #:tests? #f))
1428   (home-page
1429     "https://metacpan.org/release/IO-Socket-INET6")
1430   (synopsis
1431     "Perl object interface for AF_INET/AF_INET6 domain sockets")
1432   (description "IO::Socket::INET6 is an interface for AF_INET/AF_INET6 domain
1433 sockets in Perl.")
1434   (license license:perl-license)))
1435
1436 (define-public libproxy
1437   (package
1438     (name "libproxy")
1439     (version "0.4.15")
1440     (source (origin
1441               (method url-fetch)
1442               (uri (string-append "https://github.com/libproxy/libproxy/"
1443                                   "releases/download/" version "/libproxy-"
1444                                   version ".tar.xz"))
1445               (sha256
1446                (base32
1447                 "0kvdrazlzwia876w988cmlypp253gwy6idlh8mjk958c29jb8kb5"))))
1448     (build-system cmake-build-system)
1449     (native-inputs
1450      `(("pkg-config" ,pkg-config)))
1451     (inputs
1452      `(("dbus" ,dbus)
1453        ("zlib" ,zlib)))
1454     (arguments
1455      `(#:phases
1456        (modify-phases %standard-phases
1457          (replace 'check
1458                   (lambda _
1459                     (invoke "ctest" "-E" "url-test"))))))
1460     (synopsis "Library providing automatic proxy configuration management")
1461     (description "Libproxy handles the details of HTTP/HTTPS proxy
1462 configuration for applications across all scenarios.  Applications using
1463 libproxy only have to specify which proxy to use.")
1464     (home-page "https://libproxy.github.io/libproxy")
1465     (license license:lgpl2.1+)))
1466
1467 (define-public proxychains-ng
1468   (package
1469     (name "proxychains-ng")
1470     (version "4.14")
1471     (source
1472      (origin
1473        (method url-fetch)
1474        (uri (string-append "http://ftp.barfooze.de/pub/sabotage/tarballs/"
1475                            "proxychains-ng-" version ".tar.xz"))
1476        (sha256
1477         (base32 "1bmhfbl1bzc87vl0xwr1wh5xvslfyc41nl2hqzhbj258p0sy004x"))))
1478     (build-system gnu-build-system)
1479     (arguments
1480      `(#:tests? #f                      ; there are no tests
1481        #:phases
1482        (modify-phases %standard-phases
1483          (add-after 'unpack 'fix-configure-script
1484            (lambda _
1485              ;; The configure script is very intolerant to unknown arguments,
1486              ;; such as "CONFIG_SHELL".
1487              (substitute* "configure"
1488                (("\\*\\) break ;;" line)
1489                 (string-append "[A-Z]*) shift ;;\n"
1490                                line)))
1491              #t))
1492          (add-before 'configure 'set-up-environment
1493            (lambda _
1494              (setenv "CC" "gcc")
1495              #t)))))
1496     (synopsis "Redirect any TCP connection through a proxy or proxy chain")
1497     (description "Proxychains-ng is a preloader which hooks calls to sockets
1498 in dynamically linked programs and redirects them through one or more SOCKS or
1499 HTTP proxies.")
1500     (home-page "https://github.com/rofl0r/proxychains-ng")
1501     (license license:gpl2+)))
1502
1503 (define-public enet
1504   (package
1505     (name "enet")
1506     (version "1.3.14")
1507     (source (origin
1508               (method url-fetch)
1509               (uri (string-append "http://enet.bespin.org/download/"
1510                                   "enet-" version ".tar.gz"))
1511               (sha256
1512                (base32
1513                 "0w780zc6cy8yq4cskpphx0f91lzh51vh9lwyc5ll8hhamdxgbxlq"))))
1514     (build-system gnu-build-system)
1515     (native-inputs
1516      `(("pkg-config" ,pkg-config)))
1517     (synopsis "Network communication layer on top of UDP")
1518     (description
1519      "ENet's purpose is to provide a relatively thin, simple and robust network
1520 communication layer on top of UDP.  The primary feature it provides is optional
1521 reliable, in-order delivery of packets.  ENet omits certain higher level
1522 networking features such as authentication, server discovery, encryption, or
1523 other similar tasks that are particularly application specific so that the
1524 library remains flexible, portable, and easily embeddable.")
1525     (home-page "http://enet.bespin.org")
1526     (license license:expat)))
1527
1528 (define-public sslh
1529   (package
1530     (name "sslh")
1531     (version "1.20")
1532     (source
1533      (origin
1534        (method git-fetch)
1535        (uri (git-reference
1536              (url "https://github.com/yrutschle/sslh.git")
1537              (commit (string-append "v" version))))
1538        (file-name (git-file-name name version))
1539        (sha256
1540         (base32 "18zhkqlwfh6f5dg1a41a4p7p9g94dgb9nwls1ksy9r5yz174i2fx"))))
1541     (build-system gnu-build-system)
1542     (native-inputs
1543      `(;; Test dependencies.
1544        ("lcov" ,lcov)
1545        ("perl" ,perl)
1546        ("perl-conf-libconfig" ,perl-conf-libconfig)
1547        ("perl-io-socket-inet6" ,perl-io-socket-inet6)
1548        ("perl-socket6" ,perl-socket6)
1549        ("psmisc" ,psmisc)))             ; for ‘killall’
1550     (inputs
1551      `(("libcap" ,libcap)
1552        ("libconfig" ,libconfig)
1553        ("pcre" ,pcre)
1554        ("tcp-wrappers" ,tcp-wrappers)))
1555     (arguments
1556      '(#:phases
1557        (modify-phases %standard-phases
1558          (delete 'configure)            ; no configure script
1559          (add-before 'check 'fix-tests
1560            (lambda _
1561              (substitute* "./t"
1562                (("\"/tmp") "$ENV{\"TMPDIR\"} . \"")
1563                ;; The Guix build environment lacks ‘ip6-localhost’.
1564                (("ip6-localhost") "localhost"))
1565              #t))
1566          ;; Many of these files are mentioned in the man page. Install them.
1567          (add-after 'install 'install-documentation
1568            (lambda* (#:key outputs #:allow-other-keys)
1569              (let* ((out (assoc-ref outputs "out"))
1570                     (doc (string-append out "/share/doc/sslh")))
1571                (install-file "README.md" doc)
1572                (for-each
1573                 (lambda (file)
1574                   (install-file file (string-append doc "/examples")))
1575                 (append (find-files "." "\\.cfg")
1576                         (find-files "scripts"))))
1577              #t)))
1578        #:make-flags (list "CC=gcc"
1579                           "USELIBCAP=1"
1580                           "USELIBWRAP=1"
1581                           (string-append "PREFIX=" (assoc-ref %outputs "out")))
1582        #:test-target "test"))
1583     (home-page "https://www.rutschle.net/tech/sslh/README.html")
1584     (synopsis "Applicative network protocol demultiplexer")
1585     (description
1586      "sslh is a network protocol demultiplexer.  It acts like a switchboard,
1587 accepting connections from clients on one port and forwarding them to different
1588 servers based on the contents of the first received data packet.  Detection of
1589 common protocols like HTTP(S), SSL, SSH, OpenVPN, tinc, and XMPP is already
1590 implemented, but any other protocol that matches a regular expression can be
1591 added.  sslh's name comes from its original application of serving both SSH and
1592 HTTPS on port 443, allowing SSH connections from inside corporate firewalls
1593 that block port 22.")
1594     (license (list license:bsd-2        ; tls.[ch]
1595                    license:gpl2+))))    ; everything else
1596
1597 (define-public iperf
1598   (package
1599     (name "iperf")
1600     (version "3.7")
1601     (source (origin
1602               (method url-fetch)
1603               (uri (string-append "http://downloads.es.net/pub/iperf"
1604                                   "/iperf-" version ".tar.gz"))
1605               (sha256
1606                 (base32
1607                  "033is7b5grfbiil98jxlz4ixp9shm44x6hy8flpsyz1i4h108inq"))))
1608     (build-system gnu-build-system)
1609     (synopsis "TCP, UDP and SCTP bandwidth measurement tool")
1610     (description
1611      "iPerf is a tool to measure achievable bandwidth on IP networks.  It
1612 supports tuning of various parameters related to timing, buffers and
1613 protocols (TCP, UDP, SCTP with IPv4 and IPv6).  For each test it reports
1614 the bandwidth, loss, and other parameters.")
1615     (home-page "https://software.es.net/iperf/")
1616     (license (list license:bsd-3             ; Main distribution.
1617                    license:ncsa              ; src/{units,iperf_locale,tcp_window_size}.c
1618                    license:expat             ; src/{cjson,net}.[ch]
1619                    license:public-domain)))) ; src/portable_endian.h
1620
1621 (define-public nethogs
1622   (package
1623     (name "nethogs")
1624     (version "0.8.5")
1625     (source (origin
1626               (method url-fetch)
1627               (uri (string-append "https://github.com/raboof/nethogs/archive/v"
1628                                   version ".tar.gz"))
1629               (sha256
1630                (base32
1631                 "1k4x8r7s4dgcb6n2rjn28h2yyij92mwm69phncl3597cdxr954va"))
1632               (file-name (string-append name "-" version ".tar.gz"))))
1633     (build-system gnu-build-system)
1634     (inputs
1635      `(("libpcap" ,libpcap)
1636        ("ncurses" ,ncurses)))
1637     (arguments
1638      `(#:make-flags `("CC=gcc"
1639                       ,(string-append "PREFIX=" %output))
1640        #:phases
1641        (modify-phases %standard-phases
1642          (delete 'configure)))) ; No ./configure script.
1643     (home-page "https://github.com/raboof/nethogs")
1644     (synopsis "Per-process bandwidth monitor")
1645     (description "NetHogs is a small 'net top' tool for Linux.  Instead of
1646 breaking the traffic down per protocol or per subnet, like most tools do, it
1647 groups bandwidth by process.
1648
1649 NetHogs does not rely on a special kernel module to be loaded.  If there's
1650 suddenly a lot of network traffic, you can fire up NetHogs and immediately see
1651 which PID is causing this.  This makes it easy to identify programs that have
1652 gone wild and are suddenly taking up your bandwidth.")
1653     (license license:gpl2+)))
1654
1655 (define-public nzbget
1656   (package
1657     (name "nzbget")
1658     (version "21.0")
1659     (source
1660      (origin
1661        (method url-fetch)
1662        (uri (string-append "https://github.com/nzbget/nzbget/archive/v"
1663                            version ".tar.gz"))
1664        (file-name (string-append name "-" version ".tar.gz"))
1665        (sha256
1666         (base32
1667          "0l3dzxz7d7jf6cyach41zirvsx1x0vs4nh053c0miycv7zjyrly7"))
1668        (modules '((guix build utils)))
1669        (snippet
1670         ;; Reported upstream as <https://github.com/nzbget/nzbget/pull/414>.
1671         '(begin
1672            (substitute* "daemon/connect/TlsSocket.cpp"
1673              (("gnutls_certificate-verification_status_print")
1674               "gnutls_certificate_verification_status_print"))
1675            #t))))
1676     (arguments
1677      `(#:configure-flags
1678        (list
1679         (string-append "--with-libcurses-includes="
1680                        (assoc-ref %build-inputs "ncurses") "/include")
1681         (string-append "--with-libcurses-libraries="
1682                        (assoc-ref %build-inputs "ncurses") "/lib")
1683         (string-append "--with-tlslib=GnuTLS"))))
1684     (build-system gnu-build-system)
1685     (inputs `(("gnutls" ,gnutls)
1686               ("libxml2" ,libxml2)
1687               ("ncurses" ,ncurses)
1688               ("zlib" ,zlib)))
1689     (native-inputs `(("pkg-config" ,pkg-config)))
1690     (home-page "https://github.com/nzbget/nzbget")
1691     (synopsis "Usenet binary file downloader")
1692     (description
1693      "NZBGet is a binary newsgrabber, which downloads files from Usenet based
1694 on information given in @code{nzb} files.  NZBGet can be used in standalone
1695 and in server/client modes.  In standalone mode, you pass NZBGet @command{nzb}
1696 files as command-line parameters and it downloads them and exits.  NZBGet also
1697 contains a Web interface.  Its server can be controlled through remote
1698 procedure calls (RPCs).")
1699     (license license:gpl2+)))
1700
1701 (define-public openvswitch
1702   (package
1703     (name "openvswitch")
1704     (version "2.12.0")
1705     (source (origin
1706               (method url-fetch)
1707               (uri (string-append
1708                     "https://www.openvswitch.org/releases/openvswitch-"
1709                     version ".tar.gz"))
1710               (sha256
1711                (base32
1712                 "1y78ix5inhhcvicbvyy2ij38am1215nr55vydhab3d4065q45z8k"))))
1713     (build-system gnu-build-system)
1714     (arguments
1715      '(;; FIXME: many tests fail with:
1716        ;;    […]
1717        ;;    test -e $OVS_RUNDIR/ovs-vswitchd.pid
1718        ;;    ovs-appctl -t ovs-vswitchd exit
1719        ;;    hard failure
1720        #:tests? #f
1721        #:configure-flags
1722        '("--enable-shared"
1723          "--localstatedir=/var"
1724          "--with-dbdir=/var/lib/openvswitch")
1725        #:phases
1726        (modify-phases %standard-phases
1727          (replace 'install
1728            (lambda _
1729              (invoke "make"
1730                      ;; Don't try to create directories under /var.
1731                      "RUNDIR=/tmp"
1732                      "PKIDIR=/tmp"
1733                      "LOGDIR=/tmp"
1734                      "DBDIR=/tmp"
1735                      "install"))))))
1736     (native-inputs
1737      `(("perl" ,perl)
1738        ("pkg-config" ,pkg-config)
1739        ("python" ,python-2)
1740        ;; for testing
1741        ("util-linux" ,util-linux)))
1742     (propagated-inputs
1743      `(("python-six" ,python2-six)))
1744     (inputs
1745      `(("libcap-ng" ,libcap-ng)
1746        ("openssl" ,openssl)))
1747     (synopsis "Virtual network switch")
1748     (home-page "https://www.openvswitch.org/")
1749     (description
1750      "Open vSwitch is a multilayer virtual switch.  It is designed to enable
1751 massive network automation through programmatic extension, while still
1752 supporting standard management interfaces and protocols (e.g. NetFlow, sFlow,
1753 IPFIX, RSPAN, CLI, LACP, 802.1ag).")
1754     (license                            ; see debian/copyright for detail
1755      (list license:lgpl2.1              ; xenserver and utilities/bugtool
1756            license:gpl2                 ; datapath
1757            license:bsd-2 license:bsd-3
1758            license:asl2.0))))           ; all other
1759
1760 (define-public python-ipy
1761   (package
1762     (name "python-ipy")
1763     (version "1.00")
1764     (source (origin
1765               (method url-fetch)
1766               (uri (pypi-uri "IPy" version))
1767               (sha256
1768                (base32
1769                 "08d6kcacj67mvh0b6y765ipccy6gi4w2ndd4v1l3im2qm1cgcarg"))))
1770     (build-system python-build-system)
1771     (home-page "https://github.com/autocracy/python-ipy/")
1772     (synopsis "Python class and tools for handling IP addresses and networks")
1773     (description "The @code{IP} class allows a comfortable parsing and
1774 handling for most notations in use for IPv4 and IPv6 addresses and
1775 networks.")
1776     (license license:bsd-3)))
1777
1778 (define-public python2-ipy
1779   (package-with-python2 python-ipy))
1780
1781 (define-public speedtest-cli
1782   (package
1783     (name "speedtest-cli")
1784     (version "2.1.2")
1785     (source
1786      (origin
1787        (method git-fetch)
1788        (uri (git-reference
1789              (url "https://github.com/sivel/speedtest-cli")
1790              (commit (string-append "v" version))))
1791        (file-name (git-file-name name version))
1792        (sha256
1793         (base32 "1456yly6iym2c9bl6pi4sz8xbw34bm2dxm1vzpydsd6jazwpmy26"))))
1794     (build-system python-build-system)
1795     (home-page "https://github.com/sivel/speedtest-cli")
1796     (synopsis "Internet bandwidth tester")
1797     (description
1798      "Command line interface for testing internet bandwidth using
1799 speedtest.net.")
1800     (license license:asl2.0)))
1801
1802 (define-public tftp-hpa
1803   (package
1804     (name "tftp-hpa")
1805     (version "5.2")
1806     (source (origin
1807               (method url-fetch)
1808               (uri (string-append "mirror://kernel.org/software/"
1809                                   "network/tftp/tftp-hpa/tftp-hpa-" version
1810                                   ".tar.xz"))
1811               (sha256
1812                (base32
1813                 "12vidchglhyc20znq5wdsbhi9mqg90jnl7qr9qs8hbvaz4fkdvmg"))))
1814     (build-system gnu-build-system)
1815     (arguments `(#:tests? #f)) ; no test target
1816     (synopsis "HPA's tftp client")
1817     (description
1818      "This is a tftp client derived from OpenBSD tftp with some extra options
1819 added and bugs fixed.  The source includes readline support but it is not
1820 enabled due to license conflicts between the BSD advertising clause and the GPL.")
1821     (home-page "https://git.kernel.org/cgit/network/tftp/tftp-hpa.git/about/")
1822     ;; Some source files are distributed under a 3-clause BSD license, and
1823     ;; others under a 4-clause BSD license. Refer to the files in the source
1824     ;; distribution for clarification.
1825     (license (list license:bsd-3 license:bsd-4))))
1826
1827 (define-public pidentd
1828   (package
1829     (name "pidentd")
1830     (version "3.0.19")
1831     (source
1832      (origin
1833        (method url-fetch)
1834        (uri (string-append "https://github.com/ptrrkssn/pidentd/archive/"
1835                            "v" version ".tar.gz"))
1836        (file-name (string-append name "-" version ".tar.gz"))
1837        (sha256
1838         (base32
1839          "0y3kd1bkydqkpc1qdff24yswysamsqivvadjy0468qri5730izgc"))))
1840     (build-system gnu-build-system)
1841     (arguments
1842      `(#:tests? #f)) ; No tests are included
1843     (inputs
1844      `(("openssl" ,openssl-1.0)))       ;for the DES library
1845     (home-page "https://www.lysator.liu.se/~pen/pidentd/")
1846     (synopsis "Small Ident Daemon")
1847     (description
1848      "@dfn{Pidentd} (Peter's Ident Daemon) is a identd, which implements a
1849 identification server.  Pidentd looks up specific TCP/IP connections and
1850 returns the user name and other information about the connection.")
1851     (license license:public-domain)))
1852
1853 (define-public spiped
1854   (package
1855     (name "spiped")
1856     (version "1.6.0")
1857     (source (origin
1858               (method url-fetch)
1859               (uri (string-append "https://www.tarsnap.com/spiped/spiped-"
1860                                   version ".tgz"))
1861               (sha256
1862                (base32
1863                 "1r51rdcl7nib1yv3yvgd5alwlkkwmr387brqavaklb0p2bwzixz6"))))
1864     (build-system gnu-build-system)
1865     (arguments
1866      '(#:test-target "test"
1867        #:make-flags (let* ((out (assoc-ref %outputs "out"))
1868                            (bindir (string-append out "/bin"))
1869                            (man1dir (string-append out "/share/man/man1")))
1870                       (list "CC=gcc" ; It tries to invoke `c99`.
1871                             (string-append "BINDIR=" bindir)
1872                             (string-append "MAN1DIR=" man1dir)))
1873        #:phases
1874        (modify-phases %standard-phases
1875          (add-after 'unpack 'patch-command-invocations
1876            (lambda _
1877              (substitute* '("Makefile"
1878                             "libcperciva/cpusupport/Build/cpusupport.sh"
1879                             "libcperciva/POSIX/posix-cflags.sh"
1880                             "libcperciva/POSIX/posix-l.sh")
1881                (("command -p") ""))
1882              #t))
1883          (delete 'configure) ; No ./configure script.
1884          (add-after 'install 'install-more-docs
1885            (lambda* (#:key outputs #:allow-other-keys)
1886              (let* ((out (assoc-ref %outputs "out"))
1887                     (misc (string-append out "/share/doc/spiped")))
1888                (install-file "DESIGN.md" misc)
1889                #t))))))
1890     (native-inputs
1891      `(("procps" ,procps))) ; `ps` is used by the test suite.
1892     (inputs
1893      `(("openssl" ,openssl)))
1894     (home-page "https://www.tarsnap.com/spiped.html")
1895     (synopsis "Create secure pipes between sockets")
1896     (description "Spiped (pronounced \"ess-pipe-dee\") is a utility for creating
1897 symmetrically encrypted and authenticated pipes between socket addresses, so
1898 that one may connect to one address (e.g., a UNIX socket on localhost) and
1899 transparently have a connection established to another address (e.g., a UNIX
1900 socket on a different system).  This is similar to 'ssh -L' functionality, but
1901 does not use SSH and requires a pre-shared symmetric key.")
1902     (license license:bsd-2)))
1903
1904 (define-public quagga
1905   (package
1906     (name "quagga")
1907     (version "1.2.4")
1908     (source (origin
1909               (method url-fetch)
1910               (uri (string-append "mirror://savannah/quagga/quagga-"
1911                                   version ".tar.gz"))
1912               (sha256
1913                (base32
1914                 "1lsksqxij5f1llqn86pkygrf5672kvrqn1kvxghi169hqf1c0r73"))
1915               (patches
1916                (search-patches "quagga-reproducible-build.patch"))))
1917     (build-system gnu-build-system)
1918     (native-inputs `(("pkg-config" ,pkg-config)
1919                      ("perl" ,perl)
1920                      ("dejagnu" ,dejagnu)))
1921     (inputs `(("readline" ,readline)
1922               ("c-ares" ,c-ares)))
1923     (synopsis "Routing Software Suite")
1924     (description "Quagga is a routing software suite, providing implementations
1925 of OSPFv2, OSPFv3, RIP v1 and v2, RIPng and BGP-4 for Unix platforms.
1926
1927 The Quagga architecture consists of a core daemon, @command{zebra}, which
1928 acts as an abstraction layer to the underlying Unix kernel and presents the
1929 Zserv API over a Unix or TCP stream to Quagga clients.  It is these Zserv
1930 clients which typically implement a routing protocol and communicate routing
1931 updates to the zebra daemon.")
1932     (home-page "https://www.nongnu.org/quagga/")
1933     (license license:gpl2+)))
1934
1935 (define-public thc-ipv6
1936   (let ((revision "0")
1937         (commit "4bb72573e0950ce6f8ca2800a10748477020029e"))
1938     (package
1939       (name "thc-ipv6")
1940       (version (git-version "3.4" revision commit))
1941       (source (origin
1942                 (method git-fetch)
1943                 (uri (git-reference
1944                        (url "https://github.com/vanhauser-thc/thc-ipv6.git")
1945                        (commit commit)))
1946                 (file-name (git-file-name name version))
1947                 (sha256
1948                  (base32
1949                   "1x5i6vbsddqc2yks7r1a2fw2fk16qxvd6hpzh1lykjfpkal8fdir"))))
1950       (build-system gnu-build-system)
1951       (arguments
1952        `(#:make-flags (list (string-append "PREFIX=" (assoc-ref %outputs "out")))
1953          #:tests? #f ; No test suite.
1954          #:phases
1955          (modify-phases %standard-phases
1956            (delete 'configure) ; No ./configure script.
1957            (add-before 'build 'patch-paths
1958              (lambda _
1959                (substitute* "Makefile"
1960                  (("/bin/echo") "echo"))
1961                #t))
1962            (add-after 'install 'install-more-docs
1963              (lambda* (#:key outputs #:allow-other-keys)
1964                (let* ((out (assoc-ref outputs "out"))
1965                       (doc (string-append out "/share/thc-ipv6/doc")))
1966                  (install-file "README" doc)
1967                  (install-file "HOWTO-INJECT" doc)
1968                  #t))))))
1969       ;; TODO Add libnetfilter-queue once packaged.
1970       (inputs
1971        `(("libpcap" ,libpcap)
1972          ("openssl" ,openssl)
1973          ("perl" ,perl)))
1974       (home-page "https://github.com/vanhauser-thc/thc-ipv6")
1975       (synopsis "IPv6 security research toolkit")
1976       (description "The THC IPv6 Toolkit provides command-line tools and a library
1977 for researching IPv6 implementations and deployments.  It requires Linux 2.6 or
1978 newer and only works on Ethernet network interfaces.")
1979       ;; AGPL 3 with exception for linking with OpenSSL. See the 'LICENSE' file in
1980       ;; the source distribution for more information.
1981       (license license:agpl3))))
1982
1983 (define-public bmon
1984   (package
1985     (name "bmon")
1986     (version "4.0")
1987     (source
1988      (origin
1989        (method url-fetch)
1990        (uri (string-append "https://github.com/tgraf/bmon/releases/download/v"
1991                            version "/bmon-" version ".tar.gz"))
1992        (sha256
1993         (base32
1994          "0ylzriv4pwh76344abzl1w219x188gshbycbna35gsyfp09c7z82"))))
1995     (build-system gnu-build-system)
1996     (inputs
1997      `(("libconfuse" ,libconfuse)
1998        ("libnl" ,libnl)
1999        ("ncurses" ,ncurses)))
2000     (native-inputs
2001      `(("pkg-config" ,pkg-config)))
2002     (synopsis "Bandwidth monitor")
2003     (description "bmon is a monitoring and debugging tool to capture
2004 networking-related statistics and prepare them visually in a human-friendly
2005 way.  It features various output methods including an interactive curses user
2006 interface and a programmable text output for scripting.")
2007     (home-page "https://github.com/tgraf/bmon")
2008     ;; README.md mentions both the 2-clause BSD and expat licenses, but all
2009     ;; the source files only have expat license headers. Upstream has been
2010     ;; contacted for clarification: https://github.com/tgraf/bmon/issues/59
2011     ;; Update the license field when upstream responds.
2012     (license (list license:bsd-2
2013                    license:expat))))
2014
2015 (define-public libnet
2016   (package
2017     (name "libnet")
2018     (version "1.2-rc3")
2019     (source
2020      (origin
2021        (method git-fetch)
2022        (uri (git-reference
2023              (url "https://github.com/sam-github/libnet")
2024              (commit (string-append "libnet-" version))))
2025        (file-name (git-file-name name version))
2026        (sha256
2027         (base32
2028          "0cy8w4g5rv963v4p6iq3333kxgdddx2lywp70xf62553a25xhhs4"))))
2029     (build-system gnu-build-system)
2030     (arguments
2031      `(#:phases
2032        (modify-phases %standard-phases
2033          (add-after 'unpack 'chdir
2034            (lambda _ (chdir "libnet") #t))
2035          (add-before 'build 'build-doc
2036            (lambda* (#:key make-flags #:allow-other-keys)
2037              (apply invoke "make" "-C" "doc" "doc"
2038                     make-flags))))))
2039     (native-inputs
2040      `(("autoconf" ,autoconf)
2041        ("automake" ,automake)
2042        ("libtool" ,libtool)
2043        ("doxygen" ,doxygen)))
2044     (home-page "https://sourceforge.net/projects/libnet-dev/")
2045     (synopsis "Framework for low-level network packet construction")
2046     (description
2047      "Libnet provides a fairly portable framework for network packet
2048 construction and injection.  It features portable packet creation interfaces
2049 at the IP layer and link layer, as well as a host of supplementary
2050 functionality.  Using libnet, quick and simple packet assembly applications
2051 can be whipped up with little effort.")
2052     (license license:bsd-2)))
2053
2054 (define-public mtr
2055   (package
2056     (name "mtr")
2057     (version "0.93")
2058     (source
2059      (origin
2060        (method url-fetch)
2061        (uri (string-append "ftp://ftp.bitwizard.nl/mtr/"
2062                            "mtr-" version ".tar.gz"))
2063        (sha256
2064         (base32 "03gid8g4r6a9r40855s4345xm1bylj2kfqkicjwxpmvvccyng712"))))
2065     (build-system gnu-build-system)
2066     (inputs
2067      `(("libcap" ,libcap)
2068        ("ncurses" ,ncurses)))
2069     (arguments
2070      `(#:tests? #f))                    ; tests require network access
2071     (home-page "https://www.bitwizard.nl/mtr/")
2072     (synopsis "Network diagnostic tool")
2073     (description
2074      "@acronym{mtr, My TraceRoute} combines the functionality of the
2075 @command{traceroute} and @command{ping} programs in a single network diagnostic
2076 tool.  @command{mtr} can use several network protocols to detect intermediate
2077 routers (or @dfn{hops}) between the local host and a user-specified destination.
2078 It then continually measures the response time and packet loss at each hop, and
2079 displays the results in real time.")
2080     (license license:gpl2+)))
2081
2082 (define-public strongswan
2083   (package
2084     (name "strongswan")
2085     (version "5.8.4")
2086     (source
2087      (origin
2088        (method url-fetch)
2089        (uri (string-append "https://download.strongswan.org/strongswan-"
2090                            version ".tar.bz2"))
2091        (sha256
2092         (base32 "0g2m08gmgdi3qvvqz6zy7n16np53sp232xd0rdc2vdhk73img6id"))))
2093     (build-system gnu-build-system)
2094     (arguments
2095      `(#:phases
2096        (modify-phases %standard-phases
2097          (add-before 'build 'patch-command-file-names
2098            (lambda* (#:key inputs #:allow-other-keys)
2099              (substitute* "src/libstrongswan/utils/process.c"
2100                (("/bin/sh")
2101                 (string-append (assoc-ref inputs "bash") "/bin/sh")))
2102
2103              (substitute* "src/libstrongswan/tests/suites/test_process.c"
2104                (("/bin/sh") (which "sh"))
2105                (("/bin/echo") (which "echo"))
2106                (("cat") (which "cat")))
2107              #t))
2108          (add-before 'check 'set-up-test-environment
2109            (lambda* (#:key inputs #:allow-other-keys)
2110              (setenv "TZDIR" (string-append (assoc-ref inputs "tzdata")
2111                                             "/share/zoneinfo"))
2112              #t)))
2113        #:configure-flags
2114        (list
2115         ;; Disable bsd-4 licensed plugins.
2116         "--disable-des"
2117         "--disable-blowfish")))
2118     (inputs
2119      `(("curl" ,curl)
2120        ("gmp" ,gmp)
2121        ("libgcrypt" ,libgcrypt)
2122        ("openssl" ,openssl)))
2123     (native-inputs
2124      `(("coreutils" ,coreutils)
2125        ("tzdata" ,tzdata-for-tests)))
2126     (synopsis "IKEv1/v2 keying daemon")
2127     (description "StrongSwan is an IPsec implementation originally based upon
2128 the FreeS/WAN project.  It contains support for IKEv1, IKEv2, MOBIKE, IPv6,
2129 NAT-T and more.")
2130     (home-page "https://strongswan.org/")
2131     (license
2132      (list license:gpl2+
2133            ;; src/aikgen/*
2134            ;; src/libcharon/plugins/dnscert/*
2135            ;; src/libcharon/plugins/ext_auth/*
2136            ;; src/libcharon/plugins/vici/ruby/*
2137            ;; src/libcharon/plugins/xauth_pam/xauth_pam_listener.[ch]
2138            license:expat
2139            ;; src/inclue/sys/*
2140            license:bsd-3
2141            ;; src/libstrongswan/plugins/sha3/sha3_keccak.c
2142            license:public-domain
2143            ;; src/libstrongswan/plugins/pkcs11/pkcs11.h
2144            (license:non-copyleft
2145             "file://src/libstrongswan/plugins/pkcs11/pkcs11.h"
2146             "pkcs11 contains a unknown permissive license. View the specific
2147 file for more details.")
2148            ;; These files are not included in the
2149            ;; build, they are disabled through
2150            ;; options to ./configure
2151            ;;
2152            ;; src/libstrongswan/plugins/blowfish/bf_enc.c
2153            ;; src/libstrongswan/plugins/blowfish/bf_locl.h
2154            ;; src/libstrongswan/plugins/blowfish/bf_pi.h
2155            ;; src/libstrongswan/plugins/blowfish/bf_skey.c
2156            ;; src/libstrongswan/plugins/blowfish/blowfish_crypter.c
2157            ;; src/libstrongswan/plugins/des/des_crypter.c
2158            license:bsd-4))))
2159
2160 (define-public amule
2161   (package
2162     (name "amule")
2163     (version "2.3.2")
2164     (source (origin
2165               (method git-fetch)
2166               (uri (git-reference
2167                      (url "https://github.com/amule-project/amule")
2168                      (commit version)))
2169               (file-name (git-file-name name version))
2170               (sha256
2171                (base32
2172                 "010wxm6g9f92x6fympj501zbnjka32rzbx0sk3a2y4zpih5d2nsn"))
2173               ;; Patch for adopting crypto++ >= 6.0.
2174               (patches (search-patches "amule-crypto-6.patch"))))
2175     (build-system gnu-build-system)
2176     (arguments
2177      `(#:phases
2178        (modify-phases %standard-phases
2179          (delete 'bootstrap) ; bootstrap phase runs too early.
2180          (add-after 'patch-source-shebangs 'autogen
2181            (lambda _
2182              (invoke "sh" "autogen.sh")
2183              #t)))
2184        #:configure-flags
2185        '("--disable-rpath"
2186          "--enable-wxcas"
2187          "--enable-cas"
2188          "--enable-alc"
2189          "--enable-alcc"
2190          "--enable-xas"
2191          "--enable-amulecmd"
2192          "--enable-geoip"
2193          "--enable-ccache"
2194          "--enable-nls"
2195          "--enable-optimize"
2196          "--enable-amule-gui"
2197          "--enable-amule-daemon"
2198          "--enable-webserver"
2199          "--with-denoise-level=0")))
2200     (native-inputs
2201      `(("autoconf" ,autoconf)
2202        ("automake" ,automake)
2203        ("gettext-minimal" ,gettext-minimal)
2204        ("perl" ,perl)))
2205     (inputs
2206      `(("zlib" ,zlib)
2207        ("crypto++" ,crypto++)
2208        ("libpng" ,libpng)
2209        ("wxwidgets-gtk2" ,wxwidgets-gtk2)))
2210     (home-page "http://amule.org/")
2211     (synopsis "Peer-to-peer client for the eD2K and Kademlia networks")
2212     (description
2213      "aMule is an eMule-like client for the eD2k and Kademlia peer-to-peer
2214 file sharing networks.  It includes a graphical user interface (GUI), a daemon
2215 allowing you to run a client with no graphical interface, and a Web GUI for
2216 remote access.  The @command{amulecmd} command allows you to control aMule
2217 remotely.")
2218     (license license:gpl2+)))
2219
2220 (define-public zyre
2221   (package
2222     (name "zyre")
2223     (version "2.0.0")
2224     (source (origin
2225               (method url-fetch)
2226               (uri
2227                (string-append "https://github.com/zeromq/zyre/releases/download/v"
2228                               version "/" name "-" version ".tar.gz"))
2229               (sha256
2230                (base32
2231                 "0qz2730bng1gs9xbqxhkw88qbsmszgmmrl2g9k6xrg6r3bqvsdc7"))))
2232     (build-system gnu-build-system)
2233     (arguments
2234      `(;; Ensure the kernel headers are treated as system headers to suppress
2235        ;; harmless -Werror=pedantic warnings.
2236        #:make-flags (list (string-append "C_INCLUDE_PATH="
2237                                          (assoc-ref %build-inputs "kernel-headers")
2238                                          "/include"))))
2239     (inputs `(("zeromq" ,zeromq)
2240               ("czmq" ,czmq)
2241               ("libsodium" ,libsodium)))
2242     (synopsis "Framework for proximity-based peer-to-peer applications")
2243     (description "Zyre provides reliable group messaging over local area
2244 networks using zeromq.  It has these key characteristics:
2245
2246 @itemize
2247 @item Zyre needs no administration or configuration.
2248 @item Peers may join and leave the network at any time.
2249 @item Peers talk to each other without any central brokers or servers.
2250 @item Peers can talk directly to each other.
2251 @item Peers can join groups, and then talk to groups.
2252 @item Zyre is reliable, and loses no messages even when the network is heavily loaded.
2253 @item Zyre is fast and has low latency, requiring no consensus protocols.
2254 @item Zyre is designed for WiFi networks, yet also works well on Ethernet networks.
2255 @end itemize")
2256     (home-page "https://github.com/zeromq/zyre")
2257     (license license:mpl2.0)))
2258
2259 (define-public can-utils
2260   (package
2261     (name "can-utils")
2262     (version "2018.02.0")
2263     (source (origin
2264               (method git-fetch)
2265               (uri (git-reference
2266                     (url "https://github.com/linux-can/can-utils.git")
2267                     (commit (string-append "v" version))))
2268               (file-name (git-file-name name version))
2269               (sha256
2270                (base32
2271                 "0r0zkm67bdcmbfypjr7z041d4zp0xzb379dyl8cvhmflh12fd2jb"))))
2272     (build-system gnu-build-system)
2273     (arguments
2274      `(#:tests? #f                      ; No tests exist.
2275        #:make-flags (list "CC=gcc"
2276                           (string-append "PREFIX="
2277                                          (assoc-ref %outputs "out")))
2278        #:phases
2279        (modify-phases %standard-phases
2280          (delete 'bootstrap)
2281          (delete 'configure))))
2282     (home-page "https://github.com/linux-can/can-utils")
2283     (synopsis "CAN utilities")
2284     (description "This package provides CAN utilities in the following areas:
2285
2286 @itemize
2287 @item Basic tools to display, record, generate and replay CAN traffic
2288 @item CAN access via IP sockets
2289 @item CAN in-kernel gateway configuration
2290 @item CAN bus measurement and testing
2291 @item ISO-TP (ISO15765-2:2016 - this means messages with a body larger than
2292 eight bytes) tools
2293 @item Log file converters
2294 @item Serial Line Discipline configuration for slcan driver
2295 @end itemize")
2296     ;; Either BSD-3 or GPL-2 can be used.
2297     (license (list license:bsd-3 license:gpl2))))
2298
2299 (define-public asio
2300   (package
2301     (name "asio")
2302     (version "1.12.2")
2303     (source
2304      (origin
2305        (method url-fetch)
2306        (uri (string-append "mirror://sourceforge/asio/asio/"
2307                            version " (Stable)/asio-" version ".tar.bz2"))
2308        (sha256
2309         (base32 "1akray4l3hgahmb92sbvsqg128c7g7s92jrkf1sp1fjnfjrxq9sf"))))
2310     (build-system gnu-build-system)
2311     (inputs
2312      `(("boost" ,boost)
2313        ("openssl" ,openssl)))
2314     (arguments
2315      `(#:configure-flags
2316        (list
2317         (string-append "--with-boost=" (assoc-ref %build-inputs "boost"))
2318         (string-append "--with-openssl=" (assoc-ref %build-inputs "openssl")))))
2319     (home-page "https://think-async.com/Asio")
2320     (synopsis "C++ library for ASynchronous network I/O")
2321     (description "Asio is a cross-platform C++ library for network and
2322 low-level I/O programming that provides developers with a consistent
2323 asynchronous model using a modern C++ approach.")
2324     (license license:boost1.0)))
2325
2326 (define-public shadowsocks
2327   ;; There are some security fixes after the last release.
2328   (let* ((commit "e332ec93e9c90f1cbee676b022bf2c5d5b7b1239")
2329          (revision "0")
2330          (version (git-version "2.8.2" revision commit)))
2331     (package
2332       (name "shadowsocks")
2333       (version version)
2334       (home-page "https://github.com/shadowsocks/shadowsocks")
2335       (source (origin
2336                 (method git-fetch)
2337                 (uri (git-reference
2338                       (url home-page)
2339                       (commit commit)))
2340                 (sha256
2341                  (base32
2342                   "1idd9b4f2pnhcpk1bh030hqg5zq25gkwxd53xi3c0cj242w7sp2j"))
2343                 (file-name (git-file-name name version))))
2344       (build-system python-build-system)
2345       (synopsis "Fast tunnel proxy that helps you bypass firewalls")
2346       (description
2347        "This package is a fast tunnel proxy that helps you bypass firewalls.
2348
2349 Features:
2350 @itemize
2351 @item TCP & UDP support
2352 @item User management API
2353 @item TCP Fast Open
2354 @item Workers and graceful restart
2355 @item Destination IP blacklist
2356 @end itemize")
2357       (license license:asl2.0))))
2358
2359 (define-public net-snmp
2360   (package
2361     (name "net-snmp")
2362     (version "5.8")
2363     (source (origin
2364               (method url-fetch)
2365               (uri (string-append "mirror://sourceforge/net-snmp/net-snmp/"
2366                                   version "/net-snmp-" version ".tar.gz"))
2367               (sha256
2368                (base32
2369                 "1pvajzj9gmj56dmwix0ywmkmy2pglh6nny646hkm7ghfhh03bz5j"))
2370               (modules '((guix build utils)))
2371               (snippet
2372                '(begin
2373                   ;; Drop bundled libraries.
2374                   (delete-file-recursively "snmplib/openssl")
2375                   #t))))
2376     (build-system gnu-build-system)
2377     (arguments
2378      `(#:test-target "test"
2379        ;; XXX: With parallel build enabled, Perl modules may not get linked with
2380        ;; libnetsnmp.  See e.g. <https://bugzilla.novell.com/show_bug.cgi?id=819497>.
2381        #:parallel-build? #f
2382        #:configure-flags
2383        (list (string-append "LDFLAGS=-Wl,-rpath="
2384                             (assoc-ref %outputs "out")
2385                             "/lib")
2386              "--with-logfile=/var/log/snmpd.log"
2387              (string-append "--with-openssl="
2388                             (assoc-ref %build-inputs "openssl")))
2389        #:phases
2390        (modify-phases %standard-phases
2391          (add-after 'unpack 'patch-tests
2392            (lambda* (#:key inputs #:allow-other-keys)
2393              (substitute* "testing/fulltests/support/simple_TESTCONF.sh"
2394                (("NETSTAT=\"\"")
2395                 (string-append "NETSTAT=\"" (which "netstat") "\"")))
2396              (substitute* '("testing/fulltests/default/T065agentextend_simple"
2397                             "testing/fulltests/default/T115agentxperl_simple")
2398                (("/usr/bin/env") (which "env")))
2399              (substitute* "testing/fulltests/default/T065agentextend_sh_simple"
2400                (("/bin/sh") (which "sh")))
2401              ;; These tests require network access.
2402              (for-each delete-file
2403                        '("testing/fulltests/default/T070com2sec_simple"
2404                          "testing/fulltests/default/T071com2sec6_simple"))
2405              #t))
2406          (add-after 'unpack 'patch-Makefile.PL
2407            (lambda* (#:key outputs #:allow-other-keys)
2408              (substitute* "Makefile.in"
2409                (("Makefile.PL -NET")
2410                 (string-append "Makefile.PL PREFIX="
2411                                (assoc-ref outputs "out")
2412                                " INSTALLDIRS=site" " NO_PERLLOCAL=1"
2413                                " -NET")))
2414              #t)))))
2415     (inputs
2416      `(("perl" ,perl)
2417        ("openssl" ,openssl)
2418        ("libnl" ,libnl)))
2419     ;; These inputs are only needed for tests.
2420     (native-inputs
2421      `(("net-tools" ,net-tools)
2422        ("coreutils" ,coreutils)
2423        ("grep" ,grep)))
2424     (home-page "http://www.net-snmp.org/")
2425     (synopsis "Simple Network Management Protocol library and tools")
2426     (description "The @dfn{Simple Network Management Protocol} (SNMP) is a
2427 widely used protocol for monitoring the health and welfare of network
2428 equipment (e.g. routers), computer equipment and even devices like UPSs.
2429 Net-SNMP is a suite of applications used to implement SNMP v1, SNMP v2c and
2430 SNMP v3 using both IPv4 and IPv6.")
2431     ;; This only affects OpenBSD
2432     ;; https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8100
2433     (properties `((lint-hidden-cve . ("CVE-2015-8100"))))
2434     (license (list license:bsd-3
2435                    (license:non-copyleft
2436                     "http://www.net-snmp.org/about/license.html"
2437                     "CMU/UCD copyright notice")))))
2438
2439 (define-public ubridge
2440   (package
2441     (name "ubridge")
2442     (version "0.9.16")
2443     (source
2444      (origin
2445        (method git-fetch)
2446        (uri (git-reference
2447              (url "https://github.com/GNS3/ubridge.git")
2448              (commit (string-append "v" version))))
2449        (file-name (git-file-name name version))
2450        (sha256
2451         (base32 "1bind7ylgxs743vfdmpdrpp4iamy461bc3i7nxza91kj7hyyjz6h"))))
2452     (build-system gnu-build-system)
2453     (arguments
2454      `(#:tests? #f                      ; no tests
2455        #:make-flags '("CC=gcc")
2456        #:phases
2457        (modify-phases %standard-phases
2458          (delete 'configure)            ; no configure script
2459          (add-before 'install 'set-bindir
2460            (lambda* (#:key  inputs outputs #:allow-other-keys)
2461              (let ((bin (string-append (assoc-ref outputs "out")
2462                                        "/bin")))
2463                (mkdir-p bin)
2464                (substitute* "Makefile"
2465                  (("\\$\\(BINDIR\\)") bin)
2466                  (("\tsetcap cap_net.*$") "")))
2467              #t)))))
2468     (inputs
2469      `(("libpcap" ,libpcap)))
2470     (home-page "https://github.com/GNS3/ubridge/")
2471     (synopsis "Bridge for UDP tunnels, Ethernet, TAP and VMnet interfaces")
2472     (description "uBridge is a simple program to create user-land bridges
2473 between various technologies.  Currently, bridging between UDP tunnels,
2474 Ethernet and TAP interfaces is supported.  Packet capture is also supported.")
2475     (license license:gpl3+)))
2476
2477 (define-public hcxtools
2478   (package
2479     (name "hcxtools")
2480     (version "5.2.0")
2481     (source
2482      (origin
2483        (method git-fetch)
2484        (uri (git-reference
2485              (url "https://github.com/ZerBea/hcxtools.git")
2486              (commit version)))
2487        (sha256
2488         (base32 "0k2qlq9hz5zc21nyc6yrnfqzga7hydn5mm0x3rpl2fhkwl81lxcn"))
2489        (file-name (git-file-name name version))))
2490     (build-system gnu-build-system)
2491     (inputs
2492      `(("curl" ,curl)
2493        ("libpcap" ,libpcap)
2494        ("openssl" ,openssl)
2495        ("zlib" ,zlib)))
2496     (arguments
2497      `(#:make-flags
2498        (list "CC=gcc"
2499              (string-append "INSTALLDIR=" (assoc-ref %outputs "out") "/bin"))
2500        #:tests? #f                      ; no test suite
2501        #:phases
2502        (modify-phases %standard-phases
2503          (delete 'configure)
2504          (add-after 'unpack 'set-environment
2505            (lambda* (#:key inputs #:allow-other-keys)
2506              (setenv "C_INCLUDE_PATH"
2507                      (string-append (assoc-ref inputs "curl") "/include:"
2508                                     (assoc-ref inputs "libpcap") "/include:"
2509                                     (assoc-ref inputs "openssl") "/include:"
2510                                     (assoc-ref inputs "zlib") "/include"))
2511              #t)))))
2512     (home-page "https://github.com/ZerBea/hcxtools")
2513     (synopsis "Capture wlan traffic to hashcat and John the Ripper")
2514     (description
2515      "This package contains a small set of tools to capture and convert
2516 packets from wireless devices for use with hashcat or John the Ripper.")
2517     (license license:expat)))
2518
2519 (define-public hcxdumptool
2520   (package
2521     (name "hcxdumptool")
2522     (version "5.2.0")
2523     (source
2524      (origin
2525        (method git-fetch)
2526        (uri (git-reference
2527              (url "https://github.com/ZerBea/hcxdumptool.git")
2528              (commit version)))
2529        (sha256
2530         (base32 "0pg1pvg029gm4rj0fj5kcsjb32hixgn4cxsgiir7spkmacf1qm4q"))
2531        (file-name (git-file-name name version))))
2532     (build-system gnu-build-system)
2533     (arguments
2534      `(#:make-flags
2535        (list "CC=gcc"
2536              (string-append "INSTALLDIR=" (assoc-ref %outputs "out") "/bin"))
2537        #:tests? #f                      ; no test suite
2538        #:phases
2539        (modify-phases %standard-phases
2540          (delete 'configure))))
2541     (home-page "https://github.com/ZerBea/hcxdumptool")
2542     (synopsis "Small tool to capture packets from wlan devices")
2543     (description
2544      "Small tool to capture packets from WLAN devices.  After capturing,
2545 upload the \"uncleaned\" cap to @url{https://wpa-sec.stanev.org/?submit} to
2546 see if the access point or the client is vulnerable to a dictionary attack.
2547 Convert the cap file to hccapx format and/or to WPA-PMKID-PBKDF2
2548 hashline (16800) with @command{hcxpcaptool} from the @code{hcxtools} package
2549 and check if the WLAN key or the master key was transmitted unencrypted.")
2550     (license license:expat)))
2551
2552 (define-public dante
2553   (package
2554     (name "dante")
2555     (version "1.4.2")
2556     (source
2557      (origin
2558        (method url-fetch)
2559        (uri (string-append "https://www.inet.no/dante/files/dante-"
2560                            version ".tar.gz"))
2561        (sha256
2562         (base32
2563          "19rqzj167q73ag20zxpvswhkk0bj56r5maf83v5016sw7vrcz5sc"))))
2564     (build-system gnu-build-system)
2565     (arguments
2566      ;; XXX: The dynamic socks library doesn't work with 'libc.so' (GNU ld
2567      ;; script).  When preloading is enabled, 'sockd' failed with:
2568      ;;    … Failed to open library "libc.so": …: invalid ELF header
2569      '(#:configure-flags '("--disable-preload")))
2570     (home-page "https://www.inet.no/dante/")
2571     (synopsis "SOCKS server and client")
2572     (description "Dante is a SOCKS client and server implementation.  It can
2573 be installed on a machine with access to an external TCP/IP network and will
2574 allow all other machines, without direct access to that network, to be relayed
2575 through the machine the Dante server is running on.  The external network will
2576 never see any machines other than the one Dante is running on.")
2577     (license (license:non-copyleft "file://LICENSE"))))
2578
2579 (define-public restbed
2580   (let ((commit "6eb385fa9051203f28bf96cc1844bbb5a9a6481f"))
2581     (package
2582       (name "restbed")
2583       (version (git-version "4.6" "1" commit))
2584       (source
2585        (origin
2586          (method git-fetch)
2587          (uri (git-reference
2588                (url "https://github.com/Corvusoft/restbed/")
2589                (commit commit)))
2590          (file-name (string-append name "-" version ".tar.gz"))
2591          (sha256
2592           (base32 "0k60i5drklqqrb4khb25fzkgz9y0sncxf1sp6lh2bm1m0gh0661n"))))
2593       (build-system cmake-build-system)
2594       (inputs
2595        `(("asio" ,asio)
2596          ("catch" ,catch-framework)
2597          ("openssl" ,openssl)))
2598       (arguments
2599        `(#:tests? #f
2600          #:configure-flags
2601          '("-DBUILD_TESTS=NO"
2602            "-DBUILD_EXAMPLES=NO"
2603            "-DBUILD_SSL=NO"
2604            "-DBUILD_SHARED=NO")
2605          #:phases
2606          (modify-phases %standard-phases
2607            (add-after 'unpack 'apply-patches-and-fix-paths
2608              (lambda* (#:key inputs #:allow-other-keys)
2609                (let ((asio (assoc-ref inputs "asio"))
2610                      (catch (assoc-ref inputs "catch"))
2611                      (openssl (assoc-ref inputs "openssl")))
2612                  (substitute* "cmake/Findasio.cmake"
2613                    (("(find_path\\( asio_INCLUDE asio\\.hpp HINTS ).*$" all begin)
2614                     (string-append begin " \"" asio "/include\" )")))
2615                  (substitute* "cmake/Findcatch.cmake"
2616                    (("(find_path\\( catch_INCLUDE catch\\.hpp HINTS ).*$" all begin)
2617                     (string-append begin " \"" catch "/include\" )")))
2618                  (substitute* "cmake/Findopenssl.cmake"
2619                    (("(find_library\\( ssl_LIBRARY ssl ssleay32 HINTS ).*$" all begin)
2620                     (string-append begin " \"" openssl "/lib\" )"))
2621                    (("(find_library\\( crypto_LIBRARY crypto libeay32 HINTS ).*$" all begin)
2622                     (string-append begin " \"" openssl "/lib\" )"))
2623                    (("(find_path\\( ssl_INCLUDE openssl/ssl\\.h HINTS ).*$" all begin)
2624                     (string-append begin " \"" openssl "/include\" )")))))))))
2625       (synopsis "Asynchronous RESTful functionality to C++11 applications")
2626       (description "Restbed is a comprehensive and consistent programming
2627 model for building applications that require seamless and secure
2628 communication over HTTP.")
2629       (home-page "https://github.com/Corvusoft/restbed")
2630       (license license:agpl3+))))
2631
2632 (define-public restinio
2633   (package
2634     (name "restinio")
2635     (version "0.6.0.1")
2636     (source (origin
2637               (method git-fetch)
2638               (uri (git-reference
2639                     (url "https://github.com/Stiffstream/restinio.git")
2640                     (commit (string-append "v." version))))
2641               (file-name (git-file-name name version))
2642               (sha256
2643                (base32
2644                 "1c25kpx652nng8m1sqf5an2c3c4g3k6zj85mkkaxzk88iwfzq1s8"))))
2645     (build-system cmake-build-system)
2646     (inputs                             ; TODO: Need to force-keep references on some inputs, e.g. boost.
2647      `(("zlib" ,zlib)
2648        ("catch2" ,catch-framework2)
2649        ("openssl" ,openssl)
2650        ("boost" ,boost)
2651        ("pcre" ,pcre)
2652        ("pcre2" ,pcre2)
2653        ("sobjectizer" ,sobjectizer)))
2654     (propagated-inputs
2655      `(("asio", asio)
2656        ("fmt" ,fmt)
2657        ("http-parser", http-parser)))
2658     (arguments
2659      `(#:configure-flags '("-DRESTINIO_INSTALL=on")
2660        #:tests? #f ; TODO: The tests are called from the root CMakelist, need RESTINIO_TEST=on.
2661        #:phases
2662        (modify-phases %standard-phases
2663          (add-after 'unpack 'change-directory
2664            (lambda _
2665              (chdir "dev/restinio")
2666              #t)))))
2667     (home-page "https://stiffstream.com/en/products/restinio.html")
2668     (synopsis "C++14 library that gives you an embedded HTTP/Websocket server")
2669     (description "RESTinio is a header-only C++14 library that gives you an embedded
2670 HTTP/Websocket server.  It is based on standalone version of ASIO
2671 and targeted primarily for asynchronous processing of HTTP-requests.")
2672     (license license:bsd-3)))
2673
2674 (define-public opendht
2675   (package
2676     (name "opendht")
2677     (version "2.0.0beta2")
2678     (source (origin
2679               (method git-fetch)
2680               (uri (git-reference
2681                     (url "https://github.com/savoirfairelinux/opendht.git")
2682                     (commit version)))
2683               (file-name (git-file-name name version))
2684               (sha256
2685                (base32
2686                 "02ix0rvvyhq22gd5djcq84qz08ji7ln93faf23b27zjzni2klzv5"))))
2687     ;; Since 2.0, the gnu-build-system does not seem to work anymore, upstream bug?
2688     (build-system cmake-build-system)
2689     (inputs
2690      `(("gnutls" ,gnutls)
2691        ("nettle" ,nettle)
2692        ("readline" ,readline)
2693        ("jsoncpp" ,jsoncpp)
2694        ("openssl" ,openssl)
2695        ("fmt" ,fmt)))
2696     (propagated-inputs
2697      `(("argon2" ,argon2)  ; TODO: Needed for the pkg-config .pc file to work?
2698        ("msgpack" ,msgpack)))           ;included in several installed headers
2699     (native-inputs
2700      `(("autoconf" ,autoconf)
2701        ("pkg-config" ,pkg-config)
2702        ("restinio" ,restinio)
2703        ("automake" ,automake)
2704        ("libtool" ,libtool)
2705        ("cppunit" ,cppunit)))
2706     (arguments
2707      `(#:tests? #f                      ; Tests require network connection.
2708        #:configure-flags
2709        '(;; "-DOPENDHT_TESTS=on"
2710          "-DOPENDHT_TOOLS=off"
2711          "-DOPENDHT_PYTHON=off"
2712          "-DOPENDHT_PROXY_SERVER=on"
2713          "-DOPENDHT_PUSH_NOTIFICATIONS=on"
2714          "-DOPENDHT_PROXY_SERVER_IDENTITY=on"
2715          "-DOPENDHT_PROXY_CLIENT=on")))
2716     (home-page "https://github.com/savoirfairelinux/opendht/")
2717     (synopsis "Distributed Hash Table (DHT) library")
2718     (description "OpenDHT is a Distributed Hash Table (DHT) library.  It may
2719 be used to manage peer-to-peer network connections as needed for real time
2720 communication.")
2721     (license license:gpl3+)))
2722
2723 (define-public frrouting
2724   (package
2725     (name "frrouting")
2726     (version "6.0.2")
2727     (source (origin
2728               (method url-fetch)
2729               (uri (string-append "https://github.com/FRRouting/frr/releases/"
2730                                   "download/frr-" version "/frr-" version
2731                                   ".tar.xz"))
2732               (sha256
2733                (base32
2734                 "0xfrvi62w8qlh46f504ka0skb7pm0g0p8vmdng4w90gsbirlzpdd"))))
2735     (build-system gnu-build-system)
2736     (inputs
2737      `(("c-ares" ,c-ares)
2738        ("json-c" ,json-c)
2739        ("readline" ,readline)))
2740     (native-inputs
2741      `(("perl" ,perl)
2742        ("pkg-config" ,pkg-config)
2743        ("python" ,python-wrapper)
2744        ("python-pytest" ,python-pytest)))
2745     (home-page "https://frrouting.org/")
2746     (synopsis "IP routing protocol suite")
2747     (description "FRRouting (FRR) is an IP routing protocol suite which includes
2748 protocol daemons for BGP, IS-IS, LDP, OSPF, PIM, and RIP. ")
2749     (license license:gpl2+)))
2750
2751 (define-public iwd
2752   (package
2753     (name "iwd")
2754     (version "0.21")
2755     (source (origin
2756               (method git-fetch)
2757               (uri (git-reference
2758                     (url "https://git.kernel.org/pub/scm/network/wireless/iwd.git")
2759                     (commit version)))
2760               (file-name (git-file-name name version))
2761               (sha256
2762                (base32
2763                 "001dikinsa6kshwscjbvwipavzwpqnpvx9fpshcn63gbvbhyd393"))))
2764     (build-system gnu-build-system)
2765     (inputs
2766      `(("dbus" ,dbus)
2767        ("ell" ,ell)
2768        ("readline" ,readline)))
2769     (native-inputs
2770      `(("asciidoc" ,asciidoc)
2771        ("autoconf" ,autoconf)
2772        ("automake" ,automake)
2773        ("libtool" ,libtool)
2774        ("pkgconfig" ,pkg-config)
2775        ("python" ,python)
2776        ("openssl" ,openssl)))
2777     (arguments
2778      `(#:configure-flags
2779        (let ((dbus (assoc-ref %outputs "out")))
2780          (list "--disable-systemd-service"
2781                "--enable-external-ell"
2782                "--enable-hwsim"
2783                "--enable-tools"
2784                "--enable-wired"
2785                "--enable-docs"
2786                "--localstatedir=/var"
2787                (string-append "--with-dbus-datadir=" dbus "/share/")
2788                (string-append "--with-dbus-busdir="
2789                               dbus "/share/dbus-1/system-services")))
2790        #:phases
2791        (modify-phases %standard-phases
2792          (add-before 'bootstrap 'pre-bootstrap
2793            (lambda _
2794              (substitute* "Makefile.am"
2795                ;; Test disabled because it needs the kernel module
2796                ;; 'pkcs8_key_parser' loaded.
2797                (("unit\\/test-eapol.*? ") "")
2798                ;; Don't try to 'mkdir /var'.
2799                (("\\$\\(MKDIR_P\\) -m 700") "true"))
2800              #t)))))
2801     (home-page "https://git.kernel.org/pub/scm/network/wireless/iwd.git/")
2802     (synopsis "Internet Wireless Daemon")
2803     (description "iwd is a wireless daemon for Linux that aims to replace WPA
2804 Supplicant.  It optimizes resource utilization by not depending on any external
2805 libraries and instead utilizing features provided by the Linux kernel to the
2806 maximum extent possible.")
2807     (license license:lgpl2.1+)))
2808
2809 (define-public batctl
2810   (package
2811    (name "batctl")
2812    (version "2020.0")
2813    (source
2814     (origin
2815      (method url-fetch)
2816      (uri (string-append "https://downloads.open-mesh.org/batman/releases/batman-adv-"
2817                          version "/batctl-" version ".tar.gz"))
2818      (sha256
2819       (base32 "01414ywhlb2b9ng9d5kd5rr1s7wzvi234j8hj6ra2spn92qykvv0"))))
2820    (inputs
2821     `(("libnl" ,libnl)))
2822    (native-inputs
2823     `(("pkg-config" ,pkg-config)))
2824    (build-system gnu-build-system)
2825    (arguments
2826     `(#:tests? #f
2827       ;; Batctl only has a makefile. Thus we disable tests and
2828       ;; configuration, passing in a few make-flags.
2829       #:phases (modify-phases %standard-phases (delete 'configure))
2830       #:make-flags
2831       (list (string-append "PREFIX=" (assoc-ref %outputs "out"))
2832             (string-append "PKG_CONFIG=" (assoc-ref %build-inputs "pkg-config")
2833                            "/bin/pkg-config")
2834             "CC=gcc")))
2835    (home-page "https://www.open-mesh.org/projects/batman-adv/wiki/Wiki")
2836    (synopsis "Management tool for the mesh networking BATMAN protocol")
2837    (description "This package provides a control tool for the
2838 B.A.T.M.A.N. mesh networking routing protocol provided by the Linux kernel
2839 module @code{batman-adv}, for Layer 2.")
2840    (license license:gpl2+)))
2841
2842 (define-public pagekite
2843   (package
2844     (name "pagekite")
2845     (version "1.5.0.200327")
2846     (source
2847      (origin
2848        (method git-fetch)
2849        (uri (git-reference
2850              (url "https://github.com/pagekite/PyPagekite.git")
2851              (commit (string-append "v" version))))
2852        (file-name (git-file-name name version))
2853        (sha256
2854         (base32 "1vw7kjwxqd3qvm7kpxgjzl6797y0i1f16yfkfad84qpx2ij0gvdm"))))
2855     (build-system python-build-system)
2856     (arguments
2857      `(#:phases
2858        (modify-phases %standard-phases
2859          (add-after 'install 'install-man-page
2860            (lambda* (#:key inputs outputs #:allow-other-keys)
2861              (let* ((out (assoc-ref outputs "out"))
2862                     (man (string-append out "/share/man")))
2863                (invoke "make"
2864                        (string-append "PYTHONPATH=" (getenv "PYTHONPATH"))
2865                        "doc/pagekite.1")
2866                (install-file "doc/pagekite.1" (string-append man "/man1"))
2867                #t))))))
2868     (inputs
2869      `(("python-six" ,python-six)
2870        ("python-socksipychain" ,python-socksipychain)))
2871     (home-page "https://pagekite.net/")
2872     (synopsis "Make localhost servers publicly visible")
2873     (description
2874      "PageKite implements a tunneled reverse proxy which makes it easy to make
2875 a service (such as an HTTP or SSH server) on localhost visible to the wider
2876 Internet, even behind NAT or restrictive firewalls.  A managed front-end relay
2877 service is available at @url{https://pagekite.net/}, or you can run your own.")
2878     (license license:agpl3+)))
2879
2880 (define-public ipcalc
2881   (package
2882     (name "ipcalc")
2883     (version "0.41")
2884     (source (origin
2885               (method url-fetch)
2886               (uri (string-append "http://jodies.de/ipcalc-archive/"
2887                                   name "-" version ".tar.gz"))
2888               (sha256
2889                (base32
2890                 "12if9sm8h2ac0pgwkw835cgyqjxm6h27k4kfn2vfas9krrqwbafx"))))
2891     (inputs `(("perl" ,perl)
2892               ("tar" ,tar)
2893               ("gzip" ,gzip)
2894               ("tarball" ,source)))
2895     (build-system trivial-build-system) ;no Makefile.PL
2896     (arguments
2897      `(#:modules ((guix build utils))
2898        #:builder
2899        (begin
2900          (use-modules (guix build utils))
2901          (use-modules (srfi srfi-1))
2902          (let* ((source (assoc-ref %build-inputs "source"))
2903                 (perl (string-append (assoc-ref %build-inputs "perl")
2904                                      "/bin"))
2905                 (tar (assoc-ref %build-inputs "tar"))
2906                 (gz  (assoc-ref %build-inputs "gzip"))
2907                 (out (assoc-ref %outputs "out"))
2908                 (bin (string-append out "/bin"))
2909                 (doc (string-append out "/share/doc/ipcalc")))
2910            (setenv "PATH" (string-append gz "/bin"))
2911            (invoke (string-append tar "/bin/tar") "xvf" source)
2912            (chdir (string-append ,name "-" ,version))
2913
2914            (install-file "ipcalc" bin)
2915            (patch-shebang (string-append bin "/ipcalc") (list perl))
2916            #t))))
2917     (synopsis "Simple IP network calculator")
2918     (description "ipcalc takes an IP address and netmask and calculates the
2919 resulting broadcast, network, Cisco wildcard mask, and host range.  By giving
2920 a second netmask, you can design subnets and supernets.  It is also intended
2921 to be a teaching tool and presents the subnetting results as
2922 easy-to-understand binary values.")
2923     (home-page "http://jodies.de/ipcalc")
2924     (license license:gpl2+)))
2925
2926 (define-public tunctl
2927   (package
2928     (name "tunctl")
2929     (version "1.5")
2930     (source
2931      (origin
2932        (method url-fetch)
2933        (uri (string-append "mirror://sourceforge/tunctl/tunctl/" version "/"
2934                            "tunctl-" version ".tar.gz"))
2935        (sha256
2936         (base32 "1zsgn7w6l2zh2q0j6qaw8wsx981qcr536qlz1lgb3b5zqr66qama"))))
2937     (build-system gnu-build-system)
2938     (arguments
2939      `(#:phases
2940        (modify-phases %standard-phases
2941          (delete 'bootstrap)            ;there is no configure.ac file
2942          (delete 'configure)            ;there is no configure script
2943          (delete 'check)                ;there are no tests
2944          (replace 'build
2945            (lambda _
2946              (setenv "CC" "gcc")
2947              (invoke "make" "tunctl")))
2948          ;; TODO: Requires docbook2x to generate man page from SGML.
2949          (replace 'install
2950            (lambda* (#:key outputs #:allow-other-keys)
2951              (let* ((out (assoc-ref outputs "out"))
2952                     (bin (string-append out "/bin")))
2953                (install-file "tunctl" bin))
2954              #t)))))
2955     (home-page "http://tunctl.sourceforge.net")
2956     (synopsis  "Utility to set up and maintain TUN/TAP network interfaces")
2957     (description "Tunctl is used to set up and maintain persistent TUN/TAP
2958 network interfaces, enabling user applications to simulate network traffic.
2959 Such interfaces are useful for VPN software, virtualization, emulation,
2960 simulation, and a number of other applications.")
2961     (license license:gpl2)))
2962
2963 (define-public wol
2964   (package
2965     (name "wol")
2966     (version "0.7.1")
2967     (source
2968      (origin
2969        (method url-fetch)
2970        (uri (string-append "mirror://sourceforge/wake-on-lan/wol/"
2971                            version "/wol-" version ".tar.gz"))
2972        (sha256
2973         (base32 "08i6l5lr14mh4n3qbmx6kyx7vjqvzdnh3j9yfvgjppqik2dnq270"))))
2974     (build-system gnu-build-system)
2975     (home-page "https://sourceforge.net/projects/wake-on-lan/")
2976     (synopsis "Implements Wake On LAN functionality in a small program")
2977     (description "Tool to send a magic packet to wake another host on the
2978 network.  This must be enabled on the target host, usually in the BIOS.")
2979     (license license:gpl2)))
2980
2981 (define-public vde2
2982   (package
2983     (name "vde2")
2984     (version "2.3.2")
2985     (source
2986      (origin
2987        (method url-fetch)
2988        (uri "mirror://sourceforge/vde/vde2/2.3.2/vde2-2.3.2.tar.gz")
2989        (sha256
2990         (base32 "14xga0ib6p1wrv3hkl4sa89yzjxv7f1vfqaxsch87j6scdm59pr2"))))
2991     (build-system gnu-build-system)
2992     (arguments
2993      `(#:parallel-build? #f))           ; Build fails if #t.
2994     (inputs
2995      `(("python" ,python)
2996        ("libpcap" ,libpcap)
2997        ("openssl" ,openssl-1.0)))       ; Build fails with 1.1.
2998     (home-page "https://github.com/virtualsquare/vde-2")
2999     (synopsis "Virtual Distributed Ethernet")
3000     (description "VDE is a set of programs to provide virtual software-defined
3001 Ethernet network interface controllers across multiple virtual or
3002 physical, local or remote devices.  The VDE architecture provides
3003 virtual counterparts to hardware components such as switches and
3004 cables.")
3005     (license (list license:gpl2
3006                    license:lgpl2.1       ; libvdeplug
3007                    (license:non-copyleft ; slirpvde
3008                     "file://COPYING.slirpvde"
3009                     "See COPYING.slirpvde in the distribution.")))))
3010
3011 (define-public haproxy
3012   (package
3013     (name "haproxy")
3014     (version "2.1.3")
3015     (source (origin
3016               (method url-fetch)
3017               (uri (string-append "https://www.haproxy.org/download/"
3018                                   (version-major+minor version)
3019                                   "/src/haproxy-" version ".tar.gz"))
3020               (sha256
3021                (base32
3022                 "0n8bw3d6gikr8c56ycrvksp1sl0b4yfzp19867cxkl3l0daqwrxv"))))
3023     (build-system gnu-build-system)
3024     (arguments
3025      `(#:make-flags
3026        (let* ((out (assoc-ref %outputs "out")))
3027          (list (string-append "PREFIX=" out)
3028                (string-append "DOCDIR=" out "/share/" ,name)
3029                "TARGET=linux-glibc"
3030                "USE_LUA=1"
3031                "USE_OPENSSL=1"
3032                "USE_ZLIB=1"
3033                "USE_PCRE_2=1"))
3034        #:tests? #f  ; there are only regression tests, using varnishtest
3035        #:phases
3036        (modify-phases %standard-phases
3037          (delete 'configure))))
3038     (inputs
3039      `(("lua" ,lua)
3040        ("openssl" ,openssl)
3041        ("pcre2" ,pcre2)
3042        ("zlib" ,zlib)))
3043     (home-page "https://www.haproxy.org/")
3044     (synopsis "Reliable, high performance TCP/HTTP load balancer")
3045     (description "HAProxy is a free, very fast and reliable solution offering
3046 high availability, load balancing, and proxying for TCP and HTTP-based
3047 applications.  It is particularly suited for web sites crawling under very
3048 high loads while needing persistence or Layer7 processing.  Supporting tens of
3049 thousands of connections is clearly realistic with today's hardware.")
3050     (license (list license:gpl2+
3051                    license:lgpl2.1
3052                    license:lgpl2.1+))))