gnu/packages/networking.scm

   1 ;;; GNU Guix --- Functional package management for GNU
   2 ;;; Copyright © 2014, 2017, 2018 Ludovic Courtès <ludo@gnu.org>
   3 ;;; Copyright © 2015, 2016, 2017, 2018 Ricardo Wurmus <rekado@elephly.net>
   4 ;;; Copyright © 2015 Mark H Weaver <mhw@netris.org>
   5 ;;; Copyright © 2015, 2016, 2017 Stefan Reichör <stefan@xsteve.at>
   6 ;;; Copyright © 2016 Raimon Grau <raimonster@gmail.com>
   7 ;;; Copyright © 2016, 2017, 2018, 2019, 2020 Tobias Geerinckx-Rice <me@tobias.gr>
   8 ;;; Copyright © 2016 John Darrington <jmd@gnu.org>
   9 ;;; Copyright © 2016, 2017, 2018, 2019, 2020 Nicolas Goaziou <mail@nicolasgoaziou.fr>
  10 ;;; Copyright © 2016 Eric Bavier <bavier@member.fsf.org>
  11 ;;; Copyright © 2016, 2017 ng0 <ng0@n0.is>
  12 ;;; Copyright © 2016, 2017, 2018 Arun Isaac <arunisaac@systemreboot.net>
  13 ;;; Copyright © 2016 Benz Schenk <benz.schenk@uzh.ch>
  14 ;;; Copyright © 2016, 2017 Pjotr Prins <pjotr.guix@thebird.nl>
  15 ;;; Copyright © 2017 Mathieu Othacehe <m.othacehe@gmail.com>
  16 ;;; Copyright © 2017 Leo Famulari <leo@famulari.name>
  17 ;;; Copyright © 2017, 2018, 2019, 2020 Efraim Flashner <efraim@flashner.co.il>
  18 ;;; Copyright © 2017, 2018, 2019 Rutger Helling <rhelling@mykolab.com>
  19 ;;; Copyright © 2017, 2019 Gábor Boskovits <boskovits@gmail.com>
  20 ;;; Copyright © 2017 Thomas Danckaert <post@thomasdanckaert.be>
  21 ;;; Copyright © 2018 Adam Van Ymeren <adam@vany.ca>
  22 ;;; Copyright © 2018 Fis Trivial <ybbs.daans@hotmail.com>
  23 ;;; Copyright © 2018 Tonton <tonton@riseup.net>
  24 ;;; Copyright © 2018 Clément Lassieur <clement@lassieur.org>
  25 ;;; Copyright © 2018 Theodoros Foradis <theodoros@foradis.org>
  26 ;;; Copyright © 2018, 2020 Marius Bakke <mbakke@fastmail.com>
  27 ;;; Copyright © 2018, 2020 Oleg Pykhalov <go.wigust@gmail.com>
  28 ;;; Copyright © 2018 Pierre Neidhardt <mail@ambrevar.xyz>
  29 ;;; Copyright © 2019 Maxim Cournoyer <maxim.cournoyer@gmail.com>
  30 ;;; Copyright © 2019 Vasile Dumitrascu <va511e@yahoo.com>
  31 ;;; Copyright © 2019 Julien Lepiller <julien@lepiller.eu>
  32 ;;; Copyright © 2019 Timotej Lazar <timotej.lazar@araneo.si>
  33 ;;; Copyright © 2019 Brice Waegeneire <brice@waegenei.re>
  34 ;;; Copyright © 2019 Tonton <tonton@riseup.net>
  35 ;;; Copyright © 2019, 2020 Alex Griffin <a@ajgrf.com>
  36 ;;; Copyright © 2019 Jan Wielkiewicz <tona_kosmicznego_smiecia@interia.pl>
  37 ;;; Copyright © 2019 Daniel Schaefer <git@danielschaefer.me>
  38 ;;; Copyright © 2019 Diego N. Barbato <dnbarbato@posteo.de>
  39 ;;; Copyright © 2020 Vincent Legoll <vincent.legoll@gmail.com>
  40 ;;; Copyright © 2020 Brice Waegeneire <brice@waegenei.re>
  41 ;;;
  42 ;;; This file is part of GNU Guix.
  43 ;;;
  44 ;;; GNU Guix is free software; you can redistribute it and/or modify it
  45 ;;; under the terms of the GNU General Public License as published by
  46 ;;; the Free Software Foundation; either version 3 of the License, or (at
  47 ;;; your option) any later version.
  48 ;;;
  49 ;;; GNU Guix is distributed in the hope that it will be useful, but
  50 ;;; WITHOUT ANY WARRANTY; without even the implied warranty of
  51 ;;; MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
  52 ;;; GNU General Public License for more details.
  53 ;;;
  54 ;;; You should have received a copy of the GNU General Public License
  55 ;;; along with GNU Guix.  If not, see <http://www.gnu.org/licenses/>.
  56
  57 (define-module (gnu packages networking)
  58   #:use-module ((guix licenses) #:prefix license:)
  59   #:use-module (guix packages)
  60   #:use-module (guix download)
  61   #:use-module (guix git-download)
  62   #:use-module (guix build-system cmake)
  63   #:use-module (guix build-system glib-or-gtk)
  64   #:use-module (guix build-system gnu)
  65   #:use-module (guix build-system go)
  66   #:use-module (guix build-system perl)
  67   #:use-module (guix build-system python)
  68   #:use-module (guix build-system trivial)
  69   #:use-module (guix utils)
  70   #:use-module (gnu packages)
  71   #:use-module (gnu packages admin)
  72   #:use-module (gnu packages adns)
  73   #:use-module (gnu packages algebra)
  74   #:use-module (gnu packages audio)
  75   #:use-module (gnu packages autotools)
  76   #:use-module (gnu packages base)
  77   #:use-module (gnu packages bison)
  78   #:use-module (gnu packages boost)
  79   #:use-module (gnu packages check)
  80   #:use-module (gnu packages code)
  81   #:use-module (gnu packages compression)
  82   #:use-module (gnu packages cpp)
  83   #:use-module (gnu packages crypto)
  84   #:use-module (gnu packages curl)
  85   #:use-module (gnu packages cyrus-sasl)
  86   #:use-module (gnu packages dejagnu)
  87   #:use-module (gnu packages documentation)
  88   #:use-module (gnu packages flex)
  89   #:use-module (gnu packages gettext)
  90   #:use-module (gnu packages glib)
  91   #:use-module (gnu packages gnome)
  92   #:use-module (gnu packages gnupg)
  93   #:use-module (gnu packages gtk)
  94   #:use-module (gnu packages image)
  95   #:use-module (gnu packages libidn)
  96   #:use-module (gnu packages linux)
  97   #:use-module (gnu packages lua)
  98   #:use-module (gnu packages multiprecision)
  99   #:use-module (gnu packages kerberos)
 100   #:use-module (gnu packages ncurses)
 101   #:use-module (gnu packages nettle)
 102   #:use-module (gnu packages openldap)
 103   #:use-module (gnu packages password-utils)
 104   #:use-module (gnu packages pcre)
 105   #:use-module (gnu packages perl)
 106   #:use-module (gnu packages perl-check)
 107   #:use-module (gnu packages pkg-config)
 108   #:use-module (gnu packages pretty-print)
 109   #:use-module (gnu packages python)
 110   #:use-module (gnu packages python-web)
 111   #:use-module (gnu packages python-xyz)
 112   #:use-module (gnu packages qt)
 113   #:use-module (gnu packages readline)
 114   #:use-module (gnu packages serialization)
 115   #:use-module (gnu packages sqlite)
 116   #:use-module (gnu packages ssh)
 117   #:use-module (gnu packages textutils)
 118   #:use-module (gnu packages tls)
 119   #:use-module (gnu packages valgrind)
 120   #:use-module (gnu packages web)
 121   #:use-module (gnu packages wxwidgets)
 122   #:use-module (gnu packages xml)
 123   #:use-module (ice-9 match))
 124
 125 ;; The gnu.org ‘home’ for this GNU project is a directory listing with 1.6.0 as
 126 ;; the latest version.  The author's git repository, mentioned in the 1.6.0
 127 ;; README and otherwise legit-looking, contains a proper 1.7.0 release tarball
 128 ;; with many OUI updates.  Use it, even though it's also several years old now.
 129 (define-public macchanger
 130   (package
 131     (name "macchanger")
 132     (version "1.7.0")
 133     (source
 134      (origin
 135        (method url-fetch)
 136        (uri (string-append "https://github.com/alobbs/macchanger/"
 137                            "releases/download/" version "/"
 138                            name "-" version ".tar.gz"))
 139        (sha256
 140         (base32 "1gs5m0jxyprdp00w2qkbnaqm3ilkjz0q1gqdg4nzdm8g4xy73qns"))))
 141     (build-system gnu-build-system)
 142     (home-page "https://www.gnu.org/software/macchanger/")
 143     (synopsis "Viewing and manipulating MAC addresses of network interfaces")
 144     (description "GNU MAC Changer is a utility for viewing and changing MAC
 145 addresses of networking devices.  New addresses may be set explicitly or
 146 randomly.  They can include MAC addresses of the same or other hardware vendors
 147 or, more generally, MAC addresses of the same category of hardware.")
 148     (license license:gpl2+)))
 149
 150 (define-public miredo
 151   (package
 152     (name "miredo")
 153     (version "1.2.6")
 154     (source (origin
 155               (method url-fetch)
 156               (uri (string-append "http://www.remlab.net/files/miredo/miredo-"
 157                                   version ".tar.xz"))
 158               (sha256
 159                (base32
 160                 "0j9ilig570snbmj48230hf7ms8kvcwi2wblycqrmhh85lksd49ps"))))
 161     (build-system gnu-build-system)
 162     (arguments
 163      '(#:phases
 164        (modify-phases %standard-phases
 165          ;; The checkconf test in src/ requires network access.
 166          (add-before
 167           'check 'disable-checkconf-test
 168           (lambda _
 169             (substitute* "src/Makefile"
 170               (("^TESTS = .*") "TESTS = \n"))
 171             #t)))))
 172     (home-page "https://www.remlab.net/miredo/")
 173     (synopsis "Teredo IPv6 tunneling software")
 174     (description
 175      "Miredo is an implementation (client, relay, server) of the Teredo
 176 specification, which provides IPv6 Internet connectivity to IPv6 enabled hosts
 177 residing in IPv4-only networks, even when they are behind a NAT device.")
 178     (license license:gpl2+)))
 179
 180 (define-public socat
 181   (package
 182     (name "socat")
 183     (version "1.7.3.4")
 184     (source (origin
 185               (method url-fetch)
 186               (uri (string-append
 187                     "http://www.dest-unreach.org/socat/download/socat-"
 188                     version ".tar.bz2"))
 189               (sha256
 190                (base32
 191                 "1z7xgnwiqpcv1j6aghhj9nqbx7cg3gpc4n9j7vi9hm7nhv5788wp"))))
 192     (build-system gnu-build-system)
 193     (arguments '(#:tests? #f))          ; no test suite
 194     (inputs `(("openssl" ,openssl)))
 195     (home-page "http://www.dest-unreach.org/socat/")
 196     (synopsis
 197      "Open bidirectional communication channels from the command line")
 198     (description
 199      "socat is a relay for bidirectional data transfer between two independent
 200 data channels---files, pipes, devices, sockets, etc.  It can create
 201 \"listening\" sockets, named pipes, and pseudo terminals.
 202
 203 socat can be used, for instance, as TCP port forwarder, as a shell interface
 204 to UNIX sockets, IPv6 relay, for redirecting TCP oriented programs to a serial
 205 line, to logically connect serial lines on different computers, or to
 206 establish a relatively secure environment (su and chroot) for running client
 207 or server shell scripts with network connections.")
 208     (license license:gpl2)))
 209
 210 (define-public tcp-wrappers
 211   (package
 212     (name "tcp-wrappers")
 213     (version "7.6")
 214     (source (origin
 215               (method url-fetch)
 216               (uri (string-append
 217                     "ftp://ftp.porcupine.org/pub/security/tcp_wrappers_"
 218                     version ".tar.gz"))
 219               (sha256
 220                (base32
 221                 "0p9ilj4v96q32klavx0phw9va21fjp8vpk11nbh6v2ppxnnxfhwm"))))
 222     (build-system gnu-build-system)
 223     (arguments
 224      `(#:phases
 225        (modify-phases %standard-phases
 226          (delete 'configure)  ; there is no configure script
 227          (delete 'check)      ; there are no tests
 228          (replace 'build
 229            (lambda _
 230              (chmod "." #o755)
 231              ;; Upstream doesn't generate a shared library.  So we have to do it.
 232              (setenv "CC" "gcc -fno-builtin -fPIC")
 233              (substitute* "Makefile"
 234                (("^(all[^\n]*)" line) (string-append line " libwrap.so\n
 235 libwrap.so: $(LIB_OBJ)\n
 236 \tgcc -shared $^ -o $@\n")))
 237              ;; Deal with some gcc breakage.
 238              (substitute* "percent_m.c"
 239                (("extern char .sys_errlist.*;") ""))
 240              (substitute* "scaffold.c"
 241                (("extern char .malloc.*;") ""))
 242              ;; This, believe it or not, is the recommended way to build!
 243              (invoke "make" "REAL_DAEMON_DIR=/etc" "linux")))
 244          ;; There is no make install stage, so we have to do it ourselves.
 245          (replace 'install
 246            (lambda _
 247              (let ((out (assoc-ref %outputs "out"))
 248                    (man-pages `("hosts_access.3"
 249                                 "hosts_access.5"
 250                                 "hosts_options.5"
 251                                 "tcpd.8"
 252                                 "tcpdchk.8"
 253                                 "tcpdmatch.8"))
 254                    (libs  `("libwrap.a"
 255                             "libwrap.so"))
 256                    (headers `("tcpd.h"))
 257                    (bins `("safe_finger"
 258                            "tcpd"
 259                            "tcpdchk"
 260                            "tcpdmatch"
 261                            "try-from")))
 262                (for-each
 263                 (lambda (x)
 264                   (install-file x (string-append out "/include")))
 265                 headers)
 266                (for-each
 267                 (lambda (x)
 268                   (install-file x (string-append out "/share/man/man"
 269                                                  (string-take-right x 1))))
 270                 man-pages)
 271                (for-each
 272                 (lambda (x)
 273                   (install-file x (string-append out "/lib/")))
 274                 libs)
 275                (for-each
 276                 (lambda (x)
 277                   (install-file x (string-append out "/bin/")))
 278                 bins))
 279              #t)))))
 280     (home-page "http://www.porcupine.org")
 281     (synopsis  "Monitor and filter incoming requests for network services")
 282     (description "With this package you can monitor and filter incoming requests for
 283 network services.  It includes a library which may be used by daemons to
 284 transparently check connection attempts against an access control list.")
 285     (license (license:non-copyleft "file://DISCLAIMER"
 286                                    "See the file DISCLAIMER in the distribution."))))
 287
 288
 289 (define-public zeromq
 290   (package
 291     (name "zeromq")
 292     (version "4.3.2")
 293     (source (origin
 294               (method url-fetch)
 295               (uri (string-append "https://github.com/zeromq/libzmq/releases"
 296                                   "/download/v" version "/zeromq-" version ".tar.gz"))
 297               (sha256
 298                (base32
 299                 "0qzp80ky4y2k7k1ya09v9gkivvfbz2km813snrb8jhnn634bbmzb"))))
 300     (build-system gnu-build-system)
 301     (home-page "https://zeromq.org")
 302     (synopsis "Library for message-based applications")
 303     (description
 304      "The 0MQ lightweight messaging kernel is a library which extends the
 305 standard socket interfaces with features traditionally provided by specialized
 306 messaging middle-ware products.  0MQ sockets provide an abstraction of
 307 asynchronous message queues, multiple messaging patterns, message
 308 filtering (subscriptions), seamless access to multiple transport protocols and
 309 more.")
 310     (license license:lgpl3+)))
 311
 312 (define-public czmq
 313   (package
 314     (name "czmq")
 315     (version "4.2.0")
 316     (source (origin
 317               (method url-fetch)
 318               (uri (string-append
 319                     "https://github.com/zeromq/" name
 320                     "/releases/download/v" version
 321                     "/" name "-" version ".tar.gz"))
 322               (sha256
 323                (base32
 324                 "1szciz62sk3fm4ga9qjpxz0n0lazvphm32km95bq92ncng12kayg"))))
 325     (build-system gnu-build-system)
 326     (arguments
 327      '(#:configure-flags '("--enable-drafts")
 328        #:phases (modify-phases %standard-phases
 329                   (add-before 'check 'patch-tests
 330                     (lambda _
 331                       ;; XXX FIXME: Disable the zproc test, which fails on some
 332                       ;; hardware: <https://github.com/zeromq/czmq/issues/2007>.
 333                       (substitute* "src/czmq_selftest.c"
 334                         (("\\{ \"zproc\", zproc_test.*")
 335                          ""))
 336                       #t)))))
 337     (inputs
 338      `(("zeromq" ,zeromq)))
 339     (home-page "http://zeromq.org")
 340     (synopsis "High-level C bindings for ØMQ")
 341     (description
 342      "czmq provides bindings for the ØMQ core API that hides the differences
 343 between different versions of ØMQ.")
 344     (license license:mpl2.0)))
 345
 346 (define-public cppzmq
 347   (package
 348     (name "cppzmq")
 349     (version "4.6.0")
 350     (source (origin
 351               (method git-fetch)
 352               (uri (git-reference
 353                     (url "https://github.com/zeromq/cppzmq")
 354                     (commit (string-append "v" version))))
 355               (sha256
 356                (base32
 357                 "19acx2bzi4n6fdnfgkja1nds7m1bwg8lw5vfcijrx9fv75pa7m8h"))
 358               (file-name (git-file-name name version))))
 359     (build-system cmake-build-system)
 360     (arguments
 361      '(;; FIXME: The test suite requires downloading Catch and custom
 362        ;; CMake targets, and refuses to use the system version.
 363        ;; See <https://github.com/zeromq/cppzmq/issues/334>.
 364        #:tests? #f
 365        #:configure-flags '("-DCPPZMQ_BUILD_TESTS=OFF")))
 366     (native-inputs
 367      `(("pkg-config" ,pkg-config)))
 368     (inputs
 369      `(("zeromq" ,zeromq)))
 370     (home-page "http://zeromq.org")
 371     (synopsis "C++ bindings for the ØMQ messaging library")
 372     (description
 373      "This package provides header-only C++ bindings for ØMQ.  The header
 374 files contain direct mappings of the abstractions provided by the ØMQ C API.")
 375     (license license:expat)))
 376
 377 (define-public librdkafka
 378   (package
 379     (name "librdkafka")
 380     (version "0.9.1")
 381     (source (origin
 382               (method url-fetch)
 383               (uri (string-append
 384                     "https://github.com/edenhill/librdkafka/archive/"
 385                     version ".tar.gz"))
 386               (file-name (string-append name "-" version ".tar.gz"))
 387               (sha256
 388                (base32
 389                 "10ldx7g7ymmg17snzx78vy4n8ma1rjx0agzi34g15j2fk867xmas"))))
 390     (build-system gnu-build-system)
 391     (arguments
 392      '(#:phases
 393        (modify-phases %standard-phases
 394          (replace 'configure
 395            ;; its custom configure script doesn't understand 'CONFIG_SHELL'.
 396            (lambda* (#:key outputs #:allow-other-keys)
 397              (let ((out (assoc-ref outputs "out")))
 398                ;; librdkafka++.so lacks RUNPATH for librdkafka.so
 399                (setenv "LDFLAGS"
 400                        (string-append "-Wl,-rpath=" out "/lib"))
 401                (invoke "./configure"
 402                        (string-append "--prefix=" out))))))))
 403     (native-inputs
 404      `(("python" ,python-wrapper)))
 405     (propagated-inputs
 406      `(("zlib" ,zlib))) ; in the Libs.private field of rdkafka.pc
 407     (home-page "https://github.com/edenhill/librdkafka")
 408     (synopsis "Apache Kafka C/C++ client library")
 409     (description
 410      "librdkafka is a C library implementation of the Apache Kafka protocol,
 411 containing both Producer and Consumer support.")
 412     (license license:bsd-2)))
 413
 414 (define-public libndp
 415   (package
 416     (name "libndp")
 417     (version "1.7")
 418     (source (origin
 419               (method url-fetch)
 420               (uri (string-append "http://libndp.org/files/"
 421                                   name "-" version ".tar.gz"))
 422               (sha256
 423                (base32
 424                 "1dlinhl39va00v55qygjc9ap77yqf7xvn4rwmvdr49xhzzxhlj1c"))))
 425     (build-system gnu-build-system)
 426     (home-page "http://libndp.org/")
 427     (synopsis "Library for Neighbor Discovery Protocol")
 428     (description
 429      "libndp contains a library which provides a wrapper for IPv6 Neighbor
 430 Discovery Protocol.  It also provides a tool named ndptool for sending and
 431 receiving NDP messages.")
 432     (license license:lgpl2.1+)))
 433
 434 (define-public ethtool
 435   (package
 436     (name "ethtool")
 437     (version "5.4")
 438     (source (origin
 439               (method url-fetch)
 440               (uri (string-append "mirror://kernel.org/software/network/"
 441                                   "ethtool/ethtool-" version ".tar.xz"))
 442               (sha256
 443                (base32
 444                 "0srbqp4a3x9ryrbm5q854375y04ni8j0bmsrl89nmsyn4x4ixy12"))))
 445     (build-system gnu-build-system)
 446     (home-page "https://www.kernel.org/pub/software/network/ethtool/")
 447     (synopsis "Display or change Ethernet device settings")
 448     (description
 449      "ethtool can be used to query and change settings such as speed,
 450 auto-negotiation and checksum offload on many network devices, especially
 451 Ethernet devices.")
 452     (license license:gpl2)))
 453
 454 (define-public ifstatus
 455   (package
 456     (name "ifstatus")
 457     (version "1.1.0")
 458     (source (origin
 459               (method url-fetch)
 460               (uri (string-append "mirror://sourceforge/ifstatus/ifstatus/"
 461                                   "ifstatus%20v" version "/ifstatus-v"
 462                                   version ".tar.gz"))
 463               (sha256
 464                (base32
 465                 "045cbsq9ps32j24v8y5hpyqxnqn9mpaf3mgvirlhgpqyb9jsia0c"))
 466               (modules '((guix build utils)))
 467               (snippet
 468                '(begin
 469                   (substitute* "Main.h"
 470                     (("#include <stdio.h>")
 471                      "#include <stdio.h>\n#include <stdlib.h>"))
 472                   #t))))
 473     (build-system gnu-build-system)
 474     (arguments
 475      '(#:tests? #f                                ; no "check" target
 476        #:phases
 477        (modify-phases %standard-phases
 478          (delete 'configure)             ; no configure script
 479          (replace 'install
 480                   (lambda* (#:key outputs #:allow-other-keys)
 481                     (let* ((out (assoc-ref outputs "out"))
 482                            (bin (string-append out "/bin")))
 483                       (mkdir-p bin)
 484                       (copy-file "ifstatus"
 485                                  (string-append bin "/ifstatus")))
 486                     #t)))))
 487     (inputs `(("ncurses" ,ncurses)))
 488     (home-page "http://ifstatus.sourceforge.net/graphic/index.html")
 489     (synopsis "Text based network interface status monitor")
 490     (description
 491      "IFStatus is a simple, easy-to-use program for displaying commonly
 492 needed/wanted real-time traffic statistics of multiple network
 493 interfaces, with a simple and efficient view on the command line.  It is
 494 intended as a substitute for the PPPStatus and EthStatus projects.")
 495     (license license:gpl2+)))
 496
 497 (define-public nload
 498   (package
 499     (name "nload")
 500     (version "0.7.4")
 501     (source (origin
 502               (method url-fetch)
 503               (uri (string-append "mirror://sourceforge/nload/nload/" version
 504                                   "/nload-" version ".tar.gz"))
 505               (sha256
 506                (base32
 507                 "1rb9skch2kgqzigf19x8bzk211jdfjfdkrcvaqyj89jy2pkm3h61"))))
 508     (build-system gnu-build-system)
 509     (inputs `(("ncurses" ,ncurses)))
 510     (home-page "http://www.roland-riegel.de/nload/")
 511     (synopsis "Realtime console network usage monitor")
 512     (description
 513      "Nload is a console application which monitors network traffic and
 514 bandwidth usage in real time.  It visualizes the in- and outgoing traffic using
 515 two graphs, and provides additional info like total amount of transferred data
 516 and min/max network usage.")
 517     (license license:gpl2+)))
 518
 519 (define-public iodine
 520   (package
 521     (name "iodine")
 522     (version "0.7.0")
 523     (source (origin
 524               (method url-fetch)
 525               (uri (string-append "http://code.kryo.se/" name "/"
 526                                   name "-" version ".tar.gz"))
 527               (sha256
 528                (base32
 529                 "0gh17kcxxi37k65zm4gqsvbk3aw7yphcs3c02pn1c4s2y6n40axd"))))
 530     (build-system gnu-build-system)
 531     (arguments
 532      '(#:phases
 533        (modify-phases %standard-phases
 534          (delete 'configure)
 535          (add-before 'build 'fix-ifconfig-path
 536            ;; This package works only with the net-tools version of ifconfig.
 537            (lambda* (#:key inputs #:allow-other-keys)
 538              (substitute* "src/tun.c"
 539                (("PATH=[^ ]* ")
 540                 (string-append (assoc-ref inputs "net-tools") "/bin/")))
 541              #t))
 542          (add-before 'check 'delete-failing-tests
 543            ;; Avoid https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=802105.
 544            (lambda _
 545              (substitute* "tests/common.c"
 546                (("tcase_add_test\\(tc, \
 547 test_parse_format_ipv(4(|_listen_all|_mapped_ipv6)|6)\\);")
 548                 ""))
 549              #t)))
 550        #:make-flags (list "CC=gcc"
 551                           (string-append "prefix=" (assoc-ref %outputs "out")))
 552        #:test-target "test"))
 553     (inputs `(("net-tools" ,net-tools)
 554               ("zlib" ,zlib)))
 555     (native-inputs `(("check" ,check)
 556                      ("pkg-config" ,pkg-config)))
 557     (home-page "https://code.kryo.se/iodine/")
 558     (synopsis "Tunnel IPv4 data through a DNS server")
 559     (description "Iodine tunnels IPv4 data through a DNS server.  This
 560 can be useful in different situations where internet access is firewalled, but
 561 DNS queries are allowed.  The bandwidth is asymmetrical, with limited upstream
 562 and up to 1 Mbit/s downstream.")
 563     ;; src/md5.[ch] is released under the zlib license
 564     (license (list license:isc license:zlib))))
 565
 566 (define-public whois
 567   (package
 568     (name "whois")
 569     (version "5.5.6")
 570     (source
 571      (origin
 572        (method url-fetch)
 573        (uri (string-append "mirror://debian/pool/main/w/whois/"
 574                            "whois_" version ".tar.xz"))
 575        (sha256
 576         (base32 "0kpi981zjczvdcxfcq455c529vlaxa73x8kbm530z5b01h0fk8fb"))))
 577     (build-system gnu-build-system)
 578     (arguments
 579      `(#:tests? #f                      ; no test suite
 580        #:make-flags (list "CC=gcc"
 581                           (string-append "prefix=" (assoc-ref %outputs "out")))
 582        #:phases
 583        (modify-phases %standard-phases
 584          (delete 'configure)            ; no configure script
 585          (add-before 'build 'setenv
 586            (lambda _
 587              (setenv "HAVE_ICONV" "1")
 588              #t)))))
 589     (inputs
 590      `(("libidn2" ,libidn2)))
 591     (native-inputs
 592      `(("gettext" ,gettext-minimal)
 593        ("perl" ,perl)
 594        ("pkg-config" ,pkg-config)))
 595     (synopsis "Intelligent client for the WHOIS directory service")
 596     (description
 597       "whois searches for an object in a @dfn{WHOIS} (RFC 3912) database.
 598 It is commonly used to look up the registered users or assignees of an Internet
 599 resource, such as a domain name, an IP address block, or an autonomous system.
 600 It can automatically select the appropriate server for most queries.
 601
 602 For historical reasons, this package also includes @command{mkpasswd}, which
 603 encrypts passwords using @code{crypt(3)} and is unrelated to the Expect command
 604 of the same name.")
 605     (home-page "https://github.com/rfc1036/whois")
 606     (license license:gpl2+)))
 607
 608 (define-public wireshark
 609   (package
 610     (name "wireshark")
 611     (version "3.2.2")
 612     (source
 613      (origin
 614        (method url-fetch)
 615        (uri (string-append "https://www.wireshark.org/download/src/wireshark-"
 616                            version ".tar.xz"))
 617        (sha256
 618         (base32 "0ygdxpz0i4jxp55fg9x4xcan093wycjb66yas073gviz9kpj6naz"))))
 619     (build-system cmake-build-system)
 620     (arguments
 621      `(#:phases
 622        (modify-phases %standard-phases
 623          (add-after 'unpack 'remove-failing-test
 624            ;; Test 31/32 fails with errors like "Program reassemble_test is
 625            ;; not available".  Skipping it for now.
 626            (lambda _
 627              (substitute* "CMakeLists.txt"
 628                (("suite_unittests" all) (string-append "# " all)))
 629              #t)))
 630        ;; Build process chokes during `validate-runpath' phase.
 631        ;;
 632        ;; Errors are like the following:
 633        ;; "/gnu/store/...wireshark-3.0.0/lib/wireshark/plugins/3.0/epan/ethercat.so:
 634        ;; error: depends on 'libwireshark.so.12', which cannot be found in
 635        ;; RUNPATH".  That is, "/gnu/store/...wireshark-3.0.0./lib" doesn't
 636        ;; belong to RUNPATH.
 637        ;;
 638        ;; That’s not a problem in practice because "ethercat.so" is a plugin,
 639        ;; so it’s dlopen’d by a process that already provides "libwireshark".
 640        ;; For now, we disable this phase.
 641        #:validate-runpath? #f))
 642     (inputs
 643      `(("c-ares" ,c-ares)
 644        ("glib" ,glib)
 645        ("gnutls" ,gnutls)
 646        ("libcap" ,libcap)
 647        ("libgcrypt" ,libgcrypt)
 648        ("libnl" ,libnl)
 649        ("libpcap" ,libpcap)
 650        ("libssh" ,libssh)
 651        ("libxml2" ,libxml2)
 652        ("lz4" ,lz4)
 653        ("lua" ,lua-5.2)                 ;Lua 5.3 unsupported
 654        ("krb5" ,mit-krb5)
 655        ("qtbase" ,qtbase)
 656        ("qtmultimedia" ,qtmultimedia)
 657        ("qtsvg" ,qtsvg)
 658        ("sbc" ,sbc)
 659        ("snappy" ,snappy)
 660        ("zlib" ,zlib)))
 661     (native-inputs
 662      `(("bison" ,bison)
 663        ("doxygen" ,doxygen)
 664        ("flex" ,flex)
 665        ("gettext" ,gettext-minimal)
 666        ("perl" ,perl)
 667        ("pkg-config" ,pkg-config)
 668        ("python" ,python-wrapper)
 669        ("qttools" ,qttools)))
 670     (synopsis "Network traffic analyzer")
 671     (description "Wireshark is a network protocol analyzer, or @dfn{packet
 672 sniffer}, that lets you capture and interactively browse the contents of
 673 network frames.")
 674     (home-page "https://www.wireshark.org/")
 675     (license license:gpl2+)))
 676
 677 (define-public fping
 678   (package
 679     (name "fping")
 680     (version "4.2")
 681     (source
 682      (origin
 683        (method url-fetch)
 684        (uri (string-append "https://fping.org/dist/fping-"
 685                            version ".tar.gz"))
 686        (sha256
 687         (base32 "0jmnf4vmr43aiwk3h2b5qdsb95gxar8gz1yli8fswnm9nrs9ccvx"))))
 688     (build-system gnu-build-system)
 689     (home-page "https://fping.org/")
 690     (synopsis "Send ICMP ECHO_REQUEST packets to network hosts")
 691     (description
 692      "fping is a ping like program which uses the Internet Control Message
 693 Protocol (ICMP) echo request to determine if a target host is responding.
 694 fping differs from ping in that you can specify any number of targets on the
 695 command line, or specify a file containing the lists of targets to ping.
 696 Instead of sending to one target until it times out or replies, fping will
 697 send out a ping packet and move on to the next target in a round-robin
 698 fashion.")
 699     (license license:expat)))
 700
 701 (define-public gandi.cli
 702   (package
 703     (name "gandi.cli")
 704     (version "1.5")
 705     (source
 706      (origin
 707        (method url-fetch)
 708        (uri (pypi-uri name version))
 709        (sha256
 710         (base32 "110wc9zgxsrvw4yzp21p0ian5lcf7vhcpxhnmsc4fg9pzl2bwxd5"))))
 711     (build-system python-build-system)
 712     (arguments
 713      `(#:phases
 714        (modify-phases %standard-phases
 715          (add-after 'unpack 'embed-store-file-names
 716            (lambda _
 717              (substitute* (list "gandi/cli/modules/cert.py"
 718                                 "gandi/cli/tests/commands/test_certificate.py")
 719                (("openssl") (which "openssl")))
 720              #t))
 721          (add-after 'install 'install-documentation
 722            ;; The included man page may be outdated but we install it anyway,
 723            ;; since it's mentioned in 'gandi --help' and better than nothing.
 724            (lambda* (#:key outputs #:allow-other-keys)
 725              (let* ((out  (assoc-ref outputs "out"))
 726                     (man1 (string-append out "/share/man/man1")))
 727                (mkdir-p man1)
 728                (with-output-to-file (string-append man1 "/gandi.1")
 729                  (lambda _
 730                    (invoke "rst2man.py" "gandicli.man.rst")))
 731                #t))))))
 732     (native-inputs
 733      `(("python-docutils" ,python-docutils)   ; for rst2man.py
 734        ("python-pytest-cov" ,python-pytest-cov)
 735        ("python-tox" ,python-tox)))
 736     (inputs
 737      `(("openssl" ,openssl)
 738        ("python-click" ,python-click)
 739        ("python-ipy" ,python-ipy)
 740        ("python-pyyaml" ,python-pyyaml)
 741        ("python-requests" ,python-requests)))
 742     (home-page "https://cli.gandi.net")
 743     (synopsis "Command-line interface to the Gandi.net Web API")
 744     (description
 745      "This package provides a command-line client (@command{gandi}) to buy,
 746 manage, and delete Internet resources from Gandi.net such as domain names,
 747 virtual machines, and certificates.")
 748     (license license:gpl3+)))
 749
 750 (define-public go-netns
 751   (let ((commit "13995c7128ccc8e51e9a6bd2b551020a27180abd")
 752         (revision "1"))
 753     (package
 754       (name "go-netns")
 755       (version (git-version "0.0.0" revision commit))
 756       (source (origin
 757                 (method git-fetch)
 758                 (uri (git-reference
 759                       (url "https://github.com/vishvananda/netns.git")
 760                       (commit commit)))
 761                 (file-name (git-file-name name version))
 762                 (sha256
 763                  (base32
 764                   "1zk6w8158qi4niva5rijchbv9ixgmijsgqshh54wdaav4xrhjshn"))))
 765       (build-system go-build-system)
 766       (arguments
 767        `(#:import-path "github.com/vishvananda/netns"
 768          #:tests? #f))                  ;tests require root privileges
 769       (home-page "https://github.com/vishvananda/netns")
 770       (synopsis "Simple network namespace handling for Go")
 771       (description "The netns package provides a simple interface for
 772 handling network namespaces in Go.")
 773       (license license:asl2.0))))
 774
 775 (define-public go-sctp
 776   ;; docker-libnetwork-cmd-proxy requires this exact commit.
 777   (let ((commit "07191f837fedd2f13d1ec7b5f885f0f3ec54b1cb")
 778         (revision "1"))
 779     (package
 780       (name "go-sctp")
 781       (version (git-version "0.0.0" revision commit))
 782       (source (origin
 783                 (method git-fetch)
 784                 (uri (git-reference
 785                       (url "https://github.com/ishidawataru/sctp.git")
 786                       (commit commit)))
 787                 (file-name (git-file-name name version))
 788                 (sha256
 789                  (base32
 790                   "1mk9ncm10gwi5pn5wcw4skbyf4qg7n5qdf1mim4gf3mrckvi6g6h"))))
 791       (build-system go-build-system)
 792       (arguments
 793        `(#:import-path "github.com/ishidawataru/sctp"))
 794       (home-page "https://github.com/ishidawataru/sctp")
 795       (synopsis "SCTP library for the Go programming language")
 796       (description "This library provides methods for using the stream control
 797 transmission protocol (SCTP) in a Go application.")
 798       (license license:asl2.0))))
 799
 800 (define-public httping
 801   (package
 802     (name "httping")
 803     (version "2.5")
 804     (source
 805      (origin
 806        (method url-fetch)
 807        (uri (string-append "https://www.vanheusden.com/httping/httping-"
 808                            version ".tgz"))
 809        (sha256
 810         (base32
 811          "1y7sbgkhgadmd93x1zafqc4yp26ssiv16ni5bbi9vmvvdl55m29y"))))
 812     (build-system gnu-build-system)
 813     (native-inputs
 814      `(("gettext" ,gettext-minimal)))
 815     (inputs
 816      `(("fftw" ,fftw)
 817        ("ncurses" ,ncurses)
 818        ("openssl" ,openssl)))
 819     (arguments
 820      `(#:make-flags (list "CC=gcc"
 821                           (string-append "DESTDIR=" (assoc-ref %outputs "out"))
 822                           "PREFIX=")
 823        #:tests? #f)) ; no tests
 824     (home-page "https://www.vanheusden.com/httping/")
 825     (synopsis "Web server latency and throughput monitor")
 826     (description
 827      "httping measures how long it takes to connect to a web server, send an
 828 HTTP(S) request, and receive the reply headers.  It is somewhat similar to
 829 @command{ping}, but can be used even in cases where ICMP traffic is blocked
 830 by firewalls or when you want to monitor the response time of the actual web
 831 application stack itself.")
 832     (license license:gpl2)))        ; with permission to link with OpenSSL
 833
 834 (define-public httpstat
 835   (package
 836     (name "httpstat")
 837     (version "1.2.1")
 838     (source
 839      (origin
 840        (method url-fetch)
 841        (uri (pypi-uri "httpstat" version))
 842        (sha256
 843         (base32
 844          "1chw2nk56vaq87aba012a270k9na06hfx1pfbsrc3jfvlc2kb9hb"))))
 845     (build-system python-build-system)
 846     (inputs `(("curl" ,curl)))
 847     (arguments
 848      '(#:phases
 849        (modify-phases %standard-phases
 850          (add-before 'build 'fix-curl-path
 851            (lambda* (#:key inputs #:allow-other-keys)
 852              (substitute* "httpstat.py"
 853                (("ENV_CURL_BIN.get\\('curl'\\)")
 854                 (string-append "ENV_CURL_BIN.get('"
 855                                (assoc-ref inputs "curl")
 856                                "/bin/curl')")))
 857              #t)))))
 858     (home-page "https://github.com/reorx/httpstat")
 859     (synopsis "Visualize curl statistics")
 860     (description
 861      "@command{httpstat} is a tool to visualize statistics from the
 862 @command{curl} HTTP client.  It acts as a wrapper for @command{curl} and
 863 prints timing information for each step of the HTTP request (DNS lookup,
 864 TCP connection, TLS handshake and so on) in the terminal.")
 865     (license license:expat)))
 866
 867 (define-public squid
 868   (package
 869     (name "squid")
 870     (version "4.10")
 871     (source
 872      (origin
 873        (method url-fetch)
 874        (uri (string-append "http://www.squid-cache.org/Versions/v4/squid-"
 875                            version ".tar.xz"))
 876        (sha256
 877         (base32 "07sz0adv8nkhy797675bpra7lvdkwjq9isw1ddgylhlazl511w4q"))))
 878     (build-system gnu-build-system)
 879     (arguments
 880      '(#:phases
 881        (modify-phases %standard-phases
 882          (add-before 'build 'fix-true-path
 883            (lambda* (#:key inputs #:allow-other-keys)
 884              (substitute* "test-suite/testheaders.sh"
 885                (("/bin/true")
 886                 (string-append (assoc-ref inputs "coreutils")
 887                                "/bin/true")))
 888              #t)))))
 889     (inputs
 890      `(("perl" ,perl)
 891        ("openldap" ,openldap)
 892        ("linux-pam" ,linux-pam)
 893        ("libcap" ,libcap)
 894        ("cyrus-sasl" ,cyrus-sasl)
 895        ("expat" ,expat)
 896        ("libxml2" ,libxml2)
 897        ("openssl" ,openssl)))
 898     (native-inputs
 899      `(("cppunit" ,cppunit)
 900        ("pkg-config" ,pkg-config)))
 901     (synopsis "Web caching proxy")
 902     (description "Squid is a caching proxy for the Web supporting HTTP, HTTPS,
 903 FTP, and more.  It reduces bandwidth and improves response times by caching and
 904 reusing frequently-requested web pages.")
 905     (home-page "http://www.squid-cache.org/")
 906     (license license:gpl2+)))
 907
 908 (define-public bwm-ng
 909   (package
 910     (name "bwm-ng")
 911     (version "0.6.2")
 912     (source
 913      (origin
 914        (method git-fetch)
 915        (uri (git-reference
 916              (url "https://github.com/vgropp/bwm-ng.git")
 917              (commit (string-append "v" version))))
 918        (file-name (git-file-name name version))
 919        (sha256
 920         (base32 "0k906wb4pw3dcqpcwnni78lahzi3bva483f8c17sjykic7as4y5n"))))
 921     (build-system gnu-build-system)
 922     (arguments
 923      `(#:phases
 924        (modify-phases %standard-phases
 925          (add-after 'unpack 'disable-premature-./configure
 926            (lambda _
 927              (substitute* "autogen.sh"
 928                (("\\$srcdir/configure")
 929                 "true"))
 930              #t)))))
 931     (native-inputs
 932      `(("autoconf" ,autoconf)
 933        ("automake" ,automake)))
 934     (inputs
 935      `(("ncurses" ,ncurses)))
 936     (synopsis "Console based live network and disk I/O bandwidth monitor")
 937     (description "Bandwidth Monitor NG is a small and simple console based
 938 live network and disk I/O bandwidth monitor.")
 939     (home-page "https://www.gropp.org/?id=projects&sub=bwm-ng")
 940     (license license:gpl2)))
 941
 942 (define-public aircrack-ng
 943   (package
 944     (name "aircrack-ng")
 945     (version "1.6")
 946     (source
 947      (origin
 948        (method url-fetch)
 949        (uri (string-append "https://download.aircrack-ng.org/aircrack-ng-"
 950                            version ".tar.gz"))
 951        (sha256
 952         (base32 "0ix2k64qg7x3w0bzdsbk1m50kcpq1ws59g3zkwiafvpwdr4gs2sg"))))
 953     (build-system gnu-build-system)
 954     (native-inputs
 955      `(("autoconf" ,autoconf)
 956        ("automake" ,automake)
 957        ("libtool" ,libtool)
 958        ("pkg-config" ,pkg-config)
 959        ("which" ,which)))
 960     (inputs
 961      `(("libgcrypt" ,libgcrypt)
 962        ("libnl" ,libnl)
 963        ("libpcap" ,libpcap)
 964        ("ethtool" ,ethtool)
 965        ("pcre" ,pcre)
 966        ("sqlite" ,sqlite)
 967        ("zlib" ,zlib)))
 968     (arguments
 969      `(#:configure-flags
 970        (list "--with-experimental=yes"  ; build wesside-ng, etc.
 971              "--with-gcrypt")           ; openssl's the default
 972        #:phases (modify-phases %standard-phases
 973                   (add-before 'bootstrap 'patch-evalrev
 974                     (lambda _
 975                       ;; Called by ./autogen.sh below, before the default
 976                       ;; ‘patch-shebangs’ phase has had a chance to run.
 977                       (substitute* "evalrev"
 978                         (("/bin/sh")
 979                          (which "sh")))
 980                       #t))
 981                   (replace 'bootstrap
 982                     (lambda _
 983                       ;; Patch shebangs in generated files before running
 984                       ;; ./configure.
 985                       (setenv "NOCONFIGURE" "please")
 986                       (invoke "bash" "./autogen.sh")))
 987                   (add-after 'build 'absolutize-tools
 988                     (lambda* (#:key inputs #:allow-other-keys)
 989                       (let ((ethtool (string-append (assoc-ref inputs "ethtool")
 990                                                     "/sbin/ethtool")))
 991                         (substitute* "scripts/airmon-ng"
 992                           (("ethtool ")
 993                            (string-append ethtool " ")))
 994                         #t))))))
 995     (home-page "https://www.aircrack-ng.org")
 996     (synopsis "Assess WiFi network security")
 997     (description
 998      "Aircrack-ng is a complete suite of tools to assess WiFi network
 999 security.  It focuses on different areas of WiFi security: monitoring,
1000 attacking, testing, and cracking.  All tools are command-line driven, which
1001 allows for heavy scripting.")
1002     (license (list license:gpl2+ license:bsd-3))))
1003
1004 (define-public pixiewps
1005   (package
1006     (name "pixiewps")
1007     (version "1.4.2")
1008     (source (origin
1009               (method url-fetch)
1010               (uri (string-append
1011                     "https://github.com/wiire-a/pixiewps/releases/"
1012                     "download/v" version "/" name "-" version ".tar.xz"))
1013               (sha256
1014                (base32
1015                 "07nym6bqml0k9v29vnj003nrgnwrywgjvnljb7cdpsvnwilhbp64"))))
1016     (build-system gnu-build-system)
1017     (arguments
1018      '(#:make-flags
1019        (list "CC=gcc"
1020              (string-append "PREFIX=" (assoc-ref %outputs "out")))
1021        #:phases
1022        (modify-phases %standard-phases
1023          (delete 'configure)) ; no configure script
1024        #:tests? #f)) ; there are no tests
1025     (home-page "https://github.com/wiire-a/pixiewps/")
1026     (synopsis "Offline brute-force tool for Wi-Fi Protected Setup")
1027     (description "Pixiewps implements the pixie-dust attack to brute
1028 force the Wi-Fi Protected Setup (WPS) PIN by exploiting the low or
1029 non-existing entropy of some access points.")
1030     (license license:gpl3+)))
1031
1032 (define-public reaver
1033   (package
1034     (name "reaver")
1035     (version "1.6.6")
1036     (source (origin
1037               (method url-fetch)
1038               (uri (string-append
1039                     "https://github.com/t6x/reaver-wps-fork-t6x/releases/"
1040                     "download/v" version "/reaver-" version ".tar.xz"))
1041               (sha256
1042                (base32
1043                 "00k7mc81ifv0wma7k4v18mj498badbw5yls6c28qin3d1gda0ag3"))))
1044     (build-system gnu-build-system)
1045     (arguments
1046      `(#:configure-flags
1047        ;; Save session files to current directory instead of /var.
1048        (list "--enable-savetocurrent"
1049              "--localstatedir=/tmp/dummy") ; prevent creating /var during install
1050        #:phases
1051        (modify-phases %standard-phases
1052          (add-before 'configure 'change-directory
1053            (lambda _
1054              (chdir "src")
1055              #t))
1056          (add-after 'install 'install-doc
1057            (lambda* (#:key outputs #:allow-other-keys)
1058              (chdir "../docs")
1059              (let* ((out (assoc-ref outputs "out"))
1060                     (doc (string-append out "/share/doc/" ,name "-" ,version))
1061                     (man1 (string-append out "/share/man/man1")))
1062                (for-each (lambda (file) (install-file file doc))
1063                          (find-files "." "README.*"))
1064                (install-file "reaver.1" man1)
1065                #t))))
1066        #:tests? #f))                    ; there are no tests
1067     (inputs
1068      `(("libpcap" ,libpcap)))
1069     (propagated-inputs
1070      `(("aircrack-ng" ,aircrack-ng)
1071        ("pixiewps" ,pixiewps)))
1072     (home-page "https://github.com/t6x/reaver-wps-fork-t6x/")
1073     (synopsis "Attack tool for Wi-Fi Protected Setup")
1074     (description "Reaver performs a brute force attack against an access
1075 point's Wi-Fi Protected Setup (WPS) PIN.  Once the PIN is found, the WPA
1076 passphrase can be recovered and the AP's wireless settings can be
1077 reconfigured.")
1078     (license license:gpl2+)))
1079
1080 (define-public perl-danga-socket
1081   (package
1082     (name "perl-danga-socket")
1083     (version "1.62")
1084     (source
1085      (origin
1086        (method url-fetch)
1087        (uri (string-append "mirror://cpan/authors/id/N/NM/NML/"
1088                            "Danga-Socket-" version ".tar.gz"))
1089        (sha256
1090         (base32 "0x4bvirmf0kphks19jwgva00zz73zx344218dfaiv8gigrw3yg4m"))))
1091     (build-system perl-build-system)
1092     (native-inputs
1093      `(("perl-test-tcp" ,perl-test-tcp)))
1094     (propagated-inputs
1095      `(("perl-sys-syscall" ,perl-sys-syscall)))
1096     (home-page "https://metacpan.org/release/Danga-Socket")
1097     (synopsis "Event loop and event-driven async socket base class")
1098     (description
1099      "Danga::Socket is an abstract base class for objects backed by a socket
1100 which provides the basic framework for event-driven asynchronous IO, designed
1101 to be fast.  Danga::Socket is both a base class for objects, and an event
1102 loop.")
1103     (license license:perl-license)))
1104
1105 (define-public perl-data-validate-ip
1106   (package
1107     (name "perl-data-validate-ip")
1108     (version "0.27")
1109     (source
1110      (origin
1111        (method url-fetch)
1112        (uri (string-append
1113              "mirror://cpan/authors/id/D/DR/DROLSKY/Data-Validate-IP-"
1114              version ".tar.gz"))
1115        (sha256
1116         (base32 "1mmppyzsh1w2z2h86kvzqxy56wxgs62a3kf8nvcnz76bblir5ap1"))))
1117     (build-system perl-build-system)
1118     (native-inputs
1119      `(("perl-test-requires" ,perl-test-requires)))
1120     (propagated-inputs
1121      `(("perl-netaddr-ip" ,perl-netaddr-ip)))
1122     (home-page "https://metacpan.org/release/Data-Validate-IP")
1123     (synopsis "IPv4 and IPv6 validation methods")
1124     (description
1125      "This module provides several IP address validation subroutines that both
1126 validate and untaint their input.  This includes both basic validation
1127 (@code{is_ipv4()} and @code{is_ipv6()}) and special cases like checking whether
1128 an address belongs to a specific network or whether an address is public or
1129 private (reserved).")
1130     (license license:perl-license)))
1131
1132 (define-public perl-net-dns
1133  (package
1134   (name "perl-net-dns")
1135   (version "1.21")
1136   (source
1137     (origin
1138       (method url-fetch)
1139       (uri
1140        (list
1141         (string-append "https://www.net-dns.org/download/Net-DNS-"
1142                        version ".tar.gz")
1143         (string-append "mirror://cpan/authors/id/N/NL/NLNETLABS/Net-DNS-"
1144                        version ".tar.gz")))
1145       (sha256
1146        (base32 "0yknrsh0wqr9s43c0wf3dyzrsi2r7k0v75hay74gqkq850xy3vyx"))))
1147   (build-system perl-build-system)
1148   (inputs
1149     `(("perl-digest-hmac" ,perl-digest-hmac)))
1150   (home-page "https://www.net-dns.org/")
1151   (synopsis
1152     "Perl Interface to the Domain Name System")
1153   (description "Net::DNS is the Perl Interface to the Domain Name System.")
1154   (license license:x11)))
1155
1156 (define-public perl-socket6
1157  (package
1158   (name "perl-socket6")
1159   (version "0.29")
1160   (source
1161     (origin
1162       (method url-fetch)
1163       (uri (string-append
1164              "mirror://cpan/authors/id/U/UM/UMEMOTO/Socket6-"
1165              version
1166              ".tar.gz"))
1167       (sha256
1168         (base32
1169           "054izici8klfxs8hr5rljib28plijpsfymy99xbzdp047bx1b2a6"))))
1170   (build-system perl-build-system)
1171   (arguments
1172    `(#:phases
1173      (modify-phases %standard-phases
1174          (replace 'configure
1175            (lambda* (#:key outputs #:allow-other-keys)
1176              (let* ((out (assoc-ref outputs "out"))
1177                     (args `("Makefile.PL"
1178                             ,(string-append "PREFIX=" out)
1179                             "INSTALLDIRS=site")))
1180                (setenv "CONFIG_SHELL" (which "sh"))
1181                (apply invoke "perl" args)))))))
1182   (home-page "https://metacpan.org/release/Socket6")
1183   (synopsis
1184     "IPv6 related part of the C socket.h defines and structure manipulators for Perl")
1185   (description "Socket6 binds the IPv6 related part of the C socket header
1186 definitions and structure manipulators for Perl.")
1187   (license license:bsd-3)))
1188
1189 (define-public perl-net-dns-resolver-programmable
1190  (package
1191   (name "perl-net-dns-resolver-programmable")
1192   (version "v0.003")
1193   (source
1194     (origin
1195       (method url-fetch)
1196       (uri (string-append
1197              "mirror://cpan/authors/id/J/JM/JMEHNLE/net-dns-resolver-programmable/"
1198              "Net-DNS-Resolver-Programmable-" version ".tar.gz"))
1199       (sha256
1200         (base32
1201           "1v3nl2kaj4fs55n1617n53q8sa3mir06898vpy1rq98zjih24h4d"))
1202       (patches
1203        (search-patches "perl-net-dns-resolver-programmable-fix.patch"))))
1204   (build-system perl-build-system)
1205   (native-inputs
1206     `(("perl-module-build" ,perl-module-build)))
1207   (inputs `(("perl-net-dns" ,perl-net-dns)))
1208   (home-page
1209     "https://metacpan.org/release/Net-DNS-Resolver-Programmable")
1210   (synopsis
1211     "Programmable DNS resolver class for offline emulation of DNS")
1212   (description "Net::DNS::Resolver::Programmable is a programmable DNS resolver for
1213 offline emulation of DNS.")
1214   (license license:perl-license)))
1215
1216 (define-public perl-net-dns-resolver-mock
1217   (package
1218     (name "perl-net-dns-resolver-mock")
1219     (version "1.20171219")
1220     (source (origin
1221               (method url-fetch)
1222               (uri (string-append
1223                      "mirror://cpan/authors/id/M/MB/MBRADSHAW/"
1224                      "Net-DNS-Resolver-Mock-" version ".tar.gz"))
1225               (sha256
1226                (base32
1227                 "0m3rxpkv1b9121srvbqkrgzg4m8mnydiydqv34in1i1ixwrl6jn9"))))
1228     (build-system perl-build-system)
1229     (inputs
1230      `(("perl-net-dns" ,perl-net-dns)))
1231     (home-page "https://metacpan.org/release/Net-DNS-Resolver-Mock")
1232     (synopsis "Mock DNS Resolver object for testing")
1233     (description
1234      "Net::DNS::Resolver::Mock is a subclass of Net::DNS::Resolver, but returns
1235 static data from any provided DNS zone file instead of querying the network.
1236 It is intended primarily for use in testing.")
1237     (license license:perl-license)))
1238
1239 (define-public perl-netaddr-ip
1240  (package
1241   (name "perl-netaddr-ip")
1242   (version "4.079")
1243   (source
1244     (origin
1245       (method url-fetch)
1246       (uri (string-append
1247              "mirror://cpan/authors/id/M/MI/MIKER/NetAddr-IP-"
1248              version
1249              ".tar.gz"))
1250       (sha256
1251         (base32
1252           "1rx0dinrz9fk9qcg4rwqq5n1dm3xv2arymixpclcv2q2nzgq4npc"))))
1253   (build-system perl-build-system)
1254   (arguments
1255     `(#:phases
1256        (modify-phases %standard-phases
1257          (replace 'configure
1258            (lambda* (#:key outputs #:allow-other-keys)
1259              (let* ((out (assoc-ref outputs "out"))
1260                     (args `("Makefile.PL"
1261                             ,(string-append "PREFIX=" out)
1262                             "INSTALLDIRS=site")))
1263                (setenv "CONFIG_SHELL" (which "sh"))
1264                (apply invoke "perl" args)))))))
1265   (home-page
1266     "https://metacpan.org/release/NetAddr-IP")
1267   (synopsis
1268     "Manages IPv4 and IPv6 addresses and subnets")
1269   (description "NetAddr::IP manages IPv4 and IPv6 addresses and subsets.")
1270   (license license:perl-license)))
1271
1272 (define-public perl-net-patricia
1273  (package
1274   (name "perl-net-patricia")
1275   (version "1.22")
1276   (source
1277     (origin
1278       (method url-fetch)
1279       (uri (string-append
1280              "mirror://cpan/authors/id/G/GR/GRUBER/Net-Patricia-"
1281              version
1282              ".tar.gz"))
1283       (sha256
1284         (base32
1285           "0ln5f57vc8388kyh9vhx2infrdzfhbpgyby74h1qsnhwds95m0vh"))))
1286   (build-system perl-build-system)
1287   (arguments
1288    '(#:phases
1289      (modify-phases %standard-phases
1290        (add-after 'unpack 'dont-link-with-nsl ; Borrowed from Debian.
1291          (lambda _
1292            (substitute* "Makefile.PL"
1293              (("-lnsl") ""))
1294            #t)))))
1295   (inputs
1296     `(("perl-net-cidr-lite" ,perl-net-cidr-lite)
1297       ("perl-socket6" ,perl-socket6)))
1298   (home-page
1299     "https://metacpan.org/release/Net-Patricia")
1300   (synopsis
1301     "Patricia Trie Perl module for fast IP address lookups")
1302   (description
1303     "Net::Patricia does IP address lookups quickly in Perl.")
1304   ;; The bindings are licensed under GPL2 or later.
1305   ;; libpatricia is licensed under 2-clause BSD.
1306   (license (list license:gpl2+ license:bsd-2))))
1307
1308 (define-public perl-net-cidr-lite
1309  (package
1310   (name "perl-net-cidr-lite")
1311   (version "0.21")
1312   (source
1313     (origin
1314       (method url-fetch)
1315       (uri (string-append
1316              "mirror://cpan/authors/id/D/DO/DOUGW/Net-CIDR-Lite-"
1317              version
1318              ".tar.gz"))
1319       (sha256
1320         (base32
1321           "14shj73zbqmfjbp0qz1fs9j4p2dpvz5hfkm4qfdjbydflbl2b8fg"))))
1322   (build-system perl-build-system)
1323   (home-page
1324     "https://metacpan.org/release/Net-CIDR-Lite")
1325   (synopsis
1326     "Perl extension for merging IPv4 or IPv6 CIDR addresses")
1327   (description "Net::CIDR::Lite merges IPv4 or IPv6 CIDR addresses.")
1328   (license license:gpl1+)))
1329
1330 ;; TODO: Use the geolite-mirror-simple.pl script from the example
1331 ;; directory to stay current with the databases. How?
1332 (define-public perl-geo-ip
1333  (package
1334   (name "perl-geo-ip")
1335   (version "1.51")
1336   (source
1337     (origin
1338       (method url-fetch)
1339       (uri (string-append
1340              "mirror://cpan/authors/id/M/MA/MAXMIND/Geo-IP-"
1341              version
1342              ".tar.gz"))
1343       (sha256
1344         (base32
1345           "1fka8fr7fw6sh3xa9glhs1zjg3s2gfkhi7n7da1l2m2wblqj0c0n"))))
1346   (build-system perl-build-system)
1347   (home-page "https://metacpan.org/release/Geo-IP")
1348   (synopsis
1349     "Look up location and network information by IP Address in Perl")
1350   (description "The Perl module @code{Geo::IP}.  It looks up location and
1351 network information by IP Address.")
1352   (license license:perl-license)))
1353
1354 (define-public perl-io-socket-inet6
1355  (package
1356   (name "perl-io-socket-inet6")
1357   (version "2.72")
1358   (source
1359     (origin
1360       (method url-fetch)
1361       (uri (string-append
1362              "mirror://cpan/authors/id/S/SH/SHLOMIF/IO-Socket-INET6-"
1363              version
1364              ".tar.gz"))
1365       (sha256
1366         (base32
1367           "1fqypz6qa5rw2d5y2zq7f49frwra0aln13nhq5gi514j2zx21q45"))))
1368   (build-system perl-build-system)
1369   (native-inputs
1370     `(("perl-module-build" ,perl-module-build)
1371       ("perl-test-pod" ,perl-test-pod)
1372       ("perl-test-pod-coverage" ,perl-test-pod-coverage)))
1373   (inputs `(("perl-socket6" ,perl-socket6)))
1374   (arguments `(;; Need network socket API
1375                #:tests? #f))
1376   (home-page
1377     "https://metacpan.org/release/IO-Socket-INET6")
1378   (synopsis
1379     "Perl object interface for AF_INET/AF_INET6 domain sockets")
1380   (description "IO::Socket::INET6 is an interface for AF_INET/AF_INET6 domain
1381 sockets in Perl.")
1382   (license license:perl-license)))
1383
1384 (define-public libproxy
1385   (package
1386     (name "libproxy")
1387     (version "0.4.15")
1388     (source (origin
1389               (method url-fetch)
1390               (uri (string-append "https://github.com/libproxy/libproxy/"
1391                                   "releases/download/" version "/libproxy-"
1392                                   version ".tar.xz"))
1393               (sha256
1394                (base32
1395                 "0kvdrazlzwia876w988cmlypp253gwy6idlh8mjk958c29jb8kb5"))))
1396     (build-system cmake-build-system)
1397     (native-inputs
1398      `(("pkg-config" ,pkg-config)))
1399     (inputs
1400      `(("dbus" ,dbus)
1401        ("zlib" ,zlib)))
1402     (arguments
1403      `(#:phases
1404        (modify-phases %standard-phases
1405          (replace 'check
1406                   (lambda _
1407                     (invoke "ctest" "-E" "url-test"))))))
1408     (synopsis "Library providing automatic proxy configuration management")
1409     (description "Libproxy handles the details of HTTP/HTTPS proxy
1410 configuration for applications across all scenarios.  Applications using
1411 libproxy only have to specify which proxy to use.")
1412     (home-page "https://libproxy.github.io/libproxy")
1413     (license license:lgpl2.1+)))
1414
1415 (define-public proxychains-ng
1416   (package
1417     (name "proxychains-ng")
1418     (version "4.14")
1419     (source
1420      (origin
1421        (method url-fetch)
1422        (uri (string-append "http://ftp.barfooze.de/pub/sabotage/tarballs/"
1423                            "proxychains-ng-" version ".tar.xz"))
1424        (sha256
1425         (base32 "1bmhfbl1bzc87vl0xwr1wh5xvslfyc41nl2hqzhbj258p0sy004x"))))
1426     (build-system gnu-build-system)
1427     (arguments
1428      `(#:tests? #f                      ; there are no tests
1429        #:phases
1430        (modify-phases %standard-phases
1431          (add-after 'unpack 'fix-configure-script
1432            (lambda _
1433              ;; The configure script is very intolerant to unknown arguments,
1434              ;; such as "CONFIG_SHELL".
1435              (substitute* "configure"
1436                (("\\*\\) break ;;" line)
1437                 (string-append "[A-Z]*) shift ;;\n"
1438                                line)))
1439              #t))
1440          (add-before 'configure 'set-up-environment
1441            (lambda _
1442              (setenv "CC" "gcc")
1443              #t)))))
1444     (synopsis "Redirect any TCP connection through a proxy or proxy chain")
1445     (description "Proxychains-ng is a preloader which hooks calls to sockets
1446 in dynamically linked programs and redirects them through one or more SOCKS or
1447 HTTP proxies.")
1448     (home-page "https://github.com/rofl0r/proxychains-ng")
1449     (license license:gpl2+)))
1450
1451 (define-public enet
1452   (package
1453     (name "enet")
1454     (version "1.3.14")
1455     (source (origin
1456               (method url-fetch)
1457               (uri (string-append "http://enet.bespin.org/download/"
1458                                   "enet-" version ".tar.gz"))
1459               (sha256
1460                (base32
1461                 "0w780zc6cy8yq4cskpphx0f91lzh51vh9lwyc5ll8hhamdxgbxlq"))))
1462     (build-system gnu-build-system)
1463     (native-inputs
1464      `(("pkg-config" ,pkg-config)))
1465     (synopsis "Network communication layer on top of UDP")
1466     (description
1467      "ENet's purpose is to provide a relatively thin, simple and robust network
1468 communication layer on top of UDP.  The primary feature it provides is optional
1469 reliable, in-order delivery of packets.  ENet omits certain higher level
1470 networking features such as authentication, server discovery, encryption, or
1471 other similar tasks that are particularly application specific so that the
1472 library remains flexible, portable, and easily embeddable.")
1473     (home-page "http://enet.bespin.org")
1474     (license license:expat)))
1475
1476 (define-public sslh
1477   (package
1478     (name "sslh")
1479     (version "1.20")
1480     (source
1481      (origin
1482        (method git-fetch)
1483        (uri (git-reference
1484              (url "https://github.com/yrutschle/sslh.git")
1485              (commit (string-append "v" version))))
1486        (file-name (git-file-name name version))
1487        (sha256
1488         (base32 "18zhkqlwfh6f5dg1a41a4p7p9g94dgb9nwls1ksy9r5yz174i2fx"))))
1489     (build-system gnu-build-system)
1490     (native-inputs
1491      `(;; Test dependencies.
1492        ("lcov" ,lcov)
1493        ("perl" ,perl)
1494        ("perl-conf-libconfig" ,perl-conf-libconfig)
1495        ("perl-io-socket-inet6" ,perl-io-socket-inet6)
1496        ("perl-socket6" ,perl-socket6)
1497        ("psmisc" ,psmisc)))             ; for ‘killall’
1498     (inputs
1499      `(("libcap" ,libcap)
1500        ("libconfig" ,libconfig)
1501        ("pcre" ,pcre)
1502        ("tcp-wrappers" ,tcp-wrappers)))
1503     (arguments
1504      '(#:phases
1505        (modify-phases %standard-phases
1506          (delete 'configure)            ; no configure script
1507          (add-before 'check 'fix-tests
1508            (lambda _
1509              (substitute* "./t"
1510                (("\"/tmp") "$ENV{\"TMPDIR\"} . \"")
1511                ;; The Guix build environment lacks ‘ip6-localhost’.
1512                (("ip6-localhost") "localhost"))
1513              #t))
1514          ;; Many of these files are mentioned in the man page. Install them.
1515          (add-after 'install 'install-documentation
1516            (lambda* (#:key outputs #:allow-other-keys)
1517              (let* ((out (assoc-ref outputs "out"))
1518                     (doc (string-append out "/share/doc/sslh")))
1519                (install-file "README.md" doc)
1520                (for-each
1521                 (lambda (file)
1522                   (install-file file (string-append doc "/examples")))
1523                 (append (find-files "." "\\.cfg")
1524                         (find-files "scripts"))))
1525              #t)))
1526        #:make-flags (list "CC=gcc"
1527                           "USELIBCAP=1"
1528                           "USELIBWRAP=1"
1529                           (string-append "PREFIX=" (assoc-ref %outputs "out")))
1530        #:test-target "test"))
1531     (home-page "https://www.rutschle.net/tech/sslh/README.html")
1532     (synopsis "Applicative network protocol demultiplexer")
1533     (description
1534      "sslh is a network protocol demultiplexer.  It acts like a switchboard,
1535 accepting connections from clients on one port and forwarding them to different
1536 servers based on the contents of the first received data packet.  Detection of
1537 common protocols like HTTP(S), SSL, SSH, OpenVPN, tinc, and XMPP is already
1538 implemented, but any other protocol that matches a regular expression can be
1539 added.  sslh's name comes from its original application of serving both SSH and
1540 HTTPS on port 443, allowing SSH connections from inside corporate firewalls
1541 that block port 22.")
1542     (license (list license:bsd-2        ; tls.[ch]
1543                    license:gpl2+))))    ; everything else
1544
1545 (define-public iperf
1546   (package
1547     (name "iperf")
1548     (version "3.7")
1549     (source (origin
1550               (method url-fetch)
1551               (uri (string-append "http://downloads.es.net/pub/iperf"
1552                                   "/iperf-" version ".tar.gz"))
1553               (sha256
1554                 (base32
1555                  "033is7b5grfbiil98jxlz4ixp9shm44x6hy8flpsyz1i4h108inq"))))
1556     (build-system gnu-build-system)
1557     (synopsis "TCP, UDP and SCTP bandwidth measurement tool")
1558     (description
1559      "iPerf is a tool to measure achievable bandwidth on IP networks.  It
1560 supports tuning of various parameters related to timing, buffers and
1561 protocols (TCP, UDP, SCTP with IPv4 and IPv6).  For each test it reports
1562 the bandwidth, loss, and other parameters.")
1563     (home-page "https://software.es.net/iperf/")
1564     (license (list license:bsd-3             ; Main distribution.
1565                    license:ncsa              ; src/{units,iperf_locale,tcp_window_size}.c
1566                    license:expat             ; src/{cjson,net}.[ch]
1567                    license:public-domain)))) ; src/portable_endian.h
1568
1569 (define-public nethogs
1570   (package
1571     (name "nethogs")
1572     (version "0.8.5")
1573     (source (origin
1574               (method url-fetch)
1575               (uri (string-append "https://github.com/raboof/nethogs/archive/v"
1576                                   version ".tar.gz"))
1577               (sha256
1578                (base32
1579                 "1k4x8r7s4dgcb6n2rjn28h2yyij92mwm69phncl3597cdxr954va"))
1580               (file-name (string-append name "-" version ".tar.gz"))))
1581     (build-system gnu-build-system)
1582     (inputs
1583      `(("libpcap" ,libpcap)
1584        ("ncurses" ,ncurses)))
1585     (arguments
1586      `(#:make-flags `("CC=gcc"
1587                       ,(string-append "PREFIX=" %output))
1588        #:phases
1589        (modify-phases %standard-phases
1590          (delete 'configure)))) ; No ./configure script.
1591     (home-page "https://github.com/raboof/nethogs")
1592     (synopsis "Per-process bandwidth monitor")
1593     (description "NetHogs is a small 'net top' tool for Linux.  Instead of
1594 breaking the traffic down per protocol or per subnet, like most tools do, it
1595 groups bandwidth by process.
1596
1597 NetHogs does not rely on a special kernel module to be loaded.  If there's
1598 suddenly a lot of network traffic, you can fire up NetHogs and immediately see
1599 which PID is causing this.  This makes it easy to identify programs that have
1600 gone wild and are suddenly taking up your bandwidth.")
1601     (license license:gpl2+)))
1602
1603 (define-public nzbget
1604   (package
1605     (name "nzbget")
1606     (version "21.0")
1607     (source
1608      (origin
1609        (method url-fetch)
1610        (uri (string-append "https://github.com/nzbget/nzbget/archive/v"
1611                            version ".tar.gz"))
1612        (file-name (string-append name "-" version ".tar.gz"))
1613        (sha256
1614         (base32
1615          "0l3dzxz7d7jf6cyach41zirvsx1x0vs4nh053c0miycv7zjyrly7"))
1616        (modules '((guix build utils)))
1617        (snippet
1618         ;; Reported upstream as <https://github.com/nzbget/nzbget/pull/414>.
1619         '(begin
1620            (substitute* "daemon/connect/TlsSocket.cpp"
1621              (("gnutls_certificate-verification_status_print")
1622               "gnutls_certificate_verification_status_print"))
1623            #t))))
1624     (arguments
1625      `(#:configure-flags
1626        (list
1627         (string-append "--with-libcurses-includes="
1628                        (assoc-ref %build-inputs "ncurses") "/include")
1629         (string-append "--with-libcurses-libraries="
1630                        (assoc-ref %build-inputs "ncurses") "/lib")
1631         (string-append "--with-tlslib=GnuTLS"))))
1632     (build-system gnu-build-system)
1633     (inputs `(("gnutls" ,gnutls)
1634               ("libxml2" ,libxml2)
1635               ("ncurses" ,ncurses)
1636               ("zlib" ,zlib)))
1637     (native-inputs `(("pkg-config" ,pkg-config)))
1638     (home-page "https://github.com/nzbget/nzbget")
1639     (synopsis "Usenet binary file downloader")
1640     (description
1641      "NZBGet is a binary newsgrabber, which downloads files from Usenet based
1642 on information given in @code{nzb} files.  NZBGet can be used in standalone
1643 and in server/client modes.  In standalone mode, you pass NZBGet @command{nzb}
1644 files as command-line parameters and it downloads them and exits.  NZBGet also
1645 contains a Web interface.  Its server can be controlled through remote
1646 procedure calls (RPCs).")
1647     (license license:gpl2+)))
1648
1649 (define-public openvswitch
1650   (package
1651     (name "openvswitch")
1652     (version "2.12.0")
1653     (source (origin
1654               (method url-fetch)
1655               (uri (string-append
1656                     "https://www.openvswitch.org/releases/openvswitch-"
1657                     version ".tar.gz"))
1658               (sha256
1659                (base32
1660                 "1y78ix5inhhcvicbvyy2ij38am1215nr55vydhab3d4065q45z8k"))))
1661     (build-system gnu-build-system)
1662     (arguments
1663      '(;; FIXME: many tests fail with:
1664        ;;    […]
1665        ;;    test -e $OVS_RUNDIR/ovs-vswitchd.pid
1666        ;;    ovs-appctl -t ovs-vswitchd exit
1667        ;;    hard failure
1668        #:tests? #f
1669        #:configure-flags
1670        '("--enable-shared"
1671          "--localstatedir=/var"
1672          "--with-dbdir=/var/lib/openvswitch")
1673        #:phases
1674        (modify-phases %standard-phases
1675          (replace 'install
1676            (lambda _
1677              (invoke "make"
1678                      ;; Don't try to create directories under /var.
1679                      "RUNDIR=/tmp"
1680                      "PKIDIR=/tmp"
1681                      "LOGDIR=/tmp"
1682                      "DBDIR=/tmp"
1683                      "install"))))))
1684     (native-inputs
1685      `(("perl" ,perl)
1686        ("pkg-config" ,pkg-config)
1687        ("python" ,python-2)
1688        ;; for testing
1689        ("util-linux" ,util-linux)))
1690     (propagated-inputs
1691      `(("python-six" ,python2-six)))
1692     (inputs
1693      `(("libcap-ng" ,libcap-ng)
1694        ("openssl" ,openssl)))
1695     (synopsis "Virtual network switch")
1696     (home-page "https://www.openvswitch.org/")
1697     (description
1698      "Open vSwitch is a multilayer virtual switch.  It is designed to enable
1699 massive network automation through programmatic extension, while still
1700 supporting standard management interfaces and protocols (e.g. NetFlow, sFlow,
1701 IPFIX, RSPAN, CLI, LACP, 802.1ag).")
1702     (license                            ; see debian/copyright for detail
1703      (list license:lgpl2.1              ; xenserver and utilities/bugtool
1704            license:gpl2                 ; datapath
1705            license:bsd-2 license:bsd-3
1706            license:asl2.0))))           ; all other
1707
1708 (define-public python-ipy
1709   (package
1710     (name "python-ipy")
1711     (version "1.00")
1712     (source (origin
1713               (method url-fetch)
1714               (uri (pypi-uri "IPy" version))
1715               (sha256
1716                (base32
1717                 "08d6kcacj67mvh0b6y765ipccy6gi4w2ndd4v1l3im2qm1cgcarg"))))
1718     (build-system python-build-system)
1719     (home-page "https://github.com/autocracy/python-ipy/")
1720     (synopsis "Python class and tools for handling IP addresses and networks")
1721     (description "The @code{IP} class allows a comfortable parsing and
1722 handling for most notations in use for IPv4 and IPv6 addresses and
1723 networks.")
1724     (license license:bsd-3)))
1725
1726 (define-public python2-ipy
1727   (package-with-python2 python-ipy))
1728
1729 (define-public speedtest-cli
1730   (package
1731     (name "speedtest-cli")
1732     (version "2.1.2")
1733     (source
1734      (origin
1735        (method git-fetch)
1736        (uri (git-reference
1737              (url "https://github.com/sivel/speedtest-cli")
1738              (commit (string-append "v" version))))
1739        (file-name (git-file-name name version))
1740        (sha256
1741         (base32 "1456yly6iym2c9bl6pi4sz8xbw34bm2dxm1vzpydsd6jazwpmy26"))))
1742     (build-system python-build-system)
1743     (home-page "https://github.com/sivel/speedtest-cli")
1744     (synopsis "Internet bandwidth tester")
1745     (description
1746      "Command line interface for testing internet bandwidth using
1747 speedtest.net.")
1748     (license license:asl2.0)))
1749
1750 (define-public tftp-hpa
1751   (package
1752     (name "tftp-hpa")
1753     (version "5.2")
1754     (source (origin
1755               (method url-fetch)
1756               (uri (string-append "mirror://kernel.org/software/"
1757                                   "network/tftp/tftp-hpa/tftp-hpa-" version
1758                                   ".tar.xz"))
1759               (sha256
1760                (base32
1761                 "12vidchglhyc20znq5wdsbhi9mqg90jnl7qr9qs8hbvaz4fkdvmg"))))
1762     (build-system gnu-build-system)
1763     (arguments `(#:tests? #f)) ; no test target
1764     (synopsis "HPA's tftp client")
1765     (description
1766      "This is a tftp client derived from OpenBSD tftp with some extra options
1767 added and bugs fixed.  The source includes readline support but it is not
1768 enabled due to license conflicts between the BSD advertising clause and the GPL.")
1769     (home-page "https://git.kernel.org/cgit/network/tftp/tftp-hpa.git/about/")
1770     ;; Some source files are distributed under a 3-clause BSD license, and
1771     ;; others under a 4-clause BSD license. Refer to the files in the source
1772     ;; distribution for clarification.
1773     (license (list license:bsd-3 license:bsd-4))))
1774
1775 (define-public pidentd
1776   (package
1777     (name "pidentd")
1778     (version "3.0.19")
1779     (source
1780      (origin
1781        (method url-fetch)
1782        (uri (string-append "https://github.com/ptrrkssn/pidentd/archive/"
1783                            "v" version ".tar.gz"))
1784        (file-name (string-append name "-" version ".tar.gz"))
1785        (sha256
1786         (base32
1787          "0y3kd1bkydqkpc1qdff24yswysamsqivvadjy0468qri5730izgc"))))
1788     (build-system gnu-build-system)
1789     (arguments
1790      `(#:tests? #f)) ; No tests are included
1791     (inputs
1792      `(("openssl" ,openssl-1.0)))       ;for the DES library
1793     (home-page "https://www.lysator.liu.se/~pen/pidentd/")
1794     (synopsis "Small Ident Daemon")
1795     (description
1796      "@dfn{Pidentd} (Peter's Ident Daemon) is a identd, which implements a
1797 identification server.  Pidentd looks up specific TCP/IP connections and
1798 returns the user name and other information about the connection.")
1799     (license license:public-domain)))
1800
1801 (define-public spiped
1802   (package
1803     (name "spiped")
1804     (version "1.6.0")
1805     (source (origin
1806               (method url-fetch)
1807               (uri (string-append "https://www.tarsnap.com/spiped/spiped-"
1808                                   version ".tgz"))
1809               (sha256
1810                (base32
1811                 "1r51rdcl7nib1yv3yvgd5alwlkkwmr387brqavaklb0p2bwzixz6"))))
1812     (build-system gnu-build-system)
1813     (arguments
1814      '(#:test-target "test"
1815        #:make-flags (let* ((out (assoc-ref %outputs "out"))
1816                            (bindir (string-append out "/bin"))
1817                            (man1dir (string-append out "/share/man/man1")))
1818                       (list "CC=gcc" ; It tries to invoke `c99`.
1819                             (string-append "BINDIR=" bindir)
1820                             (string-append "MAN1DIR=" man1dir)))
1821        #:phases
1822        (modify-phases %standard-phases
1823          (add-after 'unpack 'patch-command-invocations
1824            (lambda _
1825              (substitute* '("Makefile"
1826                             "libcperciva/cpusupport/Build/cpusupport.sh"
1827                             "libcperciva/POSIX/posix-cflags.sh"
1828                             "libcperciva/POSIX/posix-l.sh")
1829                (("command -p") ""))
1830              #t))
1831          (delete 'configure) ; No ./configure script.
1832          (add-after 'install 'install-more-docs
1833            (lambda* (#:key outputs #:allow-other-keys)
1834              (let* ((out (assoc-ref %outputs "out"))
1835                     (misc (string-append out "/share/doc/spiped")))
1836                (install-file "DESIGN.md" misc)
1837                #t))))))
1838     (native-inputs
1839      `(("procps" ,procps))) ; `ps` is used by the test suite.
1840     (inputs
1841      `(("openssl" ,openssl)))
1842     (home-page "https://www.tarsnap.com/spiped.html")
1843     (synopsis "Create secure pipes between sockets")
1844     (description "Spiped (pronounced \"ess-pipe-dee\") is a utility for creating
1845 symmetrically encrypted and authenticated pipes between socket addresses, so
1846 that one may connect to one address (e.g., a UNIX socket on localhost) and
1847 transparently have a connection established to another address (e.g., a UNIX
1848 socket on a different system).  This is similar to 'ssh -L' functionality, but
1849 does not use SSH and requires a pre-shared symmetric key.")
1850     (license license:bsd-2)))
1851
1852 (define-public quagga
1853   (package
1854     (name "quagga")
1855     (version "1.2.4")
1856     (source (origin
1857               (method url-fetch)
1858               (uri (string-append "mirror://savannah/quagga/quagga-"
1859                                   version ".tar.gz"))
1860               (sha256
1861                (base32
1862                 "1lsksqxij5f1llqn86pkygrf5672kvrqn1kvxghi169hqf1c0r73"))
1863               (patches
1864                (search-patches "quagga-reproducible-build.patch"))))
1865     (build-system gnu-build-system)
1866     (native-inputs `(("pkg-config" ,pkg-config)
1867                      ("perl" ,perl)
1868                      ("dejagnu" ,dejagnu)))
1869     (inputs `(("readline" ,readline)
1870               ("c-ares" ,c-ares)))
1871     (synopsis "Routing Software Suite")
1872     (description "Quagga is a routing software suite, providing implementations
1873 of OSPFv2, OSPFv3, RIP v1 and v2, RIPng and BGP-4 for Unix platforms.
1874
1875 The Quagga architecture consists of a core daemon, @command{zebra}, which
1876 acts as an abstraction layer to the underlying Unix kernel and presents the
1877 Zserv API over a Unix or TCP stream to Quagga clients.  It is these Zserv
1878 clients which typically implement a routing protocol and communicate routing
1879 updates to the zebra daemon.")
1880     (home-page "https://www.nongnu.org/quagga/")
1881     (license license:gpl2+)))
1882
1883 (define-public thc-ipv6
1884   (let ((revision "0")
1885         (commit "4bb72573e0950ce6f8ca2800a10748477020029e"))
1886     (package
1887       (name "thc-ipv6")
1888       (version (git-version "3.4" revision commit))
1889       (source (origin
1890                 (method git-fetch)
1891                 (uri (git-reference
1892                        (url "https://github.com/vanhauser-thc/thc-ipv6.git")
1893                        (commit commit)))
1894                 (file-name (git-file-name name version))
1895                 (sha256
1896                  (base32
1897                   "1x5i6vbsddqc2yks7r1a2fw2fk16qxvd6hpzh1lykjfpkal8fdir"))))
1898       (build-system gnu-build-system)
1899       (arguments
1900        `(#:make-flags (list (string-append "PREFIX=" (assoc-ref %outputs "out")))
1901          #:tests? #f ; No test suite.
1902          #:phases
1903          (modify-phases %standard-phases
1904            (delete 'configure) ; No ./configure script.
1905            (add-before 'build 'patch-paths
1906              (lambda _
1907                (substitute* "Makefile"
1908                  (("/bin/echo") "echo"))
1909                #t))
1910            (add-after 'install 'install-more-docs
1911              (lambda* (#:key outputs #:allow-other-keys)
1912                (let* ((out (assoc-ref outputs "out"))
1913                       (doc (string-append out "/share/thc-ipv6/doc")))
1914                  (install-file "README" doc)
1915                  (install-file "HOWTO-INJECT" doc)
1916                  #t))))))
1917       ;; TODO Add libnetfilter-queue once packaged.
1918       (inputs
1919        `(("libpcap" ,libpcap)
1920          ("openssl" ,openssl)
1921          ("perl" ,perl)))
1922       (home-page "https://github.com/vanhauser-thc/thc-ipv6")
1923       (synopsis "IPv6 security research toolkit")
1924       (description "The THC IPv6 Toolkit provides command-line tools and a library
1925 for researching IPv6 implementations and deployments.  It requires Linux 2.6 or
1926 newer and only works on Ethernet network interfaces.")
1927       ;; AGPL 3 with exception for linking with OpenSSL. See the 'LICENSE' file in
1928       ;; the source distribution for more information.
1929       (license license:agpl3))))
1930
1931 (define-public bmon
1932   (package
1933     (name "bmon")
1934     (version "4.0")
1935     (source
1936      (origin
1937        (method url-fetch)
1938        (uri (string-append "https://github.com/tgraf/bmon/releases/download/v"
1939                            version "/bmon-" version ".tar.gz"))
1940        (sha256
1941         (base32
1942          "0ylzriv4pwh76344abzl1w219x188gshbycbna35gsyfp09c7z82"))))
1943     (build-system gnu-build-system)
1944     (inputs
1945      `(("libconfuse" ,libconfuse)
1946        ("libnl" ,libnl)
1947        ("ncurses" ,ncurses)))
1948     (native-inputs
1949      `(("pkg-config" ,pkg-config)))
1950     (synopsis "Bandwidth monitor")
1951     (description "bmon is a monitoring and debugging tool to capture
1952 networking-related statistics and prepare them visually in a human-friendly
1953 way.  It features various output methods including an interactive curses user
1954 interface and a programmable text output for scripting.")
1955     (home-page "https://github.com/tgraf/bmon")
1956     ;; README.md mentions both the 2-clause BSD and expat licenses, but all
1957     ;; the source files only have expat license headers. Upstream has been
1958     ;; contacted for clarification: https://github.com/tgraf/bmon/issues/59
1959     ;; Update the license field when upstream responds.
1960     (license (list license:bsd-2
1961                    license:expat))))
1962
1963 (define-public libnet
1964   (package
1965     (name "libnet")
1966     (version "1.2-rc3")
1967     (source
1968      (origin
1969        (method git-fetch)
1970        (uri (git-reference
1971              (url "https://github.com/sam-github/libnet")
1972              (commit (string-append "libnet-" version))))
1973        (file-name (git-file-name name version))
1974        (sha256
1975         (base32
1976          "0cy8w4g5rv963v4p6iq3333kxgdddx2lywp70xf62553a25xhhs4"))))
1977     (build-system gnu-build-system)
1978     (arguments
1979      `(#:phases
1980        (modify-phases %standard-phases
1981          (add-after 'unpack 'chdir
1982            (lambda _ (chdir "libnet") #t))
1983          (add-before 'build 'build-doc
1984            (lambda* (#:key make-flags #:allow-other-keys)
1985              (apply invoke "make" "-C" "doc" "doc"
1986                     make-flags))))))
1987     (native-inputs
1988      `(("autoconf" ,autoconf)
1989        ("automake" ,automake)
1990        ("libtool" ,libtool)
1991        ("doxygen" ,doxygen)))
1992     (home-page "https://sourceforge.net/projects/libnet-dev/")
1993     (synopsis "Framework for low-level network packet construction")
1994     (description
1995      "Libnet provides a fairly portable framework for network packet
1996 construction and injection.  It features portable packet creation interfaces
1997 at the IP layer and link layer, as well as a host of supplementary
1998 functionality.  Using libnet, quick and simple packet assembly applications
1999 can be whipped up with little effort.")
2000     (license license:bsd-2)))
2001
2002 (define-public mtr
2003   (package
2004     (name "mtr")
2005     (version "0.93")
2006     (source
2007      (origin
2008        (method url-fetch)
2009        (uri (string-append "ftp://ftp.bitwizard.nl/mtr/"
2010                            "mtr-" version ".tar.gz"))
2011        (sha256
2012         (base32 "03gid8g4r6a9r40855s4345xm1bylj2kfqkicjwxpmvvccyng712"))))
2013     (build-system gnu-build-system)
2014     (inputs
2015      `(("libcap" ,libcap)
2016        ("ncurses" ,ncurses)))
2017     (arguments
2018      `(#:tests? #f))                    ; tests require network access
2019     (home-page "https://www.bitwizard.nl/mtr/")
2020     (synopsis "Network diagnostic tool")
2021     (description
2022      "@acronym{mtr, My TraceRoute} combines the functionality of the
2023 @command{traceroute} and @command{ping} programs in a single network diagnostic
2024 tool.  @command{mtr} can use several network protocols to detect intermediate
2025 routers (or @dfn{hops}) between the local host and a user-specified destination.
2026 It then continually measures the response time and packet loss at each hop, and
2027 displays the results in real time.")
2028     (license license:gpl2+)))
2029
2030 (define-public strongswan
2031   (package
2032     (name "strongswan")
2033     (version "5.8.2")
2034     (source
2035      (origin
2036        (method url-fetch)
2037        (uri (string-append "https://download.strongswan.org/strongswan-"
2038                            version ".tar.bz2"))
2039        (sha256
2040         (base32 "03j3fx357bh89n44a5v9wdc92azdx2d37j7jmlyr4z1kwzdhv446"))))
2041     (build-system gnu-build-system)
2042     (arguments
2043      `(#:phases
2044        (modify-phases %standard-phases
2045          (add-before 'build 'patch-command-file-names
2046            (lambda* (#:key inputs #:allow-other-keys)
2047              (substitute* "src/libstrongswan/utils/process.c"
2048                (("/bin/sh")
2049                 (string-append (assoc-ref inputs "bash") "/bin/sh")))
2050
2051              (substitute* "src/libstrongswan/tests/suites/test_process.c"
2052                (("/bin/sh") (which "sh"))
2053                (("/bin/echo") (which "echo"))
2054                (("cat") (which "cat")))
2055              #t))
2056          (add-before 'check 'set-up-test-environment
2057            (lambda* (#:key inputs #:allow-other-keys)
2058              (setenv "TZDIR" (string-append (assoc-ref inputs "tzdata")
2059                                             "/share/zoneinfo"))
2060              #t)))
2061        #:configure-flags
2062        (list
2063         ;; Disable bsd-4 licensed plugins.
2064         "--disable-des"
2065         "--disable-blowfish")))
2066     (inputs
2067      `(("curl" ,curl)
2068        ("gmp" ,gmp)
2069        ("libgcrypt" ,libgcrypt)
2070        ("openssl" ,openssl)))
2071     (native-inputs
2072      `(("coreutils" ,coreutils)
2073        ("tzdata" ,tzdata-for-tests)))
2074     (synopsis "IKEv1/v2 keying daemon")
2075     (description "StrongSwan is an IPsec implementation originally based upon
2076 the FreeS/WAN project.  It contains support for IKEv1, IKEv2, MOBIKE, IPv6,
2077 NAT-T and more.")
2078     (home-page "https://strongswan.org/")
2079     (license
2080      (list license:gpl2+
2081            ;; src/aikgen/*
2082            ;; src/libcharon/plugins/dnscert/*
2083            ;; src/libcharon/plugins/ext_auth/*
2084            ;; src/libcharon/plugins/vici/ruby/*
2085            ;; src/libcharon/plugins/xauth_pam/xauth_pam_listener.[ch]
2086            license:expat
2087            ;; src/inclue/sys/*
2088            license:bsd-3
2089            ;; src/libstrongswan/plugins/sha3/sha3_keccak.c
2090            license:public-domain
2091            ;; src/libstrongswan/plugins/pkcs11/pkcs11.h
2092            (license:non-copyleft
2093             "file://src/libstrongswan/plugins/pkcs11/pkcs11.h"
2094             "pkcs11 contains a unknown permissive license. View the specific
2095 file for more details.")
2096            ;; These files are not included in the
2097            ;; build, they are disabled through
2098            ;; options to ./configure
2099            ;;
2100            ;; src/libstrongswan/plugins/blowfish/bf_enc.c
2101            ;; src/libstrongswan/plugins/blowfish/bf_locl.h
2102            ;; src/libstrongswan/plugins/blowfish/bf_pi.h
2103            ;; src/libstrongswan/plugins/blowfish/bf_skey.c
2104            ;; src/libstrongswan/plugins/blowfish/blowfish_crypter.c
2105            ;; src/libstrongswan/plugins/des/des_crypter.c
2106            license:bsd-4))))
2107
2108 (define-public amule
2109   (package
2110     (name "amule")
2111     (version "2.3.2")
2112     (source (origin
2113               (method git-fetch)
2114               (uri (git-reference
2115                      (url "https://github.com/amule-project/amule")
2116                      (commit version)))
2117               (file-name (git-file-name name version))
2118               (sha256
2119                (base32
2120                 "010wxm6g9f92x6fympj501zbnjka32rzbx0sk3a2y4zpih5d2nsn"))
2121               ;; Patch for adopting crypto++ >= 6.0.
2122               (patches (search-patches "amule-crypto-6.patch"))))
2123     (build-system gnu-build-system)
2124     (arguments
2125      `(#:phases
2126        (modify-phases %standard-phases
2127          (delete 'bootstrap) ; bootstrap phase runs too early.
2128          (add-after 'patch-source-shebangs 'autogen
2129            (lambda _
2130              (invoke "sh" "autogen.sh")
2131              #t)))
2132        #:configure-flags
2133        '("--disable-rpath"
2134          "--enable-wxcas"
2135          "--enable-cas"
2136          "--enable-alc"
2137          "--enable-alcc"
2138          "--enable-xas"
2139          "--enable-amulecmd"
2140          "--enable-geoip"
2141          "--enable-ccache"
2142          "--enable-nls"
2143          "--enable-optimize"
2144          "--enable-amule-gui"
2145          "--enable-amule-daemon"
2146          "--enable-webserver"
2147          "--with-denoise-level=0")))
2148     (native-inputs
2149      `(("autoconf" ,autoconf)
2150        ("automake" ,automake)
2151        ("gettext-minimal" ,gettext-minimal)
2152        ("perl" ,perl)))
2153     (inputs
2154      `(("zlib" ,zlib)
2155        ("crypto++" ,crypto++)
2156        ("libpng" ,libpng)
2157        ("wxwidgets-gtk2" ,wxwidgets-gtk2)))
2158     (home-page "http://amule.org/")
2159     (synopsis "Peer-to-peer client for the eD2K and Kademlia networks")
2160     (description
2161      "aMule is an eMule-like client for the eD2k and Kademlia peer-to-peer
2162 file sharing networks.  It includes a graphical user interface (GUI), a daemon
2163 allowing you to run a client with no graphical interface, and a Web GUI for
2164 remote access.  The @command{amulecmd} command allows you to control aMule
2165 remotely.")
2166     (license license:gpl2+)))
2167
2168 (define-public zyre
2169   (package
2170     (name "zyre")
2171     (version "2.0.0")
2172     (source (origin
2173               (method url-fetch)
2174               (uri
2175                (string-append "https://github.com/zeromq/zyre/releases/download/v"
2176                               version "/" name "-" version ".tar.gz"))
2177               (sha256
2178                (base32
2179                 "0qz2730bng1gs9xbqxhkw88qbsmszgmmrl2g9k6xrg6r3bqvsdc7"))))
2180     (build-system gnu-build-system)
2181     (arguments
2182      `(;; Ensure the kernel headers are treated as system headers to suppress
2183        ;; harmless -Werror=pedantic warnings.
2184        #:make-flags (list (string-append "C_INCLUDE_PATH="
2185                                          (assoc-ref %build-inputs "kernel-headers")
2186                                          "/include"))))
2187     (inputs `(("zeromq" ,zeromq)
2188               ("czmq" ,czmq)
2189               ("libsodium" ,libsodium)))
2190     (synopsis "Framework for proximity-based peer-to-peer applications")
2191     (description "Zyre provides reliable group messaging over local area
2192 networks using zeromq.  It has these key characteristics:
2193
2194 @itemize
2195 @item Zyre needs no administration or configuration.
2196 @item Peers may join and leave the network at any time.
2197 @item Peers talk to each other without any central brokers or servers.
2198 @item Peers can talk directly to each other.
2199 @item Peers can join groups, and then talk to groups.
2200 @item Zyre is reliable, and loses no messages even when the network is heavily loaded.
2201 @item Zyre is fast and has low latency, requiring no consensus protocols.
2202 @item Zyre is designed for WiFi networks, yet also works well on Ethernet networks.
2203 @end itemize")
2204     (home-page "https://github.com/zeromq/zyre")
2205     (license license:mpl2.0)))
2206
2207 (define-public can-utils
2208   (package
2209     (name "can-utils")
2210     (version "2018.02.0")
2211     (source (origin
2212               (method git-fetch)
2213               (uri (git-reference
2214                     (url "https://github.com/linux-can/can-utils.git")
2215                     (commit (string-append "v" version))))
2216               (file-name (git-file-name name version))
2217               (sha256
2218                (base32
2219                 "0r0zkm67bdcmbfypjr7z041d4zp0xzb379dyl8cvhmflh12fd2jb"))))
2220     (build-system gnu-build-system)
2221     (arguments
2222      `(#:tests? #f                      ; No tests exist.
2223        #:make-flags (list "CC=gcc"
2224                           (string-append "PREFIX="
2225                                          (assoc-ref %outputs "out")))
2226        #:phases
2227        (modify-phases %standard-phases
2228          (delete 'bootstrap)
2229          (delete 'configure))))
2230     (home-page "https://github.com/linux-can/can-utils")
2231     (synopsis "CAN utilities")
2232     (description "This package provides CAN utilities in the following areas:
2233
2234 @itemize
2235 @item Basic tools to display, record, generate and replay CAN traffic
2236 @item CAN access via IP sockets
2237 @item CAN in-kernel gateway configuration
2238 @item CAN bus measurement and testing
2239 @item ISO-TP (ISO15765-2:2016 - this means messages with a body larger than
2240 eight bytes) tools
2241 @item Log file converters
2242 @item Serial Line Discipline configuration for slcan driver
2243 @end itemize")
2244     ;; Either BSD-3 or GPL-2 can be used.
2245     (license (list license:bsd-3 license:gpl2))))
2246
2247 (define-public asio
2248   (package
2249     (name "asio")
2250     (version "1.12.2")
2251     (source
2252      (origin
2253        (method url-fetch)
2254        (uri (string-append "mirror://sourceforge/asio/asio/"
2255                            version " (Stable)/asio-" version ".tar.bz2"))
2256        (sha256
2257         (base32 "1akray4l3hgahmb92sbvsqg128c7g7s92jrkf1sp1fjnfjrxq9sf"))))
2258     (build-system gnu-build-system)
2259     (inputs
2260      `(("boost" ,boost)
2261        ("openssl" ,openssl)))
2262     (arguments
2263      `(#:configure-flags
2264        (list
2265         (string-append "--with-boost=" (assoc-ref %build-inputs "boost"))
2266         (string-append "--with-openssl=" (assoc-ref %build-inputs "openssl")))))
2267     (home-page "https://think-async.com/Asio")
2268     (synopsis "C++ library for ASynchronous network I/O")
2269     (description "Asio is a cross-platform C++ library for network and
2270 low-level I/O programming that provides developers with a consistent
2271 asynchronous model using a modern C++ approach.")
2272     (license license:boost1.0)))
2273
2274 (define-public shadowsocks
2275   ;; There are some security fixes after the last release.
2276   (let* ((commit "e332ec93e9c90f1cbee676b022bf2c5d5b7b1239")
2277          (revision "0")
2278          (version (git-version "2.8.2" revision commit)))
2279     (package
2280       (name "shadowsocks")
2281       (version version)
2282       (home-page "https://github.com/shadowsocks/shadowsocks")
2283       (source (origin
2284                 (method git-fetch)
2285                 (uri (git-reference
2286                       (url home-page)
2287                       (commit commit)))
2288                 (sha256
2289                  (base32
2290                   "1idd9b4f2pnhcpk1bh030hqg5zq25gkwxd53xi3c0cj242w7sp2j"))
2291                 (file-name (git-file-name name version))))
2292       (build-system python-build-system)
2293       (synopsis "Fast tunnel proxy that helps you bypass firewalls")
2294       (description
2295        "This package is a fast tunnel proxy that helps you bypass firewalls.
2296
2297 Features:
2298 @itemize
2299 @item TCP & UDP support
2300 @item User management API
2301 @item TCP Fast Open
2302 @item Workers and graceful restart
2303 @item Destination IP blacklist
2304 @end itemize")
2305       (license license:asl2.0))))
2306
2307 (define-public net-snmp
2308   (package
2309     (name "net-snmp")
2310     (version "5.8")
2311     (source (origin
2312               (method url-fetch)
2313               (uri (string-append "mirror://sourceforge/net-snmp/net-snmp/"
2314                                   version "/net-snmp-" version ".tar.gz"))
2315               (sha256
2316                (base32
2317                 "1pvajzj9gmj56dmwix0ywmkmy2pglh6nny646hkm7ghfhh03bz5j"))
2318               (modules '((guix build utils)))
2319               (snippet
2320                '(begin
2321                   ;; Drop bundled libraries.
2322                   (delete-file-recursively "snmplib/openssl")
2323                   #t))))
2324     (build-system gnu-build-system)
2325     (arguments
2326      `(#:test-target "test"
2327        ;; XXX: With parallel build enabled, Perl modules may not get linked with
2328        ;; libnetsnmp.  See e.g. <https://bugzilla.novell.com/show_bug.cgi?id=819497>.
2329        #:parallel-build? #f
2330        #:configure-flags
2331        (list (string-append "LDFLAGS=-Wl,-rpath="
2332                             (assoc-ref %outputs "out")
2333                             "/lib")
2334              "--with-logfile=/var/log/snmpd.log"
2335              (string-append "--with-openssl="
2336                             (assoc-ref %build-inputs "openssl")))
2337        #:phases
2338        (modify-phases %standard-phases
2339          (add-after 'unpack 'patch-tests
2340            (lambda* (#:key inputs #:allow-other-keys)
2341              (substitute* "testing/fulltests/support/simple_TESTCONF.sh"
2342                (("NETSTAT=\"\"")
2343                 (string-append "NETSTAT=\"" (which "netstat") "\"")))
2344              (substitute* '("testing/fulltests/default/T065agentextend_simple"
2345                             "testing/fulltests/default/T115agentxperl_simple")
2346                (("/usr/bin/env") (which "env")))
2347              (substitute* "testing/fulltests/default/T065agentextend_sh_simple"
2348                (("/bin/sh") (which "sh")))
2349              ;; These tests require network access.
2350              (for-each delete-file
2351                        '("testing/fulltests/default/T070com2sec_simple"
2352                          "testing/fulltests/default/T071com2sec6_simple"))
2353              #t))
2354          (add-after 'unpack 'patch-Makefile.PL
2355            (lambda* (#:key outputs #:allow-other-keys)
2356              (substitute* "Makefile.in"
2357                (("Makefile.PL -NET")
2358                 (string-append "Makefile.PL PREFIX="
2359                                (assoc-ref outputs "out")
2360                                " INSTALLDIRS=site" " NO_PERLLOCAL=1"
2361                                " -NET")))
2362              #t)))))
2363     (inputs
2364      `(("perl" ,perl)
2365        ("openssl" ,openssl)
2366        ("libnl" ,libnl)))
2367     ;; These inputs are only needed for tests.
2368     (native-inputs
2369      `(("net-tools" ,net-tools)
2370        ("coreutils" ,coreutils)
2371        ("grep" ,grep)))
2372     (home-page "http://www.net-snmp.org/")
2373     (synopsis "Simple Network Management Protocol library and tools")
2374     (description "The @dfn{Simple Network Management Protocol} (SNMP) is a
2375 widely used protocol for monitoring the health and welfare of network
2376 equipment (e.g. routers), computer equipment and even devices like UPSs.
2377 Net-SNMP is a suite of applications used to implement SNMP v1, SNMP v2c and
2378 SNMP v3 using both IPv4 and IPv6.")
2379     ;; This only affects OpenBSD
2380     ;; https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8100
2381     (properties `((lint-hidden-cve . ("CVE-2015-8100"))))
2382     (license (list license:bsd-3
2383                    (license:non-copyleft
2384                     "http://www.net-snmp.org/about/license.html"
2385                     "CMU/UCD copyright notice")))))
2386
2387 (define-public ubridge
2388   (package
2389     (name "ubridge")
2390     (version "0.9.16")
2391     (source
2392      (origin
2393        (method git-fetch)
2394        (uri (git-reference
2395              (url "https://github.com/GNS3/ubridge.git")
2396              (commit (string-append "v" version))))
2397        (file-name (git-file-name name version))
2398        (sha256
2399         (base32 "1bind7ylgxs743vfdmpdrpp4iamy461bc3i7nxza91kj7hyyjz6h"))))
2400     (build-system gnu-build-system)
2401     (arguments
2402      `(#:tests? #f                      ; no tests
2403        #:make-flags '("CC=gcc")
2404        #:phases
2405        (modify-phases %standard-phases
2406          (delete 'configure)            ; no configure script
2407          (add-before 'install 'set-bindir
2408            (lambda* (#:key  inputs outputs #:allow-other-keys)
2409              (let ((bin (string-append (assoc-ref outputs "out")
2410                                        "/bin")))
2411                (mkdir-p bin)
2412                (substitute* "Makefile"
2413                  (("\\$\\(BINDIR\\)") bin)
2414                  (("\tsetcap cap_net.*$") "")))
2415              #t)))))
2416     (inputs
2417      `(("libpcap" ,libpcap)))
2418     (home-page "https://github.com/GNS3/ubridge/")
2419     (synopsis "Bridge for UDP tunnels, Ethernet, TAP and VMnet interfaces")
2420     (description "uBridge is a simple program to create user-land bridges
2421 between various technologies.  Currently, bridging between UDP tunnels,
2422 Ethernet and TAP interfaces is supported.  Packet capture is also supported.")
2423     (license license:gpl3+)))
2424
2425 (define-public hcxtools
2426   (package
2427     (name "hcxtools")
2428     (version "5.2.0")
2429     (source
2430      (origin
2431        (method git-fetch)
2432        (uri (git-reference
2433              (url "https://github.com/ZerBea/hcxtools.git")
2434              (commit version)))
2435        (sha256
2436         (base32 "0k2qlq9hz5zc21nyc6yrnfqzga7hydn5mm0x3rpl2fhkwl81lxcn"))
2437        (file-name (git-file-name name version))))
2438     (build-system gnu-build-system)
2439     (inputs
2440      `(("curl" ,curl)
2441        ("libpcap" ,libpcap)
2442        ("openssl" ,openssl)
2443        ("zlib" ,zlib)))
2444     (arguments
2445      `(#:make-flags
2446        (list "CC=gcc"
2447              (string-append "INSTALLDIR=" (assoc-ref %outputs "out") "/bin"))
2448        #:tests? #f                      ; no test suite
2449        #:phases
2450        (modify-phases %standard-phases
2451          (delete 'configure)
2452          (add-after 'unpack 'set-environment
2453            (lambda* (#:key inputs #:allow-other-keys)
2454              (setenv "C_INCLUDE_PATH"
2455                      (string-append (assoc-ref inputs "curl") "/include:"
2456                                     (assoc-ref inputs "libpcap") "/include:"
2457                                     (assoc-ref inputs "openssl") "/include:"
2458                                     (assoc-ref inputs "zlib") "/include"))
2459              #t)))))
2460     (home-page "https://github.com/ZerBea/hcxtools")
2461     (synopsis "Capture wlan traffic to hashcat and John the Ripper")
2462     (description
2463      "This package contains a small set of tools to capture and convert
2464 packets from wireless devices for use with hashcat or John the Ripper.")
2465     (license license:expat)))
2466
2467 (define-public hcxdumptool
2468   (package
2469     (name "hcxdumptool")
2470     (version "5.2.0")
2471     (source
2472      (origin
2473        (method git-fetch)
2474        (uri (git-reference
2475              (url "https://github.com/ZerBea/hcxdumptool.git")
2476              (commit version)))
2477        (sha256
2478         (base32 "0pg1pvg029gm4rj0fj5kcsjb32hixgn4cxsgiir7spkmacf1qm4q"))
2479        (file-name (git-file-name name version))))
2480     (build-system gnu-build-system)
2481     (arguments
2482      `(#:make-flags
2483        (list "CC=gcc"
2484              (string-append "INSTALLDIR=" (assoc-ref %outputs "out") "/bin"))
2485        #:tests? #f                      ; no test suite
2486        #:phases
2487        (modify-phases %standard-phases
2488          (delete 'configure))))
2489     (home-page "https://github.com/ZerBea/hcxdumptool")
2490     (synopsis "Small tool to capture packets from wlan devices")
2491     (description
2492      "Small tool to capture packets from WLAN devices.  After capturing,
2493 upload the \"uncleaned\" cap to @url{https://wpa-sec.stanev.org/?submit} to
2494 see if the access point or the client is vulnerable to a dictionary attack.
2495 Convert the cap file to hccapx format and/or to WPA-PMKID-PBKDF2
2496 hashline (16800) with @command{hcxpcaptool} from the @code{hcxtools} package
2497 and check if the WLAN key or the master key was transmitted unencrypted.")
2498     (license license:expat)))
2499
2500 (define-public dante
2501   (package
2502     (name "dante")
2503     (version "1.4.2")
2504     (source
2505      (origin
2506        (method url-fetch)
2507        (uri (string-append "https://www.inet.no/dante/files/dante-"
2508                            version ".tar.gz"))
2509        (sha256
2510         (base32
2511          "19rqzj167q73ag20zxpvswhkk0bj56r5maf83v5016sw7vrcz5sc"))))
2512     (build-system gnu-build-system)
2513     (arguments
2514      ;; XXX: The dynamic socks library doesn't work with 'libc.so' (GNU ld
2515      ;; script).  When preloading is enabled, 'sockd' failed with:
2516      ;;    … Failed to open library "libc.so": …: invalid ELF header
2517      '(#:configure-flags '("--disable-preload")))
2518     (home-page "https://www.inet.no/dante/")
2519     (synopsis "SOCKS server and client")
2520     (description "Dante is a SOCKS client and server implementation.  It can
2521 be installed on a machine with access to an external TCP/IP network and will
2522 allow all other machines, without direct access to that network, to be relayed
2523 through the machine the Dante server is running on.  The external network will
2524 never see any machines other than the one Dante is running on.")
2525     (license (license:non-copyleft "file://LICENSE"))))
2526
2527 (define-public restbed
2528   (let ((commit "6eb385fa9051203f28bf96cc1844bbb5a9a6481f"))
2529     (package
2530       (name "restbed")
2531       (version (git-version "4.6" "1" commit))
2532       (source
2533        (origin
2534          (method git-fetch)
2535          (uri (git-reference
2536                (url "https://github.com/Corvusoft/restbed/")
2537                (commit commit)))
2538          (file-name (string-append name "-" version ".tar.gz"))
2539          (sha256
2540           (base32 "0k60i5drklqqrb4khb25fzkgz9y0sncxf1sp6lh2bm1m0gh0661n"))))
2541       (build-system cmake-build-system)
2542       (inputs
2543        `(("asio" ,asio)
2544          ("catch" ,catch-framework)
2545          ("openssl" ,openssl)))
2546       (arguments
2547        `(#:tests? #f
2548          #:configure-flags
2549          '("-DBUILD_TESTS=NO"
2550            "-DBUILD_EXAMPLES=NO"
2551            "-DBUILD_SSL=NO"
2552            "-DBUILD_SHARED=NO")
2553          #:phases
2554          (modify-phases %standard-phases
2555            (add-after 'unpack 'apply-patches-and-fix-paths
2556              (lambda* (#:key inputs #:allow-other-keys)
2557                (let ((asio (assoc-ref inputs "asio"))
2558                      (catch (assoc-ref inputs "catch"))
2559                      (openssl (assoc-ref inputs "openssl")))
2560                  (substitute* "cmake/Findasio.cmake"
2561                    (("(find_path\\( asio_INCLUDE asio\\.hpp HINTS ).*$" all begin)
2562                     (string-append begin " \"" asio "/include\" )")))
2563                  (substitute* "cmake/Findcatch.cmake"
2564                    (("(find_path\\( catch_INCLUDE catch\\.hpp HINTS ).*$" all begin)
2565                     (string-append begin " \"" catch "/include\" )")))
2566                  (substitute* "cmake/Findopenssl.cmake"
2567                    (("(find_library\\( ssl_LIBRARY ssl ssleay32 HINTS ).*$" all begin)
2568                     (string-append begin " \"" openssl "/lib\" )"))
2569                    (("(find_library\\( crypto_LIBRARY crypto libeay32 HINTS ).*$" all begin)
2570                     (string-append begin " \"" openssl "/lib\" )"))
2571                    (("(find_path\\( ssl_INCLUDE openssl/ssl\\.h HINTS ).*$" all begin)
2572                     (string-append begin " \"" openssl "/include\" )")))))))))
2573       (synopsis "Asynchronous RESTful functionality to C++11 applications")
2574       (description "Restbed is a comprehensive and consistent programming
2575 model for building applications that require seamless and secure
2576 communication over HTTP.")
2577       (home-page "https://github.com/Corvusoft/restbed")
2578       (license license:agpl3+))))
2579
2580 (define-public restinio
2581   (package
2582     (name "restinio")
2583     (version "0.6.0.1")
2584     (source (origin
2585               (method git-fetch)
2586               (uri (git-reference
2587                     (url "https://github.com/Stiffstream/restinio.git")
2588                     (commit (string-append "v." version))))
2589               (file-name (git-file-name name version))
2590               (sha256
2591                (base32
2592                 "1c25kpx652nng8m1sqf5an2c3c4g3k6zj85mkkaxzk88iwfzq1s8"))))
2593     (build-system cmake-build-system)
2594     (inputs                             ; TODO: Need to force-keep references on some inputs, e.g. boost.
2595      `(("zlib" ,zlib)
2596        ("catch2" ,catch-framework2)
2597        ("openssl" ,openssl)
2598        ("boost" ,boost)
2599        ("pcre" ,pcre)
2600        ("pcre2" ,pcre2)
2601        ("sobjectizer" ,sobjectizer)))
2602     (propagated-inputs
2603      `(("asio", asio)
2604        ("fmt" ,fmt)
2605        ("http-parser", http-parser)))
2606     (arguments
2607      `(#:configure-flags '("-DRESTINIO_INSTALL=on")
2608        #:tests? #f ; TODO: The tests are called from the root CMakelist, need RESTINIO_TEST=on.
2609        #:phases
2610        (modify-phases %standard-phases
2611          (add-after 'unpack 'change-directory
2612            (lambda _
2613              (chdir "dev/restinio")
2614              #t)))))
2615     (home-page "https://stiffstream.com/en/products/restinio.html")
2616     (synopsis "C++14 library that gives you an embedded HTTP/Websocket server")
2617     (description "RESTinio is a header-only C++14 library that gives you an embedded
2618 HTTP/Websocket server.  It is based on standalone version of ASIO
2619 and targeted primarily for asynchronous processing of HTTP-requests.")
2620     (license license:bsd-3)))
2621
2622 (define-public opendht
2623   (package
2624     (name "opendht")
2625     (version "2.0.0beta2")
2626     (source (origin
2627               (method git-fetch)
2628               (uri (git-reference
2629                     (url "https://github.com/savoirfairelinux/opendht.git")
2630                     (commit version)))
2631               (file-name (git-file-name name version))
2632               (sha256
2633                (base32
2634                 "02ix0rvvyhq22gd5djcq84qz08ji7ln93faf23b27zjzni2klzv5"))))
2635     ;; Since 2.0, the gnu-build-system does not seem to work anymore, upstream bug?
2636     (build-system cmake-build-system)
2637     (inputs
2638      `(("gnutls" ,gnutls)
2639        ("nettle" ,nettle)
2640        ("readline" ,readline)
2641        ("jsoncpp" ,jsoncpp)
2642        ("openssl" ,openssl)
2643        ("fmt" ,fmt)))
2644     (propagated-inputs
2645      `(("argon2" ,argon2)  ; TODO: Needed for the pkg-config .pc file to work?
2646        ("msgpack" ,msgpack)))           ;included in several installed headers
2647     (native-inputs
2648      `(("autoconf" ,autoconf)
2649        ("pkg-config" ,pkg-config)
2650        ("restinio" ,restinio)
2651        ("automake" ,automake)
2652        ("libtool" ,libtool)
2653        ("cppunit" ,cppunit)))
2654     (arguments
2655      `(#:tests? #f                      ; Tests require network connection.
2656        #:configure-flags
2657        '(;; "-DOPENDHT_TESTS=on"
2658          "-DOPENDHT_TOOLS=off"
2659          "-DOPENDHT_PYTHON=off"
2660          "-DOPENDHT_PROXY_SERVER=on"
2661          "-DOPENDHT_PUSH_NOTIFICATIONS=on"
2662          "-DOPENDHT_PROXY_SERVER_IDENTITY=on"
2663          "-DOPENDHT_PROXY_CLIENT=on")))
2664     (home-page "https://github.com/savoirfairelinux/opendht/")
2665     (synopsis "Distributed Hash Table (DHT) library")
2666     (description "OpenDHT is a Distributed Hash Table (DHT) library.  It may
2667 be used to manage peer-to-peer network connections as needed for real time
2668 communication.")
2669     (license license:gpl3+)))
2670
2671 (define-public frrouting
2672   (package
2673     (name "frrouting")
2674     (version "6.0.2")
2675     (source (origin
2676               (method url-fetch)
2677               (uri (string-append "https://github.com/FRRouting/frr/releases/"
2678                                   "download/frr-" version "/frr-" version
2679                                   ".tar.xz"))
2680               (sha256
2681                (base32
2682                 "0xfrvi62w8qlh46f504ka0skb7pm0g0p8vmdng4w90gsbirlzpdd"))))
2683     (build-system gnu-build-system)
2684     (inputs
2685      `(("c-ares" ,c-ares)
2686        ("json-c" ,json-c)
2687        ("readline" ,readline)))
2688     (native-inputs
2689      `(("perl" ,perl)
2690        ("pkg-config" ,pkg-config)
2691        ("python" ,python-wrapper)
2692        ("python-pytest" ,python-pytest)))
2693     (home-page "https://frrouting.org/")
2694     (synopsis "IP routing protocol suite")
2695     (description "FRRouting (FRR) is an IP routing protocol suite which includes
2696 protocol daemons for BGP, IS-IS, LDP, OSPF, PIM, and RIP. ")
2697     (license license:gpl2+)))
2698
2699 (define-public iwd
2700   (package
2701     (name "iwd")
2702     (version "0.21")
2703     (source (origin
2704               (method git-fetch)
2705               (uri (git-reference
2706                     (url "https://git.kernel.org/pub/scm/network/wireless/iwd.git")
2707                     (commit version)))
2708               (file-name (git-file-name name version))
2709               (sha256
2710                (base32
2711                 "001dikinsa6kshwscjbvwipavzwpqnpvx9fpshcn63gbvbhyd393"))))
2712     (build-system gnu-build-system)
2713     (inputs
2714      `(("dbus" ,dbus)
2715        ("libtool" ,libtool)
2716        ("ell" ,ell)
2717        ("readline" ,readline)))
2718     (native-inputs
2719      `(("asciidoc" ,asciidoc)
2720        ("autoconf" ,autoconf)
2721        ("automake" ,automake)
2722        ("pkgconfig" ,pkg-config)
2723        ("python" ,python)
2724        ("openssl" ,openssl)))
2725     (arguments
2726      `(#:configure-flags
2727        (let ((dbus (assoc-ref %outputs "out")))
2728          (list "--disable-systemd-service"
2729                "--enable-external-ell"
2730                "--enable-hwsim"
2731                "--enable-tools"
2732                "--enable-wired"
2733                "--enable-docs"
2734                "--localstatedir=/var"
2735                (string-append "--with-dbus-datadir=" dbus "/share/")
2736                (string-append "--with-dbus-busdir="
2737                               dbus "/share/dbus-1/system-services")))
2738        #:phases
2739        (modify-phases %standard-phases
2740          (add-before 'bootstrap 'pre-bootstrap
2741            (lambda _
2742              (substitute* "Makefile.am"
2743                ;; Test disabled because it needs the kernel module
2744                ;; 'pkcs8_key_parser' loaded.
2745                (("unit\\/test-eapol.*? ") "")
2746                ;; Don't try to 'mkdir /var'.
2747                (("\\$\\(MKDIR_P\\) -m 700") "true"))
2748              #t)))))
2749     (home-page "https://git.kernel.org/pub/scm/network/wireless/iwd.git/")
2750     (synopsis "Internet Wireless Daemon")
2751     (description "iwd is a wireless daemon for Linux that aims to replace WPA
2752 Supplicant.  It optimizes resource utilization by not depending on any external
2753 libraries and instead utilizing features provided by the Linux kernel to the
2754 maximum extent possible.")
2755     (license license:lgpl2.1+)))
2756
2757 (define-public batctl
2758   (package
2759    (name "batctl")
2760    (version "2020.0")
2761    (source
2762     (origin
2763      (method url-fetch)
2764      (uri (string-append "https://downloads.open-mesh.org/batman/releases/batman-adv-"
2765                          version "/batctl-" version ".tar.gz"))
2766      (sha256
2767       (base32 "01414ywhlb2b9ng9d5kd5rr1s7wzvi234j8hj6ra2spn92qykvv0"))))
2768    (inputs
2769     `(("libnl" ,libnl)))
2770    (native-inputs
2771     `(("pkg-config" ,pkg-config)))
2772    (build-system gnu-build-system)
2773    (arguments
2774     `(#:tests? #f
2775       ;; Batctl only has a makefile. Thus we disable tests and
2776       ;; configuration, passing in a few make-flags.
2777       #:phases (modify-phases %standard-phases (delete 'configure))
2778       #:make-flags
2779       (list (string-append "PREFIX=" (assoc-ref %outputs "out"))
2780             (string-append "PKG_CONFIG=" (assoc-ref %build-inputs "pkg-config")
2781                            "/bin/pkg-config")
2782             "CC=gcc")))
2783    (home-page "https://www.open-mesh.org/projects/batman-adv/wiki/Wiki")
2784    (synopsis "Management tool for the mesh networking BATMAN protocol")
2785    (description "This package provides a control tool for the
2786 B.A.T.M.A.N. mesh networking routing protocol provided by the Linux kernel
2787 module @code{batman-adv}, for Layer 2.")
2788    (license license:gpl2+)))
2789
2790 (define-public pagekite
2791   (package
2792     (name "pagekite")
2793     (version "1.5.0.200327")
2794     (source
2795      (origin
2796        (method git-fetch)
2797        (uri (git-reference
2798              (url "https://github.com/pagekite/PyPagekite.git")
2799              (commit (string-append "v" version))))
2800        (file-name (git-file-name name version))
2801        (sha256
2802         (base32 "1vw7kjwxqd3qvm7kpxgjzl6797y0i1f16yfkfad84qpx2ij0gvdm"))))
2803     (build-system python-build-system)
2804     (arguments
2805      `(#:phases
2806        (modify-phases %standard-phases
2807          (add-after 'install 'install-man-page
2808            (lambda* (#:key inputs outputs #:allow-other-keys)
2809              (let* ((out (assoc-ref outputs "out"))
2810                     (man (string-append out "/share/man")))
2811                (invoke "make"
2812                        (string-append "PYTHONPATH=" (getenv "PYTHONPATH"))
2813                        "doc/pagekite.1")
2814                (install-file "doc/pagekite.1" (string-append man "/man1"))
2815                #t))))))
2816     (inputs
2817      `(("python-six" ,python-six)
2818        ("python-socksipychain" ,python-socksipychain)))
2819     (home-page "https://pagekite.net/")
2820     (synopsis "Make localhost servers publicly visible")
2821     (description
2822      "PageKite implements a tunneled reverse proxy which makes it easy to make
2823 a service (such as an HTTP or SSH server) on localhost visible to the wider
2824 Internet, even behind NAT or restrictive firewalls.  A managed front-end relay
2825 service is available at @url{https://pagekite.net/}, or you can run your own.")
2826     (license license:agpl3+)))
2827
2828 (define-public ipcalc
2829   (package
2830     (name "ipcalc")
2831     (version "0.41")
2832     (source (origin
2833               (method url-fetch)
2834               (uri (string-append "http://jodies.de/ipcalc-archive/"
2835                                   name "-" version ".tar.gz"))
2836               (sha256
2837                (base32
2838                 "12if9sm8h2ac0pgwkw835cgyqjxm6h27k4kfn2vfas9krrqwbafx"))))
2839     (inputs `(("perl" ,perl)
2840               ("tar" ,tar)
2841               ("gzip" ,gzip)
2842               ("tarball" ,source)))
2843     (build-system trivial-build-system) ;no Makefile.PL
2844     (arguments
2845      `(#:modules ((guix build utils))
2846        #:builder
2847        (begin
2848          (use-modules (guix build utils))
2849          (use-modules (srfi srfi-1))
2850          (let* ((source (assoc-ref %build-inputs "source"))
2851                 (perl (string-append (assoc-ref %build-inputs "perl")
2852                                      "/bin"))
2853                 (tar (assoc-ref %build-inputs "tar"))
2854                 (gz  (assoc-ref %build-inputs "gzip"))
2855                 (out (assoc-ref %outputs "out"))
2856                 (bin (string-append out "/bin"))
2857                 (doc (string-append out "/share/doc/ipcalc")))
2858            (setenv "PATH" (string-append gz "/bin"))
2859            (invoke (string-append tar "/bin/tar") "xvf" source)
2860            (chdir (string-append ,name "-" ,version))
2861
2862            (install-file "ipcalc" bin)
2863            (patch-shebang (string-append bin "/ipcalc") (list perl))
2864            #t))))
2865     (synopsis "Simple IP network calculator")
2866     (description "ipcalc takes an IP address and netmask and calculates the
2867 resulting broadcast, network, Cisco wildcard mask, and host range.  By giving
2868 a second netmask, you can design subnets and supernets.  It is also intended
2869 to be a teaching tool and presents the subnetting results as
2870 easy-to-understand binary values.")
2871     (home-page "http://jodies.de/ipcalc")
2872     (license license:gpl2+)))
2873
2874 (define-public tunctl
2875   (package
2876     (name "tunctl")
2877     (version "1.5")
2878     (source
2879      (origin
2880        (method url-fetch)
2881        (uri (string-append "mirror://sourceforge/tunctl/tunctl/" version "/"
2882                            "tunctl-" version ".tar.gz"))
2883        (sha256
2884         (base32 "1zsgn7w6l2zh2q0j6qaw8wsx981qcr536qlz1lgb3b5zqr66qama"))))
2885     (build-system gnu-build-system)
2886     (arguments
2887      `(#:phases
2888        (modify-phases %standard-phases
2889          (delete 'bootstrap)            ;there is no configure.ac file
2890          (delete 'configure)            ;there is no configure script
2891          (delete 'check)                ;there are no tests
2892          (replace 'build
2893            (lambda _
2894              (setenv "CC" "gcc")
2895              (invoke "make" "tunctl")))
2896          ;; TODO: Requires docbook2x to generate man page from SGML.
2897          (replace 'install
2898            (lambda* (#:key outputs #:allow-other-keys)
2899              (let* ((out (assoc-ref outputs "out"))
2900                     (bin (string-append out "/bin")))
2901                (install-file "tunctl" bin))
2902              #t)))))
2903     (home-page "http://tunctl.sourceforge.net")
2904     (synopsis  "Utility to set up and maintain TUN/TAP network interfaces")
2905     (description "Tunctl is used to set up and maintain persistent TUN/TAP
2906 network interfaces, enabling user applications to simulate network traffic.
2907 Such interfaces are useful for VPN software, virtualization, emulation,
2908 simulation, and a number of other applications.")
2909     (license license:gpl2)))
2910
2911 (define-public vde2
2912   (package
2913     (name "vde2")
2914     (version "2.3.2")
2915     (source
2916      (origin
2917        (method url-fetch)
2918        (uri "mirror://sourceforge/vde/vde2/2.3.2/vde2-2.3.2.tar.gz")
2919        (sha256
2920         (base32 "14xga0ib6p1wrv3hkl4sa89yzjxv7f1vfqaxsch87j6scdm59pr2"))))
2921     (build-system gnu-build-system)
2922     (arguments
2923      `(#:parallel-build? #f))           ; Build fails if #t.
2924     (inputs
2925      `(("python" ,python)
2926        ("libpcap" ,libpcap)
2927        ("openssl" ,openssl-1.0)))       ; Build fails with 1.1.
2928     (home-page "https://github.com/virtualsquare/vde-2")
2929     (synopsis "Virtual Distributed Ethernet")
2930     (description "VDE is a set of programs to provide virtual software-defined
2931 Ethernet network interface controllers across multiple virtual or
2932 physical, local or remote devices.  The VDE architecture provides
2933 virtual counterparts to hardware components such as switches and
2934 cables.")
2935     (license (list license:gpl2
2936                    license:lgpl2.1       ; libvdeplug
2937                    (license:non-copyleft ; slirpvde
2938                     "file://COPYING.slirpvde"
2939                     "See COPYING.slirpvde in the distribution.")))))
2940
2941 (define-public haproxy
2942   (package
2943     (name "haproxy")
2944     (version "2.1.3")
2945     (source (origin
2946               (method url-fetch)
2947               (uri (string-append "https://www.haproxy.org/download/"
2948                                   (version-major+minor version)
2949                                   "/src/haproxy-" version ".tar.gz"))
2950               (sha256
2951                (base32
2952                 "0n8bw3d6gikr8c56ycrvksp1sl0b4yfzp19867cxkl3l0daqwrxv"))))
2953     (build-system gnu-build-system)
2954     (arguments
2955      `(#:make-flags
2956        (let* ((out (assoc-ref %outputs "out")))
2957          (list (string-append "PREFIX=" out)
2958                (string-append "DOCDIR=" out "/share/" ,name)
2959                "TARGET=linux-glibc"
2960                "USE_LUA=1"
2961                "USE_OPENSSL=1"
2962                "USE_ZLIB=1"
2963                "USE_PCRE_2=1"))
2964        #:tests? #f  ; there are only regression tests, using varnishtest
2965        #:phases
2966        (modify-phases %standard-phases
2967          (delete 'configure))))
2968     (inputs
2969      `(("lua" ,lua)
2970        ("openssl" ,openssl)
2971        ("pcre2" ,pcre2)
2972        ("zlib" ,zlib)))
2973     (home-page "https://www.haproxy.org/")
2974     (synopsis "Reliable, high performance TCP/HTTP load balancer")
2975     (description "HAProxy is a free, very fast and reliable solution offering
2976 high availability, load balancing, and proxying for TCP and HTTP-based
2977 applications.  It is particularly suited for web sites crawling under very
2978 high loads while needing persistence or Layer7 processing.  Supporting tens of
2979 thousands of connections is clearly realistic with today's hardware.")
2980     (license (list license:gpl2+
2981                    license:lgpl2.1
2982                    license:lgpl2.1+))))