gnu/packages/networking.scm

   1 ;;; GNU Guix --- Functional package management for GNU
   2 ;;; Copyright © 2014, 2017 Ludovic Courtès <ludo@gnu.org>
   3 ;;; Copyright © 2015, 2016, 2017 Ricardo Wurmus <rekado@elephly.net>
   4 ;;; Copyright © 2015 Mark H Weaver <mhw@netris.org>
   5 ;;; Copyright © 2015, 2016, 2017 Stefan Reichör <stefan@xsteve.at>
   6 ;;; Copyright © 2016 Raimon Grau <raimonster@gmail.com>
   7 ;;; Copyright © 2016, 2017 Tobias Geerinckx-Rice <me@tobias.gr>
   8 ;;; Copyright © 2016 John Darrington <jmd@gnu.org>
   9 ;;; Copyright © 2016, 2017 Nicolas Goaziou <mail@nicolasgoaziou.fr>
  10 ;;; Copyright © 2016 Eric Bavier <bavier@member.fsf.org>
  11 ;;; Copyright © 2016, 2017 ng0 <ng0@infotropique.org>
  12 ;;; Copyright © 2016, 2017 Arun Isaac <arunisaac@systemreboot.net>
  13 ;;; Copyright © 2016 Benz Schenk <benz.schenk@uzh.ch>
  14 ;;; Copyright © 2016, 2017 Pjotr Prins <pjotr.guix@thebird.nl>
  15 ;;; Copyright © 2017 Mathieu Othacehe <m.othacehe@gmail.com>
  16 ;;; Copyright © 2017 Leo Famulari <leo@famulari.name>
  17 ;;; Copyright © 2017 Efraim Flashner <efraim@flashner.co.il>
  18 ;;; Copyright © 2017 Rutger Helling <rhelling@mykolab.com>
  19 ;;; Copyright © 2017 Gábor Boskovits <boskovits@gmail.com>
  20 ;;; Copyright © 2017 Thomas Danckaert <post@thomasdanckaert.be>
  21 ;;;
  22 ;;; This file is part of GNU Guix.
  23 ;;;
  24 ;;; GNU Guix is free software; you can redistribute it and/or modify it
  25 ;;; under the terms of the GNU General Public License as published by
  26 ;;; the Free Software Foundation; either version 3 of the License, or (at
  27 ;;; your option) any later version.
  28 ;;;
  29 ;;; GNU Guix is distributed in the hope that it will be useful, but
  30 ;;; WITHOUT ANY WARRANTY; without even the implied warranty of
  31 ;;; MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
  32 ;;; GNU General Public License for more details.
  33 ;;;
  34 ;;; You should have received a copy of the GNU General Public License
  35 ;;; along with GNU Guix.  If not, see <http://www.gnu.org/licenses/>.
  36
  37 (define-module (gnu packages networking)
  38   #:use-module ((guix licenses) #:prefix license:)
  39   #:use-module (guix packages)
  40   #:use-module (guix download)
  41   #:use-module (guix build-system cmake)
  42   #:use-module (guix build-system glib-or-gtk)
  43   #:use-module (guix build-system gnu)
  44   #:use-module (guix build-system perl)
  45   #:use-module (guix build-system python)
  46   #:use-module (gnu packages)
  47   #:use-module (gnu packages admin)
  48   #:use-module (gnu packages adns)
  49   #:use-module (gnu packages algebra)
  50   #:use-module (gnu packages audio)
  51   #:use-module (gnu packages autotools)
  52   #:use-module (gnu packages bison)
  53   #:use-module (gnu packages check)
  54   #:use-module (gnu packages code)
  55   #:use-module (gnu packages compression)
  56   #:use-module (gnu packages curl)
  57   #:use-module (gnu packages databases)
  58   #:use-module (gnu packages dejagnu)
  59   #:use-module (gnu packages documentation)
  60   #:use-module (gnu packages flex)
  61   #:use-module (gnu packages gettext)
  62   #:use-module (gnu packages glib)
  63   #:use-module (gnu packages gnome)
  64   #:use-module (gnu packages gnupg)
  65   #:use-module (gnu packages gtk)
  66   #:use-module (gnu packages libidn)
  67   #:use-module (gnu packages linux)
  68   #:use-module (gnu packages lua)
  69   #:use-module (gnu packages kerberos)
  70   #:use-module (gnu packages ncurses)
  71   #:use-module (gnu packages pcre)
  72   #:use-module (gnu packages perl)
  73   #:use-module (gnu packages perl-check)
  74   #:use-module (gnu packages pkg-config)
  75   #:use-module (gnu packages python)
  76   #:use-module (gnu packages qt)
  77   #:use-module (gnu packages readline)
  78   #:use-module (gnu packages ssh)
  79   #:use-module (gnu packages textutils)
  80   #:use-module (gnu packages tls)
  81   #:use-module (gnu packages valgrind)
  82   #:use-module (gnu packages wm)
  83   #:use-module (gnu packages xml)
  84   #:use-module (ice-9 match))
  85
  86 (define-public macchanger
  87   (package
  88     (name "macchanger")
  89     (version "1.6.0")
  90     (source (origin
  91               (method url-fetch)
  92               (uri (string-append "mirror://gnu/"
  93                                   name "/" name "-" version ".tar.gz"))
  94               (sha256
  95                (base32
  96                 "1xsiivjjyhqcs6dyjcshrnxlgypvyfzacjz7gcjgl88xiw9lylri"))))
  97     (build-system gnu-build-system)
  98     (home-page "https://www.gnu.org/software/macchanger/")
  99     (synopsis "Viewing and manipulating MAC addresses of network interfaces")
 100     (description "GNU MAC Changer is a utility for viewing and changing MAC
 101 addresses of networking devices.  New addresses may be set explicitly or
 102 randomly.  They can include MAC addresses of the same or other hardware vendors
 103 or, more generally, MAC addresses of the same category of hardware.")
 104     (license license:gpl2+)))
 105
 106 (define-public miredo
 107   (package
 108     (name "miredo")
 109     (version "1.2.6")
 110     (source (origin
 111               (method url-fetch)
 112               (uri (string-append "http://www.remlab.net/files/miredo/miredo-"
 113                                   version ".tar.xz"))
 114               (sha256
 115                (base32
 116                 "0j9ilig570snbmj48230hf7ms8kvcwi2wblycqrmhh85lksd49ps"))))
 117     (build-system gnu-build-system)
 118     (arguments
 119      '(#:phases
 120        (modify-phases %standard-phases
 121          ;; The checkconf test in src/ requires network access.
 122          (add-before
 123           'check 'disable-checkconf-test
 124           (lambda _
 125             (substitute* "src/Makefile"
 126               (("^TESTS = .*") "TESTS = \n")))))))
 127     (home-page "http://www.remlab.net/miredo/")
 128     (synopsis "Teredo IPv6 tunneling software")
 129     (description
 130      "Miredo is an implementation (client, relay, server) of the Teredo
 131 specification, which provides IPv6 Internet connectivity to IPv6 enabled hosts
 132 residing in IPv4-only networks, even when they are behind a NAT device.")
 133     (license license:gpl2+)))
 134
 135 (define-public socat
 136   (package
 137     (name "socat")
 138     (version "1.7.3.1")
 139     (source (origin
 140               (method url-fetch)
 141               (uri (string-append
 142                     "http://www.dest-unreach.org/socat/download/socat-"
 143                     version ".tar.bz2"))
 144               (sha256
 145                (base32
 146                 "1apvi7sahcl44arnq1ad2y6lbfqnmvx7nhz9i3rkk0f382anbnnj"))))
 147     (build-system gnu-build-system)
 148     (arguments '(#:tests? #f))                    ;no 'check' phase
 149     (inputs `(("openssl" ,openssl)))
 150     (home-page "http://www.dest-unreach.org/socat/")
 151     (synopsis
 152      "Open bidirectional communication channels from the command line")
 153     (description
 154      "socat is a relay for bidirectional data transfer between two independent
 155 data channels---files, pipes, devices, sockets, etc.  It can create
 156 \"listening\" sockets, named pipes, and pseudo terminals.
 157
 158 socat can be used, for instance, as TCP port forwarder, as a shell interface
 159 to UNIX sockets, IPv6 relay, for redirecting TCP oriented programs to a serial
 160 line, to logically connect serial lines on different computers, or to
 161 establish a relatively secure environment (su and chroot) for running client
 162 or server shell scripts with network connections.")
 163     (license license:gpl2)))
 164
 165 (define-public tcp-wrappers
 166   (package
 167     (name "tcp-wrappers")
 168     (version "7.6")
 169     (source (origin
 170               (method url-fetch)
 171               (uri (string-append
 172                     "ftp://ftp.porcupine.org/pub/security/tcp_wrappers_"
 173                     version ".tar.gz"))
 174               (sha256
 175                (base32
 176                 "0p9ilj4v96q32klavx0phw9va21fjp8vpk11nbh6v2ppxnnxfhwm"))))
 177     (build-system gnu-build-system)
 178     (arguments
 179      `(#:phases
 180        (modify-phases %standard-phases
 181          (delete 'configure)  ; there is no configure script
 182          (delete 'check)      ; there are no tests
 183          (replace 'build
 184            (lambda _
 185              (chmod "." #o755)
 186              ;; Upstream doesn't generate a shared library.  So we have to do it.
 187              (setenv "CC" "gcc -fno-builtin -fPIC")
 188              (substitute* "Makefile"
 189                (("^(all[^\n]*)" line) (string-append line " libwrap.so\n
 190 libwrap.so: $(LIB_OBJ)\n
 191 \tgcc -shared $^ -o $@\n")))
 192              ;; Deal with some gcc breakage.
 193              (substitute* "percent_m.c"
 194                (("extern char .sys_errlist.*;") ""))
 195              (substitute* "scaffold.c"
 196                (("extern char .malloc.*;") ""))
 197              ;; This, believe it or not, is the recommended way to build!
 198              (zero? (system* "make" "REAL_DAEMON_DIR=/etc" "linux"))))
 199          ;; There is no make install stage, so we have to do it ourselves.
 200          (replace 'install
 201            (lambda _
 202              (let ((out (assoc-ref %outputs "out"))
 203                    (man-pages `("hosts_access.3"
 204                                 "hosts_access.5"
 205                                 "hosts_options.5"
 206                                 "tcpd.8"
 207                                 "tcpdchk.8"
 208                                 "tcpdmatch.8"))
 209                    (libs  `("libwrap.a"
 210                             "libwrap.so"))
 211                    (headers `("tcpd.h"))
 212                    (bins `("safe_finger"
 213                            "tcpd"
 214                            "tcpdchk"
 215                            "tcpdmatch"
 216                            "try-from")))
 217                (for-each
 218                 (lambda (x)
 219                   (install-file x (string-append out "/include")))
 220                 headers)
 221                (for-each
 222                 (lambda (x)
 223                   (install-file x (string-append out "/share/man/man"
 224                                                  (string-take-right x 1))))
 225                 man-pages)
 226                (for-each
 227                 (lambda (x)
 228                   (install-file x (string-append out "/lib/")))
 229                 libs)
 230                (for-each
 231                 (lambda (x)
 232                   (install-file x (string-append out "/bin/")))
 233                 bins)))))))
 234     (home-page "http://www.porcupine.org")
 235     (synopsis  "Monitor and filter incoming requests for network services")
 236     (description "With this package you can monitor and filter incoming requests for
 237 network services.  It includes a library which may be used by daemons to
 238 transparently check connection attempts against an access control list.")
 239     (license (license:non-copyleft "file://DISCLAIMER"
 240                                    "See the file DISCLAIMER in the distribution."))))
 241
 242
 243 (define-public zeromq
 244   (package
 245     (name "zeromq")
 246     (version "4.0.7")
 247     (source (origin
 248               (method url-fetch)
 249               (uri (string-append "http://download.zeromq.org/zeromq-"
 250                                   version ".tar.gz"))
 251               (sha256
 252                (base32
 253                 "00vvwhgcdr1lva2pavicvy92iad0hj8cf71n702hv6blw1kjj2z0"))))
 254     (build-system gnu-build-system)
 255     (home-page "http://zeromq.org")
 256     (synopsis "Library for message-based applications")
 257     (description
 258      "The 0MQ lightweight messaging kernel is a library which extends the
 259 standard socket interfaces with features traditionally provided by specialized
 260 messaging middle-ware products.  0MQ sockets provide an abstraction of
 261 asynchronous message queues, multiple messaging patterns, message
 262 filtering (subscriptions), seamless access to multiple transport protocols and
 263 more.")
 264     (license license:lgpl3+)))
 265
 266 (define-public librdkafka
 267   (package
 268     (name "librdkafka")
 269     (version "0.9.1")
 270     (source (origin
 271               (method url-fetch)
 272               (uri (string-append
 273                     "https://github.com/edenhill/librdkafka/archive/"
 274                     version ".tar.gz"))
 275               (file-name (string-append name "-" version ".tar.gz"))
 276               (sha256
 277                (base32
 278                 "10ldx7g7ymmg17snzx78vy4n8ma1rjx0agzi34g15j2fk867xmas"))))
 279     (build-system gnu-build-system)
 280     (arguments
 281      '(#:phases
 282        (modify-phases %standard-phases
 283          (replace 'configure
 284            ;; its custom configure script doesn't understand 'CONFIG_SHELL'.
 285            (lambda* (#:key outputs #:allow-other-keys)
 286              (let ((out (assoc-ref outputs "out")))
 287                ;; librdkafka++.so lacks RUNPATH for librdkafka.so
 288                (setenv "LDFLAGS"
 289                        (string-append "-Wl,-rpath=" out "/lib"))
 290                (zero? (system* "./configure"
 291                                (string-append "--prefix=" out)))))))))
 292     (native-inputs
 293      `(("python" ,python-wrapper)))
 294     (propagated-inputs
 295      `(("zlib" ,zlib))) ; in the Libs.private field of rdkafka.pc
 296     (home-page "https://github.com/edenhill/librdkafka")
 297     (synopsis "Apache Kafka C/C++ client library")
 298     (description
 299      "librdkafka is a C library implementation of the Apache Kafka protocol,
 300 containing both Producer and Consumer support.")
 301     (license license:bsd-2)))
 302
 303 (define-public libndp
 304   (package
 305     (name "libndp")
 306     (version "1.6")
 307     (source (origin
 308               (method url-fetch)
 309               (uri (string-append "http://libndp.org/files/"
 310                                   name "-" version ".tar.gz"))
 311               (sha256
 312                (base32
 313                 "03mczwrxqbp54msafxzzyhaazkvjdwm2kipjkrb5xg8kw22glz8c"))))
 314     (build-system gnu-build-system)
 315     (home-page "http://libndp.org/")
 316     (synopsis "Library for Neighbor Discovery Protocol")
 317     (description
 318      "libndp contains a library which provides a wrapper for IPv6 Neighbor
 319 Discovery Protocol.  It also provides a tool named ndptool for sending and
 320 receiving NDP messages.")
 321     (license license:lgpl2.1+)))
 322
 323 (define-public ethtool
 324   (package
 325     (name "ethtool")
 326     (version "4.13")
 327     (source (origin
 328               (method url-fetch)
 329               (uri (string-append "mirror://kernel.org/software/network/"
 330                                   name "/" name "-" version ".tar.xz"))
 331               (sha256
 332                (base32
 333                 "1flwz4x76ajxigadq9knxgwr778g03y3qfx6c7rflc3x020a7hdp"))))
 334     (build-system gnu-build-system)
 335     (home-page "https://www.kernel.org/pub/software/network/ethtool/")
 336     (synopsis "Display or change Ethernet device settings")
 337     (description
 338      "ethtool can be used to query and change settings such as speed,
 339 auto-negotiation and checksum offload on many network devices, especially
 340 Ethernet devices.")
 341     (license license:gpl2)))
 342
 343 (define-public ifstatus
 344   (package
 345     (name "ifstatus")
 346     (version "1.1.0")
 347     (source (origin
 348               (method url-fetch)
 349               (uri (string-append "mirror://sourceforge/ifstatus/ifstatus/"
 350                                   "ifstatus%20v" version "/ifstatus-v"
 351                                   version ".tar.gz"))
 352               (sha256
 353                (base32
 354                 "045cbsq9ps32j24v8y5hpyqxnqn9mpaf3mgvirlhgpqyb9jsia0c"))
 355               (modules '((guix build utils)))
 356               (snippet
 357                '(substitute* "Main.h"
 358                   (("#include <stdio.h>")
 359                    "#include <stdio.h>\n#include <stdlib.h>")))))
 360     (build-system gnu-build-system)
 361     (arguments
 362      '(#:tests? #f                                ; no "check" target
 363        #:phases
 364        (modify-phases %standard-phases
 365          (delete 'configure)             ; no configure script
 366          (replace 'install
 367                   (lambda* (#:key outputs #:allow-other-keys)
 368                     (let* ((out (assoc-ref outputs "out"))
 369                            (bin (string-append out "/bin")))
 370                       (mkdir-p bin)
 371                       (copy-file "ifstatus"
 372                                  (string-append bin "/ifstatus"))))))))
 373     (inputs `(("ncurses" ,ncurses)))
 374     (home-page "http://ifstatus.sourceforge.net/graphic/index.html")
 375     (synopsis "Text based network interface status monitor")
 376     (description
 377      "IFStatus is a simple, easy-to-use program for displaying commonly
 378 needed/wanted real-time traffic statistics of multiple network
 379 interfaces, with a simple and efficient view on the command line.  It is
 380 intended as a substitute for the PPPStatus and EthStatus projects.")
 381     (license license:gpl2+)))
 382
 383 (define-public nload
 384   (package
 385     (name "nload")
 386     (version "0.7.4")
 387     (source (origin
 388               (method url-fetch)
 389               (uri (string-append "mirror://sourceforge/nload/nload/" version
 390                                   "/nload-" version ".tar.gz"))
 391               (sha256
 392                (base32
 393                 "1rb9skch2kgqzigf19x8bzk211jdfjfdkrcvaqyj89jy2pkm3h61"))))
 394     (build-system gnu-build-system)
 395     (inputs `(("ncurses" ,ncurses)))
 396     (home-page "http://www.roland-riegel.de/nload/")
 397     (synopsis "Realtime console network usage monitor")
 398     (description
 399      "Nload is a console application which monitors network traffic and
 400 bandwidth usage in real time.  It visualizes the in- and outgoing traffic using
 401 two graphs, and provides additional info like total amount of transferred data
 402 and min/max network usage.")
 403     (license license:gpl2+)))
 404
 405 (define-public iodine
 406   (package
 407     (name "iodine")
 408     (version "0.7.0")
 409     (source (origin
 410               (method url-fetch)
 411               (uri (string-append "http://code.kryo.se/" name "/"
 412                                   name "-" version ".tar.gz"))
 413               (sha256
 414                (base32
 415                 "0gh17kcxxi37k65zm4gqsvbk3aw7yphcs3c02pn1c4s2y6n40axd"))))
 416     (build-system gnu-build-system)
 417     (arguments
 418      '(#:phases
 419        (modify-phases %standard-phases
 420          (delete 'configure)
 421          (add-before 'build 'fix-ifconfig-path
 422            ;; This package works only with the net-tools version of ifconfig.
 423            (lambda* (#:key inputs #:allow-other-keys)
 424              (substitute* "src/tun.c"
 425                (("PATH=[^ ]* ")
 426                 (string-append (assoc-ref inputs "net-tools") "/bin/")))))
 427          (add-before 'check 'delete-failing-tests
 428            ;; Avoid https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=802105.
 429            (lambda _
 430              (substitute* "tests/common.c"
 431                (("tcase_add_test\\(tc, \
 432 test_parse_format_ipv(4(|_listen_all|_mapped_ipv6)|6)\\);")
 433                 "")))))
 434        #:make-flags (list "CC=gcc"
 435                           (string-append "prefix=" (assoc-ref %outputs "out")))
 436        #:test-target "test"))
 437     (inputs `(("net-tools" ,net-tools)
 438               ("zlib" ,zlib)))
 439     (native-inputs `(("check" ,check)
 440                      ("pkg-config" ,pkg-config)))
 441     (home-page "http://code.kryo.se/iodine/")
 442     (synopsis "Tunnel IPv4 data through a DNS server")
 443     (description "Iodine tunnels IPv4 data through a DNS server.  This
 444 can be useful in different situations where internet access is firewalled, but
 445 DNS queries are allowed.  The bandwidth is asymmetrical, with limited upstream
 446 and up to 1 Mbit/s downstream.")
 447     ;; src/md5.[ch] is released under the zlib license
 448     (license (list license:isc license:zlib))))
 449
 450 (define-public whois
 451   (package
 452     (name "whois")
 453     (version "5.2.18")
 454     (source
 455      (origin
 456        (method url-fetch)
 457        (uri (string-append "mirror://debian/pool/main/w/whois/"
 458                            name "_" version ".tar.xz"))
 459        (sha256
 460         (base32
 461          "1mcpgj18n1xppvlhjqzpj05yr5z48bym9bd88k10fwgkmwk0spf3"))))
 462     (build-system gnu-build-system)
 463     ;; TODO: unbundle mkpasswd binary + its po files.
 464     (arguments
 465      `(#:tests? #f ; Does not exist
 466        #:make-flags (list "CC=gcc"
 467                           (string-append "prefix=" (assoc-ref %outputs "out")))
 468        #:phases
 469        (modify-phases %standard-phases
 470          (delete 'configure) ; No configure
 471          (add-before 'build 'setenv
 472            (lambda _
 473              (setenv "HAVE_ICONV" "1")
 474              (setenv "HAVE_LIBIDN" "1")
 475              #t)))))
 476     (inputs
 477      `(("libidn" ,libidn)))
 478     (native-inputs
 479      `(("gettext" ,gettext-minimal)
 480        ("perl" ,perl)))
 481     (synopsis "Improved whois client")
 482     (description "This whois client is intelligent and can
 483 automatically select the appropriate whois server for most queries.
 484 Because of historical reasons this also includes a tool called mkpasswd
 485 which can be used to encrypt a password with @code{crypt(3)}.")
 486     (home-page "https://github.com/rfc1036/whois")
 487     (license license:gpl2+)))
 488
 489 (define-public wireshark
 490   (package
 491     (name "wireshark")
 492     (version "2.4.2")
 493     (source
 494      (origin
 495        (method url-fetch)
 496        (uri (string-append "https://www.wireshark.org/download/src/wireshark-"
 497                            version ".tar.xz"))
 498        (sha256
 499         (base32
 500          "0zglapd3sz08p2z9x8a5va3jnz17b3n5a1bskf7f2dgx6m3v5b6i"))))
 501     (build-system gnu-build-system)
 502     (inputs `(("c-ares" ,c-ares)
 503               ("glib" ,glib)
 504               ("gnutls" ,gnutls)
 505               ("libcap" ,libcap)
 506               ("libgcrypt" ,libgcrypt)
 507               ("libnl" ,libnl)
 508               ("libpcap" ,libpcap)
 509               ("libssh" ,libssh)
 510               ("libxml2" ,libxml2)
 511               ("lua" ,lua-5.2)          ;Lua 5.3 unsupported
 512               ("krb5" ,mit-krb5)
 513               ("openssl" ,openssl)
 514               ("portaudio" ,portaudio)
 515               ("qtbase" ,qtbase)
 516               ("sbc" ,sbc)
 517               ("zlib" ,zlib)))
 518     (native-inputs `(("perl" ,perl)
 519                      ("pkg-config" ,pkg-config)
 520                      ("python" ,python-wrapper)
 521                      ("qttools" ,qttools)))
 522     (arguments
 523      `(#:configure-flags
 524        (list (string-append "--with-c-ares=" (assoc-ref %build-inputs "c-ares"))
 525              (string-append "--with-krb5=" (assoc-ref %build-inputs "krb5"))
 526              (string-append "--with-libcap=" (assoc-ref %build-inputs "libcap"))
 527              (string-append "--with-libssh=" (assoc-ref %build-inputs "libssh"))
 528              (string-append "--with-lua=" (assoc-ref %build-inputs "lua"))
 529              (string-append "--with-pcap=" (assoc-ref %build-inputs "libpcap"))
 530              (string-append "--with-portaudio="
 531                             (assoc-ref %build-inputs "portaudio"))
 532              (string-append "--with-sbc=" (assoc-ref %build-inputs "sbc"))
 533              (string-append "--with-ssl=" (assoc-ref %build-inputs "openssl"))
 534              (string-append "--with-zlib=" (assoc-ref %build-inputs "zlib")))))
 535     (synopsis "Network traffic analyzer")
 536     (description "Wireshark is a network protocol analyzer, or @dfn{packet
 537 sniffer}, that lets you capture and interactively browse the contents of
 538 network frames.")
 539     (home-page "https://www.wireshark.org/")
 540     (license license:gpl2+)))
 541
 542 (define-public fping
 543   (package
 544     (name "fping")
 545     (version "4.0")
 546     (source
 547      (origin
 548        (method url-fetch)
 549        (uri (string-append "https://fping.org/dist/fping-"
 550                            version ".tar.gz"))
 551        (sha256
 552         (base32
 553          "1kp81wchi79l8z8rrj602fpjrd8bi84y3i7fsaclzlwap5943sv7"))))
 554     (build-system gnu-build-system)
 555     (home-page "http://fping.org/")
 556     (synopsis "Send ICMP ECHO_REQUEST packets to network hosts")
 557     (description
 558      "fping is a ping like program which uses the Internet Control Message
 559 Protocol (ICMP) echo request to determine if a target host is responding.
 560 fping differs from ping in that you can specify any number of targets on the
 561 command line, or specify a file containing the lists of targets to ping.
 562 Instead of sending to one target until it times out or replies, fping will
 563 send out a ping packet and move on to the next target in a round-robin
 564 fashion.")
 565     (license license:expat)))
 566
 567 (define-public httping
 568   (package
 569     (name "httping")
 570     (version "2.5")
 571     (source
 572      (origin
 573        (method url-fetch)
 574        (uri (string-append "https://www.vanheusden.com/httping/httping-"
 575                            version ".tgz"))
 576        (sha256
 577         (base32
 578          "1y7sbgkhgadmd93x1zafqc4yp26ssiv16ni5bbi9vmvvdl55m29y"))))
 579     (build-system gnu-build-system)
 580     (native-inputs
 581      `(("gettext" ,gettext-minimal)))
 582     (inputs
 583      `(("fftw" ,fftw)
 584        ("ncurses" ,ncurses)
 585        ("openssl" ,openssl)))
 586     (arguments
 587      `(#:make-flags (list "CC=gcc"
 588                           (string-append "DESTDIR=" (assoc-ref %outputs "out"))
 589                           "PREFIX=")
 590        #:tests? #f)) ; no tests
 591     (home-page "https://www.vanheusden.com/httping/")
 592     (synopsis "Web server latency and throughput monitor")
 593     (description
 594      "httping measures how long it takes to connect to a web server, send an
 595 HTTP(S) request, and receive the reply headers.  It is somewhat similar to
 596 @command{ping}, but can be used even in cases where ICMP traffic is blocked
 597 by firewalls or when you want to monitor the response time of the actual web
 598 application stack itself.")
 599     (license license:gpl2)))        ; with permission to link with OpenSSL
 600
 601 (define-public httpstat
 602   (package
 603     (name "httpstat")
 604     (version "1.2.1")
 605     (source
 606      (origin
 607        (method url-fetch)
 608        (uri (pypi-uri "httpstat" version))
 609        (sha256
 610         (base32
 611          "1chw2nk56vaq87aba012a270k9na06hfx1pfbsrc3jfvlc2kb9hb"))))
 612     (build-system python-build-system)
 613     (inputs `(("curl" ,curl)))
 614     (arguments
 615      '(#:phases
 616        (modify-phases %standard-phases
 617          (add-before 'build 'fix-curl-path
 618            (lambda* (#:key inputs #:allow-other-keys)
 619              (substitute* "httpstat.py"
 620                (("ENV_CURL_BIN.get\\('curl'\\)")
 621                 (string-append "ENV_CURL_BIN.get('"
 622                                (assoc-ref inputs "curl")
 623                                "/bin/curl')"))))))))
 624     (home-page "https://github.com/reorx/httpstat")
 625     (synopsis "Visualize curl statistics")
 626     (description
 627      "@command{httpstat} is a tool to visualize statistics from the
 628 @command{curl} HTTP client.  It acts as a wrapper for @command{curl} and
 629 prints timing information for each step of the HTTP request (DNS lookup,
 630 TCP connection, TLS handshake and so on) in the terminal.")
 631     (license license:expat)))
 632
 633 (define-public bwm-ng
 634   (package
 635     (name "bwm-ng")
 636     (version "0.6.1")
 637     (source
 638      (origin
 639        (method url-fetch)
 640        (uri (string-append "https://www.gropp.org/bwm-ng/bwm-ng-"
 641                            version ".tar.gz"))
 642        (sha256
 643         (base32
 644          "1w0dwpjjm9pqi613i8glxrgca3rdyqyp3xydzagzr5ndc34z6z02"))))
 645     (build-system gnu-build-system)
 646     (inputs `(("ncurses" ,ncurses)))
 647     (synopsis "Console based live network and disk I/O bandwidth monitor")
 648     (description "Bandwidth Monitor NG is a small and simple console based
 649 live network and disk I/O bandwidth monitor.")
 650     (home-page "https://www.gropp.org/?id=projects&sub=bwm-ng")
 651     (license license:gpl2)))
 652
 653 (define-public aircrack-ng
 654   (package
 655     (name "aircrack-ng")
 656     (version "1.2-rc4")
 657     (source
 658      (origin
 659        (method url-fetch)
 660        (uri (string-append "http://download.aircrack-ng.org/aircrack-ng-"
 661                            version ".tar.gz"))
 662        (sha256
 663         (base32
 664          "0dpzx9kddxpgzmgvdpl3rxn0jdaqhm5wxxndp1xd7d75mmmc2fnr"))))
 665     (build-system gnu-build-system)
 666     (native-inputs
 667      `(("pkg-config" ,pkg-config)))
 668     (inputs
 669      `(("libgcrypt" ,libgcrypt)
 670        ("libnl" ,libnl)
 671        ("ethtool" ,ethtool)
 672        ("pcre" ,pcre)
 673        ("sqlite" ,sqlite)
 674        ("zlib" ,zlib)))
 675     (arguments
 676      `(#:make-flags `("sqlite=true"
 677                       "gcrypt=true"
 678                       "libnl=true"
 679                       "pcre=true"
 680                       "experimental=true" ;build wesside-ng, etc.
 681                       "AVX2FLAG=N" "AVX1FLAG=N"
 682                       ,,@(match (%current-system)
 683                            ((or "x86_64-linux" "i686-linux")
 684                             `("SSEFLAG=Y"))
 685                            (_
 686                             `("NEWSSE=false")))
 687                       ,(string-append "prefix=" %output))
 688        #:phases (modify-phases %standard-phases
 689                   (delete 'configure)   ;no configure phase
 690                   (add-after 'build 'absolutize-tools
 691                     (lambda* (#:key inputs #:allow-other-keys)
 692                       (let ((ethtool (string-append (assoc-ref inputs "ethtool")
 693                                                     "/sbin/ethtool")))
 694                         (substitute* "scripts/airmon-ng"
 695                           (("\\[ ! -x \"\\$\\(command -v ethtool 2>&1)\" \\]")
 696                            (string-append "! " ethtool " --version "
 697                                           ">/dev/null 2>&1"))
 698                           (("\\$\\(ethtool")
 699                            (string-append "$(" ethtool)))
 700                         #t))))))
 701     (home-page "http://www.aircrack-ng.org")
 702     (synopsis "Assess WiFi network security")
 703     (description
 704      "Aircrack-ng is a complete suite of tools to assess WiFi network
 705 security.  It focuses on different areas of WiFi security: monitoring,
 706 attacking, testing, and cracking.  All tools are command-line driven, which
 707 allows for heavy scripting.")
 708     (license (list license:gpl2+ license:bsd-3))))
 709
 710 (define-public perl-net-dns
 711  (package
 712   (name "perl-net-dns")
 713   (version "1.13")
 714   (source
 715     (origin
 716       (method url-fetch)
 717       (uri (string-append
 718              "mirror://cpan/authors/id/N/NL/NLNETLABS/Net-DNS-"
 719              version
 720              ".tar.gz"))
 721       (sha256
 722         (base32
 723           "0dlca65l45mqs7l58fg838bj3as5kmnbs1zy8vg9cbsz6rindivy"))))
 724   (build-system perl-build-system)
 725   (inputs
 726     `(("perl-digest-hmac" ,perl-digest-hmac)))
 727   (home-page "http://search.cpan.org/dist/Net-DNS")
 728   (synopsis
 729     "Perl Interface to the Domain Name System")
 730   (description "Net::DNS is the Perl Interface to the Domain Name System.")
 731   (license license:x11)))
 732
 733 (define-public perl-socket6
 734  (package
 735   (name "perl-socket6")
 736   (version "0.28")
 737   (source
 738     (origin
 739       (method url-fetch)
 740       (uri (string-append
 741              "mirror://cpan/authors/id/U/UM/UMEMOTO/Socket6-"
 742              version
 743              ".tar.gz"))
 744       (sha256
 745         (base32
 746           "11j5jzqbzmwlws9zals43ry2f1nw9qy6im7yhn9ck5rikywrmm5z"))))
 747   (build-system perl-build-system)
 748   (arguments
 749    `(#:phases
 750      (modify-phases %standard-phases
 751          (replace 'configure
 752            (lambda* (#:key outputs #:allow-other-keys)
 753              (let* ((out (assoc-ref outputs "out"))
 754                     (args `("Makefile.PL"
 755                             ,(string-append "PREFIX=" out)
 756                             "INSTALLDIRS=site")))
 757                (setenv "CONFIG_SHELL" (which "sh"))
 758                (zero? (apply system* "perl" args))))))))
 759   (home-page "http://search.cpan.org/dist/Socket6")
 760   (synopsis
 761     "IPv6 related part of the C socket.h defines and structure manipulators for Perl")
 762   (description "Socket6 binds the IPv6 related part of the C socket header
 763 definitions and structure manipulators for Perl.")
 764   (license license:bsd-3)))
 765
 766 (define-public perl-net-dns-resolver-programmable
 767  (package
 768   (name "perl-net-dns-resolver-programmable")
 769   (version "v0.003")
 770   (source
 771     (origin
 772       (method url-fetch)
 773       (uri (string-append
 774              "mirror://cpan/authors/id/J/JM/JMEHNLE/net-dns-resolver-programmable/"
 775              "Net-DNS-Resolver-Programmable-" version ".tar.gz"))
 776       (sha256
 777         (base32
 778           "1v3nl2kaj4fs55n1617n53q8sa3mir06898vpy1rq98zjih24h4d"))
 779       (patches
 780        (search-patches "perl-net-dns-resolver-programmable-fix.patch"))))
 781   (build-system perl-build-system)
 782   (native-inputs
 783     `(("perl-module-build" ,perl-module-build)))
 784   (inputs `(("perl-net-dns" ,perl-net-dns)))
 785   (home-page
 786     "http://search.cpan.org/dist/Net-DNS-Resolver-Programmable")
 787   (synopsis
 788     "Programmable DNS resolver class for offline emulation of DNS")
 789   (description "Net::DNS::Resolver::Programmable is a programmable DNS resolver for
 790 offline emulation of DNS.")
 791   (license license:perl-license)))
 792
 793 (define-public perl-netaddr-ip
 794  (package
 795   (name "perl-netaddr-ip")
 796   (version "4.079")
 797   (source
 798     (origin
 799       (method url-fetch)
 800       (uri (string-append
 801              "mirror://cpan/authors/id/M/MI/MIKER/NetAddr-IP-"
 802              version
 803              ".tar.gz"))
 804       (sha256
 805         (base32
 806           "1rx0dinrz9fk9qcg4rwqq5n1dm3xv2arymixpclcv2q2nzgq4npc"))))
 807   (build-system perl-build-system)
 808   (arguments
 809     `(#:phases
 810        (modify-phases %standard-phases
 811          (replace 'configure
 812            (lambda* (#:key outputs #:allow-other-keys)
 813              (let* ((out (assoc-ref outputs "out"))
 814                     (args `("Makefile.PL"
 815                             ,(string-append "PREFIX=" out)
 816                             "INSTALLDIRS=site")))
 817                (setenv "CONFIG_SHELL" (which "sh"))
 818                (zero? (apply system* "perl" args))))))))
 819   (home-page
 820     "http://search.cpan.org/dist/NetAddr-IP")
 821   (synopsis
 822     "Manages IPv4 and IPv6 addresses and subnets")
 823   (description "NetAddr::IP manages IPv4 and IPv6 addresses and subsets.")
 824   (license license:perl-license)))
 825
 826 (define-public perl-net-patricia
 827  (package
 828   (name "perl-net-patricia")
 829   (version "1.22")
 830   (source
 831     (origin
 832       (method url-fetch)
 833       (uri (string-append
 834              "mirror://cpan/authors/id/G/GR/GRUBER/Net-Patricia-"
 835              version
 836              ".tar.gz"))
 837       (sha256
 838         (base32
 839           "0ln5f57vc8388kyh9vhx2infrdzfhbpgyby74h1qsnhwds95m0vh"))))
 840   (build-system perl-build-system)
 841   (inputs
 842     `(("perl-net-cidr-lite" ,perl-net-cidr-lite)
 843       ("perl-socket6" ,perl-socket6)))
 844   (home-page
 845     "http://search.cpan.org/dist/Net-Patricia")
 846   (synopsis
 847     "Patricia Trie Perl module for fast IP address lookups")
 848   (description
 849     "Net::Patricia does IP address lookups quickly in Perl.")
 850   ;; The bindings are licensed under GPL2 or later.
 851   ;; libpatricia is licensed under 2-clause BSD.
 852   (license (list license:gpl2+ license:bsd-2))))
 853
 854 (define-public perl-net-cidr-lite
 855  (package
 856   (name "perl-net-cidr-lite")
 857   (version "0.21")
 858   (source
 859     (origin
 860       (method url-fetch)
 861       (uri (string-append
 862              "mirror://cpan/authors/id/D/DO/DOUGW/Net-CIDR-Lite-"
 863              version
 864              ".tar.gz"))
 865       (sha256
 866         (base32
 867           "14shj73zbqmfjbp0qz1fs9j4p2dpvz5hfkm4qfdjbydflbl2b8fg"))))
 868   (build-system perl-build-system)
 869   (home-page
 870     "http://search.cpan.org/dist/Net-CIDR-Lite")
 871   (synopsis
 872     "Perl extension for merging IPv4 or IPv6 CIDR addresses")
 873   (description "Net::CIDR::Lite merges IPv4 or IPv6 CIDR addresses.")
 874   (license license:gpl1+)))
 875
 876 ;; TODO: Use the geolite-mirror-simple.pl script from the example
 877 ;; directory to stay current with the databases. How?
 878 (define-public perl-geo-ip
 879  (package
 880   (name "perl-geo-ip")
 881   (version "1.51")
 882   (source
 883     (origin
 884       (method url-fetch)
 885       (uri (string-append
 886              "mirror://cpan/authors/id/M/MA/MAXMIND/Geo-IP-"
 887              version
 888              ".tar.gz"))
 889       (sha256
 890         (base32
 891           "1fka8fr7fw6sh3xa9glhs1zjg3s2gfkhi7n7da1l2m2wblqj0c0n"))))
 892   (build-system perl-build-system)
 893   (home-page "http://search.cpan.org/dist/Geo-IP")
 894   (synopsis
 895     "Look up location and network information by IP Address in Perl")
 896   (description "The Perl module 'Geo::IP'.  It looks up location and network
 897 information by IP Address.")
 898   (license license:perl-license)))
 899
 900 (define-public perl-io-socket-inet6
 901  (package
 902   (name "perl-io-socket-inet6")
 903   (version "2.72")
 904   (source
 905     (origin
 906       (method url-fetch)
 907       (uri (string-append
 908              "mirror://cpan/authors/id/S/SH/SHLOMIF/IO-Socket-INET6-"
 909              version
 910              ".tar.gz"))
 911       (sha256
 912         (base32
 913           "1fqypz6qa5rw2d5y2zq7f49frwra0aln13nhq5gi514j2zx21q45"))))
 914   (build-system perl-build-system)
 915   (native-inputs
 916     `(("perl-module-build" ,perl-module-build)
 917       ("perl-test-pod" ,perl-test-pod)
 918       ("perl-test-pod-coverage" ,perl-test-pod-coverage)))
 919   (inputs `(("perl-socket6" ,perl-socket6)))
 920   (arguments `(;; Need network socket API
 921                #:tests? #f))
 922   (home-page
 923     "http://search.cpan.org/dist/IO-Socket-INET6")
 924   (synopsis
 925     "Perl object interface for AF_INET/AF_INET6 domain sockets")
 926   (description "IO::Socket::INET6 is an interface for AF_INET/AF_INET6 domain
 927 sockets in Perl.")
 928   (license license:perl-license)))
 929
 930 (define-public libproxy
 931   (package
 932     (name "libproxy")
 933     (version "0.4.15")
 934     (source (origin
 935               (method url-fetch)
 936               (uri (string-append "https://github.com/libproxy/libproxy/"
 937                                   "releases/download/" version "/libproxy-"
 938                                   version ".tar.xz"))
 939               (sha256
 940                (base32
 941                 "0kvdrazlzwia876w988cmlypp253gwy6idlh8mjk958c29jb8kb5"))))
 942     (build-system cmake-build-system)
 943     (native-inputs
 944      `(("pkg-config" ,pkg-config)))
 945     (inputs
 946      `(("dbus" ,dbus)
 947        ("zlib" ,zlib)
 948        ("network-manager" ,network-manager)))
 949     (arguments
 950      `(#:phases
 951        (modify-phases %standard-phases
 952          (replace 'check
 953                   (lambda _
 954                     (zero? (system* "ctest" "-E" "url-test")))))))
 955     (synopsis "Library providing automatic proxy configuration management")
 956     (description "Libproxy handles the details of HTTP/HTTPS proxy
 957 configuration for applications across all scenarios.  Applications using
 958 libproxy only have to specify which proxy to use.")
 959     (home-page "https://libproxy.github.io/libproxy")
 960     (license license:lgpl2.1+)))
 961
 962 (define-public proxychains-ng
 963   (package
 964     (name "proxychains-ng")
 965     (version "4.12")
 966     (source (origin
 967               (method url-fetch)
 968               (uri (string-append "https://github.com/rofl0r/" name "/releases/"
 969                                   "download/v" version "/" name "-" version
 970                                   ".tar.xz"))
 971               (sha256
 972                (base32
 973                 "0kiss3ih6cwayzvqi5cx4kw4vh7r2kfxlbgk56v1f1066ncm8aj8"))))
 974     (build-system gnu-build-system)
 975     (arguments
 976      `(#:tests? #f ; there are no tests
 977        #:make-flags '("CC=gcc")
 978        #:phases
 979        (modify-phases %standard-phases
 980          (add-after 'unpack 'fix-configure-script
 981            (lambda _
 982              ;; The configure script is very intolerant to unknown arguments,
 983              ;; such as "CONFIG_SHELL".
 984              (substitute* "configure"
 985                (("\\*\\) break ;;" line)
 986                 (string-append "[A-Z]*) shift ;;\n"
 987                                line)))
 988              #t)))))
 989     (synopsis "Redirect any TCP connection through a proxy or proxy chain")
 990     (description "Proxychains-ng is a preloader which hooks calls to sockets
 991 in dynamically linked programs and redirects them through one or more SOCKS or
 992 HTTP proxies.")
 993     (home-page "https://github.com/rofl0r/proxychains-ng")
 994     (license license:gpl2+)))
 995
 996 (define-public enet
 997   (package
 998     (name "enet")
 999     (version "1.3.13")
1000     (source (origin
1001               (method url-fetch)
1002               (uri (string-append "http://enet.bespin.org/download/"
1003                                   name "-" version ".tar.gz"))
1004               (sha256
1005                (base32
1006                 "0p53mnmjbm56wizwraznynx13fcibcxiqny110dp6a5a3w174q73"))))
1007     (build-system gnu-build-system)
1008     (native-inputs
1009      `(("pkg-config" ,pkg-config)))
1010     (synopsis
1011      "Network communication layer on top of UDP")
1012     (description
1013      "ENet's purpose is to provide a relatively thin, simple and robust network
1014 communication layer on top of UDP.  The primary feature it provides is optional
1015 reliable, in-order delivery of packets.  ENet omits certain higher level
1016 networking features such as authentication, server discovery, encryption, or
1017 other similar tasks that are particularly application specific so that the
1018 library remains flexible, portable, and easily embeddable.")
1019     (home-page "http://enet.bespin.org")
1020     (license license:expat)))
1021
1022 (define-public sslh
1023   (package
1024     (name "sslh")
1025     (version "1.18")
1026     (source (origin
1027               (method url-fetch)
1028               (uri (string-append "https://github.com/yrutschle/sslh/archive/v"
1029                                   version ".tar.gz"))
1030               (file-name (string-append name "-" version ".tar.gz"))
1031               (sha256
1032                (base32
1033                 "1vzw7a7s9lhspbn5zn3hw8hir4pkjgbd68yys4hfsnjp1h7bzjpn"))))
1034     (build-system gnu-build-system)
1035     (native-inputs
1036      `(;; Tests dependencies.
1037        ("lcov" ,lcov)
1038        ("perl" ,perl)
1039        ("perl-io-socket-inet6" ,perl-io-socket-inet6)
1040        ("perl-socket6" ,perl-socket6)
1041        ("psmisc" ,psmisc)
1042        ("valgrind" ,valgrind)))
1043     (inputs
1044      `(("libcap" ,libcap)
1045        ("libconfig" ,libconfig)
1046        ("tcp-wrappers" ,tcp-wrappers)))
1047     (arguments
1048      '(#:phases
1049        (modify-phases %standard-phases
1050          (delete 'configure)            ; no configure script
1051          (add-before 'check 'fix-tests
1052                      (lambda _
1053                        (substitute* "./t"
1054                          (("\"/tmp") "$ENV{\"TMPDIR\"} . \"")
1055                          ;; The Guix build environment lacks ‘ip6-localhost’.
1056                          (("ip6-localhost") "localhost"))
1057                        #t))
1058          ;; Many of these files are mentioned in the man page. Install them.
1059          (add-after 'install 'install-documentation
1060                     (lambda* (#:key outputs #:allow-other-keys)
1061                       (let* ((out (assoc-ref outputs "out"))
1062                              (doc (string-append out "/share/doc/sslh")))
1063                         (install-file "README.md" doc)
1064                         (for-each
1065                          (lambda (file)
1066                            (install-file file (string-append doc "/examples")))
1067                          (append (find-files "." "\\.cfg")
1068                                  (find-files "scripts"))))
1069                       #t)))
1070        #:make-flags (list "CC=gcc"
1071                           "USELIBCAP=1"
1072                           "USELIBWRAP=1"
1073                           (string-append "PREFIX=" (assoc-ref %outputs "out")))
1074        #:test-target "test"))
1075     (home-page "http://www.rutschle.net/tech/sslh.shtml")
1076     (synopsis "Applicative network protocol demultiplexer")
1077     (description
1078      "sslh is a network protocol demultiplexer.  It acts like a switchboard,
1079 accepting connections from clients on one port and forwarding them to different
1080 servers based on the contents of the first received data packet.  Detection of
1081 common protocols like HTTP(S), SSL, SSH, OpenVPN, tinc, and XMPP is already
1082 implemented, but any other protocol that matches a regular expression can be
1083 added.  sslh's name comes from its original application of serving both SSH and
1084 HTTPS on port 443, allowing SSH connections from inside corporate firewalls
1085 that block port 22.")
1086     (license (list license:bsd-2        ; tls.[ch]
1087                    license:gpl2+))))    ; everything else
1088
1089 (define-public iperf
1090   (package
1091     (name "iperf")
1092     (version "3.1.7")
1093     (source (origin
1094               (method url-fetch)
1095               (uri (string-append "http://downloads.es.net/pub/iperf"
1096                                   "/iperf-" version ".tar.gz"))
1097               (sha256
1098                 (base32
1099                  "0kvk8d0a3dcxc8fisyprbn01y8akxj4sx8ld5dh508p9dx077vx4"))))
1100     (build-system gnu-build-system)
1101     (synopsis "TCP, UDP and SCTP bandwidth measurement tool")
1102     (description
1103      "iPerf is a tool to measure achievable bandwidth on IP networks.  It
1104 supports tuning of various parameters related to timing, buffers and
1105 protocols (TCP, UDP, SCTP with IPv4 and IPv6).  For each test it reports
1106 the bandwidth, loss, and other parameters.")
1107     (home-page "http://software.es.net/iperf/")
1108     (license (list license:bsd-3             ; Main distribution.
1109                    license:ncsa              ; src/{units,iperf_locale,tcp_window_size}.c
1110                    license:expat             ; src/{cjson,net}.[ch]
1111                    license:public-domain)))) ; src/portable_endian.h
1112
1113 (define-public nethogs
1114   (package
1115     (name "nethogs")
1116     (version "0.8.5")
1117     (source (origin
1118               (method url-fetch)
1119               (uri (string-append "https://github.com/raboof/nethogs/archive/v"
1120                                   version ".tar.gz"))
1121               (sha256
1122                (base32
1123                 "1k4x8r7s4dgcb6n2rjn28h2yyij92mwm69phncl3597cdxr954va"))
1124               (file-name (string-append name "-" version ".tar.gz"))))
1125     (build-system gnu-build-system)
1126     (inputs
1127      `(("libpcap" ,libpcap)
1128        ("ncurses" ,ncurses)))
1129     (arguments
1130      `(#:make-flags `("CC=gcc"
1131                       ,(string-append "PREFIX=" %output))
1132        #:phases
1133        (modify-phases %standard-phases
1134          (delete 'configure)))) ; No ./configure script.
1135     (home-page "https://github.com/raboof/nethogs")
1136     (synopsis "Per-process bandwidth monitor")
1137     (description "NetHogs is a small 'net top' tool for Linux.  Instead of
1138 breaking the traffic down per protocol or per subnet, like most tools do, it
1139 groups bandwidth by process.
1140
1141 NetHogs does not rely on a special kernel module to be loaded.  If there's
1142 suddenly a lot of network traffic, you can fire up NetHogs and immediately see
1143 which PID is causing this.  This makes it easy to identify programs that have
1144 gone wild and are suddenly taking up your bandwidth.")
1145     (license license:gpl2+)))
1146
1147 (define-public nzbget
1148   (package
1149     (name "nzbget")
1150     (version "19.1")
1151     (source
1152      (origin
1153        (method url-fetch)
1154        (uri (string-append "https://github.com/nzbget/nzbget/archive/v"
1155                            version ".tar.gz"))
1156        (file-name (string-append name "-" version ".tar.gz"))
1157        (sha256
1158         (base32
1159          "0y713g7gd4n5chbhr8lv7k50rxkmzysrg13sscxam3s386mmlb1r"))
1160        (modules '((guix build utils)))
1161        (snippet
1162         ;; Reported upstream as <https://github.com/nzbget/nzbget/pull/414>.
1163         '(begin
1164            (substitute* "daemon/connect/TlsSocket.cpp"
1165              (("gnutls_certificate-verification_status_print")
1166               "gnutls_certificate_verification_status_print"))
1167            #t))))
1168     (arguments
1169      `(#:configure-flags
1170        (list
1171         (string-append "--with-libcurses-includes="
1172                        (assoc-ref %build-inputs "ncurses") "/include")
1173         (string-append "--with-libcurses-libraries="
1174                        (assoc-ref %build-inputs "ncurses") "/lib")
1175         (string-append "--with-tlslib=GnuTLS"))))
1176     (build-system gnu-build-system)
1177     (inputs `(("gnutls", gnutls)
1178               ("libxml2", libxml2)
1179               ("ncurses", ncurses)
1180               ("zlib", zlib)))
1181     (native-inputs `(("pkg-config", pkg-config)))
1182     (home-page "https://github.com/nzbget/nzbget")
1183     (synopsis "Usenet binary file downloader")
1184     (description
1185      "NZBGet is a binary newsgrabber, which downloads files from Usenet based
1186 on information given in @code{nzb} files.  NZBGet can be used in standalone
1187 and in server/client modes.  In standalone mode, you pass NZBGet @command{nzb}
1188 files as command-line parameters and it downloads them and exits.  NZBGet also
1189 contains a Web interface.  Its server can be controlled through remote
1190 procedure calls (RPCs).")
1191     (license license:gpl2+)))
1192
1193 (define-public openvswitch
1194   (package
1195     (name "openvswitch")
1196     (version "2.6.1")
1197     (source (origin
1198               (method url-fetch)
1199               (uri (string-append
1200                     "http://openvswitch.org/releases/openvswitch-"
1201                     version ".tar.gz"))
1202               (sha256
1203                (base32
1204                 "036gq741j9kqsjlp693nff838c9wjd1c56nswl9vyyd1lsmj0yrh"))))
1205     (build-system gnu-build-system)
1206     (arguments
1207      '(;; FIXME: many tests fail with:
1208        ;;    […]
1209        ;;    test -e $OVS_RUNDIR/ovs-vswitchd.pid
1210        ;;    ovs-appctl -t ovs-vswitchd exit
1211        ;;    hard failure
1212        #:tests? #f
1213        #:configure-flags
1214        '("--enable-shared"
1215          "--localstatedir=/var"
1216          "--with-dbdir=/var/lib/openvswitch")
1217        #:phases
1218        (modify-phases %standard-phases
1219          (replace 'install
1220            (lambda _
1221              (zero? (system* "make"
1222                              ;; Don't try to create directories under /var.
1223                              "RUNDIR=/tmp"
1224                              "PKIDIR=/tmp"
1225                              "LOGDIR=/tmp"
1226                              "DBDIR=/tmp"
1227                              "install")))))))
1228     (native-inputs
1229      `(("perl" ,perl)
1230        ("pkg-config" ,pkg-config)
1231        ("python" ,python-2)
1232        ;; for testing
1233        ("util-linux" ,util-linux)))
1234     (propagated-inputs
1235      `(("python-six" ,python2-six)))
1236     (inputs
1237      `(("libcap-ng" ,libcap-ng)
1238        ("openssl" ,openssl)))
1239     (synopsis "Virtual network switch")
1240     (home-page "http://www.openvswitch.org/")
1241     (description
1242      "Open vSwitch is a multilayer virtual switch.  It is designed to enable
1243 massive network automation through programmatic extension, while still
1244 supporting standard management interfaces and protocols (e.g. NetFlow, sFlow,
1245 IPFIX, RSPAN, CLI, LACP, 802.1ag).")
1246     (license                            ; see debian/copyright for detail
1247      (list license:lgpl2.1              ; xenserver and utilities/bugtool
1248            license:gpl2                 ; datapath
1249            license:bsd-2 license:bsd-3
1250            license:asl2.0))))           ; all other
1251
1252 (define-public python-ipy
1253   (package
1254     (name "python-ipy")
1255     (version "0.83")
1256     (source (origin
1257               (method url-fetch)
1258               (uri (pypi-uri "IPy" version))
1259               (sha256
1260                (base32
1261                 "1f6sdrxclifky4gvkf4gvyv5hx3fjh8vzspnfrqki6qm5d9mmnk1"))))
1262     (build-system python-build-system)
1263     (home-page "https://github.com/autocracy/python-ipy/")
1264     (synopsis "Python class and tools for handling IP addresses and networks")
1265     (description "The @code{IP} class allows a comfortable parsing and
1266 handling for most notations in use for IPv4 and IPv6 addresses and
1267 networks.")
1268     (license license:bsd-3)))
1269
1270 (define-public speedtest-cli
1271   (package
1272     (name "speedtest-cli")
1273     (version "1.0.7")
1274     (source
1275      (origin
1276        (method url-fetch)
1277        (uri (string-append
1278              "https://github.com/sivel/speedtest-cli/archive/v" version ".tar.gz"))
1279        (file-name (string-append name "-" version ".tar.gz"))
1280        (sha256
1281         (base32
1282          "1fbq4kpx8sj50g74hwpixisfjjgxq6zyn40d3m28dxhn7mxbnlrq"))))
1283     (build-system python-build-system)
1284     (home-page "https://github.com/sivel/speedtest-cli")
1285     (synopsis "Internet bandwidth tester")
1286     (description
1287      "Command line interface for testing internet bandwidth using
1288 speedtest.net.")
1289     (license license:asl2.0)))
1290
1291 (define-public tftp-hpa
1292   (package
1293     (name "tftp-hpa")
1294     (version "5.2")
1295     (source (origin
1296               (method url-fetch)
1297               (uri (string-append "mirror://kernel.org/software/"
1298                                   "network/tftp/tftp-hpa/tftp-hpa-" version
1299                                   ".tar.xz"))
1300               (sha256
1301                (base32
1302                 "12vidchglhyc20znq5wdsbhi9mqg90jnl7qr9qs8hbvaz4fkdvmg"))))
1303     (build-system gnu-build-system)
1304     (arguments `(#:tests? #f)) ; no test target
1305     (synopsis "HPA's tftp client")
1306     (description
1307      "This is a tftp client derived from OpenBSD tftp with some extra options
1308 added and bugs fixed.  The source includes readline support but it is not
1309 enabled due to license conflicts between the BSD advertising clause and the GPL.")
1310     (home-page "http://git.kernel.org/cgit/network/tftp/tftp-hpa.git/about/")
1311     ;; Some source files are distributed under a 3-clause BSD license, and
1312     ;; others under a 4-clause BSD license. Refer to the files in the source
1313     ;; distribution for clarification.
1314     (license (list license:bsd-3 license:bsd-4))))
1315
1316 (define-public pidentd
1317   (package
1318     (name "pidentd")
1319     (version "3.0.19")
1320     (source
1321      (origin
1322        (method url-fetch)
1323        (uri (string-append "https://github.com/ptrrkssn/pidentd/archive/"
1324                            "v" version ".tar.gz"))
1325        (file-name (string-append name "-" version ".tar.gz"))
1326        (sha256
1327         (base32
1328          "0y3kd1bkydqkpc1qdff24yswysamsqivvadjy0468qri5730izgc"))))
1329     (build-system gnu-build-system)
1330     (arguments
1331      `(#:tests? #f)) ; No tests are included
1332     (inputs
1333      `(("openssl" ,openssl))) ; For the DES library
1334     (home-page "https://www.lysator.liu.se/~pen/pidentd/")
1335     (synopsis "Small Ident Daemon")
1336     (description
1337      "@dfn{Pidentd} (Peter's Ident Daemon) is a identd, which implements a
1338 identification server.  Pidentd looks up specific TCP/IP connections and
1339 returns the user name and other information about the connection.")
1340     (license license:public-domain)))
1341
1342 (define-public spiped
1343   (package
1344     (name "spiped")
1345     (version "1.6.0")
1346     (source (origin
1347               (method url-fetch)
1348               (uri (string-append "https://www.tarsnap.com/spiped/spiped-"
1349                                   version ".tgz"))
1350               (sha256
1351                (base32
1352                 "1r51rdcl7nib1yv3yvgd5alwlkkwmr387brqavaklb0p2bwzixz6"))))
1353     (build-system gnu-build-system)
1354     (arguments
1355      '(#:test-target "test"
1356        #:make-flags (let* ((out (assoc-ref %outputs "out"))
1357                            (bindir (string-append out "/bin"))
1358                            (man1dir (string-append out "/share/man/man1")))
1359                       (list "CC=gcc" ; It tries to invoke `c99`.
1360                             (string-append "BINDIR=" bindir)
1361                             (string-append "MAN1DIR=" man1dir)))
1362        #:phases
1363        (modify-phases %standard-phases
1364          (add-after 'unpack 'patch-command-invocations
1365            (lambda _
1366              (substitute* '("Makefile"
1367                             "libcperciva/cpusupport/Build/cpusupport.sh"
1368                             "libcperciva/POSIX/posix-cflags.sh"
1369                             "libcperciva/POSIX/posix-l.sh")
1370                (("command -p") ""))
1371              #t))
1372          (delete 'configure) ; No ./configure script.
1373          (add-after 'install 'install-more-docs
1374            (lambda* (#:key outputs #:allow-other-keys)
1375              (let* ((out (assoc-ref %outputs "out"))
1376                     (misc (string-append out "/share/doc/spiped")))
1377                (install-file "DESIGN.md" misc)
1378                #t))))))
1379     (native-inputs
1380      `(("procps" ,procps))) ; `ps` is used by the test suite.
1381     (inputs
1382      `(("openssl" ,openssl)))
1383     (home-page "https://www.tarsnap.com/spiped.html")
1384     (synopsis "Create secure pipes between sockets")
1385     (description "Spiped (pronounced \"ess-pipe-dee\") is a utility for creating
1386 symmetrically encrypted and authenticated pipes between socket addresses, so
1387 that one may connect to one address (e.g., a UNIX socket on localhost) and
1388 transparently have a connection established to another address (e.g., a UNIX
1389 socket on a different system).  This is similar to 'ssh -L' functionality, but
1390 does not use SSH and requires a pre-shared symmetric key.")
1391     (license license:bsd-2)))
1392
1393 (define-public quagga
1394   (package
1395     (name "quagga")
1396     (version "1.2.2")
1397     (source (origin
1398               (method url-fetch)
1399               (uri (string-append "mirror://savannah/quagga/quagga-"
1400                                   version ".tar.gz"))
1401               (sha256
1402                (base32
1403                 "0c99rjjc62xl5kwvx2pwyvs0709vbwax1qydqbqf6r7fpvr24bjj"))
1404               (patches
1405                (search-patches "quagga-reproducible-build.patch"))))
1406     (build-system gnu-build-system)
1407     (native-inputs `(("pkg-config",pkg-config)
1408                      ("perl",perl)
1409                      ("dejagnu",dejagnu)))
1410     (inputs `(("readline",readline)
1411               ("c-ares",c-ares)))
1412     (synopsis "Routing Software Suite")
1413     (description "Quagga is a routing software suite, providing implementations
1414 of OSPFv2, OSPFv3, RIP v1 and v2, RIPng and BGP-4 for Unix platforms.
1415
1416 The Quagga architecture consists of a core daemon, @command{zebra}, which
1417 acts as an abstraction layer to the underlying Unix kernel and presents the
1418 Zserv API over a Unix or TCP stream to Quagga clients.  It is these Zserv
1419 clients which typically implement a routing protocol and communicate routing
1420 updates to the zebra daemon.")
1421     (home-page "http://www.nongnu.org/quagga/")
1422     (license license:gpl2+)))
1423
1424 (define-public thc-ipv6
1425   (package
1426     (name "thc-ipv6")
1427     (version "3.2")
1428     (source (origin
1429               (method url-fetch)
1430               (uri (string-append "https://github.com/vanhauser-thc/thc-ipv6/"
1431                                   "archive/" version ".tar.gz"))
1432               (file-name (string-append name "-" version ".tar.gz"))
1433               (sha256
1434                (base32
1435                 "0yh2lpsazmm0pgbmh0dx023w6fss1kdfyr4cq7yw0fac8vkw32d3"))))
1436     (build-system gnu-build-system)
1437     (arguments
1438      `(#:make-flags (list (string-append "PREFIX=" (assoc-ref %outputs "out")))
1439        #:tests? #f ; No test suite.
1440        #:phases
1441        (modify-phases %standard-phases
1442          (delete 'configure) ; No ./configure script.
1443          (add-before 'build 'patch-paths
1444            (lambda _
1445              (substitute* "Makefile"
1446                (("/bin/echo") "echo"))
1447              #t))
1448          (add-after 'install 'install-more-docs
1449            (lambda* (#:key outputs #:allow-other-keys)
1450              (let* ((out (assoc-ref outputs "out"))
1451                     (doc (string-append out "/share/thc-ipv6/doc")))
1452                (install-file "README" doc)
1453                (install-file "HOWTO-INJECT" doc)
1454                #t))))))
1455     ;; TODO Add libnetfilter-queue once packaged.
1456     (inputs
1457      `(("libpcap" ,libpcap)
1458        ("openssl" ,openssl)
1459        ("perl" ,perl)))
1460     (home-page "https://github.com/vanhauser-thc/thc-ipv6")
1461     (synopsis "IPv6 security research toolkit")
1462     (description "The THC IPv6 Toolkit provides command-line tools and a library
1463 for researching IPv6 implementations and deployments.  It requires Linux 2.6 or
1464 newer and only works on Ethernet network interfaces.")
1465     ;; AGPL 3 with exception for linking with OpenSSL. See the 'LICENSE' file in
1466     ;; the source distribution for more information.
1467     (license license:agpl3)))
1468
1469 (define-public bmon
1470   (package
1471     (name "bmon")
1472     (version "4.0")
1473     (source
1474      (origin
1475        (method url-fetch)
1476        (uri (string-append "https://github.com/tgraf/bmon/releases/download/v"
1477                            version "/bmon-" version ".tar.gz"))
1478        (sha256
1479         (base32
1480          "0ylzriv4pwh76344abzl1w219x188gshbycbna35gsyfp09c7z82"))))
1481     (build-system gnu-build-system)
1482     (inputs
1483      `(("libconfuse" ,libconfuse)
1484        ("libnl" ,libnl)
1485        ("ncurses" ,ncurses)))
1486     (native-inputs
1487      `(("pkg-config" ,pkg-config)))
1488     (synopsis "Bandwidth monitor")
1489     (description "bmon is a monitoring and debugging tool to capture
1490 networking-related statistics and prepare them visually in a human-friendly
1491 way.  It features various output methods including an interactive curses user
1492 interface and a programmable text output for scripting.")
1493     (home-page "https://github.com/tgraf/bmon")
1494     ;; README.md mentions both the 2-clause BSD and expat licenses, but all
1495     ;; the source files only have expat license headers. Upstream has been
1496     ;; contacted for clarification: https://github.com/tgraf/bmon/issues/59
1497     ;; Update the license field when upstream responds.
1498     (license (list license:bsd-2
1499                    license:expat))))
1500
1501 (define-public libnet
1502   (package
1503     (name "libnet")
1504     (version "1.1.6")
1505     (source (origin
1506               (method url-fetch)
1507               (uri (string-append "https://github.com/sam-github/libnet/"
1508                                   "archive/libnet-" version ".tar.gz"))
1509               (file-name (string-append name "-" version ".tar.gz"))
1510               (sha256
1511                (base32
1512                 "0l4gbzzvr199fzczzricjz7b825i7dlk6sgl5p5alnkcagmq0xys"))))
1513     (build-system gnu-build-system)
1514     (arguments
1515      `(#:phases
1516        (modify-phases %standard-phases
1517          (add-after 'unpack 'chdir
1518            (lambda _ (chdir "libnet") #t))
1519          (add-after 'chdir 'bootstrap
1520            (lambda _ (zero? (system* "autoreconf" "-vif"))))
1521          (add-before 'build 'build-doc
1522            (lambda* (#:key make-flags #:allow-other-keys)
1523              (zero? (apply system* "make" "-C" "doc" "doc"
1524                            make-flags)))))))
1525     (native-inputs
1526      `(("autoconf" ,autoconf)
1527        ("automake" ,automake)
1528        ("libtool" ,libtool)
1529        ("doxygen" ,doxygen)))
1530     (home-page "https://sourceforge.net/projects/libnet-dev/")
1531     (synopsis "Framework for low-level network packet construction")
1532     (description
1533      "Libnet provides a fairly portable framework for network packet
1534 construction and injection.  It features portable packet creation interfaces
1535 at the IP layer and link layer, as well as a host of supplementary
1536 functionality.  Using libnet, quick and simple packet assembly applications
1537 can be whipped up with little effort.")
1538     (license license:bsd-2)))