gnu/packages/networking.scm

   1 ;;; GNU Guix --- Functional package management for GNU
   2 ;;; Copyright © 2014, 2017, 2018 Ludovic Courtès <ludo@gnu.org>
   3 ;;; Copyright © 2015, 2016, 2017, 2018, 2020 Ricardo Wurmus <rekado@elephly.net>
   4 ;;; Copyright © 2015 Mark H Weaver <mhw@netris.org>
   5 ;;; Copyright © 2015, 2016, 2017 Stefan Reichör <stefan@xsteve.at>
   6 ;;; Copyright © 2016 Raimon Grau <raimonster@gmail.com>
   7 ;;; Copyright © 2016, 2017, 2018, 2019, 2020 Tobias Geerinckx-Rice <me@tobias.gr>
   8 ;;; Copyright © 2016 John Darrington <jmd@gnu.org>
   9 ;;; Copyright © 2016, 2017, 2018, 2019, 2020 Nicolas Goaziou <mail@nicolasgoaziou.fr>
  10 ;;; Copyright © 2016 Eric Bavier <bavier@member.fsf.org>
  11 ;;; Copyright © 2016, 2017 Nikita <nikita@n0.is>
  12 ;;; Copyright © 2016, 2017, 2018 Arun Isaac <arunisaac@systemreboot.net>
  13 ;;; Copyright © 2016 Benz Schenk <benz.schenk@uzh.ch>
  14 ;;; Copyright © 2016, 2017 Pjotr Prins <pjotr.guix@thebird.nl>
  15 ;;; Copyright © 2017 Mathieu Othacehe <m.othacehe@gmail.com>
  16 ;;; Copyright © 2017 Leo Famulari <leo@famulari.name>
  17 ;;; Copyright © 2017, 2018, 2019, 2020 Efraim Flashner <efraim@flashner.co.il>
  18 ;;; Copyright © 2017, 2018, 2019 Rutger Helling <rhelling@mykolab.com>
  19 ;;; Copyright © 2017, 2019 Gábor Boskovits <boskovits@gmail.com>
  20 ;;; Copyright © 2017 Thomas Danckaert <post@thomasdanckaert.be>
  21 ;;; Copyright © 2018 Adam Van Ymeren <adam@vany.ca>
  22 ;;; Copyright © 2018 Fis Trivial <ybbs.daans@hotmail.com>
  23 ;;; Copyright © 2018 Tonton <tonton@riseup.net>
  24 ;;; Copyright © 2018 Clément Lassieur <clement@lassieur.org>
  25 ;;; Copyright © 2018 Theodoros Foradis <theodoros@foradis.org>
  26 ;;; Copyright © 2018, 2020 Marius Bakke <mbakke@fastmail.com>
  27 ;;; Copyright © 2018, 2020 Oleg Pykhalov <go.wigust@gmail.com>
  28 ;;; Copyright © 2018 Pierre Neidhardt <mail@ambrevar.xyz>
  29 ;;; Copyright © 2019, 2020 Maxim Cournoyer <maxim.cournoyer@gmail.com>
  30 ;;; Copyright © 2019 Vasile Dumitrascu <va511e@yahoo.com>
  31 ;;; Copyright © 2019 Julien Lepiller <julien@lepiller.eu>
  32 ;;; Copyright © 2019 Timotej Lazar <timotej.lazar@araneo.si>
  33 ;;; Copyright © 2019 Brice Waegeneire <brice@waegenei.re>
  34 ;;; Copyright © 2019 Tonton <tonton@riseup.net>
  35 ;;; Copyright © 2019, 2020 Alex Griffin <a@ajgrf.com>
  36 ;;; Copyright © 2019, 2020 Jan Wielkiewicz <tona_kosmicznego_smiecia@interia.pl>
  37 ;;; Copyright © 2019 Daniel Schaefer <git@danielschaefer.me>
  38 ;;; Copyright © 2019 Diego N. Barbato <dnbarbato@posteo.de>
  39 ;;; Copyright © 2020 Vincent Legoll <vincent.legoll@gmail.com>
  40 ;;; Copyright © 2020 Brice Waegeneire <brice@waegenei.re>
  41 ;;; Copyright © 2020 Jakub Kądziołka <kuba@kadziolka.net>
  42 ;;;
  43 ;;; This file is part of GNU Guix.
  44 ;;;
  45 ;;; GNU Guix is free software; you can redistribute it and/or modify it
  46 ;;; under the terms of the GNU General Public License as published by
  47 ;;; the Free Software Foundation; either version 3 of the License, or (at
  48 ;;; your option) any later version.
  49 ;;;
  50 ;;; GNU Guix is distributed in the hope that it will be useful, but
  51 ;;; WITHOUT ANY WARRANTY; without even the implied warranty of
  52 ;;; MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
  53 ;;; GNU General Public License for more details.
  54 ;;;
  55 ;;; You should have received a copy of the GNU General Public License
  56 ;;; along with GNU Guix.  If not, see <http://www.gnu.org/licenses/>.
  57
  58 (define-module (gnu packages networking)
  59   #:use-module ((guix licenses) #:prefix license:)
  60   #:use-module (guix packages)
  61   #:use-module (guix download)
  62   #:use-module (guix git-download)
  63   #:use-module (guix build-system cmake)
  64   #:use-module (guix build-system glib-or-gtk)
  65   #:use-module (guix build-system gnu)
  66   #:use-module (guix build-system go)
  67   #:use-module (guix build-system meson)
  68   #:use-module (guix build-system perl)
  69   #:use-module (guix build-system python)
  70   #:use-module (guix build-system trivial)
  71   #:use-module (guix utils)
  72   #:use-module (gnu packages)
  73   #:use-module (gnu packages admin)
  74   #:use-module (gnu packages adns)
  75   #:use-module (gnu packages algebra)
  76   #:use-module (gnu packages audio)
  77   #:use-module (gnu packages autogen)
  78   #:use-module (gnu packages autotools)
  79   #:use-module (gnu packages base)
  80   #:use-module (gnu packages bison)
  81   #:use-module (gnu packages boost)
  82   #:use-module (gnu packages check)
  83   #:use-module (gnu packages code)
  84   #:use-module (gnu packages compression)
  85   #:use-module (gnu packages cpp)
  86   #:use-module (gnu packages crypto)
  87   #:use-module (gnu packages curl)
  88   #:use-module (gnu packages cyrus-sasl)
  89   #:use-module (gnu packages dejagnu)
  90   #:use-module (gnu packages docbook)
  91   #:use-module (gnu packages documentation)
  92   #:use-module (gnu packages flex)
  93   #:use-module (gnu packages freedesktop)
  94   #:use-module (gnu packages gettext)
  95   #:use-module (gnu packages glib)
  96   #:use-module (gnu packages gnome)
  97   #:use-module (gnu packages gnupg)
  98   #:use-module (gnu packages gtk)
  99   #:use-module (gnu packages image)
 100   #:use-module (gnu packages libevent)
 101   #:use-module (gnu packages libidn)
 102   #:use-module (gnu packages linux)
 103   #:use-module (gnu packages lua)
 104   #:use-module (gnu packages multiprecision)
 105   #:use-module (gnu packages kerberos)
 106   #:use-module (gnu packages ncurses)
 107   #:use-module (gnu packages nettle)
 108   #:use-module (gnu packages openldap)
 109   #:use-module (gnu packages password-utils)
 110   #:use-module (gnu packages pcre)
 111   #:use-module (gnu packages perl)
 112   #:use-module (gnu packages perl-check)
 113   #:use-module (gnu packages pkg-config)
 114   #:use-module (gnu packages polkit)
 115   #:use-module (gnu packages pretty-print)
 116   #:use-module (gnu packages pulseaudio)
 117   #:use-module (gnu packages python)
 118   #:use-module (gnu packages python-web)
 119   #:use-module (gnu packages python-xyz)
 120   #:use-module (gnu packages qt)
 121   #:use-module (gnu packages readline)
 122   #:use-module (gnu packages ruby)
 123   #:use-module (gnu packages samba)
 124   #:use-module (gnu packages serialization)
 125   #:use-module (gnu packages shells)
 126   #:use-module (gnu packages sqlite)
 127   #:use-module (gnu packages ssh)
 128   #:use-module (gnu packages textutils)
 129   #:use-module (gnu packages tls)
 130   #:use-module (gnu packages valgrind)
 131   #:use-module (gnu packages web)
 132   #:use-module (gnu packages wxwidgets)
 133   #:use-module (gnu packages xml)
 134   #:use-module (ice-9 match))
 135
 136 (define-public nng
 137   (package
 138     (name "nng")
 139     (version "1.3.0")
 140     (source
 141      (origin
 142        (method git-fetch)
 143        (uri
 144         (git-reference
 145          (url "https://github.com/nanomsg/nng.git")
 146          (commit (string-append "v" version))))
 147        (file-name (git-file-name name version))
 148        (sha256
 149         (base32 "042kmqzvdhv8fqmjr9kyi7rirm6akmpidfav6j14zhrab221n06j"))))
 150     (build-system cmake-build-system)
 151     (arguments
 152      `(#:configure-flags
 153        (list
 154         "-DNNG_ENABLE_COVERAGE=ON"
 155         "-DNNG_ENABLE_TLS=ON")
 156        #:phases
 157        (modify-phases %standard-phases
 158          (add-after 'unpack 'disable-failing-tests
 159            (lambda _
 160              ;; These tests require network access.
 161              (substitute* "tests/CMakeLists.txt"
 162                (("add_nng_test1\\(httpclient 60 NNG_SUPP_HTTP\\)") "")
 163                (("add_nng_test1\\(resolv 10 NNG_STATIC_LIB\\)") "")
 164                (("add_nng_test\\(tls 60\\)") ""))
 165              #t)))))
 166     (native-inputs
 167      `(("ksh" ,oksh)))
 168     (inputs
 169      `(("mbedtls" ,mbedtls-apache)))
 170     (synopsis "Lightweight messaging library")
 171     (description "NNG project is a rewrite of the scalability protocols library
 172 known as libnanomsg, and adds significant new capabilities, while retaining
 173 compatibility with the original.  It is a lightweight, broker-less library,
 174 offering a simple API to solve common recurring messaging problems, such as
 175 publish/subscribe, RPC-style request/reply, or service discovery.")
 176     (home-page "https://nng.nanomsg.org/")
 177     (license license:expat)))
 178
 179 (define-public nanomsg
 180   (package
 181     (name "nanomsg")
 182     (version "1.1.5")
 183     (source
 184      (origin
 185        (method git-fetch)
 186        (uri
 187         (git-reference
 188          (url "https://github.com/nanomsg/nanomsg.git")
 189          (commit version)))
 190        (file-name (git-file-name name version))
 191        (sha256
 192         (base32 "01ddfzjlkf2dgijrmm3j3j8irccsnbgfvjcnwslsfaxnrmrq5s64"))))
 193     (build-system cmake-build-system)
 194     (outputs '("out" "doc"))
 195     (arguments
 196      `(#:configure-flags
 197        (list
 198         "-DNN_ENABLE_COVERAGE=ON")
 199        #:phases
 200        (modify-phases %standard-phases
 201          (add-after 'install 'move-docs
 202            (lambda* (#:key outputs #:allow-other-keys)
 203              (let* ((out (assoc-ref outputs "out"))
 204                     (doc (assoc-ref outputs "doc")))
 205                (mkdir-p (string-append doc "/share/doc"))
 206                (rename-file
 207                 (string-append out "/share/doc/nanomsg")
 208                 (string-append doc "/share/doc/nanomsg"))
 209                #t))))))
 210     (native-inputs
 211      `(("asciidoctor" ,ruby-asciidoctor)
 212        ("pkg-config" ,pkg-config)))
 213     (synopsis "Scalable socket library")
 214     (description "Nanomsg is a socket library that provides several common
 215 communication patterns.  It aims to make the networking layer fast, scalable,
 216 and easy to use.  Implemented in C, it works on a wide range of operating
 217 systems with no further dependencies.")
 218     (home-page "https://nanomsg.org/")
 219     (license (license:non-copyleft "file:///COPYING"))))
 220
 221 (define-public blueman
 222   (package
 223     (name "blueman")
 224     (version "2.1.3")
 225     (source
 226      (origin
 227        (method url-fetch)
 228        (uri (string-append "https://github.com/blueman-project/blueman/releases"
 229                            "/download/" version "/blueman-" version ".tar.xz"))
 230        (sha256
 231         (base32 "1pngqbwapbvywhkmflapqvs0wa0af7d1a87wy56l5hg2r462xl1v"))))
 232     (build-system glib-or-gtk-build-system)
 233     (arguments
 234      `(#:configure-flags (list "--enable-polkit"
 235                                "--without-systemdsystemunitdir" ; Not required
 236                                "--without-systemduserunitdir")  ; Not required
 237        #:phases
 238        (modify-phases %standard-phases
 239          ;; Python references are not being patched in patch-phase of build,
 240          ;; despite using python-wrapper as input. So we patch them manually.
 241          (add-after 'unpack 'patch-python-references
 242            (lambda* (#:key inputs #:allow-other-keys)
 243              (with-directory-excursion "apps"
 244                (substitute* '("blueman-adapters.in" "blueman-applet.in"
 245                               "blueman-assistant.in" "blueman-manager.in"
 246                               "blueman-mechanism.in" "blueman-report.in"
 247                               "blueman-rfcomm-watcher.in" "blueman-sendto.in"
 248                               "blueman-services.in" "blueman-tray.in")
 249                  (("@PYTHON@") (string-append (assoc-ref inputs "python")
 250                                               "/bin/python"
 251                                               ,(version-major+minor
 252                                                 (package-version python))))))
 253              #t))
 254          ;; Fix loading of external programs.
 255          (add-after 'unpack 'patch-external-programs
 256            (lambda* (#:key inputs #:allow-other-keys)
 257              (substitute* '("apps/blueman-report.in" "blueman/main/NetConf.py"
 258                             "blueman/main/PPPConnection.py")
 259                (("/usr/sbin/bluetoothd")
 260                 (string-append (assoc-ref inputs "bluez")
 261                                "/libexec/bluetooth/bluetoothd"))
 262                (("/sbin/iptables")
 263                 (string-append (assoc-ref inputs "iptables")
 264                                "/sbin/iptables"))
 265                (("/usr/sbin/pppd")
 266                 (string-append (assoc-ref inputs "ppp")
 267                                "/sbin/pppd")))
 268              #t))
 269          ;; Fix loading of pulseaudio libraries.
 270          (add-after 'unpack 'patch-pulseaudio-libraries
 271            (lambda* (#:key inputs #:allow-other-keys)
 272              (let* ((pulseaudio (assoc-ref inputs "pulseaudio"))
 273                     (pulse (string-append pulseaudio "/lib/libpulse.so.0"))
 274                     (pulse-glib (string-append pulseaudio
 275                                                "/lib/libpulse-mainloop-glib.so.0")))
 276                (with-directory-excursion "blueman/main"
 277                  (substitute* "PulseAudioUtils.py"
 278                    (("libpulse.so.0") pulse)
 279                    (("libpulse-mainloop-glib.so.0") pulse-glib)))
 280                #t)))
 281          ;; Fix running of blueman programs.
 282          (add-after 'glib-or-gtk-wrap 'wrap-blueman-progs
 283            (lambda* (#:key outputs #:allow-other-keys)
 284              (let* ((out (assoc-ref outputs "out"))
 285                     (bin (string-append out "/bin/blueman-"))
 286                     (libexec (string-append out "/libexec/blueman-"))
 287                     (lib (string-append out "/lib/python"
 288                                         ,(version-major+minor
 289                                           (package-version python))
 290                                         "/site-packages")))
 291                (for-each
 292                 (lambda (program)
 293                   (wrap-program program
 294                     `("PYTHONPATH" = (,(getenv "PYTHONPATH") ,lib))
 295                     `("GI_TYPELIB_PATH" = (,(getenv "GI_TYPELIB_PATH")))))
 296                 (append
 297                  (map (lambda (prog) (string-append bin prog))
 298                       '("adapters" "applet" "assistant" "manager" "report"
 299                         "sendto" "services" "tray"))
 300                  (map (lambda (prog) (string-append libexec prog))
 301                       '("mechanism" "rfcomm-watcher"))))
 302                #t))))))
 303     (native-inputs
 304      `(("cython" ,python-cython)
 305        ("glib:bin" ,glib "bin")
 306        ("gobject-introspection" ,gobject-introspection)
 307        ("gtk+:bin" ,gtk+ "bin")
 308        ("intltool" ,intltool)
 309        ("pkg-config" ,pkg-config)))
 310     (inputs
 311      `(("bluez" ,bluez)
 312        ("dbus" ,dbus)
 313        ("gdkpixbuf" ,gdk-pixbuf+svg)
 314        ("glib" ,glib)
 315        ("gtk+" ,gtk+)
 316        ("iproute2" ,iproute)
 317        ("iptables" ,iptables)
 318        ("net-tools" ,net-tools)
 319        ("pango" ,pango)
 320        ("polkit" ,polkit)
 321        ("ppp" ,ppp)
 322        ("pulseaudio" ,pulseaudio)
 323        ("pycairo" ,python-pycairo)
 324        ("pygobject" ,python-pygobject)
 325        ("python" ,python-wrapper)
 326        ("libappindicator" ,libappindicator)
 327        ("libnm" ,network-manager)))
 328     (synopsis "GTK+ Bluetooth manager")
 329     (description "Blueman is a Bluetooth management utility using the Bluez
 330 D-Bus backend.  It is designed to be easy to use for most common Bluetooth
 331 tasks.")
 332     (home-page "https://github.com/blueman-project/blueman")
 333     (license license:gpl3+)))
 334
 335 ;; The gnu.org ‘home’ for this GNU project is a directory listing with 1.6.0 as
 336 ;; the latest version.  The author's git repository, mentioned in the 1.6.0
 337 ;; README and otherwise legit-looking, contains a proper 1.7.0 release tarball
 338 ;; with many OUI updates.  Use it, even though it's also several years old now.
 339 (define-public macchanger
 340   (package
 341     (name "macchanger")
 342     (version "1.7.0")
 343     (source
 344      (origin
 345        (method url-fetch)
 346        (uri (string-append "https://github.com/alobbs/macchanger/"
 347                            "releases/download/" version "/"
 348                            name "-" version ".tar.gz"))
 349        (sha256
 350         (base32 "1gs5m0jxyprdp00w2qkbnaqm3ilkjz0q1gqdg4nzdm8g4xy73qns"))))
 351     (build-system gnu-build-system)
 352     (home-page "https://www.gnu.org/software/macchanger/")
 353     (synopsis "Viewing and manipulating MAC addresses of network interfaces")
 354     (description "GNU MAC Changer is a utility for viewing and changing MAC
 355 addresses of networking devices.  New addresses may be set explicitly or
 356 randomly.  They can include MAC addresses of the same or other hardware vendors
 357 or, more generally, MAC addresses of the same category of hardware.")
 358     (license license:gpl2+)))
 359
 360 (define-public miredo
 361   (package
 362     (name "miredo")
 363     (version "1.2.6")
 364     (source (origin
 365               (method url-fetch)
 366               (uri (string-append "http://www.remlab.net/files/miredo/miredo-"
 367                                   version ".tar.xz"))
 368               (sha256
 369                (base32
 370                 "0j9ilig570snbmj48230hf7ms8kvcwi2wblycqrmhh85lksd49ps"))))
 371     (build-system gnu-build-system)
 372     (arguments
 373      '(#:phases
 374        (modify-phases %standard-phases
 375          ;; The checkconf test in src/ requires network access.
 376          (add-before
 377           'check 'disable-checkconf-test
 378           (lambda _
 379             (substitute* "src/Makefile"
 380               (("^TESTS = .*") "TESTS = \n"))
 381             #t)))))
 382     (home-page "https://www.remlab.net/miredo/")
 383     (synopsis "Teredo IPv6 tunneling software")
 384     (description
 385      "Miredo is an implementation (client, relay, server) of the Teredo
 386 specification, which provides IPv6 Internet connectivity to IPv6 enabled hosts
 387 residing in IPv4-only networks, even when they are behind a NAT device.")
 388     (license license:gpl2+)))
 389
 390 (define-public ndisc6
 391   (package
 392     (name "ndisc6")
 393     (version "1.0.4")
 394     (source (origin
 395               (method url-fetch)
 396               (uri (string-append "https://www.remlab.net/files/ndisc6/ndisc6-"
 397                                   version ".tar.bz2"))
 398               (sha256
 399                (base32
 400                 "07swyar1hl83zxmd7fqwb2q0c0slvrswkcfp3nz5lknrk15dmcdb"))))
 401     (build-system gnu-build-system)
 402     (home-page "https://www.remlab.net/ndisc6/")
 403     (synopsis "IPv6 diagnostic tools")
 404     (description
 405      "NDisc6 is a collection of tools for IPv6 networking diagnostics.
 406 It includes the following programs:
 407
 408 @itemize
 409 @item @command{ndisc6}: ICMPv6 Neighbor Discovery tool.
 410 @item @command{rdisc6}: ICMPv6 Router Discovery tool.
 411 @item @command{tcptraceroute6}: IPv6 traceroute over TCP.
 412 @item @command{traceroute6}: IPv6 traceroute over UDP.
 413 @item @command{rdnssd}: Recursive DNS Servers discovery daemon.
 414 @end itemize")
 415     ;; The user can choose version 2 or 3 of the GPL, not later versions.
 416     (license (list license:gpl2 license:gpl3))))
 417
 418 (define-public parprouted
 419   (package
 420     (name "parprouted")
 421     (version "0.7")
 422     (source (origin
 423               (method url-fetch)
 424               (uri (string-append "https://www.hazard.maks.net/parprouted/"
 425                                   "parprouted-" version ".tar.gz"))
 426               (sha256
 427                (base32
 428                 "1z6yg28i0pv20jivyy82pxb38hsryj95inhj27bs6ja1bp4l6dnn"))))
 429     (build-system gnu-build-system)
 430     (arguments
 431      `(#:tests? #f                      ;no tests
 432        #:phases (modify-phases %standard-phases
 433                   (add-after 'unpack 'insert-absolute-iproute-reference
 434                     (lambda* (#:key inputs #:allow-other-keys)
 435                       (let* ((iproute (assoc-ref inputs "iproute"))
 436                              (ip (string-append iproute "/sbin/ip")))
 437                         (substitute* "parprouted.c"
 438                           (("/sbin/ip") ip))
 439                         #t)))
 440                   (replace 'configure
 441                     (lambda* (#:key outputs #:allow-other-keys)
 442                       (let* ((out (assoc-ref outputs "out"))
 443                              (sbin (string-append out "/sbin"))
 444                              (man8 (string-append out "/share/man/man8")))
 445                         ;; No configure script; hijack the phase to make
 446                         ;; the necessary arrangements.
 447                         (setenv "CC" ,(cc-for-target))
 448                         (for-each mkdir-p (list sbin man8))
 449                         (substitute* "Makefile"
 450                           (("/usr/local/sbin") sbin)
 451                           (("/usr/local/man/man8") man8))
 452                         #t))))))
 453     (inputs
 454      `(("iproute" ,iproute)))
 455     (home-page "https://www.hazard.maks.net/parprouted/")
 456     (synopsis "Proxy ARP requests to other interfaces")
 457     (description
 458      "@command{parprouted} is a daemon for transparent IP (Layer@tie{}3)
 459 proxy ARP bridging.  Unlike standard bridging, proxy ARP bridging can bridge
 460 Ethernet networks behind wireless nodes.  Normal layer@tie{}2 bridging does
 461 not work between wireless nodes because wireless does not know about MAC
 462 addresses used in the wired Ethernet networks.  This daemon can also be
 463 useful for making transparent firewalls.")
 464     (license license:gpl2)))
 465
 466 (define-public socat
 467   (package
 468     (name "socat")
 469     (version "1.7.3.4")
 470     (source (origin
 471               (method url-fetch)
 472               (uri (string-append
 473                     "http://www.dest-unreach.org/socat/download/socat-"
 474                     version ".tar.bz2"))
 475               (sha256
 476                (base32
 477                 "1z7xgnwiqpcv1j6aghhj9nqbx7cg3gpc4n9j7vi9hm7nhv5788wp"))))
 478     (build-system gnu-build-system)
 479     (arguments '(#:tests? #f))          ; no test suite
 480     (inputs `(("openssl" ,openssl)))
 481     (home-page "http://www.dest-unreach.org/socat/")
 482     (synopsis
 483      "Open bidirectional communication channels from the command line")
 484     (description
 485      "socat is a relay for bidirectional data transfer between two independent
 486 data channels---files, pipes, devices, sockets, etc.  It can create
 487 \"listening\" sockets, named pipes, and pseudo terminals.
 488
 489 socat can be used, for instance, as TCP port forwarder, as a shell interface
 490 to UNIX sockets, IPv6 relay, for redirecting TCP oriented programs to a serial
 491 line, to logically connect serial lines on different computers, or to
 492 establish a relatively secure environment (su and chroot) for running client
 493 or server shell scripts with network connections.")
 494     (license license:gpl2)))
 495
 496 (define-public tcp-wrappers
 497   (package
 498     (name "tcp-wrappers")
 499     (version "7.6")
 500     (source (origin
 501               (method url-fetch)
 502               (uri (string-append
 503                     "ftp://ftp.porcupine.org/pub/security/tcp_wrappers_"
 504                     version ".tar.gz"))
 505               (sha256
 506                (base32
 507                 "0p9ilj4v96q32klavx0phw9va21fjp8vpk11nbh6v2ppxnnxfhwm"))))
 508     (build-system gnu-build-system)
 509     (arguments
 510      `(#:phases
 511        (modify-phases %standard-phases
 512          (delete 'configure)  ; there is no configure script
 513          (delete 'check)      ; there are no tests
 514          (replace 'build
 515            (lambda _
 516              (chmod "." #o755)
 517              ;; Upstream doesn't generate a shared library.  So we have to do it.
 518              (setenv "CC" "gcc -fno-builtin -fPIC")
 519              (substitute* "Makefile"
 520                (("^(all[^\n]*)" line) (string-append line " libwrap.so\n
 521 libwrap.so: $(LIB_OBJ)\n
 522 \tgcc -shared $^ -o $@\n")))
 523              ;; Deal with some gcc breakage.
 524              (substitute* "percent_m.c"
 525                (("extern char .sys_errlist.*;") ""))
 526              (substitute* "scaffold.c"
 527                (("extern char .malloc.*;") ""))
 528              ;; This, believe it or not, is the recommended way to build!
 529              (invoke "make" "REAL_DAEMON_DIR=/etc" "linux")))
 530          ;; There is no make install stage, so we have to do it ourselves.
 531          (replace 'install
 532            (lambda _
 533              (let ((out (assoc-ref %outputs "out"))
 534                    (man-pages `("hosts_access.3"
 535                                 "hosts_access.5"
 536                                 "hosts_options.5"
 537                                 "tcpd.8"
 538                                 "tcpdchk.8"
 539                                 "tcpdmatch.8"))
 540                    (libs  `("libwrap.a"
 541                             "libwrap.so"))
 542                    (headers `("tcpd.h"))
 543                    (bins `("safe_finger"
 544                            "tcpd"
 545                            "tcpdchk"
 546                            "tcpdmatch"
 547                            "try-from")))
 548                (for-each
 549                 (lambda (x)
 550                   (install-file x (string-append out "/include")))
 551                 headers)
 552                (for-each
 553                 (lambda (x)
 554                   (install-file x (string-append out "/share/man/man"
 555                                                  (string-take-right x 1))))
 556                 man-pages)
 557                (for-each
 558                 (lambda (x)
 559                   (install-file x (string-append out "/lib/")))
 560                 libs)
 561                (for-each
 562                 (lambda (x)
 563                   (install-file x (string-append out "/bin/")))
 564                 bins))
 565              #t)))))
 566     (home-page "http://www.porcupine.org")
 567     (synopsis  "Monitor and filter incoming requests for network services")
 568     (description "With this package you can monitor and filter incoming requests for
 569 network services.  It includes a library which may be used by daemons to
 570 transparently check connection attempts against an access control list.")
 571     (license (license:non-copyleft "file://DISCLAIMER"
 572                                    "See the file DISCLAIMER in the distribution."))))
 573
 574
 575 (define-public zeromq
 576   (package
 577     (name "zeromq")
 578     (version "4.3.2")
 579     (source (origin
 580               (method url-fetch)
 581               (uri (string-append "https://github.com/zeromq/libzmq/releases"
 582                                   "/download/v" version "/zeromq-" version ".tar.gz"))
 583               (sha256
 584                (base32
 585                 "0qzp80ky4y2k7k1ya09v9gkivvfbz2km813snrb8jhnn634bbmzb"))))
 586     (build-system gnu-build-system)
 587     (home-page "https://zeromq.org")
 588     (synopsis "Library for message-based applications")
 589     (description
 590      "The 0MQ lightweight messaging kernel is a library which extends the
 591 standard socket interfaces with features traditionally provided by specialized
 592 messaging middle-ware products.  0MQ sockets provide an abstraction of
 593 asynchronous message queues, multiple messaging patterns, message
 594 filtering (subscriptions), seamless access to multiple transport protocols and
 595 more.")
 596     (license license:lgpl3+)))
 597
 598 (define-public czmq
 599   (package
 600     (name "czmq")
 601     (version "4.2.0")
 602     (source (origin
 603               (method url-fetch)
 604               (uri (string-append
 605                     "https://github.com/zeromq/" name
 606                     "/releases/download/v" version
 607                     "/" name "-" version ".tar.gz"))
 608               (sha256
 609                (base32
 610                 "1szciz62sk3fm4ga9qjpxz0n0lazvphm32km95bq92ncng12kayg"))))
 611     (build-system gnu-build-system)
 612     (arguments
 613      '(#:configure-flags '("--enable-drafts")
 614        #:phases (modify-phases %standard-phases
 615                   (add-before 'check 'patch-tests
 616                     (lambda _
 617                       ;; XXX FIXME: Disable the zproc test, which fails on some
 618                       ;; hardware: <https://github.com/zeromq/czmq/issues/2007>.
 619                       (substitute* "src/czmq_selftest.c"
 620                         (("\\{ \"zproc\", zproc_test.*")
 621                          ""))
 622                       #t)))))
 623     (inputs
 624      `(("zeromq" ,zeromq)))
 625     (home-page "https://zeromq.org")
 626     (synopsis "High-level C bindings for ØMQ")
 627     (description
 628      "czmq provides bindings for the ØMQ core API that hides the differences
 629 between different versions of ØMQ.")
 630     (license license:mpl2.0)))
 631
 632 (define-public cppzmq
 633   (package
 634     (name "cppzmq")
 635     (version "4.6.0")
 636     (source (origin
 637               (method git-fetch)
 638               (uri (git-reference
 639                     (url "https://github.com/zeromq/cppzmq")
 640                     (commit (string-append "v" version))))
 641               (sha256
 642                (base32
 643                 "19acx2bzi4n6fdnfgkja1nds7m1bwg8lw5vfcijrx9fv75pa7m8h"))
 644               (file-name (git-file-name name version))))
 645     (build-system cmake-build-system)
 646     (arguments
 647      '(;; FIXME: The test suite requires downloading Catch and custom
 648        ;; CMake targets, and refuses to use the system version.
 649        ;; See <https://github.com/zeromq/cppzmq/issues/334>.
 650        #:tests? #f
 651        #:configure-flags '("-DCPPZMQ_BUILD_TESTS=OFF")))
 652     (native-inputs
 653      `(("pkg-config" ,pkg-config)))
 654     (inputs
 655      `(("zeromq" ,zeromq)))
 656     (home-page "https://zeromq.org")
 657     (synopsis "C++ bindings for the ØMQ messaging library")
 658     (description
 659      "This package provides header-only C++ bindings for ØMQ.  The header
 660 files contain direct mappings of the abstractions provided by the ØMQ C API.")
 661     (license license:expat)))
 662
 663 (define-public libnatpmp
 664   (package
 665     (name "libnatpmp")
 666     (version "20150609")
 667     (source (origin
 668               (method url-fetch)
 669               (uri (string-append
 670                     "http://miniupnp.free.fr/files/"
 671                     name "-" version ".tar.gz"))
 672               (sha256
 673                (base32
 674                 "1c1n8n7mp0amsd6vkz32n8zj3vnsckv308bb7na0dg0r8969rap1"))))
 675     (build-system gnu-build-system)
 676     (arguments
 677      `(#:phases
 678        (modify-phases %standard-phases
 679          (delete 'configure)
 680          (delete 'check)) ; no tests
 681        #:make-flags
 682        (let* ((target ,(%current-target-system))
 683               (gcc (if target
 684                        (string-append target "-gcc")
 685                        "gcc")))
 686          (list
 687           (string-append "CC=" gcc)
 688           (string-append "INSTALLPREFIX=" (assoc-ref %outputs "out"))
 689           (string-append "LDFLAGS=-Wl,-rpath=" %output "/lib")))))
 690     (home-page "http://miniupnp.free.fr/libnatpmp.html")
 691     (synopsis "C library implementing NAT-PMP")
 692     (description
 693      "@code{libnatpmp} is a portable and asynchronous implementation of
 694 the Network Address Translation - Port Mapping Protocol (NAT-PMP)
 695 written in the C programming language.")
 696     (license license:bsd-3)))
 697
 698 (define-public librdkafka
 699   (package
 700     (name "librdkafka")
 701     (version "1.4.2")
 702     (source (origin
 703               (method git-fetch)
 704               (uri (git-reference
 705                     (url "https://github.com/edenhill/librdkafka")
 706                     (commit (string-append "v" version))))
 707               (file-name (git-file-name name version))
 708               (sha256
 709                (base32
 710                 "05mgrdzacn9kdpr68r5j0cvsvl54s52glnsc1ww9rcxx6p7hq1ly"))))
 711     (build-system gnu-build-system)
 712     (arguments
 713      '(#:phases
 714        (modify-phases %standard-phases
 715          (replace 'configure
 716            ;; its custom configure script doesn't understand 'CONFIG_SHELL'.
 717            (lambda* (#:key outputs #:allow-other-keys)
 718              (let ((out (assoc-ref outputs "out")))
 719                ;; librdkafka++.so lacks RUNPATH for librdkafka.so
 720                (setenv "LDFLAGS"
 721                        (string-append "-Wl,-rpath=" out "/lib"))
 722                (invoke "./configure"
 723                        (string-append "--prefix=" out))))))))
 724     (native-inputs
 725      `(("python" ,python-wrapper)))
 726     (propagated-inputs
 727      `(("zlib" ,zlib))) ; in the Libs.private field of rdkafka.pc
 728     (home-page "https://github.com/edenhill/librdkafka")
 729     (synopsis "Apache Kafka C/C++ client library")
 730     (description
 731      "librdkafka is a C library implementation of the Apache Kafka protocol,
 732 containing both Producer and Consumer support.")
 733     (license license:bsd-2)))
 734
 735 (define-public libndp
 736   (package
 737     (name "libndp")
 738     (version "1.7")
 739     (source (origin
 740               (method url-fetch)
 741               (uri (string-append "https://libndp.org/files/"
 742                                   "libndp-" version ".tar.gz"))
 743               (sha256
 744                (base32
 745                 "1dlinhl39va00v55qygjc9ap77yqf7xvn4rwmvdr49xhzzxhlj1c"))))
 746     (build-system gnu-build-system)
 747     (home-page "https://libndp.org/")
 748     (synopsis "Library for Neighbor Discovery Protocol")
 749     (description
 750      "libndp contains a library which provides a wrapper for IPv6 Neighbor
 751 Discovery Protocol.  It also provides a tool named ndptool for sending and
 752 receiving NDP messages.")
 753     (license license:lgpl2.1+)))
 754
 755 (define-public ethtool
 756   (package
 757     (name "ethtool")
 758     (version "5.8")
 759     (source (origin
 760               (method url-fetch)
 761               (uri (string-append "mirror://kernel.org/software/network/"
 762                                   "ethtool/ethtool-" version ".tar.xz"))
 763               (sha256
 764                (base32
 765                 "0ikmz36bdfwxscsfcgjmyzg70hwr8i3wpdhcp1vmk3q4ip858frg"))))
 766     (build-system gnu-build-system)
 767     (native-inputs
 768      `(("pkg-config" ,pkg-config)))
 769     (inputs
 770      `(("libmnl" ,libmnl)))
 771     (home-page "https://www.kernel.org/pub/software/network/ethtool/")
 772     (synopsis "Display or change Ethernet device settings")
 773     (description
 774      "ethtool can be used to query and change settings such as speed,
 775 auto-negotiation and checksum offload on many network devices, especially
 776 Ethernet devices.")
 777     (license license:gpl2)))
 778
 779 (define-public ifstatus
 780   (package
 781     (name "ifstatus")
 782     (version "1.1.0")
 783     (source (origin
 784               (method url-fetch)
 785               (uri (string-append "mirror://sourceforge/ifstatus/ifstatus/"
 786                                   "ifstatus%20v" version "/ifstatus-v"
 787                                   version ".tar.gz"))
 788               (sha256
 789                (base32
 790                 "045cbsq9ps32j24v8y5hpyqxnqn9mpaf3mgvirlhgpqyb9jsia0c"))
 791               (modules '((guix build utils)))
 792               (snippet
 793                '(begin
 794                   (substitute* "Main.h"
 795                     (("#include <stdio.h>")
 796                      "#include <stdio.h>\n#include <stdlib.h>"))
 797                   #t))))
 798     (build-system gnu-build-system)
 799     (arguments
 800      '(#:tests? #f                                ; no "check" target
 801        #:phases
 802        (modify-phases %standard-phases
 803          (delete 'configure)             ; no configure script
 804          (replace 'install
 805                   (lambda* (#:key outputs #:allow-other-keys)
 806                     (let* ((out (assoc-ref outputs "out"))
 807                            (bin (string-append out "/bin")))
 808                       (mkdir-p bin)
 809                       (copy-file "ifstatus"
 810                                  (string-append bin "/ifstatus")))
 811                     #t)))))
 812     (inputs `(("ncurses" ,ncurses)))
 813     (home-page "http://ifstatus.sourceforge.net/graphic/index.html")
 814     (synopsis "Text based network interface status monitor")
 815     (description
 816      "IFStatus is a simple, easy-to-use program for displaying commonly
 817 needed/wanted real-time traffic statistics of multiple network
 818 interfaces, with a simple and efficient view on the command line.  It is
 819 intended as a substitute for the PPPStatus and EthStatus projects.")
 820     (license license:gpl2+)))
 821
 822 (define-public iputils
 823   (package
 824     (name "iputils")
 825     (version "20190709")
 826     (home-page "https://github.com/iputils/iputils")
 827     (source (origin
 828               (method git-fetch)
 829               (uri (git-reference (url home-page)
 830                                   (commit (string-append "s" version))))
 831               (file-name (git-file-name name version))
 832               (patches (search-patches "iputils-libcap-compat.patch"))
 833               (sha256
 834                (base32
 835                 "04bp4af15adp79ipxmiakfp0ij6hx5qam266flzbr94pr8z8l693"))))
 836     (build-system meson-build-system)
 837     (arguments
 838      `(#:configure-flags '("-DBUILD_RARPD=true")
 839        #:phases
 840        (modify-phases %standard-phases
 841          (add-after 'unpack 'fix-docbook-url
 842            (lambda* (#:key inputs #:allow-other-keys)
 843              (let* ((docbook-xsl (assoc-ref inputs "docbook-xsl"))
 844                     (uri (string-append docbook-xsl "/xml/xsl/docbook-xsl-"
 845                                         ,(package-version docbook-xsl))))
 846                (for-each
 847                 (lambda (file)
 848                   (substitute* file
 849                     (("http://docbook\\.sourceforge\\.net/release/xsl-ns/current")
 850                      uri)))
 851                 (cons "doc/meson.build"
 852                       (find-files "doc" "\\.xsl$")))
 853                #t))))))
 854     (native-inputs
 855      `(("gettext" ,gettext-minimal)
 856        ("pkg-config" ,pkg-config)
 857        ("docbook-xsl" ,docbook-xsl)
 858        ("docbook-xml" ,docbook-xml-5)
 859        ("libxml2" ,libxml2)          ;for XML_CATALOG_FILES
 860        ("xsltproc" ,libxslt)))
 861     (inputs
 862      `(("libcap" ,libcap)
 863        ("libidn2" ,libidn2)
 864        ("openssl" ,openssl)))
 865     (synopsis "Collection of network utilities")
 866     (description
 867      "This package contains a variety of tools for dealing with network
 868 configuration, troubleshooting, or servers.  Utilities included are:
 869
 870 @itemize @bullet
 871 @item @command{arping}: Ping hosts using the @dfn{Address Resolution Protocol}.
 872 @item @command{clockdiff}: Compute time difference between network hosts
 873 using ICMP TSTAMP messages.
 874 @item @command{ninfod}: Daemon that responds to IPv6 Node Information Queries.
 875 @item @command{ping}: Use ICMP ECHO messages to measure round-trip delays
 876 and packet loss across network paths.
 877 @item @command{rarpd}: Answer RARP requests from clients.
 878 @item @command{rdisc}: Populate network routing tables with information from
 879 the ICMP router discovery protocol.
 880 @item @command{tftpd}: Trivial file transfer protocol server.
 881 @item @command{tracepath}: Trace network path to an IPv4 or IPv6 address and
 882 discover MTU along the way.
 883 @end itemize")
 884     ;; The various utilities are covered by different licenses, see LICENSE
 885     ;; for details.
 886     (license (list license:gpl2+  ;arping, rarpd, tracepath
 887                    license:bsd-3  ;clockdiff, ninfod, ping, tftpd
 888                    (license:non-copyleft
 889                     "https://spdx.org/licenses/Rdisc.html"
 890                     "Sun Microsystems license, see rdisc.c for details")))))
 891
 892 (define-public nload
 893   (package
 894     (name "nload")
 895     (version "0.7.4")
 896     (source (origin
 897               (method url-fetch)
 898               (uri (string-append "mirror://sourceforge/nload/nload/" version
 899                                   "/nload-" version ".tar.gz"))
 900               (sha256
 901                (base32
 902                 "1rb9skch2kgqzigf19x8bzk211jdfjfdkrcvaqyj89jy2pkm3h61"))))
 903     (build-system gnu-build-system)
 904     (inputs `(("ncurses" ,ncurses)))
 905     (home-page "http://www.roland-riegel.de/nload/")
 906     (synopsis "Realtime console network usage monitor")
 907     (description
 908      "Nload is a console application which monitors network traffic and
 909 bandwidth usage in real time.  It visualizes the in- and outgoing traffic using
 910 two graphs, and provides additional info like total amount of transferred data
 911 and min/max network usage.")
 912     (license license:gpl2+)))
 913
 914 (define-public iodine
 915   (package
 916     (name "iodine")
 917     (version "0.7.0")
 918     (source (origin
 919               (method url-fetch)
 920               (uri (string-append "http://code.kryo.se/" name "/"
 921                                   name "-" version ".tar.gz"))
 922               (sha256
 923                (base32
 924                 "0gh17kcxxi37k65zm4gqsvbk3aw7yphcs3c02pn1c4s2y6n40axd"))))
 925     (build-system gnu-build-system)
 926     (arguments
 927      '(#:phases
 928        (modify-phases %standard-phases
 929          (delete 'configure)
 930          (add-before 'build 'fix-ifconfig-path
 931            ;; This package works only with the net-tools version of ifconfig.
 932            (lambda* (#:key inputs #:allow-other-keys)
 933              (substitute* "src/tun.c"
 934                (("PATH=[^ ]* ")
 935                 (string-append (assoc-ref inputs "net-tools") "/bin/")))
 936              #t))
 937          (add-before 'check 'delete-failing-tests
 938            ;; Avoid https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=802105.
 939            (lambda _
 940              (substitute* "tests/common.c"
 941                (("tcase_add_test\\(tc, \
 942 test_parse_format_ipv(4(|_listen_all|_mapped_ipv6)|6)\\);")
 943                 ""))
 944              #t)))
 945        #:make-flags (list "CC=gcc"
 946                           (string-append "prefix=" (assoc-ref %outputs "out")))
 947        #:test-target "test"))
 948     (inputs `(("net-tools" ,net-tools)
 949               ("zlib" ,zlib)))
 950     (native-inputs `(("check" ,check)
 951                      ("pkg-config" ,pkg-config)))
 952     (home-page "https://code.kryo.se/iodine/")
 953     (synopsis "Tunnel IPv4 data through a DNS server")
 954     (description "Iodine tunnels IPv4 data through a DNS server.  This
 955 can be useful in different situations where internet access is firewalled, but
 956 DNS queries are allowed.  The bandwidth is asymmetrical, with limited upstream
 957 and up to 1 Mbit/s downstream.")
 958     ;; src/md5.[ch] is released under the zlib license
 959     (license (list license:isc license:zlib))))
 960
 961 (define-public whois
 962   (package
 963     (name "whois")
 964     (version "5.5.6")
 965     (source
 966      (origin
 967        (method url-fetch)
 968        (uri (string-append "mirror://debian/pool/main/w/whois/"
 969                            "whois_" version ".tar.xz"))
 970        (sha256
 971         (base32 "0kpi981zjczvdcxfcq455c529vlaxa73x8kbm530z5b01h0fk8fb"))))
 972     (build-system gnu-build-system)
 973     (arguments
 974      `(#:tests? #f                      ; no test suite
 975        #:make-flags (list "CC=gcc"
 976                           (string-append "prefix=" (assoc-ref %outputs "out")))
 977        #:phases
 978        (modify-phases %standard-phases
 979          (delete 'configure)            ; no configure script
 980          (add-before 'build 'setenv
 981            (lambda _
 982              (setenv "HAVE_ICONV" "1")
 983              #t)))))
 984     (inputs
 985      `(("libidn2" ,libidn2)))
 986     (native-inputs
 987      `(("gettext" ,gettext-minimal)
 988        ("perl" ,perl)
 989        ("pkg-config" ,pkg-config)))
 990     (synopsis "Intelligent client for the WHOIS directory service")
 991     (description
 992       "whois searches for an object in a @dfn{WHOIS} (RFC 3912) database.
 993 It is commonly used to look up the registered users or assignees of an Internet
 994 resource, such as a domain name, an IP address block, or an autonomous system.
 995 It can automatically select the appropriate server for most queries.
 996
 997 For historical reasons, this package also includes @command{mkpasswd}, which
 998 encrypts passwords using @code{crypt(3)} and is unrelated to the Expect command
 999 of the same name.")
1000     (home-page "https://github.com/rfc1036/whois")
1001     (license license:gpl2+)))
1002
1003 (define-public wireshark
1004   (package
1005     (name "wireshark")
1006     (version "3.2.5")
1007     (source
1008      (origin
1009        (method url-fetch)
1010        (uri (string-append "https://www.wireshark.org/download/src/wireshark-"
1011                            version ".tar.xz"))
1012        (sha256
1013         (base32 "0h69m9maq6w5gik4gamv4kfqrr37hmi4kpwh225y1k36awm0b2dx"))))
1014     (build-system cmake-build-system)
1015     (arguments
1016      `(#:phases
1017        (modify-phases %standard-phases
1018          (add-after 'unpack 'remove-failing-test
1019            ;; Test 31/32 fails with errors like "Program reassemble_test is
1020            ;; not available".  Skipping it for now.
1021            (lambda _
1022              (substitute* "CMakeLists.txt"
1023                (("suite_unittests" all) (string-append "# " all)))
1024              #t)))
1025        ;; Build process chokes during `validate-runpath' phase.
1026        ;;
1027        ;; Errors are like the following:
1028        ;; "/gnu/store/...wireshark-3.0.0/lib/wireshark/plugins/3.0/epan/ethercat.so:
1029        ;; error: depends on 'libwireshark.so.12', which cannot be found in
1030        ;; RUNPATH".  That is, "/gnu/store/...wireshark-3.0.0./lib" doesn't
1031        ;; belong to RUNPATH.
1032        ;;
1033        ;; That’s not a problem in practice because "ethercat.so" is a plugin,
1034        ;; so it’s dlopen’d by a process that already provides "libwireshark".
1035        ;; For now, we disable this phase.
1036        #:validate-runpath? #f))
1037     (inputs
1038      `(("c-ares" ,c-ares)
1039        ("glib" ,glib)
1040        ("gnutls" ,gnutls)
1041        ("libcap" ,libcap)
1042        ("libgcrypt" ,libgcrypt)
1043        ("libnl" ,libnl)
1044        ("libpcap" ,libpcap)
1045        ("libssh" ,libssh)
1046        ("libxml2" ,libxml2)
1047        ("lz4" ,lz4)
1048        ("lua" ,lua-5.2)                 ;Lua 5.3 unsupported
1049        ("krb5" ,mit-krb5)
1050        ("qtbase" ,qtbase)
1051        ("qtmultimedia" ,qtmultimedia)
1052        ("qtsvg" ,qtsvg)
1053        ("sbc" ,sbc)
1054        ("snappy" ,snappy)
1055        ("zlib" ,zlib)))
1056     (native-inputs
1057      `(("bison" ,bison)
1058        ("doxygen" ,doxygen)
1059        ("flex" ,flex)
1060        ("gettext" ,gettext-minimal)
1061        ("perl" ,perl)
1062        ("pkg-config" ,pkg-config)
1063        ("python" ,python-wrapper)
1064        ("qttools" ,qttools)))
1065     (synopsis "Network traffic analyzer")
1066     (description "Wireshark is a network protocol analyzer, or @dfn{packet
1067 sniffer}, that lets you capture and interactively browse the contents of
1068 network frames.")
1069     (home-page "https://www.wireshark.org/")
1070     (license license:gpl2+)))
1071
1072 (define-public fping
1073   (package
1074     (name "fping")
1075     (version "5.0")
1076     (source
1077      (origin
1078        (method url-fetch)
1079        (uri (string-append "https://fping.org/dist/fping-"
1080                            version ".tar.gz"))
1081        (sha256
1082         (base32 "1f2prmii4fyl44cfykp40hp4jjhicrhddh9v3dfs11j6nsww0f7d"))))
1083     (build-system gnu-build-system)
1084     (home-page "https://fping.org/")
1085     (synopsis "Send ICMP ECHO_REQUEST packets to network hosts")
1086     (description
1087      "fping is a ping-like program which uses @acronym{ICMP, Internet Control
1088 Message Protocol} echo requests to determine if a target host is responding.
1089
1090 @command{fping} differs from @command{ping} in that you can specify any number
1091 of targets on the command line, or specify a file containing the lists of
1092 targets to ping.  Instead of sending to one target until it times out or
1093 replies, fping will send out a ping packet and move on to the next target in a
1094 round-robin fashion.")
1095     (license license:expat)))
1096
1097 (define-public gandi.cli
1098   (package
1099     (name "gandi.cli")
1100     (version "1.5")
1101     (source
1102      (origin
1103        (method url-fetch)
1104        (uri (pypi-uri name version))
1105        (sha256
1106         (base32 "110wc9zgxsrvw4yzp21p0ian5lcf7vhcpxhnmsc4fg9pzl2bwxd5"))))
1107     (build-system python-build-system)
1108     (arguments
1109      `(#:phases
1110        (modify-phases %standard-phases
1111          (add-after 'unpack 'embed-store-file-names
1112            (lambda _
1113              (substitute* (list "gandi/cli/modules/cert.py"
1114                                 "gandi/cli/tests/commands/test_certificate.py")
1115                (("openssl") (which "openssl")))
1116              #t))
1117          (add-after 'install 'install-documentation
1118            ;; The included man page may be outdated but we install it anyway,
1119            ;; since it's mentioned in 'gandi --help' and better than nothing.
1120            (lambda* (#:key outputs #:allow-other-keys)
1121              (let* ((out  (assoc-ref outputs "out"))
1122                     (man1 (string-append out "/share/man/man1")))
1123                (mkdir-p man1)
1124                (with-output-to-file (string-append man1 "/gandi.1")
1125                  (lambda _
1126                    (invoke "rst2man.py" "gandicli.man.rst")))
1127                #t))))))
1128     (native-inputs
1129      `(("python-docutils" ,python-docutils)   ; for rst2man.py
1130        ("python-pytest-cov" ,python-pytest-cov)
1131        ("python-tox" ,python-tox)))
1132     (inputs
1133      `(("openssl" ,openssl)
1134        ("python-click" ,python-click)
1135        ("python-ipy" ,python-ipy)
1136        ("python-pyyaml" ,python-pyyaml)
1137        ("python-requests" ,python-requests)))
1138     (home-page "https://cli.gandi.net")
1139     (synopsis "Command-line interface to the Gandi.net Web API")
1140     (description
1141      "This package provides a command-line client (@command{gandi}) to buy,
1142 manage, and delete Internet resources from Gandi.net such as domain names,
1143 virtual machines, and certificates.")
1144     (license license:gpl3+)))
1145
1146 (define-public go-netns
1147   (let ((commit "13995c7128ccc8e51e9a6bd2b551020a27180abd")
1148         (revision "1"))
1149     (package
1150       (name "go-netns")
1151       (version (git-version "0.0.0" revision commit))
1152       (source (origin
1153                 (method git-fetch)
1154                 (uri (git-reference
1155                       (url "https://github.com/vishvananda/netns")
1156                       (commit commit)))
1157                 (file-name (git-file-name name version))
1158                 (sha256
1159                  (base32
1160                   "1zk6w8158qi4niva5rijchbv9ixgmijsgqshh54wdaav4xrhjshn"))))
1161       (build-system go-build-system)
1162       (arguments
1163        `(#:import-path "github.com/vishvananda/netns"
1164          #:tests? #f))                  ;tests require root privileges
1165       (home-page "https://github.com/vishvananda/netns")
1166       (synopsis "Simple network namespace handling for Go")
1167       (description "The netns package provides a simple interface for
1168 handling network namespaces in Go.")
1169       (license license:asl2.0))))
1170
1171 (define-public go-sctp
1172   ;; docker-libnetwork-cmd-proxy requires this exact commit.
1173   (let ((commit "07191f837fedd2f13d1ec7b5f885f0f3ec54b1cb")
1174         (revision "1"))
1175     (package
1176       (name "go-sctp")
1177       (version (git-version "0.0.0" revision commit))
1178       (source (origin
1179                 (method git-fetch)
1180                 (uri (git-reference
1181                       (url "https://github.com/ishidawataru/sctp")
1182                       (commit commit)))
1183                 (file-name (git-file-name name version))
1184                 (sha256
1185                  (base32
1186                   "1mk9ncm10gwi5pn5wcw4skbyf4qg7n5qdf1mim4gf3mrckvi6g6h"))))
1187       (build-system go-build-system)
1188       (arguments
1189        `(#:import-path "github.com/ishidawataru/sctp"))
1190       (home-page "https://github.com/ishidawataru/sctp")
1191       (synopsis "SCTP library for the Go programming language")
1192       (description "This library provides methods for using the stream control
1193 transmission protocol (SCTP) in a Go application.")
1194       (license license:asl2.0))))
1195
1196 (define-public httping
1197   (package
1198     (name "httping")
1199     (version "2.5")
1200     (source
1201      (origin
1202        (method url-fetch)
1203        (uri (string-append "https://www.vanheusden.com/httping/httping-"
1204                            version ".tgz"))
1205        (sha256
1206         (base32
1207          "1y7sbgkhgadmd93x1zafqc4yp26ssiv16ni5bbi9vmvvdl55m29y"))))
1208     (build-system gnu-build-system)
1209     (native-inputs
1210      `(("gettext" ,gettext-minimal)))
1211     (inputs
1212      `(("fftw" ,fftw)
1213        ("ncurses" ,ncurses)
1214        ("openssl" ,openssl)))
1215     (arguments
1216      `(#:make-flags (list "CC=gcc"
1217                           (string-append "DESTDIR=" (assoc-ref %outputs "out"))
1218                           "PREFIX=")
1219        #:tests? #f)) ; no tests
1220     (home-page "https://www.vanheusden.com/httping/")
1221     (synopsis "Web server latency and throughput monitor")
1222     (description
1223      "httping measures how long it takes to connect to a web server, send an
1224 HTTP(S) request, and receive the reply headers.  It is somewhat similar to
1225 @command{ping}, but can be used even in cases where ICMP traffic is blocked
1226 by firewalls or when you want to monitor the response time of the actual web
1227 application stack itself.")
1228     (license license:gpl2)))        ; with permission to link with OpenSSL
1229
1230 (define-public httpstat
1231   (package
1232     (name "httpstat")
1233     (version "1.2.1")
1234     (source
1235      (origin
1236        (method url-fetch)
1237        (uri (pypi-uri "httpstat" version))
1238        (sha256
1239         (base32
1240          "1chw2nk56vaq87aba012a270k9na06hfx1pfbsrc3jfvlc2kb9hb"))))
1241     (build-system python-build-system)
1242     (inputs `(("curl" ,curl)))
1243     (arguments
1244      '(#:phases
1245        (modify-phases %standard-phases
1246          (add-before 'build 'fix-curl-path
1247            (lambda* (#:key inputs #:allow-other-keys)
1248              (substitute* "httpstat.py"
1249                (("ENV_CURL_BIN.get\\('curl'\\)")
1250                 (string-append "ENV_CURL_BIN.get('"
1251                                (assoc-ref inputs "curl")
1252                                "/bin/curl')")))
1253              #t)))))
1254     (home-page "https://github.com/reorx/httpstat")
1255     (synopsis "Visualize curl statistics")
1256     (description
1257      "@command{httpstat} is a tool to visualize statistics from the
1258 @command{curl} HTTP client.  It acts as a wrapper for @command{curl} and
1259 prints timing information for each step of the HTTP request (DNS lookup,
1260 TCP connection, TLS handshake and so on) in the terminal.")
1261     (license license:expat)))
1262
1263 (define-public squid
1264   (package
1265     (name "squid")
1266     (version "4.12")
1267     (source
1268      (origin
1269        (method url-fetch)
1270        (uri (string-append "http://www.squid-cache.org/Versions/v4/squid-"
1271                            version ".tar.xz"))
1272        (sha256
1273         (base32 "05z34ysy2zn7as11vd365xxhh36bm1ysiwcbr0i0f0nwng406apl"))))
1274     (build-system gnu-build-system)
1275     (arguments
1276      '(#:phases
1277        (modify-phases %standard-phases
1278          (add-before 'build 'fix-true-path
1279            (lambda* (#:key inputs #:allow-other-keys)
1280              (substitute* "test-suite/testheaders.sh"
1281                (("/bin/true")
1282                 (string-append (assoc-ref inputs "coreutils")
1283                                "/bin/true")))
1284              #t)))))
1285     (inputs
1286      `(("perl" ,perl)
1287        ("openldap" ,openldap)
1288        ("linux-pam" ,linux-pam)
1289        ("libcap" ,libcap)
1290        ("cyrus-sasl" ,cyrus-sasl)
1291        ("expat" ,expat)
1292        ("libxml2" ,libxml2)
1293        ("openssl" ,openssl)))
1294     (native-inputs
1295      `(("cppunit" ,cppunit)
1296        ("pkg-config" ,pkg-config)))
1297     (synopsis "Web caching proxy")
1298     (description "Squid is a caching proxy for the Web supporting HTTP, HTTPS,
1299 FTP, and more.  It reduces bandwidth and improves response times by caching and
1300 reusing frequently-requested web pages.")
1301     (home-page "http://www.squid-cache.org/")
1302     (license license:gpl2+)))
1303
1304 (define-public bwm-ng
1305   (package
1306     (name "bwm-ng")
1307     (version "0.6.2")
1308     (source
1309      (origin
1310        (method git-fetch)
1311        (uri (git-reference
1312              (url "https://github.com/vgropp/bwm-ng")
1313              (commit (string-append "v" version))))
1314        (file-name (git-file-name name version))
1315        (sha256
1316         (base32 "0k906wb4pw3dcqpcwnni78lahzi3bva483f8c17sjykic7as4y5n"))))
1317     (build-system gnu-build-system)
1318     (arguments
1319      `(#:phases
1320        (modify-phases %standard-phases
1321          (add-after 'unpack 'disable-premature-./configure
1322            (lambda _
1323              (substitute* "autogen.sh"
1324                (("\\$srcdir/configure")
1325                 "true"))
1326              #t)))))
1327     (native-inputs
1328      `(("autoconf" ,autoconf)
1329        ("automake" ,automake)))
1330     (inputs
1331      `(("ncurses" ,ncurses)))
1332     (synopsis "Console based live network and disk I/O bandwidth monitor")
1333     (description "Bandwidth Monitor NG is a small and simple console based
1334 live network and disk I/O bandwidth monitor.")
1335     (home-page "https://www.gropp.org/?id=projects&sub=bwm-ng")
1336     (license license:gpl2)))
1337
1338 (define-public aircrack-ng
1339   (package
1340     (name "aircrack-ng")
1341     (version "1.6")
1342     (source
1343      (origin
1344        (method url-fetch)
1345        (uri (string-append "https://download.aircrack-ng.org/aircrack-ng-"
1346                            version ".tar.gz"))
1347        (sha256
1348         (base32 "0ix2k64qg7x3w0bzdsbk1m50kcpq1ws59g3zkwiafvpwdr4gs2sg"))))
1349     (build-system gnu-build-system)
1350     (native-inputs
1351      `(("autoconf" ,autoconf)
1352        ("automake" ,automake)
1353        ("libtool" ,libtool)
1354        ("pkg-config" ,pkg-config)
1355        ("which" ,which)))
1356     (inputs
1357      `(("libgcrypt" ,libgcrypt)
1358        ("libnl" ,libnl)
1359        ("libpcap" ,libpcap)
1360        ("ethtool" ,ethtool)
1361        ("pcre" ,pcre)
1362        ("sqlite" ,sqlite)
1363        ("zlib" ,zlib)))
1364     (arguments
1365      `(#:configure-flags
1366        (list "--with-experimental=yes"  ; build wesside-ng, etc.
1367              "--with-gcrypt")           ; openssl's the default
1368        #:phases (modify-phases %standard-phases
1369                   (add-before 'bootstrap 'patch-evalrev
1370                     (lambda _
1371                       ;; Called by ./autogen.sh below, before the default
1372                       ;; ‘patch-shebangs’ phase has had a chance to run.
1373                       (substitute* "evalrev"
1374                         (("/bin/sh")
1375                          (which "sh")))
1376                       #t))
1377                   (add-after 'build 'absolutize-tools
1378                     (lambda* (#:key inputs #:allow-other-keys)
1379                       (let ((ethtool (string-append (assoc-ref inputs "ethtool")
1380                                                     "/sbin/ethtool")))
1381                         (substitute* "scripts/airmon-ng"
1382                           (("ethtool ")
1383                            (string-append ethtool " ")))
1384                         #t))))))
1385     (home-page "https://www.aircrack-ng.org")
1386     (synopsis "Assess WiFi network security")
1387     (description
1388      "Aircrack-ng is a complete suite of tools to assess WiFi network
1389 security.  It focuses on different areas of WiFi security: monitoring,
1390 attacking, testing, and cracking.  All tools are command-line driven, which
1391 allows for heavy scripting.")
1392     (license (list license:gpl2+ license:bsd-3))))
1393
1394 (define-public pixiewps
1395   (package
1396     (name "pixiewps")
1397     (version "1.4.2")
1398     (source (origin
1399               (method url-fetch)
1400               (uri (string-append
1401                     "https://github.com/wiire-a/pixiewps/releases/"
1402                     "download/v" version "/" name "-" version ".tar.xz"))
1403               (sha256
1404                (base32
1405                 "07nym6bqml0k9v29vnj003nrgnwrywgjvnljb7cdpsvnwilhbp64"))))
1406     (build-system gnu-build-system)
1407     (arguments
1408      '(#:make-flags
1409        (list "CC=gcc"
1410              (string-append "PREFIX=" (assoc-ref %outputs "out")))
1411        #:phases
1412        (modify-phases %standard-phases
1413          (delete 'configure)) ; no configure script
1414        #:tests? #f)) ; there are no tests
1415     (home-page "https://github.com/wiire-a/pixiewps/")
1416     (synopsis "Offline brute-force tool for Wi-Fi Protected Setup")
1417     (description "Pixiewps implements the pixie-dust attack to brute
1418 force the Wi-Fi Protected Setup (WPS) PIN by exploiting the low or
1419 non-existing entropy of some access points.")
1420     (license license:gpl3+)))
1421
1422 (define-public reaver
1423   (package
1424     (name "reaver")
1425     (version "1.6.6")
1426     (source (origin
1427               (method url-fetch)
1428               (uri (string-append
1429                     "https://github.com/t6x/reaver-wps-fork-t6x/releases/"
1430                     "download/v" version "/reaver-" version ".tar.xz"))
1431               (sha256
1432                (base32
1433                 "00k7mc81ifv0wma7k4v18mj498badbw5yls6c28qin3d1gda0ag3"))))
1434     (build-system gnu-build-system)
1435     (arguments
1436      `(#:configure-flags
1437        ;; Save session files to current directory instead of /var.
1438        (list "--enable-savetocurrent"
1439              "--localstatedir=/tmp/dummy") ; prevent creating /var during install
1440        #:phases
1441        (modify-phases %standard-phases
1442          (add-before 'configure 'change-directory
1443            (lambda _
1444              (chdir "src")
1445              #t))
1446          (add-after 'install 'install-doc
1447            (lambda* (#:key outputs #:allow-other-keys)
1448              (chdir "../docs")
1449              (let* ((out (assoc-ref outputs "out"))
1450                     (doc (string-append out "/share/doc/" ,name "-" ,version))
1451                     (man1 (string-append out "/share/man/man1")))
1452                (for-each (lambda (file) (install-file file doc))
1453                          (find-files "." "README.*"))
1454                (install-file "reaver.1" man1)
1455                #t))))
1456        #:tests? #f))                    ; there are no tests
1457     (inputs
1458      `(("libpcap" ,libpcap)))
1459     (propagated-inputs
1460      `(("aircrack-ng" ,aircrack-ng)
1461        ("pixiewps" ,pixiewps)))
1462     (home-page "https://github.com/t6x/reaver-wps-fork-t6x/")
1463     (synopsis "Attack tool for Wi-Fi Protected Setup")
1464     (description "Reaver performs a brute force attack against an access
1465 point's Wi-Fi Protected Setup (WPS) PIN.  Once the PIN is found, the WPA
1466 passphrase can be recovered and the AP's wireless settings can be
1467 reconfigured.")
1468     (license license:gpl2+)))
1469
1470 (define-public perl-danga-socket
1471   (package
1472     (name "perl-danga-socket")
1473     (version "1.62")
1474     (source
1475      (origin
1476        (method url-fetch)
1477        (uri (string-append "mirror://cpan/authors/id/N/NM/NML/"
1478                            "Danga-Socket-" version ".tar.gz"))
1479        (sha256
1480         (base32 "0x4bvirmf0kphks19jwgva00zz73zx344218dfaiv8gigrw3yg4m"))))
1481     (build-system perl-build-system)
1482     (native-inputs
1483      `(("perl-test-tcp" ,perl-test-tcp)))
1484     (propagated-inputs
1485      `(("perl-sys-syscall" ,perl-sys-syscall)))
1486     (home-page "https://metacpan.org/release/Danga-Socket")
1487     (synopsis "Event loop and event-driven async socket base class")
1488     (description
1489      "Danga::Socket is an abstract base class for objects backed by a socket
1490 which provides the basic framework for event-driven asynchronous IO, designed
1491 to be fast.  Danga::Socket is both a base class for objects, and an event
1492 loop.")
1493     (license license:perl-license)))
1494
1495 (define-public perl-data-validate-ip
1496   (package
1497     (name "perl-data-validate-ip")
1498     (version "0.27")
1499     (source
1500      (origin
1501        (method url-fetch)
1502        (uri (string-append
1503              "mirror://cpan/authors/id/D/DR/DROLSKY/Data-Validate-IP-"
1504              version ".tar.gz"))
1505        (sha256
1506         (base32 "1mmppyzsh1w2z2h86kvzqxy56wxgs62a3kf8nvcnz76bblir5ap1"))))
1507     (build-system perl-build-system)
1508     (native-inputs
1509      `(("perl-test-requires" ,perl-test-requires)))
1510     (propagated-inputs
1511      `(("perl-netaddr-ip" ,perl-netaddr-ip)))
1512     (home-page "https://metacpan.org/release/Data-Validate-IP")
1513     (synopsis "IPv4 and IPv6 validation methods")
1514     (description
1515      "This module provides several IP address validation subroutines that both
1516 validate and untaint their input.  This includes both basic validation
1517 (@code{is_ipv4()} and @code{is_ipv6()}) and special cases like checking whether
1518 an address belongs to a specific network or whether an address is public or
1519 private (reserved).")
1520     (license license:perl-license)))
1521
1522 (define-public perl-net-dns
1523  (package
1524   (name "perl-net-dns")
1525   (version "1.24")
1526   (source
1527     (origin
1528       (method url-fetch)
1529       (uri
1530        (list
1531         (string-append "https://www.net-dns.org/download/Net-DNS-"
1532                        version ".tar.gz")
1533         (string-append "mirror://cpan/authors/id/N/NL/NLNETLABS/Net-DNS-"
1534                        version ".tar.gz")))
1535       (sha256
1536        (base32 "0qyy5k4k0llqjjmkkfg96919gqybdc1z5fy9047n9imidjxc59hi"))))
1537   (build-system perl-build-system)
1538   (inputs
1539     `(("perl-digest-hmac" ,perl-digest-hmac)))
1540   (home-page "https://www.net-dns.org/")
1541   (synopsis
1542     "Perl Interface to the Domain Name System")
1543   (description "Net::DNS is the Perl Interface to the Domain Name System.")
1544   (license license:x11)))
1545
1546 (define-public perl-socket6
1547  (package
1548   (name "perl-socket6")
1549   (version "0.29")
1550   (source
1551     (origin
1552       (method url-fetch)
1553       (uri (string-append
1554              "mirror://cpan/authors/id/U/UM/UMEMOTO/Socket6-"
1555              version
1556              ".tar.gz"))
1557       (sha256
1558         (base32
1559           "054izici8klfxs8hr5rljib28plijpsfymy99xbzdp047bx1b2a6"))))
1560   (build-system perl-build-system)
1561   (arguments
1562    `(#:phases
1563      (modify-phases %standard-phases
1564          (replace 'configure
1565            (lambda* (#:key outputs #:allow-other-keys)
1566              (let* ((out (assoc-ref outputs "out"))
1567                     (args `("Makefile.PL"
1568                             ,(string-append "PREFIX=" out)
1569                             "INSTALLDIRS=site")))
1570                (setenv "CONFIG_SHELL" (which "sh"))
1571                (apply invoke "perl" args)))))))
1572   (home-page "https://metacpan.org/release/Socket6")
1573   (synopsis
1574     "IPv6 related part of the C socket.h defines and structure manipulators for Perl")
1575   (description "Socket6 binds the IPv6 related part of the C socket header
1576 definitions and structure manipulators for Perl.")
1577   (license license:bsd-3)))
1578
1579 (define-public perl-net-dns-resolver-programmable
1580  (package
1581   (name "perl-net-dns-resolver-programmable")
1582   (version "0.003")
1583   (source
1584     (origin
1585       (method url-fetch)
1586       (uri (string-append
1587              "mirror://cpan/authors/id/J/JM/JMEHNLE/net-dns-resolver-programmable/"
1588              "Net-DNS-Resolver-Programmable-v" version ".tar.gz"))
1589       (sha256
1590         (base32
1591           "1v3nl2kaj4fs55n1617n53q8sa3mir06898vpy1rq98zjih24h4d"))
1592       (patches
1593        (search-patches "perl-net-dns-resolver-programmable-fix.patch"))))
1594   (build-system perl-build-system)
1595   (native-inputs
1596     `(("perl-module-build" ,perl-module-build)))
1597   (inputs `(("perl-net-dns" ,perl-net-dns)))
1598   (home-page
1599     "https://metacpan.org/release/Net-DNS-Resolver-Programmable")
1600   (synopsis
1601     "Programmable DNS resolver class for offline emulation of DNS")
1602   (description "Net::DNS::Resolver::Programmable is a programmable DNS resolver for
1603 offline emulation of DNS.")
1604   (license license:perl-license)))
1605
1606 (define-public perl-net-dns-resolver-mock
1607   (package
1608     (name "perl-net-dns-resolver-mock")
1609     (version "1.20171219")
1610     (source (origin
1611               (method url-fetch)
1612               (uri (string-append
1613                      "mirror://cpan/authors/id/M/MB/MBRADSHAW/"
1614                      "Net-DNS-Resolver-Mock-" version ".tar.gz"))
1615               (sha256
1616                (base32
1617                 "0m3rxpkv1b9121srvbqkrgzg4m8mnydiydqv34in1i1ixwrl6jn9"))))
1618     (build-system perl-build-system)
1619     (inputs
1620      `(("perl-net-dns" ,perl-net-dns)))
1621     (home-page "https://metacpan.org/release/Net-DNS-Resolver-Mock")
1622     (synopsis "Mock DNS Resolver object for testing")
1623     (description
1624      "Net::DNS::Resolver::Mock is a subclass of Net::DNS::Resolver, but returns
1625 static data from any provided DNS zone file instead of querying the network.
1626 It is intended primarily for use in testing.")
1627     (license license:perl-license)))
1628
1629 (define-public perl-netaddr-ip
1630  (package
1631   (name "perl-netaddr-ip")
1632   (version "4.079")
1633   (source
1634     (origin
1635       (method url-fetch)
1636       (uri (string-append
1637              "mirror://cpan/authors/id/M/MI/MIKER/NetAddr-IP-"
1638              version
1639              ".tar.gz"))
1640       (sha256
1641         (base32
1642           "1rx0dinrz9fk9qcg4rwqq5n1dm3xv2arymixpclcv2q2nzgq4npc"))))
1643   (build-system perl-build-system)
1644   (arguments
1645     `(#:phases
1646        (modify-phases %standard-phases
1647          (replace 'configure
1648            (lambda* (#:key outputs #:allow-other-keys)
1649              (let* ((out (assoc-ref outputs "out"))
1650                     (args `("Makefile.PL"
1651                             ,(string-append "PREFIX=" out)
1652                             "INSTALLDIRS=site")))
1653                (setenv "CONFIG_SHELL" (which "sh"))
1654                (apply invoke "perl" args)))))))
1655   (home-page
1656     "https://metacpan.org/release/NetAddr-IP")
1657   (synopsis
1658     "Manages IPv4 and IPv6 addresses and subnets")
1659   (description "NetAddr::IP manages IPv4 and IPv6 addresses and subsets.")
1660   (license license:perl-license)))
1661
1662 (define-public perl-net-patricia
1663  (package
1664   (name "perl-net-patricia")
1665   (version "1.22")
1666   (source
1667     (origin
1668       (method url-fetch)
1669       (uri (string-append
1670              "mirror://cpan/authors/id/G/GR/GRUBER/Net-Patricia-"
1671              version
1672              ".tar.gz"))
1673       (sha256
1674         (base32
1675           "0ln5f57vc8388kyh9vhx2infrdzfhbpgyby74h1qsnhwds95m0vh"))))
1676   (build-system perl-build-system)
1677   (arguments
1678    '(#:phases
1679      (modify-phases %standard-phases
1680        (add-after 'unpack 'dont-link-with-nsl ; Borrowed from Debian.
1681          (lambda _
1682            (substitute* "Makefile.PL"
1683              (("-lnsl") ""))
1684            #t)))))
1685   (inputs
1686     `(("perl-net-cidr-lite" ,perl-net-cidr-lite)
1687       ("perl-socket6" ,perl-socket6)))
1688   (home-page
1689     "https://metacpan.org/release/Net-Patricia")
1690   (synopsis
1691     "Patricia Trie Perl module for fast IP address lookups")
1692   (description
1693     "Net::Patricia does IP address lookups quickly in Perl.")
1694   ;; The bindings are licensed under GPL2 or later.
1695   ;; libpatricia is licensed under 2-clause BSD.
1696   (license (list license:gpl2+ license:bsd-2))))
1697
1698 (define-public perl-net-cidr-lite
1699  (package
1700   (name "perl-net-cidr-lite")
1701   (version "0.21")
1702   (source
1703     (origin
1704       (method url-fetch)
1705       (uri (string-append
1706              "mirror://cpan/authors/id/D/DO/DOUGW/Net-CIDR-Lite-"
1707              version
1708              ".tar.gz"))
1709       (sha256
1710         (base32
1711           "14shj73zbqmfjbp0qz1fs9j4p2dpvz5hfkm4qfdjbydflbl2b8fg"))))
1712   (build-system perl-build-system)
1713   (home-page
1714     "https://metacpan.org/release/Net-CIDR-Lite")
1715   (synopsis
1716     "Perl extension for merging IPv4 or IPv6 CIDR addresses")
1717   (description "Net::CIDR::Lite merges IPv4 or IPv6 CIDR addresses.")
1718   (license license:gpl1+)))
1719
1720 ;; TODO: Use the geolite-mirror-simple.pl script from the example
1721 ;; directory to stay current with the databases. How?
1722 (define-public perl-geo-ip
1723  (package
1724   (name "perl-geo-ip")
1725   (version "1.51")
1726   (source
1727     (origin
1728       (method url-fetch)
1729       (uri (string-append
1730              "mirror://cpan/authors/id/M/MA/MAXMIND/Geo-IP-"
1731              version
1732              ".tar.gz"))
1733       (sha256
1734         (base32
1735           "1fka8fr7fw6sh3xa9glhs1zjg3s2gfkhi7n7da1l2m2wblqj0c0n"))))
1736   (build-system perl-build-system)
1737   (home-page "https://metacpan.org/release/Geo-IP")
1738   (synopsis
1739     "Look up location and network information by IP Address in Perl")
1740   (description "The Perl module @code{Geo::IP}.  It looks up location and
1741 network information by IP Address.")
1742   (license license:perl-license)))
1743
1744 (define-public perl-io-socket-inet6
1745  (package
1746   (name "perl-io-socket-inet6")
1747   (version "2.72")
1748   (source
1749     (origin
1750       (method url-fetch)
1751       (uri (string-append
1752              "mirror://cpan/authors/id/S/SH/SHLOMIF/IO-Socket-INET6-"
1753              version
1754              ".tar.gz"))
1755       (sha256
1756         (base32
1757           "1fqypz6qa5rw2d5y2zq7f49frwra0aln13nhq5gi514j2zx21q45"))))
1758   (build-system perl-build-system)
1759   (native-inputs
1760     `(("perl-module-build" ,perl-module-build)
1761       ("perl-test-pod" ,perl-test-pod)
1762       ("perl-test-pod-coverage" ,perl-test-pod-coverage)))
1763   (inputs `(("perl-socket6" ,perl-socket6)))
1764   (arguments `(;; Need network socket API
1765                #:tests? #f))
1766   (home-page
1767     "https://metacpan.org/release/IO-Socket-INET6")
1768   (synopsis
1769     "Perl object interface for AF_INET/AF_INET6 domain sockets")
1770   (description "IO::Socket::INET6 is an interface for AF_INET/AF_INET6 domain
1771 sockets in Perl.")
1772   (license license:perl-license)))
1773
1774 (define-public libproxy
1775   (package
1776     (name "libproxy")
1777     (version "0.4.15")
1778     (source (origin
1779               (method url-fetch)
1780               (uri (string-append "https://github.com/libproxy/libproxy/"
1781                                   "releases/download/" version "/libproxy-"
1782                                   version ".tar.xz"))
1783               (sha256
1784                (base32
1785                 "0kvdrazlzwia876w988cmlypp253gwy6idlh8mjk958c29jb8kb5"))))
1786     (build-system cmake-build-system)
1787     (native-inputs
1788      `(("pkg-config" ,pkg-config)))
1789     (inputs
1790      `(("dbus" ,dbus)
1791        ("zlib" ,zlib)))
1792     (arguments
1793      `(#:phases
1794        (modify-phases %standard-phases
1795          (replace 'check
1796                   (lambda _
1797                     (invoke "ctest" "-E" "url-test"))))))
1798     (synopsis "Library providing automatic proxy configuration management")
1799     (description "Libproxy handles the details of HTTP/HTTPS proxy
1800 configuration for applications across all scenarios.  Applications using
1801 libproxy only have to specify which proxy to use.")
1802     (home-page "https://libproxy.github.io/libproxy")
1803     (license license:lgpl2.1+)))
1804
1805 (define-public proxychains-ng
1806   (package
1807     (name "proxychains-ng")
1808     (version "4.14")
1809     (source
1810      (origin
1811        (method url-fetch)
1812        (uri (string-append "http://ftp.barfooze.de/pub/sabotage/tarballs/"
1813                            "proxychains-ng-" version ".tar.xz"))
1814        (sha256
1815         (base32 "1bmhfbl1bzc87vl0xwr1wh5xvslfyc41nl2hqzhbj258p0sy004x"))))
1816     (build-system gnu-build-system)
1817     (arguments
1818      `(#:tests? #f                      ; there are no tests
1819        #:phases
1820        (modify-phases %standard-phases
1821          (add-after 'unpack 'fix-configure-script
1822            (lambda _
1823              ;; The configure script is very intolerant to unknown arguments,
1824              ;; such as "CONFIG_SHELL".
1825              (substitute* "configure"
1826                (("\\*\\) break ;;" line)
1827                 (string-append "[A-Z]*) shift ;;\n"
1828                                line)))
1829              #t))
1830          (add-before 'configure 'set-up-environment
1831            (lambda _
1832              (setenv "CC" "gcc")
1833              #t)))))
1834     (synopsis "Redirect any TCP connection through a proxy or proxy chain")
1835     (description "Proxychains-ng is a preloader which hooks calls to sockets
1836 in dynamically linked programs and redirects them through one or more SOCKS or
1837 HTTP proxies.")
1838     (home-page "https://github.com/rofl0r/proxychains-ng")
1839     (license license:gpl2+)))
1840
1841 (define-public enet
1842   (package
1843     (name "enet")
1844     (version "1.3.15")
1845     (source (origin
1846               (method url-fetch)
1847               (uri (string-append "http://enet.bespin.org/download/"
1848                                   "enet-" version ".tar.gz"))
1849               (sha256
1850                (base32
1851                 "1yxxf9bkx6dx3j8j70fj17c05likyfibb1419ls74hp58qrzdgas"))))
1852     (build-system gnu-build-system)
1853     (native-inputs
1854      `(("pkg-config" ,pkg-config)))
1855     (synopsis "Network communication layer on top of UDP")
1856     (description
1857      "ENet's purpose is to provide a relatively thin, simple and robust network
1858 communication layer on top of UDP.  The primary feature it provides is optional
1859 reliable, in-order delivery of packets.  ENet omits certain higher level
1860 networking features such as authentication, server discovery, encryption, or
1861 other similar tasks that are particularly application specific so that the
1862 library remains flexible, portable, and easily embeddable.")
1863     (home-page "http://enet.bespin.org")
1864     (license license:expat)))
1865
1866 (define-public sslh
1867   (package
1868     (name "sslh")
1869     (version "1.21c")
1870     (source
1871      (origin
1872        (method git-fetch)
1873        (uri (git-reference
1874              (url "https://github.com/yrutschle/sslh")
1875              (commit (string-append "v" version))))
1876        (file-name (git-file-name name version))
1877        (sha256
1878         (base32 "19h32dn0076p3s7dn35qi5yp2xvnxw9sqphppmn72vyb8caxvw1z"))))
1879     (build-system gnu-build-system)
1880     (native-inputs
1881      `(;; Test dependencies.
1882        ("lcov" ,lcov)
1883        ("perl" ,perl)
1884        ("perl-conf-libconfig" ,perl-conf-libconfig)
1885        ("perl-io-socket-inet6" ,perl-io-socket-inet6)
1886        ("perl-socket6" ,perl-socket6)
1887        ("psmisc" ,psmisc)))             ; for ‘killall’
1888     (inputs
1889      `(("libcap" ,libcap)
1890        ("libconfig" ,libconfig)
1891        ("pcre" ,pcre)
1892        ("tcp-wrappers" ,tcp-wrappers)))
1893     (arguments
1894      '(#:phases
1895        (modify-phases %standard-phases
1896          (delete 'configure)            ; no configure script
1897          (add-before 'check 'fix-tests
1898            (lambda _
1899              (substitute* "./t"
1900                (("\"/tmp") "$ENV{\"TMPDIR\"} . \"")
1901                ;; The Guix build environment lacks ‘ip6-localhost’.
1902                (("ip6-localhost") "localhost"))
1903              #t))
1904          ;; Many of these files are mentioned in the man page. Install them.
1905          (add-after 'install 'install-documentation
1906            (lambda* (#:key outputs #:allow-other-keys)
1907              (let* ((out (assoc-ref outputs "out"))
1908                     (doc (string-append out "/share/doc/sslh")))
1909                (install-file "README.md" doc)
1910                (for-each
1911                 (lambda (file)
1912                   (install-file file (string-append doc "/examples")))
1913                 (append (find-files "." "\\.cfg")
1914                         (find-files "scripts"))))
1915              #t)))
1916        #:make-flags (list "CC=gcc"
1917                           "USELIBCAP=1"
1918                           "USELIBWRAP=1"
1919                           (string-append "PREFIX=" (assoc-ref %outputs "out")))
1920        #:test-target "test"))
1921     (home-page "https://www.rutschle.net/tech/sslh/README.html")
1922     (synopsis "Applicative network protocol demultiplexer")
1923     (description
1924      "sslh is a network protocol demultiplexer.  It acts like a switchboard,
1925 accepting connections from clients on one port and forwarding them to different
1926 servers based on the contents of the first received data packet.  Detection of
1927 common protocols like HTTP(S), SSL, SSH, OpenVPN, tinc, and XMPP is already
1928 implemented, but any other protocol that matches a regular expression can be
1929 added.  sslh's name comes from its original application of serving both SSH and
1930 HTTPS on port 443, allowing SSH connections from inside corporate firewalls
1931 that block port 22.")
1932     (license (list license:bsd-2        ; tls.[ch]
1933                    license:gpl2+))))    ; everything else
1934
1935 (define-public iperf
1936   (package
1937     (name "iperf")
1938     (version "3.7")
1939     (source (origin
1940               (method url-fetch)
1941               (uri (string-append "http://downloads.es.net/pub/iperf"
1942                                   "/iperf-" version ".tar.gz"))
1943               (sha256
1944                 (base32
1945                  "033is7b5grfbiil98jxlz4ixp9shm44x6hy8flpsyz1i4h108inq"))))
1946     (build-system gnu-build-system)
1947     (synopsis "TCP, UDP and SCTP bandwidth measurement tool")
1948     (description
1949      "iPerf is a tool to measure achievable bandwidth on IP networks.  It
1950 supports tuning of various parameters related to timing, buffers and
1951 protocols (TCP, UDP, SCTP with IPv4 and IPv6).  For each test it reports
1952 the bandwidth, loss, and other parameters.")
1953     (home-page "https://software.es.net/iperf/")
1954     (license (list license:bsd-3             ; Main distribution.
1955                    license:ncsa              ; src/{units,iperf_locale,tcp_window_size}.c
1956                    license:expat             ; src/{cjson,net}.[ch]
1957                    license:public-domain)))) ; src/portable_endian.h
1958
1959 (define-public nethogs
1960   (package
1961     (name "nethogs")
1962     (version "0.8.6")
1963     (source
1964      (origin
1965        (method git-fetch)
1966        (uri (git-reference
1967              (url "https://github.com/raboof/nethogs")
1968              (commit (string-append "v" version))))
1969        (hash
1970         (content-hash
1971          (base32 "0sn1sdp86akwlm4r1vmkxjjl50c0xaisk91bbz57z7kcsaphxna9")
1972          sha256))
1973        (file-name (git-file-name name version))))
1974     (build-system gnu-build-system)
1975     (inputs
1976      `(("libpcap" ,libpcap)
1977        ("ncurses" ,ncurses)))
1978     (arguments
1979      `(#:make-flags `("CC=gcc"
1980                       ,(string-append "PREFIX=" %output)
1981                       ,(string-append "VERSION=" ,version))
1982        #:phases
1983        (modify-phases %standard-phases
1984          (delete 'configure))))         ; no ./configure script.
1985     (home-page "https://github.com/raboof/nethogs")
1986     (synopsis "Per-process bandwidth monitor")
1987     (description "NetHogs is a small 'net top' tool for Linux.  Instead of
1988 breaking the traffic down per protocol or per subnet, like most tools do, it
1989 groups bandwidth by process.
1990
1991 NetHogs does not rely on a special kernel module to be loaded.  If there's
1992 suddenly a lot of network traffic, you can fire up NetHogs and immediately see
1993 which PID is causing this.  This makes it easy to identify programs that have
1994 gone wild and are suddenly taking up your bandwidth.")
1995     (license license:gpl2+)))
1996
1997 (define-public nzbget
1998   (package
1999     (name "nzbget")
2000     (version "21.0")
2001     (source
2002      (origin
2003        (method url-fetch)
2004        (uri (string-append "https://github.com/nzbget/nzbget/releases"
2005                            "/download/v" version
2006                            "/nzbget-" version "-src.tar.gz"))
2007        (sha256
2008         (base32
2009          "0lwd0pfrs4a5ms193hgz2qiyf7grrc925dw6y0nfc0gkp27db9b5"))
2010        (modules '((guix build utils)))
2011        (snippet
2012         ;; Reported upstream as <https://github.com/nzbget/nzbget/pull/414>.
2013         '(begin
2014            (substitute* "daemon/connect/TlsSocket.cpp"
2015              (("gnutls_certificate-verification_status_print")
2016               "gnutls_certificate_verification_status_print"))
2017            #t))))
2018     (arguments
2019      `(#:configure-flags
2020        (list
2021         (string-append "--with-libcurses-includes="
2022                        (assoc-ref %build-inputs "ncurses") "/include")
2023         (string-append "--with-libcurses-libraries="
2024                        (assoc-ref %build-inputs "ncurses") "/lib")
2025         (string-append "--with-tlslib=GnuTLS"))))
2026     (build-system gnu-build-system)
2027     (inputs `(("gnutls" ,gnutls)
2028               ("libxml2" ,libxml2)
2029               ("ncurses" ,ncurses)
2030               ("zlib" ,zlib)))
2031     (native-inputs `(("pkg-config" ,pkg-config)))
2032     (home-page "https://github.com/nzbget/nzbget")
2033     (synopsis "Usenet binary file downloader")
2034     (description
2035      "NZBGet is a binary newsgrabber, which downloads files from Usenet based
2036 on information given in @code{nzb} files.  NZBGet can be used in standalone
2037 and in server/client modes.  In standalone mode, you pass NZBGet @command{nzb}
2038 files as command-line parameters and it downloads them and exits.  NZBGet also
2039 contains a Web interface.  Its server can be controlled through remote
2040 procedure calls (RPCs).")
2041     (license license:gpl2+)))
2042
2043 (define-public openvswitch
2044   (package
2045     (name "openvswitch")
2046     (version "2.13.0")
2047     (source (origin
2048               (method url-fetch)
2049               (uri (string-append
2050                     "https://www.openvswitch.org/releases/openvswitch-"
2051                     version ".tar.gz"))
2052               (sha256
2053                (base32
2054                 "0cd5vmfr6zwgcnkwys6rag6cmz68v0librpaplianv734xs74pyx"))))
2055     (build-system gnu-build-system)
2056     (arguments
2057      '(;; FIXME: many tests fail with:
2058        ;;    […]
2059        ;;    test -e $OVS_RUNDIR/ovs-vswitchd.pid
2060        ;;    ovs-appctl -t ovs-vswitchd exit
2061        ;;    hard failure
2062        #:tests? #f
2063        #:configure-flags
2064        '("--enable-shared"
2065          "--localstatedir=/var"
2066          "--with-dbdir=/var/lib/openvswitch")
2067        #:phases
2068        (modify-phases %standard-phases
2069          (replace 'install
2070            (lambda _
2071              (invoke "make"
2072                      ;; Don't try to create directories under /var.
2073                      "RUNDIR=/tmp"
2074                      "PKIDIR=/tmp"
2075                      "LOGDIR=/tmp"
2076                      "DBDIR=/tmp"
2077                      "install"))))))
2078     (native-inputs
2079      `(("perl" ,perl)
2080        ("pkg-config" ,pkg-config)
2081        ("python" ,python-wrapper)
2082        ;; for testing
2083        ("util-linux" ,util-linux)))
2084     (inputs
2085      `(("libcap-ng" ,libcap-ng)
2086        ("openssl" ,openssl)))
2087     (synopsis "Virtual network switch")
2088     (home-page "https://www.openvswitch.org/")
2089     (description
2090      "Open vSwitch is a multilayer virtual switch.  It is designed to enable
2091 massive network automation through programmatic extension, while still
2092 supporting standard management interfaces and protocols (e.g. NetFlow, sFlow,
2093 IPFIX, RSPAN, CLI, LACP, 802.1ag).")
2094     (license                            ; see debian/copyright for detail
2095      (list license:lgpl2.1              ; xenserver and utilities/bugtool
2096            license:gpl2                 ; datapath
2097            license:bsd-2 license:bsd-3
2098            license:asl2.0))))           ; all other
2099
2100 (define-public python-ipy
2101   (package
2102     (name "python-ipy")
2103     (version "1.00")
2104     (source (origin
2105               (method url-fetch)
2106               (uri (pypi-uri "IPy" version))
2107               (sha256
2108                (base32
2109                 "08d6kcacj67mvh0b6y765ipccy6gi4w2ndd4v1l3im2qm1cgcarg"))))
2110     (build-system python-build-system)
2111     (home-page "https://github.com/autocracy/python-ipy/")
2112     (synopsis "Python class and tools for handling IP addresses and networks")
2113     (description "The @code{IP} class allows a comfortable parsing and
2114 handling for most notations in use for IPv4 and IPv6 addresses and
2115 networks.")
2116     (license license:bsd-3)))
2117
2118 (define-public python2-ipy
2119   (package-with-python2 python-ipy))
2120
2121 (define-public speedtest-cli
2122   (package
2123     (name "speedtest-cli")
2124     (version "2.1.2")
2125     (source
2126      (origin
2127        (method git-fetch)
2128        (uri (git-reference
2129              (url "https://github.com/sivel/speedtest-cli")
2130              (commit (string-append "v" version))))
2131        (file-name (git-file-name name version))
2132        (sha256
2133         (base32 "1456yly6iym2c9bl6pi4sz8xbw34bm2dxm1vzpydsd6jazwpmy26"))))
2134     (build-system python-build-system)
2135     (home-page "https://github.com/sivel/speedtest-cli")
2136     (synopsis "Internet bandwidth tester")
2137     (description
2138      "Command line interface for testing internet bandwidth using
2139 speedtest.net.")
2140     (license license:asl2.0)))
2141
2142 (define-public tftp-hpa
2143   (package
2144     (name "tftp-hpa")
2145     (version "5.2")
2146     (source (origin
2147               (method url-fetch)
2148               (uri (string-append "mirror://kernel.org/software/"
2149                                   "network/tftp/tftp-hpa/tftp-hpa-" version
2150                                   ".tar.xz"))
2151               (sha256
2152                (base32
2153                 "12vidchglhyc20znq5wdsbhi9mqg90jnl7qr9qs8hbvaz4fkdvmg"))))
2154     (build-system gnu-build-system)
2155     (arguments `(#:tests? #f)) ; no test target
2156     (synopsis "HPA's tftp client")
2157     (description
2158      "This is a tftp client derived from OpenBSD tftp with some extra options
2159 added and bugs fixed.  The source includes readline support but it is not
2160 enabled due to license conflicts between the BSD advertising clause and the GPL.")
2161     (home-page "https://git.kernel.org/cgit/network/tftp/tftp-hpa.git/about/")
2162     ;; Some source files are distributed under a 3-clause BSD license, and
2163     ;; others under a 4-clause BSD license. Refer to the files in the source
2164     ;; distribution for clarification.
2165     (license (list license:bsd-3 license:bsd-4))))
2166
2167 (define-public pidentd
2168   (package
2169     (name "pidentd")
2170     (version "3.0.19")
2171     (source
2172      (origin
2173        (method git-fetch)
2174        (uri (git-reference
2175               (url "https://github.com/ptrrkssn/pidentd")
2176               (commit (string-append "v" version))))
2177        (file-name (git-file-name name version))
2178        (sha256
2179         (base32
2180          "1k4rr0b4ygxssbnsykzjvz4hjhazzz4j5arlilyc1iq7b1wzsk7i"))))
2181     (build-system gnu-build-system)
2182     (arguments
2183      `(#:tests? #f)) ; No tests are included
2184     (inputs
2185      `(("openssl" ,openssl-1.0)))       ;for the DES library
2186     (home-page "https://www.lysator.liu.se/~pen/pidentd/")
2187     (synopsis "Small Ident Daemon")
2188     (description
2189      "@dfn{Pidentd} (Peter's Ident Daemon) is an identd, which implements a
2190 identification server.  Pidentd looks up specific TCP/IP connections and
2191 returns the user name and other information about the connection.")
2192     (license license:public-domain)))
2193
2194 (define-public spiped
2195   (package
2196     (name "spiped")
2197     (version "1.6.1")
2198     (source (origin
2199               (method url-fetch)
2200               (uri (string-append "https://www.tarsnap.com/spiped/spiped-"
2201                                   version ".tgz"))
2202               (sha256
2203                (base32
2204                 "04rpnc53whfky7pp2m9h35gwzwn6788pnl6c1qd576mpknbqjw4d"))))
2205     (build-system gnu-build-system)
2206     (arguments
2207      '(#:test-target "test"
2208        #:make-flags (let* ((out (assoc-ref %outputs "out"))
2209                            (bindir (string-append out "/bin"))
2210                            (man1dir (string-append out "/share/man/man1")))
2211                       (list "CC=gcc" ; It tries to invoke `c99`.
2212                             (string-append "BINDIR=" bindir)
2213                             (string-append "MAN1DIR=" man1dir)))
2214        #:phases
2215        (modify-phases %standard-phases
2216          (add-after 'unpack 'patch-command-invocations
2217            (lambda _
2218              (substitute* '("Makefile"
2219                             "libcperciva/cpusupport/Build/cpusupport.sh"
2220                             "libcperciva/POSIX/posix-cflags.sh"
2221                             "libcperciva/POSIX/posix-l.sh")
2222                (("command -p") ""))
2223              #t))
2224          (delete 'configure) ; No ./configure script.
2225          (add-after 'install 'install-more-docs
2226            (lambda* (#:key outputs #:allow-other-keys)
2227              (let* ((out (assoc-ref %outputs "out"))
2228                     (misc (string-append out "/share/doc/spiped")))
2229                (install-file "DESIGN.md" misc)
2230                #t))))))
2231     (native-inputs
2232      `(("procps" ,procps))) ; `ps` is used by the test suite.
2233     (inputs
2234      `(("openssl" ,openssl)))
2235     (home-page "https://www.tarsnap.com/spiped.html")
2236     (synopsis "Create secure pipes between sockets")
2237     (description "Spiped (pronounced \"ess-pipe-dee\") is a utility for creating
2238 symmetrically encrypted and authenticated pipes between socket addresses, so
2239 that one may connect to one address (e.g., a UNIX socket on localhost) and
2240 transparently have a connection established to another address (e.g., a UNIX
2241 socket on a different system).  This is similar to 'ssh -L' functionality, but
2242 does not use SSH and requires a pre-shared symmetric key.")
2243     (license license:bsd-2)))
2244
2245 (define-public quagga
2246   (package
2247     (name "quagga")
2248     (version "1.2.4")
2249     (source (origin
2250               (method url-fetch)
2251               (uri (string-append "mirror://savannah/quagga/quagga-"
2252                                   version ".tar.gz"))
2253               (sha256
2254                (base32
2255                 "1lsksqxij5f1llqn86pkygrf5672kvrqn1kvxghi169hqf1c0r73"))
2256               (patches
2257                (search-patches "quagga-reproducible-build.patch"))))
2258     (build-system gnu-build-system)
2259     (native-inputs `(("pkg-config" ,pkg-config)
2260                      ("perl" ,perl)
2261                      ("dejagnu" ,dejagnu)))
2262     (inputs `(("readline" ,readline)
2263               ("c-ares" ,c-ares)))
2264     (synopsis "Routing Software Suite")
2265     (description "Quagga is a routing software suite, providing implementations
2266 of OSPFv2, OSPFv3, RIP v1 and v2, RIPng and BGP-4 for Unix platforms.
2267
2268 The Quagga architecture consists of a core daemon, @command{zebra}, which
2269 acts as an abstraction layer to the underlying Unix kernel and presents the
2270 Zserv API over a Unix or TCP stream to Quagga clients.  It is these Zserv
2271 clients which typically implement a routing protocol and communicate routing
2272 updates to the zebra daemon.")
2273     (home-page "https://www.nongnu.org/quagga/")
2274     (license license:gpl2+)))
2275
2276 (define-public thc-ipv6
2277   (let ((revision "0")
2278         (commit "4bb72573e0950ce6f8ca2800a10748477020029e"))
2279     (package
2280       (name "thc-ipv6")
2281       (version (git-version "3.4" revision commit))
2282       (source (origin
2283                 (method git-fetch)
2284                 (uri (git-reference
2285                        (url "https://github.com/vanhauser-thc/thc-ipv6")
2286                        (commit commit)))
2287                 (file-name (git-file-name name version))
2288                 (sha256
2289                  (base32
2290                   "1x5i6vbsddqc2yks7r1a2fw2fk16qxvd6hpzh1lykjfpkal8fdir"))))
2291       (build-system gnu-build-system)
2292       (arguments
2293        `(#:make-flags (list (string-append "PREFIX=" (assoc-ref %outputs "out")))
2294          #:tests? #f ; No test suite.
2295          #:phases
2296          (modify-phases %standard-phases
2297            (delete 'configure) ; No ./configure script.
2298            (add-before 'build 'patch-paths
2299              (lambda _
2300                (substitute* "Makefile"
2301                  (("/bin/echo") "echo"))
2302                #t))
2303            (add-after 'install 'install-more-docs
2304              (lambda* (#:key outputs #:allow-other-keys)
2305                (let* ((out (assoc-ref outputs "out"))
2306                       (doc (string-append out "/share/thc-ipv6/doc")))
2307                  (install-file "README" doc)
2308                  (install-file "HOWTO-INJECT" doc)
2309                  #t))))))
2310       ;; TODO Add libnetfilter-queue once packaged.
2311       (inputs
2312        `(("libpcap" ,libpcap)
2313          ("openssl" ,openssl)
2314          ("perl" ,perl)))
2315       (home-page "https://github.com/vanhauser-thc/thc-ipv6")
2316       (synopsis "IPv6 security research toolkit")
2317       (description "The THC IPv6 Toolkit provides command-line tools and a library
2318 for researching IPv6 implementations and deployments.  It requires Linux 2.6 or
2319 newer and only works on Ethernet network interfaces.")
2320       ;; AGPL 3 with exception for linking with OpenSSL. See the 'LICENSE' file in
2321       ;; the source distribution for more information.
2322       (license license:agpl3))))
2323
2324 (define-public bmon
2325   (package
2326     (name "bmon")
2327     (version "4.0")
2328     (source
2329      (origin
2330        (method url-fetch)
2331        (uri (string-append "https://github.com/tgraf/bmon/releases/download/v"
2332                            version "/bmon-" version ".tar.gz"))
2333        (sha256
2334         (base32
2335          "0ylzriv4pwh76344abzl1w219x188gshbycbna35gsyfp09c7z82"))))
2336     (build-system gnu-build-system)
2337     (inputs
2338      `(("libconfuse" ,libconfuse)
2339        ("libnl" ,libnl)
2340        ("ncurses" ,ncurses)))
2341     (native-inputs
2342      `(("pkg-config" ,pkg-config)))
2343     (synopsis "Bandwidth monitor")
2344     (description "bmon is a monitoring and debugging tool to capture
2345 networking-related statistics and prepare them visually in a human-friendly
2346 way.  It features various output methods including an interactive curses user
2347 interface and a programmable text output for scripting.")
2348     (home-page "https://github.com/tgraf/bmon")
2349     ;; README.md mentions both the 2-clause BSD and expat licenses, but all
2350     ;; the source files only have expat license headers. Upstream has been
2351     ;; contacted for clarification: https://github.com/tgraf/bmon/issues/59
2352     ;; Update the license field when upstream responds.
2353     (license (list license:bsd-2
2354                    license:expat))))
2355
2356 (define-public libnet
2357   (package
2358     (name "libnet")
2359     (version "1.2")
2360     (source
2361      (origin
2362        (method url-fetch)
2363        (uri (string-append "https://github.com/libnet/libnet/releases/download"
2364                            "/v" version "/libnet-" version ".tar.gz"))
2365        (sha256
2366         (base32
2367          "19ys9vxk6fg70yzzdxsphfr0rwzgxxhr9b3ykhpg7rfray0qd96a"))))
2368     (build-system gnu-build-system)
2369     (arguments
2370      `(#:phases
2371        (modify-phases %standard-phases
2372          (add-before 'build 'build-doc
2373            (lambda* (#:key make-flags #:allow-other-keys)
2374              (apply invoke "make" "-C" "doc" "doc"
2375                     make-flags))))))
2376     (native-inputs
2377      `(;; To build the documentation, Doxygen and Perl is required.
2378        ("doxygen" ,doxygen)
2379        ("perl" ,perl)))
2380     (home-page "https://github.com/libnet/libnet")
2381     (synopsis "Framework for low-level network packet construction")
2382     (description
2383      "Libnet provides a fairly portable framework for network packet
2384 construction and injection.  It features portable packet creation interfaces
2385 at the IP layer and link layer, as well as a host of supplementary
2386 functionality.  Using libnet, quick and simple packet assembly applications
2387 can be whipped up with little effort.")
2388     (license license:bsd-2)))
2389
2390 (define-public mtr
2391   (package
2392     (name "mtr")
2393     (version "0.93")
2394     (source
2395      (origin
2396        (method url-fetch)
2397        (uri (string-append "ftp://ftp.bitwizard.nl/mtr/"
2398                            "mtr-" version ".tar.gz"))
2399        (sha256
2400         (base32 "03gid8g4r6a9r40855s4345xm1bylj2kfqkicjwxpmvvccyng712"))))
2401     (build-system gnu-build-system)
2402     (inputs
2403      `(("libcap" ,libcap)
2404        ("ncurses" ,ncurses)))
2405     (arguments
2406      `(#:tests? #f))                    ; tests require network access
2407     (home-page "https://www.bitwizard.nl/mtr/")
2408     (synopsis "Network diagnostic tool")
2409     (description
2410      "@acronym{mtr, My TraceRoute} combines the functionality of the
2411 @command{traceroute} and @command{ping} programs in a single network diagnostic
2412 tool.  @command{mtr} can use several network protocols to detect intermediate
2413 routers (or @dfn{hops}) between the local host and a user-specified destination.
2414 It then continually measures the response time and packet loss at each hop, and
2415 displays the results in real time.")
2416     (license license:gpl2+)))
2417
2418 (define-public strongswan
2419   (package
2420     (name "strongswan")
2421     (version "5.8.4")
2422     (source
2423      (origin
2424        (method url-fetch)
2425        (uri (string-append "https://download.strongswan.org/strongswan-"
2426                            version ".tar.bz2"))
2427        (sha256
2428         (base32 "0g2m08gmgdi3qvvqz6zy7n16np53sp232xd0rdc2vdhk73img6id"))))
2429     (build-system gnu-build-system)
2430     (arguments
2431      `(#:phases
2432        (modify-phases %standard-phases
2433          (add-before 'build 'patch-command-file-names
2434            (lambda* (#:key inputs #:allow-other-keys)
2435              (substitute* "src/libstrongswan/utils/process.c"
2436                (("/bin/sh")
2437                 (string-append (assoc-ref inputs "bash") "/bin/sh")))
2438
2439              (substitute* "src/libstrongswan/tests/suites/test_process.c"
2440                (("/bin/sh") (which "sh"))
2441                (("/bin/echo") (which "echo"))
2442                (("cat") (which "cat")))
2443              #t))
2444          (add-before 'check 'set-up-test-environment
2445            (lambda* (#:key inputs #:allow-other-keys)
2446              (setenv "TZDIR" (string-append (assoc-ref inputs "tzdata")
2447                                             "/share/zoneinfo"))
2448              #t)))
2449        #:configure-flags
2450        (list
2451         ;; Disable bsd-4 licensed plugins.
2452         "--disable-des"
2453         "--disable-blowfish")))
2454     (inputs
2455      `(("curl" ,curl)
2456        ("gmp" ,gmp)
2457        ("libgcrypt" ,libgcrypt)
2458        ("openssl" ,openssl)))
2459     (native-inputs
2460      `(("coreutils" ,coreutils)
2461        ("tzdata" ,tzdata-for-tests)))
2462     (synopsis "IKEv1/v2 keying daemon")
2463     (description "StrongSwan is an IPsec implementation originally based upon
2464 the FreeS/WAN project.  It contains support for IKEv1, IKEv2, MOBIKE, IPv6,
2465 NAT-T and more.")
2466     (home-page "https://strongswan.org/")
2467     (license
2468      (list license:gpl2+
2469            ;; src/aikgen/*
2470            ;; src/libcharon/plugins/dnscert/*
2471            ;; src/libcharon/plugins/ext_auth/*
2472            ;; src/libcharon/plugins/vici/ruby/*
2473            ;; src/libcharon/plugins/xauth_pam/xauth_pam_listener.[ch]
2474            license:expat
2475            ;; src/inclue/sys/*
2476            license:bsd-3
2477            ;; src/libstrongswan/plugins/sha3/sha3_keccak.c
2478            license:public-domain
2479            ;; src/libstrongswan/plugins/pkcs11/pkcs11.h
2480            (license:non-copyleft
2481             "file://src/libstrongswan/plugins/pkcs11/pkcs11.h"
2482             "pkcs11 contains a unknown permissive license. View the specific
2483 file for more details.")
2484            ;; These files are not included in the
2485            ;; build, they are disabled through
2486            ;; options to ./configure
2487            ;;
2488            ;; src/libstrongswan/plugins/blowfish/bf_enc.c
2489            ;; src/libstrongswan/plugins/blowfish/bf_locl.h
2490            ;; src/libstrongswan/plugins/blowfish/bf_pi.h
2491            ;; src/libstrongswan/plugins/blowfish/bf_skey.c
2492            ;; src/libstrongswan/plugins/blowfish/blowfish_crypter.c
2493            ;; src/libstrongswan/plugins/des/des_crypter.c
2494            license:bsd-4))))
2495
2496 (define-public amule
2497   (package
2498     (name "amule")
2499     (version "2.3.2")
2500     (source (origin
2501               (method git-fetch)
2502               (uri (git-reference
2503                      (url "https://github.com/amule-project/amule")
2504                      (commit version)))
2505               (file-name (git-file-name name version))
2506               (sha256
2507                (base32
2508                 "010wxm6g9f92x6fympj501zbnjka32rzbx0sk3a2y4zpih5d2nsn"))
2509               ;; Patch for adopting crypto++ >= 6.0.
2510               (patches (search-patches "amule-crypto-6.patch"))))
2511     (build-system gnu-build-system)
2512     (arguments
2513      `(#:phases
2514        (modify-phases %standard-phases
2515          (delete 'bootstrap) ; bootstrap phase runs too early.
2516          (add-after 'patch-source-shebangs 'autogen
2517            (lambda _
2518              (invoke "sh" "autogen.sh")
2519              #t)))
2520        #:configure-flags
2521        '("--disable-rpath"
2522          "--enable-wxcas"
2523          "--enable-cas"
2524          "--enable-alc"
2525          "--enable-alcc"
2526          "--enable-xas"
2527          "--enable-amulecmd"
2528          "--enable-geoip"
2529          "--enable-ccache"
2530          "--enable-nls"
2531          "--enable-optimize"
2532          "--enable-amule-gui"
2533          "--enable-amule-daemon"
2534          "--enable-webserver"
2535          "--with-denoise-level=0")))
2536     (native-inputs
2537      `(("autoconf" ,autoconf)
2538        ("automake" ,automake)
2539        ("gettext-minimal" ,gettext-minimal)
2540        ("perl" ,perl)))
2541     (inputs
2542      `(("zlib" ,zlib)
2543        ("crypto++" ,crypto++)
2544        ("libpng" ,libpng)
2545        ("wxwidgets-gtk2" ,wxwidgets-gtk2)))
2546     (home-page "http://amule.org/")
2547     (synopsis "Peer-to-peer client for the eD2K and Kademlia networks")
2548     (description
2549      "aMule is an eMule-like client for the eD2k and Kademlia peer-to-peer
2550 file sharing networks.  It includes a graphical user interface (GUI), a daemon
2551 allowing you to run a client with no graphical interface, and a Web GUI for
2552 remote access.  The @command{amulecmd} command allows you to control aMule
2553 remotely.")
2554     (license license:gpl2+)))
2555
2556 (define-public zyre
2557   (package
2558     (name "zyre")
2559     (version "2.0.0")
2560     (source (origin
2561               (method url-fetch)
2562               (uri
2563                (string-append "https://github.com/zeromq/zyre/releases/download/v"
2564                               version "/" name "-" version ".tar.gz"))
2565               (sha256
2566                (base32
2567                 "0qz2730bng1gs9xbqxhkw88qbsmszgmmrl2g9k6xrg6r3bqvsdc7"))))
2568     (build-system gnu-build-system)
2569     (inputs `(("zeromq" ,zeromq)
2570               ("czmq" ,czmq)
2571               ("libsodium" ,libsodium)))
2572     (synopsis "Framework for proximity-based peer-to-peer applications")
2573     (description "Zyre provides reliable group messaging over local area
2574 networks using zeromq.  It has these key characteristics:
2575
2576 @itemize
2577 @item Zyre needs no administration or configuration.
2578 @item Peers may join and leave the network at any time.
2579 @item Peers talk to each other without any central brokers or servers.
2580 @item Peers can talk directly to each other.
2581 @item Peers can join groups, and then talk to groups.
2582 @item Zyre is reliable, and loses no messages even when the network is heavily loaded.
2583 @item Zyre is fast and has low latency, requiring no consensus protocols.
2584 @item Zyre is designed for WiFi networks, yet also works well on Ethernet networks.
2585 @end itemize")
2586     (home-page "https://github.com/zeromq/zyre")
2587     (license license:mpl2.0)))
2588
2589 (define-public libsocketcan
2590   (package
2591     (name "libsocketcan")
2592     (version "0.0.11")
2593     (source (origin
2594               (method git-fetch)
2595               (uri (git-reference
2596                     (url "https://git.pengutronix.de/cgit/tools/libsocketcan")
2597                     (commit (string-append "v" version))))
2598               (file-name (git-file-name name version))
2599               (sha256
2600                (base32
2601                 "17z2y2r9xkixhr9bxr50m77fh710afl30s7jdhbxrvf56vmal2jr"))))
2602     (build-system gnu-build-system)
2603     (native-inputs
2604      `(("autoconf" ,autoconf)
2605        ("automake" ,automake)
2606        ("libtool" ,libtool)))
2607     (home-page "https://git.pengutronix.de/cgit/tools/libsocketcan")
2608     (synopsis "SocketCAN user-space library")
2609     (description "This library allows controlling basic functions in SocketCAN
2610 from user-space.  It requires a kernel built with SocketCAN support.")
2611     (license license:lgpl2.1+)))
2612
2613 (define-public can-utils
2614   (package
2615     (name "can-utils")
2616     (version "2020.02.04")
2617     (source (origin
2618               (method git-fetch)
2619               (uri (git-reference
2620                     (url "https://github.com/linux-can/can-utils")
2621                     (commit (string-append "v" version))))
2622               (file-name (git-file-name name version))
2623               (sha256
2624                (base32
2625                 "1a3j1mmnb7pvgc8r7zzp6sdp7903in2hna6bmpraxln7cwlzn4l6"))))
2626     (build-system gnu-build-system)
2627     (arguments
2628      `(#:tests? #f                      ; No tests exist.
2629        #:make-flags (list "CC=gcc"
2630                           (string-append "PREFIX="
2631                                          (assoc-ref %outputs "out")))
2632        #:phases
2633        (modify-phases %standard-phases
2634          (delete 'bootstrap)
2635          (delete 'configure))))
2636     (home-page "https://github.com/linux-can/can-utils")
2637     (synopsis "CAN utilities")
2638     (description "This package provides CAN utilities in the following areas:
2639
2640 @itemize
2641 @item Basic tools to display, record, generate and replay CAN traffic
2642 @item CAN access via IP sockets
2643 @item CAN in-kernel gateway configuration
2644 @item CAN bus measurement and testing
2645 @item ISO-TP (ISO15765-2:2016 - this means messages with a body larger than
2646 eight bytes) tools
2647 @item Log file converters
2648 @item Serial Line Discipline configuration for slcan driver
2649 @end itemize")
2650     ;; Either BSD-3 or GPL-2 can be used.
2651     (license (list license:bsd-3 license:gpl2))))
2652
2653 (define-public asio
2654   (package
2655     (name "asio")
2656     (version "1.12.2")
2657     (source
2658      (origin
2659        (method url-fetch)
2660        (uri (string-append "mirror://sourceforge/asio/asio/"
2661                            version " (Stable)/asio-" version ".tar.bz2"))
2662        (sha256
2663         (base32 "1akray4l3hgahmb92sbvsqg128c7g7s92jrkf1sp1fjnfjrxq9sf"))))
2664     (build-system gnu-build-system)
2665     (inputs
2666      `(("boost" ,boost)
2667        ("openssl" ,openssl)))
2668     (arguments
2669      `(#:configure-flags
2670        (list
2671         (string-append "--with-boost=" (assoc-ref %build-inputs "boost"))
2672         (string-append "--with-openssl=" (assoc-ref %build-inputs "openssl")))))
2673     (home-page "https://think-async.com/Asio")
2674     (synopsis "C++ library for ASynchronous network I/O")
2675     (description "Asio is a cross-platform C++ library for network and
2676 low-level I/O programming that provides developers with a consistent
2677 asynchronous model using a modern C++ approach.")
2678     (license license:boost1.0)))
2679
2680 (define-public shadowsocks
2681   ;; There are some security fixes after the last release.
2682   (let* ((commit "e332ec93e9c90f1cbee676b022bf2c5d5b7b1239")
2683          (revision "0")
2684          (version (git-version "2.8.2" revision commit)))
2685     (package
2686       (name "shadowsocks")
2687       (version version)
2688       (home-page "https://github.com/shadowsocks/shadowsocks")
2689       (source (origin
2690                 (method git-fetch)
2691                 (uri (git-reference
2692                       (url home-page)
2693                       (commit commit)))
2694                 (sha256
2695                  (base32
2696                   "1idd9b4f2pnhcpk1bh030hqg5zq25gkwxd53xi3c0cj242w7sp2j"))
2697                 (file-name (git-file-name name version))))
2698       (build-system python-build-system)
2699       (synopsis "Fast tunnel proxy that helps you bypass firewalls")
2700       (description
2701        "This package is a fast tunnel proxy that helps you bypass firewalls.
2702
2703 Features:
2704 @itemize
2705 @item TCP & UDP support
2706 @item User management API
2707 @item TCP Fast Open
2708 @item Workers and graceful restart
2709 @item Destination IP blacklist
2710 @end itemize")
2711       (license license:asl2.0))))
2712
2713 (define-public net-snmp
2714   (package
2715     (name "net-snmp")
2716     (version "5.8")
2717     (source (origin
2718               (method url-fetch)
2719               (uri (string-append "mirror://sourceforge/net-snmp/net-snmp/"
2720                                   version "/net-snmp-" version ".tar.gz"))
2721               (sha256
2722                (base32
2723                 "1pvajzj9gmj56dmwix0ywmkmy2pglh6nny646hkm7ghfhh03bz5j"))
2724               (modules '((guix build utils)))
2725               (snippet
2726                '(begin
2727                   ;; Drop bundled libraries.
2728                   (delete-file-recursively "snmplib/openssl")
2729                   #t))))
2730     (build-system gnu-build-system)
2731     (arguments
2732      `(#:test-target "test"
2733        ;; XXX: With parallel build enabled, Perl modules may not get linked with
2734        ;; libnetsnmp.  See e.g. <https://bugzilla.novell.com/show_bug.cgi?id=819497>.
2735        #:parallel-build? #f
2736        #:configure-flags
2737        (list (string-append "LDFLAGS=-Wl,-rpath="
2738                             (assoc-ref %outputs "out")
2739                             "/lib")
2740              "--with-logfile=/var/log/snmpd.log"
2741              (string-append "--with-openssl="
2742                             (assoc-ref %build-inputs "openssl")))
2743        #:phases
2744        (modify-phases %standard-phases
2745          (add-after 'unpack 'patch-tests
2746            (lambda* (#:key inputs #:allow-other-keys)
2747              (substitute* "testing/fulltests/support/simple_TESTCONF.sh"
2748                (("NETSTAT=\"\"")
2749                 (string-append "NETSTAT=\"" (which "netstat") "\"")))
2750              (substitute* '("testing/fulltests/default/T065agentextend_simple"
2751                             "testing/fulltests/default/T115agentxperl_simple")
2752                (("/usr/bin/env") (which "env")))
2753              (substitute* "testing/fulltests/default/T065agentextend_sh_simple"
2754                (("/bin/sh") (which "sh")))
2755              ;; These tests require network access.
2756              (for-each delete-file
2757                        '("testing/fulltests/default/T070com2sec_simple"
2758                          "testing/fulltests/default/T071com2sec6_simple"))
2759              #t))
2760          (add-after 'unpack 'patch-Makefile.PL
2761            (lambda* (#:key outputs #:allow-other-keys)
2762              (substitute* "Makefile.in"
2763                (("Makefile.PL -NET")
2764                 (string-append "Makefile.PL PREFIX="
2765                                (assoc-ref outputs "out")
2766                                " INSTALLDIRS=site" " NO_PERLLOCAL=1"
2767                                " -NET")))
2768              #t)))))
2769     (inputs
2770      `(("perl" ,perl)
2771        ("openssl" ,openssl)
2772        ("libnl" ,libnl)))
2773     ;; These inputs are only needed for tests.
2774     (native-inputs
2775      `(("net-tools" ,net-tools)
2776        ("coreutils" ,coreutils)
2777        ("grep" ,grep)))
2778     (home-page "http://www.net-snmp.org/")
2779     (synopsis "Simple Network Management Protocol library and tools")
2780     (description "The @dfn{Simple Network Management Protocol} (SNMP) is a
2781 widely used protocol for monitoring the health and welfare of network
2782 equipment (e.g. routers), computer equipment and even devices like UPSs.
2783 Net-SNMP is a suite of applications used to implement SNMP v1, SNMP v2c and
2784 SNMP v3 using both IPv4 and IPv6.")
2785     ;; This only affects OpenBSD
2786     ;; https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8100
2787     (properties `((lint-hidden-cve . ("CVE-2015-8100"))))
2788     (license (list license:bsd-3
2789                    (license:non-copyleft
2790                     "http://www.net-snmp.org/about/license.html"
2791                     "CMU/UCD copyright notice")))))
2792
2793 (define-public ubridge
2794   (package
2795     (name "ubridge")
2796     (version "0.9.18")
2797     (source
2798      (origin
2799        (method git-fetch)
2800        (uri (git-reference
2801              (url "https://github.com/GNS3/ubridge")
2802              (commit (string-append "v" version))))
2803        (file-name (git-file-name name version))
2804        (sha256
2805         (base32 "0jg66jhhpv4c9340fsdp64hf9h253i8r81fknxa0gq241ripp3jn"))))
2806     (build-system gnu-build-system)
2807     (arguments
2808      `(#:tests? #f                      ; no tests
2809        #:make-flags
2810        (list ,(string-append "CC=" (cc-for-target)))
2811        #:phases
2812        (modify-phases %standard-phases
2813          (delete 'configure)            ; no configure script
2814          (add-before 'install 'set-bindir
2815            (lambda* (#:key  inputs outputs #:allow-other-keys)
2816              (let ((bin (string-append (assoc-ref outputs "out")
2817                                        "/bin")))
2818                (mkdir-p bin)
2819                (substitute* "Makefile"
2820                  (("\\$\\(BINDIR\\)") bin)
2821                  (("\tsetcap cap_net.*$") "")))
2822              #t)))))
2823     (inputs
2824      `(("libpcap" ,libpcap)))
2825     (home-page "https://github.com/GNS3/ubridge/")
2826     (synopsis "Bridge for UDP tunnels, Ethernet, TAP and VMnet interfaces")
2827     (description "uBridge is a simple program to create user-land bridges
2828 between various technologies.  Currently, bridging between UDP tunnels,
2829 Ethernet and TAP interfaces is supported.  Packet capture is also supported.")
2830     (license license:gpl3+)))
2831
2832 (define-public hcxtools
2833   (package
2834     (name "hcxtools")
2835     (version "5.2.0")
2836     (source
2837      (origin
2838        (method git-fetch)
2839        (uri (git-reference
2840              (url "https://github.com/ZerBea/hcxtools")
2841              (commit version)))
2842        (sha256
2843         (base32 "0k2qlq9hz5zc21nyc6yrnfqzga7hydn5mm0x3rpl2fhkwl81lxcn"))
2844        (file-name (git-file-name name version))))
2845     (build-system gnu-build-system)
2846     (inputs
2847      `(("curl" ,curl)
2848        ("libpcap" ,libpcap)
2849        ("openssl" ,openssl)
2850        ("zlib" ,zlib)))
2851     (arguments
2852      `(#:make-flags
2853        (list "CC=gcc"
2854              (string-append "INSTALLDIR=" (assoc-ref %outputs "out") "/bin"))
2855        #:tests? #f                      ; no test suite
2856        #:phases
2857        (modify-phases %standard-phases
2858          (delete 'configure))))
2859     (home-page "https://github.com/ZerBea/hcxtools")
2860     (synopsis "Capture wlan traffic to hashcat and John the Ripper")
2861     (description
2862      "This package contains a small set of tools to capture and convert
2863 packets from wireless devices for use with hashcat or John the Ripper.")
2864     (license license:expat)))
2865
2866 (define-public hcxdumptool
2867   (package
2868     (name "hcxdumptool")
2869     (version "6.0.6")
2870     (source
2871      (origin
2872        (method git-fetch)
2873        (uri (git-reference
2874              (url "https://github.com/ZerBea/hcxdumptool")
2875              (commit version)))
2876        (sha256
2877         (base32 "1b4d543y64ib92w9gcmiyjn5hz2vyjqmxk3f3yr1zk04fhw16gmf"))
2878        (file-name (git-file-name name version))))
2879     (build-system gnu-build-system)
2880     (arguments
2881      `(#:make-flags
2882        (list ,(string-append "CC=" (cc-for-target))
2883              (string-append "INSTALLDIR=" (assoc-ref %outputs "out") "/bin"))
2884        #:tests? #f                      ; no test suite
2885        #:phases
2886        (modify-phases %standard-phases
2887          (delete 'configure))))
2888     (inputs
2889      `(("openssl" ,openssl)))
2890     (home-page "https://github.com/ZerBea/hcxdumptool")
2891     (synopsis "Small tool to capture packets from wlan devices")
2892     (description
2893      "Small tool to capture packets from WLAN devices.  After capturing,
2894 upload the \"uncleaned\" cap to @url{https://wpa-sec.stanev.org/?submit} to
2895 see if the access point or the client is vulnerable to a dictionary attack.
2896 Convert the cap file to hccapx format and/or to WPA-PMKID-PBKDF2
2897 hashline (16800) with @command{hcxpcaptool} from the @code{hcxtools} package
2898 and check if the WLAN key or the master key was transmitted unencrypted.")
2899     (license license:expat)))
2900
2901 (define-public dante
2902   (package
2903     (name "dante")
2904     (version "1.4.2")
2905     (source
2906      (origin
2907        (method url-fetch)
2908        (uri (string-append "https://www.inet.no/dante/files/dante-"
2909                            version ".tar.gz"))
2910        (sha256
2911         (base32
2912          "19rqzj167q73ag20zxpvswhkk0bj56r5maf83v5016sw7vrcz5sc"))))
2913     (build-system gnu-build-system)
2914     (arguments
2915      ;; XXX: The dynamic socks library doesn't work with 'libc.so' (GNU ld
2916      ;; script).  When preloading is enabled, 'sockd' failed with:
2917      ;;    … Failed to open library "libc.so": …: invalid ELF header
2918      '(#:configure-flags '("--disable-preload")))
2919     (home-page "https://www.inet.no/dante/")
2920     (synopsis "SOCKS server and client")
2921     (description "Dante is a SOCKS client and server implementation.  It can
2922 be installed on a machine with access to an external TCP/IP network and will
2923 allow all other machines, without direct access to that network, to be relayed
2924 through the machine the Dante server is running on.  The external network will
2925 never see any machines other than the one Dante is running on.")
2926     (license (license:non-copyleft "file://LICENSE"))))
2927
2928 (define-public restbed
2929   (let ((commit "6eb385fa9051203f28bf96cc1844bbb5a9a6481f"))
2930     (package
2931       (name "restbed")
2932       (version (git-version "4.6" "1" commit))
2933       (source
2934        (origin
2935          (method git-fetch)
2936          (uri (git-reference
2937                (url "https://github.com/Corvusoft/restbed/")
2938                (commit commit)))
2939          (file-name (string-append name "-" version ".tar.gz"))
2940          (sha256
2941           (base32 "0k60i5drklqqrb4khb25fzkgz9y0sncxf1sp6lh2bm1m0gh0661n"))))
2942       (build-system cmake-build-system)
2943       (inputs
2944        `(("asio" ,asio)
2945          ("catch" ,catch-framework)
2946          ("openssl" ,openssl)))
2947       (arguments
2948        `(#:tests? #f
2949          #:configure-flags
2950          '("-DBUILD_TESTS=NO"
2951            "-DBUILD_EXAMPLES=NO"
2952            "-DBUILD_SSL=NO"
2953            "-DBUILD_SHARED=NO")
2954          #:phases
2955          (modify-phases %standard-phases
2956            (add-after 'unpack 'apply-patches-and-fix-paths
2957              (lambda* (#:key inputs #:allow-other-keys)
2958                (let ((asio (assoc-ref inputs "asio"))
2959                      (catch (assoc-ref inputs "catch"))
2960                      (openssl (assoc-ref inputs "openssl")))
2961                  (substitute* "cmake/Findasio.cmake"
2962                    (("(find_path\\( asio_INCLUDE asio\\.hpp HINTS ).*$" all begin)
2963                     (string-append begin " \"" asio "/include\" )")))
2964                  (substitute* "cmake/Findcatch.cmake"
2965                    (("(find_path\\( catch_INCLUDE catch\\.hpp HINTS ).*$" all begin)
2966                     (string-append begin " \"" catch "/include\" )")))
2967                  (substitute* "cmake/Findopenssl.cmake"
2968                    (("(find_library\\( ssl_LIBRARY ssl ssleay32 HINTS ).*$" all begin)
2969                     (string-append begin " \"" openssl "/lib\" )"))
2970                    (("(find_library\\( crypto_LIBRARY crypto libeay32 HINTS ).*$" all begin)
2971                     (string-append begin " \"" openssl "/lib\" )"))
2972                    (("(find_path\\( ssl_INCLUDE openssl/ssl\\.h HINTS ).*$" all begin)
2973                     (string-append begin " \"" openssl "/include\" )")))))))))
2974       (synopsis "Asynchronous RESTful functionality to C++11 applications")
2975       (description "Restbed is a comprehensive and consistent programming
2976 model for building applications that require seamless and secure
2977 communication over HTTP.")
2978       (home-page "https://github.com/Corvusoft/restbed")
2979       (license license:agpl3+))))
2980
2981 (define-public restinio
2982   (package
2983     (name "restinio")
2984     (version "0.6.1.1")
2985     (source (origin
2986               (method git-fetch)
2987               (uri (git-reference
2988                     (url "https://github.com/Stiffstream/restinio")
2989                     (commit (string-append "v." version))))
2990               (file-name (git-file-name name version))
2991               (sha256
2992                (base32
2993                 "141a96hx8zhcdv121g6cs91n46kb47y040v25pnvz5f54964z7f5"))))
2994     (build-system cmake-build-system)
2995     (inputs                             ; TODO: Need to force-keep references on some inputs, e.g. boost.
2996      `(("zlib" ,zlib)
2997        ("catch2" ,catch-framework2)
2998        ("openssl" ,openssl)
2999        ("boost" ,boost)
3000        ("pcre" ,pcre)
3001        ("pcre2" ,pcre2)
3002        ("sobjectizer" ,sobjectizer)))
3003     (propagated-inputs
3004      `(("asio", asio)
3005        ("fmt" ,fmt)
3006        ("http-parser", http-parser)))
3007     (arguments
3008      `(#:configure-flags '("-DRESTINIO_INSTALL=on")
3009        #:tests? #f ; TODO: The tests are called from the root CMakelist, need RESTINIO_TEST=on.
3010        #:phases
3011        (modify-phases %standard-phases
3012          (add-after 'unpack 'change-directory
3013            (lambda _
3014              (chdir "dev/restinio")
3015              #t)))))
3016     (home-page "https://stiffstream.com/en/products/restinio.html")
3017     (synopsis "C++14 library that gives you an embedded HTTP/Websocket server")
3018     (description "RESTinio is a header-only C++14 library that gives you an embedded
3019 HTTP/Websocket server.  It is based on standalone version of ASIO
3020 and targeted primarily for asynchronous processing of HTTP-requests.")
3021     (license license:bsd-3)))
3022
3023 (define-public opendht
3024   (package
3025     (name "opendht")
3026     (version "2.1.4")
3027     (source (origin
3028               (method git-fetch)
3029               (uri (git-reference
3030                     (url "https://github.com/savoirfairelinux/opendht")
3031                     (commit version)))
3032               (file-name (git-file-name name version))
3033               (patches (search-patches "opendht-fix-jami.patch"))
3034               (sha256
3035                (base32
3036                 "1ax26ri1ifb6s8ppd28jmanka9yf8mw3np65q2h4djhhik0phhal"))))
3037     ;; Since 2.0, the gnu-build-system does not seem to work anymore, upstream bug?
3038     (build-system cmake-build-system)
3039     (inputs
3040      `(("argon2" ,argon2)
3041        ("nettle" ,nettle)
3042        ("readline" ,readline)
3043        ("jsoncpp" ,jsoncpp)
3044        ("openssl" ,openssl)             ;required for the DHT proxy
3045        ("fmt" ,fmt)))
3046     (propagated-inputs
3047      `(("gnutls" ,gnutls)               ;included in opendht/crypto.h
3048        ("msgpack" ,msgpack)))           ;included in several installed headers
3049     (native-inputs
3050      `(("autoconf" ,autoconf)
3051        ("automake" ,automake)
3052        ("pkg-config" ,pkg-config)
3053        ("restinio" ,restinio)           ;headers only library
3054        ("libtool" ,libtool)
3055        ("cppunit" ,cppunit)))
3056     (arguments
3057      `(#:tests? #f                      ; Tests require network connection.
3058        #:configure-flags
3059        '(;; "-DOPENDHT_TESTS=on"
3060          "-DOPENDHT_TOOLS=off"
3061          "-DOPENDHT_PYTHON=off"
3062          "-DOPENDHT_PROXY_SERVER=on"
3063          "-DOPENDHT_PUSH_NOTIFICATIONS=on"
3064          "-DOPENDHT_PROXY_SERVER_IDENTITY=on"
3065          "-DOPENDHT_PROXY_CLIENT=on")))
3066     (home-page "https://github.com/savoirfairelinux/opendht/")
3067     (synopsis "Distributed Hash Table (DHT) library")
3068     (description "OpenDHT is a Distributed Hash Table (DHT) library.  It may
3069 be used to manage peer-to-peer network connections as needed for real time
3070 communication.")
3071     (license license:gpl3+)))
3072
3073 (define-public frrouting
3074   (package
3075     (name "frrouting")
3076     (version "6.0.2")
3077     (source (origin
3078               (method url-fetch)
3079               (uri (string-append "https://github.com/FRRouting/frr/releases/"
3080                                   "download/frr-" version "/frr-" version
3081                                   ".tar.xz"))
3082               (sha256
3083                (base32
3084                 "0xfrvi62w8qlh46f504ka0skb7pm0g0p8vmdng4w90gsbirlzpdd"))))
3085     (build-system gnu-build-system)
3086     (inputs
3087      `(("c-ares" ,c-ares)
3088        ("json-c" ,json-c)
3089        ("readline" ,readline)))
3090     (native-inputs
3091      `(("perl" ,perl)
3092        ("pkg-config" ,pkg-config)
3093        ("python" ,python-wrapper)
3094        ("python-pytest" ,python-pytest)))
3095     (home-page "https://frrouting.org/")
3096     (synopsis "IP routing protocol suite")
3097     (description "FRRouting (FRR) is an IP routing protocol suite which includes
3098 protocol daemons for BGP, IS-IS, LDP, OSPF, PIM, and RIP. ")
3099     (license license:gpl2+)))
3100
3101 (define-public iwd
3102   (package
3103     (name "iwd")
3104     (version "0.21")
3105     (source (origin
3106               (method git-fetch)
3107               (uri (git-reference
3108                     (url "https://git.kernel.org/pub/scm/network/wireless/iwd.git")
3109                     (commit version)))
3110               (file-name (git-file-name name version))
3111               (sha256
3112                (base32
3113                 "001dikinsa6kshwscjbvwipavzwpqnpvx9fpshcn63gbvbhyd393"))))
3114     (build-system gnu-build-system)
3115     (inputs
3116      `(("dbus" ,dbus)
3117        ("ell" ,ell)
3118        ("readline" ,readline)))
3119     (native-inputs
3120      `(("asciidoc" ,asciidoc)
3121        ("autoconf" ,autoconf)
3122        ("automake" ,automake)
3123        ("libtool" ,libtool)
3124        ("pkgconfig" ,pkg-config)
3125        ("python" ,python)
3126        ("openssl" ,openssl)))
3127     (arguments
3128      `(#:configure-flags
3129        (let ((dbus (assoc-ref %outputs "out")))
3130          (list "--disable-systemd-service"
3131                "--enable-external-ell"
3132                "--enable-hwsim"
3133                "--enable-tools"
3134                "--enable-wired"
3135                "--enable-docs"
3136                "--localstatedir=/var"
3137                (string-append "--with-dbus-datadir=" dbus "/share/")
3138                (string-append "--with-dbus-busdir="
3139                               dbus "/share/dbus-1/system-services")))
3140        #:phases
3141        (modify-phases %standard-phases
3142          (add-before 'bootstrap 'pre-bootstrap
3143            (lambda _
3144              (substitute* "Makefile.am"
3145                ;; Test disabled because it needs the kernel module
3146                ;; 'pkcs8_key_parser' loaded.
3147                (("unit\\/test-eapol.*? ") "")
3148                ;; Don't try to 'mkdir /var'.
3149                (("\\$\\(MKDIR_P\\) -m 700") "true"))
3150              #t)))))
3151     (home-page "https://git.kernel.org/pub/scm/network/wireless/iwd.git/")
3152     (synopsis "Internet Wireless Daemon")
3153     (description "iwd is a wireless daemon for Linux that aims to replace WPA
3154 Supplicant.  It optimizes resource utilization by not depending on any external
3155 libraries and instead utilizing features provided by the Linux kernel to the
3156 maximum extent possible.")
3157     (license license:lgpl2.1+)))
3158
3159 (define-public batctl
3160   (package
3161    (name "batctl")
3162    (version "2020.1")
3163    (source
3164     (origin
3165      (method url-fetch)
3166      (uri (string-append "https://downloads.open-mesh.org/batman/releases/batman-adv-"
3167                          version "/batctl-" version ".tar.gz"))
3168      (sha256
3169       (base32 "0fy252q1my3a57v6pfz8i97h6zv7v03di01dhwjkj47pqnx1rqm3"))))
3170    (inputs
3171     `(("libnl" ,libnl)))
3172    (native-inputs
3173     `(("pkg-config" ,pkg-config)))
3174    (build-system gnu-build-system)
3175    (arguments
3176     `(#:tests? #f
3177       ;; Batctl only has a makefile. Thus we disable tests and
3178       ;; configuration, passing in a few make-flags.
3179       #:phases (modify-phases %standard-phases (delete 'configure))
3180       #:make-flags
3181       (list (string-append "PREFIX=" (assoc-ref %outputs "out"))
3182             (string-append "PKG_CONFIG=" (assoc-ref %build-inputs "pkg-config")
3183                            "/bin/pkg-config")
3184             "CC=gcc")))
3185    (home-page "https://www.open-mesh.org/projects/batman-adv/wiki/Wiki")
3186    (synopsis "Management tool for the mesh networking BATMAN protocol")
3187    (description "This package provides a control tool for the
3188 B.A.T.M.A.N. mesh networking routing protocol provided by the Linux kernel
3189 module @code{batman-adv}, for Layer 2.")
3190    (license license:gpl2+)))
3191
3192 (define-public pagekite
3193   (package
3194     (name "pagekite")
3195     (version "1.5.2.200603")
3196     (source
3197      (origin
3198        (method git-fetch)
3199        (uri (git-reference
3200              (url "https://github.com/pagekite/PyPagekite")
3201              (commit (string-append "v" version))))
3202        (file-name (git-file-name name version))
3203        (sha256
3204         (base32 "08rcyr54dssnpand6y26f8x9cjmd91hr44my08kxw70s5iqiwizv"))))
3205     (build-system python-build-system)
3206     (arguments
3207      `(#:phases
3208        (modify-phases %standard-phases
3209          (add-after 'install 'install-man-page
3210            (lambda* (#:key inputs outputs #:allow-other-keys)
3211              (let* ((out (assoc-ref outputs "out"))
3212                     (man (string-append out "/share/man")))
3213                (invoke "make"
3214                        (string-append "PYTHONPATH=" (getenv "PYTHONPATH"))
3215                        "doc/pagekite.1")
3216                (install-file "doc/pagekite.1" (string-append man "/man1"))
3217                #t))))))
3218     (inputs
3219      `(("python-six" ,python-six)
3220        ("python-socksipychain" ,python-socksipychain)))
3221     (home-page "https://pagekite.net/")
3222     (synopsis "Make localhost servers publicly visible")
3223     (description
3224      "PageKite implements a tunneled reverse proxy which makes it easy to make
3225 a service (such as an HTTP or SSH server) on localhost visible to the wider
3226 Internet, even behind NAT or restrictive firewalls.  A managed front-end relay
3227 service is available at @url{https://pagekite.net/}, or you can run your own.")
3228     (license license:agpl3+)))
3229
3230 (define-public ipcalc
3231   (package
3232     (name "ipcalc")
3233     (version "0.41")
3234     (source (origin
3235               (method url-fetch)
3236               (uri (string-append "http://jodies.de/ipcalc-archive/"
3237                                   name "-" version ".tar.gz"))
3238               (sha256
3239                (base32
3240                 "12if9sm8h2ac0pgwkw835cgyqjxm6h27k4kfn2vfas9krrqwbafx"))))
3241     (inputs `(("perl" ,perl)
3242               ("tar" ,tar)
3243               ("gzip" ,gzip)
3244               ("tarball" ,source)))
3245     (build-system trivial-build-system) ;no Makefile.PL
3246     (arguments
3247      `(#:modules ((guix build utils))
3248        #:builder
3249        (begin
3250          (use-modules (guix build utils))
3251          (use-modules (srfi srfi-1))
3252          (let* ((source (assoc-ref %build-inputs "source"))
3253                 (perl (string-append (assoc-ref %build-inputs "perl")
3254                                      "/bin"))
3255                 (tar (assoc-ref %build-inputs "tar"))
3256                 (gz  (assoc-ref %build-inputs "gzip"))
3257                 (out (assoc-ref %outputs "out"))
3258                 (bin (string-append out "/bin"))
3259                 (doc (string-append out "/share/doc/ipcalc")))
3260            (setenv "PATH" (string-append gz "/bin"))
3261            (invoke (string-append tar "/bin/tar") "xvf" source)
3262            (chdir (string-append ,name "-" ,version))
3263
3264            (install-file "ipcalc" bin)
3265            (patch-shebang (string-append bin "/ipcalc") (list perl))
3266            #t))))
3267     (synopsis "Simple IP network calculator")
3268     (description "ipcalc takes an IP address and netmask and calculates the
3269 resulting broadcast, network, Cisco wildcard mask, and host range.  By giving
3270 a second netmask, you can design subnets and supernets.  It is also intended
3271 to be a teaching tool and presents the subnetting results as
3272 easy-to-understand binary values.")
3273     (home-page "http://jodies.de/ipcalc")
3274     (license license:gpl2+)))
3275
3276 (define-public tunctl
3277   (package
3278     (name "tunctl")
3279     (version "1.5")
3280     (source
3281      (origin
3282        (method url-fetch)
3283        (uri (string-append "mirror://sourceforge/tunctl/tunctl/" version "/"
3284                            "tunctl-" version ".tar.gz"))
3285        (sha256
3286         (base32 "1zsgn7w6l2zh2q0j6qaw8wsx981qcr536qlz1lgb3b5zqr66qama"))))
3287     (build-system gnu-build-system)
3288     (arguments
3289      `(#:phases
3290        (modify-phases %standard-phases
3291          (delete 'bootstrap)            ;there is no configure.ac file
3292          (delete 'configure)            ;there is no configure script
3293          (delete 'check)                ;there are no tests
3294          (replace 'build
3295            (lambda _
3296              (setenv "CC" "gcc")
3297              (invoke "make" "tunctl")))
3298          ;; TODO: Requires docbook2x to generate man page from SGML.
3299          (replace 'install
3300            (lambda* (#:key outputs #:allow-other-keys)
3301              (let* ((out (assoc-ref outputs "out"))
3302                     (bin (string-append out "/bin")))
3303                (install-file "tunctl" bin))
3304              #t)))))
3305     (home-page "http://tunctl.sourceforge.net")
3306     (synopsis  "Utility to set up and maintain TUN/TAP network interfaces")
3307     (description "Tunctl is used to set up and maintain persistent TUN/TAP
3308 network interfaces, enabling user applications to simulate network traffic.
3309 Such interfaces are useful for VPN software, virtualization, emulation,
3310 simulation, and a number of other applications.")
3311     (license license:gpl2)))
3312
3313 (define-public wol
3314   (package
3315     (name "wol")
3316     (version "0.7.1")
3317     (source
3318      (origin
3319        (method url-fetch)
3320        (uri (string-append "mirror://sourceforge/wake-on-lan/wol/"
3321                            version "/wol-" version ".tar.gz"))
3322        (sha256
3323         (base32 "08i6l5lr14mh4n3qbmx6kyx7vjqvzdnh3j9yfvgjppqik2dnq270"))))
3324     (build-system gnu-build-system)
3325     (home-page "https://sourceforge.net/projects/wake-on-lan/")
3326     (synopsis "Implements Wake On LAN functionality in a small program")
3327     (description "Tool to send a magic packet to wake another host on the
3328 network.  This must be enabled on the target host, usually in the BIOS.")
3329     (license license:gpl2)))
3330
3331 (define-public vde2
3332   (package
3333     (name "vde2")
3334     (version "2.3.2")
3335     (source
3336      (origin
3337        (method url-fetch)
3338        (uri "mirror://sourceforge/vde/vde2/2.3.2/vde2-2.3.2.tar.gz")
3339        (sha256
3340         (base32 "14xga0ib6p1wrv3hkl4sa89yzjxv7f1vfqaxsch87j6scdm59pr2"))))
3341     (build-system gnu-build-system)
3342     (arguments
3343      `(#:parallel-build? #f))           ; Build fails if #t.
3344     (inputs
3345      `(("python" ,python)
3346        ("libpcap" ,libpcap)
3347        ("openssl" ,openssl-1.0)))       ; Build fails with 1.1.
3348     (home-page "https://github.com/virtualsquare/vde-2")
3349     (synopsis "Virtual Distributed Ethernet")
3350     (description "VDE is a set of programs to provide virtual software-defined
3351 Ethernet network interface controllers across multiple virtual or
3352 physical, local or remote devices.  The VDE architecture provides
3353 virtual counterparts to hardware components such as switches and
3354 cables.")
3355     (license (list license:gpl2
3356                    license:lgpl2.1       ; libvdeplug
3357                    (license:non-copyleft ; slirpvde
3358                     "file://COPYING.slirpvde"
3359                     "See COPYING.slirpvde in the distribution.")))))
3360
3361 (define-public haproxy
3362   (package
3363     (name "haproxy")
3364     (version "2.1.7")
3365     (source (origin
3366               (method url-fetch)
3367               (uri (string-append "https://www.haproxy.org/download/"
3368                                   (version-major+minor version)
3369                                   "/src/haproxy-" version ".tar.gz"))
3370               (sha256
3371                (base32
3372                 "0fd3c1znid5a9w3gcf77b85hm2a2558w9s02c4b7xzkmivqnqbir"))))
3373     (build-system gnu-build-system)
3374     (arguments
3375      `(#:make-flags
3376        (let* ((out (assoc-ref %outputs "out")))
3377          (list (string-append "PREFIX=" out)
3378                (string-append "DOCDIR=" out "/share/" ,name)
3379                "TARGET=linux-glibc"
3380                "USE_LUA=1"
3381                "USE_OPENSSL=1"
3382                "USE_ZLIB=1"
3383                "USE_PCRE_2=1"))
3384        #:tests? #f  ; there are only regression tests, using varnishtest
3385        #:phases
3386        (modify-phases %standard-phases
3387          (delete 'configure))))
3388     (inputs
3389      `(("lua" ,lua)
3390        ("openssl" ,openssl)
3391        ("pcre2" ,pcre2)
3392        ("zlib" ,zlib)))
3393     (home-page "https://www.haproxy.org/")
3394     (synopsis "Reliable, high performance TCP/HTTP load balancer")
3395     (description "HAProxy is a free, very fast and reliable solution offering
3396 high availability, load balancing, and proxying for TCP and HTTP-based
3397 applications.  It is particularly suited for web sites crawling under very
3398 high loads while needing persistence or Layer7 processing.  Supporting tens of
3399 thousands of connections is clearly realistic with today's hardware.")
3400     (license (list license:gpl2+
3401                    license:lgpl2.1
3402                    license:lgpl2.1+))))
3403
3404 (define-public lldpd
3405   (package
3406     (name "lldpd")
3407     (version "1.0.5")
3408     (source
3409      (origin
3410        (method url-fetch)
3411        (uri (string-append "https://media.luffy.cx/files/lldpd/lldpd-"
3412                            version ".tar.gz"))
3413        (sha256
3414         (base32
3415          "16fbqrs3l976gdslx647nds8x7sz4h5h3h4l4yxzrayvyh9b5lrd"))
3416        (modules '((guix build utils)))
3417        (snippet
3418         '(begin
3419            ;; Drop bundled library.
3420            (delete-file-recursively "libevent")
3421            #t))))
3422     (arguments
3423      `(#:configure-flags
3424        (list
3425         "--with-privsep-user=nobody"
3426         "--with-privsep-group=nogroup"
3427         "--localstatedir=/var"
3428         "--enable-pie"
3429         "--without-embedded-libevent"
3430         (string-append "--with-systemdsystemunitdir="
3431                        (assoc-ref %outputs "out")
3432                        "/lib/systemd/system"))))
3433     (build-system gnu-build-system)
3434     (inputs
3435      `(("libevent" ,libevent)
3436        ("libxml2" ,libxml2)
3437        ("openssl" ,openssl)
3438        ("readline" ,readline)))
3439     (native-inputs
3440      `(("pkg-config" ,pkg-config)))
3441     (home-page "https://vincentbernat.github.io/lldpd/")
3442     (synopsis "Locate neighbors of your network equipment")
3443     (description
3444      "The @dfn{Link Layer Discovery Protocol} (LLDP) is an industry standard
3445 protocol designed to supplant proprietary Link-Layer protocols such as EDP or
3446 CDP.  The goal of LLDP is to provide an inter-vendor compatible mechanism to
3447 deliver Link-Layer notifications to adjacent network devices.  @code{lldpd} is
3448 an implementation of LLDP.  It also supports some proprietary protocols.")
3449     (license license:isc)))
3450
3451 (define-public hashcash
3452   (package
3453     (name "hashcash")
3454     (version "1.22")
3455     (source
3456      (origin
3457        (method url-fetch)
3458        (uri (string-append "http://www.hashcash.org/source/hashcash-"
3459                            version ".tgz"))
3460        (sha256
3461         (base32
3462          "15kqaimwb2y8wvzpn73021bvay9mz1gqqfc40gk4hj6f84nz34h1"))))
3463     (build-system gnu-build-system)
3464     (arguments
3465      `(#:make-flags (list (string-append "CC=" ,(cc-for-target)))
3466        #:phases
3467        (modify-phases %standard-phases
3468          (delete 'configure)
3469          ;; No tests available.
3470          (delete 'check)
3471          (replace 'install
3472            (lambda* (#:key outputs #:allow-other-keys)
3473              (let* ((outdir (assoc-ref outputs "out"))
3474                     (bindir (string-append outdir "/bin"))
3475                     (mandir (string-append outdir "/share/man/man1"))
3476                     (docdir (string-append outdir "/share/doc/hashcash-" ,version)))
3477                ;; Install manually, as we don't need the `sha1' binary
3478                (install-file "hashcash" bindir)
3479                (install-file "hashcash.1" mandir)
3480                (install-file "README" docdir)
3481                (install-file "LICENSE" docdir)
3482                (install-file "CHANGELOG" docdir)
3483                #t))))))
3484     (home-page "https://www.hashcash.org/")
3485     (synopsis "Denial-of-service countermeasure")
3486     (description "Hashcash is a proof-of-work algorithm, which has been used
3487 as a denial-of-service countermeasure technique in a number of systems.
3488
3489 A hashcash stamp constitutes a proof-of-work which takes a parametrizable
3490 amount of work to compute for the sender.  The recipient can verify received
3491 hashcash stamps efficiently.
3492
3493 This package contains a command-line tool for computing and verifying hashcash
3494 stamps.")
3495     (license license:public-domain)))