gnu/packages/networking.scm

   1 ;;; GNU Guix --- Functional package management for GNU
   2 ;;; Copyright © 2014, 2017, 2018 Ludovic Courtès <ludo@gnu.org>
   3 ;;; Copyright © 2015, 2016, 2017 Ricardo Wurmus <rekado@elephly.net>
   4 ;;; Copyright © 2015 Mark H Weaver <mhw@netris.org>
   5 ;;; Copyright © 2015, 2016, 2017 Stefan Reichör <stefan@xsteve.at>
   6 ;;; Copyright © 2016 Raimon Grau <raimonster@gmail.com>
   7 ;;; Copyright © 2016, 2017, 2018 Tobias Geerinckx-Rice <me@tobias.gr>
   8 ;;; Copyright © 2016 John Darrington <jmd@gnu.org>
   9 ;;; Copyright © 2016, 2017, 2018 Nicolas Goaziou <mail@nicolasgoaziou.fr>
  10 ;;; Copyright © 2016 Eric Bavier <bavier@member.fsf.org>
  11 ;;; Copyright © 2016, 2017 Nils Gillmann <ng0@n0.is>
  12 ;;; Copyright © 2016, 2017 Arun Isaac <arunisaac@systemreboot.net>
  13 ;;; Copyright © 2016 Benz Schenk <benz.schenk@uzh.ch>
  14 ;;; Copyright © 2016, 2017 Pjotr Prins <pjotr.guix@thebird.nl>
  15 ;;; Copyright © 2017 Mathieu Othacehe <m.othacehe@gmail.com>
  16 ;;; Copyright © 2017 Leo Famulari <leo@famulari.name>
  17 ;;; Copyright © 2017, 2018 Efraim Flashner <efraim@flashner.co.il>
  18 ;;; Copyright © 2017 Rutger Helling <rhelling@mykolab.com>
  19 ;;; Copyright © 2017 Gábor Boskovits <boskovits@gmail.com>
  20 ;;; Copyright © 2017 Thomas Danckaert <post@thomasdanckaert.be>
  21 ;;; Copyright © 2018 Adam Van Ymeren <adam@vany.ca>
  22 ;;; Copyright © 2018 Fis Trivial <ybbs.daans@hotmail.com>
  23 ;;; Copyright © 2018 Tonton <tonton@riseup.net>
  24 ;;; Copyright © 2018 Clément Lassieur <clement@lassieur.org>
  25 ;;;
  26 ;;; This file is part of GNU Guix.
  27 ;;;
  28 ;;; GNU Guix is free software; you can redistribute it and/or modify it
  29 ;;; under the terms of the GNU General Public License as published by
  30 ;;; the Free Software Foundation; either version 3 of the License, or (at
  31 ;;; your option) any later version.
  32 ;;;
  33 ;;; GNU Guix is distributed in the hope that it will be useful, but
  34 ;;; WITHOUT ANY WARRANTY; without even the implied warranty of
  35 ;;; MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
  36 ;;; GNU General Public License for more details.
  37 ;;;
  38 ;;; You should have received a copy of the GNU General Public License
  39 ;;; along with GNU Guix.  If not, see <http://www.gnu.org/licenses/>.
  40
  41 (define-module (gnu packages networking)
  42   #:use-module ((guix licenses) #:prefix license:)
  43   #:use-module (guix packages)
  44   #:use-module (guix download)
  45   #:use-module (guix git-download)
  46   #:use-module (guix build-system cmake)
  47   #:use-module (guix build-system glib-or-gtk)
  48   #:use-module (guix build-system gnu)
  49   #:use-module (guix build-system perl)
  50   #:use-module (guix build-system python)
  51   #:use-module (gnu packages)
  52   #:use-module (gnu packages admin)
  53   #:use-module (gnu packages adns)
  54   #:use-module (gnu packages algebra)
  55   #:use-module (gnu packages audio)
  56   #:use-module (gnu packages autotools)
  57   #:use-module (gnu packages base)
  58   #:use-module (gnu packages bison)
  59   #:use-module (gnu packages check)
  60   #:use-module (gnu packages code)
  61   #:use-module (gnu packages compression)
  62   #:use-module (gnu packages crypto)
  63   #:use-module (gnu packages curl)
  64   #:use-module (gnu packages databases)
  65   #:use-module (gnu packages dejagnu)
  66   #:use-module (gnu packages documentation)
  67   #:use-module (gnu packages flex)
  68   #:use-module (gnu packages gettext)
  69   #:use-module (gnu packages glib)
  70   #:use-module (gnu packages gnome)
  71   #:use-module (gnu packages gnupg)
  72   #:use-module (gnu packages gtk)
  73   #:use-module (gnu packages image)
  74   #:use-module (gnu packages libidn)
  75   #:use-module (gnu packages linux)
  76   #:use-module (gnu packages lua)
  77   #:use-module (gnu packages multiprecision)
  78   #:use-module (gnu packages kerberos)
  79   #:use-module (gnu packages ncurses)
  80   #:use-module (gnu packages pcre)
  81   #:use-module (gnu packages perl)
  82   #:use-module (gnu packages perl-check)
  83   #:use-module (gnu packages pkg-config)
  84   #:use-module (gnu packages python)
  85   #:use-module (gnu packages qt)
  86   #:use-module (gnu packages readline)
  87   #:use-module (gnu packages ssh)
  88   #:use-module (gnu packages textutils)
  89   #:use-module (gnu packages tls)
  90   #:use-module (gnu packages valgrind)
  91   #:use-module (gnu packages wm)
  92   #:use-module (gnu packages wxwidgets)
  93   #:use-module (gnu packages xml)
  94   #:use-module (ice-9 match))
  95
  96 ;; The gnu.org ‘home’ for this GNU project is a directory listing with 1.6.0 as
  97 ;; the latest version.  The author's git repository, mentioned in the 1.6.0
  98 ;; README and otherwise legit-looking, contains a proper 1.7.0 release tarball
  99 ;; with many OUI updates.  Use it, even though it's also several years old now.
 100 (define-public macchanger
 101   (package
 102     (name "macchanger")
 103     (version "1.7.0")
 104     (source
 105      (origin
 106        (method url-fetch)
 107        (uri (string-append "https://github.com/alobbs/macchanger/"
 108                            "releases/download/" version "/"
 109                            name "-" version ".tar.gz"))
 110        (sha256
 111         (base32 "1gs5m0jxyprdp00w2qkbnaqm3ilkjz0q1gqdg4nzdm8g4xy73qns"))))
 112     (build-system gnu-build-system)
 113     (home-page "https://www.gnu.org/software/macchanger/")
 114     (synopsis "Viewing and manipulating MAC addresses of network interfaces")
 115     (description "GNU MAC Changer is a utility for viewing and changing MAC
 116 addresses of networking devices.  New addresses may be set explicitly or
 117 randomly.  They can include MAC addresses of the same or other hardware vendors
 118 or, more generally, MAC addresses of the same category of hardware.")
 119     (license license:gpl2+)))
 120
 121 (define-public miredo
 122   (package
 123     (name "miredo")
 124     (version "1.2.6")
 125     (source (origin
 126               (method url-fetch)
 127               (uri (string-append "http://www.remlab.net/files/miredo/miredo-"
 128                                   version ".tar.xz"))
 129               (sha256
 130                (base32
 131                 "0j9ilig570snbmj48230hf7ms8kvcwi2wblycqrmhh85lksd49ps"))))
 132     (build-system gnu-build-system)
 133     (arguments
 134      '(#:phases
 135        (modify-phases %standard-phases
 136          ;; The checkconf test in src/ requires network access.
 137          (add-before
 138           'check 'disable-checkconf-test
 139           (lambda _
 140             (substitute* "src/Makefile"
 141               (("^TESTS = .*") "TESTS = \n")))))))
 142     (home-page "http://www.remlab.net/miredo/")
 143     (synopsis "Teredo IPv6 tunneling software")
 144     (description
 145      "Miredo is an implementation (client, relay, server) of the Teredo
 146 specification, which provides IPv6 Internet connectivity to IPv6 enabled hosts
 147 residing in IPv4-only networks, even when they are behind a NAT device.")
 148     (license license:gpl2+)))
 149
 150 (define-public socat
 151   (package
 152     (name "socat")
 153     (version "1.7.3.2")
 154     (source (origin
 155               (method url-fetch)
 156               (uri (string-append
 157                     "http://www.dest-unreach.org/socat/download/socat-"
 158                     version ".tar.bz2"))
 159               (sha256
 160                (base32
 161                 "0lcj6zpra33xhgvhmz9l3cqz10v8ybafb8dd1yqkwf1rhy01ymp3"))))
 162     (build-system gnu-build-system)
 163     (arguments '(#:tests? #f))                    ;no 'check' phase
 164     (inputs `(("openssl" ,openssl)))
 165     (home-page "http://www.dest-unreach.org/socat/")
 166     (synopsis
 167      "Open bidirectional communication channels from the command line")
 168     (description
 169      "socat is a relay for bidirectional data transfer between two independent
 170 data channels---files, pipes, devices, sockets, etc.  It can create
 171 \"listening\" sockets, named pipes, and pseudo terminals.
 172
 173 socat can be used, for instance, as TCP port forwarder, as a shell interface
 174 to UNIX sockets, IPv6 relay, for redirecting TCP oriented programs to a serial
 175 line, to logically connect serial lines on different computers, or to
 176 establish a relatively secure environment (su and chroot) for running client
 177 or server shell scripts with network connections.")
 178     (license license:gpl2)))
 179
 180 (define-public tcp-wrappers
 181   (package
 182     (name "tcp-wrappers")
 183     (version "7.6")
 184     (source (origin
 185               (method url-fetch)
 186               (uri (string-append
 187                     "ftp://ftp.porcupine.org/pub/security/tcp_wrappers_"
 188                     version ".tar.gz"))
 189               (sha256
 190                (base32
 191                 "0p9ilj4v96q32klavx0phw9va21fjp8vpk11nbh6v2ppxnnxfhwm"))))
 192     (build-system gnu-build-system)
 193     (arguments
 194      `(#:phases
 195        (modify-phases %standard-phases
 196          (delete 'configure)  ; there is no configure script
 197          (delete 'check)      ; there are no tests
 198          (replace 'build
 199            (lambda _
 200              (chmod "." #o755)
 201              ;; Upstream doesn't generate a shared library.  So we have to do it.
 202              (setenv "CC" "gcc -fno-builtin -fPIC")
 203              (substitute* "Makefile"
 204                (("^(all[^\n]*)" line) (string-append line " libwrap.so\n
 205 libwrap.so: $(LIB_OBJ)\n
 206 \tgcc -shared $^ -o $@\n")))
 207              ;; Deal with some gcc breakage.
 208              (substitute* "percent_m.c"
 209                (("extern char .sys_errlist.*;") ""))
 210              (substitute* "scaffold.c"
 211                (("extern char .malloc.*;") ""))
 212              ;; This, believe it or not, is the recommended way to build!
 213              (zero? (system* "make" "REAL_DAEMON_DIR=/etc" "linux"))))
 214          ;; There is no make install stage, so we have to do it ourselves.
 215          (replace 'install
 216            (lambda _
 217              (let ((out (assoc-ref %outputs "out"))
 218                    (man-pages `("hosts_access.3"
 219                                 "hosts_access.5"
 220                                 "hosts_options.5"
 221                                 "tcpd.8"
 222                                 "tcpdchk.8"
 223                                 "tcpdmatch.8"))
 224                    (libs  `("libwrap.a"
 225                             "libwrap.so"))
 226                    (headers `("tcpd.h"))
 227                    (bins `("safe_finger"
 228                            "tcpd"
 229                            "tcpdchk"
 230                            "tcpdmatch"
 231                            "try-from")))
 232                (for-each
 233                 (lambda (x)
 234                   (install-file x (string-append out "/include")))
 235                 headers)
 236                (for-each
 237                 (lambda (x)
 238                   (install-file x (string-append out "/share/man/man"
 239                                                  (string-take-right x 1))))
 240                 man-pages)
 241                (for-each
 242                 (lambda (x)
 243                   (install-file x (string-append out "/lib/")))
 244                 libs)
 245                (for-each
 246                 (lambda (x)
 247                   (install-file x (string-append out "/bin/")))
 248                 bins)))))))
 249     (home-page "http://www.porcupine.org")
 250     (synopsis  "Monitor and filter incoming requests for network services")
 251     (description "With this package you can monitor and filter incoming requests for
 252 network services.  It includes a library which may be used by daemons to
 253 transparently check connection attempts against an access control list.")
 254     (license (license:non-copyleft "file://DISCLAIMER"
 255                                    "See the file DISCLAIMER in the distribution."))))
 256
 257
 258 (define-public zeromq
 259   (package
 260     (name "zeromq")
 261     (version "4.0.7")
 262     (source (origin
 263               (method url-fetch)
 264               (uri (string-append "http://download.zeromq.org/zeromq-"
 265                                   version ".tar.gz"))
 266               (sha256
 267                (base32
 268                 "00vvwhgcdr1lva2pavicvy92iad0hj8cf71n702hv6blw1kjj2z0"))))
 269     (build-system gnu-build-system)
 270     (home-page "http://zeromq.org")
 271     (synopsis "Library for message-based applications")
 272     (description
 273      "The 0MQ lightweight messaging kernel is a library which extends the
 274 standard socket interfaces with features traditionally provided by specialized
 275 messaging middle-ware products.  0MQ sockets provide an abstraction of
 276 asynchronous message queues, multiple messaging patterns, message
 277 filtering (subscriptions), seamless access to multiple transport protocols and
 278 more.")
 279     (license license:lgpl3+)))
 280
 281 (define-public czmq
 282   (package
 283     (name "czmq")
 284     (version "4.1.1")
 285     (source (origin
 286               (method url-fetch)
 287               (uri (string-append
 288                     "https://github.com/zeromq/" name
 289                     "/releases/download/v" version
 290                     "/" name "-" version ".tar.gz"))
 291               (sha256
 292                (base32
 293                 "1h5hrcsc30fcwb032vy5gxkq4j4vv1y4dj460rfs1hhxi0cz83zh"))))
 294     (build-system gnu-build-system)
 295     (arguments
 296      '(;; TODO Tests fail for some reason:
 297        ;;  * zauth: OK
 298        ;;  * zbeacon: OK (skipping test, no UDP broadcasting)
 299        ;; E: (czmq_selftest) 18-02-24 16:25:52 No broadcast interface found, (ZSYS_INTERFACE=lo)
 300        ;; make[2]: *** [Makefile:2245: check-local] Segmentation fault
 301        ;; make[2]: Leaving directory '/tmp/guix-build-czmq-4.1.0.drv-0/czmq-4.1.0'
 302        ;; make[1]: *** [Makefile:2032: check-am] Error 2
 303        ;; make[1]: Leaving directory '/tmp/guix-build-czmq-4.1.0.drv-0/czmq-4.1.0'
 304        ;; make: *** [Makefile:1588: check-recursive] Error 1
 305        ;; phase `check' failed after 19.4 seconds
 306        #:tests? #f
 307        #:configure-flags '("--enable-drafts")))
 308     (inputs
 309      `(("zeromq" ,zeromq)))
 310     (home-page "http://zeromq.org")
 311     (synopsis "High-level C bindings for ØMQ")
 312     (description
 313      "czmq provides bindings for the ØMQ core API that hides the differences
 314 between different versions of ØMQ.")
 315     (license license:mpl2.0)))
 316
 317 (define-public librdkafka
 318   (package
 319     (name "librdkafka")
 320     (version "0.9.1")
 321     (source (origin
 322               (method url-fetch)
 323               (uri (string-append
 324                     "https://github.com/edenhill/librdkafka/archive/"
 325                     version ".tar.gz"))
 326               (file-name (string-append name "-" version ".tar.gz"))
 327               (sha256
 328                (base32
 329                 "10ldx7g7ymmg17snzx78vy4n8ma1rjx0agzi34g15j2fk867xmas"))))
 330     (build-system gnu-build-system)
 331     (arguments
 332      '(#:phases
 333        (modify-phases %standard-phases
 334          (replace 'configure
 335            ;; its custom configure script doesn't understand 'CONFIG_SHELL'.
 336            (lambda* (#:key outputs #:allow-other-keys)
 337              (let ((out (assoc-ref outputs "out")))
 338                ;; librdkafka++.so lacks RUNPATH for librdkafka.so
 339                (setenv "LDFLAGS"
 340                        (string-append "-Wl,-rpath=" out "/lib"))
 341                (zero? (system* "./configure"
 342                                (string-append "--prefix=" out)))))))))
 343     (native-inputs
 344      `(("python" ,python-wrapper)))
 345     (propagated-inputs
 346      `(("zlib" ,zlib))) ; in the Libs.private field of rdkafka.pc
 347     (home-page "https://github.com/edenhill/librdkafka")
 348     (synopsis "Apache Kafka C/C++ client library")
 349     (description
 350      "librdkafka is a C library implementation of the Apache Kafka protocol,
 351 containing both Producer and Consumer support.")
 352     (license license:bsd-2)))
 353
 354 (define-public libndp
 355   (package
 356     (name "libndp")
 357     (version "1.6")
 358     (source (origin
 359               (method url-fetch)
 360               (uri (string-append "http://libndp.org/files/"
 361                                   name "-" version ".tar.gz"))
 362               (sha256
 363                (base32
 364                 "03mczwrxqbp54msafxzzyhaazkvjdwm2kipjkrb5xg8kw22glz8c"))))
 365     (build-system gnu-build-system)
 366     (home-page "http://libndp.org/")
 367     (synopsis "Library for Neighbor Discovery Protocol")
 368     (description
 369      "libndp contains a library which provides a wrapper for IPv6 Neighbor
 370 Discovery Protocol.  It also provides a tool named ndptool for sending and
 371 receiving NDP messages.")
 372     (license license:lgpl2.1+)))
 373
 374 (define-public ethtool
 375   (package
 376     (name "ethtool")
 377     (version "4.16")
 378     (source (origin
 379               (method url-fetch)
 380               (uri (string-append "mirror://kernel.org/software/network/"
 381                                   name "/" name "-" version ".tar.xz"))
 382               (sha256
 383                (base32
 384                 "00ss07jc7p276d83f6jpafgwyc9yiribciyqcgx9j86v49kpm5py"))))
 385     (build-system gnu-build-system)
 386     (home-page "https://www.kernel.org/pub/software/network/ethtool/")
 387     (synopsis "Display or change Ethernet device settings")
 388     (description
 389      "ethtool can be used to query and change settings such as speed,
 390 auto-negotiation and checksum offload on many network devices, especially
 391 Ethernet devices.")
 392     (license license:gpl2)))
 393
 394 (define-public ifstatus
 395   (package
 396     (name "ifstatus")
 397     (version "1.1.0")
 398     (source (origin
 399               (method url-fetch)
 400               (uri (string-append "mirror://sourceforge/ifstatus/ifstatus/"
 401                                   "ifstatus%20v" version "/ifstatus-v"
 402                                   version ".tar.gz"))
 403               (sha256
 404                (base32
 405                 "045cbsq9ps32j24v8y5hpyqxnqn9mpaf3mgvirlhgpqyb9jsia0c"))
 406               (modules '((guix build utils)))
 407               (snippet
 408                '(begin
 409                   (substitute* "Main.h"
 410                     (("#include <stdio.h>")
 411                      "#include <stdio.h>\n#include <stdlib.h>"))
 412                   #t))))
 413     (build-system gnu-build-system)
 414     (arguments
 415      '(#:tests? #f                                ; no "check" target
 416        #:phases
 417        (modify-phases %standard-phases
 418          (delete 'configure)             ; no configure script
 419          (replace 'install
 420                   (lambda* (#:key outputs #:allow-other-keys)
 421                     (let* ((out (assoc-ref outputs "out"))
 422                            (bin (string-append out "/bin")))
 423                       (mkdir-p bin)
 424                       (copy-file "ifstatus"
 425                                  (string-append bin "/ifstatus"))))))))
 426     (inputs `(("ncurses" ,ncurses)))
 427     (home-page "http://ifstatus.sourceforge.net/graphic/index.html")
 428     (synopsis "Text based network interface status monitor")
 429     (description
 430      "IFStatus is a simple, easy-to-use program for displaying commonly
 431 needed/wanted real-time traffic statistics of multiple network
 432 interfaces, with a simple and efficient view on the command line.  It is
 433 intended as a substitute for the PPPStatus and EthStatus projects.")
 434     (license license:gpl2+)))
 435
 436 (define-public nload
 437   (package
 438     (name "nload")
 439     (version "0.7.4")
 440     (source (origin
 441               (method url-fetch)
 442               (uri (string-append "mirror://sourceforge/nload/nload/" version
 443                                   "/nload-" version ".tar.gz"))
 444               (sha256
 445                (base32
 446                 "1rb9skch2kgqzigf19x8bzk211jdfjfdkrcvaqyj89jy2pkm3h61"))))
 447     (build-system gnu-build-system)
 448     (inputs `(("ncurses" ,ncurses)))
 449     (home-page "http://www.roland-riegel.de/nload/")
 450     (synopsis "Realtime console network usage monitor")
 451     (description
 452      "Nload is a console application which monitors network traffic and
 453 bandwidth usage in real time.  It visualizes the in- and outgoing traffic using
 454 two graphs, and provides additional info like total amount of transferred data
 455 and min/max network usage.")
 456     (license license:gpl2+)))
 457
 458 (define-public iodine
 459   (package
 460     (name "iodine")
 461     (version "0.7.0")
 462     (source (origin
 463               (method url-fetch)
 464               (uri (string-append "http://code.kryo.se/" name "/"
 465                                   name "-" version ".tar.gz"))
 466               (sha256
 467                (base32
 468                 "0gh17kcxxi37k65zm4gqsvbk3aw7yphcs3c02pn1c4s2y6n40axd"))))
 469     (build-system gnu-build-system)
 470     (arguments
 471      '(#:phases
 472        (modify-phases %standard-phases
 473          (delete 'configure)
 474          (add-before 'build 'fix-ifconfig-path
 475            ;; This package works only with the net-tools version of ifconfig.
 476            (lambda* (#:key inputs #:allow-other-keys)
 477              (substitute* "src/tun.c"
 478                (("PATH=[^ ]* ")
 479                 (string-append (assoc-ref inputs "net-tools") "/bin/")))))
 480          (add-before 'check 'delete-failing-tests
 481            ;; Avoid https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=802105.
 482            (lambda _
 483              (substitute* "tests/common.c"
 484                (("tcase_add_test\\(tc, \
 485 test_parse_format_ipv(4(|_listen_all|_mapped_ipv6)|6)\\);")
 486                 "")))))
 487        #:make-flags (list "CC=gcc"
 488                           (string-append "prefix=" (assoc-ref %outputs "out")))
 489        #:test-target "test"))
 490     (inputs `(("net-tools" ,net-tools)
 491               ("zlib" ,zlib)))
 492     (native-inputs `(("check" ,check)
 493                      ("pkg-config" ,pkg-config)))
 494     (home-page "http://code.kryo.se/iodine/")
 495     (synopsis "Tunnel IPv4 data through a DNS server")
 496     (description "Iodine tunnels IPv4 data through a DNS server.  This
 497 can be useful in different situations where internet access is firewalled, but
 498 DNS queries are allowed.  The bandwidth is asymmetrical, with limited upstream
 499 and up to 1 Mbit/s downstream.")
 500     ;; src/md5.[ch] is released under the zlib license
 501     (license (list license:isc license:zlib))))
 502
 503 (define-public whois
 504   (package
 505     (name "whois")
 506     (version "5.3.1")
 507     (source
 508      (origin
 509        (method url-fetch)
 510        (uri (string-append "mirror://debian/pool/main/w/whois/"
 511                            name "_" version ".tar.xz"))
 512        (sha256
 513         (base32
 514          "0gl98l26dcgmlap0pxllbv4b9n2fr5b7zml3ijf8sf3a60qsskpg"))))
 515     (build-system gnu-build-system)
 516     (arguments
 517      `(#:tests? #f                      ; no test suite
 518        #:make-flags (list "CC=gcc"
 519                           (string-append "prefix=" (assoc-ref %outputs "out")))
 520        #:phases
 521        (modify-phases %standard-phases
 522          (delete 'configure)            ; no configure script
 523          (add-before 'build 'setenv
 524            (lambda _
 525              (setenv "HAVE_ICONV" "1")
 526              #t)))))
 527     (inputs
 528      `(("libidn2" ,libidn2)))
 529     (native-inputs
 530      `(("gettext" ,gettext-minimal)
 531        ("perl" ,perl)
 532        ("pkg-config" ,pkg-config)))
 533     (synopsis "Intelligent client for the WHOIS directory service")
 534     (description
 535       "whois searches for an object in a @dfn{WHOIS} (RFC 3912) database.
 536 It is commonly used to look up the registered users or assignees of an Internet
 537 resource, such as a domain name, an IP address block, or an autonomous system.
 538 It can automatically select the appropriate server for most queries.
 539
 540 For historical reasons, this package also includes @command{mkpasswd}, which
 541 encrypts passwords using @code{crypt(3)} and is unrelated to the Expect command
 542 of the same name.")
 543     (home-page "https://github.com/rfc1036/whois")
 544     (license license:gpl2+)))
 545
 546 (define-public wireshark
 547   (package
 548     (name "wireshark")
 549     (version "2.6.1")
 550     (source
 551      (origin
 552        (method url-fetch)
 553        (uri (string-append "https://www.wireshark.org/download/src/wireshark-"
 554                            version ".tar.xz"))
 555        (sha256
 556         (base32
 557          "126dvd6myjbxjr69dy9vzzdda2lmjy1wwwc6gcs5djb46jy5nvmb"))))
 558     (build-system gnu-build-system)
 559     (inputs `(("c-ares" ,c-ares)
 560               ("glib" ,glib)
 561               ("gnutls" ,gnutls)
 562               ("libcap" ,libcap)
 563               ("libgcrypt" ,libgcrypt)
 564               ("libnl" ,libnl)
 565               ("libpcap" ,libpcap)
 566               ("libssh" ,libssh)
 567               ("libxml2" ,libxml2)
 568               ("lz4" ,lz4)
 569               ("lua" ,lua-5.2)          ;Lua 5.3 unsupported
 570               ("krb5" ,mit-krb5)
 571               ("portaudio" ,portaudio)
 572               ("qtbase" ,qtbase)
 573               ("qtmultimedia" ,qtmultimedia)
 574               ("sbc" ,sbc)
 575               ("snappy" ,snappy)
 576               ("zlib" ,zlib)))
 577     (native-inputs `(("perl" ,perl)
 578                      ("pkg-config" ,pkg-config)
 579                      ("python" ,python-wrapper)
 580                      ("qttools" ,qttools)))
 581     (arguments
 582      `(#:configure-flags
 583        (list (string-append "--with-c-ares=" (assoc-ref %build-inputs "c-ares"))
 584              (string-append "--with-krb5=" (assoc-ref %build-inputs "krb5"))
 585              (string-append "--with-libcap=" (assoc-ref %build-inputs "libcap"))
 586              (string-append "--with-libssh=" (assoc-ref %build-inputs "libssh"))
 587              (string-append "--with-lua=" (assoc-ref %build-inputs "lua"))
 588              (string-append "--with-lz4=" (assoc-ref %build-inputs "lz4"))
 589              (string-append "--with-pcap=" (assoc-ref %build-inputs "libpcap"))
 590              (string-append "--with-portaudio="
 591                             (assoc-ref %build-inputs "portaudio"))
 592              (string-append "--with-sbc=" (assoc-ref %build-inputs "sbc"))
 593              (string-append "--with-snappy=" (assoc-ref %build-inputs "snappy"))
 594              (string-append "--with-zlib=" (assoc-ref %build-inputs "zlib")))
 595        #:phases
 596        (modify-phases %standard-phases
 597          (add-after 'unpack 'patch-source
 598            (lambda _
 599              ;; Fix build against Qt 5.11.
 600              (substitute* "ui/qt/packet_format_group_box.cpp"
 601                (("#include <QStyle>") "#include <QStyle>
 602 #include <QStyleOption>"))
 603              (substitute* "ui/qt/time_shift_dialog.cpp"
 604                (("#include <ui/time_shift.h>") "#include <ui/time_shift.h>
 605 #include <QStyleOption>"))
 606              (substitute* "ui/qt/wireless_frame.cpp"
 607                (("#include <QProcess>") "#include <QProcess>
 608 #include <QAbstractItemView>")))))))
 609     (synopsis "Network traffic analyzer")
 610     (description "Wireshark is a network protocol analyzer, or @dfn{packet
 611 sniffer}, that lets you capture and interactively browse the contents of
 612 network frames.")
 613     (home-page "https://www.wireshark.org/")
 614     (license license:gpl2+)))
 615
 616 (define-public fping
 617   (package
 618     (name "fping")
 619     (version "4.0")
 620     (source
 621      (origin
 622        (method url-fetch)
 623        (uri (string-append "https://fping.org/dist/fping-"
 624                            version ".tar.gz"))
 625        (sha256
 626         (base32
 627          "1kp81wchi79l8z8rrj602fpjrd8bi84y3i7fsaclzlwap5943sv7"))))
 628     (build-system gnu-build-system)
 629     (home-page "http://fping.org/")
 630     (synopsis "Send ICMP ECHO_REQUEST packets to network hosts")
 631     (description
 632      "fping is a ping like program which uses the Internet Control Message
 633 Protocol (ICMP) echo request to determine if a target host is responding.
 634 fping differs from ping in that you can specify any number of targets on the
 635 command line, or specify a file containing the lists of targets to ping.
 636 Instead of sending to one target until it times out or replies, fping will
 637 send out a ping packet and move on to the next target in a round-robin
 638 fashion.")
 639     (license license:expat)))
 640
 641 (define-public httping
 642   (package
 643     (name "httping")
 644     (version "2.5")
 645     (source
 646      (origin
 647        (method url-fetch)
 648        (uri (string-append "https://www.vanheusden.com/httping/httping-"
 649                            version ".tgz"))
 650        (sha256
 651         (base32
 652          "1y7sbgkhgadmd93x1zafqc4yp26ssiv16ni5bbi9vmvvdl55m29y"))))
 653     (build-system gnu-build-system)
 654     (native-inputs
 655      `(("gettext" ,gettext-minimal)))
 656     (inputs
 657      `(("fftw" ,fftw)
 658        ("ncurses" ,ncurses)
 659        ("openssl" ,openssl)))
 660     (arguments
 661      `(#:make-flags (list "CC=gcc"
 662                           (string-append "DESTDIR=" (assoc-ref %outputs "out"))
 663                           "PREFIX=")
 664        #:tests? #f)) ; no tests
 665     (home-page "https://www.vanheusden.com/httping/")
 666     (synopsis "Web server latency and throughput monitor")
 667     (description
 668      "httping measures how long it takes to connect to a web server, send an
 669 HTTP(S) request, and receive the reply headers.  It is somewhat similar to
 670 @command{ping}, but can be used even in cases where ICMP traffic is blocked
 671 by firewalls or when you want to monitor the response time of the actual web
 672 application stack itself.")
 673     (license license:gpl2)))        ; with permission to link with OpenSSL
 674
 675 (define-public httpstat
 676   (package
 677     (name "httpstat")
 678     (version "1.2.1")
 679     (source
 680      (origin
 681        (method url-fetch)
 682        (uri (pypi-uri "httpstat" version))
 683        (sha256
 684         (base32
 685          "1chw2nk56vaq87aba012a270k9na06hfx1pfbsrc3jfvlc2kb9hb"))))
 686     (build-system python-build-system)
 687     (inputs `(("curl" ,curl)))
 688     (arguments
 689      '(#:phases
 690        (modify-phases %standard-phases
 691          (add-before 'build 'fix-curl-path
 692            (lambda* (#:key inputs #:allow-other-keys)
 693              (substitute* "httpstat.py"
 694                (("ENV_CURL_BIN.get\\('curl'\\)")
 695                 (string-append "ENV_CURL_BIN.get('"
 696                                (assoc-ref inputs "curl")
 697                                "/bin/curl')"))))))))
 698     (home-page "https://github.com/reorx/httpstat")
 699     (synopsis "Visualize curl statistics")
 700     (description
 701      "@command{httpstat} is a tool to visualize statistics from the
 702 @command{curl} HTTP client.  It acts as a wrapper for @command{curl} and
 703 prints timing information for each step of the HTTP request (DNS lookup,
 704 TCP connection, TLS handshake and so on) in the terminal.")
 705     (license license:expat)))
 706
 707 (define-public bwm-ng
 708   (package
 709     (name "bwm-ng")
 710     (version "0.6.1")
 711     (source
 712      (origin
 713        (method url-fetch)
 714        (uri (string-append "https://www.gropp.org/bwm-ng/bwm-ng-"
 715                            version ".tar.gz"))
 716        (sha256
 717         (base32
 718          "1w0dwpjjm9pqi613i8glxrgca3rdyqyp3xydzagzr5ndc34z6z02"))))
 719     (build-system gnu-build-system)
 720     (inputs `(("ncurses" ,ncurses)))
 721     (synopsis "Console based live network and disk I/O bandwidth monitor")
 722     (description "Bandwidth Monitor NG is a small and simple console based
 723 live network and disk I/O bandwidth monitor.")
 724     (home-page "https://www.gropp.org/?id=projects&sub=bwm-ng")
 725     (license license:gpl2)))
 726
 727 (define-public aircrack-ng
 728   (package
 729     (name "aircrack-ng")
 730     (version "1.2-rc4")
 731     (source
 732      (origin
 733        (method url-fetch)
 734        (uri (string-append "http://download.aircrack-ng.org/aircrack-ng-"
 735                            version ".tar.gz"))
 736        (sha256
 737         (base32
 738          "0dpzx9kddxpgzmgvdpl3rxn0jdaqhm5wxxndp1xd7d75mmmc2fnr"))))
 739     (build-system gnu-build-system)
 740     (native-inputs
 741      `(("pkg-config" ,pkg-config)))
 742     (inputs
 743      `(("libgcrypt" ,libgcrypt)
 744        ("libnl" ,libnl)
 745        ("ethtool" ,ethtool)
 746        ("pcre" ,pcre)
 747        ("sqlite" ,sqlite)
 748        ("zlib" ,zlib)))
 749     (arguments
 750      `(#:make-flags `("sqlite=true"
 751                       "gcrypt=true"
 752                       "libnl=true"
 753                       "pcre=true"
 754                       "experimental=true" ;build wesside-ng, etc.
 755                       "AVX2FLAG=N" "AVX1FLAG=N"
 756                       ,,@(match (%current-system)
 757                            ((or "x86_64-linux" "i686-linux")
 758                             `("SSEFLAG=Y"))
 759                            (_
 760                             `("NEWSSE=false")))
 761                       ,(string-append "prefix=" %output))
 762        #:phases (modify-phases %standard-phases
 763                   (delete 'configure)   ;no configure phase
 764                   (add-after 'build 'absolutize-tools
 765                     (lambda* (#:key inputs #:allow-other-keys)
 766                       (let ((ethtool (string-append (assoc-ref inputs "ethtool")
 767                                                     "/sbin/ethtool")))
 768                         (substitute* "scripts/airmon-ng"
 769                           (("\\[ ! -x \"\\$\\(command -v ethtool 2>&1)\" \\]")
 770                            (string-append "! " ethtool " --version "
 771                                           ">/dev/null 2>&1"))
 772                           (("\\$\\(ethtool")
 773                            (string-append "$(" ethtool)))
 774                         #t))))))
 775     (home-page "http://www.aircrack-ng.org")
 776     (synopsis "Assess WiFi network security")
 777     (description
 778      "Aircrack-ng is a complete suite of tools to assess WiFi network
 779 security.  It focuses on different areas of WiFi security: monitoring,
 780 attacking, testing, and cracking.  All tools are command-line driven, which
 781 allows for heavy scripting.")
 782     (license (list license:gpl2+ license:bsd-3))))
 783
 784 (define-public perl-net-dns
 785  (package
 786   (name "perl-net-dns")
 787   (version "1.15")
 788   (source
 789     (origin
 790       (method url-fetch)
 791       (uri (string-append
 792              "mirror://cpan/authors/id/N/NL/NLNETLABS/Net-DNS-"
 793              version
 794              ".tar.gz"))
 795       (sha256
 796         (base32
 797           "1l31kqrgjzq8zgpr86z12x550px5zpn563gmnja6m14b8fk6pm0s"))))
 798   (build-system perl-build-system)
 799   (inputs
 800     `(("perl-digest-hmac" ,perl-digest-hmac)))
 801   (home-page "http://search.cpan.org/dist/Net-DNS")
 802   (synopsis
 803     "Perl Interface to the Domain Name System")
 804   (description "Net::DNS is the Perl Interface to the Domain Name System.")
 805   (license license:x11)))
 806
 807 (define-public perl-socket6
 808  (package
 809   (name "perl-socket6")
 810   (version "0.28")
 811   (source
 812     (origin
 813       (method url-fetch)
 814       (uri (string-append
 815              "mirror://cpan/authors/id/U/UM/UMEMOTO/Socket6-"
 816              version
 817              ".tar.gz"))
 818       (sha256
 819         (base32
 820           "11j5jzqbzmwlws9zals43ry2f1nw9qy6im7yhn9ck5rikywrmm5z"))))
 821   (build-system perl-build-system)
 822   (arguments
 823    `(#:phases
 824      (modify-phases %standard-phases
 825          (replace 'configure
 826            (lambda* (#:key outputs #:allow-other-keys)
 827              (let* ((out (assoc-ref outputs "out"))
 828                     (args `("Makefile.PL"
 829                             ,(string-append "PREFIX=" out)
 830                             "INSTALLDIRS=site")))
 831                (setenv "CONFIG_SHELL" (which "sh"))
 832                (zero? (apply system* "perl" args))))))))
 833   (home-page "http://search.cpan.org/dist/Socket6")
 834   (synopsis
 835     "IPv6 related part of the C socket.h defines and structure manipulators for Perl")
 836   (description "Socket6 binds the IPv6 related part of the C socket header
 837 definitions and structure manipulators for Perl.")
 838   (license license:bsd-3)))
 839
 840 (define-public perl-net-dns-resolver-programmable
 841  (package
 842   (name "perl-net-dns-resolver-programmable")
 843   (version "v0.003")
 844   (source
 845     (origin
 846       (method url-fetch)
 847       (uri (string-append
 848              "mirror://cpan/authors/id/J/JM/JMEHNLE/net-dns-resolver-programmable/"
 849              "Net-DNS-Resolver-Programmable-" version ".tar.gz"))
 850       (sha256
 851         (base32
 852           "1v3nl2kaj4fs55n1617n53q8sa3mir06898vpy1rq98zjih24h4d"))
 853       (patches
 854        (search-patches "perl-net-dns-resolver-programmable-fix.patch"))))
 855   (build-system perl-build-system)
 856   (native-inputs
 857     `(("perl-module-build" ,perl-module-build)))
 858   (inputs `(("perl-net-dns" ,perl-net-dns)))
 859   (home-page
 860     "http://search.cpan.org/dist/Net-DNS-Resolver-Programmable")
 861   (synopsis
 862     "Programmable DNS resolver class for offline emulation of DNS")
 863   (description "Net::DNS::Resolver::Programmable is a programmable DNS resolver for
 864 offline emulation of DNS.")
 865   (license license:perl-license)))
 866
 867 (define-public perl-netaddr-ip
 868  (package
 869   (name "perl-netaddr-ip")
 870   (version "4.079")
 871   (source
 872     (origin
 873       (method url-fetch)
 874       (uri (string-append
 875              "mirror://cpan/authors/id/M/MI/MIKER/NetAddr-IP-"
 876              version
 877              ".tar.gz"))
 878       (sha256
 879         (base32
 880           "1rx0dinrz9fk9qcg4rwqq5n1dm3xv2arymixpclcv2q2nzgq4npc"))))
 881   (build-system perl-build-system)
 882   (arguments
 883     `(#:phases
 884        (modify-phases %standard-phases
 885          (replace 'configure
 886            (lambda* (#:key outputs #:allow-other-keys)
 887              (let* ((out (assoc-ref outputs "out"))
 888                     (args `("Makefile.PL"
 889                             ,(string-append "PREFIX=" out)
 890                             "INSTALLDIRS=site")))
 891                (setenv "CONFIG_SHELL" (which "sh"))
 892                (zero? (apply system* "perl" args))))))))
 893   (home-page
 894     "http://search.cpan.org/dist/NetAddr-IP")
 895   (synopsis
 896     "Manages IPv4 and IPv6 addresses and subnets")
 897   (description "NetAddr::IP manages IPv4 and IPv6 addresses and subsets.")
 898   (license license:perl-license)))
 899
 900 (define-public perl-net-patricia
 901  (package
 902   (name "perl-net-patricia")
 903   (version "1.22")
 904   (source
 905     (origin
 906       (method url-fetch)
 907       (uri (string-append
 908              "mirror://cpan/authors/id/G/GR/GRUBER/Net-Patricia-"
 909              version
 910              ".tar.gz"))
 911       (sha256
 912         (base32
 913           "0ln5f57vc8388kyh9vhx2infrdzfhbpgyby74h1qsnhwds95m0vh"))))
 914   (build-system perl-build-system)
 915   (inputs
 916     `(("perl-net-cidr-lite" ,perl-net-cidr-lite)
 917       ("perl-socket6" ,perl-socket6)))
 918   (home-page
 919     "http://search.cpan.org/dist/Net-Patricia")
 920   (synopsis
 921     "Patricia Trie Perl module for fast IP address lookups")
 922   (description
 923     "Net::Patricia does IP address lookups quickly in Perl.")
 924   ;; The bindings are licensed under GPL2 or later.
 925   ;; libpatricia is licensed under 2-clause BSD.
 926   (license (list license:gpl2+ license:bsd-2))))
 927
 928 (define-public perl-net-cidr-lite
 929  (package
 930   (name "perl-net-cidr-lite")
 931   (version "0.21")
 932   (source
 933     (origin
 934       (method url-fetch)
 935       (uri (string-append
 936              "mirror://cpan/authors/id/D/DO/DOUGW/Net-CIDR-Lite-"
 937              version
 938              ".tar.gz"))
 939       (sha256
 940         (base32
 941           "14shj73zbqmfjbp0qz1fs9j4p2dpvz5hfkm4qfdjbydflbl2b8fg"))))
 942   (build-system perl-build-system)
 943   (home-page
 944     "http://search.cpan.org/dist/Net-CIDR-Lite")
 945   (synopsis
 946     "Perl extension for merging IPv4 or IPv6 CIDR addresses")
 947   (description "Net::CIDR::Lite merges IPv4 or IPv6 CIDR addresses.")
 948   (license license:gpl1+)))
 949
 950 ;; TODO: Use the geolite-mirror-simple.pl script from the example
 951 ;; directory to stay current with the databases. How?
 952 (define-public perl-geo-ip
 953  (package
 954   (name "perl-geo-ip")
 955   (version "1.51")
 956   (source
 957     (origin
 958       (method url-fetch)
 959       (uri (string-append
 960              "mirror://cpan/authors/id/M/MA/MAXMIND/Geo-IP-"
 961              version
 962              ".tar.gz"))
 963       (sha256
 964         (base32
 965           "1fka8fr7fw6sh3xa9glhs1zjg3s2gfkhi7n7da1l2m2wblqj0c0n"))))
 966   (build-system perl-build-system)
 967   (home-page "http://search.cpan.org/dist/Geo-IP")
 968   (synopsis
 969     "Look up location and network information by IP Address in Perl")
 970   (description "The Perl module 'Geo::IP'.  It looks up location and network
 971 information by IP Address.")
 972   (license license:perl-license)))
 973
 974 (define-public perl-io-socket-inet6
 975  (package
 976   (name "perl-io-socket-inet6")
 977   (version "2.72")
 978   (source
 979     (origin
 980       (method url-fetch)
 981       (uri (string-append
 982              "mirror://cpan/authors/id/S/SH/SHLOMIF/IO-Socket-INET6-"
 983              version
 984              ".tar.gz"))
 985       (sha256
 986         (base32
 987           "1fqypz6qa5rw2d5y2zq7f49frwra0aln13nhq5gi514j2zx21q45"))))
 988   (build-system perl-build-system)
 989   (native-inputs
 990     `(("perl-module-build" ,perl-module-build)
 991       ("perl-test-pod" ,perl-test-pod)
 992       ("perl-test-pod-coverage" ,perl-test-pod-coverage)))
 993   (inputs `(("perl-socket6" ,perl-socket6)))
 994   (arguments `(;; Need network socket API
 995                #:tests? #f))
 996   (home-page
 997     "http://search.cpan.org/dist/IO-Socket-INET6")
 998   (synopsis
 999     "Perl object interface for AF_INET/AF_INET6 domain sockets")
1000   (description "IO::Socket::INET6 is an interface for AF_INET/AF_INET6 domain
1001 sockets in Perl.")
1002   (license license:perl-license)))
1003
1004 (define-public libproxy
1005   (package
1006     (name "libproxy")
1007     (version "0.4.15")
1008     (source (origin
1009               (method url-fetch)
1010               (uri (string-append "https://github.com/libproxy/libproxy/"
1011                                   "releases/download/" version "/libproxy-"
1012                                   version ".tar.xz"))
1013               (sha256
1014                (base32
1015                 "0kvdrazlzwia876w988cmlypp253gwy6idlh8mjk958c29jb8kb5"))))
1016     (build-system cmake-build-system)
1017     (native-inputs
1018      `(("pkg-config" ,pkg-config)))
1019     (inputs
1020      `(("dbus" ,dbus)
1021        ("zlib" ,zlib)
1022        ("network-manager" ,network-manager)))
1023     (arguments
1024      `(#:phases
1025        (modify-phases %standard-phases
1026          (replace 'check
1027                   (lambda _
1028                     (zero? (system* "ctest" "-E" "url-test")))))))
1029     (synopsis "Library providing automatic proxy configuration management")
1030     (description "Libproxy handles the details of HTTP/HTTPS proxy
1031 configuration for applications across all scenarios.  Applications using
1032 libproxy only have to specify which proxy to use.")
1033     (home-page "https://libproxy.github.io/libproxy")
1034     (license license:lgpl2.1+)))
1035
1036 (define-public proxychains-ng
1037   (package
1038     (name "proxychains-ng")
1039     (version "4.12")
1040     (source (origin
1041               (method url-fetch)
1042               (uri (string-append "https://github.com/rofl0r/" name "/releases/"
1043                                   "download/v" version "/" name "-" version
1044                                   ".tar.xz"))
1045               (sha256
1046                (base32
1047                 "0kiss3ih6cwayzvqi5cx4kw4vh7r2kfxlbgk56v1f1066ncm8aj8"))))
1048     (build-system gnu-build-system)
1049     (arguments
1050      `(#:tests? #f ; there are no tests
1051        #:make-flags '("CC=gcc")
1052        #:phases
1053        (modify-phases %standard-phases
1054          (add-after 'unpack 'fix-configure-script
1055            (lambda _
1056              ;; The configure script is very intolerant to unknown arguments,
1057              ;; such as "CONFIG_SHELL".
1058              (substitute* "configure"
1059                (("\\*\\) break ;;" line)
1060                 (string-append "[A-Z]*) shift ;;\n"
1061                                line)))
1062              #t)))))
1063     (synopsis "Redirect any TCP connection through a proxy or proxy chain")
1064     (description "Proxychains-ng is a preloader which hooks calls to sockets
1065 in dynamically linked programs and redirects them through one or more SOCKS or
1066 HTTP proxies.")
1067     (home-page "https://github.com/rofl0r/proxychains-ng")
1068     (license license:gpl2+)))
1069
1070 (define-public enet
1071   (package
1072     (name "enet")
1073     (version "1.3.13")
1074     (source (origin
1075               (method url-fetch)
1076               (uri (string-append "http://enet.bespin.org/download/"
1077                                   name "-" version ".tar.gz"))
1078               (sha256
1079                (base32
1080                 "0p53mnmjbm56wizwraznynx13fcibcxiqny110dp6a5a3w174q73"))))
1081     (build-system gnu-build-system)
1082     (native-inputs
1083      `(("pkg-config" ,pkg-config)))
1084     (synopsis
1085      "Network communication layer on top of UDP")
1086     (description
1087      "ENet's purpose is to provide a relatively thin, simple and robust network
1088 communication layer on top of UDP.  The primary feature it provides is optional
1089 reliable, in-order delivery of packets.  ENet omits certain higher level
1090 networking features such as authentication, server discovery, encryption, or
1091 other similar tasks that are particularly application specific so that the
1092 library remains flexible, portable, and easily embeddable.")
1093     (home-page "http://enet.bespin.org")
1094     (license license:expat)))
1095
1096 (define-public sslh
1097   (package
1098     (name "sslh")
1099     (version "1.19c")
1100     (source (origin
1101               (method url-fetch)
1102               (uri (string-append "https://github.com/yrutschle/sslh/archive/v"
1103                                   version ".tar.gz"))
1104               (file-name (string-append name "-" version ".tar.gz"))
1105               (sha256
1106                (base32
1107                 "0pd8hifa9h0rm7vms3k6ic1k29xigrlv2idc5wgcafmb1v1243di"))))
1108     (build-system gnu-build-system)
1109     (native-inputs
1110      `(;; Test dependencies.
1111        ("lcov" ,lcov)
1112        ("perl" ,perl)
1113        ("perl-io-socket-inet6" ,perl-io-socket-inet6)
1114        ("perl-socket6" ,perl-socket6)
1115        ("psmisc" ,psmisc)
1116        ("valgrind" ,valgrind)))
1117     (inputs
1118      `(("libcap" ,libcap)
1119        ("libconfig" ,libconfig)
1120        ("pcre" ,pcre)
1121        ("tcp-wrappers" ,tcp-wrappers)))
1122     (arguments
1123      '(#:phases
1124        (modify-phases %standard-phases
1125          (delete 'configure)            ; no configure script
1126          (add-before 'check 'fix-tests
1127                      (lambda _
1128                        (substitute* "./t"
1129                          (("\"/tmp") "$ENV{\"TMPDIR\"} . \"")
1130                          ;; The Guix build environment lacks ‘ip6-localhost’.
1131                          (("ip6-localhost") "localhost"))
1132                        #t))
1133          ;; Many of these files are mentioned in the man page. Install them.
1134          (add-after 'install 'install-documentation
1135                     (lambda* (#:key outputs #:allow-other-keys)
1136                       (let* ((out (assoc-ref outputs "out"))
1137                              (doc (string-append out "/share/doc/sslh")))
1138                         (install-file "README.md" doc)
1139                         (for-each
1140                          (lambda (file)
1141                            (install-file file (string-append doc "/examples")))
1142                          (append (find-files "." "\\.cfg")
1143                                  (find-files "scripts"))))
1144                       #t)))
1145        #:make-flags (list "CC=gcc"
1146                           "USELIBCAP=1"
1147                           "USELIBWRAP=1"
1148                           (string-append "PREFIX=" (assoc-ref %outputs "out")))
1149        #:test-target "test"))
1150     (home-page "https://www.rutschle.net/tech/sslh/README.html")
1151     (synopsis "Applicative network protocol demultiplexer")
1152     (description
1153      "sslh is a network protocol demultiplexer.  It acts like a switchboard,
1154 accepting connections from clients on one port and forwarding them to different
1155 servers based on the contents of the first received data packet.  Detection of
1156 common protocols like HTTP(S), SSL, SSH, OpenVPN, tinc, and XMPP is already
1157 implemented, but any other protocol that matches a regular expression can be
1158 added.  sslh's name comes from its original application of serving both SSH and
1159 HTTPS on port 443, allowing SSH connections from inside corporate firewalls
1160 that block port 22.")
1161     (license (list license:bsd-2        ; tls.[ch]
1162                    license:gpl2+))))    ; everything else
1163
1164 (define-public iperf
1165   (package
1166     (name "iperf")
1167     (version "3.1.7")
1168     (source (origin
1169               (method url-fetch)
1170               (uri (string-append "http://downloads.es.net/pub/iperf"
1171                                   "/iperf-" version ".tar.gz"))
1172               (sha256
1173                 (base32
1174                  "0kvk8d0a3dcxc8fisyprbn01y8akxj4sx8ld5dh508p9dx077vx4"))))
1175     (build-system gnu-build-system)
1176     (synopsis "TCP, UDP and SCTP bandwidth measurement tool")
1177     (description
1178      "iPerf is a tool to measure achievable bandwidth on IP networks.  It
1179 supports tuning of various parameters related to timing, buffers and
1180 protocols (TCP, UDP, SCTP with IPv4 and IPv6).  For each test it reports
1181 the bandwidth, loss, and other parameters.")
1182     (home-page "http://software.es.net/iperf/")
1183     (license (list license:bsd-3             ; Main distribution.
1184                    license:ncsa              ; src/{units,iperf_locale,tcp_window_size}.c
1185                    license:expat             ; src/{cjson,net}.[ch]
1186                    license:public-domain)))) ; src/portable_endian.h
1187
1188 (define-public nethogs
1189   (package
1190     (name "nethogs")
1191     (version "0.8.5")
1192     (source (origin
1193               (method url-fetch)
1194               (uri (string-append "https://github.com/raboof/nethogs/archive/v"
1195                                   version ".tar.gz"))
1196               (sha256
1197                (base32
1198                 "1k4x8r7s4dgcb6n2rjn28h2yyij92mwm69phncl3597cdxr954va"))
1199               (file-name (string-append name "-" version ".tar.gz"))))
1200     (build-system gnu-build-system)
1201     (inputs
1202      `(("libpcap" ,libpcap)
1203        ("ncurses" ,ncurses)))
1204     (arguments
1205      `(#:make-flags `("CC=gcc"
1206                       ,(string-append "PREFIX=" %output))
1207        #:phases
1208        (modify-phases %standard-phases
1209          (delete 'configure)))) ; No ./configure script.
1210     (home-page "https://github.com/raboof/nethogs")
1211     (synopsis "Per-process bandwidth monitor")
1212     (description "NetHogs is a small 'net top' tool for Linux.  Instead of
1213 breaking the traffic down per protocol or per subnet, like most tools do, it
1214 groups bandwidth by process.
1215
1216 NetHogs does not rely on a special kernel module to be loaded.  If there's
1217 suddenly a lot of network traffic, you can fire up NetHogs and immediately see
1218 which PID is causing this.  This makes it easy to identify programs that have
1219 gone wild and are suddenly taking up your bandwidth.")
1220     (license license:gpl2+)))
1221
1222 (define-public nzbget
1223   (package
1224     (name "nzbget")
1225     (version "19.1")
1226     (source
1227      (origin
1228        (method url-fetch)
1229        (uri (string-append "https://github.com/nzbget/nzbget/archive/v"
1230                            version ".tar.gz"))
1231        (file-name (string-append name "-" version ".tar.gz"))
1232        (sha256
1233         (base32
1234          "0y713g7gd4n5chbhr8lv7k50rxkmzysrg13sscxam3s386mmlb1r"))
1235        (modules '((guix build utils)))
1236        (snippet
1237         ;; Reported upstream as <https://github.com/nzbget/nzbget/pull/414>.
1238         '(begin
1239            (substitute* "daemon/connect/TlsSocket.cpp"
1240              (("gnutls_certificate-verification_status_print")
1241               "gnutls_certificate_verification_status_print"))
1242            #t))))
1243     (arguments
1244      `(#:configure-flags
1245        (list
1246         (string-append "--with-libcurses-includes="
1247                        (assoc-ref %build-inputs "ncurses") "/include")
1248         (string-append "--with-libcurses-libraries="
1249                        (assoc-ref %build-inputs "ncurses") "/lib")
1250         (string-append "--with-tlslib=GnuTLS"))))
1251     (build-system gnu-build-system)
1252     (inputs `(("gnutls" ,gnutls)
1253               ("libxml2" ,libxml2)
1254               ("ncurses" ,ncurses)
1255               ("zlib" ,zlib)))
1256     (native-inputs `(("pkg-config" ,pkg-config)))
1257     (home-page "https://github.com/nzbget/nzbget")
1258     (synopsis "Usenet binary file downloader")
1259     (description
1260      "NZBGet is a binary newsgrabber, which downloads files from Usenet based
1261 on information given in @code{nzb} files.  NZBGet can be used in standalone
1262 and in server/client modes.  In standalone mode, you pass NZBGet @command{nzb}
1263 files as command-line parameters and it downloads them and exits.  NZBGet also
1264 contains a Web interface.  Its server can be controlled through remote
1265 procedure calls (RPCs).")
1266     (license license:gpl2+)))
1267
1268 (define-public openvswitch
1269   (package
1270     (name "openvswitch")
1271     (version "2.8.1")
1272     (source (origin
1273               (method url-fetch)
1274               (uri (string-append
1275                     "http://openvswitch.org/releases/openvswitch-"
1276                     version ".tar.gz"))
1277               (sha256
1278                (base32
1279                 "14rqqhfyv49irz8ag0qbv9jn8z0bn3qzxir3r074y16p4sg4674d"))))
1280     (build-system gnu-build-system)
1281     (arguments
1282      '(;; FIXME: many tests fail with:
1283        ;;    […]
1284        ;;    test -e $OVS_RUNDIR/ovs-vswitchd.pid
1285        ;;    ovs-appctl -t ovs-vswitchd exit
1286        ;;    hard failure
1287        #:tests? #f
1288        #:configure-flags
1289        '("--enable-shared"
1290          "--localstatedir=/var"
1291          "--with-dbdir=/var/lib/openvswitch")
1292        #:phases
1293        (modify-phases %standard-phases
1294          (replace 'install
1295            (lambda _
1296              (zero? (system* "make"
1297                              ;; Don't try to create directories under /var.
1298                              "RUNDIR=/tmp"
1299                              "PKIDIR=/tmp"
1300                              "LOGDIR=/tmp"
1301                              "DBDIR=/tmp"
1302                              "install")))))))
1303     (native-inputs
1304      `(("perl" ,perl)
1305        ("pkg-config" ,pkg-config)
1306        ("python" ,python-2)
1307        ;; for testing
1308        ("util-linux" ,util-linux)))
1309     (propagated-inputs
1310      `(("python-six" ,python2-six)))
1311     (inputs
1312      `(("libcap-ng" ,libcap-ng)
1313        ("openssl" ,openssl)))
1314     (synopsis "Virtual network switch")
1315     (home-page "http://www.openvswitch.org/")
1316     (description
1317      "Open vSwitch is a multilayer virtual switch.  It is designed to enable
1318 massive network automation through programmatic extension, while still
1319 supporting standard management interfaces and protocols (e.g. NetFlow, sFlow,
1320 IPFIX, RSPAN, CLI, LACP, 802.1ag).")
1321     (license                            ; see debian/copyright for detail
1322      (list license:lgpl2.1              ; xenserver and utilities/bugtool
1323            license:gpl2                 ; datapath
1324            license:bsd-2 license:bsd-3
1325            license:asl2.0))))           ; all other
1326
1327 (define-public python-ipy
1328   (package
1329     (name "python-ipy")
1330     (version "0.83")
1331     (source (origin
1332               (method url-fetch)
1333               (uri (pypi-uri "IPy" version))
1334               (sha256
1335                (base32
1336                 "1f6sdrxclifky4gvkf4gvyv5hx3fjh8vzspnfrqki6qm5d9mmnk1"))))
1337     (build-system python-build-system)
1338     (home-page "https://github.com/autocracy/python-ipy/")
1339     (synopsis "Python class and tools for handling IP addresses and networks")
1340     (description "The @code{IP} class allows a comfortable parsing and
1341 handling for most notations in use for IPv4 and IPv6 addresses and
1342 networks.")
1343     (license license:bsd-3)))
1344
1345 (define-public python2-ipy
1346   (package-with-python2 python-ipy))
1347
1348 (define-public speedtest-cli
1349   (package
1350     (name "speedtest-cli")
1351     (version "2.0.0")
1352     (source
1353      (origin
1354        (method url-fetch)
1355        (uri (string-append
1356              "https://github.com/sivel/speedtest-cli/archive/v" version ".tar.gz"))
1357        (file-name (string-append name "-" version ".tar.gz"))
1358        (sha256
1359         (base32
1360          "16kcpba7nmszz2h0fq7qvv6src20syck2wlknaacg69kk88aybbk"))))
1361     (build-system python-build-system)
1362     (home-page "https://github.com/sivel/speedtest-cli")
1363     (synopsis "Internet bandwidth tester")
1364     (description
1365      "Command line interface for testing internet bandwidth using
1366 speedtest.net.")
1367     (license license:asl2.0)))
1368
1369 (define-public tftp-hpa
1370   (package
1371     (name "tftp-hpa")
1372     (version "5.2")
1373     (source (origin
1374               (method url-fetch)
1375               (uri (string-append "mirror://kernel.org/software/"
1376                                   "network/tftp/tftp-hpa/tftp-hpa-" version
1377                                   ".tar.xz"))
1378               (sha256
1379                (base32
1380                 "12vidchglhyc20znq5wdsbhi9mqg90jnl7qr9qs8hbvaz4fkdvmg"))))
1381     (build-system gnu-build-system)
1382     (arguments `(#:tests? #f)) ; no test target
1383     (synopsis "HPA's tftp client")
1384     (description
1385      "This is a tftp client derived from OpenBSD tftp with some extra options
1386 added and bugs fixed.  The source includes readline support but it is not
1387 enabled due to license conflicts between the BSD advertising clause and the GPL.")
1388     (home-page "http://git.kernel.org/cgit/network/tftp/tftp-hpa.git/about/")
1389     ;; Some source files are distributed under a 3-clause BSD license, and
1390     ;; others under a 4-clause BSD license. Refer to the files in the source
1391     ;; distribution for clarification.
1392     (license (list license:bsd-3 license:bsd-4))))
1393
1394 (define-public pidentd
1395   (package
1396     (name "pidentd")
1397     (version "3.0.19")
1398     (source
1399      (origin
1400        (method url-fetch)
1401        (uri (string-append "https://github.com/ptrrkssn/pidentd/archive/"
1402                            "v" version ".tar.gz"))
1403        (file-name (string-append name "-" version ".tar.gz"))
1404        (sha256
1405         (base32
1406          "0y3kd1bkydqkpc1qdff24yswysamsqivvadjy0468qri5730izgc"))))
1407     (build-system gnu-build-system)
1408     (arguments
1409      `(#:tests? #f)) ; No tests are included
1410     (inputs
1411      `(("openssl" ,openssl))) ; For the DES library
1412     (home-page "https://www.lysator.liu.se/~pen/pidentd/")
1413     (synopsis "Small Ident Daemon")
1414     (description
1415      "@dfn{Pidentd} (Peter's Ident Daemon) is a identd, which implements a
1416 identification server.  Pidentd looks up specific TCP/IP connections and
1417 returns the user name and other information about the connection.")
1418     (license license:public-domain)))
1419
1420 (define-public spiped
1421   (package
1422     (name "spiped")
1423     (version "1.6.0")
1424     (source (origin
1425               (method url-fetch)
1426               (uri (string-append "https://www.tarsnap.com/spiped/spiped-"
1427                                   version ".tgz"))
1428               (sha256
1429                (base32
1430                 "1r51rdcl7nib1yv3yvgd5alwlkkwmr387brqavaklb0p2bwzixz6"))))
1431     (build-system gnu-build-system)
1432     (arguments
1433      '(#:test-target "test"
1434        #:make-flags (let* ((out (assoc-ref %outputs "out"))
1435                            (bindir (string-append out "/bin"))
1436                            (man1dir (string-append out "/share/man/man1")))
1437                       (list "CC=gcc" ; It tries to invoke `c99`.
1438                             (string-append "BINDIR=" bindir)
1439                             (string-append "MAN1DIR=" man1dir)))
1440        #:phases
1441        (modify-phases %standard-phases
1442          (add-after 'unpack 'patch-command-invocations
1443            (lambda _
1444              (substitute* '("Makefile"
1445                             "libcperciva/cpusupport/Build/cpusupport.sh"
1446                             "libcperciva/POSIX/posix-cflags.sh"
1447                             "libcperciva/POSIX/posix-l.sh")
1448                (("command -p") ""))
1449              #t))
1450          (delete 'configure) ; No ./configure script.
1451          (add-after 'install 'install-more-docs
1452            (lambda* (#:key outputs #:allow-other-keys)
1453              (let* ((out (assoc-ref %outputs "out"))
1454                     (misc (string-append out "/share/doc/spiped")))
1455                (install-file "DESIGN.md" misc)
1456                #t))))))
1457     (native-inputs
1458      `(("procps" ,procps))) ; `ps` is used by the test suite.
1459     (inputs
1460      `(("openssl" ,openssl)))
1461     (home-page "https://www.tarsnap.com/spiped.html")
1462     (synopsis "Create secure pipes between sockets")
1463     (description "Spiped (pronounced \"ess-pipe-dee\") is a utility for creating
1464 symmetrically encrypted and authenticated pipes between socket addresses, so
1465 that one may connect to one address (e.g., a UNIX socket on localhost) and
1466 transparently have a connection established to another address (e.g., a UNIX
1467 socket on a different system).  This is similar to 'ssh -L' functionality, but
1468 does not use SSH and requires a pre-shared symmetric key.")
1469     (license license:bsd-2)))
1470
1471 (define-public quagga
1472   (package
1473     (name "quagga")
1474     (version "1.2.4")
1475     (source (origin
1476               (method url-fetch)
1477               (uri (string-append "mirror://savannah/quagga/quagga-"
1478                                   version ".tar.gz"))
1479               (sha256
1480                (base32
1481                 "1lsksqxij5f1llqn86pkygrf5672kvrqn1kvxghi169hqf1c0r73"))
1482               (patches
1483                (search-patches "quagga-reproducible-build.patch"))))
1484     (build-system gnu-build-system)
1485     (native-inputs `(("pkg-config" ,pkg-config)
1486                      ("perl" ,perl)
1487                      ("dejagnu" ,dejagnu)))
1488     (inputs `(("readline" ,readline)
1489               ("c-ares" ,c-ares)))
1490     (synopsis "Routing Software Suite")
1491     (description "Quagga is a routing software suite, providing implementations
1492 of OSPFv2, OSPFv3, RIP v1 and v2, RIPng and BGP-4 for Unix platforms.
1493
1494 The Quagga architecture consists of a core daemon, @command{zebra}, which
1495 acts as an abstraction layer to the underlying Unix kernel and presents the
1496 Zserv API over a Unix or TCP stream to Quagga clients.  It is these Zserv
1497 clients which typically implement a routing protocol and communicate routing
1498 updates to the zebra daemon.")
1499     (home-page "https://www.nongnu.org/quagga/")
1500     (license license:gpl2+)))
1501
1502 (define-public thc-ipv6
1503   (let ((revision "0")
1504         (commit "4bb72573e0950ce6f8ca2800a10748477020029e"))
1505     (package
1506       (name "thc-ipv6")
1507       (version (git-version "3.4" revision commit))
1508       (source (origin
1509                 (method git-fetch)
1510                 (uri (git-reference
1511                        (url "https://github.com/vanhauser-thc/thc-ipv6.git")
1512                        (commit commit)))
1513                 (file-name (git-file-name name version))
1514                 (sha256
1515                  (base32
1516                   "1x5i6vbsddqc2yks7r1a2fw2fk16qxvd6hpzh1lykjfpkal8fdir"))))
1517       (build-system gnu-build-system)
1518       (arguments
1519        `(#:make-flags (list (string-append "PREFIX=" (assoc-ref %outputs "out")))
1520          #:tests? #f ; No test suite.
1521          #:phases
1522          (modify-phases %standard-phases
1523            (delete 'configure) ; No ./configure script.
1524            (add-before 'build 'patch-paths
1525              (lambda _
1526                (substitute* "Makefile"
1527                  (("/bin/echo") "echo"))
1528                #t))
1529            (add-after 'install 'install-more-docs
1530              (lambda* (#:key outputs #:allow-other-keys)
1531                (let* ((out (assoc-ref outputs "out"))
1532                       (doc (string-append out "/share/thc-ipv6/doc")))
1533                  (install-file "README" doc)
1534                  (install-file "HOWTO-INJECT" doc)
1535                  #t))))))
1536       ;; TODO Add libnetfilter-queue once packaged.
1537       (inputs
1538        `(("libpcap" ,libpcap)
1539          ("openssl" ,openssl)
1540          ("perl" ,perl)))
1541       (home-page "https://github.com/vanhauser-thc/thc-ipv6")
1542       (synopsis "IPv6 security research toolkit")
1543       (description "The THC IPv6 Toolkit provides command-line tools and a library
1544 for researching IPv6 implementations and deployments.  It requires Linux 2.6 or
1545 newer and only works on Ethernet network interfaces.")
1546       ;; AGPL 3 with exception for linking with OpenSSL. See the 'LICENSE' file in
1547       ;; the source distribution for more information.
1548       (license license:agpl3))))
1549
1550 (define-public bmon
1551   (package
1552     (name "bmon")
1553     (version "4.0")
1554     (source
1555      (origin
1556        (method url-fetch)
1557        (uri (string-append "https://github.com/tgraf/bmon/releases/download/v"
1558                            version "/bmon-" version ".tar.gz"))
1559        (sha256
1560         (base32
1561          "0ylzriv4pwh76344abzl1w219x188gshbycbna35gsyfp09c7z82"))))
1562     (build-system gnu-build-system)
1563     (inputs
1564      `(("libconfuse" ,libconfuse)
1565        ("libnl" ,libnl)
1566        ("ncurses" ,ncurses)))
1567     (native-inputs
1568      `(("pkg-config" ,pkg-config)))
1569     (synopsis "Bandwidth monitor")
1570     (description "bmon is a monitoring and debugging tool to capture
1571 networking-related statistics and prepare them visually in a human-friendly
1572 way.  It features various output methods including an interactive curses user
1573 interface and a programmable text output for scripting.")
1574     (home-page "https://github.com/tgraf/bmon")
1575     ;; README.md mentions both the 2-clause BSD and expat licenses, but all
1576     ;; the source files only have expat license headers. Upstream has been
1577     ;; contacted for clarification: https://github.com/tgraf/bmon/issues/59
1578     ;; Update the license field when upstream responds.
1579     (license (list license:bsd-2
1580                    license:expat))))
1581
1582 (define-public libnet
1583   (package
1584     (name "libnet")
1585     (version "1.1.6")
1586     (source (origin
1587               (method url-fetch)
1588               (uri (string-append "https://github.com/sam-github/libnet/"
1589                                   "archive/libnet-" version ".tar.gz"))
1590               (file-name (string-append name "-" version ".tar.gz"))
1591               (sha256
1592                (base32
1593                 "0l4gbzzvr199fzczzricjz7b825i7dlk6sgl5p5alnkcagmq0xys"))))
1594     (build-system gnu-build-system)
1595     (arguments
1596      `(#:phases
1597        (modify-phases %standard-phases
1598          (add-after 'unpack 'chdir
1599            (lambda _ (chdir "libnet") #t))
1600          (add-before 'build 'build-doc
1601            (lambda* (#:key make-flags #:allow-other-keys)
1602              (zero? (apply system* "make" "-C" "doc" "doc"
1603                            make-flags)))))))
1604     (native-inputs
1605      `(("autoconf" ,autoconf)
1606        ("automake" ,automake)
1607        ("libtool" ,libtool)
1608        ("doxygen" ,doxygen)))
1609     (home-page "https://sourceforge.net/projects/libnet-dev/")
1610     (synopsis "Framework for low-level network packet construction")
1611     (description
1612      "Libnet provides a fairly portable framework for network packet
1613 construction and injection.  It features portable packet creation interfaces
1614 at the IP layer and link layer, as well as a host of supplementary
1615 functionality.  Using libnet, quick and simple packet assembly applications
1616 can be whipped up with little effort.")
1617     (license license:bsd-2)))
1618
1619 (define-public mtr
1620   (package
1621     (name "mtr")
1622     (version "0.92")
1623     (source
1624      (origin
1625        (method url-fetch)
1626        (uri (string-append "ftp://ftp.bitwizard.nl/" name "/"
1627                            name "-" version ".tar.gz"))
1628        (sha256
1629         (base32 "10j3ds3p27jygys4x08kj8fi3zlsgiv72xsfazkah6plwawrv5zj"))))
1630     (build-system gnu-build-system)
1631     (inputs
1632      `(("libcap" ,libcap)
1633        ("ncurses" ,ncurses)))
1634     (native-inputs
1635      ;; The 0.92 release tarball still requires the ‘autoheader’ tool.
1636      `(("autoconf" ,autoconf)))
1637     (arguments
1638      `(#:tests? #f))                    ; tests require network access
1639     (home-page "https://www.bitwizard.nl/mtr/")
1640     (synopsis "Network diagnostic tool")
1641     (description
1642      "@dfn{mtr} (My TraceRoute) combines the functionality of the
1643 @command{traceroute} and @command{ping} programs in a single network diagnostic
1644 tool.  @command{mtr} can use several network protocols to detect intermediate
1645 routers (or @dfn{hops}) between the local host and a user-specified destination.
1646 It then continually measures the response time and packet loss at each hop, and
1647 displays the results in real time.")
1648     (license license:gpl2+)))
1649
1650 (define-public strongswan
1651   (package
1652     (name "strongswan")
1653     (version "5.6.2")
1654     (source
1655      (origin
1656        (method url-fetch)
1657        (uri (string-append "https://download.strongswan.org/strongswan-"
1658                            version ".tar.bz2"))
1659        (sha256
1660         (base32 "14ifqay54brw2b2hbmm517bxw8bs9631d7jm4g139igkxcq0m9p0"))))
1661     (build-system gnu-build-system)
1662     (arguments
1663      `(#:phases
1664        (modify-phases %standard-phases
1665          (add-before 'build 'patch-command-file-names
1666            (lambda* (#:key inputs #:allow-other-keys)
1667              (substitute* "src/libstrongswan/utils/process.c"
1668                (("/bin/sh")
1669                 (string-append (assoc-ref inputs "bash") "/bin/sh")))
1670
1671              (substitute* "src/libstrongswan/tests/suites/test_process.c"
1672                (("/bin/sh") (which "sh"))
1673                (("/bin/echo") (which "echo"))
1674                (("cat") (which "cat")))
1675              #t))
1676          (add-before 'check 'set-up-test-environment
1677            (lambda* (#:key inputs #:allow-other-keys)
1678              (setenv "TZDIR" (string-append (assoc-ref inputs "tzdata")
1679                                             "/share/zoneinfo"))
1680              #t)))
1681        #:configure-flags
1682        (list
1683         ;; Disable bsd-4 licensed plugins
1684         "--disable-des"
1685         "--disable-blowfish")))
1686     (inputs
1687      `(("curl" ,curl)
1688        ("gmp" ,gmp)
1689        ("libgcrypt" ,libgcrypt)
1690        ("openssl" ,openssl)))
1691     (native-inputs
1692      `(("coreutils" ,coreutils)
1693        ("tzdata" ,tzdata-for-tests)))
1694     (synopsis "IKEv1/v2 keying daemon")
1695     (description "StrongSwan is an IPsec implementation originally based upon
1696 the FreeS/WAN project.  It contains support for IKEv1, IKEv2, MOBIKE, IPv6,
1697 NAT-T and more.")
1698     (home-page "https://strongswan.org/")
1699     (license
1700      (list license:gpl2+
1701            ;; src/aikgen/*
1702            ;; src/libcharon/plugins/dnscert/*
1703            ;; src/libcharon/plugins/ext_auth/*
1704            ;; src/libcharon/plugins/vici/ruby/*
1705            ;; src/libcharon/plugins/xauth_pam/xauth_pam_listener.[ch]
1706            license:expat
1707            ;; src/inclue/sys/*
1708            license:bsd-3
1709            ;; src/libstrongswan/plugins/sha3/sha3_keccak.c
1710            license:public-domain
1711            ;; src/libstrongswan/plugins/pkcs11/pkcs11.h
1712            (license:non-copyleft
1713             "file://src/libstrongswan/plugins/pkcs11/pkcs11.h"
1714             "pkcs11 contains a unknown permissive license. View the specific
1715 file for more details.")
1716            ;; These files are not included in the
1717            ;; build, they are disabled through
1718            ;; options to ./configure
1719            ;;
1720            ;; src/libstrongswan/plugins/blowfish/bf_enc.c
1721            ;; src/libstrongswan/plugins/blowfish/bf_locl.h
1722            ;; src/libstrongswan/plugins/blowfish/bf_pi.h
1723            ;; src/libstrongswan/plugins/blowfish/bf_skey.c
1724            ;; src/libstrongswan/plugins/blowfish/blowfish_crypter.c
1725            ;; src/libstrongswan/plugins/des/des_crypter.c
1726            license:bsd-4))))
1727
1728 (define-public amule
1729   (package
1730     (name "amule")
1731     (version "2.3.2")
1732     (source (origin
1733               (method url-fetch)
1734               (uri (string-append
1735                     "https://github.com/amule-project/amule/archive/"
1736                     version ".tar.gz"))
1737               (file-name (string-append name "-" version ".tar.gz"))
1738               (sha256
1739                (base32
1740                 "1wvcj0n9xz03xz5c2xwp6dwfp7sqjhhwbki3m0lwikskpn9lkzk2"))
1741               ;; Patch for adopting crypto++ >= 6.0.
1742               (patches (search-patches "amule-crypto-6.patch"))))
1743     (build-system gnu-build-system)
1744     (arguments
1745      `(#:phases
1746        (modify-phases %standard-phases
1747          (add-after 'patch-source-shebangs 'autogen
1748            (lambda _
1749              (invoke "sh" "autogen.sh")
1750              #t)))
1751        #:configure-flags
1752        '("--disable-rpath"
1753          "--enable-wxcas"
1754          "--enable-cas"
1755          "--enable-alc"
1756          "--enable-alcc"
1757          "--enable-xas"
1758          "--enable-amulecmd"
1759          "--enable-geoip"
1760          "--enable-ccache"
1761          "--enable-nls"
1762          "--enable-optimize"
1763          "--enable-amule-gui"
1764          "--enable-amule-daemon"
1765          "--enable-webserver"
1766          "--with-denoise-level=0")))
1767     (native-inputs
1768      `(("autoconf" ,autoconf)
1769        ("automake" ,automake)
1770        ("gettext-minimal" ,gettext-minimal)
1771        ("perl" ,perl)))
1772     (inputs
1773      `(("zlib" ,zlib)
1774        ("crypto++" ,crypto++)
1775        ("libpng" ,libpng)
1776        ("wxwidgets-gtk2", wxwidgets-gtk2)))
1777     (home-page "http://amule.org/")
1778     (synopsis "Peer-to-peer client for the eD2K and Kademlia networks")
1779     (description
1780      "aMule is an eMule-like client for the eD2k and Kademlia peer-to-peer
1781 file sharing networks.  It includes a graphical user interface (GUI), a daemon
1782 allowing you to run a client with no graphical interface, and a Web GUI for
1783 remote access.  The @command{amulecmd} command allows you to control aMule
1784 remotely.")
1785     (license license:gpl2+)))
1786
1787 (define-public zyre
1788   (package
1789     (name "zyre")
1790     (version "2.0.0")
1791     (source (origin
1792               (method url-fetch)
1793               (uri
1794                (string-append "https://github.com/zeromq/zyre/releases/download/v"
1795                               version "/" name "-" version ".tar.gz"))
1796               (sha256
1797                (base32
1798                 "0qz2730bng1gs9xbqxhkw88qbsmszgmmrl2g9k6xrg6r3bqvsdc7"))))
1799     (build-system gnu-build-system)
1800     (inputs `(("zeromq" ,zeromq)
1801               ("czmq" ,czmq)
1802               ("libsodium" ,libsodium)))
1803     (synopsis "Framework for proximity-based peer-to-peer applications")
1804     (description "Zyre provides reliable group messaging over local area
1805 networks using zeromq.  It has these key characteristics:
1806
1807 @itemize
1808 @item Zyre needs no administration or configuration.
1809 @item Peers may join and leave the network at any time.
1810 @item Peers talk to each other without any central brokers or servers.
1811 @item Peers can talk directly to each other.
1812 @item Peers can join groups, and then talk to groups.
1813 @item Zyre is reliable, and loses no messages even when the network is heavily loaded.
1814 @item Zyre is fast and has low latency, requiring no consensus protocols.
1815 @item Zyre is designed for WiFi networks, yet also works well on Ethernet networks.
1816 @end itemize")
1817     (home-page "https://github.com/zeromq/zyre")
1818     (license license:mpl2.0)))
1819
1820 (define-public can-utils
1821   (package
1822     (name "can-utils")
1823     (version "2018.02.0")
1824     (source (origin
1825               (method git-fetch)
1826               (uri (git-reference
1827                     (url "https://github.com/linux-can/can-utils.git")
1828                     (commit (string-append "v" version))))
1829               (file-name (git-file-name name version))
1830               (sha256
1831                (base32
1832                 "0r0zkm67bdcmbfypjr7z041d4zp0xzb379dyl8cvhmflh12fd2jb"))))
1833     (build-system gnu-build-system)
1834     (arguments
1835      `(#:tests? #f                      ; No tests exist.
1836        #:make-flags (list "CC=gcc"
1837                           (string-append "PREFIX="
1838                                          (assoc-ref %outputs "out")))
1839        #:phases
1840        (modify-phases %standard-phases
1841          (delete 'configure))))
1842     (home-page "https://github.com/linux-can/can-utils")
1843     (synopsis "CAN utilities")
1844     (description "This package provides CAN utilities in the following areas:
1845
1846 @itemize
1847 @item Basic tools to display, record, generate and replay CAN traffic
1848 @item CAN access via IP sockets
1849 @item CAN in-kernel gateway configuration
1850 @item CAN bus measurement and testing
1851 @item ISO-TP (ISO15765-2:2016 - this means messages with a body larger than
1852 eight bytes) tools
1853 @item Log file converters
1854 @item Serial Line Discipline configuration for slcan driver
1855 @end itemize")
1856     ;; Either BSD-3 or GPL-2 can be used.
1857     (license (list license:bsd-3 license:gpl2))))