gnu/packages/networking.scm

   1 ;;; GNU Guix --- Functional package management for GNU
   2 ;;; Copyright © 2014, 2017, 2018 Ludovic Courtès <ludo@gnu.org>
   3 ;;; Copyright © 2015, 2016, 2017 Ricardo Wurmus <rekado@elephly.net>
   4 ;;; Copyright © 2015 Mark H Weaver <mhw@netris.org>
   5 ;;; Copyright © 2015, 2016, 2017 Stefan Reichör <stefan@xsteve.at>
   6 ;;; Copyright © 2016 Raimon Grau <raimonster@gmail.com>
   7 ;;; Copyright © 2016, 2017, 2018 Tobias Geerinckx-Rice <me@tobias.gr>
   8 ;;; Copyright © 2016 John Darrington <jmd@gnu.org>
   9 ;;; Copyright © 2016, 2017, 2018 Nicolas Goaziou <mail@nicolasgoaziou.fr>
  10 ;;; Copyright © 2016 Eric Bavier <bavier@member.fsf.org>
  11 ;;; Copyright © 2016, 2017 ng0 <ng0@infotropique.org>
  12 ;;; Copyright © 2016, 2017 Arun Isaac <arunisaac@systemreboot.net>
  13 ;;; Copyright © 2016 Benz Schenk <benz.schenk@uzh.ch>
  14 ;;; Copyright © 2016, 2017 Pjotr Prins <pjotr.guix@thebird.nl>
  15 ;;; Copyright © 2017 Mathieu Othacehe <m.othacehe@gmail.com>
  16 ;;; Copyright © 2017 Leo Famulari <leo@famulari.name>
  17 ;;; Copyright © 2017, 2018 Efraim Flashner <efraim@flashner.co.il>
  18 ;;; Copyright © 2017 Rutger Helling <rhelling@mykolab.com>
  19 ;;; Copyright © 2017 Gábor Boskovits <boskovits@gmail.com>
  20 ;;; Copyright © 2017 Thomas Danckaert <post@thomasdanckaert.be>
  21 ;;; Copyright © 2018 Adam Van Ymeren <adam@vany.ca>
  22 ;;;
  23 ;;; This file is part of GNU Guix.
  24 ;;;
  25 ;;; GNU Guix is free software; you can redistribute it and/or modify it
  26 ;;; under the terms of the GNU General Public License as published by
  27 ;;; the Free Software Foundation; either version 3 of the License, or (at
  28 ;;; your option) any later version.
  29 ;;;
  30 ;;; GNU Guix is distributed in the hope that it will be useful, but
  31 ;;; WITHOUT ANY WARRANTY; without even the implied warranty of
  32 ;;; MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
  33 ;;; GNU General Public License for more details.
  34 ;;;
  35 ;;; You should have received a copy of the GNU General Public License
  36 ;;; along with GNU Guix.  If not, see <http://www.gnu.org/licenses/>.
  37
  38 (define-module (gnu packages networking)
  39   #:use-module ((guix licenses) #:prefix license:)
  40   #:use-module (guix packages)
  41   #:use-module (guix download)
  42   #:use-module (guix git-download)
  43   #:use-module (guix build-system cmake)
  44   #:use-module (guix build-system glib-or-gtk)
  45   #:use-module (guix build-system gnu)
  46   #:use-module (guix build-system perl)
  47   #:use-module (guix build-system python)
  48   #:use-module (gnu packages)
  49   #:use-module (gnu packages admin)
  50   #:use-module (gnu packages adns)
  51   #:use-module (gnu packages algebra)
  52   #:use-module (gnu packages audio)
  53   #:use-module (gnu packages autotools)
  54   #:use-module (gnu packages base)
  55   #:use-module (gnu packages bison)
  56   #:use-module (gnu packages check)
  57   #:use-module (gnu packages code)
  58   #:use-module (gnu packages compression)
  59   #:use-module (gnu packages curl)
  60   #:use-module (gnu packages databases)
  61   #:use-module (gnu packages dejagnu)
  62   #:use-module (gnu packages documentation)
  63   #:use-module (gnu packages flex)
  64   #:use-module (gnu packages gettext)
  65   #:use-module (gnu packages glib)
  66   #:use-module (gnu packages gnome)
  67   #:use-module (gnu packages gnupg)
  68   #:use-module (gnu packages gtk)
  69   #:use-module (gnu packages libidn)
  70   #:use-module (gnu packages linux)
  71   #:use-module (gnu packages lua)
  72   #:use-module (gnu packages multiprecision)
  73   #:use-module (gnu packages kerberos)
  74   #:use-module (gnu packages ncurses)
  75   #:use-module (gnu packages pcre)
  76   #:use-module (gnu packages perl)
  77   #:use-module (gnu packages perl-check)
  78   #:use-module (gnu packages pkg-config)
  79   #:use-module (gnu packages python)
  80   #:use-module (gnu packages qt)
  81   #:use-module (gnu packages readline)
  82   #:use-module (gnu packages ssh)
  83   #:use-module (gnu packages textutils)
  84   #:use-module (gnu packages tls)
  85   #:use-module (gnu packages valgrind)
  86   #:use-module (gnu packages wm)
  87   #:use-module (gnu packages xml)
  88   #:use-module (ice-9 match))
  89
  90 ;; The gnu.org ‘home’ for this GNU project is a directory listing with 1.6.0 as
  91 ;; the latest version.  The author's git repository, mentioned in the 1.6.0
  92 ;; README and otherwise legit-looking, contains a proper 1.7.0 release tarball
  93 ;; with many OUI updates.  Use it, even though it's also several years old now.
  94 (define-public macchanger
  95   (package
  96     (name "macchanger")
  97     (version "1.7.0")
  98     (source
  99      (origin
 100        (method url-fetch)
 101        (uri (string-append "https://github.com/alobbs/macchanger/"
 102                            "releases/download/" version "/"
 103                            name "-" version ".tar.gz"))
 104        (sha256
 105         (base32 "1gs5m0jxyprdp00w2qkbnaqm3ilkjz0q1gqdg4nzdm8g4xy73qns"))))
 106     (build-system gnu-build-system)
 107     (home-page "https://www.gnu.org/software/macchanger/")
 108     (synopsis "Viewing and manipulating MAC addresses of network interfaces")
 109     (description "GNU MAC Changer is a utility for viewing and changing MAC
 110 addresses of networking devices.  New addresses may be set explicitly or
 111 randomly.  They can include MAC addresses of the same or other hardware vendors
 112 or, more generally, MAC addresses of the same category of hardware.")
 113     (license license:gpl2+)))
 114
 115 (define-public miredo
 116   (package
 117     (name "miredo")
 118     (version "1.2.6")
 119     (source (origin
 120               (method url-fetch)
 121               (uri (string-append "http://www.remlab.net/files/miredo/miredo-"
 122                                   version ".tar.xz"))
 123               (sha256
 124                (base32
 125                 "0j9ilig570snbmj48230hf7ms8kvcwi2wblycqrmhh85lksd49ps"))))
 126     (build-system gnu-build-system)
 127     (arguments
 128      '(#:phases
 129        (modify-phases %standard-phases
 130          ;; The checkconf test in src/ requires network access.
 131          (add-before
 132           'check 'disable-checkconf-test
 133           (lambda _
 134             (substitute* "src/Makefile"
 135               (("^TESTS = .*") "TESTS = \n")))))))
 136     (home-page "http://www.remlab.net/miredo/")
 137     (synopsis "Teredo IPv6 tunneling software")
 138     (description
 139      "Miredo is an implementation (client, relay, server) of the Teredo
 140 specification, which provides IPv6 Internet connectivity to IPv6 enabled hosts
 141 residing in IPv4-only networks, even when they are behind a NAT device.")
 142     (license license:gpl2+)))
 143
 144 (define-public socat
 145   (package
 146     (name "socat")
 147     (version "1.7.3.2")
 148     (source (origin
 149               (method url-fetch)
 150               (uri (string-append
 151                     "http://www.dest-unreach.org/socat/download/socat-"
 152                     version ".tar.bz2"))
 153               (sha256
 154                (base32
 155                 "0lcj6zpra33xhgvhmz9l3cqz10v8ybafb8dd1yqkwf1rhy01ymp3"))))
 156     (build-system gnu-build-system)
 157     (arguments '(#:tests? #f))                    ;no 'check' phase
 158     (inputs `(("openssl" ,openssl)))
 159     (home-page "http://www.dest-unreach.org/socat/")
 160     (synopsis
 161      "Open bidirectional communication channels from the command line")
 162     (description
 163      "socat is a relay for bidirectional data transfer between two independent
 164 data channels---files, pipes, devices, sockets, etc.  It can create
 165 \"listening\" sockets, named pipes, and pseudo terminals.
 166
 167 socat can be used, for instance, as TCP port forwarder, as a shell interface
 168 to UNIX sockets, IPv6 relay, for redirecting TCP oriented programs to a serial
 169 line, to logically connect serial lines on different computers, or to
 170 establish a relatively secure environment (su and chroot) for running client
 171 or server shell scripts with network connections.")
 172     (license license:gpl2)))
 173
 174 (define-public tcp-wrappers
 175   (package
 176     (name "tcp-wrappers")
 177     (version "7.6")
 178     (source (origin
 179               (method url-fetch)
 180               (uri (string-append
 181                     "ftp://ftp.porcupine.org/pub/security/tcp_wrappers_"
 182                     version ".tar.gz"))
 183               (sha256
 184                (base32
 185                 "0p9ilj4v96q32klavx0phw9va21fjp8vpk11nbh6v2ppxnnxfhwm"))))
 186     (build-system gnu-build-system)
 187     (arguments
 188      `(#:phases
 189        (modify-phases %standard-phases
 190          (delete 'configure)  ; there is no configure script
 191          (delete 'check)      ; there are no tests
 192          (replace 'build
 193            (lambda _
 194              (chmod "." #o755)
 195              ;; Upstream doesn't generate a shared library.  So we have to do it.
 196              (setenv "CC" "gcc -fno-builtin -fPIC")
 197              (substitute* "Makefile"
 198                (("^(all[^\n]*)" line) (string-append line " libwrap.so\n
 199 libwrap.so: $(LIB_OBJ)\n
 200 \tgcc -shared $^ -o $@\n")))
 201              ;; Deal with some gcc breakage.
 202              (substitute* "percent_m.c"
 203                (("extern char .sys_errlist.*;") ""))
 204              (substitute* "scaffold.c"
 205                (("extern char .malloc.*;") ""))
 206              ;; This, believe it or not, is the recommended way to build!
 207              (zero? (system* "make" "REAL_DAEMON_DIR=/etc" "linux"))))
 208          ;; There is no make install stage, so we have to do it ourselves.
 209          (replace 'install
 210            (lambda _
 211              (let ((out (assoc-ref %outputs "out"))
 212                    (man-pages `("hosts_access.3"
 213                                 "hosts_access.5"
 214                                 "hosts_options.5"
 215                                 "tcpd.8"
 216                                 "tcpdchk.8"
 217                                 "tcpdmatch.8"))
 218                    (libs  `("libwrap.a"
 219                             "libwrap.so"))
 220                    (headers `("tcpd.h"))
 221                    (bins `("safe_finger"
 222                            "tcpd"
 223                            "tcpdchk"
 224                            "tcpdmatch"
 225                            "try-from")))
 226                (for-each
 227                 (lambda (x)
 228                   (install-file x (string-append out "/include")))
 229                 headers)
 230                (for-each
 231                 (lambda (x)
 232                   (install-file x (string-append out "/share/man/man"
 233                                                  (string-take-right x 1))))
 234                 man-pages)
 235                (for-each
 236                 (lambda (x)
 237                   (install-file x (string-append out "/lib/")))
 238                 libs)
 239                (for-each
 240                 (lambda (x)
 241                   (install-file x (string-append out "/bin/")))
 242                 bins)))))))
 243     (home-page "http://www.porcupine.org")
 244     (synopsis  "Monitor and filter incoming requests for network services")
 245     (description "With this package you can monitor and filter incoming requests for
 246 network services.  It includes a library which may be used by daemons to
 247 transparently check connection attempts against an access control list.")
 248     (license (license:non-copyleft "file://DISCLAIMER"
 249                                    "See the file DISCLAIMER in the distribution."))))
 250
 251
 252 (define-public zeromq
 253   (package
 254     (name "zeromq")
 255     (version "4.0.7")
 256     (source (origin
 257               (method url-fetch)
 258               (uri (string-append "http://download.zeromq.org/zeromq-"
 259                                   version ".tar.gz"))
 260               (sha256
 261                (base32
 262                 "00vvwhgcdr1lva2pavicvy92iad0hj8cf71n702hv6blw1kjj2z0"))))
 263     (build-system gnu-build-system)
 264     (home-page "http://zeromq.org")
 265     (synopsis "Library for message-based applications")
 266     (description
 267      "The 0MQ lightweight messaging kernel is a library which extends the
 268 standard socket interfaces with features traditionally provided by specialized
 269 messaging middle-ware products.  0MQ sockets provide an abstraction of
 270 asynchronous message queues, multiple messaging patterns, message
 271 filtering (subscriptions), seamless access to multiple transport protocols and
 272 more.")
 273     (license license:lgpl3+)))
 274
 275 (define-public czmq
 276   (package
 277     (name "czmq")
 278     (version "4.1.0")
 279     (source (origin
 280               (method url-fetch)
 281               (uri (string-append
 282                     "https://github.com/zeromq/" name
 283                     "/releases/download/v" version
 284                     "/" name "-" version ".tar.gz"))
 285               (sha256
 286                (base32
 287                 "04gwf61rijwm6b2wblwv8gky1gdrbfmg1d19hf72kdc691ds7vrv"))))
 288     (build-system gnu-build-system)
 289     (arguments
 290      '(;; TODO Tests fail for some reason:
 291        ;;  * zauth: OK
 292        ;;  * zbeacon: OK (skipping test, no UDP broadcasting)
 293        ;; E: (czmq_selftest) 18-02-24 16:25:52 No broadcast interface found, (ZSYS_INTERFACE=lo)
 294        ;; make[2]: *** [Makefile:2245: check-local] Segmentation fault
 295        ;; make[2]: Leaving directory '/tmp/guix-build-czmq-4.1.0.drv-0/czmq-4.1.0'
 296        ;; make[1]: *** [Makefile:2032: check-am] Error 2
 297        ;; make[1]: Leaving directory '/tmp/guix-build-czmq-4.1.0.drv-0/czmq-4.1.0'
 298        ;; make: *** [Makefile:1588: check-recursive] Error 1
 299        ;; phase `check' failed after 19.4 seconds
 300        #:tests? #f
 301        #:configure-flags '("--enable-drafts")))
 302     (inputs
 303      `(("zeromq" ,zeromq)))
 304     (home-page "http://zeromq.org")
 305     (synopsis "High-level C bindings for ØMQ")
 306     (description
 307      "czmq provides bindings for the ØMQ core API that hides the differences
 308 between different versions of ØMQ.")
 309     (license license:mpl2.0)))
 310
 311 (define-public librdkafka
 312   (package
 313     (name "librdkafka")
 314     (version "0.9.1")
 315     (source (origin
 316               (method url-fetch)
 317               (uri (string-append
 318                     "https://github.com/edenhill/librdkafka/archive/"
 319                     version ".tar.gz"))
 320               (file-name (string-append name "-" version ".tar.gz"))
 321               (sha256
 322                (base32
 323                 "10ldx7g7ymmg17snzx78vy4n8ma1rjx0agzi34g15j2fk867xmas"))))
 324     (build-system gnu-build-system)
 325     (arguments
 326      '(#:phases
 327        (modify-phases %standard-phases
 328          (replace 'configure
 329            ;; its custom configure script doesn't understand 'CONFIG_SHELL'.
 330            (lambda* (#:key outputs #:allow-other-keys)
 331              (let ((out (assoc-ref outputs "out")))
 332                ;; librdkafka++.so lacks RUNPATH for librdkafka.so
 333                (setenv "LDFLAGS"
 334                        (string-append "-Wl,-rpath=" out "/lib"))
 335                (zero? (system* "./configure"
 336                                (string-append "--prefix=" out)))))))))
 337     (native-inputs
 338      `(("python" ,python-wrapper)))
 339     (propagated-inputs
 340      `(("zlib" ,zlib))) ; in the Libs.private field of rdkafka.pc
 341     (home-page "https://github.com/edenhill/librdkafka")
 342     (synopsis "Apache Kafka C/C++ client library")
 343     (description
 344      "librdkafka is a C library implementation of the Apache Kafka protocol,
 345 containing both Producer and Consumer support.")
 346     (license license:bsd-2)))
 347
 348 (define-public libndp
 349   (package
 350     (name "libndp")
 351     (version "1.6")
 352     (source (origin
 353               (method url-fetch)
 354               (uri (string-append "http://libndp.org/files/"
 355                                   name "-" version ".tar.gz"))
 356               (sha256
 357                (base32
 358                 "03mczwrxqbp54msafxzzyhaazkvjdwm2kipjkrb5xg8kw22glz8c"))))
 359     (build-system gnu-build-system)
 360     (home-page "http://libndp.org/")
 361     (synopsis "Library for Neighbor Discovery Protocol")
 362     (description
 363      "libndp contains a library which provides a wrapper for IPv6 Neighbor
 364 Discovery Protocol.  It also provides a tool named ndptool for sending and
 365 receiving NDP messages.")
 366     (license license:lgpl2.1+)))
 367
 368 (define-public ethtool
 369   (package
 370     (name "ethtool")
 371     (version "4.15")
 372     (source (origin
 373               (method url-fetch)
 374               (uri (string-append "mirror://kernel.org/software/network/"
 375                                   name "/" name "-" version ".tar.xz"))
 376               (sha256
 377                (base32
 378                 "06pr3s7wg2pbvfbf7js61bgh3caff4qf50nqqk3cgz9z90rgvxvi"))))
 379     (build-system gnu-build-system)
 380     (home-page "https://www.kernel.org/pub/software/network/ethtool/")
 381     (synopsis "Display or change Ethernet device settings")
 382     (description
 383      "ethtool can be used to query and change settings such as speed,
 384 auto-negotiation and checksum offload on many network devices, especially
 385 Ethernet devices.")
 386     (license license:gpl2)))
 387
 388 (define-public ifstatus
 389   (package
 390     (name "ifstatus")
 391     (version "1.1.0")
 392     (source (origin
 393               (method url-fetch)
 394               (uri (string-append "mirror://sourceforge/ifstatus/ifstatus/"
 395                                   "ifstatus%20v" version "/ifstatus-v"
 396                                   version ".tar.gz"))
 397               (sha256
 398                (base32
 399                 "045cbsq9ps32j24v8y5hpyqxnqn9mpaf3mgvirlhgpqyb9jsia0c"))
 400               (modules '((guix build utils)))
 401               (snippet
 402                '(substitute* "Main.h"
 403                   (("#include <stdio.h>")
 404                    "#include <stdio.h>\n#include <stdlib.h>")))))
 405     (build-system gnu-build-system)
 406     (arguments
 407      '(#:tests? #f                                ; no "check" target
 408        #:phases
 409        (modify-phases %standard-phases
 410          (delete 'configure)             ; no configure script
 411          (replace 'install
 412                   (lambda* (#:key outputs #:allow-other-keys)
 413                     (let* ((out (assoc-ref outputs "out"))
 414                            (bin (string-append out "/bin")))
 415                       (mkdir-p bin)
 416                       (copy-file "ifstatus"
 417                                  (string-append bin "/ifstatus"))))))))
 418     (inputs `(("ncurses" ,ncurses)))
 419     (home-page "http://ifstatus.sourceforge.net/graphic/index.html")
 420     (synopsis "Text based network interface status monitor")
 421     (description
 422      "IFStatus is a simple, easy-to-use program for displaying commonly
 423 needed/wanted real-time traffic statistics of multiple network
 424 interfaces, with a simple and efficient view on the command line.  It is
 425 intended as a substitute for the PPPStatus and EthStatus projects.")
 426     (license license:gpl2+)))
 427
 428 (define-public nload
 429   (package
 430     (name "nload")
 431     (version "0.7.4")
 432     (source (origin
 433               (method url-fetch)
 434               (uri (string-append "mirror://sourceforge/nload/nload/" version
 435                                   "/nload-" version ".tar.gz"))
 436               (sha256
 437                (base32
 438                 "1rb9skch2kgqzigf19x8bzk211jdfjfdkrcvaqyj89jy2pkm3h61"))))
 439     (build-system gnu-build-system)
 440     (inputs `(("ncurses" ,ncurses)))
 441     (home-page "http://www.roland-riegel.de/nload/")
 442     (synopsis "Realtime console network usage monitor")
 443     (description
 444      "Nload is a console application which monitors network traffic and
 445 bandwidth usage in real time.  It visualizes the in- and outgoing traffic using
 446 two graphs, and provides additional info like total amount of transferred data
 447 and min/max network usage.")
 448     (license license:gpl2+)))
 449
 450 (define-public iodine
 451   (package
 452     (name "iodine")
 453     (version "0.7.0")
 454     (source (origin
 455               (method url-fetch)
 456               (uri (string-append "http://code.kryo.se/" name "/"
 457                                   name "-" version ".tar.gz"))
 458               (sha256
 459                (base32
 460                 "0gh17kcxxi37k65zm4gqsvbk3aw7yphcs3c02pn1c4s2y6n40axd"))))
 461     (build-system gnu-build-system)
 462     (arguments
 463      '(#:phases
 464        (modify-phases %standard-phases
 465          (delete 'configure)
 466          (add-before 'build 'fix-ifconfig-path
 467            ;; This package works only with the net-tools version of ifconfig.
 468            (lambda* (#:key inputs #:allow-other-keys)
 469              (substitute* "src/tun.c"
 470                (("PATH=[^ ]* ")
 471                 (string-append (assoc-ref inputs "net-tools") "/bin/")))))
 472          (add-before 'check 'delete-failing-tests
 473            ;; Avoid https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=802105.
 474            (lambda _
 475              (substitute* "tests/common.c"
 476                (("tcase_add_test\\(tc, \
 477 test_parse_format_ipv(4(|_listen_all|_mapped_ipv6)|6)\\);")
 478                 "")))))
 479        #:make-flags (list "CC=gcc"
 480                           (string-append "prefix=" (assoc-ref %outputs "out")))
 481        #:test-target "test"))
 482     (inputs `(("net-tools" ,net-tools)
 483               ("zlib" ,zlib)))
 484     (native-inputs `(("check" ,check)
 485                      ("pkg-config" ,pkg-config)))
 486     (home-page "http://code.kryo.se/iodine/")
 487     (synopsis "Tunnel IPv4 data through a DNS server")
 488     (description "Iodine tunnels IPv4 data through a DNS server.  This
 489 can be useful in different situations where internet access is firewalled, but
 490 DNS queries are allowed.  The bandwidth is asymmetrical, with limited upstream
 491 and up to 1 Mbit/s downstream.")
 492     ;; src/md5.[ch] is released under the zlib license
 493     (license (list license:isc license:zlib))))
 494
 495 (define-public whois
 496   (package
 497     (name "whois")
 498     (version "5.3.0")
 499     (source
 500      (origin
 501        (method url-fetch)
 502        (uri (string-append "mirror://debian/pool/main/w/whois/"
 503                            name "_" version ".tar.xz"))
 504        (sha256
 505         (base32
 506          "08sp2gzv09rar1a5mnfmbc24pqvhpqqmz2hnmv436n7v7d09qy2d"))))
 507     (build-system gnu-build-system)
 508     (arguments
 509      `(#:tests? #f                      ; no test suite
 510        #:make-flags (list "CC=gcc"
 511                           (string-append "prefix=" (assoc-ref %outputs "out")))
 512        #:phases
 513        (modify-phases %standard-phases
 514          (delete 'configure)            ; no configure script
 515          (add-before 'build 'setenv
 516            (lambda _
 517              (setenv "HAVE_ICONV" "1")
 518              #t)))))
 519     (inputs
 520      ;; TODO: Switch to libidn2 when >= 2.0.3 is ungrafted in master.
 521      `(("libidn" ,libidn)))
 522     (native-inputs
 523      `(("gettext" ,gettext-minimal)
 524        ("perl" ,perl)
 525        ("pkg-config" ,pkg-config)))
 526     (synopsis "Intelligent client for the WHOIS directory service")
 527     (description
 528       "whois searches for an object in a @dfn{WHOIS} (RFC 3912) database.
 529 It is commonly used to look up the registered users or assignees of an Internet
 530 resource, such as a domain name, an IP address block, or an autonomous system.
 531 It can automatically select the appropriate server for most queries.
 532
 533 For historical reasons, this package also includes @command{mkpasswd}, which
 534 encrypts passwords using @code{crypt(3)} and is unrelated to the Expect command
 535 of the same name.")
 536     (home-page "https://github.com/rfc1036/whois")
 537     (license license:gpl2+)))
 538
 539 (define-public wireshark
 540   (package
 541     (name "wireshark")
 542     (version "2.4.5")
 543     (source
 544      (origin
 545        (method url-fetch)
 546        (uri (string-append "https://www.wireshark.org/download/src/wireshark-"
 547                            version ".tar.xz"))
 548        (sha256
 549         (base32
 550          "1mvgy67rvnwj2kbc43s4il81jvz5ai0bx2j3j2js7x50zclyrcmk"))))
 551     (build-system gnu-build-system)
 552     (inputs `(("c-ares" ,c-ares)
 553               ("glib" ,glib)
 554               ("gnutls" ,gnutls)
 555               ("libcap" ,libcap)
 556               ("libgcrypt" ,libgcrypt)
 557               ("libnl" ,libnl)
 558               ("libpcap" ,libpcap)
 559               ("libssh" ,libssh)
 560               ("libxml2" ,libxml2)
 561               ("lua" ,lua-5.2)          ;Lua 5.3 unsupported
 562               ("krb5" ,mit-krb5)
 563               ("openssl" ,openssl)
 564               ("portaudio" ,portaudio)
 565               ("qtbase" ,qtbase)
 566               ("sbc" ,sbc)
 567               ("zlib" ,zlib)))
 568     (native-inputs `(("perl" ,perl)
 569                      ("pkg-config" ,pkg-config)
 570                      ("python" ,python-wrapper)
 571                      ("qttools" ,qttools)))
 572     (arguments
 573      `(#:configure-flags
 574        (list (string-append "--with-c-ares=" (assoc-ref %build-inputs "c-ares"))
 575              (string-append "--with-krb5=" (assoc-ref %build-inputs "krb5"))
 576              (string-append "--with-libcap=" (assoc-ref %build-inputs "libcap"))
 577              (string-append "--with-libssh=" (assoc-ref %build-inputs "libssh"))
 578              (string-append "--with-lua=" (assoc-ref %build-inputs "lua"))
 579              (string-append "--with-pcap=" (assoc-ref %build-inputs "libpcap"))
 580              (string-append "--with-portaudio="
 581                             (assoc-ref %build-inputs "portaudio"))
 582              (string-append "--with-sbc=" (assoc-ref %build-inputs "sbc"))
 583              (string-append "--with-ssl=" (assoc-ref %build-inputs "openssl"))
 584              (string-append "--with-zlib=" (assoc-ref %build-inputs "zlib")))))
 585     (synopsis "Network traffic analyzer")
 586     (description "Wireshark is a network protocol analyzer, or @dfn{packet
 587 sniffer}, that lets you capture and interactively browse the contents of
 588 network frames.")
 589     (home-page "https://www.wireshark.org/")
 590     (license license:gpl2+)))
 591
 592 (define-public fping
 593   (package
 594     (name "fping")
 595     (version "4.0")
 596     (source
 597      (origin
 598        (method url-fetch)
 599        (uri (string-append "https://fping.org/dist/fping-"
 600                            version ".tar.gz"))
 601        (sha256
 602         (base32
 603          "1kp81wchi79l8z8rrj602fpjrd8bi84y3i7fsaclzlwap5943sv7"))))
 604     (build-system gnu-build-system)
 605     (home-page "http://fping.org/")
 606     (synopsis "Send ICMP ECHO_REQUEST packets to network hosts")
 607     (description
 608      "fping is a ping like program which uses the Internet Control Message
 609 Protocol (ICMP) echo request to determine if a target host is responding.
 610 fping differs from ping in that you can specify any number of targets on the
 611 command line, or specify a file containing the lists of targets to ping.
 612 Instead of sending to one target until it times out or replies, fping will
 613 send out a ping packet and move on to the next target in a round-robin
 614 fashion.")
 615     (license license:expat)))
 616
 617 (define-public httping
 618   (package
 619     (name "httping")
 620     (version "2.5")
 621     (source
 622      (origin
 623        (method url-fetch)
 624        (uri (string-append "https://www.vanheusden.com/httping/httping-"
 625                            version ".tgz"))
 626        (sha256
 627         (base32
 628          "1y7sbgkhgadmd93x1zafqc4yp26ssiv16ni5bbi9vmvvdl55m29y"))))
 629     (build-system gnu-build-system)
 630     (native-inputs
 631      `(("gettext" ,gettext-minimal)))
 632     (inputs
 633      `(("fftw" ,fftw)
 634        ("ncurses" ,ncurses)
 635        ("openssl" ,openssl)))
 636     (arguments
 637      `(#:make-flags (list "CC=gcc"
 638                           (string-append "DESTDIR=" (assoc-ref %outputs "out"))
 639                           "PREFIX=")
 640        #:tests? #f)) ; no tests
 641     (home-page "https://www.vanheusden.com/httping/")
 642     (synopsis "Web server latency and throughput monitor")
 643     (description
 644      "httping measures how long it takes to connect to a web server, send an
 645 HTTP(S) request, and receive the reply headers.  It is somewhat similar to
 646 @command{ping}, but can be used even in cases where ICMP traffic is blocked
 647 by firewalls or when you want to monitor the response time of the actual web
 648 application stack itself.")
 649     (license license:gpl2)))        ; with permission to link with OpenSSL
 650
 651 (define-public httpstat
 652   (package
 653     (name "httpstat")
 654     (version "1.2.1")
 655     (source
 656      (origin
 657        (method url-fetch)
 658        (uri (pypi-uri "httpstat" version))
 659        (sha256
 660         (base32
 661          "1chw2nk56vaq87aba012a270k9na06hfx1pfbsrc3jfvlc2kb9hb"))))
 662     (build-system python-build-system)
 663     (inputs `(("curl" ,curl)))
 664     (arguments
 665      '(#:phases
 666        (modify-phases %standard-phases
 667          (add-before 'build 'fix-curl-path
 668            (lambda* (#:key inputs #:allow-other-keys)
 669              (substitute* "httpstat.py"
 670                (("ENV_CURL_BIN.get\\('curl'\\)")
 671                 (string-append "ENV_CURL_BIN.get('"
 672                                (assoc-ref inputs "curl")
 673                                "/bin/curl')"))))))))
 674     (home-page "https://github.com/reorx/httpstat")
 675     (synopsis "Visualize curl statistics")
 676     (description
 677      "@command{httpstat} is a tool to visualize statistics from the
 678 @command{curl} HTTP client.  It acts as a wrapper for @command{curl} and
 679 prints timing information for each step of the HTTP request (DNS lookup,
 680 TCP connection, TLS handshake and so on) in the terminal.")
 681     (license license:expat)))
 682
 683 (define-public bwm-ng
 684   (package
 685     (name "bwm-ng")
 686     (version "0.6.1")
 687     (source
 688      (origin
 689        (method url-fetch)
 690        (uri (string-append "https://www.gropp.org/bwm-ng/bwm-ng-"
 691                            version ".tar.gz"))
 692        (sha256
 693         (base32
 694          "1w0dwpjjm9pqi613i8glxrgca3rdyqyp3xydzagzr5ndc34z6z02"))))
 695     (build-system gnu-build-system)
 696     (inputs `(("ncurses" ,ncurses)))
 697     (synopsis "Console based live network and disk I/O bandwidth monitor")
 698     (description "Bandwidth Monitor NG is a small and simple console based
 699 live network and disk I/O bandwidth monitor.")
 700     (home-page "https://www.gropp.org/?id=projects&sub=bwm-ng")
 701     (license license:gpl2)))
 702
 703 (define-public aircrack-ng
 704   (package
 705     (name "aircrack-ng")
 706     (version "1.2-rc4")
 707     (source
 708      (origin
 709        (method url-fetch)
 710        (uri (string-append "http://download.aircrack-ng.org/aircrack-ng-"
 711                            version ".tar.gz"))
 712        (sha256
 713         (base32
 714          "0dpzx9kddxpgzmgvdpl3rxn0jdaqhm5wxxndp1xd7d75mmmc2fnr"))))
 715     (build-system gnu-build-system)
 716     (native-inputs
 717      `(("pkg-config" ,pkg-config)))
 718     (inputs
 719      `(("libgcrypt" ,libgcrypt)
 720        ("libnl" ,libnl)
 721        ("ethtool" ,ethtool)
 722        ("pcre" ,pcre)
 723        ("sqlite" ,sqlite)
 724        ("zlib" ,zlib)))
 725     (arguments
 726      `(#:make-flags `("sqlite=true"
 727                       "gcrypt=true"
 728                       "libnl=true"
 729                       "pcre=true"
 730                       "experimental=true" ;build wesside-ng, etc.
 731                       "AVX2FLAG=N" "AVX1FLAG=N"
 732                       ,,@(match (%current-system)
 733                            ((or "x86_64-linux" "i686-linux")
 734                             `("SSEFLAG=Y"))
 735                            (_
 736                             `("NEWSSE=false")))
 737                       ,(string-append "prefix=" %output))
 738        #:phases (modify-phases %standard-phases
 739                   (delete 'configure)   ;no configure phase
 740                   (add-after 'build 'absolutize-tools
 741                     (lambda* (#:key inputs #:allow-other-keys)
 742                       (let ((ethtool (string-append (assoc-ref inputs "ethtool")
 743                                                     "/sbin/ethtool")))
 744                         (substitute* "scripts/airmon-ng"
 745                           (("\\[ ! -x \"\\$\\(command -v ethtool 2>&1)\" \\]")
 746                            (string-append "! " ethtool " --version "
 747                                           ">/dev/null 2>&1"))
 748                           (("\\$\\(ethtool")
 749                            (string-append "$(" ethtool)))
 750                         #t))))))
 751     (home-page "http://www.aircrack-ng.org")
 752     (synopsis "Assess WiFi network security")
 753     (description
 754      "Aircrack-ng is a complete suite of tools to assess WiFi network
 755 security.  It focuses on different areas of WiFi security: monitoring,
 756 attacking, testing, and cracking.  All tools are command-line driven, which
 757 allows for heavy scripting.")
 758     (license (list license:gpl2+ license:bsd-3))))
 759
 760 (define-public perl-net-dns
 761  (package
 762   (name "perl-net-dns")
 763   (version "1.15")
 764   (source
 765     (origin
 766       (method url-fetch)
 767       (uri (string-append
 768              "mirror://cpan/authors/id/N/NL/NLNETLABS/Net-DNS-"
 769              version
 770              ".tar.gz"))
 771       (sha256
 772         (base32
 773           "1l31kqrgjzq8zgpr86z12x550px5zpn563gmnja6m14b8fk6pm0s"))))
 774   (build-system perl-build-system)
 775   (inputs
 776     `(("perl-digest-hmac" ,perl-digest-hmac)))
 777   (home-page "http://search.cpan.org/dist/Net-DNS")
 778   (synopsis
 779     "Perl Interface to the Domain Name System")
 780   (description "Net::DNS is the Perl Interface to the Domain Name System.")
 781   (license license:x11)))
 782
 783 (define-public perl-socket6
 784  (package
 785   (name "perl-socket6")
 786   (version "0.28")
 787   (source
 788     (origin
 789       (method url-fetch)
 790       (uri (string-append
 791              "mirror://cpan/authors/id/U/UM/UMEMOTO/Socket6-"
 792              version
 793              ".tar.gz"))
 794       (sha256
 795         (base32
 796           "11j5jzqbzmwlws9zals43ry2f1nw9qy6im7yhn9ck5rikywrmm5z"))))
 797   (build-system perl-build-system)
 798   (arguments
 799    `(#:phases
 800      (modify-phases %standard-phases
 801          (replace 'configure
 802            (lambda* (#:key outputs #:allow-other-keys)
 803              (let* ((out (assoc-ref outputs "out"))
 804                     (args `("Makefile.PL"
 805                             ,(string-append "PREFIX=" out)
 806                             "INSTALLDIRS=site")))
 807                (setenv "CONFIG_SHELL" (which "sh"))
 808                (zero? (apply system* "perl" args))))))))
 809   (home-page "http://search.cpan.org/dist/Socket6")
 810   (synopsis
 811     "IPv6 related part of the C socket.h defines and structure manipulators for Perl")
 812   (description "Socket6 binds the IPv6 related part of the C socket header
 813 definitions and structure manipulators for Perl.")
 814   (license license:bsd-3)))
 815
 816 (define-public perl-net-dns-resolver-programmable
 817  (package
 818   (name "perl-net-dns-resolver-programmable")
 819   (version "v0.003")
 820   (source
 821     (origin
 822       (method url-fetch)
 823       (uri (string-append
 824              "mirror://cpan/authors/id/J/JM/JMEHNLE/net-dns-resolver-programmable/"
 825              "Net-DNS-Resolver-Programmable-" version ".tar.gz"))
 826       (sha256
 827         (base32
 828           "1v3nl2kaj4fs55n1617n53q8sa3mir06898vpy1rq98zjih24h4d"))
 829       (patches
 830        (search-patches "perl-net-dns-resolver-programmable-fix.patch"))))
 831   (build-system perl-build-system)
 832   (native-inputs
 833     `(("perl-module-build" ,perl-module-build)))
 834   (inputs `(("perl-net-dns" ,perl-net-dns)))
 835   (home-page
 836     "http://search.cpan.org/dist/Net-DNS-Resolver-Programmable")
 837   (synopsis
 838     "Programmable DNS resolver class for offline emulation of DNS")
 839   (description "Net::DNS::Resolver::Programmable is a programmable DNS resolver for
 840 offline emulation of DNS.")
 841   (license license:perl-license)))
 842
 843 (define-public perl-netaddr-ip
 844  (package
 845   (name "perl-netaddr-ip")
 846   (version "4.079")
 847   (source
 848     (origin
 849       (method url-fetch)
 850       (uri (string-append
 851              "mirror://cpan/authors/id/M/MI/MIKER/NetAddr-IP-"
 852              version
 853              ".tar.gz"))
 854       (sha256
 855         (base32
 856           "1rx0dinrz9fk9qcg4rwqq5n1dm3xv2arymixpclcv2q2nzgq4npc"))))
 857   (build-system perl-build-system)
 858   (arguments
 859     `(#:phases
 860        (modify-phases %standard-phases
 861          (replace 'configure
 862            (lambda* (#:key outputs #:allow-other-keys)
 863              (let* ((out (assoc-ref outputs "out"))
 864                     (args `("Makefile.PL"
 865                             ,(string-append "PREFIX=" out)
 866                             "INSTALLDIRS=site")))
 867                (setenv "CONFIG_SHELL" (which "sh"))
 868                (zero? (apply system* "perl" args))))))))
 869   (home-page
 870     "http://search.cpan.org/dist/NetAddr-IP")
 871   (synopsis
 872     "Manages IPv4 and IPv6 addresses and subnets")
 873   (description "NetAddr::IP manages IPv4 and IPv6 addresses and subsets.")
 874   (license license:perl-license)))
 875
 876 (define-public perl-net-patricia
 877  (package
 878   (name "perl-net-patricia")
 879   (version "1.22")
 880   (source
 881     (origin
 882       (method url-fetch)
 883       (uri (string-append
 884              "mirror://cpan/authors/id/G/GR/GRUBER/Net-Patricia-"
 885              version
 886              ".tar.gz"))
 887       (sha256
 888         (base32
 889           "0ln5f57vc8388kyh9vhx2infrdzfhbpgyby74h1qsnhwds95m0vh"))))
 890   (build-system perl-build-system)
 891   (inputs
 892     `(("perl-net-cidr-lite" ,perl-net-cidr-lite)
 893       ("perl-socket6" ,perl-socket6)))
 894   (home-page
 895     "http://search.cpan.org/dist/Net-Patricia")
 896   (synopsis
 897     "Patricia Trie Perl module for fast IP address lookups")
 898   (description
 899     "Net::Patricia does IP address lookups quickly in Perl.")
 900   ;; The bindings are licensed under GPL2 or later.
 901   ;; libpatricia is licensed under 2-clause BSD.
 902   (license (list license:gpl2+ license:bsd-2))))
 903
 904 (define-public perl-net-cidr-lite
 905  (package
 906   (name "perl-net-cidr-lite")
 907   (version "0.21")
 908   (source
 909     (origin
 910       (method url-fetch)
 911       (uri (string-append
 912              "mirror://cpan/authors/id/D/DO/DOUGW/Net-CIDR-Lite-"
 913              version
 914              ".tar.gz"))
 915       (sha256
 916         (base32
 917           "14shj73zbqmfjbp0qz1fs9j4p2dpvz5hfkm4qfdjbydflbl2b8fg"))))
 918   (build-system perl-build-system)
 919   (home-page
 920     "http://search.cpan.org/dist/Net-CIDR-Lite")
 921   (synopsis
 922     "Perl extension for merging IPv4 or IPv6 CIDR addresses")
 923   (description "Net::CIDR::Lite merges IPv4 or IPv6 CIDR addresses.")
 924   (license license:gpl1+)))
 925
 926 ;; TODO: Use the geolite-mirror-simple.pl script from the example
 927 ;; directory to stay current with the databases. How?
 928 (define-public perl-geo-ip
 929  (package
 930   (name "perl-geo-ip")
 931   (version "1.51")
 932   (source
 933     (origin
 934       (method url-fetch)
 935       (uri (string-append
 936              "mirror://cpan/authors/id/M/MA/MAXMIND/Geo-IP-"
 937              version
 938              ".tar.gz"))
 939       (sha256
 940         (base32
 941           "1fka8fr7fw6sh3xa9glhs1zjg3s2gfkhi7n7da1l2m2wblqj0c0n"))))
 942   (build-system perl-build-system)
 943   (home-page "http://search.cpan.org/dist/Geo-IP")
 944   (synopsis
 945     "Look up location and network information by IP Address in Perl")
 946   (description "The Perl module 'Geo::IP'.  It looks up location and network
 947 information by IP Address.")
 948   (license license:perl-license)))
 949
 950 (define-public perl-io-socket-inet6
 951  (package
 952   (name "perl-io-socket-inet6")
 953   (version "2.72")
 954   (source
 955     (origin
 956       (method url-fetch)
 957       (uri (string-append
 958              "mirror://cpan/authors/id/S/SH/SHLOMIF/IO-Socket-INET6-"
 959              version
 960              ".tar.gz"))
 961       (sha256
 962         (base32
 963           "1fqypz6qa5rw2d5y2zq7f49frwra0aln13nhq5gi514j2zx21q45"))))
 964   (build-system perl-build-system)
 965   (native-inputs
 966     `(("perl-module-build" ,perl-module-build)
 967       ("perl-test-pod" ,perl-test-pod)
 968       ("perl-test-pod-coverage" ,perl-test-pod-coverage)))
 969   (inputs `(("perl-socket6" ,perl-socket6)))
 970   (arguments `(;; Need network socket API
 971                #:tests? #f))
 972   (home-page
 973     "http://search.cpan.org/dist/IO-Socket-INET6")
 974   (synopsis
 975     "Perl object interface for AF_INET/AF_INET6 domain sockets")
 976   (description "IO::Socket::INET6 is an interface for AF_INET/AF_INET6 domain
 977 sockets in Perl.")
 978   (license license:perl-license)))
 979
 980 (define-public libproxy
 981   (package
 982     (name "libproxy")
 983     (version "0.4.15")
 984     (source (origin
 985               (method url-fetch)
 986               (uri (string-append "https://github.com/libproxy/libproxy/"
 987                                   "releases/download/" version "/libproxy-"
 988                                   version ".tar.xz"))
 989               (sha256
 990                (base32
 991                 "0kvdrazlzwia876w988cmlypp253gwy6idlh8mjk958c29jb8kb5"))))
 992     (build-system cmake-build-system)
 993     (native-inputs
 994      `(("pkg-config" ,pkg-config)))
 995     (inputs
 996      `(("dbus" ,dbus)
 997        ("zlib" ,zlib)
 998        ("network-manager" ,network-manager)))
 999     (arguments
1000      `(#:phases
1001        (modify-phases %standard-phases
1002          (replace 'check
1003                   (lambda _
1004                     (zero? (system* "ctest" "-E" "url-test")))))))
1005     (synopsis "Library providing automatic proxy configuration management")
1006     (description "Libproxy handles the details of HTTP/HTTPS proxy
1007 configuration for applications across all scenarios.  Applications using
1008 libproxy only have to specify which proxy to use.")
1009     (home-page "https://libproxy.github.io/libproxy")
1010     (license license:lgpl2.1+)))
1011
1012 (define-public proxychains-ng
1013   (package
1014     (name "proxychains-ng")
1015     (version "4.12")
1016     (source (origin
1017               (method url-fetch)
1018               (uri (string-append "https://github.com/rofl0r/" name "/releases/"
1019                                   "download/v" version "/" name "-" version
1020                                   ".tar.xz"))
1021               (sha256
1022                (base32
1023                 "0kiss3ih6cwayzvqi5cx4kw4vh7r2kfxlbgk56v1f1066ncm8aj8"))))
1024     (build-system gnu-build-system)
1025     (arguments
1026      `(#:tests? #f ; there are no tests
1027        #:make-flags '("CC=gcc")
1028        #:phases
1029        (modify-phases %standard-phases
1030          (add-after 'unpack 'fix-configure-script
1031            (lambda _
1032              ;; The configure script is very intolerant to unknown arguments,
1033              ;; such as "CONFIG_SHELL".
1034              (substitute* "configure"
1035                (("\\*\\) break ;;" line)
1036                 (string-append "[A-Z]*) shift ;;\n"
1037                                line)))
1038              #t)))))
1039     (synopsis "Redirect any TCP connection through a proxy or proxy chain")
1040     (description "Proxychains-ng is a preloader which hooks calls to sockets
1041 in dynamically linked programs and redirects them through one or more SOCKS or
1042 HTTP proxies.")
1043     (home-page "https://github.com/rofl0r/proxychains-ng")
1044     (license license:gpl2+)))
1045
1046 (define-public enet
1047   (package
1048     (name "enet")
1049     (version "1.3.13")
1050     (source (origin
1051               (method url-fetch)
1052               (uri (string-append "http://enet.bespin.org/download/"
1053                                   name "-" version ".tar.gz"))
1054               (sha256
1055                (base32
1056                 "0p53mnmjbm56wizwraznynx13fcibcxiqny110dp6a5a3w174q73"))))
1057     (build-system gnu-build-system)
1058     (native-inputs
1059      `(("pkg-config" ,pkg-config)))
1060     (synopsis
1061      "Network communication layer on top of UDP")
1062     (description
1063      "ENet's purpose is to provide a relatively thin, simple and robust network
1064 communication layer on top of UDP.  The primary feature it provides is optional
1065 reliable, in-order delivery of packets.  ENet omits certain higher level
1066 networking features such as authentication, server discovery, encryption, or
1067 other similar tasks that are particularly application specific so that the
1068 library remains flexible, portable, and easily embeddable.")
1069     (home-page "http://enet.bespin.org")
1070     (license license:expat)))
1071
1072 (define-public sslh
1073   (package
1074     (name "sslh")
1075     (version "1.19c")
1076     (source (origin
1077               (method url-fetch)
1078               (uri (string-append "https://github.com/yrutschle/sslh/archive/v"
1079                                   version ".tar.gz"))
1080               (file-name (string-append name "-" version ".tar.gz"))
1081               (sha256
1082                (base32
1083                 "0pd8hifa9h0rm7vms3k6ic1k29xigrlv2idc5wgcafmb1v1243di"))))
1084     (build-system gnu-build-system)
1085     (native-inputs
1086      `(;; Test dependencies.
1087        ("lcov" ,lcov)
1088        ("perl" ,perl)
1089        ("perl-io-socket-inet6" ,perl-io-socket-inet6)
1090        ("perl-socket6" ,perl-socket6)
1091        ("psmisc" ,psmisc)
1092        ("valgrind" ,valgrind)))
1093     (inputs
1094      `(("libcap" ,libcap)
1095        ("libconfig" ,libconfig)
1096        ("pcre" ,pcre)
1097        ("tcp-wrappers" ,tcp-wrappers)))
1098     (arguments
1099      '(#:phases
1100        (modify-phases %standard-phases
1101          (delete 'configure)            ; no configure script
1102          (add-before 'check 'fix-tests
1103                      (lambda _
1104                        (substitute* "./t"
1105                          (("\"/tmp") "$ENV{\"TMPDIR\"} . \"")
1106                          ;; The Guix build environment lacks ‘ip6-localhost’.
1107                          (("ip6-localhost") "localhost"))
1108                        #t))
1109          ;; Many of these files are mentioned in the man page. Install them.
1110          (add-after 'install 'install-documentation
1111                     (lambda* (#:key outputs #:allow-other-keys)
1112                       (let* ((out (assoc-ref outputs "out"))
1113                              (doc (string-append out "/share/doc/sslh")))
1114                         (install-file "README.md" doc)
1115                         (for-each
1116                          (lambda (file)
1117                            (install-file file (string-append doc "/examples")))
1118                          (append (find-files "." "\\.cfg")
1119                                  (find-files "scripts"))))
1120                       #t)))
1121        #:make-flags (list "CC=gcc"
1122                           "USELIBCAP=1"
1123                           "USELIBWRAP=1"
1124                           (string-append "PREFIX=" (assoc-ref %outputs "out")))
1125        #:test-target "test"))
1126     (home-page "https://www.rutschle.net/tech/sslh/README.html")
1127     (synopsis "Applicative network protocol demultiplexer")
1128     (description
1129      "sslh is a network protocol demultiplexer.  It acts like a switchboard,
1130 accepting connections from clients on one port and forwarding them to different
1131 servers based on the contents of the first received data packet.  Detection of
1132 common protocols like HTTP(S), SSL, SSH, OpenVPN, tinc, and XMPP is already
1133 implemented, but any other protocol that matches a regular expression can be
1134 added.  sslh's name comes from its original application of serving both SSH and
1135 HTTPS on port 443, allowing SSH connections from inside corporate firewalls
1136 that block port 22.")
1137     (license (list license:bsd-2        ; tls.[ch]
1138                    license:gpl2+))))    ; everything else
1139
1140 (define-public iperf
1141   (package
1142     (name "iperf")
1143     (version "3.1.7")
1144     (source (origin
1145               (method url-fetch)
1146               (uri (string-append "http://downloads.es.net/pub/iperf"
1147                                   "/iperf-" version ".tar.gz"))
1148               (sha256
1149                 (base32
1150                  "0kvk8d0a3dcxc8fisyprbn01y8akxj4sx8ld5dh508p9dx077vx4"))))
1151     (build-system gnu-build-system)
1152     (synopsis "TCP, UDP and SCTP bandwidth measurement tool")
1153     (description
1154      "iPerf is a tool to measure achievable bandwidth on IP networks.  It
1155 supports tuning of various parameters related to timing, buffers and
1156 protocols (TCP, UDP, SCTP with IPv4 and IPv6).  For each test it reports
1157 the bandwidth, loss, and other parameters.")
1158     (home-page "http://software.es.net/iperf/")
1159     (license (list license:bsd-3             ; Main distribution.
1160                    license:ncsa              ; src/{units,iperf_locale,tcp_window_size}.c
1161                    license:expat             ; src/{cjson,net}.[ch]
1162                    license:public-domain)))) ; src/portable_endian.h
1163
1164 (define-public nethogs
1165   (package
1166     (name "nethogs")
1167     (version "0.8.5")
1168     (source (origin
1169               (method url-fetch)
1170               (uri (string-append "https://github.com/raboof/nethogs/archive/v"
1171                                   version ".tar.gz"))
1172               (sha256
1173                (base32
1174                 "1k4x8r7s4dgcb6n2rjn28h2yyij92mwm69phncl3597cdxr954va"))
1175               (file-name (string-append name "-" version ".tar.gz"))))
1176     (build-system gnu-build-system)
1177     (inputs
1178      `(("libpcap" ,libpcap)
1179        ("ncurses" ,ncurses)))
1180     (arguments
1181      `(#:make-flags `("CC=gcc"
1182                       ,(string-append "PREFIX=" %output))
1183        #:phases
1184        (modify-phases %standard-phases
1185          (delete 'configure)))) ; No ./configure script.
1186     (home-page "https://github.com/raboof/nethogs")
1187     (synopsis "Per-process bandwidth monitor")
1188     (description "NetHogs is a small 'net top' tool for Linux.  Instead of
1189 breaking the traffic down per protocol or per subnet, like most tools do, it
1190 groups bandwidth by process.
1191
1192 NetHogs does not rely on a special kernel module to be loaded.  If there's
1193 suddenly a lot of network traffic, you can fire up NetHogs and immediately see
1194 which PID is causing this.  This makes it easy to identify programs that have
1195 gone wild and are suddenly taking up your bandwidth.")
1196     (license license:gpl2+)))
1197
1198 (define-public nzbget
1199   (package
1200     (name "nzbget")
1201     (version "19.1")
1202     (source
1203      (origin
1204        (method url-fetch)
1205        (uri (string-append "https://github.com/nzbget/nzbget/archive/v"
1206                            version ".tar.gz"))
1207        (file-name (string-append name "-" version ".tar.gz"))
1208        (sha256
1209         (base32
1210          "0y713g7gd4n5chbhr8lv7k50rxkmzysrg13sscxam3s386mmlb1r"))
1211        (modules '((guix build utils)))
1212        (snippet
1213         ;; Reported upstream as <https://github.com/nzbget/nzbget/pull/414>.
1214         '(begin
1215            (substitute* "daemon/connect/TlsSocket.cpp"
1216              (("gnutls_certificate-verification_status_print")
1217               "gnutls_certificate_verification_status_print"))
1218            #t))))
1219     (arguments
1220      `(#:configure-flags
1221        (list
1222         (string-append "--with-libcurses-includes="
1223                        (assoc-ref %build-inputs "ncurses") "/include")
1224         (string-append "--with-libcurses-libraries="
1225                        (assoc-ref %build-inputs "ncurses") "/lib")
1226         (string-append "--with-tlslib=GnuTLS"))))
1227     (build-system gnu-build-system)
1228     (inputs `(("gnutls" ,gnutls)
1229               ("libxml2" ,libxml2)
1230               ("ncurses" ,ncurses)
1231               ("zlib" ,zlib)))
1232     (native-inputs `(("pkg-config" ,pkg-config)))
1233     (home-page "https://github.com/nzbget/nzbget")
1234     (synopsis "Usenet binary file downloader")
1235     (description
1236      "NZBGet is a binary newsgrabber, which downloads files from Usenet based
1237 on information given in @code{nzb} files.  NZBGet can be used in standalone
1238 and in server/client modes.  In standalone mode, you pass NZBGet @command{nzb}
1239 files as command-line parameters and it downloads them and exits.  NZBGet also
1240 contains a Web interface.  Its server can be controlled through remote
1241 procedure calls (RPCs).")
1242     (license license:gpl2+)))
1243
1244 (define-public openvswitch
1245   (package
1246     (name "openvswitch")
1247     (version "2.8.1")
1248     (source (origin
1249               (method url-fetch)
1250               (uri (string-append
1251                     "http://openvswitch.org/releases/openvswitch-"
1252                     version ".tar.gz"))
1253               (sha256
1254                (base32
1255                 "14rqqhfyv49irz8ag0qbv9jn8z0bn3qzxir3r074y16p4sg4674d"))))
1256     (build-system gnu-build-system)
1257     (arguments
1258      '(;; FIXME: many tests fail with:
1259        ;;    […]
1260        ;;    test -e $OVS_RUNDIR/ovs-vswitchd.pid
1261        ;;    ovs-appctl -t ovs-vswitchd exit
1262        ;;    hard failure
1263        #:tests? #f
1264        #:configure-flags
1265        '("--enable-shared"
1266          "--localstatedir=/var"
1267          "--with-dbdir=/var/lib/openvswitch")
1268        #:phases
1269        (modify-phases %standard-phases
1270          (replace 'install
1271            (lambda _
1272              (zero? (system* "make"
1273                              ;; Don't try to create directories under /var.
1274                              "RUNDIR=/tmp"
1275                              "PKIDIR=/tmp"
1276                              "LOGDIR=/tmp"
1277                              "DBDIR=/tmp"
1278                              "install")))))))
1279     (native-inputs
1280      `(("perl" ,perl)
1281        ("pkg-config" ,pkg-config)
1282        ("python" ,python-2)
1283        ;; for testing
1284        ("util-linux" ,util-linux)))
1285     (propagated-inputs
1286      `(("python-six" ,python2-six)))
1287     (inputs
1288      `(("libcap-ng" ,libcap-ng)
1289        ("openssl" ,openssl)))
1290     (synopsis "Virtual network switch")
1291     (home-page "http://www.openvswitch.org/")
1292     (description
1293      "Open vSwitch is a multilayer virtual switch.  It is designed to enable
1294 massive network automation through programmatic extension, while still
1295 supporting standard management interfaces and protocols (e.g. NetFlow, sFlow,
1296 IPFIX, RSPAN, CLI, LACP, 802.1ag).")
1297     (license                            ; see debian/copyright for detail
1298      (list license:lgpl2.1              ; xenserver and utilities/bugtool
1299            license:gpl2                 ; datapath
1300            license:bsd-2 license:bsd-3
1301            license:asl2.0))))           ; all other
1302
1303 (define-public python-ipy
1304   (package
1305     (name "python-ipy")
1306     (version "0.83")
1307     (source (origin
1308               (method url-fetch)
1309               (uri (pypi-uri "IPy" version))
1310               (sha256
1311                (base32
1312                 "1f6sdrxclifky4gvkf4gvyv5hx3fjh8vzspnfrqki6qm5d9mmnk1"))))
1313     (build-system python-build-system)
1314     (home-page "https://github.com/autocracy/python-ipy/")
1315     (synopsis "Python class and tools for handling IP addresses and networks")
1316     (description "The @code{IP} class allows a comfortable parsing and
1317 handling for most notations in use for IPv4 and IPv6 addresses and
1318 networks.")
1319     (license license:bsd-3)))
1320
1321 (define-public speedtest-cli
1322   (package
1323     (name "speedtest-cli")
1324     (version "1.0.7")
1325     (source
1326      (origin
1327        (method url-fetch)
1328        (uri (string-append
1329              "https://github.com/sivel/speedtest-cli/archive/v" version ".tar.gz"))
1330        (file-name (string-append name "-" version ".tar.gz"))
1331        (sha256
1332         (base32
1333          "1fbq4kpx8sj50g74hwpixisfjjgxq6zyn40d3m28dxhn7mxbnlrq"))))
1334     (build-system python-build-system)
1335     (home-page "https://github.com/sivel/speedtest-cli")
1336     (synopsis "Internet bandwidth tester")
1337     (description
1338      "Command line interface for testing internet bandwidth using
1339 speedtest.net.")
1340     (license license:asl2.0)))
1341
1342 (define-public tftp-hpa
1343   (package
1344     (name "tftp-hpa")
1345     (version "5.2")
1346     (source (origin
1347               (method url-fetch)
1348               (uri (string-append "mirror://kernel.org/software/"
1349                                   "network/tftp/tftp-hpa/tftp-hpa-" version
1350                                   ".tar.xz"))
1351               (sha256
1352                (base32
1353                 "12vidchglhyc20znq5wdsbhi9mqg90jnl7qr9qs8hbvaz4fkdvmg"))))
1354     (build-system gnu-build-system)
1355     (arguments `(#:tests? #f)) ; no test target
1356     (synopsis "HPA's tftp client")
1357     (description
1358      "This is a tftp client derived from OpenBSD tftp with some extra options
1359 added and bugs fixed.  The source includes readline support but it is not
1360 enabled due to license conflicts between the BSD advertising clause and the GPL.")
1361     (home-page "http://git.kernel.org/cgit/network/tftp/tftp-hpa.git/about/")
1362     ;; Some source files are distributed under a 3-clause BSD license, and
1363     ;; others under a 4-clause BSD license. Refer to the files in the source
1364     ;; distribution for clarification.
1365     (license (list license:bsd-3 license:bsd-4))))
1366
1367 (define-public pidentd
1368   (package
1369     (name "pidentd")
1370     (version "3.0.19")
1371     (source
1372      (origin
1373        (method url-fetch)
1374        (uri (string-append "https://github.com/ptrrkssn/pidentd/archive/"
1375                            "v" version ".tar.gz"))
1376        (file-name (string-append name "-" version ".tar.gz"))
1377        (sha256
1378         (base32
1379          "0y3kd1bkydqkpc1qdff24yswysamsqivvadjy0468qri5730izgc"))))
1380     (build-system gnu-build-system)
1381     (arguments
1382      `(#:tests? #f)) ; No tests are included
1383     (inputs
1384      `(("openssl" ,openssl))) ; For the DES library
1385     (home-page "https://www.lysator.liu.se/~pen/pidentd/")
1386     (synopsis "Small Ident Daemon")
1387     (description
1388      "@dfn{Pidentd} (Peter's Ident Daemon) is a identd, which implements a
1389 identification server.  Pidentd looks up specific TCP/IP connections and
1390 returns the user name and other information about the connection.")
1391     (license license:public-domain)))
1392
1393 (define-public spiped
1394   (package
1395     (name "spiped")
1396     (version "1.6.0")
1397     (source (origin
1398               (method url-fetch)
1399               (uri (string-append "https://www.tarsnap.com/spiped/spiped-"
1400                                   version ".tgz"))
1401               (sha256
1402                (base32
1403                 "1r51rdcl7nib1yv3yvgd5alwlkkwmr387brqavaklb0p2bwzixz6"))))
1404     (build-system gnu-build-system)
1405     (arguments
1406      '(#:test-target "test"
1407        #:make-flags (let* ((out (assoc-ref %outputs "out"))
1408                            (bindir (string-append out "/bin"))
1409                            (man1dir (string-append out "/share/man/man1")))
1410                       (list "CC=gcc" ; It tries to invoke `c99`.
1411                             (string-append "BINDIR=" bindir)
1412                             (string-append "MAN1DIR=" man1dir)))
1413        #:phases
1414        (modify-phases %standard-phases
1415          (add-after 'unpack 'patch-command-invocations
1416            (lambda _
1417              (substitute* '("Makefile"
1418                             "libcperciva/cpusupport/Build/cpusupport.sh"
1419                             "libcperciva/POSIX/posix-cflags.sh"
1420                             "libcperciva/POSIX/posix-l.sh")
1421                (("command -p") ""))
1422              #t))
1423          (delete 'configure) ; No ./configure script.
1424          (add-after 'install 'install-more-docs
1425            (lambda* (#:key outputs #:allow-other-keys)
1426              (let* ((out (assoc-ref %outputs "out"))
1427                     (misc (string-append out "/share/doc/spiped")))
1428                (install-file "DESIGN.md" misc)
1429                #t))))))
1430     (native-inputs
1431      `(("procps" ,procps))) ; `ps` is used by the test suite.
1432     (inputs
1433      `(("openssl" ,openssl)))
1434     (home-page "https://www.tarsnap.com/spiped.html")
1435     (synopsis "Create secure pipes between sockets")
1436     (description "Spiped (pronounced \"ess-pipe-dee\") is a utility for creating
1437 symmetrically encrypted and authenticated pipes between socket addresses, so
1438 that one may connect to one address (e.g., a UNIX socket on localhost) and
1439 transparently have a connection established to another address (e.g., a UNIX
1440 socket on a different system).  This is similar to 'ssh -L' functionality, but
1441 does not use SSH and requires a pre-shared symmetric key.")
1442     (license license:bsd-2)))
1443
1444 (define-public quagga
1445   (package
1446     (name "quagga")
1447     (version "1.2.4")
1448     (source (origin
1449               (method url-fetch)
1450               (uri (string-append "mirror://savannah/quagga/quagga-"
1451                                   version ".tar.gz"))
1452               (sha256
1453                (base32
1454                 "1lsksqxij5f1llqn86pkygrf5672kvrqn1kvxghi169hqf1c0r73"))
1455               (patches
1456                (search-patches "quagga-reproducible-build.patch"))))
1457     (build-system gnu-build-system)
1458     (native-inputs `(("pkg-config" ,pkg-config)
1459                      ("perl" ,perl)
1460                      ("dejagnu" ,dejagnu)))
1461     (inputs `(("readline" ,readline)
1462               ("c-ares" ,c-ares)))
1463     (synopsis "Routing Software Suite")
1464     (description "Quagga is a routing software suite, providing implementations
1465 of OSPFv2, OSPFv3, RIP v1 and v2, RIPng and BGP-4 for Unix platforms.
1466
1467 The Quagga architecture consists of a core daemon, @command{zebra}, which
1468 acts as an abstraction layer to the underlying Unix kernel and presents the
1469 Zserv API over a Unix or TCP stream to Quagga clients.  It is these Zserv
1470 clients which typically implement a routing protocol and communicate routing
1471 updates to the zebra daemon.")
1472     (home-page "https://www.nongnu.org/quagga/")
1473     (license license:gpl2+)))
1474
1475 (define-public thc-ipv6
1476   (let ((revision "0")
1477         (commit "4bb72573e0950ce6f8ca2800a10748477020029e"))
1478     (package
1479       (name "thc-ipv6")
1480       (version (git-version "3.4" revision commit))
1481       (source (origin
1482                 (method git-fetch)
1483                 (uri (git-reference
1484                        (url "https://github.com/vanhauser-thc/thc-ipv6.git")
1485                        (commit commit)))
1486                 (file-name (git-file-name name version))
1487                 (sha256
1488                  (base32
1489                   "1x5i6vbsddqc2yks7r1a2fw2fk16qxvd6hpzh1lykjfpkal8fdir"))))
1490       (build-system gnu-build-system)
1491       (arguments
1492        `(#:make-flags (list (string-append "PREFIX=" (assoc-ref %outputs "out")))
1493          #:tests? #f ; No test suite.
1494          #:phases
1495          (modify-phases %standard-phases
1496            (delete 'configure) ; No ./configure script.
1497            (add-before 'build 'patch-paths
1498              (lambda _
1499                (substitute* "Makefile"
1500                  (("/bin/echo") "echo"))
1501                #t))
1502            (add-after 'install 'install-more-docs
1503              (lambda* (#:key outputs #:allow-other-keys)
1504                (let* ((out (assoc-ref outputs "out"))
1505                       (doc (string-append out "/share/thc-ipv6/doc")))
1506                  (install-file "README" doc)
1507                  (install-file "HOWTO-INJECT" doc)
1508                  #t))))))
1509       ;; TODO Add libnetfilter-queue once packaged.
1510       (inputs
1511        `(("libpcap" ,libpcap)
1512          ("openssl" ,openssl)
1513          ("perl" ,perl)))
1514       (home-page "https://github.com/vanhauser-thc/thc-ipv6")
1515       (synopsis "IPv6 security research toolkit")
1516       (description "The THC IPv6 Toolkit provides command-line tools and a library
1517 for researching IPv6 implementations and deployments.  It requires Linux 2.6 or
1518 newer and only works on Ethernet network interfaces.")
1519       ;; AGPL 3 with exception for linking with OpenSSL. See the 'LICENSE' file in
1520       ;; the source distribution for more information.
1521       (license license:agpl3))))
1522
1523 (define-public bmon
1524   (package
1525     (name "bmon")
1526     (version "4.0")
1527     (source
1528      (origin
1529        (method url-fetch)
1530        (uri (string-append "https://github.com/tgraf/bmon/releases/download/v"
1531                            version "/bmon-" version ".tar.gz"))
1532        (sha256
1533         (base32
1534          "0ylzriv4pwh76344abzl1w219x188gshbycbna35gsyfp09c7z82"))))
1535     (build-system gnu-build-system)
1536     (inputs
1537      `(("libconfuse" ,libconfuse)
1538        ("libnl" ,libnl)
1539        ("ncurses" ,ncurses)))
1540     (native-inputs
1541      `(("pkg-config" ,pkg-config)))
1542     (synopsis "Bandwidth monitor")
1543     (description "bmon is a monitoring and debugging tool to capture
1544 networking-related statistics and prepare them visually in a human-friendly
1545 way.  It features various output methods including an interactive curses user
1546 interface and a programmable text output for scripting.")
1547     (home-page "https://github.com/tgraf/bmon")
1548     ;; README.md mentions both the 2-clause BSD and expat licenses, but all
1549     ;; the source files only have expat license headers. Upstream has been
1550     ;; contacted for clarification: https://github.com/tgraf/bmon/issues/59
1551     ;; Update the license field when upstream responds.
1552     (license (list license:bsd-2
1553                    license:expat))))
1554
1555 (define-public libnet
1556   (package
1557     (name "libnet")
1558     (version "1.1.6")
1559     (source (origin
1560               (method url-fetch)
1561               (uri (string-append "https://github.com/sam-github/libnet/"
1562                                   "archive/libnet-" version ".tar.gz"))
1563               (file-name (string-append name "-" version ".tar.gz"))
1564               (sha256
1565                (base32
1566                 "0l4gbzzvr199fzczzricjz7b825i7dlk6sgl5p5alnkcagmq0xys"))))
1567     (build-system gnu-build-system)
1568     (arguments
1569      `(#:phases
1570        (modify-phases %standard-phases
1571          (add-after 'unpack 'chdir
1572            (lambda _ (chdir "libnet") #t))
1573          (add-after 'chdir 'bootstrap
1574            (lambda _ (zero? (system* "autoreconf" "-vif"))))
1575          (add-before 'build 'build-doc
1576            (lambda* (#:key make-flags #:allow-other-keys)
1577              (zero? (apply system* "make" "-C" "doc" "doc"
1578                            make-flags)))))))
1579     (native-inputs
1580      `(("autoconf" ,autoconf)
1581        ("automake" ,automake)
1582        ("libtool" ,libtool)
1583        ("doxygen" ,doxygen)))
1584     (home-page "https://sourceforge.net/projects/libnet-dev/")
1585     (synopsis "Framework for low-level network packet construction")
1586     (description
1587      "Libnet provides a fairly portable framework for network packet
1588 construction and injection.  It features portable packet creation interfaces
1589 at the IP layer and link layer, as well as a host of supplementary
1590 functionality.  Using libnet, quick and simple packet assembly applications
1591 can be whipped up with little effort.")
1592     (license license:bsd-2)))
1593
1594 (define-public mtr
1595   (package
1596     (name "mtr")
1597     (version "0.92")
1598     (source
1599      (origin
1600        (method url-fetch)
1601        (uri (string-append "ftp://ftp.bitwizard.nl/" name "/"
1602                            name "-" version ".tar.gz"))
1603        (sha256
1604         (base32 "10j3ds3p27jygys4x08kj8fi3zlsgiv72xsfazkah6plwawrv5zj"))))
1605     (build-system gnu-build-system)
1606     (inputs
1607      `(("libcap" ,libcap)
1608        ("ncurses" ,ncurses)))
1609     (native-inputs
1610      ;; The 0.92 release tarball still requires the ‘autoheader’ tool.
1611      `(("autoconf" ,autoconf)))
1612     (arguments
1613      `(#:tests? #f))                    ; tests require network access
1614     (home-page "https://www.bitwizard.nl/mtr/")
1615     (synopsis "Network diagnostic tool")
1616     (description
1617      "@dfn{mtr} (My TraceRoute) combines the functionality of the
1618 @command{traceroute} and @command{ping} programs in a single network diagnostic
1619 tool.  @command{mtr} can use several network protocols to detect intermediate
1620 routers (or @dfn{hops}) between the local host and a user-specified destination.
1621 It then continually measures the response time and packet loss at each hop, and
1622 displays the results in real time.")
1623     (license license:gpl2+)))
1624
1625 (define-public strongswan
1626   (package
1627     (name "strongswan")
1628     (version "5.6.2")
1629     (source
1630      (origin
1631        (method url-fetch)
1632        (uri (string-append "https://download.strongswan.org/strongswan-"
1633                            version ".tar.bz2"))
1634        (sha256
1635         (base32 "14ifqay54brw2b2hbmm517bxw8bs9631d7jm4g139igkxcq0m9p0"))))
1636     (build-system gnu-build-system)
1637     (arguments
1638      `(#:phases
1639        (modify-phases %standard-phases
1640          (add-before 'build 'patch-command-file-names
1641            (lambda* (#:key inputs #:allow-other-keys)
1642              (substitute* "src/libstrongswan/utils/process.c"
1643                (("/bin/sh")
1644                 (string-append (assoc-ref inputs "bash") "/bin/sh")))
1645
1646              (substitute* "src/libstrongswan/tests/suites/test_process.c"
1647                (("/bin/sh") (which "sh"))
1648                (("/bin/echo") (which "echo"))
1649                (("cat") (which "cat")))
1650              #t))
1651          (add-before 'check 'set-up-test-environment
1652            (lambda* (#:key inputs #:allow-other-keys)
1653              (setenv "TZDIR" (string-append (assoc-ref inputs "tzdata")
1654                                             "/share/zoneinfo"))
1655              #t)))
1656        #:configure-flags
1657        (list
1658         ;; Disable bsd-4 licensed plugins
1659         "--disable-des"
1660         "--disable-blowfish")))
1661     (inputs
1662      `(("curl" ,curl)
1663        ("gmp" ,gmp)
1664        ("libgcrypt" ,libgcrypt)
1665        ("openssl" ,openssl)))
1666     (native-inputs
1667      `(("coreutils" ,coreutils)
1668        ("tzdata" ,tzdata-for-tests)))
1669     (synopsis "IKEv1/v2 keying daemon")
1670     (description "StrongSwan is an IPsec implementation originally based upon
1671 the FreeS/WAN project.  It contains support for IKEv1, IKEv2, MOBIKE, IPv6,
1672 NAT-T and more.")
1673     (home-page "https://strongswan.org/")
1674     (license
1675      (list license:gpl2+
1676            ;; src/aikgen/*
1677            ;; src/libcharon/plugins/dnscert/*
1678            ;; src/libcharon/plugins/ext_auth/*
1679            ;; src/libcharon/plugins/vici/ruby/*
1680            ;; src/libcharon/plugins/xauth_pam/xauth_pam_listener.[ch]
1681            license:expat
1682            ;; src/inclue/sys/*
1683            license:bsd-3
1684            ;; src/libstrongswan/plugins/sha3/sha3_keccak.c
1685            license:public-domain
1686            ;; src/libstrongswan/plugins/pkcs11/pkcs11.h
1687            (license:non-copyleft
1688             "file://src/libstrongswan/plugins/pkcs11/pkcs11.h"
1689             "pkcs11 contains a unknown permissive license. View the specific
1690 file for more details.")
1691            ;; These files are not included in the
1692            ;; build, they are disabled through
1693            ;; options to ./configure
1694            ;;
1695            ;; src/libstrongswan/plugins/blowfish/bf_enc.c
1696            ;; src/libstrongswan/plugins/blowfish/bf_locl.h
1697            ;; src/libstrongswan/plugins/blowfish/bf_pi.h
1698            ;; src/libstrongswan/plugins/blowfish/bf_skey.c
1699            ;; src/libstrongswan/plugins/blowfish/blowfish_crypter.c
1700            ;; src/libstrongswan/plugins/des/des_crypter.c
1701            license:bsd-4))))