gnu/packages/networking.scm

   1 ;;; GNU Guix --- Functional package management for GNU
   2 ;;; Copyright © 2014, 2017, 2018 Ludovic Courtès <ludo@gnu.org>
   3 ;;; Copyright © 2015, 2016, 2017, 2018, 2020 Ricardo Wurmus <rekado@elephly.net>
   4 ;;; Copyright © 2015 Mark H Weaver <mhw@netris.org>
   5 ;;; Copyright © 2015, 2016, 2017 Stefan Reichör <stefan@xsteve.at>
   6 ;;; Copyright © 2016 Raimon Grau <raimonster@gmail.com>
   7 ;;; Copyright © 2016, 2017, 2018, 2019, 2020 Tobias Geerinckx-Rice <me@tobias.gr>
   8 ;;; Copyright © 2016 John Darrington <jmd@gnu.org>
   9 ;;; Copyright © 2016, 2017, 2018, 2019, 2020 Nicolas Goaziou <mail@nicolasgoaziou.fr>
  10 ;;; Copyright © 2016 Eric Bavier <bavier@member.fsf.org>
  11 ;;; Copyright © 2016, 2017 Nikita <nikita@n0.is>
  12 ;;; Copyright © 2016, 2017, 2018 Arun Isaac <arunisaac@systemreboot.net>
  13 ;;; Copyright © 2016 Benz Schenk <benz.schenk@uzh.ch>
  14 ;;; Copyright © 2016, 2017 Pjotr Prins <pjotr.guix@thebird.nl>
  15 ;;; Copyright © 2017 Mathieu Othacehe <m.othacehe@gmail.com>
  16 ;;; Copyright © 2017 Leo Famulari <leo@famulari.name>
  17 ;;; Copyright © 2017, 2018, 2019, 2020 Efraim Flashner <efraim@flashner.co.il>
  18 ;;; Copyright © 2017, 2018, 2019 Rutger Helling <rhelling@mykolab.com>
  19 ;;; Copyright © 2017, 2019 Gábor Boskovits <boskovits@gmail.com>
  20 ;;; Copyright © 2017 Thomas Danckaert <post@thomasdanckaert.be>
  21 ;;; Copyright © 2018 Adam Van Ymeren <adam@vany.ca>
  22 ;;; Copyright © 2018 Fis Trivial <ybbs.daans@hotmail.com>
  23 ;;; Copyright © 2018 Tonton <tonton@riseup.net>
  24 ;;; Copyright © 2018 Clément Lassieur <clement@lassieur.org>
  25 ;;; Copyright © 2018 Theodoros Foradis <theodoros@foradis.org>
  26 ;;; Copyright © 2018, 2020 Marius Bakke <mbakke@fastmail.com>
  27 ;;; Copyright © 2018, 2020 Oleg Pykhalov <go.wigust@gmail.com>
  28 ;;; Copyright © 2018 Pierre Neidhardt <mail@ambrevar.xyz>
  29 ;;; Copyright © 2019 Maxim Cournoyer <maxim.cournoyer@gmail.com>
  30 ;;; Copyright © 2019 Vasile Dumitrascu <va511e@yahoo.com>
  31 ;;; Copyright © 2019 Julien Lepiller <julien@lepiller.eu>
  32 ;;; Copyright © 2019 Timotej Lazar <timotej.lazar@araneo.si>
  33 ;;; Copyright © 2019 Brice Waegeneire <brice@waegenei.re>
  34 ;;; Copyright © 2019 Tonton <tonton@riseup.net>
  35 ;;; Copyright © 2019, 2020 Alex Griffin <a@ajgrf.com>
  36 ;;; Copyright © 2019, 2020 Jan Wielkiewicz <tona_kosmicznego_smiecia@interia.pl>
  37 ;;; Copyright © 2019 Daniel Schaefer <git@danielschaefer.me>
  38 ;;; Copyright © 2019 Diego N. Barbato <dnbarbato@posteo.de>
  39 ;;; Copyright © 2020 Vincent Legoll <vincent.legoll@gmail.com>
  40 ;;; Copyright © 2020 Brice Waegeneire <brice@waegenei.re>
  41 ;;;
  42 ;;; This file is part of GNU Guix.
  43 ;;;
  44 ;;; GNU Guix is free software; you can redistribute it and/or modify it
  45 ;;; under the terms of the GNU General Public License as published by
  46 ;;; the Free Software Foundation; either version 3 of the License, or (at
  47 ;;; your option) any later version.
  48 ;;;
  49 ;;; GNU Guix is distributed in the hope that it will be useful, but
  50 ;;; WITHOUT ANY WARRANTY; without even the implied warranty of
  51 ;;; MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
  52 ;;; GNU General Public License for more details.
  53 ;;;
  54 ;;; You should have received a copy of the GNU General Public License
  55 ;;; along with GNU Guix.  If not, see <http://www.gnu.org/licenses/>.
  56
  57 (define-module (gnu packages networking)
  58   #:use-module ((guix licenses) #:prefix license:)
  59   #:use-module (guix packages)
  60   #:use-module (guix download)
  61   #:use-module (guix git-download)
  62   #:use-module (guix build-system cmake)
  63   #:use-module (guix build-system glib-or-gtk)
  64   #:use-module (guix build-system gnu)
  65   #:use-module (guix build-system go)
  66   #:use-module (guix build-system perl)
  67   #:use-module (guix build-system python)
  68   #:use-module (guix build-system trivial)
  69   #:use-module (guix utils)
  70   #:use-module (gnu packages)
  71   #:use-module (gnu packages admin)
  72   #:use-module (gnu packages adns)
  73   #:use-module (gnu packages algebra)
  74   #:use-module (gnu packages audio)
  75   #:use-module (gnu packages autogen)
  76   #:use-module (gnu packages autotools)
  77   #:use-module (gnu packages base)
  78   #:use-module (gnu packages bison)
  79   #:use-module (gnu packages boost)
  80   #:use-module (gnu packages check)
  81   #:use-module (gnu packages code)
  82   #:use-module (gnu packages compression)
  83   #:use-module (gnu packages cpp)
  84   #:use-module (gnu packages crypto)
  85   #:use-module (gnu packages curl)
  86   #:use-module (gnu packages cyrus-sasl)
  87   #:use-module (gnu packages dejagnu)
  88   #:use-module (gnu packages documentation)
  89   #:use-module (gnu packages flex)
  90   #:use-module (gnu packages freedesktop)
  91   #:use-module (gnu packages gettext)
  92   #:use-module (gnu packages glib)
  93   #:use-module (gnu packages gnome)
  94   #:use-module (gnu packages gnupg)
  95   #:use-module (gnu packages gtk)
  96   #:use-module (gnu packages image)
  97   #:use-module (gnu packages libevent)
  98   #:use-module (gnu packages libidn)
  99   #:use-module (gnu packages linux)
 100   #:use-module (gnu packages lua)
 101   #:use-module (gnu packages multiprecision)
 102   #:use-module (gnu packages kerberos)
 103   #:use-module (gnu packages ncurses)
 104   #:use-module (gnu packages nettle)
 105   #:use-module (gnu packages openldap)
 106   #:use-module (gnu packages password-utils)
 107   #:use-module (gnu packages pcre)
 108   #:use-module (gnu packages perl)
 109   #:use-module (gnu packages perl-check)
 110   #:use-module (gnu packages pkg-config)
 111   #:use-module (gnu packages polkit)
 112   #:use-module (gnu packages pretty-print)
 113   #:use-module (gnu packages pulseaudio)
 114   #:use-module (gnu packages python)
 115   #:use-module (gnu packages python-web)
 116   #:use-module (gnu packages python-xyz)
 117   #:use-module (gnu packages qt)
 118   #:use-module (gnu packages readline)
 119   #:use-module (gnu packages samba)
 120   #:use-module (gnu packages serialization)
 121   #:use-module (gnu packages sqlite)
 122   #:use-module (gnu packages ssh)
 123   #:use-module (gnu packages textutils)
 124   #:use-module (gnu packages tls)
 125   #:use-module (gnu packages valgrind)
 126   #:use-module (gnu packages web)
 127   #:use-module (gnu packages wxwidgets)
 128   #:use-module (gnu packages xml)
 129   #:use-module (ice-9 match))
 130
 131 (define-public blueman
 132   (package
 133     (name "blueman")
 134     (version "2.1.3")
 135     (source
 136      (origin
 137        (method url-fetch)
 138        (uri (string-append "https://github.com/blueman-project/blueman/releases"
 139                            "/download/" version "/blueman-" version ".tar.xz"))
 140        (sha256
 141         (base32 "1pngqbwapbvywhkmflapqvs0wa0af7d1a87wy56l5hg2r462xl1v"))))
 142     (build-system glib-or-gtk-build-system)
 143     (arguments
 144      `(#:configure-flags (list "--enable-polkit"
 145                                "--without-systemdsystemunitdir" ; Not required
 146                                "--without-systemduserunitdir")  ; Not required
 147        #:phases
 148        (modify-phases %standard-phases
 149          ;; Python references are not being patched in patch-phase of build,
 150          ;; despite using python-wrapper as input. So we patch them manually.
 151          (add-after 'unpack 'patch-python-references
 152            (lambda* (#:key inputs #:allow-other-keys)
 153              (with-directory-excursion "apps"
 154                (substitute* '("blueman-adapters.in" "blueman-applet.in"
 155                               "blueman-assistant.in" "blueman-manager.in"
 156                               "blueman-mechanism.in" "blueman-report.in"
 157                               "blueman-rfcomm-watcher.in" "blueman-sendto.in"
 158                               "blueman-services.in" "blueman-tray.in")
 159                  (("@PYTHON@") (string-append (assoc-ref inputs "python")
 160                                               "/bin/python"
 161                                               ,(version-major+minor
 162                                                 (package-version python))))))
 163              #t))
 164          ;; Fix loading of external programs.
 165          (add-after 'unpack 'patch-external-programs
 166            (lambda* (#:key inputs #:allow-other-keys)
 167              (substitute* '("apps/blueman-report.in" "blueman/main/NetConf.py"
 168                             "blueman/main/PPPConnection.py")
 169                (("/usr/sbin/bluetoothd")
 170                 (string-append (assoc-ref inputs "bluez")
 171                                "/libexec/bluetooth/bluetoothd"))
 172                (("/sbin/iptables")
 173                 (string-append (assoc-ref inputs "iptables")
 174                                "/sbin/iptables"))
 175                (("/usr/sbin/pppd")
 176                 (string-append (assoc-ref inputs "ppp")
 177                                "/sbin/pppd")))
 178              #t))
 179          ;; Fix loading of pulseaudio libraries.
 180          (add-after 'unpack 'patch-pulseaudio-libraries
 181            (lambda* (#:key inputs #:allow-other-keys)
 182              (let* ((pulseaudio (assoc-ref inputs "pulseaudio"))
 183                     (pulse (string-append pulseaudio "/lib/libpulse.so.0"))
 184                     (pulse-glib (string-append pulseaudio
 185                                                "/lib/libpulse-mainloop-glib.so.0")))
 186                (with-directory-excursion "blueman/main"
 187                  (substitute* "PulseAudioUtils.py"
 188                    (("libpulse.so.0") pulse)
 189                    (("libpulse-mainloop-glib.so.0") pulse-glib)))
 190                #t)))
 191          ;; Fix running of blueman programs.
 192          (add-after 'glib-or-gtk-wrap 'wrap-blueman-progs
 193            (lambda* (#:key outputs #:allow-other-keys)
 194              (let* ((out (assoc-ref outputs "out"))
 195                     (bin (string-append out "/bin/blueman-"))
 196                     (libexec (string-append out "/libexec/blueman-"))
 197                     (lib (string-append out "/lib/python"
 198                                         ,(version-major+minor
 199                                           (package-version python))
 200                                         "/site-packages")))
 201                (for-each
 202                 (lambda (program)
 203                   (wrap-program program
 204                     `("PYTHONPATH" = (,(getenv "PYTHONPATH") ,lib))
 205                     `("GI_TYPELIB_PATH" = (,(getenv "GI_TYPELIB_PATH")))))
 206                 (append
 207                  (map (lambda (prog) (string-append bin prog))
 208                       '("adapters" "applet" "assistant" "manager" "report"
 209                         "sendto" "services" "tray"))
 210                  (map (lambda (prog) (string-append libexec prog))
 211                       '("mechanism" "rfcomm-watcher"))))
 212                #t))))))
 213     (native-inputs
 214      `(("cython" ,python-cython)
 215        ("glib:bin" ,glib "bin")
 216        ("gobject-introspection" ,gobject-introspection)
 217        ("gtk+:bin" ,gtk+ "bin")
 218        ("intltool" ,intltool)
 219        ("pkg-config" ,pkg-config)))
 220     (inputs
 221      `(("bluez" ,bluez)
 222        ("dbus" ,dbus)
 223        ("gdkpixbuf" ,gdk-pixbuf+svg)
 224        ("glib" ,glib)
 225        ("gtk+" ,gtk+)
 226        ("iproute2" ,iproute)
 227        ("iptables" ,iptables)
 228        ("net-tools" ,net-tools)
 229        ("pango" ,pango)
 230        ("polkit" ,polkit)
 231        ("ppp" ,ppp)
 232        ("pulseaudio" ,pulseaudio)
 233        ("pycairo" ,python-pycairo)
 234        ("pygobject" ,python-pygobject)
 235        ("python" ,python-wrapper)
 236        ("libappindicator" ,libappindicator)
 237        ("libnm" ,network-manager)))
 238     (synopsis "GTK+ Bluetooth manager")
 239     (description "Blueman is a Bluetooth management utility using the Bluez
 240 D-Bus backend.  It is designed to be easy to use for most common Bluetooth
 241 tasks.")
 242     (home-page "https://github.com/blueman-project/blueman")
 243     (license license:gpl3+)))
 244
 245 ;; The gnu.org ‘home’ for this GNU project is a directory listing with 1.6.0 as
 246 ;; the latest version.  The author's git repository, mentioned in the 1.6.0
 247 ;; README and otherwise legit-looking, contains a proper 1.7.0 release tarball
 248 ;; with many OUI updates.  Use it, even though it's also several years old now.
 249 (define-public macchanger
 250   (package
 251     (name "macchanger")
 252     (version "1.7.0")
 253     (source
 254      (origin
 255        (method url-fetch)
 256        (uri (string-append "https://github.com/alobbs/macchanger/"
 257                            "releases/download/" version "/"
 258                            name "-" version ".tar.gz"))
 259        (sha256
 260         (base32 "1gs5m0jxyprdp00w2qkbnaqm3ilkjz0q1gqdg4nzdm8g4xy73qns"))))
 261     (build-system gnu-build-system)
 262     (home-page "https://www.gnu.org/software/macchanger/")
 263     (synopsis "Viewing and manipulating MAC addresses of network interfaces")
 264     (description "GNU MAC Changer is a utility for viewing and changing MAC
 265 addresses of networking devices.  New addresses may be set explicitly or
 266 randomly.  They can include MAC addresses of the same or other hardware vendors
 267 or, more generally, MAC addresses of the same category of hardware.")
 268     (license license:gpl2+)))
 269
 270 (define-public miredo
 271   (package
 272     (name "miredo")
 273     (version "1.2.6")
 274     (source (origin
 275               (method url-fetch)
 276               (uri (string-append "http://www.remlab.net/files/miredo/miredo-"
 277                                   version ".tar.xz"))
 278               (sha256
 279                (base32
 280                 "0j9ilig570snbmj48230hf7ms8kvcwi2wblycqrmhh85lksd49ps"))))
 281     (build-system gnu-build-system)
 282     (arguments
 283      '(#:phases
 284        (modify-phases %standard-phases
 285          ;; The checkconf test in src/ requires network access.
 286          (add-before
 287           'check 'disable-checkconf-test
 288           (lambda _
 289             (substitute* "src/Makefile"
 290               (("^TESTS = .*") "TESTS = \n"))
 291             #t)))))
 292     (home-page "https://www.remlab.net/miredo/")
 293     (synopsis "Teredo IPv6 tunneling software")
 294     (description
 295      "Miredo is an implementation (client, relay, server) of the Teredo
 296 specification, which provides IPv6 Internet connectivity to IPv6 enabled hosts
 297 residing in IPv4-only networks, even when they are behind a NAT device.")
 298     (license license:gpl2+)))
 299
 300 (define-public socat
 301   (package
 302     (name "socat")
 303     (version "1.7.3.4")
 304     (source (origin
 305               (method url-fetch)
 306               (uri (string-append
 307                     "http://www.dest-unreach.org/socat/download/socat-"
 308                     version ".tar.bz2"))
 309               (sha256
 310                (base32
 311                 "1z7xgnwiqpcv1j6aghhj9nqbx7cg3gpc4n9j7vi9hm7nhv5788wp"))))
 312     (build-system gnu-build-system)
 313     (arguments '(#:tests? #f))          ; no test suite
 314     (inputs `(("openssl" ,openssl)))
 315     (home-page "http://www.dest-unreach.org/socat/")
 316     (synopsis
 317      "Open bidirectional communication channels from the command line")
 318     (description
 319      "socat is a relay for bidirectional data transfer between two independent
 320 data channels---files, pipes, devices, sockets, etc.  It can create
 321 \"listening\" sockets, named pipes, and pseudo terminals.
 322
 323 socat can be used, for instance, as TCP port forwarder, as a shell interface
 324 to UNIX sockets, IPv6 relay, for redirecting TCP oriented programs to a serial
 325 line, to logically connect serial lines on different computers, or to
 326 establish a relatively secure environment (su and chroot) for running client
 327 or server shell scripts with network connections.")
 328     (license license:gpl2)))
 329
 330 (define-public tcp-wrappers
 331   (package
 332     (name "tcp-wrappers")
 333     (version "7.6")
 334     (source (origin
 335               (method url-fetch)
 336               (uri (string-append
 337                     "ftp://ftp.porcupine.org/pub/security/tcp_wrappers_"
 338                     version ".tar.gz"))
 339               (sha256
 340                (base32
 341                 "0p9ilj4v96q32klavx0phw9va21fjp8vpk11nbh6v2ppxnnxfhwm"))))
 342     (build-system gnu-build-system)
 343     (arguments
 344      `(#:phases
 345        (modify-phases %standard-phases
 346          (delete 'configure)  ; there is no configure script
 347          (delete 'check)      ; there are no tests
 348          (replace 'build
 349            (lambda _
 350              (chmod "." #o755)
 351              ;; Upstream doesn't generate a shared library.  So we have to do it.
 352              (setenv "CC" "gcc -fno-builtin -fPIC")
 353              (substitute* "Makefile"
 354                (("^(all[^\n]*)" line) (string-append line " libwrap.so\n
 355 libwrap.so: $(LIB_OBJ)\n
 356 \tgcc -shared $^ -o $@\n")))
 357              ;; Deal with some gcc breakage.
 358              (substitute* "percent_m.c"
 359                (("extern char .sys_errlist.*;") ""))
 360              (substitute* "scaffold.c"
 361                (("extern char .malloc.*;") ""))
 362              ;; This, believe it or not, is the recommended way to build!
 363              (invoke "make" "REAL_DAEMON_DIR=/etc" "linux")))
 364          ;; There is no make install stage, so we have to do it ourselves.
 365          (replace 'install
 366            (lambda _
 367              (let ((out (assoc-ref %outputs "out"))
 368                    (man-pages `("hosts_access.3"
 369                                 "hosts_access.5"
 370                                 "hosts_options.5"
 371                                 "tcpd.8"
 372                                 "tcpdchk.8"
 373                                 "tcpdmatch.8"))
 374                    (libs  `("libwrap.a"
 375                             "libwrap.so"))
 376                    (headers `("tcpd.h"))
 377                    (bins `("safe_finger"
 378                            "tcpd"
 379                            "tcpdchk"
 380                            "tcpdmatch"
 381                            "try-from")))
 382                (for-each
 383                 (lambda (x)
 384                   (install-file x (string-append out "/include")))
 385                 headers)
 386                (for-each
 387                 (lambda (x)
 388                   (install-file x (string-append out "/share/man/man"
 389                                                  (string-take-right x 1))))
 390                 man-pages)
 391                (for-each
 392                 (lambda (x)
 393                   (install-file x (string-append out "/lib/")))
 394                 libs)
 395                (for-each
 396                 (lambda (x)
 397                   (install-file x (string-append out "/bin/")))
 398                 bins))
 399              #t)))))
 400     (home-page "http://www.porcupine.org")
 401     (synopsis  "Monitor and filter incoming requests for network services")
 402     (description "With this package you can monitor and filter incoming requests for
 403 network services.  It includes a library which may be used by daemons to
 404 transparently check connection attempts against an access control list.")
 405     (license (license:non-copyleft "file://DISCLAIMER"
 406                                    "See the file DISCLAIMER in the distribution."))))
 407
 408
 409 (define-public zeromq
 410   (package
 411     (name "zeromq")
 412     (version "4.3.2")
 413     (source (origin
 414               (method url-fetch)
 415               (uri (string-append "https://github.com/zeromq/libzmq/releases"
 416                                   "/download/v" version "/zeromq-" version ".tar.gz"))
 417               (sha256
 418                (base32
 419                 "0qzp80ky4y2k7k1ya09v9gkivvfbz2km813snrb8jhnn634bbmzb"))))
 420     (build-system gnu-build-system)
 421     (home-page "https://zeromq.org")
 422     (synopsis "Library for message-based applications")
 423     (description
 424      "The 0MQ lightweight messaging kernel is a library which extends the
 425 standard socket interfaces with features traditionally provided by specialized
 426 messaging middle-ware products.  0MQ sockets provide an abstraction of
 427 asynchronous message queues, multiple messaging patterns, message
 428 filtering (subscriptions), seamless access to multiple transport protocols and
 429 more.")
 430     (license license:lgpl3+)))
 431
 432 (define-public czmq
 433   (package
 434     (name "czmq")
 435     (version "4.2.0")
 436     (source (origin
 437               (method url-fetch)
 438               (uri (string-append
 439                     "https://github.com/zeromq/" name
 440                     "/releases/download/v" version
 441                     "/" name "-" version ".tar.gz"))
 442               (sha256
 443                (base32
 444                 "1szciz62sk3fm4ga9qjpxz0n0lazvphm32km95bq92ncng12kayg"))))
 445     (build-system gnu-build-system)
 446     (arguments
 447      '(#:configure-flags '("--enable-drafts")
 448        #:phases (modify-phases %standard-phases
 449                   (add-before 'check 'patch-tests
 450                     (lambda _
 451                       ;; XXX FIXME: Disable the zproc test, which fails on some
 452                       ;; hardware: <https://github.com/zeromq/czmq/issues/2007>.
 453                       (substitute* "src/czmq_selftest.c"
 454                         (("\\{ \"zproc\", zproc_test.*")
 455                          ""))
 456                       #t)))))
 457     (inputs
 458      `(("zeromq" ,zeromq)))
 459     (home-page "https://zeromq.org")
 460     (synopsis "High-level C bindings for ØMQ")
 461     (description
 462      "czmq provides bindings for the ØMQ core API that hides the differences
 463 between different versions of ØMQ.")
 464     (license license:mpl2.0)))
 465
 466 (define-public cppzmq
 467   (package
 468     (name "cppzmq")
 469     (version "4.6.0")
 470     (source (origin
 471               (method git-fetch)
 472               (uri (git-reference
 473                     (url "https://github.com/zeromq/cppzmq")
 474                     (commit (string-append "v" version))))
 475               (sha256
 476                (base32
 477                 "19acx2bzi4n6fdnfgkja1nds7m1bwg8lw5vfcijrx9fv75pa7m8h"))
 478               (file-name (git-file-name name version))))
 479     (build-system cmake-build-system)
 480     (arguments
 481      '(;; FIXME: The test suite requires downloading Catch and custom
 482        ;; CMake targets, and refuses to use the system version.
 483        ;; See <https://github.com/zeromq/cppzmq/issues/334>.
 484        #:tests? #f
 485        #:configure-flags '("-DCPPZMQ_BUILD_TESTS=OFF")))
 486     (native-inputs
 487      `(("pkg-config" ,pkg-config)))
 488     (inputs
 489      `(("zeromq" ,zeromq)))
 490     (home-page "https://zeromq.org")
 491     (synopsis "C++ bindings for the ØMQ messaging library")
 492     (description
 493      "This package provides header-only C++ bindings for ØMQ.  The header
 494 files contain direct mappings of the abstractions provided by the ØMQ C API.")
 495     (license license:expat)))
 496
 497 (define-public libnatpmp
 498   (package
 499     (name "libnatpmp")
 500     (version "20150609")
 501     (source (origin
 502               (method url-fetch)
 503               (uri (string-append
 504                     "http://miniupnp.free.fr/files/"
 505                     name "-" version ".tar.gz"))
 506               (sha256
 507                (base32
 508                 "1c1n8n7mp0amsd6vkz32n8zj3vnsckv308bb7na0dg0r8969rap1"))))
 509     (build-system gnu-build-system)
 510     (arguments
 511      `(#:phases
 512        (modify-phases %standard-phases
 513          (delete 'configure)
 514          (delete 'check)) ; no tests
 515        #:make-flags
 516        (let* ((target ,(%current-target-system))
 517               (gcc (if target
 518                        (string-append target "-gcc")
 519                        "gcc")))
 520          (list
 521           (string-append "CC=" gcc)
 522           (string-append "INSTALLPREFIX=" (assoc-ref %outputs "out"))
 523           (string-append "LDFLAGS=-Wl,-rpath=" %output "/lib")))))
 524     (home-page "http://miniupnp.free.fr/libnatpmp.html")
 525     (synopsis "C library implementing NAT-PMP")
 526     (description
 527      "@code{libnatpmp} is a portable and asynchronous implementation of
 528 the Network Address Translation - Port Mapping Protocol (NAT-PMP)
 529 written in the C programming language.")
 530     (license license:bsd-3)))
 531
 532 (define-public librdkafka
 533   (package
 534     (name "librdkafka")
 535     (version "0.9.1")
 536     (source (origin
 537               (method url-fetch)
 538               (uri (string-append
 539                     "https://github.com/edenhill/librdkafka/archive/"
 540                     version ".tar.gz"))
 541               (file-name (string-append name "-" version ".tar.gz"))
 542               (sha256
 543                (base32
 544                 "10ldx7g7ymmg17snzx78vy4n8ma1rjx0agzi34g15j2fk867xmas"))))
 545     (build-system gnu-build-system)
 546     (arguments
 547      '(#:phases
 548        (modify-phases %standard-phases
 549          (replace 'configure
 550            ;; its custom configure script doesn't understand 'CONFIG_SHELL'.
 551            (lambda* (#:key outputs #:allow-other-keys)
 552              (let ((out (assoc-ref outputs "out")))
 553                ;; librdkafka++.so lacks RUNPATH for librdkafka.so
 554                (setenv "LDFLAGS"
 555                        (string-append "-Wl,-rpath=" out "/lib"))
 556                (invoke "./configure"
 557                        (string-append "--prefix=" out))))))))
 558     (native-inputs
 559      `(("python" ,python-wrapper)))
 560     (propagated-inputs
 561      `(("zlib" ,zlib))) ; in the Libs.private field of rdkafka.pc
 562     (home-page "https://github.com/edenhill/librdkafka")
 563     (synopsis "Apache Kafka C/C++ client library")
 564     (description
 565      "librdkafka is a C library implementation of the Apache Kafka protocol,
 566 containing both Producer and Consumer support.")
 567     (license license:bsd-2)))
 568
 569 (define-public libndp
 570   (package
 571     (name "libndp")
 572     (version "1.7")
 573     (source (origin
 574               (method url-fetch)
 575               (uri (string-append "http://libndp.org/files/"
 576                                   name "-" version ".tar.gz"))
 577               (sha256
 578                (base32
 579                 "1dlinhl39va00v55qygjc9ap77yqf7xvn4rwmvdr49xhzzxhlj1c"))))
 580     (build-system gnu-build-system)
 581     (home-page "http://libndp.org/")
 582     (synopsis "Library for Neighbor Discovery Protocol")
 583     (description
 584      "libndp contains a library which provides a wrapper for IPv6 Neighbor
 585 Discovery Protocol.  It also provides a tool named ndptool for sending and
 586 receiving NDP messages.")
 587     (license license:lgpl2.1+)))
 588
 589 (define-public ethtool
 590   (package
 591     (name "ethtool")
 592     (version "5.6")
 593     (source (origin
 594               (method url-fetch)
 595               (uri (string-append "mirror://kernel.org/software/network/"
 596                                   "ethtool/ethtool-" version ".tar.xz"))
 597               (sha256
 598                (base32
 599                 "159r0hwax0qs5diayw2glxshqxrigk0v67hgmbq56ldddm91n3ya"))))
 600     (build-system gnu-build-system)
 601     (native-inputs
 602      `(("pkg-config" ,pkg-config)))
 603     (inputs
 604      `(("libmnl" ,libmnl)))
 605     (home-page "https://www.kernel.org/pub/software/network/ethtool/")
 606     (synopsis "Display or change Ethernet device settings")
 607     (description
 608      "ethtool can be used to query and change settings such as speed,
 609 auto-negotiation and checksum offload on many network devices, especially
 610 Ethernet devices.")
 611     (license license:gpl2)))
 612
 613 (define-public ifstatus
 614   (package
 615     (name "ifstatus")
 616     (version "1.1.0")
 617     (source (origin
 618               (method url-fetch)
 619               (uri (string-append "mirror://sourceforge/ifstatus/ifstatus/"
 620                                   "ifstatus%20v" version "/ifstatus-v"
 621                                   version ".tar.gz"))
 622               (sha256
 623                (base32
 624                 "045cbsq9ps32j24v8y5hpyqxnqn9mpaf3mgvirlhgpqyb9jsia0c"))
 625               (modules '((guix build utils)))
 626               (snippet
 627                '(begin
 628                   (substitute* "Main.h"
 629                     (("#include <stdio.h>")
 630                      "#include <stdio.h>\n#include <stdlib.h>"))
 631                   #t))))
 632     (build-system gnu-build-system)
 633     (arguments
 634      '(#:tests? #f                                ; no "check" target
 635        #:phases
 636        (modify-phases %standard-phases
 637          (delete 'configure)             ; no configure script
 638          (replace 'install
 639                   (lambda* (#:key outputs #:allow-other-keys)
 640                     (let* ((out (assoc-ref outputs "out"))
 641                            (bin (string-append out "/bin")))
 642                       (mkdir-p bin)
 643                       (copy-file "ifstatus"
 644                                  (string-append bin "/ifstatus")))
 645                     #t)))))
 646     (inputs `(("ncurses" ,ncurses)))
 647     (home-page "http://ifstatus.sourceforge.net/graphic/index.html")
 648     (synopsis "Text based network interface status monitor")
 649     (description
 650      "IFStatus is a simple, easy-to-use program for displaying commonly
 651 needed/wanted real-time traffic statistics of multiple network
 652 interfaces, with a simple and efficient view on the command line.  It is
 653 intended as a substitute for the PPPStatus and EthStatus projects.")
 654     (license license:gpl2+)))
 655
 656 (define-public nload
 657   (package
 658     (name "nload")
 659     (version "0.7.4")
 660     (source (origin
 661               (method url-fetch)
 662               (uri (string-append "mirror://sourceforge/nload/nload/" version
 663                                   "/nload-" version ".tar.gz"))
 664               (sha256
 665                (base32
 666                 "1rb9skch2kgqzigf19x8bzk211jdfjfdkrcvaqyj89jy2pkm3h61"))))
 667     (build-system gnu-build-system)
 668     (inputs `(("ncurses" ,ncurses)))
 669     (home-page "http://www.roland-riegel.de/nload/")
 670     (synopsis "Realtime console network usage monitor")
 671     (description
 672      "Nload is a console application which monitors network traffic and
 673 bandwidth usage in real time.  It visualizes the in- and outgoing traffic using
 674 two graphs, and provides additional info like total amount of transferred data
 675 and min/max network usage.")
 676     (license license:gpl2+)))
 677
 678 (define-public iodine
 679   (package
 680     (name "iodine")
 681     (version "0.7.0")
 682     (source (origin
 683               (method url-fetch)
 684               (uri (string-append "http://code.kryo.se/" name "/"
 685                                   name "-" version ".tar.gz"))
 686               (sha256
 687                (base32
 688                 "0gh17kcxxi37k65zm4gqsvbk3aw7yphcs3c02pn1c4s2y6n40axd"))))
 689     (build-system gnu-build-system)
 690     (arguments
 691      '(#:phases
 692        (modify-phases %standard-phases
 693          (delete 'configure)
 694          (add-before 'build 'fix-ifconfig-path
 695            ;; This package works only with the net-tools version of ifconfig.
 696            (lambda* (#:key inputs #:allow-other-keys)
 697              (substitute* "src/tun.c"
 698                (("PATH=[^ ]* ")
 699                 (string-append (assoc-ref inputs "net-tools") "/bin/")))
 700              #t))
 701          (add-before 'check 'delete-failing-tests
 702            ;; Avoid https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=802105.
 703            (lambda _
 704              (substitute* "tests/common.c"
 705                (("tcase_add_test\\(tc, \
 706 test_parse_format_ipv(4(|_listen_all|_mapped_ipv6)|6)\\);")
 707                 ""))
 708              #t)))
 709        #:make-flags (list "CC=gcc"
 710                           (string-append "prefix=" (assoc-ref %outputs "out")))
 711        #:test-target "test"))
 712     (inputs `(("net-tools" ,net-tools)
 713               ("zlib" ,zlib)))
 714     (native-inputs `(("check" ,check)
 715                      ("pkg-config" ,pkg-config)))
 716     (home-page "https://code.kryo.se/iodine/")
 717     (synopsis "Tunnel IPv4 data through a DNS server")
 718     (description "Iodine tunnels IPv4 data through a DNS server.  This
 719 can be useful in different situations where internet access is firewalled, but
 720 DNS queries are allowed.  The bandwidth is asymmetrical, with limited upstream
 721 and up to 1 Mbit/s downstream.")
 722     ;; src/md5.[ch] is released under the zlib license
 723     (license (list license:isc license:zlib))))
 724
 725 (define-public whois
 726   (package
 727     (name "whois")
 728     (version "5.5.6")
 729     (source
 730      (origin
 731        (method url-fetch)
 732        (uri (string-append "mirror://debian/pool/main/w/whois/"
 733                            "whois_" version ".tar.xz"))
 734        (sha256
 735         (base32 "0kpi981zjczvdcxfcq455c529vlaxa73x8kbm530z5b01h0fk8fb"))))
 736     (build-system gnu-build-system)
 737     (arguments
 738      `(#:tests? #f                      ; no test suite
 739        #:make-flags (list "CC=gcc"
 740                           (string-append "prefix=" (assoc-ref %outputs "out")))
 741        #:phases
 742        (modify-phases %standard-phases
 743          (delete 'configure)            ; no configure script
 744          (add-before 'build 'setenv
 745            (lambda _
 746              (setenv "HAVE_ICONV" "1")
 747              #t)))))
 748     (inputs
 749      `(("libidn2" ,libidn2)))
 750     (native-inputs
 751      `(("gettext" ,gettext-minimal)
 752        ("perl" ,perl)
 753        ("pkg-config" ,pkg-config)))
 754     (synopsis "Intelligent client for the WHOIS directory service")
 755     (description
 756       "whois searches for an object in a @dfn{WHOIS} (RFC 3912) database.
 757 It is commonly used to look up the registered users or assignees of an Internet
 758 resource, such as a domain name, an IP address block, or an autonomous system.
 759 It can automatically select the appropriate server for most queries.
 760
 761 For historical reasons, this package also includes @command{mkpasswd}, which
 762 encrypts passwords using @code{crypt(3)} and is unrelated to the Expect command
 763 of the same name.")
 764     (home-page "https://github.com/rfc1036/whois")
 765     (license license:gpl2+)))
 766
 767 (define-public wireshark
 768   (package
 769     (name "wireshark")
 770     (version "3.2.4")
 771     (source
 772      (origin
 773        (method url-fetch)
 774        (uri (string-append "https://www.wireshark.org/download/src/wireshark-"
 775                            version ".tar.xz"))
 776        (sha256
 777         (base32 "1amqgn94g6h6cfnsccm2zb4c73pfv1qmzi1i6h1hnbcyhhg4czfi"))))
 778     (build-system cmake-build-system)
 779     (arguments
 780      `(#:phases
 781        (modify-phases %standard-phases
 782          (add-after 'unpack 'remove-failing-test
 783            ;; Test 31/32 fails with errors like "Program reassemble_test is
 784            ;; not available".  Skipping it for now.
 785            (lambda _
 786              (substitute* "CMakeLists.txt"
 787                (("suite_unittests" all) (string-append "# " all)))
 788              #t)))
 789        ;; Build process chokes during `validate-runpath' phase.
 790        ;;
 791        ;; Errors are like the following:
 792        ;; "/gnu/store/...wireshark-3.0.0/lib/wireshark/plugins/3.0/epan/ethercat.so:
 793        ;; error: depends on 'libwireshark.so.12', which cannot be found in
 794        ;; RUNPATH".  That is, "/gnu/store/...wireshark-3.0.0./lib" doesn't
 795        ;; belong to RUNPATH.
 796        ;;
 797        ;; That’s not a problem in practice because "ethercat.so" is a plugin,
 798        ;; so it’s dlopen’d by a process that already provides "libwireshark".
 799        ;; For now, we disable this phase.
 800        #:validate-runpath? #f))
 801     (inputs
 802      `(("c-ares" ,c-ares)
 803        ("glib" ,glib)
 804        ("gnutls" ,gnutls)
 805        ("libcap" ,libcap)
 806        ("libgcrypt" ,libgcrypt)
 807        ("libnl" ,libnl)
 808        ("libpcap" ,libpcap)
 809        ("libssh" ,libssh)
 810        ("libxml2" ,libxml2)
 811        ("lz4" ,lz4)
 812        ("lua" ,lua-5.2)                 ;Lua 5.3 unsupported
 813        ("krb5" ,mit-krb5)
 814        ("qtbase" ,qtbase)
 815        ("qtmultimedia" ,qtmultimedia)
 816        ("qtsvg" ,qtsvg)
 817        ("sbc" ,sbc)
 818        ("snappy" ,snappy)
 819        ("zlib" ,zlib)))
 820     (native-inputs
 821      `(("bison" ,bison)
 822        ("doxygen" ,doxygen)
 823        ("flex" ,flex)
 824        ("gettext" ,gettext-minimal)
 825        ("perl" ,perl)
 826        ("pkg-config" ,pkg-config)
 827        ("python" ,python-wrapper)
 828        ("qttools" ,qttools)))
 829     (synopsis "Network traffic analyzer")
 830     (description "Wireshark is a network protocol analyzer, or @dfn{packet
 831 sniffer}, that lets you capture and interactively browse the contents of
 832 network frames.")
 833     (home-page "https://www.wireshark.org/")
 834     (license license:gpl2+)))
 835
 836 (define-public fping
 837   (package
 838     (name "fping")
 839     (version "4.2")
 840     (source
 841      (origin
 842        (method url-fetch)
 843        (uri (string-append "https://fping.org/dist/fping-"
 844                            version ".tar.gz"))
 845        (sha256
 846         (base32 "0jmnf4vmr43aiwk3h2b5qdsb95gxar8gz1yli8fswnm9nrs9ccvx"))))
 847     (build-system gnu-build-system)
 848     (home-page "https://fping.org/")
 849     (synopsis "Send ICMP ECHO_REQUEST packets to network hosts")
 850     (description
 851      "fping is a ping like program which uses the Internet Control Message
 852 Protocol (ICMP) echo request to determine if a target host is responding.
 853 fping differs from ping in that you can specify any number of targets on the
 854 command line, or specify a file containing the lists of targets to ping.
 855 Instead of sending to one target until it times out or replies, fping will
 856 send out a ping packet and move on to the next target in a round-robin
 857 fashion.")
 858     (license license:expat)))
 859
 860 (define-public gandi.cli
 861   (package
 862     (name "gandi.cli")
 863     (version "1.5")
 864     (source
 865      (origin
 866        (method url-fetch)
 867        (uri (pypi-uri name version))
 868        (sha256
 869         (base32 "110wc9zgxsrvw4yzp21p0ian5lcf7vhcpxhnmsc4fg9pzl2bwxd5"))))
 870     (build-system python-build-system)
 871     (arguments
 872      `(#:phases
 873        (modify-phases %standard-phases
 874          (add-after 'unpack 'embed-store-file-names
 875            (lambda _
 876              (substitute* (list "gandi/cli/modules/cert.py"
 877                                 "gandi/cli/tests/commands/test_certificate.py")
 878                (("openssl") (which "openssl")))
 879              #t))
 880          (add-after 'install 'install-documentation
 881            ;; The included man page may be outdated but we install it anyway,
 882            ;; since it's mentioned in 'gandi --help' and better than nothing.
 883            (lambda* (#:key outputs #:allow-other-keys)
 884              (let* ((out  (assoc-ref outputs "out"))
 885                     (man1 (string-append out "/share/man/man1")))
 886                (mkdir-p man1)
 887                (with-output-to-file (string-append man1 "/gandi.1")
 888                  (lambda _
 889                    (invoke "rst2man.py" "gandicli.man.rst")))
 890                #t))))))
 891     (native-inputs
 892      `(("python-docutils" ,python-docutils)   ; for rst2man.py
 893        ("python-pytest-cov" ,python-pytest-cov)
 894        ("python-tox" ,python-tox)))
 895     (inputs
 896      `(("openssl" ,openssl)
 897        ("python-click" ,python-click)
 898        ("python-ipy" ,python-ipy)
 899        ("python-pyyaml" ,python-pyyaml)
 900        ("python-requests" ,python-requests)))
 901     (home-page "https://cli.gandi.net")
 902     (synopsis "Command-line interface to the Gandi.net Web API")
 903     (description
 904      "This package provides a command-line client (@command{gandi}) to buy,
 905 manage, and delete Internet resources from Gandi.net such as domain names,
 906 virtual machines, and certificates.")
 907     (license license:gpl3+)))
 908
 909 (define-public go-netns
 910   (let ((commit "13995c7128ccc8e51e9a6bd2b551020a27180abd")
 911         (revision "1"))
 912     (package
 913       (name "go-netns")
 914       (version (git-version "0.0.0" revision commit))
 915       (source (origin
 916                 (method git-fetch)
 917                 (uri (git-reference
 918                       (url "https://github.com/vishvananda/netns.git")
 919                       (commit commit)))
 920                 (file-name (git-file-name name version))
 921                 (sha256
 922                  (base32
 923                   "1zk6w8158qi4niva5rijchbv9ixgmijsgqshh54wdaav4xrhjshn"))))
 924       (build-system go-build-system)
 925       (arguments
 926        `(#:import-path "github.com/vishvananda/netns"
 927          #:tests? #f))                  ;tests require root privileges
 928       (home-page "https://github.com/vishvananda/netns")
 929       (synopsis "Simple network namespace handling for Go")
 930       (description "The netns package provides a simple interface for
 931 handling network namespaces in Go.")
 932       (license license:asl2.0))))
 933
 934 (define-public go-sctp
 935   ;; docker-libnetwork-cmd-proxy requires this exact commit.
 936   (let ((commit "07191f837fedd2f13d1ec7b5f885f0f3ec54b1cb")
 937         (revision "1"))
 938     (package
 939       (name "go-sctp")
 940       (version (git-version "0.0.0" revision commit))
 941       (source (origin
 942                 (method git-fetch)
 943                 (uri (git-reference
 944                       (url "https://github.com/ishidawataru/sctp.git")
 945                       (commit commit)))
 946                 (file-name (git-file-name name version))
 947                 (sha256
 948                  (base32
 949                   "1mk9ncm10gwi5pn5wcw4skbyf4qg7n5qdf1mim4gf3mrckvi6g6h"))))
 950       (build-system go-build-system)
 951       (arguments
 952        `(#:import-path "github.com/ishidawataru/sctp"))
 953       (home-page "https://github.com/ishidawataru/sctp")
 954       (synopsis "SCTP library for the Go programming language")
 955       (description "This library provides methods for using the stream control
 956 transmission protocol (SCTP) in a Go application.")
 957       (license license:asl2.0))))
 958
 959 (define-public httping
 960   (package
 961     (name "httping")
 962     (version "2.5")
 963     (source
 964      (origin
 965        (method url-fetch)
 966        (uri (string-append "https://www.vanheusden.com/httping/httping-"
 967                            version ".tgz"))
 968        (sha256
 969         (base32
 970          "1y7sbgkhgadmd93x1zafqc4yp26ssiv16ni5bbi9vmvvdl55m29y"))))
 971     (build-system gnu-build-system)
 972     (native-inputs
 973      `(("gettext" ,gettext-minimal)))
 974     (inputs
 975      `(("fftw" ,fftw)
 976        ("ncurses" ,ncurses)
 977        ("openssl" ,openssl)))
 978     (arguments
 979      `(#:make-flags (list "CC=gcc"
 980                           (string-append "DESTDIR=" (assoc-ref %outputs "out"))
 981                           "PREFIX=")
 982        #:tests? #f)) ; no tests
 983     (home-page "https://www.vanheusden.com/httping/")
 984     (synopsis "Web server latency and throughput monitor")
 985     (description
 986      "httping measures how long it takes to connect to a web server, send an
 987 HTTP(S) request, and receive the reply headers.  It is somewhat similar to
 988 @command{ping}, but can be used even in cases where ICMP traffic is blocked
 989 by firewalls or when you want to monitor the response time of the actual web
 990 application stack itself.")
 991     (license license:gpl2)))        ; with permission to link with OpenSSL
 992
 993 (define-public httpstat
 994   (package
 995     (name "httpstat")
 996     (version "1.2.1")
 997     (source
 998      (origin
 999        (method url-fetch)
1000        (uri (pypi-uri "httpstat" version))
1001        (sha256
1002         (base32
1003          "1chw2nk56vaq87aba012a270k9na06hfx1pfbsrc3jfvlc2kb9hb"))))
1004     (build-system python-build-system)
1005     (inputs `(("curl" ,curl)))
1006     (arguments
1007      '(#:phases
1008        (modify-phases %standard-phases
1009          (add-before 'build 'fix-curl-path
1010            (lambda* (#:key inputs #:allow-other-keys)
1011              (substitute* "httpstat.py"
1012                (("ENV_CURL_BIN.get\\('curl'\\)")
1013                 (string-append "ENV_CURL_BIN.get('"
1014                                (assoc-ref inputs "curl")
1015                                "/bin/curl')")))
1016              #t)))))
1017     (home-page "https://github.com/reorx/httpstat")
1018     (synopsis "Visualize curl statistics")
1019     (description
1020      "@command{httpstat} is a tool to visualize statistics from the
1021 @command{curl} HTTP client.  It acts as a wrapper for @command{curl} and
1022 prints timing information for each step of the HTTP request (DNS lookup,
1023 TCP connection, TLS handshake and so on) in the terminal.")
1024     (license license:expat)))
1025
1026 (define-public squid
1027   (package
1028     (name "squid")
1029     (version "4.11")
1030     (source
1031      (origin
1032        (method url-fetch)
1033        (uri (string-append "http://www.squid-cache.org/Versions/v4/squid-"
1034                            version ".tar.xz"))
1035        (sha256
1036         (base32
1037           "0z986kykx539wjqd7mr8y0abf3z6hz8byf8fmmbky9hh4ihlgnaf"))))
1038     (build-system gnu-build-system)
1039     (arguments
1040      '(#:phases
1041        (modify-phases %standard-phases
1042          (add-before 'build 'fix-true-path
1043            (lambda* (#:key inputs #:allow-other-keys)
1044              (substitute* "test-suite/testheaders.sh"
1045                (("/bin/true")
1046                 (string-append (assoc-ref inputs "coreutils")
1047                                "/bin/true")))
1048              #t)))))
1049     (inputs
1050      `(("perl" ,perl)
1051        ("openldap" ,openldap)
1052        ("linux-pam" ,linux-pam)
1053        ("libcap" ,libcap)
1054        ("cyrus-sasl" ,cyrus-sasl)
1055        ("expat" ,expat)
1056        ("libxml2" ,libxml2)
1057        ("openssl" ,openssl)))
1058     (native-inputs
1059      `(("cppunit" ,cppunit)
1060        ("pkg-config" ,pkg-config)))
1061     (synopsis "Web caching proxy")
1062     (description "Squid is a caching proxy for the Web supporting HTTP, HTTPS,
1063 FTP, and more.  It reduces bandwidth and improves response times by caching and
1064 reusing frequently-requested web pages.")
1065     (home-page "http://www.squid-cache.org/")
1066     (license license:gpl2+)))
1067
1068 (define-public bwm-ng
1069   (package
1070     (name "bwm-ng")
1071     (version "0.6.2")
1072     (source
1073      (origin
1074        (method git-fetch)
1075        (uri (git-reference
1076              (url "https://github.com/vgropp/bwm-ng.git")
1077              (commit (string-append "v" version))))
1078        (file-name (git-file-name name version))
1079        (sha256
1080         (base32 "0k906wb4pw3dcqpcwnni78lahzi3bva483f8c17sjykic7as4y5n"))))
1081     (build-system gnu-build-system)
1082     (arguments
1083      `(#:phases
1084        (modify-phases %standard-phases
1085          (add-after 'unpack 'disable-premature-./configure
1086            (lambda _
1087              (substitute* "autogen.sh"
1088                (("\\$srcdir/configure")
1089                 "true"))
1090              #t)))))
1091     (native-inputs
1092      `(("autoconf" ,autoconf)
1093        ("automake" ,automake)))
1094     (inputs
1095      `(("ncurses" ,ncurses)))
1096     (synopsis "Console based live network and disk I/O bandwidth monitor")
1097     (description "Bandwidth Monitor NG is a small and simple console based
1098 live network and disk I/O bandwidth monitor.")
1099     (home-page "https://www.gropp.org/?id=projects&sub=bwm-ng")
1100     (license license:gpl2)))
1101
1102 (define-public aircrack-ng
1103   (package
1104     (name "aircrack-ng")
1105     (version "1.6")
1106     (source
1107      (origin
1108        (method url-fetch)
1109        (uri (string-append "https://download.aircrack-ng.org/aircrack-ng-"
1110                            version ".tar.gz"))
1111        (sha256
1112         (base32 "0ix2k64qg7x3w0bzdsbk1m50kcpq1ws59g3zkwiafvpwdr4gs2sg"))))
1113     (build-system gnu-build-system)
1114     (native-inputs
1115      `(("autoconf" ,autoconf)
1116        ("automake" ,automake)
1117        ("libtool" ,libtool)
1118        ("pkg-config" ,pkg-config)
1119        ("which" ,which)))
1120     (inputs
1121      `(("libgcrypt" ,libgcrypt)
1122        ("libnl" ,libnl)
1123        ("libpcap" ,libpcap)
1124        ("ethtool" ,ethtool)
1125        ("pcre" ,pcre)
1126        ("sqlite" ,sqlite)
1127        ("zlib" ,zlib)))
1128     (arguments
1129      `(#:configure-flags
1130        (list "--with-experimental=yes"  ; build wesside-ng, etc.
1131              "--with-gcrypt")           ; openssl's the default
1132        #:phases (modify-phases %standard-phases
1133                   (add-before 'bootstrap 'patch-evalrev
1134                     (lambda _
1135                       ;; Called by ./autogen.sh below, before the default
1136                       ;; ‘patch-shebangs’ phase has had a chance to run.
1137                       (substitute* "evalrev"
1138                         (("/bin/sh")
1139                          (which "sh")))
1140                       #t))
1141                   (add-after 'build 'absolutize-tools
1142                     (lambda* (#:key inputs #:allow-other-keys)
1143                       (let ((ethtool (string-append (assoc-ref inputs "ethtool")
1144                                                     "/sbin/ethtool")))
1145                         (substitute* "scripts/airmon-ng"
1146                           (("ethtool ")
1147                            (string-append ethtool " ")))
1148                         #t))))))
1149     (home-page "https://www.aircrack-ng.org")
1150     (synopsis "Assess WiFi network security")
1151     (description
1152      "Aircrack-ng is a complete suite of tools to assess WiFi network
1153 security.  It focuses on different areas of WiFi security: monitoring,
1154 attacking, testing, and cracking.  All tools are command-line driven, which
1155 allows for heavy scripting.")
1156     (license (list license:gpl2+ license:bsd-3))))
1157
1158 (define-public pixiewps
1159   (package
1160     (name "pixiewps")
1161     (version "1.4.2")
1162     (source (origin
1163               (method url-fetch)
1164               (uri (string-append
1165                     "https://github.com/wiire-a/pixiewps/releases/"
1166                     "download/v" version "/" name "-" version ".tar.xz"))
1167               (sha256
1168                (base32
1169                 "07nym6bqml0k9v29vnj003nrgnwrywgjvnljb7cdpsvnwilhbp64"))))
1170     (build-system gnu-build-system)
1171     (arguments
1172      '(#:make-flags
1173        (list "CC=gcc"
1174              (string-append "PREFIX=" (assoc-ref %outputs "out")))
1175        #:phases
1176        (modify-phases %standard-phases
1177          (delete 'configure)) ; no configure script
1178        #:tests? #f)) ; there are no tests
1179     (home-page "https://github.com/wiire-a/pixiewps/")
1180     (synopsis "Offline brute-force tool for Wi-Fi Protected Setup")
1181     (description "Pixiewps implements the pixie-dust attack to brute
1182 force the Wi-Fi Protected Setup (WPS) PIN by exploiting the low or
1183 non-existing entropy of some access points.")
1184     (license license:gpl3+)))
1185
1186 (define-public reaver
1187   (package
1188     (name "reaver")
1189     (version "1.6.6")
1190     (source (origin
1191               (method url-fetch)
1192               (uri (string-append
1193                     "https://github.com/t6x/reaver-wps-fork-t6x/releases/"
1194                     "download/v" version "/reaver-" version ".tar.xz"))
1195               (sha256
1196                (base32
1197                 "00k7mc81ifv0wma7k4v18mj498badbw5yls6c28qin3d1gda0ag3"))))
1198     (build-system gnu-build-system)
1199     (arguments
1200      `(#:configure-flags
1201        ;; Save session files to current directory instead of /var.
1202        (list "--enable-savetocurrent"
1203              "--localstatedir=/tmp/dummy") ; prevent creating /var during install
1204        #:phases
1205        (modify-phases %standard-phases
1206          (add-before 'configure 'change-directory
1207            (lambda _
1208              (chdir "src")
1209              #t))
1210          (add-after 'install 'install-doc
1211            (lambda* (#:key outputs #:allow-other-keys)
1212              (chdir "../docs")
1213              (let* ((out (assoc-ref outputs "out"))
1214                     (doc (string-append out "/share/doc/" ,name "-" ,version))
1215                     (man1 (string-append out "/share/man/man1")))
1216                (for-each (lambda (file) (install-file file doc))
1217                          (find-files "." "README.*"))
1218                (install-file "reaver.1" man1)
1219                #t))))
1220        #:tests? #f))                    ; there are no tests
1221     (inputs
1222      `(("libpcap" ,libpcap)))
1223     (propagated-inputs
1224      `(("aircrack-ng" ,aircrack-ng)
1225        ("pixiewps" ,pixiewps)))
1226     (home-page "https://github.com/t6x/reaver-wps-fork-t6x/")
1227     (synopsis "Attack tool for Wi-Fi Protected Setup")
1228     (description "Reaver performs a brute force attack against an access
1229 point's Wi-Fi Protected Setup (WPS) PIN.  Once the PIN is found, the WPA
1230 passphrase can be recovered and the AP's wireless settings can be
1231 reconfigured.")
1232     (license license:gpl2+)))
1233
1234 (define-public perl-danga-socket
1235   (package
1236     (name "perl-danga-socket")
1237     (version "1.62")
1238     (source
1239      (origin
1240        (method url-fetch)
1241        (uri (string-append "mirror://cpan/authors/id/N/NM/NML/"
1242                            "Danga-Socket-" version ".tar.gz"))
1243        (sha256
1244         (base32 "0x4bvirmf0kphks19jwgva00zz73zx344218dfaiv8gigrw3yg4m"))))
1245     (build-system perl-build-system)
1246     (native-inputs
1247      `(("perl-test-tcp" ,perl-test-tcp)))
1248     (propagated-inputs
1249      `(("perl-sys-syscall" ,perl-sys-syscall)))
1250     (home-page "https://metacpan.org/release/Danga-Socket")
1251     (synopsis "Event loop and event-driven async socket base class")
1252     (description
1253      "Danga::Socket is an abstract base class for objects backed by a socket
1254 which provides the basic framework for event-driven asynchronous IO, designed
1255 to be fast.  Danga::Socket is both a base class for objects, and an event
1256 loop.")
1257     (license license:perl-license)))
1258
1259 (define-public perl-data-validate-ip
1260   (package
1261     (name "perl-data-validate-ip")
1262     (version "0.27")
1263     (source
1264      (origin
1265        (method url-fetch)
1266        (uri (string-append
1267              "mirror://cpan/authors/id/D/DR/DROLSKY/Data-Validate-IP-"
1268              version ".tar.gz"))
1269        (sha256
1270         (base32 "1mmppyzsh1w2z2h86kvzqxy56wxgs62a3kf8nvcnz76bblir5ap1"))))
1271     (build-system perl-build-system)
1272     (native-inputs
1273      `(("perl-test-requires" ,perl-test-requires)))
1274     (propagated-inputs
1275      `(("perl-netaddr-ip" ,perl-netaddr-ip)))
1276     (home-page "https://metacpan.org/release/Data-Validate-IP")
1277     (synopsis "IPv4 and IPv6 validation methods")
1278     (description
1279      "This module provides several IP address validation subroutines that both
1280 validate and untaint their input.  This includes both basic validation
1281 (@code{is_ipv4()} and @code{is_ipv6()}) and special cases like checking whether
1282 an address belongs to a specific network or whether an address is public or
1283 private (reserved).")
1284     (license license:perl-license)))
1285
1286 (define-public perl-net-dns
1287  (package
1288   (name "perl-net-dns")
1289   (version "1.21")
1290   (source
1291     (origin
1292       (method url-fetch)
1293       (uri
1294        (list
1295         (string-append "https://www.net-dns.org/download/Net-DNS-"
1296                        version ".tar.gz")
1297         (string-append "mirror://cpan/authors/id/N/NL/NLNETLABS/Net-DNS-"
1298                        version ".tar.gz")))
1299       (sha256
1300        (base32 "0yknrsh0wqr9s43c0wf3dyzrsi2r7k0v75hay74gqkq850xy3vyx"))))
1301   (build-system perl-build-system)
1302   (inputs
1303     `(("perl-digest-hmac" ,perl-digest-hmac)))
1304   (home-page "https://www.net-dns.org/")
1305   (synopsis
1306     "Perl Interface to the Domain Name System")
1307   (description "Net::DNS is the Perl Interface to the Domain Name System.")
1308   (license license:x11)))
1309
1310 (define-public perl-socket6
1311  (package
1312   (name "perl-socket6")
1313   (version "0.29")
1314   (source
1315     (origin
1316       (method url-fetch)
1317       (uri (string-append
1318              "mirror://cpan/authors/id/U/UM/UMEMOTO/Socket6-"
1319              version
1320              ".tar.gz"))
1321       (sha256
1322         (base32
1323           "054izici8klfxs8hr5rljib28plijpsfymy99xbzdp047bx1b2a6"))))
1324   (build-system perl-build-system)
1325   (arguments
1326    `(#:phases
1327      (modify-phases %standard-phases
1328          (replace 'configure
1329            (lambda* (#:key outputs #:allow-other-keys)
1330              (let* ((out (assoc-ref outputs "out"))
1331                     (args `("Makefile.PL"
1332                             ,(string-append "PREFIX=" out)
1333                             "INSTALLDIRS=site")))
1334                (setenv "CONFIG_SHELL" (which "sh"))
1335                (apply invoke "perl" args)))))))
1336   (home-page "https://metacpan.org/release/Socket6")
1337   (synopsis
1338     "IPv6 related part of the C socket.h defines and structure manipulators for Perl")
1339   (description "Socket6 binds the IPv6 related part of the C socket header
1340 definitions and structure manipulators for Perl.")
1341   (license license:bsd-3)))
1342
1343 (define-public perl-net-dns-resolver-programmable
1344  (package
1345   (name "perl-net-dns-resolver-programmable")
1346   (version "v0.003")
1347   (source
1348     (origin
1349       (method url-fetch)
1350       (uri (string-append
1351              "mirror://cpan/authors/id/J/JM/JMEHNLE/net-dns-resolver-programmable/"
1352              "Net-DNS-Resolver-Programmable-" version ".tar.gz"))
1353       (sha256
1354         (base32
1355           "1v3nl2kaj4fs55n1617n53q8sa3mir06898vpy1rq98zjih24h4d"))
1356       (patches
1357        (search-patches "perl-net-dns-resolver-programmable-fix.patch"))))
1358   (build-system perl-build-system)
1359   (native-inputs
1360     `(("perl-module-build" ,perl-module-build)))
1361   (inputs `(("perl-net-dns" ,perl-net-dns)))
1362   (home-page
1363     "https://metacpan.org/release/Net-DNS-Resolver-Programmable")
1364   (synopsis
1365     "Programmable DNS resolver class for offline emulation of DNS")
1366   (description "Net::DNS::Resolver::Programmable is a programmable DNS resolver for
1367 offline emulation of DNS.")
1368   (license license:perl-license)))
1369
1370 (define-public perl-net-dns-resolver-mock
1371   (package
1372     (name "perl-net-dns-resolver-mock")
1373     (version "1.20171219")
1374     (source (origin
1375               (method url-fetch)
1376               (uri (string-append
1377                      "mirror://cpan/authors/id/M/MB/MBRADSHAW/"
1378                      "Net-DNS-Resolver-Mock-" version ".tar.gz"))
1379               (sha256
1380                (base32
1381                 "0m3rxpkv1b9121srvbqkrgzg4m8mnydiydqv34in1i1ixwrl6jn9"))))
1382     (build-system perl-build-system)
1383     (inputs
1384      `(("perl-net-dns" ,perl-net-dns)))
1385     (home-page "https://metacpan.org/release/Net-DNS-Resolver-Mock")
1386     (synopsis "Mock DNS Resolver object for testing")
1387     (description
1388      "Net::DNS::Resolver::Mock is a subclass of Net::DNS::Resolver, but returns
1389 static data from any provided DNS zone file instead of querying the network.
1390 It is intended primarily for use in testing.")
1391     (license license:perl-license)))
1392
1393 (define-public perl-netaddr-ip
1394  (package
1395   (name "perl-netaddr-ip")
1396   (version "4.079")
1397   (source
1398     (origin
1399       (method url-fetch)
1400       (uri (string-append
1401              "mirror://cpan/authors/id/M/MI/MIKER/NetAddr-IP-"
1402              version
1403              ".tar.gz"))
1404       (sha256
1405         (base32
1406           "1rx0dinrz9fk9qcg4rwqq5n1dm3xv2arymixpclcv2q2nzgq4npc"))))
1407   (build-system perl-build-system)
1408   (arguments
1409     `(#:phases
1410        (modify-phases %standard-phases
1411          (replace 'configure
1412            (lambda* (#:key outputs #:allow-other-keys)
1413              (let* ((out (assoc-ref outputs "out"))
1414                     (args `("Makefile.PL"
1415                             ,(string-append "PREFIX=" out)
1416                             "INSTALLDIRS=site")))
1417                (setenv "CONFIG_SHELL" (which "sh"))
1418                (apply invoke "perl" args)))))))
1419   (home-page
1420     "https://metacpan.org/release/NetAddr-IP")
1421   (synopsis
1422     "Manages IPv4 and IPv6 addresses and subnets")
1423   (description "NetAddr::IP manages IPv4 and IPv6 addresses and subsets.")
1424   (license license:perl-license)))
1425
1426 (define-public perl-net-patricia
1427  (package
1428   (name "perl-net-patricia")
1429   (version "1.22")
1430   (source
1431     (origin
1432       (method url-fetch)
1433       (uri (string-append
1434              "mirror://cpan/authors/id/G/GR/GRUBER/Net-Patricia-"
1435              version
1436              ".tar.gz"))
1437       (sha256
1438         (base32
1439           "0ln5f57vc8388kyh9vhx2infrdzfhbpgyby74h1qsnhwds95m0vh"))))
1440   (build-system perl-build-system)
1441   (arguments
1442    '(#:phases
1443      (modify-phases %standard-phases
1444        (add-after 'unpack 'dont-link-with-nsl ; Borrowed from Debian.
1445          (lambda _
1446            (substitute* "Makefile.PL"
1447              (("-lnsl") ""))
1448            #t)))))
1449   (inputs
1450     `(("perl-net-cidr-lite" ,perl-net-cidr-lite)
1451       ("perl-socket6" ,perl-socket6)))
1452   (home-page
1453     "https://metacpan.org/release/Net-Patricia")
1454   (synopsis
1455     "Patricia Trie Perl module for fast IP address lookups")
1456   (description
1457     "Net::Patricia does IP address lookups quickly in Perl.")
1458   ;; The bindings are licensed under GPL2 or later.
1459   ;; libpatricia is licensed under 2-clause BSD.
1460   (license (list license:gpl2+ license:bsd-2))))
1461
1462 (define-public perl-net-cidr-lite
1463  (package
1464   (name "perl-net-cidr-lite")
1465   (version "0.21")
1466   (source
1467     (origin
1468       (method url-fetch)
1469       (uri (string-append
1470              "mirror://cpan/authors/id/D/DO/DOUGW/Net-CIDR-Lite-"
1471              version
1472              ".tar.gz"))
1473       (sha256
1474         (base32
1475           "14shj73zbqmfjbp0qz1fs9j4p2dpvz5hfkm4qfdjbydflbl2b8fg"))))
1476   (build-system perl-build-system)
1477   (home-page
1478     "https://metacpan.org/release/Net-CIDR-Lite")
1479   (synopsis
1480     "Perl extension for merging IPv4 or IPv6 CIDR addresses")
1481   (description "Net::CIDR::Lite merges IPv4 or IPv6 CIDR addresses.")
1482   (license license:gpl1+)))
1483
1484 ;; TODO: Use the geolite-mirror-simple.pl script from the example
1485 ;; directory to stay current with the databases. How?
1486 (define-public perl-geo-ip
1487  (package
1488   (name "perl-geo-ip")
1489   (version "1.51")
1490   (source
1491     (origin
1492       (method url-fetch)
1493       (uri (string-append
1494              "mirror://cpan/authors/id/M/MA/MAXMIND/Geo-IP-"
1495              version
1496              ".tar.gz"))
1497       (sha256
1498         (base32
1499           "1fka8fr7fw6sh3xa9glhs1zjg3s2gfkhi7n7da1l2m2wblqj0c0n"))))
1500   (build-system perl-build-system)
1501   (home-page "https://metacpan.org/release/Geo-IP")
1502   (synopsis
1503     "Look up location and network information by IP Address in Perl")
1504   (description "The Perl module @code{Geo::IP}.  It looks up location and
1505 network information by IP Address.")
1506   (license license:perl-license)))
1507
1508 (define-public perl-io-socket-inet6
1509  (package
1510   (name "perl-io-socket-inet6")
1511   (version "2.72")
1512   (source
1513     (origin
1514       (method url-fetch)
1515       (uri (string-append
1516              "mirror://cpan/authors/id/S/SH/SHLOMIF/IO-Socket-INET6-"
1517              version
1518              ".tar.gz"))
1519       (sha256
1520         (base32
1521           "1fqypz6qa5rw2d5y2zq7f49frwra0aln13nhq5gi514j2zx21q45"))))
1522   (build-system perl-build-system)
1523   (native-inputs
1524     `(("perl-module-build" ,perl-module-build)
1525       ("perl-test-pod" ,perl-test-pod)
1526       ("perl-test-pod-coverage" ,perl-test-pod-coverage)))
1527   (inputs `(("perl-socket6" ,perl-socket6)))
1528   (arguments `(;; Need network socket API
1529                #:tests? #f))
1530   (home-page
1531     "https://metacpan.org/release/IO-Socket-INET6")
1532   (synopsis
1533     "Perl object interface for AF_INET/AF_INET6 domain sockets")
1534   (description "IO::Socket::INET6 is an interface for AF_INET/AF_INET6 domain
1535 sockets in Perl.")
1536   (license license:perl-license)))
1537
1538 (define-public libproxy
1539   (package
1540     (name "libproxy")
1541     (version "0.4.15")
1542     (source (origin
1543               (method url-fetch)
1544               (uri (string-append "https://github.com/libproxy/libproxy/"
1545                                   "releases/download/" version "/libproxy-"
1546                                   version ".tar.xz"))
1547               (sha256
1548                (base32
1549                 "0kvdrazlzwia876w988cmlypp253gwy6idlh8mjk958c29jb8kb5"))))
1550     (build-system cmake-build-system)
1551     (native-inputs
1552      `(("pkg-config" ,pkg-config)))
1553     (inputs
1554      `(("dbus" ,dbus)
1555        ("zlib" ,zlib)))
1556     (arguments
1557      `(#:phases
1558        (modify-phases %standard-phases
1559          (replace 'check
1560                   (lambda _
1561                     (invoke "ctest" "-E" "url-test"))))))
1562     (synopsis "Library providing automatic proxy configuration management")
1563     (description "Libproxy handles the details of HTTP/HTTPS proxy
1564 configuration for applications across all scenarios.  Applications using
1565 libproxy only have to specify which proxy to use.")
1566     (home-page "https://libproxy.github.io/libproxy")
1567     (license license:lgpl2.1+)))
1568
1569 (define-public proxychains-ng
1570   (package
1571     (name "proxychains-ng")
1572     (version "4.14")
1573     (source
1574      (origin
1575        (method url-fetch)
1576        (uri (string-append "http://ftp.barfooze.de/pub/sabotage/tarballs/"
1577                            "proxychains-ng-" version ".tar.xz"))
1578        (sha256
1579         (base32 "1bmhfbl1bzc87vl0xwr1wh5xvslfyc41nl2hqzhbj258p0sy004x"))))
1580     (build-system gnu-build-system)
1581     (arguments
1582      `(#:tests? #f                      ; there are no tests
1583        #:phases
1584        (modify-phases %standard-phases
1585          (add-after 'unpack 'fix-configure-script
1586            (lambda _
1587              ;; The configure script is very intolerant to unknown arguments,
1588              ;; such as "CONFIG_SHELL".
1589              (substitute* "configure"
1590                (("\\*\\) break ;;" line)
1591                 (string-append "[A-Z]*) shift ;;\n"
1592                                line)))
1593              #t))
1594          (add-before 'configure 'set-up-environment
1595            (lambda _
1596              (setenv "CC" "gcc")
1597              #t)))))
1598     (synopsis "Redirect any TCP connection through a proxy or proxy chain")
1599     (description "Proxychains-ng is a preloader which hooks calls to sockets
1600 in dynamically linked programs and redirects them through one or more SOCKS or
1601 HTTP proxies.")
1602     (home-page "https://github.com/rofl0r/proxychains-ng")
1603     (license license:gpl2+)))
1604
1605 (define-public enet
1606   (package
1607     (name "enet")
1608     (version "1.3.14")
1609     (source (origin
1610               (method url-fetch)
1611               (uri (string-append "http://enet.bespin.org/download/"
1612                                   "enet-" version ".tar.gz"))
1613               (sha256
1614                (base32
1615                 "0w780zc6cy8yq4cskpphx0f91lzh51vh9lwyc5ll8hhamdxgbxlq"))))
1616     (build-system gnu-build-system)
1617     (native-inputs
1618      `(("pkg-config" ,pkg-config)))
1619     (synopsis "Network communication layer on top of UDP")
1620     (description
1621      "ENet's purpose is to provide a relatively thin, simple and robust network
1622 communication layer on top of UDP.  The primary feature it provides is optional
1623 reliable, in-order delivery of packets.  ENet omits certain higher level
1624 networking features such as authentication, server discovery, encryption, or
1625 other similar tasks that are particularly application specific so that the
1626 library remains flexible, portable, and easily embeddable.")
1627     (home-page "http://enet.bespin.org")
1628     (license license:expat)))
1629
1630 (define-public sslh
1631   (package
1632     (name "sslh")
1633     (version "1.20")
1634     (source
1635      (origin
1636        (method git-fetch)
1637        (uri (git-reference
1638              (url "https://github.com/yrutschle/sslh.git")
1639              (commit (string-append "v" version))))
1640        (file-name (git-file-name name version))
1641        (sha256
1642         (base32 "18zhkqlwfh6f5dg1a41a4p7p9g94dgb9nwls1ksy9r5yz174i2fx"))))
1643     (build-system gnu-build-system)
1644     (native-inputs
1645      `(;; Test dependencies.
1646        ("lcov" ,lcov)
1647        ("perl" ,perl)
1648        ("perl-conf-libconfig" ,perl-conf-libconfig)
1649        ("perl-io-socket-inet6" ,perl-io-socket-inet6)
1650        ("perl-socket6" ,perl-socket6)
1651        ("psmisc" ,psmisc)))             ; for ‘killall’
1652     (inputs
1653      `(("libcap" ,libcap)
1654        ("libconfig" ,libconfig)
1655        ("pcre" ,pcre)
1656        ("tcp-wrappers" ,tcp-wrappers)))
1657     (arguments
1658      '(#:phases
1659        (modify-phases %standard-phases
1660          (delete 'configure)            ; no configure script
1661          (add-before 'check 'fix-tests
1662            (lambda _
1663              (substitute* "./t"
1664                (("\"/tmp") "$ENV{\"TMPDIR\"} . \"")
1665                ;; The Guix build environment lacks ‘ip6-localhost’.
1666                (("ip6-localhost") "localhost"))
1667              #t))
1668          ;; Many of these files are mentioned in the man page. Install them.
1669          (add-after 'install 'install-documentation
1670            (lambda* (#:key outputs #:allow-other-keys)
1671              (let* ((out (assoc-ref outputs "out"))
1672                     (doc (string-append out "/share/doc/sslh")))
1673                (install-file "README.md" doc)
1674                (for-each
1675                 (lambda (file)
1676                   (install-file file (string-append doc "/examples")))
1677                 (append (find-files "." "\\.cfg")
1678                         (find-files "scripts"))))
1679              #t)))
1680        #:make-flags (list "CC=gcc"
1681                           "USELIBCAP=1"
1682                           "USELIBWRAP=1"
1683                           (string-append "PREFIX=" (assoc-ref %outputs "out")))
1684        #:test-target "test"))
1685     (home-page "https://www.rutschle.net/tech/sslh/README.html")
1686     (synopsis "Applicative network protocol demultiplexer")
1687     (description
1688      "sslh is a network protocol demultiplexer.  It acts like a switchboard,
1689 accepting connections from clients on one port and forwarding them to different
1690 servers based on the contents of the first received data packet.  Detection of
1691 common protocols like HTTP(S), SSL, SSH, OpenVPN, tinc, and XMPP is already
1692 implemented, but any other protocol that matches a regular expression can be
1693 added.  sslh's name comes from its original application of serving both SSH and
1694 HTTPS on port 443, allowing SSH connections from inside corporate firewalls
1695 that block port 22.")
1696     (license (list license:bsd-2        ; tls.[ch]
1697                    license:gpl2+))))    ; everything else
1698
1699 (define-public iperf
1700   (package
1701     (name "iperf")
1702     (version "3.7")
1703     (source (origin
1704               (method url-fetch)
1705               (uri (string-append "http://downloads.es.net/pub/iperf"
1706                                   "/iperf-" version ".tar.gz"))
1707               (sha256
1708                 (base32
1709                  "033is7b5grfbiil98jxlz4ixp9shm44x6hy8flpsyz1i4h108inq"))))
1710     (build-system gnu-build-system)
1711     (synopsis "TCP, UDP and SCTP bandwidth measurement tool")
1712     (description
1713      "iPerf is a tool to measure achievable bandwidth on IP networks.  It
1714 supports tuning of various parameters related to timing, buffers and
1715 protocols (TCP, UDP, SCTP with IPv4 and IPv6).  For each test it reports
1716 the bandwidth, loss, and other parameters.")
1717     (home-page "https://software.es.net/iperf/")
1718     (license (list license:bsd-3             ; Main distribution.
1719                    license:ncsa              ; src/{units,iperf_locale,tcp_window_size}.c
1720                    license:expat             ; src/{cjson,net}.[ch]
1721                    license:public-domain)))) ; src/portable_endian.h
1722
1723 (define-public nethogs
1724   (package
1725     (name "nethogs")
1726     (version "0.8.6")
1727     (source (origin
1728               (method url-fetch)
1729               (uri (string-append "https://github.com/raboof/nethogs/archive/v"
1730                                   version ".tar.gz"))
1731               (sha256
1732                (base32
1733                 "1875q9hx48g68pika7n51an879v3s10ir4sf95z6ggnl6m91sz1i"))
1734               (file-name (string-append name "-" version ".tar.gz"))))
1735     (build-system gnu-build-system)
1736     (inputs
1737      `(("libpcap" ,libpcap)
1738        ("ncurses" ,ncurses)))
1739     (arguments
1740      `(#:make-flags `("CC=gcc"
1741                       ,(string-append "PREFIX=" %output))
1742        #:phases
1743        (modify-phases %standard-phases
1744          (delete 'configure))))         ; no ./configure script.
1745     (home-page "https://github.com/raboof/nethogs")
1746     (synopsis "Per-process bandwidth monitor")
1747     (description "NetHogs is a small 'net top' tool for Linux.  Instead of
1748 breaking the traffic down per protocol or per subnet, like most tools do, it
1749 groups bandwidth by process.
1750
1751 NetHogs does not rely on a special kernel module to be loaded.  If there's
1752 suddenly a lot of network traffic, you can fire up NetHogs and immediately see
1753 which PID is causing this.  This makes it easy to identify programs that have
1754 gone wild and are suddenly taking up your bandwidth.")
1755     (license license:gpl2+)))
1756
1757 (define-public nzbget
1758   (package
1759     (name "nzbget")
1760     (version "21.0")
1761     (source
1762      (origin
1763        (method url-fetch)
1764        (uri (string-append "https://github.com/nzbget/nzbget/archive/v"
1765                            version ".tar.gz"))
1766        (file-name (string-append name "-" version ".tar.gz"))
1767        (sha256
1768         (base32
1769          "0l3dzxz7d7jf6cyach41zirvsx1x0vs4nh053c0miycv7zjyrly7"))
1770        (modules '((guix build utils)))
1771        (snippet
1772         ;; Reported upstream as <https://github.com/nzbget/nzbget/pull/414>.
1773         '(begin
1774            (substitute* "daemon/connect/TlsSocket.cpp"
1775              (("gnutls_certificate-verification_status_print")
1776               "gnutls_certificate_verification_status_print"))
1777            #t))))
1778     (arguments
1779      `(#:configure-flags
1780        (list
1781         (string-append "--with-libcurses-includes="
1782                        (assoc-ref %build-inputs "ncurses") "/include")
1783         (string-append "--with-libcurses-libraries="
1784                        (assoc-ref %build-inputs "ncurses") "/lib")
1785         (string-append "--with-tlslib=GnuTLS"))))
1786     (build-system gnu-build-system)
1787     (inputs `(("gnutls" ,gnutls)
1788               ("libxml2" ,libxml2)
1789               ("ncurses" ,ncurses)
1790               ("zlib" ,zlib)))
1791     (native-inputs `(("pkg-config" ,pkg-config)))
1792     (home-page "https://github.com/nzbget/nzbget")
1793     (synopsis "Usenet binary file downloader")
1794     (description
1795      "NZBGet is a binary newsgrabber, which downloads files from Usenet based
1796 on information given in @code{nzb} files.  NZBGet can be used in standalone
1797 and in server/client modes.  In standalone mode, you pass NZBGet @command{nzb}
1798 files as command-line parameters and it downloads them and exits.  NZBGet also
1799 contains a Web interface.  Its server can be controlled through remote
1800 procedure calls (RPCs).")
1801     (license license:gpl2+)))
1802
1803 (define-public openvswitch
1804   (package
1805     (name "openvswitch")
1806     (version "2.12.0")
1807     (source (origin
1808               (method url-fetch)
1809               (uri (string-append
1810                     "https://www.openvswitch.org/releases/openvswitch-"
1811                     version ".tar.gz"))
1812               (sha256
1813                (base32
1814                 "1y78ix5inhhcvicbvyy2ij38am1215nr55vydhab3d4065q45z8k"))))
1815     (build-system gnu-build-system)
1816     (arguments
1817      '(;; FIXME: many tests fail with:
1818        ;;    […]
1819        ;;    test -e $OVS_RUNDIR/ovs-vswitchd.pid
1820        ;;    ovs-appctl -t ovs-vswitchd exit
1821        ;;    hard failure
1822        #:tests? #f
1823        #:configure-flags
1824        '("--enable-shared"
1825          "--localstatedir=/var"
1826          "--with-dbdir=/var/lib/openvswitch")
1827        #:phases
1828        (modify-phases %standard-phases
1829          (replace 'install
1830            (lambda _
1831              (invoke "make"
1832                      ;; Don't try to create directories under /var.
1833                      "RUNDIR=/tmp"
1834                      "PKIDIR=/tmp"
1835                      "LOGDIR=/tmp"
1836                      "DBDIR=/tmp"
1837                      "install"))))))
1838     (native-inputs
1839      `(("perl" ,perl)
1840        ("pkg-config" ,pkg-config)
1841        ("python" ,python-2)
1842        ;; for testing
1843        ("util-linux" ,util-linux)))
1844     (propagated-inputs
1845      `(("python-six" ,python2-six)))
1846     (inputs
1847      `(("libcap-ng" ,libcap-ng)
1848        ("openssl" ,openssl)))
1849     (synopsis "Virtual network switch")
1850     (home-page "https://www.openvswitch.org/")
1851     (description
1852      "Open vSwitch is a multilayer virtual switch.  It is designed to enable
1853 massive network automation through programmatic extension, while still
1854 supporting standard management interfaces and protocols (e.g. NetFlow, sFlow,
1855 IPFIX, RSPAN, CLI, LACP, 802.1ag).")
1856     (license                            ; see debian/copyright for detail
1857      (list license:lgpl2.1              ; xenserver and utilities/bugtool
1858            license:gpl2                 ; datapath
1859            license:bsd-2 license:bsd-3
1860            license:asl2.0))))           ; all other
1861
1862 (define-public python-ipy
1863   (package
1864     (name "python-ipy")
1865     (version "1.00")
1866     (source (origin
1867               (method url-fetch)
1868               (uri (pypi-uri "IPy" version))
1869               (sha256
1870                (base32
1871                 "08d6kcacj67mvh0b6y765ipccy6gi4w2ndd4v1l3im2qm1cgcarg"))))
1872     (build-system python-build-system)
1873     (home-page "https://github.com/autocracy/python-ipy/")
1874     (synopsis "Python class and tools for handling IP addresses and networks")
1875     (description "The @code{IP} class allows a comfortable parsing and
1876 handling for most notations in use for IPv4 and IPv6 addresses and
1877 networks.")
1878     (license license:bsd-3)))
1879
1880 (define-public python2-ipy
1881   (package-with-python2 python-ipy))
1882
1883 (define-public speedtest-cli
1884   (package
1885     (name "speedtest-cli")
1886     (version "2.1.2")
1887     (source
1888      (origin
1889        (method git-fetch)
1890        (uri (git-reference
1891              (url "https://github.com/sivel/speedtest-cli")
1892              (commit (string-append "v" version))))
1893        (file-name (git-file-name name version))
1894        (sha256
1895         (base32 "1456yly6iym2c9bl6pi4sz8xbw34bm2dxm1vzpydsd6jazwpmy26"))))
1896     (build-system python-build-system)
1897     (home-page "https://github.com/sivel/speedtest-cli")
1898     (synopsis "Internet bandwidth tester")
1899     (description
1900      "Command line interface for testing internet bandwidth using
1901 speedtest.net.")
1902     (license license:asl2.0)))
1903
1904 (define-public tftp-hpa
1905   (package
1906     (name "tftp-hpa")
1907     (version "5.2")
1908     (source (origin
1909               (method url-fetch)
1910               (uri (string-append "mirror://kernel.org/software/"
1911                                   "network/tftp/tftp-hpa/tftp-hpa-" version
1912                                   ".tar.xz"))
1913               (sha256
1914                (base32
1915                 "12vidchglhyc20znq5wdsbhi9mqg90jnl7qr9qs8hbvaz4fkdvmg"))))
1916     (build-system gnu-build-system)
1917     (arguments `(#:tests? #f)) ; no test target
1918     (synopsis "HPA's tftp client")
1919     (description
1920      "This is a tftp client derived from OpenBSD tftp with some extra options
1921 added and bugs fixed.  The source includes readline support but it is not
1922 enabled due to license conflicts between the BSD advertising clause and the GPL.")
1923     (home-page "https://git.kernel.org/cgit/network/tftp/tftp-hpa.git/about/")
1924     ;; Some source files are distributed under a 3-clause BSD license, and
1925     ;; others under a 4-clause BSD license. Refer to the files in the source
1926     ;; distribution for clarification.
1927     (license (list license:bsd-3 license:bsd-4))))
1928
1929 (define-public pidentd
1930   (package
1931     (name "pidentd")
1932     (version "3.0.19")
1933     (source
1934      (origin
1935        (method url-fetch)
1936        (uri (string-append "https://github.com/ptrrkssn/pidentd/archive/"
1937                            "v" version ".tar.gz"))
1938        (file-name (string-append name "-" version ".tar.gz"))
1939        (sha256
1940         (base32
1941          "0y3kd1bkydqkpc1qdff24yswysamsqivvadjy0468qri5730izgc"))))
1942     (build-system gnu-build-system)
1943     (arguments
1944      `(#:tests? #f)) ; No tests are included
1945     (inputs
1946      `(("openssl" ,openssl-1.0)))       ;for the DES library
1947     (home-page "https://www.lysator.liu.se/~pen/pidentd/")
1948     (synopsis "Small Ident Daemon")
1949     (description
1950      "@dfn{Pidentd} (Peter's Ident Daemon) is a identd, which implements a
1951 identification server.  Pidentd looks up specific TCP/IP connections and
1952 returns the user name and other information about the connection.")
1953     (license license:public-domain)))
1954
1955 (define-public spiped
1956   (package
1957     (name "spiped")
1958     (version "1.6.1")
1959     (source (origin
1960               (method url-fetch)
1961               (uri (string-append "https://www.tarsnap.com/spiped/spiped-"
1962                                   version ".tgz"))
1963               (sha256
1964                (base32
1965                 "04rpnc53whfky7pp2m9h35gwzwn6788pnl6c1qd576mpknbqjw4d"))))
1966     (build-system gnu-build-system)
1967     (arguments
1968      '(#:test-target "test"
1969        #:make-flags (let* ((out (assoc-ref %outputs "out"))
1970                            (bindir (string-append out "/bin"))
1971                            (man1dir (string-append out "/share/man/man1")))
1972                       (list "CC=gcc" ; It tries to invoke `c99`.
1973                             (string-append "BINDIR=" bindir)
1974                             (string-append "MAN1DIR=" man1dir)))
1975        #:phases
1976        (modify-phases %standard-phases
1977          (add-after 'unpack 'patch-command-invocations
1978            (lambda _
1979              (substitute* '("Makefile"
1980                             "libcperciva/cpusupport/Build/cpusupport.sh"
1981                             "libcperciva/POSIX/posix-cflags.sh"
1982                             "libcperciva/POSIX/posix-l.sh")
1983                (("command -p") ""))
1984              #t))
1985          (delete 'configure) ; No ./configure script.
1986          (add-after 'install 'install-more-docs
1987            (lambda* (#:key outputs #:allow-other-keys)
1988              (let* ((out (assoc-ref %outputs "out"))
1989                     (misc (string-append out "/share/doc/spiped")))
1990                (install-file "DESIGN.md" misc)
1991                #t))))))
1992     (native-inputs
1993      `(("procps" ,procps))) ; `ps` is used by the test suite.
1994     (inputs
1995      `(("openssl" ,openssl)))
1996     (home-page "https://www.tarsnap.com/spiped.html")
1997     (synopsis "Create secure pipes between sockets")
1998     (description "Spiped (pronounced \"ess-pipe-dee\") is a utility for creating
1999 symmetrically encrypted and authenticated pipes between socket addresses, so
2000 that one may connect to one address (e.g., a UNIX socket on localhost) and
2001 transparently have a connection established to another address (e.g., a UNIX
2002 socket on a different system).  This is similar to 'ssh -L' functionality, but
2003 does not use SSH and requires a pre-shared symmetric key.")
2004     (license license:bsd-2)))
2005
2006 (define-public quagga
2007   (package
2008     (name "quagga")
2009     (version "1.2.4")
2010     (source (origin
2011               (method url-fetch)
2012               (uri (string-append "mirror://savannah/quagga/quagga-"
2013                                   version ".tar.gz"))
2014               (sha256
2015                (base32
2016                 "1lsksqxij5f1llqn86pkygrf5672kvrqn1kvxghi169hqf1c0r73"))
2017               (patches
2018                (search-patches "quagga-reproducible-build.patch"))))
2019     (build-system gnu-build-system)
2020     (native-inputs `(("pkg-config" ,pkg-config)
2021                      ("perl" ,perl)
2022                      ("dejagnu" ,dejagnu)))
2023     (inputs `(("readline" ,readline)
2024               ("c-ares" ,c-ares)))
2025     (synopsis "Routing Software Suite")
2026     (description "Quagga is a routing software suite, providing implementations
2027 of OSPFv2, OSPFv3, RIP v1 and v2, RIPng and BGP-4 for Unix platforms.
2028
2029 The Quagga architecture consists of a core daemon, @command{zebra}, which
2030 acts as an abstraction layer to the underlying Unix kernel and presents the
2031 Zserv API over a Unix or TCP stream to Quagga clients.  It is these Zserv
2032 clients which typically implement a routing protocol and communicate routing
2033 updates to the zebra daemon.")
2034     (home-page "https://www.nongnu.org/quagga/")
2035     (license license:gpl2+)))
2036
2037 (define-public thc-ipv6
2038   (let ((revision "0")
2039         (commit "4bb72573e0950ce6f8ca2800a10748477020029e"))
2040     (package
2041       (name "thc-ipv6")
2042       (version (git-version "3.4" revision commit))
2043       (source (origin
2044                 (method git-fetch)
2045                 (uri (git-reference
2046                        (url "https://github.com/vanhauser-thc/thc-ipv6.git")
2047                        (commit commit)))
2048                 (file-name (git-file-name name version))
2049                 (sha256
2050                  (base32
2051                   "1x5i6vbsddqc2yks7r1a2fw2fk16qxvd6hpzh1lykjfpkal8fdir"))))
2052       (build-system gnu-build-system)
2053       (arguments
2054        `(#:make-flags (list (string-append "PREFIX=" (assoc-ref %outputs "out")))
2055          #:tests? #f ; No test suite.
2056          #:phases
2057          (modify-phases %standard-phases
2058            (delete 'configure) ; No ./configure script.
2059            (add-before 'build 'patch-paths
2060              (lambda _
2061                (substitute* "Makefile"
2062                  (("/bin/echo") "echo"))
2063                #t))
2064            (add-after 'install 'install-more-docs
2065              (lambda* (#:key outputs #:allow-other-keys)
2066                (let* ((out (assoc-ref outputs "out"))
2067                       (doc (string-append out "/share/thc-ipv6/doc")))
2068                  (install-file "README" doc)
2069                  (install-file "HOWTO-INJECT" doc)
2070                  #t))))))
2071       ;; TODO Add libnetfilter-queue once packaged.
2072       (inputs
2073        `(("libpcap" ,libpcap)
2074          ("openssl" ,openssl)
2075          ("perl" ,perl)))
2076       (home-page "https://github.com/vanhauser-thc/thc-ipv6")
2077       (synopsis "IPv6 security research toolkit")
2078       (description "The THC IPv6 Toolkit provides command-line tools and a library
2079 for researching IPv6 implementations and deployments.  It requires Linux 2.6 or
2080 newer and only works on Ethernet network interfaces.")
2081       ;; AGPL 3 with exception for linking with OpenSSL. See the 'LICENSE' file in
2082       ;; the source distribution for more information.
2083       (license license:agpl3))))
2084
2085 (define-public bmon
2086   (package
2087     (name "bmon")
2088     (version "4.0")
2089     (source
2090      (origin
2091        (method url-fetch)
2092        (uri (string-append "https://github.com/tgraf/bmon/releases/download/v"
2093                            version "/bmon-" version ".tar.gz"))
2094        (sha256
2095         (base32
2096          "0ylzriv4pwh76344abzl1w219x188gshbycbna35gsyfp09c7z82"))))
2097     (build-system gnu-build-system)
2098     (inputs
2099      `(("libconfuse" ,libconfuse)
2100        ("libnl" ,libnl)
2101        ("ncurses" ,ncurses)))
2102     (native-inputs
2103      `(("pkg-config" ,pkg-config)))
2104     (synopsis "Bandwidth monitor")
2105     (description "bmon is a monitoring and debugging tool to capture
2106 networking-related statistics and prepare them visually in a human-friendly
2107 way.  It features various output methods including an interactive curses user
2108 interface and a programmable text output for scripting.")
2109     (home-page "https://github.com/tgraf/bmon")
2110     ;; README.md mentions both the 2-clause BSD and expat licenses, but all
2111     ;; the source files only have expat license headers. Upstream has been
2112     ;; contacted for clarification: https://github.com/tgraf/bmon/issues/59
2113     ;; Update the license field when upstream responds.
2114     (license (list license:bsd-2
2115                    license:expat))))
2116
2117 (define-public libnet
2118   (package
2119     (name "libnet")
2120     (version "1.2-rc3")
2121     (source
2122      (origin
2123        (method git-fetch)
2124        (uri (git-reference
2125              (url "https://github.com/sam-github/libnet")
2126              (commit (string-append "libnet-" version))))
2127        (file-name (git-file-name name version))
2128        (sha256
2129         (base32
2130          "0cy8w4g5rv963v4p6iq3333kxgdddx2lywp70xf62553a25xhhs4"))))
2131     (build-system gnu-build-system)
2132     (arguments
2133      `(#:phases
2134        (modify-phases %standard-phases
2135          (add-after 'unpack 'chdir
2136            (lambda _ (chdir "libnet") #t))
2137          (add-before 'build 'build-doc
2138            (lambda* (#:key make-flags #:allow-other-keys)
2139              (apply invoke "make" "-C" "doc" "doc"
2140                     make-flags))))))
2141     (native-inputs
2142      `(("autoconf" ,autoconf)
2143        ("automake" ,automake)
2144        ("libtool" ,libtool)
2145        ("doxygen" ,doxygen)))
2146     (home-page "https://sourceforge.net/projects/libnet-dev/")
2147     (synopsis "Framework for low-level network packet construction")
2148     (description
2149      "Libnet provides a fairly portable framework for network packet
2150 construction and injection.  It features portable packet creation interfaces
2151 at the IP layer and link layer, as well as a host of supplementary
2152 functionality.  Using libnet, quick and simple packet assembly applications
2153 can be whipped up with little effort.")
2154     (license license:bsd-2)))
2155
2156 (define-public mtr
2157   (package
2158     (name "mtr")
2159     (version "0.93")
2160     (source
2161      (origin
2162        (method url-fetch)
2163        (uri (string-append "ftp://ftp.bitwizard.nl/mtr/"
2164                            "mtr-" version ".tar.gz"))
2165        (sha256
2166         (base32 "03gid8g4r6a9r40855s4345xm1bylj2kfqkicjwxpmvvccyng712"))))
2167     (build-system gnu-build-system)
2168     (inputs
2169      `(("libcap" ,libcap)
2170        ("ncurses" ,ncurses)))
2171     (arguments
2172      `(#:tests? #f))                    ; tests require network access
2173     (home-page "https://www.bitwizard.nl/mtr/")
2174     (synopsis "Network diagnostic tool")
2175     (description
2176      "@acronym{mtr, My TraceRoute} combines the functionality of the
2177 @command{traceroute} and @command{ping} programs in a single network diagnostic
2178 tool.  @command{mtr} can use several network protocols to detect intermediate
2179 routers (or @dfn{hops}) between the local host and a user-specified destination.
2180 It then continually measures the response time and packet loss at each hop, and
2181 displays the results in real time.")
2182     (license license:gpl2+)))
2183
2184 (define-public strongswan
2185   (package
2186     (name "strongswan")
2187     (version "5.8.4")
2188     (source
2189      (origin
2190        (method url-fetch)
2191        (uri (string-append "https://download.strongswan.org/strongswan-"
2192                            version ".tar.bz2"))
2193        (sha256
2194         (base32 "0g2m08gmgdi3qvvqz6zy7n16np53sp232xd0rdc2vdhk73img6id"))))
2195     (build-system gnu-build-system)
2196     (arguments
2197      `(#:phases
2198        (modify-phases %standard-phases
2199          (add-before 'build 'patch-command-file-names
2200            (lambda* (#:key inputs #:allow-other-keys)
2201              (substitute* "src/libstrongswan/utils/process.c"
2202                (("/bin/sh")
2203                 (string-append (assoc-ref inputs "bash") "/bin/sh")))
2204
2205              (substitute* "src/libstrongswan/tests/suites/test_process.c"
2206                (("/bin/sh") (which "sh"))
2207                (("/bin/echo") (which "echo"))
2208                (("cat") (which "cat")))
2209              #t))
2210          (add-before 'check 'set-up-test-environment
2211            (lambda* (#:key inputs #:allow-other-keys)
2212              (setenv "TZDIR" (string-append (assoc-ref inputs "tzdata")
2213                                             "/share/zoneinfo"))
2214              #t)))
2215        #:configure-flags
2216        (list
2217         ;; Disable bsd-4 licensed plugins.
2218         "--disable-des"
2219         "--disable-blowfish")))
2220     (inputs
2221      `(("curl" ,curl)
2222        ("gmp" ,gmp)
2223        ("libgcrypt" ,libgcrypt)
2224        ("openssl" ,openssl)))
2225     (native-inputs
2226      `(("coreutils" ,coreutils)
2227        ("tzdata" ,tzdata-for-tests)))
2228     (synopsis "IKEv1/v2 keying daemon")
2229     (description "StrongSwan is an IPsec implementation originally based upon
2230 the FreeS/WAN project.  It contains support for IKEv1, IKEv2, MOBIKE, IPv6,
2231 NAT-T and more.")
2232     (home-page "https://strongswan.org/")
2233     (license
2234      (list license:gpl2+
2235            ;; src/aikgen/*
2236            ;; src/libcharon/plugins/dnscert/*
2237            ;; src/libcharon/plugins/ext_auth/*
2238            ;; src/libcharon/plugins/vici/ruby/*
2239            ;; src/libcharon/plugins/xauth_pam/xauth_pam_listener.[ch]
2240            license:expat
2241            ;; src/inclue/sys/*
2242            license:bsd-3
2243            ;; src/libstrongswan/plugins/sha3/sha3_keccak.c
2244            license:public-domain
2245            ;; src/libstrongswan/plugins/pkcs11/pkcs11.h
2246            (license:non-copyleft
2247             "file://src/libstrongswan/plugins/pkcs11/pkcs11.h"
2248             "pkcs11 contains a unknown permissive license. View the specific
2249 file for more details.")
2250            ;; These files are not included in the
2251            ;; build, they are disabled through
2252            ;; options to ./configure
2253            ;;
2254            ;; src/libstrongswan/plugins/blowfish/bf_enc.c
2255            ;; src/libstrongswan/plugins/blowfish/bf_locl.h
2256            ;; src/libstrongswan/plugins/blowfish/bf_pi.h
2257            ;; src/libstrongswan/plugins/blowfish/bf_skey.c
2258            ;; src/libstrongswan/plugins/blowfish/blowfish_crypter.c
2259            ;; src/libstrongswan/plugins/des/des_crypter.c
2260            license:bsd-4))))
2261
2262 (define-public amule
2263   (package
2264     (name "amule")
2265     (version "2.3.2")
2266     (source (origin
2267               (method git-fetch)
2268               (uri (git-reference
2269                      (url "https://github.com/amule-project/amule")
2270                      (commit version)))
2271               (file-name (git-file-name name version))
2272               (sha256
2273                (base32
2274                 "010wxm6g9f92x6fympj501zbnjka32rzbx0sk3a2y4zpih5d2nsn"))
2275               ;; Patch for adopting crypto++ >= 6.0.
2276               (patches (search-patches "amule-crypto-6.patch"))))
2277     (build-system gnu-build-system)
2278     (arguments
2279      `(#:phases
2280        (modify-phases %standard-phases
2281          (delete 'bootstrap) ; bootstrap phase runs too early.
2282          (add-after 'patch-source-shebangs 'autogen
2283            (lambda _
2284              (invoke "sh" "autogen.sh")
2285              #t)))
2286        #:configure-flags
2287        '("--disable-rpath"
2288          "--enable-wxcas"
2289          "--enable-cas"
2290          "--enable-alc"
2291          "--enable-alcc"
2292          "--enable-xas"
2293          "--enable-amulecmd"
2294          "--enable-geoip"
2295          "--enable-ccache"
2296          "--enable-nls"
2297          "--enable-optimize"
2298          "--enable-amule-gui"
2299          "--enable-amule-daemon"
2300          "--enable-webserver"
2301          "--with-denoise-level=0")))
2302     (native-inputs
2303      `(("autoconf" ,autoconf)
2304        ("automake" ,automake)
2305        ("gettext-minimal" ,gettext-minimal)
2306        ("perl" ,perl)))
2307     (inputs
2308      `(("zlib" ,zlib)
2309        ("crypto++" ,crypto++)
2310        ("libpng" ,libpng)
2311        ("wxwidgets-gtk2" ,wxwidgets-gtk2)))
2312     (home-page "http://amule.org/")
2313     (synopsis "Peer-to-peer client for the eD2K and Kademlia networks")
2314     (description
2315      "aMule is an eMule-like client for the eD2k and Kademlia peer-to-peer
2316 file sharing networks.  It includes a graphical user interface (GUI), a daemon
2317 allowing you to run a client with no graphical interface, and a Web GUI for
2318 remote access.  The @command{amulecmd} command allows you to control aMule
2319 remotely.")
2320     (license license:gpl2+)))
2321
2322 (define-public zyre
2323   (package
2324     (name "zyre")
2325     (version "2.0.0")
2326     (source (origin
2327               (method url-fetch)
2328               (uri
2329                (string-append "https://github.com/zeromq/zyre/releases/download/v"
2330                               version "/" name "-" version ".tar.gz"))
2331               (sha256
2332                (base32
2333                 "0qz2730bng1gs9xbqxhkw88qbsmszgmmrl2g9k6xrg6r3bqvsdc7"))))
2334     (build-system gnu-build-system)
2335     (inputs `(("zeromq" ,zeromq)
2336               ("czmq" ,czmq)
2337               ("libsodium" ,libsodium)))
2338     (synopsis "Framework for proximity-based peer-to-peer applications")
2339     (description "Zyre provides reliable group messaging over local area
2340 networks using zeromq.  It has these key characteristics:
2341
2342 @itemize
2343 @item Zyre needs no administration or configuration.
2344 @item Peers may join and leave the network at any time.
2345 @item Peers talk to each other without any central brokers or servers.
2346 @item Peers can talk directly to each other.
2347 @item Peers can join groups, and then talk to groups.
2348 @item Zyre is reliable, and loses no messages even when the network is heavily loaded.
2349 @item Zyre is fast and has low latency, requiring no consensus protocols.
2350 @item Zyre is designed for WiFi networks, yet also works well on Ethernet networks.
2351 @end itemize")
2352     (home-page "https://github.com/zeromq/zyre")
2353     (license license:mpl2.0)))
2354
2355 (define-public can-utils
2356   (package
2357     (name "can-utils")
2358     (version "2018.02.0")
2359     (source (origin
2360               (method git-fetch)
2361               (uri (git-reference
2362                     (url "https://github.com/linux-can/can-utils.git")
2363                     (commit (string-append "v" version))))
2364               (file-name (git-file-name name version))
2365               (sha256
2366                (base32
2367                 "0r0zkm67bdcmbfypjr7z041d4zp0xzb379dyl8cvhmflh12fd2jb"))))
2368     (build-system gnu-build-system)
2369     (arguments
2370      `(#:tests? #f                      ; No tests exist.
2371        #:make-flags (list "CC=gcc"
2372                           (string-append "PREFIX="
2373                                          (assoc-ref %outputs "out")))
2374        #:phases
2375        (modify-phases %standard-phases
2376          (delete 'bootstrap)
2377          (delete 'configure))))
2378     (home-page "https://github.com/linux-can/can-utils")
2379     (synopsis "CAN utilities")
2380     (description "This package provides CAN utilities in the following areas:
2381
2382 @itemize
2383 @item Basic tools to display, record, generate and replay CAN traffic
2384 @item CAN access via IP sockets
2385 @item CAN in-kernel gateway configuration
2386 @item CAN bus measurement and testing
2387 @item ISO-TP (ISO15765-2:2016 - this means messages with a body larger than
2388 eight bytes) tools
2389 @item Log file converters
2390 @item Serial Line Discipline configuration for slcan driver
2391 @end itemize")
2392     ;; Either BSD-3 or GPL-2 can be used.
2393     (license (list license:bsd-3 license:gpl2))))
2394
2395 (define-public asio
2396   (package
2397     (name "asio")
2398     (version "1.12.2")
2399     (source
2400      (origin
2401        (method url-fetch)
2402        (uri (string-append "mirror://sourceforge/asio/asio/"
2403                            version " (Stable)/asio-" version ".tar.bz2"))
2404        (sha256
2405         (base32 "1akray4l3hgahmb92sbvsqg128c7g7s92jrkf1sp1fjnfjrxq9sf"))))
2406     (build-system gnu-build-system)
2407     (inputs
2408      `(("boost" ,boost)
2409        ("openssl" ,openssl)))
2410     (arguments
2411      `(#:configure-flags
2412        (list
2413         (string-append "--with-boost=" (assoc-ref %build-inputs "boost"))
2414         (string-append "--with-openssl=" (assoc-ref %build-inputs "openssl")))))
2415     (home-page "https://think-async.com/Asio")
2416     (synopsis "C++ library for ASynchronous network I/O")
2417     (description "Asio is a cross-platform C++ library for network and
2418 low-level I/O programming that provides developers with a consistent
2419 asynchronous model using a modern C++ approach.")
2420     (license license:boost1.0)))
2421
2422 (define-public shadowsocks
2423   ;; There are some security fixes after the last release.
2424   (let* ((commit "e332ec93e9c90f1cbee676b022bf2c5d5b7b1239")
2425          (revision "0")
2426          (version (git-version "2.8.2" revision commit)))
2427     (package
2428       (name "shadowsocks")
2429       (version version)
2430       (home-page "https://github.com/shadowsocks/shadowsocks")
2431       (source (origin
2432                 (method git-fetch)
2433                 (uri (git-reference
2434                       (url home-page)
2435                       (commit commit)))
2436                 (sha256
2437                  (base32
2438                   "1idd9b4f2pnhcpk1bh030hqg5zq25gkwxd53xi3c0cj242w7sp2j"))
2439                 (file-name (git-file-name name version))))
2440       (build-system python-build-system)
2441       (synopsis "Fast tunnel proxy that helps you bypass firewalls")
2442       (description
2443        "This package is a fast tunnel proxy that helps you bypass firewalls.
2444
2445 Features:
2446 @itemize
2447 @item TCP & UDP support
2448 @item User management API
2449 @item TCP Fast Open
2450 @item Workers and graceful restart
2451 @item Destination IP blacklist
2452 @end itemize")
2453       (license license:asl2.0))))
2454
2455 (define-public net-snmp
2456   (package
2457     (name "net-snmp")
2458     (version "5.8")
2459     (source (origin
2460               (method url-fetch)
2461               (uri (string-append "mirror://sourceforge/net-snmp/net-snmp/"
2462                                   version "/net-snmp-" version ".tar.gz"))
2463               (sha256
2464                (base32
2465                 "1pvajzj9gmj56dmwix0ywmkmy2pglh6nny646hkm7ghfhh03bz5j"))
2466               (modules '((guix build utils)))
2467               (snippet
2468                '(begin
2469                   ;; Drop bundled libraries.
2470                   (delete-file-recursively "snmplib/openssl")
2471                   #t))))
2472     (build-system gnu-build-system)
2473     (arguments
2474      `(#:test-target "test"
2475        ;; XXX: With parallel build enabled, Perl modules may not get linked with
2476        ;; libnetsnmp.  See e.g. <https://bugzilla.novell.com/show_bug.cgi?id=819497>.
2477        #:parallel-build? #f
2478        #:configure-flags
2479        (list (string-append "LDFLAGS=-Wl,-rpath="
2480                             (assoc-ref %outputs "out")
2481                             "/lib")
2482              "--with-logfile=/var/log/snmpd.log"
2483              (string-append "--with-openssl="
2484                             (assoc-ref %build-inputs "openssl")))
2485        #:phases
2486        (modify-phases %standard-phases
2487          (add-after 'unpack 'patch-tests
2488            (lambda* (#:key inputs #:allow-other-keys)
2489              (substitute* "testing/fulltests/support/simple_TESTCONF.sh"
2490                (("NETSTAT=\"\"")
2491                 (string-append "NETSTAT=\"" (which "netstat") "\"")))
2492              (substitute* '("testing/fulltests/default/T065agentextend_simple"
2493                             "testing/fulltests/default/T115agentxperl_simple")
2494                (("/usr/bin/env") (which "env")))
2495              (substitute* "testing/fulltests/default/T065agentextend_sh_simple"
2496                (("/bin/sh") (which "sh")))
2497              ;; These tests require network access.
2498              (for-each delete-file
2499                        '("testing/fulltests/default/T070com2sec_simple"
2500                          "testing/fulltests/default/T071com2sec6_simple"))
2501              #t))
2502          (add-after 'unpack 'patch-Makefile.PL
2503            (lambda* (#:key outputs #:allow-other-keys)
2504              (substitute* "Makefile.in"
2505                (("Makefile.PL -NET")
2506                 (string-append "Makefile.PL PREFIX="
2507                                (assoc-ref outputs "out")
2508                                " INSTALLDIRS=site" " NO_PERLLOCAL=1"
2509                                " -NET")))
2510              #t)))))
2511     (inputs
2512      `(("perl" ,perl)
2513        ("openssl" ,openssl)
2514        ("libnl" ,libnl)))
2515     ;; These inputs are only needed for tests.
2516     (native-inputs
2517      `(("net-tools" ,net-tools)
2518        ("coreutils" ,coreutils)
2519        ("grep" ,grep)))
2520     (home-page "http://www.net-snmp.org/")
2521     (synopsis "Simple Network Management Protocol library and tools")
2522     (description "The @dfn{Simple Network Management Protocol} (SNMP) is a
2523 widely used protocol for monitoring the health and welfare of network
2524 equipment (e.g. routers), computer equipment and even devices like UPSs.
2525 Net-SNMP is a suite of applications used to implement SNMP v1, SNMP v2c and
2526 SNMP v3 using both IPv4 and IPv6.")
2527     ;; This only affects OpenBSD
2528     ;; https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8100
2529     (properties `((lint-hidden-cve . ("CVE-2015-8100"))))
2530     (license (list license:bsd-3
2531                    (license:non-copyleft
2532                     "http://www.net-snmp.org/about/license.html"
2533                     "CMU/UCD copyright notice")))))
2534
2535 (define-public ubridge
2536   (package
2537     (name "ubridge")
2538     (version "0.9.16")
2539     (source
2540      (origin
2541        (method git-fetch)
2542        (uri (git-reference
2543              (url "https://github.com/GNS3/ubridge.git")
2544              (commit (string-append "v" version))))
2545        (file-name (git-file-name name version))
2546        (sha256
2547         (base32 "1bind7ylgxs743vfdmpdrpp4iamy461bc3i7nxza91kj7hyyjz6h"))))
2548     (build-system gnu-build-system)
2549     (arguments
2550      `(#:tests? #f                      ; no tests
2551        #:make-flags '("CC=gcc")
2552        #:phases
2553        (modify-phases %standard-phases
2554          (delete 'configure)            ; no configure script
2555          (add-before 'install 'set-bindir
2556            (lambda* (#:key  inputs outputs #:allow-other-keys)
2557              (let ((bin (string-append (assoc-ref outputs "out")
2558                                        "/bin")))
2559                (mkdir-p bin)
2560                (substitute* "Makefile"
2561                  (("\\$\\(BINDIR\\)") bin)
2562                  (("\tsetcap cap_net.*$") "")))
2563              #t)))))
2564     (inputs
2565      `(("libpcap" ,libpcap)))
2566     (home-page "https://github.com/GNS3/ubridge/")
2567     (synopsis "Bridge for UDP tunnels, Ethernet, TAP and VMnet interfaces")
2568     (description "uBridge is a simple program to create user-land bridges
2569 between various technologies.  Currently, bridging between UDP tunnels,
2570 Ethernet and TAP interfaces is supported.  Packet capture is also supported.")
2571     (license license:gpl3+)))
2572
2573 (define-public hcxtools
2574   (package
2575     (name "hcxtools")
2576     (version "5.2.0")
2577     (source
2578      (origin
2579        (method git-fetch)
2580        (uri (git-reference
2581              (url "https://github.com/ZerBea/hcxtools.git")
2582              (commit version)))
2583        (sha256
2584         (base32 "0k2qlq9hz5zc21nyc6yrnfqzga7hydn5mm0x3rpl2fhkwl81lxcn"))
2585        (file-name (git-file-name name version))))
2586     (build-system gnu-build-system)
2587     (inputs
2588      `(("curl" ,curl)
2589        ("libpcap" ,libpcap)
2590        ("openssl" ,openssl)
2591        ("zlib" ,zlib)))
2592     (arguments
2593      `(#:make-flags
2594        (list "CC=gcc"
2595              (string-append "INSTALLDIR=" (assoc-ref %outputs "out") "/bin"))
2596        #:tests? #f                      ; no test suite
2597        #:phases
2598        (modify-phases %standard-phases
2599          (delete 'configure))))
2600     (home-page "https://github.com/ZerBea/hcxtools")
2601     (synopsis "Capture wlan traffic to hashcat and John the Ripper")
2602     (description
2603      "This package contains a small set of tools to capture and convert
2604 packets from wireless devices for use with hashcat or John the Ripper.")
2605     (license license:expat)))
2606
2607 (define-public hcxdumptool
2608   (package
2609     (name "hcxdumptool")
2610     (version "5.2.0")
2611     (source
2612      (origin
2613        (method git-fetch)
2614        (uri (git-reference
2615              (url "https://github.com/ZerBea/hcxdumptool.git")
2616              (commit version)))
2617        (sha256
2618         (base32 "0pg1pvg029gm4rj0fj5kcsjb32hixgn4cxsgiir7spkmacf1qm4q"))
2619        (file-name (git-file-name name version))))
2620     (build-system gnu-build-system)
2621     (arguments
2622      `(#:make-flags
2623        (list "CC=gcc"
2624              (string-append "INSTALLDIR=" (assoc-ref %outputs "out") "/bin"))
2625        #:tests? #f                      ; no test suite
2626        #:phases
2627        (modify-phases %standard-phases
2628          (delete 'configure))))
2629     (home-page "https://github.com/ZerBea/hcxdumptool")
2630     (synopsis "Small tool to capture packets from wlan devices")
2631     (description
2632      "Small tool to capture packets from WLAN devices.  After capturing,
2633 upload the \"uncleaned\" cap to @url{https://wpa-sec.stanev.org/?submit} to
2634 see if the access point or the client is vulnerable to a dictionary attack.
2635 Convert the cap file to hccapx format and/or to WPA-PMKID-PBKDF2
2636 hashline (16800) with @command{hcxpcaptool} from the @code{hcxtools} package
2637 and check if the WLAN key or the master key was transmitted unencrypted.")
2638     (license license:expat)))
2639
2640 (define-public dante
2641   (package
2642     (name "dante")
2643     (version "1.4.2")
2644     (source
2645      (origin
2646        (method url-fetch)
2647        (uri (string-append "https://www.inet.no/dante/files/dante-"
2648                            version ".tar.gz"))
2649        (sha256
2650         (base32
2651          "19rqzj167q73ag20zxpvswhkk0bj56r5maf83v5016sw7vrcz5sc"))))
2652     (build-system gnu-build-system)
2653     (arguments
2654      ;; XXX: The dynamic socks library doesn't work with 'libc.so' (GNU ld
2655      ;; script).  When preloading is enabled, 'sockd' failed with:
2656      ;;    … Failed to open library "libc.so": …: invalid ELF header
2657      '(#:configure-flags '("--disable-preload")))
2658     (home-page "https://www.inet.no/dante/")
2659     (synopsis "SOCKS server and client")
2660     (description "Dante is a SOCKS client and server implementation.  It can
2661 be installed on a machine with access to an external TCP/IP network and will
2662 allow all other machines, without direct access to that network, to be relayed
2663 through the machine the Dante server is running on.  The external network will
2664 never see any machines other than the one Dante is running on.")
2665     (license (license:non-copyleft "file://LICENSE"))))
2666
2667 (define-public restbed
2668   (let ((commit "6eb385fa9051203f28bf96cc1844bbb5a9a6481f"))
2669     (package
2670       (name "restbed")
2671       (version (git-version "4.6" "1" commit))
2672       (source
2673        (origin
2674          (method git-fetch)
2675          (uri (git-reference
2676                (url "https://github.com/Corvusoft/restbed/")
2677                (commit commit)))
2678          (file-name (string-append name "-" version ".tar.gz"))
2679          (sha256
2680           (base32 "0k60i5drklqqrb4khb25fzkgz9y0sncxf1sp6lh2bm1m0gh0661n"))))
2681       (build-system cmake-build-system)
2682       (inputs
2683        `(("asio" ,asio)
2684          ("catch" ,catch-framework)
2685          ("openssl" ,openssl)))
2686       (arguments
2687        `(#:tests? #f
2688          #:configure-flags
2689          '("-DBUILD_TESTS=NO"
2690            "-DBUILD_EXAMPLES=NO"
2691            "-DBUILD_SSL=NO"
2692            "-DBUILD_SHARED=NO")
2693          #:phases
2694          (modify-phases %standard-phases
2695            (add-after 'unpack 'apply-patches-and-fix-paths
2696              (lambda* (#:key inputs #:allow-other-keys)
2697                (let ((asio (assoc-ref inputs "asio"))
2698                      (catch (assoc-ref inputs "catch"))
2699                      (openssl (assoc-ref inputs "openssl")))
2700                  (substitute* "cmake/Findasio.cmake"
2701                    (("(find_path\\( asio_INCLUDE asio\\.hpp HINTS ).*$" all begin)
2702                     (string-append begin " \"" asio "/include\" )")))
2703                  (substitute* "cmake/Findcatch.cmake"
2704                    (("(find_path\\( catch_INCLUDE catch\\.hpp HINTS ).*$" all begin)
2705                     (string-append begin " \"" catch "/include\" )")))
2706                  (substitute* "cmake/Findopenssl.cmake"
2707                    (("(find_library\\( ssl_LIBRARY ssl ssleay32 HINTS ).*$" all begin)
2708                     (string-append begin " \"" openssl "/lib\" )"))
2709                    (("(find_library\\( crypto_LIBRARY crypto libeay32 HINTS ).*$" all begin)
2710                     (string-append begin " \"" openssl "/lib\" )"))
2711                    (("(find_path\\( ssl_INCLUDE openssl/ssl\\.h HINTS ).*$" all begin)
2712                     (string-append begin " \"" openssl "/include\" )")))))))))
2713       (synopsis "Asynchronous RESTful functionality to C++11 applications")
2714       (description "Restbed is a comprehensive and consistent programming
2715 model for building applications that require seamless and secure
2716 communication over HTTP.")
2717       (home-page "https://github.com/Corvusoft/restbed")
2718       (license license:agpl3+))))
2719
2720 (define-public restinio
2721   (package
2722     (name "restinio")
2723     (version "0.6.1.1")
2724     (source (origin
2725               (method git-fetch)
2726               (uri (git-reference
2727                     (url "https://github.com/Stiffstream/restinio.git")
2728                     (commit (string-append "v." version))))
2729               (file-name (git-file-name name version))
2730               (sha256
2731                (base32
2732                 "141a96hx8zhcdv121g6cs91n46kb47y040v25pnvz5f54964z7f5"))))
2733     (build-system cmake-build-system)
2734     (inputs                             ; TODO: Need to force-keep references on some inputs, e.g. boost.
2735      `(("zlib" ,zlib)
2736        ("catch2" ,catch-framework2)
2737        ("openssl" ,openssl)
2738        ("boost" ,boost)
2739        ("pcre" ,pcre)
2740        ("pcre2" ,pcre2)
2741        ("sobjectizer" ,sobjectizer)))
2742     (propagated-inputs
2743      `(("asio", asio)
2744        ("fmt" ,fmt)
2745        ("http-parser", http-parser)))
2746     (arguments
2747      `(#:configure-flags '("-DRESTINIO_INSTALL=on")
2748        #:tests? #f ; TODO: The tests are called from the root CMakelist, need RESTINIO_TEST=on.
2749        #:phases
2750        (modify-phases %standard-phases
2751          (add-after 'unpack 'change-directory
2752            (lambda _
2753              (chdir "dev/restinio")
2754              #t)))))
2755     (home-page "https://stiffstream.com/en/products/restinio.html")
2756     (synopsis "C++14 library that gives you an embedded HTTP/Websocket server")
2757     (description "RESTinio is a header-only C++14 library that gives you an embedded
2758 HTTP/Websocket server.  It is based on standalone version of ASIO
2759 and targeted primarily for asynchronous processing of HTTP-requests.")
2760     (license license:bsd-3)))
2761
2762 (define-public opendht
2763   (package
2764     (name "opendht")
2765     (version "2.0.0")
2766     (source (origin
2767               (method git-fetch)
2768               (uri (git-reference
2769                     (url "https://github.com/savoirfairelinux/opendht.git")
2770                     (commit version)))
2771               (file-name (git-file-name name version))
2772               (sha256
2773                (base32
2774                 "1q1fwk8wwk9r6bp0indpr60ql668lsk16ykslacyhrh7kg97kvhr"))))
2775     ;; Since 2.0, the gnu-build-system does not seem to work anymore, upstream bug?
2776     (build-system cmake-build-system)
2777     (inputs
2778      `(("gnutls" ,gnutls)
2779        ("nettle" ,nettle)
2780        ("readline" ,readline)
2781        ("jsoncpp" ,jsoncpp)
2782        ("openssl" ,openssl)
2783        ("fmt" ,fmt)))
2784     (propagated-inputs
2785      `(("argon2" ,argon2)  ; TODO: Needed for the pkg-config .pc file to work?
2786        ("msgpack" ,msgpack)))           ;included in several installed headers
2787     (native-inputs
2788      `(("autoconf" ,autoconf)
2789        ("pkg-config" ,pkg-config)
2790        ("restinio" ,restinio)
2791        ("automake" ,automake)
2792        ("libtool" ,libtool)
2793        ("cppunit" ,cppunit)))
2794     (arguments
2795      `(#:tests? #f                      ; Tests require network connection.
2796        #:configure-flags
2797        '(;; "-DOPENDHT_TESTS=on"
2798          "-DOPENDHT_TOOLS=off"
2799          "-DOPENDHT_PYTHON=off"
2800          "-DOPENDHT_PROXY_SERVER=on"
2801          "-DOPENDHT_PUSH_NOTIFICATIONS=on"
2802          "-DOPENDHT_PROXY_SERVER_IDENTITY=on"
2803          "-DOPENDHT_PROXY_CLIENT=on")))
2804     (home-page "https://github.com/savoirfairelinux/opendht/")
2805     (synopsis "Distributed Hash Table (DHT) library")
2806     (description "OpenDHT is a Distributed Hash Table (DHT) library.  It may
2807 be used to manage peer-to-peer network connections as needed for real time
2808 communication.")
2809     (license license:gpl3+)))
2810
2811 (define-public frrouting
2812   (package
2813     (name "frrouting")
2814     (version "6.0.2")
2815     (source (origin
2816               (method url-fetch)
2817               (uri (string-append "https://github.com/FRRouting/frr/releases/"
2818                                   "download/frr-" version "/frr-" version
2819                                   ".tar.xz"))
2820               (sha256
2821                (base32
2822                 "0xfrvi62w8qlh46f504ka0skb7pm0g0p8vmdng4w90gsbirlzpdd"))))
2823     (build-system gnu-build-system)
2824     (inputs
2825      `(("c-ares" ,c-ares)
2826        ("json-c" ,json-c)
2827        ("readline" ,readline)))
2828     (native-inputs
2829      `(("perl" ,perl)
2830        ("pkg-config" ,pkg-config)
2831        ("python" ,python-wrapper)
2832        ("python-pytest" ,python-pytest)))
2833     (home-page "https://frrouting.org/")
2834     (synopsis "IP routing protocol suite")
2835     (description "FRRouting (FRR) is an IP routing protocol suite which includes
2836 protocol daemons for BGP, IS-IS, LDP, OSPF, PIM, and RIP. ")
2837     (license license:gpl2+)))
2838
2839 (define-public iwd
2840   (package
2841     (name "iwd")
2842     (version "0.21")
2843     (source (origin
2844               (method git-fetch)
2845               (uri (git-reference
2846                     (url "https://git.kernel.org/pub/scm/network/wireless/iwd.git")
2847                     (commit version)))
2848               (file-name (git-file-name name version))
2849               (sha256
2850                (base32
2851                 "001dikinsa6kshwscjbvwipavzwpqnpvx9fpshcn63gbvbhyd393"))))
2852     (build-system gnu-build-system)
2853     (inputs
2854      `(("dbus" ,dbus)
2855        ("ell" ,ell)
2856        ("readline" ,readline)))
2857     (native-inputs
2858      `(("asciidoc" ,asciidoc)
2859        ("autoconf" ,autoconf)
2860        ("automake" ,automake)
2861        ("libtool" ,libtool)
2862        ("pkgconfig" ,pkg-config)
2863        ("python" ,python)
2864        ("openssl" ,openssl)))
2865     (arguments
2866      `(#:configure-flags
2867        (let ((dbus (assoc-ref %outputs "out")))
2868          (list "--disable-systemd-service"
2869                "--enable-external-ell"
2870                "--enable-hwsim"
2871                "--enable-tools"
2872                "--enable-wired"
2873                "--enable-docs"
2874                "--localstatedir=/var"
2875                (string-append "--with-dbus-datadir=" dbus "/share/")
2876                (string-append "--with-dbus-busdir="
2877                               dbus "/share/dbus-1/system-services")))
2878        #:phases
2879        (modify-phases %standard-phases
2880          (add-before 'bootstrap 'pre-bootstrap
2881            (lambda _
2882              (substitute* "Makefile.am"
2883                ;; Test disabled because it needs the kernel module
2884                ;; 'pkcs8_key_parser' loaded.
2885                (("unit\\/test-eapol.*? ") "")
2886                ;; Don't try to 'mkdir /var'.
2887                (("\\$\\(MKDIR_P\\) -m 700") "true"))
2888              #t)))))
2889     (home-page "https://git.kernel.org/pub/scm/network/wireless/iwd.git/")
2890     (synopsis "Internet Wireless Daemon")
2891     (description "iwd is a wireless daemon for Linux that aims to replace WPA
2892 Supplicant.  It optimizes resource utilization by not depending on any external
2893 libraries and instead utilizing features provided by the Linux kernel to the
2894 maximum extent possible.")
2895     (license license:lgpl2.1+)))
2896
2897 (define-public batctl
2898   (package
2899    (name "batctl")
2900    (version "2020.0")
2901    (source
2902     (origin
2903      (method url-fetch)
2904      (uri (string-append "https://downloads.open-mesh.org/batman/releases/batman-adv-"
2905                          version "/batctl-" version ".tar.gz"))
2906      (sha256
2907       (base32 "01414ywhlb2b9ng9d5kd5rr1s7wzvi234j8hj6ra2spn92qykvv0"))))
2908    (inputs
2909     `(("libnl" ,libnl)))
2910    (native-inputs
2911     `(("pkg-config" ,pkg-config)))
2912    (build-system gnu-build-system)
2913    (arguments
2914     `(#:tests? #f
2915       ;; Batctl only has a makefile. Thus we disable tests and
2916       ;; configuration, passing in a few make-flags.
2917       #:phases (modify-phases %standard-phases (delete 'configure))
2918       #:make-flags
2919       (list (string-append "PREFIX=" (assoc-ref %outputs "out"))
2920             (string-append "PKG_CONFIG=" (assoc-ref %build-inputs "pkg-config")
2921                            "/bin/pkg-config")
2922             "CC=gcc")))
2923    (home-page "https://www.open-mesh.org/projects/batman-adv/wiki/Wiki")
2924    (synopsis "Management tool for the mesh networking BATMAN protocol")
2925    (description "This package provides a control tool for the
2926 B.A.T.M.A.N. mesh networking routing protocol provided by the Linux kernel
2927 module @code{batman-adv}, for Layer 2.")
2928    (license license:gpl2+)))
2929
2930 (define-public pagekite
2931   (package
2932     (name "pagekite")
2933     (version "1.5.0.200327")
2934     (source
2935      (origin
2936        (method git-fetch)
2937        (uri (git-reference
2938              (url "https://github.com/pagekite/PyPagekite.git")
2939              (commit (string-append "v" version))))
2940        (file-name (git-file-name name version))
2941        (sha256
2942         (base32 "1vw7kjwxqd3qvm7kpxgjzl6797y0i1f16yfkfad84qpx2ij0gvdm"))))
2943     (build-system python-build-system)
2944     (arguments
2945      `(#:phases
2946        (modify-phases %standard-phases
2947          (add-after 'install 'install-man-page
2948            (lambda* (#:key inputs outputs #:allow-other-keys)
2949              (let* ((out (assoc-ref outputs "out"))
2950                     (man (string-append out "/share/man")))
2951                (invoke "make"
2952                        (string-append "PYTHONPATH=" (getenv "PYTHONPATH"))
2953                        "doc/pagekite.1")
2954                (install-file "doc/pagekite.1" (string-append man "/man1"))
2955                #t))))))
2956     (inputs
2957      `(("python-six" ,python-six)
2958        ("python-socksipychain" ,python-socksipychain)))
2959     (home-page "https://pagekite.net/")
2960     (synopsis "Make localhost servers publicly visible")
2961     (description
2962      "PageKite implements a tunneled reverse proxy which makes it easy to make
2963 a service (such as an HTTP or SSH server) on localhost visible to the wider
2964 Internet, even behind NAT or restrictive firewalls.  A managed front-end relay
2965 service is available at @url{https://pagekite.net/}, or you can run your own.")
2966     (license license:agpl3+)))
2967
2968 (define-public ipcalc
2969   (package
2970     (name "ipcalc")
2971     (version "0.41")
2972     (source (origin
2973               (method url-fetch)
2974               (uri (string-append "http://jodies.de/ipcalc-archive/"
2975                                   name "-" version ".tar.gz"))
2976               (sha256
2977                (base32
2978                 "12if9sm8h2ac0pgwkw835cgyqjxm6h27k4kfn2vfas9krrqwbafx"))))
2979     (inputs `(("perl" ,perl)
2980               ("tar" ,tar)
2981               ("gzip" ,gzip)
2982               ("tarball" ,source)))
2983     (build-system trivial-build-system) ;no Makefile.PL
2984     (arguments
2985      `(#:modules ((guix build utils))
2986        #:builder
2987        (begin
2988          (use-modules (guix build utils))
2989          (use-modules (srfi srfi-1))
2990          (let* ((source (assoc-ref %build-inputs "source"))
2991                 (perl (string-append (assoc-ref %build-inputs "perl")
2992                                      "/bin"))
2993                 (tar (assoc-ref %build-inputs "tar"))
2994                 (gz  (assoc-ref %build-inputs "gzip"))
2995                 (out (assoc-ref %outputs "out"))
2996                 (bin (string-append out "/bin"))
2997                 (doc (string-append out "/share/doc/ipcalc")))
2998            (setenv "PATH" (string-append gz "/bin"))
2999            (invoke (string-append tar "/bin/tar") "xvf" source)
3000            (chdir (string-append ,name "-" ,version))
3001
3002            (install-file "ipcalc" bin)
3003            (patch-shebang (string-append bin "/ipcalc") (list perl))
3004            #t))))
3005     (synopsis "Simple IP network calculator")
3006     (description "ipcalc takes an IP address and netmask and calculates the
3007 resulting broadcast, network, Cisco wildcard mask, and host range.  By giving
3008 a second netmask, you can design subnets and supernets.  It is also intended
3009 to be a teaching tool and presents the subnetting results as
3010 easy-to-understand binary values.")
3011     (home-page "http://jodies.de/ipcalc")
3012     (license license:gpl2+)))
3013
3014 (define-public tunctl
3015   (package
3016     (name "tunctl")
3017     (version "1.5")
3018     (source
3019      (origin
3020        (method url-fetch)
3021        (uri (string-append "mirror://sourceforge/tunctl/tunctl/" version "/"
3022                            "tunctl-" version ".tar.gz"))
3023        (sha256
3024         (base32 "1zsgn7w6l2zh2q0j6qaw8wsx981qcr536qlz1lgb3b5zqr66qama"))))
3025     (build-system gnu-build-system)
3026     (arguments
3027      `(#:phases
3028        (modify-phases %standard-phases
3029          (delete 'bootstrap)            ;there is no configure.ac file
3030          (delete 'configure)            ;there is no configure script
3031          (delete 'check)                ;there are no tests
3032          (replace 'build
3033            (lambda _
3034              (setenv "CC" "gcc")
3035              (invoke "make" "tunctl")))
3036          ;; TODO: Requires docbook2x to generate man page from SGML.
3037          (replace 'install
3038            (lambda* (#:key outputs #:allow-other-keys)
3039              (let* ((out (assoc-ref outputs "out"))
3040                     (bin (string-append out "/bin")))
3041                (install-file "tunctl" bin))
3042              #t)))))
3043     (home-page "http://tunctl.sourceforge.net")
3044     (synopsis  "Utility to set up and maintain TUN/TAP network interfaces")
3045     (description "Tunctl is used to set up and maintain persistent TUN/TAP
3046 network interfaces, enabling user applications to simulate network traffic.
3047 Such interfaces are useful for VPN software, virtualization, emulation,
3048 simulation, and a number of other applications.")
3049     (license license:gpl2)))
3050
3051 (define-public wol
3052   (package
3053     (name "wol")
3054     (version "0.7.1")
3055     (source
3056      (origin
3057        (method url-fetch)
3058        (uri (string-append "mirror://sourceforge/wake-on-lan/wol/"
3059                            version "/wol-" version ".tar.gz"))
3060        (sha256
3061         (base32 "08i6l5lr14mh4n3qbmx6kyx7vjqvzdnh3j9yfvgjppqik2dnq270"))))
3062     (build-system gnu-build-system)
3063     (home-page "https://sourceforge.net/projects/wake-on-lan/")
3064     (synopsis "Implements Wake On LAN functionality in a small program")
3065     (description "Tool to send a magic packet to wake another host on the
3066 network.  This must be enabled on the target host, usually in the BIOS.")
3067     (license license:gpl2)))
3068
3069 (define-public vde2
3070   (package
3071     (name "vde2")
3072     (version "2.3.2")
3073     (source
3074      (origin
3075        (method url-fetch)
3076        (uri "mirror://sourceforge/vde/vde2/2.3.2/vde2-2.3.2.tar.gz")
3077        (sha256
3078         (base32 "14xga0ib6p1wrv3hkl4sa89yzjxv7f1vfqaxsch87j6scdm59pr2"))))
3079     (build-system gnu-build-system)
3080     (arguments
3081      `(#:parallel-build? #f))           ; Build fails if #t.
3082     (inputs
3083      `(("python" ,python)
3084        ("libpcap" ,libpcap)
3085        ("openssl" ,openssl-1.0)))       ; Build fails with 1.1.
3086     (home-page "https://github.com/virtualsquare/vde-2")
3087     (synopsis "Virtual Distributed Ethernet")
3088     (description "VDE is a set of programs to provide virtual software-defined
3089 Ethernet network interface controllers across multiple virtual or
3090 physical, local or remote devices.  The VDE architecture provides
3091 virtual counterparts to hardware components such as switches and
3092 cables.")
3093     (license (list license:gpl2
3094                    license:lgpl2.1       ; libvdeplug
3095                    (license:non-copyleft ; slirpvde
3096                     "file://COPYING.slirpvde"
3097                     "See COPYING.slirpvde in the distribution.")))))
3098
3099 (define-public haproxy
3100   (package
3101     (name "haproxy")
3102     (version "2.1.3")
3103     (source (origin
3104               (method url-fetch)
3105               (uri (string-append "https://www.haproxy.org/download/"
3106                                   (version-major+minor version)
3107                                   "/src/haproxy-" version ".tar.gz"))
3108               (sha256
3109                (base32
3110                 "0n8bw3d6gikr8c56ycrvksp1sl0b4yfzp19867cxkl3l0daqwrxv"))))
3111     (build-system gnu-build-system)
3112     (arguments
3113      `(#:make-flags
3114        (let* ((out (assoc-ref %outputs "out")))
3115          (list (string-append "PREFIX=" out)
3116                (string-append "DOCDIR=" out "/share/" ,name)
3117                "TARGET=linux-glibc"
3118                "USE_LUA=1"
3119                "USE_OPENSSL=1"
3120                "USE_ZLIB=1"
3121                "USE_PCRE_2=1"))
3122        #:tests? #f  ; there are only regression tests, using varnishtest
3123        #:phases
3124        (modify-phases %standard-phases
3125          (delete 'configure))))
3126     (inputs
3127      `(("lua" ,lua)
3128        ("openssl" ,openssl)
3129        ("pcre2" ,pcre2)
3130        ("zlib" ,zlib)))
3131     (home-page "https://www.haproxy.org/")
3132     (synopsis "Reliable, high performance TCP/HTTP load balancer")
3133     (description "HAProxy is a free, very fast and reliable solution offering
3134 high availability, load balancing, and proxying for TCP and HTTP-based
3135 applications.  It is particularly suited for web sites crawling under very
3136 high loads while needing persistence or Layer7 processing.  Supporting tens of
3137 thousands of connections is clearly realistic with today's hardware.")
3138     (license (list license:gpl2+
3139                    license:lgpl2.1
3140                    license:lgpl2.1+))))
3141
3142 (define-public lldpd
3143   (package
3144     (name "lldpd")
3145     (version "1.0.5")
3146     (source
3147      (origin
3148        (method url-fetch)
3149        (uri (string-append "https://media.luffy.cx/files/lldpd/lldpd-"
3150                            version ".tar.gz"))
3151        (sha256
3152         (base32
3153          "16fbqrs3l976gdslx647nds8x7sz4h5h3h4l4yxzrayvyh9b5lrd"))
3154        (modules '((guix build utils)))
3155        (snippet
3156         '(begin
3157            ;; Drop bundled library.
3158            (delete-file-recursively "libevent")
3159            #t))))
3160     (arguments
3161      `(#:configure-flags
3162        (list
3163         "--with-privsep-user=nobody"
3164         "--with-privsep-group=nogroup"
3165         "--localstatedir=/var"
3166         "--enable-pie"
3167         "--without-embedded-libevent"
3168         (string-append "--with-systemdsystemunitdir="
3169                        (assoc-ref %outputs "out")
3170                        "/lib/systemd/system"))))
3171     (build-system gnu-build-system)
3172     (inputs
3173      `(("libevent" ,libevent)
3174        ("libxml2" ,libxml2)
3175        ("openssl" ,openssl)
3176        ("readline" ,readline)))
3177     (native-inputs
3178      `(("pkg-config" ,pkg-config)))
3179     (home-page "https://vincentbernat.github.io/lldpd/")
3180     (synopsis "Locate neighbors of your network equipment")
3181     (description
3182      "The @dfn{Link Layer Discovery Protocol} (LLDP) is an industry standard
3183 protocol designed to supplant proprietary Link-Layer protocols such as EDP or
3184 CDP.  The goal of LLDP is to provide an inter-vendor compatible mechanism to
3185 deliver Link-Layer notifications to adjacent network devices.  @code{lldpd} is
3186 an implementation of LLDP.  It also supports some proprietary protocols.")
3187     (license license:isc)))