1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
|
{ stdenv
, lib
, fetchFromGitHub
, makeWrapper
, bison
, flex
, geoip
, geolite-legacy
, libcli
, libnet
, libnetfilter_conntrack
, libnl
, libpcap
, libsodium
, liburcu
, ncurses
, pkg-config
, zlib
}:
stdenv.mkDerivation rec {
pname = "netsniff-ng";
version = "0.6.8";
src = fetchFromGitHub {
repo = pname;
owner = pname;
rev = "v${version}";
sha256 = "10ih8amaqspy0zwg7hqvypa1v7ixpjl0n608cyfgyfzffp73lbqf";
};
nativeBuildInputs = [
bison
flex
makeWrapper
pkg-config
];
buildInputs = [
geoip
geolite-legacy
libcli
libnet
libnl
libnetfilter_conntrack
libpcap
libsodium
liburcu
ncurses
zlib
];
# ./configure is not autoGNU but some home-brewn magic
configurePhase = ''
patchShebangs configure
substituteInPlace configure --replace "which" "command -v"
NACL_INC_DIR=${libsodium.dev}/include/sodium NACL_LIB=sodium ./configure
'';
enableParallelBuilding = true;
# All files installed to /etc are just static data that can go in the store
makeFlags = [ "PREFIX=$(out)" "ETCDIR=$(out)/etc" ];
postInstall = ''
# trafgen and bpfc can call out to cpp to process config files.
wrapProgram "$out/sbin/trafgen" --prefix PATH ":" "${stdenv.cc}/bin"
wrapProgram "$out/sbin/bpfc" --prefix PATH ":" "${stdenv.cc}/bin"
ln -sv ${geolite-legacy}/share/GeoIP/GeoIP.dat $out/etc/netsniff-ng/country4.dat
ln -sv ${geolite-legacy}/share/GeoIP/GeoIPv6.dat $out/etc/netsniff-ng/country6.dat
ln -sv ${geolite-legacy}/share/GeoIP/GeoIPCity.dat $out/etc/netsniff-ng/city4.dat
ln -sv ${geolite-legacy}/share/GeoIP/GeoIPCityv6.dat $out/etc/netsniff-ng/city6.dat
ln -sv ${geolite-legacy}/share/GeoIP/GeoIPASNum.dat $out/etc/netsniff-ng/asname4.dat
ln -sv ${geolite-legacy}/share/GeoIP/GeoIPASNumv6.dat $out/etc/netsniff-ng/asname6.dat
rm -v $out/etc/netsniff-ng/geoip.conf # updating databases after installation is impossible
'';
meta = with lib; {
description = "Swiss army knife for daily Linux network plumbing";
longDescription = ''
netsniff-ng is a free Linux networking toolkit. Its gain of performance
is reached by zero-copy mechanisms, so that on packet reception and
transmission the kernel does not need to copy packets from kernel space
to user space and vice versa. The toolkit can be used for network
development and analysis, debugging, auditing or network reconnaissance.
'';
homepage = "http://netsniff-ng.org/";
license = with licenses; [ gpl2Only ];
platforms = platforms.linux;
};
}
|