Iftop does for network usage what top does for CPU usage. It listens to network traffic on a named interface and displays a table of current bandwidth usage by pairs of hosts.

Lynis is a security auditing tool. It performs an in-depth security scan and runs on the system itself. The primary goal is to test security defenses and provide tips for further system hardening. It will also scan for general system information, vulnerable software packages, and possible configuration issues.

daemontools is a collection of tools for managing UNIX services.

This package provides a tiny system info utility.

sedsed can debug, indent, tokenize and HTMLize your sed script.

In debug mode, it reads your script and adds extra commands to it. When executed you can see the data flow between the commands, revealing all the magic sed performs on its internal buffers.

In indent mode, your script is reformatted with standard spacing.

In tokenize mode, you can see the elements of every command you use.

In HTMLize mode, your script is converted to a beautiful colored HTML file, with all the commands and parameters identified for your viewing pleasure.

With sedsed you can master any sed script. No more secrets, no more hidden buffers.

Nmap ("Network Mapper") is a network discovery and security auditing tool. It is also useful for tasks such as network inventory, managing service upgrade schedules, and monitoring host or service uptime. It also provides an advanced netcat implementation (ncat), a utility for comparing scan results (ndiff), and a packet generation and response analysis tool (nping).

This is the user-space component to the Linux auditing system, which allows logging of system calls made by user-land processes. auditd is responsible for writing audit records to the disk. Viewing the logs is done with the ausearch or aureport utilities. Configuring the audit rules is done with the auditctl utility.

The Neighbor Discovery Protocol Proxy Daemon (ndppd) proxies some IPv6 NDP messages between interfaces to allow IPv6 routing between machines that are in the same network but not on the same local link. It currently only supports Neighbor Solicitation and Neighbor Advertisement messages.

nq can create very lightweight job queue systems which require no setup, maintenance, supervision, or any long-running processes.

wpa_supplicant is a WPA Supplicant with support for WPA and WPA2 (IEEE 802.11i / RSN). Supplicant is the IEEE 802.1X/WPA component that is used in the client stations. It implements key negotiation with a WPA Authenticator and it controls the roaming and IEEE 802.11 authentication/association of the WLAN driver.

This package provides the wpa_supplicant daemon and the wpa_cli command.

SSHGuard protects hosts from brute-force attacks against SSH and other services. It aggregates system logs and blocks repeat offenders using one of several firewall backends.

Neofetch is a command-line system information tool written in Bash. Neofetch displays information about your system next to an image, your OS logo, or any ASCII file of your choice. The main purpose of Neofetch is to be used in screenshots to show other users what operating system or distribution you are running, what theme or icon set you are using, etc.

Inxi is a system information script that can display various things about your hardware and software to users in an IRC chatroom or support forum. It runs with the /exec command in most IRC clients.

Ktsuss stands for ``Keep the su simple, stupid''. It is a graphical version of su written in C and GTK+ 2, with simplicity in mind.

Hosts is a command line program for managing /etc/hosts entries. On Guix System, /etc/hosts is managed from the system configuration; hosts only works when using the Guix package manager on a foreign distro. hosts works with existing hosts files and entries, providing commands to add, remove, comment, and search.

di is a disk information utility, displaying everything that your df command does and more. It features the ability to display your disk usage in whatever format you prefer. It is designed to be highly portable and produce uniform output across heterogeneous networks.

AIDE (Advanced Intrusion Detection Environment) is a file and directory integrity checker. It creates a database from the regular expression rules that it finds from its configuration files. Once this database is initialized it can be used to verify the integrity of the files. It has several message digest algorithms that are used to check the integrity of files. All of the usual file attributes can be checked for inconsistencies.

Munge is an authentication service for creating and validating credentials. It allows a process to authenticate the UID and GID of another local or remote process within a group of hosts having common users and groups. These hosts form a security realm that is defined by a shared cryptographic key. Clients within this security realm can create and validate credentials without the use of root privileges, reserved ports, or platform-specific methods.

This package provides a Perl interface (Perl::Rename) as well as a command-line utility (rename) that can rename multiple files at once based on a Perl regular expression.

cbatticon is a lightweight battery icon that displays the status of your battery in the system tray.

Btop++ provides unified monitoring of CPU, memory, network and processes.

The GNU Shepherd is a daemon-managing daemon, meaning that it supervises the execution of system services, replacing similar functionality found in typical init systems. It provides dependency-handling through a convenient interface and is based on GNU Guile.

The Router Advertisement Daemon (radvd) is run on systems acting as IPv6 routers. It sends Router Advertisement messages specified by RFC 2461 periodically and when requested by a node sending a Router Solicitation message. These messages are required for IPv6 stateless autoconfiguration.

pam_uaccess is a PAM module that grants access to devices tagged uaccess in udev for the duration of the users' session, replacing elogind's uaccess feature.