This program helps automate the creation and maintenance of BGP routing filters used for peering through Internet exchanges.

It generates prefix lists, (extended) access lists, policy-statement terms, and AS paths from data in the IRR, including the RADB operated by the Merit Network at the University of Michigan.

The filters can be aggregated and exported in the most common formats.

libnatpmp is a portable and asynchronous implementation of the Network Address Translation - Port Mapping Protocol (NAT-PMP) written in the C programming language.

Miredo is an implementation (client, relay, server) of the Teredo specification, which provides IPv6 Internet connectivity to IPv6 enabled hosts residing in IPv4-only networks, even when they are behind a NAT device.

The dhtnet is a C++ library providing abstractions for interacting with an OpenDHT distributed network.

OpenDHT provides an easy to use distributed in-memory data store. Every node in the network can read and write values to the store. Values are distributed over the network, with redundancy. It includes the following features:

• Lightweight and scalable, designed for large networks and small devices;

• High resilience to network disruption;

• Public key cryptography layer providing optional data signature and encryption (using GnuTLS);

• IPv4 and IPv6 support;

• Clean and powerful C++14 map API;

• Bindings for C, Rust & Python 3;

• REST API with an optional HTTP client and server with push notification support.

The following tools are also included:

dhtnode

A command line tool to run a DHT node and perform operations supported by the library (get, put, etc.) with text values.

dhtchat

A very simple IM client working over the DHT.

The 0MQ lightweight messaging kernel is a library which extends the standard socket interfaces with features traditionally provided by specialized messaging middle-ware products. 0MQ sockets provide an abstraction of asynchronous message queues, multiple messaging patterns, message filtering (subscriptions), seamless access to multiple transport protocols and more.

NNG project is a rewrite of the scalability protocols library known as libnanomsg, and adds significant new capabilities, while retaining compatibility with the original. It is a lightweight, broker-less library, offering a simple API to solve common recurring messaging problems, such as publish/subscribe, RPC-style request/reply, or service discovery.

yggtray is an Yggdrasil tray and control panel. It allows the user to configure, run and control the Yggdrasil daemon.

This package provides a control tool for the B.A.T.M.A.N. mesh networking routing protocol provided by the Linux kernel module batman-adv, for Layer 2.

Zyre provides reliable group messaging over local area networks using zeromq. It has these key characteristics:

• Zyre needs no administration or configuration.

• Peers may join and leave the network at any time.

• Peers talk to each other without any central brokers or servers.

• Peers can talk directly to each other.

• Peers can join groups, and then talk to groups.

• Zyre is reliable, and loses no messages even when the network is heavily loaded.

• Zyre is fast and has low latency, requiring no consensus protocols.

• Zyre is designed for WiFi networks, yet also works well on Ethernet networks.

BIRD is an Internet routing daemon with full support for all the major routing protocols. It allows redistribution between protocols with a powerful route filtering syntax and an easy-to-use configuration interface.

ENet's purpose is to provide a relatively thin, simple and robust network communication layer on top of UDP. The primary feature it provides is optional reliable, in-order delivery of packets. ENet omits certain higher level networking features such as authentication, server discovery, encryption, or other similar tasks that are particularly application specific so that the library remains flexible, portable, and easily embeddable.

sslh is a network protocol demultiplexer. It acts like a switchboard, accepting connections from clients on one port and forwarding them to different servers based on the contents of the first received data packet. Detection of common protocols like HTTP(S), SSL, SSH, OpenVPN, tinc, and XMPP is already implemented, but any other protocol that matches a regular expression can be added. sslh's name comes from its original application of serving both SSH and HTTPS on port 443, allowing SSH connections from inside corporate firewalls that block port 22.

This package provides a daemon that snitches on programs making outbound connections. OpenSnitch is an application-level firewall that gives you granular control over outbound network connections on your system. It monitors application activity and prompts you to allow or deny connections on a per-application basis whenever a new outbound connection is attempted.

NDisc6 is a collection of tools for IPv6 networking diagnostics. It includes the following programs:

• ndisc6: ICMPv6 Neighbor Discovery tool.

• rdisc6: ICMPv6 Router Discovery tool.

• tcptraceroute6: IPv6 traceroute over TCP.

• traceroute6: IPv6 traceroute over UDP.

• rdnssd: Recursive DNS Servers discovery daemon.

Librecast is a C library which supports IPv6 multicast networking.

This library allows controlling basic functions in SocketCAN from user-space. It requires a kernel built with SocketCAN support.

vnStat is a console-based network traffic monitor that keeps a log of network traffic for the selected interface(s). It uses the network interface statistics provided by the kernel as information source. This means that vnStat won't actually be sniffing any traffic and also ensures light use of system resources regardless of network traffic rate.

Phantomsocks is an Internet censorship circumvention tool based on the desync technique, which was introduced in the 2017 paper Your State is Not Mine: A Closer Look at Evading Stateful Internet Censorship.

Further information on the usage could be found on the Wikibooks page Phantomsocks.

Nebula is a peer-to-peer networking tool based on the Noise Protocol Framework. It is not a fully decentralized network, but instead uses central discovery nodes and a certificate authority to facilitate direct, encrypted peer-to-peer connections from behind most firewalls and NAT layers.

ethtool can be used to query and change settings such as speed, auto-negotiation and checksum offload on many network devices, especially Ethernet devices.

mtr combines the functionality of the traceroute and ping programs in a single network diagnostic tool. mtr can use several network protocols to detect intermediate routers (or hops) between the local host and a user-specified destination. It then continually measures the response time and packet loss at each hop, and displays the results in real time.

The Simple Network Management Protocol (SNMP) is a widely used protocol for monitoring the health and welfare of network equipment (e.g. routers), computer equipment and even devices like UPSs. Net-SNMP is a suite of applications used to implement SNMP v1, SNMP v2c and SNMP v3 using both IPv4 and IPv6.

Libnet provides a fairly portable framework for network packet construction and injection. It features portable packet creation interfaces at the IP layer and link layer, as well as a host of supplementary functionality. Using libnet, quick and simple packet assembly applications can be whipped up with little effort.