NetAddr::IP manages IPv4 and IPv6 addresses and subsets.

Net::DNS is the Perl Interface to the Domain Name System.

lcsync is a tool to sync files over IPv6 multicast or the local filesystem. It splits the file into blocks, hashes them, and compares them in order to efficiently transfer a minimal amount of data.

Libnet provides a fairly portable framework for network packet construction and injection. It features portable packet creation interfaces at the IP layer and link layer, as well as a host of supplementary functionality. Using libnet, quick and simple packet assembly applications can be whipped up with little effort.

The lksctp-tools project provides a user-space library for SCTP (libsctp) and C language header files (netinet/sctp.h) for accessing SCTP-specific APIs not provided by the standard sockets. It also includes some SCTP-related helper utilities.

czmq provides bindings for the ØMQ core API that hides the differences between different versions of ØMQ.

Dante is a SOCKS client and server implementation. It can be installed on a machine with access to an external TCP/IP network and will allow all other machines, without direct access to that network, to be relayed through the machine the Dante server is running on. The external network will never see any machines other than the one Dante is running on.

wireproxy is a completely userspace application that connects to a wireguard peer, and exposes a socks5/http proxy or tunnels on the machine.

This package contains a variety of tools for dealing with network configuration, troubleshooting, or servers. Utilities included are:

arping

Ping hosts using ARP.

clockdiff

Compute time difference between network hosts using ICMP TSTAMP messages.

ninfod

Daemon that responds to IPv6 Node Information Queries.

ping

Use ICMP ECHO messages to measure round-trip delays and packet loss across network paths.

rarpd

Answer RARP requests from clients.

rdisc

Populate network routing tables with information from the ICMP router discovery protocol.

tftpd

Trivial file transfer protocol server.

tracepath

Trace network path to an IPv4 or IPv6 address and discover MTU along the way.

Small tool to capture packets from WLAN devices. After capturing, upload the "uncleaned" cap to https://wpa-sec.stanev.org/?submit to see if the access point or the client is vulnerable to a dictionary attack. Convert the cap file to hccapx format and/or to WPA-PMKID-PBKDF2 hashline (16800) with hcxpcaptool from the hcxtools package and check if the WLAN key or the master key was transmitted unencrypted.

libpisp is a helper library to generate run-time configuration for the Raspberry Pi ISP (PiSP), consisting of the Frontend and Backend hardware components.

LibNice is a library that implements the Interactive Connectivity Establishment (ICE) standard (RFC 5245 & RFC 8445). It provides a GLib-based library, libnice, as well as GStreamer elements to use it.

The 0MQ lightweight messaging kernel is a library which extends the standard socket interfaces with features traditionally provided by specialized messaging middle-ware products. 0MQ sockets provide an abstraction of asynchronous message queues, multiple messaging patterns, message filtering (subscriptions), seamless access to multiple transport protocols and more.

NDisc6 is a collection of tools for IPv6 networking diagnostics. It includes the following programs:

• ndisc6: ICMPv6 Neighbor Discovery tool.

• rdisc6: ICMPv6 Router Discovery tool.

• tcptraceroute6: IPv6 traceroute over TCP.

• traceroute6: IPv6 traceroute over UDP.

• rdnssd: Recursive DNS Servers discovery daemon.

GNU MAC Changer is a utility for viewing and changing MAC addresses of networking devices. New addresses may be set explicitly or randomly. They can include MAC addresses of the same or other hardware vendors or, more generally, MAC addresses of the same category of hardware.

This package provides a daemon that snitches on programs making outbound connections. OpenSnitch is an application-level firewall that gives you granular control over outbound network connections on your system. It monitors application activity and prompts you to allow or deny connections on a per-application basis whenever a new outbound connection is attempted.

Hashcash is a proof-of-work algorithm, which has been used as a denial-of-service countermeasure technique in a number of systems.

A hashcash stamp constitutes a proof-of-work which takes a parametrizable amount of work to compute for the sender. The recipient can verify received hashcash stamps efficiently.

This package contains a command-line tool for computing and verifying hashcash stamps.

ENet's purpose is to provide a relatively thin, simple and robust network communication layer on top of UDP. The primary feature it provides is optional reliable, in-order delivery of packets. ENet omits certain higher level networking features such as authentication, server discovery, encryption, or other similar tasks that are particularly application specific so that the library remains flexible, portable, and easily embeddable.

Phantomsocks is an Internet censorship circumvention tool based on the desync technique, which was introduced in the 2017 paper Your State is Not Mine: A Closer Look at Evading Stateful Internet Censorship.

Further information on the usage could be found on the Wikibooks page Phantomsocks.

This package provides a C implementation of a lightweight application-protocol for devices that are constrained their resources such as computing power, RF range, memory, bandwidth, or network packet sizes. This protocol, CoAP, is standardized by the IETF as RFC 7252.

The IP class allows a comfortable parsing and handling for most notations in use for IPv4 and IPv6 addresses and networks.

httpstat is a tool to visualize statistics from the curl HTTP client. It acts as a wrapper for curl and prints timing information for each step of the HTTP request (DNS lookup, TCP connection, TLS handshake and so on) in the terminal.

Restbed is a comprehensive and consistent programming model for building applications that require seamless and secure communication over HTTP.

Dropwatch is an interactive utility for monitoring and recording packets that are dropped by the kernel. It provides the commands dropwatch and dwdump.