The libcap-ng library is intended to make programming with POSIX capabilities easier than the traditional libcap library. It includes utilities that can analyse all currently running applications and print out any capabilities and whether or not it has an open ended bounding set. The included utilities are designed to let admins and developers spot apps from various ways that may be running with too much privilege.

libpcap is an interface for user-level packet capture. It provides a portable framework for low-level network monitoring. Applications include network statistics collection, security monitoring, network debugging, etc.

Hosts is a command line program for managing /etc/hosts entries. On Guix System, /etc/hosts is managed from the system configuration; hosts only works when using the Guix package manager on a foreign distro. hosts works with existing hosts files and entries, providing commands to add, remove, comment, and search.

The smartmontools package contains utility programs to control and monitor storage systems using the Self-Monitoring, Analysis and Reporting Technology System (S.M.A.R.T.) built into most modern ATA and SCSI hard disks. In many cases, these utilities will provide advanced warning of disk degradation and failure.

This package provides a command-line UEFI image editor, including cbfs, create-ffs, fmap, fspinfo, glzma, guid2english, microcode and utk CLI utilities.

This package provides the hcloud binary, a command-line interface for interacting with the Hetzner Cloud service.

This package provides a tiny system info utility.

GTK-based greeter for greetd, to be run under a compositor such as Cage.

Bash screenshot information tool which can be used to generate those nifty terminal theme information and ASCII distribution logos in everyone's screenshots nowadays.

Fail2Ban scans log files like /var/log/auth.log and bans IP addresses conducting too many failed login attempts. It does this by updating system firewall rules to reject new connections from those IP addresses, for a configurable amount of time. Fail2Ban comes out-of-the-box ready to read many standard log files, such as those for sshd and Apache, and is easily configured to read any log file of your choosing, for any error you wish.

Though Fail2Ban is able to reduce the rate of incorrect authentication attempts, it cannot eliminate the risk presented by weak authentication. Set up services to use only two factor, or public/private authentication mechanisms if you really want to protect services.

This package provides a command line tool that can give numerous reports on memory usage on GNU/Linux systems.

Netcat is a featured networking utility which reads and writes data across network connections, using the TCP/IP protocol. It is designed to be a reliable "back-end" tool that can be used directly or easily driven by other programs and scripts. At the same time, it is a feature-rich network debugging and exploration tool, since it can create almost any kind of connection you would need and has several interesting built-in capabilities.

This package provides a daemon for checking running and not running processes. It reads the /proc directory every n seconds and does a POSIX regexp on the process names. The daemon runs a user-provided script when it detects a program in the running processes, or an alternate script if it doesn't detect the program. The daemon can only be called by the root user, but can use sudo -u user in the process called if needed.

The GNU Shepherd is a daemon-managing daemon, meaning that it supervises the execution of system services, replacing similar functionality found in typical init systems. It provides dependency-handling through a convenient interface and is based on GNU Guile.

pam_uaccess is a PAM module that grants access to devices tagged uaccess in udev for the duration of the users' session, replacing elogind's uaccess feature.

Iftop does for network usage what top does for CPU usage. It listens to network traffic on a named interface and displays a table of current bandwidth usage by pairs of hosts.

Sipcalc is an advanced command-line IP subnet calculator. It can take multiple forms of input (IPv4/IPv6/interface/hostname) and output a multitude of information about a given subnet.

Features include:

• IPv4

  • Retrieving of address information from interfaces.

  • Classfull and CIDR output.

  • Multiple address and netmask input and output formats (dotted quad, hex, number of bits).

  • Output of broadcast address, network class, Cisco wildcard, hosts/range, network range.

  • The ability to split a network based on a smaller netmask, now also with recursive runs on the generated subnets. (also IPv6)

• IPv6

  • Compressed and expanded input and output addresses.

  • Standard IPv6 network output.

  • v4 in v6 output.

  • Reverse DNS address generation.

The GNU Shepherd is a daemon-managing daemon, meaning that it supervises the execution of system services, replacing similar functionality found in typical init systems. It provides dependency-handling through a convenient interface and is based on GNU Guile.

Pam-krb5 is a Kerberos PAM module for either MIT Kerberos or Heimdal. It supports ticket refreshing by screen savers, configurable authorization handling, authentication of non-local accounts for network services, password changing, and password expiration, as well as all the standard expected PAM features. It works correctly with OpenSSH, even with ChallengeResponseAuthentication and PrivilegeSeparation enabled, and supports extensive configuration either by PAM options or in krb5.conf or both. PKINIT is supported with recent versions of both MIT Kerberos and Heimdal and FAST is supported with recent MIT Kerberos.

wpa_supplicant is a WPA Supplicant with support for WPA and WPA2 (IEEE 802.11i / RSN). Supplicant is the IEEE 802.1X/WPA component that is used in the client stations. It implements key negotiation with a WPA Authenticator and it controls the roaming and IEEE 802.11 authentication/association of the WLAN driver.

This package provides the wpa_supplicant daemon and the wpa_cli command.

ISC's Dynamic Host Configuration Protocol (DHCP) distribution provides a reference implementation of all aspects of DHCP, through a suite of DHCP tools: server, client, and relay agent.

This software is end-of-life! ISC does not intend to issue any further maintenance releases.

jc JSONifies the output of many CLI tools and file-types for easier parsing in scripts.

Tcpdump is a command-line tool to analyze network traffic passing through the network interface controller.

This package provides a minimal seat management daemon whose task is to mediate access to shared devices, such as graphics and input, for applications that require it.