This package provides a modern, but Linux-specific implementation of the traceroute command that can be used to follow the route taken by packets on an IP network on their way to a given host. It utilizes the IP protocol's time to live (TTL) field and attempts to elicit an ICMP TIME_EXCEEDED response from each gateway along the path to the host. Compared to other implementations, this traceroute command allows some traces for unprivileged users.

Hashcash is a proof-of-work algorithm, which has been used as a denial-of-service countermeasure technique in a number of systems.

A hashcash stamp constitutes a proof-of-work which takes a parametrizable amount of work to compute for the sender. The recipient can verify received hashcash stamps efficiently.

This package contains a command-line tool for computing and verifying hashcash stamps.

ENet's purpose is to provide a relatively thin, simple and robust network communication layer on top of UDP. The primary feature it provides is optional reliable, in-order delivery of packets. ENet omits certain higher level networking features such as authentication, server discovery, encryption, or other similar tasks that are particularly application specific so that the library remains flexible, portable, and easily embeddable.

This package contains a variety of tools for dealing with network configuration, troubleshooting, or servers. Utilities included are:

arping

Ping hosts using ARP.

clockdiff

Compute time difference between network hosts using ICMP TSTAMP messages.

ninfod

Daemon that responds to IPv6 Node Information Queries.

ping

Use ICMP ECHO messages to measure round-trip delays and packet loss across network paths.

rarpd

Answer RARP requests from clients.

rdisc

Populate network routing tables with information from the ICMP router discovery protocol.

tftpd

Trivial file transfer protocol server.

tracepath

Trace network path to an IPv4 or IPv6 address and discover MTU along the way.

socat is a relay for bidirectional data transfer between two independent data channels---files, pipes, devices, sockets, etc. It can create "listening" sockets, named pipes, and pseudo terminals.

socat can be used, for instance, as TCP port forwarder, as a shell interface to UNIX sockets, IPv6 relay, for redirecting TCP oriented programs to a serial line, to logically connect serial lines on different computers, or to establish a relatively secure environment (su and chroot) for running client or server shell scripts with network connections.

Zapret2 is a packet manipulator primarily designed to perform various autonomous real-time attacks on DPI systems. Its main objective is to bypass resource blocks or protocol restrictions. However, zapret2's capabilities are not limited to this; its architecture allows for other types of packet manipulation, such as bidirectional (client-server) protocol obfuscation to hide traffic from DPI, among other applications.

The configuration file is read from /etc/zapret2/config.

RTMPdump is a toolkit for RTMP streams. All forms of RTMP are supported, including rtmp://, rtmpt://, rtmpe://, rtmpte://, and rtmps://.

httpstat is a tool to visualize statistics from the curl HTTP client. It acts as a wrapper for curl and prints timing information for each step of the HTTP request (DNS lookup, TCP connection, TLS handshake and so on) in the terminal.

httping measures how long it takes to connect to a web server, send an HTTP(S) request, and receive the reply headers. It is somewhat similar to ping, but can be used even in cases where ICMP traffic is blocked by firewalls or when you want to monitor the response time of the actual web application stack itself.

PuTTY is a graphical text terminal client. It supports SSH, telnet, and raw socket connections with good terminal emulation. It can authenticate with public keys and Kerberos single-sign-on. It also includes command-line SFTP and older SCP implementations.

iPerf is a tool to measure achievable bandwidth on IP networks. It supports tuning of various parameters related to timing, buffers and protocols (TCP, UDP, SCTP with IPv4 and IPv6). For each test it reports the bandwidth, loss, and other parameters.

The Link Layer Discovery Protocol (LLDP) is an industry standard protocol designed to supplant proprietary Link-Layer protocols such as EDP or CDP. The goal of LLDP is to provide an inter-vendor compatible mechanism to deliver Link-Layer notifications to adjacent network devices. lldpd is an implementation of LLDP. It also supports some proprietary protocols.

Net::DNS::Resolver::Mock is a subclass of Net::DNS::Resolver, but returns static data from any provided DNS zone file instead of querying the network. It is intended primarily for use in testing.

This program helps automate the creation and maintenance of BGP routing filters used for peering through Internet exchanges.

It generates prefix lists, (extended) access lists, policy-statement terms, and AS paths from data in the IRR, including the RADB operated by the Merit Network at the University of Michigan.

The filters can be aggregated and exported in the most common formats.

libndp contains a library which provides a wrapper for IPv6 Neighbor Discovery Protocol. It also provides a tool named ndptool for sending and receiving NDP messages.

Proxychains-ng is a preloader which hooks calls to sockets in dynamically linked programs and redirects them through one or more SOCKS or HTTP proxies.

Iodine tunnels IPv4 data through a DNS server. This can be useful in different situations where internet access is firewalled, but DNS queries are allowed. The bandwidth is asymmetrical, with limited upstream and up to 1 Mbit/s downstream.

OpenRDAP is a command line client for the Registration Data Access Protocol. RDAP is modern a replacement for WHOIS, which provides domain name and IP address registration information in JSON format over HTTP.

sslh is a network protocol demultiplexer. It acts like a switchboard, accepting connections from clients on one port and forwarding them to different servers based on the contents of the first received data packet. Detection of common protocols like HTTP(S), SSL, SSH, OpenVPN, tinc, and XMPP is already implemented, but any other protocol that matches a regular expression can be added. sslh's name comes from its original application of serving both SSH and HTTPS on port 443, allowing SSH connections from inside corporate firewalls that block port 22.

Command-line interface for LibreSpeed internet bandwidth testing. It functions as a command-line alternative to https://librespeed.org/. It features ping, jitter, download, and upload testing, as well as the ability to test using multiple servers in a single run.

Dante is a SOCKS client and server implementation. It can be installed on a machine with access to an external TCP/IP network and will allow all other machines, without direct access to that network, to be relayed through the machine the Dante server is running on. The external network will never see any machines other than the one Dante is running on.

Spiped (pronounced "ess-pipe-dee") is a utility for creating symmetrically encrypted and authenticated pipes between socket addresses, so that one may connect to one address (e.g., a UNIX socket on localhost) and transparently have a connection established to another address (e.g., a UNIX socket on a different system). This is similar to 'ssh -L' functionality, but does not use SSH and requires a pre-shared symmetric key.

LibCamera is a complex camera support library for GNU+Linux, Android, and ChromeOS.

iwd is a wireless daemon for Linux that aims to replace WPA Supplicant. It optimizes resource utilization by not depending on any external libraries and instead utilizing features provided by the Linux kernel to the maximum extent possible.