Subject: [PATCHv3 5/9] gnu: Add conntrack-tools

From: fesoj000 <[email-masked]>
Date: Sun, 27 Mar 2022 00:34:24 +0100

* gnu/packages/linux.scm (conntrack-tools): New variable.
---
  gnu/packages/linux.scm | 33 +++++++++++++++++++++++++++++++++
  1 file changed, 33 insertions(+)

diff --git a/gnu/packages/linux.scm b/gnu/packages/linux.scm
index b6a5a19e18..0d3a69b17c 100644
--- a/gnu/packages/linux.scm
+++ b/gnu/packages/linux.scm
@@ -128,6 +128,7 @@ (define-module (gnu packages linux)
    #:use-module (gnu packages networking)
    #:use-module (gnu packages ninja)
    #:use-module (gnu packages nss)
+  #:use-module (gnu packages onc-rpc)
    #:use-module (gnu packages perl)
    #:use-module (gnu packages pciutils)
    #:use-module (gnu packages pkg-config)
@@ -7393,6 +7394,38 @@ (define-public libnetfilter-queue
     (supported-systems (filter target-linux? %supported-systems))
     (license license:gpl2+)))
  
+(define-public conntrack-tools
+  (package
+   (name "conntrack-tools")
+   (version "1.4.6")
+   (source
+    (origin
+     (method url-fetch)
+     (uri (string-append "https://netfilter.org/projects/"
+                         "conntrack-tools/files/"
+                         "conntrack-tools-"
+                         version ".tar.bz2"))
+     (sha256
+      (base32
+       "0psx41bclqrh4514yzq03rvs3cq3scfpd1v4kkyxnic2hk65j22r"))))
+   (build-system gnu-build-system)
+   (native-inputs (list bison flex pkg-config))
+   (inputs (list libtirpc libnetfilter-conntrack libnetfilter-cttimeout
+                 libnetfilter-cthelper libnetfilter-queue libnfnetlink libmnl))
+   (synopsis "Set of tools targeting the conntrack kernel subsystem.")
+   (description "The tool conntrack provides a full featured interface that is
+intended to replace the old /proc/net/ip_conntrack interface.Using conntrack,
+you can view and manage the in-kernel connection tracking state table from
+userspace. On the other hand, conntrackd covers the specific aspects of stateful
+firewalls to enable highly available scenarios, and can be used as statistics
+collector as well.
+Since 1.2.0, the conntrack-tools includes the nfct command line utility. This
+utility only supports the nfnetlink_cttimeout by now. In the long run, we expect
+that it will replace conntrack by providing a syntax similar to nftables.")
+   (home-page "https://netfilter.org/projects/conntrack-tools/index.html")
+   (supported-systems (filter target-linux? %supported-systems))
+   (license license:gpl2+)))
+
  (define-public proot
    (package
      (name "proot")
-- 
2.34.0