nm-tray is a network connection management tool (NetworkManager front-end) with an information icon residing in the system tray. Unlike nm-applet, which is part of GNOME, this application is desktop-unaware.

pysctp implements the SCTP socket API. You need a SCTP-aware kernel (most are).

libpisp is a helper library to generate run-time configuration for the Raspberry Pi ISP (PiSP), consisting of the Frontend and Backend hardware components.

This package provides the NBD (Network Block Devices) client and server. It allows you to use remote block devices over a TCP/IP network.

The 0MQ lightweight messaging kernel is a library which extends the standard socket interfaces with features traditionally provided by specialized messaging middle-ware products. 0MQ sockets provide an abstraction of asynchronous message queues, multiple messaging patterns, message filtering (subscriptions), seamless access to multiple transport protocols and more.

NDisc6 is a collection of tools for IPv6 networking diagnostics. It includes the following programs:

• ndisc6: ICMPv6 Neighbor Discovery tool.

• rdisc6: ICMPv6 Router Discovery tool.

• tcptraceroute6: IPv6 traceroute over TCP.

• traceroute6: IPv6 traceroute over UDP.

• rdnssd: Recursive DNS Servers discovery daemon.

OpenRDAP is a command line client for the Registration Data Access Protocol. RDAP is modern a replacement for WHOIS, which provides domain name and IP address registration information in JSON format over HTTP.

Phantomsocks is an Internet censorship circumvention tool based on the desync technique, which was introduced in the 2017 paper Your State is Not Mine: A Closer Look at Evading Stateful Internet Censorship.

Further information on the usage could be found on the Wikibooks page Phantomsocks.

FRRouting (FRR) is an IP routing protocol suite which includes protocol daemons for BGP, IS-IS, LDP, OSPF, PIM, and RIP.

Net::DNS is the Perl Interface to the Domain Name System.

socat is a relay for bidirectional data transfer between two independent data channels---files, pipes, devices, sockets, etc. It can create "listening" sockets, named pipes, and pseudo terminals.

socat can be used, for instance, as TCP port forwarder, as a shell interface to UNIX sockets, IPv6 relay, for redirecting TCP oriented programs to a serial line, to logically connect serial lines on different computers, or to establish a relatively secure environment (su and chroot) for running client or server shell scripts with network connections.

Asio is a cross-platform C++ library for network and low-level I/O programming that provides developers with a consistent asynchronous model using a modern C++ approach.

PageKite implements a tunneled reverse proxy which makes it easy to make a service (such as an HTTP or SSH server) on localhost visible to the wider Internet, even behind NAT or restrictive firewalls. A managed front-end relay service is available at https://pagekite.net/, or you can run your own.

This library allows controlling basic functions in SocketCAN from user-space. It requires a kernel built with SocketCAN support.

This package provides a daemon that snitches on programs making outbound connections. OpenSnitch is an application-level firewall that gives you granular control over outbound network connections on your system. It monitors application activity and prompts you to allow or deny connections on a per-application basis whenever a new outbound connection is attempted.

Iodine tunnels IPv4 data through a DNS server. This can be useful in different situations where internet access is firewalled, but DNS queries are allowed. The bandwidth is asymmetrical, with limited upstream and up to 1 Mbit/s downstream.

libndp contains a library which provides a wrapper for IPv6 Neighbor Discovery Protocol. It also provides a tool named ndptool for sending and receiving NDP messages.

ethtool can be used to query and change settings such as speed, auto-negotiation and checksum offload on many network devices, especially Ethernet devices.

VDE is a set of programs to provide virtual software-defined Ethernet network interface controllers across multiple virtual or physical, local or remote devices. The VDE architecture provides virtual counterparts to hardware components such as switches and cables.

This module provides several IP address validation subroutines that both validate and untaint their input. This includes both basic validation (is_ipv4() and is_ipv6()) and special cases like checking whether an address belongs to a specific network or whether an address is public or private (reserved).

The IP class allows a comfortable parsing and handling for most notations in use for IPv4 and IPv6 addresses and networks.

Small tool to capture packets from WLAN devices. After capturing, upload the "uncleaned" cap to https://wpa-sec.stanev.org/?submit to see if the access point or the client is vulnerable to a dictionary attack. Convert the cap file to hccapx format and/or to WPA-PMKID-PBKDF2 hashline (16800) with hcxpcaptool from the hcxtools package and check if the WLAN key or the master key was transmitted unencrypted.

Dante is a SOCKS client and server implementation. It can be installed on a machine with access to an external TCP/IP network and will allow all other machines, without direct access to that network, to be relayed through the machine the Dante server is running on. The external network will never see any machines other than the one Dante is running on.

Arp-scan is a tool that uses ARP to discover and fingerprint IP hosts on the local network.