anchor.diff: -{ stdenv, fetchFromGitLab, autoreconfHook, libpcap, db, glib, libnet, libnids, symlinkJoin, openssl
  +{ gcc9Stdenv, lib, fetchFromGitLab, autoreconfHook, libpcap, db, glib, libnet, libnids, symlinkJoin, openssl
   , rpcsvc-proto, libtirpc, libnsl
   }:
  +
  +# We compile with GCC 9 since GCC 10 segfaults on the code
  +# (see https://bugzilla.redhat.com/show_bug.cgi?id=1862809).
  +
   let
     /*
     dsniff's build system unconditionnaly wants static libraries and does not
  
positive.code:     "--with-openssl=${ssl}"
    ];
  
    meta = with stdenv.lib; {
      description = "collection of tools for network auditing and penetration testing";
      longDescription = ''
        dsniff, filesnarf, mailsnarf, msgsnarf, urlsnarf, and webspy passively monitor a network for interesting data (passwords, e-mail, files, etc.). arpspoof, dnsspoof, and macof facilitate the interception of network traffic normally unavailable to an attacker (e.g, due to layer-2 switching). sshmitm and webmitm implement active monkey-in-the-middle attacks against redirected SSH and HTTPS sessions by exploiting weak bindings in ad-hoc PKI.
  
negative.code:     inherit (openssl) name;
      paths = with openssl.override { static = true; }; [ out dev ];
    };
  in gcc9Stdenv.mkDerivation rec {
    pname = "dsniff";
    version = "2.4b1";
    # upstream is so old that nearly every distribution packages the beta version.
  