anchor.diff:  { lib, stdenv, fetchurl, pkg-config, bison, file, flex
   , asciidoc, libxslt, findXMLCatalogs, docbook_xml_dtd_45, docbook_xsl
   , libmnl, libnftnl, libpcap
  -, gmp, jansson, readline
  +, gmp, jansson, libedit
  +, autoreconfHook, fetchpatch
   , withDebugSymbols ? false
   , withPython ? false , python3
   , withXtables ? true , iptables
  
positive.code:     substituteInPlace ./configure --replace /usr/bin/file ${file}/bin/file
    '';
  
    configureFlags = [
      "--with-json"
      "--with-cli=readline"  # TODO: maybe switch to editline
    ] ++ optional (!withDebugSymbols) "--disable-debug"
      ++ optional (!withPython) "--disable-python"
      ++ optional withPython "--enable-python"
  
negative.code: with lib;
  
  stdenv.mkDerivation rec {
    version = "1.0.2";
    pname = "nftables";
  
    src = fetchurl {
      url = "https://netfilter.org/projects/nftables/files/${pname}-${version}.tar.bz2";
      sha256 = "00jcjn1pl7qyqpg8pd4yhlkys7wbj4vkzgg73n27nmplzips6a0b";
    };
  
    nativeBuildInputs = [
      autoreconfHook
      pkg-config bison file flex
      asciidoc docbook_xml_dtd_45 docbook_xsl findXMLCatalogs libxslt
    ];
  
    buildInputs = [
      libmnl libnftnl libpcap
      gmp jansson libedit
    ] ++ optional withXtables iptables
      ++ optional withPython python3;
  
  