anchor.diff:        development and analysis, debugging, auditing or network reconnaissance.
       '';
       homepage = "http://netsniff-ng.org/";
  -    license = licenses.gpl2;
  +    license = with licenses; [ gpl2Only ];
       platforms = platforms.linux;
     };
   }
  
positive.code:     wrapProgram "$out/sbin/trafgen" --prefix PATH ":" "${stdenv.cc}/bin"
      wrapProgram "$out/sbin/bpfc" --prefix PATH ":" "${stdenv.cc}/bin"
  
      ln -sv ${geolite-legacy}/share/GeoIP/GeoIP.dat		$out/etc/netsniff-ng/country4.dat
      ln -sv ${geolite-legacy}/share/GeoIP/GeoIPv6.dat		$out/etc/netsniff-ng/country6.dat
      ln -sv ${geolite-legacy}/share/GeoIP/GeoIPCity.dat		$out/etc/netsniff-ng/city4.dat
      ln -sv ${geolite-legacy}/share/GeoIP/GeoIPCityv6.dat	$out/etc/netsniff-ng/city6.dat
      ln -sv ${geolite-legacy}/share/GeoIP/GeoIPASNum.dat		$out/etc/netsniff-ng/asname4.dat
      ln -sv ${geolite-legacy}/share/GeoIP/GeoIPASNumv6.dat	$out/etc/netsniff-ng/asname6.dat
      rm -v $out/etc/netsniff-ng/geoip.conf # updating databases after installation is impossible
    '';
  
  
negative.code: { stdenv
  , lib
  , fetchFromGitHub
  , makeWrapper
  , bison
  , flex
  , geoip
  , geolite-legacy
  , libcli
  , libnet
  , libnetfilter_conntrack
  , libnl
  , libpcap
  , libsodium
  , liburcu
  , ncurses
  , pkg-config
  , zlib
  }:
  
  stdenv.mkDerivation rec {
    pname = "netsniff-ng";
    version = "0.6.8";
  
    src = fetchFromGitHub {
      repo = pname;
      owner = pname;
      rev = "v${version}";
      sha256 = "10ih8amaqspy0zwg7hqvypa1v7ixpjl0n608cyfgyfzffp73lbqf";
    };
  
    nativeBuildInputs = [
      bison
      flex
      makeWrapper
      pkg-config
    ];
  
    buildInputs = [
      geoip
      geolite-legacy
      libcli
      libnet
      libnl
      libnetfilter_conntrack
      libpcap
      libsodium
      liburcu
      ncurses
      zlib
    ];
  
    # ./configure is not autoGNU but some home-brewn magic
  