Package Details: netsniff-ng 0.6.4-1

Git Clone URL: (read-only)
Package Base: netsniff-ng
Description: A high performance Linux network sniffer for packet inspection.
Upstream URL:
Licenses: GPL2
Submitter: dcelasun
Maintainer: dcelasun
Last Packager: dcelasun
Votes: 13
Popularity: 0.111551
First Submitted: 2010-04-09 16:06
Last Updated: 2018-01-10 06:34

Pinned Comments

dcelasun commented on 2017-05-12 08:48

Before running makepkg, please import the key first:

gpg --recv-key 236B0FE9B5510F47

You need to run the above command with the same user running makepkg, *not* as root!

Latest Comments

goodmen commented on 2018-01-10 04:54

dcelasun, could you please update to 0.6.4? 0.6.3 can not built due to "UINT64_MAX" not defined. 0.6.4 build OK.

goodmen commented on 2018-01-10 03:53

CC staging/tools.c staging/tools.c: In function ‘get_ip6_range_count’: staging/tools.c:485:10: error: ‘UINT64_MAX’ undeclared (first use in this function); did you mean ‘UINT_MAX’? return UINT64_MAX; ^~~~~~~~~~ UINT_MAX staging/tools.c:485:10: note: each undeclared identifier is reported only once for each function it appears in make: *** [Makefile:185: mausezahn/staging/tools.o] Error 1 ==> ERROR: A failure occurred in build(). Aborting...

RubenKelevra commented on 2017-07-07 17:33

@dcelasun thanks!

dcelasun commented on 2017-07-07 06:55

OK, it should be enabled now.

RubenKelevra commented on 2017-07-06 16:53

Please include mausezahn since this package is not maintained anymore separately and the aur package has been disappeared.

dcelasun commented on 2017-05-12 10:02

I could have sworn I added that, weird... Anyway, fixed.

anthraxx commented on 2017-05-12 09:51

you will need to add the acceptable gpg key in order to make it work as expected, otherwise you don't validate who is supposed to issue a signature for this package:

validpgpkeys=('C3DE742283C246F2D7887AB4236B0FE9B5510F47') # Tobias Klauser <>

dcelasun commented on 2017-05-12 08:48

Before running makepkg, please import the key first:

gpg --recv-key 236B0FE9B5510F47

You need to run the above command with the same user running makepkg, *not* as root!

dcelasun commented on 2017-05-12 08:46

@anthraxx: Done.

anthraxx commented on 2017-05-11 22:40

@dcelasun: seems there are upstream signatures, may you apply those?

dcelasun commented on 2017-05-11 12:22

Updated to 0.6.3, thanks!

arch3y commented on 2017-05-11 01:06

I made a few tweaks and updated netsniff-ng to v0.6.3,

dcelasun commented on 2017-03-25 08:24

@zorun: I've backported the patch and it seems to build fine under kernel 4.10. Please let me know if there are any problems.

dcelasun commented on 2017-03-22 20:05

OK, I'll try to take a look as soon as I can :)

zorun commented on 2017-03-22 19:05

dcelasun, thank you, but the issue is that *this* package does not build currently :)

Hence why I was asking if this particular patch could be backported, before the the next release.

dcelasun commented on 2017-03-22 08:32

@zorun: This package tracks the latest release, which is 0.6.2. Try the Git version:

zorun commented on 2017-03-15 15:58

This is actually due a recent kernel change, that no longer exposes this API.

The issue has been fixed upstream:

Can it be backported here?

zorun commented on 2017-03-15 15:22

Version 0.6.2-1 fails to build in a clean chroot:

Maybe a missing dependency?

rudy.matela commented on 2016-10-10 11:28

Hello dcelasun,

I was the maintainer for libcli AUR package for a few years now. I do not intend to maintain it anymore. Since your netsniff-ng package depends on it, being the only one that does so on AUR, I have transfered libcli's ownership to you (sorry for not asking beforehand). If you do not wish to maintain it, feel free to disown.

dcelasun commented on 2015-11-17 13:01

0.6.0-2 uses libsodium instead of libnacl (which nobody ported to AUR4), so curvetun is now enabled.

dcelasun commented on 2015-08-12 03:26

@Thermi: OK, I'll try to find some time this weekend to see if I can build with mausezahn.

Thermi commented on 2015-08-12 01:05


It would be quite nice to build mausezahn in the package, too, because
the PKGBUILD for it wasn't ported to the AUR 4.0 and development is done in netsniff-ng since the death of the developer 4 years ago.

dcelasun commented on 2015-06-02 06:33

Hey guys, apologies for the delays. I'll update the package on aur4 in a few days when I get back home.

eniac commented on 2015-06-02 05:47

Thanks dtzWill, I'm still a noob :) I was able to compile netsniff-ng and libcli using your PKGBUILDs.

dtzWill commented on 2015-05-31 19:02

To be clear, it seems libcli doesn't build as of late but that's not a problem with netsniff-ng itself.

FWIW, libcli issues should be reported on the libcli page:

I reproduced the issue you ran into, enciac, and posted a PKGBUILD there that addresses it. Take a look and report back on that page if you would :).

eniac commented on 2015-05-28 14:54

Same problem here. Using dtzWill's pkgbuild worked (without mausezahn) but then installation aborted because libcli compilation failed (clitest.c:75:45: error: ISO C does not support ‘__FUNCTION__’ predefined identifier).

dtzWill commented on 2015-05-27 19:42

I had the same issues with "permission denied" on /etc path, as well a problem with the installation attempting to put files into /sbin.

I also changed the 'make' rule to only build the components we plan on installing--don't build mausezahn if not going to install it.

Here's the PKGBUILD I ended up using, hope this helps:

# Maintainer: Can Celasun <dcelasun[at]gmail[dot]com>
pkgdesc='A high performance Linux network sniffer for packet inspection (without curvetun tool).'
arch=('i686' 'x86_64')
makedepends=('cmake' 'flex' 'bison')
depends=('ncurses' 'geoip' 'zlib' 'libnetfilter_conntrack' 'libpcap' 'liburcu' 'libnl' 'libcli' 'libnet')
optdepends=('libnacl: Needed for curvetun')

build() {
cd "${srcdir}"/${pkgname}-${_pkgver}
make DISTRO=1 allbutmausezahn

package() {
cd "${srcdir}"/${pkgname}-${_pkgver}
make PREFIX="/usr" DESTDIR="${pkgdir}" SBINDIR="/usr/bin" install_allbutmausezahn

dcelasun commented on 2015-02-13 06:00

Please don't use the out-of-date flag for a feature request.

In the past I've tried to build this with libnacl support, but getting nacl to compile was a massive pain so I left it out. Now that libsodium is in the official repositories, maybe we can change that.

I'll take a look and if it sounds feasible, update the package.

mmlb commented on 2015-02-13 05:22

can you enable flowtop building by using libsodium. netsniff-ng mentions that libsodium can be used as a replacement for libnacl, considering libsodium is api compatible with libnacl. All that you would have to do is override some shell variables when calling configure, like so:

NACL_INC_DIR=/usr/include/sodium NACL_LIB=sodium ./configure

dcelasun commented on 2014-06-21 14:39

OK let me debug some more and get back to you.

999cgm commented on 2014-06-21 14:26

no, I am on x86_64 . I even tried ssh build@arch then makepkg (instead of su - build from root). Not sure why you are not seeing errors. My arch is up2date

dcelasun commented on 2014-06-21 09:34

That's really weird, I can't reproduce it at all. Is this by any chance on i686?

999cgm commented on 2014-06-21 09:31

dcelasun: yes I am using makepkg (from a regular user not root ):

package() {
cd "$srcdir/${_gitname}"
#make DESTDIR="$pkgdir" PREFIX=/usr install_allbutmausezahn
make PREFIX="$pkgdir" install_allbutmausezahn

build@arch$ makepkg
... (compile)
CC staging/mausezahn.c
LD mausezahn
STRIP mausezahn
==> Entering fakeroot environment...
==> Starting package()...
INST netsniff-ng/netsniff-ng
INST netsniff-ng/netsniff-ng.8.gz
INST ether.conf
INST tcp.conf
INST udp.conf
INST oui.conf
INST geoip.conf
INST trafgen/trafgen
INST trafgen/trafgen.8.gz
INST trafgen_stddef.h
install: cannot create regular file '/etc/netsniff-ng/trafgen_stddef.h': Permission denied
Makefile:167: recipe for target 'trafgen_do_install' failed
make: *** [trafgen_do_install] Error 1
==> ERROR: A failure occurred in package().

[build@arch netsniff-ng-git]$

dcelasun commented on 2014-06-19 16:55

I can't reproduce it and that error seems to be unrelated to the make install line. Are you building it with makepkg, i.e without an AUR helper?

999cgm commented on 2014-06-19 16:43

install line needs to be ajusted or we get this errors
install: cannot change permissions of '/etc/netsniff-ng': No such file or directory

make PREFIX="$pkgdir" install_allbutmausezahn

dcelasun commented on 2014-01-07 17:04

I've add all deps (except libnacl) mentioned by @kang below. libnacl is required for the curvetun tool, but:

- It's difficult to get it to compile,
- It takes ages,
- Not everyone needs/uses curvetun.

kang commented on 2012-11-05 23:32

Missing deps:
- cmake
- libnetfilter_conntrack
- libncurses
- geoip database
- liburcu
- libnacl

maybe others - else all tools wont be built/installed

kang commented on 2012-11-05 23:23

Missing compile dep: cmake

dcelasun commented on 2012-07-01 07:57

Updated to 0.5.7

n17ikh commented on 2012-04-11 14:10

Looks like the package doesn't build:

==> Starting build()...
/home/peter/build/netsniff-ng/PKGBUILD: line 14: cd: /home/peter/build/netsniff-ng/src/netsniff-ng/src: No such file or directory
==> ERROR: A failure occurred in build().

The directory doesn't exist. Additionally, if the PKGBUILD is corrected to make it cd to the right directory, it still won't work, since it uses cmake now instead of regular make.

Also, it looks like it might be broken anyway - editing the PKGBUILD to do all the right steps in making the build directory and running cmake, I still run into trouble on the "make install" in a few places. I'll keep working on it though.

dcelasun commented on 2012-04-06 17:02

Updated to 0.5.6.

n17ikh commented on 2011-12-15 21:43

The md5sum of netsniff-ng- doesn't match the one in the PKGBUILD.

==> Validating source files with md5sums...
netsniff-ng- ... FAILED
==> ERROR: One or more files did not pass the validity check!

% md5sum netsniff-ng-
bd303bdeb7244bb1e4e966b94f7671c4 netsniff-ng-

This matches the MD5SUMS file available from

Anonymous comment on 2011-09-12 13:29

checksum error

dcelasun commented on 2010-10-19 19:48

Sorry, I just bumped the pkgver without any testing. Upstream really should stop making so many directory/vcs/etc changes. It doesn't add anything to the software itself, yet it really annoys package maintainers.

dcelasun commented on 2010-10-19 19:48

Sorry, I just bumped the pkgver without any testing. Upstream really should stop making so many directory/vcs/etc changes.

kfgz commented on 2010-10-19 19:37

Small patch:

-cd $srcdir/${pkgname}_${pkgver}/src
+cd $srcdir/${pkgname}/src

kfgz commented on 2010-10-19 19:36

Small patch:

-cd $srcdir/${pkgname}_${pkgver}/src
+cd $srcdir/${pkgname}/src

dcelasun commented on 2010-10-19 19:30

Upstream update to