From 79910cfb4e129c324d0aa6f52e4b1eb00ad2957a Mon Sep 17 00:00:00 2001
From: Thomas Butter <tbutter@gmail.com>
Date: Mon, 18 May 2026 10:07:32 +0000
Subject: [PATCH] netcap: 0.6.11 -> 0.9.0

---
 .../ne/netcap/{ndpi_4_0.nix => ndpi_4_14.nix} |  4 +-
 pkgs/by-name/ne/netcap/package.nix            | 47 +++++++++++++++----
 2 files changed, 41 insertions(+), 10 deletions(-)
 rename pkgs/by-name/ne/netcap/{ndpi_4_0.nix => ndpi_4_14.nix} (86%)

diff --git a/pkgs/by-name/ne/netcap/ndpi_4_0.nix b/pkgs/by-name/ne/netcap/ndpi_4_14.nix
similarity index 86%
rename from pkgs/by-name/ne/netcap/ndpi_4_0.nix
rename to pkgs/by-name/ne/netcap/ndpi_4_14.nix
index 8f63ddcc337a..73adccca7d2e 100644
--- a/pkgs/by-name/ne/netcap/ndpi_4_0.nix
+++ b/pkgs/by-name/ne/netcap/ndpi_4_14.nix
@@ -11,12 +11,12 @@
 
 ndpi.overrideAttrs (
   finalAttrs: prevAttrs: {
-    version = "4.0";
+    version = "4.14";
 
     src = fetchFromGitHub {
       inherit (prevAttrs.src) owner repo;
       tag = finalAttrs.version;
-      hash = "sha256-vWx6IVyxPJBgOkXpHdnvstvDGJbAtndFPtowpjLd32o=";
+      hash = "sha256-W8ZBWMQH6bRHl+fXmG3XLO37UxEnSgCVCgzfwy8N+OM=";
     };
 
     configureScript = "./autogen.sh";
diff --git a/pkgs/by-name/ne/netcap/package.nix b/pkgs/by-name/ne/netcap/package.nix
index 92768c3334e3..5cd67f88757d 100644
--- a/pkgs/by-name/ne/netcap/package.nix
+++ b/pkgs/by-name/ne/netcap/package.nix
@@ -8,32 +8,63 @@
   libprotoident,
   libflowmanager,
   libtrace,
+  ndpi,
+  pkg-config,
+  protobuf,
+  protoc-gen-go,
+  yara-x,
   versionCheckHook,
   nix-update-script,
 }:
 let
-  ndpi = callPackage ./ndpi_4_0.nix { };
+  ndpi_4_14 = callPackage ./ndpi_4_14.nix { };
 in
 buildGoModule (finalAttrs: {
   pname = "netcap";
-  version = "0.6.11";
+  version = "0.9.0";
 
   src = fetchFromGitHub {
     owner = "dreadl0ck";
     repo = "netcap";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-SCBKOIC/s+rfrVWmryp9EBp7ARpZZcxymsnZWtEHrhk=";
+    hash = "sha256-hk0aPU+pQ+A90GvlFhCRpj4hRiFOcpcP64xznh50Kts=";
   };
 
-  vendorHash = "sha256-MvHrJLhcFA0fEgK+YT0rwI6wIwTGMcLWQt6AYkx1eZM=";
+  vendorHash = "sha256-DLjSeSXwA4zPVg3ISPqEHTihIp9uVu7dXv9bTSepsaI=";
+
+  nativeBuildInputs = [
+    pkg-config
+    protobuf
+    protoc-gen-go
+  ];
+
+  postPatch = ''
+    rm go.work go.work.sum
+  '';
+
+  preBuild = ''
+    # satisfiy go:embed
+    mkdir -p cmd/capture/webui/frontend/dist
+    touch cmd/capture/webui/frontend/dist/index.html
+
+    # generate protobuf types
+    # we need to patch the proto file to have a valid go_package
+    substituteInPlace netcap.proto --replace-fail 'option go_package = "types";' 'option go_package = "github.com/dreadl0ck/netcap/types";'
+    protoc --go_out=. --go_opt=paths=source_relative netcap.proto
+    mv netcap.pb.go types/
+
+    # Patch types to replace calling String() (panics) with string literal
+    find types -name "*.go" -exec sed -i 's/Type_NC_\([A-Za-z0-9_]*\).String()/"NC_\1"/g' {} +
+  '';
 
   subPackages = [ "cmd" ];
 
   buildInputs = [
     libpcap
+    yara-x
   ]
   ++ lib.optionals withDpi [
-    ndpi
+    ndpi_4_14
     libprotoident
     libflowmanager
     libtrace
@@ -50,14 +81,14 @@ buildGoModule (finalAttrs: {
 
   env = lib.optionalAttrs withDpi {
     CGO_LDFLAGS = toString [
-      "-L${ndpi}/lib"
+      "-L${ndpi_4_14}/lib"
       "-lndpi"
       "-L${libprotoident}/lib"
-      "-lndpi"
+      "-lprotoident"
     ];
 
     CGO_CFLAGS = toString [
-      "-I${ndpi}/include"
+      "-I${ndpi_4_14}/include"
       "-I${libprotoident}/include"
     ];
   };