{
  lib,
  buildGoModule,
  fetchFromGitHub,
  libpcap,
  glibc,
}:

let
  newlibpcap = libpcap.overrideAttrs (previousAttrs: {
    configureFlags = previousAttrs.configureFlags ++ [ "--without-libnl" ];
  });
in

buildGoModule rec {
  pname = "ptcpdump";
  version = "0.32.0";

  src = fetchFromGitHub {
    owner = "mozillazg";
    repo = "ptcpdump";
    rev = "v${version}";
    hash = "sha256-ndDSOWaBmKvn7Eo8h72Zg9qGbcz2/IBcSJSw/mk7fUs=";
  };

  vendorHash = null;

  subPackages = [ "." ];

  buildInputs = [
    newlibpcap
    glibc.static
    glibc
  ];

  tags = [ "static" ];

  ldflags = [
    "-linkmode external"
    "-extldflags -static"
    "-X=github.com/mozillazg/ptcpdump/internal.Version=${version}"
    "-X=github.com/mozillazg/ptcpdump/internal.GitCommit=${src.rev}"
  ];

  meta = {
    description = "Process-aware, eBPF-based tcpdump";
    homepage = "https://github.com/mozillazg/ptcpdump";
    license = lib.licenses.mit;
    maintainers = with lib.maintainers; [ k900 ];
    mainProgram = "ptcpdump";
  };
}