Round 461-465: Wireshark, tcpdump, nmap, netcat, iperf, mtr, traceroute, dig, ss, ip, ethtool, NetworkManager, iptables, nftables, firewalld, ufw, OpenVPN, WireGuard, StrongSwan, Tailscale (100 commands)

ober

c8dff97be2d7abdf3942e9a2c48607fcfa767913

diff --git a/docs/jemacs-vs-emacs.md b/docs/jemacs-vs-emacs.md
index 0b5f440..d68679b 100644
--- a/docs/jemacs-vs-emacs.md
+++ b/docs/jemacs-vs-emacs.md
@@ -4583,6 +4583,131 @@ No remaining Tier 1 gaps. All core editing, completion, and navigation features 
 | ebib-import-file | :orange_circle: | Import file into Ebib |
 | ebib-push-citation | :orange_circle: | Push Ebib citation to buffer |
 
+### Round 465 — OpenVPN ext, WireGuard ext2, StrongSwan ext, Tailscale ext2
+
+| Feature | Emacs | jemacs | Status |
+|---|---|---|---|
+| OpenVPN connect | — | `openvpn-connect` | :orange_circle: Scaffolded |
+| OpenVPN config | — | `openvpn-config` | :orange_circle: Scaffolded |
+| OpenVPN status | — | `openvpn-status` | :orange_circle: Scaffolded |
+| OpenVPN log | — | `openvpn-log` | :orange_circle: Scaffolded |
+| OpenVPN kill | — | `openvpn-kill` | :orange_circle: Scaffolded |
+| WireGuard peers | — | `wireguard-peers` | :orange_circle: Scaffolded |
+| WireGuard transfer | — | `wireguard-transfer` | :orange_circle: Scaffolded |
+| WireGuard handshake | — | `wireguard-handshake` | :orange_circle: Scaffolded |
+| WireGuard endpoints | — | `wireguard-endpoints` | :orange_circle: Scaffolded |
+| WireGuard allowed IPs | — | `wireguard-allowed` | :orange_circle: Scaffolded |
+| StrongSwan status | — | `strongswan-status` | :orange_circle: Scaffolded |
+| StrongSwan certificates | — | `strongswan-listcerts` | :orange_circle: Scaffolded |
+| StrongSwan connections | — | `strongswan-listconns` | :orange_circle: Scaffolded |
+| StrongSwan up | — | `strongswan-up` | :orange_circle: Scaffolded |
+| StrongSwan down | — | `strongswan-down` | :orange_circle: Scaffolded |
+| Tailscale peers | — | `tailscale-peers` | :orange_circle: Scaffolded |
+| Tailscale DNS | — | `tailscale-dns` | :orange_circle: Scaffolded |
+| Tailscale routes | — | `tailscale-routes` | :orange_circle: Scaffolded |
+| Tailscale ACLs | — | `tailscale-acls` | :orange_circle: Scaffolded |
+| Tailscale funnel | — | `tailscale-funnel` | :orange_circle: Scaffolded |
+
+### Round 464 — iptables ext, nftables ext, firewalld ext, ufw ext
+
+| Feature | Emacs | jemacs | Status |
+|---|---|---|---|
+| iptables list | — | `iptables-list` | :orange_circle: Scaffolded |
+| iptables NAT | — | `iptables-nat` | :orange_circle: Scaffolded |
+| iptables filter | — | `iptables-filter` | :orange_circle: Scaffolded |
+| iptables mangle | — | `iptables-mangle` | :orange_circle: Scaffolded |
+| iptables save | — | `iptables-save` | :orange_circle: Scaffolded |
+| nftables list | — | `nftables-list` | :orange_circle: Scaffolded |
+| nftables add | — | `nftables-add` | :orange_circle: Scaffolded |
+| nftables delete | — | `nftables-delete` | :orange_circle: Scaffolded |
+| nftables flush | — | `nftables-flush` | :orange_circle: Scaffolded |
+| nftables monitor | — | `nftables-monitor` | :orange_circle: Scaffolded |
+| firewalld zones | — | `firewalld-zones` | :orange_circle: Scaffolded |
+| firewalld services | — | `firewalld-services` | :orange_circle: Scaffolded |
+| firewalld ports | — | `firewalld-ports` | :orange_circle: Scaffolded |
+| firewalld rules | — | `firewalld-rules` | :orange_circle: Scaffolded |
+| firewalld reload | — | `firewalld-reload` | :orange_circle: Scaffolded |
+| ufw status | — | `ufw-status` | :orange_circle: Scaffolded |
+| ufw allow | — | `ufw-allow` | :orange_circle: Scaffolded |
+| ufw deny | — | `ufw-deny` | :orange_circle: Scaffolded |
+| ufw delete | — | `ufw-delete` | :orange_circle: Scaffolded |
+| ufw logging | — | `ufw-logging` | :orange_circle: Scaffolded |
+
+### Round 463 — ss ext, ip ext, ethtool ext, NetworkManager ext
+
+| Feature | Emacs | jemacs | Status |
+|---|---|---|---|
+| ss listening | — | `ss-listen` | :orange_circle: Scaffolded |
+| ss established | — | `ss-established` | :orange_circle: Scaffolded |
+| ss TCP | — | `ss-tcp` | :orange_circle: Scaffolded |
+| ss UDP | — | `ss-udp` | :orange_circle: Scaffolded |
+| ss summary | — | `ss-summary` | :orange_circle: Scaffolded |
+| ip address | — | `ip-addr` | :orange_circle: Scaffolded |
+| ip route | — | `ip-route` | :orange_circle: Scaffolded |
+| ip link | — | `ip-link` | :orange_circle: Scaffolded |
+| ip neighbor | — | `ip-neigh` | :orange_circle: Scaffolded |
+| ip rule | — | `ip-rule` | :orange_circle: Scaffolded |
+| ethtool info | — | `ethtool-info` | :orange_circle: Scaffolded |
+| ethtool stats | — | `ethtool-stats` | :orange_circle: Scaffolded |
+| ethtool ring | — | `ethtool-ring` | :orange_circle: Scaffolded |
+| ethtool offload | — | `ethtool-offload` | :orange_circle: Scaffolded |
+| ethtool driver | — | `ethtool-driver` | :orange_circle: Scaffolded |
+| nmcli connections | — | `nmcli-connection` | :orange_circle: Scaffolded |
+| nmcli devices | — | `nmcli-device` | :orange_circle: Scaffolded |
+| nmcli WiFi | — | `nmcli-wifi` | :orange_circle: Scaffolded |
+| nmcli general | — | `nmcli-general` | :orange_circle: Scaffolded |
+| nmcli monitor | — | `nmcli-monitor` | :orange_circle: Scaffolded |
+
+### Round 462 — iperf ext, mtr ext, traceroute ext, dig ext
+
+| Feature | Emacs | jemacs | Status |
+|---|---|---|---|
+| iperf server | — | `iperf-server` | :orange_circle: Scaffolded |
+| iperf client | — | `iperf-client` | :orange_circle: Scaffolded |
+| iperf UDP | — | `iperf-udp` | :orange_circle: Scaffolded |
+| iperf bandwidth | — | `iperf-bandwidth` | :orange_circle: Scaffolded |
+| iperf parallel | — | `iperf-parallel` | :orange_circle: Scaffolded |
+| mtr report | — | `mtr-report` | :orange_circle: Scaffolded |
+| mtr JSON | — | `mtr-json` | :orange_circle: Scaffolded |
+| mtr wide | — | `mtr-wide` | :orange_circle: Scaffolded |
+| mtr TCP | — | `mtr-tcp` | :orange_circle: Scaffolded |
+| mtr UDP | — | `mtr-udp` | :orange_circle: Scaffolded |
+| traceroute ICMP | — | `traceroute-icmp` | :orange_circle: Scaffolded |
+| traceroute TCP | — | `traceroute-tcp` | :orange_circle: Scaffolded |
+| traceroute UDP | — | `traceroute-udp` | :orange_circle: Scaffolded |
+| traceroute AS | — | `traceroute-as` | :orange_circle: Scaffolded |
+| traceroute MTU | — | `traceroute-mtu` | :orange_circle: Scaffolded |
+| dig query | — | `dig-query` | :orange_circle: Scaffolded |
+| dig trace | — | `dig-trace` | :orange_circle: Scaffolded |
+| dig zone transfer | — | `dig-axfr` | :orange_circle: Scaffolded |
+| dig reverse | — | `dig-reverse` | :orange_circle: Scaffolded |
+| dig short | — | `dig-short` | :orange_circle: Scaffolded |
+
+### Round 461 — Wireshark ext, tcpdump ext, nmap ext, netcat ext
+
+| Feature | Emacs | jemacs | Status |
+|---|---|---|---|
+| Wireshark capture | — | `wireshark-capture` | :orange_circle: Scaffolded |
+| Wireshark filter | — | `wireshark-filter` | :orange_circle: Scaffolded |
+| Wireshark decode | — | `wireshark-decode` | :orange_circle: Scaffolded |
+| Wireshark stats | — | `wireshark-stats` | :orange_circle: Scaffolded |
+| Wireshark follow | — | `wireshark-follow` | :orange_circle: Scaffolded |
+| tcpdump capture | — | `tcpdump-capture` | :orange_circle: Scaffolded |
+| tcpdump filter | — | `tcpdump-filter` | :orange_circle: Scaffolded |
+| tcpdump read | — | `tcpdump-read` | :orange_circle: Scaffolded |
+| tcpdump write | — | `tcpdump-write` | :orange_circle: Scaffolded |
+| tcpdump stats | — | `tcpdump-stats` | :orange_circle: Scaffolded |
+| nmap scan | — | `nmap-scan` | :orange_circle: Scaffolded |
+| nmap service | — | `nmap-service` | :orange_circle: Scaffolded |
+| nmap OS | — | `nmap-os` | :orange_circle: Scaffolded |
+| nmap script | — | `nmap-script` | :orange_circle: Scaffolded |
+| nmap vuln | — | `nmap-vuln` | :orange_circle: Scaffolded |
+| netcat listen | — | `netcat-listen` | :orange_circle: Scaffolded |
+| netcat connect | — | `netcat-connect` | :orange_circle: Scaffolded |
+| netcat scan | — | `netcat-scan` | :orange_circle: Scaffolded |
+| netcat proxy | — | `netcat-proxy` | :orange_circle: Scaffolded |
+| netcat transfer | — | `netcat-transfer` | :orange_circle: Scaffolded |
+
 ### Round 460 — Postman ext2, Insomnia ext2, HTTPie ext2, curl ext2
 
 | Feature | Emacs | jemacs | Status |
diff --git a/src/jerboa-emacs/editor-extra-final.ss b/src/jerboa-emacs/editor-extra-final.ss
index a0878d2..99162a7 100644
--- a/src/jerboa-emacs/editor-extra-final.ss
+++ b/src/jerboa-emacs/editor-extra-final.ss
@@ -30580,3 +30580,291 @@
 (def (cmd-curl-verbose app)
   (let* ((echo (app-state-echo app)))
     (echo-message! echo "curl: verbose output")))
+
+;; ── Round 462 — traceroute ext, dig ext ──
+
+(def (cmd-traceroute-icmp app)
+  (let* ((echo (app-state-echo app)))
+    (echo-message! echo "traceroute: ICMP mode")))
+
+(def (cmd-traceroute-tcp app)
+  (let* ((echo (app-state-echo app)))
+    (echo-message! echo "traceroute: TCP mode")))
+
+(def (cmd-traceroute-udp app)
+  (let* ((echo (app-state-echo app)))
+    (echo-message! echo "traceroute: UDP mode")))
+
+(def (cmd-traceroute-as app)
+  (let* ((echo (app-state-echo app)))
+    (echo-message! echo "traceroute: AS lookup")))
+
+(def (cmd-traceroute-mtu app)
+  (let* ((echo (app-state-echo app)))
+    (echo-message! echo "traceroute: MTU discovery")))
+
+(def (cmd-dig-query app)
+  (let* ((echo (app-state-echo app)))
+    (echo-message! echo "dig: DNS query")))
+
+(def (cmd-dig-trace app)
+  (let* ((echo (app-state-echo app)))
+    (echo-message! echo "dig: trace resolution")))
+
+(def (cmd-dig-axfr app)
+  (let* ((echo (app-state-echo app)))
+    (echo-message! echo "dig: zone transfer")))
+
+(def (cmd-dig-reverse app)
+  (let* ((echo (app-state-echo app)))
+    (echo-message! echo "dig: reverse lookup")))
+
+(def (cmd-dig-short app)
+  (let* ((echo (app-state-echo app)))
+    (echo-message! echo "dig: short output")))
+
+;; ── Round 463 — ss ext, ip ext, ethtool ext, NetworkManager ext ──
+
+(def (cmd-ss-listen app)
+  (let* ((echo (app-state-echo app)))
+    (echo-message! echo "ss: listening sockets")))
+
+(def (cmd-ss-established app)
+  (let* ((echo (app-state-echo app)))
+    (echo-message! echo "ss: established connections")))
+
+(def (cmd-ss-tcp app)
+  (let* ((echo (app-state-echo app)))
+    (echo-message! echo "ss: TCP sockets")))
+
+(def (cmd-ss-udp app)
+  (let* ((echo (app-state-echo app)))
+    (echo-message! echo "ss: UDP sockets")))
+
+(def (cmd-ss-summary app)
+  (let* ((echo (app-state-echo app)))
+    (echo-message! echo "ss: socket summary")))
+
+(def (cmd-ip-addr app)
+  (let* ((echo (app-state-echo app)))
+    (echo-message! echo "ip: address show")))
+
+(def (cmd-ip-route app)
+  (let* ((echo (app-state-echo app)))
+    (echo-message! echo "ip: routing table")))
+
+(def (cmd-ip-link app)
+  (let* ((echo (app-state-echo app)))
+    (echo-message! echo "ip: link management")))
+
+(def (cmd-ip-neigh app)
+  (let* ((echo (app-state-echo app)))
+    (echo-message! echo "ip: neighbor table")))
+
+(def (cmd-ip-rule app)
+  (let* ((echo (app-state-echo app)))
+    (echo-message! echo "ip: routing rules")))
+
+(def (cmd-ethtool-info app)
+  (let* ((echo (app-state-echo app)))
+    (echo-message! echo "ethtool: interface info")))
+
+(def (cmd-ethtool-stats app)
+  (let* ((echo (app-state-echo app)))
+    (echo-message! echo "ethtool: statistics")))
+
+(def (cmd-ethtool-ring app)
+  (let* ((echo (app-state-echo app)))
+    (echo-message! echo "ethtool: ring buffer")))
+
+(def (cmd-ethtool-offload app)
+  (let* ((echo (app-state-echo app)))
+    (echo-message! echo "ethtool: offload settings")))
+
+(def (cmd-ethtool-driver app)
+  (let* ((echo (app-state-echo app)))
+    (echo-message! echo "ethtool: driver info")))
+
+(def (cmd-nmcli-connection app)
+  (let* ((echo (app-state-echo app)))
+    (echo-message! echo "nmcli: connections")))
+
+(def (cmd-nmcli-device app)
+  (let* ((echo (app-state-echo app)))
+    (echo-message! echo "nmcli: devices")))
+
+(def (cmd-nmcli-wifi app)
+  (let* ((echo (app-state-echo app)))
+    (echo-message! echo "nmcli: WiFi")))
+
+(def (cmd-nmcli-general app)
+  (let* ((echo (app-state-echo app)))
+    (echo-message! echo "nmcli: general status")))
+
+(def (cmd-nmcli-monitor app)
+  (let* ((echo (app-state-echo app)))
+    (echo-message! echo "nmcli: monitor events")))
+
+;; ── Round 464 — iptables ext, nftables ext, firewalld ext, ufw ext ──
+
+(def (cmd-iptables-list app)
+  (let* ((echo (app-state-echo app)))
+    (echo-message! echo "iptables: list rules")))
+
+(def (cmd-iptables-nat app)
+  (let* ((echo (app-state-echo app)))
+    (echo-message! echo "iptables: NAT table")))
+
+(def (cmd-iptables-filter app)
+  (let* ((echo (app-state-echo app)))
+    (echo-message! echo "iptables: filter table")))
+
+(def (cmd-iptables-mangle app)
+  (let* ((echo (app-state-echo app)))
+    (echo-message! echo "iptables: mangle table")))
+
+(def (cmd-iptables-save app)
+  (let* ((echo (app-state-echo app)))
+    (echo-message! echo "iptables: save rules")))
+
+(def (cmd-nftables-list app)
+  (let* ((echo (app-state-echo app)))
+    (echo-message! echo "nftables: list ruleset")))
+
+(def (cmd-nftables-add app)
+  (let* ((echo (app-state-echo app)))
+    (echo-message! echo "nftables: add rule")))
+
+(def (cmd-nftables-delete app)
+  (let* ((echo (app-state-echo app)))
+    (echo-message! echo "nftables: delete rule")))
+
+(def (cmd-nftables-flush app)
+  (let* ((echo (app-state-echo app)))
+    (echo-message! echo "nftables: flush ruleset")))
+
+(def (cmd-nftables-monitor app)
+  (let* ((echo (app-state-echo app)))
+    (echo-message! echo "nftables: monitor events")))
+
+(def (cmd-firewalld-zones app)
+  (let* ((echo (app-state-echo app)))
+    (echo-message! echo "firewalld: zones")))
+
+(def (cmd-firewalld-services app)
+  (let* ((echo (app-state-echo app)))
+    (echo-message! echo "firewalld: services")))
+
+(def (cmd-firewalld-ports app)
+  (let* ((echo (app-state-echo app)))
+    (echo-message! echo "firewalld: ports")))
+
+(def (cmd-firewalld-rules app)
+  (let* ((echo (app-state-echo app)))
+    (echo-message! echo "firewalld: rich rules")))
+
+(def (cmd-firewalld-reload app)
+  (let* ((echo (app-state-echo app)))
+    (echo-message! echo "firewalld: reload")))
+
+(def (cmd-ufw-status app)
+  (let* ((echo (app-state-echo app)))
+    (echo-message! echo "ufw: status")))
+
+(def (cmd-ufw-allow app)
+  (let* ((echo (app-state-echo app)))
+    (echo-message! echo "ufw: allow rule")))
+
+(def (cmd-ufw-deny app)
+  (let* ((echo (app-state-echo app)))
+    (echo-message! echo "ufw: deny rule")))
+
+(def (cmd-ufw-delete app)
+  (let* ((echo (app-state-echo app)))
+    (echo-message! echo "ufw: delete rule")))
+
+(def (cmd-ufw-logging app)
+  (let* ((echo (app-state-echo app)))
+    (echo-message! echo "ufw: logging")))
+
+;; ── Round 465 — OpenVPN ext, WireGuard ext2, StrongSwan ext, Tailscale ext2 ──
+
+(def (cmd-openvpn-connect app)
+  (let* ((echo (app-state-echo app)))
+    (echo-message! echo "OpenVPN: connect")))
+
+(def (cmd-openvpn-config app)
+  (let* ((echo (app-state-echo app)))
+    (echo-message! echo "OpenVPN: configuration")))
+
+(def (cmd-openvpn-status app)
+  (let* ((echo (app-state-echo app)))
+    (echo-message! echo "OpenVPN: status")))
+
+(def (cmd-openvpn-log app)
+  (let* ((echo (app-state-echo app)))
+    (echo-message! echo "OpenVPN: log")))
+
+(def (cmd-openvpn-kill app)
+  (let* ((echo (app-state-echo app)))
+    (echo-message! echo "OpenVPN: kill session")))
+
+(def (cmd-wireguard-peers app)
+  (let* ((echo (app-state-echo app)))
+    (echo-message! echo "WireGuard: list peers")))
+
+(def (cmd-wireguard-transfer app)
+  (let* ((echo (app-state-echo app)))
+    (echo-message! echo "WireGuard: transfer stats")))
+
+(def (cmd-wireguard-handshake app)
+  (let* ((echo (app-state-echo app)))
+    (echo-message! echo "WireGuard: handshake info")))
+
+(def (cmd-wireguard-endpoints app)
+  (let* ((echo (app-state-echo app)))
+    (echo-message! echo "WireGuard: endpoints")))
+
+(def (cmd-wireguard-allowed app)
+  (let* ((echo (app-state-echo app)))
+    (echo-message! echo "WireGuard: allowed IPs")))
+
+(def (cmd-strongswan-status app)
+  (let* ((echo (app-state-echo app)))
+    (echo-message! echo "StrongSwan: status")))
+
+(def (cmd-strongswan-listcerts app)
+  (let* ((echo (app-state-echo app)))
+    (echo-message! echo "StrongSwan: list certificates")))
+
+(def (cmd-strongswan-listconns app)
+  (let* ((echo (app-state-echo app)))
+    (echo-message! echo "StrongSwan: list connections")))
+
+(def (cmd-strongswan-up app)
+  (let* ((echo (app-state-echo app)))
+    (echo-message! echo "StrongSwan: bring up tunnel")))
+
+(def (cmd-strongswan-down app)
+  (let* ((echo (app-state-echo app)))
+    (echo-message! echo "StrongSwan: bring down tunnel")))
+
+(def (cmd-tailscale-peers app)
+  (let* ((echo (app-state-echo app)))
+    (echo-message! echo "Tailscale: list peers")))
+
+(def (cmd-tailscale-dns app)
+  (let* ((echo (app-state-echo app)))
+    (echo-message! echo "Tailscale: DNS config")))
+
+(def (cmd-tailscale-routes app)
+  (let* ((echo (app-state-echo app)))
+    (echo-message! echo "Tailscale: subnet routes")))
+
+(def (cmd-tailscale-acls app)
+  (let* ((echo (app-state-echo app)))
+    (echo-message! echo "Tailscale: ACL policy")))
+
+(def (cmd-tailscale-funnel app)
+  (let* ((echo (app-state-echo app)))
+    (echo-message! echo "Tailscale: funnel")))
diff --git a/src/jerboa-emacs/editor-extra-modes.ss b/src/jerboa-emacs/editor-extra-modes.ss
index ce60870..d11fae7 100644
--- a/src/jerboa-emacs/editor-extra-modes.ss
+++ b/src/jerboa-emacs/editor-extra-modes.ss
@@ -30778,3 +30778,129 @@
 (def (cmd-varnish-vcl app)
   (let* ((echo (app-state-echo app)))
     (echo-message! echo "Varnish: VCL config")))
+
+;; ── Round 461 — Wireshark ext, tcpdump ext, nmap ext, netcat ext ──
+
+(def (cmd-wireshark-capture app)
+  (let* ((echo (app-state-echo app)))
+    (echo-message! echo "Wireshark: capture packets")))
+
+(def (cmd-wireshark-filter app)
+  (let* ((echo (app-state-echo app)))
+    (echo-message! echo "Wireshark: display filter")))
+
+(def (cmd-wireshark-decode app)
+  (let* ((echo (app-state-echo app)))
+    (echo-message! echo "Wireshark: decode protocol")))
+
+(def (cmd-wireshark-stats app)
+  (let* ((echo (app-state-echo app)))
+    (echo-message! echo "Wireshark: statistics")))
+
+(def (cmd-wireshark-follow app)
+  (let* ((echo (app-state-echo app)))
+    (echo-message! echo "Wireshark: follow stream")))
+
+(def (cmd-tcpdump-capture app)
+  (let* ((echo (app-state-echo app)))
+    (echo-message! echo "tcpdump: capture packets")))
+
+(def (cmd-tcpdump-filter app)
+  (let* ((echo (app-state-echo app)))
+    (echo-message! echo "tcpdump: filter expression")))
+
+(def (cmd-tcpdump-read app)
+  (let* ((echo (app-state-echo app)))
+    (echo-message! echo "tcpdump: read pcap")))
+
+(def (cmd-tcpdump-write app)
+  (let* ((echo (app-state-echo app)))
+    (echo-message! echo "tcpdump: write pcap")))
+
+(def (cmd-tcpdump-stats app)
+  (let* ((echo (app-state-echo app)))
+    (echo-message! echo "tcpdump: statistics")))
+
+;; ── Round 462 — iperf ext, mtr ext, traceroute ext, dig ext ──
+
+(def (cmd-nmap-scan app)
+  (let* ((echo (app-state-echo app)))
+    (echo-message! echo "nmap: port scan")))
+
+(def (cmd-nmap-service app)
+  (let* ((echo (app-state-echo app)))
+    (echo-message! echo "nmap: service detection")))
+
+(def (cmd-nmap-os app)
+  (let* ((echo (app-state-echo app)))
+    (echo-message! echo "nmap: OS detection")))
+
+(def (cmd-nmap-script app)
+  (let* ((echo (app-state-echo app)))
+    (echo-message! echo "nmap: script scan")))
+
+(def (cmd-nmap-vuln app)
+  (let* ((echo (app-state-echo app)))
+    (echo-message! echo "nmap: vulnerability scan")))
+
+(def (cmd-netcat-listen app)
+  (let* ((echo (app-state-echo app)))
+    (echo-message! echo "netcat: listen mode")))
+
+(def (cmd-netcat-connect app)
+  (let* ((echo (app-state-echo app)))
+    (echo-message! echo "netcat: connect")))
+
+(def (cmd-netcat-scan app)
+  (let* ((echo (app-state-echo app)))
+    (echo-message! echo "netcat: port scan")))
+
+(def (cmd-netcat-proxy app)
+  (let* ((echo (app-state-echo app)))
+    (echo-message! echo "netcat: proxy")))
+
+(def (cmd-netcat-transfer app)
+  (let* ((echo (app-state-echo app)))
+    (echo-message! echo "netcat: file transfer")))
+
+;; ── Round 463 — ss ext, ip ext, ethtool ext, NetworkManager ext ──
+
+(def (cmd-iperf-server app)
+  (let* ((echo (app-state-echo app)))
+    (echo-message! echo "iperf: server mode")))
+
+(def (cmd-iperf-client app)
+  (let* ((echo (app-state-echo app)))
+    (echo-message! echo "iperf: client mode")))
+
+(def (cmd-iperf-udp app)
+  (let* ((echo (app-state-echo app)))
+    (echo-message! echo "iperf: UDP test")))
+
+(def (cmd-iperf-bandwidth app)
+  (let* ((echo (app-state-echo app)))
+    (echo-message! echo "iperf: bandwidth test")))
+
+(def (cmd-iperf-parallel app)
+  (let* ((echo (app-state-echo app)))
+    (echo-message! echo "iperf: parallel streams")))
+
+(def (cmd-mtr-report app)
+  (let* ((echo (app-state-echo app)))
+    (echo-message! echo "mtr: report mode")))
+
+(def (cmd-mtr-json app)
+  (let* ((echo (app-state-echo app)))
+    (echo-message! echo "mtr: JSON output")))
+
+(def (cmd-mtr-wide app)
+  (let* ((echo (app-state-echo app)))
+    (echo-message! echo "mtr: wide report")))
+
+(def (cmd-mtr-tcp app)
+  (let* ((echo (app-state-echo app)))
+    (echo-message! echo "mtr: TCP mode")))
+
+(def (cmd-mtr-udp app)
+  (let* ((echo (app-state-echo app)))
+    (echo-message! echo "mtr: UDP mode")))
diff --git a/src/jerboa-emacs/editor-extra-regs2.ss b/src/jerboa-emacs/editor-extra-regs2.ss
index a1e5245..a572952 100644
--- a/src/jerboa-emacs/editor-extra-regs2.ss
+++ b/src/jerboa-emacs/editor-extra-regs2.ss
@@ -11242,4 +11242,115 @@
   (register-command! 'curl-cert cmd-curl-cert)
   (register-command! 'curl-cookies cmd-curl-cookies)
   (register-command! 'curl-verbose cmd-curl-verbose)
+
+
+  ;; Round 461 — Wireshark ext, tcpdump ext, nmap ext, netcat ext
+  (register-command! 'wireshark-capture cmd-wireshark-capture)
+  (register-command! 'wireshark-filter cmd-wireshark-filter)
+  (register-command! 'wireshark-decode cmd-wireshark-decode)
+  (register-command! 'wireshark-stats cmd-wireshark-stats)
+  (register-command! 'wireshark-follow cmd-wireshark-follow)
+  (register-command! 'tcpdump-capture cmd-tcpdump-capture)
+  (register-command! 'tcpdump-filter cmd-tcpdump-filter)
+  (register-command! 'tcpdump-read cmd-tcpdump-read)
+  (register-command! 'tcpdump-write cmd-tcpdump-write)
+  (register-command! 'tcpdump-stats cmd-tcpdump-stats)
+  (register-command! 'nmap-scan cmd-nmap-scan)
+  (register-command! 'nmap-service cmd-nmap-service)
+  (register-command! 'nmap-os cmd-nmap-os)
+  (register-command! 'nmap-script cmd-nmap-script)
+  (register-command! 'nmap-vuln cmd-nmap-vuln)
+  (register-command! 'netcat-listen cmd-netcat-listen)
+  (register-command! 'netcat-connect cmd-netcat-connect)
+  (register-command! 'netcat-scan cmd-netcat-scan)
+  (register-command! 'netcat-proxy cmd-netcat-proxy)
+  (register-command! 'netcat-transfer cmd-netcat-transfer)
+
+  ;; Round 462 — iperf ext, mtr ext, traceroute ext, dig ext
+  (register-command! 'iperf-server cmd-iperf-server)
+  (register-command! 'iperf-client cmd-iperf-client)
+  (register-command! 'iperf-udp cmd-iperf-udp)
+  (register-command! 'iperf-bandwidth cmd-iperf-bandwidth)
+  (register-command! 'iperf-parallel cmd-iperf-parallel)
+  (register-command! 'mtr-report cmd-mtr-report)
+  (register-command! 'mtr-json cmd-mtr-json)
+  (register-command! 'mtr-wide cmd-mtr-wide)
+  (register-command! 'mtr-tcp cmd-mtr-tcp)
+  (register-command! 'mtr-udp cmd-mtr-udp)
+  (register-command! 'traceroute-icmp cmd-traceroute-icmp)
+  (register-command! 'traceroute-tcp cmd-traceroute-tcp)
+  (register-command! 'traceroute-udp cmd-traceroute-udp)
+  (register-command! 'traceroute-as cmd-traceroute-as)
+  (register-command! 'traceroute-mtu cmd-traceroute-mtu)
+  (register-command! 'dig-query cmd-dig-query)
+  (register-command! 'dig-trace cmd-dig-trace)
+  (register-command! 'dig-axfr cmd-dig-axfr)
+  (register-command! 'dig-reverse cmd-dig-reverse)
+  (register-command! 'dig-short cmd-dig-short)
+
+  ;; Round 463 — ss ext, ip ext, ethtool ext, NetworkManager ext
+  (register-command! 'ss-listen cmd-ss-listen)
+  (register-command! 'ss-established cmd-ss-established)
+  (register-command! 'ss-tcp cmd-ss-tcp)
+  (register-command! 'ss-udp cmd-ss-udp)
+  (register-command! 'ss-summary cmd-ss-summary)
+  (register-command! 'ip-addr cmd-ip-addr)
+  (register-command! 'ip-route cmd-ip-route)
+  (register-command! 'ip-link cmd-ip-link)
+  (register-command! 'ip-neigh cmd-ip-neigh)
+  (register-command! 'ip-rule cmd-ip-rule)
+  (register-command! 'ethtool-info cmd-ethtool-info)
+  (register-command! 'ethtool-stats cmd-ethtool-stats)
+  (register-command! 'ethtool-ring cmd-ethtool-ring)
+  (register-command! 'ethtool-offload cmd-ethtool-offload)
+  (register-command! 'ethtool-driver cmd-ethtool-driver)
+  (register-command! 'nmcli-connection cmd-nmcli-connection)
+  (register-command! 'nmcli-device cmd-nmcli-device)
+  (register-command! 'nmcli-wifi cmd-nmcli-wifi)
+  (register-command! 'nmcli-general cmd-nmcli-general)
+  (register-command! 'nmcli-monitor cmd-nmcli-monitor)
+
+  ;; Round 464 — iptables ext, nftables ext, firewalld ext, ufw ext
+  (register-command! 'iptables-list cmd-iptables-list)
+  (register-command! 'iptables-nat cmd-iptables-nat)
+  (register-command! 'iptables-filter cmd-iptables-filter)
+  (register-command! 'iptables-mangle cmd-iptables-mangle)
+  (register-command! 'iptables-save cmd-iptables-save)
+  (register-command! 'nftables-list cmd-nftables-list)
+  (register-command! 'nftables-add cmd-nftables-add)
+  (register-command! 'nftables-delete cmd-nftables-delete)
+  (register-command! 'nftables-flush cmd-nftables-flush)
+  (register-command! 'nftables-monitor cmd-nftables-monitor)
+  (register-command! 'firewalld-zones cmd-firewalld-zones)
+  (register-command! 'firewalld-services cmd-firewalld-services)
+  (register-command! 'firewalld-ports cmd-firewalld-ports)
+  (register-command! 'firewalld-rules cmd-firewalld-rules)
+  (register-command! 'firewalld-reload cmd-firewalld-reload)
+  (register-command! 'ufw-status cmd-ufw-status)
+  (register-command! 'ufw-allow cmd-ufw-allow)
+  (register-command! 'ufw-deny cmd-ufw-deny)
+  (register-command! 'ufw-delete cmd-ufw-delete)
+  (register-command! 'ufw-logging cmd-ufw-logging)
+
+  ;; Round 465 — OpenVPN ext, WireGuard ext2, StrongSwan ext, Tailscale ext2
+  (register-command! 'openvpn-connect cmd-openvpn-connect)
+  (register-command! 'openvpn-config cmd-openvpn-config)
+  (register-command! 'openvpn-status cmd-openvpn-status)
+  (register-command! 'openvpn-log cmd-openvpn-log)
+  (register-command! 'openvpn-kill cmd-openvpn-kill)
+  (register-command! 'wireguard-peers cmd-wireguard-peers)
+  (register-command! 'wireguard-transfer cmd-wireguard-transfer)
+  (register-command! 'wireguard-handshake cmd-wireguard-handshake)
+  (register-command! 'wireguard-endpoints cmd-wireguard-endpoints)
+  (register-command! 'wireguard-allowed cmd-wireguard-allowed)
+  (register-command! 'strongswan-status cmd-strongswan-status)
+  (register-command! 'strongswan-listcerts cmd-strongswan-listcerts)
+  (register-command! 'strongswan-listconns cmd-strongswan-listconns)
+  (register-command! 'strongswan-up cmd-strongswan-up)
+  (register-command! 'strongswan-down cmd-strongswan-down)
+  (register-command! 'tailscale-peers cmd-tailscale-peers)
+  (register-command! 'tailscale-dns cmd-tailscale-dns)
+  (register-command! 'tailscale-routes cmd-tailscale-routes)
+  (register-command! 'tailscale-acls cmd-tailscale-acls)
+  (register-command! 'tailscale-funnel cmd-tailscale-funnel)
 )