diff --git a/net-analyzer/netsniff-ng/Manifest b/net-analyzer/netsniff-ng/Manifest
index 66312eb..cd73920 100644
--- a/net-analyzer/netsniff-ng/Manifest
+++ b/net-analyzer/netsniff-ng/Manifest
@@ -1 +1,2 @@
 DIST netsniff-ng-0.6.6.tar.xz 617204 BLAKE2B 9b8f018fa1ec53f211f9540fe1dff10e15ce615ab2c39b05917b5ddb0b87058f7aac6bff10a098371544a2e7706cc515fd0b25609db9cd10f6b8a689b70702e6 SHA512 f6d158e61c5be72506e2732e82e3863b24115abcb4642c5998b7225475c07d8566ff124f6e204e5a1919a57aef1d34ebf234076c16d99299847f8204777eb834
+DIST netsniff-ng-0.6.8.tar.xz 617820 BLAKE2B 1810b505e1bb2d973820629be30bd37de87f6c49b5c044c7ee6e7e5eb983c2e8b80f6ad772a7b42d315502dfdd92143cf1cd340101c91b074cba1ad53c9f40ea SHA512 5cb0e66ea399068a7017a77612165fca94509176e0b4d3bac146e4bd73e09682cb1ee82c276b842263497fa74d8875dbda0e6c63b5b5ffe76531c1f43cf9bb99
diff --git a/net-analyzer/netsniff-ng/netsniff-ng-0.6.8.ebuild b/net-analyzer/netsniff-ng/netsniff-ng-0.6.8.ebuild
new file mode 100644
index 0000000..cf803b1
--- /dev/null
+++ b/net-analyzer/netsniff-ng/netsniff-ng-0.6.8.ebuild
@@ -0,0 +1,85 @@
+# Copyright 1999-2021 Gentoo Authors
+# Distributed under the terms of the GNU General Public License v2
+
+EAPI=7
+
+inherit multilib toolchain-funcs
+
+DESCRIPTION="high performance network sniffer for packet inspection"
+HOMEPAGE="http://netsniff-ng.org/"
+if [[ "${PV}" == *9999 ]] ; then
+	inherit git-r3
+	EGIT_REPO_URI="https://github.com/borkmann/${PN}.git"
+else
+	SRC_URI="http://pub.${PN}.org/${PN}/${P}.tar.xz"
+	KEYWORDS="~amd64"
+fi
+
+LICENSE="GPL-2"
+SLOT="0"
+IUSE="debug geoip zlib"
+
+RDEPEND="
+	dev-libs/libcli
+	dev-libs/libnl:3
+	dev-libs/userspace-rcu:=
+	net-libs/libnet:1.1
+	net-libs/libnetfilter_conntrack
+	net-libs/libpcap
+	sys-libs/ncurses:0=
+	geoip? ( dev-libs/geoip )
+	zlib? ( sys-libs/zlib:= )
+"
+DEPEND="${RDEPEND}"
+BDEPEND="
+	sys-devel/flex
+	sys-devel/bison
+	dev-libs/libsodium
+	virtual/pkgconfig
+"
+
+src_prepare() {
+	default
+
+	sed -e '/CFLAGS/s:?=:+=:' \
+		-e '/CPPFLAGS/s:?=:+=:' \
+		-e '/CFLAGS/s:\(-g\|-O2\|-O3\|-m\(arch\|tune\)=native\)::g' \
+		-i Makefile || die
+
+	if ! grep -Fq nacl-20110221 curvetun/nacl_build.sh ; then
+		die "have nacl-20110221, expected $(grep ${MY_NACL_P} curvetun/nacl_build.sh)"
+	fi
+
+	export NACL_INC_DIR="${EROOT}/usr/include/nacl"
+	export NACL_LIB_DIR="${EROOT}/usr/$(get_libdir)/nacl"
+
+	# do not compress man pages by default
+	sed \
+		-e '/gzip/s@\$(Q).*$@$(Q)cp $(1).8 $(1)/$(1).8@' \
+		-e 's@\.8\.gz@.8@' \
+		-i Template || die
+}
+
+src_configure() {
+	local myconfargs=(
+		--prefix="${EPREFIX}/usr"
+		--sysconfdir="${EPREFIX}/etc"
+		$(usex debug --enable-debug '')
+		$(usex geoip '' --disable-geoip)
+		$(usex zlib '' --disable-zlib)
+	)
+	# not an autoconf generated configure
+	./configure "${myconfargs[@]}" || die
+}
+
+src_compile() {
+	emake CC="$(tc-getCC)" LD="$(tc-getCC)" CCACHE="" \
+		LEX=lex YAAC=bison STRIP=true \
+		Q= HARDENING=1
+}
+
+src_install() {
+	emake PREFIX="${ED}/usr" ETCDIR="${ED}/etc" install
+
+	dodoc AUTHORS README REPORTING-BUGS
+}