diff --git a/pkgs/tools/networking/tcpdump/default.nix b/pkgs/tools/networking/tcpdump/default.nix
new file mode 100644
index 00000000000..f47ca7a965c
--- /dev/null
+++ b/pkgs/tools/networking/tcpdump/default.nix
@@ -0,0 +1,10 @@
+{stdenv, fetchurl, libpcap}:
+
+stdenv.mkDerivation {
+  name = "tcpdump-3.9.5";
+  src = fetchurl {
+    url = http://www.tcpdump.org/release/tcpdump-3.9.5.tar.gz;
+    md5 = "2135e7b1f09af0eaf66d2af822bed44a";
+  };
+  buildInputs = [libpcap];
+}
diff --git a/pkgs/top-level/all-packages.nix b/pkgs/top-level/all-packages.nix
index 07924c935b6..7826e59765f 100644
--- a/pkgs/top-level/all-packages.nix
+++ b/pkgs/top-level/all-packages.nix
@@ -486,6 +486,10 @@ rec {
     inherit fetchurl stdenv pam;
   };
 
+  tcpdump = import ../tools/networking/tcpdump {
+    inherit fetchurl stdenv libpcap;
+  };
+
   tightvnc = import ../tools/admin/tightvnc {
     inherit fetchurl stdenv x11 zlib libjpeg;
     inherit (xlibs) imake gccmakedep libXmu libXaw libXpm libXp;