diff --git a/pkgs/tools/networking/tcptraceroute/default.nix b/pkgs/tools/networking/tcptraceroute/default.nix
new file mode 100644
index 000000000000..9e13cfc59c1c
--- /dev/null
+++ b/pkgs/tools/networking/tcptraceroute/default.nix
@@ -0,0 +1,28 @@
+{ stdenv , pkgs , fetchurl, libpcap, libnet
+}:
+
+stdenv.mkDerivation rec {
+   pkgname = "tcptraceroute";
+   name = "${pkgname}-${version}";
+   version = "1.5beta7";
+
+   src = fetchurl {
+     url = "https://github.com/mct/${pkgname}/archive/${name}.tar.gz";
+     sha256 = "1rz8bgc6r1isb40awv1siirpr2i1paa2jc1cd3l5pg1m9522xzap";
+   };
+
+   # for reasons unknown --disable-static configure flag doesn't disable static
+   # linking.. we instead override CFLAGS with -static omitted
+   preBuild = ''
+      makeFlagsArray=(CFLAGS=" -g -O2 -Wall")
+   '';
+
+   buildInputs = [ libpcap libnet ];
+
+   meta = {
+     description = "A traceroute implementation using TCP packets.";
+     homepage = https://github.com/mct/tcptraceroute;
+     license = stdenv.lib.licenses.gpl2;
+     maintainers = [ stdenv.lib.maintainers.pbogdan ];
+   };
+}
diff --git a/pkgs/top-level/all-packages.nix b/pkgs/top-level/all-packages.nix
index 48eb4f872656..fdf1f8752615 100644
--- a/pkgs/top-level/all-packages.nix
+++ b/pkgs/top-level/all-packages.nix
@@ -4237,6 +4237,8 @@ with pkgs;
 
   tcpcrypt = callPackage ../tools/security/tcpcrypt { };
 
+  tcptraceroute = callPackage ../tools/networking/tcptraceroute { };
+
   tboot = callPackage ../tools/security/tboot { };
 
   tcpdump = callPackage ../tools/networking/tcpdump { };