gmane.network.wireshark.announce

Wireshark 1.0.2 is now available

Wireshark announcements — 2008-07-10T21:15:35

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 I'm proud to announce the release of Wireshark 1.0.2. What is Wireshark? Wireshark is the world's most popular network protocol analyzer. It is used for troubleshooting, analysis, development, and education. What's New Bug Fixes The following vulnerabilities have been fixed. See the security advisory for details and a workaround. o Wireshark could crash while reassembling packets. Versions affected: 0.8.19 to 1.0.1 The following bugs have been fixed: o Dumpcap could crash on some versions of Windows (primarily Vista). (Bug 2677) New and Updated Features There are no new or updated features in this release. New Protocol Support There are no new protocols in this release. Updated Protocol Support There are no updated protocols in this release. New and Updated Capture File Support There is no new or updated capture file support in this release. Getting Wireshark Wireshark source code and installation packages are available from the download page on the main web site. Vendor-supplied Packages Most Linux and Unix vendors supply their own Wireshark packages. You can usually install or upgrade Wireshark using the package management system specific to that platform. A list of third-party packages can be found on the download page on the Wireshark web site. File Locations Wireshark and TShark look in several different locations for preference files, plugins, SNMP MIBS, and RADIUS dictionaries. These locations vary from platform to platform. You can use About->Folders to find the default locations on your system. Known Problems Wireshark may appear offscreen on multi-monitor Windows systems. (Bug 553) Wireshark might make your system disassociate from a wireless network on OS X. (Bug 1315) Dumpcap might not quit if Wireshark or TShark crashes. (Bug 1419) Wireshark is unable to decrypt WPA group keys. (Bug 1420) The BER dissector might infinitely loop. (Bug 1516) Wireshark can't dynamically update the packet list. This means that host name resolutions above a certain response time threshold won't show up in the packet list. (Bug 1605) Capture filters aren't applied when capturing from named pipes. (Bug 1814) Wireshark might freeze when reading from a pipe. (Bug 2082) Capturing from named pipes might be delayed on Windows. (Bug 2200) Filtering tshark captures with display filters (-R) no longer works. (Bug 2234) Getting Help Community support is available on the wireshark-users mailing list. Subscription information and archives for all of Wireshark's mailing lists can be found on the web site. Commercial support and development services are available from CACE Technologies. Frequently Asked Questions A complete FAQ is available on the Wireshark web site. Digests wireshark-1.0.2.tar.bz2: 13064896 bytes MD5(wireshark-1.0.2.tar.bz2)=77114890256222605a699d7123d86a7d SHA1(wireshark-1.0.2.tar.bz2)=6d5736096efde3507a900942bfb21c492a42a057 RIPEMD160(wireshark-1.0.2.tar.bz2)=bd42952c87c412b4395485cbaaf8698d26e03137 wireshark-1.0.2.tar.gz: 16762866 bytes MD5(wireshark-1.0.2.tar.gz)=6045048aa8645d54d1a06bb20e0d23a3 SHA1(wireshark-1.0.2.tar.gz)=e171666dc9e6d93bf31b7e6b5b5348c0b0943f16 RIPEMD160(wireshark-1.0.2.tar.gz)=6a5d1c0d8c42ffc2a3a1f4737d2f9989f1ae1f99 wireshark-setup-1.0.2.exe: 22192304 bytes MD5(wireshark-setup-1.0.2.exe)=9b7b5e87284090b7aab2fe899ae028a3 SHA1(wireshark-setup-1.0.2.exe)=472d4f3d0a0ad204bef7a1b3a4e1dcc135d1b55e RIPEMD160(wireshark-setup-1.0.2.exe)=20602d98899d6726e76429b43c52087bad198639 wireshark-1.0.2.u3p: 20047161 bytes MD5(wireshark-1.0.2.u3p)=8bcf730793d8b6800bb3f0308f0a9559 SHA1(wireshark-1.0.2.u3p)=46640194ca0275c632ee045c4268cf29f62c38a9 RIPEMD160(wireshark-1.0.2.u3p)=411176646e9a979437c0b881605948a1592089c7 WiresharkPortable-1.0.2.paf.exe: 17492451 bytes MD5(WiresharkPortable-1.0.2.paf.exe)=ff05c563cd7e34dec89a519a8cd88da2 SHA1(WiresharkPortable-1.0.2.paf.exe)=2a9079347148b2d331209cc362958f56eeb19071 RIPEMD160(WiresharkPortable-1.0.2.paf.exe)=9d60968f64183d7c6a02a3e9a266972afba263f7 Wireshark 1.0.2 Intel.dmg: 35834912 bytes MD5(Wireshark 1.0.2 Intel.dmg)=0414ba5b77686caf93243de19e4964b7 SHA1(Wireshark 1.0.2 Intel.dmg)=a2c7dc95f2cb6ce26d4ab65f762417d8d82656a0 RIPEMD160(Wireshark 1.0.2 Intel.dmg)=28468edc93702f7b128625790918480af08a2375 patch-wireshark-1.0.1-to-1.0.2.diff.bz2: 18972 bytes MD5(patch-wireshark-1.0.1-to-1.0.2.diff.bz2)=81da9a3ad2036d5d0f8e1f89a63ba5a7 SHA1(patch-wireshark-1.0.1-to-1.0.2.diff.bz2)=bf039d8a59f1ae5a7c0defdbdaa703fe0695a7ca RIPEMD160(patch-wireshark-1.0.1-to-1.0.2.diff.bz2)=ab6b8af3033785b0274ccda5c914adecd8a14613 -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.8 (Darwin) iEYEARECAAYFAkh2e/MACgkQpw8IXSHylJqNdwCgmcNeQwBPL6CYybE2/rGdGJjd P8YAoJsgFtrvSyz9k02PJXqb0iH0Nrvp =p7zf -----END PGP SIGNATURE-----

Wireshark 1.0.1 is now available

Wireshark announcements — 2008-06-30T23:40:23

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 I'm proud to announce the release of Wireshark 1.0.1. What is Wireshark? Wireshark is the world's most popular network protocol analyzer. It is used for troubleshooting, analysis, development, and education. What's New Bug Fixes The following vulnerabilities have been fixed. See the security advisory for details and a workaround. o The GSM SMS dissector could crash. Versions affected: 0.99.2 to 1.0.0 o The PANA and KISMET dissectors could force Wireshark to quit unexpectedly. Versions affected: 0.99.3 to 1.0.0 o The RTMPT dissector could crash. Versions affected: 0.99.8 to 1.0.0 o The RMI dissector could disclose system memory. Discovered by Noam Rathus. Versions affected: 0.9.5 to 1.0.0 o The syslog dissector could crash. Versions affected: 1.0.0 The following bugs have been fixed: o RPC portmap classification switched to TCP after filtering. (Bug 1392) o Force the foreground color when the background is forced. (Bug 1735) o RPC stream shows malformed packets. (Bug 2148) o SNMP trap dissection fails. (Bug 2253) o Failure to detect/open valid ERF files. (Bug 2359) o Window scaling bug. (Bug 2378) o Bugs in the EIGRP dissector. (Bug 2381) o E212 Mobile network code 3rd digit is not correctly decoded. (Bug 2393) o The BOOTP dissector fails to initialize and display some values. (Bug 2395) o Data string filter crash. (Bug 2402) o Debian packaging problems. (Bug 2405) o Expert info composite crash for LDAP. (Bug 2407) o Statistics > Multicast Streams are broken. (Bug 2414) o "Read me first" file is empty in the OS X .dmg. (Bug 2425) o Failed tshark PDML export to file. (Bug 2432) o RTCP MOS fields display wrong values. (Bug 2440) o SNMP trap parse error. (Bug 2442) o Ports incorrectly decoded as DPLAY instead of RTP. (Bug 2452) o Incorrect decoding of DST MAC address of frame containing ICMPv6 Echo Request. (Bug 2456) o Fix wireshark-filter man page for packet-diameter_3gpp.c fields. (Bug 2457) o Dissector bug, protocol SNMP: proto.c:932: failed assertion. (Bug 2468) o UDP not decoded as UNIStim. (Bug 2475) o Debug text output from MIKEY dissector. (Bug 2481) o Windows compilation errors with flex 2.5.35. (Bug 2493) o RTP heuristic interferes with STUN/T38 portion of heuristic. (Bug 2497) o WiMAX dissector assertion. (Bug 2501) o RTP header extensions with length>4 bytes dissected incorrectly. (Bug 2505) o Compilation failure on non-european Windows systems. (Bug 2513) o BACnet BVLC NAK decoding. (Bug 2517) o 'tshark -Tfields -e data' omits last character of data. (Bug 2518) o "Next file every" inconsistent behaviour. (Bug 2599) o Wireshark doest not parse iSCSI login PDU. (Bug 2616) o URL and encoding for OUI listings in make-manuf. (Bug 2619) New and Updated Features The following features are new (or have been significantly updated) since the last release: o The "About" box finally displays version 1.0. o Wireshark now supports custom columns. o This release includes an experimental Mac OS X package. New Protocol Support There are no new protocols in this release. Updated Protocol Support ACTRACE, BACnet BVLC, BOOTP, E212, iSCSI, IUA, LDAP, MGCP, MIKEY, MSMMS, RMI, RPC, RTCP, RTP, SIP, SNMP, TCP, UNIStim, WiMAX New and Updated Capture File Support Endace ERF Getting Wireshark Wireshark source code and installation packages are available from the download page on the main web site. Vendor-supplied Packages Most Linux and Unix vendors supply their own Wireshark packages. You can usually install or upgrade Wireshark using the package management system specific to that platform. A list of third-party packages can be found on the download page on the Wireshark web site. File Locations Wireshark and TShark look in several different locations for preference files, plugins, SNMP MIBS, and RADIUS dictionaries. These locations vary from platform to platform. You can use About->Folders to find the default locations on your system. Known Problems Wireshark may appear offscreen on multi-monitor Windows systems. (Bug 553) Wireshark might make your system disassociate from a wireless network on OS X. (Bug 1315) Dumpcap might not quit if Wireshark or TShark crashes. (Bug 1419) Wireshark is unable to decrypt WPA group keys. (Bug 1420) The BER dissector might infinitely loop. (Bug 1516) Wireshark can't dynamically update the packet list. This means that host name resolutions above a certain response time threshold won't show up in the packet list. (Bug 1605) Capture filters aren't applied when capturing from named pipes. (Bug 1814) Wireshark might freeze when reading from a pipe. (Bug 2082) Capturing from named pipes might be delayed on Windows. (Bug 2200) Filtering tshark captures with display filters (-R) no longer works. (Bug 2234) Getting Help Community support is available on the wireshark-users mailing list. Subscription information and archives for all of Wireshark's mailing lists can be found on the web site. Commercial support and development services are available from CACE Technologies. Frequently Asked Questions A complete FAQ is available on the Wireshark web site. Digests wireshark-1.0.1.tar.bz2: 13087502 bytes MD5(wireshark-1.0.1.tar.bz2)=e1a0c8402622b8416fcf8ccf429a115f SHA1(wireshark-1.0.1.tar.bz2)=828efc186bc7eb4872628952598cd38389d8d5b0 RIPEMD160(wireshark-1.0.1.tar.bz2)=2e53cfda4cd7b831c19463ebfa88c74cb625b1a1 MD5(wireshark-1.0.1.tar.gz)=da33c2abeb8b982ca50e4c43d8c0fe27 SHA1(wireshark-1.0.1.tar.gz)=b178f3539759966d86f7f2e423cbf26067fe1134 RIPEMD160(wireshark-1.0.1.tar.gz)=469c329285d7a30cb6da0df241a02c35e237de2c wireshark-setup-1.0.1.exe: 22212707 bytes MD5(wireshark-setup-1.0.1.exe)=63aeef697893d1562eee98e528b762e6 SHA1(wireshark-setup-1.0.1.exe)=a2854e5b194d153aa2fd14d075bc63adc1c4af1e RIPEMD160(wireshark-setup-1.0.1.exe)=c408f044c2baacf72cbceabb96e91f8c1229341e wireshark-1.0.1.u3p: 20048751 bytes MD5(wireshark-1.0.1.u3p)=ea27534e619fb4366c9ceeff4d93fcaf SHA1(wireshark-1.0.1.u3p)=7e1e75f8a3f28d4f722a794ee00aa56ab67ee9bd RIPEMD160(wireshark-1.0.1.u3p)=0a5b8bad236420b0a7afa1be172b3b2c2bea5e99 WiresharkPortable-1.0.1.paf.exe: 17496035 bytes MD5(WiresharkPortable-1.0.1.paf.exe)=ccaa4338c66e68505efecd4ca28b837d SHA1(WiresharkPortable-1.0.1.paf.exe)=d56fb6c403ae59cc56eb2bd13b5d7f46d065660c RIPEMD160(WiresharkPortable-1.0.1.paf.exe)=73669d7a18996392f39ba02ff56f0f88b4cae53c Wireshark 1.0.1 Intel.dmg: 35834540 bytes MD5(Wireshark 1.0.1 Intel.dmg)=4696b65e6d37862963d8a531e7e47ad9 SHA1(Wireshark 1.0.1 Intel.dmg)=e41ad6f21d3a4e24df1071c35347ed8a1de03450 RIPEMD160(Wireshark 1.0.1 Intel.dmg)=aa531409ad8d7f3a3b3b0b65e790061e1c5a69ea patch-wireshark-1.0.0-to-1.0.1.diff.bz2: 138218 bytes MD5(patch-wireshark-1.0.0-to-1.0.1.diff.bz2)=2c1b5044691686bf9a103e975d7cc3c1 SHA1(patch-wireshark-1.0.0-to-1.0.1.diff.bz2)=6279766ab8f9efe7dc61bbb6a162ea30ea2c72a9 RIPEMD160(patch-wireshark-1.0.0-to-1.0.1.diff.bz2)=e814b45c475b943dbc1242107324386cedcf5090 -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.8 (Darwin) iEYEARECAAYFAkhpbuQACgkQpw8IXSHylJphvgCfcori//vF1JVGjLLPwCGftT9r XiwAoMwNQEAJIJS8N/tkwaoQyB6O9T7+ =o7Cl -----END PGP SIGNATURE-----

Wireshark 1.0.1pre1 is now available

Wireshark announcements — 2008-06-25T18:36:52

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Wireshark 1.0.1pre1 is now available for testing. Installers for Windows, OS X, and source code can be downloaded immediately from http://www.wireshark.org/download/prerelease/wireshark-setup-1.0.1pre1.exe http://www.wireshark.org/download/prerelease/wireshark-1.0.1pre1.u3p http://www.wireshark.org/download/prerelease/WiresharkPortable-1.0.1pre1.paf.exe http://www.wireshark.org/download/prerelease/Wireshark%201.0.1pre1%20Intel.dmg http://www.wireshark.org/download/prerelease/wireshark-1.0.1pre1.tar.gz The Mac OS X installer requires OS X 10.5 on Intel. We hope to provide support for PPC and earlier OS X releases in the future. An in-progress list of changes can be found in the release notes at http://www.wireshark.org/docs/relnotes/wireshark-1.0.1.html. Please report any problems you find to the wireshark-dev mailing list or open a ticket at https://bugs.wireshark.org/ . Barring any problems, version 1.0.1 will be released on Monday, June 30th. File verification information: wireshark-setup-1.0.1pre1.exe: 22214924 bytes MD5(wireshark-setup-1.0.1pre1.exe)= 26671e49880a996d393f6ca3ae8bb475 SHA1(wireshark-setup-1.0.1pre1.exe)= 3bf9035b763458349efc95cc0f6ef5e2084dea9d RIPEMD160(wireshark-setup-1.0.1pre1.exe)= 9347fab5943569fd62009b07b485cde1d0a2e606 wireshark-1.0.1pre1.u3p: 19986957 bytes MD5(wireshark-1.0.1pre1.u3p)= acd9cbea7d9bcd238bb2bb691e5872b4 SHA1(wireshark-1.0.1pre1.u3p)= 5ae7796c9847612fb266efdb74a5a50fd7965510 RIPEMD160(wireshark-1.0.1pre1.u3p)= e1840e93876d9f08f04dd80afca1b963a8ae91bb WiresharkPortable-1.0.1pre1.paf.exe: 17435635 bytes MD5(WiresharkPortable-1.0.1pre1.paf.exe)= f6c38b4f181b071dd10bae1f32e9d63c SHA1(WiresharkPortable-1.0.1pre1.paf.exe)= 5769a18c96838beba57c62fdc8464313af35ee84 RIPEMD160(WiresharkPortable-1.0.1pre1.paf.exe)= 0dd9e6e6da6cfa22a60a6113a846a1b6d6499931 Wireshark 1.0.1pre1 Intel.dmg: 35819592 bytes MD5(Wireshark 1.0.1pre1 Intel.dmg)= 7af325fdeff801bcaa721c1f92556294 SHA1(Wireshark 1.0.1pre1 Intel.dmg)= 75d00851a67215f641d86f443fd07df9ca9b7562 RIPEMD160(Wireshark 1.0.1pre1 Intel.dmg)= 53fb9c9668838fa2ea3658b51901477434d9549a wireshark-1.0.1pre1.tar.gz: 16772755 bytes MD5(wireshark-1.0.1pre1.tar.gz)= 43a6babc31abfdb85be57955f33e7d40 SHA1(wireshark-1.0.1pre1.tar.gz)= d68bad25e10350f8e81406bda7e159b5995b32c5 RIPEMD160(wireshark-1.0.1pre1.tar.gz)= 4db18588f24a58b129d9243137754e976b232d26 -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.8 (Darwin) iEYEARECAAYFAkhikD8ACgkQpw8IXSHylJqCpQCg2SknKdWEdvFo1MtDXE4k9ZvL A5MAoMrlzpfq78oja14uOVJQovtac4Vk =E/Wp -----END PGP SIGNATURE-----

What is a good average for malformed packets

Wireshark announcements — 2008-06-09T14:18:30

_______________________________________________ Wireshark-announce mailing list Wireshark-announce-IZ8446WsY0/dtAWm4Da02A< at >public.gmane.org https://wireshark.org/mailman/listinfo/wireshark-announce

Wireshark 1.0 is now available

Wireshark announcements — 2008-04-01T03:30:31

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 I'm proud to announce the release of Wireshark 1.0. This is the culmination of nearly ten years of hard work by a team of brilliant and talented developers. It is an honor to be able to work with these people. On behalf of the development team, I would like to thank Wireshark's user community for all of your enthusiasm and support over the years. Wireshark development will continue, and we have lots of great features to offer in the coming years. What is Wireshark? Wireshark is the world's most popular network protocol analyzer. It is used for troubleshooting, analysis, development, and education. What's New Bug Fixes The following vulnerabilities have been fixed. See the security advisory for details and a workaround. o The X.509sat dissector could crash. Versions affected: 0.99.5 to 0.99.8 o The Roofnet dissector could crash on Windows, Solaris, and possibly other platforms. Versions affected: 0.99.5 to 0.99.8 o The LDAP dissector could crash on Windows and possibly other platforms. Versions affected: 0.99.2 to 0.99.8 o The SCCP dissector could crash while using the "decode as" feature. Versions affected: 0.99.6 to 0.99.8 The following bugs have been fixed: o Several SNMP-related bugs have been fixed. o Several memory-related bugs have been fixed. New and Updated Features The following features are new (or have been significantly updated) since the last release: o The "About" box finally displays version 1.0. o Wireshark now supports custom columns. o This release includes an experimental Mac OS X package. New Protocol Support IEEE 802.15.4, Infiniband, Parallel Redundancy Protocol, RedBack Lawful Intercept, Xcsl Updated Protocol Support AFS, ALCAP, ATM, BACapp, CIGI, DCC (renamed from DCCP), DCCP (renamed from DCP), DCERPC SPOOLSS, DCERPC NT, DHCP, DirectPlay, EtherCAT, FIX, GIOP, GTP, H.248, HTTP, ICMPv6, ICQ, IPv6, ISIS, JXTA, NCP, P_Mul, PCAP, PKIX1Explicit, PTP, RADIUS, Roofnet, RTCP, RTMPT, RTP, RX, SABP, SCSI OSD, sFlow, SMPP, SNMP, SSCOP, TAPA, TIPC, TPNCP, UNISTIM, X.25, X.509sat, XML New and Updated Capture File Support Hilscher Analyzer Getting Wireshark Wireshark source code and installation packages are available from the download page on the main web site. Vendor-supplied Packages Most Linux and Unix vendors supply their own Wireshark packages. You can usually install or upgrade Wireshark using the package management system specific to that platform. A list of third-party packages can be found on the download page on the Wireshark web site. File Locations Wireshark and TShark look in several different locations for preference files, plugins, SNMP MIBS, and RADIUS dictionaries. These locations vary from platform to platform. You can use About->Folders to find the default locations on your system. Known Problems Wireshark may appear offscreen on multi-monitor Windows systems. (Bug 553) Wireshark might make your system disassociate from a wireless network on OS X. (Bug 1315) Dumpcap might not quit if Wireshark or TShark crashes. (Bug 1419) Wireshark is unable to decrypt WPA group keys. (Bug 1420) The BER dissector might infinitely loop. (Bug 1516) Wireshark can't dynamically update the packet list. This means that host name resolutions above a certain response time threshold won't show up in the packet list. (Bug 1605) Capture filters aren't applied when capturing from named pipes. (Bug 1814) Wireshark might freeze when reading from a pipe. (Bug 2082) Capturing from named pipes might be delayed on Windows. (Bug 2200) Filtering tshark captures with display filters (-R) no longer works. (Bug 2234) The BOOTP dissector fails to initialize and display some values. (Bug 2395) Getting Help Community support is available on the wireshark-users mailing list. Subscription information and archives for all of Wireshark's mailing lists can be found on the web site. Commercial support, training, and development services are available from CACE Technologies. Frequently Asked Questions A complete FAQ is available on the Wireshark web site. Digests wireshark-1.0.0.tar.bz2: 13413951 bytes MD5(wireshark-1.0.0.tar.bz2)=90e58c595f082da3ad9390d714f16116 SHA1(wireshark-1.0.0.tar.bz2)=4f53f526359a072665812deca980999bd26e6ab0 RIPEMD160(wireshark-1.0.0.tar.bz2)=12016f80d30954bdc89163958e7d007543b3327e wireshark-1.0.0.tar.gz: 17043058 bytes MD5(wireshark-1.0.0.tar.gz)=8c6328955437fd18f9b102a2ea099980 SHA1(wireshark-1.0.0.tar.gz)=d55c999ec333cd109b15ff0de56a2b0296fa1de0 RIPEMD160(wireshark-1.0.0.tar.gz)=e418674d353ffd813e5129a03d359962d33686f2 wireshark-setup-1.0.0.exe: 21713350 bytes MD5(wireshark-setup-1.0.0.exe)=1a78b6120fc53ab05374eb45556c9c61 SHA1(wireshark-setup-1.0.0.exe)=8d90075ecef04f9f8dbe02ec0e272860dc12c65b RIPEMD160(wireshark-setup-1.0.0.exe)=9a756353e37c918c89031c2c4e75bf6dd729e106 wireshark-1.0.0.u3p: 19958880 bytes MD5(wireshark-1.0.0.u3p)=4a477e3cf5ff05fd871aef2865971dea SHA1(wireshark-1.0.0.u3p)=afc6d8acc1a08dcdd0f9afb3be4f34c2c2d446a5 RIPEMD160(wireshark-1.0.0.u3p)=413c84337dc4fa86ab2d434956a97827743e28ca WiresharkPortable-1.0.0.paf.exe: 17369822 bytes MD5(WiresharkPortable-1.0.0.paf.exe)=e371ea1f5797d50e7b6924e81b23cf72 SHA1(WiresharkPortable-1.0.0.paf.exe)=00160cdfda823b3c8aecc473285b1013e0bb15fa RIPEMD160(WiresharkPortable-1.0.0.paf.exe)=046fb4ad7d91245dfa2648fc8923927c7fc9ba0f Wireshark 1.0.0 Intel.dmg: 59055412 bytes MD5(Wireshark 1.0.0 Intel.dmg)=d7039cf4abc49b57ea8267d5458b729c SHA1(Wireshark 1.0.0 Intel.dmg)=be889b5731cbce3b524bc61c15c51f737fdde4e4 RIPEMD160(Wireshark 1.0.0 Intel.dmg)=33cdbe719197deaf5b70f6f8628f6eb6455415ec patch-wireshark-0.99.8-to-1.0.0.diff.bz2: 611605 bytes MD5(patch-wireshark-0.99.8-to-1.0.0.diff.bz2)=1acf7d4ae25ca05ab9465f9f68a5004e SHA1(patch-wireshark-0.99.8-to-1.0.0.diff.bz2)=b93895c08545c19f70ba71e7615ea410938851b8 RIPEMD160(patch-wireshark-0.99.8-to-1.0.0.diff.bz2)=63a54b8d1294f999a626cf01481001f1b94981c3 -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.8 (Darwin) iEYEARECAAYFAkfxrFMACgkQpw8IXSHylJrARQCghqDNVHkwjexkpMZsEJDJDeQD DB0An1PZ1FP5ZFWS6o6lsQRcfUe3g8r6 =BSzl -----END PGP SIGNATURE----- _______________________________________________ Wireshark-announce mailing list Wireshark-announce< at >wireshark.org http://www.wireshark.org/mailman/listinfo/wireshark-announce

Wireshark 1.0.0pre1 is now available

Wireshark announcements — 2008-03-18T16:05:12

Wireshark 1.0.0pre1 is now available for testing. Installers for Windows, OS X, and source code can be downloaded immediately from http://www.wireshark.org/download/prerelease/wireshark-setup-1.0.0pre1.exe http://www.wireshark.org/download/prerelease/wireshark-1.0.0pre1.u3p http://www.wireshark.org/download/prerelease/WiresharkPortable-1.0.0pre1.paf.exe http://www.wireshark.org/download/prerelease/Wireshark%201.0.0pre1%20Intel.dmg http://www.wireshark.org/download/prerelease/wireshark-1.0.0pre1.tar.gz The Mac OS X installer is new for this release, and is experimental. An in-progress list of changes can be found in the release notes at http://www.wireshark.org/docs/relnotes/wireshark-1.0.0.html. Please report any problems you find to the wireshark-dev mailing list or open a ticket at http://bugs.wireshark.org/ . Barring any problems, version 1.0.0 will be released during Sharkfest on Monday, March 31st. File verification information: wireshark-setup-1.0.0pre1.exe: 21714062 bytes MD5(wireshark-setup-1.0.0pre1.exe)=7f406a60a390f573574965b70251eb42 SHA1(wireshark-setup-1.0.0pre1.exe)=ddf3da6c890114d5af46648e9e7c0fd1a39e19be RIPEMD160(wireshark-setup-1.0.0pre1.exe)=a3920da1c101a93df2f7de19318c893c39b203b1 wireshark-1.0.0pre1.u3p: 19955689 bytes MD5(wireshark-1.0.0pre1.u3p)=f0ab6a932165643bfcef64c33e7bdd6e SHA1(wireshark-1.0.0pre1.u3p)=48a7856a47ce275bcf23d517d54ed8e9a02eca3c RIPEMD160(wireshark-1.0.0pre1.u3p)=01079112e38c1b06dafa7db5af78e04d882ea1de WiresharkPortable-1.0.0pre1.paf.exe: 17365814 bytes MD5(WiresharkPortable-1.0.0pre1.paf.exe)=2b9f6ff0c0772435022d25344754804c SHA1(WiresharkPortable-1.0.0pre1.paf.exe)=c43755cae61883360902badf159a155833ca0af5 RIPEMD160(WiresharkPortable-1.0.0pre1.paf.exe)=fd264fda26417b1f64c88d5aadef605fc0093ff9 Wireshark 1.0.0pre1 Intel.dmg: 59056532 bytes MD5(Wireshark 1.0.0pre1 Intel.dmg)=bb4eaf3bb4f03e4d4e568f4235c9054e SHA1(Wireshark 1.0.0pre1 Intel.dmg)=de962edf9592553ba98a1eb4b762f9eec29a3a6f RIPEMD160(Wireshark 1.0.0pre1 Intel.dmg)=284f3db752d9920f18ac1eb85919ec981601d2a5 wireshark-1.0.0pre1.tar.gz: 17041792 bytes MD5(wireshark-1.0.0pre1.tar.gz)=a8b478c8698e5e4afbe1cd8f329f573b SHA1(wireshark-1.0.0pre1.tar.gz)=815c8f03935da4ef2baa2b088c8a9d49e7d3ab6f RIPEMD160(wireshark-1.0.0pre1.tar.gz)=d2ac844587987620472c07f25ffded7ea485a7e3 _______________________________________________ Wireshark-announce mailing list Wireshark-announce< at >wireshark.org http://www.wireshark.org/mailman/listinfo/wireshark-announce

Wireshark 0.99.8 is now available

Wireshark announcements — 2008-02-28T00:40:47

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 I'm proud to announce the release of Wireshark 0.99.8. Sharkfest Reminder ~ Sharkfest '08 will be held March 31 to April 2 in Los Altos Hills, ~ CA. At Sharkfest you'll have the opportunity to meet many of the ~ people behind Wireshark and WinPcap, and take advantage of the wide ~ variety of courses that will be available. It's an excellent ~ opportunity to learn how to use Wireshark more effectively. ~ In addition to our many talented and knowledgeable presenters, Dr. ~ Vinton Cerf, PhD, Google Vice President and Chief Internet Evangelist ~ will open day 2 of Sharkfest with a talk entitled "Non-discriminatory ~ Network Service." ~ For more information on Sharkfest, visit http://www.cacetech.com or ~ send email to info< at >cacetech.com. What is Wireshark? ~ Wireshark is the world's most popular network protocol analyzer. ~ It is used for troubleshooting, analysis, development, and ~ education. What's New ~ Bug Fixes ~ The following vulnerabilities have been fixed. See the security ~ advisory for details and a workaround. ~ o The SCTP dissector could crash. ~ Versions affected: 0.99.5 to 0.99.7 ~ o The SNMP dissector could crash. ~ Versions affected: 0.99.6 to 0.99.7 ~ o The TFTP dissector could crash Wireshark on Ubuntu 7.10. (This ~ appears to be a bug in the Cairo library on that platform.) ~ Reported by Noam Rathaus. ~ Versions affected: 0.6.0 to 0.99.7 ~ The following bugs have been fixed: ~ o Wireshark could crash when saving I/O graphs. ~ o Wireshark could crash when editing table-based preferences. ~ o Wireshark could crash when trying to play RTP streams. ~ o Wireshark could crash when trying to apply a display filter ~ macro. ~ o Wireshark could crash in Turkish and other locales. ~ New and Updated Features ~ The following features are new (or have been significantly ~ updated) since the last release: ~ o You can now have multiple configuration profiles. ~ o Temporary coloring rules have been added, which let you color ~ or filter on a conversation. ~ o I/O graphs have been improved. ~ o Wireshark now has WLAN traffic statistics. ~ o The Wireshark GUI now supports RPCAP. ~ o Conversations and endpoints can now be limited to the current ~ display filter. ~ o Experimental support for the NTAR/PcapNG file format has been ~ added. ~ New Protocol Support ~ AiroPeek Remote Capture, China Mobile Point to Point, Distributed ~ Lock Manager 3, EUTRAN X2 Application Protocol, Fieldbus ~ Foundation, International Passenger Airline Reservation ~ System/Airline Link Control, Microsoft DirectPlay, Path ~ Computation Element communication Protocol, Real Time Messaging ~ Protocol, S1 Application Protocol, Scripting Service Protocol, ~ Societe Internationale de Telecommunications Aeronautiques, Unisys ~ Transmittal System, Wi-fi Protected Setup ~ Updated Protocol Support ~ 3G A11, 3GPP, ACN, ACP133, ALCAP, AMR, ANSI A, ANSI IS-637-A, ANSI ~ MAP, ARP, ASAP, AVS WLAN, BACapp, BER, BOOTP, Bluetooth (HCI ACL, ~ HCI CMD, HCI EVT, HCI SCO, L2CAP, SDP), CDP, CFM, CMS, COPS, ~ Camel, Cisco ERSPAN, DAP, DCERPC SPOOLSS, DCERPC, DHCP, DHCPv6, ~ DIAMETER, DMP, DTLS, E.164, EAP, ENIP, ENRP, EtherCAT, Ethernet, ~ FMP, FTAM, GMRP, GRE, GSM MAP, GSM SMS, GSS-API, GTP, Gryphon, ~ H.223, H.225, H.245, H.263, H.264, H.460, HCI H1, HTTP, ICMP, IEEE ~ 802.11, IGMP, IPP, ISAKMP, ISUP, JFIF, JPEG, JXTA, Kerberos, LDAP, ~ MP2T, MS MMS, MTP3MG, NBAP, NFS, NHRP, NetFlow, P7, PER, PIM, ~ PKCS12, PPPoE, PTP, P_Mul, Q.932, Quakeworld, RANAP, RMT ALC, RMT ~ LCT, ROS, RPC, RPL, RRC, RTCP, RTP, SCCP, SCTP, SDP, SLL, SMB, ~ SMB2, SMPP, SMTP, SNMP, SRVLOC, SSL, STUN2, T.38, TCAP, TCP, TFTP, ~ TiVoConnect, UCP, UDP-Lite, USB, VLAN, WBXML, X.411, X.420, ~ X.509if, X.509sat ~ New and Updated Capture File Support ~ Catapult DCT2000, DBS Etherwatch, NTAR/PcapNG, TamoSoft CommView, ~ Visual Networks Getting Wireshark ~ The source code and Windows installer can be downloaded immediately ~ from http://www.wireshark.org/download/ . ~ Vendor-supplied Packages ~ Most Linux and Unix vendors supply their own Wireshark packages. ~ You can usually install or upgrade Wireshark using the package ~ management system specific to that platform. A list of third-party ~ packages can be found on the download page on the Wireshark web ~ site. File Locations ~ Wireshark and TShark look in several different locations for ~ preference files, plugins, MIBS, and RADIUS dictionaries. These ~ locations vary from platform to platform. You can use ~ About->Folders to find the default locations on your system. Known Problems ~ The Filter button is nonfunctional in the file dialogs under ~ Windows. (Bug 942) Getting Help ~ Community support is available on the wireshark-users mailing ~ list. Subscription information and archives for all of Wireshark's ~ mailing lists can be found on the web site. ~ Commercial support, training, and development services are ~ available from CACE Technologies. Frequently Asked Questions ~ A complete FAQ is available on the Wireshark web site. Digests wireshark-0.99.8.tar.bz2: 13243168 bytes MD5(wireshark-0.99.8.tar.bz2)=5e6af49273c9a588ba3abd92a8423136 SHA1(wireshark-0.99.8.tar.bz2)=a33c7fd8d73bcbf843d3e3a96fd44489212c51e5 RIPEMD160(wireshark-0.99.8.tar.bz2)=3d7a4fdd9e2c9b9abaa0c9fe0c3e76fa86ec9aea wireshark-0.99.8.tar.gz: 16822076 bytes MD5(wireshark-0.99.8.tar.gz)=417305db903357c7567b789c86283986 SHA1(wireshark-0.99.8.tar.gz)=4ddee2c03d8a6cfd374cc624f9613ecb2a2e427f RIPEMD160(wireshark-0.99.8.tar.gz)=2de136f381eeba8de60c2d04afeadd41b51bb353 wireshark-setup-0.99.8.exe: 21292294 bytes MD5(wireshark-setup-0.99.8.exe)=2a7c6c9167518a98bbad51da3f1bc9bb SHA1(wireshark-setup-0.99.8.exe)=ee3cd533f4db7e62c1b432c335ab82b8f3e541a4 RIPEMD160(wireshark-setup-0.99.8.exe)=e09f23db50a51ac9eaa16aaaad5bdf0dee36ed08 wireshark-0.99.8.u3p: 19621285 bytes MD5(wireshark-0.99.8.u3p)=b50c9ae24fcde5aee3ea90886a7e12de SHA1(wireshark-0.99.8.u3p)=a279f0bd955177c1491ba8332d4b2190df83724c RIPEMD160(wireshark-0.99.8.u3p)=8ddd90aabee49dabf5caba89a87b0ea557dc6c88 WiresharkPortable-0.99.8.paf.exe: 17029359 bytes MD5(WiresharkPortable-0.99.8.paf.exe)=b79f61af42fd6be360fc02ae572d6b13 SHA1(WiresharkPortable-0.99.8.paf.exe)=c23d5c4bbf529cffeaea9dbe6c4cf5238aff15c2 RIPEMD160(WiresharkPortable-0.99.8.paf.exe)=32a0a6ef31e708308f48fbcdb95cc2b6eacfb86c patch-wireshark-0.99.7-to-0.99.8.diff.bz2: 1339189 bytes MD5(patch-wireshark-0.99.7-to-0.99.8.diff.bz2)=4257cac4d4b8f0e52929409e4597dc06 SHA1(patch-wireshark-0.99.7-to-0.99.8.diff.bz2)=e605a85ad534288582a4a208505fa882abcbb739 RIPEMD160(patch-wireshark-0.99.7-to-0.99.8.diff.bz2)=63414e442f1dcafe5b45f79d72436444b9ea258c -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.8 (Darwin) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iEYEARECAAYFAkfGAw0ACgkQpw8IXSHylJrlpACfQAdPQvkpVjnmAVxS3xpabcTq 3YMAnjaWR1Q/W20X481cNW25mw0qcJeH =UPHa -----END PGP SIGNATURE----- _______________________________________________ Wireshark-announce mailing list Wireshark-announce< at >wireshark.org http://www.wireshark.org/mailman/listinfo/wireshark-announce

Vint Cerf to speak at Sharkfest

Wireshark announcements — 2008-02-19T23:29:34

We are excited to announce that Dr. Vinton Cerf, PhD, Google Vice President and Chief Internet Evangelist will open day 2 of Sharkfest with a talk entitled "Non-discriminatory Network Service." Dr. Cerf is considered by many to be the father of the Internet. When he's not giving talks on matters that will affect the Internet for decades to come (such as network neutrality), he works with NASA on the Interplanetary Internet standard. For more information on Sharkfest and to register, please visit http://www.cacetech.com/SHARKFEST.08/ _______________________________________________ Wireshark-announce mailing list Wireshark-announce< at >wireshark.org http://www.wireshark.org/mailman/listinfo/wireshark-announce

Wireshark 0.99.8pre1 is now available

Wireshark announcements — 2008-02-19T06:36:08

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Wireshark 0.99.8pre1 is now available for testing. Windows installers and source code can be downloaded immediately from http://www.wireshark.org/download/prerelease/wireshark-setup-0.99.8pre1.exe http://www.wireshark.org/download/prerelease/wireshark-0.99.8pre1.u3p http://www.wireshark.org/download/prerelease/WiresharkPortable-0.99.8pre1.paf.exe http://www.wireshark.org/download/prerelease/wireshark-0.99.8pre1.tar.gz This release adds many bug fixes and new features. An in-progress list of changes can be found in the release notes at http://www.wireshark.org/docs/relnotes/wireshark-0.99.8.html . Please report any problems you find to the wireshark-dev mailing list or open a ticket at http://bugs.wireshark.org/ . Barring any problems, the final release will be out on Monday, February 25th. File verification information: wireshark-setup-0.99.8pre1.exe: 21284062 bytes MD5(wireshark-setup-0.99.8pre1.exe)=b44c651b600f9f7e7a4a9d7a5095219b SHA1(wireshark-setup-0.99.8pre1.exe)=0788693e4e1f7223533ed25b73781790f62957e4 RIPEMD160(wireshark-setup-0.99.8pre1.exe)=adba8fc817bef8776928e67d2035b9d887dcb1ac wireshark-0.99.8pre1.u3p: 19609638 bytes MD5(wireshark-0.99.8pre1.u3p)=30c8611c05d1d34a26d91d72eabf522a SHA1(wireshark-0.99.8pre1.u3p)=ab3f27739fc2244d4b72b213725a15982df5fbd4 RIPEMD160(wireshark-0.99.8pre1.u3p)=174643ee0835522c0d25275946a9b4e8dd945067 WiresharkPortable-0.99.8pre1.paf.exe: 17021795 bytes MD5(WiresharkPortable-0.99.8pre1.paf.exe)=60ec1c9ee633d1bf81c6901f83ba7f4c SHA1(WiresharkPortable-0.99.8pre1.paf.exe)=f6b1eeee055db39b3addc6aef1b4dd6aab621a0b RIPEMD160(WiresharkPortable-0.99.8pre1.paf.exe)=0b11f1c88e1544a6b7fb78f729e99e7df66a5f41 wireshark-0.99.8pre1.tar.gz: 16815173 bytes MD5(wireshark-0.99.8pre1.tar.gz)=62d1462c17bf8a0cde06a1ccb7d839a2 SHA1(wireshark-0.99.8pre1.tar.gz)=4c46569f3d3112792f14b6e5a99997d6a25eb9f0 RIPEMD160(wireshark-0.99.8pre1.tar.gz)=86655c294ccb3f550f5f904e00c9d978ec1f3546 -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.6 (GNU/Linux) iD8DBQFHunjYpw8IXSHylJoRAhKyAJ9FxTKCAoUVMny8s0ze8I4CYdJYGQCfaDlJ lX7k30MRSgrmq1XsXXXWfqk= =Kh+w -----END PGP SIGNATURE----- _______________________________________________ Wireshark-announce mailing list Wireshark-announce< at >wireshark.org http://www.wireshark.org/mailman/listinfo/wireshark-announce

Wireshark 0.99.7 is now available

Wireshark announcements — 2007-12-18T19:06:50

I'm proud to announce the release of Wireshark 0.99.7. I'm also proud to announce Sharkfest '08, the first-ever Wireshark users and developers conference, and SharkNet, an enterprise maintenance and support program for Wireshark. Shameless Promotion Sharkfest '08 will be held March 31 to April 2 in Los Altos Hills, CA. At Sharkfest you'll have the opportunity to meet many of the people behind Wireshark and WinPcap, and take advantage of the wide variety of courses that will be available. It's an excellent opportunity to learn how to use Wireshark more effectively. SharkNet provides a guaranteed response time for Wireshark support issues, development assistance, discounts on Wireshark University courses, and many other features. For more information on Sharkfest and SharkNet, visit http://www.cacetech.com or send email to info< at >cacetech.com. What is Wireshark? Wireshark is the world's most popular network protocol analyzer. It is used for troubleshooting, analysis, development, and education. What's New Bug Fixes The following vulnerabilities have been fixed. See the security advisory for details and a workaround. o Wireshark could crash when reading an MP3 file. Versions affected: 0.99.6 o Beyond Security discovered that Wireshark could loop excessively while reading a malformed DNP packet. Versions affected: 0.10.12 to 0.99.6 o Stefan Esser discovered a buffer overflow in the SSL dissector. Versions affected: 0.99.0 to 0.99.6 o The ANSI MAP dissector could be susceptible to a buffer overflow on some platforms. Versions affected: 0.99.5 to 0.99.6 o The Firebird/Interbase dissector could go into an infinite loop or crash. Versions affected: 0.99.6 o The NCP dissector could cause a crash. Versions affected: 0.99.6 o The HTTP dissector could crash on some systems while decoding chunked messages. Versions affected: 0.10.14 to 0.99.6 o The MEGACO dissector could enter a large loop and consume system resources. Versions affected: 0.9.14 to 0.99.6 o The DCP ETSI dissector could enter a large loop and consume system resources. Versions affected: 0.99.6 o Fabiodds discovered a buffer overflow in the iSeries (OS/400) Communication trace file parser. Versions affected: 0.99.0 to 0.99.6 o The PPP dissector could overflow a buffer. Versions affected: 0.99.6 o The Bluetooth SDP dissector could go into an infinite loop. Versions affected: 0.99.2 to 0.99.6 o A malformed RPC Portmap packet could cause a crash. Versions affected: 0.8.16 to 0.99.6 o The IPv6 dissector could loop excessively. Versions affected: 0.99.6 o The USB dissector could loop excessively or crash. Versions affected: 0.99.6 o The SMB dissector could crash. Versions affected: 0.99.6 o The RPL dissector could go into an infinite loop. Versions affected: 0.9.8 to 0.99.6 o The WiMAX dissector could crash due to unaligned access on some platforms. Versions affected: 0.99.6 o The CIP dissector could attempt to allocate a huge amount of memory and crash. Versions affected: 0.9.14 to 0.99.6 The following bugs have been fixed: o Handling of non-ASCII file names and paths has been improved. o Wireshark could crash while editing a coloring rule or a UAT table. o The display filter code could crash while bitwise ANDing an IPv4 address. New and Updated Features The following features are new (or have been significantly updated) since the last release: o Most of the capture code has been moved out of the GUI, which means that Wireshark no longer needs to be run as root. o Many display filter names have been cleaned up. If your favorite display filter just went missing, please consult the display filter reference to find out where it ended up. o You can now filter directly on SNMP OIDs. o IO graphs have more display options, and you can now export graphs. o You can now follow UDP streams in addition to TCP and SSL streams. o You can now disable coloring rules without deleting them. o Main window toolbar buttons are now available even when the window is small. o The version of WinPcap that ships with the Windows installers has been updated to 4.0.2. o The Windows installers now include a "services" file, which maps port numbers to names. o The Windows installer now enables npf.sys by default under Vista. Wireshark will print a warning at startup if npf.sys isn't loaded under Vista. o Optimizations have been applied in some places to make Wireshark start up and run faster. New Protocol Support ANSI TCAP, application/xcap-error (MIME type), CFM, DPNSS, EtherCAT, ETSI e2/e4, H.282, H.460, H.501, IEEE 802.1ad and 802.1ah, IMF (RFC 2822), RSL, SABP, T.125, TNEF, TPNCP, UNISTIM, Wake on LAN, WiMAX ASN Control Plane, X.224, Updated Protocol Support 3Com XNS, 3G A11, ACN, ACP123, ACSE, AIM, ANSI IS-637-A, ANSI MAP, Armagetronad, BACapp, BACnet, BER, BFD, BGP, Bluetooth, CAMEL, CDT, CFM, CIP, Cisco ERSPAN, CLNP, CMIP, CMS, COPS, CTDB, DCCP, DCERPC ATSVC, DCERPC PNIO, DCERPC SAMR, DCERPC, DCOM CBA-ACCO, DCP ETSI, DEC DNA, DFS, DHCP/BOOTP, DHCPv6, DIAMETER, DISP, DMP, DNP, DNS, DOP, DTLS, DUA, eDonkey, ELSM, ESL, Ethernet, FC ELS, FC, FCOE, FTAM, FTP, GDSDB, GIOP, GPRS-LLC, GSM A, GSM MAP, GTP, HSRP, HTTP, IAX2, ICMPv6, IEEE 802.11, INAP, IP, IPMI, IPv6, ISAKMP, ISIS, iSNS, ISUP, IUUP, JXTA, K12, Kerberos, L2TP, LAPD, LDAP, LINX, LPD, LWAPP, MEGACO, MIKEY, MIME Multipart, MMS, MP2T, MPEG PES, MPEG, MTP2, MySQL, NBAP, NetFlow, nettl, NFS, NSIP, OSPF, P_MUL, PANA, PER, PKCS#12, PMIPv6, PN-PTCP, PN-RT, PPI, PPPoE, PRES, PROFINET, PTP, Q.932 ROS, Q.932, QSIG, Radiotap, RADIUS, RANAP, RNSAP, ROS, RTCP, RTP, RTSE, RTSP, SCCP, SCTP, SDP, SIGCOMP, SIP, Slow Protocols, SMB, SMPP, SMTP, SNDCP, SNMP, SRP, SSL, STANAG 4406, STUN2, TCAP, TCP, text/media, TIPC, ULP, UMA, UMTS FP, V5UA, VNC, WiMAX M2M, WiMAX, WLCCP, X.411, X.420, X.509 SAT, XML, New and Updated Capture File Support Catapult DCT 2000, Endace ERF, Juniper NetScreen snoop, Visual Networks, Windows Sniffer (NetXRay) Getting Wireshark Wireshark source code and installation packages are available from the download page on the main web site. Vendor-supplied Packages Most Linux and Unix vendors supply their own Wireshark packages. You can usually install or upgrade Wireshark using the package management system specific to that platform. A list of third-party packages can be found on the download page on the Wireshark web site. File Locations Wireshark and TShark look in several different locations for preference files, plugins, SNMP MIBS, and RADIUS dictionaries. These locations vary from platform to platform. You can use About->Folders to find the default locations on your system. Known Problems Saving to the currently-open file doesn't work under Windows. (Bug 2080) The Filter button is nonfunctional in the file dialogs under Windows. (Bug 942) GTK+ 2.x renders white text on 8-bit displays under Windows. You can work around this by installing the GTK+ 1.2 version of Wireshark or by increasing your display depth to 15 bits or more. Getting Help Community support is available on the wireshark-users mailing list. Subscription information and archives for all of Wireshark's mailing lists can be found on the web site. Commercial support, training, and development services are available from CACE Technologies. Frequently Asked Questions A complete FAQ is available on the Wireshark web site. References Visible links . http://www.wireshark.org/security/wnpa-sec-2007-02.html . http://www.wireshark.org/docs/dfref/ . http://www.wireshark.org/download.html . http://www.wireshark.org/download.html#otherplat . http://bugs.wireshark.org/bugzilla/show_bug.cgi?id=2080 . http://bugs.wireshark.org/bugzilla/show_bug.cgi?id=942 . http://bugzilla.gnome.org/show_bug.cgi?id=438652 . http://www.wireshark.org/lists/ . http://www.cacetech.com/ . http://www.wireshark.org/faq.html _______________________________________________ Wireshark-announce mailing list Wireshark-announce< at >wireshark.org http://www.wireshark.org/mailman/listinfo/wireshark-announce

Wireshark 0.99.7pre2 is now available

Wireshark announcements — 2007-11-29T21:55:48

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Wireshark 0.99.7pre2 is now available for testing. Source code and a Windows installer can be downloaded immediately from http://www.wireshark.org/download/prerelease/wireshark-0.99.7pre2.tar.gz http://www.wireshark.org/download/prerelease/wireshark-0.99.7pre2.u3p http://www.wireshark.org/download/prerelease/wireshark-setup-0.99.7pre2.exe This release adds many bug fixes and new features. An in-progress list of changes can be found in the release notes at http://www.wireshark.org/docs/relnotes/wireshark-0.99.7.html . Please report any problems you find to the wireshark-dev mailing list or open a ticket at http://bugs.wireshark.org/ . Barring any problems, the final release should be out around December 5. File verification information: MD5(wireshark-0.99.7pre2.tar.gz)=3a607338aa222a13fd5208434cae3b6d SHA1(wireshark-0.99.7pre2.tar.gz)=14288efaeded47043d635c8395643e4e0256190e RIPEMD160(wireshark-0.99.7pre2.tar.gz)=3049f2e99d2871ae7a12dbb1ecbdceab351f9e06 wireshark-0.99.7pre2.u3p: 26184452 bytes MD5(wireshark-0.99.7pre2.u3p)=29bc7bf45c421bd145f27f9221eee5c3 SHA1(wireshark-0.99.7pre2.u3p)=cd1ccaea5b9cf037c67c9c46979c239576eadc1a RIPEMD160(wireshark-0.99.7pre2.u3p)=31756e49562bbd7523d1e4addf4de98ba8fac460 wireshark-setup-0.99.7pre2.exe: 21104206 bytes MD5(wireshark-setup-0.99.7pre2.exe)=8cd9d3559584853f85d707e91058f5be SHA1(wireshark-setup-0.99.7pre2.exe)=e8271e321f09db5e887668c9dc81db25d3c483b6 RIPEMD160(wireshark-setup-0.99.7pre2.exe)=c629d50994dcf020c029a10b3d50e4cb53b90558 -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.6 (Darwin) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFHTzVhpw8IXSHylJoRAsYnAKCnf+hatAM9fiATmonBMYhG8e6YEQCgu+9d lK7H5FIY6DGPm45aRYS+acI= =/6JH -----END PGP SIGNATURE----- _______________________________________________ Wireshark-announce mailing list Wireshark-announce< at >wireshark.org http://www.wireshark.org/mailman/listinfo/wireshark-announce

Wireshark 0.99.7pre1 is now available

Wireshark announcements — 2007-11-21T22:21:49

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Wireshark 0.99.7pre1 is now available for testing. Source code and a Windows installer can be downloaded immediately from http://www.wireshark.org/download/prerelease/wireshark-0.99.7pre1.tar.gz http://www.wireshark.org/download/prerelease/wireshark-0.99.7pre1.u3p http://www.wireshark.org/download/prerelease/wireshark-setup-0.99.7pre1.exe This release adds many bug fixes and new features. An in-progress list of changes can be found in the release notes at http://www.wireshark.org/docs/relnotes/wireshark-0.99.7.html . Please report any problems you find to the wireshark-dev mailing list or open a ticket at http://bugs.wireshark.org/ . Barring any problems, the final release will be out late next week, on November 29th or 30th. File verification information: wireshark-0.99.7pre1.tar.gz: 16679729 bytes MD5(wireshark-0.99.7pre1.tar.gz)=5ec97db4ec4683a527853871da649dae SHA1(wireshark-0.99.7pre1.tar.gz)=27324b52c9e790dc8bba6ade0f30bcb2cf8b4f3a RIPEMD160(wireshark-0.99.7pre1.tar.gz)=d1300c0ae8ac1c62c3aa688b4768cf8f6d42abf8 wireshark-0.99.7pre1.u3p: 26187951 bytes MD5(wireshark-0.99.7pre1.u3p)=4720f92770959505001f647ef60bef1b SHA1(wireshark-0.99.7pre1.u3p)=d9350d9b6159e597008693764bb9027348bb8e8f RIPEMD160(wireshark-0.99.7pre1.u3p)=ec8baaeb1b3fc4a59a61f6f8c6066c45f97f2e89 wireshark-setup-0.99.7pre1.exe: 21081220 bytes MD5(wireshark-setup-0.99.7pre1.exe)=a2e3bad6b36d2a9adab0f94a5a1f82c2 SHA1(wireshark-setup-0.99.7pre1.exe)=da9662efc4737645fba31dea324f56400a5ea242 RIPEMD160(wireshark-setup-0.99.7pre1.exe)=1d07d972b8f21646e49596d089ded480da105510 -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.6 (Darwin) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFHRK94pw8IXSHylJoRApsVAKCv0LEOk5Q4lG+k1nHjog8Yx3vysQCgrOZF FfN7vOuaJNGo/ii6oN3DGhM= =YOX1 -----END PGP SIGNATURE----- _______________________________________________ Wireshark-announce mailing list Wireshark-announce< at >wireshark.org http://www.wireshark.org/mailman/listinfo/wireshark-announce

[Fwd: In Memoriam: Jun-ichiro Hagino]

Wireshark announcements — 2007-10-31T16:00:17

Itojun was a member of Ethereal's core development team early on, writing a lot of code related to IPv6 and IPsec. -------- Original Message -------- Subject: In Memoriam: Jun-ichiro Hagino Date: Tue, 30 Oct 2007 14:10:58 -0700 From: Dragos Ruiu kyx.net> Organization: All Terrain Ninjas To: bugtraq< at >securityfocus.com With great sadness, I regret to inform you that Itojun will not be presenting his great knowledge of IPv6 at PacSec. I have been informed by several sources that he passed away yesterday. Funeral services will be held on Nov 7th at Rinkai-Saijo in Tokyo. There aren't many details of his passing, so please let his family and relatives mourn in peace for now. My heartfelt condolances go out to them, and all of his many friends. I knew Itojun as one of the smartest and kindest people I have ever met. He helped everyone around him. He graciously hosted and assisted many foreigners new to Japan at the PacSec conferences, and was a good friend to all. He would go to extraordinary lengths to help anyone around him. We will all miss him - and his work on IPv6 will continue to help us for a long time.. He once said to me, "When a professional race car driver races, his pulse gets lower and he relaxes. When I code it is the same thing." I'll miss him driving around in his prized Fiat 500... and I hope we can all proceed to help fix our V6 networks without his gentle and insistent coaching. We will announce a replacement talk shortly. If you knew or respected him, he would have wanted any energy you put towards grief to be spent on speeding the adoption and the robustness of the version 6 internet which he devoted so much of his extraordinary life to. Some more information in Japanese at http://www.hoge.org/~koyama/itojun.txt May he rest in peace, --dr

Wireshark Windows installer updated to 0.99.6a

Wireshark announcements — 2007-07-09T21:38:36

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 A new Windows installer (wireshark-setup-0.99.6a.exe) has been released in order to fix a problem with updating from WinPcap 4.0 to 4.0.1. There are no other changes in the installer. The source code and U3 packages have not changed. The file size and checksums are listed below: wireshark-setup-0.99.6a.exe: 18326376 bytes MD5(wireshark-setup-0.99.6a.exe)=2a729456601508039ef363b4c0f66a62 SHA1(wireshark-setup-0.99.6a.exe)=1e387900a186c20cc172d364b3be67ecf6704310 RIPEMD160(wireshark-setup-0.99.6a.exe)=e85182cca802e191bfcf697c1cfdb124dd8249f2 -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.6 (Darwin) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFGkqrapw8IXSHylJoRAgPdAJ9OlN2vu1+Gw/vop2bUKTHiL6knoQCfTrHR Cw8TLpwHN2PxArhLHXsc6wc= =Wwwx -----END PGP SIGNATURE----- _______________________________________________ Wireshark-announce mailing list Wireshark-announce< at >wireshark.org http://www.wireshark.org/mailman/listinfo/wireshark-announce

Wireshark 0.99.6 is now available

Wireshark announcements — 2007-07-05T21:51:36

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Wireshark 0.99.6 has been released. What is Wireshark? Wireshark is the world's most popular network protocol analyzer. It is used for troubleshooting, analysis, development, and education. What's New Bug Fixes The following vulnerabilities have been fixed. See the security advisory for details and a workaround. o Wireshark could crash when dissecting an HTTP chunked response. (Bug 1394) Versions affected: 0.99.5 o On some systems, Wireshark could crash while reading iSeries capture files. (Bug 1415) Versions affected: 0.10.14 to 0.99.5 o Wireshark could exhaust system memory while reading a malformed DCP ETSI packet. (Bug 1264) Versions affected: 0.99.5 o Wireshark could loop excessively while reading a malformed SSL packet. (Bug 1582) Versions affected: 0.8.20 to 0.99.5 o The DHCP/BOOTP dissector was susceptible to an off-by-one error. (Bug 1416) Versions affected: 0.10.17 to 0.99.5 o Wireshark could loop excessively while reading a malformed MMS packet. (Bug 1342) Versions affected: 0.10.12 to 0.99.5 The following bugs have been fixed: o WEP decryption would only work for the first key specified. disappear or become unusable. WEP and WPA decryption didn't work for QoS frames. WPA decryption failed if EAPOL handshake packets contained extra data. Wireshark failed to parse colon-separated WEP keys. o Merging files in Wireshark now appends files properly. o Wireshark could hang while saving an RTP stream with bad timestamp data. o You must now explicitly pass "--disable-wireshark" to the build environment if you only want to build TShark; the configure script will fail, rather than automatically building only TShark, if it's run on a system that doesn't have GTK+ headers and libraries installed. o Capture from named pipes (via -i \\\pipe\) now works under Windows. o The frame.time_delta display filter now works as expected, matching the delta time between the current and previous captured packet. A new filter, frame.time_delta_displayed, matches the delta time between the current and previous displayed packet. New and Updated Features The following features are new (or have been significantly updated) since the last release: o You no longer have to restart Wireshark after changing column preferences. Woohoo! o You can now export HTTP objects via File->Export->Objects->HTTP. o Display filter macros are now supported. o Right-clicking on a packet lets you copy many more things, such as the packet summary and the packet bytes. o You can now match upper- and lower-case text with the contains operator, e.g. upper(http.request.method) contains "GET". o A great deal of code has been cleaned up, including fixing many compiler errors. Many thanks to those who worked on this. New Protocol Support AMQP (Advanced Message Queueing Protocol), BCTP Q.1990, Borland StarTeam, Cisco ERSPAN, CTDB (Cluster TDB), DRDA (Distributed Relational Database Architecture), DTPT (DeskTop PassThrough), EPMD (Erlang Port Mapper Daemon), FCoE (Fibre Channel over Ethernet), Firebird/Interbase (replaces the old Interbase dissector), FMP (File Mapping Protocol), H.248.10, H.248.7, IPsec/ISAKMP over TCP, Kingfisher, MIKEY (Multimedia Internet KEYing), MPEG, NSRP (Juniper Netscreen Redundant Protocol), OpcUa Binary Protocol, PPI (Per-Packet Information header), Q.932, QSIG, TAPA (Trapeze Access Point Access Protocol), WiMAX, WiMAX M2M Updated Protocol Support ACSE, AFP, AMR, ANSI IS-801, ANSI MAP, ARP, ASAP, ASN.1 BER, ASN.1 PER, AVS WLANCAP, BSSAP, BSSGP, BVLC, Camel, CDT, CIP, CMS, COPS, CPFI, DCCP, DCERPC (DCERPC, ATSVC, DFS, EFS, EVENTLOG, INITSHUTDOWN, NDR, NETLOGON, NSPI, NT, PNIO, SAMR, SPOOLSS, SRVSVC, WINREG, WKSSVC, WZCSVC), DCOM (DCOM, CBA, CBA-ACCO), DCP ETSI, DCP, DCT2000, DHCP, DIAMETER, DMP, DNP, DTLS, EDP, ENRP, EPL, ERF, FCELS, Fibre Channel, FTAM, FTBP, FW-1, GIOP, GSM MAP, GTP, H.223, H.225, H.235, H.245, H.248, H.263, HTTP, IAX2, IEEE 802.11, IGRP, INAP, IP, IPsec, IPv6, iSCSI, ISUP, IUA, IuUP, Juniper, JXTA, K12, Kerberos, L2TP, LDAP, LLDP, LWAPP, M3UA, MEGACO, MIP, MMS, MP2T, MTP3, NBAP, NDMP, Netflow, NFS, NT SONMP, OICQ, OSPF, PANA, PN-PTCP, PPP, P_Mul, Radiotap, RADIUS (Packetcable), RANAP, Redback, RNSAP, RRLP, RSVP, RTCP, RTP, RX, SCCP, SCSI (SCSI, MMC, OSD, SBC, SMC, SSC), SCTP, SDP, SIGCOMP, SIP, Skinny, SliMP3, SLL, SMB PIPE, SMB, SMB2, SMPP, SNMP, SPNEGO, SSCOP, SSL, STUN, SUA, Symantec, Syslog, TACACS, TCAP, TCP, TFTP, UDLD, UDP, ULP, UMA, UMTS (UMTS, FP, RRC), USB, VNC, WCP, WLCCP, X.25, X.411, X.509, YMSG New and Updated Capture File Support DCT2000, Endace ERF, iSeries, K12, MPEG Audio (yes, this means you can open .mp3 files in Wireshark), NetMon, pppdump, snoop (Shomiti wireless packets), Visual Networks, Windows Sniffer (NetXRay) Getting Wireshark The source code and Windows installer can be downloaded immediately from http://www.wireshark.org/download/ . Digests wireshark-0.99.6.tar.bz2: 11826043 bytes MD5(wireshark-0.99.6.tar.bz2)=e57a8c8b364c38df3da97e2ee9f0d0bc SHA1(wireshark-0.99.6.tar.bz2)=91f57158a75adca36c79c35525eb3cf57b927075 RIPEMD160(wireshark-0.99.6.tar.bz2)=7c69e71e54d521d942bcbad9894547d9785f0948 wireshark-0.99.6.tar.gz: 15004582 bytes MD5(wireshark-0.99.6.tar.gz)=d9c723032c424b3a210a0426167e9732 SHA1(wireshark-0.99.6.tar.gz)=1c31609ca3ce12f259d56390b143b58a22a43596 RIPEMD160(wireshark-0.99.6.tar.gz)=f16d319255a23447e29bd783a4aa802f1b3165d3 wireshark-setup-0.99.6.exe: 18328685 bytes MD5(wireshark-setup-0.99.6.exe)=e5ad8e47ce5360393d1c57fe807abe67 SHA1(wireshark-setup-0.99.6.exe)=e8e1176c1d398654327dc2f59ddcb189794621cf RIPEMD160(wireshark-setup-0.99.6.exe)=8c59b69bf65bde52f84e857c7998c27a69563061 wireshark-0.99.6.u3p: 24754395 bytes MD5(wireshark-0.99.6.u3p)=99352129653953381292f0e2855c2f59 SHA1(wireshark-0.99.6.u3p)=3e4ebda2acbe3423912689b1ee71ea6fdc3035ca RIPEMD160(wireshark-0.99.6.u3p)=f55fba85f39cde9b4957164cad7e35fc1647df6b patch-wireshark-0.99.5-to-0.99.6.diff.bz2: 5490241 bytes MD5(patch-wireshark-0.99.5-to-0.99.6.diff.bz2)=45cb1b6e5492e717393754476a0b8bff SHA1(patch-wireshark-0.99.5-to-0.99.6.diff.bz2)=ad6feadb96fd0959993d40374a341b160004e349 RIPEMD160(patch-wireshark-0.99.5-to-0.99.6.diff.bz2)=5fb29ba815bfa0944a1d70236ea63ff67a297216 -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.6 (Darwin) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFGjWflpw8IXSHylJoRAtgEAJ9R2TG2vDGcXIA6CvIQjh6hOCIxPwCgyvdt D7VoEpYRzjQKXKBaSUaI2Pw= =u7Ah -----END PGP SIGNATURE----- _______________________________________________ Wireshark-announce mailing list Wireshark-announce< at >wireshark.org http://www.wireshark.org/mailman/listinfo/wireshark-announce

Wireshark 0.99.6pre2 is now available

Wireshark announcements — 2007-06-29T16:42:47

Wireshark 0.99.6pre2 is now available for testing. Source code and a Windows installer can be downloaded immediately from http://www.wireshark.org/download/prerelease/wireshark-0.99.6pre2.tar.gz http://www.wireshark.org/download/prerelease/wireshark-0.99.6pre2.u3p http://www.wireshark.org/download/prerelease/wireshark-setup-0.99.6pre2.exe The final version should be out late next week. Please report any problems you find to the wireshark-dev mailing list or open a ticket at http://bugs.wireshark.org/ . File verification information: wireshark-0.99.6pre2.tar.gz: 15005117 bytes MD5(wireshark-0.99.6pre2.tar.gz)=9aecaf3cb234ba2ffb920675a910686c SHA1(wireshark-0.99.6pre2.tar.gz)=9386bef6e0716cac08e9868eb239e84d5b4804c7 RIPEMD160(wireshark-0.99.6pre2.tar.gz)=47c537da2ed7d8196372ce33f309e7e83a9c5fb2 wireshark-0.99.6pre2.u3p: 24746324 bytes MD5(wireshark-0.99.6pre2.u3p)=d26b838a3fc4b1b35bd30b466280e433 SHA1(wireshark-0.99.6pre2.u3p)=ef39d5a269f3699026b96f30d3ec57bc2dace24e RIPEMD160(wireshark-0.99.6pre2.u3p)=1e5c3bf8a1c37714c67f61d04f4e883cfd9dff39 wireshark-setup-0.99.6pre2.exe: 18336892 bytes MD5(wireshark-setup-0.99.6pre2.exe)=7b37dd6006fd123c2f1de855c43798d6 SHA1(wireshark-setup-0.99.6pre2.exe)=99a56947b6641890207d3d2667fbec26b6b3ab10 RIPEMD160(wireshark-setup-0.99.6pre2.exe)=7302b980781d4205d2c52535aa005d9d065a8d17 _______________________________________________ Wireshark-announce mailing list Wireshark-announce< at >wireshark.org http://www.wireshark.org/mailman/listinfo/wireshark-announce

Wireshark 0.99.6pre1 is now available

Wireshark announcements — 2007-06-22T19:24:41

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Wireshark 0.99.6pre1 is now available for testing. Source code and a Windows installer can be downloaded immediately from http://www.wireshark.org/download/prerelease/wireshark-0.99.6pre1.tar.gz http://www.wireshark.org/download/prerelease/wireshark-0.99.6pre1.u3p http://www.wireshark.org/download/prerelease/wireshark-setup-0.99.6pre1.exe This release adds many bug fixes and new features. An in-progress list of changes can be found in the release notes at http://www.wireshark.org/docs/relnotes/wireshark-0.99.6.html . Please report any problems you find to the wireshark-dev mailing list or open a ticket at http://bugs.wireshark.org/ . Barring any problems, the final release will be out late next week. File verification information: wireshark-0.99.6pre1.tar.gz: 14993310 bytes MD5(wireshark-0.99.6pre1.tar.gz)=f495621ef1e12583433b6e070037e92f SHA1(wireshark-0.99.6pre1.tar.gz)=83000f8d2c4fbfcb05d85e8a893ef08193060b8f RIPEMD160(wireshark-0.99.6pre1.tar.gz)=74d0696f5b507db62867f199756123da9e70acc4 wireshark-0.99.6pre1.u3p: 24744953 bytes MD5(wireshark-0.99.6pre1.u3p)=7e56013beb90527039fd25958fff2797 SHA1(wireshark-0.99.6pre1.u3p)=7bcac2d06f7dcfe69e8ed8df1751dc3b31bba609 RIPEMD160(wireshark-0.99.6pre1.u3p)=b1047729e1d0484a11e10e97a27cad135f48a310 wireshark-setup-0.99.6pre1.exe: 18349430 bytes MD5(wireshark-setup-0.99.6pre1.exe)=33a1f2bf43fda6a24a3f559fd99cfa06 SHA1(wireshark-setup-0.99.6pre1.exe)=95208c5a0e689be9403ab64f288a7d6832646133 RIPEMD160(wireshark-setup-0.99.6pre1.exe)=d8034d8cf0e45db97747e82508664e4d6dce7ac1 -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.6 (Darwin) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFGfCH1pw8IXSHylJoRAjmUAKCMkbPTQF1088dK+Uar1FYJqAnmbgCeNE0R Z4596W7stHlGQkK/iMtnSak= =GDYQ -----END PGP SIGNATURE----- _______________________________________________ Wireshark-announce mailing list Wireshark-announce< at >wireshark.org http://www.wireshark.org/mailman/listinfo/wireshark-announce

Wireshark 0.99.5 is now available

Wireshark announcements — 2007-02-02T17:40:56

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Wireshark 0.99.5 has been released. What is Wireshark? Wireshark is the world's most popular network protocol analyzer. It is used for troubleshooting, analysis, development, and education. What's New Bug Fixes The following vulnerabilities have been fixed. See the security advisory at http://www.wireshark.org/security/wnpa-sec-2007-01.html for details and a workaround. o The TCP dissector could hang or crash while reassembling HTTP packets. (Bug 1200) Versions affected: 0.99.2 to 0.99.4 CVE-2007-0459 o The HTTP dissector could crash. Versions affected: 0.99.3 to 0.99.4 CVE-2007-0458 o On some systems, the IEEE 802.11 dissector could crash. Versions affected: 0.10.14 to 0.99.4 CVE-2007-0457 o On some systems, the LLT dissector could crash. Versions affected: 0.99.3 to 0.99.4 CVE-2007-0456 The following bugs have been fixed: o On Windows systems the packet list scroll bar could sometimes disappear or become unusable. (Bug 220) o The end of HTTP chunked encoding wasn't being displayed. (Bug 646) o The Follow TCP Stream window could omit characters. (Bug 1043) o Opening a flow graph could crash Wireshark. (Bug 1117) o Follow TCP Stream would sometimes get the direction wrong. (Bug 1138) o The foreground text in the coloring rules editor was always black. (Bug 1164) o The CSV export format was incorrect. (Bug 1173) o On some Windows systems Wireshark could take a long time to start up. o Malformed UDLD packets could cause an exception. o The ISUP statistics report could overflow a buffer and crash when displaying IPv6 addresses. New and Updated Features The following features are new (or have been significantly updated) since the last release: o We are now offering Wireshark as a U3 package for Windows. U3 packages are suitable for using on USB drives and CD-ROMs. It's still experimental, but you're welcome to try it out and report any problems or successes. o Decryption support for WPA/WPA2 and SNMPv3 has been added. The TDS / MS SQL dissector now de-obfuscates passwords. o 64-bit file handling has been improved. o The Find function now selects the corresponding packet detail item. Find functionality has been added to the TCP and SSL stream dialogs. o Main window keyboard navigation has been improved. o Windows file dialogs now show the "places" bar (Desktop, My Documents, My Computer, My Network Places, etc). File dialogs now default to "My Documents" in accordance with Microsoft's HIG. o AirPcap support (which provides raw mode capture under Windows) has been enhanced to allow capturing on multiple AirPcap adapters simultaneously. o You can no longer install Wireshark on Windows 95, 98, or ME. (OK, so it's not a feature per se, but it's an important change). The last version known to work on these systems is Ethereal 0.99.0. o ASN.1 BER-encoded files can now be dissected according to a user-specified syntax. New Protocol Support DMP, Homeplug (INT51X1), NBD, OMAPI, PKCS#12, RGMP, Roofnet, STUN v2 Updated Protocol Support 2dparityfec, ACN, AIM, AMR, ANSI 637, ANSI A, ANSI MAP, ARP, ASN.1 BER, ASN.1 PER, BACapp, BPDU, CAMEL, DCERPC (DCERPC, EFS, EVENTLOG, NSPI, PN-IO, WINREG), DCOM CBA, DCP, DHCP, DHCPv6, DMP, DNS, E.164, EAP, EPL, ETSI DCP, FCP, GIOP, GSM A, H.245, H.248, HPSW, HTTP, ICMP, ICMPv6, IEEE 802.11, IMAP, INAP, IPMI, IPsec, IRC, ISAKMP, iSCSI, ISIS LSP, IuUP, K12, Kerberos, LDAP, LLDP, MEGACO, MGCP, MIME Multipart, MMS, MMSE, MSRP, MySQL, NetFlow, NFS, NTLMSSP, NTP, OSPF, PN-PTCP, PPPoE, Q.931, Radiotap, RADIUS, RPC, RSVP, RTCP, S4406, SCCP, SCSI, SDP, SES, sFlow, SIGCOMP, SIP, SIR, Skinny, SMB (SMB, NETLOGON), SMTP, SNMP, SPNEGO, SSL, T.38, TCP, TDS, text/media, TIPC, UDLD, UDP Lite, UDP, UMA, UMTS FP, USB, VNC, WBXML, WLCCP, WSP, X.411, X.420, XML, XOT, YMSG New and Updated Capture File Support Catapult DCT2000, Netttl, Windows Sniffer / NetXray Getting Wireshark The source code and Windows installer can be downloaded immediately from http://www.wireshark.org/download/ . Digests wireshark-0.99.5.tar.bz2: 11007039 bytes MD5(wireshark-0.99.5.tar.bz2)=ff067e0f2a0e0e53362bc6a943ff8622 SHA1(wireshark-0.99.5.tar.bz2)=ec9a07f13d5cda3d310d8c8900362f7cb96f4042 RIPEMD160(wireshark-0.99.5.tar.bz2)=1b3f7bb8e2c73a945fff86fb8ab2aa79481ba809 wireshark-0.99.5.tar.gz: 13936697 bytes MD5(wireshark-0.99.5.tar.gz)=d034fc3936d16cfc3becac2daec9f591 SHA1(wireshark-0.99.5.tar.gz)=e394343f76bdc281f495d56aee21ee9eeeed253e RIPEMD160(wireshark-0.99.5.tar.gz)=e748ccb253888b8c7afb87b8c8a34e52b3fe2a32 wireshark-0.99.5.u3p: 22313289 bytes MD5(wireshark-0.99.5.u3p)=8d06341120de6838742df4ff0a3b4a3b SHA1(wireshark-0.99.5.u3p)=4fa8cf596582302f048485a54dbf9cb016a99ba3 RIPEMD160(wireshark-0.99.5.u3p)=78b1706dbb252c36d327e8dfc04fba8426a723f3 wireshark-setup-0.99.5.exe: 18138441 bytes MD5(wireshark-setup-0.99.5.exe)=6adee9c71780fbaf2a97deefdf48f1b4 SHA1(wireshark-setup-0.99.5.exe)=63c63af6fee52803715cbfc82e11fa42eddf86c5 RIPEMD160(wireshark-setup-0.99.5.exe)=b6106ad29b39664c55aaf88984a6ca6114e13815 patch-wireshark-0.99.4-to-0.99.5.diff.bz2: 1253722 bytes MD5(patch-wireshark-0.99.4-to-0.99.5.diff.bz2)=a51665aa21e5164254ee7b4e96a5ed3b SHA1(patch-wireshark-0.99.4-to-0.99.5.diff.bz2)=f8a97afb11030e8681b052a5e578c875866ecd06 RIPEMD160(patch-wireshark-0.99.4-to-0.99.5.diff.bz2)=b177f6f91220e3dfb3dffd14d5cb9a1254a89009 -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.5 (Darwin) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFFw3ekpw8IXSHylJoRAixxAKDMPRJy7t0da14rY7WH5owd7aMXfQCfR3hw +6NVIbgh8Ua1q41dG7xLe4U= =vmdZ -----END PGP SIGNATURE----- _______________________________________________ Wireshark-announce mailing list Wireshark-announce< at >wireshark.org http://www.wireshark.org/mailman/listinfo/wireshark-announce

Wireshark 0.99.5pre2 is now available

Wireshark announcements — 2007-01-31T00:48:33

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Wireshark 0.99.5pre2 is now available for testing. Source code and a Windows installer can be downloaded immediately from http://www.wireshark.org/download/prerelease/wireshark-0.99.5pre2.tar.gz http://www.wireshark.org/download/prerelease/wireshark-0.99.5pre2.u3p http://www.wireshark.org/download/prerelease/wireshark-setup-0.99.5pre2.exe This release includes several bug fixes. The Windows installer now ships with WinPcap 4.0. Please report any problems you find to the wireshark-dev mailing list or open a ticket at http://bugs.wireshark.org/ . Barring any problems, the final release will be out on February 1st or 2nd. File verification information: wireshark-0.99.5pre2.tar.gz: 13934469 bytes MD5(wireshark-0.99.5pre2.tar.gz)=5a22972741fcdc6486aad575d7b1a7d4 SHA1(wireshark-0.99.5pre2.tar.gz)=d19e025f938b51787929ca42b13e4700b7231b22 RIPEMD160(wireshark-0.99.5pre2.tar.gz)=a7bdac4e943997b446b9c89d843c185c2dbb7567 wireshark-0.99.5pre2.u3p: 22313263 bytes MD5(wireshark-0.99.5pre2.u3p)=20cb350d3d9895e68f850dc1dfc4107b SHA1(wireshark-0.99.5pre2.u3p)=13561e61a1eb1074ab3d6dc9649c946f34ef2aaa RIPEMD160(wireshark-0.99.5pre2.u3p)=83f4d19134d666c95c596b33de5a8abec1afc461 wireshark-setup-0.99.5pre2.exe: 18134567 bytes MD5(wireshark-setup-0.99.5pre2.exe)=c579f22e9f3fa17af442ef9bb760f384 SHA1(wireshark-setup-0.99.5pre2.exe)=8ffecbee0e22bf39b42fdf72785b388b90138d6c RIPEMD160(wireshark-setup-0.99.5pre2.exe)=d1b3a3e8b2d30ebb4fb751823639cd8908262196 -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.5 (Darwin) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFFv+dcpw8IXSHylJoRAlCjAJsHtX6EfEcB+dUqWEdp2JPi7bZxOACfaDRz /8kZSxaRxLADJgPyMT/HwxY= =r4nl -----END PGP SIGNATURE----- _______________________________________________ Wireshark-announce mailing list Wireshark-announce< at >wireshark.org http://www.wireshark.org/mailman/listinfo/wireshark-announce

Wireshark 0.99.5pre1 is now available

Wireshark announcements — 2007-01-19T18:09:42

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Wireshark 0.99.5pre1 is now available for testing. Source code and a Windows installer can be downloaded immediately from http://www.wireshark.org/download/prerelease/wireshark-0.99.5pre1.tar.gz http://www.wireshark.org/download/prerelease/wireshark-0.99.5pre1.u3p http://www.wireshark.org/download/prerelease/wireshark-setup-0.99.5pre1.exe This release adds an experimental U3 package suitable for running on USB drives. A complete list of changes can be found in the release notes at http://www.wireshark.org/docs/relnotes/wireshark-0.99.5.html . Please report any problems you find to the wireshark-dev mailing list or open a ticket at http://bugs.wireshark.org/ . Barring any problems, the final release will be out some time next week. File verification information: wireshark-0.99.5pre1.tar.gz: 13839070 bytes MD5(wireshark-0.99.5pre1.tar.gz)=11d5a69bf394f2da6588f4f866f62859 SHA1(wireshark-0.99.5pre1.tar.gz)=7a06e011058ececa711c19d9eef8b6166187c6d8 RIPEMD160(wireshark-0.99.5pre1.tar.gz)=4fa8859d99a44b7357001fa02c8e38699a31b87b wireshark-0.99.5pre1.u3p: 22203247 bytes MD5(wireshark-0.99.5pre1.u3p)=c3895b4b30bb8ad5bd3b91f3eb6fd6a3 SHA1(wireshark-0.99.5pre1.u3p)=35140e5c64e7f77b6cfeb6594c974c66a34a1d63 RIPEMD160(wireshark-0.99.5pre1.u3p)=06b91def8bef99cbe5663219348a3623f7400409 wireshark-setup-0.99.5pre1.exe: 15837457 bytes MD5(wireshark-setup-0.99.5pre1.exe)=350d1a5af99db8bb75c5b5f04f03b18e SHA1(wireshark-setup-0.99.5pre1.exe)=94126af1d2b27bfd5828f6e621fc477578631ebf RIPEMD160(wireshark-setup-0.99.5pre1.exe)=7e35e36e2e9c734228fc247a5e019ca5dc51d66a -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.5 (Darwin) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFFsQlipw8IXSHylJoRAmB1AJ9GbMziVhHVZ4bl2xKvlo7ePNKt0ACfVpuv VOOGmQ0OFPl6YD6Q2Dai9wU= =MuLM -----END PGP SIGNATURE----- _______________________________________________ Wireshark-announce mailing list Wireshark-announce< at >wireshark.org http://www.wireshark.org/mailman/listinfo/wireshark-announce

Wireshark 0.99.4 is now available

Wireshark announcements — 2006-11-01T01:40:47

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Wireshark 0.99.4 has been released. What is Wireshark? Wireshark is the world's most popular network protocol analyzer. It is used for troubleshooting, analysis, development, and education. What's New Bug Fixes The following vulnerabilities have been fixed. See the security advisory for details and a workaround. o The HTTP dissector could crash. (Bugs 1050 and 1079) Versions affected: 0.99.3. CVE-2006-5468 o The LDAP dissector (and possibly others) could crash. (Bug 1054) Versions affected: 0.99.3. CVE-2006-5740 o The XOT dissector could attempt to allocate a large amount of memory and crash. (Bug 1133) Versions affected: 0.9.8 to 0.99.3. CVE-2006-4805 o The WBXML dissector could crash. (Bug 1134) Versions affected: 0.10.11 to 0.99.3. CVE-2006-5469 o The MIME Multipart dissector was susceptible to an off-by-one error. (Bug 1135) Versions affected: 0.10.1 to 0.99.3. CVE-2006-4574 o If AirPcap support was enabled, parsing a WEP key could sometimes cause a crash. Versions affected: 0.99.3. The following bugs have been fixed: o The file set dialog could grow excessively large. (Bug 331) o Trying to save flow data may crash Wireshark. (Bug 396) o It may not be possible to re-order coloring rules under Windows. (Bug 699) o Printing each packet to a new page didn't work under Windows. (Bug 707) o The personal hosts configuration file wasn't being parsed correctly. (Bug 795) o "Save as" to an existing file wasn't allowed. (Bug 927) o The SNMP dissector was not handling 64-bit counters properly. (Bug 1047) o Wireshark and TShark would fail to start under Windows while trying to acquire a crypto context. (Bug 1096) o The HTTP content-length field was a string instead of an integer. (Bug 1109) o Invalid characters could show up in PDML output. (Bug 1110) New and Updated Features The following features are new (or have been significantly updated) since the last release: o AirPcap, support (which provides raw mode capture under Windows) has been enhanced to allow capturing on multiple AirPcap adapters simultaneously using the Multi-Channel Aggregator. o VoIP call playback has been enhanced. If Wireshark is linked with the PortAudio library, you can play back G.711 conversations. This feature is present in the standard Windows installer. o The capture interface dialog display has been enhanced. o The "Save" button has been removed from the "Ok" / "Apply" / "Cancel" button group in the following dialogs: o Edit/Preferences o View/Coloring Rules o Capture/Capture Filters o Analyze/Display Filters o Analyze/Enabled Protocols If you're fond of the "Save" button it can be resurrected in the User Interface preferences. o Reading from stdin ("-i -") now works under Windows. o Expert analysis has been improved. o Wireshark now supports USB as a media type. If you're running a Linux distribution with version 2.6.11 of the kernel or greater and you have the usbmon module enabled and you have a recent CVS version of libpcap (post-0.9.5) installed you can also do live captures. More details can be found at the USB capture setup page on the wiki. o The number of WEP keys that the user can specify in the IEEE 802.11 protocol preferences has been increased from 4 to 64. New Protocol Support Enea LINX, Ethernet Powerlink (v1 and v2), H.248 Q.1950 Annex A, Linux pktgen, MP2T, NEWMAIL, PNG, SCSI OSD, UDLD, UMTS FP, USB, WLCCP, WZCSVC Updated Protocol Support 3Com NJACK, 802.11, ACSE, AH, ALCAP, ANSI MAP, ATM, ASN.1, BACapp, BER, BGP, BSSAP, Camel, Catapult DCT2000, CFlow, CLNP, Common Windows networking, DAP, DCERPC (DCERPC, ATSVC, DFS, EFS, EPM, EVENTLOG, INITSHUTDOWN, MAPI, NT, PIPE, SAMR, SPOOLSS, SRVSVC, SVCCTL, WINREG), DCOM (DCOM, CBA-ACCO, SYSACT), DIAMETER, DISP, DNS, DOP, DSP, ESP, Ethernet, FC, FCP, GSM A, GSM MAP, GSM SMS, GSSAPI, GTP, H.225, H.245, H.248, HTTP, ICQ, IKE, ISAKMP, iSCSI, ISUP, IUUP, Kerberos 4, LAP-D, LDAP, LLC, LogotypeCertExtn, MEGACO, MIME Multipart, MIP6, MMS, MSRP, MTP3, NCP, NDMP, NDPS, NFS, NTP, OSI, PER, PN-MRP, PPP, 19154Q.931, RADIUS, Redback, RPC, RTCP, RTP, SCCP, SCSI, SDP, SIP, SMB, SMRSE, SNMP, SSL, STANAG 5066, STP, TCAP, TCP, TFTP, TIPC, UDP, UMA, VLAN, VNC, VRRP, X.509ce X11, YMSG, WTLS Removed Protocols The CISCOWL dissector has been superseded by WLCCP. New and Updated Capture File Support Catapult DCT2000, EyeSDN, iSeries Getting Wireshark The source code and Windows installer can be downloaded immediately from http://www.wireshark.org/download/ . ------------------------------------------------------------------- Digests MD5(wireshark-0.99.4.tar.gz)=2556a31d0d770dd1990bd67b98bd2f9b SHA1(wireshark-0.99.4.tar.gz)=9c4f4bb214dad25f27e3ab346bf74701f9798f1e RIPEMD160(wireshark-0.99.4.tar.gz)=55582d5fc92b0fd380629766610a0aee93916e5d MD5(wireshark-0.99.4.tar.bz2)=05fada181e12bfa94b52f0b10395b28c SHA1(wireshark-0.99.4.tar.bz2)=696216d794b418da3cb0a1829281ef65bf3e64ff RIPEMD160(wireshark-0.99.4.tar.bz2)=6bf940af951ddfcf66157a8cb299e6342dd3f955 MD5(wireshark-setup-0.99.4.exe)=44edc28501c52c5a38e7351ea57d7873 SHA1(wireshark-setup-0.99.4.exe)=b245151b0dca0a88c65e7900ce7558ea89d29bc2 RIPEMD160(wireshark-setup-0.99.4.exe)=32710d62eed42bb8237de688736c7c688f2b8d03 MD5(patch-wireshark-0.99.3a-to-wireshark-0.99.4.diff.bz2)=25f2e9d14125c27133658c9a9dacda30 SHA1(patch-wireshark-0.99.3a-to-wireshark-0.99.4.diff.bz2)=9da137198dc6d4c32c4911f061e1ee4261ed5ff4 RIPEMD160(patch-wireshark-0.99.3a-to-wireshark-0.99.4.diff.bz2)=10d009c5c566ab584d66c32a156e6c6d487790ac -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.5 (Darwin) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFFR/sZpw8IXSHylJoRAtWNAJ40xXMscRdrqATfArHwC/9wgt+8NwCfY04C Cs9oYabtLh+1o1mQC3/EcZI= =6wJi -----END PGP SIGNATURE----- _______________________________________________ Wireshark-announce mailing list Wireshark-announce< at >wireshark.org http://www.wireshark.org/mailman/listinfo/wireshark-announce