gmane.network.wireshark.announce http://blog.gmane.org/gmane.network.wireshark.announce hourly 1 1901-01-01T00:00+00:00 Gmane http://gmane.org/img/gmane-25t.png http://gmane.org Wireshark 1.10.0rc2 is now available http://comments.gmane.org/gmane.network.wireshark.announce/129 <pre>-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 I'm proud to announce the release of Wireshark 1.10.0rc2. __________________________________________________________ What is Wireshark? Wireshark is the world's most popular network protocol analyzer. It is used for troubleshooting, analysis, development and education. __________________________________________________________ What's New Bug Fixes The following bugs have been fixed: * Redirecting the standard output didn't redirect the output the of -D or -L flags. This fix means that the output of those flags now goes to the standard output, not the standard error, as it did in previous releases. [1]Bug 8609 New and Updated Features The following features are new (or have been significantly updated) since version 1.8: * Wireshark on 32- and 64-bit Windows supports automatic updates. * The packet bytes view is faster. * You can now display a list of resolved host names in "hosts" format within Wireshark. * The wireless toolbar has been updated. * Wireshark on Linux does a better job of detecting interface addition and removal. * It is now possible to compare two fields in a display filter (for example: udp.srcport != udp.dstport). The two fields must be of the same type for this to work. * The Windows installers ship with WinPcap 4.1.3, which supports Windows 8. * USB type and product name support has been improved. * All Bluetooth profiles and protocols are now supported. * Wireshark now calculates HTTP response times and presents the result in a new field in the HTTP response. Links from the request's frame to the response's frame and vice-versa are also added. * The main welcome screen and status bar now display file sizes using strict SI prefixes instead of old-style binary prefixes. * Capinfos now prints human-readable statistics with SI suffixes by default. * It is now possible to open a referenced packet (such as the matched request or response packet) in a new window. * Tshark can now display only the hex/ascii packet data without requiring that the packet summary and/or packet details are also displayed. If you want the old behavior, use -Px instead of just -x. * Wireshark can be compiled using GTK+ 3. * The Wireshark application icon, capture toolbar icons, and other icons have been updated. * Tshark's filtering and multi-pass analysis have been reworked for consistency and in order to support dependent frame calculations during reassembly. See the man page descriptions for -2, -R, and -Y. * Tshark's -G fields2 and -G fields3 options have been eliminated. The -G fields option now includes the 2 extra fields that -G fields3 previously provided, and the blurb information has been relegated to the last column since in many cases it is blank anyway. * Wireshark dropped the left-handed settings from the preferences. This is still configurable via the GTK settings (add "gtk-scrolled-window-placement = top-right" in the config file, which might be called [/.gtkrc-2.0 or ]/.config/gtk-3.0/settings.ini). * Wireshark now ships with two global configuration files: Bluetooth, which contains coloring rules for Bluetooth and Classic, which contains the old-style coloring rules. New Protocol Support Amateur Radio AX.25, Amateur Radio BPQ, Amateur Radio NET/ROM, America Online (AOL), AR Drone, Automatic Position Reporting System (APRS), AX.25 KISS, AX.25 no Layer 3, Bitcoin Protocol, Bluetooth Attribute Protocol, Bluetooth AVCTP Protocol, Bluetooth AVDTP Protocol, Bluetooth AVRCP Profile, Bluetooth BNEP Protocol, Bluetooth HCI USB Transport, Bluetooth HCRP Profile, Bluetooth HID Profile, Bluetooth MCAP Protocol, Bluetooth SAP Profile, Bluetooth SBC Codec, Bluetooth Security Manager Protocol, Cisco GED-125 Protocol, Clique Reliable Multicast Protocol (CliqueRM), D-Bus, Digital Transmission Content Protection over IP, DVB-S2 Baseband, FlexNet, Forwarding and Control Element Separation Protocol (ForCES), Foundry Discovery Protocol (FDP), Gearman Protocol, GEO-Mobile Radio (1) RACH, HoneyPot Feeds Protocol (HPFEEDS), LTE Positioning Protocol Extensions (LLPe), Media Resource Control Protocol Version 2 (MRCPv2), Media-Independent Handover (MIH), MIDI System Exclusive (SYSEX), Mojito DHT, MPLS-TP Fault-Management, MPLS-TP Lock-Instruct, NASDAQ's OUCH 4.x, NASDAQ's SoupBinTCP, OpenVPN Protocol, Pseudo-Wire OAM, RPKI-Router Protocol, SEL Fast Message, Simple Packet Relay Transport (SPRT), Skype, Smart Message Language (SML), SPNEGO Extended Negotiation Security Mechanism (NEGOEX), UHD/USRP, USB Audio, USB Video, v.150.1 State Signaling Event (SSE), VITA 49 Radio Transport, VNTAG, WebRTC Datachannel Protocol (RTCDC), and WiMAX OFDMA PHY SAP Updated Protocol Support Too many protocols have been updated to list here. New and Updated Capture File Support AIX iptrace, CAM Inspector, Catapult DCT2000, Citrix NetScaler, DBS Etherwatch (VMS), Endace ERF, HP-UX nettl, IBM iSeries, Ixia IxVeriWave, NA Sniffer (DOS), Netscreen, Network Instruments Observer, pcap, pcap-ng, Symbian OS btsnoop, TamoSoft CommView, and Tektronix K12xx __________________________________________________________ Getting Wireshark Wireshark source code and installation packages are available from [2]http://www.wireshark.org/download.html. Vendor-supplied Packages Most Linux and Unix vendors supply their own Wireshark packages. You can usually install or upgrade Wireshark using the package management system specific to that platform. A list of third-party packages can be found on the [3]download page on the Wireshark web site. __________________________________________________________ File Locations Wireshark and TShark look in several different locations for preference files, plugins, SNMP MIBS, and RADIUS dictionaries. These locations vary from platform to platform. You can use About-&gt;Folders to find the default locations on your system. __________________________________________________________ Known Problems Dumpcap might not quit if Wireshark or TShark crashes. ([4]Bug 1419) The BER dissector might infinitely loop. ([5]Bug 1516) Capture filters aren't applied when capturing from named pipes. (ws-buglink:1814) Filtering tshark captures with read filters (-R) no longer works. ([6]Bug 2234) The 64-bit Windows installer does not support Kerberos decryption. ([7]Win64 development page) Application crash when changing real-time option. ([8]Bug 4035) Hex pane display issue after startup. ([9]Bug 4056) Packet list rows are oversized. ([10]Bug 4357) Summary pane selected frame highlighting not maintained. ([11]Bug 4445) Wireshark and TShark will display incorrect delta times in some cases. ([12]Bug 4985) __________________________________________________________ Getting Help Community support is available on [13]Wireshark's Q&amp;A site and on the wireshark-users mailing list. Subscription information and archives for all of Wireshark's mailing lists can be found on [14]the web site. Official Wireshark training and certification are available from [15]Wireshark University. __________________________________________________________ Frequently Asked Questions A complete FAQ is available on the [16]Wireshark web site. __________________________________________________________ Last updated 2013-05-20 15:54:29 PDT References 1. https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=8609 2. http://www.wireshark.org/download.html 3. http://www.wireshark.org/download.html#thirdparty 4. https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=1419 5. https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=1516 6. https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=2234 7. https://wiki.wireshark.org/Development/Win64 8. https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=4035 9. https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=4056 10. https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=4357 11. https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=4445 12. https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=4985 13. http://ask.wireshark.org/ 14. http://www.wireshark.org/lists/ 15. http://www.wiresharktraining.com/ 16. http://www.wireshark.org/faq.html Digests wireshark-1.10.0rc2.tar.bz2: 27099146 bytes MD5(wireshark-1.10.0rc2.tar.bz2)=17fade46415df20d1bad4ed1f2e326b1 SHA1(wireshark-1.10.0rc2.tar.bz2)=b900869e904c20fb9314f82a530f60ff2f0f7d5b RIPEMD160(wireshark-1.10.0rc2.tar.bz2)=b2dbea92949d6fc1d20bb88bbf77e79f475d1a8c Wireshark-win32-1.10.0rc2.exe: 22235680 bytes MD5(Wireshark-win32-1.10.0rc2.exe)=44d090c0eccf3c1d3fcbf7b00a5770f1 SHA1(Wireshark-win32-1.10.0rc2.exe)=54d8bb63854621740d7ba3608427f9917d4e47fb RIPEMD160(Wireshark-win32-1.10.0rc2.exe)=b1d67074791f9413e2da62e926b827ac594b95f6 Wireshark-win64-1.10.0rc2.exe: 28087200 bytes MD5(Wireshark-win64-1.10.0rc2.exe)=63a6628cd2bb922ee78a7392b56a281d SHA1(Wireshark-win64-1.10.0rc2.exe)=36487e88e494462029341f8fa3f7e7a99b4961af RIPEMD160(Wireshark-win64-1.10.0rc2.exe)=c81dfdece3e66b67219d1f07129bb70f8c88631d Wireshark-1.10.0rc2.u3p: 30769965 bytes MD5(Wireshark-1.10.0rc2.u3p)=a1600915015ccd7544d5b76b5bcb4531 SHA1(Wireshark-1.10.0rc2.u3p)=a8f687ef881382a7ae4988f906842c76a8df2112 RIPEMD160(Wireshark-1.10.0rc2.u3p)=20f523e5a4242f16d1c73456b45c9a2a3601da47 WiresharkPortable-1.10.0rc2.paf.exe: 23590992 bytes MD5(WiresharkPortable-1.10.0rc2.paf.exe)=7c964ad2320669d72a2a0175660b5680 SHA1(WiresharkPortable-1.10.0rc2.paf.exe)=c414bc92fc1967c0e48b4e57daffa22b231f00db RIPEMD160(WiresharkPortable-1.10.0rc2.paf.exe)=adf8675865e49a11efec2b629cd0a7cb194f082c Wireshark 1.10.0rc2 Intel 32.dmg: 21857055 bytes MD5(Wireshark 1.10.0rc2 Intel 32.dmg)=4388c85a0798711ceb31eefe6a68c2e9 SHA1(Wireshark 1.10.0rc2 Intel 32.dmg)=ded00b6cd181c363c64cdfd6c2085e6c38ab9286 RIPEMD160(Wireshark 1.10.0rc2 Intel 32.dmg)=f4f4c98e5239c5e306ab24344dc9e876a694d1ce Wireshark 1.10.0rc2 Intel 64.dmg: 23911090 bytes MD5(Wireshark 1.10.0rc2 Intel 64.dmg)=19a4182283619779bc9ebe94646d228d SHA1(Wireshark 1.10.0rc2 Intel 64.dmg)=c93bdd65079702776fbcea24205fb34f124e8276 RIPEMD160(Wireshark 1.10.0rc2 Intel 64.dmg)=80ee27ce020390f961bafced694c0b8e973c118b -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.12 (Darwin) Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/ iEYEARECAAYFAlGdWYUACgkQpw8IXSHylJqm9ACgi5k21G2l/jKfUpB536Mud47x uzkAmgIesFaV/vH+DfYCbF1VfEDnu7WU =dKkF -----END PGP SIGNATURE----- ___________________________________________________________________________ Sent via: Wireshark-announce mailing list &lt;wireshark-announce-IZ8446WsY0/dtAWm4Da02A&lt; at &gt;public.gmane.org&gt; Archives: http://www.wireshark.org/lists/wireshark-announce Unsubscribe: https://wireshark.org/mailman/options/wireshark-announce mailto:wireshark-announce-request-IZ8446WsY0/dtAWm4Da02A&lt; at &gt;public.gmane.org?subject=unsubscribe </pre> Wireshark announcements 2013-05-22T23:49:25 Wireshark 1.6.15 is now available http://comments.gmane.org/gmane.network.wireshark.announce/128 <pre>-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 I'm proud to announce the release of Wireshark 1.6.15. What is Wireshark? Wireshark is the world's most popular network protocol analyzer. It is used for troubleshooting, analysis, development and education. What's New Bug Fixes The following vulnerability has been fixed. o wnpa-sec-2013-25 The ASN.1 BER dissector could crash. (Bug 8599) Versions affected: 1.8.0 to 1.8.6, 1.6.0 to 1.6.14. The following bugs have been fixed: o SNMP dissector bug: STATUS_INTEGER_DIVIDE_BY_ZERO. (Bug 7359) o A console window is never opened. (Bug 7755) o dissect_rpc_array causes assertion fault when array is empty. (Bug 8145) o Decoding of GSM MAP E164 Digits. (Bug 8450) o Cannot read content of Ran Information Application Error Rim Container. (Bug 8559) o "ACE4_ADD_FILE/ACE4_ADD_SUBDIRECTORY" should be "ACE4_APPEND_DATA / ACE4_ADD_SUBDIRECTORY". (Bug 8575) o Wireshark Dissector bug with HSRP Version 2. (Bug 8622) o LISP control packet incorrectly identified as LISP data based when UDP source port is 4341. (Bug 8627) o Bad TCP checksum not detected. (Bug 8629) o AMR Frame Type uses wrong Value String. (Bug 8681) New and Updated Features There are no new features in this release. New Protocol Support There are no new protocols in this release. Updated Protocol Support AMR, ASN.1 BER, BAT, BSSGP, DTLS, E.164, GSM MAP, HSRP, LISP, NFS, RPC, SASP, SIP, SNMP, SSL/TLS, TCP New and Updated Capture File Support Netscreen. Getting Wireshark Wireshark source code and installation packages are available from http://www.wireshark.org/download.html. Vendor-supplied Packages Most Linux and Unix vendors supply their own Wireshark packages. You can usually install or upgrade Wireshark using the package management system specific to that platform. A list of third-party packages can be found on the download page on the Wireshark web site. File Locations Wireshark and TShark look in several different locations for preference files, plugins, SNMP MIBS, and RADIUS dictionaries. These locations vary from platform to platform. You can use About→Folders to find the default locations on your system. Known Problems Wireshark might make your system disassociate from a wireless network on OS X 10.4. (Bug 1315) Dumpcap might not quit if Wireshark or TShark crashes. (Bug 1419) The BER dissector might infinitely loop. (Bug 1516) Capture filters aren't applied when capturing from named pipes. (Bug 1814) Filtering tshark captures with display filters (-R) no longer works. (Bug 2234) The 64-bit Windows installer does not ship with libsmi. (Win64 development page) "Closing File!" Dialog Hangs. (Bug 3046) Application crash when changing real-time option. (Bug 4035) Hex pane display issue after startup. (Bug 4056) Packet list rows are oversized. (Bug 4357) Summary pane selected frame highlighting not maintained. (Bug 4445) Wireshark and TShark will display incorrect delta times when displayed as a custom column. (Bug 4985) Getting Help Community support is available on Wireshark's Q&amp;A site and on the wireshark-users mailing list. Subscription information and archives for all of Wireshark's mailing lists can be found on the web site. Official Wireshark training and certification are available from Wireshark University. Frequently Asked Questions A complete FAQ is available on the Wireshark web site. Digests wireshark-1.6.15.tar.bz2: 22153133 bytes MD5(wireshark-1.6.15.tar.bz2)=0c5a2fbfa7ba68c36a7ae8ab1cae6340 SHA1(wireshark-1.6.15.tar.bz2)=5e358aa0b1a7f76e66bccd734daec04c3bacfa1c RIPEMD160(wireshark-1.6.15.tar.bz2)=5ad8fb396f23fc47bd41ca2a7516b7deaa678b20 wireshark-win32-1.6.15.exe: 19641845 bytes MD5(wireshark-win32-1.6.15.exe)=e2e9438a303b386408621f19b190aa9d SHA1(wireshark-win32-1.6.15.exe)=058c019b8d4d54f7812047382b218f55fe973bd8 RIPEMD160(wireshark-win32-1.6.15.exe)=32fed4ae90f718217443f47f42f3a30c804533b6 wireshark-win64-1.6.15.exe: 22823005 bytes MD5(wireshark-win64-1.6.15.exe)=132ce3a2071612908510e3816fb2d6b6 SHA1(wireshark-win64-1.6.15.exe)=9eec59ae15a26ba1aab2c17853cfdec251beb77c RIPEMD160(wireshark-win64-1.6.15.exe)=7f9e2c486c45a6d823fc41f26f493985244d498d wireshark-1.6.15.u3p: 26783510 bytes MD5(wireshark-1.6.15.u3p)=cb1f3cb43d4feb753e6aa06abf78c792 SHA1(wireshark-1.6.15.u3p)=a6bebb9235c5c690623185f0640caa1061567436 RIPEMD160(wireshark-1.6.15.u3p)=e2998cefbaf413ff1c8456042a1d2e2cc6fd89c6 WiresharkPortable-1.6.15.paf.exe: 20567059 bytes MD5(WiresharkPortable-1.6.15.paf.exe)=0ee1085ca9633d0a843350231a0ab4cd SHA1(WiresharkPortable-1.6.15.paf.exe)=10f2a19cf2d552d300dd37b84f41587875fb1458 RIPEMD160(WiresharkPortable-1.6.15.paf.exe)=c34e7e756a19079bbacc02c37ac0a4f89e968430 Wireshark 1.6.15 Intel 32.dmg: 18464416 bytes MD5(Wireshark 1.6.15 Intel 32.dmg)=4af370bbfe67c305519a2db731ed4d98 SHA1(Wireshark 1.6.15 Intel 32.dmg)=55e2299834214f310f3bc4d8cf0e65bf8c94b3d5 RIPEMD160(Wireshark 1.6.15 Intel 32.dmg)=d62f2f9f3aaf073fb4da7ed2ef8d5bcfbdf9f462 Wireshark 1.6.15 PPC 32.dmg: 21288156 bytes MD5(Wireshark 1.6.15 PPC 32.dmg)=dd0b558a8d91f7846d90dee12096280b SHA1(Wireshark 1.6.15 PPC 32.dmg)=b6130523caef46160db364dcdbe22f353ff38963 RIPEMD160(Wireshark 1.6.15 PPC 32.dmg)=03d33808bc5bfce15d044027ee924450cc9c7c4b Wireshark 1.6.15 Intel 64.dmg: 20244915 bytes MD5(Wireshark 1.6.15 Intel 64.dmg)=5afbec77f0182915d358a03fa3984eb8 SHA1(Wireshark 1.6.15 Intel 64.dmg)=8ddf08cd7b3cda547503f1fa5f594ba1ff3a09b3 RIPEMD160(Wireshark 1.6.15 Intel 64.dmg)=019e7df11998295e4da7dcb00d5926442765bbce patch-wireshark-1.6.14-to-1.6.15.diff.bz2: 195041 bytes MD5(patch-wireshark-1.6.14-to-1.6.15.diff.bz2)=c93373953e2bcddf8f0bf75e42505e4b SHA1(patch-wireshark-1.6.14-to-1.6.15.diff.bz2)=b6e5349d6480f3b096d6d42aa67307c0d6780b3c RIPEMD160(patch-wireshark-1.6.14-to-1.6.15.diff.bz2)=4cf9cccc9d20b64a9d580f97b7e4d3b73fea8c0d -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.12 (Darwin) Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/ iEYEARECAAYFAlGWqDQACgkQpw8IXSHylJq6vACbBMbUwsDN3O+DvXpwD2mCIMDh FeEAnRjIxpE0p7st1EeaGKGL8PTq1McE =MPhZ -----END PGP SIGNATURE----- ___________________________________________________________________________ Sent via: Wireshark-announce mailing list &lt;wireshark-announce&lt; at &gt;wireshark.org&gt; Archives: http://www.wireshark.org/lists/wireshark-announce Unsubscribe: https://wireshark.org/mailman/options/wireshark-announce mailto:wireshark-announce-request&lt; at &gt;wireshark.org?subject=unsubscribe</pre> Wireshark announcements 2013-05-17T21:59:16 Wireshark 1.8.7 is now available http://comments.gmane.org/gmane.network.wireshark.announce/127 <pre>-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 I'm proud to announce the release of Wireshark 1.8.7. What is Wireshark? Wireshark is the world's most popular network protocol analyzer. It is used for troubleshooting, analysis, development and education. What's New Bug Fixes The following vulnerabilities have been fixed. o wnpa-sec-2013-23 The RELOAD dissector could go into an infinite loop. Discovered by Evan Jensen. (Bug 8364, (Bug 8546) Versions affected: 1.8.0 to 1.8.6. CVE-2013-2486 CVE-2013-2487 o wnpa-sec-2013-24 The GTPv2 dissector could crash. (Bug 8493) Versions affected: 1.8.0 to 1.8.6. o wnpa-sec-2013-25 The ASN.1 BER dissector could crash. (Bug 8599) Versions affected: 1.8.0 to 1.8.6, 1.6.0 to 1.6.14. o wnpa-sec-2013-26 The PPP CCP dissector could crash. (Bug 8638) Versions affected: 1.8.0 to 1.8.6. o wnpa-sec-2013-27 The DCP ETSI dissector could crash. Discovered by Evan Jensen. (Bug 8231, bug 8540, bug 8541) Versions affected: 1.8.0 to 1.8.6. o wnpa-sec-2013-28 The MPEG DSM-CC dissector could crash. (Bug 8481) Versions affected: 1.8.0 to 1.8.6. o wnpa-sec-2013-29 The Websocket dissector could crash. Discovered by Moshe Kaplan. (Bug 8448, Bug 8499) Versions affected: 1.8.0 to 1.8.6. o wnpa-sec-2013-30 The MySQL dissector could go into an infinite loop. Discovered by Moshe Kaplan. (Bug 8458) Versions affected: 1.8.0 to 1.8.6. o wnpa-sec-2013-31 The ETCH dissector could go into a large loop. Discovered by Moshe Kaplan. (Bug 8464) Versions affected: 1.8.0 to 1.8.6. The following bugs have been fixed: o The Windows installer and uninstaller does a better job of detecting running executables. o Library mismatch when compiling on a system with an older Wireshark version. (Bug 6011) o SNMP dissector bug: STATUS_INTEGER_DIVIDE_BY_ZERO. (Bug 7359) o A console window is never opened. (Bug 7755) o GSM_MAP show malformed Packets when two IMSI. (Bug 7882) o Fix include and libs search path when cross compiling. (Bug 7926) o PER dissector crash. (Bug 8197) o pcap-ng: name resolution block is not written to file on save. (Bug 8317) o Incorrect RTP statistics (Lost Packets indication not ok). (Bug 8321) o Decoding of GSM MAP E164 Digits. (Bug 8450) o Silent installer and uninstaller not silent. (Bug 8451) o Replace use of INCLUDES with AM_CPPFLAGS in all Makefiles to placate recent autotools. (Bug 8452) o Wifi details are not stored in the Decryption Key Management dialog (post 1.8.x). (Bug 8446) o IO Graph should not be limited to 100k points (NUM_IO_ITEMS). (Bug 8460) o geographical_description: hf_gsm_a_geo_loc_deg_of_long 24 bit field truncated to 23 bits. (Bug 8532) o IRC message with multiple params causes malformed packet exception. (Bug 8548) o Part of Ping Reply Message in ICMPv6 Reply Message is marked as "Malformed Packet". (Bug 8554) o MP2T wiretap heuristic overriding ERF. (Bug 8556) o Cannot read content of Ran Information Application Error Rim Container. (Bug 8559) o Endian error and IP:Port error when decoding BT-DHT response message. (Bug 8572) o "ACE4_ADD_FILE/ACE4_ADD_SUBDIRECTORY" should be "ACE4_APPEND_DATA / ACE4_ADD_SUBDIRECTORY". (Bug 8575) o wireshark crashes while displaying I/O Graph. (Bug 8583) o GTPv2 MM Context (UMTS Key, Quad, and Quint Decoded) incorrectly. (Bug 8596) o DTLS 1.2 uses wrong PRF. (Bug 8608) o RTP DTMF digits are no longer displayed in VoIP graph analysis. (Bug 8610) o Universal port not accepted in RSA Keys List window. (Bug 8618) o Wireshark Dissector bug with HSRP Version 2. (Bug 8622) o LISP control packet incorrectly identified as LISP data based when UDP source port is 4341. (Bug 8627) o Bad tcp checksum not detected. (Bug 8629) o AMR Frame Type uses wrong Value String. (Bug 8681) New and Updated Features There are no new features in this release. New Protocol Support There are no new protocols in this release. Updated Protocol Support AMR, ASN.1 BER, BAT, Bluetooth DHT, BSSGP, DTLS, E.164, Ericsson A-bis OML, GSM A, GSM MAP, HDFSDATA, ICMP, ICMPv6, ixveriwave, IRC, KDSP, LISP Data, MMS, NFS, OpenWire, PPP, RELOAD, RTP, SASP, SIP, SSL/TLS, TCP, UA3G New and Updated Capture File Support Endace ERF, NetScreen snoop. Getting Wireshark Wireshark source code and installation packages are available from http://www.wireshark.org/download.html. Vendor-supplied Packages Most Linux and Unix vendors supply their own Wireshark packages. You can usually install or upgrade Wireshark using the package management system specific to that platform. A list of third-party packages can be found on the download page on the Wireshark web site. File Locations Wireshark and TShark look in several different locations for preference files, plugins, SNMP MIBS, and RADIUS dictionaries. These locations vary from platform to platform. You can use About→Folders to find the default locations on your system. Known Problems Dumpcap might not quit if Wireshark or TShark crashes. (Bug 1419) The BER dissector might infinitely loop. (Bug 1516) Capture filters aren't applied when capturing from named pipes. (Bug 1814) Filtering tshark captures with display filters (-R) no longer works. (Bug 2234) The 64-bit Windows installer does not support Kerberos decryption. (Win64 development page) Application crash when changing real-time option. (Bug 4035) Hex pane display issue after startup. (Bug 4056) Packet list rows are oversized. (Bug 4357) Summary pane selected frame highlighting not maintained. (Bug 4445) Wireshark and TShark will display incorrect delta times in some cases. (Bug 4985) Getting Help Community support is available on Wireshark's Q&amp;A site and on the wireshark-users mailing list. Subscription information and archives for all of Wireshark's mailing lists can be found on the web site. Official Wireshark training and certification are available from Wireshark University. Frequently Asked Questions A complete FAQ is available on the Wireshark web site. Digests wireshark-1.8.7.tar.bz2: 24273700 bytes MD5(wireshark-1.8.7.tar.bz2)=f4198728a20aa40752906031e08544f8 SHA1(wireshark-1.8.7.tar.bz2)=c131ce10555e608e691aa36190c8d5a1b271c955 RIPEMD160(wireshark-1.8.7.tar.bz2)=c9a2b59441a517e4943a2b7e3e994694125b1759 Wireshark-win32-1.8.7.exe: 20868704 bytes MD5(Wireshark-win32-1.8.7.exe)=7aee0d82ed4efa3e709aa9e42a86c34c SHA1(Wireshark-win32-1.8.7.exe)=95f42bfaee23351b504aca3fa57e29c0c2cd3227 RIPEMD160(Wireshark-win32-1.8.7.exe)=a95e303f9176d754d86a8f8198a801cba5c3e04f Wireshark-win64-1.8.7.exe: 26549232 bytes MD5(Wireshark-win64-1.8.7.exe)=a832cae3e9d0e312c3c1241a970f1080 SHA1(Wireshark-win64-1.8.7.exe)=845da671608323ca3154c03e47365e26fce80d69 RIPEMD160(Wireshark-win64-1.8.7.exe)=696f0c8090bcb22e7c2c641925db7b6958ce5df1 Wireshark-1.8.7.u3p: 28621210 bytes MD5(Wireshark-1.8.7.u3p)=e38ae665e9a6799961c75e1c794b0241 SHA1(Wireshark-1.8.7.u3p)=5feb3b235ffe38315b94bd1de1fd269249737853 RIPEMD160(Wireshark-1.8.7.u3p)=162f88f661a31fd1902ece049b6d8a4937dd18f7 WiresharkPortable-1.8.7.paf.exe: 22051216 bytes MD5(WiresharkPortable-1.8.7.paf.exe)=5f7624d355520650b1d61f86552ef06c SHA1(WiresharkPortable-1.8.7.paf.exe)=7fbba81263fb957f37a8694ab36f39aa2d0dda7c RIPEMD160(WiresharkPortable-1.8.7.paf.exe)=f1ee0f1aff528a88aad79024df371560a593f963 Wireshark 1.8.7 PPC 32.dmg: 22938629 bytes MD5(Wireshark 1.8.7 PPC 32.dmg)=2df64ff6c884f8c9aa036be0ac850dc4 SHA1(Wireshark 1.8.7 PPC 32.dmg)=fac403ed5616d4f3736dc26ad6b46b43d92eeca5 RIPEMD160(Wireshark 1.8.7 PPC 32.dmg)=a3a2de3aeac6bfce17f95ed1bc803277cab504b5 Wireshark 1.8.7 Intel 64.dmg: 21653924 bytes MD5(Wireshark 1.8.7 Intel 64.dmg)=8615eade01f43e6229d83a3148bd5566 SHA1(Wireshark 1.8.7 Intel 64.dmg)=3816f7a1d9fdea109a02c49d559f804516ebab6d RIPEMD160(Wireshark 1.8.7 Intel 64.dmg)=847401b192639fd9ae85c4f2fe33cf6fc25df077 Wireshark 1.8.7 Intel 32.dmg: 19734453 bytes MD5(Wireshark 1.8.7 Intel 32.dmg)=4c5e9c6ae11d0db53cb101acf06fe96f SHA1(Wireshark 1.8.7 Intel 32.dmg)=5aaf4924318705e041041f2af4145966b63f4baf RIPEMD160(Wireshark 1.8.7 Intel 32.dmg)=e324792142ea8a76f6f949b3fbe998dba7290c84 patch-wireshark-1.8.6-to-1.8.7.diff.bz2: 238913 bytes MD5(patch-wireshark-1.8.6-to-1.8.7.diff.bz2)=898cc367b1ca964d13d5add01abd7dc3 SHA1(patch-wireshark-1.8.6-to-1.8.7.diff.bz2)=44668ceb45fc4953d9f782c61abcd67bd75cb8d1 RIPEMD160(patch-wireshark-1.8.6-to-1.8.7.diff.bz2)=43047d437df36cefce63d295fbbde1973d4867f7 -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.12 (Darwin) Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/ iEYEARECAAYFAlGWqCAACgkQpw8IXSHylJrVcACgkdCrVv8oME+n7xT8nMXJpe1R hLcAnizCuOZjoSmRJZOCkIzBmbJ/FcIp =Pjbu -----END PGP SIGNATURE----- ___________________________________________________________________________ Sent via: Wireshark-announce mailing list &lt;wireshark-announce&lt; at &gt;wireshark.org&gt; Archives: http://www.wireshark.org/lists/wireshark-announce Unsubscribe: https://wireshark.org/mailman/options/wireshark-announce mailto:wireshark-announce-request&lt; at &gt;wireshark.org?subject=unsubscribe</pre> Wireshark announcements 2013-05-17T21:58:56 Wireshark 1.10.0rc1 is now available http://comments.gmane.org/gmane.network.wireshark.announce/126 <pre>-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 I'm proud to announce the release of Wireshark 1.10.0rc1. This is the first release candidate for Wireshark 1.10.0. __________________________________________________________ What is Wireshark? Wireshark is the world's most popular network protocol analyzer. It is used for troubleshooting, analysis, development and education. __________________________________________________________ What's New Bug Fixes The following bugs have been fixed: New and Updated Features The following features are new (or have been significantly updated) since version 1.8: * Wireshark on 32- and 64-bit Windows supports automatic updates. * The packet bytes view is faster. * You can now display a list of resolved host names in "hosts" format within Wireshark. * The wireless toolbar has been updated. * Wireshark on Linux does a better job of detecting interface addition and removal. * It is now possible to compare two fields in a display filter (for example: udp.srcport != udp.dstport). The two fields must be of the same type for this to work. * The Windows installers ship with WinPcap 4.1.3, which supports Windows 8. * USB type and product name support has been improved. * All Bluetooth profiles and protocols are now supported. * Wireshark now calculates HTTP response times and presents the result in a new field in the HTTP response. Links from the request's frame to the response's frame and vice-versa are also added. * The main welcome screen and status bar now display file sizes using strict SI prefixes instead of old-style binary prefixes. * Capinfos now prints human-readable statistics with SI suffixes by default. * It is now possible to open a referenced packet (such as the matched request or response packet) in a new window. * Tshark can now display only the hex/ascii packet data without requiring that the packet summary and/or packet details are also displayed. If you want the old behavior, use -Px instead of just -x. * Wireshark can be compiled using GTK+ 3. * The Wireshark application icon, capture toolbar icons, and other icons have been updated. * Tshark's filtering and multi-pass analysis have been reworked for consistency and in order to support dependent frame calculations during reassembly. See the man page descriptions for -2, -R, and -Y. * Tshark's -G fields2 and -G fields3 options have been eliminated. The -G fields option now includes the 2 extra fields that -G fields3 previously provided, and the blurb information has been relegated to the last column since in many cases it is blank anyway. New Protocol Support Amateur Radio AX.25, Amateur Radio BPQ, Amateur Radio NET/ROM, America Online (AOL), AR Drone, Automatic Position Reporting System (APRS), AX.25 KISS, AX.25 no Layer 3, Bitcoin Protocol, Bluetooth Attribute Protocol, Bluetooth AVCTP Protocol, Bluetooth AVDTP Protocol, Bluetooth AVRCP Profile, Bluetooth BNEP Protocol, Bluetooth HCI USB Transport, Bluetooth HCRP Profile, Bluetooth HID Profile, Bluetooth MCAP Protocol, Bluetooth SAP Profile, Bluetooth SBC Codec, Bluetooth Security Manager Protocol, Cisco GED-125 Protocol, Clique Reliable Multicast Protocol (CliqueRM), D-Bus, Digital Transmission Content Protection over IP, DVB-S2 Baseband, FlexNet, Forwarding and Control Element Separation Protocol (ForCES), Foundry Discovery Protocol (FDP), Gearman Protocol, GEO-Mobile Radio (1) RACH, HoneyPot Feeds Protocol (HPFEEDS), LTE Positioning Protocol Extensions (LLPe), Media Resource Control Protocol Version 2 (MRCPv2), Media-Independent Handover (MIH), MIDI System Exclusive (SYSEX), Mojito DHT, MPLS-TP Fault-Management, MPLS-TP Lock-Instruct, NASDAQ's OUCH 4.x, NASDAQ's SoupBinTCP, OpenVPN Protocol, Pseudo-Wire OAM, RPKI-Router Protocol, SEL Fast Message, Simple Packet Relay Transport (SPRT), Skype, Smart Message Language (SML), SPNEGO Extended Negotiation Security Mechanism (NEGOEX), UHD/USRP, USB Audio, USB Video, v.150.1 State Signaling Event (SSE), VITA 49 Radio Transport, VNTAG, WebRTC Datachannel Protocol (RTCDC), and WiMAX OFDMA PHY SAP Updated Protocol Support Too many protocols have been updated to list here. New and Updated Capture File Support AIX iptrace, CAM Inspector, Catapult DCT2000, Citrix NetScaler, DBS Etherwatch (VMS), Endace ERF, HP-UX nettl, IBM iSeries, Ixia IxVeriWave, NA Sniffer (DOS), Netscreen, Network Instruments Observer, pcap, pcap-ng, Symbian OS btsnoop, TamoSoft CommView, and Tektronix K12xx __________________________________________________________ Getting Wireshark Wireshark source code and installation packages are available from [1]http://www.wireshark.org/download.html. Vendor-supplied Packages Most Linux and Unix vendors supply their own Wireshark packages. You can usually install or upgrade Wireshark using the package management system specific to that platform. A list of third-party packages can be found on the [2]download page on the Wireshark web site. __________________________________________________________ File Locations Wireshark and TShark look in several different locations for preference files, plugins, SNMP MIBS, and RADIUS dictionaries. These locations vary from platform to platform. You can use About-&gt;Folders to find the default locations on your system. __________________________________________________________ Known Problems Dumpcap might not quit if Wireshark or TShark crashes. ([3]Bug 1419) The BER dissector might infinitely loop. ([4]Bug 1516) Capture filters aren't applied when capturing from named pipes. (ws-buglink:1814) Filtering tshark captures with read filters (-R) no longer works. ([5]Bug 2234) The 64-bit Windows installer does not support Kerberos decryption. ([6]Win64 development page) Application crash when changing real-time option. ([7]Bug 4035) Hex pane display issue after startup. ([8]Bug 4056) Packet list rows are oversized. ([9]Bug 4357) Summary pane selected frame highlighting not maintained. ([10]Bug 4445) Wireshark and TShark will display incorrect delta times in some cases. ([11]Bug 4985) __________________________________________________________ Getting Help Community support is available on [12]Wireshark's Q&amp;A site and on the wireshark-users mailing list. Subscription information and archives for all of Wireshark's mailing lists can be found on [13]the web site. Official Wireshark training and certification are available from [14]Wireshark University. __________________________________________________________ Frequently Asked Questions A complete FAQ is available on the [15]Wireshark web site. __________________________________________________________ Last updated 2013-04-22 10:39:34 PDT References 1. http://www.wireshark.org/download.html 2. http://www.wireshark.org/download.html#thirdparty 3. https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=1419 4. https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=1516 5. https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=2234 6. https://wiki.wireshark.org/Development/Win64 7. https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=4035 8. https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=4056 9. https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=4357 10. https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=4445 11. https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=4985 12. http://ask.wireshark.org/ 13. http://www.wireshark.org/lists/ 14. http://www.wiresharktraining.com/ 15. http://www.wireshark.org/faq.html Digests wireshark-1.10.0rc1.tar.bz2: 27061529 bytes MD5(wireshark-1.10.0rc1.tar.bz2)=39298e1c8343d3fa1acbd77ab33503fe SHA1(wireshark-1.10.0rc1.tar.bz2)=d9d5e897c42def2a90b508fba0151a226abc41e4 RIPEMD160(wireshark-1.10.0rc1.tar.bz2)=707a6e512a441ed428cb53abf3b04253d0ef36a8 Wireshark-win64-1.10.0rc1.exe: 28079976 bytes MD5(Wireshark-win64-1.10.0rc1.exe)=231929c1b044d66683edc0b260d885a6 SHA1(Wireshark-win64-1.10.0rc1.exe)=55a203223bb642f628335b72be3c23edd71c9b38 RIPEMD160(Wireshark-win64-1.10.0rc1.exe)=051103a241c709559ecce0c08b5de87c01eaeff4 Wireshark-win32-1.10.0rc1.exe: 22227088 bytes MD5(Wireshark-win32-1.10.0rc1.exe)=dc357a87d11088aa768cd715ef4f3ad9 SHA1(Wireshark-win32-1.10.0rc1.exe)=90f9d2da7a674a632645a3b09bb9130ae9eb53e9 RIPEMD160(Wireshark-win32-1.10.0rc1.exe)=5f34cb06bb7e8503ca602debab4b1faecc0d09b6 Wireshark-1.10.0rc1.u3p: 30755518 bytes MD5(Wireshark-1.10.0rc1.u3p)=988e672fea36e05015f037471cd045bf SHA1(Wireshark-1.10.0rc1.u3p)=0922201c702b0a4ea0dad03d400a33b0cd1cf210 RIPEMD160(Wireshark-1.10.0rc1.u3p)=a09f3d384b008bc8d9d37a713c5b0a998a2c0134 WiresharkPortable-1.10.0rc1.paf.exe: 23584280 bytes MD5(WiresharkPortable-1.10.0rc1.paf.exe)=fc439acd380c792cc3917858113ef6a6 SHA1(WiresharkPortable-1.10.0rc1.paf.exe)=65c129b7f3bbd4ba8d67559f6ee19631ac350d67 RIPEMD160(WiresharkPortable-1.10.0rc1.paf.exe)=a22ac09043c6577a2ac45a7926d92b1fb51974de Wireshark 1.10.0rc1 Intel 32.dmg: 24153010 bytes MD5(Wireshark 1.10.0rc1 Intel 32.dmg)=c828d4188e329c865cbb711ab93efe3e SHA1(Wireshark 1.10.0rc1 Intel 32.dmg)=9ac20ec957a3d4a372bf93319a2ce107a8a1a15d RIPEMD160(Wireshark 1.10.0rc1 Intel 32.dmg)=cb3ef75ddf48ac39eafe866876f54ed193a57e11 Wireshark 1.10.0rc1 Intel 64.dmg: 24024741 bytes MD5(Wireshark 1.10.0rc1 Intel 64.dmg)=7628f6ef0d85960443a6cac147dd0455 SHA1(Wireshark 1.10.0rc1 Intel 64.dmg)=d0b49d77671800d2a52cec6e478e826bb8ac5a02 RIPEMD160(Wireshark 1.10.0rc1 Intel 64.dmg)=81ff48a31c067166b9ec65acf3c66824333e7019 -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.12 (Darwin) Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/ iEYEARECAAYFAlF7D98ACgkQpw8IXSHylJpy0QCgz2LQnk7nQ4hDluLv5WGby+9b wU8AoMTP6BFHVDPSemIomzrpcjPcgME9 =kA9M -----END PGP SIGNATURE----- ___________________________________________________________________________ Sent via: Wireshark-announce mailing list &lt;wireshark-announce-IZ8446WsY0/dtAWm4Da02A&lt; at &gt;public.gmane.org&gt; Archives: http://www.wireshark.org/lists/wireshark-announce Unsubscribe: https://wireshark.org/mailman/options/wireshark-announce mailto:wireshark-announce-request-IZ8446WsY0/dtAWm4Da02A&lt; at &gt;public.gmane.org?subject=unsubscribe </pre> Wireshark announcements 2013-04-26T23:38:07 Wireshark 1.9.2 is now available http://comments.gmane.org/gmane.network.wireshark.announce/125 <pre>-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 I'm proud to announce the release of Wireshark 1.9.2. __________________________________________________________ What is Wireshark? Wireshark is the world's most popular network protocol analyzer. It is used for troubleshooting, analysis, development and education. __________________________________________________________ What's New Bug Fixes The following bugs have been fixed: New and Updated Features The following features are new (or have been significantly updated) since version 1.8: * Wireshark on 32- and 64-bit Windows supports automatic updates. * The packet bytes view is faster. * You can now display a list of resolved host names in "hosts" format within Wireshark. * The wireless toolbar has been updated. * Wireshark on Linux does a better job of detecting interface addition and removal. * It is now possible to compare two fields in a display filter (for example: udp.srcport != udp.dstport). The two fields must be of the same type for this to work. * The Windows installers ship with WinPcap 4.1.3, which supports Windows 8. * USB type and product name support has been improved. * Wireshark now calculates HTTP response times and presents the result in a new field in the HTTP response. Links from the request's frame to the response's frame and vice-versa are also added. * The main welcome screen and status bar now display file sizes using strict SI prefixes instead of old-style binary prefixes. * Capinfos now prints human-readable statistics with SI suffixes by default. * It is now possible to open a referenced packet (such as the matched request or response packet) in a new window. * It is now possible for tshark to display only the hex/ascii packet data without also requiring that the packet summary and/or packet details are also displayed. If you want the old behavior, use -Px instead of just -x. * The Wireshark application icon, capture toolbar icons, and other icons have been updated. New Protocol Support Amateur Radio AX.25, Amateur Radio BPQ, Amateur Radio NET/ROM, America Online (AOL), AR Drone, Automatic Position Reporting System (APRS), AX.25 KISS, AX.25 no Layer 3, Bitcoin Protocol, Bluetooth Attribute Protocol, Bluetooth AVCTP Protocol, Bluetooth AVDTP Protocol, Bluetooth AVRCP Profile, Bluetooth BNEP Protocol, Bluetooth HCI USB Transport, Bluetooth HCRP Profile, Bluetooth HID Profile, Bluetooth MCAP Protocol, Bluetooth SAP Profile, Bluetooth SBC Codec, Bluetooth Security Manager Protocol, Cisco GED-125 Protocol, Clique Reliable Multicast Protocol (CliqueRM), D-Bus, Digital Transmission Content Protection over IP, DVB-S2 Baseband, FlexNet, Forwarding and Control Element Separation Protocol (ForCES), Foundry Discovery Protocol (FDP), Gearman Protocol, GEO-Mobile Radio (1) RACH, HoneyPot Feeds Protocol (HPFEEDS), LTE Positioning Protocol Extensions (LLPe), Media Resource Control Protocol Version 2 (MRCPv2), Media-Independent Handover (MIH), MIDI System Exclusive (SYSEX), Mojito DHT, MPLS-TP Fault-Management, MPLS-TP Lock-Instruct, NASDAQ's OUCH 4.x, NASDAQ's SoupBinTCP, OpenVPN Protocol, Pseudo-Wire OAM, RPKI-Router Protocol, SEL Fast Message, Simple Packet Relay Transport (SPRT), Skype, Smart Message Language (SML), SPNEGO Extended Negotiation Security Mechanism (NEGOEX), UHD/USRP, USB Audio, USB Video, v.150.1 State Signaling Event (SSE), VITA 49 Radio Transport, VNTAG, WebRTC Datachannel Protocol (RTCDC), and WiMAX OFDMA PHY SAP Updated Protocol Support Too many protocols have been updated to list here. New and Updated Capture File Support AIX iptrace, Catapult DCT2000, Citrix NetScaler, DBS Etherwatch (VMS), Endace ERF, HP-UX nettl, IBM iSeries, Ixia IxVeriWave, NA Sniffer (DOS), Netscreen, Network Instruments Observer, pcap, pcap-ng, Symbian OS btsnoop, TamoSoft CommView, and Tektronix K12xx __________________________________________________________ Getting Wireshark Wireshark source code and installation packages are available from [1]http://www.wireshark.org/download.html. Vendor-supplied Packages Most Linux and Unix vendors supply their own Wireshark packages. You can usually install or upgrade Wireshark using the package management system specific to that platform. A list of third-party packages can be found on the [2]download page on the Wireshark web site. __________________________________________________________ File Locations Wireshark and TShark look in several different locations for preference files, plugins, SNMP MIBS, and RADIUS dictionaries. These locations vary from platform to platform. You can use About-&gt;Folders to find the default locations on your system. __________________________________________________________ Known Problems Dumpcap might not quit if Wireshark or TShark crashes. ([3]Bug 1419) The BER dissector might infinitely loop. ([4]Bug 1516) Capture filters aren't applied when capturing from named pipes. (ws-buglink:1814) Filtering tshark captures with display filters (-R) no longer works. ([5]Bug 2234) The 64-bit Windows installer does not support Kerberos decryption. ([6]Win64 development page) Application crash when changing real-time option. ([7]Bug 4035) Hex pane display issue after startup. ([8]Bug 4056) Packet list rows are oversized. ([9]Bug 4357) Summary pane selected frame highlighting not maintained. ([10]Bug 4445) Wireshark and TShark will display incorrect delta times in some cases. ([11]Bug 4985) __________________________________________________________ Getting Help Community support is available on [12]Wireshark's Q&amp;A site and on the wireshark-users mailing list. Subscription information and archives for all of Wireshark's mailing lists can be found on [13]the web site. Official Wireshark training and certification are available from [14]Wireshark University. __________________________________________________________ Frequently Asked Questions A complete FAQ is available on the [15]Wireshark web site. __________________________________________________________ Last updated 2013-03-27 11:36:52 PDT References 1. http://www.wireshark.org/download.html 2. http://www.wireshark.org/download.html#thirdparty 3. https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=1419 4. https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=1516 5. https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=2234 6. https://wiki.wireshark.org/Development/Win64 7. https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=4035 8. https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=4056 9. https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=4357 10. https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=4445 11. https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=4985 12. http://ask.wireshark.org/ 13. http://www.wireshark.org/lists/ 14. http://www.wiresharktraining.com/ 15. http://www.wireshark.org/faq.html Digests wireshark-1.9.2.tar.bz2: 26758261 bytes MD5(wireshark-1.9.2.tar.bz2)=8b66483a58355f8c7d1efa305cefd795 SHA1(wireshark-1.9.2.tar.bz2)=838b5dcfccb6b6dea52300f1f5a06b3c60c7b303 RIPEMD160(wireshark-1.9.2.tar.bz2)=e2b5ea09c4cd01cb61dab4f7c0db2dc73a3943ce Wireshark-win64-1.9.2.exe: 32349888 bytes MD5(Wireshark-win64-1.9.2.exe)=a41ccc83bd8d51f66ab0790a2957bdaa SHA1(Wireshark-win64-1.9.2.exe)=c7f51845a453aa123060a05d073eb1f8a3c4866a RIPEMD160(Wireshark-win64-1.9.2.exe)=276a03bc6a798368e6c239ba4a4c5a0a3888aad6 Wireshark-win32-1.9.2.exe: 26000504 bytes MD5(Wireshark-win32-1.9.2.exe)=72b0efe9de57c8c8c396f7ff77376458 SHA1(Wireshark-win32-1.9.2.exe)=b16cf008299f20d884a0c4f6b56c43e67b356a1a RIPEMD160(Wireshark-win32-1.9.2.exe)=9b56c42ff3e7d2413ef61c2204b2845b4ad93031 Wireshark-1.9.2.u3p: 30716462 bytes MD5(Wireshark-1.9.2.u3p)=39976cfa7299095ed5dbc3b91b4e6d81 SHA1(Wireshark-1.9.2.u3p)=2cb3b36aa80e4e8dd325a45b1eb6f56732f0c55a RIPEMD160(Wireshark-1.9.2.u3p)=e5ae900d7b181a96956e1e34df37b87405330999 WiresharkPortable-1.9.2.paf.exe: 27471152 bytes MD5(WiresharkPortable-1.9.2.paf.exe)=fbbab70f350d41c602da68be264baa99 SHA1(WiresharkPortable-1.9.2.paf.exe)=a13291218c0e5c3d21da753124ebaf5d25a81a2d RIPEMD160(WiresharkPortable-1.9.2.paf.exe)=05e1cdba185e3c73566576a324a6924f1898d97b Wireshark 1.9.2 Intel 64.dmg: 23958025 bytes MD5(Wireshark 1.9.2 Intel 64.dmg)=7917fa5a4b029fbea31a5d4cba80ac9f SHA1(Wireshark 1.9.2 Intel 64.dmg)=ce16d0359b35e12e69e86bdcda38a487838af0fd RIPEMD160(Wireshark 1.9.2 Intel 64.dmg)=dcd70649b071ec3079da06d6ea5b06d7f3dd8848 Wireshark 1.9.2 Intel 32.dmg: 24073844 bytes MD5(Wireshark 1.9.2 Intel 32.dmg)=fcab4f466dccb68476cbdc241642b64a SHA1(Wireshark 1.9.2 Intel 32.dmg)=5de5163324f98b0cbdc2a1ba7390063217e94a60 RIPEMD160(Wireshark 1.9.2 Intel 32.dmg)=0ef5518e65e03914d4d77c6c45f455a1f2299c67 Wireshark 1.9.2 PPC 32.dmg: 24935234 bytes MD5(Wireshark 1.9.2 PPC 32.dmg)=53a900ac4d92be9a39a2470edf921607 SHA1(Wireshark 1.9.2 PPC 32.dmg)=27eafa0c40cef48fb315e98bcfa11ed32c986505 RIPEMD160(Wireshark 1.9.2 PPC 32.dmg)=f9a7a43db4bb7476216ace78680d941a205a6547 -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.12 (Darwin) Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/ iEYEARECAAYFAlFUsBEACgkQpw8IXSHylJpaiQCgp724TGT6BwC/UKHa+6wm/P7O sUMAnjjlcWyCuZiMif5qa38KGwasx8Y1 =5nh2 -----END PGP SIGNATURE----- ___________________________________________________________________________ Sent via: Wireshark-announce mailing list &lt;wireshark-announce-IZ8446WsY0/dtAWm4Da02A&lt; at &gt;public.gmane.org&gt; Archives: http://www.wireshark.org/lists/wireshark-announce Unsubscribe: https://wireshark.org/mailman/options/wireshark-announce mailto:wireshark-announce-request-IZ8446WsY0/dtAWm4Da02A&lt; at &gt;public.gmane.org?subject=unsubscribe </pre> Wireshark announcements 2013-03-28T21:03:13 Wireshark 1.6.14 is now available http://comments.gmane.org/gmane.network.wireshark.announce/124 <pre>-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 I'm proud to announce the release of Wireshark 1.6.14. What is Wireshark? Wireshark is the world's most popular network protocol analyzer. It is used for troubleshooting, analysis, development and education. What's New Bug Fixes The following vulnerability has been fixed. o wnpa-sec-2012-32 The sFlow dissector could go into an infinite loop. (Bug 7789) Versions affected: 1.8.0 to 1.8.3, 1.6.0 to 1.6.13. CVE-2012-6054 o wnpa-sec-2012-33 The SCTP dissector could go into an infinite loop. (Bug 7802) Versions affected: 1.8.0 to 1.8.3, 1.6.0 to 1.6.13. CVE-2012-6056 o wnpa-sec-2013-13 The MS-MMS dissector could crash. Discovered by Laurent Butti. (Bug 8382) Versions affected: 1.8.0 to 1.8.5, 1.6.0 to 1.6.13. CVE-2013-2478 o wnpa-sec-2013-15 The RTPS and RTPS2 dissectors could crash. Discovered by Alyssa Milburn. (Bug 8332) Versions affected: 1.8.0 to 1.8.5, 1.6.0 to 1.6.13. CVE-2013-2480 o wnpa-sec-2013-16 The Mount dissector could crash. Discovered by Alyssa Milburn. (Bug 8335) Versions affected: 1.8.0 to 1.8.5, 1.6.0 to 1.6.13. CVE-2013-2481 o wnpa-sec-2013-17 The AMPQ dissector could go into an infinite loop. Discovered by Moshe Kaplan. (Bug 8337) Versions affected: 1.8.0 to 1.8.5, 1.6.0 to 1.6.13. CVE-2013-2482 o wnpa-sec-2013-18 The ACN dissector could attempt to divide by zero. Discovered by Alyssa Milburn. (Bug 8340) Versions affected: 1.8.0 to 1.8.5, 1.6.0 to 1.6.13. CVE-2013-2483 o wnpa-sec-2013-19 The CIMD dissector could crash. Discovered by Moshe Kaplan. (Bug 8346) Versions affected: 1.8.0 to 1.8.5, 1.6.0 to 1.6.13. CVE-2013-2484 o wnpa-sec-2013-20 The FCSP dissector could go into an infinite loop. Discovered by Moshe Kaplan. (Bug 8359) Versions affected: 1.8.0 to 1.8.5, 1.6.0 to 1.6.13. CVE-2013-2485 o wnpa-sec-2013-22 The DTLS dissector could crash. Discovered by Laurent Butti. (Bug 8380) Versions affected: 1.8.0 to 1.8.5, 1.6.0 to 1.6.13. CVE-2013-2488 The following bugs have been fixed: o Lua pinfo.cols.protocol not holding value in postdissector. (Bug 6020) o Data combined via ssl_desegment_app_data not visible via "Follow SSL Stream" only decrypted ssl data tabs. (Bug 6434) o HTTP application/json-rpc should be decoded/shown as application/json. (Bug 7939) o WMM TSPEC Element Parsing is not done is wrong due to a wrong switch case number. (Bug 8320) o [BACnet] UCS-2 strings longer than 127 characters do not decode correctly. (Bug 8331) o Netflow dissector flowDurationMicroseconds nanosecond conversion wrong. (Bug 8410) o BE (3) AC is wrongly named as "Video" in (qos_acs). (Bug 8432) New and Updated Features There are no new features in this release. New Protocol Support There are no new protocols in this release. Updated Protocol Support ACN, AMQP, BACnet, CIMD, DOCSIS TLVs, DTLS, FCSP, FMP/NOTIFY, IEEE 802.11, JSON, Mount, MS-MMS, Netflow, RTPS, RTPS2, SIP, SSL New and Updated Capture File Support No new or updated capture file support. Getting Wireshark Wireshark source code and installation packages are available from http://www.wireshark.org/download.html. Vendor-supplied Packages Most Linux and Unix vendors supply their own Wireshark packages. You can usually install or upgrade Wireshark using the package management system specific to that platform. A list of third-party packages can be found on the download page on the Wireshark web site. File Locations Wireshark and TShark look in several different locations for preference files, plugins, SNMP MIBS, and RADIUS dictionaries. These locations vary from platform to platform. You can use About→Folders to find the default locations on your system. Known Problems Wireshark might make your system disassociate from a wireless network on OS X 10.4. (Bug 1315) Dumpcap might not quit if Wireshark or TShark crashes. (Bug 1419) The BER dissector might infinitely loop. (Bug 1516) Capture filters aren't applied when capturing from named pipes. (Bug 1814) Filtering tshark captures with display filters (-R) no longer works. (Bug 2234) The 64-bit Windows installer does not ship with libsmi. (Win64 development page) "Closing File!" Dialog Hangs. (Bug 3046) Application crash when changing real-time option. (Bug 4035) Hex pane display issue after startup. (Bug 4056) Packet list rows are oversized. (Bug 4357) Summary pane selected frame highlighting not maintained. (Bug 4445) Wireshark and TShark will display incorrect delta times when displayed as a custom column. (Bug 4985) Getting Help Community support is available on Wireshark's Q&amp;A site and on the wireshark-users mailing list. Subscription information and archives for all of Wireshark's mailing lists can be found on the web site. Official Wireshark training and certification are available from Wireshark University. Frequently Asked Questions A complete FAQ is available on the Wireshark web site. Digests wireshark-1.6.14.tar.bz2: 22121915 bytes MD5(wireshark-1.6.14.tar.bz2)=7f81e1b9db6f240d4f995eeebbf520fa SHA1(wireshark-1.6.14.tar.bz2)=bce7993968ab1227b6492584cadf93faf7807965 RIPEMD160(wireshark-1.6.14.tar.bz2)=9077b3c61d6d73db6cb9e61ab29c468aab9b6c3b wireshark-win32-1.6.14.exe: 19894582 bytes MD5(wireshark-win32-1.6.14.exe)=f008f1f72022387379d54d3f08551d98 SHA1(wireshark-win32-1.6.14.exe)=a93a4ef14881e4a740959331e5eb9dd1c3a7d069 RIPEMD160(wireshark-win32-1.6.14.exe)=fc42f39d650e531c30f0498d1c6903a638dcb4d8 wireshark-win64-1.6.14.exe: 23016951 bytes MD5(wireshark-win64-1.6.14.exe)=4a02eeeb3e831324ee12987f4f418ae9 SHA1(wireshark-win64-1.6.14.exe)=a70c60ffa6a78fdddb694f51580fe82ab98c04e1 RIPEMD160(wireshark-win64-1.6.14.exe)=04ad4e36a8b49ad0158afb1c63c0f22453717f4d wireshark-1.6.14.u3p: 26773823 bytes MD5(wireshark-1.6.14.u3p)=944ee685c491b7c44cdbc613dcb0dad1 SHA1(wireshark-1.6.14.u3p)=65993854226e7e7d9cdef0fd2c455237e60c570d RIPEMD160(wireshark-1.6.14.u3p)=7852c4f68144704c6e74e4bdb2d7f94fa448ae30 WiresharkPortable-1.6.14.paf.exe: 20666928 bytes MD5(WiresharkPortable-1.6.14.paf.exe)=181154ea5c12484a3d1837ca15d0b24d SHA1(WiresharkPortable-1.6.14.paf.exe)=8354156a481832a0ffb4927f38b9a8ca1cb9d6de RIPEMD160(WiresharkPortable-1.6.14.paf.exe)=b003934bc22c0a7c426c50c21a889c090b9ed938 Wireshark 1.6.14 Intel 64.dmg: 20374433 bytes MD5(Wireshark 1.6.14 Intel 64.dmg)=cb0bc1e8bcf44373f2d0b62d508ae468 SHA1(Wireshark 1.6.14 Intel 64.dmg)=16f3ba96b3b298eb3ceb063ee08de795ef348494 RIPEMD160(Wireshark 1.6.14 Intel 64.dmg)=deb7f23841fd903072256472c2ae959ac2d3c51c Wireshark 1.6.14 Intel 32.dmg: 20570644 bytes MD5(Wireshark 1.6.14 Intel 32.dmg)=7aab194d9d13003e6d1676b059542dc4 SHA1(Wireshark 1.6.14 Intel 32.dmg)=0c396f2f1dd9cc58b8d180077639b69538ef1197 RIPEMD160(Wireshark 1.6.14 Intel 32.dmg)=32db7764844b9642aa37d8f7e85163c509fa1e74 Wireshark 1.6.14 PPC 32.dmg: 21289314 bytes MD5(Wireshark 1.6.14 PPC 32.dmg)=f6f50ec9b7be659b1ad4844128c8db88 SHA1(Wireshark 1.6.14 PPC 32.dmg)=d0a6b932236ad7d223d69dae566dcad64089ec7e RIPEMD160(Wireshark 1.6.14 PPC 32.dmg)=bb9e8a3b4bdbab4268cb4274cfb01d4e11a0316b patch-wireshark-1.6.13-to-1.6.14.diff.bz2: 348802 bytes MD5(patch-wireshark-1.6.13-to-1.6.14.diff.bz2)=2fc00d82d6e7cb65dc67f5b9145129e6 SHA1(patch-wireshark-1.6.13-to-1.6.14.diff.bz2)=f7a8f9d7598b55b116f4e7e1d897462df5fee7d9 RIPEMD160(patch-wireshark-1.6.13-to-1.6.14.diff.bz2)=2e7e09985e270026c47c8d552116dcf269fba8b0 -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.12 (Darwin) Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/ iEYEARECAAYFAlE30VsACgkQpw8IXSHylJoHEwCZAcforaC0RgnG62e3W3jWSBi4 IKMAnj5nxZ9vzWM+Yg9gwBzKcRwnXEDW =kS6w -----END PGP SIGNATURE----- ___________________________________________________________________________ Sent via: Wireshark-announce mailing list &lt;wireshark-announce&lt; at &gt;wireshark.org&gt; Archives: http://www.wireshark.org/lists/wireshark-announce Unsubscribe: https://wireshark.org/mailman/options/wireshark-announce mailto:wireshark-announce-request&lt; at &gt;wireshark.org?subject=unsubscribe</pre> Wireshark announcements 2013-03-06T23:29:31 Wireshark 1.8.6 is now available http://comments.gmane.org/gmane.network.wireshark.announce/123 <pre>-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 I'm proud to announce the release of Wireshark 1.8.6. What is Wireshark? Wireshark is the world's most popular network protocol analyzer. It is used for troubleshooting, analysis, development and education. What's New Bug Fixes The following vulnerabilities have been fixed. o wnpa-sec-2013-10 The TCP dissector could crash. (Bug 8274) Versions affected: 1.8.0 to 1.8.5. CVE-2013-2475 o wnpa-sec-2013-11 The HART/IP dissectory could go into an infinite loop. (Bug 8360) Versions affected: 1.8.0 to 1.8.5. CVE-2013-2476 o wnpa-sec-2013-12 The CSN.1 dissector could crash. Discovered by Laurent Butti. (Bug 8383) Versions affected: 1.8.0 to 1.8.5. CVE-2013-2477 o wnpa-sec-2013-13 The MS-MMS dissector could crash. Discovered by Laurent Butti. (Bug 8382) Versions affected: 1.8.0 to 1.8.5, 1.6.0 to 1.6.13. CVE-2013-2478 o wnpa-sec-2013-14 The MPLS Echo dissector could go into an infinite loop. Discovered by Laurent Butti. (Bug 8039) Versions affected: 1.8.0 to 1.8.5. CVE-2013-2479 o wnpa-sec-2013-15 The RTPS and RTPS2 dissectors could crash. Discovered by Alyssa Milburn. (Bug 8332) Versions affected: 1.8.0 to 1.8.5, 1.6.0 to 1.6.13. CVE-2013-2480 o wnpa-sec-2013-16 The Mount dissector could crash. Discovered by Alyssa Milburn. (Bug 8335) Versions affected: 1.8.0 to 1.8.5, 1.6.0 to 1.6.13. CVE-2013-2481 o wnpa-sec-2013-17 The AMPQ dissector could go into an infinite loop. Discovered by Moshe Kaplan. (Bug 8337) Versions affected: 1.8.0 to 1.8.5, 1.6.0 to 1.6.13. CVE-2013-2482 o wnpa-sec-2013-18 The ACN dissector could attempt to divide by zero. Discovered by Alyssa Milburn. (Bug 8340) Versions affected: 1.8.0 to 1.8.5, 1.6.0 to 1.6.13. CVE-2013-2483 o wnpa-sec-2013-19 The CIMD dissector could crash. Discovered by Moshe Kaplan. (Bug 8346) Versions affected: 1.8.0 to 1.8.5, 1.6.0 to 1.6.13. CVE-2013-2484 o wnpa-sec-2013-20 The FCSP dissector could go into an infinite loop. Discovered by Moshe Kaplan. (Bug 8359) Versions affected: 1.8.0 to 1.8.5, 1.6.0 to 1.6.13. CVE-2013-2485 o wnpa-sec-2013-21 The RELOAD dissector could go into an infinite loop. Discovered by Even Jensen. (Bug 8364) Versions affected: 1.8.0 to 1.8.5. CVE-2013-2486 CVE-2013-2487 o wnpa-sec-2013-22 The DTLS dissector could crash. Discovered by Laurent Butti. (Bug 8380) Versions affected: 1.8.0 to 1.8.5, 1.6.0 to 1.6.13. CVE-2013-2488 The following bugs have been fixed: o Lua pinfo.cols.protocol not holding value in postdissector. (Bug 6020) o data combined via ssl_desegment_app_data not visible via "Follow SSL Stream" only decrypted ssl data tabs. (Bug 6434) o HTTP application/json-rpc should be decoded/shown as application/json. (Bug 7939) o Maximum value of 802.11-2012 Duration field should be 32767. (Bug 8056) o Voice RTP player crash if player is closed while playing. (Bug 8065) o Display Filter Macros crash. (Bug 8073) o RRC RadioBearerSetup message decoding issue. (Bug 8290) o R-click filters add ! in front of field when choosing "apply as filter&gt;selected". (Bug 8297) o BACnet - Loop Object - Setpoint-Reference property does not decode correctly. (Bug 8306) o WMM TSPEC Element Parsing is not done is wrong due to a wrong switch case number. (Bug 8320) o Incorrect RTP statistics (Lost Packets indication not ok). (Bug 8321) o Registering ieee802154 dissector for IEEE802.15.4 frames inside Linux SLL frames. (Bug 8325) o Version Field is skipped while parsing WMM_TSPEC causing wrong dissecting (1 byte offset missing) of all fields in the TSPEC. (Bug 8330) o [BACnet] UCS-2 strings longer than 127 characters do not decode correctly. (Bug 8331) o Malformed IEEE80211 frame triggers DISSECTOR_ASSERT. (Bug 8345) o Decoding of GSM MAP SMS Diagnostics. (Bug 8378) o Incorrect packet length displayed for Flight Message Transfer Protocol (FMTP). (Bug 8407) o Netflow dissector flowDurationMicroseconds nanosecond conversion wrong. (Bug 8410) o BE (3) AC is wrongly named as "Video" in (qos_acs). (Bug 8432) New and Updated Features There are no new features in this release. New Protocol Support There are no new protocols in this release. Updated Protocol Support ACN, AMQP, ASN.1 PER, BACnet, CIMD, CSN.1, DOCSIS TLVs, DTLS, FCSP, FMP/NOTIFY, FMTP, GSM MAP SMS, HART/IP, IEEE 802.11, IEEE 802.15.4, JSON, Linux SLL, LTE RRC, Mount, MPLS Echo, Netflow, RELOAD, RSL, RTP, RTPS, RTPS2, SABP, SIP, SSL, TCP New and Updated Capture File Support No new or updated capture file support. Getting Wireshark Wireshark source code and installation packages are available from http://www.wireshark.org/download.html. Vendor-supplied Packages Most Linux and Unix vendors supply their own Wireshark packages. You can usually install or upgrade Wireshark using the package management system specific to that platform. A list of third-party packages can be found on the download page on the Wireshark web site. File Locations Wireshark and TShark look in several different locations for preference files, plugins, SNMP MIBS, and RADIUS dictionaries. These locations vary from platform to platform. You can use About→Folders to find the default locations on your system. Known Problems Dumpcap might not quit if Wireshark or TShark crashes. (Bug 1419) The BER dissector might infinitely loop. (Bug 1516) Capture filters aren't applied when capturing from named pipes. (Bug 1814) Filtering tshark captures with display filters (-R) no longer works. (Bug 2234) The 64-bit Windows installer does not support Kerberos decryption. (Win64 development page) Application crash when changing real-time option. (Bug 4035) Hex pane display issue after startup. (Bug 4056) Packet list rows are oversized. (Bug 4357) Summary pane selected frame highlighting not maintained. (Bug 4445) Wireshark and TShark will display incorrect delta times in some cases. (Bug 4985) Getting Help Community support is available on Wireshark's Q&amp;A site and on the wireshark-users mailing list. Subscription information and archives for all of Wireshark's mailing lists can be found on the web site. Official Wireshark training and certification are available from Wireshark University. Frequently Asked Questions A complete FAQ is available on the Wireshark web site. Digests wireshark-1.8.6.tar.bz2: 24250787 bytes MD5(wireshark-1.8.6.tar.bz2)=317361e701936c72f7f18f857059b944 SHA1(wireshark-1.8.6.tar.bz2)=0f51ed901b5e07cceb1373f3368f739be8f1e827 RIPEMD160(wireshark-1.8.6.tar.bz2)=21688bef39816cc81d596205eefc5a067e5d6c25 Wireshark-win64-1.8.6.exe: 26847472 bytes MD5(Wireshark-win64-1.8.6.exe)=ddd3d98096538e357e2dd0d6cd04ed6b SHA1(Wireshark-win64-1.8.6.exe)=0d042dce029072dfcb8f52f49aa0c84bfb6d8a69 RIPEMD160(Wireshark-win64-1.8.6.exe)=2656bf18e3131da2b64feeb4d91c687768fe6f1f Wireshark-win32-1.8.6.exe: 21173600 bytes MD5(Wireshark-win32-1.8.6.exe)=3a0de374fc4979001727bfa5fc19d3c5 SHA1(Wireshark-win32-1.8.6.exe)=bed78fb3c51cfec9914bf46f6257da2541407d5c RIPEMD160(Wireshark-win32-1.8.6.exe)=e6cb0e40236093f5bf45909d1c306b64b0b99264 Wireshark-1.8.6.u3p: 28607931 bytes MD5(Wireshark-1.8.6.u3p)=fa19996f6c69f68d011565b2c49c27b3 SHA1(Wireshark-1.8.6.u3p)=e29efab380c4da61b25678c764403719b0088875 RIPEMD160(Wireshark-1.8.6.u3p)=01cb4634b95e8b08387711fab79f674d1dcae4b4 WiresharkPortable-1.8.6.paf.exe: 22184584 bytes MD5(WiresharkPortable-1.8.6.paf.exe)=a09a4ab23ffff08685d0ef42a0dc0f09 SHA1(WiresharkPortable-1.8.6.paf.exe)=f6f39ee3b202488ce3c48521692599a458c024e0 RIPEMD160(WiresharkPortable-1.8.6.paf.exe)=68a2dcf651c661499717a0f6c2abacabca48d94e Wireshark 1.8.6 Intel 32.dmg: 22122012 bytes MD5(Wireshark 1.8.6 Intel 32.dmg)=41b1249c0e0bdf0d851a816d20e01c12 SHA1(Wireshark 1.8.6 Intel 32.dmg)=d8eaf89fd2fdf13f47aaa9a25c1587a760534635 RIPEMD160(Wireshark 1.8.6 Intel 32.dmg)=ccadbdadddfd19991a6c7af9d2643a343fb3db75 Wireshark 1.8.6 PPC 32.dmg: 22934708 bytes MD5(Wireshark 1.8.6 PPC 32.dmg)=e9556eeacd50ddb4e70c9e5f98c442fa SHA1(Wireshark 1.8.6 PPC 32.dmg)=a8c8b2f6fb659b20ef2ae7785a2b5646f33c7ff5 RIPEMD160(Wireshark 1.8.6 PPC 32.dmg)=7b6a0e6161c1fb1d31caf7a6b5007cd38fce62f6 Wireshark 1.8.6 Intel 64.dmg: 21799059 bytes MD5(Wireshark 1.8.6 Intel 64.dmg)=265318dd55f4fd3dca228d9afc9348fe SHA1(Wireshark 1.8.6 Intel 64.dmg)=475ae0f50e65399a9a16c8266e505e8d9b27d308 RIPEMD160(Wireshark 1.8.6 Intel 64.dmg)=281386411018db57322e04c6c24927e9a7a774e7 patch-wireshark-1.8.5-to-1.8.6.diff.bz2: 385614 bytes MD5(patch-wireshark-1.8.5-to-1.8.6.diff.bz2)=1a61fcdfaf6d17d40cbe961951c1133e SHA1(patch-wireshark-1.8.5-to-1.8.6.diff.bz2)=18d53194b13de978d950394734ab7302f6d0394a RIPEMD160(patch-wireshark-1.8.5-to-1.8.6.diff.bz2)=b542539170925e88b52940ca41b65be1d0167a7c -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.12 (Darwin) Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/ iEYEARECAAYFAlE30VEACgkQpw8IXSHylJqnxwCgkPXuAnxLwFyB12J3DS2IGbpI W+EAoIXKuWojXWk9V/cnXfRDMN10czqK =PYH/ -----END PGP SIGNATURE----- ___________________________________________________________________________ Sent via: Wireshark-announce mailing list &lt;wireshark-announce&lt; at &gt;wireshark.org&gt; Archives: http://www.wireshark.org/lists/wireshark-announce Unsubscribe: https://wireshark.org/mailman/options/wireshark-announce mailto:wireshark-announce-request&lt; at &gt;wireshark.org?subject=unsubscribe</pre> Wireshark announcements 2013-03-06T23:29:21 Wireshark 1.9.0 is now available http://comments.gmane.org/gmane.network.wireshark.announce/122 <pre>-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 I'm proud to announce the release of Wireshark 1.9.0. This is an experimental release intended to test features that will go into Wireshark 1.10. What is Wireshark? Wireshark is the world's most popular network protocol analyzer. It is used for troubleshooting, analysis, development and education. What's New New and Updated Features The following features are new (or have been significantly updated) since version 1.8: o Wireshark on 32- and 64-bit Windows supports automatic updates. o The main welcome screen and status bar now display file sizes using strict SI prefixes instead of old-style binary prefixes. o It is now possible to compare two fields in a display filter (for example: udp.srcport != udp.dstport). The two fields must be of the same type for this to work. o Many more not listed here. Digests -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.12 (Darwin) Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/ iEYEARECAAYFAlElIloACgkQpw8IXSHylJpb/ACfdzu6CF3xpVfaXVX3toXXLaxe aFwAoIptyUJItG6OATiIDykq129utFfG =t+BP -----END PGP SIGNATURE----- ___________________________________________________________________________ Sent via: Wireshark-announce mailing list &lt;wireshark-announce-IZ8446WsY0/dtAWm4Da02A&lt; at &gt;public.gmane.org&gt; Archives: http://www.wireshark.org/lists/wireshark-announce Unsubscribe: https://wireshark.org/mailman/options/wireshark-announce mailto:wireshark-announce-request-IZ8446WsY0/dtAWm4Da02A&lt; at &gt;public.gmane.org?subject=unsubscribe </pre> Wireshark announcements 2013-02-20T19:22:02 Wireshark 1.6.13 is now available http://comments.gmane.org/gmane.network.wireshark.announce/121 <pre>-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 I'm proud to announce the release of Wireshark 1.6.13. What is Wireshark? Wireshark is the world's most popular network protocol analyzer. It is used for troubleshooting, analysis, development and education. What's New Bug Fixes The following vulnerability has been fixed. o wnpa-sec-2013-01 Infinite and large loops in the Bluetooth HCI, CSN.1, DCP-ETSI DOCSIS CM-STAUS, IEEE 802.3 Slow Protocols, MPLS, R3, RTPS, SDP, and SIP dissectors. Reported by Laurent Butti. (Bugs 8036, 8037, 8038, 8040, 8041, 8042, 8043, 8198, 8199, 8222) Versions affected: 1.8.0 to 1.8.4, 1.6.0 to 1.6.12. o wnpa-sec-2013-02 The CLNP dissector could crash. Discovered independently by Laurent Butti and the Wireshark development team. (Bug 7871) Versions affected: 1.8.0 to 1.8.4, 1.6.0 to 1.6.12. o wnpa-sec-2013-03 The DTN dissector could crash. (Bug 7945) Versions affected: 1.8.0 to 1.8.4, 1.6.0 to 1.6.12. o wnpa-sec-2013-04 The MS-MMC dissector (and possibly others) could crash. (Bug 8112) Versions affected: 1.8.0 to 1.8.4, 1.6.0 to 1.6.12. o wnpa-sec-2013-05 The DTLS dissector could crash. Discovered by Laurent Butti. (Bug 8111) Versions affected: 1.8.0 to 1.8.4, 1.6.0 to 1.6.12. o wnpa-sec-2013-07 The DCP-ETSI dissector could corrupt memory. Discovered by Laurent Butti. (Bug 8213) Versions affected: 1.8.0 to 1.8.4, 1.6.0 to 1.6.12. o wnpa-sec-2013-08 The Wireshark dissection engine could crash. Discovered by Laurent Butti. (Bug 8197) Versions affected: 1.8.0 to 1.8.4, 1.6.0 to 1.6.12. o wnpa-sec-2013-09 The NTLMSSP dissector could overflow a buffer. Discovered by Ulf Härnhammar. (Bug X) Versions affected: 1.8.0 to 1.8.4, 1.6.0 to 1.6.12. The following bugs have been fixed: o The HTTP dissector does not reassemble headers when the first TCP segment does not contain a full header line. o SNMPv3 Engine ID registration. (Bug 2426) o Illegal character is used in temporary capture file name. (Bug 7877) o Core dumped when the file is closed. (Bug 8022) o Wrong packet bytes are selected for ISUP CUG binary code. (Bug 8035) o Decodes FCoE Group Multicast MAC address as Broadcom MAC address. (Bug 8046) o The SSL dissector stops decrypting the SSL conversation with Malformed Packet:SSL error messages. (Bug 8075) o Wrong bytes highlighted with "Find Packet...". (Bug 8085) o 3GPP ULI AVP. SAI is not correctly decoded. (Bug 8098) o Warn Dissector bug, protocol JXTA. (Bug 8212) o Electromagnetic Emission Parser parses field Event Id as Entity Id. (Bug 8227) New and Updated Features There are no new features in this release. New Protocol Support There are no new protocols in this release. Updated Protocol Support Bluetooth HCI, CLNP, DCP-ETSI, DIS PDU, DOCSIS CM-STATUS, DTLS, DTN, Fibre Channel, GTPv2, ISUP, JXTA, MPLS, MS-MMC, NTLMSSP, R3, RTPS, SNMP New and Updated Capture File Support No new or updated capture file support. Getting Wireshark Wireshark source code and installation packages are available from http://www.wireshark.org/download.html. Vendor-supplied Packages Most Linux and Unix vendors supply their own Wireshark packages. You can usually install or upgrade Wireshark using the package management system specific to that platform. A list of third-party packages can be found on the download page on the Wireshark web site. File Locations Wireshark and TShark look in several different locations for preference files, plugins, SNMP MIBS, and RADIUS dictionaries. These locations vary from platform to platform. You can use About→Folders to find the default locations on your system. Known Problems Wireshark might make your system disassociate from a wireless network on OS X 10.4. (Bug 1315) Dumpcap might not quit if Wireshark or TShark crashes. (Bug 1419) The BER dissector might infinitely loop. (Bug 1516) Capture filters aren't applied when capturing from named pipes. (Bug 1814) Filtering tshark captures with display filters (-R) no longer works. (Bug 2234) The 64-bit Windows installer does not ship with libsmi. (Win64 development page) "Closing File!" Dialog Hangs. (Bug 3046) Application crash when changing real-time option. (Bug 4035) Hex pane display issue after startup. (Bug 4056) Packet list rows are oversized. (Bug 4357) Summary pane selected frame highlighting not maintained. (Bug 4445) Wireshark and TShark will display incorrect delta times when displayed as a custom column. (Bug 4985) Getting Help Community support is available on Wireshark's Q&amp;A site and on the wireshark-users mailing list. Subscription information and archives for all of Wireshark's mailing lists can be found on the web site. Official Wireshark training and certification are available from Wireshark University. Frequently Asked Questions A complete FAQ is available on the Wireshark web site. Digests wireshark-1.6.13.tar.bz2: 22077778 bytes MD5(wireshark-1.6.13.tar.bz2)=d616219f1cebcebb268c9e51d847684f SHA1(wireshark-1.6.13.tar.bz2)=ab182b3b0877dedf4219a1f0549576109faa983e RIPEMD160(wireshark-1.6.13.tar.bz2)=4ae3b9c66ae8d430d7a91c899f70a2280dd4a2d1 wireshark-win32-1.6.13.exe: 19889896 bytes MD5(wireshark-win32-1.6.13.exe)=7914704b49ede018b337b591e9934508 SHA1(wireshark-win32-1.6.13.exe)=84b29ca2915f27905245f2ac6b217a25a9248ba8 RIPEMD160(wireshark-win32-1.6.13.exe)=27fedebc7f5ba73826925f6213876c2872e6a54c wireshark-win64-1.6.13.exe: 23017609 bytes MD5(wireshark-win64-1.6.13.exe)=6e1517b3d67b746a037cc82acbca267c SHA1(wireshark-win64-1.6.13.exe)=57e42f8c12b6bb8f1e61aca59ea95425b918f6e7 RIPEMD160(wireshark-win64-1.6.13.exe)=5e92a98550b3084e13184b8ac295fbbbbb38712e wireshark-1.6.13.u3p: 26766499 bytes MD5(wireshark-1.6.13.u3p)=d1451198551c7ad09d4ae3577126b4b5 SHA1(wireshark-1.6.13.u3p)=ffce5cbdc861a4c490eb25638c7271621ebe3699 RIPEMD160(wireshark-1.6.13.u3p)=e379eb9f32c16a6836e53965a9f6b46c9e76804b WiresharkPortable-1.6.13.paf.exe: 20766458 bytes MD5(WiresharkPortable-1.6.13.paf.exe)=2cea48102aa469ffa74b84cc60bb9c7d SHA1(WiresharkPortable-1.6.13.paf.exe)=fadf3b801acfea3cb17d58ee020c594249e527be RIPEMD160(WiresharkPortable-1.6.13.paf.exe)=0572fbda5b7478aa0ad799b4d99b624bb5e4eeee Wireshark 1.6.13 Intel 64.dmg: 20360996 bytes MD5(Wireshark 1.6.13 Intel 64.dmg)=83ee3fd0b44c0e8d4cf6aeca3f504b54 SHA1(Wireshark 1.6.13 Intel 64.dmg)=4d6c32c8a03b8ea6d87b81ee4b5e94aa016f6f35 RIPEMD160(Wireshark 1.6.13 Intel 64.dmg)=f7419627be5a7a37093543c9c998ff764947d608 Wireshark 1.6.13 PPC 32.dmg: 21275160 bytes MD5(Wireshark 1.6.13 PPC 32.dmg)=24c505bc5f55f767afcc368657ed8030 SHA1(Wireshark 1.6.13 PPC 32.dmg)=f29fff8e8713f2ffa051f4f9608f988d324f122a RIPEMD160(Wireshark 1.6.13 PPC 32.dmg)=7e3c0a86f2dd17f9ca103c25c532b5abb7dc7484 Wireshark 1.6.13 Intel 32.dmg: 20564015 bytes MD5(Wireshark 1.6.13 Intel 32.dmg)=b0aad9f42c90cebd7ca6753bf7c104ed SHA1(Wireshark 1.6.13 Intel 32.dmg)=b06af86bcda40aa95996d3d23a6ab9161ac5b344 RIPEMD160(Wireshark 1.6.13 Intel 32.dmg)=42da6306d0b4675a7c88292e289a83c4d34a26eb patch-wireshark-1.6.12-to-1.6.13.diff.bz2: 135052 bytes MD5(patch-wireshark-1.6.12-to-1.6.13.diff.bz2)=0b635ee19597bf63680a4015511d8a00 SHA1(patch-wireshark-1.6.12-to-1.6.13.diff.bz2)=c2e57d389df1322df83b2d72eff87d77c1ed3216 RIPEMD160(patch-wireshark-1.6.12-to-1.6.13.diff.bz2)=e6fa5b2f174a889793899ac291cc74e8f658cbdd -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.12 (Darwin) Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/ iEYEARECAAYFAlEIRPsACgkQpw8IXSHylJo1kwCdFlb30HbKE0wtGBiJzUSyR7Po 9FAAoK8tEzoSCi0BpNdifR9C9/yFL1Oz =tZd4 -----END PGP SIGNATURE----- ___________________________________________________________________________ Sent via: Wireshark-announce mailing list &lt;wireshark-announce&lt; at &gt;wireshark.org&gt; Archives: http://www.wireshark.org/lists/wireshark-announce Unsubscribe: https://wireshark.org/mailman/options/wireshark-announce mailto:wireshark-announce-request&lt; at &gt;wireshark.org?subject=unsubscribe</pre> Wireshark announcements 2013-01-29T21:54:03 Wireshark 1.8.5 is now available http://comments.gmane.org/gmane.network.wireshark.announce/120 <pre>-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 I'm proud to announce the release of Wireshark 1.8.5. What is Wireshark? Wireshark is the world's most popular network protocol analyzer. It is used for troubleshooting, analysis, development and education. What's New Bug Fixes The following vulnerabilities have been fixed. o wnpa-sec-2013-01 Infinite and large loops in the Bluetooth HCI, CSN.1, DCP-ETSI DOCSIS CM-STAUS, IEEE 802.3 Slow Protocols, MPLS, R3, RTPS, SDP, and SIP dissectors. Reported by Laurent Butti. (Bugs 8036, 8037, 8038, 8040, 8041, 8042, 8043, 8198, 8199, 8222) Versions affected: 1.8.0 to 1.8.4, 1.6.0 to 1.6.12. o wnpa-sec-2013-02 The CLNP dissector could crash. Discovered independently by Laurent Butti and the Wireshark development team. (Bug 7871) Versions affected: 1.8.0 to 1.8.4, 1.6.0 to 1.6.12. o wnpa-sec-2013-03 The DTN dissector could crash. (Bug 7945) Versions affected: 1.8.0 to 1.8.4, 1.6.0 to 1.6.12. o wnpa-sec-2013-04 The MS-MMC dissector (and possibly others) could crash. (Bug 8112) Versions affected: 1.8.0 to 1.8.4, 1.6.0 to 1.6.12. o wnpa-sec-2013-05 The DTLS dissector could crash. Discovered by Laurent Butti. (Bug 8111) Versions affected: 1.8.0 to 1.8.4, 1.6.0 to 1.6.12. o wnpa-sec-2013-06 The ROHC dissector could crash. (Bug 7679) Versions affected: 1.8.0 to 1.8.4. o wnpa-sec-2013-07 The DCP-ETSI dissector could corrupt memory. Discovered by Laurent Butti. (Bug 8213) Versions affected: 1.8.0 to 1.8.4, 1.6.0 to 1.6.12. o wnpa-sec-2013-08 The Wireshark dissection engine could crash. Discovered by Laurent Butti. (Bug 8197) Versions affected: 1.8.0 to 1.8.4, 1.6.0 to 1.6.12. o wnpa-sec-2013-09 The NTLMSSP dissector could overflow a buffer. Discovered by Ulf Härnhammar. Versions affected: 1.8.0 to 1.8.4, 1.6.0 to 1.6.12. The following bugs have been fixed: o SNMPv3 Engine ID registration. (Bug 2426) o Wrong decoding of gtp.target identification. (Bug 3974) o Reassemble.c leaks memory for GLIB &gt; 2.8. (Bug 4141) o Wireshark crashes when starting due to out-of-date plugin left behind from earlier installation. (Bug 7401) o Failed to dissect TLS handshake packets. (Bug 7435) o ISUP dissector problem with empty Generic Number. (Bug 7632) o Illegal character is used in temporary capture file name. (Bug 7877) o Lua code crashes wireshark after update to 1.8.3. (Bug 7976) o Timestamp info is not saved correctly when writing DOS Sniffer files. (Bug 7998) o 1.8.3 Wireshark User's Guide version is 1.6. (Bug 8009) o Core dumped when the file is closed. (Bug 8022) o LPP is misspelled in APDU parameter in e-CIDMeasurementInitiation request for LPPA message. (Bug 8023) o Wrong packet bytes are selected for ISUP CUG binary code. (Bug 8035) o Decodes FCoE Group Multicast MAC address as Broadcom MAC address. (Bug 8046) o The SSL dissector stops decrypting the SSL conversation with Malformed Packet:SSL error messages. (Bug 8075) o Unable to Save/Apply [Unistim Port] in Preferences. (Bug 8078) o Some Information Elements in GTPv2 are not dissected correctly. (Bug 8079) o Wrong bytes highlighted with "Find Packet...". (Bug 8085) o 3GPP ULI AVP. SAI is not correctly decoded. (Bug 8098) o Wireshark does not show "Start and End Time" information for Cisco Netflow/IPFIX with type 154 to 157. (Bug 8105) o GPRS Tunnel Protocoll GTP Version 1 does not decode DAF flag in Common Flags IE. (Bug 8193) o Wrong parcing of ULI of gtpv2 messages - errors in SAC, RAC &amp; ECI. (Bug 8208) o Version Number in EtherIP dissector. (Bug 8211) o Warn Dissector bug, protocol JXTA. (Bug 8212) o Electromagnetic Emission Parser parses field Event Id as Entity Id. (Bug 8227) New and Updated Features There are no new features in this release. New Protocol Support There are no new protocols in this release. Updated Protocol Support ANSI IS-637-A, ASN.1 PER, AX.25, Bluetooth HCI, CLNP, CSN.1, DCP-ETSI, DIAMETER, DIS PDU, DOCSIS CM-STATUS, DTLS, DTN, EtherIP, Fibre Channel, GPRS, GTP, GTPv2, HomePlug AV, IEEE 802.3 Slow, IEEE 802.15.4, ISUP, JXTA, LAPD, LPPa, MPLS, MS-MMC, NAS-EPS, NTLMSSP, ROHC, RSL, RTPS, SDP, SIP, SNMP, SSL New and Updated Capture File Support DOS Sniffer Getting Wireshark Wireshark source code and installation packages are available from http://www.wireshark.org/download.html. Vendor-supplied Packages Most Linux and Unix vendors supply their own Wireshark packages. You can usually install or upgrade Wireshark using the package management system specific to that platform. A list of third-party packages can be found on the download page on the Wireshark web site. File Locations Wireshark and TShark look in several different locations for preference files, plugins, SNMP MIBS, and RADIUS dictionaries. These locations vary from platform to platform. You can use About→Folders to find the default locations on your system. Known Problems Dumpcap might not quit if Wireshark or TShark crashes. (Bug 1419) The BER dissector might infinitely loop. (Bug 1516) Capture filters aren't applied when capturing from named pipes. (Bug 1814) Filtering tshark captures with display filters (-R) no longer works. (Bug 2234) The 64-bit Windows installer does not support Kerberos decryption. (Win64 development page) Application crash when changing real-time option. (Bug 4035) Hex pane display issue after startup. (Bug 4056) Packet list rows are oversized. (Bug 4357) Summary pane selected frame highlighting not maintained. (Bug 4445) Wireshark and TShark will display incorrect delta times in some cases. (Bug 4985) Getting Help Community support is available on Wireshark's Q&amp;A site and on the wireshark-users mailing list. Subscription information and archives for all of Wireshark's mailing lists can be found on the web site. Official Wireshark training and certification are available from Wireshark University. Frequently Asked Questions A complete FAQ is available on the Wireshark web site. Digests wireshark-1.8.5.tar.bz2: 24196532 bytes MD5(wireshark-1.8.5.tar.bz2)=fde40a8d4555cab12271e67f9778f5d5 SHA1(wireshark-1.8.5.tar.bz2)=76c719d92a2e200588a5452bbe61178b915eb99b RIPEMD160(wireshark-1.8.5.tar.bz2)=ecf67d55cd2d9218c28335163ede3969a9776d97 Wireshark-win64-1.8.5.exe: 26860800 bytes MD5(Wireshark-win64-1.8.5.exe)=ed774df3452f186619094df62fe13d16 SHA1(Wireshark-win64-1.8.5.exe)=062d5ffbf43fa89794c4ccaa2628daf4d76f4ac6 RIPEMD160(Wireshark-win64-1.8.5.exe)=14a260091f82083b88eeefb0397468762924be53 Wireshark-win32-1.8.5.exe: 21166192 bytes MD5(Wireshark-win32-1.8.5.exe)=659e81ba08448f40e8b51f82e48d07c7 SHA1(Wireshark-win32-1.8.5.exe)=8dacc70405038a1b4e1d74d297a4dfa04f3ec806 RIPEMD160(Wireshark-win32-1.8.5.exe)=5c5b79bccd003e1a191dc156f84fc16daf2b0ce1 Wireshark-1.8.5.u3p: 28593651 bytes MD5(Wireshark-1.8.5.u3p)=bbff3cb7a0752f335bea9f4686a2825a SHA1(Wireshark-1.8.5.u3p)=92e757d82630864c78b336fe654cb7e2aa3c490e RIPEMD160(Wireshark-1.8.5.u3p)=e14cfb73b9faae96f6e854562b443e665f57cb5e WiresharkPortable-1.8.5.paf.exe: 22069160 bytes MD5(WiresharkPortable-1.8.5.paf.exe)=6649ce85e593eccbbdb3a33e320be883 SHA1(WiresharkPortable-1.8.5.paf.exe)=6b60392d6033a2d8763b8366c0af587ba55c9ecc RIPEMD160(WiresharkPortable-1.8.5.paf.exe)=45fb67b70d6cef377c3e1dd6ad3f1d8a3f586af0 Wireshark 1.8.5 Intel 32.dmg: 22108772 bytes MD5(Wireshark 1.8.5 Intel 32.dmg)=bc6dbe8125199b320eab26dc3f301843 SHA1(Wireshark 1.8.5 Intel 32.dmg)=f826da7ef51bde41487ae348fb1048d5c1d6d5c0 RIPEMD160(Wireshark 1.8.5 Intel 32.dmg)=9b8596a18072909793de47c5f89da2542328fc5b Wireshark 1.8.5 PPC 32.dmg: 22908606 bytes MD5(Wireshark 1.8.5 PPC 32.dmg)=cd7f51cfae4798e5463feabbbe524e2e SHA1(Wireshark 1.8.5 PPC 32.dmg)=b6e3f1816a5dcedfd3462629158b7de1b0eefb54 RIPEMD160(Wireshark 1.8.5 PPC 32.dmg)=d42cf92bdf904ec814609cc817f897ffea18add7 Wireshark 1.8.5 Intel 64.dmg: 21787064 bytes MD5(Wireshark 1.8.5 Intel 64.dmg)=682eaf21d3393ce0dc73e8ee10bd85d6 SHA1(Wireshark 1.8.5 Intel 64.dmg)=7e3ced1be71d8042ba19aa3dcf779fde360466c9 RIPEMD160(Wireshark 1.8.5 Intel 64.dmg)=2abeddb0b37a8e459d9e7042aa33d5f787e7cbce patch-wireshark-1.8.4-to-1.8.5.diff.bz2: 240007 bytes MD5(patch-wireshark-1.8.4-to-1.8.5.diff.bz2)=772cf8a7e5581ead075d1022e52df4ba SHA1(patch-wireshark-1.8.4-to-1.8.5.diff.bz2)=19bdabcdbdb2f6261c2183db1d5c73a2efbaf937 RIPEMD160(patch-wireshark-1.8.4-to-1.8.5.diff.bz2)=861a073d9347a105e6449600488d3ffa4bcc0c53 -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.12 (Darwin) Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/ iEYEARECAAYFAlEIROEACgkQpw8IXSHylJpmqACgi6NwqYGgWATCS37nxh8gsM5N eI8AoKR1h+z0VSKlsHy3H/wwAIofqlit =SR/6 -----END PGP SIGNATURE----- ___________________________________________________________________________ Sent via: Wireshark-announce mailing list &lt;wireshark-announce&lt; at &gt;wireshark.org&gt; Archives: http://www.wireshark.org/lists/wireshark-announce Unsubscribe: https://wireshark.org/mailman/options/wireshark-announce mailto:wireshark-announce-request&lt; at &gt;wireshark.org?subject=unsubscribe</pre> Wireshark announcements 2013-01-29T21:53:37 Wireshark 1.6.12 is now available http://comments.gmane.org/gmane.network.wireshark.announce/119 <pre>-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 I'm proud to announce the release of Wireshark 1.6.12. What is Wireshark? Wireshark is the world's most popular network protocol analyzer. It is used for troubleshooting, analysis, development and education. What's New Bug Fixes The following vulnerability has been fixed. o wnpa-sec-2012-31 The USB dissector could go into an infinite loop. (Bug 7787) Versions affected: 1.8.0 to 1.8.3, 1.6.0 to 1.6.11. o wnpa-sec-2012-35 The ISAKMP dissector could crash. (Bug 7855) Versions affected: 1.8.0 to 1.8.3, 1.6.0 to 1.6.11. o wnpa-sec-2012-36 The iSCSI dissector could go into an infinite loop. (Bug 7858) Versions affected: 1.8.0 to 1.8.3, 1.6.0 to 1.6.11. o wnpa-sec-2012-37 The WTP dissector could go into an infinite loop. (Bug 7869) Versions affected: 1.8.0 to 1.8.3, 1.6.0 to 1.6.11. o wnpa-sec-2012-38 The RTCP dissector could go into an infinite loop. (Bug 7879) Versions affected: 1.8.0 to 1.8.3, 1.6.0 to 1.6.11. o wnpa-sec-2012-40 The ICMPv6 dissector could go into an infinite loop. (Bug 7844) Versions affected: 1.8.0 to 1.8.3, 1.6.0 to 1.6.11. The following bugs have been fixed: o The HTTP dissector does not reassemble headers when the first TCP segment does not contain a full header line. o Menu and Title bars inaccessible using GTK2 (non-legacy) with two monitors. (Bug 553) o 802.11 Probe Response fails to parse. (Bug 1284) o Corrupted tpncp.dat file that crashes Wireshark. (Bug 6665) o SMB 2.x Read Request parsing is wrong starting at Channel. (Bug 7790) o Dissection of IEEE 802.11 Channel Switch Announcement element fails. (Bug 7797) o Invalid memory accesses when loading radius captures. (Bug 7803) o ISUP CIC should have format BASE_DEC, not BASE_HEX. (Bug 7848) o Error in AUXILIARY SECURITY HEADER Parsing for 802.15.4 in dissect_ieee802154_common function. (Bug 7864) o When cancelling creation of new coloring rule, old one is deleted. (Bug 7913) o Misspelling (typo) in IPv6 display filter field name. (Bug 8006) o Core dumped during sctp association analysis. (Bug 8011) New and Updated Features There are no new features in this release. New Protocol Support There are no new protocols in this release. Updated Protocol Support FMP/NOTIFY, ICMPv6, IEEE 802.11, IEEE 802.15.4, ISAKMP, iSCSI, ISUP, NDPS, Prism, RADIUS, RTCP, SMB2, TPNCP, USB, WTP New and Updated Capture File Support CommView NCF Getting Wireshark Wireshark source code and installation packages are available from http://www.wireshark.org/download.html. Vendor-supplied Packages Most Linux and Unix vendors supply their own Wireshark packages. You can usually install or upgrade Wireshark using the package management system specific to that platform. A list of third-party packages can be found on the download page on the Wireshark web site. File Locations Wireshark and TShark look in several different locations for preference files, plugins, SNMP MIBS, and RADIUS dictionaries. These locations vary from platform to platform. You can use About→Folders to find the default locations on your system. Known Problems Wireshark might make your system disassociate from a wireless network on OS X 10.4. (Bug 1315) Dumpcap might not quit if Wireshark or TShark crashes. (Bug 1419) The BER dissector might infinitely loop. (Bug 1516) Capture filters aren't applied when capturing from named pipes. (Bug 1814) Filtering tshark captures with display filters (-R) no longer works. (Bug 2234) The 64-bit Windows installer does not ship with libsmi. (Win64 development page) "Closing File!" Dialog Hangs. (Bug 3046) Application crash when changing real-time option. (Bug 4035) Hex pane display issue after startup. (Bug 4056) Packet list rows are oversized. (Bug 4357) Summary pane selected frame highlighting not maintained. (Bug 4445) Wireshark and TShark will display incorrect delta times when displayed as a custom column. (Bug 4985) Getting Help Community support is available on Wireshark's Q&amp;A site and on the wireshark-users mailing list. Subscription information and archives for all of Wireshark's mailing lists can be found on the web site. Official Wireshark training and certification are available from Wireshark University. Frequently Asked Questions A complete FAQ is available on the Wireshark web site. Digests wireshark-1.6.12.tar.bz2: 22052437 bytes MD5(wireshark-1.6.12.tar.bz2)=51ad0b7bb480a8bd9b441e0840c2426d SHA1(wireshark-1.6.12.tar.bz2)=48d4b1c56a87f27a9a80ab1e70fc38c162a966ef RIPEMD160(wireshark-1.6.12.tar.bz2)=4e8423e932fddf745a844e9d8a47ca93e2085bed wireshark-win32-1.6.12.exe: 19880295 bytes MD5(wireshark-win32-1.6.12.exe)=57c1f3205601fb617139a95057dec35e SHA1(wireshark-win32-1.6.12.exe)=87062444caea5ddc9381f3e30ab954db3eac0f43 RIPEMD160(wireshark-win32-1.6.12.exe)=9505276cf4b1554483e36451b8875799718b649b wireshark-win64-1.6.12.exe: 23001344 bytes MD5(wireshark-win64-1.6.12.exe)=e529276f61f75c24f180e684776de83e SHA1(wireshark-win64-1.6.12.exe)=306790bd8eec3abf0a34ef90cddb8e4adc6fb479 RIPEMD160(wireshark-win64-1.6.12.exe)=152316f930e05418b1abc51a9be03cc194911052 wireshark-1.6.12.u3p: 26752312 bytes MD5(wireshark-1.6.12.u3p)=f357ed8f4e08ff606b9c2c91d842b49e SHA1(wireshark-1.6.12.u3p)=b9d1c857a33bce1a24d3c6734611c2b5dd81d2bf RIPEMD160(wireshark-1.6.12.u3p)=9eab43015773dabad7a85163fb9d0787490980fb WiresharkPortable-1.6.12.paf.exe: 20653798 bytes MD5(WiresharkPortable-1.6.12.paf.exe)=19cc2a7e5c5c0b711a4c9ef8c23abe13 SHA1(WiresharkPortable-1.6.12.paf.exe)=22aa0396747400d6fc4ddda9887d3747ebbbf44c RIPEMD160(WiresharkPortable-1.6.12.paf.exe)=9ad762190c91022f4925857d66227e12c01aca0b Wireshark 1.6.12 Intel 64.dmg: 20359467 bytes MD5(Wireshark 1.6.12 Intel 64.dmg)=2d075764a168e0f51e5e09ba0f53ebdc SHA1(Wireshark 1.6.12 Intel 64.dmg)=1e700724df50e029693ef45fbaaa5dcca31eabc8 RIPEMD160(Wireshark 1.6.12 Intel 64.dmg)=ae06a87ad537d49169f9f021c0151bd857e6e132 Wireshark 1.6.12 PPC 32.dmg: 21259916 bytes MD5(Wireshark 1.6.12 PPC 32.dmg)=3911b81569f651d270fea8345c7a25d6 SHA1(Wireshark 1.6.12 PPC 32.dmg)=c263216177b1d6efe8e47c91d893e18f8e058a7d RIPEMD160(Wireshark 1.6.12 PPC 32.dmg)=b4fa9ea72a50adf9992339a0b5af724a6a152f71 Wireshark 1.6.12 Intel 32.dmg: 20553992 bytes MD5(Wireshark 1.6.12 Intel 32.dmg)=4b5021673e8720517a67c02c23c5371d SHA1(Wireshark 1.6.12 Intel 32.dmg)=3b8f12d8d0578e48ec4d9d0613617636ed07b1ed RIPEMD160(Wireshark 1.6.12 Intel 32.dmg)=396b8bf0b52c357db457f30547b5e9fbfefdca45 patch-wireshark-1.6.11-to-1.6.12.diff.bz2: 84397 bytes MD5(patch-wireshark-1.6.11-to-1.6.12.diff.bz2)=290daa6a798f81f0cf19d7cb1ea1736c SHA1(patch-wireshark-1.6.11-to-1.6.12.diff.bz2)=f12510b2fbae59000b874a3b236a31816635b5db RIPEMD160(patch-wireshark-1.6.11-to-1.6.12.diff.bz2)=679d5fe084df14f9201b2fab4d6659f24ac955d9 -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.11 (Darwin) Comment: Using GnuPG with undefined - http://www.enigmail.net/ iEYEARECAAYFAlC2iv8ACgkQpw8IXSHylJp1ggCg1lHgcanSLaCbLnh2drUEApPH C9YAn084ioKFmTHmHPs7PZjl96KNqSk1 =Xx/d -----END PGP SIGNATURE----- ___________________________________________________________________________ Sent via: Wireshark-announce mailing list &lt;wireshark-announce&lt; at &gt;wireshark.org&gt; Archives: http://www.wireshark.org/lists/wireshark-announce Unsubscribe: https://wireshark.org/mailman/options/wireshark-announce mailto:wireshark-announce-request&lt; at &gt;wireshark.org?subject=unsubscribe</pre> Wireshark announcements 2012-11-28T22:06:55 Wireshark 1.8.4 is now available http://comments.gmane.org/gmane.network.wireshark.announce/118 <pre>-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 I'm proud to announce the release of Wireshark 1.8.4. What is Wireshark? Wireshark is the world's most popular network protocol analyzer. It is used for troubleshooting, analysis, development and education. What's New Bug Fixes The following vulnerabilities have been fixed. o wnpa-sec-2012-30 Wireshark could leak potentially sensitive host name resolution information when working with multiple pcap-ng files. Discovered by Laura Chappell. Versions affected: 1.8.0 to 1.8.3. o wnpa-sec-2012-31 The USB dissector could go into an infinite loop. (Bug 7787) Versions affected: 1.8.0 to 1.8.3, 1.6.0 to 1.6.11. o wnpa-sec-2012-32 The sFlow dissector could go into an infinite loop. (Bug 7789) Versions affected: 1.8.0 to 1.8.3. o wnpa-sec-2012-33 The SCTP dissector could go into an infinite loop. (Bug 7802) Versions affected: 1.8.0 to 1.8.3. o wnpa-sec-2012-34 The EIGRP dissector could go into an infinite loop. (Bug 7800) Versions affected: 1.8.0 to 1.8.3. o wnpa-sec-2012-35 The ISAKMP dissector could crash. (Bug 7855) Versions affected: 1.8.0 to 1.8.3, 1.6.0 to 1.6.11. o wnpa-sec-2012-36 The iSCSI dissector could go into an infinite loop. (Bug 7858) Versions affected: 1.8.0 to 1.8.3, 1.6.0 to 1.6.11. o wnpa-sec-2012-37 The WTP dissector could go into an infinite loop. (Bug 7869) Versions affected: 1.8.0 to 1.8.3, 1.6.0 to 1.6.11. o wnpa-sec-2012-38 The RTCP dissector could go into an infinite loop. (Bug 7879) Versions affected: 1.8.0 to 1.8.3, 1.6.0 to 1.6.11. o wnpa-sec-2012-39 The 3GPP2 A11 dissector could go into an infinite loop. (Bug 7801) Versions affected: 1.8.0 to 1.8.3. o wnpa-sec-2012-40 The ICMPv6 dissector could go into an infinite loop. (Bug 7844) Versions affected: 1.8.0 to 1.8.3, 1.6.0 to 1.6.11. The following bugs have been fixed: o Menu and Title bars inaccessible using GTK2 (non-legacy) with two monitors. (Bug 553) o 802.11 Probe Response fails to parse. (Bug 1284) o Tshark - decimal symbol. (Bug 2880) o Malformed tpncp.dat file can crash Wireshark. (Bug 6665) o SSL decryption not work even with example capture file and key. (Bug 6869) o Info line is incorrect on SIP message containing another SIP message in body. (Bug 7780) o OOPS: dissector table "sctp.ppi" doesn't exist Protocol being registered is "Datagram Transport Layer Security". (Bug 7784) o Dissection of IEEE 802.11 Channel Switch Announcement element fails. (Bug 7797) o Invalid memory accesses when loading RADIUS captures. (Bug 7803) o ISUP CIC should have format BASE_DEC, not BASE_HEX. (Bug 7848) o We don't handle pcap-ng files with IDBs that come after packet blocks. (Bug 7851) o '*' wildcard in the 'Src IP' or 'Dest IP' field of the ESP SA dialog does not work. (Bug 7866) o nas_eps dissector does not decode some esm message. (Bug 7912) o WLAN decryption status not updated after updating WEP/WPA keys. (Bug 7921) o IPv6 Option Pad1 Incorrect dissection. (Bug 7938) o Print GNUTLS error message if PEM import fails. (Bug 7948) o GSM classmark3 8-PSK decode error. (Bug 7964) o Parsing the Server Name Indication extension in SSL/TLS traffic reads some fields incorrectly. (Bug 7967) o Lua code crashes wireshark after update to 1.8.3. (Bug 7976) o 2 bugs in Ran-Information-Error Rim Container. (Bug 8000) o Misspelling (typo) in IPv6 display filter field name. (Bug 8006) o Two BSSGP dissector bugs. (Bug 8008) o Core dump during SCTP association analysis. (Bug 8011) New and Updated Features There are no new features in this release. New Protocol Support There are no new protocols in this release. Updated Protocol Support 3GPP2 A11, BSSGP, EIGRP, FMP/NOTIFY, GSM A, ICMP, ICMPv6, IEEE 802.11, IPsec, IPv6, ISAKMP, iSCSI, LTE RRC, NAS EPS, NDPS, Prism, RADIUS, RRC, RTCP, SCTP, sFlow, SIP, SMB2, SSL/TLS, TPNCP, USB New and Updated Capture File Support CommView NCF, iSeries, pcap-ng. Getting Wireshark Wireshark source code and installation packages are available from http://www.wireshark.org/download.html. Vendor-supplied Packages Most Linux and Unix vendors supply their own Wireshark packages. You can usually install or upgrade Wireshark using the package management system specific to that platform. A list of third-party packages can be found on the download page on the Wireshark web site. File Locations Wireshark and TShark look in several different locations for preference files, plugins, SNMP MIBS, and RADIUS dictionaries. These locations vary from platform to platform. You can use About→Folders to find the default locations on your system. Known Problems Dumpcap might not quit if Wireshark or TShark crashes. (Bug 1419) The BER dissector might infinitely loop. (Bug 1516) Capture filters aren't applied when capturing from named pipes. (Bug 1814) Filtering tshark captures with display filters (-R) no longer works. (Bug 2234) The 64-bit Windows installer does not support Kerberos decryption. (Win64 development page) Application crash when changing real-time option. (Bug 4035) Hex pane display issue after startup. (Bug 4056) Packet list rows are oversized. (Bug 4357) Summary pane selected frame highlighting not maintained. (Bug 4445) Wireshark and TShark will display incorrect delta times in some cases. (Bug 4985) Getting Help Community support is available on Wireshark's Q&amp;A site and on the wireshark-users mailing list. Subscription information and archives for all of Wireshark's mailing lists can be found on the web site. Official Wireshark training and certification are available from Wireshark University. Frequently Asked Questions A complete FAQ is available on the Wireshark web site. Digests wireshark-1.8.4.tar.bz2: 24164286 bytes MD5(wireshark-1.8.4.tar.bz2)=ce22aa0fe7ecb5af39c93ff905c7d026 SHA1(wireshark-1.8.4.tar.bz2)=00265d9196f030848c78025f30556cd014be843d RIPEMD160(wireshark-1.8.4.tar.bz2)=73f00ccfe86239022679eb2c889bc4371a61942d Wireshark-win32-1.8.4.exe: 20967680 bytes MD5(Wireshark-win32-1.8.4.exe)=60ab55f541ad3f7443aeb6a4f40d42db SHA1(Wireshark-win32-1.8.4.exe)=f430703d2eb258e242f604dbd4ccc276edceb3a7 RIPEMD160(Wireshark-win32-1.8.4.exe)=29553dc43ac7f1b88c1f6376096000b9443bb5c2 Wireshark-win64-1.8.4.exe: 26641872 bytes MD5(Wireshark-win64-1.8.4.exe)=3ad27f8c8696727b839c06378be238a3 SHA1(Wireshark-win64-1.8.4.exe)=a2e4516476711221db3edaf66f490c8bb3fae955 RIPEMD160(Wireshark-win64-1.8.4.exe)=2a3c48f2efab5a610062901af3c21798b95fab7a Wireshark-1.8.4.u3p: 28390010 bytes MD5(Wireshark-1.8.4.u3p)=024440d6b5b577a072182d0087cc7648 SHA1(Wireshark-1.8.4.u3p)=c7308ab686b299b76808c7012997e8f92d6ff842 RIPEMD160(Wireshark-1.8.4.u3p)=de4028831644d14f25918a9aa148c5bc4c468f48 WiresharkPortable-1.8.4.paf.exe: 21982712 bytes MD5(WiresharkPortable-1.8.4.paf.exe)=ddc683976227e3aa12f52abb125ad4c4 SHA1(WiresharkPortable-1.8.4.paf.exe)=a2f1a60bf7dddbd4f52493be69a294917ff65ce7 RIPEMD160(WiresharkPortable-1.8.4.paf.exe)=a3988c88385f002551263c90059754b0bd40369e Wireshark 1.8.4 Intel 64.dmg: 21772874 bytes MD5(Wireshark 1.8.4 Intel 64.dmg)=d766badd720f4ab81c4fea55ad4eb3ab SHA1(Wireshark 1.8.4 Intel 64.dmg)=6287a8499130d9b5853f2a4a8055ca6db1590158 RIPEMD160(Wireshark 1.8.4 Intel 64.dmg)=b970b82a9b6a6d403e31c5d70693a423c5f298e8 Wireshark 1.8.4 Intel 32.dmg: 22088678 bytes MD5(Wireshark 1.8.4 Intel 32.dmg)=9c2cf7b67cb8f6dad4adc36a8b34f09a SHA1(Wireshark 1.8.4 Intel 32.dmg)=28b0a570c8ff3b1a8f8395ef08678b372aa88d50 RIPEMD160(Wireshark 1.8.4 Intel 32.dmg)=fd21b36db579a3693d1fe4b8b76614492b89a4e9 Wireshark 1.8.4 PPC 32.dmg: 22886742 bytes MD5(Wireshark 1.8.4 PPC 32.dmg)=a034248098d1eb754c039c96e108913c SHA1(Wireshark 1.8.4 PPC 32.dmg)=0a6bbddbb13e1eb15ad0ee96c6f3d87109ef94aa RIPEMD160(Wireshark 1.8.4 PPC 32.dmg)=8c87209de4dac6bb435609e978da25b9b43c97e6 patch-wireshark-1.8.3-to-1.8.4.diff.bz2: 156695 bytes MD5(patch-wireshark-1.8.3-to-1.8.4.diff.bz2)=7c3779962dc372e784991ba883df15e3 SHA1(patch-wireshark-1.8.3-to-1.8.4.diff.bz2)=b3778edb01befc809d3ceef35229db4dd338e589 RIPEMD160(patch-wireshark-1.8.3-to-1.8.4.diff.bz2)=59a7a5af7bee2d3136fec0ef2996c6521d23a6e5 -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.11 (Darwin) Comment: Using GnuPG with undefined - http://www.enigmail.net/ iEYEARECAAYFAlC2irsACgkQpw8IXSHylJrIygCeLm9jbKlJWv7sle/EK4Duhlt5 HD8AoMqK4cQA/lW6YUOmygHu+U4DRIOp =g7ln -----END PGP SIGNATURE----- ___________________________________________________________________________ Sent via: Wireshark-announce mailing list &lt;wireshark-announce&lt; at &gt;wireshark.org&gt; Archives: http://www.wireshark.org/lists/wireshark-announce Unsubscribe: https://wireshark.org/mailman/options/wireshark-announce mailto:wireshark-announce-request&lt; at &gt;wireshark.org?subject=unsubscribe</pre> Wireshark announcements 2012-11-28T22:05:47 Wireshark 1.6.11 is now available http://comments.gmane.org/gmane.network.wireshark.announce/117 <pre>-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 I'm proud to announce the release of Wireshark 1.6.11. What is Wireshark? Wireshark is the world's most popular network protocol analyzer. It is used for troubleshooting, analysis, development and education. What's New Bug Fixes The following vulnerability has been fixed. o wnpa-sec-2012-28 Martin Wilck discovered an infinite loop in the DRDA dissector. (Bug 7666) Versions affected: 1.6.0 to 1.6.10, 1.8.0 to 1.8.2. CVE-2012-5239 The following bugs have been fixed: o The HTTP dissector does not reassemble headers when the first TCP segment does not contain a full header line. o No markers show up when maps are displayed. (Bug 5016) o Truncated/partial JPEG files are not dissected. (Bug 6230) o Assertion when using tshark/wireshark on large captures. (Bug 5699) o Volume label field of "SMB/TRANS2-QUERY_FS_INFO/InfoVolume level" reply packet is not displayed correctly due alignment issue. (Bug 5778) o 64-bit Wireshark appears to hit 2-Gbyte memory limit on 64-bit Windows. (Bug 5979) o epan/dissectors/packet-per.c dissect_per_constrained_integer_64b fails for 64 bits. (Bug 7624) o dissector of Qos attribute "Reliability Class" in GMM/SM message. (Bug 7670) o [ieee802.11] TKIP dissection : wrong IS_TKIP macro. (Bug 7691) o This trace causes Wireshark to crash when VoIP Calls selected. (Bug 7724) o SCSI: WRITE BUFFER fields always display as zero. (Bug 7753) New and Updated Features There are no new features in this release. New Protocol Support There are no new protocols in this release. Updated Protocol Support ASN.1 PER, GSM Management, IEEE 802.11, JPEG, PCAP, RANAP, RRC, RRLP, SCSI, SMB, TETRA New and Updated Capture File Support There are no file format updates in this release. Getting Wireshark Wireshark source code and installation packages are available from http://www.wireshark.org/download.html. Vendor-supplied Packages Most Linux and Unix vendors supply their own Wireshark packages. You can usually install or upgrade Wireshark using the package management system specific to that platform. A list of third-party packages can be found on the download page on the Wireshark web site. File Locations Wireshark and TShark look in several different locations for preference files, plugins, SNMP MIBS, and RADIUS dictionaries. These locations vary from platform to platform. You can use About→Folders to find the default locations on your system. Known Problems Wireshark might make your system disassociate from a wireless network on OS X 10.4. (Bug 1315) Dumpcap might not quit if Wireshark or TShark crashes. (Bug 1419) The BER dissector might infinitely loop. (Bug 1516) Capture filters aren't applied when capturing from named pipes. (Bug 1814) Filtering tshark captures with display filters (-R) no longer works. (Bug 2234) The 64-bit Windows installer does not ship with libsmi. (Win64 development page) "Closing File!" Dialog Hangs. (Bug 3046) Application crash when changing real-time option. (Bug 4035) Hex pane display issue after startup. (Bug 4056) Packet list rows are oversized. (Bug 4357) Summary pane selected frame highlighting not maintained. (Bug 4445) Wireshark and TShark will display incorrect delta times when displayed as a custom column. (Bug 4985) Getting Help Community support is available on Wireshark's Q&amp;A site and on the wireshark-users mailing list. Subscription information and archives for all of Wireshark's mailing lists can be found on the web site. Official Wireshark training and certification are available from Wireshark University. Frequently Asked Questions A complete FAQ is available on the Wireshark web site. Digests wireshark-1.6.11.tar.bz2: 22048186 bytes MD5(wireshark-1.6.11.tar.bz2)=af3684fa1f6a215e66c95af11e79528c SHA1(wireshark-1.6.11.tar.bz2)=bfcb5fee7f300ab5a6a813a46892cb500abca33a RIPEMD160(wireshark-1.6.11.tar.bz2)=98cc78f1fc4d8b6a366f61c0dc715eb8511e870e wireshark-win32-1.6.11.exe: 19872045 bytes MD5(wireshark-win32-1.6.11.exe)=8023cdfe27af38afe3b11dfcf45f52be SHA1(wireshark-win32-1.6.11.exe)=24941d7647e1eca888807378345a2919cca914dd RIPEMD160(wireshark-win32-1.6.11.exe)=a7d1bd93269e8aec4b2a8fcc7c6906dede067053 wireshark-win64-1.6.11.exe: 22995235 bytes MD5(wireshark-win64-1.6.11.exe)=7464f834e0061cc7101100f276c5d64d SHA1(wireshark-win64-1.6.11.exe)=4414d4bf5162758c78e4488054a202399923af8e RIPEMD160(wireshark-win64-1.6.11.exe)=691c6cec31f19acecfc18aae36dfeeac5ccaddd8 wireshark-1.6.11.u3p: 26741948 bytes MD5(wireshark-1.6.11.u3p)=523e5fee58a5c05052083d7bd6546791 SHA1(wireshark-1.6.11.u3p)=735f0e72736574ba4421f50e88ccf6a3a013da49 RIPEMD160(wireshark-1.6.11.u3p)=3f17dccfcf6ac313fdec95564c124f5821fa5b5d WiresharkPortable-1.6.11.paf.exe: 20755351 bytes MD5(WiresharkPortable-1.6.11.paf.exe)=11f386bbd0949f520644acb44a3796f3 SHA1(WiresharkPortable-1.6.11.paf.exe)=8b42b3719aa57bc3f2c88328e59ce022818e352e RIPEMD160(WiresharkPortable-1.6.11.paf.exe)=b6366114ea4b1ce3ef1c0f22c0d29b5daf279603 Wireshark 1.6.11 PPC 32.dmg: 21252385 bytes MD5(Wireshark 1.6.11 PPC 32.dmg)=b601e2bb073b31525623007c5fea0755 SHA1(Wireshark 1.6.11 PPC 32.dmg)=874816d131ff045662f52ffba69ad8524a98574a RIPEMD160(Wireshark 1.6.11 PPC 32.dmg)=782d5ff25d549edf87b1e6d6e0c9f88d08611e5c Wireshark 1.6.11 Intel 32.dmg: 20538318 bytes MD5(Wireshark 1.6.11 Intel 32.dmg)=75b1d29244d67264358e9fe70e5b8f8d SHA1(Wireshark 1.6.11 Intel 32.dmg)=de5d8a9b6c5f4e94ecf90e0c8e6f6a4adf798d20 RIPEMD160(Wireshark 1.6.11 Intel 32.dmg)=f1f0aaa524f0d26ed1fca381000df7fc724642fb Wireshark 1.6.11 Intel 64.dmg: 20342295 bytes MD5(Wireshark 1.6.11 Intel 64.dmg)=41bc9fb2e3661f70d759d32b95aa8ccf SHA1(Wireshark 1.6.11 Intel 64.dmg)=095b510fe62e550fcfe79631f2da0df4ca7112b1 RIPEMD160(Wireshark 1.6.11 Intel 64.dmg)=33bb2ca2bb12af53b0df0a71260ea1ae4eaaa0ca patch-wireshark-1.6.10-to-1.6.11.bz2: 111089 bytes MD5(patch-wireshark-1.6.10-to-1.6.11.bz2)=229fda342ddb90a9098a010304119f66 SHA1(patch-wireshark-1.6.10-to-1.6.11.bz2)=785c1ab958efeddced76758b4c598bdc5ea3f923 RIPEMD160(patch-wireshark-1.6.10-to-1.6.11.bz2)=09c47795e91f8b8f13788d29db7171ad4eea71b9 -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.11 (Darwin) Comment: Using GnuPG with Mozilla - http://www.enigmail.net/ iEYEARECAAYFAlBrQNcACgkQpw8IXSHylJqKJACeP/W+wA7wgDCyA52vHA1vYwze wb8AoI8nbR5i8N9Dxcd0kV4nLioKEodi =nLKC -----END PGP SIGNATURE----- ___________________________________________________________________________ Sent via: Wireshark-announce mailing list &lt;wireshark-announce&lt; at &gt;wireshark.org&gt; Archives: http://www.wireshark.org/lists/wireshark-announce Unsubscribe: https://wireshark.org/mailman/options/wireshark-announce mailto:wireshark-announce-request&lt; at &gt;wireshark.org?subject=unsubscribe</pre> Wireshark announcements 2012-10-02T19:30:31 Wireshark 1.8.3 is now available http://comments.gmane.org/gmane.network.wireshark.announce/116 <pre>-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 I'm proud to announce the release of Wireshark 1.8.3. What is Wireshark? Wireshark is the world's most popular network protocol analyzer. It is used for troubleshooting, analysis, development and education. What's New Bug Fixes The following vulnerabilities have been fixed. o wnpa-sec-2012-26 The HSRP dissector could go into an infinite loop. (Bug 7581) Versions affected: 1.8.0 to 1.8.2. CVE-2012-5237 o wnpa-sec-2012-27 The PPP dissector could abort. (Bug 7316, bug 7668) Versions affected: 1.8.0 to 1.8.2. CVE-2012-5238 o wnpa-sec-2012-28 Martin Wilck discovered an infinite loop in the DRDA dissector. (Bug 7666) Versions affected: 1.6.0 to 1.6.10, 1.8.0 to 1.8.2. CVE-2012-5239 o wnpa-sec-2012-29 Laurent Butti discovered a buffer overflow in the LDP dissector. (Bug 7567) Versions affected: 1.8.0 to 1.8.2. CVE-2012-5240 The following bugs have been fixed: o The HTTP dissector does not reassemble headers when the first TCP segment does not contain a full header line. o HDCP2 uses the wrong protocol id. o Several I/O graph problems have been fixed. o No markers show up when maps are displayed. (Bug 5016) o Assertion when using tshark/wireshark on large captures. (Bug 5699) o Volume label field of "SMB/TRANS2-QUERY_FS_INFO/InfoVolume level" reply packet is not displayed correctly due alignment issue. (Bug 5778) o 64-bit Wireshark appears to hit 2-Gbyte memory limit on 64-bit Windows. (Bug 5979) o Truncated/partial JPEG files are not dissected. (Bug 6230) o Support for MPLS Packet Loss and Delay Measurement, RFC 6374. (Bug 6881) o Memory leak in voip_calls.c. (Bug 7320) o When listing protocols available for "Decode As", plugins are sorted after built-ins. (Bug 7348) o Hidden columns should not be printed when printing packet summary line. (Bug 7356) o Size wrong in "File Set List" for just-finished captures. (Bug 7370) o Error: no dependency information found for debian/wireshark-common/usr/lib/wireshark/libwsutil.so.2 (used by debian/wireshark/usr/bin/wireshark). (Bug 7408) o Parse and properly display LTE RADIUS AVP 3GPP-User-Location-Info. (Bug 7474) o [PATCH] HomeplugAV dissector: decode device id. (Bug 7548) o BACnet GetEnrollmentSummary-ACK does not decode correctly. (Bug 7556) o epan/dissectors/packet-per.c dissect_per_constrained_integer_64b fails for 64 bits. (Bug 7624) o New SCTP PPID 48. (Bug 7635) o dissector of Qos attribute "Reliability Class" in GMM/SM message. (Bug 7670) o Performance regression in tshark -z io,stat. (Bug 7674) o Incorrect io-stat table format when unsupported "-t" operand is specified and when using AVG of relative_time fields. (Bug 7685) o IEEE 802.11 TKIP dissection : wrong IS_TKIP macro. (Bug 7691) o Homeplug AV dissectors does not properly dissect short frames. (Bug 7707) o mm_context_nas_dl_cnt and mm_context_nas_ul_cnt are not dissected properly in ContextResponse message in Gtpv2. (Bug 7718) o This trace causes Wireshark to crash when VoIP Calls selected. (Bug 7724) o Some diameter Gx enumerations are missing values or value is incorrect. (Bug 7727) o Wireshark 1.8.2 is only displaying 2 filters from the drop-down menu even when preferences are set to higher integer. (Bug 7731) o BGP bad decoding for Graceful Restart Capability with only helper support &amp; for Enhanced Route Refresh Capability. (Bug 7734) o Dissection error of D-RELEASE and D-CONNECT in TETRA dissector. (Bug 7736) o DND can cause Wireshark to crash. (Bug 7744) o SCSI: WRITE BUFFER fields always display as zero. (Bug 7753) New and Updated Features There are no new features in this release. New Protocol Support There are no new protocols in this release. Updated Protocol Support ASN.1 PER, BACnet, BGP, DIAMETER, DRDA, DVB CI, DVB, GSM Management, GTP, GTPv2, HDCP2, HomePlug AV, ICMP, ICMPv6, IEEE 802.11, IEEE 802a, Interlink, JPEG, LDP, LPP, MPEG, MPLS, PCAP, PPP, RANAP, RRC, RRLP, SCCP, SCSI, SCTP, SDP, SMB, TETRA New and Updated Capture File Support There are no file format updates in this release. Getting Wireshark Wireshark source code and installation packages are available from http://www.wireshark.org/download.html. Vendor-supplied Packages Most Linux and Unix vendors supply their own Wireshark packages. You can usually install or upgrade Wireshark using the package management system specific to that platform. A list of third-party packages can be found on the download page on the Wireshark web site. File Locations Wireshark and TShark look in several different locations for preference files, plugins, SNMP MIBS, and RADIUS dictionaries. These locations vary from platform to platform. You can use About→Folders to find the default locations on your system. Known Problems Dumpcap might not quit if Wireshark or TShark crashes. (Bug 1419) The BER dissector might infinitely loop. (Bug 1516) Capture filters aren't applied when capturing from named pipes. (Bug 1814) Filtering tshark captures with display filters (-R) no longer works. (Bug 2234) The 64-bit Windows installer does not support Kerberos decryption. (Win64 development page) Application crash when changing real-time option. (Bug 4035) Hex pane display issue after startup. (Bug 4056) Packet list rows are oversized. (Bug 4357) Summary pane selected frame highlighting not maintained. (Bug 4445) Wireshark and TShark will display incorrect delta times in some cases. (Bug 4985) Getting Help Community support is available on Wireshark's Q&amp;A site and on the wireshark-users mailing list. Subscription information and archives for all of Wireshark's mailing lists can be found on the web site. Official Wireshark training and certification are available from Wireshark University. Frequently Asked Questions A complete FAQ is available on the Wireshark web site. Digests wireshark-1.8.3.tar.bz2: 24123989 bytes MD5(wireshark-1.8.3.tar.bz2)=898b4c60e32efcd77ecf875a6ad07a92 SHA1(wireshark-1.8.3.tar.bz2)=3e1322eea5794c71de752b7923af9379bcc95299 RIPEMD160(wireshark-1.8.3.tar.bz2)=ba9d74f06999ec6af9ccf9d8bc2ddece5c22b6d5 Wireshark-win64-1.8.3.exe: 26633976 bytes MD5(Wireshark-win64-1.8.3.exe)=433cf783a511d579e30cc8502deb4ddd SHA1(Wireshark-win64-1.8.3.exe)=c8f2dc30905e04804efb4d4d7ab39ddd644d6a42 RIPEMD160(Wireshark-win64-1.8.3.exe)=5641ddca653649fbb0473aa8d3bfdf6d51c05713 Wireshark-win32-1.8.3.exe: 20960472 bytes MD5(Wireshark-win32-1.8.3.exe)=4c81e8d53a09da925c6de8dedead1e6c SHA1(Wireshark-win32-1.8.3.exe)=6afadce942a33d3a012122c60b3eaccf8c29e721 RIPEMD160(Wireshark-win32-1.8.3.exe)=5b2771d729a534fb6aacc93177a3d52266e1b105 Wireshark-1.8.3.u3p: 28378773 bytes MD5(Wireshark-1.8.3.u3p)=fe440f87a5286d5963c6fbf1bf380f7e SHA1(Wireshark-1.8.3.u3p)=5fd829d960089ceab7ca55693835aceeed92ab5e RIPEMD160(Wireshark-1.8.3.u3p)=f62de504d97eb2a8957a98ed18367fabbe6863a7 WiresharkPortable-1.8.3.paf.exe: 21969472 bytes MD5(WiresharkPortable-1.8.3.paf.exe)=4cead69626fc876bebfb5b74cde23148 SHA1(WiresharkPortable-1.8.3.paf.exe)=0631669d171a11ef48b758a907db3afe8bb2098d RIPEMD160(WiresharkPortable-1.8.3.paf.exe)=56c7e078d4eda96d81da2463714a77c5cfa7fadd Wireshark 1.8.3 Intel 32.dmg: 22071185 bytes MD5(Wireshark 1.8.3 Intel 32.dmg)=df8498f6791b059b26ff26dae3ad04bb SHA1(Wireshark 1.8.3 Intel 32.dmg)=5412c8f9f877eb01db973af5a43a38fa82b9d767 RIPEMD160(Wireshark 1.8.3 Intel 32.dmg)=96ba8231e5929e74305bd24b961769da94afdda8 Wireshark 1.8.3 Intel 64.dmg: 21760998 bytes MD5(Wireshark 1.8.3 Intel 64.dmg)=604d2d4774bb4b7bd4c9b79940951ba8 SHA1(Wireshark 1.8.3 Intel 64.dmg)=f610086597cf926294c8b917fc076159af0fa6ec RIPEMD160(Wireshark 1.8.3 Intel 64.dmg)=7988f8c76d7a3b560e71c969a02a689559827376 Wireshark 1.8.3 PPC 32.dmg: 22877606 bytes MD5(Wireshark 1.8.3 PPC 32.dmg)=eff643dbea8f5f1c04b39eeb8ab68f58 SHA1(Wireshark 1.8.3 PPC 32.dmg)=8ecb0dd90d11521374baad53889241098e709618 RIPEMD160(Wireshark 1.8.3 PPC 32.dmg)=2276374bae125b7ef3d0af0e7be697ea0b38113f patch-wireshark-1.8.2-to-1.8.3.diff.bz2: 235045 bytes MD5(patch-wireshark-1.8.2-to-1.8.3.diff.bz2)=99b07e668b006e2958849a38ff272500 SHA1(patch-wireshark-1.8.2-to-1.8.3.diff.bz2)=90e6c7260025b3287de88d2e81dde4014045a5ab RIPEMD160(patch-wireshark-1.8.2-to-1.8.3.diff.bz2)=5e40b3140e91e05ab17a458b8016d3fb7e38050b -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.11 (Darwin) Comment: Using GnuPG with Mozilla - http://www.enigmail.net/ iEYEARECAAYFAlBrQG4ACgkQpw8IXSHylJpIRgCgqhuQUt+zXi/Bfz6F3IZBmFQJ EPgAnRBs79QZ7Dtqrdgmf1RIKECegBe7 =66iL -----END PGP SIGNATURE----- ___________________________________________________________________________ Sent via: Wireshark-announce mailing list &lt;wireshark-announce&lt; at &gt;wireshark.org&gt; Archives: http://www.wireshark.org/lists/wireshark-announce Unsubscribe: https://wireshark.org/mailman/options/wireshark-announce mailto:wireshark-announce-request&lt; at &gt;wireshark.org?subject=unsubscribe</pre> Wireshark announcements 2012-10-02T19:28:46 End of Life Announcement for Wireshark 1.4 http://comments.gmane.org/gmane.network.wireshark.announce/115 <pre>-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Wireshark 1.4.0 was released on August 30, 2010. Support for the 1.4.x series of releases ended on August 30, 2012. If you are still running Wireshark 1.4 or earlier (including all versions of Ethereal) you are encouraged to upgrade to Wireshark 1.8, the current release branch. This announcement only affects Wireshark 1.4. Wireshark 1.8 will be supported until June 21, 2014 and Wireshark 1.6 will be supported until June 7, 2013. For more information on Wireshark's release life cycle and policy please refer to the following pages on the wiki: http://wiki.wireshark.org/Development/LifeCycle http://wiki.wireshark.org/Development/ReleasePolicy -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.11 (Darwin) Comment: Using GnuPG with Mozilla - http://www.enigmail.net/ iEYEARECAAYFAlBBB7sACgkQpw8IXSHylJqDzgCdEn2yDdkeZ+7SX+naArAMZPFF RN4AoLUfHLrofUAv76ITxGgmmjVI6a9P =cFuo -----END PGP SIGNATURE----- ___________________________________________________________________________ Sent via: Wireshark-announce mailing list &lt;wireshark-announce-IZ8446WsY0/dtAWm4Da02A&lt; at &gt;public.gmane.org&gt; Archives: http://www.wireshark.org/lists/wireshark-announce Unsubscribe: https://wireshark.org/mailman/options/wireshark-announce mailto:wireshark-announce-request-IZ8446WsY0/dtAWm4Da02A&lt; at &gt;public.gmane.org?subject=unsubscribe </pre> Wireshark announcements 2012-08-31T18:51:39 Wireshark 1.4.15 is now available http://comments.gmane.org/gmane.network.wireshark.announce/112 <pre>-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 I'm proud to announce the release of Wireshark 1.4.15. What is Wireshark? Wireshark is the world's most popular network protocol analyzer. It is used for troubleshooting, analysis, development and education. What's New Bug Fixes The following vulnerabilities have been fixed. o wnpa-sec-2012-13 The DCP ETSI dissector could trigger a zero division. Reported by Laurent Butti. (Bug 7566) Versions affected: 1.4.0 to 1.4.14, 1.6.0 to 1.6.9, 1.8.0 to 1.8.1. CVE-2012-4285 o wnpa-sec-2012-15 The XTP dissector could go into an infinite loop. Reported by Ben Schmidt. (Bug 7571) Versions affected: 1.4.0 to 1.4.14, 1.6.0 to 1.6.9, 1.8.0 to 1.8.1. CVE-2012-4288 o wnpa-sec-2012-17 The AFP dissector could go into a large loop. Reported by Stefan Cornelius. (Bug 7603) Versions affected: 1.4.0 to 1.4.14, 1.6.0 to 1.6.9, 1.8.0 to 1.8.1. CVE-2012-4289 o wnpa-sec-2012-18 The RTPS2 dissector could overflow a buffer. Reported by Laurent Butti. (Bug 7568) Versions affected: 1.4.0 to 1.4.14, 1.6.0 to 1.6.9, 1.8.0 to 1.8.1. CVE-2012-4296 o wnpa-sec-2012-20 The CIP dissector could exhaust system memory. Reported by Ben Schmidt. (Bug 7570) Versions affected: 1.4.0 to 1.4.14, 1.6.0 to 1.6.9, 1.8.0 to 1.8.1. CVE-2012-4291 o wnpa-sec-2012-21 The STUN dissector could crash. Reported by Laurent Butti. (Bug 7569) Versions affected: 1.4.0 to 1.4.14, 1.6.0 to 1.6.9, 1.8.0 to 1.8.1. CVE-2012-4292 o wnpa-sec-2012-22 The EtherCAT Mailbox dissector could abort. Reported by Laurent Butti. (Bug 7562) Versions affected: 1.4.0 to 1.4.14, 1.6.0 to 1.6.9, 1.8.0 to 1.8.1. CVE-2012-4293 o wnpa-sec-2012-23 The CTDB dissector could go into a large loop. Reported by Ben Schmidt. (Bug 7573) Versions affected: 1.4.0 to 1.4.14, 1.6.0 to 1.6.9, 1.8.0 to 1.8.1. CVE-2012-4290 The following bugs have been fixed: o Wireshark crashes on opening very short NFS pcap file. (Bug 7498) New and Updated Features There are no new features in this release. New Protocol Support There are no new protocols in this release. Updated Protocol Support AFP, Bluetooth L2CAP, CIP, CTDB, DCP ETSI, EtherCAT Mailbox, FC Link Control, LISP, NFS, RTPS2, SCTP, STUN, XTP New and Updated Capture File Support There are no new or updated capture file formats in this release. Getting Wireshark Wireshark source code and installation packages are available from http://www.wireshark.org/download.html. Vendor-supplied Packages Most Linux and Unix vendors supply their own Wireshark packages. You can usually install or upgrade Wireshark using the package management system specific to that platform. A list of third-party packages can be found on the download page on the Wireshark web site. File Locations Wireshark and TShark look in several different locations for preference files, plugins, SNMP MIBS, and RADIUS dictionaries. These locations vary from platform to platform. You can use About-&gt;Folders to find the default locations on your system. Known Problems Wireshark might make your system disassociate from a wireless network on OS X 10.4. (Bug 1315) Dumpcap might not quit if Wireshark or TShark crashes. (Bug 1419) The BER dissector might infinitely loop. (Bug 1516) Capture filters aren't applied when capturing from named pipes. (Bug 1814) Filtering tshark captures with display filters (-R) no longer works. (Bug 2234) The 64-bit Windows installer does not ship with the same libraries as the 32-bit installer. (Bug 3610) Hex pane display issue after startup. (Bug 4056) Packet list rows are oversized. (Bug 4357) Summary pane selected frame highlighting not maintained. (Bug 4445) Getting Help Community support is available on Wireshark's Q&amp;A site and on the wireshark-users mailing list. Subscription information and archives for all of Wireshark's mailing lists can be found on the web site. Official Wireshark training and certification are available from Wireshark University. Frequently Asked Questions A complete FAQ is available on the Wireshark web site. Digests wireshark-1.4.15.tar.bz2: 21186956 bytes MD5(wireshark-1.4.15.tar.bz2)=9a1d3aac655e2a4b716a04caab96737a SHA1(wireshark-1.4.15.tar.bz2)=cd830566eb7bdea35ff95259e0b2c176d11ac16f RIPEMD160(wireshark-1.4.15.tar.bz2)=b87c88ffc4538af9276965e7086793d58d4983f3 wireshark-win32-1.4.15.exe: 19863068 bytes MD5(wireshark-win32-1.4.15.exe)=98aae1820c0b3476650a459c4ea4f2d8 SHA1(wireshark-win32-1.4.15.exe)=c8250cc2484e898c1a1af49d7171a2c61a3d19a6 RIPEMD160(wireshark-win32-1.4.15.exe)=256903830d8364a91fc84f4b2052d7c699048f50 wireshark-win64-1.4.15.exe: 21885781 bytes MD5(wireshark-win64-1.4.15.exe)=258bb7009f39a4071a8e1a5b7026fede SHA1(wireshark-win64-1.4.15.exe)=e1352df5779c9fdbd334afd0b9108f6aa09dfed1 RIPEMD160(wireshark-win64-1.4.15.exe)=e93173983a2034ff39113a098d033e4110518783 wireshark-1.4.15.u3p: 26414641 bytes MD5(wireshark-1.4.15.u3p)=6113d22e9ce0d4bab5515bab2deaa61b SHA1(wireshark-1.4.15.u3p)=2fb3b25fdbcce8cab526d3f52e948c7c11109c60 RIPEMD160(wireshark-1.4.15.u3p)=5592b84426feec694fb88b2e873cd8f8d9eda7ce WiresharkPortable-1.4.15.paf.exe: 20599311 bytes MD5(WiresharkPortable-1.4.15.paf.exe)=4470d73d1e247df2fbc2498ca0187c08 SHA1(WiresharkPortable-1.4.15.paf.exe)=b92b7fd8a4951e8d64c90bddc2f7fc0f30e6b9a2 RIPEMD160(WiresharkPortable-1.4.15.paf.exe)=5deaf6a82e71a0240d2aa6e3f80a01c66e276cf5 Wireshark 1.4.15 Intel 32.dmg: 47946848 bytes MD5(Wireshark 1.4.15 Intel 32.dmg)=9990b22e849f456614da6e6a1b065269 SHA1(Wireshark 1.4.15 Intel 32.dmg)=8984cf6e195e2416eea5ac260d5125f33d0345d3 RIPEMD160(Wireshark 1.4.15 Intel 32.dmg)=c824f1ccdd8bd10b1fc47ef48ccdaf91dbab27a7 Wireshark 1.4.15 PPC 32.dmg: 50549449 bytes MD5(Wireshark 1.4.15 PPC 32.dmg)=8a7bff1d2bb3966427d1efbff7260f28 SHA1(Wireshark 1.4.15 PPC 32.dmg)=aaa779025fa087bc5414ebb94e7df39d644a970d RIPEMD160(Wireshark 1.4.15 PPC 32.dmg)=69b6d10ed5d02dabc6036ca6805ab1c6bc696a73 Wireshark 1.4.15 Intel 64.dmg: 45643992 bytes MD5(Wireshark 1.4.15 Intel 64.dmg)=eef467ebd4e8e4992ade4036f9394141 SHA1(Wireshark 1.4.15 Intel 64.dmg)=fb2a2f1bdbbd3f3f145cb69b5f008600f0905db1 RIPEMD160(Wireshark 1.4.15 Intel 64.dmg)=ab206747b72d37eac1ed1795bdebd475cdb3ae24 patch-wireshark-1.4.14-to-1.4.15.diff.bz2: 46021 bytes MD5(patch-wireshark-1.4.14-to-1.4.15.diff.bz2)=e0766fb9e808caac3cad02b27cb88e78 SHA1(patch-wireshark-1.4.14-to-1.4.15.diff.bz2)=7e19484c855052b16fadb93a8dde7bd4b519297e RIPEMD160(patch-wireshark-1.4.14-to-1.4.15.diff.bz2)=df0ac8969f2a83e50ca1a12a18b949ee0d47834d -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.11 (Darwin) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ iEYEARECAAYFAlAr53kACgkQpw8IXSHylJqQPgCfZuo4Iv/xLCuqZ+PI0FowtTx9 WhUAn03yYOYn/SMhMDi2xnTShhaywJgn =I7KY -----END PGP SIGNATURE----- ___________________________________________________________________________ Sent via: Wireshark-announce mailing list &lt;wireshark-announce-IZ8446WsY0/dtAWm4Da02A&lt; at &gt;public.gmane.org&gt; Archives: http://www.wireshark.org/lists/wireshark-announce Unsubscribe: https://wireshark.org/mailman/options/wireshark-announce mailto:wireshark-announce-request-IZ8446WsY0/dtAWm4Da02A&lt; at &gt;public.gmane.org?subject=unsubscribe </pre> Wireshark announcements 2012-08-15T18:16:25 Wireshark 1.6.9 is now available http://comments.gmane.org/gmane.network.wireshark.announce/111 <pre>-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 I'm proud to announce the release of Wireshark 1.6.8. What is Wireshark? Wireshark is the world's most popular network protocol analyzer. It is used for troubleshooting, analysis, development and education. What's New Bug Fixes The following vulnerabilities have been fixed. o wnpa-sec-2012-11 The PPP dissector could crash. (Debian bug 680056) Versions affected: 1.4.0 to 1.4.13, 1.6.0 to 1.6.8, 1.8.0. o wnpa-sec-2012-12 The NFS dissector could use excessive amounts of CPU. (Bug 7436) Versions affected: 1.4.0 to 1.4.13, 1.6.0 to 1.6.8, 1.8.0. The following bugs have been fixed: o Cannot run tshark under TCP using decode-as format for syslog. (Bug 5241) o Unable to reassemble EAP-TLS fragments across multiple RADIUS packets (works on 1.2.15). (Bug 5735) o Rearranging columns in preferences doesn't work on 64-bit Windows. (Bug 6077) o Incorrect PER UNALIGNED decoding of IA5String. (Bug 6246) o After fix for Bug 3046, after save-as then open you cannot see the packet list. (Bug 6640) o Problem with Floating point (double-precision). (Bug 6917) o Unhandled exception ( group=1, code=4) occurs when trying to capture in pdml file. (Bug 7333) o Netscreen - Can't parse packet-header. (Bug 7340) o Assignment Request message is not decoded after Service handover parameter. (Bug 7360) o Wireshark fails to link because of missing &lt; at &gt;GLIB_LIBS&lt; at &gt; reference in Makefile.am. (Bug 7427) o Wireshark &gt; 1.4 does not correctly read Association ID for PS Poll packets. (Bug 7429) o SNMP incorrectly marks SNMPv3 "discovery" packet as malformed. (Bug 7438) New and Updated Features There are no new features in this release. New Protocol Support There are no new protocols in this release. Updated Protocol Support ASN.1 PER, DIAMETER, GSM BSSMAP, IEEE 802.11, MNDP, NFS, PPP, RADIUS, SNMP, Syslog, UDP-Lite, VMLAB, WiMax DL-MAP, WiMax UL-MAP New and Updated Capture File Support Juniper NetScreen Getting Wireshark Wireshark source code and installation packages are available from http://www.wireshark.org/download.html. Vendor-supplied Packages Most Linux and Unix vendors supply their own Wireshark packages. You can usually install or upgrade Wireshark using the package management system specific to that platform. A list of third-party packages can be found on the download page on the Wireshark web site. File Locations Wireshark and TShark look in several different locations for preference files, plugins, SNMP MIBS, and RADIUS dictionaries. These locations vary from platform to platform. You can use About→Folders to find the default locations on your system. Known Problems Wireshark might make your system disassociate from a wireless network on OS X 10.4. (Bug 1315) Dumpcap might not quit if Wireshark or TShark crashes. (Bug 1419) The BER dissector might infinitely loop. (Bug 1516) Capture filters aren't applied when capturing from named pipes. (Bug 1814) Filtering tshark captures with display filters (-R) no longer works. (Bug 2234) The 64-bit Windows installer does not ship with libsmi. (Win64 development page) "Closing File!" Dialog Hangs. (Bug 3046) Application crash when changing real-time option. (Bug 4035) Hex pane display issue after startup. (Bug 4056) Packet list rows are oversized. (Bug 4357) Summary pane selected frame highlighting not maintained. (Bug 4445) Wireshark and TShark will display incorrect delta times when displayed as a custom column. (Bug 4985) Getting Help Community support is available on Wireshark's Q&amp;A site and on the wireshark-users mailing list. Subscription information and archives for all of Wireshark's mailing lists can be found on the web site. Official Wireshark training and certification are available from Wireshark University. Frequently Asked Questions A complete FAQ is available on the Wireshark web site. Digests wireshark-1.6.9.tar.bz2: 22012780 bytes MD5(wireshark-1.6.9.tar.bz2)=68c838117e9a3cda5c3ac159fde04dd4 SHA1(wireshark-1.6.9.tar.bz2)=7e86dfc93e38faf907b105c35c76ba3e2f31a8b4 RIPEMD160(wireshark-1.6.9.tar.bz2)=32b91d0c4724ca876d06fc50fdc7f647eb9220d7 wireshark-win64-1.6.9.exe: 21932474 bytes MD5(wireshark-win64-1.6.9.exe)=624dbc8dcbbac58e24a6f11e3f273251 SHA1(wireshark-win64-1.6.9.exe)=9d6cdd1ef427cb9df5e327a6065dba766a5a8355 RIPEMD160(wireshark-win64-1.6.9.exe)=a6b2c0b55de65a325b0ed0251731b2542ff1a32c wireshark-win32-1.6.9.exe: 18819264 bytes MD5(wireshark-win32-1.6.9.exe)=7f31c5ad3f98a74b1221e4c90e3c835c SHA1(wireshark-win32-1.6.9.exe)=1738cc63756d8294abaaad77ffbeff245548c143 RIPEMD160(wireshark-win32-1.6.9.exe)=8a7e6831b47eed3ec0e0ea873b7d921b0c9824d6 wireshark-1.6.9.u3p: 25305301 bytes MD5(wireshark-1.6.9.u3p)=e1dcff5e797315c435a4e5c3bc30d720 SHA1(wireshark-1.6.9.u3p)=ced5ab19e0816ae734ac82ace1a64460cd4e602c RIPEMD160(wireshark-1.6.9.u3p)=10242d9a0d4bcbf54e1c73e48e9d09ea6c0d0acb WiresharkPortable-1.6.9.paf.exe: 19691157 bytes MD5(WiresharkPortable-1.6.9.paf.exe)=c92e6c9c5e25f5287c002deb2e8ea7d2 SHA1(WiresharkPortable-1.6.9.paf.exe)=6eadbb3d50e23dc62339fbc6f7fce76a37b5a392 RIPEMD160(WiresharkPortable-1.6.9.paf.exe)=efb3205753bc68ead05f17e5018f3e1b9ca9c905 Wireshark 1.6.9 Intel 32.dmg: 20554057 bytes MD5(Wireshark 1.6.9 Intel 32.dmg)=0cd34bd5532c2f7d9b638d7cd174d67f SHA1(Wireshark 1.6.9 Intel 32.dmg)=1ce57a9fff50142833bc841cee46a6f482bc1ea3 RIPEMD160(Wireshark 1.6.9 Intel 32.dmg)=8d66a2f6748dcc5d331fd125e4cc0d39027f16cc Wireshark 1.6.9 PPC 32.dmg: 21237708 bytes MD5(Wireshark 1.6.9 PPC 32.dmg)=b3256dcdb99d79d03c0dcc7dd0408d87 SHA1(Wireshark 1.6.9 PPC 32.dmg)=419f4557353fcfa98c7c5309762eeb00133745cf RIPEMD160(Wireshark 1.6.9 PPC 32.dmg)=ae4afe34ce8bf6774f28fd8713a36df54883dee7 Wireshark 1.6.9 Intel 64.dmg: 20351428 bytes MD5(Wireshark 1.6.9 Intel 64.dmg)=3d849aa2fd4b578335441416789a82c0 SHA1(Wireshark 1.6.9 Intel 64.dmg)=8f2300b9c4d4d8ef3cdb84ae352fffc837ad64d2 RIPEMD160(Wireshark 1.6.9 Intel 64.dmg)=6084db5fe11d71bfa7ba75fc7ef16f37a5968911 patch-wireshark-1.6.8-to-1.6.9.diff.bz2: 152472 bytes MD5(patch-wireshark-1.6.8-to-1.6.9.diff.bz2)=db84d4defcb414f8eeebeee91b3bb0fa SHA1(patch-wireshark-1.6.8-to-1.6.9.diff.bz2)=11ec07024dde7db88dd37551c68de84c29f07253 RIPEMD160(patch-wireshark-1.6.8-to-1.6.9.diff.bz2)=55d9a1e27fe00fa29f67415b8f377710ba3d6487 -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.11 (Darwin) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ iEYEARECAAYFAlAN7cAACgkQpw8IXSHylJoaUACfdmh5CtjDcjIGBhTVoox6yShy 4b0An31VGB86MpqtFccQAfLhQOnm7hn4 =1RP/ -----END PGP SIGNATURE----- ___________________________________________________________________________ Sent via: Wireshark-announce mailing list &lt;wireshark-announce&lt; at &gt;wireshark.org&gt; Archives: http://www.wireshark.org/lists/wireshark-announce Unsubscribe: https://wireshark.org/mailman/options/wireshark-announce mailto:wireshark-announce-request&lt; at &gt;wireshark.org?subject=unsubscribe</pre> Wireshark announcements 2012-07-24T00:35:13 Wireshark 1.8.1 is now available http://comments.gmane.org/gmane.network.wireshark.announce/110 <pre>-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 I'm proud to announce the release of Wireshark 1.8.1. What is Wireshark? Wireshark is the world's most popular network protocol analyzer. It is used for troubleshooting, analysis, development and education. What's New Bug Fixes The following vulnerabilities have been fixed. o wnpa-sec-2012-11 The PPP dissector could crash. (Debian bug 680056) Versions affected: 1.4.0 to 1.4.13, 1.6.0 to 1.6.8, 1.8.0. o wnpa-sec-2012-12 The NFS dissector could use excessive amounts of CPU. (Bug 7436) Versions affected: 1.4.0 to 1.4.13, 1.6.0 to 1.6.8, 1.8.0. The following bugs have been fixed: o Wireshark crashes on bootp filter. (Bug 7391) o Wireshark &gt; 1.4 does not correctly read Association ID for PS Poll packets. (Bug 7429) o Radius-EAP broken since 1.8.0 release. (Bug 7430) o SNMP incorrectly marks SNMPv3 "discovery" packet as malformed. (Bug 7438) o Widgets are not properly expanded in GTK3. (Bug 7377) o Find Next Mark duplicated on Edit Menu. (Bug 7445) o DVB-CI/CI+: fix offset error in operator_info apdu. (Bug 7468) o Unable to correctly identify IEC 61850 MMS packets. (Bug 7488) o WinPcap doesn't install if vcredist_x64 requires reboot. (Bug 7507) New and Updated Features There are no new features in this release. New Protocol Support There are no new protocols in this release. Updated Protocol Support BACapp, BOOTP, DCERPC SPOOLSS, DVB-CI, H.248, IEEE 802.11, Jmirror, NAS EPS, NFS, PPP, RELOAD Framing, SES, SNMP, XMPP New and Updated Capture File Support Microsoft Network Monitor Getting Wireshark Wireshark source code and installation packages are available from http://www.wireshark.org/download.html. Vendor-supplied Packages Most Linux and Unix vendors supply their own Wireshark packages. You can usually install or upgrade Wireshark using the package management system specific to that platform. A list of third-party packages can be found on the download page on the Wireshark web site. File Locations Wireshark and TShark look in several different locations for preference files, plugins, SNMP MIBS, and RADIUS dictionaries. These locations vary from platform to platform. You can use About→Folders to find the default locations on your system. Known Problems Dumpcap might not quit if Wireshark or TShark crashes. (Bug 1419) The BER dissector might infinitely loop. (Bug 1516) Capture filters aren't applied when capturing from named pipes. (Bug 1814) Filtering tshark captures with display filters (-R) no longer works. (Bug 2234) The 64-bit Windows installer does not support Kerberos decryption. (Win64 development page) Application crash when changing real-time option. (Bug 4035) Hex pane display issue after startup. (Bug 4056) Packet list rows are oversized. (Bug 4357) Summary pane selected frame highlighting not maintained. (Bug 4445) Wireshark and TShark will display incorrect delta times in some cases. (Bug 4985) Getting Help Community support is available on Wireshark's Q&amp;A site and on the wireshark-users mailing list. Subscription information and archives for all of Wireshark's mailing lists can be found on the web site. Official Wireshark training and certification are available from Wireshark University. Frequently Asked Questions A complete FAQ is available on the Wireshark web site. Digests wireshark-1.8.1.tar.bz2: 24125571 bytes MD5(wireshark-1.8.1.tar.bz2)=629fe03f4a64eb8c7bd9308ee4e22e2e SHA1(wireshark-1.8.1.tar.bz2)=84afa59ff6af6493ce365860d23da986452013ea RIPEMD160(wireshark-1.8.1.tar.bz2)=f1c466f75252173157d9fea4bf75725169b2cc59 Wireshark-win32-1.8.1.exe: 20918820 bytes MD5(Wireshark-win32-1.8.1.exe)=af7aed36c52e037460bc79a7346e8d36 SHA1(Wireshark-win32-1.8.1.exe)=cd26228e5cb51dc3abb541cf94e2f1e9a7c58634 RIPEMD160(Wireshark-win32-1.8.1.exe)=0f14a864beed78141bd05800ad08a51b4583a534 Wireshark-win64-1.8.1.exe: 26585203 bytes MD5(Wireshark-win64-1.8.1.exe)=d9dd54ca8f739aad36cbcd405ad3a23d SHA1(Wireshark-win64-1.8.1.exe)=b473c84cf2b5f4f123c0d4f291379dfb8f15bd08 RIPEMD160(Wireshark-win64-1.8.1.exe)=bb076e577117194499499514d6016cf93c512c70 Wireshark-1.8.1.u3p: 28307531 bytes MD5(Wireshark-1.8.1.u3p)=94a348b23be16b2f9cf841dbf61238e5 SHA1(Wireshark-1.8.1.u3p)=8e9d15a935ff853215850da35d2db2b05e28c582 RIPEMD160(Wireshark-1.8.1.u3p)=336477891c9d7170f0768f69eb172ee2666682de WiresharkPortable-1.8.1.paf.exe: 21941775 bytes MD5(WiresharkPortable-1.8.1.paf.exe)=c4a26c65db2210dfe062e69fb44cf879 SHA1(WiresharkPortable-1.8.1.paf.exe)=7aef1e5e035a587d3eaeeb644de6d64648a4af11 RIPEMD160(WiresharkPortable-1.8.1.paf.exe)=cec1cd0604c933aad9139d5ba4ab97b2d195095d Wireshark 1.8.1 Intel 64.dmg: 21759691 bytes MD5(Wireshark 1.8.1 Intel 64.dmg)=efeb45308c8dd9be0de55c87beb31c08 SHA1(Wireshark 1.8.1 Intel 64.dmg)=9b0e068a8a2630a848dfa03ba76f2df948b9dafa RIPEMD160(Wireshark 1.8.1 Intel 64.dmg)=9dfb752c5130a014733d8301c0d57cc3a49051e9 Wireshark 1.8.1 PPC 32.dmg: 22863806 bytes MD5(Wireshark 1.8.1 PPC 32.dmg)=741dc8cfbc530003d1c3e55b75e7d5a5 SHA1(Wireshark 1.8.1 PPC 32.dmg)=2d0872b5869bf8b267d42891e539b5c18313b054 RIPEMD160(Wireshark 1.8.1 PPC 32.dmg)=b96fa6f1d7414ad7e782d9b8dc2ee0b0ca6dcf98 Wireshark 1.8.1 Intel 32.dmg: 22069774 bytes MD5(Wireshark 1.8.1 Intel 32.dmg)=a3ad916646f51c0bd5abc4e0155f36af SHA1(Wireshark 1.8.1 Intel 32.dmg)=010ba1007bbf40353586dcac7be703f399efbba9 RIPEMD160(Wireshark 1.8.1 Intel 32.dmg)=05c34e3d650f65678774ec5088d7fd45a1bd8250 patch-wireshark-1.8.0-to-1.8.1.diff.bz2: 447041 bytes MD5(patch-wireshark-1.8.0-to-1.8.1.diff.bz2)=fc3eb0013cc91d639990af8ad8b10801 SHA1(patch-wireshark-1.8.0-to-1.8.1.diff.bz2)=f2beeddd235c6bfcf8a1f297264e2df12245c5e3 RIPEMD160(patch-wireshark-1.8.0-to-1.8.1.diff.bz2)=355b64e17dc1d766dc030a1251ac51bafaf3ca14 -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.11 (Darwin) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ iEYEARECAAYFAlAN7TcACgkQpw8IXSHylJpbowCgx/vhZ3JMr5aQGce6kjxWKSMf 6uwAoK8gc/gr89mE2pgQuPUDCDCKzWoz =r6X7 -----END PGP SIGNATURE----- ___________________________________________________________________________ Sent via: Wireshark-announce mailing list &lt;wireshark-announce&lt; at &gt;wireshark.org&gt; Archives: http://www.wireshark.org/lists/wireshark-announce Unsubscribe: https://wireshark.org/mailman/options/wireshark-announce mailto:wireshark-announce-request&lt; at &gt;wireshark.org?subject=unsubscribe</pre> Wireshark announcements 2012-07-24T00:32:56 Wireshark-bug http://comments.gmane.org/gmane.network.wireshark.announce/109 <pre>Hi All, Can anyone help me to resolve the following issue? When do I run Wireshark on Linux machine compilation goes fine but after opening the GUI with any pcap file, background I am getting these error messages? So what I have to do to remove these issue. (dopa:20255): Gtk-CRITICAL **: gtk_menu_attach_to_widget: assertion `GTK_IS_MENU (menu)' failed (dopa:4159): Gtk-CRITICAL **: gtk_tree_model_iter_n_children: assertion `GTK_IS_TREE_MODEL (tree_model)' failed (dopa:6369): Gtk-CRITICAL **: gtk_menu_shell_insert: assertion `GTK_IS_MENU_SHELL (menu_shell)' failed (dopa:6369): Gtk-CRITICAL **: gtk_widget_show: assertion `GTK_IS_WIDGET (widget)' failed (dopa:6369): Gtk-CRITICAL **: gtk_widget_show: assertion `GTK_IS_WIDGET (widget)' failed Thanks Chandan ~~~~~~~ ___________________________________________________________________________ Sent via: Wireshark-announce mailing list &lt;wireshark-announce-IZ8446WsY0/dtAWm4Da02A&lt; at &gt;public.gmane.org&gt; Archives: http://www.wireshark.org/lists/wireshark-announce Unsubscribe: https://wireshark.org/mailman/options/wireshark-announce mailto:wireshark-announce-request-IZ8446WsY0/dtAWm4Da02A&lt; at &gt;public.gmane.org?subject=unsubscribe</pre> Wireshark announcements 2012-07-18T12:05:16 Wireshark 1.8.0 is now available http://comments.gmane.org/gmane.network.wireshark.announce/108 <pre>-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 I'm proud to announce the release of Wireshark 1.8.0. What is Wireshark? Wireshark is the world's most popular network protocol analyzer. It is used for troubleshooting, analysis, development and education. What's New Bug Fixes The following bugs have been fixed: o When saving the displayed packets, packets which are dependencies (e.g., due to reassembly) of the displayed packets are included in the list of saved packets (Bug 3315). o Rearranging columns in preferences doesn't work on 64-bit Windows. (Bug 6077) New and Updated Features The following features are new (or have been significantly updated) since version 1.6: o Wireshark supports capturing from multiple interfaces at once. o You can now add, edit, and save packet and capture file annotations. o Wireshark, TShark, and their associated utilities now save files using the pcap-ng file format by default. (Your copy of Wireshark might still use the pcap file format if pcap-ng is disabled in your preferences.) o Decryption key management for IEEE 802.11, IPsec, and ISAKMP is easier. o OID resolution is now supported on 64-bit Windows. o The "Save As" menu item has been split into "Save As", which lets you save a file using a different filename and "Export Specified Packets", which lets you have more control over which packets are saved. o TCP fast retransmissions are now indicated as an expert info note, rather than a warning, just as TCP retransmissions are. o TCP window updates are no longer colorized as "Bad TCP". o TShark's command-line options have changed. The previously undocumented -P option is now -2 option for performing a two-pass analysis; the former -S option is now the -P option for printing packets even if writing to a file, and the -S option is now used to specify a different line separator between packets. o GeoIP IPv6 databases are now supported. New Protocol Support Aastra Signalling Protocol (AASP), ActiveMQ OpenWire, Bandwidth Reservation Protocol (BRP), Bazaar, Binary Floor Control Protocol, BitTorrent DHT, C12.22, CANopen, CIP Motion, CIP Safety, Cisco FabricPath MiM, DMX Channel Data, DMX SIP, DMX Test, DMX Text, DMX, DVB Application Information Table, DVB Bouquet Association Table, DVB Event Information Table, DVB MultiProtocol Encapsulation (DVB-MPE), DVB Network Information Table, DVB Service Description Table, DVB Time and Date Table, DVB Time Offset Table, DVB/ETSI IP Data Cast (IPDC) Electronic Service Guide (ESG), ECP VDP, EIA-709.1 (LonTalk), EIA-852 (CN/IP), ELCOM, Ericsson A-bis OML (OM 2000), Ericsson HDLC, Ericsson Proprietary PCAP, ETSI CAT, ETV-AM Data, ETV-AM EISS Section, Flight Message Transfer Protocol (FMTP), Gadu-Gadu, GEO-Mobile Radio (1) BCCH, GEO-Mobile Radio (1) Common, GEO-Mobile Radio (1) DTAP, GEO-Mobile Radio (1) Radio Resource, Gluster Callback, Gluster CLI, Gluster Dump, Gluster Portmap, GlusterD, GlusterFS Callback, GlusterFS Handshake, GlusterFS, GSM A-bis OML, GSM CBCH, GSM Cell Broadcast Service, GSM SIM, H.248.2, Hadoop Distributed File System (HDFS), HART/IP, Hazelcast, HDFS Data, High bandwidth Digital Content Protection (HDCP), High-availability Seamless Redundancy (HSR), HomePlug AV, HSR/PRP, IEEE 1722.1, ISO 7816, ixveriwave, Kismet drone/server protocol, KristalliNet, LCS-AP, Link Access Procedure, Satellite channel (LAPSat), LLRP, LTE Positioning Protocol A (LPPa), LTE Positioning Protocol, M3 Application Protocol (M3AP), MAC Address Acquisition Protocol, MBMS synchronisation protocol, Microsoft Credential Security Support Provider (CredSSP), MoldUDP, MoldUDP64, MPEG Conditional Access, MPEG descriptors, MPEG DSM-CC, MPEG Program Association Table (PAT), MPEG Program Map Table, MPEG Section, MPLS Packet Loss and Delay Measurement, MPLS-TP Protection State Coordination, Multiple VLAN Registration Protocol (MRVP), Netfilter LOG, NOE, NXP MiFare, NXP PN532, Open IPTV Forum openSAFETY, Performance Co-Pilot (PCP), PPI Sensor, RDP, RTP-MIDI, SBc Application Part (SBc-AP), SDH/SONET, Solaris IP over InfiniBand, Sony FeliCa, T.124, UA (Universal Alcatel), UA3G, UASIP, UAUDP, USB Integrated Circuit Card Interface Device Class (CCID), V5 Data Link Layer (V5DL), V5 Envelope Function (V5EF), Virtual eXtensible Local Area Network (VXLAN), VSS-Monitoring, Vuze DHT, WaveAgent, WebSocket, WSE Remote Ethernet, XMCP, YAMI Updated Protocol Support Too many protocols have been updated to list here. New and Updated Capture File Support Aethra Telecommunications' PC108, Catapult DCT2000, Citrix NetScaler, Cisco Secure IDS IPLog, Endace ERF, Gammu DCT3, Generic MIME, IBM iSeries, InfoVista 5View, Ixia IxVeriWave, LANalyzer, Microsoft NetMon, MPEG2-TS, Network Instruments Observer, Nokia DCT3, pcap, pcap-ng, Solaris snoop, TamoSoft CommView, Tektronix K12xx, XML Getting Wireshark Wireshark source code and installation packages are available from http://www.wireshark.org/download.html. Vendor-supplied Packages Most Linux and Unix vendors supply their own Wireshark packages. You can usually install or upgrade Wireshark using the package management system specific to that platform. A list of third-party packages can be found on the download page on the Wireshark web site. File Locations Wireshark and TShark look in several different locations for preference files, plugins, SNMP MIBS, and RADIUS dictionaries. These locations vary from platform to platform. You can use About→Folders to find the default locations on your system. Known Problems Dumpcap might not quit if Wireshark or TShark crashes. (Bug 1419) The BER dissector might infinitely loop. (Bug 1516) Capture filters aren't applied when capturing from named pipes. (Bug 1814) Filtering tshark captures with display filters (-R) no longer works. (Bug 2234) The 64-bit Windows installer does not support Kerberos decryption. (Win64 development page) Application crash when changing real-time option. (Bug 4035) Hex pane display issue after startup. (Bug 4056) Packet list rows are oversized. (Bug 4357) Summary pane selected frame highlighting not maintained. (Bug 4445) Wireshark and TShark will display incorrect delta times in some cases. (Bug 4985) Getting Help Community support is available on Wireshark's Q&amp;A site and on the wireshark-users mailing list. Subscription information and archives for all of Wireshark's mailing lists can be found on the web site. Official Wireshark training and certification are available from Wireshark University. Frequently Asked Questions A complete FAQ is available on the Wireshark web site. Digests wireshark-1.8.0.tar.bz2: 24425043 bytes MD5(wireshark-1.8.0.tar.bz2)=3eca81253800a0089d0f957e75853b05 SHA1(wireshark-1.8.0.tar.bz2)=d45b2828fc6dfac697f752f146e6cf43f4776047 RIPEMD160(wireshark-1.8.0.tar.bz2)=944f2ef662fc432ce0ab22f9efd9195366fc1763 Wireshark-win32-1.8.0.exe: 20912453 bytes MD5(Wireshark-win32-1.8.0.exe)=1e791b80e0693e174c6666930b0728a9 SHA1(Wireshark-win32-1.8.0.exe)=86a8b46131107e5a6f776e71720987601ac30f8b RIPEMD160(Wireshark-win32-1.8.0.exe)=107670574e31d516913fadd1be6bf01bb0a29dcf Wireshark-win64-1.8.0.exe: 26586887 bytes MD5(Wireshark-win64-1.8.0.exe)=f4af66f8654c8c9cdee33f5e53cccd7a SHA1(Wireshark-win64-1.8.0.exe)=5813b3e271f1a384025dcc668aff951fd2a44079 RIPEMD160(Wireshark-win64-1.8.0.exe)=06afb6dda4820f29f331eb6ee31288e439931c9d Wireshark-1.8.0.u3p: 28304605 bytes MD5(Wireshark-1.8.0.u3p)=6845ebd34214d949b689b430b7df49f2 SHA1(Wireshark-1.8.0.u3p)=f584e077d59ba319c7b51252f097f44e07f1a40a RIPEMD160(Wireshark-1.8.0.u3p)=a19ecafac4404a6246ab2a81d21c5150cdc9c771 WiresharkPortable-1.8.0.paf.exe: 21936447 bytes MD5(WiresharkPortable-1.8.0.paf.exe)=d24f627c35c9a5e989c67b615f90f4f9 SHA1(WiresharkPortable-1.8.0.paf.exe)=f2c8789423ef90ba4b4f168fe2da1c90faaa62c6 RIPEMD160(WiresharkPortable-1.8.0.paf.exe)=2a80a4a3273e2ba249ea5906786edf39c834a80e Wireshark 1.8.0 Intel 64.dmg: 21751295 bytes MD5(Wireshark 1.8.0 Intel 64.dmg)=a374ef78040e9fc0aa8d915d9fffa67b SHA1(Wireshark 1.8.0 Intel 64.dmg)=246cd331ca2340bc0c09f4fc362d2b7cba7e941c RIPEMD160(Wireshark 1.8.0 Intel 64.dmg)=deca3031880550bbb9dee78dfe87ec6893ea421b Wireshark 1.8.0 Intel 32.dmg: 22072614 bytes MD5(Wireshark 1.8.0 Intel 32.dmg)=364b6314c78c14b95f507ba5b2a6eedd SHA1(Wireshark 1.8.0 Intel 32.dmg)=50c3a430c369626261a3fb7c9203baaa00cfb314 RIPEMD160(Wireshark 1.8.0 Intel 32.dmg)=ded63745be4548de3e60e215c18ed38587b7d53a Wireshark 1.8.0 PPC 32.dmg: 22848679 bytes MD5(Wireshark 1.8.0 PPC 32.dmg)=c17bb8191435f2ee3849cc75d20a6f7e SHA1(Wireshark 1.8.0 PPC 32.dmg)=a3f24904d226eea6ee7c74e2b878c59e77793cb9 RIPEMD160(Wireshark 1.8.0 PPC 32.dmg)=7aa470c0ad315eec55cc1adb1fc165f199ea0bdf -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.11 (Darwin) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ iEYEARECAAYFAk/jjvsACgkQpw8IXSHylJrpzQCgm3XTBqsY3XJz1xs8D9hpFdeF L5MAoMcA1dhPItLcvIKo3j6JFkjU5paO =LDqG -----END PGP SIGNATURE----- ___________________________________________________________________________ Sent via: Wireshark-announce mailing list &lt;wireshark-announce&lt; at &gt;wireshark.org&gt; Archives: http://www.wireshark.org/lists/wireshark-announce Unsubscribe: https://wireshark.org/mailman/options/wireshark-announce mailto:wireshark-announce-request&lt; at &gt;wireshark.org?subject=unsubscribe</pre> Wireshark announcements 2012-06-21T21:15:39 Wireshark 1.8.0rc2 is now available http://comments.gmane.org/gmane.network.wireshark.announce/107 <pre>-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 I'm proud to announce the release of Wireshark 1.8.0rc2. This is the second release candidate for Wireshark 1.8.0. What is Wireshark? Wireshark is the world's most popular network protocol analyzer. It is used for troubleshooting, analysis, development and education. What's New New and Updated Features The following features are new (or have been significantly updated) since version 1.6: o Wireshark supports capturing from multiple interfaces at once. o You can now add, edit, and save packet annotations. o Wireshark, TShark, and their associated utilities now save files using the pcap-ng file format by default. (Your copy of Wireshark might still use the pcap file format if pcap-ng is disabled in your preferences.) o Decryption key management for IEEE 802.11, IPsec, and ISAKMP is easier. o OID resolution is now supported on 64-bit Windows. o When saving packets, the default choice is now to save only the displayed packets rather than all packets. o TCP fast retransmissions are now indicated as an expert info note, rather than a warning, just as TCP retransmissions are. o TCP window updates are no longer colorized as "Bad TCP". o TShark's command-line options have changed. The previously undocumented -P option is now -2 option for performing a two-pass analysis; the former -S option is now the -P option for printing packets even if writing to a file, and the -S option is now used to specify a different line separator between packets. o GeoIP IPv6 databases are now supported. Digests wireshark-1.8.0rc2.tar.bz2: 24420300 bytes MD5(wireshark-1.8.0rc2.tar.bz2)=0825453dd1f40fb9a31e5a30adc7e3a5 SHA1(wireshark-1.8.0rc2.tar.bz2)=79c8d6c1eb55487efe06603d983d328f2994f3d4 RIPEMD160(wireshark-1.8.0rc2.tar.bz2)=017d2561d7fe2c7d0170ca5142cf79382d8e6555 Wireshark-win32-1.8.0rc2.exe: 20909890 bytes MD5(Wireshark-win32-1.8.0rc2.exe)=1f52ef1f616d4f46703d0ad75a2a9b58 SHA1(Wireshark-win32-1.8.0rc2.exe)=95e0f6bf3d9552faf3ed983794236a41960a6c41 RIPEMD160(Wireshark-win32-1.8.0rc2.exe)=873453d0df6fa62e4985849fc6b6b5878db24896 Wireshark-win64-1.8.0rc2.exe: 26584247 bytes MD5(Wireshark-win64-1.8.0rc2.exe)=b939b76c3409c9144eebaea9c1fe9c23 SHA1(Wireshark-win64-1.8.0rc2.exe)=95df489f0299074297444a3515025626663ed40d RIPEMD160(Wireshark-win64-1.8.0rc2.exe)=de17dde21dd0e5fe8a64a82b3a05a692bc25989b Wireshark-1.8.0rc2.u3p: 28310037 bytes MD5(Wireshark-1.8.0rc2.u3p)=7638d48171c21fd6255e4a13111123ef SHA1(Wireshark-1.8.0rc2.u3p)=bfbeb17e4b3987ad7d4b2c44310b07ad15606e1e RIPEMD160(Wireshark-1.8.0rc2.u3p)=5428641806389f2817b8dde037d2e65490fff1dc WiresharkPortable-1.8.0rc2.paf.exe: 21939790 bytes MD5(WiresharkPortable-1.8.0rc2.paf.exe)=be749812e821a26ecb94b2178fc6add5 SHA1(WiresharkPortable-1.8.0rc2.paf.exe)=c49e9732ab1d72bb54ec550577813025023e263f RIPEMD160(WiresharkPortable-1.8.0rc2.paf.exe)=322b247b016c5b0e5f6aacfc60bd30be84a723a3 Wireshark 1.8.0rc2 Intel 64.dmg: 21757853 bytes MD5(Wireshark 1.8.0rc2 Intel 64.dmg)=07dc7c25df08e741b274e98fe41b160a SHA1(Wireshark 1.8.0rc2 Intel 64.dmg)=fe72889f87262cdc5d0e19e0574cce9e321735b8 RIPEMD160(Wireshark 1.8.0rc2 Intel 64.dmg)=bfd8225d7886b924bf7a6aa157ead5e3f7a8f59e Wireshark 1.8.0rc2 Intel 32.dmg: 22078159 bytes MD5(Wireshark 1.8.0rc2 Intel 32.dmg)=ad91620122e29f54679a8b9949d37636 SHA1(Wireshark 1.8.0rc2 Intel 32.dmg)=1d4efa08181c955e3bee3353dd089522fb0f72e9 RIPEMD160(Wireshark 1.8.0rc2 Intel 32.dmg)=b7fbfacd552182027d8cc8f7223cee4b185b9402 Wireshark 1.8.0rc2 PPC 32.dmg: 22856306 bytes MD5(Wireshark 1.8.0rc2 PPC 32.dmg)=e777163ae0145c509cf09b9f08dad85d SHA1(Wireshark 1.8.0rc2 PPC 32.dmg)=cffc2b7ab5c026c1ad2b1448337c5af7bb258c1a RIPEMD160(Wireshark 1.8.0rc2 PPC 32.dmg)=a048b20c83f50da8ee5ef448111833ff7324e84d -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.11 (Darwin) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ iEYEARECAAYFAk/fnGYACgkQpw8IXSHylJpF9wCfRU64uKc0AZKLswI82/0P4pjl P1sAn2VJ+QAzqDk0KA8itcX1dgo7x7nW =8ESu -----END PGP SIGNATURE----- ___________________________________________________________________________ Sent via: Wireshark-announce mailing list &lt;wireshark-announce-IZ8446WsY0/dtAWm4Da02A&lt; at &gt;public.gmane.org&gt; Archives: http://www.wireshark.org/lists/wireshark-announce Unsubscribe: https://wireshark.org/mailman/options/wireshark-announce mailto:wireshark-announce-request-IZ8446WsY0/dtAWm4Da02A&lt; at &gt;public.gmane.org?subject=unsubscribe </pre> Wireshark announcements 2012-06-18T21:23:51 Search Engine Search the mailing list at Gmane query http://search.gmane.org/?group=$group=gmane.network.wireshark.announce