2 <!DOCTYPE article PUBLIC "-//OASIS//DTD DocBook XML V4.2//EN"
3 "http://www.oasis-open.org/docbook/xml/4.2/docbookx.dtd" [
9 -Use this section to encode all document information
15 <!ENTITY WiresharkCurrentVersion "1.7.1">
20 <title>Wireshark &WiresharkCurrentVersion; Release Notes</title>
22 <section id="WhatIs"><title>What is Wireshark?</title>
24 Wireshark is the world's most popular network protocol analyzer. It
25 is used for troubleshooting, analysis, development and education.
29 <section id="WhatsNew"><title>What's New</title>
30 <section id="BugFixes"><title>Bug Fixes</title>
34 The following bugs have been fixed:
38 <!-- Sort by bug # -->
41 Wireshark will strip the paint off your car, then apply a hideous
42 flame job to the hood and fenders using gray, red, and black primer.
43 (<ulink url="https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=0000">Bug
58 <section id="NewFeatures"><title>New and Updated Features</title>
60 The following features are new (or have been significantly updated)
67 Wireshark supports capturing from multiple interfaces at once.
73 You can now add, edit, and save packet annotations.
79 Wireshark, TShark, and their associated utilities now save files
80 using the pcap-ng file format by default. (Your copy of Wireshark
81 might still use the pcap file format if pcap-ng is disabled in
88 Decryption key management for IEEE 802.11, IPsec, and ISAKMP
95 OID resolution is now supported on 64-bit Windows.
101 When saving packets, the default choice is now to save
102 only the displayed packets rather than all packets.
108 TCP fast retransmissions are now indicated as an expert info note,
109 rather than a warning, just as TCP retransmissions are.
115 TCP window updates are no longer colorized as "Bad TCP".
121 TShark's command-line options have changed. The previously
122 undocumented -P option is now -2 option for performing a two-pass
123 analysis; the former -S option is now the -P option for printing
124 packets even if writing to a file, and the -S option is now used to
125 specify a different line separator between packets.
131 GeoIP IPv6 databases are now supported.
140 <section id="NewProtocols"><title>New Protocol Support</title>
143 <!-- Sorted, one per line -->
145 Aastra Signalling Protocol (AASP),
147 Bandwidth Reservation Protocol (BRP),
154 Cisco FabricPath MiM,
155 DVB Bouquet Association Table,
156 DVB Event Information Table,
157 DVB MultiProtocol Encapsulation (DVB-MPE),
158 DVB Network Information Table,
159 DVB Service Description Table,
160 DVB Time and Date Table,
161 DVB Time Offset Table,
162 DVB/ETSI IP Data Cast (IPDC) Electronic Service Guide (ESG),
167 Ericsson A-bis OML (OM 2000),
169 Ericsson Proprietary PCAP,
173 Flight Message Transfer Protocol (FMTP),
175 GEO-Mobile Radio (1) BCCH,
176 GEO-Mobile Radio (1) Common,
177 GEO-Mobile Radio (1) DTAP,
178 GEO-Mobile Radio (1) Radio Resource,
181 GSM Cell Broadcast Service,
184 Hadoop Distributed File System (HDFS),
188 High bandwidth Digital Content Protection (HDCP),
189 High-availability Seamless Redundancy (HSR),
193 Kismet drone/server protocol,
196 Link Access Procedure, Satellite channel (LAPSat),
197 LTE Positioning Protocol A (LPPa),
198 LTE Positioning Protocol,
199 M3 Application Protocol (M3AP),
200 MAC Address Acquisition Protocol,
201 Microsoft Credential Security Support Provider (CredSSP),
202 MPEG Conditional Access,
205 MPEG Program Association Table (PAT),
206 MPEG Program Map Table,
208 MPLS Packet Loss and Delay Measurement,
209 MPLS-TP Protection State Coordination,
210 Multiple VLAN Registration Protocol (MRVP),
216 Performance Co-Pilot (PCP),
220 SBc Application Part (SBc-AP),
221 Solaris IP over InfiniBand,
224 UA (Universal Alcatel),
228 USB Integrated Circuit Card Interface Device Class (CCID),
229 V5 Data Link Layer (V5DL),
230 V5 Envelope Function (V5EF),
231 Virtual eXtensible Local Area Network (VXLAN),
239 <section id="UpdatedProtocols"><title>Updated Protocol Support</title> <para>
241 Too many protocols have been updated to list here.
246 <section id="NewCapture"><title>New and Updated Capture File Support</title>
249 <!-- Sorted, one per line -->
251 Aethra Telecommunications' PC108,
260 Network Instruments Observer,
273 <section id="GettingWireshark"><title>Getting Wireshark</title>
275 Wireshark source code and installation packages are available from
276 <ulink url="http://www.wireshark.org/download.html">http://www.wireshark.org/download.html</ulink>.
279 <section id="VendorPackages"><title>Vendor-supplied Packages</title>
281 Most Linux and Unix vendors supply their own Wireshark packages.
282 You can usually install or upgrade Wireshark using the package management
283 system specific to that platform. A list of third-party packages
285 <ulink url="http://www.wireshark.org/download.html#thirdparty">download page</ulink>
286 on the Wireshark web site.
292 <!-- XXX needs to be written
293 <section id="RemovingWireshark"><title>Removing Wireshark</title>
299 <section id="FileLocations"><title>File Locations</title>
301 Wireshark and TShark look in several different locations for
302 preference files, plugins, SNMP MIBS, and RADIUS dictionaries.
303 These locations vary from platform to platform. You can use
304 About→Folders to find the default locations on your system.
308 <section id="KnownProblems"><title>Known Problems</title>
311 Dumpcap might not quit if Wireshark or TShark crashes.
312 (<ulink url="http://bugs.wireshark.org/bugzilla/show_bug.cgi?id=1419">Bug
317 The BER dissector might infinitely loop.
318 (<ulink url="http://bugs.wireshark.org/bugzilla/show_bug.cgi?id=1516">Bug
323 Capture filters aren't applied when capturing from named pipes.
324 (<ulink url="http://bugs.wireshark.org/bugzilla/show_bug.cgi?id=1814">Bug
329 Filtering tshark captures with display filters (-R) no longer works.
330 (<ulink url="http://bugs.wireshark.org/bugzilla/show_bug.cgi?id=2234">Bug
335 The 64-bit Windows installer does not support Kerberos decryption.
336 (<ulink url="http://wiki.wireshark.org/Development/Win64">Win64
337 development page</ulink>)
341 Application crash when changing real-time option.
342 (<ulink url="http://bugs.wireshark.org/bugzilla/show_bug.cgi?id=4035">Bug
347 Hex pane display issue after startup.
348 (<ulink url="http://bugs.wireshark.org/bugzilla/show_bug.cgi?id=4056">Bug
353 Packet list rows are oversized.
354 (<ulink url="http://bugs.wireshark.org/bugzilla/show_bug.cgi?id=4357">Bug
359 Summary pane selected frame highlighting not maintained.
360 (<ulink url="http://bugs.wireshark.org/bugzilla/show_bug.cgi?id=4445">Bug
365 Wireshark and TShark will display incorrect delta times in some cases.
366 (<ulink url="http://bugs.wireshark.org/bugzilla/show_bug.cgi?id=4985">Bug
371 Rearranging columns in preferences doesn't work on 64-bit Windows.
372 (<ulink url="http://bugs.wireshark.org/bugzilla/show_bug.cgi?id=6077">Bug
378 <section id="GettingHelp"><title>Getting Help</title>
380 Community support is available on
381 <ulink url="http://ask.wireshark.org/">Wireshark's Q&A site</ulink>
382 and on the wireshark-users mailing list.
383 Subscription information and archives for all of Wireshark's mailing
384 lists can be found on <ulink url="http://www.wireshark.org/lists/">the
388 Training is available from
389 <ulink url="http://www.wiresharktraining.com/">Wireshark University</ulink>.
393 <section id="FAQ"><title>Frequently Asked Questions</title>
395 A complete FAQ is available on the
396 <ulink url="http://www.wireshark.org/faq.html">Wireshark web site</ulink>.