1 $Id: NEWS,v 1.145 2004/05/13 09:04:14 ulfl Exp $
5 Ethereal 0.10.4 has been released.
7 This release fixes bugs in AIM, MMSE, SIP, and SPNEGO, as described in
8 the following advisory:
10 http://www.ethereal.com/appnotes/enpa-sa-00014.html
12 Everyone is encouraged to upgrade.
15 New and updated features
17 When built with GTK+ 2.4, Ethereal uses the new, greatly improved, file
20 Export dialogs for Plain text, PostScript(R), PDML and PSML have been added.
22 PostScript(R) output has been improved.
24 The screen layout of the main window can be changed by Preferences now.
26 Many other parts of the user interface have received improvements.
28 Compressed and chunked transfer-coded HTTP bodies are now decoded.
33 ANSI IS-801, BEA Tuxedo, DCERPC EFS, DICOM, GPRS LLC, GPRS SNDCP, IEEE
37 Updated protocol support
48 DCERPC (LSA, NETLOGON, SAMR, SVCCTL, SPOOLS)
98 Ethereal 0.10.3 has been released.
100 This release fixes several security bugs described in the following
103 http://www.ethereal.com/appnotes/enpa-sa-00013.html
105 Everyone is encouraged to upgrade.
108 New and updated features
110 Display filters now support the bitwise and (&) operator.
112 Protocol hierarchy statistics now have bandwidth columns.
114 The capture dialog has a new layout.
119 3G A11 Cisco SS7 (RUDP, RLM, and Session Management), FTAM, IPDC,
120 MQ, Presentation, SLSK,
123 Updated protocol support
125 802.11, AFP, AIM/Oscar, Axent Raptor/Symantec Enterprise firewall,
126 BER, BGP, CDP, DCCP, DCERPC NETLOGON, DCERPC RS_PGO, DCERPC
127 RS_PROP_PLCY, DCERPC, DCERPD SAMR, DIAMETER, DOCSIS, E.164, EIGRP,
128 FCFCS, GSM A, GSM MAP, GSM SMS, GTP, H.225, IGAP, IrDA, ISUP,
129 Kerberos, M2PA, M3UA, MTP3, NBNS, NCP, NDMP, Netflow, PER, PGM,
130 PostgreSQL, Q.931, Q.933, Quake 2, RADIUS, RSVP, RTSP, SCTP, SMB,
131 SNA, TCAP, TCP, UCP, WBXML, WSP, X11, xDLC
136 EyeSDN, libpcap (tcpdump)
141 Ethereal 0.10.2 has been released.
143 This release fixes two major bugs in 0.10.1:
145 Under Windows, the error
147 ** WARNING **: error opening
148 /usr/local/share/ethereal/asn1/default.tt, No such file or
151 would be printed at startup.
153 The 0.10.1 source release was missing several files required for
157 New and updated features
159 The user interface has received further updates. The Statistics
161 layout has been improved, as well as the capture options dialog
167 Cisco Cast Client Control Protocol
170 Updated protocol support
172 AppleTalk, ASN.1, DCERPC, Diameter, FCSP, GSM A, GSM MAP, GSM SMS,
174 IEEE 802.3, Kerberos, MSN Messenger, PostgreSQL, Q.931, RPL, Skinny,
180 Ethereal 0.10.1 has been released.
183 New and updated features
185 The Windows installer now lets you choose between the traditional
187 version 1 interface and a new GTK+ 2 interface.
189 Several updates were made to Ethereal's user interface. The "File"
191 now has a "most recently used" list. The help menu was greatly
194 The "matches" operator now handles more data types. For example,
198 smtp matches joespammer@example.com
202 I/O statistics now support 1ms resolution.
206 A column resorting crash on the Windows platform was fixed.
210 EDP, IAX2, IrDA, ISMP, OLSR, PostgreSQL, PRES, V5UA
212 Updated protocol support
214 ACSE, AFP, AIM, ANSI MAP, ARCNET, ASN.1, BEEP, BGP, BPDU, BSSAP,
216 COPS, CPHA, DCERPC AFS4INT, FLDB, RPRIV, RS_REPADM, STAT, SVCCTL,
217 TRKSVR, WKSSVC, DCERPC, DHCPv6, DNS, DOCSIS, EAP, ENIP, ESIS, FC,
219 FC-SB3, FW-1, GIF (OK, so it's a file format and not a protocol per
221 GIOP, GRE, GSM MAP, GSM SMS, GTP, H.225, H.245, H.450, HTTP, ICMPv6,
222 IEEE 802.11, IPMI, IPv4, IPv6, IPX, ISAKMP, iSCSI, ISDN, ISUP, JFIF,
223 Kerberos, KPASSWD, L2TP, LDAP, LDP, LWAPP, MGCP, MLD, MMSE, Mobile
225 MSPROXY, MTP3, NBNS, NCP, NDMP, NFS, OSI, OSPF, PER, PGM, Q.931,
227 RMI, RSTAT, RTP, RTSP, SCCP, SDP, SES, SIP, SLL, SLSK, SMB, SMPP,
229 SOCKS, SRVLOC, SSH, SSL, STUN, T.38, TACACS, TCAP, TDS, Telnet,
231 Text, TFTP, TZSP, UDP, Vines, WAP, WBXML, WSP, WTP, X11
234 Updated capture file support
236 DBS EtherWatch, EtherPeek/AiroPeek, EyeSDN, LANAlzyer, NetXRay,
242 Ethereal 0.10.0 has been released.
244 This release fixes issues in the SMB and Q.931 dissectors that could
245 make Ethereal and Tethereal crash. See
247 http://www.ethereal.com/appnotes/enpa-sa-00012.html
251 New and updated features
253 Many performance improvements have been made to the code. Most
255 should see a 2x to 3x performance increase when loading and working
259 A "matches" display filter operator has been added. It is similar
261 the "contains" operator, but supports Perl-compatible regular
264 Tethereal can now dump packet data in XML (PDML) format.
266 The main application menus have been rearranged and the help windows
267 have been revamped, along with a host of other UI enhancements.
269 The capture progress window now features bar graphs.
271 The GLib, GTK+, Net-SNMP, and zlib libraries that ship with the
273 installer have been updated.
277 BFD, CCSDS, CPFI, DCE/RPC {BUDB, EPM4, ICL_RPC, RS_PLCY,
279 IGAP, ISO 8327-1 SES, MS Kpasswd, RTCFG, SEBEK,
281 Updated protocol support
283 ACN, AFP, ANSI A, ANSI MAP, ASN.1, BSMAP, BSSAP, CPFI, DCE/RPC
285 EPM, NDR, SRVSVC, STAT, WKSSVC}, DCE/RPC, DHCP, DNS, DOCSIS, DSI,
287 ENTTEC, FC ELS, FC FZS, FC-SP, FC-SWILS, GIOP, GPRS NS, GSM A, GSM
289 H.225, H.450, HTTP, ICMP, IPv6, IS-IS, ISAKMP, ISUP, Kerberos, LDAP,
290 LDP, MIPv6, MMSE, MS Proxy, MTP3, NCP 2222, NTP, PIM, RADIUS, RANAP,
291 RDM, RSVP, RTCP, RTP, SCCP, SDP, SIP, SMB, SMPP, SOCKS, SONMP,
293 SSL, TACACS, TCAP, TCP, TPKT, TZSP, UCP, WAP, WBXML, WLAN, WSP, WTP
296 Updated capture file support
298 AiroPeek v9 (2.x) support was added. Network Instruments Observer
300 Snoop support was updated.
305 Ethereal 0.9.16 has been released.
307 This release fixes potential security issues with the GTP, ISAKMP,
308 MEGACO, and SOCKS dissectors. See
310 http://www.ethereal.com/appnotes/enpa-sa-00011.html
314 New and updated features
316 Ethereal has leapt forward into the 90's and added a toolbar.
318 Ethereal and Tethereal can now force the data link type of captured
321 RTP analysis has been enhanced.
323 Individual frames can now be marked as time references
325 Service response time and general I/O statistics have been enhanced.
327 statistics can now calculate client load (experimental).
331 ACN, ALCAP, ANSI MAP, ASN.1 BER, BSSAP, DCE/RPC DRSUAPI, DCE/RPC
332 INITSHUTDOWN, DCE/RPC RS_BIND, FC-SP, FICON, GSM BSSMAP, GSM DTAP,
334 SMS TPDU, GSM SMS, GSM SS, H.450, IOS 4.0.1 IS-637-A (SMS), IS-683-A
335 (OTA), T.38, TCAP, TPCP
337 Updated protocol support
339 AODV, ASN.1 PER, BSSGP, CDP, Cisco HDLC, COPS, DCE/RPC BROWSER,
341 DNSSERVER, DCE/RPC EPM, DCE/RPC LSA, DCE/RPC Messenger, DCE/RPC REG,
342 DCE/RPC SVCCTL, DCE/RPC, DFS, DHCPv6, DOCSIS, EAPOL, ENIP, Frame
344 FTP, GPRS, Gryphon, GTP, H.225, H.245, HTTP, ICMP, IEEE 802.11, IPX,
345 ISAKMP, ISUP, LAPB, Laplink, LWAPP, MAPI, MDSHDR, MEGACO, MPLS, NCP,
346 NDPS, NETLOGON, NFS, NTLMSSP, OSPF, OXID, PPP, Q.931, Q.933, RANAP,
348 RTP, SAMR, SCCP, SCSI, SCTP, SDP, SIP, SMB, SMPP, SNMP, SOCKS,
350 SPOOLSS SRVLOC, SRVSVC, T.35, TACACS+, TAPI, TCP, TZSP, WKSSVC, WSP,
351 X.25, Yahoo! Messenger
354 Updated capture file support
356 Linux Bluez Bluetooth hcidump support has been added.
358 Endace ERF and Network Instruments Observer, and NetXRay support has
364 Ethereal 0.9.15 has been released.
366 New and updated features
368 Many often-requested features have been added with this release. If
369 you're running an older version of Ethereal you may want to have a
372 Conversation List (aka "top talker") support has been added to
374 and Tethereal. Protocol statistics in general have been updated.
376 Searching capture files has been improved even more -- a new
378 display filter operator that searches for strings in PDUs has been
379 added. The Find dialog now supports case-insensitive searches, hex
383 An H.225 dissector has been added. It can automatically recognize
385 and RTCP conversations.
387 A preference file has been added for disabled protocols.
389 Color filters may now be imported and exported from within Ethereal.
391 A new column type has been added for cumulative bytes.
396 GPRS BSSGP, GPRS NS, H.225, H.263, LWAPP, Laplink, Q.933, STUN
401 ArtNet, BOOTP/DHCP, DCE/RPC, DCERPCSTAT, DHCPv6, DOCSIS, ENIP,
403 FCIP, Frame Relay, H.245, HTTP, IPsec, iSCSI, LDAP, LWRES, M2UA,
405 MEGACO, MTP3, NCP, NDPS, NFS, NTLMSSP, PPTP, Q.931, RPC, SAMR, SCCP,
406 SCTP, SIP, SMB, SMPP, SNA, SNMP, SRVLOC, SUA, TCP, TDS, UCD, UDP,
410 Updated capture file support
412 Support for Accellent 5Views and Endace ERF capture files was added.
413 CheckPoint FW-1 and Novell LANalyzer support has been enhanced.
418 Ethereal 0.9.14 has been released.
420 New and updated features
422 The ringbuffer code has been (nearly) completely rewritten. It now
423 supports an unlimited number of files.
425 Ethereal now supports searching for arbitrary text and binary data
429 Service response time statistics have been enhanced.
431 Tethereal, the text-mode version of Ethereal, can now be compiled
432 without capture support.
435 New and updated features
437 Echo, eDonkey, Jabber, MS Messenger, sFlow
442 AODV, AODV6, Boardwalk, DCE-RPC, ENIP, Fibre Channel, FIX, FW1,
444 IGMP, IPsec, IS-IS, iSCSI, ISUP, LDAP, LDP, M2UA, MEGACO, MTP3,
446 NETLOGON, NTLMSSP, NTP, Q.2931, Q.931, SAMR, SCCP, SCSI, SMB, SMPP,
448 SNMP, SPNEGO, SPOOLSS, SRVLOC, UCP, Vines, VRRP, WBXML, WEP, WSP,
453 Updated capture file support
460 Ethereal 0.9.13 has been released.
462 This release fixes a large number of security issues discovered by
464 Sirainen and others. See
466 http://www.ethereal.com/appnotes/enpa-sa-00010.html
470 New and updated features
472 Ethereal now supports a system-wide color filter file.
474 Support for the GNU ADNS library has been added. ADNS allows
475 asynchronous DNS lookups.
477 "Decode As..." functionality has been added to Tethereal via the "-
481 The HTTP, FTP, POP, SMTP, IMAP, and ACAP requests and responses are
483 shown in the protocol tree.
487 distcc, EtherNet/IP, MSRPC ATSVC, RTNET/TMDA
491 802.11, AIM, BGP, CLNP, COTP, CPHA, DCERPC, DNS, EAPOL, Ethernet,
493 GSSAPI, IP, ISAKMP, ISIS, LDAP, LSP, M2PA, MAPI, Modbus, NDPS, NFS,
494 NTLMSSP, OSI, OSPF, OpenBSD pflog, PPTP, RMCP, RMI, RPC, RTP, SCSI,
495 SCTP, SIP, SMB, SMPP, SMTP, SNMP, SPNEGO, TACACS, TCP, TSP, WBXML,
499 Updated capture file support
501 HP-UX nettl, VMS UCX$TRACE
506 Ethereal 0.9.12 has been released.
508 This release fixes several off-by-one and integer overflow errors
509 discovered by Timo Sirainen. See
511 http://www.ethereal.com/appnotes/enpa-sa-00009.html
515 New and updated features
517 TCP sequence number analysis received a few improvements.
519 General packet reassembly has been improved.
521 The "Follow TCP Stream" window now allows you to filter out the
525 The Vines code received significant updates.
527 Several enhancements were made to the text2pcap utility.
531 ArtNET, IPX WAN, Intel ANS, iSNS, NLSP, WKSSVC
535 802.11 ACAP, AFP, AIM, AJP, ASAP, BGP, CLNP, CPHA, DCE/RPC, DSI,
537 IP, IPMI, IPX, IPv6, ISIS, ISUP, IUA, Kerberos, LDAP, M2PA, M2TP,
539 M3UA, MGCP, MTP2, MTP3, MTP3MG, Modbus/TCP, NDMP, NDPS, NFS, NLSP,
541 Q.931, RANAP, RPC, RSVP, SCCP, SCCPMG, SCTP, SMB, SNMP, SPX, SSH,
543 TCP, Telnet, Vines, WBXML, WSP, WTP
545 Updated capture file support
552 Ethereal 0.9.11 has been released.
554 The Ethereal 0.9.10 release was packaged improperly. This release
556 the packaging, and adds minor updates and fixes for the following
559 AFS, OpenBSD enc(4), RTP, SCSI, SIP, SMPP, SSH
561 IA64 support has been improved.
566 Ethereal 0.9.10 has been released.
568 This release fixes a security hole discovered by Georgi Guninski in
570 SOCKS dissector as well as problems with the NTLMSSP and Rsync code.
571 All users of previous versions are encouraged to upgrade. See
573 http://www.ethereal.com/appnotes/enpa-sa-00008.html
578 New and Updated Features
580 Many small updates were made to the user interface.
582 The "Help" menu now includes the FAQ.
584 The TCP dissector was enhanced. Many more fields are filterable.
586 Tethereal received more IO stats: TCP and UDP top talkers.
588 Packet reassembly has been improved.
590 The "Follow TCP Stream" feature can now export C byte arrays.
592 RTP streams can now be saved to a file.
597 A missing comma in a string array could cause Ethereal to crash when
598 opening the preferences dialog.
603 MSN Messenger, Rsync, SSH, Yahoo! Messenger
608 AFP, AFS, AIM, ATM, Apache JServ, BACNET, BGP, BOOTP, CLNP, COPS,
610 DCERPC NT, DCERPC, DNS, ESIS, Ethernet, Frame Relay, GIOP, GTP, HP
611 extended 802.2 LLC, HP-UX remote management, HTTP, IPP, IPX, LLC,
613 M3UA, MDSHDR, MIP6, MPLS, MySQL, NCP2222, NETLOGON, NLPID, NetFlow,
614 OpenBSD enc(4), OSI, PPP, RADIUS, RMP, RPL, SAMR, SCSI, SMB, SNA,
616 SOCKS, SPOOLSS, SRVLOC, SRVSVC, SSL, SliMP3, TCP, Token Ring, WBXML,
617 Wellfleet BofL X.25, X11
620 Updated Capture File Support
622 NetXRay, NGSniffer, Snoop
627 Ethereal 0.9.9 has been released.
629 Please note the next release will NOT be 1.0. There are still more
630 features to be added before a 1.0 release will be ready.
633 New and Updated Features
635 Plugin search behavior was improved under Unix, allowing more than
637 version of Ethereal to be installed at one time.
639 The statistics graphs have been enhanced. More statistics have been
642 Round-trip-time statistics are now computed for SMB traffic.
644 NCP Call and Reply times are now tracked.
646 Top talker statistics for Ethernet, IP and Token Ring are now
647 available (tethereal only).
649 Color allocation and handling was improved.
651 The RADIUS dissector can now decrypt user passwords.
653 Tethereal now supports reading from a pipe under Unix.
655 The ATM code received major improvements.
657 The DOS Sniffer code also received major improvements.
659 For those that compile Ethereal from source, some fixes and updates
660 have been made to the configuration and build environment.
665 The capture progress window now shows the correct number of elapsed
668 A potential infinite loop in the TCP graphing code has been fixed.
673 MDSHDR, MEGACO, MySQL, SDLC, X.29
678 802.11, AFP, AFS, AIM, ARCNET, ASAP, ATM, BPDU, Cisco HDLC, CLNP,
680 RPC, DDTP, Ethernet, FC-ELS, FCIP, H.261, IMSI, IP, IP-over-FC,
682 LMI, M3UA, MTP3, NCP, NetBIOS, NETLOGON, ONC RPC, OSPF, PIM, PPP,
683 RADIUS, RANAP, RPC, SAMR, SCTP, SMB, SPNEGO, SPOOLSS, SRVLOC,
685 SUA, TNS, Token Ring, Wellfleet HDLC, X.25
688 Updated Capture File Support
690 Firewall-1, Netmon, NetXRay, Radcom, Sniffer
695 Ethereal 0.9.8 has been released.
697 Serious problems with the BGP, LMP, PPP, and TDS dissectors have
701 http://www.ethereal.com/appnotes/enpa-sa-00007.html
706 New and Updated Features
708 The TAP subsystem received major updates. Tethereal can display
709 more statistics, and several graphs have been added to Ethereal.
711 A protocol hierarchy statistics tap was added to tethereal. This
713 may be used to replace the hierarchy statistics code in Ethereal.
715 More updates have been added to TCP analysis.
717 After a long hiatus, the Windows installer once again includes SNMP
720 The total running time of the capture is now displayed in the
722 progress dialog box. The capture progress dialog also shows ARP
725 The look of the plugins dialog was revamped.
728 Bug Fixes and Updates
730 A bug which caused Ethereal under Windows to crash when "Update list
732 packets in real time" was enabled has been fixed.
734 The stability of the text2pcap utility has been improved.
736 In tethereal, the packet count is properly displayed when you ^C out
743 ARCNET, ClearCase NFS, DCERPC LSA_DS, Fibre Channel, HyperSCSI,
750 AFP, AFS, BACNet, BGP, DCERPC, DCERPC EPM, DCERPC LSA, DCERPC NDR,
751 DCERPC NT, DCERPC SAMR, DCERPC UPDATE, GRE, GTP, HTTP, IPv6CP, IPX,
752 iSCSI, ISDN, IUA, LAPD, LDAP, M2PA, NDPS, NDS, NetBIOS, NFS,
754 OSPF, PPP, PPPoE, Q.2931, Q.931, RPC, RSVP, SCSI, SCTP, SMB, SNMP,
755 Spanning Tree, SPNEGO, SPOOLSS, SPX, SRVLOC, TCP, Telnet, V.120,
760 Updated Capture File Support
762 AIX iptrace and tcpdump, NetXRay, Sniffer, snoop
765 == September 28, 2002
767 Ethereal 0.9.7 has been released.
771 In order to improve the out-of-box responsiveness of Ethereal and
772 Tethereal, network name resolution has been disabled by default.
774 TCP analysis (a feature added in the 0.9.6 release) was improved.
776 The NCP code base received quite a few updates.
778 Initial support for version 2 of the GTK+ library was added.
780 RPC staticstics (which use the new Tap API) were added.
782 Due to added and updated support for the NTLM, SNEGO, and GSS-API
783 protocols, Ethereal can now dissect most of the security blobs for
784 Windows 2000 authentication.
786 The Ethernet "manuf" file now handles addresses specified with a
787 mask, and contains many well-known addresses.
792 802.1s MSTP, FIX, GSS-API, Interbase, NDPS, Netflow (Cisco and
794 SCCP-Management, SPNEGO
796 The following DCE/RPC protocols were also added:
798 AFS4INT, BOSSVR, CDS_CLERKSERVER, CDS_SOLICIT, CPRPC_SERVER,
800 DTSPROVIDER, DTSSTIME_REQ, FLDB, FTSERVER, KRB5RPC, REPADMIN,
802 ROVERRIDE, RPRIV, RS_ATTR, RSEC_LOGIN, RS_MISC, RS_PGO, RS_REPLIST,
803 RS_UNIX, SECIDMAP, TKN4INT, UBIKDISK, UKIKVOTE
808 AFP, AODV/AODV6, BGP, CHDLC, CHPA, DCE/RPC CONV, DCE/RPC LSA,
810 NT, DCE/RPC SAMR, DHCP, DNS, DOCSIS, EAP, GTP, HTTP, IP, iSCSI, IS-
812 Kerberos, LDAP, LDP, M2PA MMSE, NBNS, NCP, NDS, NETLOGON, NTLMSSP,
814 Q.931 RPC, RPCSTAT, SCSI, Skinny, SMB, SNEGO, SPOOLSS, SRVSVC, TCP,
820 Ethereal 0.9.6 has been released.
824 A buffer overflow in the ISIS dissector has been fixed. More
825 information can be found at
826 http://www.ethereal.com/appnotes/enpa-sa-00006.html.
828 A bad TCP header could cause problems for the "Follow TCP Stream"
831 Setting "column.format" from the command line no longer crashes
832 Ethereal and Tethereal.
834 Problems with capture files being overwritten (e.g. if you try to
836 the current capture file) have been fixed.
838 An SMB conversation handling bug has been fixed.
840 Thanks to Valgrind, several memory leaks have been fixed.
842 Some problems with printing under Windows have been fixed.
847 TCP sequence number analysis has been added.
849 The DCE RPC NETLOGON dissector has received a major overhaul.
851 Data types throughout the code have been cleaned up.
856 CPHA, DOCSIS, NTLMSSP, Xyplex terminal server protocol, ZIP
861 802.11, AFP, ASAP, BGP, CDP, CDPCP, CPHA, DDP, DCERPC, DCERPC NT,
863 REG, EPM, FTP, HCLNFSD, HTTP, IPX, ISAKMP, ISIS, IUA, Kerberos,
865 LLMNR, LSA, MMSE, MPLSCP, NBNS, NetBIOS, NETLOGON, NFS, NTLMSSP,
867 Quake2, RADIUS, RSVP, RTCP, SAMR, SCSI, SDP, SIP, SMB, SMB Mailslot,
868 SMTP, SPOOLSS, TCP, TDS, TNS, TPKT, Token Ring, VJ TCP, WINREG, WSP
873 CheckPoint Firewall-1 monitor file support and CoSine debug file
875 were added. Support for pppdump and Netmon files was updated.
880 Ethereal 0.9.5 has been released. This version fixes several potential
881 security problems revealed since the release of 0.9.4. See the
883 advisory at http://www.ethereal.com/appnotes/enpa-sa-00005.html for
889 The ability to read packet data from a pipe was enhanced. Printing
890 under Windows now works.
895 802.3 LACP, Apache JServ, AODV6, DCERPC Browser, Java RMI, TAPI
900 ATM, BGP, BOOTP, DCE RPC, EPM, Frame Relay, GTP, L2TP, LMP, MAPI, MIP,
901 MMSE, MTP3, NCP, NFS, NSPI, PPP, Q2931, RADIUS, RSVP, SCSI, SMB, SNA,
902 SOCKS, SPOOLSS, SRVSVC, SunATM, TFTP, TNS, Token Ring, UCP, VJ TCP/IP,
908 Ethereal can now write LANalyzer files. The Sniffer, nettl, snoop,
909 NetXRay, and libpcap code all received updates.