2 Wireshark 1.11.1 Release Notes
3 __________________________________________________________________
7 Wireshark is the world's most popular network protocol analyzer. It is
8 used for troubleshooting, analysis, development and education.
9 __________________________________________________________________
15 The following bugs have been fixed:
16 * "Follow TCP Stream" shows only the first HTTP req+res. ([1]Bug
18 * Files with pcap-ng Simple Packet Blocks can't be read. ([2]Bug
21 New and Updated Features
23 The following features are new (or have been significantly updated)
25 * Wireshark now uses the Qt application framework. The new UI should
26 provide a significantly better user experience, particularly on Mac
28 * A more flexible, modular memory manger (wmem) has been added. It
29 was available experimentally in 1.10 but is now mature and has
30 mostly replaced the old API.
31 * Expert info is now filterable and now requires a new API.
32 * The Windows installer now uninstalls the previous version of
33 Wireshark silently. You can still run the uninstaller manually
34 beforehand if you wish to run it interactively.
35 * The "Number" column shows related packets and protocol conversation
37 * When manipulating packets with editcap using the -C <choplen>
38 and/or -s <snaplen> options, it is now possible to also adjust the
39 original frame length using the -L option.
40 * You can now pass the -C <choplen> option to editcap multiple times,
41 which allows you to chop bytes from the beginning of a packet as
42 well as at the end of a packet in a single step.
43 * You can now specify an optional offset to the -C option for
44 editcap, which allows you to start chopping from that offset
45 instead of from the absolute packet beginning or end.
46 * "malformed" display filter has been renamed to "_ws.malformed". A
47 handful of other filters have been given the "_ws." prefix to note
48 they are Wireshark application specific filters and not dissector
53 802.1AE Secure tag, ASTERIX, ATN, BT 3DS, CARP, Cisco MetaData,
54 EXPORTED PDU, HTTP2, IDRP, ILP, Kafka, MBIM, MiNT, MP4 / ISOBMFF file
55 format, NXP PN532 HCI, OpenFlow, Picture Transfer Protocol Over IP, SEL
56 RTAC (Real Time Automation Controller) EIA-232 Serial-Line Dissection,
57 Sippy RTPproxy, STANAG 4607, STANAG 5066 SIS, Tinkerforge, UDT, URL
58 Encoded Form Data, and Wi-Fi Display
60 Updated Protocol Support
62 Too many protocols have been updated to list here.
64 New and Updated Capture File Support
66 Netscaler 2.6, and STANAG 4607
67 __________________________________________________________________
71 Wireshark source code and installation packages are available from
72 [3]http://www.wireshark.org/download.html.
74 Vendor-supplied Packages
76 Most Linux and Unix vendors supply their own Wireshark packages. You
77 can usually install or upgrade Wireshark using the package management
78 system specific to that platform. A list of third-party packages can be
79 found on the [4]download page on the Wireshark web site.
80 __________________________________________________________________
84 Wireshark and TShark look in several different locations for preference
85 files, plugins, SNMP MIBS, and RADIUS dictionaries. These locations
86 vary from platform to platform. You can use About->Folders to find the
87 default locations on your system.
88 __________________________________________________________________
92 Dumpcap might not quit if Wireshark or TShark crashes. ([5]Bug 1419)
94 The BER dissector might infinitely loop. ([6]Bug 1516)
96 Capture filters aren't applied when capturing from named pipes.
99 Filtering tshark captures with read filters (-R) no longer works.
102 The 64-bit Windows installer does not support Kerberos decryption.
103 ([8]Win64 development page)
105 Resolving ([9]Bug 9044) reopens ([10]Bug 3528) so that Wireshark no
106 longer automatically decodes gzip data when following a TCP stream.
108 Application crash when changing real-time option. ([11]Bug 4035)
110 Hex pane display issue after startup. ([12]Bug 4056)
112 Packet list rows are oversized. ([13]Bug 4357)
114 Summary pane selected frame highlighting not maintained. ([14]Bug 4445)
116 Wireshark and TShark will display incorrect delta times in some cases.
119 The 64-bit Mac OS X installer doesn't support Mac OS X 10.9 ([16]Bug
121 __________________________________________________________________
125 Community support is available on [17]Wireshark's Q&A site and on the
126 wireshark-users mailing list. Subscription information and archives for
127 all of Wireshark's mailing lists can be found on [18]the web site.
129 Official Wireshark training and certification are available from
130 [19]Wireshark University.
131 __________________________________________________________________
133 Frequently Asked Questions
135 A complete FAQ is available on the [20]Wireshark web site.
136 __________________________________________________________________
138 Last updated 2013-10-28 22:19:21 CET
142 1. https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=9044
143 2. https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=9200
144 3. http://www.wireshark.org/download.html
145 4. http://www.wireshark.org/download.html#thirdparty
146 5. https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=1419
147 6. https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=1516
148 7. https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=2234
149 8. https://wiki.wireshark.org/Development/Win64
150 9. https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=9044
151 10. https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=3528
152 11. https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=4035
153 12. https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=4056
154 13. https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=4357
155 14. https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=4445
156 15. https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=4985
157 16. https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=9242
158 17. http://ask.wireshark.org/
159 18. http://www.wireshark.org/lists/
160 19. http://www.wiresharktraining.com/
161 20. http://www.wireshark.org/faq.html