//* ws-buglink:5000[]
//* ws-buglink:6000[Wireshark bug]
//* cve-idlink:2013-2486[]
-//* Wireshark always manages to score tickets for Burning Man, Coachella, and SXSW while you end up working double shifts. ws-buglink:0000[]
+//* Wireshark always manages to score tickets for Burning Man, Coachella, and SXSW while you end up working double shifts. (ws-buglink:0000[])
+
+* "Follow TCP Stream" shows only the first HTTP req+res. (ws-buglink:9044[])
+* Files with pcap-ng Simple Packet Blocks can't be read. (ws-buglink:9200[])
=== New and Updated Features
The following features are new (or have been significantly updated)
since version 1.10:
-* Expert info is now filterable (if the dissector has been updated to support the new API).
-* The Windows installer now uninstalls the previous version of Wireshark silently.
-You can still run the uninstaller manually beforehand if you wish to run it interactively.
-* The "Number" column shows related packets and protocol conversation spans (Qt only).
-* When manipulating packets with editcap using the -C <choplen> and/or -s <snaplen> options,
- it is now possible to also adjust the orginal frame length using the -L option.
+* Wireshark now uses the Qt application framework. The new UI should provide
+ a significantly better user experience, particularly on Mac OS X and Windows.
+* A more flexible, modular memory manger (wmem) has been added. It was available
+ experimentally in 1.10 but is now mature and has mostly replaced the old API.
+* Expert info is now filterable and now requires a new API.
+* The Windows installer now uninstalls the previous version of Wireshark
+ silently. You can still run the uninstaller manually beforehand if you wish
+ to run it interactively.
+* The "Number" column shows related packets and protocol conversation spans
+ (Qt only).
+* When manipulating packets with editcap using the -C <choplen> and/or
+ -s <snaplen> options, it is now possible to also adjust the original frame
+ length using the -L option.
+* You can now pass the -C <choplen> option to editcap multiple times, which
+ allows you to chop bytes from the beginning of a packet as well as at the end
+ of a packet in a single step.
+* You can now specify an optional offset to the -C option for editcap, which
+ allows you to start chopping from that offset instead of from the absolute
+ packet beginning or end.
+* "malformed" display filter has been renamed to "_ws.malformed". A handful of
+ other filters have been given the "_ws." prefix to note they are Wireshark
+ application specific filters and not dissector filters.
=== New Protocol Support
--sort-and-group--
+802.1AE Secure tag
+ATN
ASTERIX
+BT 3DS
+CARP
+Cisco MetaData
+EXPORTED PDU
+HTTP2
+IDRP
+ILP
+Kafka
+MBIM
+MiNT
+MP4 / ISOBMFF file format
+OpenFlow
+Picture Transfer Protocol Over IP
SEL RTAC (Real Time Automation Controller) EIA-232 Serial-Line Dissection
+Sippy RTPproxy
+STANAG 4607
+STANAG 5066 SIS
UDT
+URL Encoded Form Data
+Wi-Fi Display
--sort-and-group--
--sort-and-group--
Netscaler 2.6
+STANAG 4607
--sort-and-group--
The 64-bit Windows installer does not support Kerberos decryption.
(https://wiki.wireshark.org/Development/Win64[Win64 development page])
+Resolving (ws-buglink:9044[]) reopens (ws-buglink:3528[]) so that Wireshark
+no longer automatically decodes gzip data when following a TCP stream.
+
Application crash when changing real-time option.
(ws-buglink:4035[])
Wireshark and TShark will display incorrect delta times in some cases.
(ws-buglink:4985[])
+The 64-bit Mac OS X installer doesn't support Mac OS X 10.9 (ws-buglink:9242[])
+
== Getting Help
Community support is available on http://ask.wireshark.org/[Wireshark's
git.samba.org / metze / wireshark / wip.git / blobdiff