= Wireshark wireshark-version:[] Release Notes
-// $Id$
+
+This is an experimental release intended to test new features for the next
+stable release.
== What is Wireshark?
//* ws-buglink:5000[]
//* ws-buglink:6000[Wireshark bug]
-//* cve-idlink:2013-2486[]
-//* Wireshark always manages to score tickets for Burning Man, Coachella, and SXSW while you end up working double shifts. ws-buglink:0000[]
+//* cve-idlink:2014-2486[]
+//* Wireshark insists on calling you on your land line which is keeping you from abandoning it for cellular. (ws-buglink:0000[])
+
+* "On-the-wire" packet lengths are limited to 65535 bytes. (ws-buglink:8808[], ws-buglink:9390)
+* "Follow TCP Stream" shows only the first HTTP req+res. (ws-buglink:9044[])
+* Files with pcap-ng Simple Packet Blocks can't be read. (ws-buglink:9200[])
+* MPLS-over-PPP isn't recognized. (ws-buglink:9492[])
=== New and Updated Features
+The following features are new (or have been significantly updated)
+since version 1.12.0:
+
+* The I/O Graph in the Gtk+ UI now supports an unlimited number of data points
+(up from 100k).
+* tshark now resets its state when changing files in ring-buffer mode.
+* Expert Info severities can now be configured.
+
+* Qt port:
+
+** A Polish translation has been added.
+** The Interfaces dialog has been added.
+** The interface list is now updated when interfaces appear or disappear.
+** The Conversations dialog has been added.
+** A Japanese translation has been added.
+** It is now possible to manage remote capture interfaces.
+** Windows: taskbar progress support has been added.
+
+The following features are new (or have been significantly updated)
+since version 1.11.3:
+
+* Transport name resolution is now disabled by default.
+* Support has been added for all versions of the DCBx protocol.
+* Cleanup of LLDP code, all dissected fields are now navigable.
+
+The following features are new (or have been significantly updated)
+since version 1.11.2:
+
+* Qt port:
+
+** The About dialog has been added
+** The Capture Interfaces dialog has been added.
+** The Decode As dialog has been added. It managed to swallow up the
+User Specified Decodes dialog as well.
+** The Export PDU dialog has been added.
+** Several SCTP dialogs have been added.
+** The statistics tree (the backend for many Statistics and Telephony menu
+items) dialog has been added.
+** The I/O Graph dialog has been added.
+** French translation has updated.
+
+The following features are new (or have been significantly updated)
+since version 1.11.1:
+
+* Mac OS X packaging has been improved.
+
+The following features are new (or have been significantly updated)
+since version 1.11.0:
+
+* Dissector output may be encoded as UTF-8. This includes TShark output.
+
+* Qt port:
+
+** The Follow Stream dialog now supports packet and TCP stream selection.
+** A Flow Graph (sequence diagram) dialog has been added.
+** The main window now respects geometry preferences.
+
+
The following features are new (or have been significantly updated)
since version 1.10:
-* Expert info is now filterable (if the dissector has been updated to support
- the new API).
+* Wireshark now uses the Qt application framework. The new UI should provide
+ a significantly better user experience, particularly on Mac OS X and Windows.
* The Windows installer now uninstalls the previous version of Wireshark
silently. You can still run the uninstaller manually beforehand if you wish
to run it interactively.
+* Expert information is now filterable when the new API is in use.
* The "Number" column shows related packets and protocol conversation spans
(Qt only).
* When manipulating packets with editcap using the -C <choplen> and/or
* You can now pass the -C <choplen> option to editcap multiple times, which
allows you to chop bytes from the beginning of a packet as well as at the end
of a packet in a single step.
+* You can now specify an optional offset to the -C option for editcap, which
+ allows you to start chopping from that offset instead of from the absolute
+ packet beginning or end.
+* "malformed" display filter has been renamed to "_ws.malformed". A handful of
+ other filters have been given the "_ws." prefix to note they are Wireshark
+ application specific filters and not dissector filters.
+* The Kerberos dissector has been replaced with an auto generated one from ASN1
+ protocol description, changing a lot of filter names.
-=== New Protocol Support
+//=== Removed Dissectors
---sort-and-group--
-ASTERIX
-SEL RTAC (Real Time Automation Controller) EIA-232 Serial-Line Dissection
-UDT
+=== New Protocol Support
+--sort-and-group--
+Generic Network Virtualization Encapsulation (Geneve)
+IPMI Trace
+iSER
+OptoMMP
+corosync/totemnet
+corosync/totemsrp
+ceph
+Stateless Transport Tunneling
+CP 'Cooper' 2179
--sort-and-group--
=== Updated Protocol Support
=== New and Updated Capture File Support
---sort-and-group--
+//--sort-and-group--
+Android logcat text files
+//--sort-and-group--
-Netscaler 2.6
-STANAG 4607
+=== Major API Changes
+
+The libwireshark API has undergone some major changes:
+
+* Many of the ep_ and se_ memory allocation routines have been removed.
+* The (long-since-broken) Python bindings support has been removed from
+Wireshark. If you want to write dissectors in something other than C,
+use Lua.
---sort-and-group--
== Getting Wireshark
The 64-bit Windows installer does not support Kerberos decryption.
(https://wiki.wireshark.org/Development/Win64[Win64 development page])
+Resolving (ws-buglink:9044[]) reopens (ws-buglink:3528[]) so that Wireshark
+no longer automatically decodes gzip data when following a TCP stream.
+
Application crash when changing real-time option.
(ws-buglink:4035[])
Wireshark and TShark will display incorrect delta times in some cases.
(ws-buglink:4985[])
+The 64-bit Mac OS X installer doesn't support Mac OS X 10.9 (ws-buglink:9242[])
+
== Getting Help
Community support is available on http://ask.wireshark.org/[Wireshark's
git.samba.org / metze / wireshark / wip.git / blobdiff