= Wireshark wireshark-version:[] Release Notes
-// $Id$
+
+This is an experimental release intended to test new features for the next
+stable release.
== What is Wireshark?
//* ws-buglink:5000[]
//* ws-buglink:6000[Wireshark bug]
-//* cve-idlink:2013-2486[]
-//* Wireshark always manages to score tickets for Burning Man, Coachella, and SXSW while you end up working double shifts. (ws-buglink:0000[])
+//* cve-idlink:2014-2486[]
+//* Wireshark insists on calling you on your land line which is keeping you from abandoning it for cellular. (ws-buglink:0000[])
* "On-the-wire" packet lengths are limited to 65535 bytes. (ws-buglink:8808[], ws-buglink:9390)
* "Follow TCP Stream" shows only the first HTTP req+res. (ws-buglink:9044[])
* Files with pcap-ng Simple Packet Blocks can't be read. (ws-buglink:9200[])
+* MPLS-over-PPP isn't recognized. (ws-buglink:9492[])
=== New and Updated Features
+The following features are new (or have been significantly updated)
+since version 1.12.0:
+
+* The I/O Graph in the Gtk+ UI now supports an unlimited number of data points
+(up from 100k).
+* tshark now resets its state when changing files in ring-buffer mode.
+* Expert Info severities can now be configured.
+
+* Qt port:
+
+** A Polish translation has been added.
+** The Interfaces dialog has been added.
+** The interface list is now updated when interfaces appear or disappear.
+** The Conversations dialog has been added.
+** A Japanese translation has been added.
+** It is now possible to manage remote capture interfaces.
+** Windows: taskbar progress support has been added.
+
+The following features are new (or have been significantly updated)
+since version 1.11.3:
+
+* Transport name resolution is now disabled by default.
+* Support has been added for all versions of the DCBx protocol.
+* Cleanup of LLDP code, all dissected fields are now navigable.
+
+The following features are new (or have been significantly updated)
+since version 1.11.2:
+
+* Qt port:
+
+** The About dialog has been added
+** The Capture Interfaces dialog has been added.
+** The Decode As dialog has been added. It managed to swallow up the
+User Specified Decodes dialog as well.
+** The Export PDU dialog has been added.
+** Several SCTP dialogs have been added.
+** The statistics tree (the backend for many Statistics and Telephony menu
+items) dialog has been added.
+** The I/O Graph dialog has been added.
+** French translation has updated.
+
+The following features are new (or have been significantly updated)
+since version 1.11.1:
+
+* Mac OS X packaging has been improved.
+
+The following features are new (or have been significantly updated)
+since version 1.11.0:
+
+* Dissector output may be encoded as UTF-8. This includes TShark output.
+
+* Qt port:
+
+** The Follow Stream dialog now supports packet and TCP stream selection.
+** A Flow Graph (sequence diagram) dialog has been added.
+** The main window now respects geometry preferences.
+
+
The following features are new (or have been significantly updated)
since version 1.10:
* Wireshark now uses the Qt application framework. The new UI should provide
a significantly better user experience, particularly on Mac OS X and Windows.
-* A more flexible, modular memory manger (wmem) has been added. It was available
- experimentally in 1.10 but is now mature and has mostly replaced the old API.
-* Expert info is now filterable and now requires a new API.
* The Windows installer now uninstalls the previous version of Wireshark
silently. You can still run the uninstaller manually beforehand if you wish
to run it interactively.
+* Expert information is now filterable when the new API is in use.
* The "Number" column shows related packets and protocol conversation spans
(Qt only).
* When manipulating packets with editcap using the -C <choplen> and/or
* "malformed" display filter has been renamed to "_ws.malformed". A handful of
other filters have been given the "_ws." prefix to note they are Wireshark
application specific filters and not dissector filters.
+* The Kerberos dissector has been replaced with an auto generated one from ASN1
+ protocol description, changing a lot of filter names.
-=== New Protocol Support
+//=== Removed Dissectors
---sort-and-group--
-802.1AE Secure tag
-ATN
-ASTERIX
-BT 3DS
-CARP
-Cisco MetaData
-ELF file format
-EXPORTED PDU
-HTTP2
-IDRP
-ILP
-Kafka
-MBIM
-MiNT
-MP4 / ISOBMFF file format
-NXP PN532 HCI
-OpenFlow
-Picture Transfer Protocol Over IP
-QUIC (Quick UDP Internet Connections)
-SEL RTAC (Real Time Automation Controller) EIA-232 Serial-Line Dissection
-Sippy RTPproxy
-STANAG 4607
-STANAG 5066 SIS
-Tinkerforge
-UDT
-URL Encoded Form Data
-Wi-Fi Display
+=== New Protocol Support
+--sort-and-group--
+Generic Network Virtualization Encapsulation (Geneve)
+IPMI Trace
+iSER
+OptoMMP
+corosync/totemnet
+corosync/totemsrp
+ceph
+Stateless Transport Tunneling
+CP 'Cooper' 2179
--sort-and-group--
=== Updated Protocol Support
=== New and Updated Capture File Support
---sort-and-group--
+//--sort-and-group--
+Android logcat text files
+//--sort-and-group--
-Netscaler 2.6
-STANAG 4607
+=== Major API Changes
+
+The libwireshark API has undergone some major changes:
+
+* Many of the ep_ and se_ memory allocation routines have been removed.
+* The (long-since-broken) Python bindings support has been removed from
+Wireshark. If you want to write dissectors in something other than C,
+use Lua.
---sort-and-group--
== Getting Wireshark