1 $Id: NEWS,v 1.143 2004/03/26 01:39:41 gerald Exp $
5 Ethereal 0.10.3 has been released.
7 This release fixes several security bugs described in the following
10 http://www.ethereal.com/appnotes/enpa-sa-00013.html
12 Everyone is encouraged to upgrade.
15 New and updated features
17 Display filters now support the bitwise and (&) operator.
19 Protocol hierarchy statistics now have bandwidth columns.
21 The capture dialog has a new layout.
26 3G A11 Cisco SS7 (RUDP, RLM, and Session Management), FTAM, IPDC,
27 MQ, Presentation, SLSK,
30 Updated protocol support
32 802.11, AFP, AIM/Oscar, Axent Raptor/Symantec Enterprise firewall,
33 BER, BGP, CDP, DCCP, DCERPC NETLOGON, DCERPC RS_PGO, DCERPC
34 RS_PROP_PLCY, DCERPC, DCERPD SAMR, DIAMETER, DOCSIS, E.164, EIGRP,
35 FCFCS, GSM A, GSM MAP, GSM SMS, GTP, H.225, IGAP, IrDA, ISUP,
36 Kerberos, M2PA, M3UA, MTP3, NBNS, NCP, NDMP, Netflow, PER, PGM,
37 PostgreSQL, Q.931, Q.933, Quake 2, RADIUS, RSVP, RTSP, SCTP, SMB,
38 SNA, TCAP, TCP, UCP, WBXML, WSP, X11, xDLC
43 EyeSDN, libpcap (tcpdump)
48 Ethereal 0.10.2 has been released.
50 This release fixes two major bugs in 0.10.1:
52 Under Windows, the error
54 ** WARNING **: error opening
55 /usr/local/share/ethereal/asn1/default.tt, No such file or
58 would be printed at startup.
60 The 0.10.1 source release was missing several files required for
64 New and updated features
66 The user interface has received further updates. The Statistics
68 layout has been improved, as well as the capture options dialog
74 Cisco Cast Client Control Protocol
77 Updated protocol support
79 AppleTalk, ASN.1, DCERPC, Diameter, FCSP, GSM A, GSM MAP, GSM SMS,
81 IEEE 802.3, Kerberos, MSN Messenger, PostgreSQL, Q.931, RPL, Skinny,
87 Ethereal 0.10.1 has been released.
90 New and updated features
92 The Windows installer now lets you choose between the traditional
94 version 1 interface and a new GTK+ 2 interface.
96 Several updates were made to Ethereal's user interface. The "File"
98 now has a "most recently used" list. The help menu was greatly
101 The "matches" operator now handles more data types. For example,
105 smtp matches joespammer@example.com
109 I/O statistics now support 1ms resolution.
113 A column resorting crash on the Windows platform was fixed.
117 EDP, IAX2, IrDA, ISMP, OLSR, PostgreSQL, PRES, V5UA
119 Updated protocol support
121 ACSE, AFP, AIM, ANSI MAP, ARCNET, ASN.1, BEEP, BGP, BPDU, BSSAP,
123 COPS, CPHA, DCERPC AFS4INT, FLDB, RPRIV, RS_REPADM, STAT, SVCCTL,
124 TRKSVR, WKSSVC, DCERPC, DHCPv6, DNS, DOCSIS, EAP, ENIP, ESIS, FC,
126 FC-SB3, FW-1, GIF (OK, so it's a file format and not a protocol per
128 GIOP, GRE, GSM MAP, GSM SMS, GTP, H.225, H.245, H.450, HTTP, ICMPv6,
129 IEEE 802.11, IPMI, IPv4, IPv6, IPX, ISAKMP, iSCSI, ISDN, ISUP, JFIF,
130 Kerberos, KPASSWD, L2TP, LDAP, LDP, LWAPP, MGCP, MLD, MMSE, Mobile
132 MSPROXY, MTP3, NBNS, NCP, NDMP, NFS, OSI, OSPF, PER, PGM, Q.931,
134 RMI, RSTAT, RTP, RTSP, SCCP, SDP, SES, SIP, SLL, SLSK, SMB, SMPP,
136 SOCKS, SRVLOC, SSH, SSL, STUN, T.38, TACACS, TCAP, TDS, Telnet,
138 Text, TFTP, TZSP, UDP, Vines, WAP, WBXML, WSP, WTP, X11
141 Updated capture file support
143 DBS EtherWatch, EtherPeek/AiroPeek, EyeSDN, LANAlzyer, NetXRay,
149 Ethereal 0.10.0 has been released.
151 This release fixes issues in the SMB and Q.931 dissectors that could
152 make Ethereal and Tethereal crash. See
154 http://www.ethereal.com/appnotes/enpa-sa-00012.html
158 New and updated features
160 Many performance improvements have been made to the code. Most
162 should see a 2x to 3x performance increase when loading and working
166 A "matches" display filter operator has been added. It is similar
168 the "contains" operator, but supports Perl-compatible regular
171 Tethereal can now dump packet data in XML (PDML) format.
173 The main application menus have been rearranged and the help windows
174 have been revamped, along with a host of other UI enhancements.
176 The capture progress window now features bar graphs.
178 The GLib, GTK+, Net-SNMP, and zlib libraries that ship with the
180 installer have been updated.
184 BFD, CCSDS, CPFI, DCE/RPC {BUDB, EPM4, ICL_RPC, RS_PLCY,
186 IGAP, ISO 8327-1 SES, MS Kpasswd, RTCFG, SEBEK,
188 Updated protocol support
190 ACN, AFP, ANSI A, ANSI MAP, ASN.1, BSMAP, BSSAP, CPFI, DCE/RPC
192 EPM, NDR, SRVSVC, STAT, WKSSVC}, DCE/RPC, DHCP, DNS, DOCSIS, DSI,
194 ENTTEC, FC ELS, FC FZS, FC-SP, FC-SWILS, GIOP, GPRS NS, GSM A, GSM
196 H.225, H.450, HTTP, ICMP, IPv6, IS-IS, ISAKMP, ISUP, Kerberos, LDAP,
197 LDP, MIPv6, MMSE, MS Proxy, MTP3, NCP 2222, NTP, PIM, RADIUS, RANAP,
198 RDM, RSVP, RTCP, RTP, SCCP, SDP, SIP, SMB, SMPP, SOCKS, SONMP,
200 SSL, TACACS, TCAP, TCP, TPKT, TZSP, UCP, WAP, WBXML, WLAN, WSP, WTP
203 Updated capture file support
205 AiroPeek v9 (2.x) support was added. Network Instruments Observer
207 Snoop support was updated.
212 Ethereal 0.9.16 has been released.
214 This release fixes potential security issues with the GTP, ISAKMP,
215 MEGACO, and SOCKS dissectors. See
217 http://www.ethereal.com/appnotes/enpa-sa-00011.html
221 New and updated features
223 Ethereal has leapt forward into the 90's and added a toolbar.
225 Ethereal and Tethereal can now force the data link type of captured
228 RTP analysis has been enhanced.
230 Individual frames can now be marked as time references
232 Service response time and general I/O statistics have been enhanced.
234 statistics can now calculate client load (experimental).
238 ACN, ALCAP, ANSI MAP, ASN.1 BER, BSSAP, DCE/RPC DRSUAPI, DCE/RPC
239 INITSHUTDOWN, DCE/RPC RS_BIND, FC-SP, FICON, GSM BSSMAP, GSM DTAP,
241 SMS TPDU, GSM SMS, GSM SS, H.450, IOS 4.0.1 IS-637-A (SMS), IS-683-A
242 (OTA), T.38, TCAP, TPCP
244 Updated protocol support
246 AODV, ASN.1 PER, BSSGP, CDP, Cisco HDLC, COPS, DCE/RPC BROWSER,
248 DNSSERVER, DCE/RPC EPM, DCE/RPC LSA, DCE/RPC Messenger, DCE/RPC REG,
249 DCE/RPC SVCCTL, DCE/RPC, DFS, DHCPv6, DOCSIS, EAPOL, ENIP, Frame
251 FTP, GPRS, Gryphon, GTP, H.225, H.245, HTTP, ICMP, IEEE 802.11, IPX,
252 ISAKMP, ISUP, LAPB, Laplink, LWAPP, MAPI, MDSHDR, MEGACO, MPLS, NCP,
253 NDPS, NETLOGON, NFS, NTLMSSP, OSPF, OXID, PPP, Q.931, Q.933, RANAP,
255 RTP, SAMR, SCCP, SCSI, SCTP, SDP, SIP, SMB, SMPP, SNMP, SOCKS,
257 SPOOLSS SRVLOC, SRVSVC, T.35, TACACS+, TAPI, TCP, TZSP, WKSSVC, WSP,
258 X.25, Yahoo! Messenger
261 Updated capture file support
263 Linux Bluez Bluetooth hcidump support has been added.
265 Endace ERF and Network Instruments Observer, and NetXRay support has
271 Ethereal 0.9.15 has been released.
273 New and updated features
275 Many often-requested features have been added with this release. If
276 you're running an older version of Ethereal you may want to have a
279 Conversation List (aka "top talker") support has been added to
281 and Tethereal. Protocol statistics in general have been updated.
283 Searching capture files has been improved even more -- a new
285 display filter operator that searches for strings in PDUs has been
286 added. The Find dialog now supports case-insensitive searches, hex
290 An H.225 dissector has been added. It can automatically recognize
292 and RTCP conversations.
294 A preference file has been added for disabled protocols.
296 Color filters may now be imported and exported from within Ethereal.
298 A new column type has been added for cumulative bytes.
303 GPRS BSSGP, GPRS NS, H.225, H.263, LWAPP, Laplink, Q.933, STUN
308 ArtNet, BOOTP/DHCP, DCE/RPC, DCERPCSTAT, DHCPv6, DOCSIS, ENIP,
310 FCIP, Frame Relay, H.245, HTTP, IPsec, iSCSI, LDAP, LWRES, M2UA,
312 MEGACO, MTP3, NCP, NDPS, NFS, NTLMSSP, PPTP, Q.931, RPC, SAMR, SCCP,
313 SCTP, SIP, SMB, SMPP, SNA, SNMP, SRVLOC, SUA, TCP, TDS, UCD, UDP,
317 Updated capture file support
319 Support for Accellent 5Views and Endace ERF capture files was added.
320 CheckPoint FW-1 and Novell LANalyzer support has been enhanced.
325 Ethereal 0.9.14 has been released.
327 New and updated features
329 The ringbuffer code has been (nearly) completely rewritten. It now
330 supports an unlimited number of files.
332 Ethereal now supports searching for arbitrary text and binary data
336 Service response time statistics have been enhanced.
338 Tethereal, the text-mode version of Ethereal, can now be compiled
339 without capture support.
342 New and updated features
344 Echo, eDonkey, Jabber, MS Messenger, sFlow
349 AODV, AODV6, Boardwalk, DCE-RPC, ENIP, Fibre Channel, FIX, FW1,
351 IGMP, IPsec, IS-IS, iSCSI, ISUP, LDAP, LDP, M2UA, MEGACO, MTP3,
353 NETLOGON, NTLMSSP, NTP, Q.2931, Q.931, SAMR, SCCP, SCSI, SMB, SMPP,
355 SNMP, SPNEGO, SPOOLSS, SRVLOC, UCP, Vines, VRRP, WBXML, WEP, WSP,
360 Updated capture file support
367 Ethereal 0.9.13 has been released.
369 This release fixes a large number of security issues discovered by
371 Sirainen and others. See
373 http://www.ethereal.com/appnotes/enpa-sa-00010.html
377 New and updated features
379 Ethereal now supports a system-wide color filter file.
381 Support for the GNU ADNS library has been added. ADNS allows
382 asynchronous DNS lookups.
384 "Decode As..." functionality has been added to Tethereal via the "-
388 The HTTP, FTP, POP, SMTP, IMAP, and ACAP requests and responses are
390 shown in the protocol tree.
394 distcc, EtherNet/IP, MSRPC ATSVC, RTNET/TMDA
398 802.11, AIM, BGP, CLNP, COTP, CPHA, DCERPC, DNS, EAPOL, Ethernet,
400 GSSAPI, IP, ISAKMP, ISIS, LDAP, LSP, M2PA, MAPI, Modbus, NDPS, NFS,
401 NTLMSSP, OSI, OSPF, OpenBSD pflog, PPTP, RMCP, RMI, RPC, RTP, SCSI,
402 SCTP, SIP, SMB, SMPP, SMTP, SNMP, SPNEGO, TACACS, TCP, TSP, WBXML,
406 Updated capture file support
408 HP-UX nettl, VMS UCX$TRACE
413 Ethereal 0.9.12 has been released.
415 This release fixes several off-by-one and integer overflow errors
416 discovered by Timo Sirainen. See
418 http://www.ethereal.com/appnotes/enpa-sa-00009.html
422 New and updated features
424 TCP sequence number analysis received a few improvements.
426 General packet reassembly has been improved.
428 The "Follow TCP Stream" window now allows you to filter out the
432 The Vines code received significant updates.
434 Several enhancements were made to the text2pcap utility.
438 ArtNET, IPX WAN, Intel ANS, iSNS, NLSP, WKSSVC
442 802.11 ACAP, AFP, AIM, AJP, ASAP, BGP, CLNP, CPHA, DCE/RPC, DSI,
444 IP, IPMI, IPX, IPv6, ISIS, ISUP, IUA, Kerberos, LDAP, M2PA, M2TP,
446 M3UA, MGCP, MTP2, MTP3, MTP3MG, Modbus/TCP, NDMP, NDPS, NFS, NLSP,
448 Q.931, RANAP, RPC, RSVP, SCCP, SCCPMG, SCTP, SMB, SNMP, SPX, SSH,
450 TCP, Telnet, Vines, WBXML, WSP, WTP
452 Updated capture file support
459 Ethereal 0.9.11 has been released.
461 The Ethereal 0.9.10 release was packaged improperly. This release
463 the packaging, and adds minor updates and fixes for the following
466 AFS, OpenBSD enc(4), RTP, SCSI, SIP, SMPP, SSH
468 IA64 support has been improved.
473 Ethereal 0.9.10 has been released.
475 This release fixes a security hole discovered by Georgi Guninski in
477 SOCKS dissector as well as problems with the NTLMSSP and Rsync code.
478 All users of previous versions are encouraged to upgrade. See
480 http://www.ethereal.com/appnotes/enpa-sa-00008.html
485 New and Updated Features
487 Many small updates were made to the user interface.
489 The "Help" menu now includes the FAQ.
491 The TCP dissector was enhanced. Many more fields are filterable.
493 Tethereal received more IO stats: TCP and UDP top talkers.
495 Packet reassembly has been improved.
497 The "Follow TCP Stream" feature can now export C byte arrays.
499 RTP streams can now be saved to a file.
504 A missing comma in a string array could cause Ethereal to crash when
505 opening the preferences dialog.
510 MSN Messenger, Rsync, SSH, Yahoo! Messenger
515 AFP, AFS, AIM, ATM, Apache JServ, BACNET, BGP, BOOTP, CLNP, COPS,
517 DCERPC NT, DCERPC, DNS, ESIS, Ethernet, Frame Relay, GIOP, GTP, HP
518 extended 802.2 LLC, HP-UX remote management, HTTP, IPP, IPX, LLC,
520 M3UA, MDSHDR, MIP6, MPLS, MySQL, NCP2222, NETLOGON, NLPID, NetFlow,
521 OpenBSD enc(4), OSI, PPP, RADIUS, RMP, RPL, SAMR, SCSI, SMB, SNA,
523 SOCKS, SPOOLSS, SRVLOC, SRVSVC, SSL, SliMP3, TCP, Token Ring, WBXML,
524 Wellfleet BofL X.25, X11
527 Updated Capture File Support
529 NetXRay, NGSniffer, Snoop
534 Ethereal 0.9.9 has been released.
536 Please note the next release will NOT be 1.0. There are still more
537 features to be added before a 1.0 release will be ready.
540 New and Updated Features
542 Plugin search behavior was improved under Unix, allowing more than
544 version of Ethereal to be installed at one time.
546 The statistics graphs have been enhanced. More statistics have been
549 Round-trip-time statistics are now computed for SMB traffic.
551 NCP Call and Reply times are now tracked.
553 Top talker statistics for Ethernet, IP and Token Ring are now
554 available (tethereal only).
556 Color allocation and handling was improved.
558 The RADIUS dissector can now decrypt user passwords.
560 Tethereal now supports reading from a pipe under Unix.
562 The ATM code received major improvements.
564 The DOS Sniffer code also received major improvements.
566 For those that compile Ethereal from source, some fixes and updates
567 have been made to the configuration and build environment.
572 The capture progress window now shows the correct number of elapsed
575 A potential infinite loop in the TCP graphing code has been fixed.
580 MDSHDR, MEGACO, MySQL, SDLC, X.29
585 802.11, AFP, AFS, AIM, ARCNET, ASAP, ATM, BPDU, Cisco HDLC, CLNP,
587 RPC, DDTP, Ethernet, FC-ELS, FCIP, H.261, IMSI, IP, IP-over-FC,
589 LMI, M3UA, MTP3, NCP, NetBIOS, NETLOGON, ONC RPC, OSPF, PIM, PPP,
590 RADIUS, RANAP, RPC, SAMR, SCTP, SMB, SPNEGO, SPOOLSS, SRVLOC,
592 SUA, TNS, Token Ring, Wellfleet HDLC, X.25
595 Updated Capture File Support
597 Firewall-1, Netmon, NetXRay, Radcom, Sniffer
602 Ethereal 0.9.8 has been released.
604 Serious problems with the BGP, LMP, PPP, and TDS dissectors have
608 http://www.ethereal.com/appnotes/enpa-sa-00007.html
613 New and Updated Features
615 The TAP subsystem received major updates. Tethereal can display
616 more statistics, and several graphs have been added to Ethereal.
618 A protocol hierarchy statistics tap was added to tethereal. This
620 may be used to replace the hierarchy statistics code in Ethereal.
622 More updates have been added to TCP analysis.
624 After a long hiatus, the Windows installer once again includes SNMP
627 The total running time of the capture is now displayed in the
629 progress dialog box. The capture progress dialog also shows ARP
632 The look of the plugins dialog was revamped.
635 Bug Fixes and Updates
637 A bug which caused Ethereal under Windows to crash when "Update list
639 packets in real time" was enabled has been fixed.
641 The stability of the text2pcap utility has been improved.
643 In tethereal, the packet count is properly displayed when you ^C out
650 ARCNET, ClearCase NFS, DCERPC LSA_DS, Fibre Channel, HyperSCSI,
657 AFP, AFS, BACNet, BGP, DCERPC, DCERPC EPM, DCERPC LSA, DCERPC NDR,
658 DCERPC NT, DCERPC SAMR, DCERPC UPDATE, GRE, GTP, HTTP, IPv6CP, IPX,
659 iSCSI, ISDN, IUA, LAPD, LDAP, M2PA, NDPS, NDS, NetBIOS, NFS,
661 OSPF, PPP, PPPoE, Q.2931, Q.931, RPC, RSVP, SCSI, SCTP, SMB, SNMP,
662 Spanning Tree, SPNEGO, SPOOLSS, SPX, SRVLOC, TCP, Telnet, V.120,
667 Updated Capture File Support
669 AIX iptrace and tcpdump, NetXRay, Sniffer, snoop
672 == September 28, 2002
674 Ethereal 0.9.7 has been released.
678 In order to improve the out-of-box responsiveness of Ethereal and
679 Tethereal, network name resolution has been disabled by default.
681 TCP analysis (a feature added in the 0.9.6 release) was improved.
683 The NCP code base received quite a few updates.
685 Initial support for version 2 of the GTK+ library was added.
687 RPC staticstics (which use the new Tap API) were added.
689 Due to added and updated support for the NTLM, SNEGO, and GSS-API
690 protocols, Ethereal can now dissect most of the security blobs for
691 Windows 2000 authentication.
693 The Ethernet "manuf" file now handles addresses specified with a
694 mask, and contains many well-known addresses.
699 802.1s MSTP, FIX, GSS-API, Interbase, NDPS, Netflow (Cisco and
701 SCCP-Management, SPNEGO
703 The following DCE/RPC protocols were also added:
705 AFS4INT, BOSSVR, CDS_CLERKSERVER, CDS_SOLICIT, CPRPC_SERVER,
707 DTSPROVIDER, DTSSTIME_REQ, FLDB, FTSERVER, KRB5RPC, REPADMIN,
709 ROVERRIDE, RPRIV, RS_ATTR, RSEC_LOGIN, RS_MISC, RS_PGO, RS_REPLIST,
710 RS_UNIX, SECIDMAP, TKN4INT, UBIKDISK, UKIKVOTE
715 AFP, AODV/AODV6, BGP, CHDLC, CHPA, DCE/RPC CONV, DCE/RPC LSA,
717 NT, DCE/RPC SAMR, DHCP, DNS, DOCSIS, EAP, GTP, HTTP, IP, iSCSI, IS-
719 Kerberos, LDAP, LDP, M2PA MMSE, NBNS, NCP, NDS, NETLOGON, NTLMSSP,
721 Q.931 RPC, RPCSTAT, SCSI, Skinny, SMB, SNEGO, SPOOLSS, SRVSVC, TCP,
727 Ethereal 0.9.6 has been released.
731 A buffer overflow in the ISIS dissector has been fixed. More
732 information can be found at
733 http://www.ethereal.com/appnotes/enpa-sa-00006.html.
735 A bad TCP header could cause problems for the "Follow TCP Stream"
738 Setting "column.format" from the command line no longer crashes
739 Ethereal and Tethereal.
741 Problems with capture files being overwritten (e.g. if you try to
743 the current capture file) have been fixed.
745 An SMB conversation handling bug has been fixed.
747 Thanks to Valgrind, several memory leaks have been fixed.
749 Some problems with printing under Windows have been fixed.
754 TCP sequence number analysis has been added.
756 The DCE RPC NETLOGON dissector has received a major overhaul.
758 Data types throughout the code have been cleaned up.
763 CPHA, DOCSIS, NTLMSSP, Xyplex terminal server protocol, ZIP
768 802.11, AFP, ASAP, BGP, CDP, CDPCP, CPHA, DDP, DCERPC, DCERPC NT,
770 REG, EPM, FTP, HCLNFSD, HTTP, IPX, ISAKMP, ISIS, IUA, Kerberos,
772 LLMNR, LSA, MMSE, MPLSCP, NBNS, NetBIOS, NETLOGON, NFS, NTLMSSP,
774 Quake2, RADIUS, RSVP, RTCP, SAMR, SCSI, SDP, SIP, SMB, SMB Mailslot,
775 SMTP, SPOOLSS, TCP, TDS, TNS, TPKT, Token Ring, VJ TCP, WINREG, WSP
780 CheckPoint Firewall-1 monitor file support and CoSine debug file
782 were added. Support for pppdump and Netmon files was updated.
787 Ethereal 0.9.5 has been released. This version fixes several potential
788 security problems revealed since the release of 0.9.4. See the
790 advisory at http://www.ethereal.com/appnotes/enpa-sa-00005.html for
796 The ability to read packet data from a pipe was enhanced. Printing
797 under Windows now works.
802 802.3 LACP, Apache JServ, AODV6, DCERPC Browser, Java RMI, TAPI
807 ATM, BGP, BOOTP, DCE RPC, EPM, Frame Relay, GTP, L2TP, LMP, MAPI, MIP,
808 MMSE, MTP3, NCP, NFS, NSPI, PPP, Q2931, RADIUS, RSVP, SCSI, SMB, SNA,
809 SOCKS, SPOOLSS, SRVSVC, SunATM, TFTP, TNS, Token Ring, UCP, VJ TCP/IP,
815 Ethereal can now write LANalyzer files. The Sniffer, nettl, snoop,
816 NetXRay, and libpcap code all received updates.