1 $Id: NEWS,v 1.140 2004/02/19 02:39:26 gerald Exp $
5 Ethereal 0.10.1 has been released.
8 New and updated features
10 The Windows installer now lets you choose between the traditional GTK+
11 version 1 interface and a new GTK+ 2 interface.
13 Several updates were made to Ethereal's user interface. The "File" menu
14 now has a "most recently used" list. The help menu was greatly expanded.
16 The "matches" operator now handles more data types. For example, you can
19 smtp matches joespammer@example.com
23 I/O statistics now support 1ms resolution.
27 A column resorting crash on the Windows platform was fixed.
31 EDP, IAX2, IrDA, ISMP, OLSR, PostgreSQL, PRES, V5UA
33 Updated protocol support
35 ACSE, AFP, AIM, ANSI MAP, ARCNET, ASN.1, BEEP, BGP, BPDU, BSSAP, CLNP,
36 COPS, CPHA, DCERPC AFS4INT, FLDB, RPRIV, RS_REPADM, STAT, SVCCTL,
37 TRKSVR, WKSSVC, DCERPC, DHCPv6, DNS, DOCSIS, EAP, ENIP, ESIS, FC, FC-IP,
38 FC-SB3, FW-1, GIF (OK, so it's a file format and not a protocol per se),
39 GIOP, GRE, GSM MAP, GSM SMS, GTP, H.225, H.245, H.450, HTTP, ICMPv6,
40 IEEE 802.11, IPMI, IPv4, IPv6, IPX, ISAKMP, iSCSI, ISDN, ISUP, JFIF,
41 Kerberos, KPASSWD, L2TP, LDAP, LDP, LWAPP, MGCP, MLD, MMSE, Mobile IPv6,
42 MSPROXY, MTP3, NBNS, NCP, NDMP, NFS, OSI, OSPF, PER, PGM, Q.931, RADIUS,
43 RMI, RSTAT, RTP, RTSP, SCCP, SDP, SES, SIP, SLL, SLSK, SMB, SMPP, SNMP,
44 SOCKS, SRVLOC, SSH, SSL, STUN, T.38, TACACS, TCAP, TDS, Telnet, Teredo,
45 Text, TFTP, TZSP, UDP, Vines, WAP, WBXML, WSP, WTP, X11
48 Updated capture file support
50 DBS EtherWatch, EtherPeek/AiroPeek, EyeSDN, LANAlzyer, NetXRay, Snoop
55 Ethereal 0.10.0 has been released.
57 This release fixes issues in the SMB and Q.931 dissectors that could
58 make Ethereal and Tethereal crash. See
60 http://www.ethereal.com/appnotes/enpa-sa-00012.html
64 New and updated features
66 Many performance improvements have been made to the code. Most users
67 should see a 2x to 3x performance increase when loading and working with
70 A "matches" display filter operator has been added. It is similar to
71 the "contains" operator, but supports Perl-compatible regular
74 Tethereal can now dump packet data in XML (PDML) format.
76 The main application menus have been rearranged and the help windows
77 have been revamped, along with a host of other UI enhancements.
79 The capture progress window now features bar graphs.
81 The GLib, GTK+, Net-SNMP, and zlib libraries that ship with the Windows
82 installer have been updated.
86 BFD, CCSDS, CPFI, DCE/RPC {BUDB, EPM4, ICL_RPC, RS_PLCY, RS_PROP_ACCT}
87 IGAP, ISO 8327-1 SES, MS Kpasswd, RTCFG, SEBEK,
89 Updated protocol support
91 ACN, AFP, ANSI A, ANSI MAP, ASN.1, BSMAP, BSSAP, CPFI, DCE/RPC {DCOM,
92 EPM, NDR, SRVSVC, STAT, WKSSVC}, DCE/RPC, DHCP, DNS, DOCSIS, DSI, DTAP,
93 ENTTEC, FC ELS, FC FZS, FC-SP, FC-SWILS, GIOP, GPRS NS, GSM A, GSM MAP,
94 H.225, H.450, HTTP, ICMP, IPv6, IS-IS, ISAKMP, ISUP, Kerberos, LDAP,
95 LDP, MIPv6, MMSE, MS Proxy, MTP3, NCP 2222, NTP, PIM, RADIUS, RANAP,
96 RDM, RSVP, RTCP, RTP, SCCP, SDP, SIP, SMB, SMPP, SOCKS, SONMP, SRVLOC,
97 SSL, TACACS, TCAP, TCP, TPKT, TZSP, UCP, WAP, WBXML, WLAN, WSP, WTP
100 Updated capture file support
102 AiroPeek v9 (2.x) support was added. Network Instruments Observer and
103 Snoop support was updated.
108 Ethereal 0.9.16 has been released.
110 This release fixes potential security issues with the GTP, ISAKMP,
111 MEGACO, and SOCKS dissectors. See
113 http://www.ethereal.com/appnotes/enpa-sa-00011.html
117 New and updated features
119 Ethereal has leapt forward into the 90's and added a toolbar.
121 Ethereal and Tethereal can now force the data link type of captured
124 RTP analysis has been enhanced.
126 Individual frames can now be marked as time references
128 Service response time and general I/O statistics have been enhanced. I/O
129 statistics can now calculate client load (experimental).
133 ACN, ALCAP, ANSI MAP, ASN.1 BER, BSSAP, DCE/RPC DRSUAPI, DCE/RPC
134 INITSHUTDOWN, DCE/RPC RS_BIND, FC-SP, FICON, GSM BSSMAP, GSM DTAP, GSM
135 SMS TPDU, GSM SMS, GSM SS, H.450, IOS 4.0.1 IS-637-A (SMS), IS-683-A
136 (OTA), T.38, TCAP, TPCP
138 Updated protocol support
140 AODV, ASN.1 PER, BSSGP, CDP, Cisco HDLC, COPS, DCE/RPC BROWSER, DCE/RPC
141 DNSSERVER, DCE/RPC EPM, DCE/RPC LSA, DCE/RPC Messenger, DCE/RPC REG,
142 DCE/RPC SVCCTL, DCE/RPC, DFS, DHCPv6, DOCSIS, EAPOL, ENIP, Frame Relay,
143 FTP, GPRS, Gryphon, GTP, H.225, H.245, HTTP, ICMP, IEEE 802.11, IPX,
144 ISAKMP, ISUP, LAPB, Laplink, LWAPP, MAPI, MDSHDR, MEGACO, MPLS, NCP,
145 NDPS, NETLOGON, NFS, NTLMSSP, OSPF, OXID, PPP, Q.931, Q.933, RANAP, RIP,
146 RTP, SAMR, SCCP, SCSI, SCTP, SDP, SIP, SMB, SMPP, SNMP, SOCKS, SONMP,
147 SPOOLSS SRVLOC, SRVSVC, T.35, TACACS+, TAPI, TCP, TZSP, WKSSVC, WSP,
148 X.25, Yahoo! Messenger
151 Updated capture file support
153 Linux Bluez Bluetooth hcidump support has been added.
155 Endace ERF and Network Instruments Observer, and NetXRay support has
161 Ethereal 0.9.15 has been released.
163 New and updated features
165 Many often-requested features have been added with this release. If
166 you're running an older version of Ethereal you may want to have a look.
168 Conversation List (aka "top talker") support has been added to Ethereal
169 and Tethereal. Protocol statistics in general have been updated.
171 Searching capture files has been improved even more -- a new "contains"
172 display filter operator that searches for strings in PDUs has been
173 added. The Find dialog now supports case-insensitive searches, hex data
176 An H.225 dissector has been added. It can automatically recognize RTP
177 and RTCP conversations.
179 A preference file has been added for disabled protocols.
181 Color filters may now be imported and exported from within Ethereal.
183 A new column type has been added for cumulative bytes.
188 GPRS BSSGP, GPRS NS, H.225, H.263, LWAPP, Laplink, Q.933, STUN
193 ArtNet, BOOTP/DHCP, DCE/RPC, DCERPCSTAT, DHCPv6, DOCSIS, ENIP, Ethernet,
194 FCIP, Frame Relay, H.245, HTTP, IPsec, iSCSI, LDAP, LWRES, M2UA, M3UA,
195 MEGACO, MTP3, NCP, NDPS, NFS, NTLMSSP, PPTP, Q.931, RPC, SAMR, SCCP,
196 SCTP, SIP, SMB, SMPP, SNA, SNMP, SRVLOC, SUA, TCP, TDS, UCD, UDP, WSP,
199 Updated capture file support
201 Support for Accellent 5Views and Endace ERF capture files was added.
202 CheckPoint FW-1 and Novell LANalyzer support has been enhanced.
207 Ethereal 0.9.14 has been released.
209 New and updated features
211 The ringbuffer code has been (nearly) completely rewritten. It now
212 supports an unlimited number of files.
214 Ethereal now supports searching for arbitrary text and binary data in
217 Service response time statistics have been enhanced.
219 Tethereal, the text-mode version of Ethereal, can now be compiled
220 without capture support.
223 New and updated features
225 Echo, eDonkey, Jabber, MS Messenger, sFlow
230 AODV, AODV6, Boardwalk, DCE-RPC, ENIP, Fibre Channel, FIX, FW1, H.245,
231 IGMP, IPsec, IS-IS, iSCSI, ISUP, LDAP, LDP, M2UA, MEGACO, MTP3, NDS,
232 NETLOGON, NTLMSSP, NTP, Q.2931, Q.931, SAMR, SCCP, SCSI, SMB, SMPP, SNA,
233 SNMP, SPNEGO, SPOOLSS, SRVLOC, UCP, Vines, VRRP, WBXML, WEP, WSP, WTP,
237 Updated capture file support
244 Ethereal 0.9.13 has been released.
246 This release fixes a large number of security issues discovered by Timo
247 Sirainen and others. See
249 http://www.ethereal.com/appnotes/enpa-sa-00010.html
253 New and updated features
255 Ethereal now supports a system-wide color filter file.
257 Support for the GNU ADNS library has been added. ADNS allows
258 asynchronous DNS lookups.
260 "Decode As..." functionality has been added to Tethereal via the "-d"
263 The HTTP, FTP, POP, SMTP, IMAP, and ACAP requests and responses are now
264 shown in the protocol tree.
268 distcc, EtherNet/IP, MSRPC ATSVC, RTNET/TMDA
272 802.11, AIM, BGP, CLNP, COTP, CPHA, DCERPC, DNS, EAPOL, Ethernet, FDDI,
273 GSSAPI, IP, ISAKMP, ISIS, LDAP, LSP, M2PA, MAPI, Modbus, NDPS, NFS,
274 NTLMSSP, OSI, OSPF, OpenBSD pflog, PPTP, RMCP, RMI, RPC, RTP, SCSI,
275 SCTP, SIP, SMB, SMPP, SMTP, SNMP, SPNEGO, TACACS, TCP, TSP, WBXML, WSP,
278 Updated capture file support
280 HP-UX nettl, VMS UCX$TRACE
285 Ethereal 0.9.12 has been released.
287 This release fixes several off-by-one and integer overflow errors
288 discovered by Timo Sirainen. See
290 http://www.ethereal.com/appnotes/enpa-sa-00009.html
294 New and updated features
296 TCP sequence number analysis received a few improvements.
298 General packet reassembly has been improved.
300 The "Follow TCP Stream" window now allows you to filter out the current
303 The Vines code received significant updates.
305 Several enhancements were made to the text2pcap utility.
309 ArtNET, IPX WAN, Intel ANS, iSNS, NLSP, WKSSVC
313 802.11 ACAP, AFP, AIM, AJP, ASAP, BGP, CLNP, CPHA, DCE/RPC, DSI, EAP,
314 IP, IPMI, IPX, IPv6, ISIS, ISUP, IUA, Kerberos, LDAP, M2PA, M2TP, M2UA,
315 M3UA, MGCP, MTP2, MTP3, MTP3MG, Modbus/TCP, NDMP, NDPS, NFS, NLSP, PGM,
316 Q.931, RANAP, RPC, RSVP, SCCP, SCCPMG, SCTP, SMB, SNMP, SPX, SSH, SUA,
317 TCP, Telnet, Vines, WBXML, WSP, WTP
319 Updated capture file support
326 Ethereal 0.9.11 has been released.
328 The Ethereal 0.9.10 release was packaged improperly. This release fixes
329 the packaging, and adds minor updates and fixes for the following
332 AFS, OpenBSD enc(4), RTP, SCSI, SIP, SMPP, SSH
334 IA64 support has been improved.
339 Ethereal 0.9.10 has been released.
341 This release fixes a security hole discovered by Georgi Guninski in the
342 SOCKS dissector as well as problems with the NTLMSSP and Rsync code.
343 All users of previous versions are encouraged to upgrade. See
345 http://www.ethereal.com/appnotes/enpa-sa-00008.html
350 New and Updated Features
352 Many small updates were made to the user interface.
354 The "Help" menu now includes the FAQ.
356 The TCP dissector was enhanced. Many more fields are filterable.
358 Tethereal received more IO stats: TCP and UDP top talkers.
360 Packet reassembly has been improved.
362 The "Follow TCP Stream" feature can now export C byte arrays.
364 RTP streams can now be saved to a file.
369 A missing comma in a string array could cause Ethereal to crash when
370 opening the preferences dialog.
375 MSN Messenger, Rsync, SSH, Yahoo! Messenger
380 AFP, AFS, AIM, ATM, Apache JServ, BACNET, BGP, BOOTP, CLNP, COPS, DCCP,
381 DCERPC NT, DCERPC, DNS, ESIS, Ethernet, Frame Relay, GIOP, GTP, HP
382 extended 802.2 LLC, HP-UX remote management, HTTP, IPP, IPX, LLC, LSA,
383 M3UA, MDSHDR, MIP6, MPLS, MySQL, NCP2222, NETLOGON, NLPID, NetFlow,
384 OpenBSD enc(4), OSI, PPP, RADIUS, RMP, RPL, SAMR, SCSI, SMB, SNA, SNMP,
385 SOCKS, SPOOLSS, SRVLOC, SRVSVC, SSL, SliMP3, TCP, Token Ring, WBXML,
386 Wellfleet BofL X.25, X11
389 Updated Capture File Support
391 NetXRay, NGSniffer, Snoop
396 Ethereal 0.9.9 has been released.
398 Please note the next release will NOT be 1.0. There are still more
399 features to be added before a 1.0 release will be ready.
402 New and Updated Features
404 Plugin search behavior was improved under Unix, allowing more than one
405 version of Ethereal to be installed at one time.
407 The statistics graphs have been enhanced. More statistics have been
410 Round-trip-time statistics are now computed for SMB traffic.
412 NCP Call and Reply times are now tracked.
414 Top talker statistics for Ethernet, IP and Token Ring are now
415 available (tethereal only).
417 Color allocation and handling was improved.
419 The RADIUS dissector can now decrypt user passwords.
421 Tethereal now supports reading from a pipe under Unix.
423 The ATM code received major improvements.
425 The DOS Sniffer code also received major improvements.
427 For those that compile Ethereal from source, some fixes and updates
428 have been made to the configuration and build environment.
433 The capture progress window now shows the correct number of elapsed
436 A potential infinite loop in the TCP graphing code has been fixed.
441 MDSHDR, MEGACO, MySQL, SDLC, X.29
446 802.11, AFP, AFS, AIM, ARCNET, ASAP, ATM, BPDU, Cisco HDLC, CLNP, DCE
447 RPC, DDTP, Ethernet, FC-ELS, FCIP, H.261, IMSI, IP, IP-over-FC, L2TP,
448 LMI, M3UA, MTP3, NCP, NetBIOS, NETLOGON, ONC RPC, OSPF, PIM, PPP,
449 RADIUS, RANAP, RPC, SAMR, SCTP, SMB, SPNEGO, SPOOLSS, SRVLOC, SRVSVC,
450 SUA, TNS, Token Ring, Wellfleet HDLC, X.25
453 Updated Capture File Support
455 Firewall-1, Netmon, NetXRay, Radcom, Sniffer
460 Ethereal 0.9.8 has been released.
462 Serious problems with the BGP, LMP, PPP, and TDS dissectors have been
465 http://www.ethereal.com/appnotes/enpa-sa-00007.html
470 New and Updated Features
472 The TAP subsystem received major updates. Tethereal can display
473 more statistics, and several graphs have been added to Ethereal.
475 A protocol hierarchy statistics tap was added to tethereal. This code
476 may be used to replace the hierarchy statistics code in Ethereal.
478 More updates have been added to TCP analysis.
480 After a long hiatus, the Windows installer once again includes SNMP
483 The total running time of the capture is now displayed in the capture
484 progress dialog box. The capture progress dialog also shows ARP packets.
486 The look of the plugins dialog was revamped.
489 Bug Fixes and Updates
491 A bug which caused Ethereal under Windows to crash when "Update list of
492 packets in real time" was enabled has been fixed.
494 The stability of the text2pcap utility has been improved.
496 In tethereal, the packet count is properly displayed when you ^C out of a
502 ARCNET, ClearCase NFS, DCERPC LSA_DS, Fibre Channel, HyperSCSI, MDNS,
508 AFP, AFS, BACNet, BGP, DCERPC, DCERPC EPM, DCERPC LSA, DCERPC NDR,
509 DCERPC NT, DCERPC SAMR, DCERPC UPDATE, GRE, GTP, HTTP, IPv6CP, IPX,
510 iSCSI, ISDN, IUA, LAPD, LDAP, M2PA, NDPS, NDS, NetBIOS, NFS, NTLMSSP,
511 OSPF, PPP, PPPoE, Q.2931, Q.931, RPC, RSVP, SCSI, SCTP, SMB, SNMP,
512 Spanning Tree, SPNEGO, SPOOLSS, SPX, SRVLOC, TCP, Telnet, V.120, WEP,
516 Updated Capture File Support
518 AIX iptrace and tcpdump, NetXRay, Sniffer, snoop
521 == September 28, 2002
523 Ethereal 0.9.7 has been released.
527 In order to improve the out-of-box responsiveness of Ethereal and
528 Tethereal, network name resolution has been disabled by default.
530 TCP analysis (a feature added in the 0.9.6 release) was improved.
532 The NCP code base received quite a few updates.
534 Initial support for version 2 of the GTK+ library was added.
536 RPC staticstics (which use the new Tap API) were added.
538 Due to added and updated support for the NTLM, SNEGO, and GSS-API
539 protocols, Ethereal can now dissect most of the security blobs for
540 Windows 2000 authentication.
542 The Ethernet "manuf" file now handles addresses specified with a
543 mask, and contains many well-known addresses.
548 802.1s MSTP, FIX, GSS-API, Interbase, NDPS, Netflow (Cisco and Juniper),
549 SCCP-Management, SPNEGO
551 The following DCE/RPC protocols were also added:
553 AFS4INT, BOSSVR, CDS_CLERKSERVER, CDS_SOLICIT, CPRPC_SERVER, DNSSERVER,
554 DTSPROVIDER, DTSSTIME_REQ, FLDB, FTSERVER, KRB5RPC, REPADMIN, REP_PROC,
555 ROVERRIDE, RPRIV, RS_ATTR, RSEC_LOGIN, RS_MISC, RS_PGO, RS_REPLIST,
556 RS_UNIX, SECIDMAP, TKN4INT, UBIKDISK, UKIKVOTE
561 AFP, AODV/AODV6, BGP, CHDLC, CHPA, DCE/RPC CONV, DCE/RPC LSA, DCE/RPC
562 NT, DCE/RPC SAMR, DHCP, DNS, DOCSIS, EAP, GTP, HTTP, IP, iSCSI, IS-IS,
563 Kerberos, LDAP, LDP, M2PA MMSE, NBNS, NCP, NDS, NETLOGON, NTLMSSP, OSI
564 Q.931 RPC, RPCSTAT, SCSI, Skinny, SMB, SNEGO, SPOOLSS, SRVSVC, TCP, WSP,
569 Ethereal 0.9.6 has been released.
573 A buffer overflow in the ISIS dissector has been fixed. More
574 information can be found at
575 http://www.ethereal.com/appnotes/enpa-sa-00006.html.
577 A bad TCP header could cause problems for the "Follow TCP Stream"
580 Setting "column.format" from the command line no longer crashes
581 Ethereal and Tethereal.
583 Problems with capture files being overwritten (e.g. if you try to save over
584 the current capture file) have been fixed.
586 An SMB conversation handling bug has been fixed.
588 Thanks to Valgrind, several memory leaks have been fixed.
590 Some problems with printing under Windows have been fixed.
595 TCP sequence number analysis has been added.
597 The DCE RPC NETLOGON dissector has received a major overhaul.
599 Data types throughout the code have been cleaned up.
604 CPHA, DOCSIS, NTLMSSP, Xyplex terminal server protocol, ZIP
609 802.11, AFP, ASAP, BGP, CDP, CDPCP, CPHA, DDP, DCERPC, DCERPC NT, DCERPC
610 REG, EPM, FTP, HCLNFSD, HTTP, IPX, ISAKMP, ISIS, IUA, Kerberos, L2TP,
611 LLMNR, LSA, MMSE, MPLSCP, NBNS, NetBIOS, NETLOGON, NFS, NTLMSSP, PPP,
612 Quake2, RADIUS, RSVP, RTCP, SAMR, SCSI, SDP, SIP, SMB, SMB Mailslot,
613 SMTP, SPOOLSS, TCP, TDS, TNS, TPKT, Token Ring, VJ TCP, WINREG, WSP
618 CheckPoint Firewall-1 monitor file support and CoSine debug file support
619 were added. Support for pppdump and Netmon files was updated.
624 Ethereal 0.9.5 has been released. This version fixes several potential
625 security problems revealed since the release of 0.9.4. See the security
626 advisory at http://www.ethereal.com/appnotes/enpa-sa-00005.html for
632 The ability to read packet data from a pipe was enhanced. Printing
633 under Windows now works.
638 802.3 LACP, Apache JServ, AODV6, DCERPC Browser, Java RMI, TAPI
643 ATM, BGP, BOOTP, DCE RPC, EPM, Frame Relay, GTP, L2TP, LMP, MAPI, MIP,
644 MMSE, MTP3, NCP, NFS, NSPI, PPP, Q2931, RADIUS, RSVP, SCSI, SMB, SNA,
645 SOCKS, SPOOLSS, SRVSVC, SunATM, TFTP, TNS, Token Ring, UCP, VJ TCP/IP,
651 Ethereal can now write LANalyzer files. The Sniffer, nettl, snoop,
652 NetXRay, and libpcap code all received updates.