1 $Id: NEWS,v 1.123 2003/03/08 03:12:32 gerald Exp $
5 Ethereal 0.9.10 has been released.
7 This release fixes a security hole discovered by Georgi Guninski in the
8 SOCKS dissector as well as problems with the NTLMSSP and Rsync code.
9 All users of previous versions are encouraged to upgrade. See
11 http://www.ethereal.com/appnotes/enpa-sa-00008.html
16 New and Updated Features
18 Many small updates were made to the user interface.
20 The "Help" menu now includes the FAQ.
22 The TCP dissector was enhanced. Many more fields are filterable.
24 Tethereal received more IO stats: TCP and UDP top talkers.
26 Packet reassembly has been improved.
28 The "Follow TCP Stream" feature can now export C byte arrays.
30 RTP streams can now be saved to a file.
35 A missing comma in a string array could cause Ethereal to crash when
36 opening the preferences dialog.
41 MSN Messenger, Rsync, SSH, Yahoo! Messenger
46 AFP, AFS, AIM, ATM, Apache JServ, BACNET, BGP, BOOTP, CLNP, COPS, DCCP,
47 DCERPC NT, DCERPC, DNS, ESIS, Ethernet, Frame Relay, GIOP, GTP, HP
48 extended 802.2 LLC, HP-UX remote management, HTTP, IPP, IPX, LLC, LSA,
49 M3UA, MDSHDR, MIP6, MPLS, MySQL, NCP2222, NETLOGON, NLPID, NetFlow,
50 OpenBSD enc(4), OSI, PPP, RADIUS, RMP, RPL, SAMR, SCSI, SMB, SNA, SNMP,
51 SOCKS, SPOOLSS, SRVLOC, SRVSVC, SSL, SliMP3, TCP, Token Ring, WBXML,
52 Wellfleet BofL X.25, X11
55 Updated Capture File Support
57 NetXRay, NGSniffer, Snoop
62 Ethereal 0.9.9 has been released.
64 Please note the next release will NOT be 1.0. There are still more
65 features to be added before a 1.0 release will be ready.
68 New and Updated Features
70 Plugin search behavior was improved under Unix, allowing more than one
71 version of Ethereal to be installed at one time.
73 The statistics graphs have been enhanced. More statistics have been
76 Round-trip-time statistics are now computed for SMB traffic.
78 NCP Call and Reply times are now tracked.
80 Top talker statistics for Ethernet, IP and Token Ring are now
81 available (tethereal only).
83 Color allocation and handling was improved.
85 The RADIUS dissector can now decrypt user passwords.
87 Tethereal now supports reading from a pipe under Unix.
89 The ATM code received major improvements.
91 The DOS Sniffer code also received major improvements.
93 For those that compile Ethereal from source, some fixes and updates
94 have been made to the configuration and build environment.
99 The capture progress window now shows the correct number of elapsed
102 A potential infinite loop in the TCP graphing code has been fixed.
107 MDSHDR, MEGACO, MySQL, SDLC, X.29
112 802.11, AFP, AFS, AIM, ARCNET, ASAP, ATM, BPDU, Cisco HDLC, CLNP, DCE
113 RPC, DDTP, Ethernet, FC-ELS, FCIP, H.261, IMSI, IP, IP-over-FC, L2TP,
114 LMI, M3UA, MTP3, NCP, NetBIOS, NETLOGON, ONC RPC, OSPF, PIM, PPP,
115 RADIUS, RANAP, RPC, SAMR, SCTP, SMB, SPNEGO, SPOOLSS, SRVLOC, SRVSVC,
116 SUA, TNS, Token Ring, Wellfleet HDLC, X.25
119 Updated Capture File Support
121 Firewall-1, Netmon, NetXRay, Radcom, Sniffer
126 Ethereal 0.9.8 has been released.
128 Serious problems with the BGP, LMP, PPP, and TDS dissectors have been
131 http://www.ethereal.com/appnotes/enpa-sa-00007.html
136 New and Updated Features
138 The TAP subsystem received major updates. Tethereal can display
139 more statistics, and several graphs have been added to Ethereal.
141 A protocol hierarchy statistics tap was added to tethereal. This code
142 may be used to replace the hierarchy statistics code in Ethereal.
144 More updates have been added to TCP analysis.
146 After a long hiatus, the Windows installer once again includes SNMP
149 The total running time of the capture is now displayed in the capture
150 progress dialog box. The capture progress dialog also shows ARP packets.
152 The look of the plugins dialog was revamped.
155 Bug Fixes and Updates
157 A bug which caused Ethereal under Windows to crash when "Update list of
158 packets in real time" was enabled has been fixed.
160 The stability of the text2pcap utility has been improved.
162 In tethereal, the packet count is properly displayed when you ^C out of a
168 ARCNET, ClearCase NFS, DCERPC LSA_DS, Fibre Channel, HyperSCSI, MDNS,
174 AFP, AFS, BACNet, BGP, DCERPC, DCERPC EPM, DCERPC LSA, DCERPC NDR,
175 DCERPC NT, DCERPC SAMR, DCERPC UPDATE, GRE, GTP, HTTP, IPv6CP, IPX,
176 iSCSI, ISDN, IUA, LAPD, LDAP, M2PA, NDPS, NDS, NetBIOS, NFS, NTLMSSP,
177 OSPF, PPP, PPPoE, Q.2931, Q.931, RPC, RSVP, SCSI, SCTP, SMB, SNMP,
178 Spanning Tree, SPNEGO, SPOOLSS, SPX, SRVLOC, TCP, Telnet, V.120, WEP,
182 Updated Capture File Support
184 AIX iptrace and tcpdump, NetXRay, Sniffer, snoop
187 == September 28, 2002
189 Ethereal 0.9.7 has been released.
193 In order to improve the out-of-box responsiveness of Ethereal and
194 Tethereal, network name resolution has been disabled by default.
196 TCP analysis (a feature added in the 0.9.6 release) was improved.
198 The NCP code base received quite a few updates.
200 Initial support for version 2 of the GTK+ library was added.
202 RPC staticstics (which use the new Tap API) were added.
204 Due to added and updated support for the NTLM, SNEGO, and GSS-API
205 protocols, Ethereal can now dissect most of the security blobs for
206 Windows 2000 authentication.
208 The Ethernet "manuf" file now handles addresses specified with a
209 mask, and contains many well-known addresses.
214 802.1s MSTP, FIX, GSS-API, Interbase, NDPS, Netflow (Cisco and Juniper),
215 SCCP-Management, SPNEGO
217 The following DCE/RPC protocols were also added:
219 AFS4INT, BOSSVR, CDS_CLERKSERVER, CDS_SOLICIT, CPRPC_SERVER, DNSSERVER,
220 DTSPROVIDER, DTSSTIME_REQ, FLDB, FTSERVER, KRB5RPC, REPADMIN, REP_PROC,
221 ROVERRIDE, RPRIV, RS_ATTR, RSEC_LOGIN, RS_MISC, RS_PGO, RS_REPLIST,
222 RS_UNIX, SECIDMAP, TKN4INT, UBIKDISK, UKIKVOTE
227 AFP, AODV/AODV6, BGP, CHDLC, CHPA, DCE/RPC CONV, DCE/RPC LSA, DCE/RPC
228 NT, DCE/RPC SAMR, DHCP, DNS, DOCSIS, EAP, GTP, HTTP, IP, iSCSI, IS-IS,
229 Kerberos, LDAP, LDP, M2PA MMSE, NBNS, NCP, NDS, NETLOGON, NTLMSSP, OSI
230 Q.931 RPC, RPCSTAT, SCSI, Skinny, SMB, SNEGO, SPOOLSS, SRVSVC, TCP, WSP,
235 Ethereal 0.9.6 has been released.
239 A buffer overflow in the ISIS dissector has been fixed. More
240 information can be found at
241 http://www.ethereal.com/appnotes/enpa-sa-00006.html.
243 A bad TCP header could cause problems for the "Follow TCP Stream"
246 Setting "column.format" from the command line no longer crashes
247 Ethereal and Tethereal.
249 Problems with capture files being overwritten (e.g. if you try to save over
250 the current capture file) have been fixed.
252 An SMB conversation handling bug has been fixed.
254 Thanks to Valgrind, several memory leaks have been fixed.
256 Some problems with printing under Windows have been fixed.
261 TCP sequence number analysis has been added.
263 The DCE RPC NETLOGON dissector has received a major overhaul.
265 Data types throughout the code have been cleaned up.
270 CPHA, DOCSIS, NTLMSSP, Xyplex terminal server protocol, ZIP
275 802.11, AFP, ASAP, BGP, CDP, CDPCP, CPHA, DDP, DCERPC, DCERPC NT, DCERPC
276 REG, EPM, FTP, HCLNFSD, HTTP, IPX, ISAKMP, ISIS, IUA, Kerberos, L2TP,
277 LLMNR, LSA, MMSE, MPLSCP, NBNS, NetBIOS, NETLOGON, NFS, NTLMSSP, PPP,
278 Quake2, RADIUS, RSVP, RTCP, SAMR, SCSI, SDP, SIP, SMB, SMB Mailslot,
279 SMTP, SPOOLSS, TCP, TDS, TNS, TPKT, Token Ring, VJ TCP, WINREG, WSP
284 CheckPoint Firewall-1 monitor file support and CoSine debug file support
285 were added. Support for pppdump and Netmon files was updated.
290 Ethereal 0.9.5 has been released. This version fixes several potential
291 security problems revealed since the release of 0.9.4. See the security
292 advisory at http://www.ethereal.com/appnotes/enpa-sa-00005.html for
298 The ability to read packet data from a pipe was enhanced. Printing
299 under Windows now works.
304 802.3 LACP, Apache JServ, AODV6, DCERPC Browser, Java RMI, TAPI
309 ATM, BGP, BOOTP, DCE RPC, EPM, Frame Relay, GTP, L2TP, LMP, MAPI, MIP,
310 MMSE, MTP3, NCP, NFS, NSPI, PPP, Q2931, RADIUS, RSVP, SCSI, SMB, SNA,
311 SOCKS, SPOOLSS, SRVSVC, SunATM, TFTP, TNS, Token Ring, UCP, VJ TCP/IP,
317 Ethereal can now write LANalyzer files. The Sniffer, nettl, snoop,
318 NetXRay, and libpcap code all received updates.