1 $Id: NEWS,v 1.141 2004/02/24 02:38:22 gerald Exp $
5 This release fixes two major bugs in 0.10.1:
7 Under Windows, the error
9 ** WARNING **: error opening
10 /usr/local/share/ethereal/asn1/default.tt, No such file or directory
12 would be printed at startup.
14 The 0.10.1 source release was missing several files required for
18 New and updated features
20 The user interface has received further updates. The Statistics menu
21 layout has been improved, as well as the capture options dialog layout.
26 Cisco Cast Client Control Protocol
29 Updated protocol support
31 AppleTalk, ASN.1, DCERPC, Diameter, FCSP, GSM A, GSM MAP, GSM SMS, HTTP,
32 IEEE 802.3, Kerberos, MSN Messenger, PostgreSQL, Q.931, RPL, Skinny,
38 Ethereal 0.10.1 has been released.
41 New and updated features
43 The Windows installer now lets you choose between the traditional GTK+
44 version 1 interface and a new GTK+ 2 interface.
46 Several updates were made to Ethereal's user interface. The "File" menu
47 now has a "most recently used" list. The help menu was greatly expanded.
49 The "matches" operator now handles more data types. For example, you can
52 smtp matches joespammer@example.com
56 I/O statistics now support 1ms resolution.
60 A column resorting crash on the Windows platform was fixed.
64 EDP, IAX2, IrDA, ISMP, OLSR, PostgreSQL, PRES, V5UA
66 Updated protocol support
68 ACSE, AFP, AIM, ANSI MAP, ARCNET, ASN.1, BEEP, BGP, BPDU, BSSAP, CLNP,
69 COPS, CPHA, DCERPC AFS4INT, FLDB, RPRIV, RS_REPADM, STAT, SVCCTL,
70 TRKSVR, WKSSVC, DCERPC, DHCPv6, DNS, DOCSIS, EAP, ENIP, ESIS, FC, FC-IP,
71 FC-SB3, FW-1, GIF (OK, so it's a file format and not a protocol per se),
72 GIOP, GRE, GSM MAP, GSM SMS, GTP, H.225, H.245, H.450, HTTP, ICMPv6,
73 IEEE 802.11, IPMI, IPv4, IPv6, IPX, ISAKMP, iSCSI, ISDN, ISUP, JFIF,
74 Kerberos, KPASSWD, L2TP, LDAP, LDP, LWAPP, MGCP, MLD, MMSE, Mobile IPv6,
75 MSPROXY, MTP3, NBNS, NCP, NDMP, NFS, OSI, OSPF, PER, PGM, Q.931, RADIUS,
76 RMI, RSTAT, RTP, RTSP, SCCP, SDP, SES, SIP, SLL, SLSK, SMB, SMPP, SNMP,
77 SOCKS, SRVLOC, SSH, SSL, STUN, T.38, TACACS, TCAP, TDS, Telnet, Teredo,
78 Text, TFTP, TZSP, UDP, Vines, WAP, WBXML, WSP, WTP, X11
81 Updated capture file support
83 DBS EtherWatch, EtherPeek/AiroPeek, EyeSDN, LANAlzyer, NetXRay, Snoop
88 Ethereal 0.10.0 has been released.
90 This release fixes issues in the SMB and Q.931 dissectors that could
91 make Ethereal and Tethereal crash. See
93 http://www.ethereal.com/appnotes/enpa-sa-00012.html
97 New and updated features
99 Many performance improvements have been made to the code. Most users
100 should see a 2x to 3x performance increase when loading and working with
103 A "matches" display filter operator has been added. It is similar to
104 the "contains" operator, but supports Perl-compatible regular
107 Tethereal can now dump packet data in XML (PDML) format.
109 The main application menus have been rearranged and the help windows
110 have been revamped, along with a host of other UI enhancements.
112 The capture progress window now features bar graphs.
114 The GLib, GTK+, Net-SNMP, and zlib libraries that ship with the Windows
115 installer have been updated.
119 BFD, CCSDS, CPFI, DCE/RPC {BUDB, EPM4, ICL_RPC, RS_PLCY, RS_PROP_ACCT}
120 IGAP, ISO 8327-1 SES, MS Kpasswd, RTCFG, SEBEK,
122 Updated protocol support
124 ACN, AFP, ANSI A, ANSI MAP, ASN.1, BSMAP, BSSAP, CPFI, DCE/RPC {DCOM,
125 EPM, NDR, SRVSVC, STAT, WKSSVC}, DCE/RPC, DHCP, DNS, DOCSIS, DSI, DTAP,
126 ENTTEC, FC ELS, FC FZS, FC-SP, FC-SWILS, GIOP, GPRS NS, GSM A, GSM MAP,
127 H.225, H.450, HTTP, ICMP, IPv6, IS-IS, ISAKMP, ISUP, Kerberos, LDAP,
128 LDP, MIPv6, MMSE, MS Proxy, MTP3, NCP 2222, NTP, PIM, RADIUS, RANAP,
129 RDM, RSVP, RTCP, RTP, SCCP, SDP, SIP, SMB, SMPP, SOCKS, SONMP, SRVLOC,
130 SSL, TACACS, TCAP, TCP, TPKT, TZSP, UCP, WAP, WBXML, WLAN, WSP, WTP
133 Updated capture file support
135 AiroPeek v9 (2.x) support was added. Network Instruments Observer and
136 Snoop support was updated.
141 Ethereal 0.9.16 has been released.
143 This release fixes potential security issues with the GTP, ISAKMP,
144 MEGACO, and SOCKS dissectors. See
146 http://www.ethereal.com/appnotes/enpa-sa-00011.html
150 New and updated features
152 Ethereal has leapt forward into the 90's and added a toolbar.
154 Ethereal and Tethereal can now force the data link type of captured
157 RTP analysis has been enhanced.
159 Individual frames can now be marked as time references
161 Service response time and general I/O statistics have been enhanced. I/O
162 statistics can now calculate client load (experimental).
166 ACN, ALCAP, ANSI MAP, ASN.1 BER, BSSAP, DCE/RPC DRSUAPI, DCE/RPC
167 INITSHUTDOWN, DCE/RPC RS_BIND, FC-SP, FICON, GSM BSSMAP, GSM DTAP, GSM
168 SMS TPDU, GSM SMS, GSM SS, H.450, IOS 4.0.1 IS-637-A (SMS), IS-683-A
169 (OTA), T.38, TCAP, TPCP
171 Updated protocol support
173 AODV, ASN.1 PER, BSSGP, CDP, Cisco HDLC, COPS, DCE/RPC BROWSER, DCE/RPC
174 DNSSERVER, DCE/RPC EPM, DCE/RPC LSA, DCE/RPC Messenger, DCE/RPC REG,
175 DCE/RPC SVCCTL, DCE/RPC, DFS, DHCPv6, DOCSIS, EAPOL, ENIP, Frame Relay,
176 FTP, GPRS, Gryphon, GTP, H.225, H.245, HTTP, ICMP, IEEE 802.11, IPX,
177 ISAKMP, ISUP, LAPB, Laplink, LWAPP, MAPI, MDSHDR, MEGACO, MPLS, NCP,
178 NDPS, NETLOGON, NFS, NTLMSSP, OSPF, OXID, PPP, Q.931, Q.933, RANAP, RIP,
179 RTP, SAMR, SCCP, SCSI, SCTP, SDP, SIP, SMB, SMPP, SNMP, SOCKS, SONMP,
180 SPOOLSS SRVLOC, SRVSVC, T.35, TACACS+, TAPI, TCP, TZSP, WKSSVC, WSP,
181 X.25, Yahoo! Messenger
184 Updated capture file support
186 Linux Bluez Bluetooth hcidump support has been added.
188 Endace ERF and Network Instruments Observer, and NetXRay support has
194 Ethereal 0.9.15 has been released.
196 New and updated features
198 Many often-requested features have been added with this release. If
199 you're running an older version of Ethereal you may want to have a look.
201 Conversation List (aka "top talker") support has been added to Ethereal
202 and Tethereal. Protocol statistics in general have been updated.
204 Searching capture files has been improved even more -- a new "contains"
205 display filter operator that searches for strings in PDUs has been
206 added. The Find dialog now supports case-insensitive searches, hex data
209 An H.225 dissector has been added. It can automatically recognize RTP
210 and RTCP conversations.
212 A preference file has been added for disabled protocols.
214 Color filters may now be imported and exported from within Ethereal.
216 A new column type has been added for cumulative bytes.
221 GPRS BSSGP, GPRS NS, H.225, H.263, LWAPP, Laplink, Q.933, STUN
226 ArtNet, BOOTP/DHCP, DCE/RPC, DCERPCSTAT, DHCPv6, DOCSIS, ENIP, Ethernet,
227 FCIP, Frame Relay, H.245, HTTP, IPsec, iSCSI, LDAP, LWRES, M2UA, M3UA,
228 MEGACO, MTP3, NCP, NDPS, NFS, NTLMSSP, PPTP, Q.931, RPC, SAMR, SCCP,
229 SCTP, SIP, SMB, SMPP, SNA, SNMP, SRVLOC, SUA, TCP, TDS, UCD, UDP, WSP,
232 Updated capture file support
234 Support for Accellent 5Views and Endace ERF capture files was added.
235 CheckPoint FW-1 and Novell LANalyzer support has been enhanced.
240 Ethereal 0.9.14 has been released.
242 New and updated features
244 The ringbuffer code has been (nearly) completely rewritten. It now
245 supports an unlimited number of files.
247 Ethereal now supports searching for arbitrary text and binary data in
250 Service response time statistics have been enhanced.
252 Tethereal, the text-mode version of Ethereal, can now be compiled
253 without capture support.
256 New and updated features
258 Echo, eDonkey, Jabber, MS Messenger, sFlow
263 AODV, AODV6, Boardwalk, DCE-RPC, ENIP, Fibre Channel, FIX, FW1, H.245,
264 IGMP, IPsec, IS-IS, iSCSI, ISUP, LDAP, LDP, M2UA, MEGACO, MTP3, NDS,
265 NETLOGON, NTLMSSP, NTP, Q.2931, Q.931, SAMR, SCCP, SCSI, SMB, SMPP, SNA,
266 SNMP, SPNEGO, SPOOLSS, SRVLOC, UCP, Vines, VRRP, WBXML, WEP, WSP, WTP,
270 Updated capture file support
277 Ethereal 0.9.13 has been released.
279 This release fixes a large number of security issues discovered by Timo
280 Sirainen and others. See
282 http://www.ethereal.com/appnotes/enpa-sa-00010.html
286 New and updated features
288 Ethereal now supports a system-wide color filter file.
290 Support for the GNU ADNS library has been added. ADNS allows
291 asynchronous DNS lookups.
293 "Decode As..." functionality has been added to Tethereal via the "-d"
296 The HTTP, FTP, POP, SMTP, IMAP, and ACAP requests and responses are now
297 shown in the protocol tree.
301 distcc, EtherNet/IP, MSRPC ATSVC, RTNET/TMDA
305 802.11, AIM, BGP, CLNP, COTP, CPHA, DCERPC, DNS, EAPOL, Ethernet, FDDI,
306 GSSAPI, IP, ISAKMP, ISIS, LDAP, LSP, M2PA, MAPI, Modbus, NDPS, NFS,
307 NTLMSSP, OSI, OSPF, OpenBSD pflog, PPTP, RMCP, RMI, RPC, RTP, SCSI,
308 SCTP, SIP, SMB, SMPP, SMTP, SNMP, SPNEGO, TACACS, TCP, TSP, WBXML, WSP,
311 Updated capture file support
313 HP-UX nettl, VMS UCX$TRACE
318 Ethereal 0.9.12 has been released.
320 This release fixes several off-by-one and integer overflow errors
321 discovered by Timo Sirainen. See
323 http://www.ethereal.com/appnotes/enpa-sa-00009.html
327 New and updated features
329 TCP sequence number analysis received a few improvements.
331 General packet reassembly has been improved.
333 The "Follow TCP Stream" window now allows you to filter out the current
336 The Vines code received significant updates.
338 Several enhancements were made to the text2pcap utility.
342 ArtNET, IPX WAN, Intel ANS, iSNS, NLSP, WKSSVC
346 802.11 ACAP, AFP, AIM, AJP, ASAP, BGP, CLNP, CPHA, DCE/RPC, DSI, EAP,
347 IP, IPMI, IPX, IPv6, ISIS, ISUP, IUA, Kerberos, LDAP, M2PA, M2TP, M2UA,
348 M3UA, MGCP, MTP2, MTP3, MTP3MG, Modbus/TCP, NDMP, NDPS, NFS, NLSP, PGM,
349 Q.931, RANAP, RPC, RSVP, SCCP, SCCPMG, SCTP, SMB, SNMP, SPX, SSH, SUA,
350 TCP, Telnet, Vines, WBXML, WSP, WTP
352 Updated capture file support
359 Ethereal 0.9.11 has been released.
361 The Ethereal 0.9.10 release was packaged improperly. This release fixes
362 the packaging, and adds minor updates and fixes for the following
365 AFS, OpenBSD enc(4), RTP, SCSI, SIP, SMPP, SSH
367 IA64 support has been improved.
372 Ethereal 0.9.10 has been released.
374 This release fixes a security hole discovered by Georgi Guninski in the
375 SOCKS dissector as well as problems with the NTLMSSP and Rsync code.
376 All users of previous versions are encouraged to upgrade. See
378 http://www.ethereal.com/appnotes/enpa-sa-00008.html
383 New and Updated Features
385 Many small updates were made to the user interface.
387 The "Help" menu now includes the FAQ.
389 The TCP dissector was enhanced. Many more fields are filterable.
391 Tethereal received more IO stats: TCP and UDP top talkers.
393 Packet reassembly has been improved.
395 The "Follow TCP Stream" feature can now export C byte arrays.
397 RTP streams can now be saved to a file.
402 A missing comma in a string array could cause Ethereal to crash when
403 opening the preferences dialog.
408 MSN Messenger, Rsync, SSH, Yahoo! Messenger
413 AFP, AFS, AIM, ATM, Apache JServ, BACNET, BGP, BOOTP, CLNP, COPS, DCCP,
414 DCERPC NT, DCERPC, DNS, ESIS, Ethernet, Frame Relay, GIOP, GTP, HP
415 extended 802.2 LLC, HP-UX remote management, HTTP, IPP, IPX, LLC, LSA,
416 M3UA, MDSHDR, MIP6, MPLS, MySQL, NCP2222, NETLOGON, NLPID, NetFlow,
417 OpenBSD enc(4), OSI, PPP, RADIUS, RMP, RPL, SAMR, SCSI, SMB, SNA, SNMP,
418 SOCKS, SPOOLSS, SRVLOC, SRVSVC, SSL, SliMP3, TCP, Token Ring, WBXML,
419 Wellfleet BofL X.25, X11
422 Updated Capture File Support
424 NetXRay, NGSniffer, Snoop
429 Ethereal 0.9.9 has been released.
431 Please note the next release will NOT be 1.0. There are still more
432 features to be added before a 1.0 release will be ready.
435 New and Updated Features
437 Plugin search behavior was improved under Unix, allowing more than one
438 version of Ethereal to be installed at one time.
440 The statistics graphs have been enhanced. More statistics have been
443 Round-trip-time statistics are now computed for SMB traffic.
445 NCP Call and Reply times are now tracked.
447 Top talker statistics for Ethernet, IP and Token Ring are now
448 available (tethereal only).
450 Color allocation and handling was improved.
452 The RADIUS dissector can now decrypt user passwords.
454 Tethereal now supports reading from a pipe under Unix.
456 The ATM code received major improvements.
458 The DOS Sniffer code also received major improvements.
460 For those that compile Ethereal from source, some fixes and updates
461 have been made to the configuration and build environment.
466 The capture progress window now shows the correct number of elapsed
469 A potential infinite loop in the TCP graphing code has been fixed.
474 MDSHDR, MEGACO, MySQL, SDLC, X.29
479 802.11, AFP, AFS, AIM, ARCNET, ASAP, ATM, BPDU, Cisco HDLC, CLNP, DCE
480 RPC, DDTP, Ethernet, FC-ELS, FCIP, H.261, IMSI, IP, IP-over-FC, L2TP,
481 LMI, M3UA, MTP3, NCP, NetBIOS, NETLOGON, ONC RPC, OSPF, PIM, PPP,
482 RADIUS, RANAP, RPC, SAMR, SCTP, SMB, SPNEGO, SPOOLSS, SRVLOC, SRVSVC,
483 SUA, TNS, Token Ring, Wellfleet HDLC, X.25
486 Updated Capture File Support
488 Firewall-1, Netmon, NetXRay, Radcom, Sniffer
493 Ethereal 0.9.8 has been released.
495 Serious problems with the BGP, LMP, PPP, and TDS dissectors have been
498 http://www.ethereal.com/appnotes/enpa-sa-00007.html
503 New and Updated Features
505 The TAP subsystem received major updates. Tethereal can display
506 more statistics, and several graphs have been added to Ethereal.
508 A protocol hierarchy statistics tap was added to tethereal. This code
509 may be used to replace the hierarchy statistics code in Ethereal.
511 More updates have been added to TCP analysis.
513 After a long hiatus, the Windows installer once again includes SNMP
516 The total running time of the capture is now displayed in the capture
517 progress dialog box. The capture progress dialog also shows ARP packets.
519 The look of the plugins dialog was revamped.
522 Bug Fixes and Updates
524 A bug which caused Ethereal under Windows to crash when "Update list of
525 packets in real time" was enabled has been fixed.
527 The stability of the text2pcap utility has been improved.
529 In tethereal, the packet count is properly displayed when you ^C out of a
535 ARCNET, ClearCase NFS, DCERPC LSA_DS, Fibre Channel, HyperSCSI, MDNS,
541 AFP, AFS, BACNet, BGP, DCERPC, DCERPC EPM, DCERPC LSA, DCERPC NDR,
542 DCERPC NT, DCERPC SAMR, DCERPC UPDATE, GRE, GTP, HTTP, IPv6CP, IPX,
543 iSCSI, ISDN, IUA, LAPD, LDAP, M2PA, NDPS, NDS, NetBIOS, NFS, NTLMSSP,
544 OSPF, PPP, PPPoE, Q.2931, Q.931, RPC, RSVP, SCSI, SCTP, SMB, SNMP,
545 Spanning Tree, SPNEGO, SPOOLSS, SPX, SRVLOC, TCP, Telnet, V.120, WEP,
549 Updated Capture File Support
551 AIX iptrace and tcpdump, NetXRay, Sniffer, snoop
554 == September 28, 2002
556 Ethereal 0.9.7 has been released.
560 In order to improve the out-of-box responsiveness of Ethereal and
561 Tethereal, network name resolution has been disabled by default.
563 TCP analysis (a feature added in the 0.9.6 release) was improved.
565 The NCP code base received quite a few updates.
567 Initial support for version 2 of the GTK+ library was added.
569 RPC staticstics (which use the new Tap API) were added.
571 Due to added and updated support for the NTLM, SNEGO, and GSS-API
572 protocols, Ethereal can now dissect most of the security blobs for
573 Windows 2000 authentication.
575 The Ethernet "manuf" file now handles addresses specified with a
576 mask, and contains many well-known addresses.
581 802.1s MSTP, FIX, GSS-API, Interbase, NDPS, Netflow (Cisco and Juniper),
582 SCCP-Management, SPNEGO
584 The following DCE/RPC protocols were also added:
586 AFS4INT, BOSSVR, CDS_CLERKSERVER, CDS_SOLICIT, CPRPC_SERVER, DNSSERVER,
587 DTSPROVIDER, DTSSTIME_REQ, FLDB, FTSERVER, KRB5RPC, REPADMIN, REP_PROC,
588 ROVERRIDE, RPRIV, RS_ATTR, RSEC_LOGIN, RS_MISC, RS_PGO, RS_REPLIST,
589 RS_UNIX, SECIDMAP, TKN4INT, UBIKDISK, UKIKVOTE
594 AFP, AODV/AODV6, BGP, CHDLC, CHPA, DCE/RPC CONV, DCE/RPC LSA, DCE/RPC
595 NT, DCE/RPC SAMR, DHCP, DNS, DOCSIS, EAP, GTP, HTTP, IP, iSCSI, IS-IS,
596 Kerberos, LDAP, LDP, M2PA MMSE, NBNS, NCP, NDS, NETLOGON, NTLMSSP, OSI
597 Q.931 RPC, RPCSTAT, SCSI, Skinny, SMB, SNEGO, SPOOLSS, SRVSVC, TCP, WSP,
602 Ethereal 0.9.6 has been released.
606 A buffer overflow in the ISIS dissector has been fixed. More
607 information can be found at
608 http://www.ethereal.com/appnotes/enpa-sa-00006.html.
610 A bad TCP header could cause problems for the "Follow TCP Stream"
613 Setting "column.format" from the command line no longer crashes
614 Ethereal and Tethereal.
616 Problems with capture files being overwritten (e.g. if you try to save over
617 the current capture file) have been fixed.
619 An SMB conversation handling bug has been fixed.
621 Thanks to Valgrind, several memory leaks have been fixed.
623 Some problems with printing under Windows have been fixed.
628 TCP sequence number analysis has been added.
630 The DCE RPC NETLOGON dissector has received a major overhaul.
632 Data types throughout the code have been cleaned up.
637 CPHA, DOCSIS, NTLMSSP, Xyplex terminal server protocol, ZIP
642 802.11, AFP, ASAP, BGP, CDP, CDPCP, CPHA, DDP, DCERPC, DCERPC NT, DCERPC
643 REG, EPM, FTP, HCLNFSD, HTTP, IPX, ISAKMP, ISIS, IUA, Kerberos, L2TP,
644 LLMNR, LSA, MMSE, MPLSCP, NBNS, NetBIOS, NETLOGON, NFS, NTLMSSP, PPP,
645 Quake2, RADIUS, RSVP, RTCP, SAMR, SCSI, SDP, SIP, SMB, SMB Mailslot,
646 SMTP, SPOOLSS, TCP, TDS, TNS, TPKT, Token Ring, VJ TCP, WINREG, WSP
651 CheckPoint Firewall-1 monitor file support and CoSine debug file support
652 were added. Support for pppdump and Netmon files was updated.
657 Ethereal 0.9.5 has been released. This version fixes several potential
658 security problems revealed since the release of 0.9.4. See the security
659 advisory at http://www.ethereal.com/appnotes/enpa-sa-00005.html for
665 The ability to read packet data from a pipe was enhanced. Printing
666 under Windows now works.
671 802.3 LACP, Apache JServ, AODV6, DCERPC Browser, Java RMI, TAPI
676 ATM, BGP, BOOTP, DCE RPC, EPM, Frame Relay, GTP, L2TP, LMP, MAPI, MIP,
677 MMSE, MTP3, NCP, NFS, NSPI, PPP, Q2931, RADIUS, RSVP, SCSI, SMB, SNA,
678 SOCKS, SPOOLSS, SRVSVC, SunATM, TFTP, TNS, Token Ring, UCP, VJ TCP/IP,
684 Ethereal can now write LANalyzer files. The Sniffer, nettl, snoop,
685 NetXRay, and libpcap code all received updates.