2 <!DOCTYPE article PUBLIC "-//OASIS//DTD DocBook XML V4.2//EN"
3 "http://www.oasis-open.org/docbook/xml/4.2/docbookx.dtd" [
9 -Use this section to encode all document information
15 <!ENTITY WiresharkCurrentVersion "0.99.5">
20 <title>Wireshark &WiresharkCurrentVersion; Release Notes</title>
22 <section id="WhatIs"><title>What is Wireshark?</title>
24 Wireshark is the world's most popular network protocol analyzer. It
25 is used for troubleshooting, analysis, development, and education.
29 <section id="WhatsNew"><title>What's New</title>
30 <section><title>Bug Fixes</title>
33 The following vulnerabilities have been fixed. See the
34 <ulink url="http://www.wireshark.org/security/wnpa-sec-2007-01.html">security advisory</ulink> for details and a workaround.
39 The TCP dissector could hang or crash while reassembling HTTP packets.
40 <!-- Fixed in r19859 -->
41 <!-- Bug IDs: 1200 -->
42 Versions affected: 0.99.2 to 0.99.4
46 The HTTP dissector could crash.
47 <!-- Fixed in 19899 -->
48 <!-- Bug IDs: None -->
49 Versions affected: 0.99.3 to 0.99.4
53 On some systems, the IEEE 802.11 dissector could crash.
54 <!-- Fixed in 20126 -->
55 <!-- Bug IDs: None -->
56 Versions affected: 0.10.14 to 0.99.4
60 On some systems, the LLT dissector could crash.
61 <!-- Fixed in 20007 -->
62 <!-- Bug IDs: None -->
63 Versions affected: 0.99.3 to 0.99.4
72 The following bugs have been fixed:
77 On Windows systems the packet list scroll bar could sometimes
78 disappear or become unusable.
79 (<ulink url="http://bugs.wireshark.org/bugzilla/show_bug.cgi?id=220">Bug
84 The end of HTTP chunked encoding wasn't being displayed.
85 (<ulink url="http://bugs.wireshark.org/bugzilla/show_bug.cgi?id=646">Bug
90 The Follow TCP Stream window could omit characters.
91 (<ulink url="http://bugs.wireshark.org/bugzilla/show_bug.cgi?id=1043">Bug
96 Opening a flow graph could crash Wireshark.
97 (<ulink url="http://bugs.wireshark.org/bugzilla/show_bug.cgi?id=1117">Bug
102 Follow TCP Stream would sometimes get the direction wrong.
103 (<ulink url="http://bugs.wireshark.org/bugzilla/show_bug.cgi?id=1138">Bug
108 The foreground text in the coloring rules editor was always black..
109 (<ulink url="http://bugs.wireshark.org/bugzilla/show_bug.cgi?id=1164">Bug
114 The CSV export format was incorrect.
115 (<ulink url="http://bugs.wireshark.org/bugzilla/show_bug.cgi?id=1173">Bug
120 On some Windows systems Wireshark could take a long time to start up.
128 <section><title>New and Updated Features</title>
130 The following features are new (or have been significantly updated)
131 since the last release:
135 WPA and WPA2 decryption support has been added. The TDS / MS SQL
136 dissector now de-obfuscates passwords.
140 64-bit file handling has been improved.
144 The <command>Find</command> function now selects the corresponding.
149 <command>Find</command> functionality has been added to the TCP and
154 Main window keyboard navigation has been improved.
162 <ulink url="http://www.cacetech.com/products/airpcap.htm">AirPcap</ulink>
163 support (which provides raw mode capture under Windows) has been
164 enhanced to allow capturing on multiple AirPcap adapters
165 simultaneously using the Multi-Channel Aggregator.
169 You can no longer install Wireshark on Windows 95, 98, or ME. (OK,
170 so it's not a <emphasis>feature</emphasis> per seߪ)
178 <section><title>New Protocol Support</title>
191 <section><title>Updated Protocol Support</title> <para>
206 DCERPC (DCERPC, EFS, EVENTLOG, NSPI, PN-IO, WINREG),
297 <section><title>New and Updated Capture File Support</title>
300 Catapult DCT2000, Netttl, Windows Sniffer / NetXray
307 <section id="GettingWireshark"><title>Getting Wireshark</title>
309 Wireshark source code and installation packages are available from
310 the <ulink url="http://www.wireshark.org/download.html">download
311 page</ulink> on the main web site.
314 <section><title>Vendor-supplied Packages</title>
316 Most Linux and Unix vendors supply their own Wireshark packages.
317 You can usually install or upgrade Wireshark using the package management
318 system specific to that platform. A list of third-party packages
320 <ulink url="http://www.wireshark.org/download.html#otherplat">download page</ulink> on the Wireshark web site.
326 <!-- XXX needs to be written
327 <section id="RemovingWireshark"><title>Removing Wireshark</title>
333 <section id="FileLocations"><title>File Locations</title>
335 Wireshark and TShark look in several different locations for
336 preference files, plugins, SNMP MIBS, and RADIUS dictionaries.
337 These locations vary from platform to platform. You can use
338 About->Folders to find the default locations on your system.
342 <section id="KnownProblems"><title>Known Problems</title>
345 The <guibutton>Filter</guibutton> button is nonfunctional in the
346 file dialogs under Windows.
347 (<ulink url="http://bugs.wireshark.org/bugzilla/show_bug.cgi?id=942">Bug
353 <section id="GettingHelp"><title>Getting Help</title>
355 Community support is available on the wireshark-users mailing list.
356 Subscription information and archives for all of Wireshark's mailing
357 lists can be found on <ulink url="http://www.wireshark.org/lists/">the
361 Commercial support, training, and development services are available
362 from <ulink url="http://www.cacetech.com/">CACE Technologies</ulink>.
366 <section id="FAQ"><title>Frequently Asked Questions</title>
368 A complete FAQ is available on the
369 <ulink url="http://www.wireshark.org/faq.html">Wireshark web site</ulink>.