2 <!DOCTYPE article PUBLIC "-//OASIS//DTD DocBook XML V4.2//EN"
3 "http://www.oasis-open.org/docbook/xml/4.2/docbookx.dtd" [
9 -Use this section to encode all document information
15 <!ENTITY WiresharkCurrentVersion "0.99.5">
20 <title>Wireshark &WiresharkCurrentVersion; Release Notes</title>
22 <section id="WhatIs"><title>What is Wireshark?</title>
24 Wireshark is the world's most popular network protocol analyzer. It
25 is used for troubleshooting, analysis, development, and education.
29 <section id="WhatsNew"><title>What's New</title>
30 <section><title>Bug Fixes</title>
33 The following vulnerabilities have been fixed. See the
34 <ulink url="http://www.wireshark.org/security/wnpa-sec-2007-01.html">security advisory</ulink> for details and a workaround.
39 The TCP dissector could hang or crash while reassembling HTTP packets.
40 <!-- Fixed in r19859 -->
41 <!-- Bug IDs: 1200 -->
42 Versions affected: 0.99.2 to 0.99.4
46 The HTTP dissector could crash.
47 <!-- Fixed in 19899 -->
48 <!-- Bug IDs: None -->
49 Versions affected: 0.99.3 to 0.99.4
53 On some systems, the IEEE 802.11 dissector could crash.
54 <!-- Fixed in 20126 -->
55 <!-- Bug IDs: None -->
56 Versions affected: 0.10.14 to 0.99.4
60 On some systems, the LLT dissector could crash.
61 <!-- Fixed in 20007 -->
62 <!-- Bug IDs: None -->
63 Versions affected: 0.99.3 to 0.99.4
72 The following bugs have been fixed:
77 On Windows systems the packet list scroll bar could sometimes
78 disappear or become unusable.
79 (<ulink url="http://bugs.wireshark.org/bugzilla/show_bug.cgi?id=220">Bug
84 The end of HTTP chunked encoding wasn't being displayed.
85 (<ulink url="http://bugs.wireshark.org/bugzilla/show_bug.cgi?id=646">Bug
90 The Follow TCP Stream window could omit characters.
91 (<ulink url="http://bugs.wireshark.org/bugzilla/show_bug.cgi?id=1043">Bug
96 Opening a flow graph could crash Wireshark.
97 (<ulink url="http://bugs.wireshark.org/bugzilla/show_bug.cgi?id=1117">Bug
102 Follow TCP Stream would sometimes get the direction wrong.
103 (<ulink url="http://bugs.wireshark.org/bugzilla/show_bug.cgi?id=1138">Bug
108 The foreground text in the coloring rules editor was always black..
109 (<ulink url="http://bugs.wireshark.org/bugzilla/show_bug.cgi?id=1164">Bug
114 The CSV export format was incorrect.
115 (<ulink url="http://bugs.wireshark.org/bugzilla/show_bug.cgi?id=1173">Bug
120 On some Windows systems Wireshark could take a long time to start up.
128 <section><title>New and Updated Features</title>
130 The following features are new (or have been significantly updated)
131 since the last release:
135 WPA and WPA2 decryption support has been added. The TDS / MS SQL
136 dissector now de-obfuscates passwords.
140 64-bit file handling has been improved.
144 The <command>Find</command> function now selects the corresponding.
149 <command>Find</command> functionality has been added to the TCP and
154 Main window keyboard navigation has been improved.
158 <ulink url="http://www.cacetech.com/products/airpcap.htm">AirPcap</ulink>
159 support (which provides raw mode capture under Windows) has been
160 enhanced to allow capturing on multiple AirPcap adapters
161 simultaneously using the Multi-Channel Aggregator.
165 You can no longer install Wireshark on Windows 95, 98, or ME. (OK,
166 so it's not a <emphasis>feature</emphasis> per seߪ)
174 <section><title>New Protocol Support</title>
187 <section><title>Updated Protocol Support</title> <para>
202 DCERPC (DCERPC, EFS, EVENTLOG, NSPI, PN-IO, WINREG),
292 <section><title>New and Updated Capture File Support</title>
295 Catapult DCT2000, Netttl, Windows Sniffer / NetXray
302 <section id="GettingWireshark"><title>Getting Wireshark</title>
304 Wireshark source code and installation packages are available from
305 the <ulink url="http://www.wireshark.org/download.html">download
306 page</ulink> on the main web site.
309 <section><title>Vendor-supplied Packages</title>
311 Most Linux and Unix vendors supply their own Wireshark packages.
312 You can usually install or upgrade Wireshark using the package management
313 system specific to that platform. A list of third-party packages
315 <ulink url="http://www.wireshark.org/download.html#otherplat">download page</ulink> on the Wireshark web site.
321 <!-- XXX needs to be written
322 <section id="RemovingWireshark"><title>Removing Wireshark</title>
328 <section id="FileLocations"><title>File Locations</title>
330 Wireshark and TShark look in several different locations for
331 preference files, plugins, SNMP MIBS, and RADIUS dictionaries.
332 These locations vary from platform to platform. You can use
333 About->Folders to find the default locations on your system.
337 <section id="KnownProblems"><title>Known Problems</title>
340 The <guibutton>Filter</guibutton> button is nonfunctional in the
341 file dialogs under Windows.
342 (<ulink url="http://bugs.wireshark.org/bugzilla/show_bug.cgi?id=942">Bug
348 <section id="GettingHelp"><title>Getting Help</title>
350 Community support is available on the wireshark-users mailing list.
351 Subscription information and archives for all of Wireshark's mailing
352 lists can be found on <ulink url="http://www.wireshark.org/lists/">the
356 Commercial support, training, and development services are available
357 from <ulink url="http://www.cacetech.com/">CACE Technologies</ulink>.
361 <section id="FAQ"><title>Frequently Asked Questions</title>
363 A complete FAQ is available on the
364 <ulink url="http://www.wireshark.org/faq.html">Wireshark web site</ulink>.