Wireshark (32-bit)

What's new in this version:

Bug Fixes
- Florent Drouin and David Maciejak found that the Bluetooth ACL dissector could crash or abort.
- The Q.931 dissector could crash or abort.
- Wireshark could abort while reading Tamos CommView capture files.
- David Maciejak found that the USB dissector could crash or abort. This led to the disovery of a similar problem in the Bluetooth RFCOMM dissector.
- Vivek Gupta and David Maciejak found that the PRP and MATE dissectors could make Wireshark crash. (Neither PRP nor MATE are enabled by default.)

The following bugs have been fixed:
- Let MP2T call its subdissectors, even without tree
- Wireless Toolbar not enabled (using AirPcap) if PCAP_REMOTE=1
- Failure to dissect long SASL wrapped LDAP response
- Fix compiler warnings
- Homeplug dissection bugs
- Malformed Packet DCP ETSI error
- Wrong size of selected_registrar in WPS dissector
- Dissector assertion displaying cookies in DTLS frames
- Missing field type in documentation
- Wireshark -p switch seems to have no effect to PROMISCUOUS mode
- Misspelled PPI error vector magnitude filter
- Modbus Function 43 Encapsulated Interface Transport decoding
- Crash when printing or exporting some protocol data
- Crash when selecting "Export Selected Packet Bytes"

New and Updated Features
- There are no new or updated features in this release.

New Protocol Support
- There are no new protocols in this release.

Updated Protocol Support
- AFP, Bluetooth ACL, Bluetooth RFCOMM, DCP ETSI, DTLS, Homeplug, IEEE 802.11, IP, Modbus TCP, MP2T, NSIP, NCP, PPI, Q.931, SASL, SNMP, USB, WPS

New and Updated Capture File Support
- AiroPeek, CommView

Getting Wireshark
- Wireshark source code and installation packages are available from the download page on the main web site.

Vendor-supplied Packages
- Most Linux and Unix vendors supply their own Wireshark packages.
- You can usually install or upgrade Wireshark using the package management system specific to that platform. A list of third-party packages can be found on the download page on the Wireshark web site.

File Locations
- Wireshark and TShark look in several different locations for preference files, plugins, SNMP MIBS, and RADIUS dictionaries. These locations vary from platform to platform. You can use About->Folders to find the default locations on your system.

Known Problems
- Wireshark may appear offscreen on multi-monitor Windows systems.
- Wireshark might make your system disassociate from a wireless network on OS X.
- Dumpcap might not quit if Wireshark or TShark crashes.
- The BER dissector might infinitely loop.
- Wireshark can't dynamically update the packet list. This means that host name resolutions above a certain response time threshold won't show up in the packet list.
- Capture filters aren't applied when capturing from named pipes.
- Wireshark might freeze when reading from a pipe.
- Capturing from named pipes might be delayed on Windows.
- Filtering tshark captures with display filters (-R) no longer works.

Getting Help
- Community support is available on the wireshark-users mailing list. Subscription information and archives for all of Wireshark's mailing lists can be found on the web site.
- Commercial support and development services are available from CACE Technologies.

Frequently Asked Questions
- A complete FAQ is available on the Wireshark web site.