Wireshark (64-bit) 歷史版本列表
更新時間：2012-08-16
更新細節：
What's new in this version:
The following bugs have been fixed:
- Move Y.1711 out of MPLS dissector.
- Patch: Add frame.interface_id support for ERF file format.
- Freeze when Resizing or Moving while capturing.
- Wireshark crashes when using multiple files.
- Wireshark crashes on opening very short NFS pcap file.
- Analyze->Apply as Filter and Analyze->Prepare a Filter cause crashes.
- crashes in interface list, pipe handling.
- ISDN LAPD X.31 packet traffic can not be decoded.
- GIOP request_id used for sub dissectors is not assigned when decoding GIOP 1.2 Request message.
- pcap-ng -ISB always writes 0 for isb_ifrecv option.
- GSM classmark3 decode wrong.
- mem corruptionheap corruptiondiv0 bugs.
- DNS AD flag not shown properly.
- Wireshark and TShark crash at start with invalid color filter on SPARC.
Updated Protocol Support:
- AFP, Apache JServ Protocol v1.3, Bluetooth L2CAP, CIP, CTDB, DCP ETSI, ERF, EtherCAT Mailbox, FC Link Control, GIOP, GSM A, GSM RLC MAC, GTP, GTPv2, ISDN, LISP, MongoDB, MPLS ITU-T Y.1711 OAM, MPLS PM, NFS, RTPS2, SCTP, STUN, XTP
New and Updated Capture File Support:
- Ixia IxVeriWave, pcap-ng
更新時間：2012-07-24
更新細節：
What's new in this version:
Bugs fixed:
- Wireshark crashes on bootp filter.
- Wireshark > 1.4 does not correctly read Association ID for PS Poll packets.
- Radius-EAP broken since 1.8.0 release.
- SNMP incorrectly marks SNMPv3 "discovery" packet as malformed.
- Widgets are not properly expanded in GTK3.
- Find Next Mark duplicated on Edit Menu.
- DVB-CI/CI+: fix offset error in operator_info apdu.
- Unable to correctly identify IEC 61850 MMS packets.
- WinPcap doesn't install if vcredist_x64 requires reboot.
Updated Protocol Support:
- BACapp, BOOTP, DCERPC SPOOLSS, DVB-CI, H.248, IEEE 802.11, Jmirror, NAS EPS, NFS, PPP, RELOAD Framing, SES, SNMP, XMPP
New and Updated Capture File Support
- Microsoft Network Monitor
更新時間：2012-06-22
更新細節：
What's new in this version:
The following bugs have been fixed:
- When saving the displayed packets, packets which are dependencies (e.g., due to reassembly) of the displayed packets are included in the list of saved packets.
- Rearranging columns in preferences doesn't work on 64-bit Windows.
New and Updated Features:
- Wireshark supports capturing from multiple interfaces at once.
- You can now add, edit, and save packet and capture file annotations.
- Wireshark, TShark, and their associated utilities now save files using the pcap-ng file format by default. (Your copy of Wireshark might still use the pcap file format if pcap-ng is disabled in your preferences.)
- Decryption key management for IEEE 802.11, IPsec, and ISAKMP is easier.
- OID resolution is now supported on 64-bit Windows.
- When saving packets, the default choice is now to save only the displayed packets rather than all packets.
- TCP fast retransmissions are now indicated as an expert info note, rather than a warning, just as TCP retransmissions are.
- TCP window updates are no longer colorized as "Bad TCP".
- TShark's command-line options have changed. The previously undocumented -P option is now -2 option for performing a two-pass analysis; the former -S option is now the -P option for printing packets even if writing to a file, and the -S option is now used to specify a different line separator between packets.
- GeoIP IPv6 databases are now supported.
New Protocol Support:
- Aastra Signalling Protocol (AASP), ActiveMQ OpenWire, Bandwidth Reservation Protocol (BRP), Bazaar, Binary Floor Control Protocol, BitTorrent DHT, C12.22, CANopen, CIP Motion, CIP Safety, Cisco FabricPath MiM, DMX Channel Data, DMX SIP, DMX Test, DMX Text, DMX, DVB Application Information Table, DVB Bouquet Association Table, DVB Event Information Table, DVB MultiProtocol Encapsulation (DVB-MPE), DVB Network Information Table, DVB Service Description Table, DVB Time and Date Table, DVB Time Offset Table, DVB/ETSI IP Data Cast (IPDC) Electronic Service Guide (ESG), ECP VDP, EIA-709.1 (LonTalk), EIA-852 (CN/IP), ELCOM, Ericsson A-bis OML (OM 2000), Ericsson HDLC, Ericsson Proprietary PCAP, ETSI CAT, ETV-AM Data, ETV-AM EISS Section, Flight Message Transfer Protocol (FMTP), Gadu-Gadu, GEO-Mobile Radio (1) BCCH, GEO-Mobile Radio (1) Common, GEO-Mobile Radio (1) DTAP, GEO-Mobile Radio (1) Radio Resource, Gluster Callback, Gluster CLI, Gluster Dump, Gluster Portmap, GlusterD, GlusterFS Callback, GlusterFS Handshake, GlusterFS, GSM A-bis OML, GSM CBCH, GSM Cell Broadcast Service, GSM SIM, H.248.2, Hadoop Distributed File System (HDFS), HART/IP, Hazelcast, HDFS Data, High bandwidth Digital Content Protection (HDCP), High-availability Seamless Redundancy (HSR), HomePlug AV, HSR/PRP, IEEE 1722.1, ISO 7816, ixveriwave, Kismet drone/server protocol, KristalliNet, LCS-AP, Link Access Procedure, Satellite channel (LAPSat), LLRP, LTE Positioning Protocol A (LPPa), LTE Positioning Protocol, M3 Application Protocol (M3AP), MAC Address Acquisition Protocol, MBMS synchronisation protocol, Microsoft Credential Security Support Provider (CredSSP), MoldUDP, MoldUDP64, MPEG Conditional Access, MPEG descriptors, MPEG DSM-CC, MPEG Program Association Table (PAT), MPEG Program Map Table, MPEG Section, MPLS Packet Loss and Delay Measurement, MPLS-TP Protection State Coordination, Multiple VLAN Registration Protocol (MRVP), Netfilter LOG, NOE, NXP MiFare, NXP PN532, Open IPTV Forum openSAFETY, Performance Co-Pilot (PCP), PPI Sensor, RDP, RTP-MIDI, SBc Application Part (SBc-AP), SDH/SONET, Solaris IP over InfiniBand, Sony FeliCa, T.124, UA (Universal Alcatel), UA3G, UASIP, UAUDP, USB Integrated Circuit Card Interface Device Class (CCID), V5 Data Link Layer (V5DL), V5 Envelope Function (V5EF), Virtual eXtensible Local Area Network (VXLAN), VSS-Monitoring, Vuze DHT, WaveAgent, WebSocket, WSE Remote Ethernet, XMCP, YAMI
Updated Protocol Support:
- Too many protocols have been updated to list here.
New and Updated Capture File Support:
- Aethra Telecommunications' PC108, Catapult DCT2000, Citrix NetScaler, Cisco Secure IDS IPLog, Endace ERF, Gammu DCT3, Generic MIME, IBM iSeries, InfoVista 5View, Ixia IxVeriWave, LANalyzer, Microsoft NetMon, MPEG2-TS, Network Instruments Observer, Nokia DCT3, pcap, pcap-ng, Solaris snoop, TamoSoft CommView, Tektronix K12xx, XML
更新時間：2012-05-23
更新細節：
What's new in this version:
The following bugs have been fixed:
- User-Password - PAP decoding passwords longer than 16 bytes.
- The MSISDN is not seen correctly in GTP packet.
- Wireshark doesn't calculate the right IPv4 destination using source routing options when bad options precede them.
- BOOTP dissector issue with DHCP option 82 - suboption 9.
- MPLS dissector in 1.6.7 and 1.7.1 misdecodes some MPLS CW packets.
- ANSI MAP infinite loop.
- HCIEVT infinite loop.
- Wireshark doesn't decode NFSv4.1 operations.
- LTP infinite loop.
- Wrong values in DNS CERT RR.
- Megaco parser problem with LF in header.
- OPC UA bytestring node id decoding is wrong.
# Updated Protocol Support
- ANSI MAP, ASF, BACapp, Bluetooth HCI, DHCP, DIAMETER, DNS, GTP, IEEE 802.11, IEEE 802.3, IPv4, LTP, Megaco, MPLS, NFS, OPC UA, RADIUS
# New and Updated Capture File Support
- 5View, CSIDS, pcap, pcap-ng
更新時間：2012-04-08
更新細節：
What's new in this version:
The following bugs have been fixed:
- Wireshark could crash while reading SSL decryption keys on 64-bit Windows.
- Malformed Packets H263-1996 (RFC2190). (Bug 6996)
- Wireshark could crash while trying to open an rpcap: URL. (Bug 6922)
Updated Protocol Support:
- H.263
Getting Wireshark:
- Wireshark source code and installation packages are available from http://www.wireshark.org/download.html.
Vendor-supplied Packages:
- Most Linux and Unix vendors supply their own Wireshark packages. You can usually install or upgrade Wireshark using the package management system specific to that platform. A list of third-party packages can be found on the download page on the Wireshark web site.
File Locations:
- Wireshark and TShark look in several different locations for preference files, plugins, SNMP MIBS, and RADIUS dictionaries. These locations vary from platform to platform. You can use About→Folders to find the default locations on your system.
更新時間：2012-03-28
更新細節：
What's new in this version:
# The following bugs have been fixed:
- ISO SSAP: ActivityStart: Invalid decoding the activity parameter as a BER Integer.
- Forward slashes in URI need to be converted to backslashes if WIN32.
- Character echo pauses in Capture Filter field in Capture Options.
- Some PGM options are not parsed correctly.
- dumpcap crashes when capturing from pipe to a pcap-ng file (e.g., when passing data from CACE Pilot to Wireshark).
- Unable to rearrange columns in preferences on Windows. (Bug 6077) (Note: this bug still affects the 64-bit package)
- No error for UDP/IPv6 packet with zero checksum.
- Wireshark installer doesn't add access_bpf in 10.5.8.
- Corrupted Diameter dictionary file that crashes Wireshark.
- packetBB dissector bug: More than 1000000 items in the tree -- possible infinite loop.
- ZEP dissector: Timestamp not always displayed correctly. Fractional seconds never displayed.
- GOOSE Messages don't use the length field to perform the dissection.
- Ethernet traces in K12 text format sometimes give bogus "malformed frame" errors and other problems.
- max_ul_ext isn't printed/decoded to the packet details log in GTP protocol packet.
- non-IPP packets to or from port 631 are dissected as IPP.
- lua proto registration fails for uppercase proto / g_ascii_strdown problem.
- no menu item Fle->Export->SSL Session Keys in GTK.
- IAX2 dissector reads past end of packet for unknown IEs.
- TShark 1.6.5 immediately crashes on SSL decryption (every time).
- USB: unknown GET DESCRIPTOR response triggers assert failure.
- IEEE1588 PTPv2 over IPv6.
- Patch to fix DTLS decryption.
- Expression... dialog crash.
- display filter "gtp.msisdn" not working.
- Multiprotocol Label Switching Echo - Return Code: Reserved (5).
- ISAKMP : VendorID CheckPoint : Malformed Packet.
- Adding a Custom HTTP Header Field with a trailing colon causes wireshark to immediately crash (and crash upon restart).
- Radiotap dissector lists a bogus "DBM TX Attenuation" bit.
- MySQL dissector assertion.
- Radiotap header format data rate alignment issues.
# Updated Protocol Support
- ANSI A, BSSGP, DIAMETER, DTLS, GOOSE, GSM Management, GTP, HTTP, IAX2, IEEE 802.11, IPP, ISAKMP, ISO SSAP, MP2T, MPLS, MySQL, NTP, PacketBB, PGM, Radiotap, SSL, TCP, UDP, USB, WSP
# New and Updated Capture File Support
- Endace ERF, Pcap-NG, Tektronix K12
更新時間：2012-01-11
更新細節：
What's new in this version:
# The following bugs have been fixed:
* "Closing File!" Dialog Hangs.
* Sub-fields of data field should appear in exported PDML as children of the data field instead of as siblings to it.
* Incorrect time differences displayed with time reference set.
* Wrong packet type association of SNMP trap after TFTP transfer.
* SSL/TLS decryption needs wireshark to be rebooted.
* Export HTTP Objects -> save all crashes Wireshark.
* Wireshark Netflow dissector complains there is no template found though the template is exported.
* DCERPC EPM tower UUID must be interpreted always as little endian.
* Crash if no recent files.
* IPv6 frame containing routing header with 0 segments left calculates wrong UDP checksum.
* IPv4 UDP/TCP Checksum incorrect if routing header present.
* Incorrect Parsing of SCPS Capabilities Option introduced in response to bug 6194.
* Various crashes after loading NetMon2.x capture file.
* Fixed compilation of dumpcap on some systems (when MUST_DO_SELECT is defined).
* SIGSEGV in SVN 40046.
* Wireshark dissects TCP option 25 as an "April 1" option.
* ZigBee ZCL Dissector reports invalid status.
* ICMPv6 DNSSL option malformed on padding.
* Wrong tvb_get_bits function call in packet-csn1.c.
* [UDP] - Length Field of Pseudo Header while computing CheckSum is not correct.
* pcapio.c: bug in libpcap_write_interface_description_block.
* Memory leaks in various dissectors.
* Bytes highlighted in wrong Byte pane when field selected in Details pane.
# Updated Protocol Support
* BGP, BMC CSN1, DCERPC EPM, DCP(ETSI) DMP DTLS GSM Management, H245 HPTEAM, ICMPv6, IEEE 802.15.4 IPSEC IPv4, IPv6, ISAKMP KERBEROS LDSS NFS RLC, RPC-NETLOGON RRC RTMPT SIGCOMP SSL SYSLOG TCP, UDP, XML ZigBee ZCL
# New and Updated Capture File Support
* Accellent 5Views, AIX iptrace, HP-UX nettl, I4B, Microsoft Network Monitor, Novell LANalyzer, PacketLogger, Pcap-ng, Sniffer, Tektronix K12, WildPackets {Airo,Ether}Peek.
更新時間：2011-11-21
更新細節：
What's new in this version:
The following bugs have been fixed:
- Patch to fix memory leaks/errors in Lua plugin.
- Wireshark crashes if a field of type BASE_CUSTOM is applied as a column.
- Filter Expression dialog can only be opened once.
- Wireshark crashes if compiled without GLib thread support.
- 80211 QoS Control: Add Raw TID.
- SNMP length check error.
- UCP dissector bug of operation 61.
更新時間：2011-11-02
更新細節：
What's new in this version:
# The following bugs have been fixed:
- Assertion failed when doing File->Quit->Save during live capture.
- Wrong PCEP XRO sub-object decoding.
- Wireshark window takes very long time to show up if invalid network file path is at recent file list
- Decoding [Status Records] Timestamp Sequence Field in Bundle Protocol fails if over 32 bits.
- ISUP party number dissection.
- wireshark-1.4.2 crashes when testing the example python dissector because of a dissector count assertion.
- Ethernet packets with both VLAN tag and LLC header no longer displayed correctly.
- SLL encapsuled 802.1Q VLAN is not dissected.
- Wireshark crashes when attempting to open a file via drag & drop when there's already a file open.
- Adding and removing custom HTTP headers requires a restart.
- Can't read full 64-bit SNMP values.
- Dissection fails for frames with Gigamon Header and VLAN.
- RTP Stream Analysis does not work for TURN-encapsulated RTP.
- packet-csn1.c doesn't process CSN_CHOICE entries properly.
- BACnet property time-synchronization-interval (204) name shown incorrectly as time-synchronization-recipients.
- GUI crash on invalid IEEE 802.11 GAS frame.
- [ASN.1 PER] Incorrect decoding of BIT STRING type.
- ICMPv6 router advertisement Prefix Information Flag R "Router Address" missing.
- Export -> Object -> HTTP -> save all: Error on saving files.
- Inner tag of 802.1ad frames not parsed properly.
- Added cursor type decoding to MySQL dissector.
- Incorrect identification of UDP-encapsulated NAT-keepalive packets.
- WPA IE pairwise cipher suite dissector uses incorrect value_string list.
- S1AP protocol can't decode IPv6 transportLayerAddress.
- RTPS2 dissector doesn't handle 0 in the octestToNextHeader field.
- packet-ajp13 fix, cleanup, and enhancement.
- Network Instruments Observer file format bugs.
- Wireshark crashes when using "Open Recent" 2 times in a row.
- Wireshark packet_gsm-sms, display bug: Filler bits in TP-User Data Header.
- wireshark unable to decode NetFlow options which have system scope size != 4 bytes.
- Display filter Expression Dialog Box Error.
- text_import_scanner.l missing.
# Updated Protocol Support
- AJP13, ASN.1 PER, BACnet, CSN.1, DTN, Ethernet, ICMPv6, IEEE 802.11, IEEE 802.1q, Infiniband, IPsec, MySQL, PCEP, PN-RT, RTP, S1AP, SSL
# New and Updated Capture File Support
- Endace ERF.
更新時間：2011-09-09
更新細節：
What's new in this version:
Bug Fixes:
- A large loop in the OpenSafety dissector could cause a crash.
- A malformed IKE packet could consume excessive resources.
- A malformed capture file could result in an invalid root tvbuff and cause a crash.
- Wireshark could run arbitrary Lua scripts.
- The CSN.1 dissector could crash.
- configure ignores (partially) LDFLAGS.
- Build fails when it tries to #include <getopt.h>, not present in Solaris 9.
- Unable to configure zero length SNMP Engine ID.
- BACnet who-is request device range values are not decoded correctly in the packet details window.
- H.323 RAS packets missing from packet counts in "Telephony->VoIP Calls" and the "Flow Graph" for the call.
- Wireshark crashes if sercosiii module isn't installed.
- Editcap could create invalid pcap files when converting from JPEG.
- Timestamp is incorrectly decoded for ICMP Timestamp Response packets from MS Windows.
- Malformed Packet in decode for BGP-AD update.
- Wrong display of CSN_BIT in CSN.1.
- Fix CSN_RECURSIVE_TARRAY last bit error in packet-csn1.c.
- Wireshark cannot display Reachable time & Retrans timer in IPv6 RA messages.
- ReadPropertyMultiple-ACK not correctly dissected.
- GTPv2 dissectors should treat gtpv2_ccrsi as optional.
- BGP : AS_PATH attribute was decode wrong.
- Fixes for SCPS TCP option.
- Offset calculated incorrectly for sFlow extended data.
- [Enter] key behavior varies when manually typing display filters.
- Contents of pcapng EnhancedPacketBlocks with comments aren't displayed.
- Misdecoding 3G Neighbour Cell Information Element in SI2quater message due to a coding typo.
- Mis-spelled word "unknown" in assorted files.
- tshark run with -Tpdml makes a seg fault.
- btl2cap extended window shows wrong bit.
- NDMP dissector incorrectly represents "ndmp.bytes_left_to_read" as signed.
- TShark/dumpcap skips capture duration flag occasionally.
- File types with no snaplen written out with a zero snaplen in pcap-ng files.
- Wireshark improperly parsing 802.11 Beacon Country Information tag.
- ERF records with extension headers not written out correctly to pcap or pcap-ng files.
- RTPS2: MAX_BITMAP_SIZE is defined incorrectly.
- Copying from RTP stream analysis copies 1st line many times.
- Wrong display of CSN_BIT under CSN_UNION.
- MEGACO context tracking fix - context id reuse.
Updated Protocol Support:
- BACapp, Bluetooth L2CAP, CSN.1, DCERPC, GSM A RR, GTPv2, ICMP, ICMPv6, IKE, MEGACO, MSISDN, NDMP, OpenSafety, RTPS2, sFlow, SNMP, TCP
New and Updated Capture File Support:
- CommView, pcap-ng, JPEG.