Wireshark 歷史版本列表
Wireshark (32-bit)Wireshark (64-bit)
更新時間：2010-10-12
更新細節：
What's new in this version:
# The following bugs have been fixed:
* Wireshark may appear offscreen on multi-monitor Windows systems. (Bug 553)
* Incorrect behavior using sorting in the packet list. (Bug 2225)
* Cooked-capture dissector should omit the source address field if empty. (Bug 2519)
* MySQL dissector doesn't dissect MySQL stream. (Bug 2691)
* Wireshark crashes if active display filter macro is renamed. (Bug 5002)
* Incorrect dissection of MAP V2 PRN_ACK. (Bug 5076)
* TCP bytes_in_flight becomes inflated with lost packets. (Bug 5132)
* Wireshark fails to start on Windows XP 64bit. (Bug 5160)
* GTP header is exported in PDML with an incorrect size. (Bug 5162)
* Packet list hidden columns will not be parsed correctly from preferences file. (Bug 5163)
* Wireshark does not display the t.38 graph. (Bug 5165)
* Wireshark don't show mgcp calls in Telephony ? VoIP calls. (Bug 5167)
* Wireshark 1.4.0 & VoIP calls Prepare Filter problem. (Bug 5172)
* GTPv2: IMSI is decoded improperly. (Bug 5179)
* [NAS EPS] EPS Quality of Service IE decoding is wrong. (Bug 5186)
* Wireshark mistakenly writes not all data available for IPv4 checksum. (Bug 5194)
* GSM: Cell Channel Description, range 1024 format. (Bug 5214)
* Wrong SDP interpretation on VoIP call flow chart. (Bug 5220)
* The CLDAP attribute value on a CLDAP reply is no longer being decoded. (Bug 5239)
* [NAS EPS] Traffic Flow Template IE dissection bugs. (Bug 5243)
* [NAS EPS] Use Request Type IE defined in 3GPP 24.008. (Bug 5246)
* NTLMSSP_AUTH domain and username truncated to first letter with IE8/Windows7 (generating the NTLM packet). (Bug 5251)
* IPv6 RH0: dest addr is to be used i.s.o. last RH address when 0 segments remain. (Bug 5252)
* EIGRP dissection error in Flags field in external route TLVs. (Bug 5261)
* MRP packet is not correctly parsed in PROFINET multiple write record request. (Bug 5267)
* MySQL Enhancement: support of Show Fields and bug fix. (Bug 5271)
* [NAS EPS] Fix TFT decoding when having several Packet Filters defined. (Bug 5274)
* Crash if using ssl.debug.file with no password for ssl.keys_list. (Bug 5277)
# Updated Protocol Support
* ASN.1 BER, ASN.1 PER, EIGRP, GSM A RR, GSM Management, GSM MAP,GTP, GTPv2, ICMPv6, Interlink, IPv4, IPv6, IPX, LDAP, LLC, MySQL,NAS EPS, NTLMSSP, PN-IO, PPP, RPC, SDP, SLL, SSL, TCP
更新時間：2010-08-31
更新細節：
What's new in this version:
# The following bugs have been fixed:
* Update time display in background. (Bug 1275)
* Wireshark is unresponsive when capturing from named pipes on Windows. (Bug 1759)
* Tshark returns 0 even with an invalid interface or capture filter. (Bug 4735)
# New and Updated Features
* The packet list internals have been rewritten and are now more efficient.
* Columns are easier to use. You can add a protocol field as a column by right-clicking on its packet detail item, and you can adjust some column preferences by right-clicking the column header.
* Preliminary Python scripting support has been added.
* Many memory leaks have been fixed.
* Wireshark 1.4 does not support Windows 2000. Please use Wireshark 1.2 or 1.0 on those systems.
* Packets can now be ignored (excluded from dissection), similar to the way they can be marked.
* Manual IP address resolution is now supported.
* Columns with seconds can now be displayed as hours, minutes and seconds.
* You can now set the capture buffer size on UNIX and Linux if you have libpcap 1.0.0 or greater.
* TShark no longer needs elevated privileges on UNIX or Linux to list interfaces. Only dumpcap requires privileges now.
* Wireshark and TShark can enable 802.11 monitor mode directly if you have libpcap 1.0.0 or greater.
* You can play RTP streams directly from the RTP Analysis window.
* Capinfos and editcap now respectively support time order checking and forcing.
* Wireshark now has a "jump to timestamp" command-line option.
* You can open JPEG files directly in Wireshark.
# New Protocol Support
* 3GPP Nb Interface RTP Multiplex, Access Node Control Protocol, Apple Network-MIDI Session Protocol, ARUBA encapsulated remote mirroring, Assa Abloy R3, Asynchronous Transfer Mode, B.A.T.M.A.N. Advanced Protocol, Bluetooth AMP Packet, Bluetooth OBEX, Bundle Protocol, CIP Class Generic, CIP Connection Configuration Object, CIP Connection Manager, CIP Message Router, collectd network data, Control And Provisioning of Wireless Access Points, Controller Area Network, Device Level Ring, DOCSIS Bonded Initial Ranging Message, Dropbox LAN sync Discovery Protocol, Dropbox LAN sync Protocol, DTN TCP Convergence Layer Protocol, EtherCAT Switch Link, Fibre Channel Delimiters, File Replication Service DFS-R, Gateway Load Balancing Protocol, Gigamon Header, GigE Vision Control Protocol, Git Smart Protocol, GSM over IP ip.access CCM sub-protocol, GSM over IP protocol as used by ip.access, GSM Radiotap, HI2Operations, Host Identity Protocol, HP encapsulated remote mirroring, HP NIC Teaming Heartbeat, IEC61850 Sampled Values, IEEE 1722 Protocol, InfiniBand Link, Interlink Protocol, IPv6 over IEEE 802.15.4, ISO 10035-1 OSI Connectionless Association Control Service, ISO 9548-1 OSI Connectionless Session Protocol, ISO 9576-1 OSI Connectionless Presentation Protocol, ITU-T Q.708 ISPC Analysis, Juniper Packet Mirror, Licklider Transmission Protocol, MPLS PW ATM AAL5 CPCS-SDU mode encapsulation, MPLS PW ATM Cell Header, MPLS PW ATM Control Word, MPLS PW ATM N-to-One encapsulation, no CW, MPLS PW ATM N-to-One encapsulation, with CW, MPLS PW ATM One-to-One or AAL5 PDU encapsulation, Multiple Stream Reservation Protocol, NetPerfMeter Protocol, NetScaler Trace, NexusWare C7 MTP, NSN FLIP, OMRON FINS Protocol, packetbb Protocol, Peer Network Resolution Protocol, PKIX Attribute Certificate, Pseudowire Padding, Server/Application State Protocol, Solaris IPNET, TN3270 Protocol, TN5250 Protocol, TRILL, Twisted Banana, UMTS FP Hint, UMTS MAC, UMTS Metadata, UMTS RLC, USB HID, USB HUB, UTRAN Iuh interface HNBAP signalling, UTRAN Iuh interface RUA signalling, V5.2, Vendor Specific Control Protocol, Vendor Specific Network Protocol, VMware Lab Manager, VXI-11 Asynchronous Abort, VXI-11 Core Protocol, VXI-11 Interrupt, X.411 Message Access Service, ZigBee Cluster Library
# New and Updated Capture File Support
* Accellent 5Views, ASN.1 Basic Encoding Rules, Catapult DCT2000, Daintree SNA, Endace ERF, EyeSDN, Gammu DCT3 trace, IBM iSeries, JPEG/JFIF, libpcap, Lucent/Ascend access server trace, NetScaler, PacketLogger, pcapng, Shomiti/Finisar Surveyor, Sun snoop, Symbian OS btsnoop, Visual Networks
更新時間：2010-08-31
更新細節：
What's new in this version:
# The following bugs have been fixed:
* Update time display in background. (Bug 1275)
* Wireshark is unresponsive when capturing from named pipes on Windows. (Bug 1759)
* Tshark returns 0 even with an invalid interface or capture filter. (Bug 4735)
# New and Updated Features
* The packet list internals have been rewritten and are now more efficient.
* Columns are easier to use. You can add a protocol field as a column by right-clicking on its packet detail item, and you can adjust some column preferences by right-clicking the column header.
* Preliminary Python scripting support has been added.
* Many memory leaks have been fixed.
* Wireshark 1.4 does not support Windows 2000. Please use Wireshark 1.2 or 1.0 on those systems.
* Packets can now be ignored (excluded from dissection), similar to the way they can be marked.
* Manual IP address resolution is now supported.
* Columns with seconds can now be displayed as hours, minutes and seconds.
* You can now set the capture buffer size on UNIX and Linux if you have libpcap 1.0.0 or greater.
* TShark no longer needs elevated privileges on UNIX or Linux to list interfaces. Only dumpcap requires privileges now.
* Wireshark and TShark can enable 802.11 monitor mode directly if you have libpcap 1.0.0 or greater.
* You can play RTP streams directly from the RTP Analysis window.
* Capinfos and editcap now respectively support time order checking and forcing.
* Wireshark now has a "jump to timestamp" command-line option.
* You can open JPEG files directly in Wireshark.
# New Protocol Support
* 3GPP Nb Interface RTP Multiplex, Access Node Control Protocol, Apple Network-MIDI Session Protocol, ARUBA encapsulated remote mirroring, Assa Abloy R3, Asynchronous Transfer Mode, B.A.T.M.A.N. Advanced Protocol, Bluetooth AMP Packet, Bluetooth OBEX, Bundle Protocol, CIP Class Generic, CIP Connection Configuration Object, CIP Connection Manager, CIP Message Router, collectd network data, Control And Provisioning of Wireless Access Points, Controller Area Network, Device Level Ring, DOCSIS Bonded Initial Ranging Message, Dropbox LAN sync Discovery Protocol, Dropbox LAN sync Protocol, DTN TCP Convergence Layer Protocol, EtherCAT Switch Link, Fibre Channel Delimiters, File Replication Service DFS-R, Gateway Load Balancing Protocol, Gigamon Header, GigE Vision Control Protocol, Git Smart Protocol, GSM over IP ip.access CCM sub-protocol, GSM over IP protocol as used by ip.access, GSM Radiotap, HI2Operations, Host Identity Protocol, HP encapsulated remote mirroring, HP NIC Teaming Heartbeat, IEC61850 Sampled Values, IEEE 1722 Protocol, InfiniBand Link, Interlink Protocol, IPv6 over IEEE 802.15.4, ISO 10035-1 OSI Connectionless Association Control Service, ISO 9548-1 OSI Connectionless Session Protocol, ISO 9576-1 OSI Connectionless Presentation Protocol, ITU-T Q.708 ISPC Analysis, Juniper Packet Mirror, Licklider Transmission Protocol, MPLS PW ATM AAL5 CPCS-SDU mode encapsulation, MPLS PW ATM Cell Header, MPLS PW ATM Control Word, MPLS PW ATM N-to-One encapsulation, no CW, MPLS PW ATM N-to-One encapsulation, with CW, MPLS PW ATM One-to-One or AAL5 PDU encapsulation, Multiple Stream Reservation Protocol, NetPerfMeter Protocol, NetScaler Trace, NexusWare C7 MTP, NSN FLIP, OMRON FINS Protocol, packetbb Protocol, Peer Network Resolution Protocol, PKIX Attribute Certificate, Pseudowire Padding, Server/Application State Protocol, Solaris IPNET, TN3270 Protocol, TN5250 Protocol, TRILL, Twisted Banana, UMTS FP Hint, UMTS MAC, UMTS Metadata, UMTS RLC, USB HID, USB HUB, UTRAN Iuh interface HNBAP signalling, UTRAN Iuh interface RUA signalling, V5.2, Vendor Specific Control Protocol, Vendor Specific Network Protocol, VMware Lab Manager, VXI-11 Asynchronous Abort, VXI-11 Core Protocol, VXI-11 Interrupt, X.411 Message Access Service, ZigBee Cluster Library
# New and Updated Capture File Support
* Accellent 5Views, ASN.1 Basic Encoding Rules, Catapult DCT2000, Daintree SNA, Endace ERF, EyeSDN, Gammu DCT3 trace, IBM iSeries, JPEG/JFIF, libpcap, Lucent/Ascend access server trace, NetScaler, PacketLogger, pcapng, Shomiti/Finisar Surveyor, Sun snoop, Symbian OS btsnoop, Visual Networks
更新時間：2010-07-30
更新細節：
What's new in this version:
The following vulnerabilities have been fixed.
- The SigComp Universal Decompressor Virtual Machine could overrun a buffer.
- The GSM A RR dissector could crash.
- Due to a regression the ASN.1 BER dissector could overrun the stack.
- The IPMI dissector could go into an infinite loop.
The following bugs have been fixed:
- Wireshark crashes after configuring new Information column.
- Crash triggered when changing display filter from right-mouse pop-up menu via packet-list.
- Wireshark crash selecting Inter-Asterisk exchange v2 packet data.
- zlib-1.2.5 cause tshark to stop live capture.
- Crash when adding SNMP users.
- Wireshark via ssh -X on ipv6 link-local address fails to allow capture.
- OMAPI dissector fails to parse combined initialization messages.
- QUERY_FS_INFO for Macintosh level 0x301 - MacSupportFlags decodes wrong.
- SCSI dissector misidentifies ATA PASSTHROUGH command as ACCESS CONTROL IN.
- Wrong decoding of GTP Prime (GTP') packets.
Updated Protocol Support
- ASN.1 BER, GSM A RR, GTP, IAX2, IPMI, OMAPI, PRES, SCSI, SMB, UNISTIM
更新時間：2010-07-30
更新細節：
What's new in this version:
The following vulnerabilities have been fixed.
- The SigComp Universal Decompressor Virtual Machine could overrun a buffer.
- The GSM A RR dissector could crash.
- Due to a regression the ASN.1 BER dissector could overrun the stack.
- The IPMI dissector could go into an infinite loop.
The following bugs have been fixed:
- Wireshark crashes after configuring new Information column.
- Crash triggered when changing display filter from right-mouse pop-up menu via packet-list.
- Wireshark crash selecting Inter-Asterisk exchange v2 packet data.
- zlib-1.2.5 cause tshark to stop live capture.
- Crash when adding SNMP users.
- Wireshark via ssh -X on ipv6 link-local address fails to allow capture.
- OMAPI dissector fails to parse combined initialization messages.
- QUERY_FS_INFO for Macintosh level 0x301 - MacSupportFlags decodes wrong.
- SCSI dissector misidentifies ATA PASSTHROUGH command as ACCESS CONTROL IN.
- Wrong decoding of GTP Prime (GTP') packets.
Updated Protocol Support
- ASN.1 BER, GSM A RR, GTP, IAX2, IPMI, OMAPI, PRES, SCSI, SMB, UNISTIM
更新時間：2010-06-10
更新細節：
What's new in this version:
The following vulnerabilities have been fixed.
- The SMB dissector could dereference a NULL pointer.
- J. Oquendo discovered that the ASN.1 BER dissector could overrun the stack.
- The SMB PIPE dissector could dereference a NULL pointer on some platforms.
- The SigComp Universal Decompressor Virtual Machine could go into an infinite loop.
- The SigComp Universal Decompressor Virtual Machine could overrun a buffer.
The following bugs have been fixed:
- Cannot open file with File -> Open.
- Application crash when changing real-time option.
- Crash in filter autocompletion.
- The XML dissector doesn't allow dots (".") in tags.
- Live capture stops when using zlib 1.2.5.
- Want to be able to apply decode as to Data Portion of Lan Trace.
- SABP short pdu (packet_per.c).
- Kerberos pre-auth type constants - MS extensions are wrong.
- Check HTTP Content-Length parsing for overflow.
- Wrong variable used for proto_tree_add_text() in ptp dissector.
- Crash when close window frame of gtk file chooser.
- text2pcap expects n delimited text (instead of rn) on win32.
- Wrong decoding for BGP ORF.
- Crash when Ctrl-Backspacing the display filter.
- Acker AFI field incorrect size in PGM dissector.
- Fedora 13: wireshark fails to build (linking problem).
- The NFS FH hash (nfs.fh.hash) incorrectly matches multiple filehandles.
- AES-CTR decoding not working, (dissectors/packet_ipsec.c using gcrypt).
Updated Protocol Support
- ASN.1 BER, BGP, HTTP, IGMP, IPsec, Kerberos, NFS, PGM, PTP, SABP, SigComp, SMB, TCAP, XML,
Updated Capture File Support
- ERF, PacketLogger.
更新時間：2010-06-10
更新細節：
What's new in this version:
The following vulnerabilities have been fixed.
- The SMB dissector could dereference a NULL pointer.
- J. Oquendo discovered that the ASN.1 BER dissector could overrun the stack.
- The SMB PIPE dissector could dereference a NULL pointer on some platforms.
- The SigComp Universal Decompressor Virtual Machine could go into an infinite loop.
- The SigComp Universal Decompressor Virtual Machine could overrun a buffer.
The following bugs have been fixed:
- Cannot open file with File -> Open.
- Application crash when changing real-time option.
- Crash in filter autocompletion.
- The XML dissector doesn't allow dots (".") in tags.
- Live capture stops when using zlib 1.2.5.
- Want to be able to apply decode as to Data Portion of Lan Trace.
- SABP short pdu (packet_per.c).
- Kerberos pre-auth type constants - MS extensions are wrong.
- Check HTTP Content-Length parsing for overflow.
- Wrong variable used for proto_tree_add_text() in ptp dissector.
- Crash when close window frame of gtk file chooser.
- text2pcap expects n delimited text (instead of rn) on win32.
- Wrong decoding for BGP ORF.
- Crash when Ctrl-Backspacing the display filter.
- Acker AFI field incorrect size in PGM dissector.
- Fedora 13: wireshark fails to build (linking problem).
- The NFS FH hash (nfs.fh.hash) incorrectly matches multiple filehandles.
- AES-CTR decoding not working, (dissectors/packet_ipsec.c using gcrypt).
Updated Protocol Support
- ASN.1 BER, BGP, HTTP, IGMP, IPsec, Kerberos, NFS, PGM, PTP, SABP, SigComp, SMB, TCAP, XML,
Updated Capture File Support
- ERF, PacketLogger.
更新時間：2010-05-06
更新細節：
What's new in this version:
The following vulnerabilities have been fixed:
- The DOCSIS dissector could crash.
The following bugs have been fixed:
- HTTP parser limits with Content-Length.
- MATE dissector bug with GOGs.
- Changing fonts and deleting system time from preferences, results in wireshark crash.
- ERF file starting with record with timestamp=0,1 or 2 not recognized as ERF file.
- The SSL dissector can not correctly resemple SSL records when the record header is spit between packets.
- TCP reassembly can call subdissector with incorrect TCP sequence number.
- PTP dissector displays big correction field values wrong.
- MSF is at Anthorn, not Rugby.
- ProtoField __tostring() description is missing in Wireshark's Lua API Reference Manual.
- EVRC packet bundling not handled correctly.
- Completely unresponsive when run very first time by root user.
Updated Protocol Support
- DOCSIS, HTTP, SSL
Updated Capture File Support
- ERF, PacketLogger.
更新時間：2010-05-06
更新細節：
What's new in this version:
The following vulnerabilities have been fixed:
- The DOCSIS dissector could crash.
The following bugs have been fixed:
- HTTP parser limits with Content-Length.
- MATE dissector bug with GOGs.
- Changing fonts and deleting system time from preferences, results in wireshark crash.
- ERF file starting with record with timestamp=0,1 or 2 not recognized as ERF file.
- The SSL dissector can not correctly resemple SSL records when the record header is spit between packets.
- TCP reassembly can call subdissector with incorrect TCP sequence number.
- PTP dissector displays big correction field values wrong.
- MSF is at Anthorn, not Rugby.
- ProtoField __tostring() description is missing in Wireshark's Lua API Reference Manual.
- EVRC packet bundling not handled correctly.
- Completely unresponsive when run very first time by root user.
Updated Protocol Support
- DOCSIS, HTTP, SSL
Updated Capture File Support
- ERF, PacketLogger.
更新時間：2010-04-27
更新細節：
What's new in this version:
The following bugs have been fixed:
- SNMPv3 Engine ID registration.
- Open file dialog always displayed when clicking anywhere on Wireshark.
- tshark reports wrong number of bytes on big dumpfiles with -z io,stat.
- Negative INTEGER number displayed as positive number in SNMP dissector.
- Add support for FT_BOOLEAN fields to wslua FieldInfo.
- Wireshark crashes w/ GLib error when trying to play RTP stream.
- Windows 2000 support has been restored.
- Wrong dissection on be_cell_id_list for bssmap.
- I/O Graph dropdown boxes not working correctly.
- Runtime Error when right-clicking field and selecting "Filter Field Reference".
- In GSM SMS PDU TPVPF showing wrong.
- Profinet: May be wrong defined byte meaning.
- GLib-CRITICAL ** Message.
- Certain EDP display filters trigger Wireshark/tshark runtime error.
- Some NCP frames trigger "Dissector bug, protocol NCP".
- The encapsulation abbreviation "bluetooth-h4" is ambiguous.
Updated Protocol Support
- BSSMAP, DMP, GSM SMS, LDSS, NCP, PN/IO, PPP, SIP, SNMP