forked from wireshark/wireshark
-
Notifications
You must be signed in to change notification settings - Fork 0
/
Copy pathNEWS
1499 lines (890 loc) · 38.8 KB
/
NEWS
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
482
483
484
485
486
487
488
489
490
491
492
493
494
495
496
497
498
499
500
501
502
503
504
505
506
507
508
509
510
511
512
513
514
515
516
517
518
519
520
521
522
523
524
525
526
527
528
529
530
531
532
533
534
535
536
537
538
539
540
541
542
543
544
545
546
547
548
549
550
551
552
553
554
555
556
557
558
559
560
561
562
563
564
565
566
567
568
569
570
571
572
573
574
575
576
577
578
579
580
581
582
583
584
585
586
587
588
589
590
591
592
593
594
595
596
597
598
599
600
601
602
603
604
605
606
607
608
609
610
611
612
613
614
615
616
617
618
619
620
621
622
623
624
625
626
627
628
629
630
631
632
633
634
635
636
637
638
639
640
641
642
643
644
645
646
647
648
649
650
651
652
653
654
655
656
657
658
659
660
661
662
663
664
665
666
667
668
669
670
671
672
673
674
675
676
677
678
679
680
681
682
683
684
685
686
687
688
689
690
691
692
693
694
695
696
697
698
699
700
701
702
703
704
705
706
707
708
709
710
711
712
713
714
715
716
717
718
719
720
721
722
723
724
725
726
727
728
729
730
731
732
733
734
735
736
737
738
739
740
741
742
743
744
745
746
747
748
749
750
751
752
753
754
755
756
757
758
759
760
761
762
763
764
765
766
767
768
769
770
771
772
773
774
775
776
777
778
779
780
781
782
783
784
785
786
787
788
789
790
791
792
793
794
795
796
797
798
799
800
801
802
803
804
805
806
807
808
809
810
811
812
813
814
815
816
817
818
819
820
821
822
823
824
825
826
827
828
829
830
831
832
833
834
835
836
837
838
839
840
841
842
843
844
845
846
847
848
849
850
851
852
853
854
855
856
857
858
859
860
861
862
863
864
865
866
867
868
869
870
871
872
873
874
875
876
877
878
879
880
881
882
883
884
885
886
887
888
889
890
891
892
893
894
895
896
897
898
899
900
901
902
903
904
905
906
907
908
909
910
911
912
913
914
915
916
917
918
919
920
921
922
923
924
925
926
927
928
929
930
931
932
933
934
935
936
937
938
939
940
941
942
943
944
945
946
947
948
949
950
951
952
953
954
955
956
957
958
959
960
961
962
963
964
965
966
967
968
969
970
971
972
973
974
975
976
977
978
979
980
981
982
983
984
985
986
987
988
989
990
991
992
993
994
995
996
997
998
999
1000
$Id$
== July 12, 2005
Ethereal 0.10.12 has been released.
Our testing program has turned up several more security issues:
The CAMEL dissector could dereference a null pointer.
Discovered by Steve Grubb.
Version affected: 0.10.11
The LDAP dissector could free static memory and crash.
Versions affected: 0.8.5 to 0.10.11
The AgentX dissector could crash.
Versions affected: 0.10.10 to 0.10.11
The 802.3 dissector could go into an infinite loop.
Versions affected: 0.8.16 to 0.10.11
The PER dissector could abort.
Versions affected: 0.10.5 to 0.10.11
The DHCP dissector could go into an infinite loop.
Versions affected: 0.10.7 to 0.10.11
The BER dissector could abort.
Version affected: 0.10.11
The MEGACO dissector could go into an infinite loop.
Versions affected: 0.9.14 to 0.10.11
The GIOP dissector could dereference a null pointer.
Versions affected: 0.8.20 to 0.10.11
The SMB dissector was susceptible to a buffer overflow.
Versions affected: 0.9.12 to 0.10.11
The WBXML could dereference a null pointer.
Versions affected: 0.10.1 to 0.10.11
The H1 dissector could go into an infinite loop.
Versions affected: 0.8.15 to 0.10.11
The DOCSIS dissector could cause a crash.
Versions affected: 0.9.13 to 0.10.11
The SMPP dissector could go into an infinite loop.
Versions affected: 0.10.1 to 0.10.11
The AFP dissector was susceptible to a format string overflow.
Versions affected: 0.9.4 to 0.10.11
SCTP graphs could crash.
Version affected: 0.10.11
The HTTP dissector could crash.
Versions affected: 0.10.4 to 0.10.11
Please see the following advisory for more information:
http://www.ethereal.com/appnotes/enpa-sa-00020.html
Everyone is encouraged to upgrade.
New and updated features
New protocol support
Updated protocol support
New and updated capture file support
== May 4, 2005
Ethereal 0.10.11 has been released.
An aggressive testing program as well as independent discovery has turned
up a multitude of security issues:
The ANSI A dissector was susceptible to format string vulnerabilities.
Discovered by Bryan Fulton.
Versions affected: 0.9.15 to 0.10.10
The GSM MAP dissector could crash.
Versions affected: 0.10.0 to 0.10.10
The AIM dissector could cause a crash.
Versions affected: 0.9.14 to 0.10.10
The DISTCC dissector was susceptible to a buffer overflow.
Discovered by Ilja van Sprundel
Versions affected: 0.9.13 to 0.10.10
The FCELS dissector was susceptible to a buffer overflow.
Discovered by Neil Kettle
Versions affected: 0.9.9 to 0.10.10
The SIP dissector was susceptible to a buffer overflow.
Discovered by Ejovi Nuwere.
Versions affected: 0.10.0 to 0.10.10
The KINK dissector was susceptible to a null pointer exception,
endless looping, and other problems.
Versions affected: 0.10.10
The LMP dissector was susceptible to an endless loop.
Versions affected: 0.9.4 to 0.10.10
The Telnet dissector could abort.
Versions affected: 0.9.10 to 0.10.10
The TZSP dissector could cause a segmentation fault.
Versions affected: 0.10.10 to 0.10.10
The WSP dissector was susceptible to a null pointer exception and
assertions.
Versions affected: 0.10.0 to 0.10.10
The 802.3 Slow protocols dissector could throw an assertion.
Versions affected: 0.10.10
The BER dissector could throw assertions.
Versions affected: 0.10.2 to 0.10.10
The SMB Mailslot dissector was susceptible to a null pointer exception
and could throw assertions.
Versions affected: 0.9.0 to 0.10.10
The H.245 dissector was susceptible to a null pointer exception.
Versions affected: 0.10.10
The Bittorrent dissector could cause a segmentation fault.
Versions affected: 0.10.8 to 0.10.10
The SMB dissector could cause a segmentation fault and throw assertions.
Versions affected: 0.9.0 to 0.10.10
The Fibre Channel dissector could cause a crash.
Versions affected: 0.9.9 to 0.10.10
The DICOM dissector could attempt to allocate large amounts of memory.
Versions affected: 0.10.4 to 0.10.10
The MGCP dissector was susceptible to a null pointer exception, could
loop indefinitely, and segfault.
Versions affected: 0.8.14 to 0.10.10
The RSVP dissector could loop indefinitely.
Versions affected: 0.9.8 to 0.10.10
The DHCP dissector was susceptible to format string vulnerabilities, and
could abort.
Versions affected: 0.10.7 to 0.10.10
The SRVLOC dissector could crash unexpectedly or go into an infinite loop.
Versions affected: 0.9.8 to 0.10.10
The EIGRP dissector could loop indefinitely.
Versions affected: 0.8.18 to 0.10.10
The ISIS dissector could overflow a buffer.
Versions affected: 0.8.18 to 0.10.10
The CMIP, CMP, CMS, CRMF, ESS, OCSP, PKIX1Explitit, PKIX Qualified,
and X.509 dissectors could overflow buffers.
Versions affected: 0.10.4 to 0.10.10
The NDPS dissector could exhaust system memory or cause an assertion,
or crash.
Versions affected: 0.9.12 to 0.10.10
The Q.931 dissector could try to free a null pointer and overflow
a buffer.
Versions affected: 0.10.10
The IAX2 dissector could throw an assertion.
Versions affected: 0.10.1 to 0.10.10
The ICEP dissector could try to free the same memory twice.
Versions affected: 0.10.7 to 0.10.10
The MEGACO dissector was susceptible to an infinite loop and a buffer
overflow.
Versions affected: 0.9.14 to 0.10.10
The DLSw dissector was susceptible to an infinite loop.
Versions affected: 0.9.1 to 0.10.10
The RPC dissector was susceptible to a null pointer exception.
Versions affected: 0.9.2 to 0.10.10
The NCP dissector could overflow a buffer or loop for a large amount
of time.
Versions affected: 0.10.5 to 0.10.10
The RADIUS dissector could throw an assertion.
Versions affected: 0.10.3 to 0.10.10
The GSM dissector could access an invalid pointer.
Versions affected: 0.10.10
The SMB PIPE dissector could throw an assertion.
Versions affected: 0.9.0 to 0.10.10
The L2TP dissector was susceptible to an infinite loop.
Versions affected: 0.10.9 to 0.10.10
The SMB NETLOGON dissector could dereference a null pointer.
Versions affected: 0.9.12 to 0.10.10
The MRDISC dissector could throw an assertion.
Versions affected: 0.8.19 to 0.10.10
The ISUP dissector could overflow a buffer or cause a segmentation fault.
Versions affected: 0.8.19 to 0.10.10
The LDAP dissector could crash.
Versions affected: 0.10.1 to 0.10.10
The TCAP dissector could overflow a buffer or throw an assertion.
Versions affected: 0.10.8 to 0.10.10
The NTLMSSP dissector could crash.
Versions affected: 0.9.7 to 0.10.10
Additionally, a number of dissectors could throw an assertion when
passing an invalid protocol tree item length.
Versions affected: 0.10.8 to 0.10.10
Please see the following advisory for more information:
http://www.ethereal.com/appnotes/enpa-sa-00019.html
Everyone is encouraged to upgrade.
New and updated features
New protocol support
Updated protocol support
New and updated capture file support
== March 11, 2005
Ethereal 0.10.10 has been released.
This release fixes three security and stability-related issues:
Matevz Pustisek discovered a buffer overflow in the Etheric dissector.
(CAN-2005-0704)
The GPRS-LLC dissector could crash if the "ignore cipher bit" option
was enabled. (CAN-2005-0705)
Diego Giago discovered a buffer overflow in the 3GPP2 A11 dissector.
This flaw was later reported by Leon Juranic. (CAN-2005-0699)
Leon Juranic discovered a buffer overflow in the IAPP dissector.
A bug in the JXTA dissector could make Ethereal crash.
A bug in the sFlow dissector could make Ethereal crash.
Please see the following advisory for more information:
http://www.ethereal.com/appnotes/enpa-sa-00018.html
Everyone is encouraged to upgrade.
New and updated features
Tree view item context menus now let you browse to the display filter
reference and wiki pages for a particular protocol.
Online help has been expanded.
VoIP call analysis (including nifty connection diagrams) has been
added.
GSS-API decryption has been greatly enhanced.
New protocol support
AgentX, BUDB, DTP, G.723, IDP, INAP, KINK, Realplayer Data Protocol,
Retix Spanning Tree Protocol, RTCP-XR, XML, XNS, SPP
Updated protocol support
3GPP2 A11, ACSE, AMR, ATM, BER, BSSGP, BUTC, CDP, CLNP, CoSine L2,
DAAP, DCE/RPC, DCOM, DIAMETER, DNP, DNS, Etheric, FCP, FW-1, Gnutella,
GPRS, GSM A, GSM MAP, H.225, H.245, H.248, H.450, HTTP, IAX2, ICQ,
IEEE 802.11, IEEE 802.3 Slow Protocols, IP, iSCSI, ISUP, Juniper,
JXTA, Kerberos, L2TP, LDAP, MIP, MPLS, NDMP, NSIP, NTP, OSPF, OXID,
PostgreSQL, RADIUS, RDT, Redback, RMCP, RTP, RTSP, SCSI, SCTP, SDP,
SPNEGO, SSL, STUN, TCAP, TCP, TZSP
New and updated capture file support
DBS Etherwatch, Lucent/Ascend, Nettl, Tcpdump (Redback)
== January 19, 2005
Ethereal 0.10.9 has been released.
This release fixes the following security-related issues:
The COPS dissector could go into an infinite loop. (CAN-2005-0006)
The DLSw dissector could cause an assertion, making Ethereal exit
prematurely. (CAN-2005-0007)
The DNP dissector could cause memory corruption. (CAN-2005-0008)
The Gnutella dissector could cause an assertion, making Ethereal
exit prematurely. (CAN-2005-0009)
The MMSE dissector could free static memory. (CAN-2005-0010)
The X11 protocol dissector is vulnerable to a string buffer overflow.
(CAN-2005-0084)
Please see the following advisory for more information:
http://www.ethereal.com/appnotes/enpa-sa-00017.html
Everyone is encouraged to upgrade.
New and updated features
Ethereal will now detect and flag weak 802.11 WEP IVs.
Windows Sniffer timestamp handling has been greatly improved.
A bug which made Ethereal crash at startup on Windows 98 and Windows
ME systems has been fixed.
Ethereal and Tethereal now support a personal "hosts" file.
Invalid field length handling has been greatly improved.
The capture progress window title now shows the interface name.
New protocol support
ALC, AMR, CRMF, JXTA, NORM, PKIXCMP, PROFINET CBA
Updated protocol support
AIM, ARP, BGP, BOOTP/DHCP, COPS, DAAP, DCERPC EPM, DCERPC, DCOM,
DHCPv6, DLSw, DNP, DNS, EAPOL, eDonkey, FC-dNS, FC-FCS, FC-SWILS,
FCIP, FCSB3, FIX, GIOP, Gnutella, GSM A, GSM SMS, GTP, H.225, H.245,
HTTP, ICMP, IEEE 802.11, IEEE 802a, image/GIF, image/JFIF, Kerberos,
L2TP, LDAP, LLC, LMP, MGCP, MIME Multipart, MMSE, MPLS, MTP2, NBNS,
NDMP, NMAS, NSIP, OLSR, PER, pflog, PGM, PostgreSQL, PPP, PRES, Q.931,
RADIUS, RTCP, RTP, SDP, SEBEK, SIGCOMP, SIP, SLSK, SMB, SMPP, SRVLOC,
SSL/TLS, T.38, TACACS, TCAP, TCP, X11
New and updated capture file support
Windows Sniffer
== December 15, 2004
Ethereal 0.10.8 has been released.
This release fixes the following security-related issues:
Matthew Bing discovered a bug in DICOM dissection that could make
Ethereal crash. (CAN-2004-1139)
An invalid RTP timestamp could make Ethereal hang and create a large
temporary file, possibly filling available disk space. (CAN-2004-1140)
The HTTP dissector could access previously-freed memory, causing a
crash. (CAN-2004-1141)
Brian Caswell discovered that an improperly formatted SMB packet could
make Ethereal hang, maximizing CPU utilization. (CAN-2004-1142)
Please see the following advisory for more information:
http://www.ethereal.com/appnotes/enpa-sa-00016.html
Everyone is encouraged to upgrade.
New and updated features
Ethereal now has a packet history, similar to most web browsers.
Ethereal now supports custom window titles.
Minor performance enhancements have been added.
RTP analysis has been enhanced.
Host name resolution has been improved.
Ethereal can now track TCP PDU times. See
http://wiki.ethereal.com/TcpPduTime for more details.
Ethereal now ships with netscreen2dump.py, a utility which converts
netscreen packet-trace hex dumps to hex dumps that can be read by
text2pcap.
New protocol support
AoE (ATA over Ethernet), Bittorrent, CMIP, GPRS Mobility Management
and Session Management, GSM MAP, Extended Security Services, Logotype
Certificate Extensions, MAP Dialogue, Network Service Over IP, Online
Certificate Status Protocol, PKIX Certificate, PKIX Qualified, PROFINET
DCP, IO, Real-Time, Short Message Relaying Service, SSCF-NNI,
Updated protocol support
3GPP2 A11, ACSE, AIM, AODV, ASN.1 BER, ASN.1 PER, BOOTP, BSSGP, BVLC,
CMS, COPS, DCERPC, DCERPC ISystemActivator, DICOM, DHCPv6, DNS, eDonkey,
ENTTEC, Etheric, Frame Relay, FTAM, FW1, GIOP, GPRS LLC, GRE, GSM A,
GSM SMS, H.225, H.245, H.450, HTTP, IPAddress, IPDC, IPMI, IPsec,
ISAKMP, ISUP, JFIF, Kerberos, MQ, MTP3, NMAS, OPSI, PKIX1EXPLICIT,
PKIX1IMPLICIT, PKIXProxy, PPP, PRES, Radiotap, RADIUS, ONC RPC, RTnet,
RTP, SAP, SDP, SIGCOMP, SIGCOMP UDVM, SIP, SMB, SNMP, SONMP, SSCOP,
SSL, Symantec Firewall, T.38, TCP, TDS, TSP, UDP, WSP, WTP, X.25,
X.509af, X.509ce, X.509if, X.509sat,
New and updated capture file support
pppdump
== October 20, 2004
Ethereal 0.10.7 has been released.
The Windows installer features new GLib/GTK+, Net-SNMP and ADNS
libraries which fix several known bugs. Unfortunately, a few known
GLib/GTK+ bugs remain.
In order to avoid a naming conflict with the tcpreplay project, the
"capinfo" utility has been renamed to "capinfos".
New and updated features
Search wrapping is now a configurable option.
A lot of material has been added to the Developer's Guide. The User's Guide
has been updated as well.
The "Decode As..." dialog now supports DCERPC and SCTP.
The "Help" menu now includes a link to the wiki.
H.323 call analysis is now supported.
New protocol support
Cisco PAgP, DAAP, Etheric, Ethernet Configuration Testing Protocol,
Ethernet MAC Control Frame, ICE, Kerberos v4, Netscape certificate
extensions, PKINIT, PKIX1EXPLICIT, PKIX1IMPLICIT,
Updated protocol support
AIM, ARTNET, ASN.1 BER, ASN.1 PER, ASN.1, BGP, BOOTP, CIP, CLNP, COPS,
DCERPC MAPI, DCERPC SAMR, DCERPC, DCOM, DHCP, DHCPv6, DIAMETER, DNS,
EAP, ENIP, EPM, GRE, GSM A, GSM MAP, H.225, H.245, H.248 MEGACO, H.450,
ISAKMP, iSCSI, iSNS, ISUP, JFIF, Kerberos, LDAP, LDP, LLC, LWAPP, M2PA,
MEGACO, MPLS, NCP 2222, NCP, NDMP, NetFlow, NTLMSSP, OSCAR-ICQ, OSPF,
RADIUS, RSVP, RTCP, RTP, RTSP, SCTP, SDP, SES, SIP, Skinny, SMB, SNMP,
SUA, T.38, TALI, TCAP, TCP, TDS, Teredo, Time, X.509, X11,
New and updated capture file support
HP-UX nettl, NG Sniffer
== August 12, 2004
Ethereal 0.10.6 has been released.
This release fixes a preferences bug present in Ethereal which displayed
(ethereal.exe:3512): Gtk-CRITICAL **: file gtkwindow.c: line 3107
(gtk_window_resize): assertion `height > 0' failed
at program startup. A workaround for 0.10.5 is described in
http://www.ethereal.com/lists/ethereal-users/200408/msg00059.html
A new command-line utility called "capinfo" has been added to the
distribution which prints statistics about capture files.
You can now copy conversation and endpoint data to other applications as
CSV data.
New and updated features
X.509 support has been added.
Crash bugs have been fixed in the RTP and NCP dissectors.
PostScript(r) output has been improved.
A bug that prevented mergecap from creating a new output file has been
fixed.
Conversation and endpoint performance has been enhanced. General packet
display performance has been enhanced.
The conversation and host list tools have been renamed to be less
confusing.
You can now copy conversation and host list data as CSV data.
RTP analysis can now dynamically determine the proper clock rate.
New protocol support
AX/4000, CMS, DCERPC (EVENTLOG, FRSAPI, FRSRPC), MANOLITO, PKCS#1,
X.509AF, X.509CE, X.509IF, X.509SAT
Updated protocol support
802.11, AIM, ASAP, ASN.1 BER, ASN.1, COPS, DCM, DHCP Failover (ISC),
ENRP, Fibre Channel, GIOP, GSSAPI, GTP, HTTP, ICAP, iSNS, Kerberos,
MPLS, NCP, NTLMSSP, OPSI, OSPF, PRES, RADIUS, Rlogin, RSVP, RTPS, RTSP,
SCTP, Sigcomp, Skinny, SMB BROWSER, SMB, SNMP, SSL, TDS, Telnet
New and updated capture file support
LANalyzer
== July 7, 2004
Ethereal 0.10.5 has been released.
This release fixes bugs in iSNS, SMB, and SNMP, as described in the
following advisory:
http://www.ethereal.com/appnotes/enpa-sa-00015.html
Everyone is encouraged to upgrade.
New and updated features
Ethereal can now merge multiple files (you don't have to resort to
mergecap on the command line).
A preview pane has been added to the file dialog.
The capture progress dialog can now be disabled.
The about dialog has received further improvements.
The behavior of Ethereal's dialog windows has been normalized somewhat.
The Windows installer can now associate standard file extensions
with Ethereal.
Ethereal can be configured not to bug you about unsaved captures.
Ethereal can open help documentation using the default web browser.
New protocol support
DNP, ENRP, giFT, H.235, PacketCable, SigComp, SIR (Serial Infrared)
Updated protocol support
AIM, ASAP, ASN.1 BER, ARP, ATM, DHCP, CFPI, CLNP, DCERPC (DCERPC, LSA,
NT, SAMR, SRVSVC, WKSSVC), EAP, ENIP, Frame Relay, GRE, H.225, H.245,
H.450, HTTP, IAX2, IEEE 802.11, ISAKMP, iSNS, ISUP, JFIF, Kerberos, LMP,
M3UA, MGCP, MPLS, MTP3, NCP, NetFlow, NFS, OSPF, PIM, RADIUS, RIP, RSVP,
RTCP, RTP, RTSP, SCSI, SDP, SIP, SMB, SMTP, SNMP, SOCKS, SSL, T.35, TCP,
VRRP, WBXML (User-Agent Profile), WSP, X11
New and updated capture file support
Radcom
== May 13, 2004
Ethereal 0.10.4 has been released.
This release fixes bugs in AIM, MMSE, SIP, and SPNEGO, as described in
the following advisory:
http://www.ethereal.com/appnotes/enpa-sa-00014.html
Everyone is encouraged to upgrade.
New and updated features
When built with GTK+ 2.4, Ethereal uses the new, greatly improved, file
selection dialog.
Export dialogs for Plain text, PostScript(R), PDML and PSML have been added.
PostScript(R) output has been improved.
The screen layout of the main window can be changed by Preferences now.
Many other parts of the user interface have received improvements.
Compressed and chunked transfer-coded HTTP bodies are now decoded.
A new generic media dissector more cleanly handles HTTP and WSP
Content-Type information.
New protocol support
ANSI IS-801, BEA Tuxedo, DCERPC EFS, DICOM, GPRS LLC, GPRS SNDCP,
IEEE 1588/PTP, PVSTP, MPLS Echo, RTPS
Updated protocol support
3G A11, ACSE, AFS, AIM, ANSI MAP, ASN.1 (BER, PER), BACnet, CHDLC, COPS,
DCERPC (LSA, NETLOGON, SAMR, SVCCTL, SPOOLS) DHCP, DIAMETER, EAPOL,
FTAM, GSM, GTP, H.225, HTTP, ICMPv6, IPv4, IPv6, IPDC, IPMI, iSNS,
ISUP, Kerberos, LDAP, LDP, MEGACO, MIPv6, MMSE, MQ, MTP3, NTLMSSP,
RADIUS, RPC, RTCP, RTPS, RUDP, SCTP, SIP, SLSK, SMB, SPNEGO, TCP,
Time, WBXML (EMN, SI, WV-CSP), WCCP, WSP, X11, YMSG
Capture file support
EyeSDN, nettl
== March 25, 2004
Ethereal 0.10.3 has been released.
This release fixes several security bugs described in the following
advisory:
http://www.ethereal.com/appnotes/enpa-sa-00013.html
Everyone is encouraged to upgrade.
New and updated features
Display filters now support the bitwise and (&) operator.
Protocol hierarchy statistics now have bandwidth columns.
The capture dialog has a new layout.
New protocol support
3G A11 Cisco SS7 (RUDP, RLM, and Session Management), FTAM, IPDC,
MQ, Presentation, SLSK,
Updated protocol support
802.11, AFP, AIM/Oscar, Axent Raptor/Symantec Enterprise firewall,
BER, BGP, CDP, DCCP, DCERPC NETLOGON, DCERPC RS_PGO, DCERPC
RS_PROP_PLCY, DCERPC, DCERPD SAMR, DIAMETER, DOCSIS, E.164, EIGRP,
FCFCS, GSM A, GSM MAP, GSM SMS, GTP, H.225, IGAP, IrDA, ISUP,
Kerberos, M2PA, M3UA, MTP3, NBNS, NCP, NDMP, Netflow, PER, PGM,
PostgreSQL, Q.931, Q.933, Quake 2, RADIUS, RSVP, RTSP, SCTP, SMB,
SNA, TCAP, TCP, UCP, WBXML, WSP, X11, xDLC
Capture file support
EyeSDN, libpcap (tcpdump)
== February 23, 2004
Ethereal 0.10.2 has been released.
This release fixes two major bugs in 0.10.1:
Under Windows, the error
** WARNING **: error opening
/usr/local/share/ethereal/asn1/default.tt, No such file or
directory
would be printed at startup.
The 0.10.1 source release was missing several files required for
compiling.
New and updated features
The user interface has received further updates. The Statistics
menu
layout has been improved, as well as the capture options dialog
layout.
New protocol support
Cisco Cast Client Control Protocol
Updated protocol support
AppleTalk, ASN.1, DCERPC, Diameter, FCSP, GSM A, GSM MAP, GSM SMS,
HTTP,
IEEE 802.3, Kerberos, MSN Messenger, PostgreSQL, Q.931, RPL, Skinny,
TCAP, TDS
== February 18, 2004
Ethereal 0.10.1 has been released.
New and updated features
The Windows installer now lets you choose between the traditional
GTK+
version 1 interface and a new GTK+ 2 interface.
Several updates were made to Ethereal's user interface. The "File"
menu
now has a "most recently used" list. The help menu was greatly
expanded.
The "matches" operator now handles more data types. For example,
you can
now use
smtp matches joespammer@example.com
as a display filter.
I/O statistics now support 1ms resolution.
Bug fixes
A column resorting crash on the Windows platform was fixed.
New protocol support
EDP, IAX2, IrDA, ISMP, OLSR, PostgreSQL, PRES, V5UA
Updated protocol support
ACSE, AFP, AIM, ANSI MAP, ARCNET, ASN.1, BEEP, BGP, BPDU, BSSAP,
CLNP,
COPS, CPHA, DCERPC AFS4INT, FLDB, RPRIV, RS_REPADM, STAT, SVCCTL,
TRKSVR, WKSSVC, DCERPC, DHCPv6, DNS, DOCSIS, EAP, ENIP, ESIS, FC,
FC-IP,
FC-SB3, FW-1, GIF (OK, so it's a file format and not a protocol per
se),
GIOP, GRE, GSM MAP, GSM SMS, GTP, H.225, H.245, H.450, HTTP, ICMPv6,
IEEE 802.11, IPMI, IPv4, IPv6, IPX, ISAKMP, iSCSI, ISDN, ISUP, JFIF,
Kerberos, KPASSWD, L2TP, LDAP, LDP, LWAPP, MGCP, MLD, MMSE, Mobile
IPv6,
MSPROXY, MTP3, NBNS, NCP, NDMP, NFS, OSI, OSPF, PER, PGM, Q.931,
RADIUS,
RMI, RSTAT, RTP, RTSP, SCCP, SDP, SES, SIP, SLL, SLSK, SMB, SMPP,
SNMP,
SOCKS, SRVLOC, SSH, SSL, STUN, T.38, TACACS, TCAP, TDS, Telnet,
Teredo,
Text, TFTP, TZSP, UDP, Vines, WAP, WBXML, WSP, WTP, X11
Updated capture file support
DBS EtherWatch, EtherPeek/AiroPeek, EyeSDN, LANAlzyer, NetXRay,
Snoop
== December 12, 2003
Ethereal 0.10.0 has been released.
This release fixes issues in the SMB and Q.931 dissectors that could
make Ethereal and Tethereal crash. See
http://www.ethereal.com/appnotes/enpa-sa-00012.html
for more details.
New and updated features
Many performance improvements have been made to the code. Most
users
should see a 2x to 3x performance increase when loading and working
with
capture files.
A "matches" display filter operator has been added. It is similar
to
the "contains" operator, but supports Perl-compatible regular
expressions.
Tethereal can now dump packet data in XML (PDML) format.
The main application menus have been rearranged and the help windows
have been revamped, along with a host of other UI enhancements.
The capture progress window now features bar graphs.
The GLib, GTK+, Net-SNMP, and zlib libraries that ship with the
Windows
installer have been updated.
New protocol support
BFD, CCSDS, CPFI, DCE/RPC {BUDB, EPM4, ICL_RPC, RS_PLCY,
RS_PROP_ACCT}
IGAP, ISO 8327-1 SES, MS Kpasswd, RTCFG, SEBEK,
Updated protocol support
ACN, AFP, ANSI A, ANSI MAP, ASN.1, BSMAP, BSSAP, CPFI, DCE/RPC
{DCOM,
EPM, NDR, SRVSVC, STAT, WKSSVC}, DCE/RPC, DHCP, DNS, DOCSIS, DSI,
DTAP,
ENTTEC, FC ELS, FC FZS, FC-SP, FC-SWILS, GIOP, GPRS NS, GSM A, GSM
MAP,
H.225, H.450, HTTP, ICMP, IPv6, IS-IS, ISAKMP, ISUP, Kerberos, LDAP,
LDP, MIPv6, MMSE, MS Proxy, MTP3, NCP 2222, NTP, PIM, RADIUS, RANAP,
RDM, RSVP, RTCP, RTP, SCCP, SDP, SIP, SMB, SMPP, SOCKS, SONMP,
SRVLOC,
SSL, TACACS, TCAP, TCP, TPKT, TZSP, UCP, WAP, WBXML, WLAN, WSP, WTP
Updated capture file support
AiroPeek v9 (2.x) support was added. Network Instruments Observer
and
Snoop support was updated.
== November 2, 2003
Ethereal 0.9.16 has been released.
This release fixes potential security issues with the GTP, ISAKMP,
MEGACO, and SOCKS dissectors. See
http://www.ethereal.com/appnotes/enpa-sa-00011.html
for more details.
New and updated features
Ethereal has leapt forward into the 90's and added a toolbar.
Ethereal and Tethereal can now force the data link type of captured
frames.
RTP analysis has been enhanced.
Individual frames can now be marked as time references
Service response time and general I/O statistics have been enhanced.
I/O
statistics can now calculate client load (experimental).
New protocol support
ACN, ALCAP, ANSI MAP, ASN.1 BER, BSSAP, DCE/RPC DRSUAPI, DCE/RPC
INITSHUTDOWN, DCE/RPC RS_BIND, FC-SP, FICON, GSM BSSMAP, GSM DTAP,
GSM
SMS TPDU, GSM SMS, GSM SS, H.450, IOS 4.0.1 IS-637-A (SMS), IS-683-A
(OTA), T.38, TCAP, TPCP
Updated protocol support
AODV, ASN.1 PER, BSSGP, CDP, Cisco HDLC, COPS, DCE/RPC BROWSER,
DCE/RPC
DNSSERVER, DCE/RPC EPM, DCE/RPC LSA, DCE/RPC Messenger, DCE/RPC REG,
DCE/RPC SVCCTL, DCE/RPC, DFS, DHCPv6, DOCSIS, EAPOL, ENIP, Frame
Relay,
FTP, GPRS, Gryphon, GTP, H.225, H.245, HTTP, ICMP, IEEE 802.11, IPX,
ISAKMP, ISUP, LAPB, Laplink, LWAPP, MAPI, MDSHDR, MEGACO, MPLS, NCP,
NDPS, NETLOGON, NFS, NTLMSSP, OSPF, OXID, PPP, Q.931, Q.933, RANAP,
RIP,
RTP, SAMR, SCCP, SCSI, SCTP, SDP, SIP, SMB, SMPP, SNMP, SOCKS,
SONMP,
SPOOLSS SRVLOC, SRVSVC, T.35, TACACS+, TAPI, TCP, TZSP, WKSSVC, WSP,
X.25, Yahoo! Messenger
Updated capture file support
Linux Bluez Bluetooth hcidump support has been added.
Endace ERF and Network Instruments Observer, and NetXRay support has
been enhanced.
== September 9, 2003
Ethereal 0.9.15 has been released.
New and updated features
Many often-requested features have been added with this release. If
you're running an older version of Ethereal you may want to have a
look.
Conversation List (aka "top talker") support has been added to
Ethereal
and Tethereal. Protocol statistics in general have been updated.
Searching capture files has been improved even more -- a new
"contains"
display filter operator that searches for strings in PDUs has been
added. The Find dialog now supports case-insensitive searches, hex
data
searches, and more.
An H.225 dissector has been added. It can automatically recognize
RTP
and RTCP conversations.
A preference file has been added for disabled protocols.
Color filters may now be imported and exported from within Ethereal.
A new column type has been added for cumulative bytes.
New protocols
GPRS BSSGP, GPRS NS, H.225, H.263, LWAPP, Laplink, Q.933, STUN
Updated protocols
ArtNet, BOOTP/DHCP, DCE/RPC, DCERPCSTAT, DHCPv6, DOCSIS, ENIP,
Ethernet,
FCIP, Frame Relay, H.245, HTTP, IPsec, iSCSI, LDAP, LWRES, M2UA,
M3UA,
MEGACO, MTP3, NCP, NDPS, NFS, NTLMSSP, PPTP, Q.931, RPC, SAMR, SCCP,
SCTP, SIP, SMB, SMPP, SNA, SNMP, SRVLOC, SUA, TCP, TDS, UCD, UDP,
WSP,
Updated capture file support
Support for Accellent 5Views and Endace ERF capture files was added.