wireshark/NEWS

== December 7, 2002

Ethereal 0.9.8 has been released.


New and Updated Features

  The TAP subsystem received major updates.  Tethereal can display
  more statistics, and several graphs have been added to Ethereal.

  A protocol hierarchy statistics tap was added to tethereal.  This code
  may be used to replace the hierarchy statistics code in Ethereal.
  
  More updates have been added to TCP analysis.

  After a long hiatus, the Windows installer once again includes SNMP
  support.

  The total running time of the capture is now displayed in the capture
  progress dialog box.  The capture progress dialog also shows ARP packets.

  The look of the plugins dialog was revamped.


Bug Fixes and Updates

  A bug which caused Ethereal under Windows to crash when "Update list of
  packets in real time" was enabled has been fixed.

  Serious problems with the BGP, LMP, PPP, and TDS dissectors have been
  discovered.  See 
  
    http://www.ethereal.com/appnotes/enpa-sa-00007.html
  
  for more details.

  The stability of the text2pcap utility has been improved.

  In tethereal, the packet count is properly displayed when you ^C out of a
  capture.


New Protocols

  ARCNET, ClearCase NFS, DCERPC LSA_DS, HyperSCSI, MDNS, PCLI, RPL


Updated Protocols

  AFP, AFS, BACNet, BGP, DCERPC, DCERPC EPM, DCERPC LSA, DCERPC NDR,
  DCERPC NT, DCERPC SAMR, DCERPC UPDATE, GTP, HTTP, IPv6CP, IPX, iSCSI,
  ISDN, LAPD, LDAP, M2PA, NDPS, NDS, NetBIOS, NFS, NTLMSSP, OSPF, PPP,
  PPPoE, Q.931, RPC, RSVP, SCSI, SCTP, SMB, SNMP, Spanning Tree, SPNEGO,
  SPOOLSS, SPX, SRVLOC, TCP, Telnet, V.120, WEP, YPSERV


Updated Capture File Support

  AIX tcpdump, NetXRay, Sniffer, snoop


== September 28, 2002

Ethereal 0.9.7 has been released.

New Features

  In order to improve the out-of-box responsiveness of Ethereal and
  Tethereal, network name resolution has been disabled by default.

  TCP analysis (a feature added in the 0.9.6 release) was improved.

  The NCP code base received quite a few updates.

  Initial support for version 2 of the GTK+ library was added.

  RPC staticstics (which use the new Tap API) were added.

  Due to added and updated support for the NTLM, SNEGO, and GSS-API
  protocols, Ethereal can now dissect most of the security blobs for
  Windows 2000 authentication.

  The Ethernet "manuf" file now handles addresses specified with a
  mask, and  contains many well-known addresses.


New Protocols

  802.1s MSTP, FIX, GSS-API, Interbase, NDPS, Netflow (Cisco and Juniper),
  SCCP-Management, SPNEGO

  The following DCE/RPC protocols were also added:

  AFS4INT, BOSSVR, CDS_CLERKSERVER, CDS_SOLICIT, CPRPC_SERVER, DNSSERVER,
  DTSPROVIDER, DTSSTIME_REQ, FLDB, FTSERVER, KRB5RPC, REPADMIN, REP_PROC, 
  ROVERRIDE, RPRIV, RS_ATTR, RSEC_LOGIN, RS_MISC, RS_PGO, RS_REPLIST,
  RS_UNIX, SECIDMAP, TKN4INT, UBIKDISK, UKIKVOTE


Updated Protocols

  AFP, AODV/AODV6, BGP, CHDLC, CHPA, DCE/RPC CONV, DCE/RPC LSA, DCE/RPC
  NT, DCE/RPC SAMR, DHCP, DNS, DOCSIS, EAP, GTP, HTTP, IP, iSCSI, IS-IS,
  Kerberos, LDAP, LDP, M2PA MMSE, NBNS, NCP, NDS, NETLOGON, NTLMSSP, OSI
  Q.931 RPC, RPCSTAT, SCSI, Skinny, SMB, SNEGO, SPOOLSS, SRVSVC, TCP, WSP,


== August 20, 2002

Ethereal 0.9.6 has been released.

Bugs Fixed

  A buffer overflow in the ISIS dissector has been fixed.  More
  information can be found at
  http://www.ethereal.com/appnotes/enpa-sa-00006.html.
    
  A bad TCP header could cause problems for the "Follow TCP Stream"
  feature.
  
  Setting "column.format" from the command line no longer crashes
  Ethereal and Tethereal.

  Problems with capture files being overwritten (e.g. if you try to save over
  the current capture file) have been fixed.

  An SMB conversation handling bug has been fixed.

  Thanks to Valgrind, several memory leaks have been fixed.

  Some problems with printing under Windows have been fixed.


New Features

  TCP sequence number analysis has been added.

  The DCE RPC NETLOGON dissector has received a major overhaul.

  Data types throughout the code have been cleaned up. 


New Protocols

  CPHA, DOCSIS, NTLMSSP, Xyplex terminal server protocol, ZIP


Updated Protocols

  802.11, AFP, ASAP, BGP, CDP, CDPCP, CPHA, DDP, DCERPC, DCERPC NT, DCERPC
  REG, EPM, FTP, HCLNFSD, HTTP, IPX, ISAKMP, ISIS, IUA, Kerberos, L2TP,
  LLMNR, LSA, MMSE, MPLSCP, NBNS, NetBIOS, NETLOGON, NFS, NTLMSSP, PPP,
  Quake2, RADIUS, RSVP, RTCP, SAMR, SCSI, SDP, SIP, SMB, SMB Mailslot,
  SMTP, SPOOLSS, TCP, TDS, TNS, TPKT, Token Ring, VJ TCP, WINREG, WSP


Capture File Updates

CheckPoint Firewall-1 monitor file support and CoSine debug file support
were added.  Support for pppdump and Netmon files was updated.


== June 28, 2002

Ethereal 0.9.5 has been released. This version fixes several potential
security problems revealed since the release of 0.9.4. See the security
advisory at http://www.ethereal.com/appnotes/enpa-sa-00005.html for
more details.


New Features:

The ability to read packet data from a pipe was enhanced.  Printing
under Windows now works.


New Protocols

802.3 LACP, Apache JServ, AODV6, DCERPC Browser, Java RMI, TAPI


Updated Protocols

ATM, BGP, BOOTP, DCE RPC, EPM, Frame Relay, GTP, L2TP, LMP, MAPI, MIP,
MMSE, MTP3, NCP, NFS, NSPI, PPP, Q2931, RADIUS, RSVP, SCSI, SMB, SNA,
SOCKS, SPOOLSS, SRVSVC, SunATM, TFTP, TNS, Token Ring, UCP, VJ TCP/IP,
WCP, WEP, WSP, WTP


Capture File Updates

Ethereal can now write LANalyzer files.  The Sniffer, nettl, snoop,
NetXRay, and libpcap code all received updates.