forked from osmocom/wireshark
![Guy Harris](/assets/img/avatar_default.png)
the configure script will fail unless you explicitly say you don't want Wireshark built. svn path=/trunk/; revision=21914
240 lines
7.1 KiB
XML
240 lines
7.1 KiB
XML
<?xml version="1.0"?>
|
|
<!DOCTYPE article PUBLIC "-//OASIS//DTD DocBook XML V4.2//EN"
|
|
"http://www.oasis-open.org/docbook/xml/4.2/docbookx.dtd" [
|
|
|
|
<!-- $Id$ -->
|
|
|
|
<!--
|
|
DOCUMENT SECTION
|
|
-Use this section to encode all document information
|
|
-->
|
|
|
|
<!--
|
|
Wireshark Info
|
|
-->
|
|
<!ENTITY WiresharkCurrentVersion "0.99.6">
|
|
|
|
]>
|
|
|
|
<article>
|
|
<title>Wireshark &WiresharkCurrentVersion; Release Notes</title>
|
|
|
|
<section id="WhatIs"><title>What is Wireshark?</title>
|
|
<para>
|
|
Wireshark is the world's most popular network protocol analyzer. It
|
|
is used for troubleshooting, analysis, development, and education.
|
|
</para>
|
|
</section>
|
|
|
|
<section id="WhatsNew"><title>What's New</title>
|
|
<section><title>Bug Fixes</title>
|
|
<para>
|
|
|
|
The following vulnerabilities have been fixed. See the
|
|
<ulink url="http://www.wireshark.org/security/wnpa-sec-2007-02.html">security advisory</ulink> for details and a workaround.
|
|
|
|
<itemizedlist>
|
|
|
|
<listitem>
|
|
<para>
|
|
Wireshark could crash when dissecting an HTTP chunked
|
|
response.
|
|
<!-- Fixed in r21034 -->
|
|
(Bug <ulink url="http://bugs.wireshark.org/bugzilla/show_bug.cgi?id=1394">1394</ulink>)
|
|
</para>
|
|
<para>Versions affected: 0.99.5</para>
|
|
<para>
|
|
<!-- <ulink url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-????">CVE-2007-????</ulink> -->
|
|
</para>
|
|
</listitem>
|
|
|
|
<listitem>
|
|
<para>
|
|
On some systems, Wireshark could crash while reading
|
|
iSeries capture files.
|
|
<!-- Fixed in r20990 -->
|
|
(Bug <ulink url="http://bugs.wireshark.org/bugzilla/show_bug.cgi?id=1415">1415</ulink>)
|
|
</para>
|
|
<para>Versions affected: 0.10.14 to 0.99.5</para>
|
|
<para>
|
|
<!-- <ulink url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-????">CVE-2007-????</ulink> -->
|
|
</para>
|
|
</listitem>
|
|
|
|
<listitem>
|
|
<para>
|
|
Wireshark could exhaust system memory while reading a malformed
|
|
DCP ETSI packet.
|
|
<!-- Fixed in r21007 -->
|
|
(Bug <ulink url="http://bugs.wireshark.org/bugzilla/show_bug.cgi?id=1264">1264</ulink>)
|
|
</para>
|
|
<para>Versions affected: 0.99.5</para>
|
|
<para>
|
|
<!-- <ulink url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-????">CVE-2007-????</ulink> -->
|
|
</para>
|
|
</listitem>
|
|
|
|
<listitem>
|
|
<para>
|
|
Defining a display filter macro with no arguments would make
|
|
Wireshark crash.
|
|
<!-- Fixed in r21664 -->
|
|
<!-- CID 232 -->
|
|
</para>
|
|
<para>Versions affected: 0.99.5</para>
|
|
<para>
|
|
<!-- <ulink url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-????">CVE-2007-????</ulink> -->
|
|
</para>
|
|
</listitem>
|
|
|
|
<listitem>
|
|
<para>
|
|
Wireshark could loop excessively while reading a malformed SSL
|
|
packet.
|
|
<!-- Fixed in r? -->
|
|
(Bug <ulink url="http://bugs.wireshark.org/bugzilla/show_bug.cgi?id=1582">1582</ulink>)
|
|
</para>
|
|
<para>Versions affected: ?</para>
|
|
<para>
|
|
<!-- <ulink url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-????">CVE-2007-????</ulink> -->
|
|
</para>
|
|
</listitem>
|
|
|
|
</itemizedlist>
|
|
|
|
</para>
|
|
|
|
<para>
|
|
|
|
The following bugs have been fixed:
|
|
|
|
<itemizedlist>
|
|
|
|
<listitem><para>
|
|
WEP decryption would only work for the first key specified.
|
|
disappear or become unusable.
|
|
</para></listitem>
|
|
|
|
<listitem><para>
|
|
Merging files in Wireshark now appends files properly.
|
|
</para></listitem>
|
|
|
|
<listitem><para>
|
|
Wireshark could hang while saving an RTP stream with bad timestamp
|
|
data.
|
|
</para></listitem>
|
|
|
|
<listitem><para>
|
|
You must now explicitly pass "--disable-wireshark" to the build
|
|
environment if you only want to build TShark; the configure
|
|
script will fail, rather than automatically building only
|
|
TShark, if it's run on a system that doesn't have GTK+ headers
|
|
and libraries installed.
|
|
</para></listitem>
|
|
|
|
</itemizedlist>
|
|
</para>
|
|
|
|
</section>
|
|
|
|
<section><title>New and Updated Features</title>
|
|
<para>
|
|
The following features are new (or have been significantly updated)
|
|
since the last release:
|
|
|
|
<!--
|
|
- HTTP object export
|
|
- Delta times
|
|
- Code cleanup
|
|
-->
|
|
|
|
</para>
|
|
</section>
|
|
|
|
<section><title>New Protocol Support</title>
|
|
<para>
|
|
|
|
</para>
|
|
</section>
|
|
|
|
<section><title>Updated Protocol Support</title> <para>
|
|
|
|
</para>
|
|
</section>
|
|
|
|
<section><title>New and Updated Capture File Support</title>
|
|
<para>
|
|
|
|
</para>
|
|
</section>
|
|
|
|
</section>
|
|
|
|
<section id="GettingWireshark"><title>Getting Wireshark</title>
|
|
<para>
|
|
Wireshark source code and installation packages are available from
|
|
the <ulink url="http://www.wireshark.org/download.html">download
|
|
page</ulink> on the main web site.
|
|
</para>
|
|
|
|
<section><title>Vendor-supplied Packages</title>
|
|
<para>
|
|
Most Linux and Unix vendors supply their own Wireshark packages.
|
|
You can usually install or upgrade Wireshark using the package management
|
|
system specific to that platform. A list of third-party packages
|
|
can be found on the
|
|
<ulink url="http://www.wireshark.org/download.html#otherplat">download page</ulink> on the Wireshark web site.
|
|
</para>
|
|
</section>
|
|
|
|
</section>
|
|
|
|
<!-- XXX needs to be written
|
|
<section id="RemovingWireshark"><title>Removing Wireshark</title>
|
|
<para>
|
|
</para>
|
|
</section>
|
|
-->
|
|
|
|
<section id="FileLocations"><title>File Locations</title>
|
|
<para>
|
|
Wireshark and TShark look in several different locations for
|
|
preference files, plugins, SNMP MIBS, and RADIUS dictionaries.
|
|
These locations vary from platform to platform. You can use
|
|
About->Folders to find the default locations on your system.
|
|
</para>
|
|
</section>
|
|
|
|
<section id="KnownProblems"><title>Known Problems</title>
|
|
|
|
<para>
|
|
The <guibutton>Filter</guibutton> button is nonfunctional in the
|
|
file dialogs under Windows.
|
|
(<ulink url="http://bugs.wireshark.org/bugzilla/show_bug.cgi?id=942">Bug
|
|
942</ulink>)
|
|
</para>
|
|
|
|
</section>
|
|
|
|
<section id="GettingHelp"><title>Getting Help</title>
|
|
<para>
|
|
Community support is available on the wireshark-users mailing list.
|
|
Subscription information and archives for all of Wireshark's mailing
|
|
lists can be found on <ulink url="http://www.wireshark.org/lists/">the
|
|
web site</ulink>.
|
|
</para>
|
|
<para>
|
|
Commercial support, training, and development services are available
|
|
from <ulink url="http://www.cacetech.com/">CACE Technologies</ulink>.
|
|
</para>
|
|
</section>
|
|
|
|
<section id="FAQ"><title>Frequently Asked Questions</title>
|
|
<para>
|
|
A complete FAQ is available on the
|
|
<ulink url="http://www.wireshark.org/faq.html">Wireshark web site</ulink>.
|
|
</para>
|
|
</section>
|
|
|
|
</article>
|