2019-02-14 23:23:05 +00:00
include::attributes.adoc[]
2018-02-20 01:13:08 +00:00
:stylesheet: ws.css
2018-02-25 17:17:14 +00:00
:linkcss:
2016-11-01 21:35:29 +00:00
2016-07-16 07:53:37 +00:00
= Wireshark {wireshark-version} Release Notes
2019-07-20 15:13:59 +00:00
// AsciiDoc quick reference: https://powerman.name/doc/asciidoc
2018-02-06 20:35:21 +00:00
// Asciidoctor Syntax Quick Reference:
2019-07-20 15:13:59 +00:00
// https://asciidoctor.org/docs/asciidoc-syntax-quick-reference/
2014-04-15 16:31:24 +00:00
2018-04-03 00:40:20 +00:00
This is an experimental release intended to test new features for
2019-02-06 19:53:00 +00:00
Wireshark 3.2.
2013-03-15 01:33:46 +00:00
== What is Wireshark?
2018-02-04 23:15:02 +00:00
Wireshark is the world’
2013-03-15 01:33:46 +00:00
used for troubleshooting, analysis, development and education.
2018-02-04 23:15:02 +00:00
== What’
2013-03-15 01:33:46 +00:00
2019-06-16 18:07:13 +00:00
Many improvements have been made. See the “New and Updated Features”
section below for more details.
2017-09-02 23:42:00 +00:00
2019-02-06 19:33:12 +00:00
// === Bug Fixes
2013-03-15 01:33:46 +00:00
2019-02-06 19:33:12 +00:00
// The following bugs have been fixed:
2013-03-15 01:33:46 +00:00
2018-05-24 18:35:45 +00:00
//* wsbuglink:5000[]
//* wsbuglink:6000[Wireshark bug]
//* cveidlink:2014-2486[]
2019-02-06 19:33:12 +00:00
//* Wireshark is solely responsible for the decline of shopping malls in your area.
2018-03-12 15:49:12 +00:00
2013-03-15 01:33:46 +00:00
=== New and Updated Features
2019-11-18 20:10:21 +00:00
The following features are new (or have been significantly updated)
since version 3.1.1:
* Nothing of note.
2019-07-25 20:02:12 +00:00
The following features are new (or have been significantly updated)
since version 3.1.0:
2019-11-14 16:08:28 +00:00
* Automatic updates are supported on macOS.
2019-11-14 14:56:32 +00:00
* You can now select multiple packets in the packet list at the same time
2019-11-18 18:54:40 +00:00
** They can be exported as Text by “kbd:[Ctrl+C]” or “kbd:[Cmd+C]” and the corresponding
2019-11-14 14:56:32 +00:00
menu in “menu:Edit[Copy > As ...]”
** They can be marked/unmarked or ignored/unignored at the same time
** They can be exported and printed using the corresponding menu entries
2019-11-18 18:54:40 +00:00
“menu:File[Export Specified Packets]”, “menu:File[Export Packet Dissections]”
and “menu:File[Print]”
2019-11-12 21:15:50 +00:00
* You can now follow HTTP/2 and QUIC streams.
2019-10-25 16:10:20 +00:00
* You can once again mark and unmark packets using the middle mouse button.
This feature went missing around 2009 or so.
* The Windows packages are now built using Microsoft Visual Studio 2019.
2019-11-05 13:36:18 +00:00
* IOGraph automatically adds a graph for the selected display filter if no
previous graph exists
2019-11-05 11:41:18 +00:00
* Action buttons for the display filter bar may be aligned left via the context menu
2019-11-20 08:51:12 +00:00
** The "Expression..." toolbar entry has been moved to "menu:Analyze[Display filter Expression ...]" as well as to the context menu of the display filter toolbar
2019-11-05 15:10:23 +00:00
* Allow extcaps to be loaded from the personal configuration directory
2019-11-20 18:58:11 +00:00
* The Wireshark 3.1.0 Windows installers ship with Qt 5.12.6.
Previous installers shipped with Qt 5.12.4.
2019-07-25 20:02:12 +00:00
2018-12-13 00:39:20 +00:00
The following features are new (or have been significantly updated)
2019-02-06 19:33:12 +00:00
since version 3.0.0:
2018-12-13 00:39:20 +00:00
2019-10-29 16:13:53 +00:00
* You can drag and drop a field to a column header to create a column for that field, or to the
display filter input to create a display filter.
If a display filter is applied, the new filter can be added using the same rules as “Apply Filter”
* You can drag and drop a column entry to the display filter to create a filter for it.
* You can import profiles from a .zip archive or an existing directory.
2019-06-16 18:07:13 +00:00
* Dark mode support on macOS and dark theme support on other platforms
has been improved.
2019-04-10 10:52:52 +00:00
* Brotli decompression support in HTTP/HTTP2 (requires the brotli library).
2019-02-02 14:52:07 +00:00
* The build system now checks for a SpeexDSP system library installation. The
bundled Speex resampler code is still provided as a fallback.
2019-05-21 17:06:49 +00:00
* WireGuard decryption can now be enabled through keys embedded in a pcapng in
addition to the existing key log preference (wsbuglink:15571[]).
2019-05-29 14:06:38 +00:00
* A new tap for extracting credentials from the capture file has been added.
2019-09-16 16:26:36 +00:00
It can be accessed through the `-z credentials` option in tshark or from the
2019-11-14 14:56:32 +00:00
“menu:Tools[Credentials]” menu in Wireshark.
2019-07-14 16:51:40 +00:00
* Editcap can now split files on floating point intervals.
2019-07-25 20:02:12 +00:00
* Windows .msi packages are now https://support.microsoft.com/en-us/help/4472027/2019-sha-2-code-signing-support-requirement-for-windows-and-wsus[signed using SHA-2].
.exe installers are still dual-signed using SHA-1 and SHA-2.
2019-09-16 16:26:36 +00:00
* The “Enabled Protocols” Dialog now only enables, disables and inverts protocols based on the set filter selection. The protocol type (standard or heuristic) may also be choosen as a filter value.
2019-11-14 14:56:32 +00:00
* The “menu:Analyze[Apply as Filter]” and “menu:Analyze[Prepare a Filter]” packet list and detail popup menus now show a preview of their respective filters.
2017-09-23 13:05:21 +00:00
* Protobuf files (*.proto) can now be configured to enable more precise parsing of serialized Protobuf data (such as gRPC).
2017-10-19 16:07:17 +00:00
* HTTP2 support streaming mode reassembly. To use this feature, subdissectors can register itself to "streaming_content_type" dissector table and return pinfo->desegment_len and pinfo->desegment_offset to tell HTTP2 when to start and how many additional bytes requires when next called.
* The message of stream gRPC method can now be parsed with supporting of HTTP2 streaming mode reassembly feature.
2019-11-20 18:58:11 +00:00
* The Wireshark 3.1.0 Windows installers ship with Qt 5.12.4.
Previous installers shipped with Qt 5.12.1.
2018-12-13 00:39:20 +00:00
2019-02-06 19:33:12 +00:00
// === Removed Features and Support
2018-05-10 15:53:42 +00:00
2014-06-06 18:39:55 +00:00
//=== Removed Dissectors
2014-01-03 09:48:53 +00:00
2019-02-06 19:33:12 +00:00
// === New File Format Decoding Support
2018-12-11 23:17:53 +00:00
2019-02-06 19:33:12 +00:00
// [commaize]
// --
// --
2014-01-03 09:48:53 +00:00
2013-03-15 01:33:46 +00:00
=== New Protocol Support
2016-06-03 16:21:21 +00:00
Switch from AsciiDoc to Asciidoctor.
Switch the markup text processor for files in the docbook directory from
AsciiDoc to Asciidoctor. Asciidoctor has several useful features (such
as direct PDF output) and is actively developed. It's written in Ruby
but that dependency can be sidestepped with AsciidoctorJ, a
self-contained bundle that only depends on the JRE.
The current toolchain targets require Python, AsciiDoc, DocBook XML,
DocBook XSL, Java, FOP, xsltproc, lynx, and the HTMLHelp compiler:
HTML: AsciiDoc → DocBook XML → xsltproc + DocBook XSL
Chunked HTML: AsciiDoc → DocBook XML → xsltproc + DocBook XSL
PDF: AsciiDoc → DocBook XML → xsltproc + DocBook XSL → FOP
HTMLHelp: AsciiDoc → DocBook XML → xsltproc + DocBook XSL → HHC
This change removes the AsciiDoc and FOP requirements and adds either
AsciidoctorJ or Asciidoctor + Ruby:
HTML: Asciidoctor → DocBook XML → xsltproc + DocBook XSL
Chunked HTML: Asciidoctor → DocBook XML → xsltproc + DocBook XSL
PDF: Asciidoctor
HTMLHelp: Asciidoctor → DocBook XML → xsltproc + DocBook XSL → HHC
Ideally we could generate all of these using AsciidoctorJ, Java, and
lynx. Unfortunately we're not there yet.
The release notes depend on several macros (ws-buglink, ws-salink,
cve-idlink, sort-and-group). Add Asciidoctor (Ruby) equivalents.
Remove the BUILD_xxx_GUIDES CMake options and add various output targets
automatically. This means that you have to build the various documentation
targets explicitly.
Change-Id: I31930677a656b99b1c6839bb6c33a13db951eb9a
Reviewed-on: https://code.wireshark.org/review/25668
Petri-Dish: Gerald Combs <gerald@wireshark.org>
Tested-by: Petri Dish Buildbot
Reviewed-by: Gerald Combs <gerald@wireshark.org>
2017-10-19 22:03:55 +00:00
// Add one protocol per line between the -- delimiters.
[commaize]
--
2019-07-24 21:29:13 +00:00
3GPP BICC MST (BICC-MST)
3GPP log packet (LOG3GPP)
2019-11-20 18:58:11 +00:00
3GPP/GSM Cell Broadcast Service Protocol (cbsp)
Asynchronous Management Protocol (AMP)
2019-07-24 21:29:13 +00:00
Bluetooth Mesh Beacon
Bluetooth Mesh PB-ADV
Bluetooth Mesh Provisioning PDU
Bluetooth Mesh Proxy
2019-06-11 20:12:38 +00:00
CableLabs Layer-3 Protocol IEEE EtherType 0xb4e3 (CL3)
2019-07-24 21:29:13 +00:00
DCOM IProvideClassInfo
DCOM ITypeInfo
2019-09-06 17:20:18 +00:00
Diagnostic Log and Trace (DLT)
2019-07-24 21:29:13 +00:00
Distributed Replicated Block Device (DRBD)
2019-06-11 20:12:38 +00:00
Dual Channel Wi-Fi (CL3DCW)
2019-07-24 21:29:13 +00:00
EBHSCR Protocol (EBHSCR)
EERO Protocol (EERO)
evolved Common Public Radio Interface (eCPRI)
File Server Remote VSS Protocol (FSRVP)
FTDI FT USB Bridging Devices (FTDI FT)
Graylog Extended Log Format over UDP (GELF)
GSM/3GPP CBSP (Cell Broadcast Service Protocol)
2019-11-20 18:58:11 +00:00
ITS message - CAMv1
ITS message - DENMv1
2019-11-19 18:00:13 +00:00
Linux net_dm (network drop monitor) protocol
2019-07-24 21:29:13 +00:00
MIDI System Exclusive DigiTech (SYSEX DigiTech)
2017-11-07 00:53:38 +00:00
Network Controller Sideband Interface (NCSI)
2019-07-24 21:29:13 +00:00
NR Positioning Protocol A (NRPPa) TS 38.455
NVM Express over Fabrics for TCP (nvme-tcp)
2018-02-22 20:50:13 +00:00
OsmoTRX Protocol (GSM Transceiver control and data)
2019-09-10 18:24:32 +00:00
Scalable service-Oriented MiddlewarE over IP (SOME/IP)
2019-11-19 18:00:13 +00:00
USB 2.0 Link Layer (USBLL)
2019-11-20 18:58:11 +00:00
Wi-Fi Neighbour Awareness Networking (NAN)
2018-05-28 13:16:35 +00:00
--
2013-03-15 01:33:46 +00:00
=== Updated Protocol Support
2016-08-16 14:50:37 +00:00
Too many protocols have been updated to list here.
2013-03-15 01:33:46 +00:00
=== New and Updated Capture File Support
2019-07-24 21:29:13 +00:00
// There is no new or updated capture file support in this release.
// Add one file type per line between the -- delimiters.
Switch from AsciiDoc to Asciidoctor.
Switch the markup text processor for files in the docbook directory from
AsciiDoc to Asciidoctor. Asciidoctor has several useful features (such
as direct PDF output) and is actively developed. It's written in Ruby
but that dependency can be sidestepped with AsciidoctorJ, a
self-contained bundle that only depends on the JRE.
The current toolchain targets require Python, AsciiDoc, DocBook XML,
DocBook XSL, Java, FOP, xsltproc, lynx, and the HTMLHelp compiler:
HTML: AsciiDoc → DocBook XML → xsltproc + DocBook XSL
Chunked HTML: AsciiDoc → DocBook XML → xsltproc + DocBook XSL
PDF: AsciiDoc → DocBook XML → xsltproc + DocBook XSL → FOP
HTMLHelp: AsciiDoc → DocBook XML → xsltproc + DocBook XSL → HHC
This change removes the AsciiDoc and FOP requirements and adds either
AsciidoctorJ or Asciidoctor + Ruby:
HTML: Asciidoctor → DocBook XML → xsltproc + DocBook XSL
Chunked HTML: Asciidoctor → DocBook XML → xsltproc + DocBook XSL
PDF: Asciidoctor
HTMLHelp: Asciidoctor → DocBook XML → xsltproc + DocBook XSL → HHC
Ideally we could generate all of these using AsciidoctorJ, Java, and
lynx. Unfortunately we're not there yet.
The release notes depend on several macros (ws-buglink, ws-salink,
cve-idlink, sort-and-group). Add Asciidoctor (Ruby) equivalents.
Remove the BUILD_xxx_GUIDES CMake options and add various output targets
automatically. This means that you have to build the various documentation
targets explicitly.
Change-Id: I31930677a656b99b1c6839bb6c33a13db951eb9a
Reviewed-on: https://code.wireshark.org/review/25668
Petri-Dish: Gerald Combs <gerald@wireshark.org>
Tested-by: Petri Dish Buildbot
Reviewed-by: Gerald Combs <gerald@wireshark.org>
2017-10-19 22:03:55 +00:00
[commaize]
2018-08-27 15:17:32 +00:00
--
2019-07-24 21:29:13 +00:00
3gpp phone
Android Logcat Text
Ascend
2019-11-20 18:58:11 +00:00
Busmaster log file
2019-07-24 21:29:13 +00:00
Candump
Endace ERF
NetScaler
pcapng
2019-07-25 18:45:16 +00:00
Savvius {asterisk}Peek
2018-08-27 15:17:32 +00:00
--
2013-03-15 01:33:46 +00:00
2019-02-06 19:33:12 +00:00
// === New and Updated Capture Interfaces support
2015-04-08 14:09:03 +00:00
2018-01-06 01:02:57 +00:00
//_Non-empty section placeholder._
2018-10-01 17:20:38 +00:00
2019-02-06 19:33:12 +00:00
// === Major API Changes
2014-02-22 19:16:44 +00:00
2013-03-15 01:33:46 +00:00
== Getting Wireshark
Wireshark source code and installation packages are available from
2014-09-17 00:15:56 +00:00
https://www.wireshark.org/download.html.
2013-03-15 01:33:46 +00:00
=== Vendor-supplied Packages
Most Linux and Unix vendors supply their own Wireshark packages. You can
usually install or upgrade Wireshark using the package management system
specific to that platform. A list of third-party packages can be found
2014-09-17 00:15:56 +00:00
on the https://www.wireshark.org/download.html#thirdparty[download page]
2013-03-15 01:33:46 +00:00
on the Wireshark web site.
== File Locations
Wireshark and TShark look in several different locations for preference
files, plugins, SNMP MIBS, and RADIUS dictionaries. These locations vary
from platform to platform. You can use About→Folders to find the default
locations on your system.
== Getting Help
2018-08-09 15:43:47 +00:00
The User’
found at https://www.wireshark.org/docs/
2018-02-04 23:15:02 +00:00
Community support is available on https://ask.wireshark.org/[Wireshark’
2013-03-15 01:33:46 +00:00
Q&A site] and on the wireshark-users mailing list. Subscription
2018-02-04 23:15:02 +00:00
information and archives for all of Wireshark’
2014-09-17 00:15:56 +00:00
found on https://www.wireshark.org/lists/[the web site].
2013-03-15 01:33:46 +00:00
2018-08-09 15:43:47 +00:00
Bugs and feature requests can be reported on
https://bugs.wireshark.org/[the bug tracker].
2013-03-15 01:33:46 +00:00
Official Wireshark training and certification are available from
2019-07-20 15:13:59 +00:00
https://www.wiresharktraining.com/[Wireshark University].
2013-03-15 01:33:46 +00:00
== Frequently Asked Questions
A complete FAQ is available on the
2014-09-17 00:15:56 +00:00
https://www.wireshark.org/faq.html[Wireshark web site].
