Anzeigen der neuesten Beiträge
0 Mitglieder und 1 Gast betrachten dieses Thema.
New and Updated FeaturesThe following features are new (or have been significantly updated) since version 1.4: * Wireshark can import text dumps, similar to text2pcap. * You can now view Wireshark's dissector tables (for example the TCP port to dissector mappings) from the main window. * TShark can show a specific occurrence of a field when using '-T fields'. * Custom columns can show a specific occurrence of a field. * You can hide columns in the packet list. * Wireshark can now export SMB objects. * dftest and randpkt now have manual pages. * TShark can now display iSCSI service response times. * Dumpcap can now save files with a user-specified group id. * Syntax checking is done for capture filters. * You can display the compiled BPF code for capture filters in the Capture Options dialog. * You can now navigate backwards and forwards through TCP and UDP sessions using Ctrl+, and Ctrl+. . * Packet length is (finally) a default column. * TCP window size is now avaiable both scaled and unscaled. A TCP window scaling graph is available in the GUI. * 802.1q VLAN tags are now shown by the Ethernet II dissector. * Various dissectors now display some UTF-16 strings as proper Unicode including the DCE/RPC and SMB dissectors. * The RTP player now has an option to show the time of day in the graph in addition to the seconds since beginning of capture. * The RTP player now shows why media interruptions occur. * Graphs now save as PNG images by default. New Protocol SupportADwin, ADwin-Config, Apache Etch, Aruba PAPI, Constrained Application Protocol (COAP), Digium TDMoE, Ether-S-I/O, FastCGI, Fibre Channel over InfiniBand (FCoIB), Gopher, Gigamon GMHDR, IDMP, Infiniband Socket Direct Protocol (SDP), JSON, LISP Data, MikroTik MAC-Telnet, Mongo Wire Protocol, Network Monitor 802.11 radio header, OPC UA ExtensionObjects, PPI-GEOLOCATION-GPS, ReLOAD, ReLOAD Framing, SAMETIME, SCoP, SGSAP, Tektronix Teklink, WAI authentication, Wi-Fi P2P (Wi-Fi Direct)New and Updated Capture File SupportApple PacketLogger, Catapult DCT2000, Daintree SNA, Endace ERF, HP OpenVMS TCPTrace, IPFIX (the file format, not the protocol), Lucent/Ascend debug, Microsoft Network Monitor, Network Instruments, TamoSoft CommView
* Wireshark can import text dumps, similar to text2pcap. * You can now view Wireshark's dissector tables (for example the TCP port to dissector mappings) from the main window. * TShark can show a specific occurrence of a field when using '-T fields'. * Custom columns can show a specific occurrence of a field. * You can hide columns in the packet list. * Wireshark can now export SMB objects. * dftest and randpkt now have manual pages. * TShark can now display iSCSI service response times. * Dumpcap can now save files with a user-specified group id. * Syntax checking is done for capture filters. * You can display the compiled BPF code for capture filters in the Capture Options dialog. * You can now navigate backwards and forwards through TCP and UDP sessions using Ctrl+, and Ctrl+. * Packet length is (finally) a default column. * TCP window size is now avaiable both scaled and unscaled. A TCP window scaling graph is available in the GUI. * 802.1q VLAN tags are now shown by the Ethernet II dissector. * Various dissectors now display some UTF-16 strings as proper Unicode including the DCE/RPC and SMB dissectors. * The RTP player now has an option to show the time of day in the graph in addition to the seconds since beginning of capture. * The RTP player now shows why media interruptions occur. * Graphs now save as PNG images by default. * New Protocol Support: ADwin, ADwin-Config, Apache Etch, Aruba PAPI, Constrained Application Protocol (COAP), Digium TDMoE, Ether-S-I/O, FastCGI, Fibre Channel over InfiniBand (FCoIB), Gopher, Gigamon GMHDR, IDMP, Infiniband Socket Direct Protocol (SDP), JSON, LISP Data, MikroTik MAC-Telnet, Mongo Wire Protocol, Network Monitor 802.11 radio header, OPC UA ExtensionObjects, PPI-GEOLOCATION-GPS, ReLOAD, ReLOAD Framing, SAMETIME, SCoP, SGSAP, Tektronix Teklink, WAI authentication, Wi-Fi P2P (Wi-Fi Direct) * New and Updated Capture File Support: Apple PacketLogger, Catapult DCT2000, Daintree SNA, Endace ERF, HP OpenVMS TCPTrace, IPFIX (the file format, not the protocol), Lucent/Ascend debug, Microsoft Network Monitor, Network Instruments, TamoSoft CommView
The NFS dissector could crash on Windows. (Bug 5209) The X.509if dissector could crash. (Bug 5754, Bug 5793) Paul Makowski from SEI/CERT discovered that the DECT dissector could overflow a buffer. He verified that this could allow remote code execution on many platforms. The following bugs have been fixed: Cygwin make fails after updating to bash v 4.1.9.2 Export HTTP > All - System Appears Hung (but isn't). (Bug 1671) Some HTTP responses don't decode with TCP reassembly on. (Bug 3785) Wireshark crashes when cancelling a large sort operation. (Bug 5189) Wireshark crashes if SSL preferences RSA key is actually a DSA key. (Bug 5662) tshark incorrectly calculates TCP stream for some syn packets. (Bug 5743) Wireshark not able to decode the PPP frame in a sflow (RFC3176) flow sample packet because Wireshark incorrectly read the protocol in PPP frame header. (Bug 5746) Mysql protocol dissector: all fields should be little endian. (Bug 5759) Error when opening snoop from Juniper SSG-140. (Bug 5762) svnversion: command not found. (Bug 5798) capinfos: #ifdef HAVE_LIBGCRYPT block includes a line too many. (Bug 5803) Value of TCP segment data cannot be copied. (Bug 5811) proto_field_is_referenced() is not exported in libwireshark.dll. (Bug 5816) Wireshark ver. 1.4.4 not displayed "Granted QoS" field in a A11 packet. (Bug 5822)
Autor
Thema: Wireshark (Ex-Ethereal) ... (Gelesen 45925 mal)
