path: root/docbook/release-notes.xml

<?xml version="1.0"?>
<!DOCTYPE article PUBLIC "-//OASIS//DTD DocBook XML V4.2//EN"
"http://www.oasis-open.org/docbook/xml/4.2/docbookx.dtd" [

<!-- $Id$ -->

<!--
DOCUMENT SECTION
-Use this section to encode all document information
-->

<!--
Wireshark Info
-->
  <!ENTITY WiresharkCurrentVersion "0.99.4">

]>

<article>
  <title>Wireshark &WiresharkCurrentVersion; Release Notes</title>

  <section id="WhatIs"><title>What is Wireshark?</title>
    <para>
      Wireshark is the world's most popular network protocol analyzer.  It
      is used for troubleshooting, analysis, development, and education.
    </para>
  </section>

  <section id="WhatsNew"><title>What's New</title>
    <section><title>Bug Fixes</title>
    <para>

      The following vulnerabilities have been fixed.  See the
      <ulink url="http://www.wireshark.org/security/wnpa-sec-2006-02.html">security advisory</ulink> for details and a workaround.

      <itemizedlist>

        <listitem><para>
	  The HTTP dissector could crash.
	  <!-- Fixed in r19022, r19153 -->
	  <!-- Bug IDs: 1050, 1079 -->
	  Versions affected: 0.99.3.
        </para></listitem>

        <listitem><para>
	  The LDAP dissector (and possibly others) could crash.
	  <!-- Fixed in r19154 -->
	  <!-- Bug IDs: 1079 -->
	  Versions affected: 0.99.3.
        </para></listitem>

        <listitem><para>
	  The XOT dissector could attempt to allocate a large amount of
	  memory and crash.
	  <!-- Fixed in r19365 -->
	  <!-- Bug IDs: 1133 -->
	  Versions affected: 0.9.8 to 0.99.3.
        </para></listitem>

        <listitem><para>
	  The WBXML dissector could crash.
	  <!-- Fixed in r19560 -->
	  <!-- Bug IDs: 1134 -->
	  Versions affected: 0.10.11 to 0.99.3.
        </para></listitem>

        <listitem><para>
	  The MIME Multipart dissector was susceptible to an off-by-one error.
	  <!-- Fixed in r19566 -->
	  <!-- Bug IDs: 1135 -->
	  Versions affected: 0.10.1 to 0.99.3.
        </para></listitem>

        <listitem><para>
	  If AirPcap support was enabled, parsing a WEP key could
	  sometimes cause a crash.
	  <!-- Fixed in r19401 -->
	  <!-- Bug IDs: None -->
	  Versions affected: 0.99.3.
        </para></listitem>

      </itemizedlist>

    </para>

    <para>

    The following bugs have been fixed:

      <itemizedlist>

        <listitem><para>
          The file set dialog could grow excessively large.
          (<ulink url="http://bugs.wireshark.org/bugzilla/show_bug.cgi?id=331">Bug
          331</ulink>)
        </para></listitem>

        <listitem><para>
          Trying to save flow data may crash Wireshark.
          (<ulink url="http://bugs.wireshark.org/bugzilla/show_bug.cgi?id=396">Bug
          396</ulink>)
        </para></listitem>

        <listitem><para>
          It may not be possible to re-order coloring rules under Windows.
          (<ulink url="http://bugs.wireshark.org/bugzilla/show_bug.cgi?id=699">Bug
          699</ulink>)
        </para></listitem>

        <listitem><para>
          Printing each packet to a new page didn't work under Windows.
          (<ulink url="http://bugs.wireshark.org/bugzilla/show_bug.cgi?id=707">Bug
          707</ulink>)
        </para></listitem>

        <listitem><para>
          The personal hosts configuration file wasn't being parsed correctly.
          (<ulink url="http://bugs.wireshark.org/bugzilla/show_bug.cgi?id=795">Bug
          795</ulink>)
        </para></listitem>

        <listitem><para>
          "Save as" to an existing file wasn't allowed.
          (<ulink url="http://bugs.wireshark.org/bugzilla/show_bug.cgi?id=927">Bug
          927</ulink>)
        </para></listitem>

        <listitem><para>
          The SNMP dissector was not handling 64-bit counters properly.
          (<ulink url="http://bugs.wireshark.org/bugzilla/show_bug.cgi?id=1047">Bug
          1047</ulink>)
        </para></listitem>

        <listitem><para>
          Wireshark and TShark would fail to start under Windows while trying to acquire a crypto context.
          (<ulink url="http://bugs.wireshark.org/bugzilla/show_bug.cgi?id=1096">Bug
          1096</ulink>)
        </para></listitem>

        <listitem><para>
          Invalid characters could show up in PDML output.
          (<ulink url="http://bugs.wireshark.org/bugzilla/show_bug.cgi?id=1110">Bug
          1110</ulink>)
        </para></listitem>

      </itemizedlist>
    </para>

    </section>

    <section><title>New and Updated Features</title>
    <para>
      The following features are new (or have been significantly updated)
      since the last release:
      <itemizedlist>

        <listitem><para>
        <ulink url="http://www.cacetech.com/products/airpcap.htm">AirPcap</ulink>,
        support (which provides raw mode capture under Windows) has been
        enhanced.
        </para></listitem>

        <listitem><para>
        VoIP call playback has been enhanced.  If Wireshark is linked with
        the PortAudio library, you can play back G.711 conversations.  This
        feature is present in the standard Windows installer.
        </para></listitem>

        <listitem><para>
        The capture interface dialog display has been enhanced.
        </para></listitem>

        <listitem><para>
        The "Save" button has been removed from the "Ok" / "Apply" / "Cancel"
        button group in the following dialogs:
        <itemizedlist>
          <listitem><para>Edit/Preferences</para></listitem>
          <listitem><para>View/Coloring Rules</para></listitem>
          <listitem><para>Capture/Capture Filters</para></listitem>
          <listitem><para>Analyze/Display Filters</para></listitem>
          <listitem><para>"Analyze/Enabled Protocols</para></listitem>
        </itemizedlist>
        If you're fond of the "Save" button it can be resurrected in the
        User Interface preferences.
        </para></listitem>

        <listitem><para>
        Reading from stdin ("-i -") now works under Windows.
        </para></listitem>

        <listitem><para>
        Expert analysis has been improved.
        </para></listitem>

        <listitem><para>
        Wireshark now supports USB as a media type.  If you're running a
        Linux distribution with version 2.6.11 of the kernel or greater
        <emphasis>and</emphasis> you have the usbmon module enabled <emphasis>and</emphasis>
        you have a recent CVS version of libpcap (post-0.9.5) installed
        you can also do live captures.  More details can be found at the
        <ulink url="http://wiki.wireshark.org/CaptureSetup/USB">USB
        capture setup</ulink> page on the wiki.
        </para></listitem>

        <listitem><para>
        The number of WEP keys that the user can specify in the IEEE 802.11
        protocol preferences has been increased from 4 to 64.
        </para></listitem>

      </itemizedlist>
    </para>
    </section>

    <section><title>New Protocol Support</title>
    <para>

Enea LINX,
Ethernet Powerlink (v1 and v2),
H.248 Q.1950 Annex A,
Linux pktgen,
MP2T,
NEWMAIL,
PNG,
SCSI OSD,
UDLD,
UMTS FP,
USB,
WLCCP,
WZCSVC,

    </para>
    </section>

    <section><title>Updated Protocol Support</title> <para>

3Com NJACK,
802.11,
ACSE,
AH,
ALCAP,
ANSI MAP,
ATM,
ASN.1,
BACapp,
BER,
BGP,
BSSAP,
Camel,
Catapult DCT2000,
CFlow,
CLNP,
Common Windows networking,
DAP,
DCERPC (DCERPC, ATSVC, DFS, EFS, EPM, EVENTLOG, INITSHUTDOWN, MAPI, NT, PIPE, SAMR, SPOOLSS, SRVSVC, SVCCTL, WINREG),
DCOM (DCOM, CBA-ACCO, SYSACT),
DIAMETER,
DISP,
DNS,
DOP,
DSP,
ESP,
Ethernet,
FC,
FCP,
GSM A,
GSM MAP,
GSM SMS,
GSSAPI,
GTP,
H.225,
H.245,
H.248,
HTTP,
ICQ,
IKE,
ISAKMP,
iSCSI,
ISUP,
IUUP,
Kerberos 4,
LAP-D,
LDAP,
LLC,
LogotypeCertExtn,
MEGACO,
MIME Multipart,
MIP6,
MMS,
MSRP,
MTP3,
NCP,
NDMP,
NDPS,
NFS,
NTP,
OSI,
PER,
PN-MRP,
PPP,
19154Q.931,
RADIUS,
Redback,
RPC,
RTCP,
RTP,
SCCP,
SCSI,
SDP,
SIP,
SMB,
SMRSE,
SNMP,
SSL,
STANAG 5066,
STP,
TCAP,
TCP,
TFTP,
TIPC,
UDP,
UMA,
VLAN,
VNC,
VRRP,
X.509ce
X11,
YMSG,
WTLS,


    </para>
    </section>

    <section><title>New and Updated Capture File Support</title>
    <para>

Catapult DCT2000, EyeSDN, iSeries

    </para>
    </section>

  </section>

  <section id="GettingWireshark"><title>Getting Wireshark</title>
    <para>
      Wireshark source code and installation packages are available from
      the <ulink url="http://www.wireshark.org/download.html">download
      page</ulink> on the main web site.
    </para>

    <section><title>Vendor-supplied Packages</title>
      <para>
	Most Linux and Unix vendors supply their own Wireshark packages.
	You can usually install or upgrade Wireshark using the package management
	system specific to that platform.  A list of third-party packages
	can be found on the
	<ulink url="http://www.wireshark.org/download.html#otherplat">download page</ulink> on the Wireshark web site.
      </para>
    </section>

  </section>

  <!-- XXX needs to be written
  <section id="RemovingWireshark"><title>Removing Wireshark</title>
    <para>
    </para>
  </section>
  -->

  <section id="FileLocations"><title>File Locations</title>
    <para>
      Wireshark and TShark look in several different locations for
      preference files, plugins, SNMP MIBS, and RADIUS dictionaries.
      These locations vary from platform to platform.  You can use
      About->Folders to find the default locations on your system.
    </para>
  </section>

  <section id="KnownProblems"><title>Known Problems</title>

    <para>
      On Windows systems the packet list scroll bar can sometimes disappear
      or become unusable.  Until the problem is fixed you can work around it
      by resizing the packet list or the main window.
      (<ulink url="http://bugs.wireshark.org/bugzilla/show_bug.cgi?id=220">Bug
      220</ulink>)
    </para>

    <para>
      The <guibutton>Filter</guibutton> button is nonfunctional in the
      file dialogs under Windows.
      (<ulink url="http://bugs.wireshark.org/bugzilla/show_bug.cgi?id=942">Bug
      942</ulink>)
    </para>

  </section>

  <section id="GettingHelp"><title>Getting Help</title>
    <para>
    Community support is available on the wireshark-users mailing list.
    Subscription information and archives for all of Wireshark's mailing
    lists can be found on <ulink url="http://www.wireshark.org/lists/">the
    web site</ulink>.
    </para>
    <para>
    Commercial support, training, and development services are available
    from <ulink url="http://www.cacetech.com/">CACE Technologies</ulink>.
    </para>
  </section>

  <section id="FAQ"><title>Frequently Asked Questions</title>
    <para>
    A complete FAQ is available on the
    <ulink url="http://www.wireshark.org/faq.html">Wireshark web site</ulink>.
    </para>
  </section>

</article>