Original Author -------- ------ Gerald Combs Contributors ------------ Gilbert Ramirez { Wiretap Printing Token-Ring, TR MAC 802.2 LLC IPX, SPX, NCP BOOTP/DHCP LPD Win32 support tvbuffs Miscellaneous enhancements and fixes } Hannes R. Boehm { http://hannes.boehm.org/ OSPFv2 RIPv1, RIPv2 CDP (Cisco Discover Protocol Version 1) } Mike Hall { TCP Follow } Bobo Rajec { DNS protocol support } Laurent Deniel { Name resolution Ethernet/Manufacturer files support FDDI support OMG GIOP/IIOP support ISO/OSI CLNP/COTP support Real time capture and display enhancement Many display filters added GUI enhancements (about & help windows) Follow TCP stream for IPv6 Protocol activation/deactivation (Edit:protocols) Ability to mark the frames and associated features "Protocol Properties..." menu item Miscellaneous enhancements and fixes } Don Lafontaine { Banyan Vines support IGRP support } Guy Harris { DNS and NetBIOS Name Service enhancements Bitfield decoding IP and TCP option decoding HTTP support NNTP support ATM and LANE decoding Q.931 decoding Changes to the popup packet windows Miscellaneous enhancements and fixes } Simon Wilkinson { AppleTalk support } Joerg Mayer { Banyan Vines support NTP fixes DHCP support for Intel PXEclient DHCP requests Support for "-N" flag enabling selected forms of name resolution Changes to structure initializations to initialize all members Define __USE_XOPEN in files that use "strptime()" Various signed vs. unsigned fixes Crank up the warning level in GCC Skinny (Official Name: SCCP) } Martin Maciaszek { RPM .spec file } Didier Jorand { SNMP support } Jun-ichiro itojun Hagino { http://www.itojun.org/ IPv6 support RIPng support IPsec support PIM (Prototocol-Independent Multicast) support IPComp (IP Payload Compression) support BGP (Border Gateway Protocol) support } Richard Sharpe { TFTP, FTP, POP, Telnet support Infrastructure changes for the benefit of TFTP SMB support } John McDermott { Packet coloring support Pseudo-real-time capture } Jeff Jahr { PPP over Ethernet (PPPoe) } Brad Robel-Forrest { ISAKMP, GRE, PPTP } Ashok Narayanan { RSVP Match Selected functionality Support for reading compressed capture files MPLS } Aaron Hillegass { Summary dialogue } Jason Lango { RTSP, SDP } Johan Feyaerts { RADIUS } Olivier Abad { X.25 support in iptrace files and Sniffer files Support for files from RADCOM WAN/LAN analyzers and HP-UX nettl traces LAPB, X.25 Plugins support Support for capturing packet data from pipes } Thierry Andry { Linux ATM Classical IP support } Jeff Foster { NetBEUI/NBF support (NetBIOS atop 802.2 LLC, the original NetBIOS encapsulation) SMB Mailslot and Netlogin protocol support Popup packet windows Support for protocols registering themselves with dissectors for protocols on top of which they run Rlogin support Support for associating a dissector with a conversation, and for use of that dissector by TCP and UDP SOCKS support Microsoft Proxy protocol support Support for conversations with "wildcard" destination addresses and/or ports Initial support for constructing filter expressions Support for reading Sniffer Frame Relay captures Partial support for determining the type of "Internetwork analyzer" Sniffer captures (we don't yet have enough captures to do it all) } Peter Torvals { Internet Cache Protocol support } Christophe Tronche { http://tronche.com/ BPDU (spanning tree protocol) support X11 requests support } Nathan Neulinger { Yahoo messenger and pager protocol support NTP (Network Time Protocol) support RX protocol support Andrew File System protocol support 802.1q VLAN support Misc. RPC program dissectors TNS/Oracle dissector Tacacs+/XTacacs dissector IRC dissector AppleTalk NBP dissector AppleTalk RTMP response dissector Automake and autoconf updates to handle the current CVS versions of automake (which will probably eventually become the next releases of automake and autoconf) } Tomislav Vujec { Additional NTP support } Kojak { ICQ support } Uwe Girlich { ONC RPC support NFS support Mount Protocol support started NLM support started PC NFS support started Quake dissector QuakeWorld dissector Quake II dissector Quake 3 Arena dissector } Warren Young { "Print" button support in "Tools:Follow TCP Stream" window } Heikki Vatiainen { Cisco Auto-RP protocol support SAP (Session Announcement Protocol) support VRRP (Virtual Router Redundancy) HSRP (Hot Standby Router Protocol) option to control whether to interpret the IPv4 TOS field as such or as the DiffServ field COPS SIP (Session Initiation Protocol) BGP tvbuffification IPv6 and ICMPv6 tvbuffification PIM enhancements and fixes Support for Enter/Return toggling expansion of selected protocol tree item IGMP fixes and multicast traceroute support MSDP support } Greg Hankins { http://www.twoguys.org/~gregh updates to BGP (Border Gateway Protocol) support } Jerry Talkington { updates to HTTP support Filter selection/editing GUI improvements WCCP 1.0 support Right-mouse-button menu support } Dave Chapeskie { updates to ISAKMP support } James Coe { SRVLOC (Service Location Protocol) support NCP over IP support } Bert Driehuis { I4B (ISDN for BSD) wiretap module V.120 } Stuart Stanley { ISIS on CLNP support } John Thomes { L2TP support } Laurent Cazalet { updates to L2TP support } Thomas Parvais { updates to L2TP support } Gerrit Gehnen { support for "Inactive Subset" of ISO CLNP Decoding of OSI COTP TSAPs as text when they're plain text Sinec H1 protocol support } Craig Newell { TFTP options (RFC 2347) support } Ed Meaney { Win32 support } Dietmar Petras { Time protocol support Fix to handling of SNMPv2 TRAP PDUs } Fred Reimer { TCP segment length in TCP packet summary } Florian Lohoff { Various enhancements to RADIUS support Fixes to L2TP result and error code dissection } Jochen Friedrich { Fix to IPv6 fragment handling SMUX and SNMPv3 support Zebra } Paul Welchinski { Fixes to Win32 packet capture code } Doug Nazar { LDAP support } Andreas Sikkema { Fixes to SMB dissector Fixes to capture file handling on Win32 RTCP, RTP, TPKT (RFC 1006), H.261 } Mark Muhlestein { CIFS-over-TCP support } Graham Bloice { Win32 icon for Ethereal, and Win32 resource-compiler files to add version/copyright/etc. information to Win32 executables Support for sorting columns in the summary by clicking on them Win32 Makefile improvements Support for "Update list of packets in real time" during capture on Win32 Support for inverse video rather than boldface highlighting of the bytes, in the hex dump window, corresponding to a selected field } Ralf Schneider { Enhancements to OSI CLNP, CLTP, and ISIS support OSI ESIS support } Yaniv Kaul { Enhancements to ISAKMP } Paul Ionescu { IPX-over-GRE support EIGRP support Cisco IGRP support X.25-over-TCP support DEC LANBridge Spanning Tree Protocol support X.25-over-LLC support IP Prefix field support in CDP Frame Relay support Frame-Relay-over-GRE support IPX SAP over IPX EIGRP support Fleshed out TACACS/XTACACS/TACACS+ dissector DLSw support } Mark Burton { Assorted SMB fixes and enhancements iSCSI support } Stefan Raab { Mobile IP } Mark Clayton { Support for capturing on ATM interfaces on Linux } Michael Rozhavsky { OSPF enhancements } Dug Song { RPCSEC_GSS credential/verifier dissection for ONC RPC } Michael Tuexen { SCTP support M3UA support ISDN Q.921-User Adaptation Layer (IUA) support SUA and SUA Light support MTP3 support MacOS X support Update of M2PA support to draft 3 MTP2 support SCTP support in text2pcap } Bruce Korb { Improved autogen.sh script } Jose Pedro Oliveira { DHCP enhancements } David Frascone { DIAMETER Bug fixes and enhancements to Mobile IP Support for Mobile IP's use of ICMP Router Advertisements } Peter Kjellerstedt { SRVLOC fixes ICQ enhancements } Phil Techau { Added "col_append_str()" Signed integer support in display filters and in the protocol tree BOOTP fixes Additional NTP reference clock identifiers } Wes Hardaker { Kerberos 5 support } Robert Tsai { Rsh support Support for embedded newlines in SDP fields Support for leading LWS in RTSP headers } Craig Metz { OSPF type 7 LSA dissection } Per Flock { A6 and DNAME resource record support RFC 2673 bitstring label support } Jack Keane { ISAKMP fixes to handle malformed packets } Brian Wellington { Support for DNS CERT, KX, TSIG, and TKEY records Support for NOTIFY and UPDATE DNS opcodes Support for YXDOMAIN, YXRRSSET, NXRRRSET, NOTAUTH, NOTZONE, and TSIG/TKEY error DNS reply codes Partial support for DNS-over-TCP } Santeri Paavolainen { "Capture->Stop" menu bar item Improved capture statistics box } Ulrich Kiermayr { ECN Extension support } Neil Hunter { WAP support } Ralf Holzer { AIM/OSCAR support } Craig Rodrigues { GIOP 1.2 support and other GIOP enhancements Handle current versions of RPM, which compress man pages } Ed Warnicke { MGCP dissector plugin } Johan Jorgensen { IEEE 802.11 support } Frank Singleton { Short integer CDR support for GIOP Support for protocols running atop GIOP GIOP CosNaming support } Kevin Shi { GVRP support } Mike Frisch { NFSv4 support HCLNFSD support rquota support AUTH_DES support Tvbuffified NFS dissector RPCSEC_GSS fixes } Burke Lau { PPP FCS checking Cisco HDLC support in PPP dissector MPLS-over-PPP support } Martti Kuparinen { Mobile IPv6 support HMIPv6 support } David Hampton { Support for HTTP methods added by GENA (the uPnP protocol) Support for the HTTP-based SSDP protocol "Decode As" dialog } Kent Engström { CDP VTP Management Domain item support } Ronnie Sahlberg { NLM dissector enhancements Mount dissector enhancements Support for status monitor protocol and status monitor callback protocol YPSERV dissector enhancements BOOTPARAM dissector enhancements RWALL support HCLNFSD dissector enhancements IP fragment reassembly YPPASSWD support KLM support SPRAY support rquota support completed XDR array support NIS+ support Rewritten IGMP dissector Tvbuffified and bug-fixed RX and AFS dissectors Support for filtering on absolute and relative time fields DVMRP support MRDISC support MSNIP support Tvbuffified ISIS dissector Tvbuffified SMB NETLOGON dissector Tvbuffified SMB BROWSER dissector TCP segment reassembly and support for it in ONC RPC and NBSS dissectors Filterable fields for XoT and RIP Times in NFS done as FT_ABSOLUTE_TIME and FT_RELATIVE_TIME FT_UINT64 support, code to handle 64-bit integers without requiring compiler support for them, and updates to the Diameter, L2TP, NFS, and NLM dissectors to use it and to the ONC RPC dissector to allow ONC RPC subdissectors to use it SMB tvbuffication NDMPv3 support Add time between request and reply as a field to ONC RPC replies File handle to file name resolution in NFS and realted protocols } Borosa Tomislav { Updates to mobile IPv6 } Alexandre P. Ferreira { WTLS support WSP fixes and enhancements } Simharajan Srishylam { Assorted WCCP2 enhancements ICAP support } Greg Kilfoyle { BOOTP option 82 (Relay Agent Information option) support } James E. Flemer { Hidden Boolean fields set if the IP or ICMP checksums are bad } Peter Lei { RFC 3024 reverse tunneling support for the Mobile IP dissector } Thomas Gimpel { Fixes to the Q.931 dissector } Albert Chin { Fixes to Lemon to get it to compile on platforms (such as some versions of Tru64 UNIX) that define TRUE and FALSE Fixes to some Tru64 compiler warninngs Fix to TCP graph code to eliminate a GCCism Simplify some autoconf code } Charles Levert { CUPS browsing protocol support } Todd Sabin { DCE RPC support Cleaned up "get_column_format_matches()" } Eduardo Pérez Ureta { GUI fixes } Martin Thomas { Support for TPKT being used for its original purpose (TCP port 102, containing OSI transport layer PDUs) } Hartmut Mueller { BACNET support } Michal Melerowicz { GTP support GTPv1 support and GTPv0 improvements } Hannes Gredler { OSI network layer over PPP support Many IS-IS enhancements Juniper Networks vendor ID in RADIUS dissector HELLO message support in RSVP } Inoue { Preference dialog crash fix } Olivier Biot { Various WTP fixes and enhancements } Patrick Wolfe { WTLS client and trusted key ID handling enhancements } Martin Held { RANAP support } Riaan Swart { Modbus/TCP support } Christian Lacunza { Command-line option to control automatic scrolling in "Update list of packets in real time" captures } Scott Renfro { LDAP checks for invalid packets "-t" flag for editcap, to adjust timestamps in frames SSL/TLS support Mergecap utility for merging capture files Fixes for some calls to "localtime()" that didn't check whether the call succeeded (it doesn't always do so on Windows, for example) } Juan Toledo { Passive FTP support } Jean-Christian Pennetier { ISIS IPv6 routing TLV dissection ISIS traffic engineering TLV dissection IS neighbor and IP reachability TLVs given their own subtree types Assorted other ISIS fixes } Jian Yu { Support for Cisco-proprietary capabilities in BGP Route-Refresh messages } Eran Mann { Fix to LDP prefix FEC dissection for IPv4 } Andy Hood { "--with-ssl" configuration option, to use if UCD SNMP is compiled with crypto support and needs -lcrypto On Solaris, with GCC, add flags to reduce warnings from inadequacies of function declarations in X11 headers } Randy McEoin { Appletalk Data Stream Interface (used by AFP-over-TCP) support } Edgar Iglesias { Fix to TCP reassembly code for retransmitted data } Martina Obermeier { ISUP (ISDN User Part, ITU-T recommendation Q.763) support } Javier Achirica { IEEE 802.11 bug fixes and WEP support } B. Johannessen { Gnutella support } Thierry Pelle { MP-BGP message support } Francisco Javier Cabello { RFC 2250 MPEG1 support } Laurent Rabret { LCP-over Ethernet and IPCP-over-Ethernet support (to handle captures on Windows; PPP packets show up as Ethernet packets, courtesy of NDISWAN, and apparently internal-to-PPP protocols get passed through, with PPP protocol types appearing in the Ethernet protocol type field) PAP support } nuf si { RTSP fixes } Jeff Morriss { M2PA support Support for ANSI flavor of MTP3 } Aamer Akhter { Support for draft-rosen-vpn-ospf-bgp-mpls Support for additional BGP extended communities } Pekka Savola { Autoconf support for glibc IPv6 support } David Eisner { NCP-over-IP bug fix } Steve Dickson { PGM (Pragmatic General Multicast) support } Markus Seehofer { GMRP support } Lee Berger { Fix to FT_UINT_STRING handling } Motonori Shindo { Shiva PAP, EAP, and CBCP negotiation in LCP Callback Operation support in PPP dissector Support for decoding additional data, for CHAP, in LCP Authentication Protocol option Additional vendor (CoSine) for Radius CoSine VSA support for Radius Patches to PPP for CHAP support Patches to packet-x11-keysym.h to clean up 8-bit chars Fixes to take the Vendor-Specific attribute into consideration when dissecting L2TP L2TP Dissconnect Cause Information AVP support PPP CCP support PPP compressed packet support Cooperative Route Filtering Capability support in BGP Route Refresh Message bug fix in BGP CBCP support in PPP Fix Ascend/Lucent trace reading code to handle later trace formats that have an ASCII dump at the end of the line Get rid of "send output to /dev/null" hack in Ascend/Lucent trace reading code's Flex scanner BACP and BAP support in PPP dissector Add necessary cast in TCP graph code Fix up the generation of PDB files, clean them up on a "nmake -f makefile.nmake clean", and put all the PDB files into the Windows binary distribution Delete installed data files on a Windows uninstallation } Terje Krogdahl { Additional AVPs, and Event-Timestamp support, in RADIUS } Jean-Francois Mule { Additional SIP methods } Thomas Wittwer { HTTP dissector registered by name "prefs_register_string_preference()" made available to plugins Remove unnecessary calls to "prefs_module_foreach()" Support for stopping capture at specified capture file size or capture duration } Matthias Nyffenegger { Support for stopping capture at specified capture file size or capture duration } Palle Lyckegaard { OSPFv3 support } Nicolas Balkota { GTPv1 support and GTPv0 improvements } Tom Uijldert { WTP fixes MMSE support Push-traffic dissecting for WSP/WTLS UCP support SMPP support multipart-content support in WSP/MMSE WTP reassembly } Endoh Akira { Support for dissecting multiple BGP capabilities } Graeme Hewson { Additional Ascend codes, and IETF codes, for Radius Handle errors from "pcap_dispatch()" Fix Tethereal so signals break it out of the capture loop } Pasi Eronen { Patches to the dcerpc dissector for data representation decoding } Georg von Zezschwitz { WSP fixes Support for concatenated PDUs Put URL of WSP GET/POST in the Info column Fix a bug with WSP Connect requests with headers > 256 bytes Implement attributes of WSP Suspend/Resume } Steffen Weinreich { UCP fixes } Marc Milgram { VMS TCPIPtrace wiretap module DBS Etherwatch wiretap module } Gordon McKinney { Enhanced Ethereal icon for Windows Support for time stamping packets in text2pcap Fix to text2pcap to handle colons after offset field Make IP-over-PPP work with the TCP graph code } Pavel Novotny { Additional items for RADIUS tunnels } Shinsuke Suzuki { Fix to IPv6 PIM checksum calculation } Andrew C. Feren { Makefile fix } Tomas Kukosa { Additional routines made available to plugins } Andreas Stockmeier { IPCOMP transformation and ID_IPV4_ADDR_SUBNET for ISAKMP Fix the file dialog box code to use "g_strdup()", not "strdup()" to copy strings } Pekka Nikander { IEEE 802.1x, a/k/a EAPOL PPP/EAPOL EAP support } Hamish Moffatt { MPLS support for handling either IPv4 or IPv6 as the payload protocol type Win32 Makefile fixes Use pod2html rather than man2html to build HTML man pages Fix ethereal.nsi.in for recent versions of NSIS } Kazushi Sugyo { Fix to display of AH length field Fix to code to scan the SIOCGIFCONF list } Tim Potter { Support for DCE RPC atop SMB Support for several Microsoft DCE RPC services used with SMB Added code to call request and reply subdissectors in DCE RPC Display the FID in the Info column of NT Create and X replies Display the setup words in some SMB Transaction messages and extract the FID from them Use the FID, for DCE RPC-over-SMB, as part of the conversation matching Assorted SMB fixes } Raghu Angadi { WCCP capability info dissection bug fix } Taisuke Sasaki { OSPFv3 fixes } Tim Newsham { Support for 802.11+Prism II monitor-mode link-layer headers } Tom Nisbet { Support for reading Visual Networks traffic capture files } Darren New { BXXP dissector modified to be a BEEP dissector } Pavel Mores { TCP time-sequence, round-trip time, and throughput graphs } Bernd Becker { Support for LOCATION_FORWARD, LOCATION_FORWARD_PERM and NEEDS_ADDRESSING_MODE replies in GIOP ethereal_gen.py cleanups Reset the Protocol column to GIOP if no heuristic dissectors succeed } Heinz Prantner { M2TP support } Irfan Khan { pppdump reader fixes Van Jacobson decompression support for PPP } Jayaram V.R { PPP multiplexing support } Dinesh Dutt { SCSI dissector, for use by iSCSI and other protocols that transport SCSI operations } Nagarjuna Venna { Only display the reason in BYE RTCP packets if it's present } Jirka Novak { Support for generating filter expressions based on packet list column values Support for adding filter expressions generated from column or protocol tree field values to the current expression rather than replacing the current expression Support for hex dump mode in "Follow TCP Stream" window showing hex and ASCII data } Alain Magloire was kind enough to give his permission to use his version of snprintf.c. Dan Lasley gave permission for his dumpit() hex-dump routine to be used. Mattia Cazzola provided a patch to the hex dump display routine. We use the exception module from Kazlib, a C library written by Kaz Kylheku . Thanks goes to him for his well-written library. The Kazlib home page can be found at http://users.footprints.net/~kaz/kazlib.html