Wireshark 1.8.2

Door Bart van Klaveren, donderdag 16 augustus 2012 12:10, views: 2.319 • Feedback
Bron: Wireshark Foundation

Versie 1.8.2 van Wireshark is uitgekomen. Wireshark is een opensource-protocol-analyzer en -packetsniffer, waarmee verschillende datapakketten en netwerkprotocollen op het netwerk kunnen worden geanalyseerd. Ook kan het programma eerder opgeslagen dataverkeer als invoer gebruiken. Wireshark is geschikt voor Windows XP en hoger, Linux en Mac OS X, met aparte downloads voor 32bit- en 64bit-uitvoeringen van de besturingssystemen. Het changelog voor deze release laat de volgende veranderingen en verbeteringen zien:

The following vulnerabilities have been fixed.

• wnpa-sec-2012-13 The DCP ETSI dissector could trigger a zero division. (Bug 7566) CVE-2012-4285
• wnpa-sec-2012-14 The MongoDB dissector could go into a large loop. (Bug 7572) CVE-2012-4287
• wnpa-sec-2012-15 The XTP dissector could go into an infinite loop. (Bug 7571) CVE-2012-4288
• wnpa-sec-2012-16 The ERF dissector could overflow a buffer. (Bug 7563) CVE-2012-4294 CVE-2012-4295
• wnpa-sec-2012-17 The AFP dissector could go into a large loop. (Bug 7603) CVE-2012-4289
• wnpa-sec-2012-18 The RTPS2 dissector could overflow a buffer. (Bug 7568) CVE-2012-4296
• wnpa-sec-2012-19 The GSM RLC MAC dissector could overflow a buffer. (Bug 7561) CVE-2012-4297
• wnpa-sec-2012-20 The CIP dissector could exhaust system memory. (Bug 7570) CVE-2012-4291
• wnpa-sec-2012-21 The STUN dissector could crash. (Bug 7569) CVE-2012-4292
• wnpa-sec-2012-22 The EtherCAT Mailbox dissector could abort. (Bug 7562) CVE-2012-4293
• wnpa-sec-2012-23 The CTDB dissector could go into a large loop. (Bug 7573) CVE-2012-4290
• wnpa-sec-2012-24 The pcap-ng file parser could trigger a zero division. (Bug 7533) CVE-2012-4286
• wnpa-sec-2012-25 The Ixia IxVeriWave file parser could overflow a buffer. (Bug 7533) CVE-2012-4298

The following bugs have been fixed:

• Move Y.1711 out of MPLS dissector. (Bug 6787)
• Patch: Add frame.interface_id support for ERF file format. (Bug 7266)
• Freeze when Resizing or Moving while capturing. (Bug 7305)
• Wireshark crashes when using multiple files. (Bug 7423)
• Wireshark crashes on opening very short NFS pcap file. (Bug 7498)
• Analyze->Apply as Filter and Analyze->Prepare a Filter cause crashes. (Bug 7506)
• crashes in interface list, pipe handling. (Bug 7511)
• ISDN LAPD X.31 packet traffic can not be decoded. (Bug 7514)
• GIOP request_id used for sub dissectors is not assigned when decoding GIOP 1.2 Request message. (Bug 7516)
• pcap-ng -ISB always writes 0 for isb_ifrecv option. (Bug 7523)
• GSM classmark3 decode wrong. (Bug 7524)
• mem corruptionheap corruptiondiv0 bugs. (Bug 7533)
• DNS AD flag not shown properly. (Bug 7555)
• Wireshark and TShark crash at start with invalid color filter on SPARC. (Bug 7634)

New and Updated Features

There are no new features in this release.

New Protocol Support

There are no new protocols in this release.

Updated Protocol Support

• AFP
• Apache JServ Protocol v1.3
• Bluetooth L2CAP
• CIP
• CTDB
• DCP ETSI
• ERF
• EtherCAT Mailbox
• FC Link Control
• GIOP
• GSM A
• GSM RLC MAC
• GTP
• GTPv2
• ISDN
• LISP
• MongoDB
• MPLS ITU-T Y.1711 OAM
• MPLS PM
• NFS
• RTPS2
• SCTP
• STUN
• XTP

New and Updated Capture File Support

• Ixia IxVeriWave
• pcap-ng

De volgende downloads zijn beschikbaar:
Wireshark 1.8.2 voor Windows (32bit)
Wireshark 1.8.2 voor Windows (64bit)
Wireshark 1.8.2 voor Windows (U3-versie)
Wireshark 1.8.2 voor PortableApps
Wireshark 1.8.2 voor Mac OS X 10.5 (Intel, 32bit)
Wireshark 1.8.2 voor Mac OS X 10.5 (PPC, 32bit)
Wireshark 1.8.2 voor Mac OS X 10.6 (Intel, 64bit)
Wireshark 1.8.2 broncode voor onder andere Linux, Solaris, FreeBSD en NetBSD