Wireshark 1.8.4

Door Bart van Klaveren, donderdag 29 november 2012 09:35, views: 2.621 • Feedback
Bron: Wireshark Foundation

Versie 1.8.4 van Wireshark is uitgekomen. Wireshark is een opensource-protocol-analyzer en -packetsniffer, waarmee verschillende datapakketten en netwerkprotocollen op het netwerk kunnen worden geanalyseerd. Ook kan het programma eerder opgeslagen dataverkeer als invoer gebruiken. Wireshark is geschikt voor Windows XP en hoger, Linux en OS X, met aparte downloads voor 32bit- en 64bit-uitvoeringen van de besturingssystemen. Het changelog voor deze release laat de volgende veranderingen en verbeteringen zien:

The following vulnerabilities have been fixed.

• wnpa-sec-2012-30: Wireshark could leak potentially sensitive host name resolution information when working with multiple pcap-ng files. Discovered by Laura Chappell.
• wnpa-sec-2012-31: The USB dissector could go into an infinite loop. (Bug 7787)
• wnpa-sec-2012-32: The sFlow dissector could go into an infinite loop. (Bug 7789)
• wnpa-sec-2012-33: The SCTP dissector could go into an infinite loop. (Bug 7802)
• wnpa-sec-2012-34: The EIGRP dissector could go into an infinite loop. (Bug 7800)
• wnpa-sec-2012-35: The ISAKMP dissector could crash. (Bug 7855)
• wnpa-sec-2012-36: The iSCSI dissector could go into an infinite loop. (Bug 7858)
• wnpa-sec-2012-37: The WTP dissector could go into an infinite loop. (Bug 7869)
• wnpa-sec-2012-38: The RTCP dissector could go into an infinite loop. (Bug 7879)
• wnpa-sec-2012-39: The 3GPP2 A11 dissector could go into an infinite loop. (Bug 7801)
• wnpa-sec-2012-40: The ICMPv6 dissector could go into an infinite loop. (Bug 7844)

The following bugs have been fixed:

• Menu and Title bars inaccessible using GTK2 (non-legacy) with two monitors. (Bug 553)
• 802.11 Probe Response fails to parse. (Bug 1284)
• Tshark - decimal symbol. (Bug 2880)
• Malformed tpncp.dat file can crash Wireshark. (Bug 6665)
• SSL decryption not work even with example capture file and key. (Bug 6869)
• Info line is incorrect on SIP message containing another SIP message in body. (Bug 7780)
• OOPS: dissector table "sctp.ppi" doesn't exist Protocol being registered is "Datagram Transport Layer Security". (Bug 7784)
• Dissection of IEEE 802.11 Channel Switch Announcement element fails. (Bug 7797)
• Invalid memory accesses when loading RADIUS captures. (Bug 7803)
• ISUP CIC should have format BASE_DEC, not BASE_HEX. (Bug 7848)
• We don't handle pcap-ng files with IDBs that come after packet blocks. (Bug 7851)
• '*' wildcard in the 'Src IP' or 'Dest IP' field of the ESP SA dialog does not work. (Bug 7866)
• nas_eps dissector does not decode some esm message. (Bug 7912)
• WLAN decryption status not updated after updating WEP/WPA keys. (Bug 7921)
• IPv6 Option Pad1 Incorrect dissection. (Bug 7938)
• Print GNUTLS error message if PEM import fails. (Bug 7948)
• GSM classmark3 8-PSK decode error. (Bug 7964)
• Parsing the Server Name Indication extension in SSL/TLS traffic reads some fields incorrectly. (Bug 7967)
• Lua code crashes wireshark after update to 1.8.3. (Bug 7976)
• 2 bugs in Ran-Information-Error Rim Container. (Bug 8000)
• Misspelling (typo) in IPv6 display filter field name. (Bug 8006)
• Two BSSGP dissector bugs. (Bug 8008)
• Core dump during SCTP association analysis. (Bug 8011)

Updated Protocol Support

• 3GPP2 A11
• BSSGP
• EIGRP
• FMP/NOTIFY
• GSM A
• ICMP
• ICMPv6
• IEEE 802.11
• IPsec
• IPv6
• ISAKMP
• iSCSI
• LTE RRC
• NAS EPS
• NDPS
• Prism
• RADIUS
• RRC
• RTCP
• SCTP
• sFlow
• SIP
• SMB2
• SSL/TLS
• TPNCP
• USB

New and Updated Capture File Support

• CommView NCF
• iSeries
• pcap-ng

De volgende downloads zijn beschikbaar:
Wireshark 1.8.4 voor Windows (32bit)
Wireshark 1.8.4 voor Windows (64bit)
Wireshark 1.8.4 voor Windows (U3-versie)
Wireshark 1.8.4 voor PortableApps
Wireshark 1.8.4 voor Mac OS X 10.5 (Intel, 32bit)
Wireshark 1.8.4 voor Mac OS X 10.5 (PPC, 32bit)
Wireshark 1.8.4 voor Mac OS X 10.6 (Intel, 64bit)
Wireshark 1.8.4 broncode voor onder andere Linux, Solaris, FreeBSD en NetBSD