Wireshark 2.4.3 (64-bit)

No change log.

No change log.

No change log.

# The following bugs have been fixed:
- Lua pinfo.cols.protocol not holding value in postdissector.
- data combined via ssl_desegment_app_data not visible via "Follow SSL Stream" only decrypted ssl data tabs.
- HTTP application/json-rpc should be decoded/shown as application/json.
- Maximum value of 802.11-2012 Duration field should be 32767.
- Voice RTP player crash if player is closed while playing.
- Display Filter Macros crash.
- RRC RadioBearerSetup message decoding issue.
- R-click filters add ! in front of field when choosing "apply as filter>selected".
- BACnet - Loop Object - Setpoint-Reference property does not decode correctly.
- WMM TSPEC Element Parsing is not done is wrong due to a wrong switch case number.
- Incorrect RTP statistics (Lost Packets indication not ok).
- Registering ieee802154 dissector for IEEE802.15.4 frames inside Linux SLL frames.
- Version Field is skipped while parsing WMM_TSPEC causing wrong dissecting (1 byte offset missing) of all fields in the TSPEC.
- [BACnet] UCS-2 strings longer than 127 characters do not decode correctly.
- Malformed IEEE80211 frame triggers DISSECTOR_ASSERT.
- Decoding of GSM MAP SMS Diagnostics.
- Incorrect packet length displayed for Flight Message Transfer Protocol (FMTP).
- Netflow dissector flowDurationMicroseconds nanosecond conversion wrong.
- BE (3) AC is wrongly named as "Video" in (qos_acs).
# Updated Protocol Support
- ACN, AMQP, ASN.1 PER, BACnet, CIMD, CSN.1, DOCSIS TLVs, DTLS, FCSP, FMP/NOTIFY, FMTP, GSM MAP SMS, HART/IP, IEEE 802.11, IEEE 802.15.4, JSON, Linux SLL, LTE RRC, Mount, MPLS Echo, Netflow, RELOAD, RSL, RTP, RTPS, RTPS2, SABP, SIP, SSL, TCP

* Wireshark on 32- and 64-bit Windows supports automatic updates.
* The main welcome screen and status bar now display file sizes using strict SI prefixes instead of old-style binary prefixes.
* It is now possible to compare two fields in a display filter (for example: udp.srcport != udp.dstport). The two fields must be of the same type for this to work.

# The following bugs have been fixed:
* SNMPv3 Engine ID registration.
* Wrong decoding of gtp.target identification.
* Reassemble.c leaks memory for GLIB > 2.8.
* Wireshark crashes when starting due to out-of-date plugin left behind from earlier installation.
* Failed to dissect TLS handshake packets.
* ISUP dissector problem with empty Generic Number.
* Illegal character is used in temporary capture file name.
* Lua code crashes wireshark after update to 1.8.3.
* Timestamp info is not saved correctly when writing DOS Sniffer files.
* 1.8.3 Wireshark User's Guide version is 1.6.
* Core dumped when the file is closed.
* LPP is misspelled in APDU parameter in e-CIDMeasurementInitiation request for LPPA message.
* Wrong packet bytes are selected for ISUP CUG binary code.
* Decodes FCoE Group Multicast MAC address as Broadcom MAC address.
* The SSL dissector stops decrypting the SSL conversation with Malformed Packet:SSL error messages.
* Unable to Save/Apply [Unistim Port] in Preferences.
* Some Information Elements in GTPv2 are not dissected correctly.
* Wrong bytes highlighted with "Find Packet...".
* 3GPP ULI AVP. SAI is not correctly decoded.
* Wireshark does not show "Start and End Time" information for Cisco Netflow/IPFIX with type 154 to 157.
* GPRS Tunnel Protocoll GTP Version 1 does not decode DAF flag in Common Flags IE.
* Wrong parcing of ULI of gtpv2 messages - errors in SAC, RAC & ECI.
* Version Number in EtherIP dissector.
* Warn Dissector bug, protocol JXTA.
* Electromagnetic Emission Parser parses field Event Id as Entity Id.
# Updated Protocol Support
* ANSI IS-637-A, ASN.1 PER, AX.25, Bluetooth HCI, CLNP, CSN.1, DCP-ETSI, DIAMETER, DIS PDU, DOCSIS CM-STATUS, DTLS, DTN, EtherIP, Fibre Channel, GPRS, GTP, GTPv2, HomePlug AV, IEEE 802.3 Slow, IEEE 802.15.4, ISUP, JXTA, LAPD, LPPa, MPLS, MS-MMC, NAS-EPS, NTLMSSP, ROHC, RSL, RTPS, SDP, SIP, SNMP, SSL
# New and Updated Capture File Support
* DOS Sniffer

# The following bugs have been fixed:
- Menu and Title bars inaccessible using GTK2 (non-legacy) with two monitors.
- 802.11 Probe Response fails to parse.
- Tshark - decimal symbol.
- Malformed tpncp.dat file can crash Wireshark.
- SSL decryption not work even with example capture file and key.
- Info line is incorrect on SIP message containing another SIP message in body.
- OOPS: dissector table "sctp.ppi" doesn't exist Protocol being registered is "Datagram Transport Layer Security".
- Dissection of IEEE 802.11 Channel Switch Announcement element fails.
- Invalid memory accesses when loading RADIUS captures.
- ISUP CIC should have format BASE_DEC, not BASE_HEX.
- We don't handle pcap-ng files with IDBs that come after packet blocks.
- '*' wildcard in the 'Src IP' or 'Dest IP' field of the ESP SA dialog does not work.
- nas_eps dissector does not decode some esm message.
- WLAN decryption status not updated after updating WEP/WPA keys.
- IPv6 Option Pad1 Incorrect dissection.
- Print GNUTLS error message if PEM import fails.
- GSM classmark3 8-PSK decode error.
- Parsing the Server Name Indication extension in SSL/TLS traffic reads some fields incorrectly.
- Lua code crashes wireshark after update to 1.8.3.
- 2 bugs in Ran-Information-Error Rim Container.
- Misspelling (typo) in IPv6 display filter field name.
- Two BSSGP dissector bugs.
- Core dump during SCTP association analysis.
# Updated Protocol Support
- 3GPP2 A11, BSSGP, EIGRP, FMP/NOTIFY, GSM A, ICMP, ICMPv6, IEEE 802.11, IPsec, IPv6, ISAKMP, iSCSI, LTE RRC, NAS EPS, NDPS, Prism, RADIUS, RRC, RTCP, SCTP, sFlow, SIP, SMB2, SSL/TLS, TPNCP, USB
# New and Updated Capture File Support
- CommView NCF, iSeries, pcap-ng.

# The following bugs have been fixed:
- The HTTP dissector does not reassemble headers when the first TCP segment does not contain a full header line.
- HDCP2 uses the wrong protocol id.
- Several I/O graph problems have been fixed.
- No markers show up when maps are displayed.
- Assertion when using tshark/wireshark on large captures.
- Volume label field of "SMB/TRANS2-QUERY_FS_INFO/InfoVolume level" reply packet is not displayed correctly due alignment issue.
- 64-bit Wireshark appears to hit 2-Gbyte memory limit on 64-bit Windows.
- Truncated/partial JPEG files are not dissected.
- Support for MPLS Packet Loss and Delay Measurement, RFC 6374.
- Memory leak in voip_calls.c.
- When listing protocols available for "Decode As", plugins are sorted after built-ins.
- Hidden columns should not be printed when printing packet summary line.
- Size wrong in "File Set List" for just-finished captures.
- Error: no dependency information found for debian/wireshark-common/usr/lib/wireshark/libwsutil.so.2 (used by debian/wireshark/usr/bin/wireshark).
- Parse and properly display LTE RADIUS AVP 3GPP-User-Location-Info.
- [PATCH] HomeplugAV dissector: decode device id.
- BACnet GetEnrollmentSummary-ACK does not decode correctly.
- epan/dissectors/packet-per.c dissect_per_constrained_integer_64b fails for 64 bits.
- New SCTP PPID 48.
- dissector of Qos attribute "Reliability Class" in GMM/SM message.
- Performance regression in tshark -z io,stat.
- Incorrect io-stat table format when unsupported "-t" operand is specified and when using AVG of relative_time fields.
- IEEE 802.11 TKIP dissection : wrong IS_TKIP macro.
- Homeplug AV dissectors does not properly dissect short frames.
- mm_context_nas_dl_cnt and mm_context_nas_ul_cnt are not dissected properly in ContextResponse message in Gtpv2.
- This trace causes Wireshark to crash when VoIP Calls selected.
- Some diameter Gx enumerations are missing values or value is incorrect.
- Wireshark 1.8.2 is only displaying 2 filters from the drop-down menu even when preferences are set to higher integer.
- BGP bad decoding for Graceful Restart Capability with only helper support & for Enhanced Route Refresh Capability.
- Dissection error of D-RELEASE and D-CONNECT in TETRA dissector.
- DND can cause Wireshark to crash.
- SCSI: WRITE BUFFER fields always display as zero.
# Updated Protocol Support
- ASN.1 PER, BACnet, BGP, DIAMETER, DRDA, DVB CI, DVB, GSM Management, GTP, GTPv2, HDCP2, HomePlug AV, ICMP, ICMPv6, IEEE 802.11, IEEE 802a, Interlink, JPEG, LDP, LPP, MPEG, MPLS, PCAP, PPP, RANAP, RRC, RRLP, SCCP, SCSI, SCTP, SDP, SMB, TETRA

# The following bugs have been fixed:
* Move Y.1711 out of MPLS dissector.
* Patch: Add frame.interface_id support for ERF file format.
* Freeze when Resizing or Moving while capturing.
* Wireshark crashes when using multiple files.
* Wireshark crashes on opening very short NFS pcap file.
* Analyze->Apply as Filter and Analyze->Prepare a Filter cause crashes.
* crashes in interface list, pipe handling.
* ISDN LAPD X.31 packet traffic can not be decoded.
* GIOP request_id used for sub dissectors is not assigned when decoding GIOP 1.2 Request message.
* pcap-ng -ISB always writes 0 for isb_ifrecv option.
* GSM classmark3 decode wrong.
* mem corruptionheap corruptiondiv0 bugs.
* DNS AD flag not shown properly.
* Wireshark and TShark crash at start with invalid color filter on SPARC.
# Updated Protocol Support
* AFP, Apache JServ Protocol v1.3, Bluetooth L2CAP, CIP, CTDB, DCP ETSI, ERF, EtherCAT Mailbox, FC Link Control, GIOP, GSM A, GSM RLC MAC, GTP, GTPv2, ISDN, LISP, MongoDB, MPLS ITU-T Y.1711 OAM, MPLS PM, NFS, RTPS2, SCTP, STUN, XTP
# New and Updated Capture File Support
* Ixia IxVeriWave, pcap-ng

# Bugs fixed:
* Wireshark crashes on bootp filter.
* Wireshark > 1.4 does not correctly read Association ID for PS Poll packets.
* Radius-EAP broken since 1.8.0 release.
* SNMP incorrectly marks SNMPv3 "discovery" packet as malformed.
* Widgets are not properly expanded in GTK3.
* Find Next Mark duplicated on Edit Menu.
* DVB-CI/CI+: fix offset error in operator_info apdu.
* Unable to correctly identify IEC 61850 MMS packets.
* WinPcap doesn't install if vcredist_x64 requires reboot.
# Updated Protocol Support
* BACapp, BOOTP, DCERPC SPOOLSS, DVB-CI, H.248, IEEE 802.11, Jmirror, NAS EPS, NFS, PPP, RELOAD Framing, SES, SNMP, XMPP
# New and Updated Capture File Support
* Microsoft Network Monitor

# The following bugs have been fixed:
* When saving the displayed packets, packets which are dependencies (e.g., due to reassembly) of the displayed packets are included in the list of saved packets.
* Rearranging columns in preferences doesn't work on 64-bit Windows.
# New and Updated Features
* Wireshark supports capturing from multiple interfaces at once.
* You can now add, edit, and save packet and capture file annotations.
* Wireshark, TShark, and their associated utilities now save files using the pcap-ng file format by default. (Your copy of Wireshark might still use the pcap file format if pcap-ng is disabled in your preferences.)
* Decryption key management for IEEE 802.11, IPsec, and ISAKMP is easier.
* OID resolution is now supported on 64-bit Windows.
* When saving packets, the default choice is now to save only the displayed packets rather than all packets.
* TCP fast retransmissions are now indicated as an expert info note, rather than a warning, just as TCP retransmissions are.
* TCP window updates are no longer colorized as "Bad TCP".
* TShark's command-line options have changed. The previously undocumented -P option is now -2 option for performing a two-pass analysis; the former -S option is now the -P option for printing packets even if writing to a file, and the -S option is now used to specify a different line separator between packets.
* GeoIP IPv6 databases are now supported.
# New Protocol Support
* Aastra Signalling Protocol (AASP), ActiveMQ OpenWire, Bandwidth Reservation Protocol (BRP), Bazaar, Binary Floor Control Protocol, BitTorrent DHT, C12.22, CANopen, CIP Motion, CIP Safety, Cisco FabricPath MiM, DMX Channel Data, DMX SIP, DMX Test, DMX Text, DMX, DVB Application Information Table, DVB Bouquet Association Table, DVB Event Information Table, DVB MultiProtocol Encapsulation (DVB-MPE), DVB Network Information Table, DVB Service Description Table, DVB Time and Date Table, DVB Time Offset Table, DVB/ETSI IP Data Cast (IPDC) Electronic Service Guide (ESG), ECP VDP, EIA-709.1 (LonTalk), EIA-852 (CN/IP), ELCOM, Ericsson A-bis OML (OM 2000), Ericsson HDLC, Ericsson Proprietary PCAP, ETSI CAT, ETV-AM Data, ETV-AM EISS Section, Flight Message Transfer Protocol (FMTP), Gadu-Gadu, GEO-Mobile Radio (1) BCCH, GEO-Mobile Radio (1) Common, GEO-Mobile Radio (1) DTAP, GEO-Mobile Radio (1) Radio Resource, Gluster Callback, Gluster CLI, Gluster Dump, Gluster Portmap, GlusterD, GlusterFS Callback, GlusterFS Handshake, GlusterFS, GSM A-bis OML, GSM CBCH, GSM Cell Broadcast Service, GSM SIM, H.248.2, Hadoop Distributed File System (HDFS), HART/IP, Hazelcast, HDFS Data, High bandwidth Digital Content Protection (HDCP), High-availability Seamless Redundancy (HSR), HomePlug AV, HSR/PRP, IEEE 1722.1, ISO 7816, ixveriwave, Kismet drone/server protocol, KristalliNet, LCS-AP, Link Access Procedure, Satellite channel (LAPSat), LLRP, LTE Positioning Protocol A (LPPa), LTE Positioning Protocol, M3 Application Protocol (M3AP), MAC Address Acquisition Protocol, MBMS synchronisation protocol, Microsoft Credential Security Support Provider (CredSSP), MoldUDP, MoldUDP64, MPEG Conditional Access, MPEG descriptors, MPEG DSM-CC, MPEG Program Association Table (PAT), MPEG Program Map Table, MPEG Section, MPLS Packet Loss and Delay Measurement, MPLS-TP Protection State Coordination, Multiple VLAN Registration Protocol (MRVP), Netfilter LOG, NOE, NXP MiFare, NXP PN532, Open IPTV Forum openSAFETY, Performance Co-Pilot (PCP), PPI Sensor, RDP, RTP-MIDI, SBc Application Part (SBc-AP), SDH/SONET, Solaris IP over InfiniBand, Sony FeliCa, T.124, UA (Universal Alcatel), UA3G, UASIP, UAUDP, USB Integrated Circuit Card Interface Device Class (CCID), V5 Data Link Layer (V5DL), V5 Envelope Function (V5EF), Virtual eXtensible Local Area Network (VXLAN), VSS-Monitoring, Vuze DHT, WaveAgent, WebSocket, WSE Remote Ethernet, XMCP, YAMI
# Updated Protocol Support
* Too many protocols have been updated to list here.
# New and Updated Capture File Support
* Aethra Telecommunications' PC108, Catapult DCT2000, Citrix NetScaler, Cisco Secure IDS IPLog, Endace ERF, Gammu DCT3, Generic MIME, IBM iSeries, InfoVista 5View, Ixia IxVeriWave, LANalyzer, Microsoft NetMon, MPEG2-TS, Network Instruments Observer, Nokia DCT3, pcap, pcap-ng, Solaris snoop, TamoSoft CommView, Tektronix K12xx, XML

No change log.

# The following bugs have been fixed:
* When saving the displayed packets, packets which are dependencies (e.g., due to reassembly) of the displayed packets are included in the list of saved packets.
* Rearranging columns in preferences doesn't work on 64-bit Windows.
# New and Updated Features
* Wireshark supports capturing from multiple interfaces at once.
* You can now add, edit, and save packet and capture file annotations.
* Wireshark, TShark, and their associated utilities now save files using the pcap-ng file format by default. (Your copy of Wireshark might still use the pcap file format if pcap-ng is disabled in your preferences.)
* Decryption key management for IEEE 802.11, IPsec, and ISAKMP is easier.
* OID resolution is now supported on 64-bit Windows.
* When saving packets, the default choice is now to save only the displayed packets rather than all packets.
* TCP fast retransmissions are now indicated as an expert info note, rather than a warning, just as TCP retransmissions are.
* TCP window updates are no longer colorized as "Bad TCP".
* TShark's command-line options have changed. The previously undocumented -P option is now -2 option for performing a two-pass analysis; the former -S option is now the -P option for printing packets even if writing to a file, and the -S option is now used to specify a different line separator between packets.
* GeoIP IPv6 databases are now supported.
# New Protocol Support
* Aastra Signalling Protocol (AASP), ActiveMQ OpenWire, Bandwidth Reservation Protocol (BRP), Bazaar, Binary Floor Control Protocol, BitTorrent DHT, C12.22, CANopen, CIP Motion, CIP Safety, Cisco FabricPath MiM, DMX Channel Data, DMX SIP, DMX Test, DMX Text, DMX, DVB Application Information Table, DVB Bouquet Association Table, DVB Event Information Table, DVB MultiProtocol Encapsulation (DVB-MPE), DVB Network Information Table, DVB Service Description Table, DVB Time and Date Table, DVB Time Offset Table, DVB/ETSI IP Data Cast (IPDC) Electronic Service Guide (ESG), ECP VDP, EIA-709.1 (LonTalk), EIA-852 (CN/IP), ELCOM, Ericsson A-bis OML (OM 2000), Ericsson HDLC, Ericsson Proprietary PCAP, ETSI CAT, ETV-AM Data, ETV-AM EISS Section, Flight Message Transfer Protocol (FMTP), Gadu-Gadu, GEO-Mobile Radio (1) BCCH, GEO-Mobile Radio (1) Common, GEO-Mobile Radio (1) DTAP, GEO-Mobile Radio (1) Radio Resource, Gluster Callback, Gluster CLI, Gluster Dump, Gluster Portmap, GlusterD, GlusterFS Callback, GlusterFS Handshake, GlusterFS, GSM A-bis OML, GSM CBCH, GSM Cell Broadcast Service, GSM SIM, H.248.2, Hadoop Distributed File System (HDFS), HART/IP, Hazelcast, HDFS Data, High bandwidth Digital Content Protection (HDCP), High-availability Seamless Redundancy (HSR), HomePlug AV, HSR/PRP, IEEE 1722.1, ISO 7816, ixveriwave, Kismet drone/server protocol, KristalliNet, LCS-AP, Link Access Procedure, Satellite channel (LAPSat), LLRP, LTE Positioning Protocol A (LPPa), LTE Positioning Protocol, M3 Application Protocol (M3AP), MAC Address Acquisition Protocol, MBMS synchronisation protocol, Microsoft Credential Security Support Provider (CredSSP), MoldUDP, MoldUDP64, MPEG Conditional Access, MPEG descriptors, MPEG DSM-CC, MPEG Program Association Table (PAT), MPEG Program Map Table, MPEG Section, MPLS Packet Loss and Delay Measurement, MPLS-TP Protection State Coordination, Multiple VLAN Registration Protocol (MRVP), Netfilter LOG, NOE, NXP MiFare, NXP PN532, Open IPTV Forum openSAFETY, Performance Co-Pilot (PCP), PPI Sensor, RDP, RTP-MIDI, SBc Application Part (SBc-AP), SDH/SONET, Solaris IP over InfiniBand, Sony FeliCa, T.124, UA (Universal Alcatel), UA3G, UASIP, UAUDP, USB Integrated Circuit Card Interface Device Class (CCID), V5 Data Link Layer (V5DL), V5 Envelope Function (V5EF), Virtual eXtensible Local Area Network (VXLAN), VSS-Monitoring, Vuze DHT, WaveAgent, WebSocket, WSE Remote Ethernet, XMCP, YAMI
# Updated Protocol Support
* Too many protocols have been updated to list here.
# New and Updated Capture File Support
* Aethra Telecommunications' PC108, Catapult DCT2000, Citrix NetScaler, Cisco Secure IDS IPLog, Endace ERF, Gammu DCT3, Generic MIME, IBM iSeries, InfoVista 5View, Ixia IxVeriWave, LANalyzer, Microsoft NetMon, MPEG2-TS, Network Instruments Observer, Nokia DCT3, pcap, pcap-ng, Solaris snoop, TamoSoft CommView, Tektronix K12xx, XML

# The following bugs have been fixed:
* User-Password - PAP decoding passwords longer than 16 bytes.
* The MSISDN is not seen correctly in GTP packet.
* Wireshark doesn't calculate the right IPv4 destination using source routing options when bad options precede them.
* BOOTP dissector issue with DHCP option 82 - suboption 9.
* MPLS dissector in 1.6.7 and 1.7.1 misdecodes some MPLS CW packets.
* ANSI MAP infinite loop.
* HCIEVT infinite loop.
* Wireshark doesn't decode NFSv4.1 operations.
* LTP infinite loop.
* Wrong values in DNS CERT RR.
* Megaco parser problem with LF in header.
* OPC UA bytestring node id decoding is wrong.
# Updated Protocol Support
* ANSI MAP, ASF, BACapp, Bluetooth HCI, DHCP, DIAMETER, DNS, GTP, IEEE 802.11, IEEE 802.3, IPv4, LTP, Megaco, MPLS, NFS, OPC UA, RADIUS
# New and Updated Capture File Support
* 5View, CSIDS, pcap, pcap-ng

# The following bugs have been fixed:
* Wireshark could crash while reading SSL decryption keys on 64-bit Windows.
* Malformed Packets H263-1996 (RFC2190). (Bug 6996)
* Wireshark could crash while trying to open an rpcap: URL. (Bug 6922)
# Updated Protocol Support
* H.263