Wireshark is the world's foremost network protocol analyzer, and is the de facto standard across many industries and educational institutions.
Features
• Deep inspection of hundreds of protocols, with more being added all the time
• Live capture and offline analysis
• Standard three-pane packet browser
• Multi-platform: Runs on Windows, Linux, OS X, Solaris, FreeBSD, NetBSD, and many others
• Captured network data can be browsed via a GUI, or via the TTY-mode TShark utility
• The most powerful display filters in the industry
• Rich VoIP analysis
• Read/write many different capture file formats
• Capture files compressed with gzip can be decompressed on the fly
• Live data can be read from Ethernet, IEEE 802.11, PPP/HDLC, ATM, Bluetooth, USB, Token Ring, Frame Relay, FDDI, and others (depending on your platfrom)
• Decryption support for many protocols, including IPsec, ISAKMP, Kerberos, SNMPv3, SSL/TLS, WEP, and WPA/WPA2
• Coloring rules can be applied to the packet list for quick, intuitive analysis
• Output can be exported to XML, PostScript, CSV, or plain text
What's New
• N/A
Security Fixes
The following vulnerabilities have been fixed:
• The SigComp Universal Decompressor Virtual Machine could overrun a buffer. (Bug 4867)
- Versions affected: 0.10.8 to 1.0.14, 1.2.0 to 1.2.9
• CVE-2010-2287: The GSM A RR dissector could crash. (Bug 4897)
- Versions affected: 1.2.2 to 1.2.9
• Due to a regression the ASN.1 BER dissector could overrun the stack.
- Versions affected: 0.10.13 to 1.0.14, 1.2.0 to 1.2.9
• CVE-2010-2284: The IPMI dissector could go into an infinite loop.
- Versions affected: 1.2.0 to 1.2.9
Updated Protocol Support
• ASN.1 BER, GSM A RR, GTP, IAX2, IPMI, OMAPI, PRES, SCSI, SMB, UNISTIM
Bug Fixes
The following bugs have been fixed:
• Wireshark crashes after configuring new Information column. (Bug 4854)
• Crash triggered when changing display filter from right-mouse pop-up menu via packet-list. (Bug 4860)
• Wireshark crash selecting Inter-Asterisk exchange v2 packet data. (Bug 4868)
• zlib-1.2.5 cause tshark to stop live capture. (Bug 4916)
• Crash when adding SNMP users. (Bug 4926)
• Wireshark via ssh -X on ipv6 link-local address fails to allow capture. (Bug 4945)
• OMAPI dissector fails to parse combined initialization messages. (Bug 4982)
• QUERY_FS_INFO for Macintosh level 0x301 - MacSupportFlags decodes wrong. (Bug 4993)
• SCSI dissector misidentifies ATA PASSTHROUGH command as ACCESS CONTROL IN. (Bug 5037)
• Wrong decoding of GTP Prime (GTP') packets. (Bug 5055)
Download Wireshark 1.2.10
Download Wireshark 1.2.10 free from following website:
• Download Wireshark 1.2.10 for Windows (32-bit)
• Download Wireshark 1.2.10 for Windows (64-bit)
• Download Wireshark 1.2.10 Portable Apps
Source
• Wireshark 1.2.10 Release Notes
No comments:
Post a Comment