<?xml version="1.0"?>
<!DOCTYPE article PUBLIC "-//OASIS//DTD DocBook XML V4.2//EN"
"http://www.oasis-open.org/docbook/xml/4.2/docbookx.dtd" [

<!-- $Id: release-notes.xml 33169 2010-06-08 22:49:01Z gerald $ -->

<!--
DOCUMENT SECTION
-Use this section to encode all document information
-->

<!--
Wireshark Info
-->
  <!ENTITY WiresharkCurrentVersion "1.4.0rc1">

]>

<article>
  <title>Wireshark &WiresharkCurrentVersion; Release Notes</title>

  <section id="WhatIs"><title>What is Wireshark?</title>
    <para>
      Wireshark is the world's most popular network protocol analyzer.  It
      is used for troubleshooting, analysis, development and education.
    </para>
  </section>

  <section id="WhatsNew"><title>What's New</title>
    <section id="BugFixes"><title>Bug Fixes</title>

    <para>

    The following bugs have been fixed:

      <itemizedlist>

        <listitem><para>
          Update time display in background.
          (<ulink url="http://bugs.wireshark.org/bugzilla/show_bug.cgi?id=1275">Bug
          1275</ulink>)
        </para></listitem>

        <listitem><para>
          Wireshark is unresponsive when capturing from named pipes on Windows.
          (<ulink url="http://bugs.wireshark.org/bugzilla/show_bug.cgi?id=1759">Bug
          1759</ulink>)
        </para></listitem>

      </itemizedlist>

    </para>

    </section>

    <section id="NewFeatures"><title>New and Updated Features</title>
    <para>
      The following features are new (or have been significantly updated)
      since version 1.2:

      <itemizedlist>

        <listitem>
          <para>
            The packet list internals have been rewritten and are now more
            efficient.
          </para>
        </listitem>

        <listitem>
          <para>
            Columns are easier to use. You can add a protocol field as a column
            by right-clicking on its packet detail item, and you can adjust
            some column preferences by right-clicking the column header.
          </para>
        </listitem>

        <listitem>
          <para>
            Preliminary Python scripting support has been added.
          </para>
        </listitem>

        <listitem>
          <para>
            Many memory leaks have been fixed.
          </para>
        </listitem>

        <listitem>
          <para>
            Wireshark 1.4 does not support Windows 2000. Please use
            Wireshark 1.2 or 1.0 on those systems.
          </para>
        </listitem>

        <listitem>
          <para>
            Packets can now be ignored (excluded from dissection), similar to
            the way they can be marked.
          </para>
        </listitem>

        <listitem>
          <para>
            Manual IP address resolution is now supported.
          </para>
        </listitem>

        <listitem>
          <para>
            Columns with seconds can now be displayed as hours, minutes and
            seconds.
          </para>
        </listitem>

        <listitem>
          <para>
            You can now set the capture buffer size on UNIX and Linux if you have
            libpcap 1.0.0 or greater.
          </para>
        </listitem>

        <listitem>
          <para>
            TShark no longer needs elevated privileges on UNIX or Linux to list
            interfaces. Only dumpcap requires privileges now.
          </para>
        </listitem>

        <listitem>
          <para>
            Wireshark and TShark can enable 802.11 monitor mode directly if you
            have libpcap 1.0.0 or greater.
          </para>
        </listitem>

        <listitem>
          <para>
            You can play RTP streams directly from the RTP Analysis window.
          </para>
        </listitem>

        <listitem>
          <para>
            Capinfos and editcap now respectively support time order checking
            and forcing.
          </para>
        </listitem>

        <listitem>
          <para>
            Wireshark now has a "jump to timestamp" command-line option.
          </para>
        </listitem>

        <listitem>
          <para>
            You can open JPEG files directly in Wireshark.
          </para>
        </listitem>

      </itemizedlist>

    </para>
    </section>

    <section id="NewProtocols"><title>New Protocol Support</title>
    <para>

3GPP Nb Interface RTP Multiplex,
Access Node Control Protocol,
Apple Network-MIDI Session Protocol,
ARUBA encapsulated remote mirroring,
Assa Abloy R3,
Asynchronous Transfer Mode,
B.A.T.M.A.N. Advanced Protocol,
Bluetooth AMP Packet,
Bluetooth OBEX,
Bundle Protocol,
CIP Class Generic,
CIP Connection Configuration Object,
CIP Connection Manager,
CIP Message Router,
collectd network data,
Control And Provisioning of Wireless Access Points,
Controller Area Network,
Device Level Ring,
DOCSIS Bonded Initial Ranging Message,
Dropbox LAN sync Discovery Protocol,
Dropbox LAN sync Protocol,
DTN TCP Convergence Layer Protocol,
EtherCAT Switch Link,
Fibre Channel Delimiters,
File Replication Service DFS-R,
Gateway Load Balancing Protocol,
GigE Vision Control Protocol,
Git Smart Protocol,
GSM over IP ip.access CCM sub-protocol,
GSM over IP protocol as used by ip.access,
GSM Radiotap,
HI2Operations,
Host Identity Protocol,
HP encapsulated remote mirroring,
HP NIC Teaming Heartbeat,
IEC61850 Sampled Values,
IEEE 1722 Protocol,
InfiniBand Link,
Interlink Protocol,
IPv6 over IEEE 802.15.4,
ISO 10035-1 OSI Connectionless Association Control Service,
ISO 9548-1 OSI Connectionless Session Protocol,
ISO 9576-1 OSI Connectionless Presentation Protocol,
ITU-T Q.708 ISPC Analysis,
Juniper Packet Mirror,
Licklider Transmission Protocol,
MPLS PW ATM AAL5 CPCS-SDU mode encapsulation,
MPLS PW ATM Cell Header,
MPLS PW ATM Control Word,
MPLS PW ATM N-to-One encapsulation, no CW,
MPLS PW ATM N-to-One encapsulation, with CW,
MPLS PW ATM One-to-One or AAL5 PDU encapsulation,
Multiple Stream Reservation Protocol,
NetPerfMeter Protocol,
NetScaler Trace,
NexusWare C7 MTP,
NSN FLIP,
OMRON FINS Protocol,
packetbb Protocol,
Peer Network Resolution Protocol,
PKIX Attribute Certificate,
Pseudowire Padding,
Server/Application State Protocol,
Solaris IPNET,
TN3270 Protocol,
TN5250 Protocol,
TRILL,
Twisted Banana,
UMTS FP Hint,
UMTS MAC,
UMTS Metadata,
UMTS RLC,
USB HID,
USB HUB,
UTRAN Iuh interface HNBAP signalling,
UTRAN Iuh interface RUA signalling,
V5.2,
Vendor Specific Control Protocol,
Vendor Specific Network Protocol,
VMware Lab Manager,
VXI-11 Asynchronous Abort,
VXI-11 Core Protocol,
VXI-11 Interrupt,
X.411 Message Access Service,
ZigBee Cluster Library

    </para>
    </section>

    <section id="UpdatedProtocols"><title>Updated Protocol Support</title>
    <para>

There are too many to list here.

    </para>
    </section>

    <section id="NewCapture"><title>New and Updated Capture File Support</title>
    <para>

Accellent 5Views,
ASN.1 Basic Encoding Rules,
Catapult DCT2000,
Daintree SNA,
Endace ERF,
EyeSDN,
Gammu DCT3 trace,
IBM iSeries,
JPEG/JFIF,
libpcap,
Lucent/Ascend access server trace,
NetScaler,
PacketLogger,
pcapng,
Shomiti/Finisar Surveyor,
Sun snoop,
Symbian OS btsnoop,
Visual Networks

    </para>
    </section>

  </section>

  <section id="GettingWireshark"><title>Getting Wireshark</title>
    <para>
      Wireshark source code and installation packages are available from
      <ulink url="http://www.wireshark.org/download.html">http://www.wireshark.org/download.html</ulink>.
    </para>

    <section id="VendorPackages"><title>Vendor-supplied Packages</title>
      <para>
        Most Linux and Unix vendors supply their own Wireshark packages.
        You can usually install or upgrade Wireshark using the package management
        system specific to that platform.  A list of third-party packages
        can be found on the
        <ulink url="http://www.wireshark.org/download.html#thirdparty">download page</ulink>
        on the Wireshark web site.
      </para>
    </section>

  </section>

  <!-- XXX needs to be written
  <section id="RemovingWireshark"><title>Removing Wireshark</title>
    <para>
    </para>
  </section>
  -->

  <section id="FileLocations"><title>File Locations</title>
    <para>
      Wireshark and TShark look in several different locations for
      preference files, plugins, SNMP MIBS, and RADIUS dictionaries.
      These locations vary from platform to platform.  You can use
      About->Folders to find the default locations on your system.
    </para>
  </section>

  <section id="KnownProblems"><title>Known Problems</title>

    <para>
      Wireshark may appear offscreen on multi-monitor Windows systems.
      (<ulink url="http://bugs.wireshark.org/bugzilla/show_bug.cgi?id=553">Bug
      553</ulink>)
    </para>

    <para>
      Wireshark might make your system disassociate from a wireless network
      on OS X 10.4.
      (<ulink url="http://bugs.wireshark.org/bugzilla/show_bug.cgi?id=1315">Bug
      1315</ulink>)
    </para>

    <para>
      Dumpcap might not quit if Wireshark or TShark crashes.
      (<ulink url="http://bugs.wireshark.org/bugzilla/show_bug.cgi?id=1419">Bug
      1419</ulink>)
    </para>

    <para>
      The BER dissector might infinitely loop.
      (<ulink url="http://bugs.wireshark.org/bugzilla/show_bug.cgi?id=1516">Bug
      1516</ulink>)
    </para>

    <para>
      Capture filters aren't applied when capturing from named pipes.
      (<ulink url="http://bugs.wireshark.org/bugzilla/show_bug.cgi?id=1814">Bug
      1814</ulink>)
    </para>

    <para>
      Filtering tshark captures with display filters (-R) no longer works.
      (<ulink url="http://bugs.wireshark.org/bugzilla/show_bug.cgi?id=2234">Bug
      2234</ulink>)
    </para>

    <para>
      The 64-bit Windows installer does not ship with the same libraries as the
      32-bit installer.
      (<ulink url="http://bugs.wireshark.org/bugzilla/show_bug.cgi?id=3610">Bug
      3610</ulink>)
    </para>

    <para>
      Hex pane display issue after startup.
      (<ulink url="http://bugs.wireshark.org/bugzilla/show_bug.cgi?id=4056">Bug
      4056</ulink>)
    </para>

    <para>
      Packet list rows are oversized.
      (<ulink url="http://bugs.wireshark.org/bugzilla/show_bug.cgi?id=4357">Bug
      4357</ulink>)
    </para>

    <para>
      Summary pane selected frame highlighting not maintained.
      (<ulink url="http://bugs.wireshark.org/bugzilla/show_bug.cgi?id=4445">Bug
      4445</ulink>)
    </para>

  </section>

  <section id="GettingHelp"><title>Getting Help</title>
    <para>
    Community support is available on the wireshark-users mailing list.
    Subscription information and archives for all of Wireshark's mailing
    lists can be found on <ulink url="http://www.wireshark.org/lists/">the
    web site</ulink>.
    </para>
    <para>
    Commercial support is available from
    <ulink url="http://www.cacetech.com/products/sharknet.html">CACE Technologies</ulink>.
    </para>
    <para>
    Training is available from
    <ulink url="http://www.wiresharktraining.com/">Wireshark University</ulink>.
    </para>
  </section>

  <section id="FAQ"><title>Frequently Asked Questions</title>
    <para>
    A complete FAQ is available on the
    <ulink url="http://www.wireshark.org/faq.html">Wireshark web site</ulink>.
    </para>
  </section>

</article>
