We no longer provide packages for 32-bit versions of OS X.The Flow (Sequence) Analysis dialog has been improved.The Firewall ACL Rules dialog has returned.The Follow Stream dialog now supports UTF-16.Most dialogs in the Qt UI now save their size and positions.The Windows and OS X installers now come with the "sshdump" and "ciscodump" extcap interfaces.TShark supports exporting PDUs via the -U flag.The byte under the mouse in the Packet Bytes pane is now highlighted.If that is not the case DNS name resolution will be disabled (but other name resolution mechanisms, such as host files, are still available). To enable DNS name resolution some build dependencies must be present (currently c-ares). Therefore the "concurrent DNS resolution" preference has been deprecated and is a no-op. Name resolution for packet capture now supports asynchronous DNS lookups only.You can now use regular expressions in Find Packet and in the advanced preferences.You can now show selected packet bytes as ASCII, HTML, Image, ISO 8859-1, Raw, UTF-8, a C array, or YAML.You can now switch between between Capture and File Format dissection of the current capture file via the View menu in the Qt GUI.The intelligent scroll bar now sits to the left of a normal scroll bar and provides a clickable map of nearby packets.The following features are new (or have been significantly updated) since version 2.0.0: Color filters provided with Wireshark have been adjusted to the new display filter names, but custom ones may need to be updated. There are no more individual "good" and "bad" filter fields, protocols now have a "checksum.status" field that records "Good", "Bad" and "Unverified" (neither good or bad). This attempts to standardize how checksums are reported and filtered for within *Shark. proto_tree_add_checksum was added as an API.The Qt UI loads captures faster on Windows.Packet bytes can now be displayed as EBCDIC.The RTP player now allows up to 30 minutes of silence frames.The Conversations and Endpoints dialogs are more responsive when viewing large numbers of items.The Qt UI now supports the -j, -J, and -l flags.
TShark can additionally export packets as Elasticsearch-compatible JSON.
0 kommentar(er)
