Download Wireshark 1.12.3

Version 1.12.3 of the open source protocol analyzer and packet niffer Wireshark has been released. With this program, various data packets and network protocols on the network can be analyzed. The program can also use previously saved data traffic as input. Wireshark runs on Windows, Linux, and OS X, with separate downloads for 32bit and 64bit versions of the operating systems. In version 1.12, support for Windows XP and the U3 has been dropped, and it has been announced that this will soon also happen for the 32-bit version of OS X. We are also working hard on the transition from GTK+ to Qt, which should be complete in version 2.0. In version 1.12.3, the following improvements have also been made:

The following vulnerabilities have been fixed:

• wnpa-sec-2015-01: The WCCP dissector could crash. (Bug 10720, Bug 10806) CVE-2015-0559, CVE-2015-0560
• wnpa-sec-2015-02: The LPP dissector could crash. (Bug 10773) CVE-2015-0561
• wnpa-sec-2015-03: The DEC DNA Routing Protocol dissector could crash. (Bug 10724) CVE-2015-0562
• wnpa-sec-2015-04: The SMTP dissector could crash. (Bug 10823) CVE-2015-0563
• wnpa-sec-2015-05: Wireshark could crash while decypting TLS/SSL sessions. Discovered by Noam Rathaus. CVE-2015-0564

The following bugs have been fixed:

• WebSocket dissector: empty payload causes DISSECTOR_ASSERT_NOT_REACHED. (Bug 9332)
• Wireshark crashes if Lua heuristic dissector returns true. (Bug 10233)
• Display MEP ID in decimal in OAM Y.1731 Synthetic Loss Message and Reply PDU. (Bug 10500)
• TCP Window Size incorrectly reported in Packet List. (Bug 10514)
• Status bar “creeps” to the left a few pixels every time Wireshark is opened. (Bug 10518)
• E-LMI Message type. (Bug 10531)
• SMTP decoder can dump binary data to terminal in TShark. (Bug 10536)
• PTPoE dissector gets confused by packets that include an FCS. (Bug 10611)
• IPv6 Vendor Specific Mobility Option includes the next mobility option type. (Bug 10618)
• Save PCAP to PCAPng with commentary fails. (Bug 10656)
• Display filter “frame contains bytes [2342]” causes a crash. (Bug 10690)
• Multipath TCP: checksum displayed when it’s not there. (Bug 10692)
• LTE APN-AMBR is decoded incorrectly. (Bug 10699)
• DNS NAPTR RR Replacement Length is incorrect. (Bug 10700)
• IPv6 Experimental mobility header data is interpreted as options. (Bug 10703)
• Dissector bug, protocol SPDY: tvbuff.c:610: failed assertion “tvb && tvb→initialized”. (Bug 10704)
• BGP: Incorrect decoding AS numbers when mixed AS size. (Bug 10742)
• BGP update community – incorrect decoding. (Bug 10746)
• Setting a 6LoWPAN context generates a Wireshark crash. (Bug 10747)
• FC is not dissected (UNKNOWN protocol). (Bug 10751)
• Crash when displaying several times INFO column. (Bug 10755)
• Decoding of longitude value in LCSAP (3GPP TS 29.171) is incorrect. (Bug 10767)
• Crash when enabling FCoIB manual settings without filling address field. (Bug 10796)
• RSVP RECORD_ROUTE IPv4 Subobject Flags field incorrectly decoding. (Bug 10799)
• Wireshark Lua engine can’t access protocol field type. (Bug 10801)
• Field Analysis of OpenFlow v1.4 OFPT_SET_ASYNC. (Bug 10808)
• Lua: getting fieldinfo.value for FT_NONE causes assert. (Bug 10815)

Updated Protocol Support

• 6LoWPAN
• ADwin
• AllJoyn
• Art-Net
• asterix
• BGP
• Bitcoin
• Bluetooth OBEX
• Bluetooth SDP
• CFM
• CIP
• DCERPC PN-IO
• DCERPC SPOOLSS
• DEC DNA
• DECT
• DHCPv6
• DNS
• DTN
• E-LMI
• ENIP
• Ethernet
• extreme
• FCoIB
• Fiber Channel
• GED125
• GTP
• H.248
• H.264
• hiSLIP
• IDRP
• IEEE 802.11
• IEEE P1722.1
• Infiniband
• IrDA
• iSCSI
• ISUP
• LBMR
• LCSAP
• LPP
• MAC LTE
• MAUSB
• MBIM
• MIM
• MIP
• MIPv6
• MP2T
• MPEG-1
• NAS EPS
• NAT-PMP
• NCP
• NXP PN532
• OpcUa
• OpenFlow
• PTP
• RDM
• RPKI-RTR
• RSVP
• RTnet
• RTSP
• SCTP
• SMPP
• SMTP
• SPDY
• spice
• TCP
• WCCP
• Wi-Fi P2P
• WiMAX

New and Updated Capture File Support

• K12

The following downloads are available:
Wireshark 1.12.3 for Windows (32bit)
Wireshark 1.12.3 for Windows (64bit)
Wireshark 1.12.3 for PortableApps
Wireshark 1.12.3 for OS X 10.5 (32bit)
Wireshark 1.12.3 for OS X 10.6 and above (64bit)
Wireshark 1.12.3 source code for Linux, Solaris and *BSD among others