Download Wireshark 1.8.4

Wireshark version 1.8.4 has been released. Wireshark is an open source protocol analyzer and packet niffer, which can analyze various data packets and network protocols on the network. The program can also use previously saved data traffic as input. Wireshark runs on Windows XP and above, Linux, and OS X, with separate downloads for 32bit and 64bit versions of the operating systems. The changelog for this release shows the following changes and improvements:

The following vulnerabilities have been fixed.

• wnpa-sec-2012-30: Wireshark could leak potentially sensitive host name resolution information when working with multiple pcap-ng files. Discovered by Laura Chappell.
• wnpa-sec-2012-31: The USB dissector could go into an infinite loop. (Bug 7787)
• wnpa-sec-2012-32: The sFlow dissector could go into an infinite loop. (Bug 7789)
• wnpa-sec-2012-33: The SCTP dissector could go into an infinite loop. (Bug 7802)
• wnpa-sec-2012-34: The EIGRP dissector could go into an infinite loop. (Bug 7800)
• wnpa-sec-2012-35: The ISAKMP dissector could crash. (Bug 7855)
• wnpa-sec-2012-36: The iSCSI dissector could go into an infinite loop. (Bug 7858)
• wnpa-sec-2012-37: The WTP dissector could go into an infinite loop. (Bug 7869)
• wnpa-sec-2012-38: The RTCP dissector could go into an infinite loop. (Bug 7879)
• wnpa-sec-2012-39: The 3GPP2 A11 dissector could go into an infinite loop. (Bug 7801)
• wnpa-sec-2012-40: The ICMPv6 dissector could go into an infinite loop. (Bug 7844)

The following bugs have been fixed:

• Menu and Title bars inaccessible using GTK2 (non-legacy) with two monitors. (Bug 553)
• 802.11 Probe Response fails to parse. (Bug 1284)
• Tshark – decimal symbol. (Bug 2880)
• Malformed tpncp.dat file can crash Wireshark. (Bug 6665)
• SSL decryption not work even with example capture file and key. (Bug 6869)
• Info line is incorrect on SIP message containing another SIP message in body. (Bug 7780)
• OOPS: dissector table “sctp.ppi” doesn’t exist Protocol being registered is “Datagram Transport Layer Security”. (Bug 7784)
• Dissection of IEEE 802.11 Channel Switch Announcement element fails. (Bug 7797)
• Invalid memory accesses when loading RADIUS captures. (Bug 7803)
• ISUP CIC should have format BASE_DEC, not BASE_HEX. (Bug 7848)
• We don’t handle pcap-ng files with IDBs that come after packet blocks. (Bug 7851)
• ‘*’ wildcard in the ‘Src IP’ or ‘Dest IP’ field of the ESP SA dialog does not work. (Bug 7866)
• nas_eps dissector does not decode some esm message. (Bug 7912)
• WLAN decryption status not updated after updating WEP/WPA keys. (Bug 7921)
• IPv6 Option Pad1 Incorrect dissection. (Bug 7938)
• Print GNUTLS error message if PEM import fails. (Bug 7948)
• GSM classmark3 8-PSK decode error. (Bug 7964)
• Parsing the Server Name Indication extension in SSL/TLS traffic reads some fields incorrectly. (Bug 7967)
• Lua code crashes wireshark after update to 1.8.3. (Bug 7976)
• 2 bugs in Ran-Information-Error Rim Container. (Bug 8000)
• Misspelling (typo) in IPv6 display filter field name. (Bug 8006)
• Two BSSGP dissector bugs. (Bug 8008)
• Core dump during SCTP association analysis. (Bug 8011)

Updated Protocol Support

• 3GPP2 A11
• BSSGP
• EIGRP
• FMP/NOTIFY
• GSM A
• ICMP
• ICMPv6
• IEEE 802.11
• IPsec
• IPv6
• ISAKMP
• iSCSI
• LTE RRC
• NAS EPS
• NDPS
• Prism
• RADIUS
• RRC
• RTCP
• SCTP
• sFlow
• SIP
• SMB2
• SSL/TLS
• TPNCP
• USB

New and Updated Capture File Support

• CommView NCF
• iSeries
• pcap-ng

The following downloads are available:
Wireshark 1.8.4 for Windows (32bit)
Wireshark 1.8.4 for Windows (64bit)
Wireshark 1.8.4 for Windows (U3 version)
Wireshark 1.8.4 for PortableApps
Wireshark 1.8.4 for Mac OS X 10.5 (Intel, 32bit)
Wireshark 1.8.4 for Mac OS X 10.5 (PPC, 32bit)
Wireshark 1.8.4 for Mac OS X 10.6 (Intel, 64bit)
Wireshark 1.8.4 source code for Linux, Solaris, FreeBSD and NetBSD among others