Download Wireshark 3.4.3

Version 3.4.3 of the open source protocol analyzer and packet niffer Wireshark has been released, a development version. With this program, various data packets and network protocols on the network can be analyzed. The program can also use previously saved data traffic as input. Wireshark runs on Windows, Linux, and macOS, with separate downloads for 32bit and 64bit versions of the operating systems. The changelog for this release shows the following changes and improvements:

What’s New

• The Windows installers now ship with Npcap 1.10. They previously shipped with Npcap 1.00.

The following vulnerabilities have been fixed:

• wnpa-sec-2021-01 USB HID dissector memory leak. Bug 17124. CVE-2021-22173.
• wnpa-sec-2021-02 USB HID dissector crash. Bug 17165. CVE-2021-22174.

The following bugs have been fixed:

• SIP response single-line multiple Contact-URIs decoding error Bug 13752.
• Adding filter while “Telephony→VoIP Calls→Flow Sequence” open causes OOB memory reads and potential crashes. Bug 16952.
• QUIC packet not fully dissected Bug 17077.
• SOMEIP-SD hidden entries are off Bug 17091.
• Problem with calculation on UDP checksum in SRv6 Bug 17097.
• Dark mode not working in Wireshark 3.4.2 on macOS Bug 17098.
• Wireshark 3.4.0: build failure on older MacOS releases, due to ‘CLOCK_REALTIME’ Bug 17101.
• TECMP: Status Capture Module messages shows 3 instead of 2 bytes for HW version Bug 17133.
• Documentation – editorial error – README.dissector bad reference Bug 17141.
• Cannot save capture with comments to a format that doesn’t support it (no pop-up) Bug 17146.
• AUTOSAR-NM: PNI TF-String wrong way around Bug 17154.
• Fiber Channel parsing errors even with the fix for #17084 Bug 17168.
• f5ethtrailer: Won’t find a trailer after an FCS that begins with a 0x00 byte Bug 17171.
• f5ethtrailer: legacy format, low noise only, no vip name trailers no longer detected Bug 17172.
• Buildbot crash output: fuzz-2021-01-22-3387835.pcap Bug 17174.
• Dissection error on large ZVT packets Bug 17177.
• TShark crashes with -Tek option Bug 17179.

Updated Protocol Support

• AUTOSAR-NM
• DHCPv6
• doIP
• FC ELS
• GQUIC
• IPv6
• NAS 5GS
• NAS EPS
• QUIC
• SIP
• SOME/IP SD
• TECMP
• TLS
• TPNCP
• USB HID
• ZVT

New and Updated Capture File Support

• f5ethtrailer
• pcapng

The following downloads are available:
Wireshark 3.4.3 for Windows (32bit)
Wireshark 3.4.3 for Windows (64bit)
Wireshark 3.4.3 for PortableApps
Wireshark 3.4.3 for macOS 10.12 and above (64bit)
Wireshark 3.4.3 source code for Linux, Solaris and *BSD among others