Download Wireshark 4.0.7 Download | TechSpot

Wireshark is the world’s leading and widely used network protocol analyzer. It allows you to see what’s happening on your network at a microscopic level and is the de facto (and often de jure) standard across many commercial and nonprofit enterprises, government agencies, and educational institutions. Wireshark development thrives thanks to voluntary contributions from network experts worldwide and is the continuation of a project started by Gerald Combs in 1998.

Characteristics

• Deep inspection of hundreds of protocols, with more being added all the time
• Live capture and offline analysis
• Standard package reader with three panes
• Multi-platform: Runs on Windows, Linux, macOS, Solaris, FreeBSD, NetBSD and many others
• Captured network data can be browsed through a GUI, or via the TTY mode TShark utility
• The most powerful screen filters in the industry< /li>
• Rich VoIP analysis
• Read/write many different capture file formats: tcpdump (libpcap), Pcap NG, Catapult DCT2000, Cisco Secure IDS iplog, Microsoft Network Monitor, Network General Sniffer (compressed and uncompressed), Sniffer Pro and NetXray, Network Instruments Observer, NetScreen snoop, Novell LANalyzer , RADCOM WAN/LAN Analyzer, Shomiti/Finisar Surveyor, Tektronix K12xx, Visual Networks Visual UpTime, WildPackets EtherPeek/TokenPeek/AiroPeek and many others
• Capture files compressed with gzip can be decompressed immediately
• Live data can be read from Ethernet, IEEE 802.11, PPP/HDLC, ATM, Bluetooth, USB, Token Ring, Frame Relay, FDDI and others (depending on your platform)
• Decryption support for many protocols including IPsec, ISAKMP, Kerberos, SNMPv3, SSL/TLS, WEP and WPA/WPA2
• Color rules can be applied to the packing list for quick, intuitive analysis
• Output can be exported to XML, PostScript®, CSV or plain text

What is new

We do not ship official 32-bit Windows packages for Wireshark 4.0 and later. If you need to use Wireshark on that platform, we recommend using the latest 3.6 version. Edition 17779

If you are running Wireshark on macOS and upgrading to macOS 13 from an earlier version, you will probably need to open and run the “Uninstall ChmodBPF” package, then open and run “Install ChmodBPF” to reset the ChmodBPF Launch Daemon. Issue 18734.

New and updated features

• The media type dissector table now automatically handles case-sensitive media types and subtypes, as per RFC 6838. Media types no longer need to be lowercased before being registered or looked up in the table.

Error corrections

The following vulnerabilities have been fixed:

• wnpa-sec-2023-12 Candump log file parser crash. Issue 19062. CVE-2023-2855.
• wnpa-sec-2023-13 BLF file parser crash. Issue 19063. CVE-2023-2857.
• wnpa-sec-2023-14 GDSDB dissector infinite loop. Edition 19068.
• wnpa-sec-2023-15 NetScaler file parser crash. Issue 19081. CVE-2023-2858.
• wnpa-sec-2023-16 VMS TCPIPtrace file parser crash. Issue 19083. CVE-2023-2856.
• wnpa-sec-2023-17 BLF file parser crash. Issue 19084. CVE-2023-2854.
• wnpa-sec-2023-18 RTPS dissector crash. Issue 19085. CVE-2023-0666.
• wnpa-sec-2023-19 IEEE C37.118 Synchrophasor dissector crash. Issue 19087. CVE-2023-0668.
• wnpa-sec-2023-20 XRA dissector infinite loop. Edition 19100.

The following bugs have been fixed:

• The call list has the wrong unit (byte) in bitrate columns in the 3.7 development versions. Edition 18211.
• The media type table should handle media types, e.g. application/3gppHal+json, which is case sensitive. Edition 18611.
• NNTP dissector error. Edition 18981.
• Incorrect padding in BFCP decoder. Edition 18890.
• SPNEGO dissector error. Edition 18991.
• SRT values ​​are incorrect when using a time offset. Edition 18999.
• Add warning that capture is not supported in Wireshark installed from flatpak. Edition 19008.
• Opening Wireshark with -z io,stat option. Edition 19042.
• batadv dissector error. Edition 19047.
• radiotap-gen build fails if pcap is not found. Edition 19059.
• [UDS] When filtering, the field uds.wdbi.data_identifier or uds.iocbi.data_identifier is interpreted as 1 byte while it consists of 2 bytes. Edition 19078.
• Wireshark cannot save this recording in that format. Edition 19080.
• MSMMS parsing buffer overflow. Edition 19086.
• USB HID parser shows wrong label for usage Rx/Vx/Vbrx of usage page Generic desktop control. Edition 19095.
• “Follow → QUIC Stream” mixes data between streams. Edition 19102.