include::attributes.asciidoc[]

= Wireshark {wireshark-version} Release Notes
// AsciiDoc quick reference: http://powerman.name/doc/asciidoc

== What is Wireshark?

Wireshark is the world's most popular network protocol analyzer. It is
used for troubleshooting, analysis, development and education.

== What's New

=== Bug Fixes

The following vulnerabilities have been fixed:

* wssalink:2018-44[]
+
Bluetooth AVDTP dissector crash.
wsbuglink:14884[].
cveidlink:2018-16058[].
// Fixed in master: c48d6a6d60
// Fixed in master-2.6: 24200230a4
// Fixed in master-2.4: 590b9d95fc
// Fixed in master-2.2: c88cc3da31

* wssalink:2018-45[]
+
Bluetooth Attribute Protocol dissector crash.
wsbuglink:14994[].
cveidlink:2018-16056[].
// Fixed in master: f98fbce64c
// Fixed in master-2.6: 10db757c35
// Fixed in master-2.4: 4be24806b2
// Fixed in master-2.2: e5f6e70687

* wssalink:2018-46[]
+
Radiotap dissector crash.
wsbuglink:15022[].
cveidlink:2018-16057[].
// Fixed in master: 739eebd3d2
// Fixed in master-2.6: 1576ae10e7
// Fixed in master-2.4: bbf46eb46a
// Fixed in master-2.2: af9fc0e15e

The following bugs have been fixed:

//* wsbuglink:5000[]
//* wsbuglink:6000[Wireshark bug]
//* cveidlink:2014-2486[]
//* Wireshark keeps leaving voicemails advertising timeshare condominiums in Fresno. (wsbuglink:0000[])
// cp /dev/null /tmp/buglist.txt ; for bugnumber in `git log --stat v2.4.10rc0..| grep ' Bug:' | awk '{print $2}' | sort -n -u ` ; do ./tools/gen-bugnote $bugnumber; pbpaste >> /tmp/buglist.txt; done

* Incorrect presentation of dissected data item (NETMASK) in ISAKMP dissector. wsbuglink:14987[].

* udpdump frame too long error. wsbuglink:14989[].

* ASTERIX Category 062 / 135 Altitude has wrong value. wsbuglink:15030[].

* Wireshark cannot decrypt SSL/TLS session if it was proxied over HTTP tunnel. wsbuglink:15042[].

* TLS records in a HTTP tunnel are displayed as "Encrypted Handshake Message". wsbuglink:15043[].

* BTATT Dissector: Temperature Measurement: Celsius and Fahrenheit swapped. wsbuglink:15058[].

* Diameter AVP User Location Info, Mobile Network Code decoded not correctly. wsbuglink:15068[].

* Heartbeat message "Info" displayed without comma separator. wsbuglink:15079[].

* DTAP CC Start DTMF keypad information parsing error. wsbuglink:15088[].

=== New and Updated Features

There are no new features in this release.

//=== Removed Dissectors

//=== New File Format Decoding Support

=== New Protocol Support

There are no new protocols in this release.

=== Updated Protocol Support

--sort-and-group--
ASTERIX
Bluetooth AVDTP
Bluetooth ATT
DHCP
DTLS
E.212
HTTP
ISAKMP
K12
Nordic BLE
Radiotap
SSL
--sort-and-group--

=== New and Updated Capture File Support

//There is no new or updated capture file support in this release.
--sort-and-group--
pcapng
--sort-and-group--

=== New and Updated Capture Interfaces support

//There are no new or updated capture interfaces supported in this release.
--sort-and-group--
ciscodump, udpdump
--sort-and-group--

//=== Major API Changes

//_Non-empty section placeholder._

== Getting Wireshark

Wireshark source code and installation packages are available from
https://www.wireshark.org/download.html.

=== Vendor-supplied Packages

Most Linux and Unix vendors supply their own Wireshark packages. You can
usually install or upgrade Wireshark using the package management system
specific to that platform. A list of third-party packages can be found
on the https://www.wireshark.org/download.html#thirdparty[download page]
on the Wireshark web site.

== File Locations

Wireshark and TShark look in several different locations for preference
files, plugins, SNMP MIBS, and RADIUS dictionaries. These locations vary
from platform to platform. You can use About→Folders to find the default
locations on your system.

== Known Problems

Dumpcap might not quit if Wireshark or TShark crashes.
(wsbuglink:1419[])

The BER dissector might infinitely loop.
(wsbuglink:1516[])

Capture filters aren't applied when capturing from named pipes.
(wsbuglink:1814[])

Filtering tshark captures with read filters (-R) no longer works.
(wsbuglink:2234[])

Application crash when changing real-time option.
(wsbuglink:4035[])

Wireshark and TShark will display incorrect delta times in some cases.
(wsbuglink:4985[])

Wireshark should let you work with multiple capture files. (wsbuglink:10488[])

== Getting Help

Community support is available on https://ask.wireshark.org/[Wireshark's
Q&A site] and on the wireshark-users mailing list. Subscription
information and archives for all of Wireshark's mailing lists can be
found on https://www.wireshark.org/lists/[the web site].

Official Wireshark training and certification are available from
http://www.wiresharktraining.com/[Wireshark University].

== Frequently Asked Questions

A complete FAQ is available on the
https://www.wireshark.org/faq.html[Wireshark web site].
