= Wireshark wireshark-version:[] Release Notes

== What is Wireshark?

Wireshark is the world's most popular network protocol analyzer. It is
used for troubleshooting, analysis, development and education.

== What's New

This is the final release of Wireshark 1.12. It officially reaches end of life on July 31, 2016.
If you are still using Wireshark 1.12 you are encouraged to upgrade to Wireshark 2.0.

=== Bug Fixes

// Link templates: ws-buglink:5000[]  ws-buglink:6000[Wireshark bug]  cve-idlink:2016-7000[]

The following vulnerabilities have been fixed:

* ws-salink:2016-40[]
+
NDS dissector crash.
(ws-buglink:12576[])
//cve-idlink:2015-XXXX[]
// Fixed in master: N/A
// Fixed in master-2.0: N/A
// Fixed in master-1.12: 9eacbb4

* ws-salink:2016-41[]
+
PacketBB crash.
(ws-buglink:12577[])
//cve-idlink:2015-XXXX[]
// Fixed in master: 94e97e4
// Fixed in master-2.0: 0469e81
// Fixed in master-1.12: 3ce7de0

* ws-salink:2016-42[]
+
WSP infinite loop.
(ws-buglink:12594[])
//cve-idlink:2015-XXXX[]
// Fixed in master: a9d5256
// Fixed in master-2.0: eca19ca
// Fixed in master-1.12: ee37b7d

* ws-salink:2016-43[]
+
MMSE infinite loop.
(ws-buglink:12624[])
//cve-idlink:2015-XXXX[]
// Fixed in master: N/A
// Fixed in master-2.0: N/A
// Fixed in master-1.12: b5a1074

* ws-salink:2016-44[]
+
RLC long loop.
(ws-buglink:12660[])
//cve-idlink:2015-XXXX[]
// Fixed in master: 6cf9616
// Fixed in master-2.0: 6394b23
// Fixed in master-1.12: 8f16007

* ws-salink:2016-45[]
+
LDSS dissector crash.
(ws-buglink:12662[])
//cve-idlink:2015-XXXX[]
// Fixed in master: 5a469dd
// Fixed in master-2.0: 107f6b7
// Fixed in master-1.12: e347b39

* ws-salink:2016-46[]
+
RLC dissector crash.
(ws-buglink:12664[])
//cve-idlink:2015-XXXX[]
// Fixed in master: 47a5fa8
// Fixed in master-2.0: 8492c31
// Fixed in master-1.12: 604b892

* ws-salink:2016-47[]
+
OpenFlow long loop.
(ws-buglink:12659[])
//cve-idlink:2015-XXXX[]
// Fixed in master: 5670642
// Fixed in master-2.0: eec4fd4
// Fixed in master-1.12: 32abb63

The following bugs have been fixed:

//* Wireshark always manages to score tickets for Burning Man, Coachella, and
//  SXSW while you end up working double shifts. (ws-buglink:0000[])
// cp /dev/null /tmp/buglist.txt ; for bugnumber in `git log --stat v1.12.13rc0..| grep ' Bug:' | cut -f2 -d: | sort -n -u ` ; do gen-bugnote $bugnumber; pbpaste >> /tmp/buglist.txt; done

* T30 FCF byte decoding masks DTC, CIG and NCS. (ws-buglink:1918[])

* TShark crashes with option "-z io,stat,..." in the presence of negative relative packet timestamps. (ws-buglink:9014[])

* 'Packet size limited during capture' msg is repeated in the Info column. (ws-buglink:9826[])

* Filter for field name tcp.options.wscale.multiplier cannot exceed 255. (ws-buglink:12525[])

* Inconsistent VHT data rate. (ws-buglink:12558[])

=== New and Updated Features

There are no new features in this release.

=== New Protocol Support

There are no new protocols in this release.

=== Updated Protocol Support

--sort-and-group--
802.11 Radiotap
LANforge
LDSS
MMSE
PacketBB
PRP
RLC
RTP MIDI
T.30
TCP
VITA 49
WiMax RNG-RSP
WSP
--sort-and-group--

=== New and Updated Capture File Support

//There is no new or updated capture file support in this release.
--sort-and-group--
pcapng
--sort-and-group--

== Getting Wireshark

Wireshark source code and installation packages are available from
https://www.wireshark.org/download.html.

=== Vendor-supplied Packages

Most Linux and Unix vendors supply their own Wireshark packages. You can
usually install or upgrade Wireshark using the package management system
specific to that platform. A list of third-party packages can be found
on the https://www.wireshark.org/download.html#thirdparty[download page]
on the Wireshark web site.

== File Locations

Wireshark and TShark look in several different locations for preference
files, plugins, SNMP MIBS, and RADIUS dictionaries. These locations vary
from platform to platform. You can use About→Folders to find the default
locations on your system.

== Known Problems

Dumpcap might not quit if Wireshark or TShark crashes.
(ws-buglink:1419[])

The BER dissector might infinitely loop.
(ws-buglink:1516[])

Capture filters aren't applied when capturing from named pipes.
(ws-buglink:1814[])

Filtering tshark captures with read filters (-R) no longer works.
(ws-buglink:2234[])

The 64-bit Windows installer does not support Kerberos decryption.
(https://wiki.wireshark.org/Development/Win64[Win64 development page])

Resolving (ws-buglink:9044[]) reopens (ws-buglink:3528[]) so that Wireshark
no longer automatically decodes gzip data when following a TCP stream.

Application crash when changing real-time option.
(ws-buglink:4035[])

Hex pane display issue after startup.
(ws-buglink:4056[])

Packet list rows are oversized.
(ws-buglink:4357[])

Wireshark and TShark will display incorrect delta times in some cases.
(ws-buglink:4985[])

== Getting Help

Community support is available on https://ask.wireshark.org/[Wireshark's
Q&A site] and on the wireshark-users mailing list. Subscription
information and archives for all of Wireshark's mailing lists can be
found on https://www.wireshark.org/lists/[the web site].

Official Wireshark training and certification are available from
http://www.wiresharktraining.com/[Wireshark University].

== Frequently Asked Questions

A complete FAQ is available on the
https://www.wireshark.org/faq.html[Wireshark web site].
