./net/wireshark, Network protocol analyzer

[ CVSweb ] [ Homepage ] [ RSS ] [ Required by ] [ Add to tracker ]


Branch: CURRENT, Version: 1.6.7, Package name: wireshark-1.6.7, Maintainer: tron

Wireshark (formerly known as Ethereal) is a free network protocol analyzer for
Unix and Windows. It allows you to examine data from a live network or from a
capture file on disk. You can interactively browse the capture data, viewing
summary and detail information for each packet. Wireshark has several powerful
features, including a rich display filter language and the ability to view the
reconstructed stream of a TCP session.


Required to run:
[lang/lua] [security/gnutls] [security/libgcrypt] [devel/glib2] [devel/libsmi] [devel/pcre] [x11/gtk2]

Required to build:
[lang/perl5] [pkgtools/x11-links] [devel/gmake] [devel/libtool-base] [devel/pkg-config] [x11/xcb-proto]

Package options: gtk2, lua

Master sites: (Expand)

SHA1: 392c4f35cd8d16287ba9eba3afec226fcadd9746
RMD160: 20ced0176d0c2f7a856078d033ebf7ba531f7f57
Filesize: 21020.367 KB

Version history: (Expand)


CVS history: (Expand)


   2012-04-14 15:31:28 by Matthias Drochner | Files touched by this commit (2) | Package updated
Log message:
update to 1.6.7
changes:
The following bugs have been fixed:
-showing Malformed Packets H263-1996 (RFC2190).
-Wireshark could crash while trying to open an rpcap: URL.
Updated Protocol Support: H.263
   2012-03-28 14:22:27 by Matthias Scheler | Files touched by this commit (2) | Package updated
Log message:
Update "wireshark" package to version 1.6.6. Changes since 1.6.5:
- Bug Fixes
  The following vulnerabilities have been fixed.
  o wnpa-sec-2012-04
    The ANSI A dissector could dereference a NULL pointer and
    crash. (Bug 6823)
    Versions affected: 1.4.0 to 1.4.11, 1.6.0 to 1.6.5.
  o wnpa-sec-2012-05
    The IEEE 802.11 dissector could go into an infinite loop. (Bug
    6809)
    Versions affected: 1.6.0 to 1.6.5.
  o wnpa-sec-2012-06
    The pcap and pcap-ng file parsers could crash trying to read
    ERF data. (Bug 6804)
    Versions affected: 1.4.0 to 1.4.11, 1.6.0 to 1.6.5.
  o wnpa-sec-2012-07
    The MP2T dissector could try to allocate too much memory and
    crash. (Bug 6804)
    Versions affected: 1.4.0 to 1.4.11, 1.6.0 to 1.6.5.
  o The Windows installers now include GnuTLS 1.12.18, which fixes
    several vulnerabilities.
   The following bugs have been fixed:
  o ISO SSAP: ActivityStart: Invalid decoding the activity
    parameter as a BER Integer. (Bug 2873)
  o Forward slashes in URI need to be converted to backslashes if
    WIN32. (Bug 5237)
  o Character echo pauses in Capture Filter field in Capture
    Options. (Bug 5356)
  o Some PGM options are not parsed correctly. (Bug 5687)
  o dumpcap crashes when capturing from pipe to a pcap-ng file
    (e.g., when passing data from CACE Pilot to Wireshark). (Bug
    5939)
  o Unable to rearrange columns in preferences on Windows. (Bug
    6077) (Note: this bug still affects the 64-bit package)
  o No error for UDP/IPv6 packet with zero checksum. (Bug 6232)
  o Wireshark installer doesn't add access_bpf in 10.5.8. (Bug
    6526)
  o Corrupted Diameter dictionary file that crashes Wireshark.
    (Bug 6664)
  o packetBB dissector bug: More than 1000000 items in the tree --
    possible infinite loop. (Bug 6687)
  o ZEP dissector: Timestamp not always displayed correctly.
    Fractional seconds never displayed. (Bug 6703)
  o GOOSE Messages don't use the length field to perform the
    dissection. (Bug 6734)
  o Ethernet traces in K12 text format sometimes give bogus
    "malformed frame" errors and other problems. (Bug 6735)
  o max_ul_ext isn't printed/decoded to the packet details log in
    GTP protocol packet. (Bug 6761)
  o non-IPP packets to or from port 631 are dissected as IPP. (Bug
    6765)
  o lua proto registration fails for uppercase proto /
    g_ascii_strdown problem. (Bug 6766)
  o no menu item Fle->Export->SSL Session Keys in GTK. (Bug 6813)
  o IAX2 dissector reads past end of packet for unknown IEs. (Bug
    6815)
  o TShark 1.6.5 immediately crashes on SSL decryption (every
    time). (Bug 6817)
  o USB: unknown GET DESCRIPTOR response triggers assert failure.
    (Bug 6826)
  o IEEE1588 PTPv2 over IPv6. (Bug 6836)
  o Patch to fix DTLS decryption. (Bug 6847)
  o Expression... dialog crash. (Bug 6891)
  o display filter "gtp.msisdn" not working. (Bug 6947)
  o Multiprotocol Label Switching Echo - Return Code: Reserved
    (5). (Bug 6951)
  o ISAKMP : VendorID CheckPoint : Malformed Packet. (Bug 6972)
  o Adding a Custom HTTP Header Field with a trailing colon causes
    wireshark to immediately crash (and crash upon restart). (Bug
    6982)
  o Radiotap dissector lists a bogus "DBM TX Attenuation" bit.
    (Bug 7000)
  o MySQL dissector assertion. (Ask 8649)
  o Radiotap header format data rate alignment issues. (Ask 8649)
- Updated Protocol Support
  ANSI A, BSSGP, DIAMETER, DTLS, GOOSE, GSM Management, GTP, HTTP,
  IAX2, IEEE 802.11, IPP, ISAKMP, ISO SSAP, MP2T, MPLS, MySQL, NTP,
  PacketBB, PGM, Radiotap, SSL, TCP, UDP, USB, WSP
- New and Updated Capture File Support
  Endace ERF, Pcap-NG, Tektronix K12
   2012-03-03 01:14:27 by Thomas Klausner | Files touched by this commit (1657)
Log message:
Recursive bump for pcre-8.30* (shlib major change)
   2012-02-06 13:42:32 by Thomas Klausner | Files touched by this commit (1812) | Package updated
Log message:
Revbump for
a) tiff update to 4.0 (shlib major change)
b) glib2 update 2.30.2 (adds libffi dependency to buildlink3.mk)

Enjoy.
   2012-01-11 10:48:24 by Matthias Scheler | Files touched by this commit (3) | Package updated
Log message:
Update "wireshark" package to version 1.6.5. Changes since 1.6.4:
- Bug Fixes
  The following vulnerabilities have been fixed.
     o wnpa-sec-2012-01
       Laurent Butti discovered that Wireshark failed to properly
       check record sizes for many packet capture file formats. (Bug
       6663, bug 6666, bug 6667, bug 6668, bug 6669, bug 6670)
       Versions affected: 1.4.0 to 1.4.10, 1.6.0 to 1.6.4.
     o wnpa-sec-2012-02
       Wireshark could dereference a NULL pointer and crash. (Bug
       6634)
       Versions affected: 1.4.0 to 1.4.10, 1.6.0 to 1.6.4.
     o wnpa-sec-2012-03
       The RLC dissector could overflow a buffer. (Bug 6391)
       Versions affected: 1.4.0 to 1.4.10, 1.6.0 to 1.6.4.
   The following bugs have been fixed:
     o "Closing File!" Dialog Hangs. (Bug 3046)
     o Sub-fields of data field should appear in exported PDML as
       children of the data field instead of as siblings to it. (Bug
       3809)
     o Incorrect time differences displayed with time reference set.
       (Bug 5580)
     o Wrong packet type association of SNMP trap after TFTP
       transfer. (Bug 5727)
     o SSL/TLS decryption needs wireshark to be rebooted. (Bug 6032)
     o Export HTTP Objects -> save all crashes Wireshark. (Bug 6250)
     o Wireshark Netflow dissector complains there is no template
       found though the template is exported. (Bug 6325)
     o DCERPC EPM tower UUID must be interpreted always as little
       endian. (Bug 6368)
     o Crash if no recent files. (Bug 6549)
     o IPv6 frame containing routing header with 0 segments left
       calculates wrong UDP checksum. (Bug 6560)
     o IPv4 UDP/TCP Checksum incorrect if routing header present.
       (Bug 6561)
     o Incorrect Parsing of SCPS Capabilities Option introduced in
       response to bug 6194. (Bug 6562)
     o Various crashes after loading NetMon2.x capture file. (Bug
       6578)
     o Fixed compilation of dumpcap on some systems (when
       MUST_DO_SELECT is defined). (Bug 6614)
     o SIGSEGV in SVN 40046. (Bug 6634)
     o Wireshark dissects TCP option 25 as an "April 1" option. (Bug
       6643)
     o ZigBee ZCL Dissector reports invalid status. (Bug 6649)
     o ICMPv6 DNSSL option malformed on padding. (Bug 6660)
     o Wrong tvb_get_bits function call in packet-csn1.c. (Bug 6708)
     o [UDP] - Length Field of Pseudo Header while computing CheckSum
       is not correct. (Bug 6711)
     o pcapio.c: bug in libpcap_write_interface_description_block.
       (Bug 6719)
     o Memory leaks in various dissectors.
     o Bytes highlighted in wrong Byte pane when field selected in
       Details pane.
- Updated Protocol Support
   BGP, BMC CSN1, DCERPC EPM, DCP(ETSI) DMP DTLS GSM Management, H245
   HPTEAM, ICMPv6, IEEE 802.15.4 IPSEC IPv4, IPv6, ISAKMP KERBEROS
   LDSS NFS RLC, RPC-NETLOGON RRC RTMPT SIGCOMP SSL SYSLOG TCP, UDP,
   XML ZigBee ZCL
- New and Updated Capture File Support
   Accellent 5Views, AIX iptrace, HP-UX nettl, I4B, Microsoft Network
   Monitor, Novell LANalyzer, PacketLogger, Pcap-ng, Sniffer,
   Tektronix K12, WildPackets {Airo,Ether}Peek.
   2011-12-10 19:55:38 by Roy Marples | Files touched by this commit (3)
Log message:
Fix ICMPv6 DNSSL padding
   2011-11-19 13:01:27 by Matthias Scheler | Files touched by this commit (2) | Package updated
Log message:
Update "wireshark" package to version 1.6.4. Changes since 1.6.3:
- Bug Fixes
  o Patch to fix memory leaks/errors in Lua plugin. (Bug 5575)
  o Wireshark crashes if a field of type BASE_CUSTOM is applied as
    a column. (Bug 6503)
  o Filter Expression dialog can only be opened once. (Bug 6537)
  o Wireshark crashes if compiled without GLib thread support.
    (Bug 6540)
  o 80211 QoS Control: Add Raw TID. (Bug 6548)
  o SNMP length check error. (Bug 6564)
  o UCP dissector bug of operation 61. (Bug 6570)
   2011-11-02 08:56:25 by Matthias Scheler | Files touched by this commit (3) | Package updated
Log message:
Update "wireshark" package to version 1.6.3. Changes since version 1.6.2:
- The following vulnerabilities have been fixed.
  o wnpa-sec-2011-17
    The CSN.1 dissector could crash. (Bug 6351)
    Versions affected: 1.6.0 to 1.6.2.
  o wnpa-sec-2011-18
    Huzaifa Sidhpurwala of Red Hat Security Response Team
    discovered that the Infiniband dissector could dereference a
    NULL pointer. (Bug 6476)
    Versions affected: 1.4.0 to 1.4.9, 1.6.0 to 1.6.2.
  o wnpa-sec-2011-19
    Huzaifa Sidhpurwala of Red Hat Security Response Team
    discovered a buffer overflow in the ERF file reader. (Bug
    6479)
    Versions affected: 1.4.0 to 1.4.9, 1.6.0 to 1.6.2.
- The following bugs have been fixed:
  o Assertion failed when doing File->Quit->Save during live
    capture. (Bug 1710)
  o Wrong PCEP XRO sub-object decoding. (Bug 3778)
  o Wireshark window takes very long time to show up if invalid
    network file path is at recent file list (Bug 3810)
  o Decoding [Status Records] Timestamp Sequence Field in Bundle
    Protocol fails if over 32 bits. (Bug 4109)
  o ISUP party number dissection. (Bug 5221)
  o wireshark-1.4.2 crashes when testing the example python
    dissector because of a dissector count assertion. (Bug 5431)
  o Ethernet packets with both VLAN tag and LLC header no longer
    displayed correctly. (Bug 5645)
  o SLL encapsuled 802.1Q VLAN is not dissected. (Bug 5680)
  o Wireshark crashes when attempting to open a file via drag &
    drop when there's already a file open. (Bug 5987)
  o Adding and removing custom HTTP headers requires a restart.
    (Bug 6241)
  o Can't read full 64-bit SNMP values. (Bug 6295)
  o Dissection fails for frames with Gigamon Header and VLAN. (Bug
    6305)
  o RTP Stream Analysis does not work for TURN-encapsulated RTP.
    (Bug 6322)
  o packet-csn1.c doesn't process CSN_CHOICE entries properly.
    (Bug 6328)
  o BACnet property time-synchronization-interval (204) name shown
    incorrectly as time-synchronization-recipients. (Bug 6336)
  o GUI crash on invalid IEEE 802.11 GAS frame. (Bug 6345)
  o [ASN.1 PER] Incorrect decoding of BIT STRING type. (Bug 6347)
  o ICMPv6 router advertisement Prefix Information Flag R "Router
    Address" missing. (Bug 6350)
  o Export -> Object -> HTTP -> save all: Error on saving files.
    (Bug 6362)
  o Inner tag of 802.1ad frames not parsed properly. (Bug 6366)
  o Added cursor type decoding to MySQL dissector. (Bug 6396)
  o Incorrect identification of UDP-encapsulated NAT-keepalive
    packets. (Bug 6414)
  o WPA IE pairwise cipher suite dissector uses incorrect
    value_string list. (Bug 6420)
  o S1AP protocol can't decode IPv6 transportLayerAddress. (Bug
    6435)
  o RTPS2 dissector doesn't handle 0 in the octestToNextHeader
    field. (Bug 6449)
  o packet-ajp13 fix, cleanup, and enhancement. (Bug 6452)
  o Network Instruments Observer file format bugs. (Bug 6453)
  o Wireshark crashes when using "Open Recent" 2 times in a row.
    (Bug 6457)
  o Wireshark packet_gsm-sms, display bug: Filler bits in TP-User
    Data Header. (Bug 6469)
  o wireshark unable to decode NetFlow options which have system
    scope size != 4 bytes. (Bug 6471)
  o Display filter Expression Dialog Box Error. (Bug 6472)
  o text_import_scanner.l missing. (Bug 6531)
- Updated Protocol Support
  AJP13, ASN.1 PER, BACnet, CSN.1, DTN, Ethernet, ICMPv6, IEEE
  802.11, IEEE 802.1q, Infiniband, IPsec, MySQL, PCEP, PN-RT, RTP,
  S1AP, SSL
- New and Updated Capture File Support
  Endace ERF.