September 15, 2020

What’s New Many improvements have been made. See the “New and Updated Features” section below for more details. The following features are new (or have been significantly updated) since version 3.2.0: Windows executables and installers are now signed using SHA-2 only.

Save RTP stream to .au supports any codec with 8000 Hz rate supported by Wireshark (shown in RTP player). If save of audio is not possible (unsupported codec or rate), silence of same length is saved and warning is shown.

Asynchronous DNS resolution is always enabled. As a result, the c-ares library is now a required dependency.

Protobuf fields can be dissected as Wireshark (header) fields that allows user input the full names of Protobuf fields or messages in Filter toolbar for searching.

Dissectors based on Protobuf can register themselves to a new 'protobuf_field' dissector table, which is keyed with the full names of fields, for further parsing fields of BYTES or STRING type.

Wireshark is able to decode, play, and save iLBC payload on platforms where the iLBC library is available.

“Decode As” entries can now be copied from other profiles using a button in the dialog.

sshdump can now be copied to multiple instances. Each instance will show up a different interface and will have its own profile.

The main window now supports a packet diagram view, which shows each packet as a textbook-style diagram. New Protocol Support Arinc 615A (A615A), Asphodel Protocol, AudioCodes Debug Recording (ACDR), Bluetooth HCI ISO (BT HCI ISO), Cisco MisCabling Protocol (MCP), DCE/RPC IRemoteWinspool SubSystem, (IREMOTEWINSPOOL), Dynamic Link Exchange Protocol (DLEP), Fortinet Single Sign-on (FSSO), FTDI Multi-Protocol Synchronous Serial Engine (FTDI MPSSE), Hypertext Transfer Protocol Version 3 (HTTP3), Java Debug Wire Protocol (JDWP), LBM Stateful Resolution Service (LBMSRS), Lithionics Battery Management, OBSAI UDP-based Communication Protocol (UDPCP), Palo Alto Heartbeat Backup (PA-HB-Bak), ScyllaDB RPC, Technically Enhanced Capture Module Protocol (TECMP), Tunnel Extensible Authentication Protocol (TEAP), UDP based FTP w/ multicast V5 (UFTP5), and USB Printer (USBPRINTER) Too many protocols have been updated to list here. MP4 (ISO/IEC 14496-12)

New Protocol Support Arinc 615A (A615A), Asphodel Protocol, AudioCodes Debug Recording (ACDR), Bluetooth HCI ISO (BT HCI ISO), Cisco MisCabling Protocol (MCP), DCE/RPC IRemoteWinspool SubSystem, (IREMOTEWINSPOOL), Dynamic Link Exchange Protocol (DLEP), Fortinet Single Sign-on (FSSO), FTDI Multi-Protocol Synchronous Serial Engine (FTDI MPSSE), Hypertext Transfer Protocol Version 3 (HTTP3), Java Debug Wire Protocol (JDWP), LBM Stateful Resolution Service (LBMSRS), Lithionics Battery Management, OBSAI UDP-based Communication Protocol (UDPCP), Palo Alto Heartbeat Backup (PA-HB-Bak), ScyllaDB RPC, Technically Enhanced Capture Module Protocol (TECMP), Tunnel Extensible Authentication Protocol (TEAP), UDP based FTP w/ multicast V5 (UFTP5), and USB Printer (USBPRINTER)

Bugs and feature requests can be reported on the issue tracker.

August 12, 2020

Wireshark 3.2.6, 3.0.13, and 2.6.19 have been released. Installers for Windows, Mac OS X 10.12 and later, and source code are now available.

In 3.2.6

One vulnerability has been fixed. See the release notes for details.

For a complete list of changes, please refer to the 3.2.6 release notes.

In 3.0.13

Minor bug fixes. See the release notes for details.

For a complete list of changes, please refer to the 3.0.13 release notes.

In 2.6.19

Minor bug fixes. See the release notes for details.

For a complete list of changes, please refer to the 2.6.19 release notes.

Official releases are available right now from the download page