Wireshark: New versions 4.0.2 and 3.6.10 now available
It's been a while since we last discussed Wireshark updates . And, given that two new versions were released a few days ago , today we'll cover the new features of Wireshark 4.0.2 and 3.6.10.
Before we begin, it's worth noting that Wireshark is recognized worldwide as one of the most important and widely used network protocol analyzers . This is because it allows users to see what's happening on any network at an advanced level of detail . Therefore, it's used by commercial and non-profit organizations, government agencies, educational institutions, and even by individuals and IT professionals such as sysadmins, penetration testers, hackers, and crackers.
And, before you start reading this post about the new versions (4.0.2 and 3.6.10) of "Wireshark" , we recommend you explore the previous related publications at the end:
Wireshark 4.0.2 and 3.6.10: New versions available
What is Wireshark?
Briefly, for those who may not know about this application called Wireshark , it is worth clarifying that it is described, according to its official website , as follows:
Wireshark is a network packet analyzer that manages to display the data of the captured packets with a high level of technical detail. Furthermore, It is freely available for Unix and Windows-based operating systems; and it is open source. Which makes it one of the best packet analyzers available today.
And given that, over time, it has grown in functions and features , these are just some of the many things, in general, that it is currently capable of doing or offering:
- You can filter packages based on many criteria.
- Performs live data packet capture from a network interface.
- Open files containing data packets captured with tcpdump/WinDump, Wireshark and others.
- It is capable of importing packages from text files that contain hex dumps of package data.
- You can display and save (export) packets with highly detailed protocol information in readable files and in various capture file formats.
What's New in Wireshark Versions 4.0.2 and 3.6.10
4.0.2
- The following vulnerabilities have been fixed: wnpa-sec-2022-09 related to multiple infinite dissector loops (Issue 18229), and wnpa-sec-2022-10 associated with Kafka dissector memory exhaustion.
- Many bugs have been fixed, some of them being the following: Qt – unexpected byte unit suffixes in packet columns (Issue 18229), and GOOSE – “floating_point” field no longer works (Issue 18491).
- Support of updated protocols: ASN.1 PER, ASTERIX, BGP, BPv6, DTLS, EVS, GOOSE, GSM Osmux, IPv6, Kafka, Locamation IM, MONGO, NXP 802.15.4, OpenFlow v6, PCAP, Protobuf, RTP, S1AP, SKINNY, TCP, and WASSP.
See more details at the following link.
3.6.10
- The following vulnerabilities have been fixed: wnpa-sec-2022-09 related to multiple infinite dissector loops, and wnpa-sec-2022-10 associated with Kafka dissector memory exhaustion.
- Many bugs have been fixed, some of them being the following: Packet bytes are not fully displayed if scrolled (Issue 18438), and GOOSE – “floating_point” field no longer works (Issue 18491).
- Support of updated protocols: ASN.1 PER, BGP, BPv6, EVS, GOOSE, GSM Osmux, Kafka, Mongo, NXP 802.15.4, OpenFlow, PCAP, S1AP, and WASSP.
See more details at the following link.
And for those who wish to download these new versions, they can do so via the following link . Meanwhile, if you'd like to learn more about it, its updated official manual is available in English.
Summary
In summary, Wireshark 4.0.2 and 3.6.10 further strengthen the development of this brilliant and important cross-platform technical tool . It is undoubtedly widely used by advanced users , IT professionals , and hackers /penetration testers worldwide. It runs on the world's most popular operating systems to perform necessary network analysis for various purposes. Therefore, if you haven't tried it yet, we recommend testing it live or in a virtual machine to experience its full potential.
And if you enjoyed this post, please leave a comment and share it with others. Also, remember to visit our homepage to explore more news, and join our official DesdeLinux Telegram channel or this group for more information on today's topic.