Wireshark

Wireshark 1.1.2 has been released. Installers for Windows, Mac OS X 10.5, and source code is now available. This is a development release, intended to be used as a platform for testing new features. If you want the stable release of Wireshark, . This ... [More] version improves file previews on Windows, updates supporting libraries (including a security fix in c-ares), and adds GeoIP support. You can get it right now at the Wireshark download page. [Less]

Jim Geier has written a how-to on using Wireshark to capture 802.11 traffic. Check it out!

Wireshark 1.0.5 has been released. Installers for Windows, Mac OS X 10.5.5 and above (Intel and PPC), and source code is now available. In this release Security-related bugs in the SMTP and WLCCP dissectors, have been fixed. See the advisory for ... [More] details. Many other bugs have been fixed. This release includes an experimental package for Mac OS X 10.5.5 and above. For a complete list of changes, please refer to the 1.0.5 release notes. Official releases are available right now from the download page. [Less]

Laura Chappell's latest video shows you how to create custom columns in Wireshark. More videos can be found in our bibliography Wireshark University recently signed on Global Knowledge as an authorized training partner. Also, keep an eye out for a Wireshark Certification announcement in early 2009.

Fyodor writes: "I'm happy to report that I've finally finished my book on Nmap! It contains everything I've learned about network scanning from more than a decade of Nmap development, plus some bad jokes and (over Time Warner's written objections) pictures of Trinity hacking the Matrix :)." Congratulations, Fyodor!

Right on the heels of Laura Chappell's Troubleshooting and Security Summit come two more Wireshark training opportunities. This month we have Wireshark Quick Start — three online sessions from Network Protocol Specialists' own Mike Pennacchi. In ... [More] December Chris Sanders, author of Practical Packet Analysis will hold an online Practical Packet Analysis course. No need to choose. Attend both! [Less]

tcpdump 4.0.0 and libpcap 1.0.0 were released yesterday. This marks a major milestone in a project that is important to the entire networking community. Congratulations to the tcpdump/libpcap team for a great job!

Richard Bejtlich of TaoSecurity recently wrote a nice display filter introduction for SearchNetworkingChannel.com. Check it out!

Wireshark 1.0.4 has been released. Installers for Windows, Mac OS X Intel 10.5, and source code is now available. In this release Security-related bugs in the Bluetooth ACL, Bluetooth RFCOMM, PRP, Q.931, MATE, and USB dissectors, as well as the ... [More] Tammos CommView file parser have been fixed. See the advisory for details. Many other bugs have been fixed. This release includes an experimental package for Mac OS X Intel 10.5. For a complete list of changes, please refer to the 1.0.4 release notes. Official releases are available right now from the download page. [Less]

Gerald Combs, Wireshark's creator will be at Laura Chappell's Troubleshooting and Security Summit November 4-5 in Dallas, Texas. The summit is an intensive, hands-on, information-packed event featuring Wireshark. Visit www.chappellsummit.com for more information.