--
Besides the new dissectors (WAP, SIP, AIM/OSCAR, GIOP 1.2, 802.11)
and updates to many many dissectors, an exploit for a buffer overrun
in the AFS dissector has been patched. Please upgrade to 0.8.14 as soon
as possible to guard against this exploit, which was announced
this weekend in BugTraq.
--
New dissectors include H.261, TPKT, and IGRP. RTP and RTCP were
re-written, and many other dissectors were updated and improved.
The wiretap library enables Ethereal to read Nokia-firewall tcpdump
files, Shomiti Surveyor 3.x files, pppd log files (pppdump format),
and NetXRay ATM files.
Release notes from the authors:
The dissectors for RTP, IP, ISAKMP, ICMP, SMB, SMB-PIPE, VTP, SNMPv3,
Ethernet, GRE, EIGRP, DHCP, IPX, X.25, RSVP, and L2TP have been updated,
fixed, or otherwise modified. Ethereal has new dissectors for Mobile IP
and COPS.
Internally, the dissector API has changed in order to catch more errors
at compile time and to guard against segfaulting when dissecting
short packets. The Ethereal team has to convert all the existing dissectors
to make use of the new API; that is a work in progress. If you have
your own dissector, you should consider converting it to this new API
as soon as possible. Read the doc/README.tvbuff file for information,
and be sure to subscribe to the ethereal-dev mailing list.
The Wiretap library can now read compressed Sniffer files,
allowing Ethereal, Tethereal, and Editcap to do so too. You'll also find
a few minor but helpful GUI tweaks in this version of Ethereal.
Change summary
--------------
In Ethereal 0.8.7 we have fixed a display bug affecting boolean flags
in bitfields that was introduced in 0.8.5. The DNS dissector avoids the
zlip DNS Denial-of-Service exploit. Dissectors for rlogin and SOCKS
4 and 5 were added. Other updated dissectors include SMB, BGP, LLC,
OSI CLNP, and ISIS.
