Bugs Fixed

A buffer overflow in the ISIS dissector has been fixed. More information can be found in the application advisory

A bad TCP header could cause problems for the "Follow TCP Stream" feature.

Setting "column.format" from the command line no longer crashes Ethereal and Tethereal.

Problems with capture files being overwritten (e.g. if you try to save over the current capture file) have been fixed.

An SMB conversation handling bug has been fixed.

Thanks to Valgrind, several memory leaks have been fixed.

Some problems with printing under Windows have been fixed.

New Features

TCP sequence number analysis has been added.

The DCE RPC NETLOGON dissector has received a major overhaul.

Data types throughout the code have been cleaned up.

New Protocols

CPHA, DOCSIS, NTLMSSP, Xyplex terminal server protocol, ZIP

Updated Protocols

802.11, AFP, ASAP, BGP, CDP, CDPCP, CPHA, DDP, DCERPC, DCERPC NT, DCERPC REG, EPM, FTP, HCLNFSD, HTTP, IPX, ISAKMP, ISIS, IUA, Kerberos, L2TP, LLMNR, LSA, MMSE, MPLSCP, NBNS, NetBIOS, NETLOGON, NFS, NTLMSSP, PPP, Quake2, RADIUS, RSVP, RTCP, SAMR, SCSI, SDP, SIP, SMB, SMB Mailslot, SMTP, SPOOLSS, TCP, TDS, TNS, TPKT, Token Ring, VJ TCP, WINREG, WSP

Capture File Updates

CheckPoint Firewall-1 monitor file support and CoSine debug file support were added. Support for pppdump and Netmon files was updated.