- Fixed multitude of security issues found by an aggressive testing program
- Many user interface improvements have been made:
- The toolbar has been updated.
- Packet detail tree items can be expanded and collapsed with the right
and left arrow keys.
- The status bar display has been improved.
- Live captures can now be restarted from the toolbar.
- More improvements have been made to the ring buffer feature.
- Display filters are now faster.
- The capture engine has received major updates.
- New protocol support:
9P, Aruba ADP, Camel, DRSUAPI, DUA, HPSW, Monotone Netsync, nettl,
UMA, VNC (RFB),
- Updated protocol support:
ACSE, AgentX, AIM, AMR, ANSI A, ASN.1 BER/PER, ATM, ATSVC, BACapp,
BOOTP/DHCP, CDP, CMIP, CMP, CMS, CRMF, DCERPC, DHCPFO, DIAMETER, DICOM,
DISTCC, DLSw, EFS, EIGRP, EPM, ESIS, ESS, ETHERIC, Ethernet, FC, FCELS,
FCP, FTAM, G.723, GIOP, GRE, GSM, GSS-API, GTP, H.225, H.245, H.263,
HTTP, IAX2, ICEP, IEEE 802.11, IEEE 802.3 Slow protocols, INAP, IP,
IPsec, ISAKMP, iSCSI, ISIS, ISL, ISMP, ISUP, JXTA, Kerberos, KINK,
Kpasswd, L2TP, LDAP, LMP, M3UA, MANOLITO, MEGACO, MGCP, MIP6, MMSE,
MQ, MRDISC, MTP2, NCP, NDMP, NDPS, NFS, NLM, OCSP, OSI options, PIM,
PKIX1Explitit, PKIX Qualified, PKTC, Portmap, PPP, PRES, PROFINET DCP,
Q.2931, Q.931, Q.933, RADIUS, RDM, RPC, RSVP, RTP, RTSP, RX, SCCP, SCSI,
SCTP, SDP, sFlow, SIP, SKINNY, SM, SMB (SMB, PIPE, LOGON, Mailslot),
SNA, SPNEGO, SRVLOC, SUA, TCAP, TCP, Telnet, TFTP, TZSP, Vines, WSP,
X11, X.509, XML,
- New and updated capture file support:
5Views, HP nettl
This release fixes three security and stability-related issues:
- Matevz Pustisek discovered a buffer overflow in the Etheric dissector.
(CAN-2005-0704)
- The GPRS-LLC dissector could crash if the "ignore cipher bit" option was
enabled. (CAN-2005-0705)
- Diego Giago discovered a buffer overflow in the 3GPP2 A11 dissector. This
flaw was later reported by Leon Juranic. (CAN-2005-0699)
- Leon Juranic discovered a buffer overflow in the IAPP dissector.
- A bug in the JXTA dissector could make Ethereal crash.
- A bug in the sFlow dissector could make Ethereal crash.
Everyone is encouraged to upgrade.
New and updated features:
=========================
- Tree view item context menus now let you browse to the display filter
reference and wiki pages for a particular protocol.
- Online help has been expanded.
- VoIP call analysis (including nifty connection diagrams) has been added.
- GSS-API decryption has been greatly enhanced.
New protocol support:
=====================
AgentX, BUDB, DTP, G.723, IDP, INAP, KINK, Realplayer Data Protocol, Retix
Spanning Tree Protocol, RTCP-XR, XML, XNS, SPP
Updated protocol support:
=========================
3GPP2 A11, ACSE, AMR, ATM, BER, BSSGP, BUTC, CDP, CLNP, CoSine L2, DAAP,
DCE/RPC, DCOM, DIAMETER, DNP, DNS, Etheric, FCP, FW-1, Gnutella, GPRS, GSM A,
GSM MAP, H.225, H.245, H.248, H.450, HTTP, IAX2, ICQ, IEEE 802.11, IEEE 802.3
Slow Protocols, IP, iSCSI, ISUP, Juniper, JXTA, Kerberos, L2TP, LDAP, MIP,
MPLS, NDMP, NSIP, NTP, OSPF, OXID, PostgreSQL, RADIUS, RDT, Redback, RMCP,
RTP, RTSP, SCSI, SCTP, SDP, SPNEGO, SSL, STUN, TCAP, TCP, TZSP
New and updated capture file support:
=====================================
DBS Etherwatch, Lucent/Ascend, Nettl, Tcpdump (Redback)
This release fixes the following security-related issues:
- The COPS dissector could go into an infinite loop. (CAN-2005-0006)
- The DLSw dissector could cause an assertion, making Ethereal exit
prematurely. (CAN-2005-0007)
- The DNP dissector could cause memory corruption. (CAN-2005-0008)
- The Gnutella dissector could cause an assertion, making Ethereal exit
prematurely. (CAN-2005-0009)
- The MMSE dissector could free static memory. (CAN-2005-0010)
- The X11 protocol dissector is vulnerable to a string buffer overflow.
(CAN-2005-0084)
- Please see the application advisory for more information
Everyone is encouraged to upgrade.
New and updated features:
=========================
- Ethereal will now detect and flag weak 802.11 WEP IVs.
- Windows Sniffer timestamp handling has been greatly improved.
- A bug which made Ethereal crash at startup on Windows 98 and Windows ME
systems has been fixed.
- Ethereal and Tethereal now support a personal "hosts" file.
- Invalid field length handling has been greatly improved.
- The capture progress window title now shows the interface name.
New protocol support:
=====================
- ALC, AMR, CRMF, JXTA, NORM, PKIXCMP, PROFINET CBA
Updated protocol support:
=========================
- AIM, ARP, BGP, BOOTP/DHCP, COPS, DAAP, DCERPC EPM, DCERPC, DCOM, DHCPv6,
DLSw, DNP, DNS, EAPOL, eDonkey, FC-dNS, FC-FCS, FC-SWILS, FCIP, FCSB3, FIX,
GIOP, Gnutella, GSM A, GSM SMS, GTP, H.225, H.245, HTTP, ICMP, IEEE 802.11,
IEEE 802a, image/GIF, image/JFIF, Kerberos, L2TP, LDAP, LLC, LMP, MGCP,
MIME Multipart, MMSE, MPLS, MTP2, NBNS, NDMP, NMAS, NSIP, OLSR, PER, pflog,
PGM, PostgreSQL, PPP, PRES, Q.931, RADIUS, RTCP, RTP, SDP, SEBEK, SIGCOMP,
SIP, SLSK, SMB, SMPP, SRVLOC, SSL/TLS, T.38, TACACS, TCAP, TCP, X11
New and updated capture file support:
=====================================
- Windows Sniffer
This release fixes the following security-related issues:
- Matthew Bing discovered a bug in DICOM dissection that could make
Ethereal crash. (CAN-2004-1139)
- An invalid RTP timestamp could make Ethereal hang and create a large
temporary file, possibly filling available disk space. (CAN-2004-1140)
- The HTTP dissector could access previously-freed memory, causing a
crash. (CAN-2004-1141)
- Brian Caswell discovered that an improperly formatted SMB packet could
make Ethereal hang, maximizing CPU utilization. (CAN-2004-1142)
Please see the following advisory for more information:
http://www.ethereal.com/appnotes/enpa-sa-00016.html
Everyone is encouraged to upgrade.
Changes:
========
New and updated features
- Ethereal now has a packet history, similar to most web browsers.
- Ethereal now supports custom window titles.
- Minor performance enhancements have been added.
- RTP analysis has been enhanced.
- Host name resolution has been improved.
- Ethereal can now track TCP PDU times. See
http://wiki.ethereal.com/TcpPduTime for more details.
- Ethereal now ships with netscreen2dump.py, a utility which converts
netscreen packet-trace hex dumps to hex dumps that can be read by
text2pcap.
New protocol support
- AoE (ATA over Ethernet), Bittorrent, CMIP, GPRS Mobility Management
and Session Management, GSM MAP, Extended Security Services, Logotype
Certificate Extensions, MAP Dialogue, Network Service Over IP, Online
Certificate Status Protocol, PKIX Certificate, PKIX Qualified, PROFINET
DCP, IO, Real-Time, Short Message Relaying Service, SSCF-NNI,
Updated protocol support
- 3GPP2 A11, ACSE, AIM, AODV, ASN.1 BER, ASN.1 PER, BOOTP, BSSGP, BVLC,
CMS, COPS, DCERPC, DCERPC ISystemActivator, DICOM, DHCPv6, DNS, eDonkey,
ENTTEC, Etheric, Frame Relay, FTAM, FW1, GIOP, GPRS LLC, GRE, GSM A,
GSM SMS, H.225, H.245, H.450, HTTP, IPAddress, IPDC, IPMI, IPsec,
ISAKMP, ISUP, JFIF, Kerberos, MQ, MTP3, NMAS, OPSI, PKIX1EXPLICIT,
PKIX1IMPLICIT, PKIXProxy, PPP, PRES, Radiotap, RADIUS, ONC RPC, RTnet,
RTP, SAP, SDP, SIGCOMP, SIGCOMP UDVM, SIP, SMB, SNMP, SONMP, SSCOP,
SSL, Symantec Firewall, T.38, TCP, TDS, TSP, UDP, WSP, WTP, X.25,
X.509af, X.509ce, X.509if, X.509sat,
New and updated capture file support
- pppdump
- Add pcre support
- ok'ed frueauf@
From the website:
In order to avoid a naming conflict with the tcpreplay project, the "capinfo"
utility has been renamed to "capinfos".
New and updated features
Search wrapping is now a configurable option.
A lot of material has been added to the Developer's Guide. The User's Guide
has been updated as well.
The "Decode As..." dialog now supports DCERPC and SCTP.
The "Help" menu now includes a link to the wiki.
H.323 call analysis is now supported.
New protocol support
Cisco PAgP, DAAP, Etheric, Ethernet Configuration Testing Protocol, Ethernet
MAC Control Frame, ICE, Kerberos v4, Netscape certificate extensions, PKINIT,
PKIX1EXPLICIT, PKIX1IMPLICIT,
Updated protocol support
AIM, ARTNET, ASN.1 BER, ASN.1 PER, ASN.1, BGP, BOOTP, CIP, CLNP, COPS, DCERPC
MAPI, DCERPC SAMR, DCERPC, DCOM, DHCP, DHCPv6, DIAMETER, DNS, EAP, ENIP, EPM,
GRE, GSM A, GSM MAP, H.225, H.245, H.248 MEGACO, H.450, ISAKMP, iSCSI, iSNS,
ISUP, JFIF, Kerberos, LDAP, LDP, LLC, LWAPP, M2PA, MEGACO, MPLS, NCP 2222, NCP,
NDMP, NetFlow, NTLMSSP, OSCAR-ICQ, OSPF, RADIUS, RSVP, RTCP, RTP, RTSP, SCTP,
SDP, SES, SIP, Skinny, SMB, SNMP, SUA, T.38, TALI, TCAP, TCP, TDS, Teredo,
Time, X.509, X11,
New and updated capture file support
HP-UX nettl, NG Sniffer
in the process. (More information on tech-pkg.)
Bump PKGREVISION and BUILDLINK_DEPENDS of all packages using libtool and
installing .la files.
Bump PKGREVISION (only) of all packages depending directly on the above
via a buildlink3 include.
All library names listed by *.la files no longer need to be listed
in the PLIST, e.g., instead of:
lib/libfoo.a
lib/libfoo.la
lib/libfoo.so
lib/libfoo.so.0
lib/libfoo.so.0.1
one simply needs:
lib/libfoo.la
and bsd.pkg.mk will automatically ensure that the additional library
names are listed in the installed package +CONTENTS file.
Also make LIBTOOLIZE_PLIST default to "yes".
== May 13, 2004
Ethereal 0.10.4 has been released.
This release fixes bugs in AIM, MMSE, SIP, and SPNEGO, as described in
the following advisory:
http://www.ethereal.com/appnotes/enpa-sa-00014.html
Everyone is encouraged to upgrade.
New and updated features
When built with GTK+ 2.4, Ethereal uses the new, greatly improved, file
selection dialog.
Export dialogs for Plain text, PostScript(R), PDML and PSML have been added.
PostScript(R) output has been improved.
The screen layout of the main window can be changed by Preferences now.
Many other parts of the user interface have received improvements.
Compressed and chunked transfer-coded HTTP bodies are now decoded.
A new generic media dissector more cleanly handles HTTP and WSP
Content-Type information.
New protocol support
ANSI IS-801, BEA Tuxedo, DCERPC EFS, DICOM, GPRS LLC, GPRS SNDCP,
IEEE 1588/PTP, PVSTP, MPLS Echo, RTPS
some packet dissectors, you're strongly advised to update.
Changes from 0.10.0:
=> New and updated features
(in 0.10.3)
o Display filters now support the bitwise and (&) operator.
o Protocol hierarchy statistics now have bandwidth columns.
o The capture dialog has a new layout.
(in 0.10.2)
o The user interface has received further updates. The Statistics
menu layout has been improved, as well as the capture options dialog
layout.
(in 0.10.1)
o Several updates were made to Ethereal's user interface. The "File"
menu now has a "most recently used" list. The help menu was greatly
expanded.
o The "matches" operator now handles more data types. For example,
you can now use
smtp matches joespammer@example.com
as a display filter.
o I/O statistics now support 1ms resolution.
=> Bugs fixed
(in 0.10.3)
o http://www.ethereal.com/appnotes/enpa-sa-00013.html
=> Other notes
o A lot of packet dissectors were either added or updated, as well as
some capture file formats handlers.
This release fixes potential security issues with the GTP, ISAKMP,
MEGACO, and SOCKS dissectors.
New and updated features
Ethereal has leapt forward into the 90's and added a toolbar.
Ethereal and Tethereal can now force the data link type of captured
frames.
RTP analysis has been enhanced.
Individual frames can now be marked as time references
Service response time and general I/O statistics have been enhanced. I/O
statistics can now calculate client load (experimental).
New protocol support
ACN, ALCAP, ANSI MAP, ASN.1 BER, BSSAP, DCE/RPC DRSUAPI, DCE/RPC
INITSHUTDOWN, DCE/RPC RS_BIND, FC-SP, FICON, GSM BSSMAP, GSM DTAP, GSM
SMS TPDU, GSM SMS, GSM SS, H.450, IOS 4.0.1 IS-637-A (SMS), IS-683-A
(OTA), T.38, TCAP, TPCP
Updated protocol support
AODV, ASN.1 PER, BSSGP, CDP, Cisco HDLC, COPS, DCE/RPC BROWSER, DCE/RPC
DNSSERVER, DCE/RPC EPM, DCE/RPC LSA, DCE/RPC Messenger, DCE/RPC REG,
DCE/RPC SVCCTL, DCE/RPC, DFS, DHCPv6, DOCSIS, EAPOL, ENIP, Frame Relay,
FTP, GPRS, Gryphon, GTP, H.225, H.245, HTTP, ICMP, IEEE 802.11, IPX,
ISAKMP, ISUP, LAPB, Laplink, LWAPP, MAPI, MDSHDR, MEGACO, MPLS, NCP,
NDPS, NETLOGON, NFS, NTLMSSP, OSPF, OXID, PPP, Q.931, Q.933, RANAP, RIP,
RTP, SAMR, SCCP, SCSI, SCTP, SDP, SIP, SMB, SMPP, SNMP, SOCKS, SONMP,
SPOOLSS SRVLOC, SRVSVC, T.35, TACACS+, TAPI, TCP, TZSP, WKSSVC, WSP,
X.25, Yahoo! Messenger
Updated capture file support
Linux Bluez Bluetooth hcidump support has been added.
Endace ERF and Network Instruments Observer, and NetXRay support has
been enhanced.
Patch provided by Adrian Portelli <adrianp@stindustries.net> in PR
pkg/22751.
Changes:
New and updated features
Many often-requested features have been added with this release. If
you're running an older version of Ethereal you may want to have a look.
Conversation List (aka "top talker") support has been added to Ethereal
and Tethereal. Protocol statistics in general have been updated.
Searching capture files has been improved even more -- a new "contains"
display filter operator that searches for strings in PDUs has been
added. The Find dialog now supports case-insensitive searches, hex data
searches, and more.
An H.225 dissector has been added. It can automatically recognize RTP
and RTCP conversations.
A preference file has been added for disabled protocols.
Color filters may now be imported and exported from within Ethereal.
A new column type has been added for cumulative bytes.
New protocols
GPRS BSSGP, GPRS NS, H.225, H.263, LWAPP, Laplink, Q.933, STUN
Updated protocols
ArtNet, BOOTP/DHCP, DCE/RPC, DCERPCSTAT, DHCPv6, DOCSIS, ENIP, Ethernet,
FCIP, Frame Relay, H.245, HTTP, IPsec, iSCSI, LDAP, LWRES, M2UA, M3UA,
MEGACO, MTP3, NCP, NDPS, NFS, NTLMSSP, PPTP, Q.931, RPC, SAMR, SCCP,
SCTP, SIP, SMB, SMPP, SNA, SNMP, SRVLOC, SUA, TCP, TDS, UCD, UDP, WSP,
Updated capture file support
Support for Accellent 5Views and Endace ERF capture files was added.
CheckPoint FW-1 and Novell LANalyzer support has been enhanced.
Changes in pkgsrc:
o Now it uses GTK2 by default
* The ringbuffer code has been (nearly) completely rewritten. It now supports
an unlimited number of files.
* Ethereal now supports searching for arbitrary text and binary data in frames.
* Service response time statistics have been enhanced.
* Tethereal, the text-mode version of Ethereal, can now be compiled without
capture support.
* New protocols: echo, eDonkey, Jabber, MS Messenger, sFlow
* Updated protocols [see www.ethereal.com]
Overview of changes in Ethereal 0.9.13:
* Fix the endianness of the CCFilehandle NCP (Greg Morris)
* Add AUTH_GSSAPI support to RPC (Tony Schene, Guy)
* Various tap display filter fixes and updates (Guy)
* Enhance SNMP OID display (Laurent)
* M2PA message type field handling fix (Michael)
* Add support for versions 02 and 08 to M2PA (Michael)
* Add GNU ADNS support (Gerald)
* Fix compilation on systems without ADNS (Guy)
* Various HP-UX nettl fixes (Mark C. Brown)
* Handle DNSSEC DO/OK bit in OPT pseudo-RR (Yaniv)
* More ADNS fixes (Guy)
* Show DNS MBZ flags as either OK if 0 or incorrect if not 0 (Yaniv)
* Update NTLMv2 response blob parsing, magic number fixes (Tim)
* Don't try and dissect a zero length NTLM response as a NTLMv2 response
(Tim)
* Use the Python script to make register.c if we have Python (Guy)
* Fix variable signedness and size in Modbus (Stephen Shelley, Guy)
* Add basic authentication support to WSP, other updates (Olivier Biot)
* Fix OSPF simple password string length (Guy)
* Fix WTP sub-PDU size presentation in the protocol tree (Olivier)
* Mark encrypted DCERPC stub data as such (Jean-Baptiste Marchand, Guy)
* Move NTLMv2 response dissection into common code module (Tim)
* Add a dissect_ndr_counted_byte_array_cb function to DCERPC NT (Tim)
* Dissect a ntlmv2 response if found in a samlogon request (Tim)
* Throw an exception if we have trouble copying a DCERPC string (Guy)
* Do the "tvb_ensure_bytes_exist()" check, and the check for a zero-length
bit string, in the code to process an ASN.1 bit string (Guy)
* Treat a 6-byte value in a MAPI login reply as an aligned 4-byte value
(Guy)
* Enhance DCERPC NDR string handling (Guy)
* Put the source and destination addresses in an Ethernet data structure
in the right order (Graeme Hewson)
* Fix the buddy name length in AIM (Guy)
* Move dissection of NETLOGON secure channel auth verifier into
packet-dcerpc-netlogon.c (Tim)
* Increment a string length in TACACS to reflect the new behavior of
tvb_get_nstringz0() (Guy)
* Move platform ID values to packet-dcerpc-nt.c (Guy)
* Fix the call that adds the BGP local preference to the tree (Guy)
* Add the right decoding for AFP3.1 FPCatSearchExt call (Didier Gautheron)
* Fix an overflow bug in OSI, check LSP checksums (Laurent Rabret)
* Add support for the new OpenBSD pflog DLT (Can Erkin Acar)
* Add support for a systemwide color filter file, close a file handle
that had otherwise been left open (Richard Urwin)
* Use get_datafile_path() in various places in the code (Guy)
* Implement a ring buffer switch duration (Laurent)
* Switch from u_int32_t to guint32 in the packet-pflog.c (Guy)
* Fix a typo in wtap.c (Guy)
* Squelch some compiler complaints (Guy)
* Update the TODO list (Guy)
* Tap SMB packets before we call the dissecotrs (Ronnie)
* Add support for Solaris keepalives (Ronnie)
* Add the list of output file format specs to Tethereal's man page (Gerald)
* More tvb_get_nstringz0() fixes (Gerald)
* Fix a -z io,users,ip calculations bug (Martin Visser)
* Fix incorrect tvbuff definition in the WTP PDU concatenation situation
(Olivier)
* Updates to support draft-ietf-idr-bgp-ext-communities (Motonori)
* Add support for VMS UCX$TRACE output (Martin Warnes)
* Fix string handling bugs in BGP (Gerald)
* Clean "dissect_rpc_opaque_data()" up a bit (Guy)
* Correctly handle short TCP headers (Ronnie)
* Enhance VMS UCX$TRACE file recognition (Martin Warnes)
* Lump TCPIPtrace and UCX$TRACE together (Guy)
* Clean up and simplify the RTP dissector and tap code (Miha Jemec)
* Make dissect_rpc_opaque_data available to other dissectors (Richard)
* Improve fragmented TCP packet handling (Guy)
* Improve TCP error packet handling (Guy)
* More short TCP length improvements (Guy)
* Change the interface to dissect_ndr_nt_PSID() (Ronnie)
* DCERPC sid snooping enhancements (Ronnie)
* Changes to support NFS RPCSEC_GSS (J. Bruce Field, Richard)
* Rearrange sid snooping a bit (Ronnie)
* Prettify some DCERPC SID printing (Ronnie)
* Add snooping of sid->domain mapping from POLICY_ACCOUNT_DOMAIN_INFO
structures (Ronnie)
* Remove unused include from packet-dcerpc-samr.c (Ronnie)
* Small RPC fix (Richard)
* Put some missing contributor addresses in ethereal.pod.template (Guy)
* A small fix to NFSv4 to properly decode the secinfo response array
(Richard)
* Properly initialize sid_str in packet-smb.c (Tim)
* Quieten some unused variable warnings in packet-msproxy.c (Tim)
* Fix typo in name of ett for krb5 auth verifier in DCERPC (Tim)
* Dissect DCERPC LSA policy handles in place (Tim)
* Move base64_decode() to a common area (Tim)
* First changes to properly support RFC1964 (Richard)
* Dissect SPNEGO GSSAPI GetMIC tokens (Richard)
* Add an API to get the dissector name from a dissector handle (Guy)
* Add support for GSSAPI GSS_Wrap tokens (Richard)
* Note that we should probably do PPP Multilink reassembly in the TODO
file (Guy)
* Distcc support (Brad Hards, Ronnie)
* Convert unsafe string handling to GStrings in WTP (Gerald)
* Fix snprintf() return value checking in DNS, 802.11, ISAKMP, and WSP
(Gerald)
* Fix more string-related nits in CLNP, ISIS CLV, and RMI (Gerald)
* Get rid of the CRs at the ends of lines in packet-distcc.c (Guy)
* Convert the DNS WKS bitnames variable to a GString (Gerald)
* Use a GString to store the ISIS CLV formatted authentication
information (Guy)
* Break out the SPNEGO/GSSAPI request flags (Richard)
* Add RFC3526 DH MODP groups to ISAKMP (Yaniv)
* Fix string index errors in 802.11, ISAKMP, RMI, and WSP (Guy)
* Deal with cases where there's no token ID in a Kerberos blob (Guy)
* Strings in PPTP are null-padded, not null-terminated (Guy)
* Null-terminate ASCII string values in "dissect_ndr_cvstring()" (Guy)
* Fix SCSI string padding (Guy)
* Fix the definition of ISAKMP NUM_GRPDESC_TYPES (Yaniv)
* Add ADNS to the "Compiled with" list (Gerald)
* Make the RTP tap analysis code use create_tempfile() instead of tmpnam()
(Gerald)
* Get rid of a debugging message in packet-dcerpc-spoolss.c (Guy)
* Fix typoes in packet-dcerpc-samr.c (Guy)
* Flag fragmented data as such in DCERPC (Guy)
* Properly seek to the beginning of TCPIPTrace lines (Guy)
* Fix the declaration of "open_routines[]" in file.c (Graeme)
* Fix file opening in tap_rtp.c (Gerald)
* Various BGP fixes (Hannes Gredler)
* Improve ISIS LSP checksum display (Laurent Rabret)
* Properly free data in ICMPv6, 802.11, RTCP, and SMB (Laurent)
* Add the MSRPC ATSVC interface (Jean-Baptiste Marchand)
* COTP reassembly (Laurent Meyer)
* Add packet-dcerpc-atsvc.h to Makefile.am (Gerald)
* Add the MSRPC ATSVC interface to Makefile.nmake (Guy)
* Fix whitespace handling in SIP (Steven Lass)
* Decode the base-64 string for HTTP Basic authorization (tz)
* Some minor updates to LSA (Ronnie)
* Update SAMR context handle display (Ronnie)
* Fix an SPNEGO/ASN.1 segfault, enhance the responseToken display (Richard)
* Dissect a netlogon credential as eight FT_BYTES (Tim)
* Add GNU ADNS to the Windows build environment (Gerald)
* Add support for WPA (Wi-Fi Protected Access) key in EAPOL frames and WPA
IE in 802.11 beacon and probe response frames (Jeff Liu)
* CPHA magic number adjustments (Yaniv Kaul)
* Update the plugin API for Glib/GTK+ 2.2 and have NSIS remove the Start
menu entries and desktop icon (Lars Roland)
* Fix a bug in the SUA global title address parameter, add subdissectors
(Niels Koot)
* Fix up some comments, and move some common GLib 1.2[.x]/2.x code outside
#ifdefs in plugins.c (Guy)
* Handle more than one DCERPC call per frame (Guy)
* Lots of different NDPS updates and fixes (Guy)
* Fix UDP error packet handling (Guy)
* Tweake ISIS CLV string appending (Guy)
* Improve RMCP packet recognition (Guy)
* Fix string length checking in tvb_fake_unicode() (Guy)
* Adjust proto.c to better handle null-padded strings (Guy)
* More null-padded string fixes (Guy)
* Improve ASCIIZ string handling in ncp2222.py, other fixes (Guy)
* DCERPC policy handle hashing improvements (Guy)
* Add a "-d" flag to tethereal, related changes (Lionel Ains, Guy)
* Teach the sid snooping how to extract sid->name mappings from
SAMR:QueryDispInfo (Ronnie)
* Fix to make the dcerpc_smb_fetch_pol use the new function argument list
(Ronnie)
* Improve value string handling in MDSHDR (Motonori)
* Use "=" instead of "==" in an assignment in proto.c (Gerald)
* Replace bcmp() with memcmp() in 802.11 and add a missing quote to the
NSIS definition file (Lars)
* Make IP frame numbers unsigned (Guy)
* Don't use "tvb_get_nstringz()" to get string data in SMPP (Guy)
* Dissect extended attribute lists in SMB trans2 QUERY_FILE_INFORMATION,
info level 4 (Tim)
* Rename SMB's EA length field to EA list length (Tim)
* Some ATSVC fixes (Jean-Baptiste)
* Use "tvb_format_text()" to display WBXML strings (Guy)
* Handle the AFP Unix Privilege bit as defined in the 3.1 spec (Didier)
* Add an ethertype 0 pref to MDSHDR, other fixes (Dinesh, Guy)
* Add new supported IDs, fix padding bytes in SCTP (Michael)
* Fix some typos in SCTP (Michael)
* Properly specify an unused argument in packet-sctp.c (Guy)
* Improve SMB TRANS2_SET_{PATH,FILE}_INFORMATION handling (Guy)
* Add a "--enable-threads" option, which allows to build the gtk+ v2
ethereal with or without threads (Olivier)
* Print an MMSE warning in the protocol tree instead of the console
(Gerald)
* Update SMB informational strings to reflect CIFS 1.0, other fixes (Guy)
* Clean up the checks for valid SIP requests and responses (Guy)
* Dissect the SMB 12-byte reserved field (Richard)
* Fix "tvb_strneql()", "tvb_strncaseeql()", and "tvb_memeql()" not to
throw an exception out of hand (Guy)
* Fix LDAP tree creation (Guy)
* Clean up Ethereal's command line usage message (Guy)
* SID name mappings can now be presented in a table by tethereal
using the -z smb,sids command argument (Ronnie)
* Add a tap listener to present sid to name mappings for tethereal (Ronnie)
* Fix Tethereal man page command line options and program name (Guy)
* Fix the display of the high 16 bits of the SMB PID (Guy)
* Update the FAQ to May 25 (Joerg)
* Update manuf to June 10 (Joerg)
* Show the upper 2 bytes of SMB's formerly-reserved area as a "High Part of
PID" even for SMB-over-IPX (Guy)
* Add support for some additional SAPs for Netware and OSI (Guy)
* Improve the CR-LF check in SMTP (Guy)
* Change DCERPC, Fix, and ISDN to reflect the new behavior of tvb_memeql()
(Guy)
* If ADNS_DIR isn't defined, don't link with the ADNS library (Guy)
* Properly handle an empty interface list in Windows (Guy)
* Finish the NFS_ACL dissector (Mike Frisch)
* Fix "Ethereal" capitalization and boldface in the pod page (Guy)
* Get rid of an unused variable in proto.c (Guy)
* Add a paddint preference to the FDDI dissector (Laurent)
* Add http.request.method field with an accompanying subtree (Gilbert)
* Put the FTP request or response line into the protocol tree (Guy)
* Add a couple of missing line continuations to Makefile.nmake (Gerald)
* Get the right length for HTTP methods with an "M-" prefix (Guy)
* Add support for Common Industrial Protocol over IP (Joakim Wiberg)
* Add RTNET/TDMA support (Erwin Rol)
* Handle diff lines that look like "Binary files" (Gilbert)
* Put the SMTP request or response line into the protocol tree (Guy)
* Put the POP request or response line into the protocol tree (Guy)
* Put the IMAP request or response line into the protocol tree (Guy)
* Put the ACAP request or response line into the protocol tree (Guy)
* Fix value fetching and tree filling in TSP (Guy)
* Fix the NCP SetCmdValueNum display (Gilbert)
* Update the SIP request/response subfield display, fix a string free (Guy)
* Expand the ability of fvalue_to_string_repr, and modify more FT_* types
to provide that method (Gilbert)
* Put in a missing "break" statement in proto.c (Guy)
* Update to the CIP dissector, reverting to the "EtherNet/IP" name
(Joakim)
This release fixes several off-by-one and integer overflow errors
discovered by Timo Sirainen. See the following url for more details:
http://www.ethereal.com/appnotes/enpa-sa-00009.html
Changes:
- don't build and install static plugins anymore
- use .tar.bz2 distfile
- add more MASTER_SITES (also add one for older distfiles)
- sync DESC with the new description on HOMEPAGE
- TCP sequence number analysis received a few improvements.
- General packet reassembly has been improved.
- The "Follow TCP Stream" window now allows you to filter out
the current stream.
- The Vines code received significant updates.
- Several enhancements were made to the text2pcap utility.
- New protocols:
ArtNET, IPX WAN, Intel ANS, iSNS, NLSP, WKSSVC
- Updated protocols:
802.11 ACAP, AFP, AIM, AJP, ASAP, BGP, CLNP, CPHA, DCE/RPC, DSI, EAP,
IP, IPMI, IPX, IPv6, ISIS, ISUP, IUA, Kerberos, LDAP, M2PA, M2TP, M2UA,
M3UA, MGCP, MTP2, MTP3, MTP3MG, Modbus/TCP, NDMP, NDPS, NFS, NLSP, PGM,
Q.931, RANAP, RPC, RSVP, SCCP, SCCPMG, SCTP, SMB, SNMP, SPX, SSH, SUA,
TCP, Telnet, Vines, WBXML, WSP, WTP
- Updated capture file support:
Netxray
Based on a patch by Quentin Garnier via PR pkg/21431.
Patch provided by Quentin Garnier via PR pkg/20668.
Changes:
- The Ethereal 0.9.10 release was packaged improperly(!). This release
fixes the packaging, and adds minor updates and fixes for the following
protocols: AFS, OpenBSD enc(4), RTP, SCSI, SIP, SMPP, SSH
- IA64 support has been improved.
Patch provided by Quentin Garnier via PR pkg/20624.
Changes:
This release fixes a security hole discovered by Georgi Guninski in
the SOCKS dissector. All users of previous versions are encouraged
to upgrade. For more details see
http://www.ethereal.com/appnotes/enpa-sa-00008.html
Bug Fixes:
==========
- A missing comma in a string array could cause Ethereal to crash
when opening the preferences dialog.
New Protocols:
==============
- MSN Messenger, SSH
Updated Protocols:
==================
- AFS, Apache JServ, BACNET, BGP, DCCP, DCERPC, DCERPC NT, DNS,
Frame Relay, GTP, IPP, IPX, LSA, M3UA, MDSHDR, MPLS, NCP2222,
NETLOGON, PPP, RADIUS, SAMR, SMB, SNMP, SPOOLSS, SRVSVC, SSL,
Token Ring, X11
Updated Capture File Support:
=============================
- NetXRay
New Features
In order to improve the out-of-box responsiveness of Ethereal and
Tethereal, network name resolution has been disabled by default.
TCP analysis (a feature added in the 0.9.6 release) was improved.
The NCP code base received quite a few updates.
Initial support for version 2 of the GTK+ library was added.
RPC staticstics (which use the new Tap API) were added.
Due to added and updated support for the NTLM, SNEGO, and GSS-API
protocols, Ethereal can now dissect most of the security blobs for
Windows 2000 authentication.
The Ethernet "manuf" file now handles addresses specified with a
mask, and contains many well-known addresses.
New Protocols
802.1s MSTP, FIX, GSS-API, Interbase, NDPS, Netflow (Cisco and Juniper),
SCCP-Management, SPNEGO
The following DCE/RPC protocols were also added:
AFS4INT, BOSSVR, CDS_CLERKSERVER, CDS_SOLICIT, CPRPC_SERVER, DNSSERVER,
DTSPROVIDER, DTSSTIME_REQ, FLDB, FTSERVER, KRB5RPC, REPADMIN, REP_PROC,
ROVERRIDE, RPRIV, RS_ATTR, RSEC_LOGIN, RS_MISC, RS_PGO, RS_REPLIST,
RS_UNIX, SECIDMAP, TKN4INT, UBIKDISK, UKIKVOTE
Updated Protocols
AFP, AODV/AODV6, BGP, CHDLC, CHPA, DCE/RPC CONV, DCE/RPC LSA, DCE/RPC
NT, DCE/RPC SAMR, DHCP, DNS, DOCSIS, EAP, GTP, HTTP, IP, iSCSI, IS-IS,
Kerberos, LDAP, LDP, M2PA MMSE, NBNS, NCP, NDS, NETLOGON, NTLMSSP, OSI
Q.931 RPC, RPCSTAT, SCSI, Skinny, SMB, SNEGO, SPOOLSS, SRVSVC, TCP, WSP
Overview of changes in Ethereal 0.9.6:
* Update README.hpux re: version 11i (Guy)
* Update printing output routines (Guy)
* Properly adjust offset value in packet-bootp.c (Guy)
* Add AppleTalk ZIP support, adjust ddp socket filter names
(Didier Gautheron)
* Fix unsigned value printing in packet-atalk.c (Guy)
* Fix a possible buffer overflow in packet-isis-clv.c (Guy)
* NETLOGON cleanup and updates (Ronnie)
* pcap_dispatch() and fifo updates for tethereal.c (Graeme)
* Add missing static declarations to editcap.c and text2pcap.c (Joerg)
* Fix arguments in SAMR's dissect_nt_policy_hnd() routine (Tim)
* Add signature characters for IPX messages, improve socket number
handling (Guy)
* Allow TCP stream code to handle bad TCP packets (Guy)
* Handle Linux token ring bug (Guy)
* Update vcvars32.bat and cleanbld.bat notes in README.win32 (Guy)
* Improve handling of "send buffer length" in SMB RAP messages
(Devin Heitmueller)
* Fix #includes, DLCI field handling, and Q.931 parameters in IUA (Michael)
* Implemented a couple of easy windows registry dissectors (Tim)
* Fix QueryKey mod time handling in WINREG (Guy)
* Fix FILETIME handling in WINREG (Guy)
* Fix DELTA_USER name and structure in NETLOGON (Ronnie)
* Update README.win32 re cmd.exe vs command.com (Gerald)
* Add selected tree view item length to status bar (Gerald)
* SAMR update (Andrew Bartlett)
* Update command interpreter docs in README.win32 (Guy)
* Fix unneccessary include path, fix plugin directory path handling (Nix)
* Fix DELTA_DOMAIN name, fix structure in NETLOGON (Ronnie)
* Fix DELTA_GROUP name in NETLOGON (Ronnie)
* DELTA_RENAME_GROUP, DELTA_RENAME_USER, DELTA_RENAME_ALIAS NETLOGON
updates (Ronnie)
* Updated NETLOGON DELTA_GROUP_MEMBER and DELTA_ALIAS structures (Ronnie)
* Updated NETLOGON DELTA_ALIAS_MEMBER and DELTA_POLICY (Ronnie)
* Updated NETLOGON DELTA_TRUSTED_DOMAINS and DELTA_ACCOUNTS (Ronnie)
* Updated NETLOGON DELTA_UNION (Ronnie)
* Updated NETLOGON NetrDatabaseDeltas function (Ronnie)
* Fix the setting of "column.format" from the command line in Ethereal
and tethereal (Liviu Daia)
* Add formatting room for long field lengths in the status bar (Guy)
* Update of NETLOGON's DATABASESYNC function (Ronnie)
* Updated NETLOGON ACCOUNTDELTAS and ACCOUNTSYNC functions (Ronnie)
* Give some more information on the "command.com" vs. "cmd.exe" issue
in README.win32 (Guy)
* Support the new version of ASAP's I-Ds (Michael)
* Desegmentation of multi-TCP-segment TNS messages (and support for
multiple TNS messages per TCP segment) (Bernd)
* Updated NETLOGON GetDCName LogonControl and GetAnyDCName (Ronnie)
* Convert from prs_* routines to dissect_ndr_* routines in SPOOLSS (Tim)
* Update types and bases for many TNS fields (Bernd)
* Add NTLMSSP dissector (Devin Heitmueller)
* Reorder boolean fields in NTLMSSP, DCERPC and SPOOLSS (Tim)
* Fix an erroneous example, other errors in README.developer (Guy)
* Put back code to show auth data in DCERPC (Guy)
* NTLMSSP length and message content display fixes (Guy)
* Fix NETLOGON credential time stamp handling (Guy)
* Redback vendor-specific items for RADIUS and L2TP (Thierry Pelle)
* Get rid of unneeded #includes, fix DATA chunk handling in SCTP (Michael)
* Added another authentication service for Snego to DCE RPC (Tim)
* Add NSIS checkbox bitmaps to Makefile.am (Gerald)
* Update IUA to latest drafts, make packet fields searchable, add pref for
Implementers Guide support (Michael)
* Add DOCSIS support (Anand V. Narwani)
* Clean up the order of some lists of plugin items (Guy)
* Fix some warnings in SMB (Tim)
* Add missing #include to packet-smb-mailslot.c (Joerg)
* Fix a typo in packet-ftp.c (Guy)
* Properly handle responses in FTP, make SMTP fields filterable (Guy)
* Add smtp.req and smtp.rsp to the tree only when needed (Guy)
* Fix DOCSIS Info column erasure (Anand)
* Change the reported length of VJ uncompressed data to handle a pppdump
bug (Guy)
* Clarify the octet-stuffed framing code for pppdump (Guy)
* Add a Boolean field for the RSVP Bundle message type (Guy)
* Add/update booleans for RSVP Ack, Srefresh and HELLO (Guy)
* Fix a save-over-existing-capture bug (Richard)
* Fix random access handling in pppdump reader (Guy)
* Allow for SMTP and FTP response codes above 255 (Guy)
* Clean up the setting of "id_offset" and "sd_offset" in pppdump.c (Guy)
* The previous pppdump/VJ bug was actually the FCS. Handle accordingly
(Guy)
* Fix a sample call to add an item to the subtree, add/update documentation
for PROTONAME, PROTOSHORTNAME and PROTOABBREV in README.developer (Guy)
* Glib-ize and otherwise make a bunch of code more portable (Joerg)
* Added support for dissecting RSVP Bundle Messages (Ashok)
* Update the "NT sucks for PPP capture" note to include NT 5.1 in
capture.c (Guy)
* Fix dual sync-mode related capture popup error messages (Graeme)
* Allow "-" as the Wiretap output file name, capture loop optimization
(Graeme)
* Fix some error-message printing code, improve seekable file handling
(Guy)
* Don't allocate random access structs for sequential reads in pppdump.c
(Guy)
* Add needed snprintf.h #includes (Joerg)
* Get rid of unused variables and functions, improve missing libpcap
handling (Guy)
* Removed #if-0-ed code, redundant and unneded #includes all over the
place (Joerg)
* Add VSAs, fix attribute table termination in RADIUS (Kan Sasaki)
* Adjust the behavior of tvb_find_line_end(), and modify SMTP to take
advantage of it (Guy)
* Adjust the tree display, fix a loop termination in RTCP (Guy)
* Fix errors in README.plugins (Richard Urwin)
* #include sys/types.h in snprintf.h (Uwe)
* Add request/response time to SMB tree (Prabhakar Krishnan)
* Fix for the DOCSIS request frame Info column (Anand)
* Change a DOCSIS loop counter from guint8 to int (Guy)
* Fix a capture file overwrite bug (Joerg)
* Fix the declaration of yyin(), update options and usage message in
text2pcap.c (Guy)
* Update text2pcap documentation (Guy)
* Update comments, fix byte ordering in in_cksum.c (Guy)
* Fix info column display, add missing Extended header fields (Anand)
* Fix spacing in Netbios display (Tim)
* Gracefully display stub data in DCE RPC (Guy)
* Fix offsets in SIP (Stefan Wenk)
* Fix and SMB conversation handling bug (Ronnie)
* Put all SMB command PDUs in the summary line (Ronnie)
* Add NetBIOS address handling to Kerberos (Jim McDonough)
* Eliminate the need to #include sys/types.h, netinet/in.h, and
winsock2.h all over the code (Joerg)
* Fix a memory leak in gtk/colors.c found by Valgrind (Joerg)
* Add FPGetUserInfo to AFP (Didier Gautheron)
* Fully decode Quake2 client->server packets, start on server->client
(Jan Berkel)
* Update Windows printing code, fix variable freeing in print code (Guy)
* Add AF_INET6 support for DLT_NULL captures from MacOS X (Michael)
* Fix subtree creation in WSP (Guy)
* Improve progress bar window timing (Graeme)
* Add a CMP_ADDRESS macro (Ronnie)
* Check if 802.11 FCS is present (Chris Waters)
* Fix infinite loops, data fetching in RSVP (Guy)
* Fix a typo in packet_info.h (Ronnie)
* Improve TPKT heuristics (Guy)
* Add support for CoSine L2 debug output (Motonori)
* Fix decoding of AUTHORIZE in HCLNFSD (Mike Frisch)
* Add LsaQueryInformationPolicy2 to LSA (Jim McDonough)
* Add winsock2.h back to wtap.h (Joerg)
* Fix zlib.h #inclusion typo in wtap-int.h (Joerg)
* Fix get_persconffile_path-related memory leaks (Joerg)
* More data type (system-specific vs glib) cleanup (Joerg)
* Add TCP sequence number analysis (Ronnie)
* Fix entry for 0:0:0:0:0:0 in manuf.tmpl (Joerg)
* Update NETLOGON LogonControl2 and ServerAuthenticate2 functions (Ronnie)
* Fix system-specific netinet/in.h and sys/types.h dependencies (Guy)
* Remove unneeded arpa/inet.h and sys/socket.h #includes (Guy)
* Create a minimal TCP tree early on, in case an exception is thrown (Guy)
* Update the IEEE URL in make-manuf and manuf (Joerg)
* Add sequence number wrap to tcp window checking (Joerg)
* Fix a bug in the EPM dissector (Sergei Shokhor)
* Undo a couple of #include changes (Joerg)
* More NETLOGON function updates (Ronnie)
* Fix the PPP FCS computation (Hidetaka Ogawa)
* Remove net/inet.h #include from packet-isis-lsp.c (Joerg)
* Fix MMSE handling of strings with specified character set (Jan Kratochvil)
* Fix frame number data type in NFS (Guy)
* Fix a data type in wiretap/cosine.c (Guy)
* Add DOCSIS to Wiretap's table of encapsulations (Anand)
* Sync the SETCLIENTID args decoder with the latest nfs4_prot.x
(Mike Frisch)
* Fix NFSv4 ACL decoding (Mike)
* Put a comment about DOCSIS in packet-frame.c (Guy)
* Fix a typo in packet-smb.c (Guy)
* Fix SamrConnect[2-4] function names in SAMR (Richard)
* Add more information to the NBNS Info column (Tim)
* Add DOS error 259 to SMB (Tim)
* Fix Info column error reporting in DCERPC NT (Tim)
* Add OpenEntry, EnumKey and Unknown1A to REG, rename WINREG to REG (Tim)
* Fix a return code in SAMR (Tim)
* Fix NFSv4 LOOKUPP, add new error codes, fix ACL decoding (Mike)
* Properly set the LANE traffic type in libpcap.c (Guy)
* Fix non-multipart content handling in MMSE, along with POST data
subtrees (Tom Uijldert)
* Add support for CheckPoint FireWall-1 monitor files (Alfred Koebler)
* Get rid of redundant "fw1_" text in preference name (Guy)
* Remove unused #includes in packet-fw1.c (Joerg)
* Add FATTR4_MOUNTED_ON_FILEID to packet-nfs.c (Mike)
* WTP TPI dissection, and reindentation (Tom Uijldert)
* Update SetInformationPolicy2 function name in LSA (Ronnie)
* Add Xyplex terminal server protocol support (Randy McEoin)
* Handle NTLMSSP authentication messages, and handle the flags field in
NTLMSSP messages properly (Devin)
* Update get_unicode_or_ascii_string(), "un"used variables in SMB (Guy)
* Add a terminator to the ntlmssp_message_types list (Guy)
* Changed some incorrect pointer types in NETLOGON (Ronnie)
* Fix variable name / keyword conflict in packet-fw1.c (Guy)
* Add server name to negprot reply and fixed a pointer deferral problem in
SMB (Ronnie)
* Use "atm_guess_traffic_type()" in wiretap/netmon.c (Guy)
* Get rid of the "vpi" and "vci" arguments to "atm_guess_traffic_type()"
(Guy)
* Handle NTLMSSP over HTTP (Tim)
* Display the protocol name for the DCERPC UUID in the Info column (Tim)
* Update Windows printing prefs (Guy)
* Handle user2 access granted mask, name open/create domain/user/group
policy handles (Tim)
* Get rid of a commented-out #include in packet-smpp.c (Guy)
* Handle base64_decode() properly in packet-http.c (Guy)
* Fix a case statement in capture.c (Guy)
* Fix an NTLMSSP memory leak in packet-http.c. Improve display. (Tim)
* Replace AC_PROG_RANLIB with AM_PROG_LIBTOOL in configure.in (Joerg)
* Update .cvsignore (Joerg)
* Add CPHA support (Yaniv Kaul)
* Add and improve plugin API routines (Tomas Kukosa, Guy)
* Don't free a needed tvb in packet-http.c (Tim)
* Add AC_LIBTOOL_DLOPEN back to configure.in (Joerg)
* Fix unrecognized capability display in BGP, add ORF support (Jian Yu)
* LDP VC FEC dissection fix (Motonori)
* CoSine updates (Motonori)
* Fix FIN and ACK handling in TCP (Ronnie)
* Convert some all caps NETLOGON names to more friendly names (Tim)
* Fixed incorrect NDR pointer type in Authenticate3 in NETLOGON (Ronnie)
* Added new function name LogonSamLogonEx in NETLOGON (Ronnie)
* Fix a typo in a M2UA table and reformat it (Michael)
* Revert part of the TCP session tracking code (Ronnie)
* Fix some incorrect NETLOGON poitner types (Jean-Francois Micouleau)
* Adjust pointer usage in NETLOGON (Ronnie)
* Sync PPP with IANA, add MPLSCP and CDPCP, CDP over PPP (ENDOH Akira)
* Add protocol blurbs to "-G" fields (Vassilii Khachaturov)
* Adjust "-G"scripts to handle FT_UINT64, FT_INT64 and FT_STRING (Guy)
* Properly extract ISAKMP data, handle Initiator and Responder cookies
(Yaniv)
* Fix handling of SCSI mode sense (Bill Studenmund)
* Fix a couple of string handling bugs and properly display a uint in
NTLMSSP (Guy)
* Tweak the Solaris/SVR4 packaging a bit (Gerald)
* Limit the parameter and data tvbuffs in SMB (Guy)
* Keep track of "i", "a" and "m" tags in SDP (Guy)
* Fix "PS" bit recording in SCSI, improve unknown page display, fix MODE
SELECT payload length, add more data length checks, fix density code
(Guy)
* Generalize paths in ethereal.nsi and remove the need for ethereal.nsi.in
(Ulf Lamping)
* Set "SetShellVarContext all" in ethereal.nsi (Gerald)
* Add COMMON_FILES_GNU to config.nmake (Gerald)
* Add LLMNR support (Itojun)
* Add a plain text FAQ to the distribution (Joerg)
* Fix ethereal.nsi entries in Makefile.am (Joerg)
* Add TDS protocol support (Brian Bruns, Joerg)
* Add make-faq script (Joerg)
* Add the text FAQ to each package (Joerg)
* Clean up RPM building process (Joerg)
* Fix zero-infinite-looping problem in packet-tds.c (Guy)
* Fix formatting of SCSI "(size)" tags, track device/command types better,
other updates (Guy)
* Parse ISAKMP group descriptions, improve transform/payload display,
parse vendor ID (Yaniv)
* Add -S option to tethereal (Joerg)
* Improve SCSI device type handling, fix memory leaks, fix SSC READ(6) and
WRITE(6) dissectors (Guy)
* Add missing "-static.o" to Makefile.am
* Fix infinite recursion bug in DOCSIS (Anand)
* Update CPHA to use the new dissector API (Guy)
