Wireshark 2.4 released - gHacks Tech News

Wireshark 2.4 released

Wireshark 2.4.0 is a major new version of the popular network protocol analyzer for Microsoft Windows and Mac OS X devices.

The application is available as a 32-bit and 64-bit installer for Windows, and as a portable version for Windows as well. One of the new features is experimental support for 32-bit and 64-bit Windows installer packages (msi).

The developers of Wireshark suggested that these new installer packages are used independently of the old. Users who have installed either one of the available installer formats should uninstall it before installing the other format.

Note that the portable version of Wireshark is available as a 32-bit application only.

Existing users can select Help > Check for updates to run a check for updates from within the application.

Wireshark 2.4

wireshark 2.4

The Wireshark 2.4.0 changelog highlights new and improved features. These can be divided into the groups into general features and protocl-specific features.

It needs to be noted that the changelog describes changes since the release of Wireshark 2.2.0 and not the most recent version before 2.4.0, version 2.2.8.

The new version of Wireshark 2.4.0 supports a whole range of new protocols including NetScaler RPC Protocol, Citrix NetScaler Metric Exchange Protocol or HomePNA. A few dozen new protocols are supported in the new version. If you are interested in all of them, check the changelog linked above.

Protocols that were supported already have been updated -- the developers don't list them stating that too many have been updated to list them efficiently in the changelog.

As far as other changes are concerned, here is a list of the ones that stick out:

  • The legacy UI is disabled by default in Windows installers and in the development environment.
  • Wireshark supports fullscreen mode now to display more information on the screen at the same time. To use the feature, simply tap on F11 to toggle fullscreen mode, or select it with a click on View > Fullscreen.
  • The default profile can be reset to its default values in Wireshark 2.4.
  • Experimental timeline view for 802.11 wireless packet data. You can enable this with a click on Edit > Preferences > Protocols > 802.11 radio information > Enable Wireless Timeline (experimental).
  • TLS 1.3 dissection and decryption support.
  • RSA keys dialog does not require an IP address anymore, and ships with improved feedback on invalid settings.

The full changelog is available on the official website. You may want to check the list of known problems before you start the upgrade to Wireshark 2.4.0. It lists some crashes, for instance when changing real-time options.

Summary
software image
Author Rating
1star1star1star1star1star
5 based on 1 votes
Software Name
Wireshark
Operating System
Windows
Software Category
Networking
Landing Page

We need your help

Advertising revenue is falling fast across the Internet, and independently-run sites like Ghacks are hit hardest by it. The advertising model in its current form is coming to an end, and we have to find other ways to continue operating this site.

We are committed to keeping our content free and independent, which means no paywalls, no sponsored posts, no annoying ad formats (video ads) or subscription fees.

If you like our content, and would like to help, please consider making a contribution:

Comments

  1. CHEF-KOCH said on July 20, 2017 at 3:29 pm
    Reply

    For basic analysis I often use Fiddler.

    1. Tony said on July 20, 2017 at 6:37 pm
      Reply

      You mean the Fiddler add-on for Internet Explorer?

  2. Paul(us) said on July 20, 2017 at 8:59 pm
    Reply

    Martin,
    According to you in your informative and excellent written article “The application is available as a 32-bit and 64-bit installer for Windows, and as a portable version for Windwos as well. !”
    I never heard about Windwos? :-) Could this be one of your ferry rear typos? I think so! :-)
    Also do i wrestle with the question do i have to write fullscreen or full screen?

    1. Martin Brinkmann said on July 20, 2017 at 9:17 pm
      Reply

      You use both depending on what you want to say. See: https://english.stackexchange.com/questions/162421/fullscreen-or-full-screen

      1. Paul(us) said on July 20, 2017 at 9:26 pm
        Reply

        Thanks, great link! “Funny pictures in fullscreen.”! :-)

Leave a Reply