The world`s foremost network protocol analyzer for Mac

Wireshark for Mac

Join our mailing list

Stay up to date with latest software releases, news, software discounts, deals and more.

Download Wireshark 3.0.1

  -  82.8 MB  -  Open Source

What's new in this version:

- The Windows installers now ship with Npcap 0.992. They previously shipped with Npcap 0.99-r9

Bug Fixes:
- The following vulnerabilities have been fixed
- NetScaler file parser crash
- SRVLOC dissector crash
- IEEE 802.11 dissector infinite loop
- GSUP dissector infinite loop
- Rbm dissector infinite loop
- GSS-API dissector crash
- DOF dissector crash
- TSDNS dissector crash
- LDSS dissector crash
- DCERPC SPOOLSS dissector crash

The following bugs have been fixed:
- [oss-fuzz] UBSAN: shift exponent 34 is too large for 32-bit type 'guint32' (aka 'unsigned int') in packet-ieee80211.c:15534:49
- [oss-fuzz] UBSAN: shift exponent 35 is too large for 32-bit type 'int' in packet-couchbase.c:1674:37
- Duplicated TCP SEQ field in ICMP packets
- Wrong length in dhcpv6 NTP Server suboption results in "Malformed Packet" and breaks further dissection
- Wireshark’s speaker-to-MaxMind is burning up the CPU
- GSM-A-RR variable bitmap decoding may report ARFCNs > 1023
- Import hexdump dummy Ethernet header generation ignores direction indication
- %T not supported for timestamps
- LWM2M: resource with rn badly shown
- When selecting BSSAP in 'Decode As' for a SCCP payload, it uses BSSAP+ which is not the same protocol
- Possible buffer overflow in function ssl_md_final for crafted SSL 3.0 sessions
- Windows console log output delay
- Syslog dissector processes the UTF-8 BOM incorrectly
- NFS/NLM: Wrong lock byte range in the "Info" column
- randpkt -r causes segfault when count > 1
- Tshark export to ElasticSearch (-Tek) fails with Bad json_dumper state: illegal transition
- Packets with metadata but no data get the Protocol Info column overwritten
- BGP MP_REACH_NLRI AFI: Layer-2 VPN, SAFI: EVPN - Label stack not decoded
- Buildbot crash output: fuzz-2019-03-23-1789.pcap
- Typo: broli → brotli
- Wrong dissection of GTPv2 MM Context Used NAS integrity protection algorithm
- Windows CHM (help file) title displays quoted HTML characters
- Unable to load 3rd party plugins not signed by Wireshark’s codesigning certificate

Updated Protocol Support:
- BGP, BSSAP, Couchbase, DCERPC SPOOLSS, DHCP, DHCPv6, DOF, FP, GSM A RR, GSS-API, GSUP, GTP, GTPv2, H248C, HL7, IEEE 802.11, IEEE 802.15.4, ISO 14443, LDSS, LwM2M-TLV, NLM, Rbm, SIP, SRVLOC, Syslog, TCP, TLS, and TSDNS

New and Updated Capture File Support:
- NetScaler and pcap

Join our mailing list

Stay up to date with latest software releases, news, software discounts, deals and more.