Wireshark

The new files are tagged 0.8.17-a because of an
error during the initial release. New dissectors
include CUPS browsing protocol, Cisco HDLC, DCE
RPC support, LMI for frame relay, Wellfleet
compression, BACNET, and RWALL. Many other
dissectors were updated and bug-fixed. The Windows
version can now dynamically load the wpcap.dll at
run-time. This release adds a new logo, a Windows
installer, a -D flag to ethereal to show a list of
the entire network, and support for packet data
decompression and decoding.

New dissectors include SUA Light, HCLNFSD, and Rquota, many other dissectors were updated and fixed, the wiretap library can read Etherpeek files and write NetMon 2.x files, capture filters and display filters are kept in separate dialogues/files to help minimize confusion, a new "Decode As" feature allows some run-time configuration of which dissectors are called for a particular packet, ability to select a field in the protocol tree by clicking on a byte in the hex dump, the display filter code was rewritten, and some syntax was changed (esp. for boolean variables).

Ethereal can now read the compressed Sniffer file format. The dissectors for RTP, IP, ISAKMP, ICMP, SMB, SMB-PIPE, VTP, SNMPv3, Ethernet, GRE, EIGRP, DHCP, IPX, X.25, RSVP, and L2TP have been updated, and Mobile IP and COPS have been added. The dissector API has changed dramatically to provide a more error-free and robust program, although the conversion of dissectors to this new API is still underway.

Various protocol dissectors were updated in Ethereal 0.8.8, including DHIS/DDTP, OSI CLNP, CLTP, and ISIS, PPP, RTSP, IPv6, LPD, RTSP, DNS, FTP, ISAKMP, and SINEC H1. Ethereal now has dissectors for OSI ESIS, RTCP, RTP, and the MS Proxy Protocol. The GUI behavior has been tweaked, the Win32 version now has a program icon, and some internals (for those of you who are interested in hacking on Ethereal) have changed.

The DNS dissector now avoids the zlip DNS DoS exploit. A bug affecting display of boolean fields in bitfields was fixed. rlogin and SOCKS 4 and 5 dissectors were added. The SMB, BGP, OSI CLNP, ISIS, and LLC dissectors were updated.