Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Wireshark 3.6.8 Release Notes

What is Wireshark?

Wireshark is the world’s most popular network protocol analyzer. It is used for troubleshooting, analysis, development and education.

What’s New

Note
This is the last release branch with support for 32-bit Windows. Updates will no longer be available after May 22, 2024 for that platform. Issue 17779

Bug Fixes

The following vulnerabilities have been fixed:

The following bugs have been fixed:

  • TCAP Malformed exception on externally re-assembled packet Issue 10515.

  • Extended 3GPP-GPRS-Negotiated-QoS-profile strings decoded incompletely Issue 10688.

  • HTTP2 dissector decodes first SSL record only Issue 11173.

  • L2TP improvements - cookie length detection, UDP encapsulation and more Issue 16565.

  • USB Truncation of URB_isochronous in frames Issue 18021.

  • ISUP/BICC parameter summary text duplication Issue 18094.

  • Running rpm-setup.sh shows missing packages that Centos does not need Issue 18166.

  • IPX/IPX RIP: Crash on expand subtree Issue 18234.

  • Qt: A file or packet comment that is too large will corrupt the pcapng file Issue 18235.

  • BGP dissector bug Issue 18248.

  • Wrong interpretation of the cbsp.rep_period field in epan/dissectors/packet-gsm_cbsp.c Issue 18254.

  • Assertion due to incorrect mask for btatt.battery_power_state.* Issue 18267.

  • Qt: Expert Info dialog not showing Malformed Frame when Frame length is less than captured length Issue 18312.

  • Wireshark and tshark become non-responsive when reading certain packets Issue 18313.

New and Updated Features

New Protocol Support

There are no new protocols in this release.

Updated Protocol Support

BGP, BICC, BT ATT, CBSP, Couchbase, F5 Ethernet Trailer, Frame, GTP, GTP (prime), IPsec, ISUP, L2TP, NAS-5GS, Protobuf, SCCP, TCP, and TLS

New and Updated Capture File Support

pcap, pcapng

New File Format Decoding Support

There is no new or updated file format support in this release.

Getting Wireshark

Wireshark source code and installation packages are available from https://www.wireshark.org/download.html.

Vendor-supplied Packages

Most Linux and Unix vendors supply their own Wireshark packages. You can usually install or upgrade Wireshark using the package management system specific to that platform. A list of third-party packages can be found on the download page on the Wireshark web site.

File Locations

Wireshark and TShark look in several different locations for preference files, plugins, SNMP MIBS, and RADIUS dictionaries. These locations vary from platform to platform. You can use Help  About Wireshark  Folders or tshark -G folders to find the default locations on your system.

Getting Help

The User’s Guide, manual pages and various other documentation can be found at https://www.wireshark.org/docs/

Community support is available on Wireshark’s Q&A site and on the wireshark-users mailing list. Subscription information and archives for all of Wireshark’s mailing lists can be found on the web site.

Bugs and feature requests can be reported on the issue tracker.

Frequently Asked Questions

A complete FAQ is available on the Wireshark web site.