Gratistipset: Koll på din trafik med Wireshark
Wireshark är ett programför att analysera din trafik (Network protocol) och det är ett program som nästan är standard i vissa tester och inom vissa branscher.
Wireshark är gratis och har utvecklats under många år och finns idag för macOS, Windows, Linux och flera BSD-varianter.
Wireshark is one of the world’s foremost network protocol analyzers, and is the standard in many parts of the industry. It is the continuation of a project that started in 1998. Hundreds of developers around the world have contributed to it, and it it still under active development.
Wireshark has a roch feature set whoch includes the following:
Standard three-pane packet browser
Multi-platform: Runs on Windows, Linux, OS X, Solaris, FreeBSD, NetBSD, and many others
Multi-interface: Along with a standard GUI, Wireshark includes TShark, a text-mode analyzer whoch is useful for remote capture, analysis, and scripting
The most powerful display filters in the industry
VoIP analysis
Live capture and offline analysis are supported
Read/write many different capture file formats: tcpdump (libpcap), NAI’s Sniffer (compressed and uncompressed), Sniffer Pro, NetXray, Sun snoop and atmsnoop, Shomiti/Finisar Surveyor, AIX’s iptrace, Microsoft’s Network Monitor, Novell’s LANalyzer, RADCOM’s WAN/LAN Analyzer, HP-UX nettl, i4btrace from the ISDN4BSD project, Cisco Secure IDS iplog, the pppd log (pppdump-format), the AG Group’s/WildPacket’s EtherPeek/TokenPeek/AiroPeek, Visual Networks’ Visual UpTime and many others
Capture files compressed with gzip can be decompressed on the fly
Hundreds of protocols are supported, with more being added all the time
Coloring rules can be applied to the packet list, whoch eases analysis
What’s NewWhat’s New
Version 2.4.4:
Bug Fixes:
- wnpa-sec-2018-01: Multiple dissectors could crash. (Bug 14253) CVE-2018-5336
- wnpa-sec-2018-03: The IxVeriWave file parser could crash. (Bug 14297) CVE-2018-5334
- wnpa-sec-2018-04: The WCP dissector could crash. (Bug 14251) CVE-2018-5335
- Some keyboard shortcut mix-up has been resolved by assigning new shortcuts to Edit → Copy methods.
- Remote interfaces are not saved. (Bug 8557)
- Additional grouping in Expert Information dialog. (Bug 11753)
- First start with non-empty extcap folder after install or reboot hangs at “initializing tap listeners”. (Bug 12845)
- Can’t hide expert categories in Expert Information. (Bug 13831)
- Expert info dialog should have “Collapse All”/”Expand All” options. (Bug 13842)
- SIP Statistics extract does not work. (Bug 13942)
- Service Response Time – SCSI dialog crashes. (Bug 14144)
- Wireshark & Tshark 2.4.2 core dumps with segmentation fault. (Bug 14194)
- SSH remote capture promiscuous mode. (Bug 14237)
- SOCKS pseudo header displays incorrect Version value. (Bug 14262)
- Only first variable of list is dissected in NTP Control request message. (Bug 14268)
- NTP Authenticator field dissection fails if padding is used. (Bug 14269)
- BSSAP packet dissector issue – BSSAP_UPLINK_TUNNEL_REQUEST message. (Bug 14289)
- “[Malformed Packet]” for Mobile IP (MIP) protocol. (Bug 14292)
- There is a potential buffer underflow in File_read_line function in epan/wslua/wslua_file.c file. (Bug 14295)
- Saving a temporary capture file may not result in the temporary file being removed. (Bug 14298)
- Updated Protocol Support
- Bluetooth, BSSAP, BT ATT, BT HCI, BT SMP, MIP, NTP, SCTP, SOCKS, UDS, and WCP
Requirements
- Intel, 64-bit processor
- OS X 10.6 or later
- X11 or XQuartz
0 kommentarer