Hello Linux Geeksters. As you already know, Wireshark is an open-source protocol analyzer software, very used for monitoring the network traffic.
The latest version available is Wireshark 1.12.4, which has been released recently, coming with the below fixes:
- RTP player crashes on decode of long call: BadAlloc (insufficient resources for operation).
- “Telephony→SCTP→Analyse This Association” crashes Wireshark on manufactured SCTP packet.
- IPv6 Mobility Header Link Layer Address is parsed incorrectly.
- DNS NXT RR is parsed incorrectly.
- IPv6 AUTH mobility option parses Mobility SPI and Authentication Data incorrectly.
- IPv6 Mobility Header Link-Layer Address Mobility Option is parsed incorrectly.
- HTTP chunked response includes data beyond the chunked response.
- DHCP Option 125 Suboption: (1) option-len always expects 1 but specification allows for more.
- Incorrect decoding of IPv4 Interface/Neighbor Address sub-TLVs in Extended IS Reachability TLV of IS-IS.
- Little-endian OS X Bluetooth PacketLogger files aren’t handled.
- X.509 certificate serial number incorrectly interpreted as negative number.
- Malformed Packet on rsync-version with length 2.
- ZigBee epoch time is incorrectly displayed in OTA cluster.
- BGP EVPN – Route Type 4 – “Invalid length of IP Address” – “Expert Info” shows a false error.
- Bad bytes read for extended rnc id value in GTP dissector.
- “ServiceChangeReasonStr” messages are not shown in txt generated by tshark.
- Clang ASAN : AddressSanitizer: global-buffer-overflow ANSI.
- MEGACO wrong decoding on media port.
- Wrong media format.
- BSSGP Status PDU decoding fault (missing Mandatory element (0x04) BVCI for proper packet).
- DNS LOC Precision missing units.
- Packets on OpenBSD loopback decoded as raw not null.
- Display Filter Macro unable to edit.
- IPv6 Local Mobility Anchor Address mobility option code is treated incorrectly.
- SNTP server list improperly formatted in DHCPv6 packet details.
- Juniper Packet Mirror dissector expects ipv6 flow label = 0.
- NS Trace (NetScaler Trace) file format is not able to export specified packets.
In this article I will show you how to install Wireshark 1.12.4 on Ubuntu 15.04 Vivid Vervet, Ubuntu 14.10 Utopic Unicorn, Ubuntu 14.04 Trusty Tahr, Ubuntu 12.04 Precise Pangolin, Linux Mint 17.1 Rebecca, Linux Mint 17 Qiana, Linux Mint 13 Maya, Pinguy OS 14.04, Elementary OS 0.3 Freya, Elementary OS 0.2 Luna, Peppermint Five, Deepin 2014, LXLE 14.04, Linux Lite 2 and other Ubuntu 15.04, Ubuntu 14.10 and Ubuntu 14.04 derivative systems.
Because it is available via PPA, installing Wireshark 1.12.4 on Ubuntu 15.04, Ubuntu 14.10, Ubuntu 14.04, Ubuntu 12.04 and derivative systems is easy. All you have to do is add the ppa to your system, update the local repository index and install the wireshark package. Like this:
$ sudo add-apt-repository ppa:pi-rho/security
$ sudo apt-get update
$ sudo apt-get install wireshark
Optional, to remove wireshark, do:
$ sudo apt-get remove wireshark