Uhlobo olusha lweWireshark 3.0.0 lufika ngesibonisi esisha ku-QT nokuningi

I-Wireshark (phambilini obekwaziwa njengo-Ethereali-analyzer protocol yenethiwekhi yamahhala. IWireshark injalo esetshenziselwa ukuhlaziywa kwenethiwekhi nesisombululo, ngoba lolu hlelo lusivumela ukuthi sibone okwenzekayo kunethiwekhi futhi yizinga elijwayelekile ezinkampanini eziningi izinhlangano zezohwebo nezingenzi nzuzo, izinhlaka zikahulumeni kanye nezikhungo zemfundo.

Lolu hlelo lokusebenza isebenza kuzinhlelo eziningi ze-Unix futhi iyahambisanas, kufaka phakathi i-Linux, Microsoft Windows, Solaris, FreeBSD, NetBSD, OpenBSD, Android, ne-Mac OS X.

Lolu hlelo Ine-interface esisebenziseka kalula engasisiza ekuhumusheni idatha yamakhulu ama-protocols kuzo zonke izinhlobo ezahlukahlukene zamanethiwekhi amakhulu.

Lawa maphakethe wedatha angabukwa ngesikhathi sangempela noma ahlaziywe ngokungaxhunyiwe ku-inthanethi, ngamafomethi amaningi wokubamba / wokulandela umkhondo afaka i-CAP ne-ERF.

Mayelana nenguqulo entsha yeWireshark 3.0.0

Amahora ambalwa edlule kukhishwe igatsha elisha lenethiwekhi yeWireshark 3.0.0 lapho enye yezinto ezintsha esezingeni eliphakeme yilelo IWireshark 3 isusa ukuqaliswa kwesixhumi esibonakalayo somsebenzisi esidala se-GTK +.
Yebo manje kuleli gatsha lokugcina liphonswe lkuya kuWireshark 2 UI, kususwe ku-GTK + kuya ku-Qt, yize isikhombimsebenzisi esidala besitholakala njengokuzithandela (kulabo abakhetha lesi esedlule).

I-interface entsha ayisasebenzisani ne-Qt 4.x, manje okungenani i-Qt 5.2 iyadingeka ekusebenzeni.

Ukusekelwa okukhulu

Le nguqulo entsha yeWireshark 3.0.0 ingeza ukusekelwa kokuqala kwamathokheni we-PKCS # 11 ukuze abhale kabusha i-RSA ku-TLS kanye nokuhlanganiswa okuphindaphindwayo, okuvumela noma yimuphi umsebenzisi ukuthi aqinisekise ukuthi ukuhlanganiswa okuphakanyisiwe kanambambili kusekelwe kukhodi yomthombo eshicilelwe.

Futhi, kungezwe ukusekelwa kokuguqulwa kwesitembu sesikhathi kwezinhlelo ze-UDP / UDP-Lite nokusekelwa kokusebenzisa ummeleli wokuxhumeka kwe-SSH kuzindawo zokuxhumana ze-sshdump ne-ciscodump extcap.

Ngayo abathuthukisi banike amandla amandla okubhala ngemfihlo i-DTLS ne-TLS kusuka kumafayili we-pcapng, kufaka phakathi i-DSB enokhiye abathathiwe.

Amafomethi amasha

Iphuzu elibalulekile esithanda ukuliqokomisa ukuthi onjiniyelaKungezwe ekusekelweni kohlelo lokwakha amaphakheji wokufaka aqukethe ifomethi ye-AppImage.

Amamojula amasha afakiwe

KuWireshark 3.0.0 imodyuli yokuhlaziya ye-TCP, ukucushwa kwe- "Reassemble segments out of order" kungeziwe, ekuvumela ukuthi uxazulule izinkinga ngokuhlaziywa nokususwa kokugeleza kokugeleza lapho izingxenye zingasebenzi.

Futhi, Imojuli ye-WireGuard Dissector ingezwe ekushumeni ukubethela kwe-WireGuard VPN traffic (uma unokhiye).
Imodyuli ye-BOOTP parser iqanjwe kabusha ibe yi-DHCP kanye ne-module ye-SSL kuya ku-TLS.

Ungayifaka kanjani iWireshark 3.0.0 ku-Ubuntu nakwezinye izinto?

Khona manje inguqulo 3.0.0 ayikabuyekezwa ku-PPA esemthethweni yohlelo lokusebenza. Kepha lokhu ngeke kuthathe isikhathi eside ngoba kumane nje kuyindaba yamahora ukuthi lokhu kubuyekezwe.

Okwamanje okuwukuphela kwendlela yokufaka le nguqulo entsha ukulanda ikhodi yomthombo yohlelo lokusebenza nokuhlanganisa iWireshark 3.0.0 kusistimu yakho.

Uma uthanda ngaleyo ndlela, manje ungangeza indawo esemthethweni yohlelo ohlelweni lwakho. Lokhu kungangezwa ngokuvula i-terminal nge-Ctrl + Alt + T nokwenza:

sudo add-apt-repository ppa:wireshark-dev/stable
sudo apt-get update

Kamuva ukufaka uhlelo lokusebenza vele uthayiphe okulandelayo esigungwini:

sudo apt-get install wireshark

Kubalulekile ukukusho lokho Ngesikhathi senqubo yokufaka kunezigaba zezinyathelo okufanele zilandelwe ezisebenzisa Ukwehlukaniswa Kwamalungelo, evumela i-Wireshark GUI ukuthi isebenze njengomsebenzisi ojwayelekile ngenkathi i-dump (eqoqa amaphakethe kusuka ku-interface yayo) isebenza ngamalungelo aphakeme adingekayo wokulandela ngomkhondo.

Uma kwenzeka uphendule kabi futhi ungathanda ukukushintsha lokhu. Ukufeza lokhu, esibulalayo sizothayipha umyalo olandelayo:

sudo dpkg-reconfigure wireshark-common

Lapha kufanele sikhethe yebo lapho sibuzwa ukuthi abangasisebenzisi amandla amakhulu bakwazi yini ukuthwebula amaphakethe.

Uma kwenzeka lokhu kungasebenzi, singalungisa le nkinga ngokwenza okulandelayo:

sudo chgrp YOUR_USER_NAME /usr/bin/dumpcap
sudo chmod +x /usr/bin/dumpcap
sudo setcap cap_net_raw,cap_net_admin+eip /usr/bin/dumpcap

Ekugcineni, kufanele nje sibheke uhlelo lokusebenza kumenyu yethu yohlelo lokusebenza esigabeni samathuluzi noma ku-Intanethi futhi sizobona isithonjana lapho ukuze siyiqhube.