Release Notes: Two new plugins: one to display packet size distribution and another to display duplicates time distribution. Autodiscovery of some protocols (HTTP, SIP, MGCP, FTP, etc.). You can now limit the amount of RAM used by the parsers. With regard to the netmatch language: a subnet type and addition of TCP relative sequence numbers.
Release Notes: This release fixes several file descriptors leaks and a segfault in openssl when decoding unknown cipher suites.
Release Notes: This release fixes handling of the Session Tickets TLS extension and TLS decryption of CAMELIA cypher suite.
Release Notes: This release fixes various bugs.
Release Notes: A new Delayogram plugin to visualize ack delays. A new -f option to set the next capture filters from the command line. Support for Eth QinQ(inQ...), DHCP protocol. Autodiscovery of IRC, jabber, VNC, CIFS, PCanywhere, citrix, telnet, BGP, IMAP, POP, and NTP.
Release Notes: This release adds a new parser for TLS (with optional decryption a la ssldump) and SKINNY protocols, reordering of all TCP traffic by default, and a new interactive plugin, NetTop, to display a top of current flows.