See the “New and Updated Features” section below for more details. Many other improvements have been made. See “Other Development Changes” below for more details. The tools and libraries required to build Wireshark have changed. Speed when using MaxMind geolocation has been greatly improved Hex dump imports from Wireshark and from text2pcap have been improved. The default main window layout has been changed so that the Packet Detail and Packet Bytes are side by side underneath the Packet List pane The Conversation and Endpoint dialogs have been redesigned. The display filter syntax is more powerful with many new extensions. If you need to use Wireshark on that platform, we recommend using the latest 3.6 release. We no longer ship official 32-bit Windows packages starting with this release. Missing dot for protocol H.264 in protocol column Home page capture button doesn’t pop up capture options dialog CFDP dissector doesn’t handle 'destination filename' only Packet bytes not displayed completely if scrolling Packet diagram field values are not terminated Capture filters not working when using SSH capture and dumpcap Wireshark 4.0 breaks display filter expression with > sign The RTP player might not play audio on Windows Qt: MaxMind GeoIP columns not added to Endpoints table Comparing a boolean field against 1 always succeeds on big-endian machines The Windows installers now ship with Qt 5.12.2.

Wireshark portable npf.sys