CloudShark 2.0.0

Version 2.0 brings improved usability, a cleaner user interface, display-filter autocomplete, and a brand new API method for searching for capture files.

Release History

Release Type  Release Number  Release Date 
Original  CloudShark 2.0 build 1747 November 19th, 2013
Maintenance Release 1  CloudShark 2.0 build 1798 December 16th, 2013 
Maintenance Release 2 CloudShark 2.0 build 1810 December 23rd, 2013 
Maintenance Release 3  CloudShark 2.0 build 1818 January 16th, 2014 
Maintenance Release 4  CloudShark 2.0 build 1844 January 27th, 2014 
Maintenance Release 5  CloudShark 2.0 build 1869 February 4th, 2014 

Original release: CloudShark 2.0 build 1747 November 19th, 2013

Introducing CloudShark Professional

We’ve renamed the CloudShark tiers to make it easier to talk about the software. Any users who had been previously using “CloudShark Appliance” will notice their license is now for “CloudShark Professional”. This is identical to the previous “Appliance” tier.

New Features and Highlights

Improved Capture Analysis UI

With CloudShark 2.0, the primary analysis page has been completely updated and revamped to be easier to use, and easier to build upon for the future. In addition to a cleaner look and feel, we’ve made the Display Filter bar larger, moved Analysis Tools into their own drop-down menu, and promoted CloudShark Graphs to their own menu.

Display Filter Autocomplete

Can’t remember exactly what that protocol field was called? CloudShark now has display filter autocomplete built in. Simply start typing, and fields that match your protocol will be displayed for you to pick from. This works for display filters, editing graphs, and when creating SSL decryption rules.

API Improvements


CloudShark’s ability to store, index, and filter on capture file metadata has always been at the core of what the product does. Version 2.0 brings this powerful searching and filtering to the API. Now, you can do even more via scripts and external tools to tie CloudShark in.

Learn more about Search from our support site.

API Token permissions

API Tokens can now be limited in what actions they are allowed to perform. If there is a token that should only be used for uploading files, it is easy to give it permission for just that single method.

CloudShark Enterprise User Search

CloudShark Enterprise customers enjoy unlimited users and can connect via LDAP or ActiveDirectory. With several pages of users, searching for one was difficult. CloudShark 2.0 introduces the ability to search through the users of the appliance by user name.

Upgraded to tshark 1.10.3

CloudShark 2.0 comes with tshark 1.10.3 on the backend, supporting many new protocols and dissectors.

Stacked Graphs

There’s a new option when creating a bandwidth graph. Series of the same type may now be “stacked” on top of one another. 

Bug Fixes and other changes

  • Increased length of the “Overview” activity timeline on the appliance. You can now see CloudShark usage trends for the entire life of your server.
  • Resolved an issue with a database race condition during startup on brand new installations.
  • Added support for Kerberos Decryption. Learn more.
  • Fixed a bug displaying some malformed HTTP responses.
  • Improved the initial clean-slate view within CloudShark for brand new installations.
  • Added a check to verify the expected version of tshark is installed.
  • Resolved an issue where some PCAPNG comments would not be loaded when importing the capture file.
  • Resolved an issue where some capture files would indicate they were taking too long to load when in fact they weren’t.
  • Updated time-skew warning message on login page to report the correct number of hours between the server time and the browser time.
  • Made API error codes more semantically correct.
  • Visual tweaks to all the analysis tool pages to improve usability.
  • Renamed the “Administration” menu to “Appliance Setup”. This is a name change only.
  • Admin users can now enter their local contact information on the “Settings” page. This information will be displayed in the footer of all CloudShark pages and makes it easier for users to find out who the CloudShark administrator is should they have any questions.
  • The navigation charts displayed in the decode window and file info pop up have been improved for better scaling and faster load times.

Maintenance Release #1: CloudShark 2.0 build 1798 December 16th, 2013

Added support for G.722 RTP Streams

This maintenance release adds support for RTP streams encoding audio with the G.722 codec. These streams are now available through Analysis Tools -> RTP Streams.

Bug fixes and other changes

  • Resolved issue preventing users from changing their passwords under some conditions in CloudShark Professional
  • Added current-password requirement to change your user password
  • Fixed issue opening graphs that had been saved in a much earlier version of CloudShark
  • Decode-as rules are now applied when computing the Protocol Hierarchy

Maintenance Release #2: CloudShark 2.0 build 1810 December 23rd, 2013

  • Fixed an issue preventing users who are members of the Admin group from being deleted.
  • Fixed display issue in the Admin Overview on a pristine new system.

Maintenance Release #3: CloudShark 2.0 build 1818 January 16th, 2014

  • Resolved an issue with VoIP Playback when DNS resolution was enabled on the system

Maintenance Release #4: CloudShark 2.0 build 1844 January 27th, 2014

This maintenance release addresses a couple security related issues. It is recommended you upgrade. If you would like more specific details on the issues, please contact CloudShark Support.

  • Resolved potential cross-site scripting (XSS) vulnerability with maliciously crafted tags
  • Resolved a potential XSS vulnerability involving an invalid Decode As rule
  • Resolved an issue with the Protocol Hierarchy incorrectly displaying cached data

Maintenance Release #5: CloudShark 2.0 build 1869 February 4th, 2014

  • CloudShark will now stay in the timezone you put it in
  • Fixed an issue that prevented users from setting their default upload permissions
  • Cleaned up an error message when VoIP playback is not available for a given codec.