CloudShark 3.8.1

CloudShark 3.8.1 improves the performance of some PCAP analysis tools.

Updated Internals

The Follow Stream, Endpoints, Conversations, and GeoIP World Map tools have been updated to be faster when loading an open PCAP file.

These are internal changes that will help pave the way for future improvements.

Bug fixes and other changes

  • Ethernet addresses in the Endpoints and Conversations views are now being resolved and include the vendor name instead of the OUI (i.e. Dell_02:a8:e4)
  • Fixed a bug where uid fields would not be clickable in the DHCP Zeek log


The underlying version of Wireshark has not changed between 3.8.0 and 3.8.1. If you are compiling your own custom dissectors or plugins, you do not need to re-build Wireshark to install this release.