Wireshark 0.99.2

Bug Fixes
- The GSM BSSMAP dissector could crash. Versions affected: 0.10.11. CVE-2006-3627
- The ANSI MAP dissector was vulnerable to a format string overflow. Versions affected: 0.10.0. CVE-2006-3628
- The Checkpoint FW-1 dissector was vulnerable to a format string overflow. Versions affected: 0.10.10. CVE-2006-3628
- The MQ dissector was vulnerable to a format string overflow. Versions affected: 0.10.4. CVE-2006-3628
- The XML dissector was vulnerable to a format string overflow. Versions affected: 0.10.13. CVE-2006-3628
- The MOUNT dissector could attempt to allocate large amounts of memory. Versions affected: 0.9.4. CVE-2006-3629
- The NCP NMAS and NDPS dissectors were susceptible to off-by-one errors. Versions affected: 0.9.7. CVE-2006-3630
- The NTP dissector was vulnerable to a format string overflow. Versions affected: 0.10.13. CVE-2006-3628
- The SSH dissector was vulnerable to an infinite loop. Versions affected: 0.9.10. CVE-2006-3631
- The NFS dissector may have been susceptible to a buffer overflow. Versions affected: 0.8.16. CVE-2006-3632

New and Updated Features
- Multicast stream analysis (Statistics->Multicast Streams) has been added. It lets you determine burst size, output buffer size, and losses for multicast data.
- TCP reassembly has been updated and improved.
- Expert analysis has been updated and improved.
- SCSI service response time statistics have been added.
- You can now find next/previous marked frames.
- The LDAP and SNMP dissectors have been completely rewriten.
- The SMB dissector now tracks filenames and share names.
- The Windows file dialogs have been improved.
- If Wireshark is linked with the PortAudio library, you can now listen to RTP streams. (PortAudio didn't make the cut in the current Windows installer. It will be included with 0.99.3.)