4.0.4 Final | Portable | Wireshark

The "Conversations" and "Endpoints" dialogs were redesigned to allow users to tear off tabs into separate windows, facilitating side-by-side comparisons of TCP and UDP streams.

This version addresses specific vulnerabilities, such as a dissector crash in ISO 15765 and ISO 10681 (wnpa-sec-2023-08), which could otherwise lead to denial-of-service via crafted packets. Wireshark 4.0.4 Final | Portable

The default layout now places the Packet Detail and Packet Bytes panes side-by-side , optimizing for modern wide-screen displays. All custom configurations—such as color-coding rules

All custom configurations—such as color-coding rules, capture filters, and column layouts—are stored on the portable device, ensuring a consistent workspace regardless of the hardware being used. optimizing for modern wide-screen displays.

Released in , version 4.0.4 serves primarily as a stability and security update for the 4.0 branch. While it does not introduce new protocols, it brings significant "under-the-hood" refinements:

A new layer operator (#) allows users to filter specific layers in nested protocols (e.g., ip.src#2 to find the inner address of a tunneled packet).