In order to improve the out-of-box responsiveness of Ethereal and Tethereal, network name resolution has been disabled by default.
TCP analysis (a feature added in the 0.9.6 release) was improved.
The NCP code base received quite a few updates.
Initial support for version 2 of the GTK+ library was added.
RPC staticstics (which use the new Tap API) were added.
Due to added and updated support for the NTLM, SNEGO, and GSS-API protocols, Ethereal can now dissect most of the security blobs for Windows 2000 authentication.
The Ethernet "manuf" file now handles addresses specified with a mask, and contains many well-known addresses.
802.1s MSTP, FIX, GSS-API, Interbase, NDPS, Netflow (Cisco and Juniper), SCCP-Management, SPNEGO
The following DCE/RPC protocols were also added:
AFS4INT, BOSSVR, CDS_CLERKSERVER, CDS_SOLICIT, CPRPC_SERVER, DNSSERVER, DTSPROVIDER, DTSSTIME_REQ, FLDB, FTSERVER, KRB5RPC, REPADMIN, REP_PROC, ROVERRIDE, RPRIV, RS_ATTR, RSEC_LOGIN, RS_MISC, RS_PGO, RS_REPLIST, RS_UNIX, SECIDMAP, TKN4INT, UBIKDISK, UKIKVOTE