ANNOUNCEMENT: Live Wireshark University & Allegro Packets online APAC Wireshark Training Session
April 17th, 2024 | 14:30-16:00 SGT (UTC+8) | Online

Wireshark-users: Re: [Wireshark-users] wireshark and zigbee

From: Jaap Keuter <jaap.keuter@xxxxxxxxx>
Date: Thu, 12 Nov 2009 13:27:31 +0100
Hi,

Well, if I look at the supported protocols I see:
zbee.apf: ZigBee Application Framework  (1.2.0 to 1.2.3, 2 fields)
zbee.aps: ZigBee Application Support Layer (1.2.0 to 1.2.3, 40 fields)
zbee.nwk: ZigBee Network Layer (1.2.0 to 1.2.3, 71 fields)
zbee.zdp: ZigBee Device Profile (1.2.0 to 1.2.3, 78 fields) 

That should take you a long way.

Thanks,
Jaap


On Thu, 12 Nov 2009 11:59:01 +0100, nicola <nick.zando@xxxxxxxxx> wrote:
> Tnx for your reply Japp.
> 
> I suppose that if I have a device like that i can analyze only the
> 802.15.4 layers.
> If I want to analyze the complete zigbee stack
> up to the application profiles I have to write a dissector.
> 
> Am I right?
> 
> 
> Il giorno gio, 12/11/2009 alle 11.42 +0100, Jaap Keuter ha scritto: 
>> Hi,
>> 
>> If your capture device can write pcap files with DL type 195 (for
>> WTAP_ENCAP_IEEE802_15_4) or 
>> DL type 215 (for WTAP_ENCAP_IEEE802_15_4_NONASK_PHY) you should be
fine.
>> 
>> Thanks,
>> Jaap
>>