Wireshark-bugs: [Wireshark-bugs] [Bug 11120] packet-zbee-zcl.h: IS_ANALOG_SUBTYPE doesn't filter
Date Index · Thread Index · Other Months · All Mailing Lists
Date Prev · Date Next · Thread Prev · Thread Next
From: bugzilla-daemon@xxxxxxxxxxxxx
Date: Wed, 15 Apr 2015 00:38:10 +0000

Comment # 5 on bug 11120 from 
I have attached a compressed pcap with packet numbers: 403 and 407 showing the
problem (I had to compress with xz to make it fit the 10,000 byte limit).  Use
Home Automation Key: 5A:69:67:42:65:65:41:6C:6C:69:61:6E:63:65:30:39 and
Transport Key: 76:a7:85:5e:01:ad:6b:4a:b4:94:68:29:b9:42:79:95 to decrypt the
packet.  In packet 407, the ZCL: Read Reporting Response has multiple 8-bit
Enum attributes.  Table 2.16 of the ZigBee cluster library specification says
0x30 and 0x31 are Discrete, but and since (0x30 & 0xe0) == 0x20 (8-bit Enum is
0x30), IS_ANALOG_SUBTYPE evaluates to true, and Wireshark shows a Reportable
change value for the first attribute when it shouldn't.  This makes Wireshark
parse the second and third attributes incorrectly as it has advanced 1 byte too
far.

Oh I misread D as being Digital in the first post, I should have said Discrete.

You are receiving this mail because:
  • You are watching all bug changes.