Wireshark · Wireshark-users: Re: [Wireshark-users] Does this support Zigbee? Can I look at only specific MAC addresses?

["j.snelders" <j.snelders@xxxxxxxxxx>]

Hi Dave,

This is what I found:
http://www.wireshark.org/docs/dfref/#section_z
zbee.apf: ZigBee Application Framework (1.2.0 to 1.2.3, 2 fields)
zbee.aps: ZigBee Application Support Layer (1.2.0 to 1.2.3, 40 fields)
zbee.nwk: ZigBee Network Layer (1.2.0 to 1.2.3, 71 fields)
zbee.zdp: ZigBee Device Profile (1.2.0 to 1.2.3, 78 fields)
zep: ZigBee Encapsulation Protocol (1.2.0 to 1.2.3, 9 fields) 

http://wiki.wireshark.org/WPANFamily?highlight=%28zigbee%29

http://wiki.wireshark.org/SampleCaptures?highlight=%28zigbee%29
zigbee-join-authenticate.pcap.gz (libpcap) Two devices join a ZigBee network
and authenticate with the trust center. Network is encrypted using network
keys and trust center link keys.

Hope this helps a bit
Joan

On Wed, 4 Nov 2009 18:26:04 -0500 "Dave Zuraw" wrote:
>Does Wireshark support Zigbee?  I searched the website for "Zigbee" and
>found nothing.
>
> 
>
>If so, can I look at only the RSSI for a single MAC address and ignore
>what may be hundreds of others?
>
> 
>
>Can this be set up such that Labview can capture this information and
>act on it?
>
> 
>
>Thanks,
>
> 
>
>Best Regards,
>
>Dave 
>
> 
>
>This message contains PRIVILEGED AND CONFIDENTIAL INFORMATION for the
>intended recipient(s). If you are not the intended recipient, any
>disclosure, distribution, copying or use of the information by others is
>strictly prohibited and may be unlawful.  If you have received this
>message in error, please notify the sender by immediate reply and delete
>the original message.  Thank you.