Wireshark · Wireshark-users: Re: [Wireshark-users] wireshark and zigbee

[Jaap Keuter <jaap.keuter@xxxxxxxxx>]

Hi,

Well, if I look at the supported protocols I see:
zbee.apf: ZigBee Application Framework  (1.2.0 to 1.2.3, 2 fields)
zbee.aps: ZigBee Application Support Layer (1.2.0 to 1.2.3, 40 fields)
zbee.nwk: ZigBee Network Layer (1.2.0 to 1.2.3, 71 fields)
zbee.zdp: ZigBee Device Profile (1.2.0 to 1.2.3, 78 fields) 

That should take you a long way.

Thanks,
Jaap


On Thu, 12 Nov 2009 11:59:01 +0100, nicola <nick.zando@xxxxxxxxx> wrote:
> Tnx for your reply Japp.
> 
> I suppose that if I have a device like that i can analyze only the
> 802.15.4 layers.
> If I want to analyze the complete zigbee stack
> up to the application profiles I have to write a dissector.
> 
> Am I right?
> 
> 
> Il giorno gio, 12/11/2009 alle 11.42 +0100, Jaap Keuter ha scritto: 
>> Hi,
>> 
>> If your capture device can write pcap files with DL type 195 (for
>> WTAP_ENCAP_IEEE802_15_4) or 
>> DL type 215 (for WTAP_ENCAP_IEEE802_15_4_NONASK_PHY) you should be
fine.
>> 
>> Thanks,
>> Jaap
>>