LP-CC1352P7: Security related logs (Join State 2:Authenticate) are missing in the Wireshark log

Here is the sample log from this link  to compare . 

https://e2e.ti.com/support/wireless-connectivity/sub-1-ghz-group/sub-1-ghz/f/sub-1-ghz-forum/1067364/cc1352p-wireshark-packet-capture-wi-sun-network

I can see security related messages herebut not in my log. Please help us to enable security logs

BR
Archana

Hi 

I also see similar issue to 

https://e2e.ti.com/support/wireless-connectivity/sub-1-ghz-group/sub-1-ghz/f/sub-1-ghz-forum/1094912/mark-and-decode-the-wisun-packets-accurately-in-wireshark/4068172?tisearch=e2e-sitesearch&keymatch=wisun%2520log#4068172

I have added decoder keys to wireshark , I have compiled the code with FIXED_GTK_KEYS . and network name is also Wi-SUN Network, still I don't see decrypted packet.

Please help to fix this.

BR

Archana

Hi,

Here is new log as sw was not updated properly 

wisun_log_6_march.zip

BR

Archana

Hi,

Here is new log 

wisun_log_6_march.zip

BR

Archana

Hi Archana,

After you defined the FIXED_GTK_KEYS, please can you clean the project and build again. It seems that the GTK keys haven't been applied. 

Also, please verify that you have followed the steps in this trouble shooting guide. 

https://dev.ti.com/tirex/content/simplelink_cc13xx_cc26xx_sdk_6_40_00_13/docs/ti_wisunfan/html/wisun-guide/debugging-index.html#packet-sniffer

Regards,
Sid

Hi Sid,

I had already rebuild the software. Here is new log after clean & build for your reference .

$ spinel-cli.py -u /dev/ttyACM0
spinel-cli > ncpversion
TIWISUNFAN/1.0.1; RELEASE; Mar 6 2023 16:25:15
Done

I can see for router example variable FIXED_GTK_KEYS is missing .Should I define this and build the project.

wisun_log_2.zip

BR

Archana

Hi Sid,

 I tried erase entire flash, Still EAPOL, EAP logs are missing . Here is new wireshark log

wisun_log_9_march.zip

I see some difference , PAN version in Info filed and no warning for extra info undecoded.

BR

Archana

Hi Sid, 

I changed total channel to 1 , screen shot attached . now I see some more messages in the log (RPL control) but security messages are still missing.

new wireshark log is attached. 

BR

Archana

Hi Sid,

I have some observations to share with you , could you please check is this correct

1. When number of channels are 1 it means all packets are sent on 1 channel, if we don't set this to 1 then some packets will be missing in wireshark. 

2. I did erase entire flash for boarder router and loaded the software again after compiling with  FIXED_GTK_KEYS , but security messages was missing 

As security handshake will happen only once , even after reboot, keys exchange will not take place between boarder router and router.

3. I did erase entire flash for both boarder router and router and changed the board ,After this I could see security messages in the log only once. 

4. After restart also security logs was missing. 

New log for your reference. After your response , I'll set this issue to resolve.

wisun_log_10_march_with_security.zip

BR

Archana

One more question , can we delete only keys from the board to see security messages in the log

BR

Archana

Hi Archana, 

Yes, the channels should be reduced to 1 so that the sniffer captures al the messages. 

The sniffer can sniff only one channel and we want the devices to transmit only on this channel in order to be able to capture all messages. Sorry I did not catch this earlier. 

The key material is stored in NV as recommended by the WiSUN FAN spec. So the behavior you see when you reset the node is expected.

Regards,

Sid

If you need the security logs need to reappear. The flash should be erased on the devices.