CC1352P: Wireshark (3.0.14) stop decrypt Zigbee messages

dAVID

Part Number: CC1352P
Other Parts Discussed in Thread: SIMPLELINK-CC13X2-26X2-SDK, Z-STACK

Hi Ryan and Yikai,

WireShark(3.0.14) decrypt Zigbee(SDK3.30) message well before. It didn't decrypt Zigbee(SDK4.40) messages right now, even factory reset whole nwk.

Could you please help how to check wireshark setting?

Best regards,

David

over 4 years ago

+1 Ryan Brown1 over 4 years ago

TI__Guru**** 221977 points

Hi David,

The Z-Stack SIMPLELINK-CC13X2-26X2-SDK version should not affect Wireshark's ability to decrypt Zigbee messages. The sniffer firmware from PACKET-SNIFFER-2 supports Wireshark 3.0.X and I haven't experienced similar issues with 3.0.14 from my end. Please make sure that the default global link key (5a6967426565416c6c69616e63653039) is set inside the Zigbee Pre-configured key preferences and be sure to capture a device join process in order to receive the NWK key.

Regards,
Ryan

+1 YiKai Chen over 4 years ago

Guru 735695 points

Do you try to keep your wireshark sniffing and add a factory new device into Zigbee network to allow wireshark to get network key for decrypt related messages?

0 dAVID over 4 years ago in reply to YiKai Chen

Intellectual 790 points

Hi Ryan and YiKai.

Appreciated for your great support.

Regards,

David

Zigbee & Thread

Zigbee & Thread forum

CC1352P: Wireshark (3.0.14) stop decrypt Zigbee messages