CC2531EMK: CC2531 promiscuous mode for packet sniffer

Joaquim Martinez

Part Number: CC2531EMK
Other Parts Discussed in Thread: CC2530, CC2531,

Hi all,

I am using a CC2531EMK USB dongle and "RFUSB_CC2531" example to communicate any CC2530 end device with the PC, but using BASIC RF protocol. This is to test end devices when they are manufactured. When a device is performing the test, it sends info to the dongle using the two last dongle MAC bytes as a destination short address in the sent packet.

This mode accepts broadcast messages and the dongle short address.

Now, I want to modify the dongle FW in order to accept different short address received. I can’t modify the device FW to send the packet as a broadcast.

Just I want to configure the dongle a packet sniffer, in promiscuous mode.

I have tried to modify IEEE extended, short address filters match, RX mode in FRMCTRL0 register, but I can’t receive messages that are not broadcast or with dongle destination address.

Please, can anybody help me with this? Is there available the open source packet sniffer?

Thanks. Joaquim.

over 6 years ago

0 Toby over 6 years ago

TI__Mastermind 35070 points

Hi,

Packet sniffer image and wireshark can be used with CC2531.

Please refer to: https://e2e.ti.com/support/wireless-connectivity/zigbee-and-thread/f/158/t/699648?tisearch=e2e-sitesearch&keymatch=faq%3Atrue

Regards,
Toby

0 Joaquim Martinez over 6 years ago in reply to Toby

Expert 1270 points

Hi Toby,

Thanks for the answer.

Let me specify my need. I just want to do my own "sniffer" functionality by FW, I don't need a sniffer software. Just to be able to receive all the frames of any MAC from any CC2530.

Thanks

0 Toby over 6 years ago in reply to Joaquim Martinez

TI__Mastermind 35070 points

Thanks for specifying.

If I understand, you have one CC2531 hooked up to PC.
When testing an end device, the CC2531 should pick up the frames sent by that end device, regardless of what the frames' destination address are.

"Just to be able to receive all the frames of any MAC from any CC2530." --> Although the source is not available, this is exactly what the sniffer fw accomplishes.

0 Joaquim Martinez over 6 years ago in reply to Toby

Expert 1270 points

Hi Toby,

Exactly.

I understand that source code is not available from TI, but I think it is a capability of the CC2530 and it is possible to do. Just I need the configuration of some specific registers.

Please, I need some help with this.

Thanks in advance.

Joaquim.

0 Toby over 6 years ago in reply to Joaquim Martinez

TI__Mastermind 35070 points

SmartRF Studio can provide register settings.

The CC2531 USB dongle interfaces with SmartRF Studio via CCDebugger.
After selecting the relevant channel in SmartRF Studio, then the CC2531 can perform packet RX (very similar to sniffer functionality).
Once you verify that the CC2531 displays the expected packets, then you can view the register settings used during the packet RX operation.

0 Joaquim Martinez over 6 years ago in reply to Toby

Expert 1270 points

Hi Toby,

That works fine!

Thank you very much for your help.

Joaquim.

0 Toby over 6 years ago in reply to Joaquim Martinez

TI__Mastermind 35070 points

Thank you for confirming!

Zigbee & Thread

Zigbee & Thread forum

CC2531EMK: CC2531 promiscuous mode for packet sniffer