No. Time Source Destination Protocol Length Info 1 14:53:30,814243 Broadcast IEEE 802.15.4 36 Beacon Request Frame 1: 36 bytes on wire (288 bits), 36 bytes captured (288 bits) on interface wireshark_extcap1640, id 0 IEEE 802.15.4 TAP IEEE 802.15.4 Command, Dst: Broadcast Frame Control Field: 0x0803, Frame Type: Command, Destination Addressing Mode: Short/16-bit, Frame Version: IEEE Std 802.15.4-2003, Source Addressing Mode: None Sequence Number: 130 Destination PAN: 0xffff Destination: 0xffff Command Identifier: Beacon Request (0x07) 0000 00 00 1c 00 01 00 04 00 00 00 20 c2 03 00 03 00 .......... ..... 0010 0b 00 00 00 0a 00 01 00 d4 00 00 00 03 08 82 ff ................ 0020 ff ff ff 07 .... No. Time Source Destination Protocol Length Info 2 14:53:30,817202 0x0000 ZigBee 54 Beacon, Src: 0x0000, EPID: dd:dd:dd:dd:dd:dd:dd:dd Frame 2: 54 bytes on wire (432 bits), 54 bytes captured (432 bits) on interface wireshark_extcap1640, id 0 IEEE 802.15.4 TAP IEEE 802.15.4 Beacon, Src: 0x0000 Frame Control Field: 0x8000, Frame Type: Beacon, Destination Addressing Mode: None, Frame Version: IEEE Std 802.15.4-2003, Source Addressing Mode: Short/16-bit Sequence Number: 118 Source PAN: 0x1a62 Source: 0x0000 Superframe Specification: PAN Coordinator, Association Permit .... .... .... 1111 = Beacon Interval: 15 .... .... 1111 .... = Superframe Interval: 15 .... 1111 .... .... = Final CAP Slot: 15 ...0 .... .... .... = Battery Extension: False .1.. .... .... .... = PAN Coordinator: True 1... .... .... .... = Association Permit: True GTS GTS Descriptor Count: 0 GTS Permit: False Pending Addresses: 0 Short and 0 Long ZigBee Beacon, ZigBee PRO, EPID: dd:dd:dd:dd:dd:dd:dd:dd Protocol ID: 0 Beacon: Stack Profile: ZigBee PRO, Router Capacity, End Device Capacity .... .... .... 0010 = Stack Profile: ZigBee PRO (0x2) .... .... 0010 .... = Protocol Version: 2 .... .1.. .... .... = Router Capacity: True .000 0... .... .... = Device Depth: 0 1... .... .... .... = End Device Capacity: True Extended PAN ID: dd:dd:dd:dd:dd:dd:dd:dd (dd:dd:dd:dd:dd:dd:dd:dd) Tx Offset: 16777215 Update ID: 0 0000 00 00 1c 00 01 00 04 00 00 00 2c c2 03 00 03 00 ..........,..... 0010 0b 00 00 00 0a 00 01 00 c8 00 00 00 00 80 76 62 ..............vb 0020 1a 00 00 ff cf 00 00 00 22 84 dd dd dd dd dd dd ........"....... 0030 dd dd ff ff ff 00 ...... No. Time Source Destination Protocol Length Info 3 14:53:31,335454 0xed82 0xb493 ZigBee 73 Rejoin Request, Device: 0xed82 Frame 3: 73 bytes on wire (584 bits), 73 bytes captured (584 bits) on interface wireshark_extcap1640, id 0 IEEE 802.15.4 TAP IEEE 802.15.4 Data, Dst: 0xb493, Src: 0xed82 Frame Control Field: 0x8861, Frame Type: Data, Acknowledge Request, PAN ID Compression, Destination Addressing Mode: Short/16-bit, Frame Version: IEEE Std 802.15.4-2003, Source Addressing Mode: Short/16-bit Sequence Number: 131 Destination PAN: 0x1a62 Destination: 0xb493 Source: 0xed82 [Extended Source: NordicSe_63:c6:13:27:6d (f4:ce:36:63:c6:13:27:6d)] [Origin: 3] ZigBee Network Layer Command, Dst: 0xb493, Src: 0xed82 Frame Control Field: 0x1209, Frame Type: Command, Discover Route: Suppress, Security, Extended Source Command Destination: 0xb493 Source: 0xed82 Radius: 1 Sequence Number: 0 Extended Source: NordicSe_63:c6:13:27:6d (f4:ce:36:63:c6:13:27:6d) ZigBee Security Header Security Control Field: 0x28, Key Id: Network Key, Extended Nonce Frame Counter: 1024 Extended Source: NordicSe_63:c6:13:27:6d (f4:ce:36:63:c6:13:27:6d) Key Sequence Number: 0 Message Integrity Code: 0b285efe Command Frame: Rejoin Request Command Identifier: Rejoin Request (0x06) Capability Information: 0x8c, AC Power, Rx On When Idle, Allocate Short Address .... ...0 = Alternate Coordinator: False .... ..0. = Full-Function Device: False .... .1.. = AC Power: True .... 1... = Rx On When Idle: True .0.. .... = Security Capability: False 1... .... = Allocate Short Address: True Frame (73 bytes): 0000 00 00 1c 00 01 00 04 00 00 00 20 c2 03 00 03 00 .......... ..... 0010 0b 00 00 00 0a 00 01 00 d4 00 00 00 61 88 83 62 ............a..b 0020 1a 93 b4 82 ed 09 12 93 b4 82 ed 01 00 6d 27 13 .............m'. 0030 c6 63 36 ce f4 28 00 04 00 00 6d 27 13 c6 63 36 .c6..(....m'..c6 0040 ce f4 00 b9 c0 0b 28 5e fe ......(^. Decrypted ZigBee Payload (2 bytes): 0000 06 8c .. No. Time Source Destination Protocol Length Info 4 14:53:31,335999 IEEE 802.15.4 31 Ack Frame 4: 31 bytes on wire (248 bits), 31 bytes captured (248 bits) on interface wireshark_extcap1640, id 0 IEEE 802.15.4 TAP IEEE 802.15.4 Ack, Sequence Number: 131 Frame Control Field: 0x0002, Frame Type: Ack, Destination Addressing Mode: None, Frame Version: IEEE Std 802.15.4-2003, Source Addressing Mode: None Sequence Number: 131 0000 00 00 1c 00 01 00 04 00 00 00 90 c1 03 00 03 00 ................ 0010 0b 00 00 00 0a 00 01 00 ff 00 00 00 02 00 83 ............... No. Time Source Destination Protocol Length Info 5 14:53:31,340337 0xb493 0xed82 ZigBee 83 Rejoin Response, New Address: 0xed82 Frame 5: 83 bytes on wire (664 bits), 83 bytes captured (664 bits) on interface wireshark_extcap1640, id 0 IEEE 802.15.4 TAP IEEE 802.15.4 Data, Dst: 0xed82, Src: 0xb493 Frame Control Field: 0x8861, Frame Type: Data, Acknowledge Request, PAN ID Compression, Destination Addressing Mode: Short/16-bit, Frame Version: IEEE Std 802.15.4-2003, Source Addressing Mode: Short/16-bit Sequence Number: 191 Destination PAN: 0x1a62 Destination: 0xed82 Source: 0xb493 [Extended Source: NordicSe_a6:5c:b5:0c:af (f4:ce:36:a6:5c:b5:0c:af)] [Origin: 5] ZigBee Network Layer Command, Dst: 0xed82, Src: 0xb493 Frame Control Field: 0x1a09, Frame Type: Command, Discover Route: Suppress, Security, Destination, Extended Source Command Destination: 0xed82 Source: 0xb493 Radius: 1 Sequence Number: 113 Destination: NordicSe_63:c6:13:27:6d (f4:ce:36:63:c6:13:27:6d) Extended Source: NordicSe_a6:5c:b5:0c:af (f4:ce:36:a6:5c:b5:0c:af) ZigBee Security Header Security Control Field: 0x28, Key Id: Network Key, Extended Nonce Frame Counter: 180 Extended Source: NordicSe_a6:5c:b5:0c:af (f4:ce:36:a6:5c:b5:0c:af) Key Sequence Number: 0 Message Integrity Code: 66d902dc Command Frame: Rejoin Response Command Identifier: Rejoin Response (0x07) Address: 0xed82 Status: Success (0x00) Frame (83 bytes): 0000 00 00 1c 00 01 00 04 00 00 00 90 c1 03 00 03 00 ................ 0010 0b 00 00 00 0a 00 01 00 ff 00 00 00 61 88 bf 62 ............a..b 0020 1a 82 ed 93 b4 09 1a 82 ed 93 b4 01 71 6d 27 13 ............qm'. 0030 c6 63 36 ce f4 af 0c b5 5c a6 36 ce f4 28 b4 00 .c6.....\.6..(.. 0040 00 00 af 0c b5 5c a6 36 ce f4 00 25 38 93 17 66 .....\.6...%8..f 0050 d9 02 dc ... Decrypted ZigBee Payload (4 bytes): 0000 07 82 ed 00 .... No. Time Source Destination Protocol Length Info 6 14:53:31,340882 IEEE 802.15.4 31 Ack Frame 6: 31 bytes on wire (248 bits), 31 bytes captured (248 bits) on interface wireshark_extcap1640, id 0 IEEE 802.15.4 TAP IEEE 802.15.4 Ack, Sequence Number: 191 Frame Control Field: 0x0002, Frame Type: Ack, Destination Addressing Mode: None, Frame Version: IEEE Std 802.15.4-2003, Source Addressing Mode: None Sequence Number: 191 0000 00 00 1c 00 01 00 04 00 00 00 20 c2 03 00 03 00 .......... ..... 0010 0b 00 00 00 0a 00 01 00 d4 00 00 00 02 00 bf ............... No. Time Source Destination Protocol Length Info 7 14:53:31,348464 0xb493 0x0000 ZigBee 110 APS: Command Frame 7: 110 bytes on wire (880 bits), 110 bytes captured (880 bits) on interface wireshark_extcap1640, id 0 IEEE 802.15.4 TAP IEEE 802.15.4 Data, Dst: 0x0000, Src: 0xb493 Frame Control Field: 0x8861, Frame Type: Data, Acknowledge Request, PAN ID Compression, Destination Addressing Mode: Short/16-bit, Frame Version: IEEE Std 802.15.4-2003, Source Addressing Mode: Short/16-bit Sequence Number: 192 Destination PAN: 0x1a62 Destination: 0x0000 Source: 0xb493 [Extended Source: NordicSe_a6:5c:b5:0c:af (f4:ce:36:a6:5c:b5:0c:af)] [Origin: 5] ZigBee Network Layer Data, Dst: 0x0000, Src: 0xb493 Frame Control Field: 0x1a48, Frame Type: Data, Discover Route: Enable, Security, Destination, Extended Source Data Destination: 0x0000 Source: 0xb493 Radius: 30 Sequence Number: 114 Destination: TexasIns_00:1c:c0:f2:9d (00:12:4b:00:1c:c0:f2:9d) Extended Source: NordicSe_a6:5c:b5:0c:af (f4:ce:36:a6:5c:b5:0c:af) ZigBee Security Header Security Control Field: 0x28, Key Id: Network Key, Extended Nonce Frame Counter: 181 Extended Source: NordicSe_a6:5c:b5:0c:af (f4:ce:36:a6:5c:b5:0c:af) Key Sequence Number: 0 Message Integrity Code: 5af6c807 ZigBee Application Support Layer Command Frame Control Field: Command (0x21) .... ..01 = Frame Type: Command (0x1) .... 00.. = Delivery Mode: Unicast (0x0) ..1. .... = Security: True .0.. .... = Acknowledgement Request: False 0... .... = Extended Header: False Counter: 168 ZigBee Security Header Security Control Field: 0x20, Key Id: Link Key, Extended Nonce Frame Counter: 4 Extended Source: NordicSe_a6:5c:b5:0c:af (f4:ce:36:a6:5c:b5:0c:af) Message Integrity Code: 63a4b238 [Expert Info (Warning/Undecoded): Encrypted Payload] Data (12 bytes) Data: 6ff64d927593e5b6867c2760 [Length: 12] Frame (110 bytes): 0000 00 00 1c 00 01 00 04 00 00 00 98 c1 03 00 03 00 ................ 0010 0b 00 00 00 0a 00 01 00 ff 00 00 00 61 88 c0 62 ............a..b 0020 1a 00 00 93 b4 48 1a 00 00 93 b4 1e 72 9d f2 c0 .....H......r... 0030 1c 00 4b 12 00 af 0c b5 5c a6 36 ce f4 28 b5 00 ..K.....\.6..(.. 0040 00 00 af 0c b5 5c a6 36 ce f4 00 28 cc ed 3d 4b .....\.6...(..=K 0050 20 a2 78 94 89 67 83 3d 8f d0 5c 7c 68 65 28 6a .x..g.=..\|he(j 0060 92 b6 fd 06 7c 96 0e db a2 5a 5a f6 c8 07 ....|....ZZ... Decrypted ZigBee Payload (31 bytes): 0000 21 a8 20 04 00 00 00 af 0c b5 5c a6 36 ce f4 6f !. .......\.6..o 0010 f6 4d 92 75 93 e5 b6 86 7c 27 60 63 a4 b2 38 .M.u....|'`c..8 No. Time Source Destination Protocol Length Info 8 14:53:31,351562 0xed82 Broadcast ZigBee ZDP 91 Device Announcement, Nwk Addr: 0xed82, Ext Addr: NordicSe_63:c6:13:27:6d Frame 8: 91 bytes on wire (728 bits), 91 bytes captured (728 bits) on interface wireshark_extcap1640, id 0 IEEE 802.15.4 TAP IEEE 802.15.4 Data, Dst: 0xb493, Src: 0xed82 Frame Control Field: 0x8861, Frame Type: Data, Acknowledge Request, PAN ID Compression, Destination Addressing Mode: Short/16-bit, Frame Version: IEEE Std 802.15.4-2003, Source Addressing Mode: Short/16-bit Sequence Number: 132 Destination PAN: 0x1a62 Destination: 0xb493 Source: 0xed82 [Extended Source: NordicSe_63:c6:13:27:6d (f4:ce:36:63:c6:13:27:6d)] [Origin: 3] ZigBee Network Layer Data, Dst: Broadcast, Src: 0xed82 Frame Control Field: 0x1208, Frame Type: Data, Discover Route: Suppress, Security, Extended Source Data Destination: 0xfffd Source: 0xed82 Radius: 30 Sequence Number: 1 Extended Source: NordicSe_63:c6:13:27:6d (f4:ce:36:63:c6:13:27:6d) ZigBee Security Header Security Control Field: 0x28, Key Id: Network Key, Extended Nonce Frame Counter: 1025 Extended Source: NordicSe_63:c6:13:27:6d (f4:ce:36:63:c6:13:27:6d) Key Sequence Number: 0 Message Integrity Code: 2f5cf9a8 ZigBee Application Support Layer Data, Dst Endpt: 0, Src Endpt: 0 Frame Control Field: Data (0x08) .... ..00 = Frame Type: Data (0x0) .... 10.. = Delivery Mode: Broadcast (0x2) ..0. .... = Security: False .0.. .... = Acknowledgement Request: False 0... .... = Extended Header: False Destination Endpoint: 0 Device Announcement (Cluster ID: 0x0013) Profile: ZigBee Device Profile (0x0000) Source Endpoint: 0 Counter: 173 ZigBee Device Profile, Device Announcement, Nwk Addr: 0xed82, Ext Addr: NordicSe_63:c6:13:27:6d Sequence Number: 1 Nwk Addr of Interest: 0xed82 Extended Address: NordicSe_63:c6:13:27:6d (f4:ce:36:63:c6:13:27:6d) Capability Information: 0x8c .... ...0 = Alternate Coordinator: False .... ..0. = Full-Function Device: False .... .1.. = AC Power: True .... 1... = Rx On When Idle: True .0.. .... = Security Capability: False 1... .... = Allocate Short Address: True Frame (91 bytes): 0000 00 00 1c 00 01 00 04 00 00 00 20 c2 03 00 03 00 .......... ..... 0010 0b 00 00 00 0a 00 01 00 d4 00 00 00 61 88 84 62 ............a..b 0020 1a 93 b4 82 ed 08 12 fd ff 82 ed 1e 01 6d 27 13 .............m'. 0030 c6 63 36 ce f4 28 01 04 00 00 6d 27 13 c6 63 36 .c6..(....m'..c6 0040 ce f4 00 5d e9 41 08 b3 6c 95 9d 86 89 7a b0 6b ...].A..l....z.k 0050 41 a8 ac c9 04 4d 4f 2f 5c f9 a8 A....MO/\.. Decrypted ZigBee Payload (20 bytes): 0000 08 00 13 00 00 00 00 ad 01 82 ed 6d 27 13 c6 63 ...........m'..c 0010 36 ce f4 8c 6... No. Time Source Destination Protocol Length Info 9 14:53:31,352106 IEEE 802.15.4 31 Ack Frame 9: 31 bytes on wire (248 bits), 31 bytes captured (248 bits) on interface wireshark_extcap1640, id 0 IEEE 802.15.4 TAP IEEE 802.15.4 Ack, Sequence Number: 132 Frame Control Field: 0x0002, Frame Type: Ack, Destination Addressing Mode: None, Frame Version: IEEE Std 802.15.4-2003, Source Addressing Mode: None Sequence Number: 132 0000 00 00 1c 00 01 00 04 00 00 00 90 c1 03 00 03 00 ................ 0010 0b 00 00 00 0a 00 01 00 ff 00 00 00 02 00 84 ............... No. Time Source Destination Protocol Length Info 10 14:53:31,358353 0xb493 0x0000 ZigBee 110 APS: Command Frame 10: 110 bytes on wire (880 bits), 110 bytes captured (880 bits) on interface wireshark_extcap1640, id 0 IEEE 802.15.4 TAP IEEE 802.15.4 Data, Dst: 0x0000, Src: 0xb493 Frame Control Field: 0x8861, Frame Type: Data, Acknowledge Request, PAN ID Compression, Destination Addressing Mode: Short/16-bit, Frame Version: IEEE Std 802.15.4-2003, Source Addressing Mode: Short/16-bit Sequence Number: 192 Destination PAN: 0x1a62 Destination: 0x0000 Source: 0xb493 [Extended Source: NordicSe_a6:5c:b5:0c:af (f4:ce:36:a6:5c:b5:0c:af)] [Origin: 5] ZigBee Network Layer Data, Dst: 0x0000, Src: 0xb493 Frame Control Field: 0x1a48, Frame Type: Data, Discover Route: Enable, Security, Destination, Extended Source Data Destination: 0x0000 Source: 0xb493 Radius: 30 Sequence Number: 114 Destination: TexasIns_00:1c:c0:f2:9d (00:12:4b:00:1c:c0:f2:9d) Extended Source: NordicSe_a6:5c:b5:0c:af (f4:ce:36:a6:5c:b5:0c:af) ZigBee Security Header Security Control Field: 0x28, Key Id: Network Key, Extended Nonce Frame Counter: 181 Extended Source: NordicSe_a6:5c:b5:0c:af (f4:ce:36:a6:5c:b5:0c:af) Key Sequence Number: 0 Message Integrity Code: 5af6c807 ZigBee Application Support Layer Command Frame Control Field: Command (0x21) .... ..01 = Frame Type: Command (0x1) .... 00.. = Delivery Mode: Unicast (0x0) ..1. .... = Security: True .0.. .... = Acknowledgement Request: False 0... .... = Extended Header: False Counter: 168 ZigBee Security Header Security Control Field: 0x20, Key Id: Link Key, Extended Nonce Frame Counter: 4 Extended Source: NordicSe_a6:5c:b5:0c:af (f4:ce:36:a6:5c:b5:0c:af) Message Integrity Code: 63a4b238 [Expert Info (Warning/Undecoded): Encrypted Payload] Data (12 bytes) Data: 6ff64d927593e5b6867c2760 [Length: 12] Frame (110 bytes): 0000 00 00 1c 00 01 00 04 00 00 00 98 c1 03 00 03 00 ................ 0010 0b 00 00 00 0a 00 01 00 ff 00 00 00 61 88 c0 62 ............a..b 0020 1a 00 00 93 b4 48 1a 00 00 93 b4 1e 72 9d f2 c0 .....H......r... 0030 1c 00 4b 12 00 af 0c b5 5c a6 36 ce f4 28 b5 00 ..K.....\.6..(.. 0040 00 00 af 0c b5 5c a6 36 ce f4 00 28 cc ed 3d 4b .....\.6...(..=K 0050 20 a2 78 94 89 67 83 3d 8f d0 5c 7c 68 65 28 6a .x..g.=..\|he(j 0060 92 b6 fd 06 7c 96 0e db a2 5a 5a f6 c8 07 ....|....ZZ... Decrypted ZigBee Payload (31 bytes): 0000 21 a8 20 04 00 00 00 af 0c b5 5c a6 36 ce f4 6f !. .......\.6..o 0010 f6 4d 92 75 93 e5 b6 86 7c 27 60 63 a4 b2 38 .M.u....|'`c..8 No. Time Source Destination Protocol Length Info 11 14:53:31,358897 IEEE 802.15.4 31 Ack Frame 11: 31 bytes on wire (248 bits), 31 bytes captured (248 bits) on interface wireshark_extcap1640, id 0 IEEE 802.15.4 TAP IEEE 802.15.4 Ack, Sequence Number: 192 Frame Control Field: 0x0002, Frame Type: Ack, Destination Addressing Mode: None, Frame Version: IEEE Std 802.15.4-2003, Source Addressing Mode: None Sequence Number: 192 0000 00 00 1c 00 01 00 04 00 00 00 2c c2 03 00 03 00 ..........,..... 0010 0b 00 00 00 0a 00 01 00 c8 00 00 00 02 00 c0 ............... No. Time Source Destination Protocol Length Info 12 14:53:31,445910 0xed82 0xb493 ZigBee 82 End Device Timeout Request Frame 12: 82 bytes on wire (656 bits), 82 bytes captured (656 bits) on interface wireshark_extcap1640, id 0 IEEE 802.15.4 TAP IEEE 802.15.4 Data, Dst: 0xb493, Src: 0xed82 Frame Control Field: 0x8861, Frame Type: Data, Acknowledge Request, PAN ID Compression, Destination Addressing Mode: Short/16-bit, Frame Version: IEEE Std 802.15.4-2003, Source Addressing Mode: Short/16-bit Sequence Number: 133 Destination PAN: 0x1a62 Destination: 0xb493 Source: 0xed82 [Extended Source: NordicSe_63:c6:13:27:6d (f4:ce:36:63:c6:13:27:6d)] [Origin: 3] ZigBee Network Layer Command, Dst: 0xb493, Src: 0xed82 Frame Control Field: 0x1a09, Frame Type: Command, Discover Route: Suppress, Security, Destination, Extended Source Command Destination: 0xb493 Source: 0xed82 Radius: 1 Sequence Number: 2 Destination: NordicSe_a6:5c:b5:0c:af (f4:ce:36:a6:5c:b5:0c:af) Extended Source: NordicSe_63:c6:13:27:6d (f4:ce:36:63:c6:13:27:6d) ZigBee Security Header Security Control Field: 0x28, Key Id: Network Key, Extended Nonce Frame Counter: 1026 Extended Source: NordicSe_63:c6:13:27:6d (f4:ce:36:63:c6:13:27:6d) Key Sequence Number: 0 Message Integrity Code: 1c62cc3b Command Frame: End Device Timeout Request Command Identifier: End Device Timeout Request (0x0b) Requested Timeout Enumeration: 64 min (6) End Device Configuration: 0x00 Frame (82 bytes): 0000 00 00 1c 00 01 00 04 00 00 00 20 c2 03 00 03 00 .......... ..... 0010 0b 00 00 00 0a 00 01 00 d0 00 00 00 61 88 85 62 ............a..b 0020 1a 93 b4 82 ed 09 1a 93 b4 82 ed 01 02 af 0c b5 ................ 0030 5c a6 36 ce f4 6d 27 13 c6 63 36 ce f4 28 02 04 \.6..m'..c6..(.. 0040 00 00 6d 27 13 c6 63 36 ce f4 00 9e 9d 73 1c 62 ..m'..c6.....s.b 0050 cc 3b .; Decrypted ZigBee Payload (3 bytes): 0000 0b 06 00 ... No. Time Source Destination Protocol Length Info 13 14:53:31,446455 IEEE 802.15.4 31 Ack Frame 13: 31 bytes on wire (248 bits), 31 bytes captured (248 bits) on interface wireshark_extcap1640, id 0 IEEE 802.15.4 TAP IEEE 802.15.4 Ack, Sequence Number: 133 Frame Control Field: 0x0002, Frame Type: Ack, Destination Addressing Mode: None, Frame Version: IEEE Std 802.15.4-2003, Source Addressing Mode: None Sequence Number: 133 0000 00 00 1c 00 01 00 04 00 00 00 90 c1 03 00 03 00 ................ 0010 0b 00 00 00 0a 00 01 00 ff 00 00 00 02 00 85 ............... No. Time Source Destination Protocol Length Info 14 14:53:31,456243 0xb493 0xed82 ZigBee 82 End Device Timeout Response, Success Frame 14: 82 bytes on wire (656 bits), 82 bytes captured (656 bits) on interface wireshark_extcap1640, id 0 IEEE 802.15.4 TAP IEEE 802.15.4 Data, Dst: 0xed82, Src: 0xb493 Frame Control Field: 0x8861, Frame Type: Data, Acknowledge Request, PAN ID Compression, Destination Addressing Mode: Short/16-bit, Frame Version: IEEE Std 802.15.4-2003, Source Addressing Mode: Short/16-bit Sequence Number: 194 Destination PAN: 0x1a62 Destination: 0xed82 Source: 0xb493 [Extended Source: NordicSe_a6:5c:b5:0c:af (f4:ce:36:a6:5c:b5:0c:af)] [Origin: 5] ZigBee Network Layer Command, Dst: 0xed82, Src: 0xb493 Frame Control Field: 0x1a09, Frame Type: Command, Discover Route: Suppress, Security, Destination, Extended Source Command Destination: 0xed82 Source: 0xb493 Radius: 1 Sequence Number: 115 Destination: NordicSe_63:c6:13:27:6d (f4:ce:36:63:c6:13:27:6d) Extended Source: NordicSe_a6:5c:b5:0c:af (f4:ce:36:a6:5c:b5:0c:af) ZigBee Security Header Security Control Field: 0x28, Key Id: Network Key, Extended Nonce Frame Counter: 183 Extended Source: NordicSe_a6:5c:b5:0c:af (f4:ce:36:a6:5c:b5:0c:af) Key Sequence Number: 0 Message Integrity Code: fdffb631 Command Frame: End Device Timeout Response, Success Command Identifier: End Device Timeout Response (0x0c) Status: Success (0) Parent Information: 0x01, MAC Data Poll Keepalive Frame (82 bytes): 0000 00 00 1c 00 01 00 04 00 00 00 98 c1 03 00 03 00 ................ 0010 0b 00 00 00 0a 00 01 00 ff 00 00 00 61 88 c2 62 ............a..b 0020 1a 82 ed 93 b4 09 1a 82 ed 93 b4 01 73 6d 27 13 ............sm'. 0030 c6 63 36 ce f4 af 0c b5 5c a6 36 ce f4 28 b7 00 .c6.....\.6..(.. 0040 00 00 af 0c b5 5c a6 36 ce f4 00 30 91 2a fd ff .....\.6...0.*.. 0050 b6 31 .1 Decrypted ZigBee Payload (3 bytes): 0000 0c 00 01 ... No. Time Source Destination Protocol Length Info 15 14:53:31,460360 IEEE 802.15.4 31 Ack Frame 15: 31 bytes on wire (248 bits), 31 bytes captured (248 bits) on interface wireshark_extcap1640, id 0 IEEE 802.15.4 TAP IEEE 802.15.4 Ack, Sequence Number: 194 Frame Control Field: 0x0002, Frame Type: Ack, Destination Addressing Mode: None, Frame Version: IEEE Std 802.15.4-2003, Source Addressing Mode: None Sequence Number: 194 0000 00 00 1c 00 01 00 04 00 00 00 20 c2 03 00 03 00 .......... ..... 0010 0b 00 00 00 0a 00 01 00 d0 00 00 00 02 00 c2 ............... No. Time Source Destination Protocol Length Info 16 14:53:41,568256 0xb493 0xed82 ZigBee ZDP 109 Bind Request, Level Control (Cluster ID: 0x0008) Src: NordicSe_63:c6:13:27:6d, Dst: NordicSe_a6:5c:b5:0c:af Frame 16: 109 bytes on wire (872 bits), 109 bytes captured (872 bits) on interface wireshark_extcap1640, id 0 IEEE 802.15.4 TAP IEEE 802.15.4 Data, Dst: 0xed82, Src: 0xb493 Frame Control Field: 0x8861, Frame Type: Data, Acknowledge Request, PAN ID Compression, Destination Addressing Mode: Short/16-bit, Frame Version: IEEE Std 802.15.4-2003, Source Addressing Mode: Short/16-bit Sequence Number: 196 Destination PAN: 0x1a62 Destination: 0xed82 Source: 0xb493 [Extended Source: NordicSe_a6:5c:b5:0c:af (f4:ce:36:a6:5c:b5:0c:af)] [Origin: 5] ZigBee Network Layer Data, Dst: 0xed82, Src: 0xb493 Frame Control Field: 0x1a48, Frame Type: Data, Discover Route: Enable, Security, Destination, Extended Source Data Destination: 0xed82 Source: 0xb493 Radius: 30 Sequence Number: 116 Destination: NordicSe_63:c6:13:27:6d (f4:ce:36:63:c6:13:27:6d) Extended Source: NordicSe_a6:5c:b5:0c:af (f4:ce:36:a6:5c:b5:0c:af) ZigBee Security Header Security Control Field: 0x28, Key Id: Network Key, Extended Nonce Frame Counter: 185 Extended Source: NordicSe_a6:5c:b5:0c:af (f4:ce:36:a6:5c:b5:0c:af) Key Sequence Number: 0 Message Integrity Code: 4f3de589 ZigBee Application Support Layer Data, Dst Endpt: 0, Src Endpt: 0 Frame Control Field: Data (0x40) .... ..00 = Frame Type: Data (0x0) .... 00.. = Delivery Mode: Unicast (0x0) ..0. .... = Security: False .1.. .... = Acknowledgement Request: True 0... .... = Extended Header: False Destination Endpoint: 0 Bind Request (Cluster ID: 0x0021) Profile: ZigBee Device Profile (0x0000) Source Endpoint: 0 Counter: 169 ZigBee Device Profile, Bind Request, Level Control (Cluster ID: 0x0008) Src: NordicSe_63:c6:13:27:6d, Dst: NordicSe_a6:5c:b5:0c:af Sequence Number: 6 Source: NordicSe_63:c6:13:27:6d (f4:ce:36:63:c6:13:27:6d) Source Endpoint: 10 Cluster: 0x0008 (Level Control) Address Mode: Unicast (3) Destination: NordicSe_a6:5c:b5:0c:af (f4:ce:36:a6:5c:b5:0c:af) Destination Endpoint: 64 Frame (109 bytes): 0000 00 00 1c 00 01 00 04 00 00 00 98 c1 03 00 03 00 ................ 0010 0b 00 00 00 0a 00 01 00 ff 00 00 00 61 88 c4 62 ............a..b 0020 1a 82 ed 93 b4 48 1a 82 ed 93 b4 1e 74 6d 27 13 .....H......tm'. 0030 c6 63 36 ce f4 af 0c b5 5c a6 36 ce f4 28 b9 00 .c6.....\.6..(.. 0040 00 00 af 0c b5 5c a6 36 ce f4 00 e2 2f 4f 6c 0a .....\.6..../Ol. 0050 15 5d 6c b8 ac 1a 0b c3 b0 11 dc 19 6d 86 88 77 .]l.........m..w 0060 de ce e5 40 67 9c af 5c 67 4f 3d e5 89 ...@g..\gO=.. Decrypted ZigBee Payload (30 bytes): 0000 40 00 21 00 00 00 00 a9 06 6d 27 13 c6 63 36 ce @.!......m'..c6. 0010 f4 0a 08 00 03 af 0c b5 5c a6 36 ce f4 40 ........\.6..@ No. Time Source Destination Protocol Length Info 17 14:53:41,568801 IEEE 802.15.4 31 Ack Frame 17: 31 bytes on wire (248 bits), 31 bytes captured (248 bits) on interface wireshark_extcap1640, id 0 IEEE 802.15.4 TAP IEEE 802.15.4 Ack, Sequence Number: 196 Frame Control Field: 0x0002, Frame Type: Ack, Destination Addressing Mode: None, Frame Version: IEEE Std 802.15.4-2003, Source Addressing Mode: None Sequence Number: 196 0000 00 00 1c 00 01 00 04 00 00 00 24 c2 03 00 03 00 ..........$..... 0010 0b 00 00 00 0a 00 01 00 d0 00 00 00 02 00 c4 ............... No. Time Source Destination Protocol Length Info 18 14:53:41,576725 0xed82 0xb493 ZigBee 87 APS: Ack, Dst Endpt: 0, Src Endpt: 0 Frame 18: 87 bytes on wire (696 bits), 87 bytes captured (696 bits) on interface wireshark_extcap1640, id 0 IEEE 802.15.4 TAP IEEE 802.15.4 Data, Dst: 0xb493, Src: 0xed82 Frame Control Field: 0x8861, Frame Type: Data, Acknowledge Request, PAN ID Compression, Destination Addressing Mode: Short/16-bit, Frame Version: IEEE Std 802.15.4-2003, Source Addressing Mode: Short/16-bit Sequence Number: 155 Destination PAN: 0x1a62 Destination: 0xb493 Source: 0xed82 [Extended Source: NordicSe_63:c6:13:27:6d (f4:ce:36:63:c6:13:27:6d)] [Origin: 3] ZigBee Network Layer Data, Dst: 0xb493, Src: 0xed82 Frame Control Field: 0x3a48, Frame Type: Data, Discover Route: Enable, Security, Destination, Extended Source, End Device Initiator Data Destination: 0xb493 Source: 0xed82 Radius: 30 Sequence Number: 3 Destination: NordicSe_a6:5c:b5:0c:af (f4:ce:36:a6:5c:b5:0c:af) Extended Source: NordicSe_63:c6:13:27:6d (f4:ce:36:63:c6:13:27:6d) ZigBee Security Header Security Control Field: 0x28, Key Id: Network Key, Extended Nonce Frame Counter: 1027 Extended Source: NordicSe_63:c6:13:27:6d (f4:ce:36:63:c6:13:27:6d) Key Sequence Number: 0 Message Integrity Code: 41f51950 ZigBee Application Support Layer Ack, Dst Endpt: 0, Src Endpt: 0 Frame Control Field: Ack (0x02) .... ..10 = Frame Type: Ack (0x2) .... 00.. = Delivery Mode: Unicast (0x0) ...0 .... = Acknowledgement Format: False ..0. .... = Security: False .0.. .... = Acknowledgement Request: False 0... .... = Extended Header: False Destination Endpoint: 0 Bind Request (Cluster ID: 0x0021) Profile: ZigBee Device Profile (0x0000) Source Endpoint: 0 Counter: 169 Frame (87 bytes): 0000 00 00 1c 00 01 00 04 00 00 00 24 c2 03 00 03 00 ..........$..... 0010 0b 00 00 00 0a 00 01 00 cc 00 00 00 61 88 9b 62 ............a..b 0020 1a 93 b4 82 ed 48 3a 93 b4 82 ed 1e 03 af 0c b5 .....H:......... 0030 5c a6 36 ce f4 6d 27 13 c6 63 36 ce f4 28 03 04 \.6..m'..c6..(.. 0040 00 00 6d 27 13 c6 63 36 ce f4 00 6b fe d9 2e c5 ..m'..c6...k.... 0050 9b 71 83 41 f5 19 50 .q.A..P Decrypted ZigBee Payload (8 bytes): 0000 02 00 21 00 00 00 00 a9 ..!..... No. Time Source Destination Protocol Length Info 19 14:53:41,577270 IEEE 802.15.4 31 Ack Frame 19: 31 bytes on wire (248 bits), 31 bytes captured (248 bits) on interface wireshark_extcap1640, id 0 IEEE 802.15.4 TAP IEEE 802.15.4 Ack, Sequence Number: 155 Frame Control Field: 0x0002, Frame Type: Ack, Destination Addressing Mode: None, Frame Version: IEEE Std 802.15.4-2003, Source Addressing Mode: None Sequence Number: 155 0000 00 00 1c 00 01 00 04 00 00 00 90 c1 03 00 03 00 ................ 0010 0b 00 00 00 0a 00 01 00 ff 00 00 00 02 00 9b ............... No. Time Source Destination Protocol Length Info 20 14:53:41,580696 0xed82 0xb493 ZigBee ZDP 89 Bind Response, Status: Success Frame 20: 89 bytes on wire (712 bits), 89 bytes captured (712 bits) on interface wireshark_extcap1640, id 0 IEEE 802.15.4 TAP IEEE 802.15.4 Data, Dst: 0xb493, Src: 0xed82 Frame Control Field: 0x8861, Frame Type: Data, Acknowledge Request, PAN ID Compression, Destination Addressing Mode: Short/16-bit, Frame Version: IEEE Std 802.15.4-2003, Source Addressing Mode: Short/16-bit Sequence Number: 156 Destination PAN: 0x1a62 Destination: 0xb493 Source: 0xed82 [Extended Source: NordicSe_63:c6:13:27:6d (f4:ce:36:63:c6:13:27:6d)] [Origin: 3] ZigBee Network Layer Data, Dst: 0xb493, Src: 0xed82 Frame Control Field: 0x3a48, Frame Type: Data, Discover Route: Enable, Security, Destination, Extended Source, End Device Initiator Data Destination: 0xb493 Source: 0xed82 Radius: 30 Sequence Number: 4 Destination: NordicSe_a6:5c:b5:0c:af (f4:ce:36:a6:5c:b5:0c:af) Extended Source: NordicSe_63:c6:13:27:6d (f4:ce:36:63:c6:13:27:6d) ZigBee Security Header Security Control Field: 0x28, Key Id: Network Key, Extended Nonce Frame Counter: 1028 Extended Source: NordicSe_63:c6:13:27:6d (f4:ce:36:63:c6:13:27:6d) Key Sequence Number: 0 Message Integrity Code: 9a9e0b30 ZigBee Application Support Layer Data, Dst Endpt: 0, Src Endpt: 0 Frame Control Field: Data (0x40) .... ..00 = Frame Type: Data (0x0) .... 00.. = Delivery Mode: Unicast (0x0) ..0. .... = Security: False .1.. .... = Acknowledgement Request: True 0... .... = Extended Header: False Destination Endpoint: 0 Bind Response (Cluster ID: 0x8021) Profile: ZigBee Device Profile (0x0000) Source Endpoint: 0 Counter: 174 ZigBee Device Profile, Bind Response, Status: Success Sequence Number: 6 Status: Success (0) Frame (89 bytes): 0000 00 00 1c 00 01 00 04 00 00 00 24 c2 03 00 03 00 ..........$..... 0010 0b 00 00 00 0a 00 01 00 d0 00 00 00 61 88 9c 62 ............a..b 0020 1a 93 b4 82 ed 48 3a 93 b4 82 ed 1e 04 af 0c b5 .....H:......... 0030 5c a6 36 ce f4 6d 27 13 c6 63 36 ce f4 28 04 04 \.6..m'..c6..(.. 0040 00 00 6d 27 13 c6 63 36 ce f4 00 39 22 b7 5f be ..m'..c6...9"._. 0050 85 1b ef 3a a4 9a 9e 0b 30 ...:....0 Decrypted ZigBee Payload (10 bytes): 0000 40 00 21 80 00 00 00 ae 06 00 @.!....... No. Time Source Destination Protocol Length Info 21 14:53:41,581241 IEEE 802.15.4 31 Ack Frame 21: 31 bytes on wire (248 bits), 31 bytes captured (248 bits) on interface wireshark_extcap1640, id 0 IEEE 802.15.4 TAP IEEE 802.15.4 Ack, Sequence Number: 156 Frame Control Field: 0x0002, Frame Type: Ack, Destination Addressing Mode: None, Frame Version: IEEE Std 802.15.4-2003, Source Addressing Mode: None Sequence Number: 156 0000 00 00 1c 00 01 00 04 00 00 00 90 c1 03 00 03 00 ................ 0010 0b 00 00 00 0a 00 01 00 ff 00 00 00 02 00 9c ............... No. Time Source Destination Protocol Length Info 22 14:53:41,585282 0xb493 0xed82 ZigBee 87 APS: Ack, Dst Endpt: 0, Src Endpt: 0 Frame 22: 87 bytes on wire (696 bits), 87 bytes captured (696 bits) on interface wireshark_extcap1640, id 0 IEEE 802.15.4 TAP IEEE 802.15.4 Data, Dst: 0xed82, Src: 0xb493 Frame Control Field: 0x8861, Frame Type: Data, Acknowledge Request, PAN ID Compression, Destination Addressing Mode: Short/16-bit, Frame Version: IEEE Std 802.15.4-2003, Source Addressing Mode: Short/16-bit Sequence Number: 197 Destination PAN: 0x1a62 Destination: 0xed82 Source: 0xb493 [Extended Source: NordicSe_a6:5c:b5:0c:af (f4:ce:36:a6:5c:b5:0c:af)] [Origin: 5] ZigBee Network Layer Data, Dst: 0xed82, Src: 0xb493 Frame Control Field: 0x1a48, Frame Type: Data, Discover Route: Enable, Security, Destination, Extended Source Data Destination: 0xed82 Source: 0xb493 Radius: 30 Sequence Number: 117 Destination: NordicSe_63:c6:13:27:6d (f4:ce:36:63:c6:13:27:6d) Extended Source: NordicSe_a6:5c:b5:0c:af (f4:ce:36:a6:5c:b5:0c:af) ZigBee Security Header Security Control Field: 0x28, Key Id: Network Key, Extended Nonce Frame Counter: 186 Extended Source: NordicSe_a6:5c:b5:0c:af (f4:ce:36:a6:5c:b5:0c:af) Key Sequence Number: 0 Message Integrity Code: 42372382 ZigBee Application Support Layer Ack, Dst Endpt: 0, Src Endpt: 0 Frame Control Field: Ack (0x02) .... ..10 = Frame Type: Ack (0x2) .... 00.. = Delivery Mode: Unicast (0x0) ...0 .... = Acknowledgement Format: False ..0. .... = Security: False .0.. .... = Acknowledgement Request: False 0... .... = Extended Header: False Destination Endpoint: 0 Bind Response (Cluster ID: 0x8021) Profile: ZigBee Device Profile (0x0000) Source Endpoint: 0 Counter: 174 Frame (87 bytes): 0000 00 00 1c 00 01 00 04 00 00 00 98 c1 03 00 03 00 ................ 0010 0b 00 00 00 0a 00 01 00 ff 00 00 00 61 88 c5 62 ............a..b 0020 1a 82 ed 93 b4 48 1a 82 ed 93 b4 1e 75 6d 27 13 .....H......um'. 0030 c6 63 36 ce f4 af 0c b5 5c a6 36 ce f4 28 ba 00 .c6.....\.6..(.. 0040 00 00 af 0c b5 5c a6 36 ce f4 00 75 8a 21 5e e9 .....\.6...u.!^. 0050 b8 fd 15 42 37 23 82 ...B7#. Decrypted ZigBee Payload (8 bytes): 0000 02 00 21 80 00 00 00 ae ..!..... No. Time Source Destination Protocol Length Info 23 14:53:41,585827 IEEE 802.15.4 31 Ack Frame 23: 31 bytes on wire (248 bits), 31 bytes captured (248 bits) on interface wireshark_extcap1640, id 0 IEEE 802.15.4 TAP IEEE 802.15.4 Ack, Sequence Number: 197 Frame Control Field: 0x0002, Frame Type: Ack, Destination Addressing Mode: None, Frame Version: IEEE Std 802.15.4-2003, Source Addressing Mode: None Sequence Number: 197 0000 00 00 1c 00 01 00 04 00 00 00 24 c2 03 00 03 00 ..........$..... 0010 0b 00 00 00 0a 00 01 00 d0 00 00 00 02 00 c5 ............... No. Time Source Destination Protocol Length Info 24 14:53:43,432186 0xb493 0xed82 ZigBee HA 99 ZCL: Configure Reporting, Seq: 2 Frame 24: 99 bytes on wire (792 bits), 99 bytes captured (792 bits) on interface wireshark_extcap1640, id 0 IEEE 802.15.4 TAP IEEE 802.15.4 Data, Dst: 0xed82, Src: 0xb493 Frame Control Field: 0x8861, Frame Type: Data, Acknowledge Request, PAN ID Compression, Destination Addressing Mode: Short/16-bit, Frame Version: IEEE Std 802.15.4-2003, Source Addressing Mode: Short/16-bit Sequence Number: 198 Destination PAN: 0x1a62 Destination: 0xed82 Source: 0xb493 [Extended Source: NordicSe_a6:5c:b5:0c:af (f4:ce:36:a6:5c:b5:0c:af)] [Origin: 5] ZigBee Network Layer Data, Dst: 0xed82, Src: 0xb493 Frame Control Field: 0x1a48, Frame Type: Data, Discover Route: Enable, Security, Destination, Extended Source Data Destination: 0xed82 Source: 0xb493 Radius: 30 Sequence Number: 118 Destination: NordicSe_63:c6:13:27:6d (f4:ce:36:63:c6:13:27:6d) Extended Source: NordicSe_a6:5c:b5:0c:af (f4:ce:36:a6:5c:b5:0c:af) ZigBee Security Header Security Control Field: 0x28, Key Id: Network Key, Extended Nonce Frame Counter: 187 Extended Source: NordicSe_a6:5c:b5:0c:af (f4:ce:36:a6:5c:b5:0c:af) Key Sequence Number: 0 Message Integrity Code: 3e529ea5 ZigBee Application Support Layer Data, Dst Endpt: 10, Src Endpt: 64 Frame Control Field: Data (0x40) .... ..00 = Frame Type: Data (0x0) .... 00.. = Delivery Mode: Unicast (0x0) ..0. .... = Security: False .1.. .... = Acknowledgement Request: True 0... .... = Extended Header: False Destination Endpoint: 10 Cluster: Level Control (0x0008) Profile: Home Automation (0x0104) Source Endpoint: 64 Counter: 170 ZigBee Cluster Library Frame, Command: Configure Reporting, Seq: 2 Frame Control Field: Profile-wide (0x00) Sequence Number: 2 Command: Configure Reporting (0x06) Reporting Configuration Record Direction: Reported (0x00) Attribute: Current Level (0x0000) Data Type: 8-Bit Unsigned Integer (0x20) Current Level: 0 Minimum Interval: 1 Maximum Interval: 2 Frame (99 bytes): 0000 00 00 1c 00 01 00 04 00 00 00 98 c1 03 00 03 00 ................ 0010 0b 00 00 00 0a 00 01 00 ff 00 00 00 61 88 c6 62 ............a..b 0020 1a 82 ed 93 b4 48 1a 82 ed 93 b4 1e 76 6d 27 13 .....H......vm'. 0030 c6 63 36 ce f4 af 0c b5 5c a6 36 ce f4 28 bb 00 .c6.....\.6..(.. 0040 00 00 af 0c b5 5c a6 36 ce f4 00 6c 33 df 5c f8 .....\.6...l3.\. 0050 c2 26 0e 05 06 62 31 1c 7b 33 ef 55 98 3b 53 3e .&...b1.{3.U.;S> 0060 52 9e a5 R.. Decrypted ZigBee Payload (20 bytes): 0000 40 0a 08 00 04 01 40 aa 00 02 06 00 00 00 20 01 @.....@....... . 0010 00 02 00 00 .... No. Time Source Destination Protocol Length Info 25 14:53:43,432732 IEEE 802.15.4 31 Ack Frame 25: 31 bytes on wire (248 bits), 31 bytes captured (248 bits) on interface wireshark_extcap1640, id 0 IEEE 802.15.4 TAP IEEE 802.15.4 Ack, Sequence Number: 198 Frame Control Field: 0x0002, Frame Type: Ack, Destination Addressing Mode: None, Frame Version: IEEE Std 802.15.4-2003, Source Addressing Mode: None Sequence Number: 198 0000 00 00 1c 00 01 00 04 00 00 00 24 c2 03 00 03 00 ..........$..... 0010 0b 00 00 00 0a 00 01 00 d0 00 00 00 02 00 c6 ............... No. Time Source Destination Protocol Length Info 26 14:53:43,463870 0xed82 0xb493 ZigBee 87 APS: Ack, Dst Endpt: 64, Src Endpt: 10 Frame 26: 87 bytes on wire (696 bits), 87 bytes captured (696 bits) on interface wireshark_extcap1640, id 0 IEEE 802.15.4 TAP IEEE 802.15.4 Data, Dst: 0xb493, Src: 0xed82 Frame Control Field: 0x8861, Frame Type: Data, Acknowledge Request, PAN ID Compression, Destination Addressing Mode: Short/16-bit, Frame Version: IEEE Std 802.15.4-2003, Source Addressing Mode: Short/16-bit Sequence Number: 160 Destination PAN: 0x1a62 Destination: 0xb493 Source: 0xed82 [Extended Source: NordicSe_63:c6:13:27:6d (f4:ce:36:63:c6:13:27:6d)] [Origin: 3] ZigBee Network Layer Data, Dst: 0xb493, Src: 0xed82 Frame Control Field: 0x3a48, Frame Type: Data, Discover Route: Enable, Security, Destination, Extended Source, End Device Initiator Data Destination: 0xb493 Source: 0xed82 Radius: 30 Sequence Number: 5 Destination: NordicSe_a6:5c:b5:0c:af (f4:ce:36:a6:5c:b5:0c:af) Extended Source: NordicSe_63:c6:13:27:6d (f4:ce:36:63:c6:13:27:6d) ZigBee Security Header Security Control Field: 0x28, Key Id: Network Key, Extended Nonce Frame Counter: 1029 Extended Source: NordicSe_63:c6:13:27:6d (f4:ce:36:63:c6:13:27:6d) Key Sequence Number: 0 Message Integrity Code: 362a8481 ZigBee Application Support Layer Ack, Dst Endpt: 64, Src Endpt: 10 Frame Control Field: Ack (0x02) .... ..10 = Frame Type: Ack (0x2) .... 00.. = Delivery Mode: Unicast (0x0) ...0 .... = Acknowledgement Format: False ..0. .... = Security: False .0.. .... = Acknowledgement Request: False 0... .... = Extended Header: False Destination Endpoint: 64 Cluster: Level Control (0x0008) Profile: Home Automation (0x0104) Source Endpoint: 10 Counter: 170 Frame (87 bytes): 0000 00 00 1c 00 01 00 04 00 00 00 24 c2 03 00 03 00 ..........$..... 0010 0b 00 00 00 0a 00 01 00 d0 00 00 00 61 88 a0 62 ............a..b 0020 1a 93 b4 82 ed 48 3a 93 b4 82 ed 1e 05 af 0c b5 .....H:......... 0030 5c a6 36 ce f4 6d 27 13 c6 63 36 ce f4 28 05 04 \.6..m'..c6..(.. 0040 00 00 6d 27 13 c6 63 36 ce f4 00 42 55 a0 8b ed ..m'..c6...BU... 0050 9d 1f 82 36 2a 84 81 ...6*.. Decrypted ZigBee Payload (8 bytes): 0000 02 40 08 00 04 01 0a aa .@...... No. Time Source Destination Protocol Length Info 27 14:53:43,464415 IEEE 802.15.4 31 Ack Frame 27: 31 bytes on wire (248 bits), 31 bytes captured (248 bits) on interface wireshark_extcap1640, id 0 IEEE 802.15.4 TAP IEEE 802.15.4 Ack, Sequence Number: 160 Frame Control Field: 0x0002, Frame Type: Ack, Destination Addressing Mode: None, Frame Version: IEEE Std 802.15.4-2003, Source Addressing Mode: None Sequence Number: 160 0000 00 00 1c 00 01 00 04 00 00 00 90 c1 03 00 03 00 ................ 0010 0b 00 00 00 0a 00 01 00 ff 00 00 00 02 00 a0 ............... No. Time Source Destination Protocol Length Info 28 14:53:43,471770 0xed82 0xb493 ZigBee HA 91 ZCL: Configure Reporting Response, Seq: 2 Frame 28: 91 bytes on wire (728 bits), 91 bytes captured (728 bits) on interface wireshark_extcap1640, id 0 IEEE 802.15.4 TAP IEEE 802.15.4 Data, Dst: 0xb493, Src: 0xed82 Frame Control Field: 0x8861, Frame Type: Data, Acknowledge Request, PAN ID Compression, Destination Addressing Mode: Short/16-bit, Frame Version: IEEE Std 802.15.4-2003, Source Addressing Mode: Short/16-bit Sequence Number: 161 Destination PAN: 0x1a62 Destination: 0xb493 Source: 0xed82 [Extended Source: NordicSe_63:c6:13:27:6d (f4:ce:36:63:c6:13:27:6d)] [Origin: 3] ZigBee Network Layer Data, Dst: 0xb493, Src: 0xed82 Frame Control Field: 0x3a48, Frame Type: Data, Discover Route: Enable, Security, Destination, Extended Source, End Device Initiator Data Destination: 0xb493 Source: 0xed82 Radius: 30 Sequence Number: 6 Destination: NordicSe_a6:5c:b5:0c:af (f4:ce:36:a6:5c:b5:0c:af) Extended Source: NordicSe_63:c6:13:27:6d (f4:ce:36:63:c6:13:27:6d) ZigBee Security Header Security Control Field: 0x28, Key Id: Network Key, Extended Nonce Frame Counter: 1030 Extended Source: NordicSe_63:c6:13:27:6d (f4:ce:36:63:c6:13:27:6d) Key Sequence Number: 0 Message Integrity Code: 329324f6 ZigBee Application Support Layer Data, Dst Endpt: 64, Src Endpt: 10 Frame Control Field: Data (0x40) .... ..00 = Frame Type: Data (0x0) .... 00.. = Delivery Mode: Unicast (0x0) ..0. .... = Security: False .1.. .... = Acknowledgement Request: True 0... .... = Extended Header: False Destination Endpoint: 64 Cluster: Level Control (0x0008) Profile: Home Automation (0x0104) Source Endpoint: 10 Counter: 175 ZigBee Cluster Library Frame, Command: Configure Reporting Response, Seq: 2 Frame Control Field: Profile-wide (0x18) Sequence Number: 2 Command: Configure Reporting Response (0x07) Status: Success (0x00) Frame (91 bytes): 0000 00 00 1c 00 01 00 04 00 00 00 24 c2 03 00 03 00 ..........$..... 0010 0b 00 00 00 0a 00 01 00 d0 00 00 00 61 88 a1 62 ............a..b 0020 1a 93 b4 82 ed 48 3a 93 b4 82 ed 1e 06 af 0c b5 .....H:......... 0030 5c a6 36 ce f4 6d 27 13 c6 63 36 ce f4 28 06 04 \.6..m'..c6..(.. 0040 00 00 6d 27 13 c6 63 36 ce f4 00 11 25 86 6a ca ..m'..c6....%.j. 0050 a7 a3 f1 63 72 09 84 32 93 24 f6 ...cr..2.$. Decrypted ZigBee Payload (12 bytes): 0000 40 40 08 00 04 01 0a af 18 02 07 00 @@.......... No. Time Source Destination Protocol Length Info 29 14:53:43,472314 IEEE 802.15.4 31 Ack Frame 29: 31 bytes on wire (248 bits), 31 bytes captured (248 bits) on interface wireshark_extcap1640, id 0 IEEE 802.15.4 TAP IEEE 802.15.4 Ack, Sequence Number: 161 Frame Control Field: 0x0002, Frame Type: Ack, Destination Addressing Mode: None, Frame Version: IEEE Std 802.15.4-2003, Source Addressing Mode: None Sequence Number: 161 0000 00 00 1c 00 01 00 04 00 00 00 90 c1 03 00 03 00 ................ 0010 0b 00 00 00 0a 00 01 00 ff 00 00 00 02 00 a1 ............... No. Time Source Destination Protocol Length Info 30 14:53:43,476133 0xb493 0xed82 ZigBee 87 APS: Ack, Dst Endpt: 10, Src Endpt: 64 Frame 30: 87 bytes on wire (696 bits), 87 bytes captured (696 bits) on interface wireshark_extcap1640, id 0 IEEE 802.15.4 TAP IEEE 802.15.4 Data, Dst: 0xed82, Src: 0xb493 Frame Control Field: 0x8861, Frame Type: Data, Acknowledge Request, PAN ID Compression, Destination Addressing Mode: Short/16-bit, Frame Version: IEEE Std 802.15.4-2003, Source Addressing Mode: Short/16-bit Sequence Number: 199 Destination PAN: 0x1a62 Destination: 0xed82 Source: 0xb493 [Extended Source: NordicSe_a6:5c:b5:0c:af (f4:ce:36:a6:5c:b5:0c:af)] [Origin: 5] ZigBee Network Layer Data, Dst: 0xed82, Src: 0xb493 Frame Control Field: 0x1a48, Frame Type: Data, Discover Route: Enable, Security, Destination, Extended Source Data Destination: 0xed82 Source: 0xb493 Radius: 30 Sequence Number: 119 Destination: NordicSe_63:c6:13:27:6d (f4:ce:36:63:c6:13:27:6d) Extended Source: NordicSe_a6:5c:b5:0c:af (f4:ce:36:a6:5c:b5:0c:af) ZigBee Security Header Security Control Field: 0x28, Key Id: Network Key, Extended Nonce Frame Counter: 188 Extended Source: NordicSe_a6:5c:b5:0c:af (f4:ce:36:a6:5c:b5:0c:af) Key Sequence Number: 0 Message Integrity Code: 7681f822 ZigBee Application Support Layer Ack, Dst Endpt: 10, Src Endpt: 64 Frame Control Field: Ack (0x02) .... ..10 = Frame Type: Ack (0x2) .... 00.. = Delivery Mode: Unicast (0x0) ...0 .... = Acknowledgement Format: False ..0. .... = Security: False .0.. .... = Acknowledgement Request: False 0... .... = Extended Header: False Destination Endpoint: 10 Cluster: Level Control (0x0008) Profile: Home Automation (0x0104) Source Endpoint: 64 Counter: 175 Frame (87 bytes): 0000 00 00 1c 00 01 00 04 00 00 00 98 c1 03 00 03 00 ................ 0010 0b 00 00 00 0a 00 01 00 ff 00 00 00 61 88 c7 62 ............a..b 0020 1a 82 ed 93 b4 48 1a 82 ed 93 b4 1e 77 6d 27 13 .....H......wm'. 0030 c6 63 36 ce f4 af 0c b5 5c a6 36 ce f4 28 bc 00 .c6.....\.6..(.. 0040 00 00 af 0c b5 5c a6 36 ce f4 00 9f 33 cf 06 9d .....\.6....3... 0050 ee 3f fe 76 81 f8 22 .?.v.." Decrypted ZigBee Payload (8 bytes): 0000 02 0a 08 00 04 01 40 af ......@. No. Time Source Destination Protocol Length Info 31 14:53:43,476678 IEEE 802.15.4 31 Ack Frame 31: 31 bytes on wire (248 bits), 31 bytes captured (248 bits) on interface wireshark_extcap1640, id 0 IEEE 802.15.4 TAP IEEE 802.15.4 Ack, Sequence Number: 199 Frame Control Field: 0x0002, Frame Type: Ack, Destination Addressing Mode: None, Frame Version: IEEE Std 802.15.4-2003, Source Addressing Mode: None Sequence Number: 199 0000 00 00 1c 00 01 00 04 00 00 00 24 c2 03 00 03 00 ..........$..... 0010 0b 00 00 00 0a 00 01 00 d0 00 00 00 02 00 c7 ............... No. Time Source Destination Protocol Length Info 32 14:53:44,448834 0xed82 0xb493 ZigBee HA 94 ZCL: Report Attributes, Seq: 0 Frame 32: 94 bytes on wire (752 bits), 94 bytes captured (752 bits) on interface wireshark_extcap1640, id 0 IEEE 802.15.4 TAP IEEE 802.15.4 Data, Dst: 0xb493, Src: 0xed82 Frame Control Field: 0x8861, Frame Type: Data, Acknowledge Request, PAN ID Compression, Destination Addressing Mode: Short/16-bit, Frame Version: IEEE Std 802.15.4-2003, Source Addressing Mode: Short/16-bit Sequence Number: 165 Destination PAN: 0x1a62 Destination: 0xb493 Source: 0xed82 [Extended Source: NordicSe_63:c6:13:27:6d (f4:ce:36:63:c6:13:27:6d)] [Origin: 3] ZigBee Network Layer Data, Dst: 0xb493, Src: 0xed82 Frame Control Field: 0x3a48, Frame Type: Data, Discover Route: Enable, Security, Destination, Extended Source, End Device Initiator Data Destination: 0xb493 Source: 0xed82 Radius: 30 Sequence Number: 7 Destination: NordicSe_a6:5c:b5:0c:af (f4:ce:36:a6:5c:b5:0c:af) Extended Source: NordicSe_63:c6:13:27:6d (f4:ce:36:63:c6:13:27:6d) ZigBee Security Header Security Control Field: 0x28, Key Id: Network Key, Extended Nonce Frame Counter: 1031 Extended Source: NordicSe_63:c6:13:27:6d (f4:ce:36:63:c6:13:27:6d) Key Sequence Number: 0 Message Integrity Code: fe227e5a ZigBee Application Support Layer Data, Dst Endpt: 64, Src Endpt: 10 Frame Control Field: Data (0x40) .... ..00 = Frame Type: Data (0x0) .... 00.. = Delivery Mode: Unicast (0x0) ..0. .... = Security: False .1.. .... = Acknowledgement Request: True 0... .... = Extended Header: False Destination Endpoint: 64 Cluster: Level Control (0x0008) Profile: Home Automation (0x0104) Source Endpoint: 10 Counter: 176 ZigBee Cluster Library Frame, Command: Report Attributes, Seq: 0 Frame Control Field: Profile-wide (0x08) Sequence Number: 0 Command: Report Attributes (0x0a) Attribute Field Attribute: Current Level (0x0000) Data Type: 8-Bit Unsigned Integer (0x20) Current Level: 255 Frame (94 bytes): 0000 00 00 1c 00 01 00 04 00 00 00 24 c2 03 00 03 00 ..........$..... 0010 0b 00 00 00 0a 00 01 00 d0 00 00 00 61 88 a5 62 ............a..b 0020 1a 93 b4 82 ed 48 3a 93 b4 82 ed 1e 07 af 0c b5 .....H:......... 0030 5c a6 36 ce f4 6d 27 13 c6 63 36 ce f4 28 07 04 \.6..m'..c6..(.. 0040 00 00 6d 27 13 c6 63 36 ce f4 00 cf a2 0f aa c8 ..m'..c6........ 0050 b9 b4 ed 94 c2 2c 62 5a f5 f3 fe 22 7e 5a .....,bZ..."~Z Decrypted ZigBee Payload (15 bytes): 0000 40 40 08 00 04 01 0a b0 08 00 0a 00 00 20 ff @@........... . No. Time Source Destination Protocol Length Info 33 14:53:44,449380 IEEE 802.15.4 31 Ack Frame 33: 31 bytes on wire (248 bits), 31 bytes captured (248 bits) on interface wireshark_extcap1640, id 0 IEEE 802.15.4 TAP IEEE 802.15.4 Ack, Sequence Number: 165 Frame Control Field: 0x0002, Frame Type: Ack, Destination Addressing Mode: None, Frame Version: IEEE Std 802.15.4-2003, Source Addressing Mode: None Sequence Number: 165 0000 00 00 1c 00 01 00 04 00 00 00 90 c1 03 00 03 00 ................ 0010 0b 00 00 00 0a 00 01 00 ff 00 00 00 02 00 a5 ............... No. Time Source Destination Protocol Length Info 34 14:53:44,453849 0xb493 0xed82 ZigBee 87 APS: Ack, Dst Endpt: 10, Src Endpt: 64 Frame 34: 87 bytes on wire (696 bits), 87 bytes captured (696 bits) on interface wireshark_extcap1640, id 0 IEEE 802.15.4 TAP IEEE 802.15.4 Data, Dst: 0xed82, Src: 0xb493 Frame Control Field: 0x8861, Frame Type: Data, Acknowledge Request, PAN ID Compression, Destination Addressing Mode: Short/16-bit, Frame Version: IEEE Std 802.15.4-2003, Source Addressing Mode: Short/16-bit Sequence Number: 200 Destination PAN: 0x1a62 Destination: 0xed82 Source: 0xb493 [Extended Source: NordicSe_a6:5c:b5:0c:af (f4:ce:36:a6:5c:b5:0c:af)] [Origin: 5] ZigBee Network Layer Data, Dst: 0xed82, Src: 0xb493 Frame Control Field: 0x1a48, Frame Type: Data, Discover Route: Enable, Security, Destination, Extended Source Data Destination: 0xed82 Source: 0xb493 Radius: 30 Sequence Number: 120 Destination: NordicSe_63:c6:13:27:6d (f4:ce:36:63:c6:13:27:6d) Extended Source: NordicSe_a6:5c:b5:0c:af (f4:ce:36:a6:5c:b5:0c:af) ZigBee Security Header Security Control Field: 0x28, Key Id: Network Key, Extended Nonce Frame Counter: 189 Extended Source: NordicSe_a6:5c:b5:0c:af (f4:ce:36:a6:5c:b5:0c:af) Key Sequence Number: 0 Message Integrity Code: df123d2f ZigBee Application Support Layer Ack, Dst Endpt: 10, Src Endpt: 64 Frame Control Field: Ack (0x02) .... ..10 = Frame Type: Ack (0x2) .... 00.. = Delivery Mode: Unicast (0x0) ...0 .... = Acknowledgement Format: False ..0. .... = Security: False .0.. .... = Acknowledgement Request: False 0... .... = Extended Header: False Destination Endpoint: 10 Cluster: Level Control (0x0008) Profile: Home Automation (0x0104) Source Endpoint: 64 Counter: 176 Frame (87 bytes): 0000 00 00 1c 00 01 00 04 00 00 00 98 c1 03 00 03 00 ................ 0010 0b 00 00 00 0a 00 01 00 ff 00 00 00 61 88 c8 62 ............a..b 0020 1a 82 ed 93 b4 48 1a 82 ed 93 b4 1e 78 6d 27 13 .....H......xm'. 0030 c6 63 36 ce f4 af 0c b5 5c a6 36 ce f4 28 bd 00 .c6.....\.6..(.. 0040 00 00 af 0c b5 5c a6 36 ce f4 00 30 5b c2 3d 78 .....\.6...0[.=x 0050 61 48 dc df 12 3d 2f aH...=/ Decrypted ZigBee Payload (8 bytes): 0000 02 0a 08 00 04 01 40 b0 ......@. No. Time Source Destination Protocol Length Info 35 14:53:44,454394 IEEE 802.15.4 31 Ack Frame 35: 31 bytes on wire (248 bits), 31 bytes captured (248 bits) on interface wireshark_extcap1640, id 0 IEEE 802.15.4 TAP IEEE 802.15.4 Ack, Sequence Number: 200 Frame Control Field: 0x0002, Frame Type: Ack, Destination Addressing Mode: None, Frame Version: IEEE Std 802.15.4-2003, Source Addressing Mode: None Sequence Number: 200 0000 00 00 1c 00 01 00 04 00 00 00 24 c2 03 00 03 00 ..........$..... 0010 0b 00 00 00 0a 00 01 00 d0 00 00 00 02 00 c8 ............... No. Time Source Destination Protocol Length Info 36 14:53:46,445579 0xed82 0xb493 ZigBee HA 94 ZCL: Report Attributes, Seq: 1 Frame 36: 94 bytes on wire (752 bits), 94 bytes captured (752 bits) on interface wireshark_extcap1640, id 0 IEEE 802.15.4 TAP IEEE 802.15.4 Data, Dst: 0xb493, Src: 0xed82 Frame Control Field: 0x8861, Frame Type: Data, Acknowledge Request, PAN ID Compression, Destination Addressing Mode: Short/16-bit, Frame Version: IEEE Std 802.15.4-2003, Source Addressing Mode: Short/16-bit Sequence Number: 170 Destination PAN: 0x1a62 Destination: 0xb493 Source: 0xed82 [Extended Source: NordicSe_63:c6:13:27:6d (f4:ce:36:63:c6:13:27:6d)] [Origin: 3] ZigBee Network Layer Data, Dst: 0xb493, Src: 0xed82 Frame Control Field: 0x3a48, Frame Type: Data, Discover Route: Enable, Security, Destination, Extended Source, End Device Initiator Data Destination: 0xb493 Source: 0xed82 Radius: 30 Sequence Number: 8 Destination: NordicSe_a6:5c:b5:0c:af (f4:ce:36:a6:5c:b5:0c:af) Extended Source: NordicSe_63:c6:13:27:6d (f4:ce:36:63:c6:13:27:6d) ZigBee Security Header Security Control Field: 0x28, Key Id: Network Key, Extended Nonce Frame Counter: 1032 Extended Source: NordicSe_63:c6:13:27:6d (f4:ce:36:63:c6:13:27:6d) Key Sequence Number: 0 Message Integrity Code: 539544b8 ZigBee Application Support Layer Data, Dst Endpt: 64, Src Endpt: 10 Frame Control Field: Data (0x40) .... ..00 = Frame Type: Data (0x0) .... 00.. = Delivery Mode: Unicast (0x0) ..0. .... = Security: False .1.. .... = Acknowledgement Request: True 0... .... = Extended Header: False Destination Endpoint: 64 Cluster: Level Control (0x0008) Profile: Home Automation (0x0104) Source Endpoint: 10 Counter: 177 ZigBee Cluster Library Frame, Command: Report Attributes, Seq: 1 Frame Control Field: Profile-wide (0x08) Sequence Number: 1 Command: Report Attributes (0x0a) Attribute Field Attribute: Current Level (0x0000) Data Type: 8-Bit Unsigned Integer (0x20) Current Level: 255 Frame (94 bytes): 0000 00 00 1c 00 01 00 04 00 00 00 24 c2 03 00 03 00 ..........$..... 0010 0b 00 00 00 0a 00 01 00 d0 00 00 00 61 88 aa 62 ............a..b 0020 1a 93 b4 82 ed 48 3a 93 b4 82 ed 1e 08 af 0c b5 .....H:......... 0030 5c a6 36 ce f4 6d 27 13 c6 63 36 ce f4 28 08 04 \.6..m'..c6..(.. 0040 00 00 6d 27 13 c6 63 36 ce f4 00 1c 51 8f 2a 78 ..m'..c6....Q.*x 0050 31 1e 9f c7 42 9f 92 4f 66 8c 53 95 44 b8 1...B..Of.S.D. Decrypted ZigBee Payload (15 bytes): 0000 40 40 08 00 04 01 0a b1 08 01 0a 00 00 20 ff @@........... . No. Time Source Destination Protocol Length Info 37 14:53:46,446124 IEEE 802.15.4 31 Ack Frame 37: 31 bytes on wire (248 bits), 31 bytes captured (248 bits) on interface wireshark_extcap1640, id 0 IEEE 802.15.4 TAP IEEE 802.15.4 Ack, Sequence Number: 170 Frame Control Field: 0x0002, Frame Type: Ack, Destination Addressing Mode: None, Frame Version: IEEE Std 802.15.4-2003, Source Addressing Mode: None Sequence Number: 170 0000 00 00 1c 00 01 00 04 00 00 00 90 c1 03 00 03 00 ................ 0010 0b 00 00 00 0a 00 01 00 ff 00 00 00 02 00 aa ............... No. Time Source Destination Protocol Length Info 38 14:53:46,450913 0xb493 0xed82 ZigBee 87 APS: Ack, Dst Endpt: 10, Src Endpt: 64 Frame 38: 87 bytes on wire (696 bits), 87 bytes captured (696 bits) on interface wireshark_extcap1640, id 0 IEEE 802.15.4 TAP IEEE 802.15.4 Data, Dst: 0xed82, Src: 0xb493 Frame Control Field: 0x8861, Frame Type: Data, Acknowledge Request, PAN ID Compression, Destination Addressing Mode: Short/16-bit, Frame Version: IEEE Std 802.15.4-2003, Source Addressing Mode: Short/16-bit Sequence Number: 202 Destination PAN: 0x1a62 Destination: 0xed82 Source: 0xb493 [Extended Source: NordicSe_a6:5c:b5:0c:af (f4:ce:36:a6:5c:b5:0c:af)] [Origin: 5] ZigBee Network Layer Data, Dst: 0xed82, Src: 0xb493 Frame Control Field: 0x1a48, Frame Type: Data, Discover Route: Enable, Security, Destination, Extended Source Data Destination: 0xed82 Source: 0xb493 Radius: 30 Sequence Number: 122 Destination: NordicSe_63:c6:13:27:6d (f4:ce:36:63:c6:13:27:6d) Extended Source: NordicSe_a6:5c:b5:0c:af (f4:ce:36:a6:5c:b5:0c:af) ZigBee Security Header Security Control Field: 0x28, Key Id: Network Key, Extended Nonce Frame Counter: 191 Extended Source: NordicSe_a6:5c:b5:0c:af (f4:ce:36:a6:5c:b5:0c:af) Key Sequence Number: 0 Message Integrity Code: 4b606f33 ZigBee Application Support Layer Ack, Dst Endpt: 10, Src Endpt: 64 Frame Control Field: Ack (0x02) .... ..10 = Frame Type: Ack (0x2) .... 00.. = Delivery Mode: Unicast (0x0) ...0 .... = Acknowledgement Format: False ..0. .... = Security: False .0.. .... = Acknowledgement Request: False 0... .... = Extended Header: False Destination Endpoint: 10 Cluster: Level Control (0x0008) Profile: Home Automation (0x0104) Source Endpoint: 64 Counter: 177 Frame (87 bytes): 0000 00 00 1c 00 01 00 04 00 00 00 98 c1 03 00 03 00 ................ 0010 0b 00 00 00 0a 00 01 00 ff 00 00 00 61 88 ca 62 ............a..b 0020 1a 82 ed 93 b4 48 1a 82 ed 93 b4 1e 7a 6d 27 13 .....H......zm'. 0030 c6 63 36 ce f4 af 0c b5 5c a6 36 ce f4 28 bf 00 .c6.....\.6..(.. 0040 00 00 af 0c b5 5c a6 36 ce f4 00 c8 0f ba b6 81 .....\.6........ 0050 cc a8 e2 4b 60 6f 33 ...K`o3 Decrypted ZigBee Payload (8 bytes): 0000 02 0a 08 00 04 01 40 b1 ......@. No. Time Source Destination Protocol Length Info 39 14:53:46,451458 IEEE 802.15.4 31 Ack Frame 39: 31 bytes on wire (248 bits), 31 bytes captured (248 bits) on interface wireshark_extcap1640, id 0 IEEE 802.15.4 TAP IEEE 802.15.4 Ack, Sequence Number: 202 Frame Control Field: 0x0002, Frame Type: Ack, Destination Addressing Mode: None, Frame Version: IEEE Std 802.15.4-2003, Source Addressing Mode: None Sequence Number: 202 0000 00 00 1c 00 01 00 04 00 00 00 24 c2 03 00 03 00 ..........$..... 0010 0b 00 00 00 0a 00 01 00 d0 00 00 00 02 00 ca ............... No. Time Source Destination Protocol Length Info 40 14:53:59,847390 Broadcast IEEE 802.15.4 36 Beacon Request Frame 40: 36 bytes on wire (288 bits), 36 bytes captured (288 bits) on interface wireshark_extcap1640, id 0 IEEE 802.15.4 TAP IEEE 802.15.4 Command, Dst: Broadcast Frame Control Field: 0x0803, Frame Type: Command, Destination Addressing Mode: Short/16-bit, Frame Version: IEEE Std 802.15.4-2003, Source Addressing Mode: None Sequence Number: 3 Destination PAN: 0xffff Destination: 0xffff Command Identifier: Beacon Request (0x07) 0000 00 00 1c 00 01 00 04 00 00 00 20 c2 03 00 03 00 .......... ..... 0010 0b 00 00 00 0a 00 01 00 d0 00 00 00 03 08 03 ff ................ 0020 ff ff ff 07 .... No. Time Source Destination Protocol Length Info 41 14:53:59,853355 0x0000 ZigBee 54 Beacon, Src: 0x0000, EPID: dd:dd:dd:dd:dd:dd:dd:dd Frame 41: 54 bytes on wire (432 bits), 54 bytes captured (432 bits) on interface wireshark_extcap1640, id 0 IEEE 802.15.4 TAP IEEE 802.15.4 Beacon, Src: 0x0000 Frame Control Field: 0x8000, Frame Type: Beacon, Destination Addressing Mode: None, Frame Version: IEEE Std 802.15.4-2003, Source Addressing Mode: Short/16-bit Sequence Number: 119 Source PAN: 0x1a62 Source: 0x0000 Superframe Specification: PAN Coordinator, Association Permit .... .... .... 1111 = Beacon Interval: 15 .... .... 1111 .... = Superframe Interval: 15 .... 1111 .... .... = Final CAP Slot: 15 ...0 .... .... .... = Battery Extension: False .1.. .... .... .... = PAN Coordinator: True 1... .... .... .... = Association Permit: True GTS GTS Descriptor Count: 0 GTS Permit: False Pending Addresses: 0 Short and 0 Long ZigBee Beacon, ZigBee PRO, EPID: dd:dd:dd:dd:dd:dd:dd:dd Protocol ID: 0 Beacon: Stack Profile: ZigBee PRO, Router Capacity, End Device Capacity .... .... .... 0010 = Stack Profile: ZigBee PRO (0x2) .... .... 0010 .... = Protocol Version: 2 .... .1.. .... .... = Router Capacity: True .000 0... .... .... = Device Depth: 0 1... .... .... .... = End Device Capacity: True Extended PAN ID: dd:dd:dd:dd:dd:dd:dd:dd (dd:dd:dd:dd:dd:dd:dd:dd) Tx Offset: 16777215 Update ID: 0 0000 00 00 1c 00 01 00 04 00 00 00 2c c2 03 00 03 00 ..........,..... 0010 0b 00 00 00 0a 00 01 00 c8 00 00 00 00 80 77 62 ..............wb 0020 1a 00 00 ff cf 00 00 00 22 84 dd dd dd dd dd dd ........"....... 0030 dd dd ff ff ff 00 ...... No. Time Source Destination Protocol Length Info 42 14:54:00,352048 f4:ce:36:63:c6:13:27:6d 0xb493 IEEE 802.15.4 47 Association Request, RFD Frame 42: 47 bytes on wire (376 bits), 47 bytes captured (376 bits) on interface wireshark_extcap1640, id 0 IEEE 802.15.4 TAP IEEE 802.15.4 Command, Dst: 0xb493, Src: NordicSe_63:c6:13:27:6d Frame Control Field: 0xc823, Frame Type: Command, Acknowledge Request, Destination Addressing Mode: Short/16-bit, Frame Version: IEEE Std 802.15.4-2003, Source Addressing Mode: Long/64-bit Sequence Number: 4 Destination PAN: 0x1a62 Destination: 0xb493 Source PAN: 0xffff Extended Source: NordicSe_63:c6:13:27:6d (f4:ce:36:63:c6:13:27:6d) Command Identifier: Association Request (0x01) Association Request 0000 00 00 1c 00 01 00 04 00 00 00 24 c2 03 00 03 00 ..........$..... 0010 0b 00 00 00 0a 00 01 00 d0 00 00 00 23 c8 04 62 ............#..b 0020 1a 93 b4 ff ff 6d 27 13 c6 63 36 ce f4 01 8c .....m'..c6.... No. Time Source Destination Protocol Length Info 43 14:54:00,352593 IEEE 802.15.4 31 Ack Frame 43: 31 bytes on wire (248 bits), 31 bytes captured (248 bits) on interface wireshark_extcap1640, id 0 IEEE 802.15.4 TAP IEEE 802.15.4 Ack, Sequence Number: 4 Frame Control Field: 0x0002, Frame Type: Ack, Destination Addressing Mode: None, Frame Version: IEEE Std 802.15.4-2003, Source Addressing Mode: None Sequence Number: 4 0000 00 00 1c 00 01 00 04 00 00 00 90 c1 03 00 03 00 ................ 0010 0b 00 00 00 0a 00 01 00 ff 00 00 00 02 00 04 ............... No. Time Source Destination Protocol Length Info 44 14:54:00,843931 f4:ce:36:63:c6:13:27:6d 0xb493 IEEE 802.15.4 44 Data Request Frame 44: 44 bytes on wire (352 bits), 44 bytes captured (352 bits) on interface wireshark_extcap1640, id 0 IEEE 802.15.4 TAP IEEE 802.15.4 Command, Dst: 0xb493, Src: NordicSe_63:c6:13:27:6d Frame Control Field: 0xc863, Frame Type: Command, Acknowledge Request, PAN ID Compression, Destination Addressing Mode: Short/16-bit, Frame Version: IEEE Std 802.15.4-2003, Source Addressing Mode: Long/64-bit Sequence Number: 5 Destination PAN: 0x1a62 Destination: 0xb493 Extended Source: NordicSe_63:c6:13:27:6d (f4:ce:36:63:c6:13:27:6d) Command Identifier: Data Request (0x04) 0000 00 00 1c 00 01 00 04 00 00 00 24 c2 03 00 03 00 ..........$..... 0010 0b 00 00 00 0a 00 01 00 d0 00 00 00 63 c8 05 62 ............c..b 0020 1a 93 b4 6d 27 13 c6 63 36 ce f4 04 ...m'..c6... No. Time Source Destination Protocol Length Info 45 14:54:00,844476 IEEE 802.15.4 31 Ack Frame 45: 31 bytes on wire (248 bits), 31 bytes captured (248 bits) on interface wireshark_extcap1640, id 0 IEEE 802.15.4 TAP IEEE 802.15.4 Ack, Sequence Number: 5 Frame Control Field: 0x0012, Frame Type: Ack, Frame Pending, Destination Addressing Mode: None, Frame Version: IEEE Std 802.15.4-2003, Source Addressing Mode: None Sequence Number: 5 0000 00 00 1c 00 01 00 04 00 00 00 90 c1 03 00 03 00 ................ 0010 0b 00 00 00 0a 00 01 00 ff 00 00 00 12 00 05 ............... No. Time Source Destination Protocol Length Info 46 14:54:00,846337 f4:ce:36:a6:5c:b5:0c:af f4:ce:36:63:c6:13:27:6d IEEE 802.15.4 53 Association Response, PAN: 0x1a62 Addr: 0xed82 Frame 46: 53 bytes on wire (424 bits), 53 bytes captured (424 bits) on interface wireshark_extcap1640, id 0 IEEE 802.15.4 TAP IEEE 802.15.4 Command, Dst: NordicSe_63:c6:13:27:6d, Src: NordicSe_a6:5c:b5:0c:af Frame Control Field: 0xcc63, Frame Type: Command, Acknowledge Request, PAN ID Compression, Destination Addressing Mode: Long/64-bit, Frame Version: IEEE Std 802.15.4-2003, Source Addressing Mode: Long/64-bit Sequence Number: 205 Destination PAN: 0x1a62 Destination: NordicSe_63:c6:13:27:6d (f4:ce:36:63:c6:13:27:6d) Extended Source: NordicSe_a6:5c:b5:0c:af (f4:ce:36:a6:5c:b5:0c:af) Command Identifier: Association Response (0x02) Association Response 0000 00 00 1c 00 01 00 04 00 00 00 90 c1 03 00 03 00 ................ 0010 0b 00 00 00 0a 00 01 00 ff 00 00 00 63 cc cd 62 ............c..b 0020 1a 6d 27 13 c6 63 36 ce f4 af 0c b5 5c a6 36 ce .m'..c6.....\.6. 0030 f4 02 82 ed 00 ..... No. Time Source Destination Protocol Length Info 47 14:54:00,846883 IEEE 802.15.4 31 Ack Frame 47: 31 bytes on wire (248 bits), 31 bytes captured (248 bits) on interface wireshark_extcap1640, id 0 IEEE 802.15.4 TAP IEEE 802.15.4 Ack, Sequence Number: 205 Frame Control Field: 0x0002, Frame Type: Ack, Destination Addressing Mode: None, Frame Version: IEEE Std 802.15.4-2003, Source Addressing Mode: None Sequence Number: 205 0000 00 00 1c 00 01 00 04 00 00 00 20 c2 03 00 03 00 .......... ..... 0010 0b 00 00 00 0a 00 01 00 d4 00 00 00 02 00 cd ............... No. Time Source Destination Protocol Length Info 48 14:54:00,855363 0xb493 0x0000 ZigBee 110 APS: Command Frame 48: 110 bytes on wire (880 bits), 110 bytes captured (880 bits) on interface wireshark_extcap1640, id 0 IEEE 802.15.4 TAP IEEE 802.15.4 Data, Dst: 0x0000, Src: 0xb493 Frame Control Field: 0x8861, Frame Type: Data, Acknowledge Request, PAN ID Compression, Destination Addressing Mode: Short/16-bit, Frame Version: IEEE Std 802.15.4-2003, Source Addressing Mode: Short/16-bit Sequence Number: 206 Destination PAN: 0x1a62 Destination: 0x0000 Source: 0xb493 [Extended Source: NordicSe_a6:5c:b5:0c:af (f4:ce:36:a6:5c:b5:0c:af)] [Origin: 5] ZigBee Network Layer Data, Dst: 0x0000, Src: 0xb493 Frame Control Field: 0x1a48, Frame Type: Data, Discover Route: Enable, Security, Destination, Extended Source Data Destination: 0x0000 Source: 0xb493 Radius: 30 Sequence Number: 126 Destination: TexasIns_00:1c:c0:f2:9d (00:12:4b:00:1c:c0:f2:9d) Extended Source: NordicSe_a6:5c:b5:0c:af (f4:ce:36:a6:5c:b5:0c:af) ZigBee Security Header Security Control Field: 0x28, Key Id: Network Key, Extended Nonce Frame Counter: 194 Extended Source: NordicSe_a6:5c:b5:0c:af (f4:ce:36:a6:5c:b5:0c:af) Key Sequence Number: 0 Message Integrity Code: da8fe4ee ZigBee Application Support Layer Command Frame Control Field: Command (0x21) .... ..01 = Frame Type: Command (0x1) .... 00.. = Delivery Mode: Unicast (0x0) ..1. .... = Security: True .0.. .... = Acknowledgement Request: False 0... .... = Extended Header: False Counter: 171 ZigBee Security Header Security Control Field: 0x20, Key Id: Link Key, Extended Nonce Frame Counter: 5 Extended Source: NordicSe_a6:5c:b5:0c:af (f4:ce:36:a6:5c:b5:0c:af) Message Integrity Code: fe931cb7 [Expert Info (Warning/Undecoded): Encrypted Payload] Data (12 bytes) Data: ecd1db73bac467f0ab0df6d9 [Length: 12] Frame (110 bytes): 0000 00 00 1c 00 01 00 04 00 00 00 98 c1 03 00 03 00 ................ 0010 0b 00 00 00 0a 00 01 00 ff 00 00 00 61 88 ce 62 ............a..b 0020 1a 00 00 93 b4 48 1a 00 00 93 b4 1e 7e 9d f2 c0 .....H......~... 0030 1c 00 4b 12 00 af 0c b5 5c a6 36 ce f4 28 c2 00 ..K.....\.6..(.. 0040 00 00 af 0c b5 5c a6 36 ce f4 00 85 82 f9 80 46 .....\.6.......F 0050 5c b0 36 0f 57 40 79 7c 8b bf 8c d4 31 93 31 ff \.6.W@y|....1.1. 0060 6c 3d 20 c0 b9 98 08 06 2c 75 da 8f e4 ee l= .....,u.... Decrypted ZigBee Payload (31 bytes): 0000 21 ab 20 05 00 00 00 af 0c b5 5c a6 36 ce f4 ec !. .......\.6... 0010 d1 db 73 ba c4 67 f0 ab 0d f6 d9 fe 93 1c b7 ..s..g......... No. Time Source Destination Protocol Length Info 49 14:54:00,855907 IEEE 802.15.4 31 Ack Frame 49: 31 bytes on wire (248 bits), 31 bytes captured (248 bits) on interface wireshark_extcap1640, id 0 IEEE 802.15.4 TAP IEEE 802.15.4 Ack, Sequence Number: 206 Frame Control Field: 0x0002, Frame Type: Ack, Destination Addressing Mode: None, Frame Version: IEEE Std 802.15.4-2003, Source Addressing Mode: None Sequence Number: 206 0000 00 00 1c 00 01 00 04 00 00 00 2c c2 03 00 03 00 ..........,..... 0010 0b 00 00 00 0a 00 01 00 c8 00 00 00 02 00 ce ...............