mesh sniffer - NRF52840

RE: mesh sniffer - NRF52840

Domneck — Thu, 12 Sep 2019 05:16:43 GMT

Thanks for reply..

Yes I've found that option in application and able to decrypt the packet.

I dint understand what is this IV index and why it's used.

Regards,

Domneck

RE: mesh sniffer - NRF52840

Joakim Jakobsen — Tue, 10 Sep 2019 12:50:50 GMT

Hi.

Talked to one of my colleagues;

You need to open the form with Mesh Security options and add all your pairs key + IV index. That is the same for all kind of keys (network, application, device). After that, the sniffer will decrypt and specialize all Mesh traffic.

Best regards,
Joakim

RE: mesh sniffer - NRF52840

Joakim Jakobsen — Tue, 10 Sep 2019 06:38:00 GMT

Hi.

I assume this is because the sniffer needs the device keys in order to decrypt the messages, and I don't think the sniffer can sniff the device keys (formed during provisioning).
I believe that the messages you are seeing are the configuration messages.

I haven't used the Ellisys sniffer myself, but I'll ask internally if there are a way to get around this.

Best regards,
Joakim