Hello.
I'm using Zigbee SDK 4.1.0 with nrf52840.
When the firmware is configured as Zigbee router, it forwards route request data packets with incorrect contents.
Original request from Zigbee coordinator (packet 1) contains "Destination IEEE address" command option field bit (3.4.1.3.1, Zigbee specification rev 22) and 8-byte "Destination IEEE Address" itself (3.4.1.3.5, Zigbee specification rev 22).
When the router forwards the packet (packets 2 and 8) further, it sets "Destination IEEE address" option bit field in the header, but does not add 8-byte "Destination IEEE Address" data.
I have attached raw Wireshark traffic dump, packets 2 and 8 are malformed.
Decoded text data:
No. Time Source Destination Protocol Length Info
1 13:59:15,072065 0x0000 Broadcast ZigBee 85 Route Request, Dst: 0x3dcb, Src: 0x0000
Frame 1: 85 bytes on wire (680 bits), 85 bytes captured (680 bits) on interface wireshark_extcap2036, id 0
Interface id: 0 (wireshark_extcap2036)
Interface name: wireshark_extcap2036
Encapsulation type: IEEE 802.15.4 Wireless with TAP pseudo-header (206)
Arrival Time: May 8, 2020 13:59:15.072065000 Russia TZ 1 Standard Time
[Time shift for this packet: 0.000000000 seconds]
Epoch Time: 1588939155.072065000 seconds
[Time delta from previous captured frame: 0.000000000 seconds]
[Time delta from previous displayed frame: 0.000000000 seconds]
[Time since reference or first frame: 0.000000000 seconds]
Frame Number: 1
Frame Length: 85 bytes (680 bits)
Capture Length: 85 bytes (680 bits)
[Frame is marked: False]
[Frame is ignored: False]
[Protocols in frame: wpan-tap:zbee_nwk]
IEEE 802.15.4 TAP
IEEE 802.15.4 Data, Dst: Broadcast, Src: 0x0000
ZigBee Network Layer Command, Dst: Broadcast, Src: 0x0000
Frame Control Field: 0x1209, Frame Type: Command, Discover Route: Suppress, Security, Extended Source Command
Destination: 0xfffc
Source: 0x0000
Radius: 30
Sequence Number: 61
Extended Source: TexasIns_00:1c:c0:f2:9d (00:12:4b:00:1c:c0:f2:9d)
ZigBee Security Header
Security Control Field: 0x28, Key Id: Network Key, Extended Nonce
Frame Counter: 949242
Extended Source: TexasIns_00:1c:c0:f2:9d (00:12:4b:00:1c:c0:f2:9d)
Key Sequence Number: 0
Message Integrity Code: 3cc820c6
Command Frame: Route Request
Command Identifier: Route Request (0x01)
Command Options: 0x20, Extended Destination, Many-to-One Discovery: Not Many-to-One
.0.. .... = Multicast: False
..1. .... = Extended Destination: True
...0 0... = Many-to-One Discovery: Not Many-to-One (0x0)
Route ID: 93
Destination: 0x3dcb
Path Cost: 0
Extended Destination: NordicSe_9e:14:0c:f8:df (f4:ce:36:9e:14:0c:f8:df)
Frame (85 bytes):
0000 00 00 1c 00 01 00 04 00 00 00 5c c2 03 00 03 00 ..........\.....
0010 0b 00 00 00 0a 00 01 00 98 00 00 00 41 88 07 62 ............A..b
0020 1a ff ff 00 00 09 12 fc ff 00 00 1e 3d 9d f2 c0 ............=...
0030 1c 00 4b 12 00 28 fa 7b 0e 00 9d f2 c0 1c 00 4b ..K..(.{.......K
0040 12 00 00 b7 22 01 2c 76 ed c5 20 2e 5d 3a 0a 0a ....".,v.. .]:..
0050 9e 3c c8 20 c6 .<. .
Decrypted ZigBee Payload (14 bytes):
0000 01 20 5d cb 3d 00 df f8 0c 14 9e 36 ce f4 . ].=......6..
No. Time Source Destination Protocol Length Info
2 13:59:15,090855 0x0000 Broadcast ZigBee 77 Route Request[Malformed Packet]
Frame 2: 77 bytes on wire (616 bits), 77 bytes captured (616 bits) on interface wireshark_extcap2036, id 0
Interface id: 0 (wireshark_extcap2036)
Interface name: wireshark_extcap2036
Encapsulation type: IEEE 802.15.4 Wireless with TAP pseudo-header (206)
Arrival Time: May 8, 2020 13:59:15.090855000 Russia TZ 1 Standard Time
[Time shift for this packet: 0.000000000 seconds]
Epoch Time: 1588939155.090855000 seconds
[Time delta from previous captured frame: 0.018790000 seconds]
[Time delta from previous displayed frame: 0.018790000 seconds]
[Time since reference or first frame: 0.018790000 seconds]
Frame Number: 2
Frame Length: 77 bytes (616 bits)
Capture Length: 77 bytes (616 bits)
[Frame is marked: False]
[Frame is ignored: False]
[Protocols in frame: wpan-tap:zbee_nwk]
IEEE 802.15.4 TAP
IEEE 802.15.4 Data, Dst: Broadcast, Src: 0xecb1
ZigBee Network Layer Command, Dst: Broadcast, Src: 0x0000
Frame Control Field: 0x1209, Frame Type: Command, Discover Route: Suppress, Security, Extended Source Command
Destination: 0xfffc
Source: 0x0000
Radius: 29
Sequence Number: 61
Extended Source: TexasIns_00:1c:c0:f2:9d (00:12:4b:00:1c:c0:f2:9d)
ZigBee Security Header
Security Control Field: 0x28, Key Id: Network Key, Extended Nonce
Frame Counter: 29959
Extended Source: NordicSe_63:c6:13:27:6d (f4:ce:36:63:c6:13:27:6d)
Key Sequence Number: 0
Message Integrity Code: 7b1672cf
Command Frame: Route Request
Command Identifier: Route Request (0x01)
Command Options: 0x20, Extended Destination, Many-to-One Discovery: Not Many-to-One
.0.. .... = Multicast: False
..1. .... = Extended Destination: True
...0 0... = Many-to-One Discovery: Not Many-to-One (0x0)
Route ID: 93
Destination: 0x3dcb
Path Cost: 4
[Malformed Packet: ZigBee]
[Expert Info (Error/Malformed): Malformed Packet (Exception occurred)]
[Malformed Packet (Exception occurred)]
[Severity level: Error]
[Group: Malformed]
Frame (77 bytes):
0000 00 00 1c 00 01 00 04 00 00 00 3c c2 03 00 03 00 ..........<.....
0010 0b 00 00 00 0a 00 01 00 b8 00 00 00 41 88 1c 62 ............A..b
0020 1a ff ff b1 ec 09 12 fc ff 00 00 1d 3d 9d f2 c0 ............=...
0030 1c 00 4b 12 00 28 07 75 00 00 6d 27 13 c6 63 36 ..K..(.u..m'..c6
0040 ce f4 00 84 8c e8 c6 99 be 7b 16 72 cf .........{.r.
Decrypted ZigBee Payload (6 bytes):
0000 01 20 5d cb 3d 04 . ].=.
No. Time Source Destination Protocol Length Info
3 13:59:15,124213 0x0000 Broadcast ZigBee 85 Route Request, Dst: 0x3dcb, Src: 0x0000
Frame 3: 85 bytes on wire (680 bits), 85 bytes captured (680 bits) on interface wireshark_extcap2036, id 0
Interface id: 0 (wireshark_extcap2036)
Interface name: wireshark_extcap2036
Encapsulation type: IEEE 802.15.4 Wireless with TAP pseudo-header (206)
Arrival Time: May 8, 2020 13:59:15.124213000 Russia TZ 1 Standard Time
[Time shift for this packet: 0.000000000 seconds]
Epoch Time: 1588939155.124213000 seconds
[Time delta from previous captured frame: 0.033358000 seconds]
[Time delta from previous displayed frame: 0.033358000 seconds]
[Time since reference or first frame: 0.052148000 seconds]
Frame Number: 3
Frame Length: 85 bytes (680 bits)
Capture Length: 85 bytes (680 bits)
[Frame is marked: False]
[Frame is ignored: False]
[Protocols in frame: wpan-tap:zbee_nwk]
IEEE 802.15.4 TAP
IEEE 802.15.4 Data, Dst: Broadcast, Src: 0xc21d
ZigBee Network Layer Command, Dst: Broadcast, Src: 0x0000
Frame Control Field: 0x1209, Frame Type: Command, Discover Route: Suppress, Security, Extended Source Command
Destination: 0xfffc
Source: 0x0000
Radius: 29
Sequence Number: 61
Extended Source: TexasIns_00:1c:c0:f2:9d (00:12:4b:00:1c:c0:f2:9d)
ZigBee Security Header
Security Control Field: 0x28, Key Id: Network Key, Extended Nonce
Frame Counter: 864935
Extended Source: Ember_ff:fe:ba:99:43 (00:0d:6f:ff:fe:ba:99:43)
Key Sequence Number: 0
Message Integrity Code: c99d6c47
Command Frame: Route Request
Command Identifier: Route Request (0x01)
Command Options: 0x20, Extended Destination, Many-to-One Discovery: Not Many-to-One
.0.. .... = Multicast: False
..1. .... = Extended Destination: True
...0 0... = Many-to-One Discovery: Not Many-to-One (0x0)
Route ID: 93
Destination: 0x3dcb
Path Cost: 1
Extended Destination: NordicSe_9e:14:0c:f8:df (f4:ce:36:9e:14:0c:f8:df)
Frame (85 bytes):
0000 00 00 1c 00 01 00 04 00 00 00 58 c2 03 00 03 00 ..........X.....
0010 0b 00 00 00 0a 00 01 00 98 00 00 00 41 88 7e 62 ............A.~b
0020 1a ff ff 1d c2 09 12 fc ff 00 00 1d 3d 9d f2 c0 ............=...
0030 1c 00 4b 12 00 28 a7 32 0d 00 43 99 ba fe ff 6f ..K..(.2..C....o
0040 0d 00 00 f0 37 93 5b 60 b2 a5 e2 0f 03 ec 36 6a ....7.[`......6j
0050 dd c9 9d 6c 47 ...lG
Decrypted ZigBee Payload (14 bytes):
0000 01 20 5d cb 3d 01 df f8 0c 14 9e 36 ce f4 . ].=......6..
No. Time Source Destination Protocol Length Info
4 13:59:15,156880 0x0000 Broadcast ZigBee 85 Route Request, Dst: 0x3dcb, Src: 0x0000
Frame 4: 85 bytes on wire (680 bits), 85 bytes captured (680 bits) on interface wireshark_extcap2036, id 0
Interface id: 0 (wireshark_extcap2036)
Interface name: wireshark_extcap2036
Encapsulation type: IEEE 802.15.4 Wireless with TAP pseudo-header (206)
Arrival Time: May 8, 2020 13:59:15.156880000 Russia TZ 1 Standard Time
[Time shift for this packet: 0.000000000 seconds]
Epoch Time: 1588939155.156880000 seconds
[Time delta from previous captured frame: 0.032667000 seconds]
[Time delta from previous displayed frame: 0.032667000 seconds]
[Time since reference or first frame: 0.084815000 seconds]
Frame Number: 4
Frame Length: 85 bytes (680 bits)
Capture Length: 85 bytes (680 bits)
[Frame is marked: False]
[Frame is ignored: False]
[Protocols in frame: wpan-tap:zbee_nwk]
IEEE 802.15.4 TAP
IEEE 802.15.4 Data, Dst: Broadcast, Src: 0x7ae8
ZigBee Network Layer Command, Dst: Broadcast, Src: 0x0000
Frame Control Field: 0x1209, Frame Type: Command, Discover Route: Suppress, Security, Extended Source Command
Destination: 0xfffc
Source: 0x0000
Radius: 29
Sequence Number: 61
Extended Source: TexasIns_00:1c:c0:f2:9d (00:12:4b:00:1c:c0:f2:9d)
ZigBee Security Header
Security Control Field: 0x28, Key Id: Network Key, Extended Nonce
Frame Counter: 511829
Extended Source: Ember_ff:fe:9a:a1:b4 (00:0d:6f:ff:fe:9a:a1:b4)
Key Sequence Number: 0
Message Integrity Code: ac9db795
Command Frame: Route Request
Command Identifier: Route Request (0x01)
Command Options: 0x20, Extended Destination, Many-to-One Discovery: Not Many-to-One
.0.. .... = Multicast: False
..1. .... = Extended Destination: True
...0 0... = Many-to-One Discovery: Not Many-to-One (0x0)
Route ID: 93
Destination: 0x3dcb
Path Cost: 1
Extended Destination: NordicSe_9e:14:0c:f8:df (f4:ce:36:9e:14:0c:f8:df)
Frame (85 bytes):
0000 00 00 1c 00 01 00 04 00 00 00 90 c2 03 00 03 00 ................
0010 0b 00 00 00 0a 00 01 00 58 00 00 00 41 88 80 62 ........X...A..b
0020 1a ff ff e8 7a 09 12 fc ff 00 00 1d 3d 9d f2 c0 ....z.......=...
0030 1c 00 4b 12 00 28 55 cf 07 00 b4 a1 9a fe ff 6f ..K..(U........o
0040 0d 00 00 dc e2 f6 19 0e 37 e5 e7 ff 02 f6 3c 5f ........7.....<_
0050 f0 ac 9d b7 95 .....
Decrypted ZigBee Payload (14 bytes):
0000 01 20 5d cb 3d 01 df f8 0c 14 9e 36 ce f4 . ].=......6..
No. Time Source Destination Protocol Length Info
5 13:59:15,296123 0x0000 Broadcast ZigBee 85 Route Request, Dst: 0x3dcb, Src: 0x0000
Frame 5: 85 bytes on wire (680 bits), 85 bytes captured (680 bits) on interface wireshark_extcap2036, id 0
Interface id: 0 (wireshark_extcap2036)
Interface name: wireshark_extcap2036
Encapsulation type: IEEE 802.15.4 Wireless with TAP pseudo-header (206)
Arrival Time: May 8, 2020 13:59:15.296123000 Russia TZ 1 Standard Time
[Time shift for this packet: 0.000000000 seconds]
Epoch Time: 1588939155.296123000 seconds
[Time delta from previous captured frame: 0.139243000 seconds]
[Time delta from previous displayed frame: 0.139243000 seconds]
[Time since reference or first frame: 0.224058000 seconds]
Frame Number: 5
Frame Length: 85 bytes (680 bits)
Capture Length: 85 bytes (680 bits)
[Frame is marked: False]
[Frame is ignored: False]
[Protocols in frame: wpan-tap:zbee_nwk]
IEEE 802.15.4 TAP
IEEE 802.15.4 Data, Dst: Broadcast, Src: 0x99f4
ZigBee Network Layer Command, Dst: Broadcast, Src: 0x0000
Frame Control Field: 0x1209, Frame Type: Command, Discover Route: Suppress, Security, Extended Source Command
Destination: 0xfffc
Source: 0x0000
Radius: 29
Sequence Number: 61
Extended Source: TexasIns_00:1c:c0:f2:9d (00:12:4b:00:1c:c0:f2:9d)
ZigBee Security Header
Security Control Field: 0x28, Key Id: Network Key, Extended Nonce
Frame Counter: 551411
Extended Source: Ember_ff:fe:9a:b8:6b (00:0d:6f:ff:fe:9a:b8:6b)
Key Sequence Number: 0
Message Integrity Code: b3596408
Command Frame: Route Request
Command Identifier: Route Request (0x01)
Command Options: 0x20, Extended Destination, Many-to-One Discovery: Not Many-to-One
.0.. .... = Multicast: False
..1. .... = Extended Destination: True
...0 0... = Many-to-One Discovery: Not Many-to-One (0x0)
Route ID: 93
Destination: 0x3dcb
Path Cost: 2
Extended Destination: NordicSe_9e:14:0c:f8:df (f4:ce:36:9e:14:0c:f8:df)
Frame (85 bytes):
0000 00 00 1c 00 01 00 04 00 00 00 a2 c2 03 00 03 00 ................
0010 0b 00 00 00 0a 00 01 00 30 00 00 00 41 88 dc 62 ........0...A..b
0020 1a ff ff f4 99 09 12 fc ff 00 00 1d 3d 9d f2 c0 ............=...
0030 1c 00 4b 12 00 28 f3 69 08 00 6b b8 9a fe ff 6f ..K..(.i..k....o
0040 0d 00 00 09 f3 c2 1b f6 92 11 30 f7 a1 8d c1 cb ..........0.....
0050 65 b3 59 64 08 e.Yd.
Decrypted ZigBee Payload (14 bytes):
0000 01 20 5d cb 3d 02 df f8 0c 14 9e 36 ce f4 . ].=......6..
No. Time Source Destination Protocol Length Info
6 13:59:15,426428 0x0000 Broadcast ZigBee 85 Route Request, Dst: 0x3dcb, Src: 0x0000
Frame 6: 85 bytes on wire (680 bits), 85 bytes captured (680 bits) on interface wireshark_extcap2036, id 0
Interface id: 0 (wireshark_extcap2036)
Interface name: wireshark_extcap2036
Encapsulation type: IEEE 802.15.4 Wireless with TAP pseudo-header (206)
Arrival Time: May 8, 2020 13:59:15.426428000 Russia TZ 1 Standard Time
[Time shift for this packet: 0.000000000 seconds]
Epoch Time: 1588939155.426428000 seconds
[Time delta from previous captured frame: 0.130305000 seconds]
[Time delta from previous displayed frame: 0.130305000 seconds]
[Time since reference or first frame: 0.354363000 seconds]
Frame Number: 6
Frame Length: 85 bytes (680 bits)
Capture Length: 85 bytes (680 bits)
[Frame is marked: False]
[Frame is ignored: False]
[Protocols in frame: wpan-tap:zbee_nwk]
IEEE 802.15.4 TAP
IEEE 802.15.4 Data, Dst: Broadcast, Src: 0xc21d
ZigBee Network Layer Command, Dst: Broadcast, Src: 0x0000
Frame Control Field: 0x1209, Frame Type: Command, Discover Route: Suppress, Security, Extended Source Command
Destination: 0xfffc
Source: 0x0000
Radius: 29
Sequence Number: 61
Extended Source: TexasIns_00:1c:c0:f2:9d (00:12:4b:00:1c:c0:f2:9d)
ZigBee Security Header
Security Control Field: 0x28, Key Id: Network Key, Extended Nonce
Frame Counter: 864936
Extended Source: Ember_ff:fe:ba:99:43 (00:0d:6f:ff:fe:ba:99:43)
Key Sequence Number: 0
Message Integrity Code: b1eedf7f
Command Frame: Route Request
Command Identifier: Route Request (0x01)
Command Options: 0x20, Extended Destination, Many-to-One Discovery: Not Many-to-One
.0.. .... = Multicast: False
..1. .... = Extended Destination: True
...0 0... = Many-to-One Discovery: Not Many-to-One (0x0)
Route ID: 93
Destination: 0x3dcb
Path Cost: 1
Extended Destination: NordicSe_9e:14:0c:f8:df (f4:ce:36:9e:14:0c:f8:df)
Frame (85 bytes):
0000 00 00 1c 00 01 00 04 00 00 00 58 c2 03 00 03 00 ..........X.....
0010 0b 00 00 00 0a 00 01 00 98 00 00 00 41 88 7f 62 ............A..b
0020 1a ff ff 1d c2 09 12 fc ff 00 00 1d 3d 9d f2 c0 ............=...
0030 1c 00 4b 12 00 28 a8 32 0d 00 43 99 ba fe ff 6f ..K..(.2..C....o
0040 0d 00 00 f9 42 00 3a fb 87 d5 ff c8 2e 74 21 a7 ....B.:......t!.
0050 b5 b1 ee df 7f .....
Decrypted ZigBee Payload (14 bytes):
0000 01 20 5d cb 3d 01 df f8 0c 14 9e 36 ce f4 . ].=......6..
No. Time Source Destination Protocol Length Info
7 13:59:15,516367 0x0000 Broadcast ZigBee 85 Route Request, Dst: 0x3dcb, Src: 0x0000
Frame 7: 85 bytes on wire (680 bits), 85 bytes captured (680 bits) on interface wireshark_extcap2036, id 0
Interface id: 0 (wireshark_extcap2036)
Interface name: wireshark_extcap2036
Encapsulation type: IEEE 802.15.4 Wireless with TAP pseudo-header (206)
Arrival Time: May 8, 2020 13:59:15.516367000 Russia TZ 1 Standard Time
[Time shift for this packet: 0.000000000 seconds]
Epoch Time: 1588939155.516367000 seconds
[Time delta from previous captured frame: 0.089939000 seconds]
[Time delta from previous displayed frame: 0.089939000 seconds]
[Time since reference or first frame: 0.444302000 seconds]
Frame Number: 7
Frame Length: 85 bytes (680 bits)
Capture Length: 85 bytes (680 bits)
[Frame is marked: False]
[Frame is ignored: False]
[Protocols in frame: wpan-tap:zbee_nwk]
IEEE 802.15.4 TAP
IEEE 802.15.4 Data, Dst: Broadcast, Src: 0x7ae8
ZigBee Network Layer Command, Dst: Broadcast, Src: 0x0000
Frame Control Field: 0x1209, Frame Type: Command, Discover Route: Suppress, Security, Extended Source Command
Destination: 0xfffc
Source: 0x0000
Radius: 29
Sequence Number: 61
Extended Source: TexasIns_00:1c:c0:f2:9d (00:12:4b:00:1c:c0:f2:9d)
ZigBee Security Header
Security Control Field: 0x28, Key Id: Network Key, Extended Nonce
Frame Counter: 511830
Extended Source: Ember_ff:fe:9a:a1:b4 (00:0d:6f:ff:fe:9a:a1:b4)
Key Sequence Number: 0
Message Integrity Code: 76c303ac
Command Frame: Route Request
Command Identifier: Route Request (0x01)
Command Options: 0x20, Extended Destination, Many-to-One Discovery: Not Many-to-One
.0.. .... = Multicast: False
..1. .... = Extended Destination: True
...0 0... = Many-to-One Discovery: Not Many-to-One (0x0)
Route ID: 93
Destination: 0x3dcb
Path Cost: 1
Extended Destination: NordicSe_9e:14:0c:f8:df (f4:ce:36:9e:14:0c:f8:df)
Frame (85 bytes):
0000 00 00 1c 00 01 00 04 00 00 00 90 c2 03 00 03 00 ................
0010 0b 00 00 00 0a 00 01 00 58 00 00 00 41 88 81 62 ........X...A..b
0020 1a ff ff e8 7a 09 12 fc ff 00 00 1d 3d 9d f2 c0 ....z.......=...
0030 1c 00 4b 12 00 28 56 cf 07 00 b4 a1 9a fe ff 6f ..K..(V........o
0040 0d 00 00 5f ad 10 af a3 1d ca a6 01 fe ab 03 ff ..._............
0050 a6 76 c3 03 ac .v...
Decrypted ZigBee Payload (14 bytes):
0000 01 20 5d cb 3d 01 df f8 0c 14 9e 36 ce f4 . ].=......6..
No. Time Source Destination Protocol Length Info
8 13:59:15,551679 0x0000 Broadcast ZigBee 77 Route Request[Malformed Packet]
Frame 8: 77 bytes on wire (616 bits), 77 bytes captured (616 bits) on interface wireshark_extcap2036, id 0
Interface id: 0 (wireshark_extcap2036)
Interface name: wireshark_extcap2036
Encapsulation type: IEEE 802.15.4 Wireless with TAP pseudo-header (206)
Arrival Time: May 8, 2020 13:59:15.551679000 Russia TZ 1 Standard Time
[Time shift for this packet: 0.000000000 seconds]
Epoch Time: 1588939155.551679000 seconds
[Time delta from previous captured frame: 0.035312000 seconds]
[Time delta from previous displayed frame: 0.035312000 seconds]
[Time since reference or first frame: 0.479614000 seconds]
Frame Number: 8
Frame Length: 77 bytes (616 bits)
Capture Length: 77 bytes (616 bits)
[Frame is marked: False]
[Frame is ignored: False]
[Protocols in frame: wpan-tap:zbee_nwk]
IEEE 802.15.4 TAP
IEEE 802.15.4 Data, Dst: Broadcast, Src: 0xecb1
ZigBee Network Layer Command, Dst: Broadcast, Src: 0x0000
Frame Control Field: 0x1209, Frame Type: Command, Discover Route: Suppress, Security, Extended Source Command
Destination: 0xfffc
Source: 0x0000
Radius: 29
Sequence Number: 61
Extended Source: TexasIns_00:1c:c0:f2:9d (00:12:4b:00:1c:c0:f2:9d)
ZigBee Security Header
Security Control Field: 0x28, Key Id: Network Key, Extended Nonce
Frame Counter: 29960
Extended Source: NordicSe_63:c6:13:27:6d (f4:ce:36:63:c6:13:27:6d)
Key Sequence Number: 0
Message Integrity Code: ab8891c2
Command Frame: Route Request
Command Identifier: Route Request (0x01)
Command Options: 0x20, Extended Destination, Many-to-One Discovery: Not Many-to-One
.0.. .... = Multicast: False
..1. .... = Extended Destination: True
...0 0... = Many-to-One Discovery: Not Many-to-One (0x0)
Route ID: 93
Destination: 0x3dcb
Path Cost: 4
[Malformed Packet: ZigBee]
[Expert Info (Error/Malformed): Malformed Packet (Exception occurred)]
[Malformed Packet (Exception occurred)]
[Severity level: Error]
[Group: Malformed]
Frame (77 bytes):
0000 00 00 1c 00 01 00 04 00 00 00 3c c2 03 00 03 00 ..........<.....
0010 0b 00 00 00 0a 00 01 00 b8 00 00 00 41 88 1d 62 ............A..b
0020 1a ff ff b1 ec 09 12 fc ff 00 00 1d 3d 9d f2 c0 ............=...
0030 1c 00 4b 12 00 28 08 75 00 00 6d 27 13 c6 63 36 ..K..(.u..m'..c6
0040 ce f4 00 e6 8f f6 0d 81 15 ab 88 91 c2 .............
Decrypted ZigBee Payload (6 bytes):
0000 01 20 5d cb 3d 04 . ].=.
No. Time Source Destination Protocol Length Info
9 13:59:15,562473 0x0000 Broadcast ZigBee 85 Route Request, Dst: 0x3dcb, Src: 0x0000
Frame 9: 85 bytes on wire (680 bits), 85 bytes captured (680 bits) on interface wireshark_extcap2036, id 0
Interface id: 0 (wireshark_extcap2036)
Interface name: wireshark_extcap2036
Encapsulation type: IEEE 802.15.4 Wireless with TAP pseudo-header (206)
Arrival Time: May 8, 2020 13:59:15.562473000 Russia TZ 1 Standard Time
[Time shift for this packet: 0.000000000 seconds]
Epoch Time: 1588939155.562473000 seconds
[Time delta from previous captured frame: 0.010794000 seconds]
[Time delta from previous displayed frame: 0.010794000 seconds]
[Time since reference or first frame: 0.490408000 seconds]
Frame Number: 9
Frame Length: 85 bytes (680 bits)
Capture Length: 85 bytes (680 bits)
[Frame is marked: False]
[Frame is ignored: False]
[Protocols in frame: wpan-tap:zbee_nwk]
IEEE 802.15.4 TAP
IEEE 802.15.4 Data, Dst: Broadcast, Src: 0x99f4
ZigBee Network Layer Command, Dst: Broadcast, Src: 0x0000
Frame Control Field: 0x1209, Frame Type: Command, Discover Route: Suppress, Security, Extended Source Command
Destination: 0xfffc
Source: 0x0000
Radius: 29
Sequence Number: 61
Extended Source: TexasIns_00:1c:c0:f2:9d (00:12:4b:00:1c:c0:f2:9d)
ZigBee Security Header
Security Control Field: 0x28, Key Id: Network Key, Extended Nonce
Frame Counter: 551412
Extended Source: Ember_ff:fe:9a:b8:6b (00:0d:6f:ff:fe:9a:b8:6b)
Key Sequence Number: 0
Message Integrity Code: 220972bf
Command Frame: Route Request
Command Identifier: Route Request (0x01)
Command Options: 0x20, Extended Destination, Many-to-One Discovery: Not Many-to-One
.0.. .... = Multicast: False
..1. .... = Extended Destination: True
...0 0... = Many-to-One Discovery: Not Many-to-One (0x0)
Route ID: 93
Destination: 0x3dcb
Path Cost: 2
Extended Destination: NordicSe_9e:14:0c:f8:df (f4:ce:36:9e:14:0c:f8:df)
Frame (85 bytes):
0000 00 00 1c 00 01 00 04 00 00 00 a2 c2 03 00 03 00 ................
0010 0b 00 00 00 0a 00 01 00 30 00 00 00 41 88 dd 62 ........0...A..b
0020 1a ff ff f4 99 09 12 fc ff 00 00 1d 3d 9d f2 c0 ............=...
0030 1c 00 4b 12 00 28 f4 69 08 00 6b b8 9a fe ff 6f ..K..(.i..k....o
0040 0d 00 00 af 0e b9 57 1b a0 a1 d7 ae f1 47 22 d3 ......W......G".
0050 11 22 09 72 bf .".r.
Decrypted ZigBee Payload (14 bytes):
0000 01 20 5d cb 3d 02 df f8 0c 14 9e 36 ce f4 . ].=......6..
No. Time Source Destination Protocol Length Info
10 13:59:15,765534 0x0000 Broadcast ZigBee 85 Route Request, Dst: 0x3dcb, Src: 0x0000
Frame 10: 85 bytes on wire (680 bits), 85 bytes captured (680 bits) on interface wireshark_extcap2036, id 0
Interface id: 0 (wireshark_extcap2036)
Interface name: wireshark_extcap2036
Encapsulation type: IEEE 802.15.4 Wireless with TAP pseudo-header (206)
Arrival Time: May 8, 2020 13:59:15.765534000 Russia TZ 1 Standard Time
[Time shift for this packet: 0.000000000 seconds]
Epoch Time: 1588939155.765534000 seconds
[Time delta from previous captured frame: 0.203061000 seconds]
[Time delta from previous displayed frame: 0.203061000 seconds]
[Time since reference or first frame: 0.693469000 seconds]
Frame Number: 10
Frame Length: 85 bytes (680 bits)
Capture Length: 85 bytes (680 bits)
[Frame is marked: False]
[Frame is ignored: False]
[Protocols in frame: wpan-tap:zbee_nwk]
IEEE 802.15.4 TAP
IEEE 802.15.4 Data, Dst: Broadcast, Src: 0xc21d
ZigBee Network Layer Command, Dst: Broadcast, Src: 0x0000
Frame Control Field: 0x1209, Frame Type: Command, Discover Route: Suppress, Security, Extended Source Command
Destination: 0xfffc
Source: 0x0000
Radius: 29
Sequence Number: 61
Extended Source: TexasIns_00:1c:c0:f2:9d (00:12:4b:00:1c:c0:f2:9d)
ZigBee Security Header
Security Control Field: 0x28, Key Id: Network Key, Extended Nonce
Frame Counter: 864937
Extended Source: Ember_ff:fe:ba:99:43 (00:0d:6f:ff:fe:ba:99:43)
Key Sequence Number: 0
Message Integrity Code: dbfd8706
Command Frame: Route Request
Command Identifier: Route Request (0x01)
Command Options: 0x20, Extended Destination, Many-to-One Discovery: Not Many-to-One
.0.. .... = Multicast: False
..1. .... = Extended Destination: True
...0 0... = Many-to-One Discovery: Not Many-to-One (0x0)
Route ID: 93
Destination: 0x3dcb
Path Cost: 1
Extended Destination: NordicSe_9e:14:0c:f8:df (f4:ce:36:9e:14:0c:f8:df)
Frame (85 bytes):
0000 00 00 1c 00 01 00 04 00 00 00 58 c2 03 00 03 00 ..........X.....
0010 0b 00 00 00 0a 00 01 00 9c 00 00 00 41 88 80 62 ............A..b
0020 1a ff ff 1d c2 09 12 fc ff 00 00 1d 3d 9d f2 c0 ............=...
0030 1c 00 4b 12 00 28 a9 32 0d 00 43 99 ba fe ff 6f ..K..(.2..C....o
0040 0d 00 00 15 aa fb 75 0c 95 2c 6b 8e 03 31 0d b6 ......u..,k..1..
0050 de db fd 87 06 .....
Decrypted ZigBee Payload (14 bytes):
0000 01 20 5d cb 3d 01 df f8 0c 14 9e 36 ce f4 . ].=......6..
No. Time Source Destination Protocol Length Info
11 13:59:15,814223 0x0000 Broadcast ZigBee 85 Route Request, Dst: 0x3dcb, Src: 0x0000
Frame 11: 85 bytes on wire (680 bits), 85 bytes captured (680 bits) on interface wireshark_extcap2036, id 0
Interface id: 0 (wireshark_extcap2036)
Interface name: wireshark_extcap2036
Encapsulation type: IEEE 802.15.4 Wireless with TAP pseudo-header (206)
Arrival Time: May 8, 2020 13:59:15.814223000 Russia TZ 1 Standard Time
[Time shift for this packet: 0.000000000 seconds]
Epoch Time: 1588939155.814223000 seconds
[Time delta from previous captured frame: 0.048689000 seconds]
[Time delta from previous displayed frame: 0.048689000 seconds]
[Time since reference or first frame: 0.742158000 seconds]
Frame Number: 11
Frame Length: 85 bytes (680 bits)
Capture Length: 85 bytes (680 bits)
[Frame is marked: False]
[Frame is ignored: False]
[Protocols in frame: wpan-tap:zbee_nwk]
IEEE 802.15.4 TAP
IEEE 802.15.4 Data, Dst: Broadcast, Src: 0x7ae8
ZigBee Network Layer Command, Dst: Broadcast, Src: 0x0000
Frame Control Field: 0x1209, Frame Type: Command, Discover Route: Suppress, Security, Extended Source Command
Destination: 0xfffc
Source: 0x0000
Radius: 29
Sequence Number: 61
Extended Source: TexasIns_00:1c:c0:f2:9d (00:12:4b:00:1c:c0:f2:9d)
ZigBee Security Header
Security Control Field: 0x28, Key Id: Network Key, Extended Nonce
Frame Counter: 511831
Extended Source: Ember_ff:fe:9a:a1:b4 (00:0d:6f:ff:fe:9a:a1:b4)
Key Sequence Number: 0
Message Integrity Code: 827c8940
Command Frame: Route Request
Command Identifier: Route Request (0x01)
Command Options: 0x20, Extended Destination, Many-to-One Discovery: Not Many-to-One
.0.. .... = Multicast: False
..1. .... = Extended Destination: True
...0 0... = Many-to-One Discovery: Not Many-to-One (0x0)
Route ID: 93
Destination: 0x3dcb
Path Cost: 1
Extended Destination: NordicSe_9e:14:0c:f8:df (f4:ce:36:9e:14:0c:f8:df)
Frame (85 bytes):
0000 00 00 1c 00 01 00 04 00 00 00 90 c2 03 00 03 00 ................
0010 0b 00 00 00 0a 00 01 00 50 00 00 00 41 88 82 62 ........P...A..b
0020 1a ff ff e8 7a 09 12 fc ff 00 00 1d 3d 9d f2 c0 ....z.......=...
0030 1c 00 4b 12 00 28 57 cf 07 00 b4 a1 9a fe ff 6f ..K..(W........o
0040 0d 00 00 46 c7 4f e7 5b c7 34 06 53 92 ae b8 14 ...F.O.[.4.S....
0050 cf 82 7c 89 40 ..|.@
Decrypted ZigBee Payload (14 bytes):
0000 01 20 5d cb 3d 01 df f8 0c 14 9e 36 ce f4 . ].=......6..
No. Time Source Destination Protocol Length Info
12 13:59:15,941036 0x0000 Broadcast ZigBee 85 Route Request, Dst: 0x3dcb, Src: 0x0000
Frame 12: 85 bytes on wire (680 bits), 85 bytes captured (680 bits) on interface wireshark_extcap2036, id 0
Interface id: 0 (wireshark_extcap2036)
Interface name: wireshark_extcap2036
Encapsulation type: IEEE 802.15.4 Wireless with TAP pseudo-header (206)
Arrival Time: May 8, 2020 13:59:15.941036000 Russia TZ 1 Standard Time
[Time shift for this packet: 0.000000000 seconds]
Epoch Time: 1588939155.941036000 seconds
[Time delta from previous captured frame: 0.126813000 seconds]
[Time delta from previous displayed frame: 0.126813000 seconds]
[Time since reference or first frame: 0.868971000 seconds]
Frame Number: 12
Frame Length: 85 bytes (680 bits)
Capture Length: 85 bytes (680 bits)
[Frame is marked: False]
[Frame is ignored: False]
[Protocols in frame: wpan-tap:zbee_nwk]
IEEE 802.15.4 TAP
IEEE 802.15.4 Data, Dst: Broadcast, Src: 0x99f4
ZigBee Network Layer Command, Dst: Broadcast, Src: 0x0000
Frame Control Field: 0x1209, Frame Type: Command, Discover Route: Suppress, Security, Extended Source Command
Destination: 0xfffc
Source: 0x0000
Radius: 29
Sequence Number: 61
Extended Source: TexasIns_00:1c:c0:f2:9d (00:12:4b:00:1c:c0:f2:9d)
ZigBee Security Header
Security Control Field: 0x28, Key Id: Network Key, Extended Nonce
Frame Counter: 551413
Extended Source: Ember_ff:fe:9a:b8:6b (00:0d:6f:ff:fe:9a:b8:6b)
Key Sequence Number: 0
Message Integrity Code: 2f5ae1c7
Command Frame: Route Request
Command Identifier: Route Request (0x01)
Command Options: 0x20, Extended Destination, Many-to-One Discovery: Not Many-to-One
.0.. .... = Multicast: False
..1. .... = Extended Destination: True
...0 0... = Many-to-One Discovery: Not Many-to-One (0x0)
Route ID: 93
Destination: 0x3dcb
Path Cost: 2
Extended Destination: NordicSe_9e:14:0c:f8:df (f4:ce:36:9e:14:0c:f8:df)
Frame (85 bytes):
0000 00 00 1c 00 01 00 04 00 00 00 a0 c2 03 00 03 00 ................
0010 0b 00 00 00 0a 00 01 00 30 00 00 00 41 88 de 62 ........0...A..b
0020 1a ff ff f4 99 09 12 fc ff 00 00 1d 3d 9d f2 c0 ............=...
0030 1c 00 4b 12 00 28 f5 69 08 00 6b b8 9a fe ff 6f ..K..(.i..k....o
0040 0d 00 00 bc 61 25 9a d4 a6 4d 81 6e 6c 3d 94 c8 ....a%...M.nl=..
0050 ee 2f 5a e1 c7 ./Z..
Decrypted ZigBee Payload (14 bytes):
0000 01 20 5d cb 3d 02 df f8 0c 14 9e 36 ce f4 . ].=......6..
No. Time Source Destination Protocol Length Info
1 13:59:15,072065 0x0000 Broadcast ZigBee 85 Route Request, Dst: 0x3dcb, Src: 0x0000
Frame 1: 85 bytes on wire (680 bits), 85 bytes captured (680 bits) on interface wireshark_extcap2036, id 0
Interface id: 0 (wireshark_extcap2036)
Interface name: wireshark_extcap2036
Encapsulation type: IEEE 802.15.4 Wireless with TAP pseudo-header (206)
Arrival Time: May 8, 2020 13:59:15.072065000 Russia TZ 1 Standard Time
[Time shift for this packet: 0.000000000 seconds]
Epoch Time: 1588939155.072065000 seconds
[Time delta from previous captured frame: 0.000000000 seconds]
[Time delta from previous displayed frame: 0.000000000 seconds]
[Time since reference or first frame: 0.000000000 seconds]
Frame Number: 1
Frame Length: 85 bytes (680 bits)
Capture Length: 85 bytes (680 bits)
[Frame is marked: False]
[Frame is ignored: False]
[Protocols in frame: wpan-tap:zbee_nwk]
IEEE 802.15.4 TAP
Header
Version: 0
Reserved: 0
Length: 28
RSS: -55,00 dBm
TLV Type: RSS (1)
TLV Length: 4
RSS: -55,00 dBm
Channel assignment: Page: Default (0), Number: 11
TLV Type: Channel assignment (3)
TLV Length: 3
Channel: 11
Page: Default (0)
Padding: 00
Link Quality Indicator: 152
TLV Type: Link Quality Indicator (10)
TLV Length: 1
Link Quality Indicator: 152
Padding: 000000
IEEE 802.15.4 Data, Dst: Broadcast, Src: 0x0000
Frame Control Field: 0x8841, Frame Type: Data, PAN ID Compression, Destination Addressing Mode: Short/16-bit, Frame Version: IEEE Std 802.15.4-2003, Source Addressing Mode: Short/16-bit
.... .... .... .001 = Frame Type: Data (0x1)
.... .... .... 0... = Security Enabled: False
.... .... ...0 .... = Frame Pending: False
.... .... ..0. .... = Acknowledge Request: False
.... .... .1.. .... = PAN ID Compression: True
.... .... 0... .... = Reserved: False
.... ...0 .... .... = Sequence Number Suppression: False
.... ..0. .... .... = Information Elements Present: False
.... 10.. .... .... = Destination Addressing Mode: Short/16-bit (0x2)
..00 .... .... .... = Frame Version: IEEE Std 802.15.4-2003 (0)
10.. .... .... .... = Source Addressing Mode: Short/16-bit (0x2)
Sequence Number: 7
Destination PAN: 0x1a62
Destination: 0xffff
Source: 0x0000
[Extended Source: TexasIns_00:1c:c0:f2:9d (00:12:4b:00:1c:c0:f2:9d)]
[Origin: 1]
ZigBee Network Layer Command, Dst: Broadcast, Src: 0x0000
Frame Control Field: 0x1209, Frame Type: Command, Discover Route: Suppress, Security, Extended Source Command
.... .... .... ..01 = Frame Type: Command (0x1)
.... .... ..00 10.. = Protocol Version: 2
.... .... 00.. .... = Discover Route: Suppress (0x0)
.... ...0 .... .... = Multicast: False
.... ..1. .... .... = Security: True
.... .0.. .... .... = Source Route: False
.... 0... .... .... = Destination: False
...1 .... .... .... = Extended Source: True
..0. .... .... .... = End Device Initiator: False
Destination: 0xfffc
Source: 0x0000
Radius: 30
Sequence Number: 61
Extended Source: TexasIns_00:1c:c0:f2:9d (00:12:4b:00:1c:c0:f2:9d)
ZigBee Security Header
Security Control Field: 0x28, Key Id: Network Key, Extended Nonce
...0 1... = Key Id: Network Key (0x1)
..1. .... = Extended Nonce: True
Frame Counter: 949242
Extended Source: TexasIns_00:1c:c0:f2:9d (00:12:4b:00:1c:c0:f2:9d)
Key Sequence Number: 0
Message Integrity Code: 3cc820c6
Command Frame: Route Request
Command Identifier: Route Request (0x01)
Command Options: 0x20, Extended Destination, Many-to-One Discovery: Not Many-to-One
.0.. .... = Multicast: False
..1. .... = Extended Destination: True
...0 0... = Many-to-One Discovery: Not Many-to-One (0x0)
Route ID: 93
Destination: 0x3dcb
Path Cost: 0
Extended Destination: NordicSe_9e:14:0c:f8:df (f4:ce:36:9e:14:0c:f8:df)
Frame (85 bytes):
0000 00 00 1c 00 01 00 04 00 00 00 5c c2 03 00 03 00 ..........\.....
0010 0b 00 00 00 0a 00 01 00 98 00 00 00 41 88 07 62 ............A..b
0020 1a ff ff 00 00 09 12 fc ff 00 00 1e 3d 9d f2 c0 ............=...
0030 1c 00 4b 12 00 28 fa 7b 0e 00 9d f2 c0 1c 00 4b ..K..(.{.......K
0040 12 00 00 b7 22 01 2c 76 ed c5 20 2e 5d 3a 0a 0a ....".,v.. .]:..
0050 9e 3c c8 20 c6 .<. .
Decrypted ZigBee Payload (14 bytes):
0000 01 20 5d cb 3d 00 df f8 0c 14 9e 36 ce f4 . ].=......6..
No. Time Source Destination Protocol Length Info
2 13:59:15,090855 0x0000 Broadcast ZigBee 77 Route Request[Malformed Packet]
Frame 2: 77 bytes on wire (616 bits), 77 bytes captured (616 bits) on interface wireshark_extcap2036, id 0
Interface id: 0 (wireshark_extcap2036)
Interface name: wireshark_extcap2036
Encapsulation type: IEEE 802.15.4 Wireless with TAP pseudo-header (206)
Arrival Time: May 8, 2020 13:59:15.090855000 Russia TZ 1 Standard Time
[Time shift for this packet: 0.000000000 seconds]
Epoch Time: 1588939155.090855000 seconds
[Time delta from previous captured frame: 0.018790000 seconds]
[Time delta from previous displayed frame: 0.018790000 seconds]
[Time since reference or first frame: 0.018790000 seconds]
Frame Number: 2
Frame Length: 77 bytes (616 bits)
Capture Length: 77 bytes (616 bits)
[Frame is marked: False]
[Frame is ignored: False]
[Protocols in frame: wpan-tap:zbee_nwk]
IEEE 802.15.4 TAP
Header
Version: 0
Reserved: 0
Length: 28
RSS: -47,00 dBm
TLV Type: RSS (1)
TLV Length: 4
RSS: -47,00 dBm
Channel assignment: Page: Default (0), Number: 11
TLV Type: Channel assignment (3)
TLV Length: 3
Channel: 11
Page: Default (0)
Padding: 00
Link Quality Indicator: 184
TLV Type: Link Quality Indicator (10)
TLV Length: 1
Link Quality Indicator: 184
Padding: 000000
IEEE 802.15.4 Data, Dst: Broadcast, Src: 0xecb1
Frame Control Field: 0x8841, Frame Type: Data, PAN ID Compression, Destination Addressing Mode: Short/16-bit, Frame Version: IEEE Std 802.15.4-2003, Source Addressing Mode: Short/16-bit
.... .... .... .001 = Frame Type: Data (0x1)
.... .... .... 0... = Security Enabled: False
.... .... ...0 .... = Frame Pending: False
.... .... ..0. .... = Acknowledge Request: False
.... .... .1.. .... = PAN ID Compression: True
.... .... 0... .... = Reserved: False
.... ...0 .... .... = Sequence Number Suppression: False
.... ..0. .... .... = Information Elements Present: False
.... 10.. .... .... = Destination Addressing Mode: Short/16-bit (0x2)
..00 .... .... .... = Frame Version: IEEE Std 802.15.4-2003 (0)
10.. .... .... .... = Source Addressing Mode: Short/16-bit (0x2)
Sequence Number: 28
Destination PAN: 0x1a62
Destination: 0xffff
Source: 0xecb1
[Extended Source: NordicSe_63:c6:13:27:6d (f4:ce:36:63:c6:13:27:6d)]
[Origin: 2]
ZigBee Network Layer Command, Dst: Broadcast, Src: 0x0000
Frame Control Field: 0x1209, Frame Type: Command, Discover Route: Suppress, Security, Extended Source Command
.... .... .... ..01 = Frame Type: Command (0x1)
.... .... ..00 10.. = Protocol Version: 2
.... .... 00.. .... = Discover Route: Suppress (0x0)
.... ...0 .... .... = Multicast: False
.... ..1. .... .... = Security: True
.... .0.. .... .... = Source Route: False
.... 0... .... .... = Destination: False
...1 .... .... .... = Extended Source: True
..0. .... .... .... = End Device Initiator: False
Destination: 0xfffc
Source: 0x0000
Radius: 29
Sequence Number: 61
Extended Source: TexasIns_00:1c:c0:f2:9d (00:12:4b:00:1c:c0:f2:9d)
ZigBee Security Header
Security Control Field: 0x28, Key Id: Network Key, Extended Nonce
...0 1... = Key Id: Network Key (0x1)
..1. .... = Extended Nonce: True
Frame Counter: 29959
Extended Source: NordicSe_63:c6:13:27:6d (f4:ce:36:63:c6:13:27:6d)
Key Sequence Number: 0
Message Integrity Code: 7b1672cf
Command Frame: Route Request
Command Identifier: Route Request (0x01)
Command Options: 0x20, Extended Destination, Many-to-One Discovery: Not Many-to-One
.0.. .... = Multicast: False
..1. .... = Extended Destination: True
...0 0... = Many-to-One Discovery: Not Many-to-One (0x0)
Route ID: 93
Destination: 0x3dcb
Path Cost: 4
[Malformed Packet: ZigBee]
[Expert Info (Error/Malformed): Malformed Packet (Exception occurred)]
[Malformed Packet (Exception occurred)]
[Severity level: Error]
[Group: Malformed]
Frame (77 bytes):
0000 00 00 1c 00 01 00 04 00 00 00 3c c2 03 00 03 00 ..........<.....
0010 0b 00 00 00 0a 00 01 00 b8 00 00 00 41 88 1c 62 ............A..b
0020 1a ff ff b1 ec 09 12 fc ff 00 00 1d 3d 9d f2 c0 ............=...
0030 1c 00 4b 12 00 28 07 75 00 00 6d 27 13 c6 63 36 ..K..(.u..m'..c6
0040 ce f4 00 84 8c e8 c6 99 be 7b 16 72 cf .........{.r.
Decrypted ZigBee Payload (6 bytes):
0000 01 20 5d cb 3d 04 . ].=.
No. Time Source Destination Protocol Length Info
3 13:59:15,124213 0x0000 Broadcast ZigBee 85 Route Request, Dst: 0x3dcb, Src: 0x0000
Frame 3: 85 bytes on wire (680 bits), 85 bytes captured (680 bits) on interface wireshark_extcap2036, id 0
Interface id: 0 (wireshark_extcap2036)
Interface name: wireshark_extcap2036
Encapsulation type: IEEE 802.15.4 Wireless with TAP pseudo-header (206)
Arrival Time: May 8, 2020 13:59:15.124213000 Russia TZ 1 Standard Time
[Time shift for this packet: 0.000000000 seconds]
Epoch Time: 1588939155.124213000 seconds
[Time delta from previous captured frame: 0.033358000 seconds]
[Time delta from previous displayed frame: 0.033358000 seconds]
[Time since reference or first frame: 0.052148000 seconds]
Frame Number: 3
Frame Length: 85 bytes (680 bits)
Capture Length: 85 bytes (680 bits)
[Frame is marked: False]
[Frame is ignored: False]
[Protocols in frame: wpan-tap:zbee_nwk]
IEEE 802.15.4 TAP
Header
Version: 0
Reserved: 0
Length: 28
RSS: -54,00 dBm
TLV Type: RSS (1)
TLV Length: 4
RSS: -54,00 dBm
Channel assignment: Page: Default (0), Number: 11
TLV Type: Channel assignment (3)
TLV Length: 3
Channel: 11
Page: Default (0)
Padding: 00
Link Quality Indicator: 152
TLV Type: Link Quality Indicator (10)
TLV Length: 1
Link Quality Indicator: 152
Padding: 000000
IEEE 802.15.4 Data, Dst: Broadcast, Src: 0xc21d
Frame Control Field: 0x8841, Frame Type: Data, PAN ID Compression, Destination Addressing Mode: Short/16-bit, Frame Version: IEEE Std 802.15.4-2003, Source Addressing Mode: Short/16-bit
.... .... .... .001 = Frame Type: Data (0x1)
.... .... .... 0... = Security Enabled: False
.... .... ...0 .... = Frame Pending: False
.... .... ..0. .... = Acknowledge Request: False
.... .... .1.. .... = PAN ID Compression: True
.... .... 0... .... = Reserved: False
.... ...0 .... .... = Sequence Number Suppression: False
.... ..0. .... .... = Information Elements Present: False
.... 10.. .... .... = Destination Addressing Mode: Short/16-bit (0x2)
..00 .... .... .... = Frame Version: IEEE Std 802.15.4-2003 (0)
10.. .... .... .... = Source Addressing Mode: Short/16-bit (0x2)
Sequence Number: 126
Destination PAN: 0x1a62
Destination: 0xffff
Source: 0xc21d
[Extended Source: Ember_ff:fe:ba:99:43 (00:0d:6f:ff:fe:ba:99:43)]
[Origin: 3]
ZigBee Network Layer Command, Dst: Broadcast, Src: 0x0000
Frame Control Field: 0x1209, Frame Type: Command, Discover Route: Suppress, Security, Extended Source Command
.... .... .... ..01 = Frame Type: Command (0x1)
.... .... ..00 10.. = Protocol Version: 2
.... .... 00.. .... = Discover Route: Suppress (0x0)
.... ...0 .... .... = Multicast: False
.... ..1. .... .... = Security: True
.... .0.. .... .... = Source Route: False
.... 0... .... .... = Destination: False
...1 .... .... .... = Extended Source: True
..0. .... .... .... = End Device Initiator: False
Destination: 0xfffc
Source: 0x0000
Radius: 29
Sequence Number: 61
Extended Source: TexasIns_00:1c:c0:f2:9d (00:12:4b:00:1c:c0:f2:9d)
ZigBee Security Header
Security Control Field: 0x28, Key Id: Network Key, Extended Nonce
...0 1... = Key Id: Network Key (0x1)
..1. .... = Extended Nonce: True
Frame Counter: 864935
Extended Source: Ember_ff:fe:ba:99:43 (00:0d:6f:ff:fe:ba:99:43)
Key Sequence Number: 0
Message Integrity Code: c99d6c47
Command Frame: Route Request
Command Identifier: Route Request (0x01)
Command Options: 0x20, Extended Destination, Many-to-One Discovery: Not Many-to-One
.0.. .... = Multicast: False
..1. .... = Extended Destination: True
...0 0... = Many-to-One Discovery: Not Many-to-One (0x0)
Route ID: 93
Destination: 0x3dcb
Path Cost: 1
Extended Destination: NordicSe_9e:14:0c:f8:df (f4:ce:36:9e:14:0c:f8:df)
Frame (85 bytes):
0000 00 00 1c 00 01 00 04 00 00 00 58 c2 03 00 03 00 ..........X.....
0010 0b 00 00 00 0a 00 01 00 98 00 00 00 41 88 7e 62 ............A.~b
0020 1a ff ff 1d c2 09 12 fc ff 00 00 1d 3d 9d f2 c0 ............=...
0030 1c 00 4b 12 00 28 a7 32 0d 00 43 99 ba fe ff 6f ..K..(.2..C....o
0040 0d 00 00 f0 37 93 5b 60 b2 a5 e2 0f 03 ec 36 6a ....7.[`......6j
0050 dd c9 9d 6c 47 ...lG
Decrypted ZigBee Payload (14 bytes):
0000 01 20 5d cb 3d 01 df f8 0c 14 9e 36 ce f4 . ].=......6..
No. Time Source Destination Protocol Length Info
4 13:59:15,156880 0x0000 Broadcast ZigBee 85 Route Request, Dst: 0x3dcb, Src: 0x0000
Frame 4: 85 bytes on wire (680 bits), 85 bytes captured (680 bits) on interface wireshark_extcap2036, id 0
Interface id: 0 (wireshark_extcap2036)
Interface name: wireshark_extcap2036
Encapsulation type: IEEE 802.15.4 Wireless with TAP pseudo-header (206)
Arrival Time: May 8, 2020 13:59:15.156880000 Russia TZ 1 Standard Time
[Time shift for this packet: 0.000000000 seconds]
Epoch Time: 1588939155.156880000 seconds
[Time delta from previous captured frame: 0.032667000 seconds]
[Time delta from previous displayed frame: 0.032667000 seconds]
[Time since reference or first frame: 0.084815000 seconds]
Frame Number: 4
Frame Length: 85 bytes (680 bits)
Capture Length: 85 bytes (680 bits)
[Frame is marked: False]
[Frame is ignored: False]
[Protocols in frame: wpan-tap:zbee_nwk]
IEEE 802.15.4 TAP
Header
Version: 0
Reserved: 0
Length: 28
RSS: -72,00 dBm
TLV Type: RSS (1)
TLV Length: 4
RSS: -72,00 dBm
Channel assignment: Page: Default (0), Number: 11
TLV Type: Channel assignment (3)
TLV Length: 3
Channel: 11
Page: Default (0)
Padding: 00
Link Quality Indicator: 88
TLV Type: Link Quality Indicator (10)
TLV Length: 1
Link Quality Indicator: 88
Padding: 000000
IEEE 802.15.4 Data, Dst: Broadcast, Src: 0x7ae8
Frame Control Field: 0x8841, Frame Type: Data, PAN ID Compression, Destination Addressing Mode: Short/16-bit, Frame Version: IEEE Std 802.15.4-2003, Source Addressing Mode: Short/16-bit
.... .... .... .001 = Frame Type: Data (0x1)
.... .... .... 0... = Security Enabled: False
.... .... ...0 .... = Frame Pending: False
.... .... ..0. .... = Acknowledge Request: False
.... .... .1.. .... = PAN ID Compression: True
.... .... 0... .... = Reserved: False
.... ...0 .... .... = Sequence Number Suppression: False
.... ..0. .... .... = Information Elements Present: False
.... 10.. .... .... = Destination Addressing Mode: Short/16-bit (0x2)
..00 .... .... .... = Frame Version: IEEE Std 802.15.4-2003 (0)
10.. .... .... .... = Source Addressing Mode: Short/16-bit (0x2)
Sequence Number: 128
Destination PAN: 0x1a62
Destination: 0xffff
Source: 0x7ae8
[Extended Source: Ember_ff:fe:9a:a1:b4 (00:0d:6f:ff:fe:9a:a1:b4)]
[Origin: 4]
ZigBee Network Layer Command, Dst: Broadcast, Src: 0x0000
Frame Control Field: 0x1209, Frame Type: Command, Discover Route: Suppress, Security, Extended Source Command
.... .... .... ..01 = Frame Type: Command (0x1)
.... .... ..00 10.. = Protocol Version: 2
.... .... 00.. .... = Discover Route: Suppress (0x0)
.... ...0 .... .... = Multicast: False
.... ..1. .... .... = Security: True
.... .0.. .... .... = Source Route: False
.... 0... .... .... = Destination: False
...1 .... .... .... = Extended Source: True
..0. .... .... .... = End Device Initiator: False
Destination: 0xfffc
Source: 0x0000
Radius: 29
Sequence Number: 61
Extended Source: TexasIns_00:1c:c0:f2:9d (00:12:4b:00:1c:c0:f2:9d)
ZigBee Security Header
Security Control Field: 0x28, Key Id: Network Key, Extended Nonce
...0 1... = Key Id: Network Key (0x1)
..1. .... = Extended Nonce: True
Frame Counter: 511829
Extended Source: Ember_ff:fe:9a:a1:b4 (00:0d:6f:ff:fe:9a:a1:b4)
Key Sequence Number: 0
Message Integrity Code: ac9db795
Command Frame: Route Request
Command Identifier: Route Request (0x01)
Command Options: 0x20, Extended Destination, Many-to-One Discovery: Not Many-to-One
.0.. .... = Multicast: False
..1. .... = Extended Destination: True
...0 0... = Many-to-One Discovery: Not Many-to-One (0x0)
Route ID: 93
Destination: 0x3dcb
Path Cost: 1
Extended Destination: NordicSe_9e:14:0c:f8:df (f4:ce:36:9e:14:0c:f8:df)
Frame (85 bytes):
0000 00 00 1c 00 01 00 04 00 00 00 90 c2 03 00 03 00 ................
0010 0b 00 00 00 0a 00 01 00 58 00 00 00 41 88 80 62 ........X...A..b
0020 1a ff ff e8 7a 09 12 fc ff 00 00 1d 3d 9d f2 c0 ....z.......=...
0030 1c 00 4b 12 00 28 55 cf 07 00 b4 a1 9a fe ff 6f ..K..(U........o
0040 0d 00 00 dc e2 f6 19 0e 37 e5 e7 ff 02 f6 3c 5f ........7.....<_
0050 f0 ac 9d b7 95 .....
Decrypted ZigBee Payload (14 bytes):
0000 01 20 5d cb 3d 01 df f8 0c 14 9e 36 ce f4 . ].=......6..
No. Time Source Destination Protocol Length Info
5 13:59:15,296123 0x0000 Broadcast ZigBee 85 Route Request, Dst: 0x3dcb, Src: 0x0000
Frame 5: 85 bytes on wire (680 bits), 85 bytes captured (680 bits) on interface wireshark_extcap2036, id 0
Interface id: 0 (wireshark_extcap2036)
Interface name: wireshark_extcap2036
Encapsulation type: IEEE 802.15.4 Wireless with TAP pseudo-header (206)
Arrival Time: May 8, 2020 13:59:15.296123000 Russia TZ 1 Standard Time
[Time shift for this packet: 0.000000000 seconds]
Epoch Time: 1588939155.296123000 seconds
[Time delta from previous captured frame: 0.139243000 seconds]
[Time delta from previous displayed frame: 0.139243000 seconds]
[Time since reference or first frame: 0.224058000 seconds]
Frame Number: 5
Frame Length: 85 bytes (680 bits)
Capture Length: 85 bytes (680 bits)
[Frame is marked: False]
[Frame is ignored: False]
[Protocols in frame: wpan-tap:zbee_nwk]
IEEE 802.15.4 TAP
Header
Version: 0
Reserved: 0
Length: 28
RSS: -81,00 dBm
TLV Type: RSS (1)
TLV Length: 4
RSS: -81,00 dBm
Channel assignment: Page: Default (0), Number: 11
TLV Type: Channel assignment (3)
TLV Length: 3
Channel: 11
Page: Default (0)
Padding: 00
Link Quality Indicator: 48
TLV Type: Link Quality Indicator (10)
TLV Length: 1
Link Quality Indicator: 48
Padding: 000000
IEEE 802.15.4 Data, Dst: Broadcast, Src: 0x99f4
Frame Control Field: 0x8841, Frame Type: Data, PAN ID Compression, Destination Addressing Mode: Short/16-bit, Frame Version: IEEE Std 802.15.4-2003, Source Addressing Mode: Short/16-bit
.... .... .... .001 = Frame Type: Data (0x1)
.... .... .... 0... = Security Enabled: False
.... .... ...0 .... = Frame Pending: False
.... .... ..0. .... = Acknowledge Request: False
.... .... .1.. .... = PAN ID Compression: True
.... .... 0... .... = Reserved: False
.... ...0 .... .... = Sequence Number Suppression: False
.... ..0. .... .... = Information Elements Present: False
.... 10.. .... .... = Destination Addressing Mode: Short/16-bit (0x2)
..00 .... .... .... = Frame Version: IEEE Std 802.15.4-2003 (0)
10.. .... .... .... = Source Addressing Mode: Short/16-bit (0x2)
Sequence Number: 220
Destination PAN: 0x1a62
Destination: 0xffff
Source: 0x99f4
[Extended Source: Ember_ff:fe:9a:b8:6b (00:0d:6f:ff:fe:9a:b8:6b)]
[Origin: 5]
ZigBee Network Layer Command, Dst: Broadcast, Src: 0x0000
Frame Control Field: 0x1209, Frame Type: Command, Discover Route: Suppress, Security, Extended Source Command
.... .... .... ..01 = Frame Type: Command (0x1)
.... .... ..00 10.. = Protocol Version: 2
.... .... 00.. .... = Discover Route: Suppress (0x0)
.... ...0 .... .... = Multicast: False
.... ..1. .... .... = Security: True
.... .0.. .... .... = Source Route: False
.... 0... .... .... = Destination: False
...1 .... .... .... = Extended Source: True
..0. .... .... .... = End Device Initiator: False
Destination: 0xfffc
Source: 0x0000
Radius: 29
Sequence Number: 61
Extended Source: TexasIns_00:1c:c0:f2:9d (00:12:4b:00:1c:c0:f2:9d)
ZigBee Security Header
Security Control Field: 0x28, Key Id: Network Key, Extended Nonce
...0 1... = Key Id: Network Key (0x1)
..1. .... = Extended Nonce: True
Frame Counter: 551411
Extended Source: Ember_ff:fe:9a:b8:6b (00:0d:6f:ff:fe:9a:b8:6b)
Key Sequence Number: 0
Message Integrity Code: b3596408
Command Frame: Route Request
Command Identifier: Route Request (0x01)
Command Options: 0x20, Extended Destination, Many-to-One Discovery: Not Many-to-One
.0.. .... = Multicast: False
..1. .... = Extended Destination: True
...0 0... = Many-to-One Discovery: Not Many-to-One (0x0)
Route ID: 93
Destination: 0x3dcb
Path Cost: 2
Extended Destination: NordicSe_9e:14:0c:f8:df (f4:ce:36:9e:14:0c:f8:df)
Frame (85 bytes):
0000 00 00 1c 00 01 00 04 00 00 00 a2 c2 03 00 03 00 ................
0010 0b 00 00 00 0a 00 01 00 30 00 00 00 41 88 dc 62 ........0...A..b
0020 1a ff ff f4 99 09 12 fc ff 00 00 1d 3d 9d f2 c0 ............=...
0030 1c 00 4b 12 00 28 f3 69 08 00 6b b8 9a fe ff 6f ..K..(.i..k....o
0040 0d 00 00 09 f3 c2 1b f6 92 11 30 f7 a1 8d c1 cb ..........0.....
0050 65 b3 59 64 08 e.Yd.
Decrypted ZigBee Payload (14 bytes):
0000 01 20 5d cb 3d 02 df f8 0c 14 9e 36 ce f4 . ].=......6..
No. Time Source Destination Protocol Length Info
6 13:59:15,426428 0x0000 Broadcast ZigBee 85 Route Request, Dst: 0x3dcb, Src: 0x0000
Frame 6: 85 bytes on wire (680 bits), 85 bytes captured (680 bits) on interface wireshark_extcap2036, id 0
Interface id: 0 (wireshark_extcap2036)
Interface name: wireshark_extcap2036
Encapsulation type: IEEE 802.15.4 Wireless with TAP pseudo-header (206)
Arrival Time: May 8, 2020 13:59:15.426428000 Russia TZ 1 Standard Time
[Time shift for this packet: 0.000000000 seconds]
Epoch Time: 1588939155.426428000 seconds
[Time delta from previous captured frame: 0.130305000 seconds]
[Time delta from previous displayed frame: 0.130305000 seconds]
[Time since reference or first frame: 0.354363000 seconds]
Frame Number: 6
Frame Length: 85 bytes (680 bits)
Capture Length: 85 bytes (680 bits)
[Frame is marked: False]
[Frame is ignored: False]
[Protocols in frame: wpan-tap:zbee_nwk]
IEEE 802.15.4 TAP
Header
Version: 0
Reserved: 0
Length: 28
RSS: -54,00 dBm
TLV Type: RSS (1)
TLV Length: 4
RSS: -54,00 dBm
Channel assignment: Page: Default (0), Number: 11
TLV Type: Channel assignment (3)
TLV Length: 3
Channel: 11
Page: Default (0)
Padding: 00
Link Quality Indicator: 152
TLV Type: Link Quality Indicator (10)
TLV Length: 1
Link Quality Indicator: 152
Padding: 000000
IEEE 802.15.4 Data, Dst: Broadcast, Src: 0xc21d
Frame Control Field: 0x8841, Frame Type: Data, PAN ID Compression, Destination Addressing Mode: Short/16-bit, Frame Version: IEEE Std 802.15.4-2003, Source Addressing Mode: Short/16-bit
.... .... .... .001 = Frame Type: Data (0x1)
.... .... .... 0... = Security Enabled: False
.... .... ...0 .... = Frame Pending: False
.... .... ..0. .... = Acknowledge Request: False
.... .... .1.. .... = PAN ID Compression: True
.... .... 0... .... = Reserved: False
.... ...0 .... .... = Sequence Number Suppression: False
.... ..0. .... .... = Information Elements Present: False
.... 10.. .... .... = Destination Addressing Mode: Short/16-bit (0x2)
..00 .... .... .... = Frame Version: IEEE Std 802.15.4-2003 (0)
10.. .... .... .... = Source Addressing Mode: Short/16-bit (0x2)
Sequence Number: 127
Destination PAN: 0x1a62
Destination: 0xffff
Source: 0xc21d
[Extended Source: Ember_ff:fe:ba:99:43 (00:0d:6f:ff:fe:ba:99:43)]
[Origin: 3]
ZigBee Network Layer Command, Dst: Broadcast, Src: 0x0000
Frame Control Field: 0x1209, Frame Type: Command, Discover Route: Suppress, Security, Extended Source Command
.... .... .... ..01 = Frame Type: Command (0x1)
.... .... ..00 10.. = Protocol Version: 2
.... .... 00.. .... = Discover Route: Suppress (0x0)
.... ...0 .... .... = Multicast: False
.... ..1. .... .... = Security: True
.... .0.. .... .... = Source Route: False
.... 0... .... .... = Destination: False
...1 .... .... .... = Extended Source: True
..0. .... .... .... = End Device Initiator: False
Destination: 0xfffc
Source: 0x0000
Radius: 29
Sequence Number: 61
Extended Source: TexasIns_00:1c:c0:f2:9d (00:12:4b:00:1c:c0:f2:9d)
ZigBee Security Header
Security Control Field: 0x28, Key Id: Network Key, Extended Nonce
...0 1... = Key Id: Network Key (0x1)
..1. .... = Extended Nonce: True
Frame Counter: 864936
Extended Source: Ember_ff:fe:ba:99:43 (00:0d:6f:ff:fe:ba:99:43)
Key Sequence Number: 0
Message Integrity Code: b1eedf7f
Command Frame: Route Request
Command Identifier: Route Request (0x01)
Command Options: 0x20, Extended Destination, Many-to-One Discovery: Not Many-to-One
.0.. .... = Multicast: False
..1. .... = Extended Destination: True
...0 0... = Many-to-One Discovery: Not Many-to-One (0x0)
Route ID: 93
Destination: 0x3dcb
Path Cost: 1
Extended Destination: NordicSe_9e:14:0c:f8:df (f4:ce:36:9e:14:0c:f8:df)
Frame (85 bytes):
0000 00 00 1c 00 01 00 04 00 00 00 58 c2 03 00 03 00 ..........X.....
0010 0b 00 00 00 0a 00 01 00 98 00 00 00 41 88 7f 62 ............A..b
0020 1a ff ff 1d c2 09 12 fc ff 00 00 1d 3d 9d f2 c0 ............=...
0030 1c 00 4b 12 00 28 a8 32 0d 00 43 99 ba fe ff 6f ..K..(.2..C....o
0040 0d 00 00 f9 42 00 3a fb 87 d5 ff c8 2e 74 21 a7 ....B.:......t!.
0050 b5 b1 ee df 7f .....
Decrypted ZigBee Payload (14 bytes):
0000 01 20 5d cb 3d 01 df f8 0c 14 9e 36 ce f4 . ].=......6..
No. Time Source Destination Protocol Length Info
7 13:59:15,516367 0x0000 Broadcast ZigBee 85 Route Request, Dst: 0x3dcb, Src: 0x0000
Frame 7: 85 bytes on wire (680 bits), 85 bytes captured (680 bits) on interface wireshark_extcap2036, id 0
Interface id: 0 (wireshark_extcap2036)
Interface name: wireshark_extcap2036
Encapsulation type: IEEE 802.15.4 Wireless with TAP pseudo-header (206)
Arrival Time: May 8, 2020 13:59:15.516367000 Russia TZ 1 Standard Time
[Time shift for this packet: 0.000000000 seconds]
Epoch Time: 1588939155.516367000 seconds
[Time delta from previous captured frame: 0.089939000 seconds]
[Time delta from previous displayed frame: 0.089939000 seconds]
[Time since reference or first frame: 0.444302000 seconds]
Frame Number: 7
Frame Length: 85 bytes (680 bits)
Capture Length: 85 bytes (680 bits)
[Frame is marked: False]
[Frame is ignored: False]
[Protocols in frame: wpan-tap:zbee_nwk]
IEEE 802.15.4 TAP
Header
Version: 0
Reserved: 0
Length: 28
RSS: -72,00 dBm
TLV Type: RSS (1)
TLV Length: 4
RSS: -72,00 dBm
Channel assignment: Page: Default (0), Number: 11
TLV Type: Channel assignment (3)
TLV Length: 3
Channel: 11
Page: Default (0)
Padding: 00
Link Quality Indicator: 88
TLV Type: Link Quality Indicator (10)
TLV Length: 1
Link Quality Indicator: 88
Padding: 000000
IEEE 802.15.4 Data, Dst: Broadcast, Src: 0x7ae8
Frame Control Field: 0x8841, Frame Type: Data, PAN ID Compression, Destination Addressing Mode: Short/16-bit, Frame Version: IEEE Std 802.15.4-2003, Source Addressing Mode: Short/16-bit
.... .... .... .001 = Frame Type: Data (0x1)
.... .... .... 0... = Security Enabled: False
.... .... ...0 .... = Frame Pending: False
.... .... ..0. .... = Acknowledge Request: False
.... .... .1.. .... = PAN ID Compression: True
.... .... 0... .... = Reserved: False
.... ...0 .... .... = Sequence Number Suppression: False
.... ..0. .... .... = Information Elements Present: False
.... 10.. .... .... = Destination Addressing Mode: Short/16-bit (0x2)
..00 .... .... .... = Frame Version: IEEE Std 802.15.4-2003 (0)
10.. .... .... .... = Source Addressing Mode: Short/16-bit (0x2)
Sequence Number: 129
Destination PAN: 0x1a62
Destination: 0xffff
Source: 0x7ae8
[Extended Source: Ember_ff:fe:9a:a1:b4 (00:0d:6f:ff:fe:9a:a1:b4)]
[Origin: 4]
ZigBee Network Layer Command, Dst: Broadcast, Src: 0x0000
Frame Control Field: 0x1209, Frame Type: Command, Discover Route: Suppress, Security, Extended Source Command
.... .... .... ..01 = Frame Type: Command (0x1)
.... .... ..00 10.. = Protocol Version: 2
.... .... 00.. .... = Discover Route: Suppress (0x0)
.... ...0 .... .... = Multicast: False
.... ..1. .... .... = Security: True
.... .0.. .... .... = Source Route: False
.... 0... .... .... = Destination: False
...1 .... .... .... = Extended Source: True
..0. .... .... .... = End Device Initiator: False
Destination: 0xfffc
Source: 0x0000
Radius: 29
Sequence Number: 61
Extended Source: TexasIns_00:1c:c0:f2:9d (00:12:4b:00:1c:c0:f2:9d)
ZigBee Security Header
Security Control Field: 0x28, Key Id: Network Key, Extended Nonce
...0 1... = Key Id: Network Key (0x1)
..1. .... = Extended Nonce: True
Frame Counter: 511830
Extended Source: Ember_ff:fe:9a:a1:b4 (00:0d:6f:ff:fe:9a:a1:b4)
Key Sequence Number: 0
Message Integrity Code: 76c303ac
Command Frame: Route Request
Command Identifier: Route Request (0x01)
Command Options: 0x20, Extended Destination, Many-to-One Discovery: Not Many-to-One
.0.. .... = Multicast: False
..1. .... = Extended Destination: True
...0 0... = Many-to-One Discovery: Not Many-to-One (0x0)
Route ID: 93
Destination: 0x3dcb
Path Cost: 1
Extended Destination: NordicSe_9e:14:0c:f8:df (f4:ce:36:9e:14:0c:f8:df)
Frame (85 bytes):
0000 00 00 1c 00 01 00 04 00 00 00 90 c2 03 00 03 00 ................
0010 0b 00 00 00 0a 00 01 00 58 00 00 00 41 88 81 62 ........X...A..b
0020 1a ff ff e8 7a 09 12 fc ff 00 00 1d 3d 9d f2 c0 ....z.......=...
0030 1c 00 4b 12 00 28 56 cf 07 00 b4 a1 9a fe ff 6f ..K..(V........o
0040 0d 00 00 5f ad 10 af a3 1d ca a6 01 fe ab 03 ff ..._............
0050 a6 76 c3 03 ac .v...
Decrypted ZigBee Payload (14 bytes):
0000 01 20 5d cb 3d 01 df f8 0c 14 9e 36 ce f4 . ].=......6..
No. Time Source Destination Protocol Length Info
8 13:59:15,551679 0x0000 Broadcast ZigBee 77 Route Request[Malformed Packet]
Frame 8: 77 bytes on wire (616 bits), 77 bytes captured (616 bits) on interface wireshark_extcap2036, id 0
Interface id: 0 (wireshark_extcap2036)
Interface name: wireshark_extcap2036
Encapsulation type: IEEE 802.15.4 Wireless with TAP pseudo-header (206)
Arrival Time: May 8, 2020 13:59:15.551679000 Russia TZ 1 Standard Time
[Time shift for this packet: 0.000000000 seconds]
Epoch Time: 1588939155.551679000 seconds
[Time delta from previous captured frame: 0.035312000 seconds]
[Time delta from previous displayed frame: 0.035312000 seconds]
[Time since reference or first frame: 0.479614000 seconds]
Frame Number: 8
Frame Length: 77 bytes (616 bits)
Capture Length: 77 bytes (616 bits)
[Frame is marked: False]
[Frame is ignored: False]
[Protocols in frame: wpan-tap:zbee_nwk]
IEEE 802.15.4 TAP
Header
Version: 0
Reserved: 0
Length: 28
RSS: -47,00 dBm
TLV Type: RSS (1)
TLV Length: 4
RSS: -47,00 dBm
Channel assignment: Page: Default (0), Number: 11
TLV Type: Channel assignment (3)
TLV Length: 3
Channel: 11
Page: Default (0)
Padding: 00
Link Quality Indicator: 184
TLV Type: Link Quality Indicator (10)
TLV Length: 1
Link Quality Indicator: 184
Padding: 000000
IEEE 802.15.4 Data, Dst: Broadcast, Src: 0xecb1
Frame Control Field: 0x8841, Frame Type: Data, PAN ID Compression, Destination Addressing Mode: Short/16-bit, Frame Version: IEEE Std 802.15.4-2003, Source Addressing Mode: Short/16-bit
.... .... .... .001 = Frame Type: Data (0x1)
.... .... .... 0... = Security Enabled: False
.... .... ...0 .... = Frame Pending: False
.... .... ..0. .... = Acknowledge Request: False
.... .... .1.. .... = PAN ID Compression: True
.... .... 0... .... = Reserved: False
.... ...0 .... .... = Sequence Number Suppression: False
.... ..0. .... .... = Information Elements Present: False
.... 10.. .... .... = Destination Addressing Mode: Short/16-bit (0x2)
..00 .... .... .... = Frame Version: IEEE Std 802.15.4-2003 (0)
10.. .... .... .... = Source Addressing Mode: Short/16-bit (0x2)
Sequence Number: 29
Destination PAN: 0x1a62
Destination: 0xffff
Source: 0xecb1
[Extended Source: NordicSe_63:c6:13:27:6d (f4:ce:36:63:c6:13:27:6d)]
[Origin: 2]
ZigBee Network Layer Command, Dst: Broadcast, Src: 0x0000
Frame Control Field: 0x1209, Frame Type: Command, Discover Route: Suppress, Security, Extended Source Command
.... .... .... ..01 = Frame Type: Command (0x1)
.... .... ..00 10.. = Protocol Version: 2
.... .... 00.. .... = Discover Route: Suppress (0x0)
.... ...0 .... .... = Multicast: False
.... ..1. .... .... = Security: True
.... .0.. .... .... = Source Route: False
.... 0... .... .... = Destination: False
...1 .... .... .... = Extended Source: True
..0. .... .... .... = End Device Initiator: False
Destination: 0xfffc
Source: 0x0000
Radius: 29
Sequence Number: 61
Extended Source: TexasIns_00:1c:c0:f2:9d (00:12:4b:00:1c:c0:f2:9d)
ZigBee Security Header
Security Control Field: 0x28, Key Id: Network Key, Extended Nonce
...0 1... = Key Id: Network Key (0x1)
..1. .... = Extended Nonce: True
Frame Counter: 29960
Extended Source: NordicSe_63:c6:13:27:6d (f4:ce:36:63:c6:13:27:6d)
Key Sequence Number: 0
Message Integrity Code: ab8891c2
Command Frame: Route Request
Command Identifier: Route Request (0x01)
Command Options: 0x20, Extended Destination, Many-to-One Discovery: Not Many-to-One
.0.. .... = Multicast: False
..1. .... = Extended Destination: True
...0 0... = Many-to-One Discovery: Not Many-to-One (0x0)
Route ID: 93
Destination: 0x3dcb
Path Cost: 4
[Malformed Packet: ZigBee]
[Expert Info (Error/Malformed): Malformed Packet (Exception occurred)]
[Malformed Packet (Exception occurred)]
[Severity level: Error]
[Group: Malformed]
Frame (77 bytes):
0000 00 00 1c 00 01 00 04 00 00 00 3c c2 03 00 03 00 ..........<.....
0010 0b 00 00 00 0a 00 01 00 b8 00 00 00 41 88 1d 62 ............A..b
0020 1a ff ff b1 ec 09 12 fc ff 00 00 1d 3d 9d f2 c0 ............=...
0030 1c 00 4b 12 00 28 08 75 00 00 6d 27 13 c6 63 36 ..K..(.u..m'..c6
0040 ce f4 00 e6 8f f6 0d 81 15 ab 88 91 c2 .............
Decrypted ZigBee Payload (6 bytes):
0000 01 20 5d cb 3d 04 . ].=.
No. Time Source Destination Protocol Length Info
9 13:59:15,562473 0x0000 Broadcast ZigBee 85 Route Request, Dst: 0x3dcb, Src: 0x0000
Frame 9: 85 bytes on wire (680 bits), 85 bytes captured (680 bits) on interface wireshark_extcap2036, id 0
Interface id: 0 (wireshark_extcap2036)
Interface name: wireshark_extcap2036
Encapsulation type: IEEE 802.15.4 Wireless with TAP pseudo-header (206)
Arrival Time: May 8, 2020 13:59:15.562473000 Russia TZ 1 Standard Time
[Time shift for this packet: 0.000000000 seconds]
Epoch Time: 1588939155.562473000 seconds
[Time delta from previous captured frame: 0.010794000 seconds]
[Time delta from previous displayed frame: 0.010794000 seconds]
[Time since reference or first frame: 0.490408000 seconds]
Frame Number: 9
Frame Length: 85 bytes (680 bits)
Capture Length: 85 bytes (680 bits)
[Frame is marked: False]
[Frame is ignored: False]
[Protocols in frame: wpan-tap:zbee_nwk]
IEEE 802.15.4 TAP
Header
Version: 0
Reserved: 0
Length: 28
RSS: -81,00 dBm
TLV Type: RSS (1)
TLV Length: 4
RSS: -81,00 dBm
Channel assignment: Page: Default (0), Number: 11
TLV Type: Channel assignment (3)
TLV Length: 3
Channel: 11
Page: Default (0)
Padding: 00
Link Quality Indicator: 48
TLV Type: Link Quality Indicator (10)
TLV Length: 1
Link Quality Indicator: 48
Padding: 000000
IEEE 802.15.4 Data, Dst: Broadcast, Src: 0x99f4
Frame Control Field: 0x8841, Frame Type: Data, PAN ID Compression, Destination Addressing Mode: Short/16-bit, Frame Version: IEEE Std 802.15.4-2003, Source Addressing Mode: Short/16-bit
.... .... .... .001 = Frame Type: Data (0x1)
.... .... .... 0... = Security Enabled: False
.... .... ...0 .... = Frame Pending: False
.... .... ..0. .... = Acknowledge Request: False
.... .... .1.. .... = PAN ID Compression: True
.... .... 0... .... = Reserved: False
.... ...0 .... .... = Sequence Number Suppression: False
.... ..0. .... .... = Information Elements Present: False
.... 10.. .... .... = Destination Addressing Mode: Short/16-bit (0x2)
..00 .... .... .... = Frame Version: IEEE Std 802.15.4-2003 (0)
10.. .... .... .... = Source Addressing Mode: Short/16-bit (0x2)
Sequence Number: 221
Destination PAN: 0x1a62
Destination: 0xffff
Source: 0x99f4
[Extended Source: Ember_ff:fe:9a:b8:6b (00:0d:6f:ff:fe:9a:b8:6b)]
[Origin: 5]
ZigBee Network Layer Command, Dst: Broadcast, Src: 0x0000
Frame Control Field: 0x1209, Frame Type: Command, Discover Route: Suppress, Security, Extended Source Command
.... .... .... ..01 = Frame Type: Command (0x1)
.... .... ..00 10.. = Protocol Version: 2
.... .... 00.. .... = Discover Route: Suppress (0x0)
.... ...0 .... .... = Multicast: False
.... ..1. .... .... = Security: True
.... .0.. .... .... = Source Route: False
.... 0... .... .... = Destination: False
...1 .... .... .... = Extended Source: True
..0. .... .... .... = End Device Initiator: False
Destination: 0xfffc
Source: 0x0000
Radius: 29
Sequence Number: 61
Extended Source: TexasIns_00:1c:c0:f2:9d (00:12:4b:00:1c:c0:f2:9d)
ZigBee Security Header
Security Control Field: 0x28, Key Id: Network Key, Extended Nonce
...0 1... = Key Id: Network Key (0x1)
..1. .... = Extended Nonce: True
Frame Counter: 551412
Extended Source: Ember_ff:fe:9a:b8:6b (00:0d:6f:ff:fe:9a:b8:6b)
Key Sequence Number: 0
Message Integrity Code: 220972bf
Command Frame: Route Request
Command Identifier: Route Request (0x01)
Command Options: 0x20, Extended Destination, Many-to-One Discovery: Not Many-to-One
.0.. .... = Multicast: False
..1. .... = Extended Destination: True
...0 0... = Many-to-One Discovery: Not Many-to-One (0x0)
Route ID: 93
Destination: 0x3dcb
Path Cost: 2
Extended Destination: NordicSe_9e:14:0c:f8:df (f4:ce:36:9e:14:0c:f8:df)
Frame (85 bytes):
0000 00 00 1c 00 01 00 04 00 00 00 a2 c2 03 00 03 00 ................
0010 0b 00 00 00 0a 00 01 00 30 00 00 00 41 88 dd 62 ........0...A..b
0020 1a ff ff f4 99 09 12 fc ff 00 00 1d 3d 9d f2 c0 ............=...
0030 1c 00 4b 12 00 28 f4 69 08 00 6b b8 9a fe ff 6f ..K..(.i..k....o
0040 0d 00 00 af 0e b9 57 1b a0 a1 d7 ae f1 47 22 d3 ......W......G".
0050 11 22 09 72 bf .".r.
Decrypted ZigBee Payload (14 bytes):
0000 01 20 5d cb 3d 02 df f8 0c 14 9e 36 ce f4 . ].=......6..
No. Time Source Destination Protocol Length Info
10 13:59:15,765534 0x0000 Broadcast ZigBee 85 Route Request, Dst: 0x3dcb, Src: 0x0000
Frame 10: 85 bytes on wire (680 bits), 85 bytes captured (680 bits) on interface wireshark_extcap2036, id 0
Interface id: 0 (wireshark_extcap2036)
Interface name: wireshark_extcap2036
Encapsulation type: IEEE 802.15.4 Wireless with TAP pseudo-header (206)
Arrival Time: May 8, 2020 13:59:15.765534000 Russia TZ 1 Standard Time
[Time shift for this packet: 0.000000000 seconds]
Epoch Time: 1588939155.765534000 seconds
[Time delta from previous captured frame: 0.203061000 seconds]
[Time delta from previous displayed frame: 0.203061000 seconds]
[Time since reference or first frame: 0.693469000 seconds]
Frame Number: 10
Frame Length: 85 bytes (680 bits)
Capture Length: 85 bytes (680 bits)
[Frame is marked: False]
[Frame is ignored: False]
[Protocols in frame: wpan-tap:zbee_nwk]
IEEE 802.15.4 TAP
Header
Version: 0
Reserved: 0
Length: 28
RSS: -54,00 dBm
TLV Type: RSS (1)
TLV Length: 4
RSS: -54,00 dBm
Channel assignment: Page: Default (0), Number: 11
TLV Type: Channel assignment (3)
TLV Length: 3
Channel: 11
Page: Default (0)
Padding: 00
Link Quality Indicator: 156
TLV Type: Link Quality Indicator (10)
TLV Length: 1
Link Quality Indicator: 156
Padding: 000000
IEEE 802.15.4 Data, Dst: Broadcast, Src: 0xc21d
Frame Control Field: 0x8841, Frame Type: Data, PAN ID Compression, Destination Addressing Mode: Short/16-bit, Frame Version: IEEE Std 802.15.4-2003, Source Addressing Mode: Short/16-bit
.... .... .... .001 = Frame Type: Data (0x1)
.... .... .... 0... = Security Enabled: False
.... .... ...0 .... = Frame Pending: False
.... .... ..0. .... = Acknowledge Request: False
.... .... .1.. .... = PAN ID Compression: True
.... .... 0... .... = Reserved: False
.... ...0 .... .... = Sequence Number Suppression: False
.... ..0. .... .... = Information Elements Present: False
.... 10.. .... .... = Destination Addressing Mode: Short/16-bit (0x2)
..00 .... .... .... = Frame Version: IEEE Std 802.15.4-2003 (0)
10.. .... .... .... = Source Addressing Mode: Short/16-bit (0x2)
Sequence Number: 128
Destination PAN: 0x1a62
Destination: 0xffff
Source: 0xc21d
[Extended Source: Ember_ff:fe:ba:99:43 (00:0d:6f:ff:fe:ba:99:43)]
[Origin: 3]
ZigBee Network Layer Command, Dst: Broadcast, Src: 0x0000
Frame Control Field: 0x1209, Frame Type: Command, Discover Route: Suppress, Security, Extended Source Command
.... .... .... ..01 = Frame Type: Command (0x1)
.... .... ..00 10.. = Protocol Version: 2
.... .... 00.. .... = Discover Route: Suppress (0x0)
.... ...0 .... .... = Multicast: False
.... ..1. .... .... = Security: True
.... .0.. .... .... = Source Route: False
.... 0... .... .... = Destination: False
...1 .... .... .... = Extended Source: True
..0. .... .... .... = End Device Initiator: False
Destination: 0xfffc
Source: 0x0000
Radius: 29
Sequence Number: 61
Extended Source: TexasIns_00:1c:c0:f2:9d (00:12:4b:00:1c:c0:f2:9d)
ZigBee Security Header
Security Control Field: 0x28, Key Id: Network Key, Extended Nonce
...0 1... = Key Id: Network Key (0x1)
..1. .... = Extended Nonce: True
Frame Counter: 864937
Extended Source: Ember_ff:fe:ba:99:43 (00:0d:6f:ff:fe:ba:99:43)
Key Sequence Number: 0
Message Integrity Code: dbfd8706
Command Frame: Route Request
Command Identifier: Route Request (0x01)
Command Options: 0x20, Extended Destination, Many-to-One Discovery: Not Many-to-One
.0.. .... = Multicast: False
..1. .... = Extended Destination: True
...0 0... = Many-to-One Discovery: Not Many-to-One (0x0)
Route ID: 93
Destination: 0x3dcb
Path Cost: 1
Extended Destination: NordicSe_9e:14:0c:f8:df (f4:ce:36:9e:14:0c:f8:df)
Frame (85 bytes):
0000 00 00 1c 00 01 00 04 00 00 00 58 c2 03 00 03 00 ..........X.....
0010 0b 00 00 00 0a 00 01 00 9c 00 00 00 41 88 80 62 ............A..b
0020 1a ff ff 1d c2 09 12 fc ff 00 00 1d 3d 9d f2 c0 ............=...
0030 1c 00 4b 12 00 28 a9 32 0d 00 43 99 ba fe ff 6f ..K..(.2..C....o
0040 0d 00 00 15 aa fb 75 0c 95 2c 6b 8e 03 31 0d b6 ......u..,k..1..
0050 de db fd 87 06 .....
Decrypted ZigBee Payload (14 bytes):
0000 01 20 5d cb 3d 01 df f8 0c 14 9e 36 ce f4 . ].=......6..
No. Time Source Destination Protocol Length Info
11 13:59:15,814223 0x0000 Broadcast ZigBee 85 Route Request, Dst: 0x3dcb, Src: 0x0000
Frame 11: 85 bytes on wire (680 bits), 85 bytes captured (680 bits) on interface wireshark_extcap2036, id 0
Interface id: 0 (wireshark_extcap2036)
Interface name: wireshark_extcap2036
Encapsulation type: IEEE 802.15.4 Wireless with TAP pseudo-header (206)
Arrival Time: May 8, 2020 13:59:15.814223000 Russia TZ 1 Standard Time
[Time shift for this packet: 0.000000000 seconds]
Epoch Time: 1588939155.814223000 seconds
[Time delta from previous captured frame: 0.048689000 seconds]
[Time delta from previous displayed frame: 0.048689000 seconds]
[Time since reference or first frame: 0.742158000 seconds]
Frame Number: 11
Frame Length: 85 bytes (680 bits)
Capture Length: 85 bytes (680 bits)
[Frame is marked: False]
[Frame is ignored: False]
[Protocols in frame: wpan-tap:zbee_nwk]
IEEE 802.15.4 TAP
Header
Version: 0
Reserved: 0
Length: 28
RSS: -72,00 dBm
TLV Type: RSS (1)
TLV Length: 4
RSS: -72,00 dBm
Channel assignment: Page: Default (0), Number: 11
TLV Type: Channel assignment (3)
TLV Length: 3
Channel: 11
Page: Default (0)
Padding: 00
Link Quality Indicator: 80
TLV Type: Link Quality Indicator (10)
TLV Length: 1
Link Quality Indicator: 80
Padding: 000000
IEEE 802.15.4 Data, Dst: Broadcast, Src: 0x7ae8
Frame Control Field: 0x8841, Frame Type: Data, PAN ID Compression, Destination Addressing Mode: Short/16-bit, Frame Version: IEEE Std 802.15.4-2003, Source Addressing Mode: Short/16-bit
.... .... .... .001 = Frame Type: Data (0x1)
.... .... .... 0... = Security Enabled: False
.... .... ...0 .... = Frame Pending: False
.... .... ..0. .... = Acknowledge Request: False
.... .... .1.. .... = PAN ID Compression: True
.... .... 0... .... = Reserved: False
.... ...0 .... .... = Sequence Number Suppression: False
.... ..0. .... .... = Information Elements Present: False
.... 10.. .... .... = Destination Addressing Mode: Short/16-bit (0x2)
..00 .... .... .... = Frame Version: IEEE Std 802.15.4-2003 (0)
10.. .... .... .... = Source Addressing Mode: Short/16-bit (0x2)
Sequence Number: 130
Destination PAN: 0x1a62
Destination: 0xffff
Source: 0x7ae8
[Extended Source: Ember_ff:fe:9a:a1:b4 (00:0d:6f:ff:fe:9a:a1:b4)]
[Origin: 4]
ZigBee Network Layer Command, Dst: Broadcast, Src: 0x0000
Frame Control Field: 0x1209, Frame Type: Command, Discover Route: Suppress, Security, Extended Source Command
.... .... .... ..01 = Frame Type: Command (0x1)
.... .... ..00 10.. = Protocol Version: 2
.... .... 00.. .... = Discover Route: Suppress (0x0)
.... ...0 .... .... = Multicast: False
.... ..1. .... .... = Security: True
.... .0.. .... .... = Source Route: False
.... 0... .... .... = Destination: False
...1 .... .... .... = Extended Source: True
..0. .... .... .... = End Device Initiator: False
Destination: 0xfffc
Source: 0x0000
Radius: 29
Sequence Number: 61
Extended Source: TexasIns_00:1c:c0:f2:9d (00:12:4b:00:1c:c0:f2:9d)
ZigBee Security Header
Security Control Field: 0x28, Key Id: Network Key, Extended Nonce
...0 1... = Key Id: Network Key (0x1)
..1. .... = Extended Nonce: True
Frame Counter: 511831
Extended Source: Ember_ff:fe:9a:a1:b4 (00:0d:6f:ff:fe:9a:a1:b4)
Key Sequence Number: 0
Message Integrity Code: 827c8940
Command Frame: Route Request
Command Identifier: Route Request (0x01)
Command Options: 0x20, Extended Destination, Many-to-One Discovery: Not Many-to-One
.0.. .... = Multicast: False
..1. .... = Extended Destination: True
...0 0... = Many-to-One Discovery: Not Many-to-One (0x0)
Route ID: 93
Destination: 0x3dcb
Path Cost: 1
Extended Destination: NordicSe_9e:14:0c:f8:df (f4:ce:36:9e:14:0c:f8:df)
Frame (85 bytes):
0000 00 00 1c 00 01 00 04 00 00 00 90 c2 03 00 03 00 ................
0010 0b 00 00 00 0a 00 01 00 50 00 00 00 41 88 82 62 ........P...A..b
0020 1a ff ff e8 7a 09 12 fc ff 00 00 1d 3d 9d f2 c0 ....z.......=...
0030 1c 00 4b 12 00 28 57 cf 07 00 b4 a1 9a fe ff 6f ..K..(W........o
0040 0d 00 00 46 c7 4f e7 5b c7 34 06 53 92 ae b8 14 ...F.O.[.4.S....
0050 cf 82 7c 89 40 ..|.@
Decrypted ZigBee Payload (14 bytes):
0000 01 20 5d cb 3d 01 df f8 0c 14 9e 36 ce f4 . ].=......6..
No. Time Source Destination Protocol Length Info
12 13:59:15,941036 0x0000 Broadcast ZigBee 85 Route Request, Dst: 0x3dcb, Src: 0x0000
Frame 12: 85 bytes on wire (680 bits), 85 bytes captured (680 bits) on interface wireshark_extcap2036, id 0
Interface id: 0 (wireshark_extcap2036)
Interface name: wireshark_extcap2036
Encapsulation type: IEEE 802.15.4 Wireless with TAP pseudo-header (206)
Arrival Time: May 8, 2020 13:59:15.941036000 Russia TZ 1 Standard Time
[Time shift for this packet: 0.000000000 seconds]
Epoch Time: 1588939155.941036000 seconds
[Time delta from previous captured frame: 0.126813000 seconds]
[Time delta from previous displayed frame: 0.126813000 seconds]
[Time since reference or first frame: 0.868971000 seconds]
Frame Number: 12
Frame Length: 85 bytes (680 bits)
Capture Length: 85 bytes (680 bits)
[Frame is marked: False]
[Frame is ignored: False]
[Protocols in frame: wpan-tap:zbee_nwk]
IEEE 802.15.4 TAP
Header
Version: 0
Reserved: 0
Length: 28
RSS: -80,00 dBm
TLV Type: RSS (1)
TLV Length: 4
RSS: -80,00 dBm
Channel assignment: Page: Default (0), Number: 11
TLV Type: Channel assignment (3)
TLV Length: 3
Channel: 11
Page: Default (0)
Padding: 00
Link Quality Indicator: 48
TLV Type: Link Quality Indicator (10)
TLV Length: 1
Link Quality Indicator: 48
Padding: 000000
IEEE 802.15.4 Data, Dst: Broadcast, Src: 0x99f4
Frame Control Field: 0x8841, Frame Type: Data, PAN ID Compression, Destination Addressing Mode: Short/16-bit, Frame Version: IEEE Std 802.15.4-2003, Source Addressing Mode: Short/16-bit
.... .... .... .001 = Frame Type: Data (0x1)
.... .... .... 0... = Security Enabled: False
.... .... ...0 .... = Frame Pending: False
.... .... ..0. .... = Acknowledge Request: False
.... .... .1.. .... = PAN ID Compression: True
.... .... 0... .... = Reserved: False
.... ...0 .... .... = Sequence Number Suppression: False
.... ..0. .... .... = Information Elements Present: False
.... 10.. .... .... = Destination Addressing Mode: Short/16-bit (0x2)
..00 .... .... .... = Frame Version: IEEE Std 802.15.4-2003 (0)
10.. .... .... .... = Source Addressing Mode: Short/16-bit (0x2)
Sequence Number: 222
Destination PAN: 0x1a62
Destination: 0xffff
Source: 0x99f4
[Extended Source: Ember_ff:fe:9a:b8:6b (00:0d:6f:ff:fe:9a:b8:6b)]
[Origin: 5]
ZigBee Network Layer Command, Dst: Broadcast, Src: 0x0000
Frame Control Field: 0x1209, Frame Type: Command, Discover Route: Suppress, Security, Extended Source Command
.... .... .... ..01 = Frame Type: Command (0x1)
.... .... ..00 10.. = Protocol Version: 2
.... .... 00.. .... = Discover Route: Suppress (0x0)
.... ...0 .... .... = Multicast: False
.... ..1. .... .... = Security: True
.... .0.. .... .... = Source Route: False
.... 0... .... .... = Destination: False
...1 .... .... .... = Extended Source: True
..0. .... .... .... = End Device Initiator: False
Destination: 0xfffc
Source: 0x0000
Radius: 29
Sequence Number: 61
Extended Source: TexasIns_00:1c:c0:f2:9d (00:12:4b:00:1c:c0:f2:9d)
ZigBee Security Header
Security Control Field: 0x28, Key Id: Network Key, Extended Nonce
...0 1... = Key Id: Network Key (0x1)
..1. .... = Extended Nonce: True
Frame Counter: 551413
Extended Source: Ember_ff:fe:9a:b8:6b (00:0d:6f:ff:fe:9a:b8:6b)
Key Sequence Number: 0
Message Integrity Code: 2f5ae1c7
Command Frame: Route Request
Command Identifier: Route Request (0x01)
Command Options: 0x20, Extended Destination, Many-to-One Discovery: Not Many-to-One
.0.. .... = Multicast: False
..1. .... = Extended Destination: True
...0 0... = Many-to-One Discovery: Not Many-to-One (0x0)
Route ID: 93
Destination: 0x3dcb
Path Cost: 2
Extended Destination: NordicSe_9e:14:0c:f8:df (f4:ce:36:9e:14:0c:f8:df)
Frame (85 bytes):
0000 00 00 1c 00 01 00 04 00 00 00 a0 c2 03 00 03 00 ................
0010 0b 00 00 00 0a 00 01 00 30 00 00 00 41 88 de 62 ........0...A..b
0020 1a ff ff f4 99 09 12 fc ff 00 00 1d 3d 9d f2 c0 ............=...
0030 1c 00 4b 12 00 28 f5 69 08 00 6b b8 9a fe ff 6f ..K..(.i..k....o
0040 0d 00 00 bc 61 25 9a d4 a6 4d 81 6e 6c 3d 94 c8 ....a%...M.nl=..
0050 ee 2f 5a e1 c7 ./Z..
Decrypted ZigBee Payload (14 bytes):
0000 01 20 5d cb 3d 02 df f8 0c 14 9e 36 ce f4 . ].=......6..
