Programming instructions

Atmel AT02597: ZigBee PRO Packet Analysis with Sniffer [APPLICATION NOTE]

32210A−WIRELESS−09/2013

Table 3-1. Security Levels – NWK and APS – ZigBee Specification.

Security level

identifier

Security level sub-

field (Table 4.24)

Security attributes Data encryption Frame integrity (length M of MIC,

in number of octets)

0x00 ‘000’ None OFF NO (M = 0)

0x01 ‘001’ MIC-32 OFF YES (M = 4)

0x02 ‘010’ MIC-64 OFF YES = (M = 8)

0x03 ‘011’ MIC-128 OFF YES (M = 16)

0x04 ‘100’ ENC ON NO (M = 0)

0x05 ‘101’ ENC-MIC-32 ON YES (M = 4)

0x06 ‘110’ ENC-MIC-64 ON YES = (M = 8)

0x07 ‘111’ ENC-MIC-128 ON YES (M = 16)

It is possible to add multiple keys, edit or remove existing keys as shown in Figure 3-2.

Example:

In a ZigBee network using security in the APS layer, a device joining the network establishes a link key

with the Trust Center. In order to view all APS transactions for this link such as the APS Transport Key

command, the Trust Center link key needs to be added to the sniffer preferences.

Figure 3-2. Security Key Entries.

•

User Interface Options: It is possible to customize viewing options in the Wireshark interface

• Arrange the layout of the panels from Edit -> Preferences -> Layout

• Add Columns to the packet display pane (e.g.: HW src addr) from Edit -> Preferences -> Columns

• Colorize frame formats (e.g.: NWK Link Status Frames) from View -> Coloring Rules

• Apply Filters to display frames based on chosen fields in a frame by right-clicking on the field and using

option Apply as Filter