Wireshark-bugs: [Wireshark-bugs] [Bug 11564] Address field in ZigBee Link Status messages not di
Date Index · Thread Index · Other Months · All Mailing Lists
Date Prev · Date Next · Thread Prev · Thread Next
From: bugzilla-daemon@xxxxxxxxxxxxx
Date: Thu, 01 Oct 2015 09:08:50 +0000
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=11564

--- Comment #3 from Arasch Honarbacht <honarbacht@xxxxxxxxx> ---
(In reply to Pascal Quantin from comment #2)
> Hi Arasch,
> 
> could you provide the ZigBee decryption keys to be used with this pcap?

Hi Pascal,

the keys are included in the capture (its a full association from scratch with
transport key messages recorded as well). The default Trust Center link key
"ZigBeeAlliance09" is used for initial key transport. In section 9 of this PDF
there is a description how to enter the default TCLK:
http://www.ubisys.de/downloads/ubisys-ieee802154-wireshark-manual.pdf.

In this case the network key is as follows (if you want to enter it directly
instead of having Wireshark learn it from the transport key message):

Network Key = a5b3a997edbb711f3510c0703fc5b868

-- 
You are receiving this mail because:
You are watching all bug changes.