This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

Why is the Zigbee decryption using Version 1.8.0 win32 not correct?

0

I just installed version 1.8.0 and set the preconfigured key for the Zigbee Protocol to (39:30:65:63:6E:61:69:6C:6C:41:65:65:42:67:69:5A) and Byte order (normal). It is not decrypting my Zigbee packet properly. Can anyone help me?

asked 18 Jul '12, 07:25

April's gravatar image

April
1●1●1●1
accept rate: 0%

edited 18 Jul '12, 12:05

Guy%20Harris's gravatar image

Guy Harris ♦♦
17.4k●3●35●196

One Answer:

0

I just tried it with Win 7 and Win XP (Wireshark 1.8.0). It seems to work as expected. Can you please post a sample capture on cloudshark.org for the mentioned key?

HINT: As you cannot delete an anonymously uploaded file on cloudshark.org, you better don't post any private data. Post just those packets in a capture file, that are required to analyze the problem.

Some questions:

  1. Does it work with an older version of Wireshark. If yes, which one?
  2. Did you choose the correct Encryption method (AES128, 32/64/128 Bit Integrity Protection)?

Regards
Kurt

answered 25 Jul '12, 12:56

Kurt%20Knochner's gravatar image

Kurt Knochner ♦
24.8k●10●39●237
accept rate: 15%

edited 25 Jul '12, 13:50