Which dissector table to be used for a zigbee cluster

Henk Stevens
1 ●1 ●2 ●1

Guy Harris
19905 ●3 ●667 ●207

I have specific data in the payload of a ZCL message, for which I want the (decoded) data to be shown in the packet detail pane. It seems that i need to get the right dissector table for zigbee. In a tutorial I found an example for tcp; local tcp_port = DissectorTable.get("tcp.port"). I tried to figure out which table to use, but could get it found. I tried "zbee.zcl" and "zbee_zcL. Also tried on level higher in zigbee, with "zbee.nwk" and "zbee.aps". Which is the right table to be used in the lua script.

answered Oct 19 '18

cmaynard

11115 ●12 ●321 ●166 https://www.igt.com/

updated Oct 19 '18

grahamb

flag of United Kingdom of Great Britain and Northern Ireland

23850 ●4 ●988 ●227 https://www.wireshark.org

You can find dissector tables using tshark, for example:

$ tshark -G dissector-tables | grep zcl
zbee.zcl.cluster        ZigBee ZCL Cluster ID   FT_UINT16       BASE_HEX       ZigBee ZCL       Decode As not supported

$ tshark -G heuristic-decodes | grep zcl
zbee_zcl_se.tun ip      T

You can also find dissector tables in Wireshark using: View -> Internals -> Dissector Tables. A search for zcl finds the same two as above, namely an integer table zbee.zcl.cluster, and also the heuristic table, zbee_zcl_se.tun.

And of course there's always the packet-zbee-zcl.c and packet-zbee-zcl-se.c source code itself.

link

Comments

Thanks, got it working now. The "zbee.zcl.cluster" is the right one. Regards, Henk

Henk Stevens ( Oct 19 '18 )

add a comment

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account.

Which dissector table to be used for a zigbee cluster

1 Answer

Comments

Your Answer

Question Tools

Stats

Related questions

Which dissector table to be used for a zigbee cluster savecancel

1 Answer

Comments

Your Answer

Question Tools

Stats

Related questions

Which dissector table to be used for a zigbee cluster