Revision history [back]

Hi, I'm trying to decrypt zigbee packets. I used the file zigbee-join-authenticate.pcap.gz from https://wiki.wireshark.org/SampleCaptures and entered the Zigbee network key to the Zigbee, Protocol settings Zigbee --> AES-128 Encryption, 32-bit Integrity Protection Network Key: 39:30:65:63:6E:61:69:6C:6C:41:65:65:42:67:69:5A

The procedure and solution is more or less decribed already in 2011: https://www.wireshark.org/lists/wireshark-users/201103/msg00046.html

I would expect to see some kind of key exchang in packet 21, but that data still seems to be encrypted. I'm using WireShark Version 2.4.3 (Git v2.4.3 packaged as 2.4.3-1).

Are there additional steps to take?

Hi, I'm trying to decrypt zigbee packets. I used the file zigbee-join-authenticate.pcap.gz from https://wiki.wireshark.org/SampleCaptures and entered the Zigbee network key to the Zigbee, Protocol settings Zigbee --> AES-128 Encryption, 32-bit Integrity Protection Network Key: 39:30:65:63:6E:61:69:6C:6C:41:65:65:42:67:69:5A

The procedure and solution is more or less decribed already in 2011: https://www.wireshark.org/lists/wireshark-users/201103/msg00046.html

However, it does not work for me. I would expect to see some kind of key exchang in packet 21, but that data still seems to be encrypted. I'm using WireShark Version 2.4.3 (Git v2.4.3 packaged as 2.4.3-1).

Are there additional steps to take?