2.4 GHz channels 11-26
Zigbee, Thread and Matter
The 802.15.4 layer under all three stacks: the addresses talking, the networks they belong to and the channel each sits on.
Zigbee, Thread and Matter over Thread all ride on IEEE 802.15.4, so one decoder sees all of them. Under Zigbee the network header is read as well: each hop’s EUI-64 and the vendor it belongs to, the network addresses, the beacons a coordinator sends and which key a frame is protected by. A device joining is read off the detector as it happens.
On a crowded 2.4 GHz band the channels view is the useful pairing, because 802.15.4 channels overlap Wi-Fi ones and a mesh that keeps dropping is usually sitting under an access point.
What comes out
- PAN id, and source and destination addresses
- EUI-64 and vendor for each hop, on Zigbee
- Beacons, and the key a frame is under
- Frame type: beacon, data, acknowledgement or command
- Channel and link quality
- Sequence numbers, which show retries
$ waveshark --tune 2440 --span 4000 --channelsRead next
Something did not decode?
Record the burst with --record and open an issue with the capture. A capture that decodes becomes a test fixture.
Open an issue