Re: [Wireshark-dev] Trouble decrypting Zigbee APS layer

2011-07-26 Thread Mark Whitney
On Wed, Jul 20, 2011 at 11:59, Mark Whitney wrote: > > Is decryption of the APS layer currently supported?  Or am I just > doing something wrong? It looks like part of the problem is that the Smart Energy Key Establishment cluster (0x0800) is not implemented yet in the packet-zbee-aps dissector

[Wireshark-dev] Trouble decrypting Zigbee APS layer

2011-07-20 Thread Mark Whitney
I am trying to decrypt a capture of a Zigbee SE device joining to an ECC-encrypted smart meter (AES-128, 32-bit IP). The device is using an installation code, so I entered the derived link key into the Zigbee NWK key list and it looks like the network layer is decrypted just fine. The problem I a