ConBee ZigBee USB Gateway: Usage - Revision history

NKirnbauer: removed unused section

2024-09-17T18:49:21Z

removed unused section

← Older revision		Revision as of 18:49, 17 September 2024
Line 139:		Line 139:

	[[Philips Hue White LED E27 9.5W/827, white]]		[[Philips Hue White LED E27 9.5W/827, white]]

	~~== Courses ==~~

	* (nothing here yet)

	== References ==		== References ==

ARessl: /* Locate Packet with Symmetric Key */

2023-04-11T08:29:26Z

Locate Packet with Symmetric Key

← Older revision		Revision as of 08:29, 11 April 2023
Line 116:		Line 116:

	To simulate a device entering into a network, you have to reset it. With the light bulb, I simply disconnected it from its socket and re-attached it. Switching the light on and off won't help, it has to be taken off the electricity completely.		To simulate a device entering into a network, you have to reset it. With the light bulb, I simply disconnected it from its socket and re-attached it. Switching the light on and off won't help, it has to be taken off the electricity completely.

			In newer versions of ZigBee it could happen, that the '''"Device Announcement"'''does not get send as usual when reconnecting after a power loss (socket disconnection). In this case try to remove the light bulb manually from the App and reconnect it.

	==== Add end-point device key in Wireshark ====		==== Add end-point device key in Wireshark ====

ARessl: New key added

2023-04-11T08:27:28Z

New key added

← Older revision		Revision as of 08:27, 11 April 2023
Line 91:		Line 91:
	81:42:86:86:5D:C1:C8:B2:C8:CB:C5:2E:5D:65:D1:B8		81:42:86:86:5D:C1:C8:B2:C8:CB:C5:2E:5D:65:D1:B8
	as these are mostly universal default keys so that communication in ZigBee networks can be established with lots of different devices from different vendors without further ado.		as these are mostly universal default keys so that communication in ZigBee networks can be established with lots of different devices from different vendors without further ado.

			Another possible key, if the other two do not work as intendend would be
			9F:55:95:F1:02:57:C8:A4:69:CB:F4:2B:C9:3F:EE:31


	In both cases, choose the Byte Order "Normal".		In both cases, choose the Byte Order "Normal".

JDjanic: /* Add end-point device key in Wireshark */

2020-12-29T02:12:51Z

Add end-point device key in Wireshark

← Older revision		Revision as of 02:12, 29 December 2020
Line 124:		Line 124:
	[[File:WiresharkTrafficDecr.png\|Border\|750px]]		[[File:WiresharkTrafficDecr.png\|Border\|750px]]

	This is the same packet with		This is the same packet as the first one in this section, only with added key. As you can see, the payload is now clearly visible, and it shows detailed information about the transported commands.

	== Used Hardware ==		== Used Hardware ==

JDjanic: /* Add end-point device key in Wireshark */

2020-12-29T02:08:13Z

Add end-point device key in Wireshark

← Older revision		Revision as of 02:08, 29 December 2020
Line 121:		Line 121:

	From this point on, you are able to see all information, as you can adequatly decrypt it.		From this point on, you are able to see all information, as you can adequatly decrypt it.

			[[File:WiresharkTrafficDecr.png\|Border\|750px]]

			This is the same packet with

	== Used Hardware ==		== Used Hardware ==

JDjanic: /* Add end-point device key in Wireshark */

2020-12-29T02:03:27Z

Add end-point device key in Wireshark

← Older revision		Revision as of 02:03, 29 December 2020
Line 114:		Line 114:

	==== Add end-point device key in Wireshark ====		==== Add end-point device key in Wireshark ====
			Go to:

			Edit > Preferences > Protocols > ZigBee

			and add the key with Byte Order "Normal".

			From this point on, you are able to see all information, as you can adequatly decrypt it.

	== Used Hardware ==		== Used Hardware ==

JDjanic: /* Step 3: Wireshark Network End-Point Device Key Discovery */

2020-12-29T01:58:37Z

Step 3: Wireshark Network End-Point Device Key Discovery

← Older revision		Revision as of 01:58, 29 December 2020
Line 98:		Line 98:
	'''Start capturing the packets in Wireshark as well.'''		'''Start capturing the packets in Wireshark as well.'''

	=== Step 3: Wireshark Network ~~End-Point Device Key Discovery~~ ===		=== Step 3: Wireshark Network Traffic Analysis ===

	Now you will see traffic similar to this:		Now you will see traffic similar to this:
Line 106:		Line 106:
	It shows there was data broadcasted, unfortunately without any further details. The circled output shows contained data is encrypted.		It shows there was data broadcasted, unfortunately without any further details. The circled output shows contained data is encrypted.

	==== Locate Packet with ~~Device Announcement~~ ====		==== Locate Packet with Symmetric Key ====
	To get hold of an end-point device key in a ZigBee network, look out for specific packets. A device newly entering a network sends its key decrypted until it is established and ingested into the network by the bridge. If you have configured the bridge key correctly, you should see a new device advertising its symmetric key in packets which are tagged as "Device Announcement" in the information column of Wireshark (although there are other packets as well with visible key, this is the first one where this happens).		To get hold of an end-point device key in a ZigBee network, look out for specific packets. A device newly entering a network sends its key decrypted until it is established and ingested into the network by the bridge. If you have configured the bridge key correctly, you should see a new device advertising its symmetric key in packets which are tagged as '''"Device Announcement"''' in the information column of Wireshark (although there are other packets as well with visible key, this is the first one where this happens).

	[[File:WiresharkDA.png\|border\|750px]]		[[File:WiresharkDA.png\|border\|750px]]

JDjanic: /* Locating Packet with Device Announcement */

2020-12-29T01:55:31Z

Locating Packet with Device Announcement

← Older revision		Revision as of 01:55, 29 December 2020
Line 106:		Line 106:
	It shows there was data broadcasted, unfortunately without any further details. The circled output shows contained data is encrypted.		It shows there was data broadcasted, unfortunately without any further details. The circled output shows contained data is encrypted.

	==== ~~Locating~~ Packet with Device Announcement ====		==== Locate Packet with Device Announcement ====
	To get hold of an end-point device key in a ZigBee network, look out for specific packets. A device newly entering a network sends its key decrypted until it is established and ingested into the network by the bridge. If you have configured the bridge key correctly, you should see a new device advertising its symmetric key in packets which are tagged as "Device Announcement" in the information column of Wireshark (although there are other packets as well with visible key, this is the first one where this happens).		To get hold of an end-point device key in a ZigBee network, look out for specific packets. A device newly entering a network sends its key decrypted until it is established and ingested into the network by the bridge. If you have configured the bridge key correctly, you should see a new device advertising its symmetric key in packets which are tagged as "Device Announcement" in the information column of Wireshark (although there are other packets as well with visible key, this is the first one where this happens).

Line 112:		Line 112:

	To simulate a device entering into a network, you have to reset it. With the light bulb, I simply disconnected it from its socket and re-attached it. Switching the light on and off won't help, it has to be taken off the electricity completely.		To simulate a device entering into a network, you have to reset it. With the light bulb, I simply disconnected it from its socket and re-attached it. Switching the light on and off won't help, it has to be taken off the electricity completely.

			==== Add end-point device key in Wireshark ====

	== Used Hardware ==		== Used Hardware ==

JDjanic: /* Step 3: Wireshark Network End Device Key Discovery */

2020-12-29T01:54:13Z

Step 3: Wireshark Network End Device Key Discovery

← Older revision		Revision as of 01:54, 29 December 2020
Line 98:		Line 98:
	'''Start capturing the packets in Wireshark as well.'''		'''Start capturing the packets in Wireshark as well.'''

	=== Step 3: Wireshark Network End Device Key Discovery ===		=== Step 3: Wireshark Network End-Point Device Key Discovery ===

	Now you will see traffic similar to this:		Now you will see traffic similar to this:

	[[File:WiresharkTraffic2.jpg\|border\|~~500px\|~~(~~click to enlarge~~)]]		[[File:WiresharkTraffic2.jpg\|border\|750px]]

			It shows there was data broadcasted, unfortunately without any further details. The circled output shows contained data is encrypted.

			==== Locating Packet with Device Announcement ====
			To get hold of an end-point device key in a ZigBee network, look out for specific packets. A device newly entering a network sends its key decrypted until it is established and ingested into the network by the bridge. If you have configured the bridge key correctly, you should see a new device advertising its symmetric key in packets which are tagged as "Device Announcement" in the information column of Wireshark (although there are other packets as well with visible key, this is the first one where this happens).

			[[File:WiresharkDA.png\|border\|750px]]

			To simulate a device entering into a network, you have to reset it. With the light bulb, I simply disconnected it from its socket and re-attached it. Switching the light on and off won't help, it has to be taken off the electricity completely.

	== Used Hardware ==		== Used Hardware ==

JDjanic: /* Step 3: Wireshark Network End Device Key Discovery */

2020-12-29T01:06:01Z

Step 3: Wireshark Network End Device Key Discovery

← Older revision		Revision as of 01:06, 29 December 2020
Line 102:		Line 102:
	Now you will see traffic similar to this:		Now you will see traffic similar to this:

	[[File:WiresharkTraffic2.jpg\|border\|500px]]		[[File:WiresharkTraffic2.jpg\|border\|500px\|(click to enlarge)]]

	(click to enlarge)

	== Used Hardware ==		== Used Hardware ==