Wireshark · Display Filter Reference: ZigBee Network Layer

Field name	Description	Type	Versions
zbee.sec.counter	Frame Counter	Unsigned integer (32 bits)	1.10.0 to 4.4.2
zbee.sec.decryption_key	Key Label	Character string	2.0.0 to 4.4.2
zbee.sec.ext_nonce	Extended Nonce	Boolean	1.10.0 to 4.4.2
zbee.sec.field	Security Control Field	Unsigned integer (8 bits)	2.0.0 to 4.4.2
zbee.sec.key	Key	Byte sequence	1.10.0 to 4.4.2
zbee.sec.key.origin	Key Origin	Frame number	1.10.0 to 4.4.2
zbee.sec.key_id	Key Id	Unsigned integer (8 bits)	2.0.3 to 4.4.2
zbee.sec.key_seqno	Key Sequence Number	Unsigned integer (8 bits)	1.10.0 to 4.4.2
zbee.sec.mic	Message Integrity Code	Byte sequence	1.10.0 to 4.4.2
zbee.sec.sec_level	Security Level	Unsigned integer (8 bits)	4.2.0 to 4.4.2
zbee.sec.src64	Extended Source	EUI64 address	1.10.0 to 4.4.2
zbee.sec.verified_fc	Require Verified Frame Counter	Unsigned integer (8 bits)	4.4.0 to 4.4.2
zbee_beacon.depth	Device Depth	Unsigned integer (16 bits)	1.10.0 to 4.4.2
zbee_beacon.end_dev	End Device Capacity	Boolean	1.10.0 to 4.4.2
zbee_beacon.ext_panid	Extended PAN ID	EUI64 address	1.10.0 to 4.4.2
zbee_beacon.profile	Stack Profile	Unsigned integer (16 bits)	1.10.0 to 4.4.2
zbee_beacon.protocol	Protocol ID	Unsigned integer (8 bits)	1.10.0 to 4.4.2
zbee_beacon.router	Router Capacity	Boolean	1.10.0 to 4.4.2
zbee_beacon.tx_offset	Tx Offset	Unsigned integer (24 bits)	1.10.0 to 4.4.2
zbee_beacon.update_id	Update ID	Unsigned integer (8 bits)	1.10.0 to 4.4.2
zbee_beacon.version	Protocol Version	Unsigned integer (16 bits)	1.10.0 to 4.4.2
zbee_nwk.addr	Address	Unsigned integer (16 bits)	3.2.0 to 4.4.2
zbee_nwk.addr64	Extended Address	EUI64 address	3.2.0 to 4.4.2
zbee_nwk.cmd.addr	Address	Unsigned integer (16 bits)	1.10.0 to 4.4.2
zbee_nwk.cmd.association_type	Association Type	Unsigned integer (8 bits)	4.2.0 to 4.4.2
zbee_nwk.cmd.cinfo	Capability Information	Unsigned integer (8 bits)	2.0.0 to 4.4.2
zbee_nwk.cmd.cinfo.alloc	Allocate Short Address	Boolean	1.10.0 to 4.4.2
zbee_nwk.cmd.cinfo.alt_coord	Alternate Coordinator	Boolean	1.10.0 to 4.4.2
zbee_nwk.cmd.cinfo.ffd	Full-Function Device	Boolean	1.10.0 to 4.4.2
zbee_nwk.cmd.cinfo.on_idle	Rx On When Idle	Boolean	3.4.0 to 4.4.2
zbee_nwk.cmd.cinfo.power	AC Power	Boolean	1.10.0 to 4.4.2
zbee_nwk.cmd.cinfo.security	Security Capability	Boolean	1.10.0 to 4.4.2
zbee_nwk.cmd.ed_config	End Device Configuration	Unsigned integer (8 bits)	2.2.0 to 4.4.2
zbee_nwk.cmd.ed_prnt_info	Parent Information	Unsigned integer (8 bits)	2.2.0 to 4.4.2
zbee_nwk.cmd.ed_prnt_info.ed_tmo_req_keepalive	End Device Timeout Request Keepalive	Boolean	2.2.0 to 4.4.2
zbee_nwk.cmd.ed_prnt_info.mac_data_poll_keepalive	MAC Data Poll Keepalive	Boolean	2.2.0 to 4.4.2
zbee_nwk.cmd.ed_tmo_req	Requested Timeout Enumeration	Unsigned integer (8 bits)	2.2.0 to 4.4.2
zbee_nwk.cmd.ed_tmo_rsp_status	Status	Unsigned integer (8 bits)	2.2.0 to 4.4.2
zbee_nwk.cmd.epid	Extended PAN ID	EUI64 address	1.10.0 to 4.4.2
zbee_nwk.cmd.id	Command Identifier	Unsigned integer (8 bits)	1.10.0 to 4.4.2
zbee_nwk.cmd.leave.children	Remove Children	Boolean	1.10.0 to 4.4.2
zbee_nwk.cmd.leave.rejoin	Rejoin	Boolean	1.10.0 to 4.4.2
zbee_nwk.cmd.leave.request	Request	Boolean	1.10.0 to 4.4.2
zbee_nwk.cmd.link.address	Address	Unsigned integer (16 bits)	2.0.0 to 4.4.2
zbee_nwk.cmd.link.count	Link Status Count	Unsigned integer (8 bits)	1.10.0 to 4.4.2
zbee_nwk.cmd.link.first	First Frame	Boolean	1.10.0 to 4.4.2
zbee_nwk.cmd.link.incoming_cost	Incoming Cost	Unsigned integer (8 bits)	2.0.0 to 4.4.2
zbee_nwk.cmd.link.last	Last Frame	Boolean	1.10.0 to 4.4.2
zbee_nwk.cmd.link.outgoing_cost	Outgoing Cost	Unsigned integer (8 bits)	2.0.0 to 4.4.2
zbee_nwk.cmd.link_pwr_delta.address	Device Address	Unsigned integer (16 bits)	2.2.0 to 4.4.2
zbee_nwk.cmd.link_pwr_delta.list_count	Structure Count	Unsigned integer (8 bits)	2.2.0 to 4.4.2
zbee_nwk.cmd.link_pwr_delta.power_delta	Power Delta	Signed integer (8 bits)	2.2.0 to 4.4.2
zbee_nwk.cmd.link_pwr_delta.type	Type	Unsigned integer (8 bits)	2.2.0 to 4.4.2
zbee_nwk.cmd.power_negotiation_supported	Power Negotiation Supported	Boolean	2.2.0 to 4.4.2
zbee_nwk.cmd.rejoin_status	Status	Unsigned integer (8 bits)	1.10.0 to 4.4.2
zbee_nwk.cmd.relay_count	Relay Count	Unsigned integer (8 bits)	1.10.0 to 4.4.2
zbee_nwk.cmd.relay_device	Relay Device	Unsigned integer (16 bits)	2.0.0 to 4.4.2
zbee_nwk.cmd.report.count	Report Information Count	Unsigned integer (8 bits)	1.10.0 to 4.4.2
zbee_nwk.cmd.report.type	Report Type	Unsigned integer (8 bits)	1.10.0 to 4.4.2
zbee_nwk.cmd.route.cost	Path Cost	Unsigned integer (8 bits)	1.10.0 to 4.4.2
zbee_nwk.cmd.route.dest	Destination	Unsigned integer (16 bits)	1.10.0 to 4.4.2
zbee_nwk.cmd.route.dest_ext	Extended Destination	EUI64 address	1.10.0 to 4.4.2
zbee_nwk.cmd.route.id	Route ID	Unsigned integer (8 bits)	1.10.0 to 4.4.2
zbee_nwk.cmd.route.opts	Command Options	Unsigned integer (8 bits)	2.0.0 to 4.4.2
zbee_nwk.cmd.route.opts.dest_ext	Extended Destination	Boolean	1.10.0 to 4.4.2
zbee_nwk.cmd.route.opts.many2one	Many-to-One Discovery	Unsigned integer (8 bits)	1.10.0 to 4.4.2
zbee_nwk.cmd.route.opts.mcast	Multicast	Boolean	1.10.0 to 4.4.2
zbee_nwk.cmd.route.opts.orig_ext	Extended Originator	Boolean	1.10.0 to 4.4.2
zbee_nwk.cmd.route.opts.repair	Route Repair	Boolean	1.10.0 to 4.4.2
zbee_nwk.cmd.route.opts.resp_ext	Extended Responder	Boolean	1.10.0 to 4.4.2
zbee_nwk.cmd.route.orig	Originator	Unsigned integer (16 bits)	1.10.0 to 4.4.2
zbee_nwk.cmd.route.orig_ext	Extended Originator	EUI64 address	1.10.0 to 4.4.2
zbee_nwk.cmd.route.resp	Responder	Unsigned integer (16 bits)	1.10.0 to 4.4.2
zbee_nwk.cmd.route.resp_ext	Extended Responder	EUI64 address	1.10.0 to 4.4.2
zbee_nwk.cmd.status	Status Code	Unsigned integer (8 bits)	1.10.0 to 4.4.2
zbee_nwk.cmd.status.unknown_command_id	Unknown Command ID	Unsigned integer (8 bits)	2.2.0 to 4.4.2
zbee_nwk.cmd.update.count	Update Information Count	Unsigned integer (8 bits)	1.10.0 to 4.4.2
zbee_nwk.cmd.update.id	Update ID	Unsigned integer (8 bits)	1.10.0 to 4.4.2
zbee_nwk.cmd.update.type	Update Type	Unsigned integer (8 bits)	1.10.0 to 4.4.2
zbee_nwk.discovery	Discover Route	Unsigned integer (16 bits)	1.10.0 to 4.4.2
zbee_nwk.dst	Destination	Unsigned integer (16 bits)	1.10.0 to 4.4.2
zbee_nwk.dst64	Destination	EUI64 address	1.10.0 to 4.4.2
zbee_nwk.end_device_initiator	End Device Initiator	Boolean	2.2.0 to 4.4.2
zbee_nwk.ext_dst	Destination	Boolean	1.10.0 to 4.4.2
zbee_nwk.ext_src	Extended Source	Boolean	1.10.0 to 4.4.2
zbee_nwk.fcf	Frame Control Field	Unsigned integer (16 bits)	2.0.0 to 4.4.2
zbee_nwk.frame_type	Frame Type	Unsigned integer (16 bits)	1.10.0 to 4.4.2
zbee_nwk.missing_payload	Missing Payload	Label	2.4.0 to 4.4.2
zbee_nwk.multicast	Multicast	Boolean	1.10.0 to 4.4.2
zbee_nwk.multicast.cf	Multicast Control Field	Unsigned integer (8 bits)	2.0.3 to 4.4.2
zbee_nwk.multicast.max_radius	Max Non-Member Radius	Unsigned integer (8 bits)	1.10.0 to 4.4.2
zbee_nwk.multicast.mode	Multicast Mode	Unsigned integer (8 bits)	1.10.0 to 4.4.2
zbee_nwk.multicast.radius	Non-Member Radius	Unsigned integer (8 bits)	1.10.0 to 4.4.2
zbee_nwk.panid	PAN ID	Unsigned integer (16 bits)	2.0.0 to 4.4.2
zbee_nwk.proto_version	Protocol Version	Unsigned integer (16 bits)	1.10.0 to 4.4.2
zbee_nwk.radius	Radius	Unsigned integer (8 bits)	1.10.0 to 4.4.2
zbee_nwk.relay	Relay	Unsigned integer (16 bits)	2.0.0 to 4.4.2
zbee_nwk.relay.count	Relay Count	Unsigned integer (8 bits)	1.10.0 to 4.4.2
zbee_nwk.relay.index	Relay Index	Unsigned integer (8 bits)	1.10.0 to 4.4.2
zbee_nwk.security	Security	Boolean	1.10.0 to 4.4.2
zbee_nwk.seqno	Sequence Number	Unsigned integer (8 bits)	1.10.0 to 4.4.2
zbee_nwk.src	Source	Unsigned integer (16 bits)	1.10.0 to 4.4.2
zbee_nwk.src64	Extended Source	EUI64 address	1.10.0 to 4.4.2
zbee_nwk.src64.origin	Origin	Frame number	1.10.0 to 4.4.2
zbee_nwk.src_route	Source Route	Boolean	1.10.0 to 4.4.2
zbee_nwk.zboss_key	ZBOSS Key	Byte sequence	2.6.0 to 4.4.2
zbee_nwk.zigbee_ie	IE header	Unsigned integer (16 bits)	2.2.0 to 4.4.2
zbee_nwk.zigbee_ie.id	Id	Unsigned integer (16 bits)	2.2.0 to 4.4.2
zbee_nwk.zigbee_ie.length	Length	Unsigned integer (16 bits)	2.2.0 to 4.4.2
zbee_nwk.zigbee_ie.source_address	Source Address	Unsigned integer (16 bits)	2.2.0 to 4.4.2
zbee_nwk.zigbee_ie.tx_power	Tx Power (dBm)	Signed integer (8 bits)	2.2.0 to 4.4.2
zbee_nwk.zigbee_rejoin.ext_panid	Extended PAN ID	EUI64 address	2.2.0 to 4.4.2
zbee_nwk.zigbee_rejoin.source_address	Source Address	Unsigned integer (16 bits)	2.2.0 to 4.4.2
zbee_sec.encrypted_payload	Encrypted Payload	Label	1.12.0 to 4.4.2
zbee_sec.encrypted_payload_sliced	Encrypted payload, cut short when capturing - can't decrypt	Label	1.12.7 to 4.4.2
zbee_sec.extended_source_unknown	Extended Source: Unknown	Label	2.0.0 to 4.4.2
zbip_beacon.allow_join	Allow Join	Boolean	1.12.0 to 4.4.2
zbip_beacon.host	Host Capacity	Boolean	1.12.0 to 4.4.2
zbip_beacon.network_id	Network ID	Character string	1.12.0 to 4.4.2
zbip_beacon.router	Router Capacity	Boolean	1.12.0 to 4.4.2
zbip_beacon.unsecure	Unsecure Network	Boolean	1.12.0 to 4.4.2