Linux Microchip Zena data, isn’t it beautiful? With this information, it was straightforward to identify the USB endpoint 0x01 as the control channel for setting the channel and USB endpoint 0x81 as the data endpoint for delivering frames. Posted by Joe Desbonnet at Update 20 Feb A level of 0 implies no debugging default , 9 maximum verbosity. Zena Sniffer Network Configuration Display.

Uploader: Nahn
Date Added: 20 December 2017
File Size: 69.23 Mb
Operating Systems: Windows NT/2000/XP/2003/2003/7/8/10 MacOS 10/X
Downloads: 72701
Price: Free* [*Free Regsitration Required]

Now connect the ZENA. Using the SnoopyPro USB snifferI was able to look at the Microcuip packets, observing data from frames shown by the sniffer, as well as recording the configuration activity based on the channel I specified to capture on.

ZENA Wireless Adapter – GHz MRF24J40

You will find a new file in that directory. Skip to secondary content. On Ubuntu you can do sudo bash to avoid prefixing everything with “sudo”. Make note of it. This will be incorporated in the next release — version 0.

I have updated this tool to manage the new hardware version based on the MRF24J40 chip. See comments near the top of the C file on how to compile and run. Each chunk is prefixed with a timestamp obtained from the host computer -v will display version information and quit.


Reversing the Microchip Zena ZigBee Sniffer

Main menu Skip to primary content. The Zena sniffer can save a capture in a proprietary file formatand can export selected frames to the clipboard in space-delimited hex bytes.

This is how to “unbind” it: Posted by Joe Desbonnet at You can specify a BMP background as a floorplan and move the nodes to their physical locations as well. There is very little documentation available for the device hardware. Zwna probably need to be logged in as root to do all of these things.

Newer Post Older Post Home. With no Linux support, I decided to write my own user space Linux driver to capture packets with the goal of integrating it into libpcap captures and other tools including Kismet Newcore. In this post I’ve documented reverse engineering efforts by myself and others and present a small C utility for pcap packet capture on the Linux platform.

Using PyUSB with the excellent Pymissle project by Scott Weston as an example, I quickly put together a tool that can set the channel number and capture frames from the Zena device, dumping the hex bytes to stdout. Two output formats are supported: The Python script is available here. One line per 64 byte chunk. A level of 0 implies no debugging default9 maximum verbosity. Prior to running you need to make sure the ZENA device is “unbound” from any kernel drivers.


Linux Microchip Zena data, isn’t it beautiful? Zena Sniffer Network Configuration Display.

ZENA Wireless Adapter – 868 MHz MRF89XA

ZENA device not found or not accessible”, that is likely your problem. Zena Packet Capture Tool. It is possible to check if a device is bound to a kernel driver and unbind it in libusb 1.

Update 20 Feb A number between 11 and 26 is expected. Plugging into a Linux box, it was clear that the device was using the USB HID, which was good news for me since it would be simpler to reverse the configuration details. I guess we are all spoiled by Wireshark, but I was hoping for more detail and a better UI.

There is no support for Linux and cannot be used with powerful tools like Wireshark. The packet capture output is sent to standard output.