Thread network technology - 03 Sniffing IEEE 802.15.4 packages (Thread and ZigBee) with Wireshark

Thread is a network technology for wireless networks based on IPv6. It is ideally suited for home automation, Industry 4.0 and wireless sensor-actuator networks. In this video, we will make a sniffer stick with the low cost nRF52840-dongle from Nordic Semiconductor and capture Thread packages with the network protocol analyzer Wireshark.
You can support me at Patreon:
/ wsnandiot
nRF52840-dongle
www.nordicsemi.com/Products/D...
Wireshark:
www.wireshark.org/
Plugin for Wireshark and Sniffer firmware:
github.com/NordicSemiconducto...
Python version 3.7 or higher:
www.python.org/downloads/
nRF Connect for Desktop and Programmer:
www.nordicsemi.com/Products/D...
Terminal program PuTTY:
putty.org/
00:00 Overview
00:50 nRF52840-dongle
02:21 Software requirements Wireshark
03:04 nRF52840 plugin for Wireshark and sniffer firmware
04:41 Python installation
05:54 Python pySerial package
06:47 nRF Connect for Desktop
07:35 nRF Programmer application
07:58 Bootloader and memory structure
09:15 Sniffer firmware flashing over bootloader
10:56 Testing the sniffer stick over a terminal program
12:01 Capture packages using Wireshark
12:38 Setting a thread master key in Wireshark for decryption
15:30 Capture a udp-package with Wireshark
17:02 Deprecated disutils package in the sniffer plugin script

[@tcpipchip]

The best of all video already done with OpenThread! My inspiration to my Threads Network using the u-blox NRF52840 modules, the u-blox NINA B302!!!!!!!!!!!!!!!

[@nicholasawesomepants4293]

Thanks for the video, very interesting

[@SagarBhavar]

Done with same setup however not able to sniff zigbee communication - getting only broadcast beacon requests ............. am I missing something ?

[@wsniot]

You are probably missing something. The stick is an IEEE 802.15.4 sniffer. If you have set the correct channel, you will also receive ZigBee packets since IEEE 802.15.4 are the two downer layer from ZigBee. Is your ZigBee network encrypted? Have you set the network key in Wireshark? At least you should see the IEEE 802.15.4 part from the ZigBee-pakets

[@vigneshs6232]

I never know that I can get this cheap Sniffer using nRF52840 Dongle...Thanks for sharing your knowledge....

[@christianf1480]

Do you know if I can sniff Io-link wireless with this dongle ?

[@wsniot]

I haven't really looked into Io-link wireless yet, but since it doesn't seem to work on IEEE 802.15.4, this sniffer doesn't work for Io-link wireless.