Repository navigation
Mode Zigbee 802 15 4
Zigbee / 802.15.4: networks and devices from the headers every sniffer sees (receive only, no decryption; needs a fast 2.4 GHz radio).
| Group | IoT & sensors |
| Default frequency | 2405 MHz |
| Default sample rate | 4 Msps |
| In the mode list | IoT, 2.4 GHz |
Step-by-step: Tutorial-Zigbee-802-15-4
Zigbee and other 802.15.4 networks on 2.4 GHz carry smart-home and sensor traffic on channels 11 to 26.
2.4 GHz channels 11 - 26 (O-QPSK, 2 Mchip/s, 250 kbit/s), one channel at a time or scanning all, 4 Msps (needs a fast radio: not an RTL-SDR).
| Setting | Value |
|---|---|
| Start frequency | 2405 MHz |
| Tuning range of the mode table | 2405 to 2480 MHz |
| Sample rate asked | 4 Msps |
| Lowest working rate | 4 Msps |
| Channel width | 2 MHz |
OnAir takes any frequency you type; the numbers above are the mode's starting point and the range its table describes. In the app the shortcut label is IoT, 2.4 GHz.
Networks (PAN ID, extended PAN ID, coordinator, devices, level), a device list with the vendor from the extended address, a live frame log (MAC, Zigbee NWK and clear APS headers, beacons, association and other MAC commands, FCS checked) and a frames-per-second plot. Receive only: encrypted payloads are not decrypted (the network key is not obtainable here), only frames sent in the clear are shown in full.
The mode's own tab has these screens: Networks, Devices, Frames. The other tabs (Overview, Receiver, Scan, History) are described on the Main window page.
- Checked with generated signals and impairments; recordings of real signals welcome.
- Which radio: No: this mode needs a radio that samples at 4 Msps or more, and an RTL-SDR reaches about 2.4 Msps.
- Try it without a radio: most modes include a built-in synthetic test signal, so you can open the screen and try the controls first.
- Receiving and the law: This mode is passive. It only receives, never connects, pairs or joins networks, and never decrypts payloads. Check the rules where you live. See Legal.
- All modes, IoT & sensors
- Supported radios, Troubleshooting, FAQ
- More in IoT & sensors: ISM sensors, LoRaWAN, Meshtastic, MeshCore, Bluetooth LE, Wi-Fi HaLow (802.11ah), ANT+ sensors, DECT cordless phones, Wi-SUN FAN, LoRa (raw), Wi-Fi networks
Getting started
Using OnAir
Tools and guides (0.2.7)
- Band survey
- Message database
- Watchlists
- TV recorder
- Time machine
- Pass scheduler
- Plugin SDK
- Headless server
- All guides
Radios
Modes by group
- TV
- Broadcast radio
- Aviation
- Maritime
- Satellite & navigation
- Two-way radio
- Cellular & rail
- Pagers
- IoT & sensors
- Weather & science
- Amateur: digital
- Amateur: voice & packet
- HF utility
- General & tools
Tutorials
- DVB-T2 TV with a HackRF
- FM radio with RDS
- Aircraft with ADS-B and the map
- Ships with AIS
- DAB+ digital radio
- Weather satellite images
- HF digital: FT8 and WSPR
- Digital voice: DMR, D-STAR, P25
- Pagers: POCSAG and FLEX
- Time stations and the clock
- Record IQ, then the Signal workbench
- The signal sample library
- Control a rig with Hamlib
- Two receivers and the multi-decoder
Reference
Help
Legal and privacy
More