Home
Welcome to the zigbee-analyzer wiki!
A production-grade Zigbee network analyzer written in Rust, designed for security research, network debugging, and protocol analysis.
Zigbee Analyzer is a comprehensive toolkit for capturing, analyzing, and reverse-engineering Zigbee (IEEE 802.15.4) networks. Built with a modular architecture, it supports multiple hardware adapters and provides real-time analysis capabilities.
Key Features:
- 📡 Real-time packet capture with multiple hardware backend support
- 🔍 Deep protocol analysis (MAC, Network, APS, ZCL layers)
- 🌐 Network topology mapping and device discovery
- 🔐 Cryptographic analysis for encrypted networks
- 💾 PCAP export for Wireshark integration
- 🖥️ Terminal UI with live packet inspection
- 🧩 Modular architecture for easy extensibility
# Clone the repository
git clone https://github.com/yourusername/zigbee-analyzer.git
cd zigbee-analyzer
Build all crates
cargo build --release
Run with your hardware (auto-detects devices)
cargo run --release
Or run specific examples
cargo run --example simple_capture
cargo run --example pcap_record output.pcap 60
- Getting Started - Installation and first capture
- Architecture - System design and crate structure
- Hardware Support - Compatible devices and drivers
- Protocol Documentation - IEEE 802.15.4 and Zigbee layers
- API Reference - Core APIs and traits
- Examples - Code examples and tutorials
- Driver Development - Creating new hardware drivers
- Contributing - Development guidelines
- Troubleshooting - Common issues and solutions
Currently supported Zigbee adapters:
| Device | Status | Capture | Injection | Notes |
|---|---|---|---|---|
| TI CC2531 | ✅ Stable | ✅ | ❌ | USB dongle, most common |
| TI CC2652R | 🚧 In Progress | ✅ | 🚧 | Newer, more capable |
| TI CC2652P | 🚧 Planned | - | - | High-power variant |
| Atmel RZRaven | 📋 Planned | - | - | AVR-based |
| nRF52840 | 📋 Planned | - | - | Nordic Semi dongle |
- Security Research: Analyze smart home device communications
- Network Debugging: Troubleshoot Zigbee mesh networks
- Protocol Development: Test custom Zigbee implementations
- Penetration Testing: Assess Zigbee network security
- IoT Research: Reverse-engineer proprietary protocols
The project is organized as a Rust workspace with multiple crates:
zigbee-analyzer/
├── zigbee-core/ # Core packet structures and parsing
├── zigbee-hal/ # Hardware abstraction layer
├── zigbee-drivers/ # Hardware-specific drivers
├── zigbee-analysis/ # Analysis and pattern recognition
├── zigbee-crypto/ # Cryptographic operations
├── zigbee-storage/ # Database and persistence
└── zigbee-ui/ # User interface (TUI)
See Architecture for detailed information.
- IEEE 802.15.4 Specification
- Zigbee Alliance Specifications
- KillerBee Framework (Python alternative)
- Wireshark Zigbee Dissectors
We welcome contributions! Please see our Contributing guide for:
- Code style guidelines
- Testing requirements
- Pull request process
- Development setup
This project is dual-licensed under MIT OR Apache-2.0.
- GitHub Repository
- Issue Tracker
- Discussions
- Crates.io (coming soon)
Status: Active Development | Version: 0.1.0-alpha | Last Updated: November 2025
# Zigbee AnalyzerA production-grade Zigbee network analyzer written in Rust, designed for security research, network debugging, and protocol analysis.
Zigbee Analyzer is a comprehensive toolkit for capturing, analyzing, and reverse-engineering Zigbee (IEEE 802.15.4) networks. Built with a modular architecture, it supports multiple hardware adapters and provides real-time analysis capabilities.
Key Features:
- 📡 Real-time packet capture with multiple hardware backend support
- 🔍 Deep protocol analysis (MAC, Network, APS, ZCL layers)
- 🌐 Network topology mapping and device discovery
- 🔐 Cryptographic analysis for encrypted networks
- 💾 PCAP export for Wireshark integration
- 🖥️ Terminal UI with live packet inspection
- 🧩 Modular architecture for easy extensibility
# Clone the repository
git clone https://github.com/yourusername/zigbee-analyzer.git
cd zigbee-analyzer
# Build all crates
cargo build --release
# Run with your hardware (auto-detects devices)
cargo run --release
# Or run specific examples
cargo run --example simple_capture
cargo run --example pcap_record output.pcap 60- Getting Started - Installation and first capture
- Architecture - System design and crate structure
- Hardware Support - Compatible devices and drivers
- Protocol Documentation - IEEE 802.15.4 and Zigbee layers
- API Reference - Core APIs and traits
- Examples - Code examples and tutorials
- Driver Development - Creating new hardware drivers
- Contributing - Development guidelines
- Troubleshooting - Common issues and solutions
Currently supported Zigbee adapters:
| Device | Status | Capture | Injection | Notes |
|---|---|---|---|---|
| TI CC2531 | ✅ Stable | ✅ | ❌ | USB dongle, most common |
| TI CC2652R | 🚧 In Progress | ✅ | 🚧 | Newer, more capable |
| TI CC2652P | 🚧 Planned | - | - | High-power variant |
| Atmel RZRaven | 📋 Planned | - | - | AVR-based |
| nRF52840 | 📋 Planned | - | - | Nordic Semi dongle |
- Security Research: Analyze smart home device communications
- Network Debugging: Troubleshoot Zigbee mesh networks
- Protocol Development: Test custom Zigbee implementations
- Penetration Testing: Assess Zigbee network security
- IoT Research: Reverse-engineer proprietary protocols
The project is organized as a Rust workspace with multiple crates:
zigbee-analyzer/
├── zigbee-core/ # Core packet structures and parsing
├── zigbee-hal/ # Hardware abstraction layer
├── zigbee-drivers/ # Hardware-specific drivers
├── zigbee-analysis/ # Analysis and pattern recognition
├── zigbee-crypto/ # Cryptographic operations
├── zigbee-storage/ # Database and persistence
└── zigbee-ui/ # User interface (TUI)
See Architecture for detailed information.
- [IEEE 802.15.4 Specification](https://standards.ieee.org/standard/802_15_4-2020.html)
- [Zigbee Alliance Specifications](https://zigbeealliance.org/developer_resources/zigbee-specification/)
- [KillerBee Framework](https://github.com/riverloopsec/killerbee) (Python alternative)
- [Wireshark Zigbee Dissectors](https://www.wireshark.org/docs/dfref/z/zbee.html)
We welcome contributions! Please see our Contributing guide for:
- Code style guidelines
- Testing requirements
- Pull request process
- Development setup
This project is dual-licensed under MIT OR Apache-2.0.
- [GitHub Repository](https://github.com/yourusername/zigbee-analyzer)
- [Issue Tracker](https://github.com/yourusername/zigbee-analyzer/issues)
- [Discussions](https://github.com/yourusername/zigbee-analyzer/discussions)
- [Crates.io](https://crates.io/crates/zigbee-analyzer) (coming soon)
Status: Active Development | Version: 0.1.0-alpha | Last Updated: November 2025