Skip to content
Manuel Pietschmann edited this page Oct 31, 2018 · 25 revisions

This page contains observations of sniffed ZigBee traffic in regard of end-device polling behavior and how various routers deal with it.

Routers

Innr lights

Drops frame to end device silently, no NWK transaction expired message.

Philips hue LCT007, firmware 5.50.1.19085, 20160810

Drops frame to end device silently after ~3-7 seconds, no NWK transaction expired message.

OSRAM Smart+ plug

NWK transaction expired after 20 seconds.

Ikea E27 W opal 1000lm, FW 1.2.214

NWK transaction expired after 8 seconds. (might be standard which says 7680 milliseconds)

End-devices

Xiaomi motion sensor

Version: 3000-0001 Model id: lumi.sensor_motion.aq2

  • Polls once per hour ~500 ms after manufacturer specific special basic cluster attribute (0xff01) report
  • Doesn't poll after Occupancy sensing and Illuminance measurement cluster reports
  • None of the attribute reports have APS ACK enabled
  • None of the attribute reports have ZCL default response enabled

Ikea Tradfri remote control

Invalid power descriptor: 0xc110

Polls every 5 minutes.

Ikea Tradfri motion sensor

Invalid power descriptor: 0xc110

Poll every 5 minutes.

OSRAM Motion-Sensor-A

Polls every 5 seconds.

OSRAM 4 button remote control

Polls 3x with 1 second delay after power configuration cluster report, every 1 hour.

Polls 4x with 1 second delay after button press.

invalid power descriptor: 0xc110

Trust remote control ZYCT-202

https://www.trust.com/en/product/71171-zigbee-remote-control-zyct-202

Polls only once after button press, stays silent otherwise.

NWK 0x0093

group 1 0x0091 group 2 0x0092 group 3 0x0093 group 4 0x0094 group 5 0x0095 group 6 (all) 0x0096

Trust motion sensor ZPIR-8000

  • polls once after motion detection
  • polls once after battery report every 20 minutes

Philips hue Dimmer switch

Polls 4x with 5 seconds delay after power configuration cluster report, very 5 minutes.

Clone this wiki locally