Capturing packets on a Thread network requires configuring at least the IEEE 802.15.4
decryption keys. Additionally, you can also configure the CoAP port and the 6loWPAN
settings.
Configuring decryption keys for Thread
You must configure IEEE 802.15.4 decryption keys to decode packets exchanged on the network and display the data in a readable format.
Configuring CoAP port for Thread
The Thread network uses the CoAP protocol on port 61631 for network management. You must configure this port in Wireshark if you want to correctly decode network management packets sent over this port.
Configuring 6loWPAN context
6loWPAN defines contexts that are used to shorten IPv6 addresses sent over-the-air. Configuring the 6loWPAN context ensures that the correct IPv6 address is displayed during packet analysis.
Disabling unwanted protocols
If Wireshark uses incorrect dissectors to decode a Thread message, you can optionally disable unwanted protocols.