Messages with source address information include a Dev (Device) section. This section shows the device index (set by the analyzer), and the device properties known at a specific stage. Since different messages sent by the same device may hold additional information about it, (for example a message holding the device security mode), device information included in messages with higher indexes will be more detailed. Device fields or subfields that got updated information in a specific message will be marked orange.
In the following example,
message #8519 added the PAN address (SP – Short PAN field) for device #6, which
was not known to the analyzer until this point in time (in message #8433 for the
same device).
Note: The Dev Status subfield shows that there has been an update (changed from 'Ok' to 'Up' and from green to orange).
Figure 139 – Message changes when getting updated information
If the information collected about a device from a specific message is in conflict with the information collected about the same device from previous messages, a warning message will be added to the message and the field in conflict will be marked red.
Note: 'Ack' messages are associated to the source device by analyzing the destination address of the message they have acknowledged. Also note that if a message held new information regarding another device which is not the source device of this message, the status field may indicate ‘update’ without having any of the device fields colored orange.