How can I interpret the response from a ZDO command?


I am sending an active endpoints request to a router, and I am receiving the response below, however reading through the xbee docs I am struggling to understand the response from ZDO command, I can not seem to find an explanation of how to read the response.

Please could anyone point me in the right direction?

Explicit RX Indicator (API 1)

7E 00 28 91 00 13 A2 00 40 B5 FA 3B CB E8 E8 E8 00 95 C1 05 02 CB E8 00 13 A2 00 40 B5 FA 3B 45 5F 33 00 B4 C3 02 02 C1 05 10 1E D7

Start delimiter: 7E
Length: 00 28 (40)
Frame type: 91 (Explicit RX Indicator)
64-bit source address: 00 13 A2 00 40 B5 FA 3B
16-bit source address: CB E8
Source endpoint: E8
Destination endpoint: E8
Cluster ID: 00 95
Profile ID: C1 05
Receive options: 02
RF data: CB E8 00 13 A2 00 40 B5 FA 3B 45 5F 33 00 B4 C3 02 02 C1 05 10 1E
Checksum: D7

Many Thanks in advance,


You can download the ZigBee specification with documentaion on the ZDO commands at Other specifications are also available at the ZigBee site.

On second inspection, your RX frame is not correct for a Active Endpoints Response. ZDO responses should be on source/dest endpoint 0x00 and profile ID 0x0000. The 0xE8 endpoint and 0xC105 profile ID are Digi specific. Double-check your TX frame to make sure you’re sending correctly and that you’re not missing the correct RX frame.