I tried to ask pretty specific questions so that I didn't have to confuse things with pages of hex messages. Really what I'm asking for is documentation clarification on a couple of the message formats.
My questions were:
1. If you receive an 0xA1 message (route discovery) with a no addresses, examples notwithstanding, does that imply "direct to coordinator?"
2. Is 0x0000 ALWAYS the coordinator per ZB spec?
The manual 90000976_V page 145 makes reference to Table 1-03 in Chapter 1, but I don't know what that references - there is no Table 1-03 that I can find (at least they aren't labeled). I'm not sure if they mean a different manual.
Don't get me wrong here, I'm full of praise for this documentation - there's just a few things here and there that are a bit open-ended... and examples of some of the AT frames as they come back in API format would be extraordinarily helpful. Even the X-CTU tool tends to take things like what I pasted above and dump the meaty part out as a string of hex digits that I have to interpret myself.
I'll ask a more specific follow-up question on ND packets shortly.