You buy a 'sacrificial' ZWave USB and flash it with Zniffer code. The code to flash it back isn't public therefore you'd be wise to capture and save the code from the sacrificial. After that it's just run the ZNiffer code on a PC and watch, interpret and adjust.
