Opnet has support for the zigbee models. You could modify setting a little to send high traffic volumes to a particular node. At some point that node will be overwhelmed and hance a dos attack is achieved. You could also just flood the etha with random bits. The csma/ca will just not send because the channel is busy. All of this can be simulated in the opnet simulator