Wireshark not capturing Bluetoorth LE data packets (but does show advertising packets)

RE: Wireshark not capturing Bluetoorth LE data packets (but does show advertising packets)

Hung Bui — Mon, 13 Nov 2023 09:07:42 GMT

Hi Peter,
Good to know that it worked.
We have made a guide on how to use the Sniffer in our BLE fundamental course.

You can take a look at lesson 6 here: academy.nordicsemi.com/.../

RE: Wireshark not capturing Bluetoorth LE data packets (but does show advertising packets)

Peter King — Sun, 12 Nov 2023 20:53:45 GMT

Thank you - this worked - I found that it was only advertising on two channels. When I changed the Device and the channels it then captured all of the packets.

Now I can get on to try to work out what packets are being transferred for which Services and Characteristics.

RE: Wireshark not capturing Bluetoorth LE data packets (but does show advertising packets)

Hung Bui — Thu, 09 Nov 2023 10:07:25 GMT

Hi Pete,

You can click on the nRF Sniffer tab and then right click on the Channel Index to apply it as a Column

Then you will see the channel index as a column in the trace. You then can customize the Adv Hope to the one used by the device, instead of 37,38, 39 .

RE: Wireshark not capturing Bluetoorth LE data packets (but does show advertising packets)

Peter King — Wed, 08 Nov 2023 20:39:30 GMT

Hi Hung,

I did some more testing this evening - screenshots in order below.

1. without filtering there are lots of advertising packets from the oarlock - at least 2 per second.

2. Setting the filter. Then restarting capture (with green sharkfin) only see 2 advertising packets

3. Removing filter - back to lots of packets

How do I check the other channels?

Thanks

Pete

RE: Wireshark not capturing Bluetoorth LE data packets (but does show advertising packets)

Hung Bui — Mon, 06 Nov 2023 09:13:09 GMT

Hi Peter,
Please make sure you can capture all advertising packet from the rowing device. I see you only captured 2 packets in your screenshot, which is strange.

You should all so check the channels that you receive the advertising packets on. There could be the chance that they don't do 37 38 39.

RE: Wireshark not capturing Bluetoorth LE data packets (but does show advertising packets)

Peter King — Sat, 04 Nov 2023 15:12:07 GMT

More testing today - I can get a heart rate monitor working and capture the data packets for this. (below)

So I'm thinking that there must be something about the device that is causing my issue.

Also the 2nd LED on the dongle turns red whilst capturing.

Thanks for any help and advice.

RE: Wireshark not capturing Bluetoorth LE data packets (but does show advertising packets)

Peter King — Fri, 03 Nov 2023 19:39:31 GMT

Thanks Hung,

I tried this, I can see the advertising packets, but not the connection or data packets. I also tried with a different device and got the same - I could see the adverts, but not the data.

Is it possible that there is an issue with authentication?

Thanks

RE: Wireshark not capturing Bluetoorth LE data packets (but does show advertising packets)

Hung Bui — Fri, 03 Nov 2023 12:36:31 GMT

Hi Peter,
For the sniffer to be able to follow a connection, you need to select the device BEFORE it's connected to a central.
So please try again this time choose the device then reset it to start advertising and verify that you can see the advertising packets only from that device before you connect to the PC.