How can I monitor all exchanges between two BTLE connections with Wireshark?

I have installed the nRF BTLE Sniffer plugin for Wireshark to do some transmission monitoring between my PC (central) and device (peripheral). To test, I have a U-Blox NINA-B31 EVK connected to the U-Blox S-Center PC app, and the U-Blox Android app. When running Wireshark, I am able to see all the data my nRF52840DK can see, including advertisement events from my EVK and PC. What I cannot see however is my EVK's device ID and MAC in the "Device" drop down list, but if I filter with `btle.advertising_address` command with my EVK's MAC then the advertisement events from the MAC can be seen.

When I connect to the EVK from the phone app, I see a CONNECT_IND message and Wireshark stops reporting messages from filtered MAC. I suspect this has something to do with the fact that I am filtering "advertising address" when I probably want something different.

In the phone app, I am able to send a text based message to the EVK. If I send the string "test", I can see it in the terminal emulator connected to the EVK signifying the message has been received. What I want is to be able to see this in Wireshark. I want to be able to see all communication between the central and peripheral device, not just advertising and connection events. Is there a way I can do this? I've also tried filtering with `frame[0-36] == "test"` but that does not work. I'd also go through the packets individually but I work in an office with a whole series of bluetooth devices so the nRF52840DK is picking up everything.

---

I have also tried the Find Packet Bytes tool for the string I sent from the app to the EVK, but it does not appear in the sniffers log.

Related