nRF52840 dongle as a sniffer to capture BLE packets in Wireshark.

[Abdul0]

I am using an nRF52840 dongle as a sniffer to capture BLE packets in Wireshark. Recently, I’ve noticed that the captured files are approximately half the expected size, and I’m not sure what is causing this issue.

This setup has been very reliable for the past two and a half years, and I haven’t made any significant changes to my configuration.

Has anyone experienced a similar issue or have any suggestions on what might be causing this?

[Abdul0]

I can see the encrypted packets; the issue is sometimes missing every other packet, sometimes I get everything. I am wondering if windows update affects the performance of the sniffer. The IT restricts from uploading the pcapng file. 

[Andrey.aley95]

It looks that you have the same issue as in this topic:
Wireshark BLE Sniffer missing packet, non-sequential event counter observed

If you check your "event counter" field in the .csv file you will see that it is also missing every other connection event.