This post is older than 2 years and might not be relevant anymore
More Info: Consider searching for newer posts

ble sniffer does not show fragmented L2CAP packets correctly

When using the sniffer to analyze GATT exchanges that use attributes > 20 bytes (which means L2CAP packets with fragmentation), the Wireshark tool does not show correct information. I only see the first L2CAP packet at the start of the connection event, and no other packets from the same connection event are shown. (When I do the same with "normal" GATT exchanges where the values are <= 20 bytes and therefore fit in a single packet, I can see the normal expected exchange). I don't even see the Empty PDU responses from the peripheral. Here's a screenshot of the Wireshark window: www.bok.net/.../Capture.PNG

I'm using the Adafruit nRF51822 USB sniffer, and ble-sniffer_win_1.0.1 I have tried with Wireshark 1.12 and 2.3.0, both show the same thing, so I'm guessing it is something wrong with the output of the USB dongle sniffer.

Parents Reply Children
No Data
Related