Problem with wireshark 2.3.0 with ble_sniffer

[mr_jj]

I have followed the instructions for sniffing ble packets with wireshark. Errors would occur when using 2.2.5 so I switched to the latest development version. See this question

Wireshark 2.3.0 starts correctly now when I press 'w' in the sniffer. However, it appears to capture packets but not display them. Is this a problem with wireshark 2.3.0 being incompatible with ble_sniffer or a configuration problem in wireshark?

[Julien]

You can use version 2.4.0 now wich is official.

You just forgot to do this step from the link :

• go to edit->preferences->protocols->DLT_USER
• edit the encapsulation table and add "user10 (DLT=157)" with "nordic_ble" in payload protocol field.

After that it should display and dissect all packets

[RK]

+1 for this - the latest versions of wireshark have the Nordic protocol built in (it needs its own DLT but don't see that happening) and they also now use the much more up-to-date BLE dissectors which have tons of features to dissect the newer protocols and a load of bugfixes (a few of them mine).

I understand Nordic's insistence on 1.x being the only version you can use, that's the only version it was written for, the drivers are self-contained and not built-in and the front-end is designed around 1.x, however for as long as the underlying implementation can produce a file in the right format (I'm going to assume that some of the recent extensions to the BLE protocol may eventually break that) you can decode it in any recent wireshark and get great results.