<?xml version="1.0" encoding="UTF-8" ?>
<?xml-stylesheet type="text/xsl" href="https://devzone.nordicsemi.com/cfs-file/__key/system/syndication/rss.xsl" media="screen"?><rss version="2.0" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:slash="http://purl.org/rss/1.0/modules/slash/" xmlns:wfw="http://wellformedweb.org/CommentAPI/" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>Wireshark and Encryption</title><link>https://devzone.nordicsemi.com/f/nordic-q-a/3309/wireshark-and-encryption</link><description>I am using the sniffer with Wireshark to watch some data being passed by my central and peripheral. I started with the multilink central and peripheral examples. Unfortuantely, Wireshark always tells me it can&amp;#39;t decrypt the data because the MIC is bad</description><dc:language>en-US</dc:language><generator>Telligent Community 13</generator><lastBuildDate>Fri, 01 Aug 2014 19:56:47 GMT</lastBuildDate><atom:link rel="self" type="application/rss+xml" href="https://devzone.nordicsemi.com/f/nordic-q-a/3309/wireshark-and-encryption" /><item><title>RE: Wireshark and Encryption</title><link>https://devzone.nordicsemi.com/thread/12062?ContentTypeID=1</link><pubDate>Fri, 01 Aug 2014 19:56:47 GMT</pubDate><guid isPermaLink="false">137ad170-7792-4731-bb38-c0d22fbe4515:e8e0089f-4554-4f3d-be81-28fa21a68e72</guid><dc:creator>Jo-Jo</dc:creator><description>&lt;p&gt;I&amp;#39;m not exactly sure what I did to get this working, but it works now. I erased, and reloaded both soft devices, and both applications. I also quit out of Wireshark, and the sniffer, and restarted them both. Now it seems to work.&lt;/p&gt;&lt;div style="clear:both;"&gt;&lt;/div&gt;</description></item><item><title>RE: Wireshark and Encryption</title><link>https://devzone.nordicsemi.com/thread/12061?ContentTypeID=1</link><pubDate>Thu, 31 Jul 2014 00:29:32 GMT</pubDate><guid isPermaLink="false">137ad170-7792-4731-bb38-c0d22fbe4515:a0d0ae1d-1c10-4604-927f-0fa65528e299</guid><dc:creator>Ulrich Myhre</dc:creator><description>&lt;p&gt;It is possible to encrypt a connection even if there are no attributes requiring a security level to be accessed. It&amp;#39;s hard to say for sure what&amp;#39;s happening without a trace, but I guess one of the parts initiate security (perhaps due to an existing bond?) and that&amp;#39;s what you&amp;#39;re seeing. Try clearing any existing bonds if there are any.&lt;/p&gt;
&lt;p&gt;For the second part the sniffer is able to decrypt connections when it sees the initial security setup (and enter any keys if applicable). I don&amp;#39;t think it supports entering a long-term key to decrypt a secure connection encrypted with an LTK previously exchanged through bonding.&lt;/p&gt;&lt;div style="clear:both;"&gt;&lt;/div&gt;</description></item></channel></rss>