nRF Sniffer 2 not capturing Mesh packets

RE: nRF Sniffer 2 not capturing Mesh packets

Matthew — Tue, 16 Oct 2018 21:30:44 GMT

I'm not sure what platform you're running on, but the one gotcha for me on Linux was to make sure I had read/write access to /dev/ttyACMn. On my box, the device had root:dialout ownership, so I had to add myself to the dialout group. Once I did and re-logged in, I was able to capture packets.

Now, decryption is another matter. :p

RE: nRF Sniffer 2 not capturing Mesh packets

adonayveiga — Wed, 06 Jun 2018 17:30:23 GMT

[quote userid="2108" url="~/f/nordic-q-a/33656/nrf-sniffer-2-not-capturing-mesh-packets/129591"]You may want to use the python API for the nRF Sniffer to get the messages and decrypt them with the netkey/appkey[/quote]

How am I suppose to do that? Could you tell us the details?

Thanks in advance.

RE: nRF Sniffer 2 not capturing Mesh packets

Paulo.Zacarias — Sun, 06 May 2018 12:05:49 GMT

Hi,

No ideas on what could be the problem? Has anyone actually managed to capture Mesh packets?

RE: nRF Sniffer 2 not capturing Mesh packets

Paulo.Zacarias — Tue, 24 Apr 2018 20:09:11 GMT

Hi David,

Thank you for the reply.

I tried again but regarding the ADV_NONCONN_IND packets I do see a lot of them in Wireshark, but all from same source address. I'm running the Light switch demo with 1 client/provisioner and 2 servers, shouldn't I get ADV_NONCONN_IND packets from 3 different source address?

I also applied your filter, but it seems not to be working. I still have some SCAN_REQ as well.

RE: nRF Sniffer 2 not capturing Mesh packets

Paulo.Zacarias — Tue, 24 Apr 2018 19:48:31 GMT

Hi Joakim,

Sorry, I meant Python 2.7.14, yes.

RE: nRF Sniffer 2 not capturing Mesh packets

David Edwin — Tue, 24 Apr 2018 13:46:17 GMT

Mesh packets are broadcasted packets, i.e. ADV_NONCONN_IND so you can set up a display filter for ADV_NONCONN_IND packets like

btle.advertising_header.pdu_type == 0x2

in wireshark.

This will then allow you to see the mesh packets if they are being transmitted. You may want to press the buttons on the light switch demo client to transmit mesh packets more frequently.

Verify your python version to be 2.7.x as Joakim has suggested above.

The mesh is completely encrypted so you are likely to see messages, their types being transmitted and their RSSI but not much more. You may want to use the python API for the nRF Sniffer to get the messages and decrypt them with the netkey/appkey but that is additional work that is needed.

RE: nRF Sniffer 2 not capturing Mesh packets

Joakim Jakobsen — Tue, 24 Apr 2018 13:32:27 GMT

Hi!

[quote user=""] and I'm using Wireshark 2.4.6, Python 2.4.14 and pyserial 3.4.[/quote]

The user guide states, under required software;

Pyton v.2.7.x

Did you mean to write Python v.2.7.14? Or are you using another version?

Best regards,
Joakim.