This post is older than 2 years and might not be relevant anymore
More Info: Consider searching for newer posts

NRF sniffer Encrypted packet decrypted incorrectly (bad MIC)

Hi,

I am using PCA10028 development kit for sniffer with wireshark 3.0.1 using sniffer version V2.0 beta 3 . I am getting issue like "Encrypted packet decrypted incorrectly (bad MIC)" when listen to a secured connection.

I am sniffing from the beginning before the bonding process and after bonding process. But I am not able to get any data packets. I have also managed to get LTK passkey from slave device and entered in the passkey field in wireshark, then also same errors coming up. I have gone through all forum questions related to this but nothing help. Kindly help this out guys. 

  • Hi,

    You should see advertising packets arriving and the link getting established, is that happening ?
    The nRF Sniffer v2 beta 3 does not have the capability to take the LTK, you need provide only the Passkey(if used).

    Post the pcap file if you need more help.

    Thanks
    David
    =

    Note:
    Are you using LE Secure connections ? That is not supported in the nRF Sniffer v2 beta 3 release. 

  • Hi David,

    Sorry for delayed response, had been busy with other work. Yes I am able to see advertising packets , Connection request, responses and then pairing occurs. after that I am getting that error "Encrypted packet decrypted incorrectly (bad MIC)".  I assume it is not LE secure connections, because the client which is initiating connection here is BLE 4.0. 

    All I need is to sniff encypted packet. Sniffer is always "ON" while connection, pairing, data transfer, and reconnection.

    How can I insert pcap file in private?. 

Related