sniffer Encrypted packet decrypted incorrectly (bad MIC)

[dit]

as others have described I run the sniffer

than go through pairing process, the encrypted packets show up as "Encrypted packet decrypted incorrectly (bad MIC)"

is there any solution to that? 

(I went through the user guide, verified all version of SW is ok)

this shows up for any two devices I tried.. 

really appreciate your help.. 

[AndreasF]

Hi.

Are you sniffing for packets during the whole process? (Connection, pairing and so on).

Are you using LE secure connection?

Best regards,

Andreas

[dit]

yes I started sniffer, saw advertise packet, only then Initiate the connect on central side. so connect, pair all were captured,

yes I am using secure connection (not legacy pairing) with "just works"

[dit]

yes I am using version2 (working under linux)iphone_nrf_gattbluez_bad_mic.pcapng

[Torsten Robitzki]

Hi Andreas,

just out of curiosity, how would (or could) support for sniffing connections with LE secure look like?

best regards,

Torsten 

[AndreasF]

Hi Torsten.

I have to talk to the developers about this question.

Best regards,

Andreas

[AndreasF]

Hi Torsten.

I sent you a private message.

Best regards,

Andreas

[dit]

Hi Andreas, did you have a look to the pcap I provided? 

Thanks!

[AndreasF]

Hi.

Yes I had a look at it, and you should try to use legacy pairing in order to decrypt the packets.

Best regards,

Andreas

[dit]

So sniffer does not support secure connection? Even if using just works?

Where can i find Documentation that sniffer does not support secure connection? 

We bought three sniffers which is currently useless to us. ): 

appreciate your help! 

[AndreasF]

Hi.

The purpose of LE secure connection is to improve protection against attackers. Eavesdropping and the sniffer is some parts that where protected. Therefore you can't sniff these packets.

You can sniff them if you change your security to legacy pairing.

Best regards,

Andreas

[dit]

Ok I’ll have it a try