nRF52 BLE Sniffer

[Hanumanthappa]

Hi All, 

        We use nRF52 BLE Sniffer.Its working fiine.  Please letus know, weather its possible to sniff multiple BLE devices at a time using single Sniffer. If possible, let us know how to do it. (If any settings in Display Filters or Device selection is to be made)

[Amanda Hsieh]

Hi, 

Yes, it is possible. Please refer to nRF Sniffer User Guide v2.1, p.12 Capturing from multiple hardware interfaces/boards.

-Amanda H.

[Hanumanthappa]

I dont want to use multiple Hardware interfaces(Multiple Sniffers). I want to use single Hardware Interface(Single Sniffer) and want to sniff more than one BLE devices at a time(simultaneously)

[Amanda Hsieh]

Hi, 

Once the Sniffer is running, it reports advertisements and lists nearby devices in the Device List. Please also see p.10 All advertising devices section.

-Amanda H.

[Hanumanthappa]

Ya, when sniffer is running, it reports all nearby advertising devices. If I want to sniff a particular device by pairing it with another device, I will select the required device in the "Device" drop down list and then I can sniff the packets through that device after pairing with someother device. In the same way, can I sniff multiple devices even after pairing, using only one Hardware Interface(Sniffer) ?????

[Amanda Hsieh]

Hi, 

If the devices are paired, it will show as Master and Slave as the following figure. 

-Amanda H.

[Hanumanthappa]

Tq Mr Amanda H.

I am facing one more issue. When I use wireshark in "Multiple File mode"  (i,e to capture and store sniffed data in multiple files of 2MB each) to sniff, the wireshark stops capturing when it creates 2nd file after saving data to first file of 2MB. This issue happens only with nRF Sniffer. This multiple file capture mode works fine with wifi sniffing. Can you pls address it.

[Amanda Hsieh]

Hi, 

 

Hanumanthappa said:

When I use wireshark in "Multiple File mode"  (i,e to capture and store sniffed data in multiple files of 2MB each)

 Do you mean capturing from multiple hardware interfaces? If so, what OS do you use?

Please be aware that:

In the nRF Sniffer User Guide v2.2 Page.11  

Windows - It is not possible to run all hardware interfaces in a single instance of Wireshark. Run one instance
of Wireshark for each sniffer hardware attached to the computer. Select only one hardware instance in each
of the Wireshark instances.

-Amanda H.

[Hanumanthappa]

I am not capturing from multiple hardware interfaces...  Am running only one hardware. Am trying to use "Capture --> Options ---> Output" and trying to set "Create new file automatically after____"  2MB size. It runs and when first file size becomes 2MB it creates 2nd file and then stops capturing.

[Hanumanthappa]

I am not using multiple hardware interfaces. Am using only one hardware.  Am trying to use "Capture --> Options ---> Output" and trying to set "Create new file automatically after____" 2MB size. It runs and when first file size becomes 2MB it creates 2nd file and then stops capturing. This issue happens only with nRF52 Sniffer. This works fine with wifi sniffing. I tried with other versions of wireshark also. But the issue remains the same.