nrf sniffer with BLE communication indicates bad MIC

[Akram]

Hi,

I use nrf sniffer to monitor BLE communication. After pairing with encryption, wireshark indicates Encrypted packet decrypted incorrectly (bad MIC).

I think there is no MIC data in BLE packet. Could you help to confirm and fix this issue?

Please also find the wireshark trace for your reference

Bad MIC.pcapng

[Akram]

Hi Kenneth,

Thank you for your reply. Could you advice how to configure Wireshark with LTK key?

[Kenneth]

Unfortunately it seems Wireshark can't support this, however for instance Ellisys and Frontline sniffer may (though they are much more expensive).

Edit: It may be possible to set LTK in Wireshark also, can you try to follow the procedure to set OOB as described in the nRF sniffer user guide, this may work:

https://infocenter.nordicsemi.com/topic/struct_nrftools/struct/nrftools_nrfsniffer.html