Service Discovery Failed using pc-ble-driver

[mmercier]

I am using an nRF52840 Dongle to try and connect to a product over Bluetooth and communicate with it. I have been able to open this dongle using nRF Connect Bluetooth Low Energy, and can successfully find my product, connect to it, and write to its characteristics. I am now needing to use a C program to do this same thing.

I have downloaded the pc-ble-driver, created a project in my C IDE, and copied the code from the heart rate collector example to be the project's source file. I got the project to build without issue, and following the instructions in the examples github page, have flashed the dongle with the correct firmware to allow the c program to connect to it. I am able to successfully connect to the dongle's COM port and scan for devices.

I did have to make some modifications to the source file. My product I want to connect to doesn't advertise its name, so I was unable to connect to it even when finding it. This product does, however, advertise the Manufacturer Specific Data field, and after some trial and error, I was able to modify the find_adv_name routine to instead check for Manufacturer Specific Data, and I was able to connect to the device this way.

After this, I get output strings that read: "Connection Established", "Discovering Primary Services", and "Received Service Discovery Response". However, I then get an error message saying "Service Discovery Failed. Error Code 0x10A". Stepping through the code, this error is getting set after the "on_connected" routine is finished, but before starting the on_service_discovery_response routine.

I have changed the value of BLE_UUID_HEART_RATE_SERVICE to match the UUID of my product's service, but there was no effect. I had also been told in the past to try changing the srvc_uuid.type from BLE_UUID_TYPE_BLE to BLE_UUID_TYPE_VENDOR_BEGIN, but when doing this, I get a failure returned from the function "sd_ble_gattc_primary_services_discover", with the error code 0x8005, which seemingly corresponds to NRF_ERROR_SD_RPC_NO_RESPONSE. 

Could anyone give me any pointers for where to look for what all to change in the source code in order to connect to my product rather than whatever heart rate monitor it is expecting? Thanks!

[Edvin]

Where exactly does the BLE_GATT_STATUS_ATTERR_ATTRIBUTE_NOT_FOUND appear?

Is db_disc_handler() called? Or whatever function that is set to the event handler that is passed onto ble_db_discovery_init():

/** @brief Function for initializing the database discovery module. */
static void db_discovery_init(void)
{
    ble_db_discovery_init_t db_init;

    memset(&db_init, 0, sizeof(ble_db_discovery_init_t));

    db_init.evt_handler  = db_disc_handler;
    db_init.p_gatt_queue = &m_ble_gatt_queue;

    ret_code_t err_code = ble_db_discovery_init(&db_init);
    APP_ERROR_CHECK(err_code);
}

Does it have:

p_evt->evt_type == BLE_DB_DISCOVERY_COMPLETE?

If so, what is p_evt->params.discovered_db.srv_uuid.uuid?

If this event does not occur, can you show me how you initialize the central service on your central?

 

mmercier said:

Doing more studying with breakpoints, it looks like this "gatt_status" variable remains at 0 through the entire "on_connected"

 What do you mean by gatt_status? Can you show some snippets? In what event do you expect this to change? Are you talking about the 

p_ble_gattc_evt->gatt_status? If so, 0 means BLE_GATT_STATUS_SUCCESS, so this being 0 is not unexpected.

Are you talking about the on_primary_srv_discovery_rsp()? If so, does it print anything from this callback?

[mmercier]

My code is based on the Heart Rate Collector example from the pc-ble-driver package, and has not been changed in terms of the event handler and any setup functions. Here is the event handler, for reference:

static void ble_evt_dispatch(adapter_t * adapter, ble_evt_t * p_ble_evt)
{
if (p_ble_evt == NULL)
{
printf("Received an empty BLE event\n");
fflush(stdout);
return;
}

switch (p_ble_evt->header.evt_id)
{
case BLE_GAP_EVT_CONNECTED:
on_connected(&(p_ble_evt->evt.gap_evt));
break;

case BLE_GAP_EVT_DISCONNECTED:
printf("Disconnected, reason: 0x%02X\n",
p_ble_evt->evt.gap_evt.params.disconnected.reason);
fflush(stdout);
m_connected_devices--;
m_connection_handle = 0;
break;

case BLE_GAP_EVT_ADV_REPORT:
on_adv_report(&(p_ble_evt->evt.gap_evt));
break;

case BLE_GAP_EVT_TIMEOUT:
on_timeout(&(p_ble_evt->evt.gap_evt));
break;

case BLE_GATTC_EVT_PRIM_SRVC_DISC_RSP:
on_service_discovery_response(&(p_ble_evt->evt.gattc_evt));
break;

case BLE_GATTC_EVT_CHAR_DISC_RSP:
on_characteristic_discovery_response(&(p_ble_evt->evt.gattc_evt));
break;

case BLE_GATTC_EVT_DESC_DISC_RSP:
on_descriptor_discovery_response(&(p_ble_evt->evt.gattc_evt));
break;

case BLE_GATTC_EVT_WRITE_RSP:
on_write_response(&(p_ble_evt->evt.gattc_evt));
break;

case BLE_GATTC_EVT_HVX:
on_hvx(&(p_ble_evt->evt.gattc_evt));
break;

case BLE_GAP_EVT_CONN_PARAM_UPDATE_REQUEST:
on_conn_params_update_request(&(p_ble_evt->evt.gap_evt));
break;

case BLE_GATTS_EVT_EXCHANGE_MTU_REQUEST:
on_exchange_mtu_request(&(p_ble_evt->evt.gatts_evt));
break;

case BLE_GATTC_EVT_EXCHANGE_MTU_RSP:
on_exchange_mtu_response(&(p_ble_evt->evt.gattc_evt));
break;

default:
printf("Received an un-handled event with ID: %d\n", p_ble_evt->header.evt_id);
fflush(stdout);
break;
}
}

Previously, my issue with the UUIDs had occurred within the "on_connected" routine, but now, with the changes I described above, I've been able to move past this routine without errors. On the next pass through the event handler, I am entering the case for the "on_service_discovery_response" routine, and this is where I run into the error.

The very first thing done in the "on_service_discovery_response" routine is to check the "gatt_status" parameter of the struct being passed to the function (in this case, p_ble_evt->evt.gattc_evt is being passed, as can be seen above). If gatt_status is equal to 0, then the routine continues on, but displays an error message if it is anything else. In my case, I am getting error message 0x10A, which seems to correspond to BLE_GATT_STATUS_ATTERR_ATTRIBUTE_NOT_FOUND.

I stepped through the code using breakpoints to monitor this value, and see if I can figure out where it is being changed to 0x10A. As I mentioned, the event handler goes through the case for "on_connected" immediately before the case where I am seeing the error. During this entire pass through the event handler, the "gatt_status" parameter of p_ble_evt->evt.gattc_evt is equal to 0. This is true for when the "on_connected" routine is being executed, and for afterward, when the event handler case ends and goes to the end of the function.

However, when the event handler then enters its next pass, the "gatt_status" suddenly changes to 0x10A. I do not know what all is going on between passes through the event handler. I am assuming it is done using the library functions, but just stepping through, I don't see anything occurring between passes. Either way, something is occurring, since the value of p_ble_evt->header.evt_id is changing (so that the event handler enters a different case), and I am assuming whatever changes this value is also responsible for setting the gatt_status.

If it helps, the only code I've modified is the "on_adv_report" routine (to check for Manufacturer Specific Data rather than Device Name) and the "service_discovery_start" routine (to add the 128-bit UUID, as described above). Other than that, my code is effectively identical to the heart rate collector example in the pc-ble-driver github page.

[Edvin]

Adding your code using insert->code for readability:

static void ble_evt_dispatch(adapter_t * adapter, ble_evt_t * p_ble_evt)
{
    if (p_ble_evt == NULL)
    {
        printf("Received an empty BLE event\n");
        fflush(stdout);
        return;
    }
    
    switch (p_ble_evt->header.evt_id)
    {
        case BLE_GAP_EVT_CONNECTED:
            on_connected(&(p_ble_evt->evt.gap_evt));
            break;
        
        case BLE_GAP_EVT_DISCONNECTED:
            printf("Disconnected, reason: 0x%02X\n",
            p_ble_evt->evt.gap_evt.params.disconnected.reason);
            fflush(stdout);
            m_connected_devices--;
            m_connection_handle = 0;
            break;
        
        case BLE_GAP_EVT_ADV_REPORT:
            on_adv_report(&(p_ble_evt->evt.gap_evt));
            break;
        
        case BLE_GAP_EVT_TIMEOUT:
            on_timeout(&(p_ble_evt->evt.gap_evt));
            break;
        
        case BLE_GATTC_EVT_PRIM_SRVC_DISC_RSP:
            on_service_discovery_response(&(p_ble_evt->evt.gattc_evt));
            break;
        
        case BLE_GATTC_EVT_CHAR_DISC_RSP:
            on_characteristic_discovery_response(&(p_ble_evt->evt.gattc_evt));
            break;
        
        case BLE_GATTC_EVT_DESC_DISC_RSP:
            on_descriptor_discovery_response(&(p_ble_evt->evt.gattc_evt));
            break;
        
        case BLE_GATTC_EVT_WRITE_RSP:
            on_write_response(&(p_ble_evt->evt.gattc_evt));
            break;
        
        case BLE_GATTC_EVT_HVX:
            on_hvx(&(p_ble_evt->evt.gattc_evt));
            break;
        
        case BLE_GAP_EVT_CONN_PARAM_UPDATE_REQUEST:
            on_conn_params_update_request(&(p_ble_evt->evt.gap_evt));
            break;
        
        case BLE_GATTS_EVT_EXCHANGE_MTU_REQUEST:
            on_exchange_mtu_request(&(p_ble_evt->evt.gatts_evt));
            break;
        
        case BLE_GATTC_EVT_EXCHANGE_MTU_RSP:
            on_exchange_mtu_response(&(p_ble_evt->evt.gattc_evt));
            break;
        
        default:
            printf("Received an un-handled event with ID: %d\n", p_ble_evt->header.evt_id);
            fflush(stdout);
            break;
    }
}

[Edvin]

What does your on_connected() look like, then?

 

mmercier said:

If it helps, the only code I've modified is the "on_adv_report" routine

 That is probably the issue, because this example will by default look for the HRS UUID in the service discovery. This is why I keep pointing to the SDK example ble_app_uart_c, because it shows you how to look for a long (128-bit) UUID, which you then need to modify to your own.

If you haven't changed it, your on_connected() function looks like this, right?

static void on_connected(const ble_gap_evt_t * const p_ble_gap_evt)
{
    printf("Connection established\n");
    fflush(stdout);

    m_connected_devices++;
    m_connection_handle         = p_ble_gap_evt->conn_handle;
    m_connection_is_in_progress = false;

    service_discovery_start();
}

And your service_discover_start() looks like this:

static uint32_t service_discovery_start()
{
    uint32_t   err_code;
    uint16_t   start_handle = 0x01;
    ble_uuid_t srvc_uuid;

    printf("Discovering primary services\n");
    fflush(stdout);

    srvc_uuid.type = BLE_UUID_TYPE_BLE;
    srvc_uuid.uuid = BLE_UUID_HEART_RATE_SERVICE;

    // Initiate procedure to find the primary BLE_UUID_HEART_RATE_SERVICE.
    err_code = sd_ble_gattc_primary_services_discover(m_adapter,
                                                      m_connection_handle, start_handle,
                                                      &srvc_uuid);
    if (err_code != NRF_SUCCESS)
    {
        printf("Failed to initiate or continue a GATT Primary Service Discovery procedure\n");
        fflush(stdout);
    }

    return err_code;
}

What does service_discover_start()? And did you modify it somehow? If not, I suggest you try to change BLE_UUID_TYPE_BLE and BLE_UUID_HEART_RATE_SERVICE according to the device that you are trying to connect to.

Don't use BLE_UUID_TYPE_BLE, because these are the 16-bit UUIDs defined by Bluetooth. You want to use BLE_UUID_TYPE_VENDOR_BEGIN, which are the 128-bit UUIDs. Then you need to change the BLE_UUID_HEART_RATE_SERVICE to a variable containing the UUID that you are expecting to find.

Look at how this is done in SDK16.0.0\examples\ble_central\ble_app_uart_c.

If you look in ble_nus_c_init(). the base_uuid is added as NUS_BASE_UUID, and the discovery is registered as uart_uuid.

Now, I have not tried this with pc-ble-driver, which works a bit different, but you need to change the srvc_uuid that you pass on in service_discovery_start. Try to do this, and see if you can manage to make it discover the custom uuid.

[mmercier]

I have been describing my modifications to the "service_discovery_start" routine in the above posts, as this is the routine that I'd been originally seeing errors in. For reference, here is the code for this routine:

static uint32_t service_discovery_start()
{
    uint32_t   err_code;
    uint16_t   start_handle = 0x01;
    ble_uuid_t srvc_uuid;
	ble_uuid128_t srvc_uuid128;

    printf("Discovering primary services\n");
    fflush(stdout);

    //srvc_uuid.type = BLE_UUID_TYPE_BLE;
    srvc_uuid.type = BLE_UUID_TYPE_VENDOR_BEGIN;
    //srvc_uuid.type = BLE_UUID_TYPE_UNKNOWN;
    srvc_uuid.uuid = BLE_UUID_HEART_RATE_SERVICE;
	
	//for(int i=0;i<16;i++)
		//srvc_uuid128.uuid128[i] = BLE_UUID_LONG[i];
    	//printf("%02X ", BLE_UUID_LONG[i]);
	srvc_uuid128.uuid128[0] = 0x32;
	srvc_uuid128.uuid128[1] = 0x0D;
	srvc_uuid128.uuid128[2] = 0x3B;
	srvc_uuid128.uuid128[3] = 0x45;
	srvc_uuid128.uuid128[4] = 0x12;
	srvc_uuid128.uuid128[5] = 0x32;
	srvc_uuid128.uuid128[6] = 0xF3;
	srvc_uuid128.uuid128[7] = 0x8B;
	srvc_uuid128.uuid128[8] = 0x84;
	srvc_uuid128.uuid128[9] = 0x47;
	srvc_uuid128.uuid128[10] = 0x07;
	srvc_uuid128.uuid128[11] = 0xEB;
	srvc_uuid128.uuid128[12] = 0x00;
	srvc_uuid128.uuid128[13] = 0x00;
	srvc_uuid128.uuid128[14] = 0xC3;
	srvc_uuid128.uuid128[15] = 0x17;
	
	err_code = sd_ble_uuid_vs_add(m_adapter, &srvc_uuid128, &srvc_uuid.type);
	
	if (err_code != NRF_SUCCESS)
    {
        printf("Failed to add custom 128-bit UUID\n");
        fflush(stdout);
    }

    // Initiate procedure to find the primary BLE_UUID_HEART_RATE_SERVICE.
    err_code = sd_ble_gattc_primary_services_discover(m_adapter,
                                                      m_connection_handle, start_handle,
                                                      &srvc_uuid);
                                                      //NULL);
    if (err_code != NRF_SUCCESS)
    {
        printf("Failed to initiate or continue a GATT Primary Service Discovery procedure\n");
        fflush(stdout);
    }

    return err_code;
}

The "on_connected" routine is identical to what you've posted. As you can see, I've changed the type parameter of the srvc_uuid struct to BLE_UUID_TYPE_VENDOR_BEGIN, and I've defined a new struct (srvc_uuid128) which I've populated with the values of my device's 128-bit UUID. I've added a call to "sd_ble_uuid_vs_add" to add this 128-bit UUID to the list of available UUIDs, and this does not return an error code.

I've also changed the value of BLE_UUID_HEART_RATE_SERVICE to 0x0100, to match with octets 12-13 of my service UUID. For reference, the full UUID of the service is 17C30001EB0747848BF33212453B0D32.

I have been using this code as my base because it is the only example in the pc-ble-driver. I've been told multiple times, by multiple different Nordic reps, that this is what I need to use. So that is why I am using it. This UART example is not in the pc-ble-driver. I need to be able to make a C program that can connect to my device's service, and read/write to its characteristics. From all I've been told, I need the pc-ble-driver to be able to do that. If there is other code that can do this, that can be built into a C project, please let me know. Thanks.