google string in sniffed BLE packet

RE: google string in sniffed BLE packet

gschelotto — Tue, 12 May 2020 13:58:21 GMT

Hi Simon,

And I'm sorry for insist :-) Here's a post from Wireshark forum that involves Nordic Dongle in this issue.

https://ask.wireshark.org/question/16573/google-address-appears-from-wireshark-manufacturer-database/

Could you clarify this? I'm a bit puzzled...

gaston

RE: google string in sniffed BLE packet

Simonr — Mon, 11 May 2020 07:59:02 GMT

Hi gaston

I'm sorry, I misunderstood this as well. It seems like it is Wireshark that is storing some manufacturer IDs in the "Wireshark manufacturer database", found here. Here you can see that Google, amongst others, is present. Nordic Thread and Zigbee devices are also stored here.

The reason only the Google address is identified by name is likely because that is the only device in your vicinity using a public address instead of a private resolvable one. I don't see why this matters whether it says a company name or just the full address though.

Best regards,

Simon

RE: google string in sniffed BLE packet

gschelotto — Fri, 08 May 2020 10:44:16 GMT

Hi Simon,

So the device responsible for filtering the google addresses is the sniffer firmware of nRF51 Dongle, correct? If so I consider it quite intrusive.

gaston

RE: google string in sniffed BLE packet

Simonr — Fri, 08 May 2020 06:54:12 GMT

Hi Gaston

Yes, most devices only show the full address, but some of the more well-known company identifiers (like Google and Apple for example) are stored by the sniffing device and will show what kind of device that is in the sniffer log.

Best regards,

Simon

RE: google string in sniffed BLE packet

gschelotto — Thu, 07 May 2020 13:27:50 GMT

Hi Simon,

I do not have a Google device but perhaps a neighbor does. Anyway, if I select my device (EWAT AI-No). Shouldn't I just see only this device with its address CE:4A:33:01:8D:B6?

gaston

RE: google string in sniffed BLE packet

Simonr — Thu, 07 May 2020 12:34:57 GMT

Hi Gaston

That is probably a Google device that is advertising or scanning in your vicinity. Do you, for example, have a Google Home or Google Pixel phone near you?

Best regards,

Simon