Sniffing connection data

RE: Sniffing connection data

Sigurd — Thu, 01 Dec 2022 17:59:39 GMT

Hi Aeneas,

This case is ~2 years old. If you are having issues with the sniffer, please open a new case:
https://devzone.nordicsemi.com/support/add

RE: Sniffing connection data

Aeneas — Thu, 01 Dec 2022 17:41:21 GMT

I have this exact problem, except my installation is recent, with v..Version 4.0.1 (v4.0.1-0-ge9f3970b1527)..

//52840 DK//PCA10056//central=apple-smartphone//

Works perfectly on Advertising packets, but once a CONNECT_IND comes in

from the smartphone, no more messages from this Source are displayed

(since this source programmed to stop Advertising on a Connect).

The smartphone does indicate that a series of messages are

being received from this source.

So the question is what in installation/troubleshooting affects

ability to display Data messages in Connect mode ?

(No encryption or privacy is enabled, at this point).

In the Wireshark Device options, I see 2:

All advertising devices and Follow IRK., preceding a list of devices and dBm observed.

RE: Sniffing connection data

Sigurd — Thu, 08 Oct 2020 15:09:49 GMT

Great! Happy to help 🙂

RE: Sniffing connection data

Aftab — Thu, 08 Oct 2020 15:06:29 GMT

Changing the Wireshark version solved the problem, thanks a lot.

RE: Sniffing connection data

Aftab — Thu, 08 Oct 2020 14:51:47 GMT

Ok, let me try this.

RE: Sniffing connection data

Sigurd — Thu, 08 Oct 2020 14:51:19 GMT

From https://infocenter.nordicsemi.com/topic/ug_sniffer_ble/UG/sniffer_ble/installing_sniffer.html, Wireshark v3.0.7 or later is recommended on Windows. So I recommend that you upgrade your Wireshark version.

RE: Sniffing connection data

Aftab — Thu, 08 Oct 2020 14:48:43 GMT

v2.4.4. Do I need to take the sniffer again to see Info data, after Enable All option?

RE: Sniffing connection data

Sigurd — Thu, 08 Oct 2020 14:41:57 GMT

You could perhaps try Analyze -> Enabled Protocols -> Enable All -> OK

What Wireshark version are you using ?

RE: Sniffing connection data

Aftab — Thu, 08 Oct 2020 14:36:42 GMT

BT LE LL was already checked/enabled.

RE: Sniffing connection data

Sigurd — Thu, 08 Oct 2020 14:30:57 GMT

It looks like you have NORDIC_BLE (Nordic BLE sniffer) enabled. You should enable "Bluetooth Low Energy Link Layer" also.

Click Analyze -> Enabled Protocols and verify that the BT LE LL protocol is selected.

RE: Sniffing connection data

Aftab — Thu, 08 Oct 2020 14:25:47 GMT

How to check if its "Nordic BLE sniffer" or "Bluetooth Low Energy Link Layer" ? I'm following the guide as mentioned above.

RE: Sniffing connection data

Aftab — Thu, 08 Oct 2020 14:24:17 GMT

RE: Sniffing connection data

Sigurd — Thu, 08 Oct 2020 14:22:38 GMT

And your Packet Details window?

Do you have "Nordic BLE sniffer" and "Bluetooth Low Energy Link Layer" ?

RE: Sniffing connection data

Aftab — Thu, 08 Oct 2020 14:19:28 GMT

Here it is:

RE: Sniffing connection data

Sigurd — Thu, 08 Oct 2020 14:12:04 GMT

Here is the full window:

How does your packet #4772 look like ?

RE: Sniffing connection data

Aftab — Thu, 08 Oct 2020 14:07:03 GMT

Ah I see. But at your end Info column shows exact information of what is happening, my info column does not show anything, how to do that?

RE: Sniffing connection data

Sigurd — Thu, 08 Oct 2020 14:02:23 GMT

Yes, same here. The sniffer trace was stopped at packet 32720.

The connection happened at 4772

RE: Sniffing connection data

Aftab — Thu, 08 Oct 2020 14:00:21 GMT

It's very strange b/c the same file on my Wireshark does not show packets beyond 32720. To be sure, I downloaded the above attached file and opened in Wireshark, same result, no sniffing information beyind 32720. See the attached image:

RE: Sniffing connection data

Sigurd — Thu, 08 Oct 2020 13:08:15 GMT

Hi,

[quote userid="76817" url="~/f/nordic-q-a/66889/sniffing-connection-data"]the Wireshark shows no data at all. I'm attaching the Wireshark capture file if that helps. [/quote]

There is a lot of data in the sniffer log you attached. The connection happens at No. #4772: