nRF ble sniffer for authenticated connections

[astella]

To the kind attention of Nordic support team,

I have been using nRF ble sniffer successfully, it is a great tool. But I have some troubles when it comes to use it for ble authenticated connections (I'm using a device that introduce a passkey,

having got a key matrix).  

After:

1.Sent Pairing DHKey Check

2.Rcvd Pairing DHKey Check

3.LL_ENC_REQ

4.LL_ENC_RSP

5.LL_START_ENC_REQ

I always get "Encrypted packet decrypted incorrectly (bad MIC)". I'm using Wireshark version 3.4.6 and nrf_sniffer_for_bluetooth_le_3.1.0_7cc811f packet for extcap and nRF52840 dk as the

hw. Do you think is there something I could do so to solve this issue? What is the recommended configuration? Should I be able to sniff the authenticated connection?

Thank you very much for your help,

Best regards 

[astella]

(I'm inserting the passkey in Wireshark input box, before inserting the passkey in my device and doing the actual bonding)

[astella]

I'm using an LE secure connection as described in https://devzone.nordicsemi.com/f/nordic-q-a/52240/nrf-sniffer-with-ble-communication-indicates-bad-mic . I'll try to provide Wireshark an LTK. I'm not sure at this stage about the precise step by step sequence in order to do so.