how to check nRF5340 LE audio "Air log" or "hcisnoop"

[lsy]

Hello.I will open it again because the ticket was closed due to my fault.
I want to check the LE Audio (CIS/BIS) function by capturing it as "Airlog" or "hcisnoop" with nRF5340 LE audio EVK.

What I want is LE Audio function analysis at the data packet level.
Is there any other way?

The current development environment is Windows VS Code.
And I have two nRF5340 LE Audio EVKs.
I also have a USB Dongle, but I don't think I can because the bluetooth version is low. (nRF52840-Dongle)

1. Can I check "Airlog" or "hcisnoop" with the Nordic USB dongle(nRF52840-Dongle)?
2. Or is it possible to extract "Airlog" or "hcisnoop" in Windows VS code environment?
3. If you can capture "CIS/BIS Airlog" with nRF USB dongle sniffer, please provide detailed guide as well.
4. It seems that LTK is needed.

I added a definition to output LTK to proj.conf, but it is not output.
CONFIG_BT_LOG_SNIFFER_INFO=y
CONFIG_BT_DEBUG_LOG=y

Below is all of my J-link output.
00> *** Booting Zephyr OS build v3.1.99-ncs1 ***
00> nRF5340 APP core started
00>
00> rtt:~$

For your information, I am running a sample app of applications/nrf5340_audio.

Please reply.
Thank you.

[Maria Gilje]

Hello Isy,

I have been assigned your case, and will get back to you after I have had the time to take a look at it. Thank you for your patience.

Kind Regards,
Maria

[lsy]

Thank you for your reply.
All right.
I'll wait for the results of the review.

[Maria Gilje]

Hello Isy,

Thank you for waiting. I apologize for the delay caused by me having to prioritize other cases.

I want to check the LE Audio (CIS/BIS) function by capturing it as "Airlog" or "hcisnoop" with nRF5340 LE audio EVK.

I am not familiar with "Air log". Can you please elaborate what this is?

1. Can I check "Airlog" or "hcisnoop" with the Nordic USB dongle(nRF52840-Dongle)?

3. If you can capture "CIS/BIS Airlog" with nRF USB dongle sniffer, please provide detailed guide as well.

No, it is not possible to use the nRF52840 Dongle to sniff LE Audio packets.

2. Or is it possible to extract "Airlog" or "hcisnoop" in Windows VS code environment?

To my knowledge there is no module in VS code for packet sniffing.

4. It seems that LTK is needed.

This is correct when using the configs you are using.

Below is all of my J-link output.
00> *** Booting Zephyr OS build v3.1.99-ncs1 ***
00> nRF5340 APP core started
00>
00> rtt:~$

The nRF5340 Audio application uses the UART serial terminal for logging output by default. Have you changed this on your end?

If not, try to connect to your nRF5340 Audio DK with a serial terminal of your choice, or from the "Connected Devices" menu in the nRF Connect for VS Code extension. The COM port outputting the log is the lowest enumeration of the three visible ports per device.

Kind Regards,
Maria

[lsy]

Hello. Thank you for answering all the question cases.
I have an additional question for you.
1. If there is no way to LE audio sniffing in VS Code, is there any other development environment? (ex, linux... or using command line hcisnoop)
2. The "Airlog" is sniffed communication between master and Slave in the air using Dongle.
Is it possible to update the dongle(nRF52840) for sniffing LE Audio packet?
3. could you tell me about how to get a "LE Audio data packet level"

Thank you.

[Maria Gilje]

Hello,

lsy said:

Please answer the additional questions I asked 5 days ago.

Your case was removed from my list when this reply was marked as an answer. Sorry about the delay this has caused.

lsy said:

1. If there is no way to LE audio sniffing in VS Code, is there any other development environment? (ex, linux... or using command line hcisnoop)

Not to my knowledge, no.

lsy said:

2. The "Airlog" is sniffed communication between master and Slave in the air using Dongle.

Ok. Thank you for specifying.

lsy said:

3. could you tell me about how to get a "LE Audio data packet level"

You need a professional packet analyzer to be able to sniff LE Audio packets. The device which is sniffing needs to be compatible with isochronous channels.

The LTK which is logged in a serial terminal when running the audio application with CONFIG_BT_LOG_SNIFFER_INFO=y configured is used as the decryption key for the packets.

Kind Regards,
Maria