How to parse the encrypted BLE Mesh data in the BT snoop log?

[little dragon]

I have ran the Mesh light demo successfully, and capture the Bluetooth HCI log (*cfa file) from my Android phone.

However，the transaction between my phone and the nRF52840 DK is encrypted after provision, as follow.

 

How to check the detaoled mesh data info?

Maybe a certain software tool is need. 

Thank you.

[Joakim Jakobsen]

Hi!

That is correct that the data is encrypted. You will have to find a way to share the security keys with the sniffer.

Could I ask what sniffer you are using to capture the data?

Br,
Joakim

[little dragon]

Hi joakim，

Thank you for your reply.

Currently I don't have any tool for capturing the bluetooth air log. The BT snoop log is acquired from my android smart phone.

Maybe Ellisys or Frontline tool is needed to capture the bluetooth air log and then parse the ble mesh data info.

[Joakim Jakobsen]

Sorry, I just assumed that you were using a sniffer. 

If you want to sniff the data on-air I would suggest a sniffer to do this. If you already have a device that is provisioned and part of the network, this should be able to decrypt the data. 

We do have the nRF Sniffer as an alternative, but there has been some trouble sniffing Mesh packets. Let me see if I can find more information on that. 

Br,
Joakim