filtering issue using wireshark and nRF52840 sniffer

[Thomas_Thomas]

Hello,

I'm using nRF52840 dongle as BLE sniffer and the plugin for wireshark.

capture example

if I want to filter one source : right clic, apply as a filter, selected, then this filter is created :

eth.src == 44:5c:e9:ab:a7:03

44:5c:e9:ab:a7:03 is the mac address of the Samsung device

why it is eth for ethernet where as I'm capturing BLE packets?

and then if I put bluetooth.src == 44:5c:e9:ab:a7:03, there is no packets displayed?

[Thomas_Thomas]

Hello,

I found the right filter for advertisement

btle.advertising_address == mac address, it is working fine

But I can't find the right filter for the other exchanges, pairing, data, here it is only for advertising.

Do you have a list of filter commands please? I'm looking for all exchanges based on one MAC, and it looks different from the standard one used with other devices with wireshark