Bluetooth Explorer 400 All-in-One Protocol Analysis System ® ™ User Manual Version 1.
Analyzer User Guide Copyright, Confidentiality and Disclaimer Statements. While the information in this publication is believed to be accurate, Ellisys makes no warranty of any kind to this material including, but not limited to, the implied warranties of merchantability and fitness for a particular purpose. Ellisys shall not be liable for any errors contained herein, or for incidental or consequential damages in connection with the furnishing, performance or use of this material.
These conditions and terms are deemed to be accepted by the customer at the time the product is purchased, leased, lent or used, whether or not acknowledged in writing. Limitations THE FOREGOING IS THE COMPLETE WARRANTY FOR ELLISYS PRODUCTS AND SUPERSEDES ALL OTHER WARRANTIES AND REPRESENTATIONS, WHETHER ORAL OR WRITTEN.
Analyzer User Guide Table of Contents 1. Analyzer Overview ....................................................................... 9 1.1 Introduction ...................................................................................................9 1.2 Main Features and Capabilities ....................................................................... 10 2. Installing the Application ......................................................... 11 2.1 Software Prerequisites .......................
Restarting a Recording .................................................................................. 65 6.7 Using the Auto-Segmentation Feature ............................................................. 66 6.8 Recovering a Capture after a Software Crash ................................................... 67 6.9 Conducted Recording .................................................................................... 68 6.10 Taking Captures Using the Web Control Interface .......................
Analyzer User Guide 10. Instant Spectrum View ............................................................ 124 10.1 Device and Packet Color-Coding ................................................................... 125 10.2 User Controls and Toolbar ........................................................................... 125 10.3 Panning Left and Right ................................................................................ 126 10.4 Zooming In and Out.............................................
17.1 Enabling and Disabling Protocol Errors .......................................................... 165 18. Task Pane.................................................................................... 167 19. Software and Support .............................................................. 168 19.1 Updating the Software ................................................................................ 168 19.2 Getting Technical Support....................................................................
Analyzer User Guide About this Manual Typographic Conventions Bold is used to indicate menu commands, buttons, and tabs. Italics are used to indicate fields, pane names, window names and cross references. A warning symbol describes a possible critical situation and how to avoid it. An information symbol tells you how to respond to a situation that may arise. A tip symbol tells you information that will help you carry out a procedure.
Analyzer Overview 1.
Analyzer User Guide 1.2 Main Features and Capabilities The analyzer includes the following main features capture features. All capture features shown below can be captured concurrently. Certain features may be optional; or provided only with certain configurations. The Help menu (About) in the application will provide a list of features enabled when the unit is attached to the controlling PC.
Installing the Application 2.1 Software Prerequisites Before installing the Bluetooth Explorer 400 analyzer software application, please ensure the computer system on which it will reside meets the following minimum requirements. Microsoft Windows XP SP1 or later. Microsoft Windows Installer 3.0 or later. If the installation does not run smoothly, or if the system indicates a version error, update your Windows installer. Microsoft .NET Framework version 2.0 or later. Intel Core, 1.
Analyzer User Guide The Ellisys Bluetooth Analyzer Setup Wizard screen appears: If the Ellisys Bluetooth Explorer Analyzer Setup Wizard does not appear automatically, click the START button on your Windows toolbar, then RUN, and type d:\setup.exe (change d: to match the drive letter designation of your CDROM drive as needed), then click OK. 2. Read the WARNING note and click on Next. The Ellisys Bluetooth Analyzer License Agreement screen appears: 3.
The Select Installation Folder screen appears: 5. The default installation folder appears in the Folder field. Ellisys recommends that you use the default folder, however if you wish to change this folder, click on Browse and navigate to the folder required. 6. Select whether anyone or only the user currently logged on can access the software by selecting either Everyone or Just me. Click on Next. The Confirm Installation screen appears: Installing the Application | 13 of 173 Bluetooth Explorer 400 4.
Analyzer User Guide 7. Click on Next to continue the installation. An Installation Progress screen appears: When the software has been installed, the Installation Complete screen appears: 8. Click on Close. The Bluetooth Explorer 400 Analyzer software is now installed.
Front Panel Overview The front panel of the Bluetooth Explorer 400 Analyzer is shown below: When attaching an antenna to the front panel, DO NOT over tighten. Screw on the antenna to a light finger-tight torque only. Capture Connector The (Standard SMA) Capture connector is used to connect the antenna (supplied) for capture of BR/EDR and LE traffic. Generate Connector The (Standard SMA) Generate connector is for future implementations (not currently used). HCI Connectors The HCI connectors (USB 2.
Analyzer User Guide Operating LED The Operating LED indicates if the unit is presently performing a task directed by the user, for example when the user has initiated a recording action. Off: Unit is not in use and available. Constant green: Unit is in use. Orange: In use, waiting for trigger. Red: Memory full, downloading; or trigger occurred, downloading. Trigger LED The Trigger LED indicates whether a trigger event has occurred. Off: No trigger event detected. Green flash: Trigger event detected.
Reserved for future implementation. 2.4 Back Panel Overview The back panel of the Bluetooth Explorer 400 Analyzer is shown below: When connecting the USB cable DO NOT force the connector into the unit. The metal part of the connector should not be inserted completely into the connection port. Forcing the connector or inserting all of the metal part of the connector will break the port connection and is not covered by the warranty. Power DC jack power input.
Analyzer User Guide Inter-equipment IN and OUT Reserved for future extensions. 2.5 Connecting to the Control Computer The Bluetooth Explorer 400 Analyzer is controlled over a high-speed USB 2.0 connection by a PC hosting the Analyzer application, enabling the use of any notebook or desktop computer. The USB driver must be installed before the analyzer can be used. Driver installation procedures may vary depending on the user’s Operating System.
User Interface Reference The user interface of the Bluetooth Explorer 400 Analyzer application provides various windows, panes, menus, toolbars, and other visual elements. All panes are dockable, and can be hidden, resized, and re-positioned to suit the needs and preferences of the user. Most panes are interlinked to provide synchronization with other panes and include various display options. Bluetooth Explorer 400 3.
Analyzer User Guide 3.1 Organizing Panes The various panes provided can be shown or hidden, moved, docked, and resized to suit the user’s preferences. See 5.2, Using Layouts, for more information on saving display preferences. To open or display a pane or an Overview: 1. Select View in the menu and select the desired pane or Overview. The selected pane opens. To close a pane: 1. Click on Close positioned at the top-right corner of the title bar of the pane. The pane closes. To hide a pane: 1.
3. Keep the mouse button depressed and point to one of the following: Center to open a pane as a floating window in the screen. Top to move the pane to the top of the screen or pane group. Right to move the pane to the right of the screen or pane group. Left to move the pane to the left of the screen or pane group. Bottom to move the pane to the bottom of the screen or pane group.
Analyzer User Guide 3.2 Main Toolbar The table below shows the Bluetooth Explorer 400 Analyzer toolbar buttons and their actions: New Creates a new empty capture file. Open Opens a previously saved capture file. Save Saves a capture file. Save Filtered Saves a filtered capture file (based on the Traffic Filter). Search Opens the Search dialog. Start Recording Starts a recording on the selected analyzer. Stop Recording Stops the current recording.
Main Menu The table below shows the Analyzer’s main menu options and their actions, with shortcuts shown in parentheses: File New (Ctrl+N) Creates a new capture file. Open (Ctrl+O) Opens a folder to open a previously saved capture. Save (Ctrl+S) Saves the current capture. Save As Saves the current capture to a new name. Save Filtered Copy Saves the current capture as defined by the Traffic Filter. Load Sample Opens sample files provided with application.
Analyzer User Guide View Details Opens the Details pane. Raw Data Opens the Raw Data pane. Summary Opens the Summary pane. Instant Timing Opens the Instant Timing pane. Instant Spectrum Opens the Instant Spectrum window Instant Piconet Opens the Instant Piconet pane. Instant Audio Opens the Instant Audio pane. Security Opens the Security pane. Device Traffic Filters Opens the Device Traffic Filters window. View | Overviews BR/EDR Overview Opens the BR/EDR Overview.
Search (Ctrl+F) Opens the Find menu. Search In Designates the Overview in which to search Instant Search (Ctrl+I) Places the cursor in the Instant Search window. Go To (Ctrl+G) Opens the Go To Item window. Go To Next Expands a menu to enable search for next various Bluetooth or HCI items. Go To Previous Expands a dialog to enable search for previous various Bluetooth or HCI items. Find Next (F3) Searches forward for the last event found in a search.
Analyzer User Guide Help User Guide Opens the User Guide. Ellisys website Opens the Ellisys website in the default browser. Contact support Opens a form in the default browser to contact Ellisys technical support. Check for updates Checks online for the latest software version. About Opens the About window. When unit is attached to the controlling computer, also provides information on enabled features.
Managing Capture Files 4.1 Opening a Capture File To open a capture file: Select File |Open in the menu or click on Open. The Open menu appears: 1. Select the file required and click Open. The selected file opens in the software. 4.2 Saving a Capture File To save a capture file: 1. Select File | Save As in the menu or click on Save. The file is saved. To save a capture file with a new name: Select File | Save As in the menu. Managing Capture Files | 27 of 173 Bluetooth Explorer 400 4.
Analyzer User Guide The Save As menu appears: 1. Navigate to the directory where the file is to be saved. 2. Enter the desired name of the file in the File name field and click on Save. The file is saved with the modified name and the original file is not modified. 4.3 Saving a Filtered copy of a Capture File The application includes several filter mechanisms that can be used to reduce the traffic displayed in various ways (see Section 8, Display Filters).
3. Enter a file name. When selecting Save Filtered Copy, the File Name box in the Save As dialog is prepended with Filtered_ in order to avoid potentially overwriting the original file. 4. Click Save. 4.4 Opening a Sample Capture File Several sample capture files are included with the application. To open a sample file: 1. Select File | Load Sample in the menu. 2. Click on the desired sample. 4.
Analyzer User Guide The Capture Upload Welcome dialog appears: 3. Select the Attach additional files checkbox if files in addition to the capture files are to be uploaded to the Cloud, then click Next.
4. Click Next. The Capture Upload Notification appears: 5. If desired, check the Send notification email checkbox to have an email sent to notify one or more recipients of your shared file(s). Separate individual email addresses with a comma or semi-colon. To send your capture file to Ellisys Technical Support, include support@ellisys.com in the To: field.
Analyzer User Guide 6. If Send notification email was checked, the specified recipient(s) will receive an email with retrieval instructions, as shown below: 7. Click Next. The Capture Upload Completed dialog appears: 8. If desired, click on Copy to clipboard to copy the Sharing Identifier to your system’s clipboard. This identifier is needed to retrieve the shared file(s). 9. Click Finish. 4.
2. Enter the Sharing Identifier in the box (include the brackets), and click Next. The Capture Download, Files Selection dialog appears, listing the available shared files. 3. Uncheck any files not desired for download. 4. Specify a destination in the Download directory box. 5. Click Next to begin the download.
Analyzer User Guide The Capture Download Progress dialog appears When the download completes, the Capture Download Completed dialog appears: 6. If desired, check Open the Capture File checkbox to open the shared capture file. 7. Click Finish. 4.7 Printing a Capture File Use the Page Setup option, File | Page Setup, to setup how the capture should be printed. This option will depend on the printer; please see your printer’s documentation for more information. To preview a print job: 1.
A file can be very large therefore it is advisable to check the size of the file before trying to print the file. The Print Preview window appears: 3. Print directly from the Print preview window using the print icon . or Click on Close to return to the capture file. To print a file: 1. Select File | Print in the menu then select the desired Overview. Managing Capture Files | 35 of 173 Bluetooth Explorer 400 2. Select the Overview desired.
Analyzer User Guide The Print window appears: 2. Select the printer and printer setup if required. 3. Click on OK. The file is printed. 4.8 Importing Data to View in a Capture File The application permits the user to import data from certain files types for display in the Ellisys viewer format. The analyzer hardware is not required for these operations. HCI commands and events may be imported from the Wireshark BT Snoop format. Bluetooth packets may be imported from an ASCII format.
2. Select HCI commands and events or Bluetooth packets. 3. Click on Next. The Import File and Format Menu appears: 4. Browse to the desired file, and Next.
Analyzer User Guide 5. If importing HCI Commands and Events in USB format, proceed to the next step, otherwise proceed to step 7. The Data Rate menu appears: 6. Select the desired data rate. 7. Select Finish to complete the import. The application now displays the imported data.
Export Options A capture file can be exported for various ancillary purposes and in several formats. Export Type Export Options Export Format Comments/Usages Low Level Data Start Time Ellisys trace (*.btt) Exports data from the lowest protocol level (baseband packets). Low Level Data Trace Length (Bytes, seconds, items) Start Time Trace Length (Bytes, seconds, items) Allows for exporting specific portions of the trace to create a new Ellisys trace as defined by the export options.
Analyzer User Guide To use the export feature: 1. Open the desired capture file. 2. Select File | Export from the menu. The Export menu appears: 3. Select the desired export method. 4. Click on Next. 5. Select any export options as applicable and click on Next.
Bluetooth Explorer 400 The Export menu appears: 6. Select an export format. 7. Select Browse to set a file name and destination. 8. Click on Finish. The export is complete. To customize the columns displayed in the Overview, right click on the column headers in the Overview and add columns from a default list, or drag desired fields from the Details view and drop in the Overview to create a new column.
Analyzer User Guide Export Filtered Trace Based on Overview With this selection, the user can export the current trace based on the filtering applied. Export of Bluetooth Raw Data and Payload With this selection, the user can export into raw data (including headers, etc.) and/or payload into CSV, text, or XML formats. The item’s name and timestamp can be exported or excluded. The user may include root items only, or may select a hierarchy of items to export.
This selection exports a graphical master/slave depiction of message procedures from the active Overview. The display of procedures is controlled by selections available in the export menu, including Compact, Expand, and Flatten, as shown below.
Analyzer User Guide Compact (Shows Procedures without Children). LMP only is displayed for simplicity. Expand (Shows Procedures and Children). LMP only is displayed for simplicity. Flatten (Shows Procedures’ Children Only). LMP only is displayed for simplicity.
item parameters, and procedures involving Baseband, L2CAP, SDP, RFCOMM, and OBEX. The option Show Protocol Layers Individually is selected.
Analyzer User Guide Below is an example of an MSC export, using the Compact selection with no layers. The option Show Protocol Layers Individually is unselected. Item parameters are displayed.
parameters, and procedures involving Baseband, L2CAP, SDP, RFCOMM, and OBEX.
Analyzer User Guide Below is an example of an MSC export, using the Flatten selection, showing timestamps, item parameters, and procedures involving Baseband, L2CAP, SDP, RFCOMM, and OBEX.
Workspaces and Layouts 5.1 Using Workspaces The application allows the user to define a Workspace, which is a way of saving different sets of user settings preferences, such as display settings and other settings, like recording options, window/pane layouts and protocol verifications options (such as those available in the Tools menu, under Protocol Verifications). Workspaces can be edited and can also be exported for use on another PC.
Analyzer User Guide A new Workspace name appears: 3. Accept the name provided by the application, or type in a new name in the Workspace name box. Select Create using default settings to establish a new Workspace based on the default settings. or Select Create using current workspace’s settings to establish the new workspace based on the current settings. 4. Select OK. To change from one Workspace to another: 1. Select File | Switch Workspace from the menu. The Workspace menu appears: 2.
2. Select the Workspace name drop-down arrow. 3. Select the desired Workspace name. 4. Click on Remove. 5. Click on OK. To export Workspace settings to a file: 1. Select File | Import and Export Settings from the menu. The Import and Export Settings Wizard menu appears: 2. Select Export settings. 3. Click on Next.
Analyzer User Guide The Export menu appears: 4. Select Export all workspace’s setting or Select Export only the selected categories of settings below and check the desired categories. 5. Select Browse to specify a location to name and save the file. 6. Click on Finish. To import a Workspace settings file: 1. Select File | Import and Export Settings from the menu.
Bluetooth Explorer 400 The Import and Export Settings Wizard menu appears: 2. Select Import settings. 3. Click on Next.
Analyzer User Guide 4. Select Import all settings or Select Import only the selected categories of settings below and check the desired categories. 5. Select Browse to specify a location to name and save the file. 6. Click on Finish. To restore default Workspace settings: 1. Select File | Import and Export Settings from the menu. The Import and Export Settings Wizard menu appears: 2. Select Restore default settings. 3. Click on Next.
Bluetooth Explorer 400 The reset default menu appears: 4. Select Reset all settings to defaults. or Select Reset only the selected categories of setting below and check the desired categories. 5. Click on Finish. 5.2 Using Layouts Layouts can be used to customize the size and position of the application’s various panes and windows. Layouts can also be used to customize which panes and windows are displayed.
Analyzer User Guide The New Layout dialog appears: 2. Enter a name for the layout and click on OK. The new layout is created and is now accessible in the View | Layout menu and in the Layout Quick-Menu: To reset a layout to factory default: 1. Select Layout | Reset Layout from the menu. The layout is reset to the factory default. To delete a layout: 1. Select Layout | Delete Layout from the menu. The active layout is deleted and removed from the layouts listed in the View | Layout menu.
Capturing Traffic Bluetooth and Low Energy traffic in the vicinity of the analyzer, raw spectrum energy, and/or HCI, WCI-2, Audio I2S, and logic signal traffic attached to the analyzer is not recorded until the user takes action to capture this traffic (simply by clicking the Record button in the analyzer software). An alternative browser-based remote capture feature is also provided (see Section 6.9, Taking Captures Using the Web Control Interface).
Analyzer User Guide Basic Analyzer Setup On the Welcome Screen, (View menu > Other Windows > Welcome), please see the Expert Note entitled EEN_BT04 – Optimal Placement of Your Analyzer for information on how to position the analyzer relative to your devices for optimal captures. 6.
1. Select Record | Recording Options from the menu. 2. The Recording Options menu appears (Wireless tab shown below): The resolution setting for the wireless spectrum capture is selectable from 1us to 200us. At lower (higher-resolution) settings, the amount of data captured can be extremely high (exceeding 80MB/s), resulting in an automated cessation of the capture process due to the high volume of data being captured and processed.
Analyzer User Guide For wired connections: 1. Select the Wired tab. The Wired tab appears: To capture BR/EDR and/or LE traffic: 1. Select the Wireless tab. 2. Check the appropriate check box(s). 3. Click OK. 4. Click on Record on the toolbar.
1. Select the Wired tab. 2. Check the USB HCI check box. 3. Click OK. 4. On the front panel, connect the both sides of this interface to the STD-A and Micro-B connectors on the analyzer’s front panel. 5. Click on Record on the toolbar. The analyzer is designed to capture only Bluetooth device class traffic (USB Device Class = Bluetooth) through the USB front panel ports. Capture of USB traffic not using Bluetooth device class is not supported. To capture UART HCI: 1. Select the Wired tab. 2.
Analyzer User Guide To capture SPI HCI: 1. Select the Wired tab. 2. Check the SPI HCI (Primary) check box. 3. Click OK. 4. Attach the Flying Leads Cable between the IO Probe connector on the analyzer’s back-panel and the SPI interface. Use pin assignments shown in Recording Options, or select custom pin assignments. Assign custom names to inputs as desired. See Appendix A – Flying Leads Cable for details. 5. Click on Record on the toolbar.
1. Select the Wired tab. 2. Check the SPI HCI (Secondary) check box. 3. Click OK. 4. Attach the Flying Leads Cable between the IO Probe connector on the analyzer’s back-panel and the SPI interface. Use pin assignments shown in Recording Options, or select custom pin assignments. Assign custom names to inputs as desired. See Appendix A – Flying Leads Cable for details. 5. Click on Record on the toolbar. To capture WCI-2: 1. Select the Wired tab. 2. Check the Wireless Coexistence Interface 2 check box. 3.
Analyzer User Guide To capture Audio I2S (Inter-IC Sound): Audio captured over the I2S interface is displayed in the Instant Audio pane. 1. Select the Wired tab. 2. Check the Audio I2S: Inter-IC Sound check box. 3. Click OK. 4. Attach the Flying Leads Cable between the IO Probe connector on the analyzer’s back-panel and the Audio I2S interface. Use pin assignments shown in Recording Options, or specify desired pin assignments. See Appendix A – Flying Leads Cable for details.
Available analyzers dialog will pop up to request the user to select an analyzer. Selecting the default checkbox in this dialog will conveniently force the automatic selection of the specified analyzer on each new recording. 6.4 Initiating a Recording A recording can be initiated from the toolbar, keyboard, or the menu. To initiate a recording: on the toolbar. 1. Click on Record or Select Record | Start Recording (Ctrl+R) from the menu.
Analyzer User Guide 6.7 Using the Auto-Segmentation Feature The Bluetooth Explorer 400 includes an automatic method to restart successive captures based on a specified period of time or number of bytes captured. Bluetooth contextual information, such as connection parameters are maintained from capture to capture. This feature can be quite useful for reducing one very long capture into several smaller, more manageable captures, and can provide extremely long capture duration.
4. Select a Name Format: Select File Time to name each capture file with a time/date stamp as it is saved to disk, or select Initial Time and Number to name each capture with a time/date stamp based on capture start (along with a serialized/incremental number for each capture). 5. Optionally, add a Name Prefix and/or Name Suffix (these will be prepended/appended to each capture file name). 6. Select a method for the segmentation to split, Minutes or Mbytes. 7.
Analyzer User Guide The Options menu appears: 3. Select the Advanced tab. 4. Click on Custom, and browse to the desired directory. 5. Click OK. Check the Ask for recovery… check box to program the application to prompt the user to recover temporary files after a crash. This box is enabled by default. 6.9 Conducted Recording In some cases, users may require a cabled connection between the analyzer’s SMA connector and the system under test, in lieu of antenna reception.
cables. 6.10 Taking Captures Using the Web Control Interface The Web Control Interface feature provides a method to control the analyzer’s capture processes remotely, over a local area network (LAN). These processes include start capture, stop capture, and save capture. The default port access is 8080, but the user can specify a different port as needed. To setup the Web Control Interface, connect as shown below: Web Control Interface Setup To initiate a capture using the Web Control Interface: 1.
Analyzer User Guide 2. Select Control capture. The page updates as shown below. 3. Select a folder destination for the remote captures. 4. If desired, add a filename brief. 5. Select Start Capture. The capture is now started and the page updates as below: 6. Select Stop and Save Capture, Abort, or Restart as needed. If the capture is saved, the capture file will be saved to the destination previously specified. If aborted, the capture is stopped and not saved.
Bluetooth Explorer 400 The Options menu appears: Select the Web Control tab. 2. Check the Enable web control box. 3. Set the port number as desired (default is 8080). To protect access to the remote computer hosting the BEX400 hardware, check the Protect Access box and supply a User Name and Password. Ensure your firewall allows access to the port specified and to the BEX400 application. Contact your IT administrator as needed. 4. Click OK.
Analyzer User Guide 7. Overview Windows The analyzer software provides separate Overview windows for BR/EDR, Low Energy, and HCI traffic (USB, UART, and SPI), and WCI-2. The Overviews are the primary viewer windows, providing a chronological, user-configurable display of all events and traffic. Overviews provide real-time display of events, searching, filtering, timestamps, bookmarks, coloring, high-level protocol and profile abstractions, and other features. To display an Overview: 1.
Configuring the Overview Columns A default set of columns are displayed in each Overview, but the user can add additional columns to customize an Overview to a particular task. This is an important and valuable feature, allowing precise customization of the Overview columns. Columns can be added in two ways: ● Adding a column from a default list available with a right-click from the Overview column header bar.
Analyzer User Guide 2. Select the desired item. A new column appears in the Overview at the location selected, and is populated with the relevant data. To add a column to an Overview from the Details pane: 1. Select an item of interest in the Overview. The Details pane is populated as per the selected/highlighted line in the Overview. 2. Select the field of interest from the Details pane: 3. Click Show in overview in the Details toolbar or 4. Drag and drop the desired field into the Overview.
To resize a column: 1. Position the mouse pointer at the vertical line border at the left or right of the desired column. 2. When the mouse pointer changes to a resize indicator, left-click and drag to the desired size. The column is resized. To hide a column: 1. Right click on the desired column header. 2. Select Hide Column or Right-click on any column header. 3. Select Columns. 4. Deselect the desired column from the list. The column is hidden.
Analyzer User Guide Right-click on any column header. 3. Select Columns. 4. Deselect the desired column from the list. The column is hidden. 7.2 Color-Coding an Overview Adding color to Overview items can help greatly with at-a-glance identification of specified protocols, profiles, events, statuses, etc. Coloring can be added with a convenient right-click or using the Colorize menu. To add coloring using the right-click option: 1. Select the desired line in the Overview. 2.
Bluetooth Explorer 400 The Colorize dialog appears: To colorize events by payload content: 1. Select the Payload tab. 2. Enter Data to search for and/or a payload Length range. 3. Select Data Type as needed. 4. Select Search in Payload or Search in Raw Data to highlight matching packets. 5. Select the desired match type in the Colorize items that drop-down menu. Match All – Finds items that match all selected criteria. Match Any – Finds items that match any of the criteria.
Analyzer User Guide The Text tab appears: 2. Use the one or more text string drop-down menus provided to characterize the color search. Text entered into the various boxes by selecting an item in the drop-down menus can be edited, or text may simply be entered directly into the boxes without selecting the drop-down menus. Use commas to separate OR items on any line. Use of the ! (not) symbol will exclude a text string from the search. 3. Select the desired color and click on Colorize.
Values in the Name boxes are synchronized to the selected event in the Overview, which is synchronized to the Details view. The Value boxes reflect data elements displayed in the Details View. Users may type strings (values, wildcards, or ranges) directly into the Value boxes. 2. Select one or more items from the Name boxes. 3. Select corresponding items from the Value boxes. 4. Select the desired match type in the Colorize items that drop-down menu. 5. Select the desired color and click on Colorize.
Analyzer User Guide A count of items matching the criteria is displayed: 7.3 Grouping and Ungrouping The application provides an option to group or ungroup protocols and profiles as displayed in the Overview. This allows the user to view traffic in high level abstractions (e.g., RFCOMM) or to drill down to mid-level abstractions (e.g., L2CAP) or lower-layers such as baseband and packet levels. An option to group or not group procedures and transactions is also provided.
To disable grouping of procedures and transactions: 1. De-select Group Procedures and Transactions from the Protocol drop-down menu on the Tool Bar: Transactions and procedures are not grouped: 7.4 Overview Timing Measurements The Overviews include precision timestamps associated with each event captured. These are displayed in the Time column. The default timestamp format is a relative (Delta) time format, shown as sec.milli micro nano.
Analyzer User Guide selected in an Overview are displayed in the Instant Timing pane and Instant Spectrum view. Timing measurements are easily made with cursors available in the Instant Timing pane and Instant Spectrum view. See Section 9, Instant Timing Pane or Section 10, Instant Spectrum View for more information. To set a time format: 1. Click on the Filter selection icon associated with the Time column. 2. Select Display. 3. The Time Format menu appears: 4. Select the time format desired. 5.
the user to jump to relevant locations in the Overviews. To force the selected event in an Overview to display in the Instant Timing pane: 1. Right-click in the Overview. 2. Select Show in Instant Timing view. The Instant Timing pane jumps to the event selected in the Overview. 7.6 Using Markers Items in the Overviews can be annotated with markers and saved with a capture. Markers are quite useful for remote collaboration among different users. Markers can be edited to add descriptive notes.
Analyzer User Guide A marker is placed adjacent to the event in the Overview and in the Instant Timing pane (also in the Instant Spectrum view, not shown here): Alternatively, right-click in the gray column at the far-left of the Overview to add a marker, or to add a marker with a note. Multiple markers may be placed on a single event. Use of the color-coding can facilitate technical “conversations” between users by assigning different colors to different users. To delete a marker: 1.
Bluetooth Explorer 400 5. Select Delete. The marker is removed. To edit a marker: 1. Position the mouse pointer over the marker to be edited. 2. Left-click the marker. or Right-click and select Edit Marker or Select the Marker button on the toolbar. 3. Select the desired marker. 4. Select Edit. The selected marker opens for editing. To access markers embedded in Sub-Items (Grouped Items): 1. Place the mouse pointer over the marker(s) at the left of the desired event.
Analyzer User Guide The grouped item expands, with the marked item adjacent to the selected marker highlighted: 7.7 Search Features Several search features are provided to enable searching the selected Overview. These include Instant Search, a configurable search menu, and several Go-To features. To enable the Instant Search: 1.
1. Select the Payload tab. 2. Enter Data to search for and/or a payload Length range. 3. Select Data Type as needed. 4. Select Search in Packets or Search in Transactions to search packets or transactions. 5. Select the desired match type in the Find items that drop-down menu. 6. Click on Find Next. The next event matching the search criteria is highlighted in the Overview. To search events by text string: 1. Select the Text tab. The Text tab appears: 2.
Analyzer User Guide The next event matching the search criteria is highlighted in the USB 3.0 Overview. To search events by field value: 1. Select the Field tab. The Field tab appears: Values in the Name boxes are synchronized to the selected event in the Overview, which is synchronized to the Details pane. The Value boxes reflect data elements displayed in the Details pane. Users may type strings (values, wildcards, or ranges) directly into the Value boxes. 2.
Bluetooth Explorer 400 5. Click on the Count button. A count of items matching the criteria is displayed: To search using an Item Number or Item Time: 1. Select Search | Go To (Ctrl+G) from the menu. The Go to item dialog appears: 2. Select Closest item number and enter an item number or Select Closest item time and enter a timestamp in x.xxx xxx xxx format. The Closest item time value may be entered as an abbreviated timestamp, such as x.xxx or x.x, in order to approximate the search. 3. Click on OK.
Analyzer User Guide A content-sensitive menu of searchable items appears: 2. Click on the item desired. The selected event is highlighted in the Overview. Note that a count of searchable items is included. Events not captured in the capture are not listed or may be grayed out.
Display Filters The Bluetooth Explorer 400 employs an extremely powerful all-channel receiver, resulting in capture of all BR/EDR and LE traffic in the vicinity, along with any attached HCI, logic signals, raw spectrum energy, and/or WCI-2 traffic. Consequently, it is often important to be able to efficiently filter/drill-down to particular piconets, LE connections, or other particular communications of interest.
Analyzer User Guide To determine the current filter status: Filter status is displayed atop the Overview, indicating how many line items are displayed, and how many have been filtered from view: 8.1 Instant Filters Instant Filters are enacted as text strings in the Instant Filter boxes located atop the columns in the Overviews. Instant Filters provide a quick and easy way to remove specific information from the Overview using a simple syntax entered in the Instant Filter boxes located atop each column.
To enable the Instant Filter Fly-Over: 1. Place the mouse pointer in any Instant Filter box and left-click. The Instant Filter Fly-Over appears: To apply an Instant Filter: 1. Select an Instant Filter box from one of the columns in the desired Overview. 2. Type the desired filter. 3. The selected Instant Filter box highlights in yellow. Instant Filters can be applied to multiple columns, giving the user the ability to create very specific filters.
Analyzer User Guide The example below will remove all items except those items taking place between timestamps located at 26 and 27 seconds. The example below will remove all items except those items beginning with the string “Audio” in the Items column, involving the string “00:1A:7D” in the Communication column, and beginning with an “M” in the Originator column, typically audio transfers involving a particular device, where that device is master. To remove a filter: 1.
which columns are displayed in the Overview. The columns displayed in the Overview are based on the particular item selected on the Protocol bar.
Analyzer User Guide Show/Hide BNEP BR/EDR HCI Single, Multiple, Custom Show/Hide HID BR/EDR HCI Single, Multiple, Custom Show/Hide Serial Port BR/EDR HCI Single, Multiple, Custom Show/Hide ATT BR/EDR LE HCI Single, Multiple, Custom Show/Hide SMP LE/HCI Single, Multiple, Custom Show/Hide HCI HCI Single, Multiple, Custom To enable or disable a Protocol/Profile filter: 1. Select the desired Overview. 2. Select the desired feature from the Protocol: drop-down menu: 3.
4. Select the Packets icon. The Overview updates to show only individual packets. 8.3 Instant Piconet Keep-Only Filter The Instant Piconet pane provides filtering that enables the user to show/hide selected piconets, scatternets, paging events, and inquiry events. This filter will update all displays and panes. For more information on the Instant Piconet pane, see Chapter 12 Instant Piconet Pane. To set an Instant Piconet Keep-Only Filter: 1.
Analyzer User Guide 2. Select the desired Keep-Only option. The user may see more than one filter option displayed. To keep only the selected piconet, select the first option. If the piconet is part of a scatternet, select the second option to keep only the scatternet. All displays and panes are updated to remove all but the selected piconet or scatternet traffic. The Filtering button (on the Tool Bar) updates to show the selected filter: To clear an Instant Piconet Keep-Only Filter: 1.
will be filtered, as detailed below: Selection Function Keep All No Filtering is applied by the Device Traffic Filter Exclude Background Default setting. Background traffic is removed. All other traffic is displayed. Keep Involving Selected Communication involving the devices selected and any other Devices devices will be kept. All other traffic is hidden.
Analyzer User Guide 3. Double-click the desired devices in the Device Database to add these devices to the Traffic Filtering Criteria Select the desired device and click on the Add button in the Traffic Filtering Criteria, as shown below: Devices selected are populated into the Traffic Filtering Criteria. Another useful method to add devices from the Device Database to the Traffic Filtering Criteria is to use the Search feature. See the section below titled To use the Search devices feature: 4.
5. Press ENTER on the keyboard to add the matching devices to the Traffic Filter Criteria. The Search box allows use of a wildcard (*), a comma (to add additional search criteria), and a not sign (!) to exclude. The Search box is not casesensitive. Example 1: To search for devices that have a Company ID = Smith and devices having a Company ID = Jones, type smith, jones in the Search box. Example 2: To search for devices that have an LMP Name that includes “IDG” (e.g.
Analyzer User Guide The View drop-down menu is grayed out if a capture is not open or a capture is not in process. 4. Select Trace Devices Only. The Device Database is updated to show only those devices in the current trace: 5. Click OK. Devices captured in the current trace are indicated with the icon and include an expandable tree (+), showing other devices with which that device has communicated. To remove a device from the Device Database: 1. Click on the Filtering button located on the Tool Bar.
6. Edit the desired properties (BD_ADDR, Name, Color, or Radio) as desired. 7. Click OK. To manually add a new device to the Device Database: 1. Click on the Filtering button located on the Tool Bar. 2. The Device Traffic Filter window appears. 3. Click on New Device in the Device Database. The New Device dialog appears: 4. Edit the Parameters as desired. 5. Click Create. The new device is added to the Device Database. To sort the Device Database: 1. Click on the Filtering button located on the Tool Bar.
Analyzer User Guide Clicking again on a column header will reverse the alpha-numeric order. The Color column does not include a title on the column header, but clicking on this column will sort the Device Database by color. To exclude background traffic: 1. Click on the Filtering button located on the Tool Bar. 2. The Device Traffic Filter window appears. 3. In Device Filtering Criteria, select Exclude Background from the drop-down menu. 4. Click OK. Background traffic is removed from the capture.
All panes in the application update to show only the selected communications. To clear the Instant Timing Keep-Only filter: 1. Select the down-arrow associated with the Filtering button on the Tool Bar. The Filtering menu appears: 2. Select Exclude Background. All displays and panes are updated. 8.
Analyzer User Guide 2. Right-click and select the Keep Only option, as shown below. All panes in the application update to show only the selected communications. To clear the Instant Spectrum Keep-Only filter: 1. Select the down-arrow associated with the Filtering button on the Tool Bar. The Filtering menu appears: 2. Select Exclude Background. All displays and panes are updated. 8.
communicating devices, as shown below: The Overview and all panes are updated with the Keep-Only selection. Display Filters | 107 of 173 Bluetooth Explorer 400 3.
Analyzer User Guide 9. Instant Timing Pane The Instant Timing pane provides a unique and intuitive way to understand Bluetooth traffic as well as HCI traffic and logic signals. Bluetooth packets are presented chronologically left to right and are uniquely color-coded according to the packet’s sender. Each master device is provided its own line (row), with packets to and from the master device shown horizontally across the Instant Timing pane.
Devices window and the Instant Piconet pane. 9.2 User Controls and Toolbar The Instant Timing pane provides various user controls for navigation. The table below lists the Instant Timing toolbar buttons and their actions: Pointer Mode Switches to Pointer Mode. Pan Mode (Hold Shift) Switches to Pan Mode. Zoom Mode (Hold Ctrl) Switches to Zoom Mode. Enable/Disable Smooth Scrolling Enables and disables the smooth scrolling.
Analyzer User Guide Follow Overview Selection When enabled, the Instant Timing pane is synchronized to the active Overview selection. Origin Box Displays the timestamp origin of the Instant Timing pane. Allows for user input of timestamp for jumping. Span Box Displays the time span (zoom level) of the Instant Timing pane. Allows for user input to adjust span. Display Show Establishment Traffic Shows/hides inquiries, pagings, and advertisements.
1. Enter a timestamp value in the origin box. The following values are allowed: s – seconds ms – milliseconds ns – nanoseconds ps – picoseconds If a unit is not specified, then the previously displayed unit is used. 2. Press ENTER The Instant Timing pane is updated with the new origin. The analyzer application retains new timing origin entries. Click the Down arrow in the origin field to view and select previously entered timing origin entries. 9.
Analyzer User Guide To use the keyboard to zoom: 1. Press the Up Arrow key to zoom in, and the Down Arrow key to zoom out. To define a new time span: 1. Type the new timing span in the span field. The following values are allowed: s – seconds ms – milliseconds ns – nanoseconds ps – picoseconds If a unit is not specified, then the previously displayed unit is used. 2. Press ENTER. The Instant Timing display is updated with the new span value.
Making Time Measurements The Instant Timing pane provides quick and simple methods to manually characterize timing between events as well as automatic flyover slot timing measurements. Timing cursors can be duplicated or frozen with a right-click, to enable the addition of more cursors. Timing cursors available include: • Timing Cursors • A-B Independent Cursors To make a timing measurement: 1. Select the pointer icon at the top-left of the Instant Timing pane. 2.
Analyzer User Guide The time between the cursors is displayed along with an equivalent slot number count: The vertical position of the displayed timing information, including the horizontal arrows, can be changed by selecting the information with the mouse pointer, then dragging to the desired position. To add additional cursors: 1. Right click over an existing set of timing cursors. 2.
2. Right click and select Place cursor A here. The A cursor is placed at the location selected. 3. Select the second desired location in the Instant Timing pane. 4. Right click and select Place cursor B here. The B cursor is placed at the location selected, and timing information is provided, including number of slots: 9.6 Using Markers Markers may be added at any location within the Instant Timing pane. Markers can be edited to add textual content and can be color-coded.
Analyzer User Guide A list of all markers installed appears: 2. Select the desired marker from the list. The Instant Timing pane jumps to the selected marker. To delete a marker: 1. Position the mouse pointer over the marker to be removed. 2. Right-click and select Remove marker. or 3. Click on the Markers button (F9) on the toolbar. 4. Position the mouse pointer over the desired marker: 5. Select Delete. The marker is removed. To edit a marker: 1. Position the mouse pointer over the marker to be edited.
Right-click and select Edit Marker or Select the Marker button on the toolbar. 3. Select the desired marker. 4. Select Edit. The selected marker opens for editing. 9.7 Packet Fly-Over and Identifiers The Instant Timing pane provides various automated indications to the user, including detailed packet information, timing information, and identifiers that are used to indicate packet selections in the Instant Timing pane (selected packet and mouse position) and the Overview.
Analyzer User Guide Packet identifiers: Color-coded packet identifiers are located at the lower-left of the Instant Timing pane. There are three such identifiers. The packets relating to these identifiers are highlighted consistent with the identifier colors.
Display of HCI, WCI-2, and Logic Signals In addition to wireless traffic, the Instant Timing pane also displays any captured HCI or WCI-2 traffic, as well as logic signals. HCI (UART and SPI) and WCI-2 traffic, as well as logic signals are captured using the Flying Leads adapter, attached to the IO Probe connector on the back of the unit. See Appendix A – Flying Leads Cable for details. USB HCI is captured using the available front panel USB ports.
Analyzer User Guide 9.9 Instant Piconet Cursor The Instant Timing pane provides a unique cursor that allows the user to force the Instant Piconet pane to update as the Instant Piconet cursor is moved. This is useful for various cases, including visualizing a role switch. To use the Instant Piconet cursor: 1. Right click in the Instant Piconet and select Place Instant Piconet Cursor here. or Double-click over any packet in the Instant Timing pane. The Instant Piconet cursor appears: 2.
Images to be exported are automatically assigned a file name that includes the origin and span values. 2. Accept the default file name or assign a new file name. 3. Select a directory location. 4. Select the file type in Save as type drop-down (e.g., *.gif, *.png, *.jpg, *.bmp). 5. Click on Save. The file is exported in the desired format to the selected directory. 9.
Analyzer User Guide Selecting an event in an Overview or the Instant Spectrum view will cause the Instant Timing pane to jump to the selected event. To enable synchronization with the active Overview: 1. Select the highlighting options drop-down in the Instant Timing toolbar: 2. Select Follow Overview selection. The Instant Timing pane will now move in synchronization with selections made in the Overview. To highlight an Overview selection in the Instant Timing pane: 1.
Instant Timing Pane | 123 of 173 Bluetooth Explorer 400 The Instant Timing pane will no longer follow selected lines in the Overview.
Analyzer User Guide 10. Instant Spectrum View The Instant Spectrum view provides a unique and intuitive way to understand the spectral behavior of Bluetooth traffic as well as all RF traffic within the Bluetooth spectrum, and the inter-relationship of Bluetooth packets and events to RF energy events. Bluetooth packets are presented chronologically left to right on the channel they are transmitted and are uniquely color-coded according to the packet’s sender.
Bluetooth Explorer 400 To access the Instant Spectrum view: 1. Select View | Instant Spectrum from the menu The Instant Spectrum view appears: 10.1 Device and Packet Color-Coding Packets shown in the Instant Spectrum view are color-coded based on which device is sending the packet. Each device (and its associated packets) is assigned a unique color. This color can be user-defined if desired (see 8.4 Device Traffic Filter).
Analyzer User Guide Enable/Disable Smooth Scrolling Enables and disables the smooth scrolling feature. Highlighting Options Highlight Active Overview When enabled, the Instant Timing pane will be Selection synchronized to the active Overview selection. Highlight Bluetooth BR/EDR When enabled, the item selected in the Overview Selection Bluetooth BR/EDR Overview is highlighted in the Instant Timing pane.
1. Position the mouse over the time scale at the bottom of the Instant Spectrum view (recommended). or Click on Pan. The pointer changes to a pan (hand) symbol. 2. Press and hold the left mouse button, and drag left or right as desired. The mouse cursor automatically rolls around the screen, such that the user can smoothly scroll large amounts of time without having to press and release the mouse button several times. To use the keyboard to pan: 1.
Analyzer User Guide 10.4 Zooming In and Out The Instant Spectrum view provides a zoom feature to expand or contract the display in order to view information from a high level or low level. To use the mouse to zoom: 1. Place the pointer over the Zoom bar, located at the bottom of the display (recommended). or Click on Zoom . The pointer changes to a spyglass symbol . 2.
in the span field to view and select previously entered time span entries. 10.5 Making Time Measurements The Instant Spectrum view provides quick and simple methods to manually characterize timing between events as well as automatic flyover slot timing measurements. Timing cursors can be duplicated or frozen with a right-click, to enable the addition of more cursors. Timing cursors available include: • Timing Cursors • A-B Independent Cursors To make a timing measurement: 1.
Analyzer User Guide The time between the cursors is displayed: The vertical position of the displayed timing information, including the horizontal arrows, can be changed by selecting the information with the mouse pointer, then dragging to the desired position. To add additional cursors: 1. Right click over an existing set of timing cursors. 2.
The A-B cursors are especially useful when the two events being measured are far apart, such that one cursor can be set, then the user can scroll as needed to the other event to set the second cursor. 1. Select the first desired location in the Instant Spectrum view. 2. Right click and select Place cursor A here. The A cursor is placed at the location selected. 3. Select the second desired location in the Instant Spectrum view. 4. Right click and select Place cursor B here.
Analyzer User Guide A list of all markers installed appears: 2. Select the desired marker from the list. The Instant Spectrum view jumps to the selected marker. To delete a marker: 1. Position the mouse pointer over the marker to be removed. 2. Right-click and select Remove marker. or 3. Click on the Markers button (F9) on the toolbar. 4. Position the mouse pointer over the desired marker: 5. Select Delete. The marker is removed. To edit a marker: 1.
Right-click and select Edit Marker or Select the Marker button on the toolbar. 3. Select the desired marker. 4. Select Edit. The selected marker opens for editing. 10.7 Packet Fly-Over and Identifiers The Instant Spectrum view provides various automated indications to the user, including detailed packet information, timing information, and identifiers that are used to indicate packet selections in the Instant Spectrum view (selected packet and mouse position) and the Overview.
Analyzer User Guide Packet identifiers: Color-coded packet identifiers are located at the lower-left of the Instant Spectrum view. There are three such identifiers. The packets relating to these identifiers are highlighted consistent with the identifier colors. Identifier Highlight color Mouse flyover location in Instant Spectrum Selected Overview event Selected Instant Spectrum event 10.
1. Click on the Export Image icon located on the Instant Timing toolbar. The Save menu appears: Images to be exported are automatically assigned a file name that includes the origin and span values. 2. Accept the default file name or assign a new file name. 3. Select a directory location. 4. Select the file type in Save as type drop-down (e.g., *.gif, *.png, *.jpg, *.bmp). 5. Click on Save. The file is exported in the desired format to the selected directory. 10.
Analyzer User Guide Selecting a timestamp in the Security pane will cause the Instant Spectrum view to jump to the selected timestamp location. Selecting an event in an Overview or the Instant Timing pane will cause the Instant Spectrum view to jump to the selected event. To enable synchronization with the active Overview: 1. Select the highlighting options drop-down in the Instant Spectrum toolbar: 2. Select Follow Overview selection.
AFH Highlighting The Instant Spectrum view provides a unique feature that highlights the channels blocked by AFH at any given point in time. The AFH Highlighting feature tracks AFH commands throughout the capture process and provides a visually highlighted spectral area in the Instant Spectrum view that indicates those channels blocked by AFH at the point selected. See Section 10.12, Wireless Spectrum Capture for details on viewing AFH Highlighting with Wireless Spectrum capture enabled.
Analyzer User Guide The channels precluded by the active AFH command are now highlighted: 138 of 173 | Instant Spectrum View
Wireless Spectrum Capture In addition to spectral display of captured Bluetooth and Low Energy packets, the Instant Spectrum view can also display raw RF energy present within the Bluetooth spectrum. Spectrum energy is typically seen from Wi-Fi sources, but can also be generated by various other wireless technologies or commercial equipment. Wireless Spectrum information is presented in the Instant Spectrum view as blue energy indicators, interspersed with any captured Bluetooth or Low Energy packets.
Analyzer User Guide 4. Open the Instant Spectrum view (View | Instant Spectrum) and select the desired packet (or mouse-over). Captured Wireless Spectrum information is displayed along with any capture Bluetooth packets: To view the AFH Highlighting with Wireless Spectrum Enabled: 1. Take a capture with Wireless Spectrum enabled, or open a capture that was taken with Wireless Spectrum capture enabled. AFH Highlighting is displayed along with Wireless Spectrum information.
Bluetooth Explorer 400 Instant Spectrum View | 141 of 173
Analyzer User Guide 11. Instant Audio The Instant Audio feature provides a visual representation of captured audio traffic that can be played real-time (during recording) or post-capture, looped, or configured to play selected userdefined ranges. As audio is played, a vertical cursor tracks the present position of the audio being played. Various control features are provided, including rewind, looping, pausing and other controls.
Displays the timestamp origin of the Instant Audio pane. Allows for user input of timestamp for jumping. Span Box Displays the time span (zoom level) of the Instant Audio pane. Allows for user input to adjust span.
Analyzer User Guide The select range is highlighted and characterized with a time indication: To play captured audio during a recording: 1. During a recording which includes audio traffic, select the Follow Live button Audio is played as the capture progresses. To see details on a captured audio stream: 1. Place the mouse over the desired location in the Instant Audio pane. Details on the selected audio are displayed in a fly-over: To set Instant Audio options: 1.
Bluetooth Explorer 400 The Options dialog opens: 2. Select the desired device and click OK. To loop audio: 1. Initiate playback by selecting the Play button 2. Select the Loop Playback button . . Audio is looped from the beginning of the Instant Audio cursor, or if a range is selected, loops the selected range.
Analyzer User Guide 12. Summary Pane The Summary pane provides a summary of all baseband traffic recorded, including synchronous, ACL, and link control events. Selected events in the Summary pane will enable the Find arrows located at the top-left of the Summary pane, enabling the user to jump the Overview to the first, next, or previous such selected event. The Summary pane will update real-time as traffic is captured. To access the Summary pane: 1. Select View | Summary from the menu.
Summary Pane | 147 of 173 Bluetooth Explorer 400 The Overview orients to the searched item, highlighting it with a gray line.
Analyzer User Guide 13. Security Pane The Security pane displays encryption-related information. The security pane will update as traffic is recorded, and can be saved with the capture, alleviating the need to re-enter link keys on successive captures. The Security pane also accepts user-entry of link key and PIN codes.
1. Specify each byte of the Link Key in hex, starting with the lowest order byte on the left. In this case DO NOT use ":" as a separator and use either "0x" for every byte, or do not use it at all, as shown below: 0x01 0x02 0x03 0x04 0x05 0x06 0x07 0x08 0x09 0x0A 0x0B 0x0C 0x0D 0x0E 0x0F 0x10 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F 10 To enter a link key in hex (highest order byte on left): 1. Specify the Link Key as a big hex number, with highest order byte on the left.
Analyzer User Guide Background Description Link key and/or PIN code calculated Conflict with PIN code or incorrect link key entered (note the differing PIN codes at left) Link key not entered Various icons indicate pairing and decryption status: Icon Meaning Incomplete pairing Pairing detected Decrypted Pairing detected, decrypted Incomplete pairing, not decrypted 13.
Bluetooth Explorer 400 4. Close the Key Management window.
Analyzer User Guide 14. Instant Piconet Pane The Instant Piconet pane provides an instantaneous, dynamic, and graphical depiction of Bluetooth devices, events, and topologies captured by the analyzer. The Instant Piconet pane updates as traffic is captured, and can also be used on saved captures to step through topology changes. Features are provided to show/hide labels (BD ADDR, LMP name, or user-defined name) and to show/hide broadcast events. Mouse fly-over will present master/device information.
Previous data channel topology change. Next data channel topology change. Timestamp of current view (links to Overview when selected). Show/hide addresses/device labels. Show/hide broadcast events. 14.
Analyzer User Guide Represents an inquiry. The inquirer device is represented with blue outline, like masters, while responding devices are represented with black outline. Represents a paging. The pager device is represented with blue outline, like masters, while the paged device is represented with black outline.
Simple Scatternet 14.2 Display Features To use the flyover: 1. Position the mouse over any device. 2. The flyover indicator appears, advising the user of the device’s name, and master/slave status: To show/hide BD ADDR, LMP Name, or user-provided name: 1. Toggle the ADDR button in the Instant Piconet toolbar.
Analyzer User Guide Each device shown will show/hide the BD ADDR. If an LMP name is available, this will be displayed. If the user has edited the device name in the Devices window, the edited name will be displayed. To follow the topology in real-time, show/hide BD ADDR, LMP Name, or user-provided name: 1. Toggle the ADDR button in the Instant Piconet toolbar. Each device shown will show/hide the BD ADDR. If an LMP name is available, this will be displayed.
The Details pane provides detailed information on the event selected in the Overview, including protocol and profile decoding, baseband information, and various format options. The Details pane also provides a very useful feature allowing the user to re-populate the Overview, by allowing the user to drag selected fields of interest into the Overview to create a new column. To access the Details pane: 1. Select View | Details from the menu.
Analyzer User Guide Show all fields. Some fields not typically needed (such as good CRC values) are hidden by default. Show numeric values in decimal. Show numeric values in hexadecimal. Show numeric values in binary. Show fields’ bit offset. Show fields’ bit length. Display selected field in Overview. Export the Details pane (text or XML).
The Details pane will show all elements of higher level abstracts when these are selected, and as lower-level abstracts are exposed in the Overview and selected, the Details pane will drilldown to match the abstraction level selected (e.g., transaction, request, response, packet, etc.). For example, when selecting the SDP Service Search Attribute Transaction (below), the Details pane will show information on both the underlying request and response. Details Pane | 159 of 173 Bluetooth Explorer 400 15.
Analyzer User Guide When selecting just the SDP Service Search Attribute Request, only this request (and underlying protocols, profiles, and packets) will be provided in the Details pane: This concept holds true as each underlying Overview element is exposed, for example as shown below where a NULL (ACK) baseband packet is selected: 160 of 173 | Details Pane
Group Procedures and Transactions selection, available in the Protocol: drop-down menu, shown below. This feature is enabled by default. With Group Procedures and Transactions selected, transactional grouping is displayed at the highest level, such as shown below, where the ATT READ subsumes a transaction consisting of and ATT READ REQUEST and an ATT READ RESPONSE.
Analyzer User Guide 15.2 Adding Details Fields to an Overview To place a Details field into the Overview: 1. Select the event desired in the Overview. The Details pane repopulates to show details on the event selected. 2. Select the desired field in the Details pane. 3. Select the Show in Overview button in the Details toolbar. or 4. Left-click and drag the desired field from the Details pane and drop in the Overview. The field from the Details pane is now shown in the Overview.
The Raw Data pane provides a low-level data view of items selected in the Overview and includes various format and copy options. The Raw Data pane is linked to the Details pane, as fields selected in the Details pane are highlighted in the Raw Data pane, and therefore it is indirectly linked to the selection in the active Overview. Fields selected in the Details pane are highlighted in the Raw Data pane. The Raw Data pane also includes a search mechanism. To access the Raw Data pane: 1.
Analyzer User Guide The left area of the Raw Data pane is searched. Strings found are highlighted in blue in the left and right areas. 16.3 Formatting the Raw Data Pane To format the Raw Data pane display: 1. Right-click in the left or right areas in the Raw Data pane. 2. Set display options as per the table below: Addresses Sets left-border addressing to hex or decimal. Width Sets horizontal length of data displayed. Group by Groups data in byte, word, long, or quad formats.
The analyzer is designed to detect and display various errors and warnings. Errors of various types are flagged in the Overview and the Details pane. Detection and display of these errors can be disabled as desired. To open the Protocol Verifications tab: 1. Select Tools | Options from the menu. The Options menu appears: 17.1 Enabling and Disabling Protocol Errors 1. Under the Protocol Verifications tab, expand the categories to reveal the desired verification and uncheck the associated box. 2.
Analyzer User Guide Display of errors in the Details pane: Display of Errors in the Overview: Errors are flagged on the lowest level element that contains the error, and up into the higher level abstracts as shown below. Warnings such as RSSI Too Low are also flagged.
The Task pane provides the user with statuses on various actions initiated by the user and also allows the user to cancel tasks in progress. To access the Task pane: 1. Select View | Other Windows | Tasks from the menu. The Task pane appears: Task statuses provided by the Tasks pane include: File Open File Save Search Instant Search File Export File Import Task Pane | 167 of 173 Bluetooth Explorer 400 18.
Analyzer User Guide 19. Software and Support The analyzer application provides a convenient method to access the latest updated software and access technical support from an Internet-connected PC. The application will check automatically for new major updates at a given specified interval (by default at every startup) and will notify new version if any. Only major versions will be notified to users, so for example if the software version changes from 2.0 to 2.1.
19.2 Getting Technical Support Ellisys technical support is available from the Ellisys website and E-mail, each accessible from the BEX400 application. The user can access technical support from the Help menu, which will open the default browser to the Ellisys technical support web page. In the event of a software malfunction or crash, the user can easily and automatically compress pertinent application information to be E-mailed to the Ellisys support team.
Analyzer User Guide Appendix A – Flying Leads Cable The Flying Leads Cable connects the IO Probe connector (located on the analyzer’s back panel) to one or more external HCI or logic implementations. UART, SPI, and WCI-2 traffic will be captured concurrently with through-the-air traffic and will be displayed in the respective Overviews and other views as applicable (e.g., the Instant Timing View).
Appendix A – Flying Leads Cable | 171 of 173 Bluetooth Explorer 400 Pinout for Mating Connector on Flying Leads Cable
Analyzer User Guide Appendix B - Frequently Asked Questions Q. Why is the USB driver is not loading? A.
need to do to have traffic decrypted? A. There are a few points to be considered in order to get the traffic decrypted. Please consult the Ellisys EEN_BT03 - Your First Wide-band Capture Expert Note to learn about conditions to get decryption. Q. Are link keys stored so I don’t have to re-capture a connection in order to see the traffic decrypted? A. Yes, the user is provided the option to save link keys when a capture is closed.
